@nerviq/cli 1.2.0 → 1.2.2

package/src/windsurf/techniques.js

@@ -30,6 +30,7 @@ const { WindsurfProjectContext } = require('./context');
 const { EMBEDDED_SECRET_PATTERNS, containsEmbeddedSecret } = require('../secret-patterns');
 const { attachSourceUrls } = require('../source-urls');
 const { buildStackChecks } = require('../stack-checks');
+const { isApiProject, isDatabaseProject, isAuthProject, isMonitoringRelevant } = require('../supplemental-checks');
 const { tryParseJson, validateMcpEnvVars } = require('./config-parser');
 
 // ─── Shared helpers ─────────────────────────────────────────────────────────
@@ -1917,168 +1918,168 @@ const WINDSURF_TECHNIQUES = {
   },
   wsEndpointDocumentation: {
     id: 'WS-T13', name: 'API endpoint documentation present',
-    check: (ctx) => ctx.files.some(f => /openapi|swagger|api\.ya?ml|api\.json/i.test(f)),
+    check: (ctx) => !isApiProject(ctx) ? null : ctx.files.some(f => /openapi|swagger|api\.ya?ml|api\.json/i.test(f)),
     impact: 'medium', rating: 3, category: 'api-design',
     fix: 'Add an OpenAPI/Swagger spec so Cascade understands the API surface.',
     template: null, file: () => null, line: () => null,
   },
   wsApiVersioningMentioned: {
     id: 'WS-T14', name: 'API versioning strategy documented',
-    check: (ctx) => { const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /api.{0,10}version|\/v\d|versioning/i.test(docs); },
+    check: (ctx) => { if (!isApiProject(ctx)) return null; const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /api.{0,10}version|\/v\d|versioning/i.test(docs); },
     impact: 'medium', rating: 3, category: 'api-design',
     fix: 'Document API versioning strategy in AGENTS.md.',
     template: null, file: () => 'AGENTS.md', line: () => null,
   },
   wsErrorHandlingPatterns: {
     id: 'WS-T15', name: 'Error handling patterns documented',
-    check: (ctx) => { const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('.windsurfrules') || ''); if (!docs.trim()) return null; return /error.{0,15}handl|exception|try.?catch|Result\s*</i.test(docs); },
+    check: (ctx) => { if (!isApiProject(ctx)) return null; const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('.windsurfrules') || ''); if (!docs.trim()) return null; return /error.{0,15}handl|exception|try.?catch|Result\s*</i.test(docs); },
     impact: 'high', rating: 4, category: 'api-design',
     fix: 'Document error handling patterns in .windsurfrules for Cascade.',
     template: null, file: () => '.windsurfrules', line: () => null,
   },
   wsRateLimitingAwareness: {
     id: 'WS-T16', name: 'Rate limiting awareness documented',
-    check: (ctx) => { const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /rate.?limit|throttl|429/i.test(docs); },
+    check: (ctx) => { if (!isApiProject(ctx)) return null; const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /rate.?limit|throttl|429/i.test(docs); },
     impact: 'medium', rating: 3, category: 'api-design',
     fix: 'Document rate limiting in AGENTS.md for Cascade to handle 429 errors.',
     template: null, file: () => 'AGENTS.md', line: () => null,
   },
   wsRequestValidation: {
     id: 'WS-T17', name: 'Request validation strategy documented',
-    check: (ctx) => { const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('.windsurfrules') || ''); if (!docs.trim()) return null; return /validat|zod|yup|joi\b/i.test(docs); },
+    check: (ctx) => { if (!isApiProject(ctx)) return null; const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('.windsurfrules') || ''); if (!docs.trim()) return null; return /validat|zod|yup|joi\b/i.test(docs); },
     impact: 'high', rating: 4, category: 'api-design',
     fix: 'Document request validation library (Zod, Yup) in .windsurfrules.',
     template: null, file: () => '.windsurfrules', line: () => null,
   },
   wsResponseFormatConsistent: {
     id: 'WS-T18', name: 'Response format consistency documented',
-    check: (ctx) => { const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('.windsurfrules') || ''); if (!docs.trim()) return null; return /response.{0,20}format|json.{0,10}response|envelope/i.test(docs); },
+    check: (ctx) => { if (!isApiProject(ctx)) return null; const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('.windsurfrules') || ''); if (!docs.trim()) return null; return /response.{0,20}format|json.{0,10}response|envelope/i.test(docs); },
     impact: 'medium', rating: 3, category: 'api-design',
     fix: 'Document standard response format in .windsurfrules.',
     template: null, file: () => '.windsurfrules', line: () => null,
   },
   wsMigrationStrategyDocumented: {
     id: 'WS-T19', name: 'Database migration strategy documented',
-    check: (ctx) => ctx.files.some(f => /migrations?\//i.test(f)) || /migration|prisma migrate|alembic/i.test((ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('.windsurfrules') || '')),
+    check: (ctx) => !isDatabaseProject(ctx) ? null : ctx.files.some(f => /migrations?\//i.test(f)) || /migration|prisma migrate|alembic/i.test((ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('.windsurfrules') || '')),
     impact: 'high', rating: 4, category: 'database',
     fix: 'Document database migration strategy in AGENTS.md.',
     template: null, file: () => 'AGENTS.md', line: () => null,
   },
   wsQueryOptimizationMentioned: {
     id: 'WS-T20', name: 'Query optimization guidance documented',
-    check: (ctx) => { const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('.windsurfrules') || ''); if (!docs.trim()) return null; return /n\+1|query.{0,15}optim|index|eager.{0,10}load/i.test(docs); },
+    check: (ctx) => { if (!isDatabaseProject(ctx)) return null; const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('.windsurfrules') || ''); if (!docs.trim()) return null; return /n\+1|query.{0,15}optim|index|eager.{0,10}load/i.test(docs); },
     impact: 'medium', rating: 3, category: 'database',
     fix: 'Document N+1 prevention patterns in .windsurfrules.',
     template: null, file: () => '.windsurfrules', line: () => null,
   },
   wsConnectionPoolingConfigured: {
     id: 'WS-T21', name: 'Connection pooling documented',
-    check: (ctx) => { const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /connection.{0,15}pool|pool.{0,15}size/i.test(docs); },
+    check: (ctx) => { if (!isDatabaseProject(ctx)) return null; const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /connection.{0,15}pool|pool.{0,15}size/i.test(docs); },
     impact: 'medium', rating: 3, category: 'database',
     fix: 'Document database connection pooling in AGENTS.md.',
     template: null, file: () => 'AGENTS.md', line: () => null,
   },
   wsBackupStrategyDocumented: {
     id: 'WS-T22', name: 'Database backup strategy documented',
-    check: (ctx) => { const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /backup|restore|point.?in.?time/i.test(docs); },
+    check: (ctx) => { if (!isDatabaseProject(ctx)) return null; const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /backup|restore|point.?in.?time/i.test(docs); },
     impact: 'medium', rating: 3, category: 'database',
     fix: 'Document database backup and restore in README.md.',
     template: null, file: () => 'README.md', line: () => null,
   },
   wsSchemaDocumentation: {
     id: 'WS-T23', name: 'Database schema documentation present',
-    check: (ctx) => ctx.files.some(f => /schema\.(prisma|sql|graphql)|erd|dbml/i.test(f)),
+    check: (ctx) => !isDatabaseProject(ctx) ? null : ctx.files.some(f => /schema\.(prisma|sql|graphql)|erd|dbml/i.test(f)),
     impact: 'medium', rating: 3, category: 'database',
     fix: 'Add schema documentation (schema.prisma, ERD) for Cascade.',
     template: null, file: () => null, line: () => null,
   },
   wsSeedDataMentioned: {
     id: 'WS-T24', name: 'Seed data strategy documented',
-    check: (ctx) => ctx.files.some(f => /seed\.(ts|js|sql|py)|fixtures\//i.test(f)) || /seed.{0,10}data|seed.{0,10}script/i.test((ctx.fileContent('AGENTS.md') || '')),
+    check: (ctx) => !isDatabaseProject(ctx) ? null : ctx.files.some(f => /seed\.(ts|js|sql|py)|fixtures\//i.test(f)) || /seed.{0,10}data|seed.{0,10}script/i.test((ctx.fileContent('AGENTS.md') || '')),
     impact: 'low', rating: 2, category: 'database',
     fix: 'Add seed scripts and document local database setup in AGENTS.md.',
     template: null, file: () => null, line: () => null,
   },
   wsAuthFlowDocumented: {
     id: 'WS-T25', name: 'Authentication flow documented',
-    check: (ctx) => { const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /auth.{0,15}flow|login.{0,15}flow|authenticate/i.test(docs); },
+    check: (ctx) => { if (!isAuthProject(ctx)) return null; const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /auth.{0,15}flow|login.{0,15}flow|authenticate/i.test(docs); },
     impact: 'high', rating: 4, category: 'authentication',
     fix: 'Document authentication flow in AGENTS.md for Cascade.',
     template: null, file: () => 'AGENTS.md', line: () => null,
   },
   wsTokenHandlingGuidance: {
     id: 'WS-T26', name: 'Token handling guidance documented',
-    check: (ctx) => { const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('.windsurfrules') || ''); if (!docs.trim()) return null; return /jwt|token.{0,15}refresh|access.{0,10}token|bearer/i.test(docs); },
+    check: (ctx) => { if (!isAuthProject(ctx)) return null; const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('.windsurfrules') || ''); if (!docs.trim()) return null; return /jwt|token.{0,15}refresh|access.{0,10}token|bearer/i.test(docs); },
     impact: 'high', rating: 4, category: 'authentication',
     fix: 'Document JWT/token handling in .windsurfrules.',
     template: null, file: () => '.windsurfrules', line: () => null,
   },
   wsSessionManagementDocumented: {
     id: 'WS-T27', name: 'Session management documented',
-    check: (ctx) => { const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('.windsurfrules') || ''); if (!docs.trim()) return null; return /session.{0,15}manag|cookie|next.?auth|lucia/i.test(docs); },
+    check: (ctx) => { if (!isAuthProject(ctx)) return null; const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('.windsurfrules') || ''); if (!docs.trim()) return null; return /session.{0,15}manag|cookie|next.?auth|lucia/i.test(docs); },
     impact: 'medium', rating: 3, category: 'authentication',
     fix: 'Document session management in .windsurfrules.',
     template: null, file: () => '.windsurfrules', line: () => null,
   },
   wsRbacPermissionsReferenced: {
     id: 'WS-T28', name: 'RBAC / permissions model referenced',
-    check: (ctx) => { const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('.windsurfrules') || ''); if (!docs.trim()) return null; return /rbac|role.?based|permission|authorization/i.test(docs); },
+    check: (ctx) => { if (!isAuthProject(ctx)) return null; const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('.windsurfrules') || ''); if (!docs.trim()) return null; return /rbac|role.?based|permission|authorization/i.test(docs); },
     impact: 'high', rating: 4, category: 'authentication',
     fix: 'Document RBAC/permissions model in .windsurfrules for Cascade.',
     template: null, file: () => '.windsurfrules', line: () => null,
   },
   wsOauthSsoMentioned: {
     id: 'WS-T29', name: 'OAuth/SSO configuration documented',
-    check: (ctx) => { const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /oauth|sso|saml|oidc|google.{0,10}auth/i.test(docs); },
+    check: (ctx) => { if (!isAuthProject(ctx)) return null; const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /oauth|sso|saml|oidc|google.{0,10}auth/i.test(docs); },
     impact: 'medium', rating: 3, category: 'authentication',
     fix: 'Document OAuth/SSO provider in README.md.',
     template: null, file: () => 'README.md', line: () => null,
   },
   wsCredentialRotationDocumented: {
     id: 'WS-T30', name: 'Credential rotation policy documented',
-    check: (ctx) => { const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('.windsurfrules') || ''); if (!docs.trim()) return null; return /rotat.{0,10}secret|rotat.{0,10}key|credential.{0,10}rotat/i.test(docs); },
+    check: (ctx) => { if (!isAuthProject(ctx)) return null; const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('.windsurfrules') || ''); if (!docs.trim()) return null; return /rotat.{0,10}secret|rotat.{0,10}key|credential.{0,10}rotat/i.test(docs); },
     impact: 'medium', rating: 3, category: 'authentication',
     fix: 'Document credential rotation in AGENTS.md.',
     template: null, file: () => 'AGENTS.md', line: () => null,
   },
   wsLoggingConfigured: {
     id: 'WS-T31', name: 'Logging framework configured',
-    check: (ctx) => /winston|pino|bunyan|morgan|loguru/i.test(ctx.fileContent('package.json') || '') || ctx.files.some(f => /log(ger|ging)\.config/i.test(f)),
+    check: (ctx) => !isMonitoringRelevant(ctx) ? null : /winston|pino|bunyan|morgan|loguru/i.test(ctx.fileContent('package.json') || '') || ctx.files.some(f => /log(ger|ging)\.config/i.test(f)),
     impact: 'high', rating: 4, category: 'monitoring',
     fix: 'Add a structured logging framework (Pino, Winston) and document log levels.',
     template: null, file: () => 'package.json', line: () => null,
   },
   wsErrorTrackingSetup: {
     id: 'WS-T32', name: 'Error tracking service configured',
-    check: (ctx) => /sentry|bugsnag|rollbar|honeybadger/i.test(ctx.fileContent('package.json') || '') || ctx.files.some(f => /sentry\.client|sentry\.server/i.test(f)),
+    check: (ctx) => !isMonitoringRelevant(ctx) ? null : /sentry|bugsnag|rollbar|honeybadger/i.test(ctx.fileContent('package.json') || '') || ctx.files.some(f => /sentry\.client|sentry\.server/i.test(f)),
     impact: 'high', rating: 4, category: 'monitoring',
     fix: 'Set up error tracking (Sentry) to catch runtime errors.',
     template: null, file: () => null, line: () => null,
   },
   wsApmMetricsMentioned: {
     id: 'WS-T33', name: 'APM / metrics platform documented',
-    check: (ctx) => { const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /datadog|newrelic|prometheus|grafana|opentelemetry|apm/i.test(docs); },
+    check: (ctx) => { if (!isMonitoringRelevant(ctx)) return null; const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /datadog|newrelic|prometheus|grafana|opentelemetry|apm/i.test(docs); },
     impact: 'medium', rating: 3, category: 'monitoring',
     fix: 'Document APM platform in README.md.',
     template: null, file: () => 'README.md', line: () => null,
   },
   wsHealthCheckEndpoint: {
     id: 'WS-T34', name: 'Health check endpoint documented',
-    check: (ctx) => { const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /health.?check|\/health|\/ping|\/status/i.test(docs); },
+    check: (ctx) => { if (!isMonitoringRelevant(ctx)) return null; const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /health.?check|\/health|\/ping|\/status/i.test(docs); },
     impact: 'medium', rating: 3, category: 'monitoring',
     fix: 'Document health check endpoint in README.md.',
     template: null, file: () => 'README.md', line: () => null,
   },
   wsAlertingReferenced: {
     id: 'WS-T35', name: 'Alerting strategy referenced',
-    check: (ctx) => { const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /alert|pagerduty|opsgenie|oncall|incident/i.test(docs); },
+    check: (ctx) => { if (!isMonitoringRelevant(ctx)) return null; const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /alert|pagerduty|opsgenie|oncall|incident/i.test(docs); },
     impact: 'medium', rating: 3, category: 'monitoring',
     fix: 'Document alerting strategy in README.md.',
     template: null, file: () => 'README.md', line: () => null,
   },
   wsLogRotationMentioned: {
     id: 'WS-T36', name: 'Log rotation / retention documented',
-    check: (ctx) => { const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /log.{0,15}rotat|log.{0,15}retent|retention.{0,15}polic/i.test(docs); },
+    check: (ctx) => { if (!isMonitoringRelevant(ctx)) return null; const docs = (ctx.fileContent('AGENTS.md') || '') + (ctx.fileContent('README.md') || ''); if (!docs.trim()) return null; return /log.{0,15}rotat|log.{0,15}retent|retention.{0,15}polic/i.test(docs); },
     impact: 'low', rating: 2, category: 'monitoring',
     fix: 'Document log rotation policy in README.md.',
     template: null, file: () => 'README.md', line: () => null,