@nerviq/cli 1.0.0 → 1.2.0

package/src/copilot/domain-packs.js

@@ -8,7 +8,9 @@
  * - copilot-setup-steps.yml (Copilot-unique)
  */
 
-const COPILOT_DOMAIN_PACKS = [
+const { buildAdditionalDomainPacks, detectAdditionalDomainPacks } = require('../domain-pack-expansion');
+
+const BASE_COPILOT_DOMAIN_PACKS = [
   {
     key: 'baseline-general',
     label: 'Baseline General',
@@ -171,6 +173,13 @@ const COPILOT_DOMAIN_PACKS = [
   },
 ];
 
+const COPILOT_DOMAIN_PACKS = [
+  ...BASE_COPILOT_DOMAIN_PACKS,
+  ...buildAdditionalDomainPacks('copilot', {
+    existingKeys: new Set(BASE_COPILOT_DOMAIN_PACKS.map((pack) => pack.key)),
+  }),
+];
+
 function uniqueByKey(items) {
   const seen = new Set();
   const result = [];
@@ -332,6 +341,19 @@ function detectCopilotDomainPacks(ctx, stacks = [], assets = {}) {
     addMatch('security-focused', ['Detected security-focused repo signals.', ctx.fileContent('SECURITY.md') ? 'SECURITY.md present.' : null]);
   }
 
+  detectAdditionalDomainPacks({
+    ctx,
+    pkg,
+    deps,
+    stackKeys,
+    addMatch,
+    hasBackend,
+    hasFrontend,
+    hasInfra,
+    hasCi,
+    isEnterpriseGoverned,
+  });
+
   if (matches.length === 0) {
     addMatch('baseline-general', [
       'No stronger platform-specific domain dominated, so a safe general Copilot baseline is the best starting point.',

package/src/copilot/mcp-packs.js

@@ -385,6 +385,260 @@ const COPILOT_MCP_PACKS = [
     excludeTools: [],
     cloudAgentCompatible: true,
   },
+  // ── 23 new packs ─────────────────────────────────────────────────────────
+  {
+    key: 'supabase-mcp', label: 'Supabase',
+    description: 'Database, auth, and storage for Supabase.',
+    useWhen: 'Repos using Supabase.',
+    adoption: 'Requires: SUPABASE_URL, SUPABASE_SERVICE_ROLE_KEY.',
+    trustLevel: 'medium', transport: 'stdio', requiredAuth: ['SUPABASE_URL', 'SUPABASE_SERVICE_ROLE_KEY'],
+    serverName: 'supabase',
+    jsonProjection: { command: 'npx', args: ['-y', '@supabase/mcp-server-supabase@latest'], env: { SUPABASE_URL: '${env:SUPABASE_URL}', SUPABASE_SERVICE_ROLE_KEY: '${env:SUPABASE_SERVICE_ROLE_KEY}' } },
+    excludeTools: ['delete_project', 'drop_table'],
+    cloudAgentCompatible: true,
+  },
+  {
+    key: 'prisma-mcp', label: 'Prisma ORM',
+    description: 'Schema inspection and migrations via Prisma.',
+    useWhen: 'Repos with a Prisma schema.',
+    adoption: 'Requires: DATABASE_URL.',
+    trustLevel: 'medium', transport: 'stdio', requiredAuth: ['DATABASE_URL'],
+    serverName: 'prisma',
+    jsonProjection: { command: 'npx', args: ['-y', 'prisma-mcp-server@latest'], env: { DATABASE_URL: '${env:DATABASE_URL}' } },
+    excludeTools: ['drop_database'],
+    cloudAgentCompatible: true,
+  },
+  {
+    key: 'vercel-mcp', label: 'Vercel',
+    description: 'Deployment management via Vercel.',
+    useWhen: 'Repos deployed on Vercel.',
+    adoption: 'Requires: VERCEL_TOKEN.',
+    trustLevel: 'medium', transport: 'stdio', requiredAuth: ['VERCEL_TOKEN'],
+    serverName: 'vercel',
+    jsonProjection: { command: 'npx', args: ['-y', '@vercel/mcp-server@latest'], env: { VERCEL_TOKEN: '${env:VERCEL_TOKEN}' } },
+    excludeTools: ['delete_project', 'delete_deployment'],
+    cloudAgentCompatible: true,
+  },
+  {
+    key: 'cloudflare-mcp', label: 'Cloudflare',
+    description: 'Workers, KV, R2, and D1 management.',
+    useWhen: 'Repos using Cloudflare edge.',
+    adoption: 'Requires: CLOUDFLARE_API_TOKEN.',
+    trustLevel: 'medium', transport: 'stdio', requiredAuth: ['CLOUDFLARE_API_TOKEN'],
+    serverName: 'cloudflare',
+    jsonProjection: { command: 'npx', args: ['-y', '@cloudflare/mcp-server-cloudflare@latest'], env: { CLOUDFLARE_API_TOKEN: '${env:CLOUDFLARE_API_TOKEN}' } },
+    excludeTools: ['delete_worker', 'purge_cache'],
+    cloudAgentCompatible: true,
+  },
+  {
+    key: 'aws-mcp', label: 'AWS',
+    description: 'S3, Lambda, DynamoDB access.',
+    useWhen: 'Repos using AWS.',
+    adoption: 'Requires: AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_REGION.',
+    trustLevel: 'low', transport: 'stdio', requiredAuth: ['AWS_ACCESS_KEY_ID', 'AWS_SECRET_ACCESS_KEY', 'AWS_REGION'],
+    serverName: 'aws',
+    jsonProjection: { command: 'npx', args: ['-y', '@aws-samples/mcp-server-aws@latest'], env: { AWS_ACCESS_KEY_ID: '${env:AWS_ACCESS_KEY_ID}', AWS_SECRET_ACCESS_KEY: '${env:AWS_SECRET_ACCESS_KEY}', AWS_REGION: '${env:AWS_REGION}' } },
+    excludeTools: ['delete_stack', 'terminate_instances', 'delete_bucket'],
+    cloudAgentCompatible: true,
+  },
+  {
+    key: 'redis-mcp', label: 'Redis',
+    description: 'Cache and session management.',
+    useWhen: 'Repos using Redis.',
+    adoption: 'Requires: REDIS_URL.',
+    trustLevel: 'medium', transport: 'stdio', requiredAuth: ['REDIS_URL'],
+    serverName: 'redis',
+    jsonProjection: { command: 'npx', args: ['-y', 'redis-mcp-server@latest'], env: { REDIS_URL: '${env:REDIS_URL}' } },
+    excludeTools: ['flushall', 'flushdb'],
+    cloudAgentCompatible: true,
+  },
+  {
+    key: 'mongodb-mcp', label: 'MongoDB',
+    description: 'Document database access.',
+    useWhen: 'Repos using MongoDB.',
+    adoption: 'Requires: MONGODB_URI.',
+    trustLevel: 'medium', transport: 'stdio', requiredAuth: ['MONGODB_URI'],
+    serverName: 'mongodb',
+    jsonProjection: { command: 'npx', args: ['-y', '@mongodb-js/mongodb-mcp-server@latest'], env: { MONGODB_URI: '${env:MONGODB_URI}' } },
+    excludeTools: ['drop_collection', 'drop_database'],
+    cloudAgentCompatible: true,
+  },
+  {
+    key: 'twilio-mcp', label: 'Twilio',
+    description: 'SMS, voice, and messaging.',
+    useWhen: 'Repos using Twilio.',
+    adoption: 'Requires: TWILIO_ACCOUNT_SID, TWILIO_AUTH_TOKEN.',
+    trustLevel: 'low', transport: 'stdio', requiredAuth: ['TWILIO_ACCOUNT_SID', 'TWILIO_AUTH_TOKEN'],
+    serverName: 'twilio',
+    jsonProjection: { command: 'npx', args: ['-y', 'twilio-mcp-server@latest'], env: { TWILIO_ACCOUNT_SID: '${env:TWILIO_ACCOUNT_SID}', TWILIO_AUTH_TOKEN: '${env:TWILIO_AUTH_TOKEN}' } },
+    excludeTools: ['delete_message'],
+    cloudAgentCompatible: true,
+  },
+  {
+    key: 'sendgrid-mcp', label: 'SendGrid',
+    description: 'Transactional email delivery.',
+    useWhen: 'Repos using SendGrid.',
+    adoption: 'Requires: SENDGRID_API_KEY.',
+    trustLevel: 'medium', transport: 'stdio', requiredAuth: ['SENDGRID_API_KEY'],
+    serverName: 'sendgrid',
+    jsonProjection: { command: 'npx', args: ['-y', 'sendgrid-mcp-server@latest'], env: { SENDGRID_API_KEY: '${env:SENDGRID_API_KEY}' } },
+    excludeTools: [],
+    cloudAgentCompatible: true,
+  },
+  {
+    key: 'algolia-mcp', label: 'Algolia Search',
+    description: 'Search indexing via Algolia.',
+    useWhen: 'Repos using Algolia.',
+    adoption: 'Requires: ALGOLIA_APP_ID, ALGOLIA_API_KEY.',
+    trustLevel: 'medium', transport: 'stdio', requiredAuth: ['ALGOLIA_APP_ID', 'ALGOLIA_API_KEY'],
+    serverName: 'algolia',
+    jsonProjection: { command: 'npx', args: ['-y', 'algolia-mcp-server@latest'], env: { ALGOLIA_APP_ID: '${env:ALGOLIA_APP_ID}', ALGOLIA_API_KEY: '${env:ALGOLIA_API_KEY}' } },
+    excludeTools: ['delete_index'],
+    cloudAgentCompatible: true,
+  },
+  {
+    key: 'planetscale-mcp', label: 'PlanetScale',
+    description: 'Serverless MySQL via PlanetScale.',
+    useWhen: 'Repos on PlanetScale.',
+    adoption: 'Requires: PLANETSCALE_TOKEN.',
+    trustLevel: 'medium', transport: 'stdio', requiredAuth: ['PLANETSCALE_TOKEN'],
+    serverName: 'planetscale',
+    jsonProjection: { command: 'npx', args: ['-y', 'planetscale-mcp-server@latest'], env: { PLANETSCALE_TOKEN: '${env:PLANETSCALE_TOKEN}' } },
+    excludeTools: ['delete_database'],
+    cloudAgentCompatible: true,
+  },
+  {
+    key: 'neon-mcp', label: 'Neon Serverless Postgres',
+    description: 'Serverless Postgres via Neon.',
+    useWhen: 'Repos using Neon.',
+    adoption: 'Requires: NEON_API_KEY.',
+    trustLevel: 'medium', transport: 'stdio', requiredAuth: ['NEON_API_KEY'],
+    serverName: 'neon',
+    jsonProjection: { command: 'npx', args: ['-y', '@neondatabase/mcp-server-neon@latest'], env: { NEON_API_KEY: '${env:NEON_API_KEY}' } },
+    excludeTools: ['delete_project'],
+    cloudAgentCompatible: true,
+  },
+  {
+    key: 'turso-mcp', label: 'Turso Edge SQLite',
+    description: 'Edge SQLite via Turso.',
+    useWhen: 'Repos using Turso.',
+    adoption: 'Requires: TURSO_DATABASE_URL, TURSO_AUTH_TOKEN.',
+    trustLevel: 'medium', transport: 'stdio', requiredAuth: ['TURSO_DATABASE_URL', 'TURSO_AUTH_TOKEN'],
+    serverName: 'turso',
+    jsonProjection: { command: 'npx', args: ['-y', 'turso-mcp-server@latest'], env: { TURSO_DATABASE_URL: '${env:TURSO_DATABASE_URL}', TURSO_AUTH_TOKEN: '${env:TURSO_AUTH_TOKEN}' } },
+    excludeTools: ['destroy_database'],
+    cloudAgentCompatible: true,
+  },
+  {
+    key: 'upstash-mcp', label: 'Upstash Redis+Kafka',
+    description: 'Serverless Redis and Kafka.',
+    useWhen: 'Repos using Upstash.',
+    adoption: 'Requires: UPSTASH_REDIS_REST_URL, UPSTASH_REDIS_REST_TOKEN.',
+    trustLevel: 'medium', transport: 'stdio', requiredAuth: ['UPSTASH_REDIS_REST_URL', 'UPSTASH_REDIS_REST_TOKEN'],
+    serverName: 'upstash',
+    jsonProjection: { command: 'npx', args: ['-y', '@upstash/mcp-server@latest'], env: { UPSTASH_REDIS_REST_URL: '${env:UPSTASH_REDIS_REST_URL}', UPSTASH_REDIS_REST_TOKEN: '${env:UPSTASH_REDIS_REST_TOKEN}' } },
+    excludeTools: [],
+    cloudAgentCompatible: true,
+  },
+  {
+    key: 'convex-mcp', label: 'Convex',
+    description: 'Reactive backend via Convex.',
+    useWhen: 'Repos using Convex.',
+    adoption: 'Requires: CONVEX_DEPLOYMENT.',
+    trustLevel: 'medium', transport: 'stdio', requiredAuth: ['CONVEX_DEPLOYMENT'],
+    serverName: 'convex',
+    jsonProjection: { command: 'npx', args: ['-y', '@convex-dev/mcp-server@latest'], env: { CONVEX_DEPLOYMENT: '${env:CONVEX_DEPLOYMENT}' } },
+    excludeTools: ['delete_deployment'],
+    cloudAgentCompatible: true,
+  },
+  {
+    key: 'clerk-mcp', label: 'Clerk Authentication',
+    description: 'User auth via Clerk.',
+    useWhen: 'Repos using Clerk.',
+    adoption: 'Requires: CLERK_SECRET_KEY.',
+    trustLevel: 'medium', transport: 'stdio', requiredAuth: ['CLERK_SECRET_KEY'],
+    serverName: 'clerk',
+    jsonProjection: { command: 'npx', args: ['-y', '@clerk/mcp-server@latest'], env: { CLERK_SECRET_KEY: '${env:CLERK_SECRET_KEY}' } },
+    excludeTools: ['delete_user'],
+    cloudAgentCompatible: true,
+  },
+  {
+    key: 'resend-mcp', label: 'Resend Email',
+    description: 'Transactional email via Resend.',
+    useWhen: 'Repos using Resend.',
+    adoption: 'Requires: RESEND_API_KEY.',
+    trustLevel: 'medium', transport: 'stdio', requiredAuth: ['RESEND_API_KEY'],
+    serverName: 'resend',
+    jsonProjection: { command: 'npx', args: ['-y', 'resend-mcp-server@latest'], env: { RESEND_API_KEY: '${env:RESEND_API_KEY}' } },
+    excludeTools: [],
+    cloudAgentCompatible: true,
+  },
+  {
+    key: 'temporal-mcp', label: 'Temporal Workflow',
+    description: 'Workflow orchestration via Temporal.',
+    useWhen: 'Repos using Temporal.',
+    adoption: 'Requires: TEMPORAL_ADDRESS.',
+    trustLevel: 'medium', transport: 'stdio', requiredAuth: ['TEMPORAL_ADDRESS'],
+    serverName: 'temporal',
+    jsonProjection: { command: 'npx', args: ['-y', 'temporal-mcp-server@latest'], env: { TEMPORAL_ADDRESS: '${env:TEMPORAL_ADDRESS}' } },
+    excludeTools: ['terminate_workflow'],
+    cloudAgentCompatible: true,
+  },
+  {
+    key: 'launchdarkly-mcp', label: 'LaunchDarkly',
+    description: 'Feature flags via LaunchDarkly.',
+    useWhen: 'Repos using LaunchDarkly.',
+    adoption: 'Requires: LAUNCHDARKLY_ACCESS_TOKEN.',
+    trustLevel: 'medium', transport: 'stdio', requiredAuth: ['LAUNCHDARKLY_ACCESS_TOKEN'],
+    serverName: 'launchdarkly',
+    jsonProjection: { command: 'npx', args: ['-y', 'launchdarkly-mcp-server@latest'], env: { LAUNCHDARKLY_ACCESS_TOKEN: '${env:LAUNCHDARKLY_ACCESS_TOKEN}' } },
+    excludeTools: ['delete_flag'],
+    cloudAgentCompatible: true,
+  },
+  {
+    key: 'datadog-mcp', label: 'Datadog',
+    description: 'Monitoring and APM via Datadog.',
+    useWhen: 'Repos using Datadog.',
+    adoption: 'Requires: DATADOG_API_KEY, DATADOG_APP_KEY.',
+    trustLevel: 'medium', transport: 'stdio', requiredAuth: ['DATADOG_API_KEY', 'DATADOG_APP_KEY'],
+    serverName: 'datadog',
+    jsonProjection: { command: 'npx', args: ['-y', '@datadog/mcp-server@latest'], env: { DATADOG_API_KEY: '${env:DATADOG_API_KEY}', DATADOG_APP_KEY: '${env:DATADOG_APP_KEY}' } },
+    excludeTools: ['delete_monitor'],
+    cloudAgentCompatible: true,
+  },
+  {
+    key: 'grafana-mcp', label: 'Grafana',
+    description: 'Dashboards via Grafana.',
+    useWhen: 'Repos using Grafana.',
+    adoption: 'Requires: GRAFANA_URL, GRAFANA_API_KEY.',
+    trustLevel: 'medium', transport: 'stdio', requiredAuth: ['GRAFANA_URL', 'GRAFANA_API_KEY'],
+    serverName: 'grafana',
+    jsonProjection: { command: 'npx', args: ['-y', 'grafana-mcp-server@latest'], env: { GRAFANA_URL: '${env:GRAFANA_URL}', GRAFANA_API_KEY: '${env:GRAFANA_API_KEY}' } },
+    excludeTools: ['delete_dashboard'],
+    cloudAgentCompatible: true,
+  },
+  {
+    key: 'circleci-mcp', label: 'CircleCI',
+    description: 'CI/CD via CircleCI.',
+    useWhen: 'Repos using CircleCI.',
+    adoption: 'Requires: CIRCLECI_TOKEN.',
+    trustLevel: 'medium', transport: 'stdio', requiredAuth: ['CIRCLECI_TOKEN'],
+    serverName: 'circleci',
+    jsonProjection: { command: 'npx', args: ['-y', 'circleci-mcp-server@latest'], env: { CIRCLECI_TOKEN: '${env:CIRCLECI_TOKEN}' } },
+    excludeTools: ['cancel_pipeline'],
+    cloudAgentCompatible: true,
+  },
+  {
+    key: 'anthropic-mcp', label: 'Anthropic Claude API',
+    description: 'Claude API for AI-powered apps.',
+    useWhen: 'Repos building on Claude API.',
+    adoption: 'Requires: ANTHROPIC_API_KEY.',
+    trustLevel: 'high', transport: 'stdio', requiredAuth: ['ANTHROPIC_API_KEY'],
+    serverName: 'anthropic',
+    jsonProjection: { command: 'npx', args: ['-y', '@anthropic-ai/mcp-server@latest'], env: { ANTHROPIC_API_KEY: '${env:ANTHROPIC_API_KEY}' } },
+    excludeTools: [],
+    cloudAgentCompatible: true,
+  },
 ];
 
 // --- Helpers ---