@nerviq/cli 1.20.0 → 1.21.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (185) hide show
  1. package/LICENSE +23 -23
  2. package/README.md +2 -2
  3. package/bin/cli.js +1 -0
  4. package/package.json +2 -1
  5. package/src/activity.js +1039 -1039
  6. package/src/adoption-advisor.js +299 -299
  7. package/src/aider/config-parser.js +166 -166
  8. package/src/aider/context.js +6 -2
  9. package/src/aider/deep-review.js +316 -316
  10. package/src/aider/domain-packs.js +303 -303
  11. package/src/aider/freshness.js +93 -93
  12. package/src/aider/governance.js +253 -253
  13. package/src/aider/interactive.js +334 -334
  14. package/src/aider/mcp-packs.js +329 -329
  15. package/src/aider/patch.js +214 -214
  16. package/src/aider/plans.js +186 -186
  17. package/src/aider/premium.js +360 -360
  18. package/src/aider/setup.js +404 -404
  19. package/src/aider/techniques.js +312 -67
  20. package/src/analyze.js +951 -951
  21. package/src/anti-patterns.js +485 -485
  22. package/src/audit/instruction-files.js +180 -180
  23. package/src/audit/recommendations.js +577 -577
  24. package/src/auto-suggest.js +154 -154
  25. package/src/badge.js +13 -13
  26. package/src/behavioral-drift.js +801 -801
  27. package/src/benchmark.js +67 -67
  28. package/src/catalog.js +103 -103
  29. package/src/certification.js +128 -128
  30. package/src/codex/config-parser.js +183 -183
  31. package/src/codex/context.js +223 -223
  32. package/src/codex/deep-review.js +493 -493
  33. package/src/codex/domain-packs.js +394 -394
  34. package/src/codex/freshness.js +84 -84
  35. package/src/codex/governance.js +192 -192
  36. package/src/codex/interactive.js +618 -618
  37. package/src/codex/mcp-packs.js +914 -914
  38. package/src/codex/patch.js +209 -209
  39. package/src/codex/plans.js +251 -251
  40. package/src/codex/premium.js +614 -614
  41. package/src/codex/setup.js +591 -591
  42. package/src/context.js +10 -4
  43. package/src/continuous-ops.js +681 -681
  44. package/src/copilot/activity.js +309 -309
  45. package/src/copilot/deep-review.js +346 -346
  46. package/src/copilot/domain-packs.js +372 -372
  47. package/src/copilot/freshness.js +57 -57
  48. package/src/copilot/governance.js +222 -222
  49. package/src/copilot/interactive.js +406 -406
  50. package/src/copilot/mcp-packs.js +826 -826
  51. package/src/copilot/plans.js +253 -253
  52. package/src/copilot/premium.js +451 -451
  53. package/src/copilot/setup.js +488 -488
  54. package/src/cost-tracking.js +61 -61
  55. package/src/cursor/activity.js +301 -301
  56. package/src/cursor/config-parser.js +265 -265
  57. package/src/cursor/context.js +256 -256
  58. package/src/cursor/deep-review.js +334 -334
  59. package/src/cursor/domain-packs.js +368 -368
  60. package/src/cursor/freshness.js +65 -65
  61. package/src/cursor/governance.js +229 -229
  62. package/src/cursor/interactive.js +391 -391
  63. package/src/cursor/mcp-packs.js +828 -828
  64. package/src/cursor/plans.js +254 -254
  65. package/src/cursor/premium.js +469 -469
  66. package/src/cursor/setup.js +488 -488
  67. package/src/dashboard.js +493 -493
  68. package/src/deep-review.js +428 -428
  69. package/src/deprecation.js +98 -98
  70. package/src/diff-only.js +280 -280
  71. package/src/doctor.js +119 -119
  72. package/src/domain-pack-expansion.js +1033 -1033
  73. package/src/domain-packs.js +387 -387
  74. package/src/feedback.js +178 -178
  75. package/src/fix-engine.js +783 -783
  76. package/src/fix-prompts.js +122 -122
  77. package/src/formatters/sarif.js +115 -115
  78. package/src/freshness.js +74 -74
  79. package/src/gemini/config-parser.js +275 -275
  80. package/src/gemini/deep-review.js +559 -559
  81. package/src/gemini/domain-packs.js +393 -393
  82. package/src/gemini/freshness.js +66 -66
  83. package/src/gemini/governance.js +201 -201
  84. package/src/gemini/interactive.js +860 -860
  85. package/src/gemini/mcp-packs.js +915 -915
  86. package/src/gemini/plans.js +269 -269
  87. package/src/gemini/premium.js +760 -760
  88. package/src/gemini/setup.js +692 -692
  89. package/src/governance.js +72 -72
  90. package/src/harmony/add.js +68 -68
  91. package/src/harmony/advisor.js +333 -333
  92. package/src/harmony/canon.js +565 -565
  93. package/src/harmony/cli.js +591 -591
  94. package/src/harmony/drift.js +401 -401
  95. package/src/harmony/governance.js +313 -313
  96. package/src/harmony/memory.js +239 -239
  97. package/src/harmony/sync.js +475 -475
  98. package/src/harmony/watch.js +370 -370
  99. package/src/hook-validation.js +342 -342
  100. package/src/index.js +271 -271
  101. package/src/init.js +184 -184
  102. package/src/instruction-surfaces.js +185 -185
  103. package/src/integrations.js +144 -144
  104. package/src/interactive.js +118 -118
  105. package/src/locales/en.json +1 -1
  106. package/src/locales/es.json +1 -1
  107. package/src/mcp-packs.js +830 -830
  108. package/src/mcp-server.js +726 -726
  109. package/src/mcp-validation.js +337 -337
  110. package/src/nerviq-sync.json +7 -7
  111. package/src/opencode/config-parser.js +109 -109
  112. package/src/opencode/context.js +247 -247
  113. package/src/opencode/deep-review.js +313 -313
  114. package/src/opencode/domain-packs.js +262 -262
  115. package/src/opencode/freshness.js +66 -66
  116. package/src/opencode/governance.js +159 -159
  117. package/src/opencode/interactive.js +392 -392
  118. package/src/opencode/mcp-packs.js +705 -705
  119. package/src/opencode/patch.js +184 -184
  120. package/src/opencode/plans.js +231 -231
  121. package/src/opencode/premium.js +413 -413
  122. package/src/opencode/setup.js +449 -449
  123. package/src/opencode/techniques.js +27 -27
  124. package/src/operating-profile.js +574 -574
  125. package/src/org.js +152 -152
  126. package/src/permission-rules.js +218 -218
  127. package/src/plans.js +839 -839
  128. package/src/platform-change-manifest.js +86 -86
  129. package/src/plugins.js +110 -110
  130. package/src/policy-layers.js +210 -210
  131. package/src/profiles.js +124 -124
  132. package/src/prompt-injection.js +74 -74
  133. package/src/public-api.js +173 -173
  134. package/src/recommendation-rules.js +84 -84
  135. package/src/repo-archetype.js +386 -386
  136. package/src/secret-patterns.js +39 -39
  137. package/src/server.js +527 -527
  138. package/src/setup/analysis.js +607 -607
  139. package/src/setup/runtime.js +172 -172
  140. package/src/setup.js +677 -677
  141. package/src/shared/capabilities.js +194 -194
  142. package/src/source-urls.js +132 -132
  143. package/src/stack-checks.js +565 -565
  144. package/src/supplemental-checks.js +13 -13
  145. package/src/synergy/adaptive.js +261 -261
  146. package/src/synergy/compensation.js +137 -137
  147. package/src/synergy/evidence.js +193 -193
  148. package/src/synergy/learning.js +199 -199
  149. package/src/synergy/patterns.js +227 -227
  150. package/src/synergy/ranking.js +83 -83
  151. package/src/synergy/report.js +165 -165
  152. package/src/synergy/routing.js +146 -146
  153. package/src/techniques/api.js +407 -407
  154. package/src/techniques/automation.js +316 -316
  155. package/src/techniques/compliance.js +257 -257
  156. package/src/techniques/hygiene.js +294 -294
  157. package/src/techniques/instructions.js +243 -243
  158. package/src/techniques/observability.js +226 -226
  159. package/src/techniques/optimization.js +142 -142
  160. package/src/techniques/quality.js +318 -318
  161. package/src/techniques/security.js +237 -237
  162. package/src/techniques/shared.js +443 -443
  163. package/src/techniques/stacks.js +2294 -2294
  164. package/src/techniques/tools.js +106 -106
  165. package/src/techniques/workflow.js +413 -413
  166. package/src/techniques.js +81 -81
  167. package/src/terminology.js +73 -73
  168. package/src/token-estimate.js +35 -35
  169. package/src/usage-patterns.js +99 -99
  170. package/src/verification-metadata.js +145 -145
  171. package/src/watch.js +247 -247
  172. package/src/windsurf/activity.js +302 -302
  173. package/src/windsurf/config-parser.js +267 -267
  174. package/src/windsurf/context.js +120 -10
  175. package/src/windsurf/deep-review.js +337 -337
  176. package/src/windsurf/domain-packs.js +370 -370
  177. package/src/windsurf/freshness.js +36 -36
  178. package/src/windsurf/governance.js +231 -231
  179. package/src/windsurf/interactive.js +388 -388
  180. package/src/windsurf/mcp-packs.js +792 -792
  181. package/src/windsurf/plans.js +247 -247
  182. package/src/windsurf/premium.js +468 -468
  183. package/src/windsurf/setup.js +471 -471
  184. package/src/windsurf/techniques.js +155 -33
  185. package/src/workspace.js +375 -375
@@ -1,265 +1,265 @@
1
- /**
2
- * Cursor config parser.
3
- *
4
- * Cursor uses MDC format (.cursor/rules/*.mdc = YAML frontmatter + Markdown body),
5
- * and JSON for .cursor/mcp.json and .cursor/environment.json.
6
- * This module handles both formats with unified value extraction.
7
- */
8
-
9
- // ─── JSON parsing ────────────────────────────────────────────────────────────
10
-
11
- function tryParseJson(content) {
12
- try {
13
- const data = JSON.parse(content);
14
- return { ok: true, data, error: null };
15
- } catch (error) {
16
- return { ok: false, data: null, error: error.message };
17
- }
18
- }
19
-
20
- // ─── MDC parsing (YAML frontmatter + Markdown body) ─────────────────────────
21
-
22
- /**
23
- * Parse an MDC file (YAML frontmatter delimited by --- + Markdown body).
24
- * Returns { frontmatter: object|null, body: string, raw: string|null }
25
- */
26
- function parseMdc(content) {
27
- if (!content || typeof content !== 'string') {
28
- return { frontmatter: null, body: content || '', raw: null };
29
- }
30
-
31
- const trimmed = content.trimStart();
32
- if (!trimmed.startsWith('---')) {
33
- return { frontmatter: null, body: content, raw: null };
34
- }
35
-
36
- const endIdx = trimmed.indexOf('---', 3);
37
- if (endIdx === -1) {
38
- return { frontmatter: null, body: content, raw: null };
39
- }
40
-
41
- const raw = trimmed.slice(3, endIdx).trim();
42
- const body = trimmed.slice(endIdx + 3).trim();
43
- const frontmatter = parseSimpleYaml(raw);
44
-
45
- return { frontmatter, body, raw };
46
- }
47
-
48
- /**
49
- * Minimal YAML parser for MDC frontmatter fields.
50
- * Handles: key: value, key: [item1, item2], key: "quoted", booleans, numbers.
51
- * Also handles multi-line array syntax (indented with -).
52
- */
53
- function parseSimpleYaml(yamlStr) {
54
- if (!yamlStr || typeof yamlStr !== 'string') return {};
55
-
56
- const result = {};
57
- const lines = yamlStr.split(/\r?\n/);
58
- let currentKey = null;
59
- let currentArray = null;
60
-
61
- for (const line of lines) {
62
- const trimmedLine = line.trim();
63
- if (!trimmedLine || trimmedLine.startsWith('#')) continue;
64
-
65
- // Check for multi-line array item ( - "value")
66
- if (currentKey && currentArray !== null && /^\s*-\s+/.test(line)) {
67
- const itemValue = trimmedLine.slice(1).trim();
68
- currentArray.push(stripQuotes(itemValue));
69
- continue;
70
- }
71
-
72
- // If we were collecting an array, commit it
73
- if (currentKey && currentArray !== null) {
74
- result[currentKey] = currentArray;
75
- currentKey = null;
76
- currentArray = null;
77
- }
78
-
79
- const colonIdx = trimmedLine.indexOf(':');
80
- if (colonIdx === -1) continue;
81
-
82
- const key = trimmedLine.slice(0, colonIdx).trim();
83
- let value = trimmedLine.slice(colonIdx + 1).trim();
84
-
85
- if (!key) continue;
86
-
87
- // Parse value
88
- if (value === '') {
89
- // Could be start of multi-line array
90
- currentKey = key;
91
- currentArray = [];
92
- } else if (value.startsWith('[') && value.endsWith(']')) {
93
- // Inline array: [item1, item2]
94
- const inner = value.slice(1, -1).trim();
95
- if (!inner) {
96
- result[key] = [];
97
- } else {
98
- result[key] = inner.split(',').map(item => {
99
- const t = item.trim();
100
- return stripQuotes(t);
101
- });
102
- }
103
- } else if ((value.startsWith('"') && value.endsWith('"')) ||
104
- (value.startsWith("'") && value.endsWith("'"))) {
105
- result[key] = value.slice(1, -1);
106
- } else if (value === 'true') {
107
- result[key] = true;
108
- } else if (value === 'false') {
109
- result[key] = false;
110
- } else if (/^-?\d+$/.test(value)) {
111
- result[key] = parseInt(value, 10);
112
- } else if (/^-?\d+\.\d+$/.test(value)) {
113
- result[key] = parseFloat(value);
114
- } else {
115
- result[key] = value;
116
- }
117
- }
118
-
119
- // Commit any remaining array
120
- if (currentKey && currentArray !== null) {
121
- result[currentKey] = currentArray;
122
- }
123
-
124
- return result;
125
- }
126
-
127
- function stripQuotes(str) {
128
- if ((str.startsWith('"') && str.endsWith('"')) ||
129
- (str.startsWith("'") && str.endsWith("'"))) {
130
- return str.slice(1, -1);
131
- }
132
- return str;
133
- }
134
-
135
- // ─── MDC rule type detection ─────────────────────────────────────────────────
136
-
137
- /**
138
- * Determine the MDC rule type from frontmatter fields.
139
- *
140
- * Truth table:
141
- * Always: alwaysApply=true, globs=any, description=any
142
- * Auto Attached: alwaysApply=false, globs=set, description=optional
143
- * Agent Requested: alwaysApply=false, globs=empty, description=set
144
- * Manual: alwaysApply=false, globs=empty, description=empty
145
- */
146
- function detectRuleType(frontmatter) {
147
- if (!frontmatter) return 'manual';
148
-
149
- const alwaysApply = frontmatter.alwaysApply === true;
150
- const hasGlobs = Array.isArray(frontmatter.globs)
151
- ? frontmatter.globs.length > 0
152
- : Boolean(frontmatter.globs);
153
- const hasDescription = Boolean(frontmatter.description && String(frontmatter.description).trim());
154
-
155
- if (alwaysApply) return 'always';
156
- if (hasGlobs) return 'auto-attached';
157
- if (hasDescription) return 'agent-requested';
158
- return 'manual';
159
- }
160
-
161
- // ─── Value extraction ────────────────────────────────────────────────────────
162
-
163
- function getValueByPath(obj, dottedPath) {
164
- if (!obj) return undefined;
165
- const parts = dottedPath.split('.').filter(Boolean);
166
- let cursor = obj;
167
- for (const part of parts) {
168
- if (cursor == null || typeof cursor !== 'object' || !(part in cursor)) {
169
- return undefined;
170
- }
171
- cursor = cursor[part];
172
- }
173
- return cursor;
174
- }
175
-
176
- // ─── MDC frontmatter validation ──────────────────────────────────────────────
177
-
178
- const VALID_MDC_FIELDS = new Set(['description', 'globs', 'alwaysApply']);
179
-
180
- /**
181
- * Validate MDC rule file frontmatter.
182
- * Returns { valid, errors, ruleType }.
183
- */
184
- function validateMdcFrontmatter(frontmatter) {
185
- if (!frontmatter) return { valid: false, errors: ['No frontmatter found'], ruleType: 'manual' };
186
-
187
- const errors = [];
188
-
189
- for (const key of Object.keys(frontmatter)) {
190
- if (!VALID_MDC_FIELDS.has(key)) {
191
- errors.push(`Unknown MDC frontmatter field: "${key}"`);
192
- }
193
- }
194
-
195
- // Validate globs is an array if present
196
- if (frontmatter.globs !== undefined && !Array.isArray(frontmatter.globs) && typeof frontmatter.globs !== 'string') {
197
- errors.push('globs must be a string or array of strings');
198
- }
199
-
200
- // Validate alwaysApply is boolean if present
201
- if (frontmatter.alwaysApply !== undefined && typeof frontmatter.alwaysApply !== 'boolean') {
202
- errors.push('alwaysApply must be a boolean (true or false)');
203
- }
204
-
205
- // Warn if globs + description combined (creates ambiguity)
206
- const hasGlobs = Array.isArray(frontmatter.globs)
207
- ? frontmatter.globs.length > 0
208
- : Boolean(frontmatter.globs);
209
- const hasDescription = Boolean(frontmatter.description && String(frontmatter.description).trim());
210
- if (hasGlobs && hasDescription && frontmatter.alwaysApply !== true) {
211
- errors.push('Combining globs + description creates ambiguity — use one or the other');
212
- }
213
-
214
- const ruleType = detectRuleType(frontmatter);
215
-
216
- return { valid: errors.length === 0, errors, ruleType };
217
- }
218
-
219
- // ─── MCP config validation ───────────────────────────────────────────────────
220
-
221
- /**
222
- * Count total MCP tools across all servers.
223
- * Cursor has a hard limit of ~40 tools.
224
- */
225
- function countMcpTools(mcpData) {
226
- if (!mcpData || !mcpData.mcpServers) return 0;
227
-
228
- let total = 0;
229
- for (const server of Object.values(mcpData.mcpServers)) {
230
- // Each server exposes tools; estimate ~5 per server if no explicit count
231
- const toolCount = server.tools ? Object.keys(server.tools).length : 5;
232
- total += toolCount;
233
- }
234
- return total;
235
- }
236
-
237
- /**
238
- * Validate MCP env vars use ${env:VAR} syntax (not hardcoded secrets).
239
- */
240
- function validateMcpEnvVars(mcpData) {
241
- if (!mcpData || !mcpData.mcpServers) return { valid: true, hardcodedVars: [] };
242
-
243
- const hardcodedVars = [];
244
- for (const [serverName, config] of Object.entries(mcpData.mcpServers)) {
245
- if (!config.env) continue;
246
- for (const [key, value] of Object.entries(config.env)) {
247
- if (typeof value === 'string' && !value.startsWith('${env:') && /key|token|secret|password|api/i.test(key)) {
248
- hardcodedVars.push({ server: serverName, key, value: '[REDACTED]' });
249
- }
250
- }
251
- }
252
-
253
- return { valid: hardcodedVars.length === 0, hardcodedVars };
254
- }
255
-
256
- module.exports = {
257
- tryParseJson,
258
- parseMdc,
259
- parseSimpleYaml,
260
- detectRuleType,
261
- getValueByPath,
262
- validateMdcFrontmatter,
263
- countMcpTools,
264
- validateMcpEnvVars,
265
- };
1
+ /**
2
+ * Cursor config parser.
3
+ *
4
+ * Cursor uses MDC format (.cursor/rules/*.mdc = YAML frontmatter + Markdown body),
5
+ * and JSON for .cursor/mcp.json and .cursor/environment.json.
6
+ * This module handles both formats with unified value extraction.
7
+ */
8
+
9
+ // ─── JSON parsing ────────────────────────────────────────────────────────────
10
+
11
+ function tryParseJson(content) {
12
+ try {
13
+ const data = JSON.parse(content);
14
+ return { ok: true, data, error: null };
15
+ } catch (error) {
16
+ return { ok: false, data: null, error: error.message };
17
+ }
18
+ }
19
+
20
+ // ─── MDC parsing (YAML frontmatter + Markdown body) ─────────────────────────
21
+
22
+ /**
23
+ * Parse an MDC file (YAML frontmatter delimited by --- + Markdown body).
24
+ * Returns { frontmatter: object|null, body: string, raw: string|null }
25
+ */
26
+ function parseMdc(content) {
27
+ if (!content || typeof content !== 'string') {
28
+ return { frontmatter: null, body: content || '', raw: null };
29
+ }
30
+
31
+ const trimmed = content.trimStart();
32
+ if (!trimmed.startsWith('---')) {
33
+ return { frontmatter: null, body: content, raw: null };
34
+ }
35
+
36
+ const endIdx = trimmed.indexOf('---', 3);
37
+ if (endIdx === -1) {
38
+ return { frontmatter: null, body: content, raw: null };
39
+ }
40
+
41
+ const raw = trimmed.slice(3, endIdx).trim();
42
+ const body = trimmed.slice(endIdx + 3).trim();
43
+ const frontmatter = parseSimpleYaml(raw);
44
+
45
+ return { frontmatter, body, raw };
46
+ }
47
+
48
+ /**
49
+ * Minimal YAML parser for MDC frontmatter fields.
50
+ * Handles: key: value, key: [item1, item2], key: "quoted", booleans, numbers.
51
+ * Also handles multi-line array syntax (indented with -).
52
+ */
53
+ function parseSimpleYaml(yamlStr) {
54
+ if (!yamlStr || typeof yamlStr !== 'string') return {};
55
+
56
+ const result = {};
57
+ const lines = yamlStr.split(/\r?\n/);
58
+ let currentKey = null;
59
+ let currentArray = null;
60
+
61
+ for (const line of lines) {
62
+ const trimmedLine = line.trim();
63
+ if (!trimmedLine || trimmedLine.startsWith('#')) continue;
64
+
65
+ // Check for multi-line array item ( - "value")
66
+ if (currentKey && currentArray !== null && /^\s*-\s+/.test(line)) {
67
+ const itemValue = trimmedLine.slice(1).trim();
68
+ currentArray.push(stripQuotes(itemValue));
69
+ continue;
70
+ }
71
+
72
+ // If we were collecting an array, commit it
73
+ if (currentKey && currentArray !== null) {
74
+ result[currentKey] = currentArray;
75
+ currentKey = null;
76
+ currentArray = null;
77
+ }
78
+
79
+ const colonIdx = trimmedLine.indexOf(':');
80
+ if (colonIdx === -1) continue;
81
+
82
+ const key = trimmedLine.slice(0, colonIdx).trim();
83
+ let value = trimmedLine.slice(colonIdx + 1).trim();
84
+
85
+ if (!key) continue;
86
+
87
+ // Parse value
88
+ if (value === '') {
89
+ // Could be start of multi-line array
90
+ currentKey = key;
91
+ currentArray = [];
92
+ } else if (value.startsWith('[') && value.endsWith(']')) {
93
+ // Inline array: [item1, item2]
94
+ const inner = value.slice(1, -1).trim();
95
+ if (!inner) {
96
+ result[key] = [];
97
+ } else {
98
+ result[key] = inner.split(',').map(item => {
99
+ const t = item.trim();
100
+ return stripQuotes(t);
101
+ });
102
+ }
103
+ } else if ((value.startsWith('"') && value.endsWith('"')) ||
104
+ (value.startsWith("'") && value.endsWith("'"))) {
105
+ result[key] = value.slice(1, -1);
106
+ } else if (value === 'true') {
107
+ result[key] = true;
108
+ } else if (value === 'false') {
109
+ result[key] = false;
110
+ } else if (/^-?\d+$/.test(value)) {
111
+ result[key] = parseInt(value, 10);
112
+ } else if (/^-?\d+\.\d+$/.test(value)) {
113
+ result[key] = parseFloat(value);
114
+ } else {
115
+ result[key] = value;
116
+ }
117
+ }
118
+
119
+ // Commit any remaining array
120
+ if (currentKey && currentArray !== null) {
121
+ result[currentKey] = currentArray;
122
+ }
123
+
124
+ return result;
125
+ }
126
+
127
+ function stripQuotes(str) {
128
+ if ((str.startsWith('"') && str.endsWith('"')) ||
129
+ (str.startsWith("'") && str.endsWith("'"))) {
130
+ return str.slice(1, -1);
131
+ }
132
+ return str;
133
+ }
134
+
135
+ // ─── MDC rule type detection ─────────────────────────────────────────────────
136
+
137
+ /**
138
+ * Determine the MDC rule type from frontmatter fields.
139
+ *
140
+ * Truth table:
141
+ * Always: alwaysApply=true, globs=any, description=any
142
+ * Auto Attached: alwaysApply=false, globs=set, description=optional
143
+ * Agent Requested: alwaysApply=false, globs=empty, description=set
144
+ * Manual: alwaysApply=false, globs=empty, description=empty
145
+ */
146
+ function detectRuleType(frontmatter) {
147
+ if (!frontmatter) return 'manual';
148
+
149
+ const alwaysApply = frontmatter.alwaysApply === true;
150
+ const hasGlobs = Array.isArray(frontmatter.globs)
151
+ ? frontmatter.globs.length > 0
152
+ : Boolean(frontmatter.globs);
153
+ const hasDescription = Boolean(frontmatter.description && String(frontmatter.description).trim());
154
+
155
+ if (alwaysApply) return 'always';
156
+ if (hasGlobs) return 'auto-attached';
157
+ if (hasDescription) return 'agent-requested';
158
+ return 'manual';
159
+ }
160
+
161
+ // ─── Value extraction ────────────────────────────────────────────────────────
162
+
163
+ function getValueByPath(obj, dottedPath) {
164
+ if (!obj) return undefined;
165
+ const parts = dottedPath.split('.').filter(Boolean);
166
+ let cursor = obj;
167
+ for (const part of parts) {
168
+ if (cursor == null || typeof cursor !== 'object' || !(part in cursor)) {
169
+ return undefined;
170
+ }
171
+ cursor = cursor[part];
172
+ }
173
+ return cursor;
174
+ }
175
+
176
+ // ─── MDC frontmatter validation ──────────────────────────────────────────────
177
+
178
+ const VALID_MDC_FIELDS = new Set(['description', 'globs', 'alwaysApply']);
179
+
180
+ /**
181
+ * Validate MDC rule file frontmatter.
182
+ * Returns { valid, errors, ruleType }.
183
+ */
184
+ function validateMdcFrontmatter(frontmatter) {
185
+ if (!frontmatter) return { valid: false, errors: ['No frontmatter found'], ruleType: 'manual' };
186
+
187
+ const errors = [];
188
+
189
+ for (const key of Object.keys(frontmatter)) {
190
+ if (!VALID_MDC_FIELDS.has(key)) {
191
+ errors.push(`Unknown MDC frontmatter field: "${key}"`);
192
+ }
193
+ }
194
+
195
+ // Validate globs is an array if present
196
+ if (frontmatter.globs !== undefined && !Array.isArray(frontmatter.globs) && typeof frontmatter.globs !== 'string') {
197
+ errors.push('globs must be a string or array of strings');
198
+ }
199
+
200
+ // Validate alwaysApply is boolean if present
201
+ if (frontmatter.alwaysApply !== undefined && typeof frontmatter.alwaysApply !== 'boolean') {
202
+ errors.push('alwaysApply must be a boolean (true or false)');
203
+ }
204
+
205
+ // Warn if globs + description combined (creates ambiguity)
206
+ const hasGlobs = Array.isArray(frontmatter.globs)
207
+ ? frontmatter.globs.length > 0
208
+ : Boolean(frontmatter.globs);
209
+ const hasDescription = Boolean(frontmatter.description && String(frontmatter.description).trim());
210
+ if (hasGlobs && hasDescription && frontmatter.alwaysApply !== true) {
211
+ errors.push('Combining globs + description creates ambiguity — use one or the other');
212
+ }
213
+
214
+ const ruleType = detectRuleType(frontmatter);
215
+
216
+ return { valid: errors.length === 0, errors, ruleType };
217
+ }
218
+
219
+ // ─── MCP config validation ───────────────────────────────────────────────────
220
+
221
+ /**
222
+ * Count total MCP tools across all servers.
223
+ * Cursor has a hard limit of ~40 tools.
224
+ */
225
+ function countMcpTools(mcpData) {
226
+ if (!mcpData || !mcpData.mcpServers) return 0;
227
+
228
+ let total = 0;
229
+ for (const server of Object.values(mcpData.mcpServers)) {
230
+ // Each server exposes tools; estimate ~5 per server if no explicit count
231
+ const toolCount = server.tools ? Object.keys(server.tools).length : 5;
232
+ total += toolCount;
233
+ }
234
+ return total;
235
+ }
236
+
237
+ /**
238
+ * Validate MCP env vars use ${env:VAR} syntax (not hardcoded secrets).
239
+ */
240
+ function validateMcpEnvVars(mcpData) {
241
+ if (!mcpData || !mcpData.mcpServers) return { valid: true, hardcodedVars: [] };
242
+
243
+ const hardcodedVars = [];
244
+ for (const [serverName, config] of Object.entries(mcpData.mcpServers)) {
245
+ if (!config.env) continue;
246
+ for (const [key, value] of Object.entries(config.env)) {
247
+ if (typeof value === 'string' && !value.startsWith('${env:') && /key|token|secret|password|api/i.test(key)) {
248
+ hardcodedVars.push({ server: serverName, key, value: '[REDACTED]' });
249
+ }
250
+ }
251
+ }
252
+
253
+ return { valid: hardcodedVars.length === 0, hardcodedVars };
254
+ }
255
+
256
+ module.exports = {
257
+ tryParseJson,
258
+ parseMdc,
259
+ parseSimpleYaml,
260
+ detectRuleType,
261
+ getValueByPath,
262
+ validateMdcFrontmatter,
263
+ countMcpTools,
264
+ validateMcpEnvVars,
265
+ };