@nerviq/cli 1.17.0 → 1.17.2

package/README.md

@@ -223,7 +223,7 @@ All successful operational responses are wrapped in a JSON envelope:
 {
   "data": {},
   "meta": {
-    "version": "1.17.0",
+    "version": "1.17.2",
     "timestamp": "2026-04-12T12:00:00.000Z"
   }
 }

package/package.json

@@ -1,60 +1,60 @@
-{
-  "name": "@nerviq/cli",
-  "version": "1.17.0",
-  "description": "The intelligent nervous system for AI coding agents — 2,441 checks (8 platforms × ~300 governance rules), 10 languages, 62 domain packs. Audit, align, and amplify.",
-  "main": "src/index.js",
-  "bin": {
-    "nerviq": "bin/cli.js",
-    "@nerviq/cli": "bin/cli.js",
-    "nerviq-mcp": "src/mcp-server.js"
-  },
-  "files": [
-    "bin",
-    "src",
-    "README.md"
-  ],
-  "scripts": {
-    "start": "node bin/cli.js",
-    "build": "npm pack --dry-run",
-    "test": "node test/run.js",
-    "verify:release-metadata": "node tools/validate-release-metadata.js",
-    "test:jest": "jest",
-    "test:coverage": "jest --coverage",
-    "test:all": "npm test && npx jest && node test/check-matrix.js && node test/codex-check-matrix.js && node test/gemini-check-matrix.js && node test/copilot-check-matrix.js && node test/cursor-check-matrix.js && node test/windsurf-check-matrix.js && node test/aider-check-matrix.js && node test/opencode-check-matrix.js && node test/golden-matrix.js && node test/codex-golden-matrix.js && node test/gemini-golden-matrix.js && node test/copilot-golden-matrix.js && node test/cursor-golden-matrix.js && node test/windsurf-golden-matrix.js && node test/aider-golden-matrix.js && node test/opencode-golden-matrix.js",
-    "benchmark:perf": "node tools/benchmark.js",
-    "catalog": "node -e \"const {generateCatalog}=require('./src/catalog');console.log(JSON.stringify(generateCatalog(),null,2))\""
-  },
-  "keywords": [
-    "nerviq",
-    "ai-agents",
-    "agent-governance",
-    "agent-config",
-    "harmony",
-    "synergy",
-    "audit",
-    "claude",
-    "codex",
-    "gemini",
-    "copilot",
-    "cursor",
-    "windsurf",
-    "aider",
-    "developer-tools",
-    "cli",
-    "mcp",
-    "multi-agent"
-  ],
-  "author": "Nerviq <hello@nerviq.net>",
-  "license": "AGPL-3.0",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/nerviq/nerviq.git"
-  },
-  "homepage": "https://nerviq.net",
-  "engines": {
-    "node": ">=18.0.0"
-  },
-  "devDependencies": {
-    "jest": "^30.3.0"
-  }
-}
+{
+  "name": "@nerviq/cli",
+  "version": "1.17.2",
+  "description": "The intelligent nervous system for AI coding agents — 2,441 checks (8 platforms × ~300 governance rules), 10 languages, 62 domain packs. Audit, align, and amplify.",
+  "main": "src/index.js",
+  "bin": {
+    "nerviq": "bin/cli.js",
+    "@nerviq/cli": "bin/cli.js",
+    "nerviq-mcp": "src/mcp-server.js"
+  },
+  "files": [
+    "bin",
+    "src",
+    "README.md"
+  ],
+  "scripts": {
+    "start": "node bin/cli.js",
+    "build": "npm pack --dry-run",
+    "test": "node test/run.js",
+    "verify:release-metadata": "node tools/validate-release-metadata.js",
+    "test:jest": "jest",
+    "test:coverage": "jest --coverage",
+    "test:all": "npm test && npx jest && node test/check-matrix.js && node test/codex-check-matrix.js && node test/gemini-check-matrix.js && node test/copilot-check-matrix.js && node test/cursor-check-matrix.js && node test/windsurf-check-matrix.js && node test/aider-check-matrix.js && node test/opencode-check-matrix.js && node test/golden-matrix.js && node test/codex-golden-matrix.js && node test/gemini-golden-matrix.js && node test/copilot-golden-matrix.js && node test/cursor-golden-matrix.js && node test/windsurf-golden-matrix.js && node test/aider-golden-matrix.js && node test/opencode-golden-matrix.js",
+    "benchmark:perf": "node tools/benchmark.js",
+    "catalog": "node -e \"const {generateCatalog}=require('./src/catalog');console.log(JSON.stringify(generateCatalog(),null,2))\""
+  },
+  "keywords": [
+    "nerviq",
+    "ai-agents",
+    "agent-governance",
+    "agent-config",
+    "harmony",
+    "synergy",
+    "audit",
+    "claude",
+    "codex",
+    "gemini",
+    "copilot",
+    "cursor",
+    "windsurf",
+    "aider",
+    "developer-tools",
+    "cli",
+    "mcp",
+    "multi-agent"
+  ],
+  "author": "Nerviq <hello@nerviq.net>",
+  "license": "AGPL-3.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/nerviq/nerviq.git"
+  },
+  "homepage": "https://nerviq.net",
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "devDependencies": {
+    "jest": "^30.3.0"
+  }
+}

package/src/codex/context.js

@@ -62,6 +62,8 @@ class CodexProjectContext extends ProjectContext {
 
   agentsMdPath() {
     if (this.fileContent('AGENTS.md')) return 'AGENTS.md';
+    // .codex/AGENTS.md is an emerging pattern (e.g., jessfraz/dotfiles)
+    if (this.fileContent('.codex/AGENTS.md')) return '.codex/AGENTS.md';
     const fallbackNames = this.projectDocFallbackFilenames();
     for (const fileName of fallbackNames) {
       if (this.fileContent(fileName)) return fileName;

package/src/codex/techniques.js

@@ -3113,6 +3113,11 @@ const CODEX_TECHNIQUES = {
         'Makefile', 'CMakeLists.txt', 'Package.swift', 'pubspec.yaml',
       ];
       const hasManifest = manifestFiles.some(f => ctx.files.includes(f));
+      // Dotfiles/config-only repos: they don't ship code, so pack recommendations
+      // aren't meaningful — N/A is the correct answer.
+      const dotfilesSignals = ['.zshrc', '.bashrc', '.vimrc', '.tmux.conf', '.gitconfig', 'install.sh', 'bootstrap.sh'];
+      const looksLikeDotfiles = dotfilesSignals.filter(f => ctx.files.includes(f)).length >= 2;
+      if (looksLikeDotfiles) return null;
       // If no signals at all, N/A rather than fail
       if (!agents && !config && !hasManifest) return null;
       // At least 2 signal sources for grounded recommendation
@@ -3574,8 +3579,27 @@ const CODEX_TECHNIQUES = {
     check: (ctx) => {
       const hasPy = ctx.files.some(f => /pyproject\.toml$|requirements\.txt$|setup\.py$|manage\.py$/.test(f));
       if (!hasPy) return null;
-      // Path-separator agnostic: match both forward and back slashes (Windows compat)
-      return ctx.files.some(f => /(^|[/\\])src[/\\].*[/\\]__init__\.py$|^[^/\\]+[/\\]__init__\.py$/.test(f));
+      const fs = require('fs');
+      const path = require('path');
+      // ctx.files only lists root — probe common package layouts directly
+      try {
+        // src/ layout: look for any src/*/__init__.py
+        const srcDir = path.join(ctx.dir, 'src');
+        if (fs.existsSync(srcDir) && fs.statSync(srcDir).isDirectory()) {
+          const entries = fs.readdirSync(srcDir, { withFileTypes: true });
+          for (const e of entries) {
+            if (e.isDirectory() && fs.existsSync(path.join(srcDir, e.name, '__init__.py'))) return true;
+          }
+        }
+        // Flat layout: <package>/__init__.py at root
+        const rootEntries = fs.readdirSync(ctx.dir, { withFileTypes: true });
+        for (const e of rootEntries) {
+          if (e.isDirectory() && !e.name.startsWith('.') && e.name !== 'tests' && e.name !== 'docs') {
+            if (fs.existsSync(path.join(ctx.dir, e.name, '__init__.py'))) return true;
+          }
+        }
+      } catch { /* fall through */ }
+      return false;
     },
     impact: 'medium',
     category: 'python',

package/src/cursor/techniques.js

@@ -1331,12 +1331,32 @@ const CURSOR_TECHNIQUES = {
     check: (ctx) => {
       const docs = docsBundle(ctx);
       if (!docs.trim()) return null;
-      return /bugbot|bug.?bot|automated.*pr.*review/i.test(docs);
+      // BugBot is an optional Cursor enterprise feature requiring separate installation.
+      // Return N/A unless there is actual evidence the repo uses or intends to use BugBot.
+      const files = new Set(ctx.files || []);
+      const hasBugbotConfigFile = ['bugbot.yml', 'bugbot.yaml', '.bugbot.yml', '.bugbot.yaml'].some(f => files.has(f));
+      let hasBugbotWorkflow = false;
+      try {
+        const fs = require('fs');
+        const path = require('path');
+        const wfDir = path.join(ctx.dir, '.github', 'workflows');
+        if (fs.existsSync(wfDir)) {
+          const wfFiles = fs.readdirSync(wfDir).filter(f => /\.ya?ml$/i.test(f));
+          for (const f of wfFiles) {
+            const content = fs.readFileSync(path.join(wfDir, f), 'utf8');
+            if (/bugbot|bug.?bot/i.test(content)) { hasBugbotWorkflow = true; break; }
+          }
+        }
+      } catch { /* no workflows dir */ }
+      const mentionedInDocs = /bugbot|bug.?bot|automated.*pr.*review/i.test(docs);
+      // N/A when no signal at all that this repo uses/wants BugBot
+      if (!hasBugbotConfigFile && !hasBugbotWorkflow && !mentionedInDocs) return null;
+      return hasBugbotConfigFile || hasBugbotWorkflow || mentionedInDocs;
     },
-    impact: 'medium',
+    impact: 'low',
     rating: 3,
     category: 'bugbot',
-    fix: 'Enable BugBot for automated PR code review on critical repos.',
+    fix: 'If you use BugBot for automated PR code review, document it in your rules or add the BugBot workflow. Otherwise ignore this check.',
     template: null,
     file: () => '.cursor/rules/',
     line: () => null,