@nerviq/cli 1.20.1 → 1.22.0

package/src/formatters/sarif.js

@@ -1,115 +1,115 @@
-const path = require('path');
-const { version } = require('../../package.json');
-
-function levelFromImpact(impact) {
-  if (impact === 'critical') return 'error';
-  if (impact === 'high') return 'warning';
-  return 'note';
-}
-
-function sanitizeUri(filePath) {
-  if (!filePath) return null;
-  return filePath.split(path.sep).join('/');
-}
-
-function buildRule(result) {
-  return {
-    id: result.id || result.key,
-    name: result.key,
-    shortDescription: { text: result.name },
-    fullDescription: { text: result.fix || result.name },
-    properties: {
-      category: result.category,
-      impact: result.impact,
-      template: result.template || null,
-    },
-  };
-}
-
-function buildSarifResult(result, runRoot = '.') {
-  const sarifResult = {
-    ruleId: result.id || result.key,
-    level: levelFromImpact(result.impact),
-    message: {
-      text: result.fix || result.name,
-    },
-    properties: {
-      checkKey: result.key,
-      category: result.category,
-      impact: result.impact,
-      passed: result.passed,
-      platform: result.platform || null,
-    },
-  };
-
-  if (result.file) {
-    sarifResult.locations = [{
-      physicalLocation: {
-        artifactLocation: {
-          uri: sanitizeUri(result.file),
-          uriBaseId: '%SRCROOT%',
-        },
-        region: result.line ? { startLine: result.line } : undefined,
-      },
-    }];
-  }
-
-  if (runRoot) {
-    sarifResult.properties.runRoot = sanitizeUri(runRoot);
-  }
-
-  return sarifResult;
-}
-
-function formatSarif(auditResult, options = {}) {
-  const failedResults = (auditResult.results || [])
-    .filter((result) => result.passed === false);
-
-  const rules = [];
-  const seenRuleIds = new Set();
-  for (const result of failedResults) {
-    const ruleId = result.id || result.key;
-    if (seenRuleIds.has(ruleId)) continue;
-    seenRuleIds.add(ruleId);
-    rules.push(buildRule(result));
-  }
-
-  return {
-    version: '2.1.0',
-    $schema: 'https://json.schemastore.org/sarif-2.1.0.json',
-    runs: [{
-      tool: {
-        driver: {
-          name: 'nerviq',
-          version,
-          informationUri: 'https://github.com/nerviq/nerviq',
-          rules,
-        },
-      },
-      automationDetails: {
-        id: auditResult.platform || 'claude',
-      },
-      properties: {
-        platform: auditResult.platform,
-        platformLabel: auditResult.platformLabel,
-        platformVersion: auditResult.platformVersion || null,
-        score: auditResult.score,
-        organicScore: auditResult.organicScore,
-        passed: auditResult.passed,
-        failed: auditResult.failed,
-        skipped: auditResult.skipped,
-        checkCount: auditResult.checkCount,
-      },
-      originalUriBaseIds: {
-        '%SRCROOT%': {
-          uri: sanitizeUri(options.dir || '.'),
-        },
-      },
-      results: failedResults.map((result) => buildSarifResult(result, options.dir || '.')),
-    }],
-  };
-}
-
-module.exports = {
-  formatSarif,
-};
+const path = require('path');
+const { version } = require('../../package.json');
+
+function levelFromImpact(impact) {
+  if (impact === 'critical') return 'error';
+  if (impact === 'high') return 'warning';
+  return 'note';
+}
+
+function sanitizeUri(filePath) {
+  if (!filePath) return null;
+  return filePath.split(path.sep).join('/');
+}
+
+function buildRule(result) {
+  return {
+    id: result.id || result.key,
+    name: result.key,
+    shortDescription: { text: result.name },
+    fullDescription: { text: result.fix || result.name },
+    properties: {
+      category: result.category,
+      impact: result.impact,
+      template: result.template || null,
+    },
+  };
+}
+
+function buildSarifResult(result, runRoot = '.') {
+  const sarifResult = {
+    ruleId: result.id || result.key,
+    level: levelFromImpact(result.impact),
+    message: {
+      text: result.fix || result.name,
+    },
+    properties: {
+      checkKey: result.key,
+      category: result.category,
+      impact: result.impact,
+      passed: result.passed,
+      platform: result.platform || null,
+    },
+  };
+
+  if (result.file) {
+    sarifResult.locations = [{
+      physicalLocation: {
+        artifactLocation: {
+          uri: sanitizeUri(result.file),
+          uriBaseId: '%SRCROOT%',
+        },
+        region: result.line ? { startLine: result.line } : undefined,
+      },
+    }];
+  }
+
+  if (runRoot) {
+    sarifResult.properties.runRoot = sanitizeUri(runRoot);
+  }
+
+  return sarifResult;
+}
+
+function formatSarif(auditResult, options = {}) {
+  const failedResults = (auditResult.results || [])
+    .filter((result) => result.passed === false);
+
+  const rules = [];
+  const seenRuleIds = new Set();
+  for (const result of failedResults) {
+    const ruleId = result.id || result.key;
+    if (seenRuleIds.has(ruleId)) continue;
+    seenRuleIds.add(ruleId);
+    rules.push(buildRule(result));
+  }
+
+  return {
+    version: '2.1.0',
+    $schema: 'https://json.schemastore.org/sarif-2.1.0.json',
+    runs: [{
+      tool: {
+        driver: {
+          name: 'nerviq',
+          version,
+          informationUri: 'https://github.com/nerviq/nerviq',
+          rules,
+        },
+      },
+      automationDetails: {
+        id: auditResult.platform || 'claude',
+      },
+      properties: {
+        platform: auditResult.platform,
+        platformLabel: auditResult.platformLabel,
+        platformVersion: auditResult.platformVersion || null,
+        score: auditResult.score,
+        organicScore: auditResult.organicScore,
+        passed: auditResult.passed,
+        failed: auditResult.failed,
+        skipped: auditResult.skipped,
+        checkCount: auditResult.checkCount,
+      },
+      originalUriBaseIds: {
+        '%SRCROOT%': {
+          uri: sanitizeUri(options.dir || '.'),
+        },
+      },
+      results: failedResults.map((result) => buildSarifResult(result, options.dir || '.')),
+    }],
+  };
+}
+
+module.exports = {
+  formatSarif,
+};

package/src/freshness.js

@@ -4,8 +4,8 @@
  * Release gates, recurring probes, propagation checklists,
  * and staleness blocking for Claude Code surfaces.
  *
- * P0 sources from code.claude.com/docs and official Anthropic launch posts,
- * with propagation for CLAUDE.md, output style, and agent harness changes.
+ * P0 sources from code.claude.com/docs and official Anthropic launch posts,
+ * with propagation for CLAUDE.md, output style, and agent harness changes.
  */
 
 const { version } = require('../package.json');
@@ -56,46 +56,46 @@ const P0_SOURCES = [
     stalenessThresholdDays: 14,
     verifiedAt: '2026-04-07',
   },
-  {
-    key: 'claude-settings-docs',
-    label: 'Claude Code Settings Documentation',
-    url: 'https://code.claude.com/docs/en/settings',
-    stalenessThresholdDays: 30,
-    verifiedAt: '2026-04-07',
-  },
-  {
-    key: 'claude-output-styles-docs',
-    label: 'Claude Code Output Styles / Insights',
-    url: 'https://code.claude.com/docs/en/output-styles',
-    stalenessThresholdDays: 14,
-    verifiedAt: '2026-04-10',
-  },
-  {
-    key: 'claude-best-practices-docs',
-    label: 'Claude Code Best Practices / Auto Mode',
-    url: 'https://code.claude.com/docs/en/best-practices',
-    stalenessThresholdDays: 14,
-    verifiedAt: '2026-04-10',
-  },
-  {
-    key: 'claude-agent-sdk-docs',
-    label: 'Claude Agent SDK Overview',
-    url: 'https://code.claude.com/docs/en/agent-sdk/overview',
-    stalenessThresholdDays: 14,
-    verifiedAt: '2026-04-10',
-  },
-  {
-    key: 'claude-xcode-agent-sdk',
-    label: 'Anthropic Xcode Agent SDK Launch',
-    url: 'https://www.anthropic.com/news/apple-xcode-claude-agent-sdk',
-    stalenessThresholdDays: 30,
-    verifiedAt: '2026-04-10',
-  },
-  {
-    key: 'anthropic-changelog',
-    label: 'Claude Code Changelog',
-    url: 'https://code.claude.com/docs/en/changelog',
-    stalenessThresholdDays: 14,
+  {
+    key: 'claude-settings-docs',
+    label: 'Claude Code Settings Documentation',
+    url: 'https://code.claude.com/docs/en/settings',
+    stalenessThresholdDays: 30,
+    verifiedAt: '2026-04-07',
+  },
+  {
+    key: 'claude-output-styles-docs',
+    label: 'Claude Code Output Styles / Insights',
+    url: 'https://code.claude.com/docs/en/output-styles',
+    stalenessThresholdDays: 14,
+    verifiedAt: '2026-04-10',
+  },
+  {
+    key: 'claude-best-practices-docs',
+    label: 'Claude Code Best Practices / Auto Mode',
+    url: 'https://code.claude.com/docs/en/best-practices',
+    stalenessThresholdDays: 14,
+    verifiedAt: '2026-04-10',
+  },
+  {
+    key: 'claude-agent-sdk-docs',
+    label: 'Claude Agent SDK Overview',
+    url: 'https://code.claude.com/docs/en/agent-sdk/overview',
+    stalenessThresholdDays: 14,
+    verifiedAt: '2026-04-10',
+  },
+  {
+    key: 'claude-xcode-agent-sdk',
+    label: 'Anthropic Xcode Agent SDK Launch',
+    url: 'https://www.anthropic.com/news/apple-xcode-claude-agent-sdk',
+    stalenessThresholdDays: 30,
+    verifiedAt: '2026-04-10',
+  },
+  {
+    key: 'anthropic-changelog',
+    label: 'Claude Code Changelog',
+    url: 'https://code.claude.com/docs/en/changelog',
+    stalenessThresholdDays: 14,
     verifiedAt: '2026-04-07',
   },
 ];
@@ -127,38 +127,38 @@ const PROPAGATION_CHECKLIST = [
       'src/context.js — update mcpConfig parsing',
     ],
   },
-  {
-    trigger: 'Permissions model change (allow/deny lists, operator/user split)',
-    targets: [
-      'src/governance.js — update permissionProfiles',
-      'src/techniques.js — update permission checks',
-    ],
-  },
-  {
-    trigger: 'Output style / Insights change (system prompt layering, outputStyle storage, learning mode behavior)',
-    targets: [
-      'src/techniques.js — update Claude settings and instruction-surface checks that depend on system-prompt-adjacent behavior',
-      'src/setup.js — update Claude settings starter templates if outputStyle guidance changes',
-      'src/source-urls.js — refresh Claude feature source mappings when output style docs move or split',
-    ],
-  },
-  {
-    trigger: 'Best-practices or auto mode change (permission classifier, unattended mode, safety fallback behavior)',
-    targets: [
-      'src/governance.js — update permission mode caveats and policy guidance',
-      'src/techniques.js — update Claude trust/verification checks tied to auto mode or unattended workflows',
-      'src/source-urls.js — refresh Claude best-practice source mappings if guidance moves',
-    ],
-  },
-  {
-    trigger: 'Agent SDK / harness or native integration change (SDK surfaces, subagents, background tasks, Xcode bridge)',
-    targets: [
-      'src/techniques.js — update Claude modern-capability checks and cross-surface expectations',
-      'src/mcp-packs.js — revisit pack assumptions when native integrations change MCP usage',
-      'src/source-urls.js — refresh Claude source mappings for SDK and integration surfaces',
-    ],
-  },
-];
+  {
+    trigger: 'Permissions model change (allow/deny lists, operator/user split)',
+    targets: [
+      'src/governance.js — update permissionProfiles',
+      'src/techniques.js — update permission checks',
+    ],
+  },
+  {
+    trigger: 'Output style / Insights change (system prompt layering, outputStyle storage, learning mode behavior)',
+    targets: [
+      'src/techniques.js — update Claude settings and instruction-surface checks that depend on system-prompt-adjacent behavior',
+      'src/setup.js — update Claude settings starter templates if outputStyle guidance changes',
+      'src/source-urls.js — refresh Claude feature source mappings when output style docs move or split',
+    ],
+  },
+  {
+    trigger: 'Best-practices or auto mode change (permission classifier, unattended mode, safety fallback behavior)',
+    targets: [
+      'src/governance.js — update permission mode caveats and policy guidance',
+      'src/techniques.js — update Claude trust/verification checks tied to auto mode or unattended workflows',
+      'src/source-urls.js — refresh Claude best-practice source mappings if guidance moves',
+    ],
+  },
+  {
+    trigger: 'Agent SDK / harness or native integration change (SDK surfaces, subagents, background tasks, Xcode bridge)',
+    targets: [
+      'src/techniques.js — update Claude modern-capability checks and cross-surface expectations',
+      'src/mcp-packs.js — revisit pack assumptions when native integrations change MCP usage',
+      'src/source-urls.js — refresh Claude source mappings for SDK and integration surfaces',
+    ],
+  },
+];
 
 /**
  * Release gate: check if all P0 sources are within staleness threshold.