@nerviq/cli 1.25.0 → 1.26.0

package/README.md

@@ -234,8 +234,8 @@ All successful operational responses are wrapped in a JSON envelope:
 {
   "data": {},
   "meta": {
-    "version": "1.25.0",
-    "timestamp": "2026-04-15T10:00:00.000Z"
+    "version": "1.26.0",
+    "timestamp": "2026-04-15T14:00:00.000Z"
   }
 }
 ```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nerviq/cli",
-  "version": "1.25.0",
+  "version": "1.26.0",
   "description": "The intelligent nervous system for AI coding agents — 2,441 checks (8 platforms × ~300 governance rules), 10 languages, 62 domain packs. Audit, align, and amplify.",
   "main": "src/index.js",
   "bin": {

package/src/instruction-surfaces.js

@@ -6,21 +6,37 @@ const TEST_COMMAND_PATTERNS = [
   /\bpython\s+manage\.py\s+test\b/i,
   /\bdjango-admin\s+test\b/i,
   /\bpython\s+-m\s+unittest\b/i,
+  /\bpoetry\s+run\s+(?:pytest|test)\b/i,
+  /\buv\s+run\s+(?:pytest|test)\b/i,
+  /\bpdm\s+run\s+(?:pytest|test)\b/i,
+  /\bhatch\s+run\s+(?:test|pytest)\b/i,
+  /\brye\s+run\s+(?:test|pytest)\b/i,
+  /\btox(?:\s|$)/i,
+  /\bnox(?:\s|$)/i,
   /\bgo\s+test(?:\s|$)/i,
   /\bcargo\s+test\b/i,
-  /\bmake\s+test\b/i,
+  /\bmake\s+(?:test|check|ci)\b/i,
+  /\bjust\s+test\b/i,
   /\bmix\s+test\b/i,
   /\bbundle\s+exec\s+rspec\b/i,
   /\brspec\b/i,
   /\bphpunit\b/i,
   /\bdotnet\s+test(?:\s|$)/i,
   /\bflutter\s+test\b/i,
+  /\bfvm\s+flutter\s+test\b/i,
   /\bswift\s+test\b/i,
   /\bxcodebuild\b[^\n\r`]{0,200}\btest\b/i,
-  /\bgradlew?\s+test\b/i,
+  /\bfastlane\s+(?:test|scan)\b/i,
+  /\bxctest\b/i,
+  /\bgradlew?\s+(?:test|check|connectedAndroidTest)\b/i,
   /\bmvn(?:w)?\s+test\b/i,
   /\bplaywright\s+test\b/i,
   /\bcypress\s+run\b/i,
+  // pyproject.toml / setup.cfg tool configuration signals
+  /\[tool\.pytest\.ini_options\]/i,
+  /\[tool:pytest\]/i,
+  // Manifest / config signals that testing is wired up
+  /\bpytest\s*[=:]/i,
 ];
 
 const LINT_COMMAND_PATTERNS = [
@@ -33,6 +49,7 @@ const LINT_COMMAND_PATTERNS = [
   /\bpylint\b/i,
   /\bmypy\b/i,
   /\bpyright\b/i,
+  /\bpre-commit\s+run\b/i,
   /\bgo\s+vet\b/i,
   /\bgofmt\b/i,
   /\bgofumpt\b/i,
@@ -41,11 +58,19 @@ const LINT_COMMAND_PATTERNS = [
   /\bcargo\s+clippy\b/i,
   /\bflutter\s+analyze\b/i,
   /\bdart\s+analyze\b/i,
+  /\bdart\s+format\b/i,
   /\bswiftlint\b/i,
   /\bswift(?:-|\s+)format\b/i,
   /\bdotnet\s+format(?:\s|$)/i,
-  /\bgradlew?\s+lint\b/i,
+  /\bgradlew?\s+(?:lint|ktlintCheck|detekt|spotless(?:Check|Apply)?)\b/i,
   /\bmvn(?:w)?\s+(?:checkstyle:check|spotbugs:check|verify)\b/i,
+  // pyproject.toml / config signals
+  /\[tool\.ruff\]/i,
+  /\[tool\.black\]/i,
+  /\[tool\.mypy\]/i,
+  /\[tool\.pyright\]/i,
+  /\[tool\.flake8\]/i,
+  /\[tool\.pylint\b/i,
 ];
 
 const BUILD_COMMAND_PATTERNS = [
@@ -53,16 +78,20 @@ const BUILD_COMMAND_PATTERNS = [
   /\btsc(?:\s|$)/i,
   /\bgo\s+build(?:\s|$)/i,
   /\bcargo\s+(?:build|check)\b/i,
-  /\bmake\s+build\b/i,
+  /\bmake\s+(?:build|all)\b/i,
+  /\bjust\s+build\b/i,
   /\bdotnet\s+(?:build|publish)(?:\s|$)/i,
   /\bmsbuild\b/i,
   /\bflutter\s+build(?:\s|$)/i,
   /\bswift\s+build\b/i,
   /\bxcodebuild\b/i,
-  /\bgradlew?\s+(?:build|assemble)\b/i,
+  /\bgradlew?\s+(?:build|assemble|assembleDebug|assembleRelease)\b/i,
   /\bmvn(?:w)?\s+(?:compile|package|verify|install)\b/i,
   /\bpython\s+-m\s+build\b/i,
   /\bpoetry\s+build\b/i,
+  /\buv\s+build\b/i,
+  /\bhatch\s+build\b/i,
+  /\bpdm\s+build\b/i,
 ];
 
 function normalizePath(filePath) {
@@ -118,6 +147,33 @@ function buildSurfaceList(ctx, scope) {
   if (includeReadme) {
     addSurface(ctx, surfaces, seen, 'README.md');
     addSurface(ctx, surfaces, seen, 'CONTRIBUTING.md');
+    // CTO-07: framework-native verification surfaces. When a repo has
+    // `flutter test` in CONTRIBUTING.md, pytest configured in
+    // pyproject.toml, xcodebuild wired in a workflow, or gradle test in
+    // build.gradle, that is legitimate evidence of verification — an
+    // agent working in this repo can observe these files directly.
+    addSurface(ctx, surfaces, seen, 'pyproject.toml');
+    addSurface(ctx, surfaces, seen, 'setup.cfg');
+    addSurface(ctx, surfaces, seen, 'tox.ini');
+    addSurface(ctx, surfaces, seen, 'noxfile.py');
+    addSurface(ctx, surfaces, seen, 'Pipfile');
+    addSurface(ctx, surfaces, seen, 'Makefile');
+    addSurface(ctx, surfaces, seen, 'justfile');
+    addSurface(ctx, surfaces, seen, 'Justfile');
+    addSurface(ctx, surfaces, seen, 'Rakefile');
+    addSurface(ctx, surfaces, seen, 'pubspec.yaml');
+    addSurface(ctx, surfaces, seen, 'analysis_options.yaml');
+    addSurface(ctx, surfaces, seen, 'Package.swift');
+    addSurface(ctx, surfaces, seen, 'Podfile');
+    addSurface(ctx, surfaces, seen, 'Cartfile');
+    addSurface(ctx, surfaces, seen, 'fastlane/Fastfile');
+    addSurface(ctx, surfaces, seen, 'build.gradle');
+    addSurface(ctx, surfaces, seen, 'build.gradle.kts');
+    addSurface(ctx, surfaces, seen, 'settings.gradle');
+    addSurface(ctx, surfaces, seen, 'settings.gradle.kts');
+    addSurface(ctx, surfaces, seen, '.pre-commit-config.yaml');
+    addSurface(ctx, surfaces, seen, '.pre-commit-config.yml');
+    addDirSurfaces(ctx, surfaces, seen, '.github/workflows', /\.ya?ml$/i);
   }
 
   return surfaces;

package/src/techniques/shared.js

@@ -202,6 +202,106 @@ function isDotnetProject(ctx) {
   return ctx.__nerviqIsDotnet;
 }
 
+// ─── CTO-07 Framework-native verification signals ───────────────────────
+// Memoized on ctx. These are "this stack has verification wired up"
+// signals that augment documentation-surface detection.
+
+function hasIosXcodeProject(ctx) {
+  if (ctx.__nerviqHasIosXcode !== undefined) return ctx.__nerviqHasIosXcode;
+  ctx.__nerviqHasIosXcode =
+    hasCoreProjectFile(ctx, /\.xcodeproj\//i) ||
+    hasCoreProjectFile(ctx, /\.xcworkspace\//i) ||
+    hasCoreRootFile(ctx, /(^|\/)Package\.swift$/i);
+  return ctx.__nerviqHasIosXcode;
+}
+
+function hasAndroidGradle(ctx) {
+  if (ctx.__nerviqHasAndroidGradle !== undefined) return ctx.__nerviqHasAndroidGradle;
+  ctx.__nerviqHasAndroidGradle =
+    hasCoreRootFile(ctx, /(^|\/)build\.gradle(\.kts)?$/i) ||
+    hasCoreRootFile(ctx, /(^|\/)settings\.gradle(\.kts)?$/i);
+  return ctx.__nerviqHasAndroidGradle;
+}
+
+function hasFlutterProject(ctx) {
+  if (ctx.__nerviqHasFlutter !== undefined) return ctx.__nerviqHasFlutter;
+  const pubspec = ctx.fileContent('pubspec.yaml') || '';
+  ctx.__nerviqHasFlutter = /\bflutter:\s*\n/i.test(pubspec) || /\bsdk:\s*flutter\b/i.test(pubspec);
+  return ctx.__nerviqHasFlutter;
+}
+
+function _pyProjectText(ctx) {
+  return getPythonProjectText(ctx);
+}
+
+function hasPythonPoetry(ctx) {
+  if (ctx.__nerviqHasPoetry !== undefined) return ctx.__nerviqHasPoetry;
+  const text = _pyProjectText(ctx);
+  ctx.__nerviqHasPoetry = /\[tool\.poetry\]/i.test(text) || !!ctx.fileContent('poetry.lock');
+  return ctx.__nerviqHasPoetry;
+}
+
+function hasPythonUv(ctx) {
+  if (ctx.__nerviqHasUv !== undefined) return ctx.__nerviqHasUv;
+  const text = _pyProjectText(ctx);
+  ctx.__nerviqHasUv = /\[tool\.uv\]/i.test(text) || !!ctx.fileContent('uv.lock');
+  return ctx.__nerviqHasUv;
+}
+
+function hasPythonPdm(ctx) {
+  if (ctx.__nerviqHasPdm !== undefined) return ctx.__nerviqHasPdm;
+  const text = _pyProjectText(ctx);
+  ctx.__nerviqHasPdm = /\[tool\.pdm\b/i.test(text) || !!ctx.fileContent('pdm.lock');
+  return ctx.__nerviqHasPdm;
+}
+
+function hasPythonHatch(ctx) {
+  if (ctx.__nerviqHasHatch !== undefined) return ctx.__nerviqHasHatch;
+  const text = _pyProjectText(ctx);
+  ctx.__nerviqHasHatch = /\[tool\.hatch\b/i.test(text);
+  return ctx.__nerviqHasHatch;
+}
+
+function hasFastApiProject(ctx) {
+  if (ctx.__nerviqHasFastApi !== undefined) return ctx.__nerviqHasFastApi;
+  const text = _pyProjectText(ctx);
+  ctx.__nerviqHasFastApi = /\bfastapi\b/i.test(text);
+  return ctx.__nerviqHasFastApi;
+}
+
+const ML_DEP_PATTERN = /\b(pytorch|torch|tensorflow|keras|scikit-learn|sklearn|jax|transformers|datasets|huggingface|accelerate|xgboost|lightgbm)\b/i;
+
+function hasMlScaffolding(ctx) {
+  if (ctx.__nerviqHasMl !== undefined) return ctx.__nerviqHasMl;
+  const text = _pyProjectText(ctx);
+  if (ML_DEP_PATTERN.test(text)) {
+    ctx.__nerviqHasMl = true;
+    return true;
+  }
+  // Heuristic: notebooks/ or experiments/ dir with actual .ipynb files
+  const hasNotebooks = findProjectFiles(ctx, /\.ipynb$/i).length > 0;
+  ctx.__nerviqHasMl = hasNotebooks;
+  return ctx.__nerviqHasMl;
+}
+
+/**
+ * Checks whether a Python tool is actively configured in pyproject.toml /
+ * setup.cfg (e.g., `[tool.ruff]`, `[tool.pytest.ini_options]`,
+ * `[tool.mypy]`). When configured, any verification-surface check for that
+ * tool should pass: an agent working in this repo can run the tool.
+ */
+function hasConfiguredTooling(ctx, toolName) {
+  const text = _pyProjectText(ctx);
+  if (!text) return false;
+  const name = String(toolName || '').toLowerCase();
+  const sectionRe = new RegExp(`\\[tool\\.${name.replace(/[-_.]/g, '[-_.]')}(?:[.\\]]|\\s|$)`, 'i');
+  if (sectionRe.test(text)) return true;
+  if (name === 'pytest') {
+    return /\[tool\.pytest\.ini_options\]/i.test(text) || /\[tool:pytest\]/i.test(text);
+  }
+  return false;
+}
+
 /**
  * Map category names to their project detection function.
  * Used by the audit to skip entire categories when the stack isn't detected.
@@ -418,6 +518,16 @@ module.exports = {
   isPhpProject,
   isDotnetProject,
   STACK_CATEGORY_DETECTORS,
+  hasIosXcodeProject,
+  hasAndroidGradle,
+  hasFlutterProject,
+  hasPythonPoetry,
+  hasPythonUv,
+  hasPythonPdm,
+  hasPythonHatch,
+  hasFastApiProject,
+  hasMlScaffolding,
+  hasConfiguredTooling,
   getPythonFiles,
   getMainPythonFiles,
   getPythonProjectText,