@nerviq/cli 1.2.0 → 1.2.2

package/src/opencode/techniques.js

@@ -25,6 +25,7 @@ const path = require('path');
 const { EMBEDDED_SECRET_PATTERNS, containsEmbeddedSecret } = require('../secret-patterns');
 const { attachSourceUrls } = require('../source-urls');
 const { buildStackChecks } = require('../stack-checks');
+const { isApiProject, isDatabaseProject, isAuthProject, isMonitoringRelevant } = require('../supplemental-checks');
 
 const DEFAULT_PROJECT_DOC_MAX_BYTES = 32768;
 
@@ -1770,168 +1771,168 @@ const OPENCODE_TECHNIQUES = {
   },
   ocEndpointDocumentation: {
     id: 'OC-T13', name: 'API endpoint documentation present',
-    check: (ctx) => ctx.files.some(f => /openapi|swagger|api\.ya?ml|api\.json/i.test(f)),
+    check: (ctx) => !isApiProject(ctx) ? null : ctx.files.some(f => /openapi|swagger|api\.ya?ml|api\.json/i.test(f)),
     impact: 'medium', rating: 3, category: 'api-design',
     fix: 'Add OpenAPI/Swagger spec for OpenCode to understand the API.',
     template: null, file: () => null, line: () => null,
   },
   ocApiVersioningMentioned: {
     id: 'OC-T14', name: 'API versioning strategy documented',
-    check: (ctx) => { const docs = docsBundle(ctx); if (!docs.trim()) return null; return /api.{0,10}version|\/v\d|versioning/i.test(docs); },
+    check: (ctx) => { if (!isApiProject(ctx)) return null; const docs = docsBundle(ctx); if (!docs.trim()) return null; return /api.{0,10}version|\/v\d|versioning/i.test(docs); },
     impact: 'medium', rating: 3, category: 'api-design',
     fix: 'Document API versioning strategy in AGENTS.md.',
     template: null, file: () => 'AGENTS.md', line: () => null,
   },
   ocErrorHandlingPatterns: {
     id: 'OC-T15', name: 'Error handling patterns documented',
-    check: (ctx) => { const docs = docsBundle(ctx); if (!docs.trim()) return null; return /error.{0,15}handl|exception|try.?catch|Result\s*</i.test(docs); },
+    check: (ctx) => { if (!isApiProject(ctx)) return null; const docs = docsBundle(ctx); if (!docs.trim()) return null; return /error.{0,15}handl|exception|try.?catch|Result\s*</i.test(docs); },
     impact: 'high', rating: 4, category: 'api-design',
     fix: 'Document error handling patterns in AGENTS.md.',
     template: null, file: () => 'AGENTS.md', line: () => null,
   },
   ocRateLimitingAwareness: {
     id: 'OC-T16', name: 'Rate limiting awareness documented',
-    check: (ctx) => { const docs = docsBundle(ctx); if (!docs.trim()) return null; return /rate.?limit|throttl|429/i.test(docs); },
+    check: (ctx) => { if (!isApiProject(ctx)) return null; const docs = docsBundle(ctx); if (!docs.trim()) return null; return /rate.?limit|throttl|429/i.test(docs); },
     impact: 'medium', rating: 3, category: 'api-design',
     fix: 'Document rate limiting in AGENTS.md.',
     template: null, file: () => 'AGENTS.md', line: () => null,
   },
   ocRequestValidation: {
     id: 'OC-T17', name: 'Request validation strategy documented',
-    check: (ctx) => { const docs = docsBundle(ctx); if (!docs.trim()) return null; return /validat|zod|yup|joi\b/i.test(docs); },
+    check: (ctx) => { if (!isApiProject(ctx)) return null; const docs = docsBundle(ctx); if (!docs.trim()) return null; return /validat|zod|yup|joi\b/i.test(docs); },
     impact: 'high', rating: 4, category: 'api-design',
     fix: 'Document request validation library (Zod, Yup) in AGENTS.md.',
     template: null, file: () => 'AGENTS.md', line: () => null,
   },
   ocResponseFormatConsistent: {
     id: 'OC-T18', name: 'Response format consistency documented',
-    check: (ctx) => { const docs = docsBundle(ctx); if (!docs.trim()) return null; return /response.{0,20}format|json.{0,10}response|envelope/i.test(docs); },
+    check: (ctx) => { if (!isApiProject(ctx)) return null; const docs = docsBundle(ctx); if (!docs.trim()) return null; return /response.{0,20}format|json.{0,10}response|envelope/i.test(docs); },
     impact: 'medium', rating: 3, category: 'api-design',
     fix: 'Document standard response format in AGENTS.md.',
     template: null, file: () => 'AGENTS.md', line: () => null,
   },
   ocMigrationStrategyDocumented: {
     id: 'OC-T19', name: 'Database migration strategy documented',
-    check: (ctx) => ctx.files.some(f => /migrations?\//i.test(f)) || /migration|alembic|flyway/i.test(docsBundle(ctx)),
+    check: (ctx) => !isDatabaseProject(ctx) ? null : ctx.files.some(f => /migrations?\//i.test(f)) || /migration|alembic|flyway/i.test(docsBundle(ctx)),
     impact: 'high', rating: 4, category: 'database',
     fix: 'Document migration strategy in AGENTS.md.',
     template: null, file: () => 'AGENTS.md', line: () => null,
   },
   ocQueryOptimizationMentioned: {
     id: 'OC-T20', name: 'Query optimization guidance documented',
-    check: (ctx) => { const docs = docsBundle(ctx); if (!docs.trim()) return null; return /n\+1|query.{0,15}optim|index|eager.{0,10}load/i.test(docs); },
+    check: (ctx) => { if (!isDatabaseProject(ctx)) return null; const docs = docsBundle(ctx); if (!docs.trim()) return null; return /n\+1|query.{0,15}optim|index|eager.{0,10}load/i.test(docs); },
     impact: 'medium', rating: 3, category: 'database',
     fix: 'Add N+1 prevention patterns to AGENTS.md.',
     template: null, file: () => 'AGENTS.md', line: () => null,
   },
   ocConnectionPoolingConfigured: {
     id: 'OC-T21', name: 'Connection pooling documented',
-    check: (ctx) => { const docs = docsBundle(ctx); if (!docs.trim()) return null; return /connection.{0,15}pool|pool.{0,15}size/i.test(docs); },
+    check: (ctx) => { if (!isDatabaseProject(ctx)) return null; const docs = docsBundle(ctx); if (!docs.trim()) return null; return /connection.{0,15}pool|pool.{0,15}size/i.test(docs); },
     impact: 'medium', rating: 3, category: 'database',
     fix: 'Document connection pooling in AGENTS.md.',
     template: null, file: () => 'AGENTS.md', line: () => null,
   },
   ocBackupStrategyDocumented: {
     id: 'OC-T22', name: 'Database backup strategy documented',
-    check: (ctx) => { const docs = docsBundle(ctx) + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /backup|restore|point.?in.?time/i.test(docs); },
+    check: (ctx) => { if (!isDatabaseProject(ctx)) return null; const docs = docsBundle(ctx) + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /backup|restore|point.?in.?time/i.test(docs); },
     impact: 'medium', rating: 3, category: 'database',
     fix: 'Document database backup strategy in README.md.',
     template: null, file: () => 'README.md', line: () => null,
   },
   ocSchemaDocumentation: {
     id: 'OC-T23', name: 'Database schema documentation present',
-    check: (ctx) => ctx.files.some(f => /schema\.(prisma|sql|graphql)|erd|dbml/i.test(f)),
+    check: (ctx) => !isDatabaseProject(ctx) ? null : ctx.files.some(f => /schema\.(prisma|sql|graphql)|erd|dbml/i.test(f)),
     impact: 'medium', rating: 3, category: 'database',
     fix: 'Add schema documentation (schema.prisma, ERD) for OpenCode.',
     template: null, file: () => null, line: () => null,
   },
   ocSeedDataMentioned: {
     id: 'OC-T24', name: 'Seed data strategy documented',
-    check: (ctx) => ctx.files.some(f => /seed\.(ts|js|sql|py)|fixtures\//i.test(f)) || /seed.{0,10}data/i.test(docsBundle(ctx)),
+    check: (ctx) => !isDatabaseProject(ctx) ? null : ctx.files.some(f => /seed\.(ts|js|sql|py)|fixtures\//i.test(f)) || /seed.{0,10}data/i.test(docsBundle(ctx)),
     impact: 'low', rating: 2, category: 'database',
     fix: 'Add seed scripts and document local database setup.',
     template: null, file: () => null, line: () => null,
   },
   ocAuthFlowDocumented: {
     id: 'OC-T25', name: 'Authentication flow documented',
-    check: (ctx) => { const docs = docsBundle(ctx); if (!docs.trim()) return null; return /auth.{0,15}flow|login.{0,15}flow|authenticate/i.test(docs); },
+    check: (ctx) => { if (!isAuthProject(ctx)) return null; const docs = docsBundle(ctx); if (!docs.trim()) return null; return /auth.{0,15}flow|login.{0,15}flow|authenticate/i.test(docs); },
     impact: 'high', rating: 4, category: 'authentication',
     fix: 'Document authentication flow in AGENTS.md for OpenCode.',
     template: null, file: () => 'AGENTS.md', line: () => null,
   },
   ocTokenHandlingGuidance: {
     id: 'OC-T26', name: 'Token handling guidance documented',
-    check: (ctx) => { const docs = docsBundle(ctx); if (!docs.trim()) return null; return /jwt|token.{0,15}refresh|access.{0,10}token|bearer/i.test(docs); },
+    check: (ctx) => { if (!isAuthProject(ctx)) return null; const docs = docsBundle(ctx); if (!docs.trim()) return null; return /jwt|token.{0,15}refresh|access.{0,10}token|bearer/i.test(docs); },
     impact: 'high', rating: 4, category: 'authentication',
     fix: 'Document JWT/token patterns in AGENTS.md.',
     template: null, file: () => 'AGENTS.md', line: () => null,
   },
   ocSessionManagementDocumented: {
     id: 'OC-T27', name: 'Session management documented',
-    check: (ctx) => { const docs = docsBundle(ctx); if (!docs.trim()) return null; return /session.{0,15}manag|cookie|next.?auth/i.test(docs); },
+    check: (ctx) => { if (!isAuthProject(ctx)) return null; const docs = docsBundle(ctx); if (!docs.trim()) return null; return /session.{0,15}manag|cookie|next.?auth/i.test(docs); },
     impact: 'medium', rating: 3, category: 'authentication',
     fix: 'Document session management in AGENTS.md.',
     template: null, file: () => 'AGENTS.md', line: () => null,
   },
   ocRbacPermissionsReferenced: {
     id: 'OC-T28', name: 'RBAC / permissions model referenced',
-    check: (ctx) => { const docs = docsBundle(ctx); if (!docs.trim()) return null; return /rbac|role.?based|permission|authorization/i.test(docs); },
+    check: (ctx) => { if (!isAuthProject(ctx)) return null; const docs = docsBundle(ctx); if (!docs.trim()) return null; return /rbac|role.?based|permission|authorization/i.test(docs); },
     impact: 'high', rating: 4, category: 'authentication',
     fix: 'Document RBAC/permissions model in AGENTS.md.',
     template: null, file: () => 'AGENTS.md', line: () => null,
   },
   ocOauthSsoMentioned: {
     id: 'OC-T29', name: 'OAuth/SSO configuration documented',
-    check: (ctx) => { const docs = docsBundle(ctx) + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /oauth|sso|saml|oidc/i.test(docs); },
+    check: (ctx) => { if (!isAuthProject(ctx)) return null; const docs = docsBundle(ctx) + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /oauth|sso|saml|oidc/i.test(docs); },
     impact: 'medium', rating: 3, category: 'authentication',
     fix: 'Document OAuth/SSO provider in README.md.',
     template: null, file: () => 'README.md', line: () => null,
   },
   ocCredentialRotationDocumented: {
     id: 'OC-T30', name: 'Credential rotation policy documented',
-    check: (ctx) => { const docs = docsBundle(ctx); if (!docs.trim()) return null; return /rotat.{0,10}secret|rotat.{0,10}key|credential.{0,10}rotat/i.test(docs); },
+    check: (ctx) => { if (!isAuthProject(ctx)) return null; const docs = docsBundle(ctx); if (!docs.trim()) return null; return /rotat.{0,10}secret|rotat.{0,10}key|credential.{0,10}rotat/i.test(docs); },
     impact: 'medium', rating: 3, category: 'authentication',
     fix: 'Document credential rotation in AGENTS.md.',
     template: null, file: () => 'AGENTS.md', line: () => null,
   },
   ocLoggingConfigured: {
     id: 'OC-T31', name: 'Logging framework configured',
-    check: (ctx) => /winston|pino|bunyan|morgan|loguru/i.test(ctx.fileContent('package.json') || '') || ctx.files.some(f => /log(ger|ging)\.config/i.test(f)),
+    check: (ctx) => !isMonitoringRelevant(ctx) ? null : /winston|pino|bunyan|morgan|loguru/i.test(ctx.fileContent('package.json') || '') || ctx.files.some(f => /log(ger|ging)\.config/i.test(f)),
     impact: 'high', rating: 4, category: 'monitoring',
     fix: 'Add structured logging and document log levels in AGENTS.md.',
     template: null, file: () => 'package.json', line: () => null,
   },
   ocErrorTrackingSetup: {
     id: 'OC-T32', name: 'Error tracking service configured',
-    check: (ctx) => /sentry|bugsnag|rollbar/i.test(ctx.fileContent('package.json') || ''),
+    check: (ctx) => !isMonitoringRelevant(ctx) ? null : /sentry|bugsnag|rollbar/i.test(ctx.fileContent('package.json') || ''),
     impact: 'high', rating: 4, category: 'monitoring',
     fix: 'Set up error tracking (Sentry) for production monitoring.',
     template: null, file: () => null, line: () => null,
   },
   ocApmMetricsMentioned: {
     id: 'OC-T33', name: 'APM / metrics platform documented',
-    check: (ctx) => { const docs = docsBundle(ctx) + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /datadog|newrelic|prometheus|grafana|opentelemetry|apm/i.test(docs); },
+    check: (ctx) => { if (!isMonitoringRelevant(ctx)) return null; const docs = docsBundle(ctx) + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /datadog|newrelic|prometheus|grafana|opentelemetry|apm/i.test(docs); },
     impact: 'medium', rating: 3, category: 'monitoring',
     fix: 'Document APM platform in README.md.',
     template: null, file: () => 'README.md', line: () => null,
   },
   ocHealthCheckEndpoint: {
     id: 'OC-T34', name: 'Health check endpoint documented',
-    check: (ctx) => { const docs = docsBundle(ctx) + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /health.?check|\/health|\/ping|\/status/i.test(docs); },
+    check: (ctx) => { if (!isMonitoringRelevant(ctx)) return null; const docs = docsBundle(ctx) + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /health.?check|\/health|\/ping|\/status/i.test(docs); },
     impact: 'medium', rating: 3, category: 'monitoring',
     fix: 'Document health check endpoint in README.md.',
     template: null, file: () => 'README.md', line: () => null,
   },
   ocAlertingReferenced: {
     id: 'OC-T35', name: 'Alerting strategy referenced',
-    check: (ctx) => { const docs = docsBundle(ctx) + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /alert|pagerduty|opsgenie|oncall|incident/i.test(docs); },
+    check: (ctx) => { if (!isMonitoringRelevant(ctx)) return null; const docs = docsBundle(ctx) + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /alert|pagerduty|opsgenie|oncall|incident/i.test(docs); },
     impact: 'medium', rating: 3, category: 'monitoring',
     fix: 'Document alerting strategy in README.md.',
     template: null, file: () => 'README.md', line: () => null,
   },
   ocLogRotationMentioned: {
     id: 'OC-T36', name: 'Log rotation / retention documented',
-    check: (ctx) => { const docs = docsBundle(ctx) + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /log.{0,15}rotat|log.{0,15}retent/i.test(docs); },
+    check: (ctx) => { if (!isMonitoringRelevant(ctx)) return null; const docs = docsBundle(ctx) + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /log.{0,15}rotat|log.{0,15}retent/i.test(docs); },
     impact: 'low', rating: 2, category: 'monitoring',
     fix: 'Document log rotation policy in README.md.',
     template: null, file: () => 'README.md', line: () => null,