@nerviq/cli 1.29.0 → 1.29.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +1527 -1493
- package/README.md +550 -538
- package/SECURITY.md +82 -82
- package/bin/cli.js +2562 -2558
- package/docs/api-reference.md +356 -356
- package/docs/audit-fix.md +109 -0
- package/docs/autofix.md +3 -62
- package/docs/getting-started.md +1 -1
- package/docs/index.html +592 -592
- package/docs/integration-contracts.md +287 -287
- package/docs/maintenance.md +128 -128
- package/docs/new-platform-guide.md +202 -202
- package/docs/release-process.md +63 -0
- package/docs/shallow-risk.md +244 -244
- package/docs/why-nerviq.md +82 -82
- package/package.json +67 -67
- package/src/aider/activity.js +226 -226
- package/src/aider/context.js +162 -162
- package/src/aider/freshness.js +123 -123
- package/src/aider/techniques.js +3465 -3465
- package/src/audit/layers.js +180 -180
- package/src/audit.js +1032 -1032
- package/src/benchmark.js +299 -299
- package/src/codex/activity.js +324 -324
- package/src/codex/freshness.js +142 -142
- package/src/codex/techniques.js +4895 -4895
- package/src/context.js +326 -326
- package/src/continuous-ops.js +11 -1
- package/src/convert.js +340 -340
- package/src/copilot/config-parser.js +280 -280
- package/src/copilot/context.js +218 -218
- package/src/copilot/freshness.js +177 -177
- package/src/copilot/patch.js +238 -238
- package/src/copilot/techniques.js +3578 -3578
- package/src/cursor/freshness.js +194 -194
- package/src/cursor/patch.js +243 -243
- package/src/cursor/techniques.js +3735 -3735
- package/src/doctor.js +201 -201
- package/src/fix-engine.js +511 -8
- package/src/formatters/csv.js +86 -86
- package/src/formatters/junit.js +123 -123
- package/src/formatters/markdown.js +164 -164
- package/src/formatters/otel.js +151 -151
- package/src/freshness.js +156 -156
- package/src/gemini/activity.js +402 -402
- package/src/gemini/context.js +290 -290
- package/src/gemini/freshness.js +183 -183
- package/src/gemini/patch.js +229 -229
- package/src/gemini/techniques.js +3811 -3811
- package/src/governance.js +533 -533
- package/src/harmony/audit.js +306 -306
- package/src/i18n.js +63 -63
- package/src/insights.js +119 -119
- package/src/integrations.js +134 -134
- package/src/locales/en.json +33 -33
- package/src/locales/es.json +33 -33
- package/src/migrate.js +354 -354
- package/src/opencode/activity.js +286 -286
- package/src/opencode/freshness.js +137 -137
- package/src/opencode/techniques.js +3450 -3450
- package/src/setup/analysis.js +12 -12
- package/src/setup.js +7 -6
- package/src/shallow-risk/index.js +56 -56
- package/src/shallow-risk/patterns/agent-config-cross-platform-drift.js +50 -50
- package/src/shallow-risk/patterns/agent-config-dangerous-autoapprove.js +46 -46
- package/src/shallow-risk/patterns/agent-config-deprecated-keys.js +46 -46
- package/src/shallow-risk/patterns/agent-config-missing-file.js +317 -317
- package/src/shallow-risk/patterns/agent-config-secret-literal.js +49 -49
- package/src/shallow-risk/patterns/agent-config-stack-contradiction.js +34 -34
- package/src/shallow-risk/patterns/hook-script-missing.js +70 -70
- package/src/shallow-risk/patterns/mcp-server-no-allowlist.js +52 -52
- package/src/shallow-risk/shared.js +648 -648
- package/src/source-urls.js +295 -295
- package/src/state-paths.js +85 -85
- package/src/supplemental-checks.js +805 -805
- package/src/telemetry.js +160 -160
- package/src/windsurf/context.js +359 -359
- package/src/windsurf/freshness.js +194 -194
- package/src/windsurf/patch.js +231 -231
- package/src/windsurf/techniques.js +3779 -3779
package/src/codex/freshness.js
CHANGED
|
@@ -1,24 +1,24 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Codex Freshness Operationalization — CP-12
|
|
3
|
-
*
|
|
4
|
-
* Release gates, recurring probes, propagation checklists,
|
|
5
|
-
* and staleness blocking for Codex surfaces.
|
|
6
|
-
*/
|
|
7
|
-
|
|
8
|
-
const { version } = require('../../package.json');
|
|
9
|
-
|
|
10
|
-
/**
|
|
1
|
+
/**
|
|
2
|
+
* Codex Freshness Operationalization — CP-12
|
|
3
|
+
*
|
|
4
|
+
* Release gates, recurring probes, propagation checklists,
|
|
5
|
+
* and staleness blocking for Codex surfaces.
|
|
6
|
+
*/
|
|
7
|
+
|
|
8
|
+
const { version } = require('../../package.json');
|
|
9
|
+
|
|
10
|
+
/**
|
|
11
11
|
* P0 sources that must be fresh before any Codex release claim.
|
|
12
12
|
* Each source has a staleness threshold in days.
|
|
13
13
|
*/
|
|
14
14
|
const P0_SOURCES = [
|
|
15
|
-
{
|
|
16
|
-
key: 'codex-cli-docs',
|
|
17
|
-
label: 'Codex CLI Official Docs',
|
|
18
|
-
url: 'https://developers.openai.com/codex/cli',
|
|
19
|
-
stalenessThresholdDays: 30,
|
|
20
|
-
verifiedAt: '2026-04-07',
|
|
21
|
-
},
|
|
15
|
+
{
|
|
16
|
+
key: 'codex-cli-docs',
|
|
17
|
+
label: 'Codex CLI Official Docs',
|
|
18
|
+
url: 'https://developers.openai.com/codex/cli',
|
|
19
|
+
stalenessThresholdDays: 30,
|
|
20
|
+
verifiedAt: '2026-04-07',
|
|
21
|
+
},
|
|
22
22
|
{
|
|
23
23
|
key: 'codex-config-reference',
|
|
24
24
|
label: 'Codex Config Reference',
|
|
@@ -66,52 +66,52 @@ const P0_SOURCES = [
|
|
|
66
66
|
label: 'Codex GitHub Action',
|
|
67
67
|
url: 'https://github.com/openai/codex-action',
|
|
68
68
|
stalenessThresholdDays: 30,
|
|
69
|
-
verifiedAt: '2026-04-07',
|
|
70
|
-
},
|
|
71
|
-
{
|
|
72
|
-
key: 'codex-changelog',
|
|
73
|
-
label: 'Codex CLI Changelog',
|
|
74
|
-
url: 'https://github.com/openai/codex/releases',
|
|
75
|
-
stalenessThresholdDays: 14,
|
|
76
|
-
verifiedAt: '2026-04-07',
|
|
77
|
-
},
|
|
78
|
-
];
|
|
79
|
-
|
|
80
|
-
/**
|
|
81
|
-
* Propagation checklist: when a Codex source changes, these must update.
|
|
82
|
-
*/
|
|
83
|
-
const PROPAGATION_CHECKLIST = [
|
|
84
|
-
{
|
|
85
|
-
trigger: 'Codex CLI release with config changes',
|
|
86
|
-
targets: [
|
|
87
|
-
'src/codex/techniques.js — update LEGACY_CONFIG_PATTERNS if keys renamed/removed',
|
|
88
|
-
'src/codex/config-parser.js — update validation rules',
|
|
89
|
-
'src/codex/governance.js — update caveats if behavior changes',
|
|
90
|
-
'test/codex-check-matrix.js — update check expectations',
|
|
91
|
-
],
|
|
92
|
-
},
|
|
93
|
-
{
|
|
94
|
-
trigger: 'New Codex hook event type added',
|
|
95
|
-
targets: [
|
|
96
|
-
'src/codex/techniques.js — add to SUPPORTED_HOOK_EVENTS',
|
|
97
|
-
'src/codex/governance.js — add to CODEX_HOOK_REGISTRY',
|
|
98
|
-
'src/codex/setup.js — update hooks starter template',
|
|
99
|
-
],
|
|
100
|
-
},
|
|
101
|
-
{
|
|
102
|
-
trigger: 'New Codex MCP transport or field',
|
|
103
|
-
targets: [
|
|
104
|
-
'src/codex/mcp-packs.js — update pack TOML projections',
|
|
105
|
-
'src/codex/techniques.js — update MCP checks',
|
|
106
|
-
],
|
|
107
|
-
},
|
|
108
|
-
{
|
|
109
|
-
trigger: 'Codex domain pack definitions change',
|
|
110
|
-
targets: [
|
|
111
|
-
'src/codex/domain-packs.js — update pack registry',
|
|
112
|
-
'src/codex/governance.js — governance export picks up changes',
|
|
113
|
-
],
|
|
114
|
-
},
|
|
69
|
+
verifiedAt: '2026-04-07',
|
|
70
|
+
},
|
|
71
|
+
{
|
|
72
|
+
key: 'codex-changelog',
|
|
73
|
+
label: 'Codex CLI Changelog',
|
|
74
|
+
url: 'https://github.com/openai/codex/releases',
|
|
75
|
+
stalenessThresholdDays: 14,
|
|
76
|
+
verifiedAt: '2026-04-07',
|
|
77
|
+
},
|
|
78
|
+
];
|
|
79
|
+
|
|
80
|
+
/**
|
|
81
|
+
* Propagation checklist: when a Codex source changes, these must update.
|
|
82
|
+
*/
|
|
83
|
+
const PROPAGATION_CHECKLIST = [
|
|
84
|
+
{
|
|
85
|
+
trigger: 'Codex CLI release with config changes',
|
|
86
|
+
targets: [
|
|
87
|
+
'src/codex/techniques.js — update LEGACY_CONFIG_PATTERNS if keys renamed/removed',
|
|
88
|
+
'src/codex/config-parser.js — update validation rules',
|
|
89
|
+
'src/codex/governance.js — update caveats if behavior changes',
|
|
90
|
+
'test/codex-check-matrix.js — update check expectations',
|
|
91
|
+
],
|
|
92
|
+
},
|
|
93
|
+
{
|
|
94
|
+
trigger: 'New Codex hook event type added',
|
|
95
|
+
targets: [
|
|
96
|
+
'src/codex/techniques.js — add to SUPPORTED_HOOK_EVENTS',
|
|
97
|
+
'src/codex/governance.js — add to CODEX_HOOK_REGISTRY',
|
|
98
|
+
'src/codex/setup.js — update hooks starter template',
|
|
99
|
+
],
|
|
100
|
+
},
|
|
101
|
+
{
|
|
102
|
+
trigger: 'New Codex MCP transport or field',
|
|
103
|
+
targets: [
|
|
104
|
+
'src/codex/mcp-packs.js — update pack TOML projections',
|
|
105
|
+
'src/codex/techniques.js — update MCP checks',
|
|
106
|
+
],
|
|
107
|
+
},
|
|
108
|
+
{
|
|
109
|
+
trigger: 'Codex domain pack definitions change',
|
|
110
|
+
targets: [
|
|
111
|
+
'src/codex/domain-packs.js — update pack registry',
|
|
112
|
+
'src/codex/governance.js — governance export picks up changes',
|
|
113
|
+
],
|
|
114
|
+
},
|
|
115
115
|
{
|
|
116
116
|
trigger: 'New check category added',
|
|
117
117
|
targets: [
|
|
@@ -145,82 +145,82 @@ const PROPAGATION_CHECKLIST = [
|
|
|
145
145
|
],
|
|
146
146
|
},
|
|
147
147
|
];
|
|
148
|
-
|
|
149
|
-
/**
|
|
150
|
-
* Release gate: check if all P0 sources are within staleness threshold.
|
|
151
|
-
* Returns { ready, stale, fresh } arrays.
|
|
152
|
-
*/
|
|
153
|
-
function checkReleaseGate(sourceVerifications = {}) {
|
|
154
|
-
const now = new Date();
|
|
155
|
-
const results = P0_SOURCES.map(source => {
|
|
156
|
-
const verifiedAt = sourceVerifications[source.key]
|
|
157
|
-
? new Date(sourceVerifications[source.key])
|
|
158
|
-
: source.verifiedAt ? new Date(source.verifiedAt) : null;
|
|
159
|
-
|
|
160
|
-
if (!verifiedAt) {
|
|
161
|
-
return { ...source, status: 'unverified', daysStale: null };
|
|
162
|
-
}
|
|
163
|
-
|
|
164
|
-
const daysSince = Math.floor((now - verifiedAt) / (1000 * 60 * 60 * 24));
|
|
165
|
-
const isStale = daysSince > source.stalenessThresholdDays;
|
|
166
|
-
|
|
167
|
-
return {
|
|
168
|
-
...source,
|
|
169
|
-
verifiedAt: verifiedAt.toISOString(),
|
|
170
|
-
daysStale: daysSince,
|
|
171
|
-
status: isStale ? 'stale' : 'fresh',
|
|
172
|
-
};
|
|
173
|
-
});
|
|
174
|
-
|
|
175
|
-
return {
|
|
176
|
-
ready: results.every(r => r.status === 'fresh'),
|
|
177
|
-
stale: results.filter(r => r.status === 'stale' || r.status === 'unverified'),
|
|
178
|
-
fresh: results.filter(r => r.status === 'fresh'),
|
|
179
|
-
results,
|
|
180
|
-
};
|
|
181
|
-
}
|
|
182
|
-
|
|
183
|
-
/**
|
|
184
|
-
* Format the release gate results for display.
|
|
185
|
-
*/
|
|
186
|
-
function formatReleaseGate(gateResult) {
|
|
187
|
-
const lines = [
|
|
188
|
-
`Codex Freshness Gate (nerviq v${version})`,
|
|
189
|
-
'═══════════════════════════════════════',
|
|
190
|
-
'',
|
|
191
|
-
`Status: ${gateResult.ready ? 'READY' : 'BLOCKED'}`,
|
|
192
|
-
`Fresh: ${gateResult.fresh.length}/${gateResult.results.length}`,
|
|
193
|
-
'',
|
|
194
|
-
];
|
|
195
|
-
|
|
196
|
-
for (const result of gateResult.results) {
|
|
197
|
-
const icon = result.status === 'fresh' ? '✓' : result.status === 'stale' ? '✗' : '?';
|
|
198
|
-
const age = result.daysStale !== null ? ` (${result.daysStale}d ago)` : ' (unverified)';
|
|
199
|
-
lines.push(` ${icon} ${result.label}${age} — threshold: ${result.stalenessThresholdDays}d`);
|
|
200
|
-
}
|
|
201
|
-
|
|
202
|
-
if (!gateResult.ready) {
|
|
203
|
-
lines.push('');
|
|
204
|
-
lines.push('Action required: verify stale/unverified sources before claiming release freshness.');
|
|
205
|
-
}
|
|
206
|
-
|
|
207
|
-
return lines.join('\n');
|
|
208
|
-
}
|
|
209
|
-
|
|
210
|
-
/**
|
|
211
|
-
* Get the propagation checklist for a given trigger.
|
|
212
|
-
*/
|
|
213
|
-
function getPropagationTargets(triggerKeyword) {
|
|
214
|
-
const keyword = triggerKeyword.toLowerCase();
|
|
215
|
-
return PROPAGATION_CHECKLIST.filter(item =>
|
|
216
|
-
item.trigger.toLowerCase().includes(keyword)
|
|
217
|
-
);
|
|
218
|
-
}
|
|
219
|
-
|
|
220
|
-
module.exports = {
|
|
221
|
-
P0_SOURCES,
|
|
222
|
-
PROPAGATION_CHECKLIST,
|
|
223
|
-
checkReleaseGate,
|
|
224
|
-
formatReleaseGate,
|
|
225
|
-
getPropagationTargets,
|
|
226
|
-
};
|
|
148
|
+
|
|
149
|
+
/**
|
|
150
|
+
* Release gate: check if all P0 sources are within staleness threshold.
|
|
151
|
+
* Returns { ready, stale, fresh } arrays.
|
|
152
|
+
*/
|
|
153
|
+
function checkReleaseGate(sourceVerifications = {}) {
|
|
154
|
+
const now = new Date();
|
|
155
|
+
const results = P0_SOURCES.map(source => {
|
|
156
|
+
const verifiedAt = sourceVerifications[source.key]
|
|
157
|
+
? new Date(sourceVerifications[source.key])
|
|
158
|
+
: source.verifiedAt ? new Date(source.verifiedAt) : null;
|
|
159
|
+
|
|
160
|
+
if (!verifiedAt) {
|
|
161
|
+
return { ...source, status: 'unverified', daysStale: null };
|
|
162
|
+
}
|
|
163
|
+
|
|
164
|
+
const daysSince = Math.floor((now - verifiedAt) / (1000 * 60 * 60 * 24));
|
|
165
|
+
const isStale = daysSince > source.stalenessThresholdDays;
|
|
166
|
+
|
|
167
|
+
return {
|
|
168
|
+
...source,
|
|
169
|
+
verifiedAt: verifiedAt.toISOString(),
|
|
170
|
+
daysStale: daysSince,
|
|
171
|
+
status: isStale ? 'stale' : 'fresh',
|
|
172
|
+
};
|
|
173
|
+
});
|
|
174
|
+
|
|
175
|
+
return {
|
|
176
|
+
ready: results.every(r => r.status === 'fresh'),
|
|
177
|
+
stale: results.filter(r => r.status === 'stale' || r.status === 'unverified'),
|
|
178
|
+
fresh: results.filter(r => r.status === 'fresh'),
|
|
179
|
+
results,
|
|
180
|
+
};
|
|
181
|
+
}
|
|
182
|
+
|
|
183
|
+
/**
|
|
184
|
+
* Format the release gate results for display.
|
|
185
|
+
*/
|
|
186
|
+
function formatReleaseGate(gateResult) {
|
|
187
|
+
const lines = [
|
|
188
|
+
`Codex Freshness Gate (nerviq v${version})`,
|
|
189
|
+
'═══════════════════════════════════════',
|
|
190
|
+
'',
|
|
191
|
+
`Status: ${gateResult.ready ? 'READY' : 'BLOCKED'}`,
|
|
192
|
+
`Fresh: ${gateResult.fresh.length}/${gateResult.results.length}`,
|
|
193
|
+
'',
|
|
194
|
+
];
|
|
195
|
+
|
|
196
|
+
for (const result of gateResult.results) {
|
|
197
|
+
const icon = result.status === 'fresh' ? '✓' : result.status === 'stale' ? '✗' : '?';
|
|
198
|
+
const age = result.daysStale !== null ? ` (${result.daysStale}d ago)` : ' (unverified)';
|
|
199
|
+
lines.push(` ${icon} ${result.label}${age} — threshold: ${result.stalenessThresholdDays}d`);
|
|
200
|
+
}
|
|
201
|
+
|
|
202
|
+
if (!gateResult.ready) {
|
|
203
|
+
lines.push('');
|
|
204
|
+
lines.push('Action required: verify stale/unverified sources before claiming release freshness.');
|
|
205
|
+
}
|
|
206
|
+
|
|
207
|
+
return lines.join('\n');
|
|
208
|
+
}
|
|
209
|
+
|
|
210
|
+
/**
|
|
211
|
+
* Get the propagation checklist for a given trigger.
|
|
212
|
+
*/
|
|
213
|
+
function getPropagationTargets(triggerKeyword) {
|
|
214
|
+
const keyword = triggerKeyword.toLowerCase();
|
|
215
|
+
return PROPAGATION_CHECKLIST.filter(item =>
|
|
216
|
+
item.trigger.toLowerCase().includes(keyword)
|
|
217
|
+
);
|
|
218
|
+
}
|
|
219
|
+
|
|
220
|
+
module.exports = {
|
|
221
|
+
P0_SOURCES,
|
|
222
|
+
PROPAGATION_CHECKLIST,
|
|
223
|
+
checkReleaseGate,
|
|
224
|
+
formatReleaseGate,
|
|
225
|
+
getPropagationTargets,
|
|
226
|
+
};
|