@nerviq/cli 1.29.0 → 1.30.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (93) hide show
  1. package/CHANGELOG.md +1764 -1493
  2. package/README.md +568 -538
  3. package/SECURITY.md +78 -82
  4. package/bin/cli.js +2838 -2558
  5. package/docs/api-reference.md +356 -356
  6. package/docs/audit-fix.md +109 -0
  7. package/docs/autofix.md +3 -62
  8. package/docs/getting-started.md +1 -1
  9. package/docs/index.html +592 -592
  10. package/docs/integration-contracts.md +287 -287
  11. package/docs/maintenance.md +128 -128
  12. package/docs/new-platform-guide.md +202 -202
  13. package/docs/release-process.md +63 -0
  14. package/docs/shallow-risk.md +244 -244
  15. package/docs/why-nerviq.md +82 -82
  16. package/package.json +75 -67
  17. package/sdk/README.md +12 -3
  18. package/sdk/examples/langchain-integration.md +128 -0
  19. package/sdk/examples/self-governing-agent.js +135 -0
  20. package/sdk/index.d.ts +115 -0
  21. package/sdk/index.js +94 -0
  22. package/sdk/package.json +11 -0
  23. package/src/activity.js +13 -0
  24. package/src/aider/activity.js +226 -226
  25. package/src/aider/context.js +162 -162
  26. package/src/aider/freshness.js +123 -123
  27. package/src/aider/techniques.js +3465 -3465
  28. package/src/audit/layers.js +180 -180
  29. package/src/audit.js +1133 -1032
  30. package/src/auto-suggest.js +9 -2
  31. package/src/behavioral-drift.js +37 -2
  32. package/src/benchmark.js +299 -299
  33. package/src/codex/activity.js +324 -324
  34. package/src/codex/freshness.js +149 -142
  35. package/src/codex/techniques.js +4895 -4895
  36. package/src/context.js +326 -326
  37. package/src/continuous-ops.js +11 -1
  38. package/src/convert.js +340 -340
  39. package/src/copilot/config-parser.js +280 -280
  40. package/src/copilot/context.js +218 -218
  41. package/src/copilot/freshness.js +184 -177
  42. package/src/copilot/patch.js +238 -238
  43. package/src/copilot/techniques.js +3578 -3578
  44. package/src/cursor/freshness.js +194 -194
  45. package/src/cursor/patch.js +243 -243
  46. package/src/cursor/techniques.js +3735 -3735
  47. package/src/doctor.js +201 -201
  48. package/src/fix-engine.js +511 -8
  49. package/src/formatters/csv.js +86 -86
  50. package/src/formatters/junit.js +123 -123
  51. package/src/formatters/markdown.js +164 -164
  52. package/src/formatters/otel.js +151 -151
  53. package/src/freshness.js +163 -156
  54. package/src/gemini/activity.js +402 -402
  55. package/src/gemini/context.js +290 -290
  56. package/src/gemini/freshness.js +188 -188
  57. package/src/gemini/patch.js +229 -229
  58. package/src/gemini/techniques.js +3811 -3811
  59. package/src/governance.js +533 -533
  60. package/src/harmony/audit.js +306 -306
  61. package/src/i18n.js +63 -63
  62. package/src/insights.js +119 -119
  63. package/src/integrations.js +134 -134
  64. package/src/locales/en.json +33 -33
  65. package/src/locales/es.json +33 -33
  66. package/src/migrate.js +354 -354
  67. package/src/opencode/activity.js +286 -286
  68. package/src/opencode/freshness.js +137 -137
  69. package/src/opencode/techniques.js +3450 -3450
  70. package/src/safe-glyph.js +97 -0
  71. package/src/setup/analysis.js +12 -12
  72. package/src/setup.js +13 -6
  73. package/src/shallow-risk/index.js +113 -56
  74. package/src/shallow-risk/patterns/agent-config-cross-platform-drift.js +51 -50
  75. package/src/shallow-risk/patterns/agent-config-dangerous-autoapprove.js +47 -46
  76. package/src/shallow-risk/patterns/agent-config-deprecated-keys.js +47 -46
  77. package/src/shallow-risk/patterns/agent-config-framework-version-mismatch.js +138 -0
  78. package/src/shallow-risk/patterns/agent-config-missing-file.js +318 -317
  79. package/src/shallow-risk/patterns/agent-config-script-not-in-package-json.js +108 -0
  80. package/src/shallow-risk/patterns/agent-config-secret-literal.js +52 -49
  81. package/src/shallow-risk/patterns/agent-config-stack-contradiction.js +35 -34
  82. package/src/shallow-risk/patterns/hook-script-missing.js +71 -70
  83. package/src/shallow-risk/patterns/mcp-server-no-allowlist.js +53 -52
  84. package/src/shallow-risk/shared.js +653 -648
  85. package/src/source-urls.js +295 -295
  86. package/src/state-paths.js +85 -85
  87. package/src/supplemental-checks.js +805 -805
  88. package/src/telemetry.js +160 -160
  89. package/src/watch.js +46 -0
  90. package/src/windsurf/context.js +359 -359
  91. package/src/windsurf/freshness.js +194 -194
  92. package/src/windsurf/patch.js +231 -231
  93. package/src/windsurf/techniques.js +3779 -3779
@@ -1,162 +1,162 @@
1
- /**
2
- * Aider Project Context
3
- *
4
- * Aider is a git-first CLI tool. Key surfaces:
5
- * - .aider.conf.yml (project-level YAML config)
6
- * - .aider.model.settings.yml (model role configuration)
7
- * - .env (API keys, model overrides)
8
- * - Convention files (passed explicitly via --read or --convention)
9
- * - .gitignore (must include .aider* artifacts)
10
- * - Git repo (Aider's ONLY safety mechanism — commits before changes)
11
- *
12
- * 4-level config precedence: env vars > CLI args > .aider.conf.yml > defaults
13
- */
14
-
15
- const fs = require('fs');
16
- const path = require('path');
17
- const { spawnSync } = require('child_process');
18
- const { ProjectContext } = require('../context');
19
- const { tryParseYaml, getValueByKey, parseDotEnv } = require('./config-parser');
20
-
21
- let aiderVersionCache = null;
22
-
23
- function detectAiderVersion() {
24
- if (aiderVersionCache !== null) {
25
- return aiderVersionCache;
26
- }
27
-
28
- try {
29
- const result = spawnSync('aider', ['--version'], { encoding: 'utf8' });
30
- const output = `${result.stdout || ''} ${result.stderr || ''}`.trim();
31
- const match = output.match(/aider\s+v?([^\s]+)/i);
32
- aiderVersionCache = match ? match[1] : (output || null);
33
- return aiderVersionCache;
34
- } catch {
35
- aiderVersionCache = null;
36
- return null;
37
- }
38
- }
39
-
40
- class AiderProjectContext extends ProjectContext {
41
- configContent() {
42
- // Aider accepts both .yml and .yaml extensions for the project config
43
- return this.fileContent('.aider.conf.yml') || this.fileContent('.aider.conf.yaml');
44
- }
45
-
46
- modelSettingsContent() {
47
- return this.fileContent('.aider.model.settings.yml');
48
- }
49
-
50
- envContent() {
51
- return this.fileContent('.env');
52
- }
53
-
54
- parsedConfig() {
55
- const content = this.configContent();
56
- if (!content) {
57
- return { ok: false, data: null, error: 'missing .aider.conf.yml', source: '.aider.conf.yml' };
58
- }
59
- const parsed = tryParseYaml(content);
60
- return { ...parsed, source: '.aider.conf.yml' };
61
- }
62
-
63
- parsedModelSettings() {
64
- const content = this.modelSettingsContent();
65
- if (!content) {
66
- return { ok: false, data: null, error: 'missing .aider.model.settings.yml', source: '.aider.model.settings.yml' };
67
- }
68
- const parsed = tryParseYaml(content);
69
- return { ...parsed, source: '.aider.model.settings.yml' };
70
- }
71
-
72
- parsedEnv() {
73
- const content = this.envContent();
74
- if (!content) return {};
75
- return parseDotEnv(content);
76
- }
77
-
78
- configValue(key) {
79
- const parsed = this.parsedConfig();
80
- if (parsed.ok) {
81
- const value = getValueByKey(parsed.data, key);
82
- if (value !== undefined) return value;
83
- }
84
- return undefined;
85
- }
86
-
87
- conventionFiles() {
88
- // Aider convention files are explicitly listed in config or CLI
89
- const readFiles = this.configValue('read') || [];
90
- const conventionFiles = Array.isArray(readFiles) ? readFiles : [readFiles];
91
-
92
- // Also check for common convention file names
93
- const commonNames = ['CONVENTIONS.md', 'CODING_CONVENTIONS.md', '.aider.conventions.md', 'STYLE.md'];
94
- for (const name of commonNames) {
95
- if (this.fileContent(name) && !conventionFiles.includes(name)) {
96
- conventionFiles.push(name);
97
- }
98
- }
99
-
100
- return conventionFiles.filter(Boolean);
101
- }
102
-
103
- gitignoreContent() {
104
- return this.fileContent('.gitignore');
105
- }
106
-
107
- hasGitRepo() {
108
- try {
109
- return fs.existsSync(path.join(this.dir, '.git'));
110
- } catch {
111
- return false;
112
- }
113
- }
114
-
115
- gitStatus() {
116
- try {
117
- const result = spawnSync('git', ['status', '--porcelain'], {
118
- cwd: this.dir,
119
- encoding: 'utf8',
120
- });
121
- return (result.stdout || '').trim();
122
- } catch {
123
- return null;
124
- }
125
- }
126
-
127
- workflowFiles() {
128
- return this.dirFiles('.github/workflows')
129
- .filter(file => /\.ya?ml$/i.test(file))
130
- .map(file => path.join('.github', 'workflows', file).replace(/\\/g, '/'));
131
- }
132
-
133
- /** Aider model roles: main (coding), editor (applying), weak (commit messages) */
134
- modelRoles() {
135
- const config = this.parsedConfig();
136
- const data = config.ok ? config.data : {};
137
- return {
138
- main: data.model || data['main-model'] || null,
139
- editor: data['editor-model'] || null,
140
- weak: data['weak-model'] || null,
141
- architect: data.architect || false,
142
- };
143
- }
144
-
145
- static isAiderRepo(dir) {
146
- try {
147
- return fs.existsSync(path.join(dir, '.aider.conf.yml')) ||
148
- fs.existsSync(path.join(dir, '.aider.conf.yaml')) ||
149
- fs.existsSync(path.join(dir, '.aider.model.settings.yml')) ||
150
- fs.existsSync(path.join(dir, '.aider.model.settings.yaml')) ||
151
- fs.existsSync(path.join(dir, '.aider.tags.cache.v3')) ||
152
- fs.existsSync(path.join(dir, '.aiderignore'));
153
- } catch {
154
- return false;
155
- }
156
- }
157
- }
158
-
159
- module.exports = {
160
- AiderProjectContext,
161
- detectAiderVersion,
162
- };
1
+ /**
2
+ * Aider Project Context
3
+ *
4
+ * Aider is a git-first CLI tool. Key surfaces:
5
+ * - .aider.conf.yml (project-level YAML config)
6
+ * - .aider.model.settings.yml (model role configuration)
7
+ * - .env (API keys, model overrides)
8
+ * - Convention files (passed explicitly via --read or --convention)
9
+ * - .gitignore (must include .aider* artifacts)
10
+ * - Git repo (Aider's ONLY safety mechanism — commits before changes)
11
+ *
12
+ * 4-level config precedence: env vars > CLI args > .aider.conf.yml > defaults
13
+ */
14
+
15
+ const fs = require('fs');
16
+ const path = require('path');
17
+ const { spawnSync } = require('child_process');
18
+ const { ProjectContext } = require('../context');
19
+ const { tryParseYaml, getValueByKey, parseDotEnv } = require('./config-parser');
20
+
21
+ let aiderVersionCache = null;
22
+
23
+ function detectAiderVersion() {
24
+ if (aiderVersionCache !== null) {
25
+ return aiderVersionCache;
26
+ }
27
+
28
+ try {
29
+ const result = spawnSync('aider', ['--version'], { encoding: 'utf8' });
30
+ const output = `${result.stdout || ''} ${result.stderr || ''}`.trim();
31
+ const match = output.match(/aider\s+v?([^\s]+)/i);
32
+ aiderVersionCache = match ? match[1] : (output || null);
33
+ return aiderVersionCache;
34
+ } catch {
35
+ aiderVersionCache = null;
36
+ return null;
37
+ }
38
+ }
39
+
40
+ class AiderProjectContext extends ProjectContext {
41
+ configContent() {
42
+ // Aider accepts both .yml and .yaml extensions for the project config
43
+ return this.fileContent('.aider.conf.yml') || this.fileContent('.aider.conf.yaml');
44
+ }
45
+
46
+ modelSettingsContent() {
47
+ return this.fileContent('.aider.model.settings.yml');
48
+ }
49
+
50
+ envContent() {
51
+ return this.fileContent('.env');
52
+ }
53
+
54
+ parsedConfig() {
55
+ const content = this.configContent();
56
+ if (!content) {
57
+ return { ok: false, data: null, error: 'missing .aider.conf.yml', source: '.aider.conf.yml' };
58
+ }
59
+ const parsed = tryParseYaml(content);
60
+ return { ...parsed, source: '.aider.conf.yml' };
61
+ }
62
+
63
+ parsedModelSettings() {
64
+ const content = this.modelSettingsContent();
65
+ if (!content) {
66
+ return { ok: false, data: null, error: 'missing .aider.model.settings.yml', source: '.aider.model.settings.yml' };
67
+ }
68
+ const parsed = tryParseYaml(content);
69
+ return { ...parsed, source: '.aider.model.settings.yml' };
70
+ }
71
+
72
+ parsedEnv() {
73
+ const content = this.envContent();
74
+ if (!content) return {};
75
+ return parseDotEnv(content);
76
+ }
77
+
78
+ configValue(key) {
79
+ const parsed = this.parsedConfig();
80
+ if (parsed.ok) {
81
+ const value = getValueByKey(parsed.data, key);
82
+ if (value !== undefined) return value;
83
+ }
84
+ return undefined;
85
+ }
86
+
87
+ conventionFiles() {
88
+ // Aider convention files are explicitly listed in config or CLI
89
+ const readFiles = this.configValue('read') || [];
90
+ const conventionFiles = Array.isArray(readFiles) ? readFiles : [readFiles];
91
+
92
+ // Also check for common convention file names
93
+ const commonNames = ['CONVENTIONS.md', 'CODING_CONVENTIONS.md', '.aider.conventions.md', 'STYLE.md'];
94
+ for (const name of commonNames) {
95
+ if (this.fileContent(name) && !conventionFiles.includes(name)) {
96
+ conventionFiles.push(name);
97
+ }
98
+ }
99
+
100
+ return conventionFiles.filter(Boolean);
101
+ }
102
+
103
+ gitignoreContent() {
104
+ return this.fileContent('.gitignore');
105
+ }
106
+
107
+ hasGitRepo() {
108
+ try {
109
+ return fs.existsSync(path.join(this.dir, '.git'));
110
+ } catch {
111
+ return false;
112
+ }
113
+ }
114
+
115
+ gitStatus() {
116
+ try {
117
+ const result = spawnSync('git', ['status', '--porcelain'], {
118
+ cwd: this.dir,
119
+ encoding: 'utf8',
120
+ });
121
+ return (result.stdout || '').trim();
122
+ } catch {
123
+ return null;
124
+ }
125
+ }
126
+
127
+ workflowFiles() {
128
+ return this.dirFiles('.github/workflows')
129
+ .filter(file => /\.ya?ml$/i.test(file))
130
+ .map(file => path.join('.github', 'workflows', file).replace(/\\/g, '/'));
131
+ }
132
+
133
+ /** Aider model roles: main (coding), editor (applying), weak (commit messages) */
134
+ modelRoles() {
135
+ const config = this.parsedConfig();
136
+ const data = config.ok ? config.data : {};
137
+ return {
138
+ main: data.model || data['main-model'] || null,
139
+ editor: data['editor-model'] || null,
140
+ weak: data['weak-model'] || null,
141
+ architect: data.architect || false,
142
+ };
143
+ }
144
+
145
+ static isAiderRepo(dir) {
146
+ try {
147
+ return fs.existsSync(path.join(dir, '.aider.conf.yml')) ||
148
+ fs.existsSync(path.join(dir, '.aider.conf.yaml')) ||
149
+ fs.existsSync(path.join(dir, '.aider.model.settings.yml')) ||
150
+ fs.existsSync(path.join(dir, '.aider.model.settings.yaml')) ||
151
+ fs.existsSync(path.join(dir, '.aider.tags.cache.v3')) ||
152
+ fs.existsSync(path.join(dir, '.aiderignore'));
153
+ } catch {
154
+ return false;
155
+ }
156
+ }
157
+ }
158
+
159
+ module.exports = {
160
+ AiderProjectContext,
161
+ detectAiderVersion,
162
+ };
@@ -1,37 +1,37 @@
1
- /**
2
- * Aider Freshness Operationalization
3
- *
4
- * Release gates, recurring probes, propagation checklists,
5
- * and staleness blocking for Aider surfaces.
6
- */
7
-
8
- const { version } = require('../../package.json');
9
-
10
- /**
11
- * P0 sources that must be fresh before any Aider release claim.
12
- */
13
- const P0_SOURCES = [
14
- {
15
- key: 'aider-docs',
16
- label: 'Aider Official Docs',
17
- url: 'https://aider.chat',
18
- stalenessThresholdDays: 30,
19
- verifiedAt: '2026-04-08',
20
- },
21
- {
22
- key: 'aider-config-reference',
23
- label: 'Aider Config Reference',
24
- url: 'https://aider.chat/docs/config/aider_conf.html',
25
- stalenessThresholdDays: 30,
26
- verifiedAt: '2026-04-08',
27
- },
28
- {
29
- key: 'aider-github-releases',
30
- label: 'Aider GitHub Releases',
31
- url: 'https://github.com/Aider-AI/aider/releases',
32
- stalenessThresholdDays: 14,
33
- verifiedAt: '2026-04-08',
34
- },
1
+ /**
2
+ * Aider Freshness Operationalization
3
+ *
4
+ * Release gates, recurring probes, propagation checklists,
5
+ * and staleness blocking for Aider surfaces.
6
+ */
7
+
8
+ const { version } = require('../../package.json');
9
+
10
+ /**
11
+ * P0 sources that must be fresh before any Aider release claim.
12
+ */
13
+ const P0_SOURCES = [
14
+ {
15
+ key: 'aider-docs',
16
+ label: 'Aider Official Docs',
17
+ url: 'https://aider.chat',
18
+ stalenessThresholdDays: 30,
19
+ verifiedAt: '2026-04-08',
20
+ },
21
+ {
22
+ key: 'aider-config-reference',
23
+ label: 'Aider Config Reference',
24
+ url: 'https://aider.chat/docs/config/aider_conf.html',
25
+ stalenessThresholdDays: 30,
26
+ verifiedAt: '2026-04-08',
27
+ },
28
+ {
29
+ key: 'aider-github-releases',
30
+ label: 'Aider GitHub Releases',
31
+ url: 'https://github.com/Aider-AI/aider/releases',
32
+ stalenessThresholdDays: 14,
33
+ verifiedAt: '2026-04-08',
34
+ },
35
35
  {
36
36
  key: 'aider-model-docs',
37
37
  label: 'Aider Model Documentation',
@@ -65,45 +65,45 @@ const P0_SOURCES = [
65
65
  label: 'Aider PyPI Package',
66
66
  url: 'https://pypi.org/project/aider-chat/',
67
67
  stalenessThresholdDays: 14,
68
- verifiedAt: '2026-04-08',
69
- },
70
- ];
71
-
72
- /**
73
- * Propagation checklist: when an Aider source changes, these must update.
74
- */
75
- const PROPAGATION_CHECKLIST = [
76
- {
77
- trigger: 'Aider release with new config keys',
78
- targets: [
79
- 'src/aider/techniques.js — update checks for new keys',
80
- 'src/aider/config-parser.js — update if YAML handling changes',
81
- 'src/aider/setup.js — update generated .aider.conf.yml template',
82
- ],
83
- },
84
- {
85
- trigger: 'New Aider model support or role changes',
86
- targets: [
87
- 'src/aider/techniques.js — update model config checks',
88
- 'src/aider/context.js — update modelRoles()',
89
- 'src/aider/governance.js — update policy packs if needed',
90
- ],
91
- },
92
- {
93
- trigger: 'New Aider edit format or architect changes',
94
- targets: [
95
- 'src/aider/techniques.js — update edit format checks',
96
- 'src/aider/setup.js — update template comments',
97
- ],
98
- },
99
- {
100
- trigger: 'Aider CLI flag changes (renamed/removed)',
101
- targets: [
102
- 'src/aider/techniques.js — update flag pattern matching',
103
- 'src/aider/setup.js — update generated config',
104
- 'src/aider/interactive.js — update wizard options',
105
- ],
106
- },
68
+ verifiedAt: '2026-04-08',
69
+ },
70
+ ];
71
+
72
+ /**
73
+ * Propagation checklist: when an Aider source changes, these must update.
74
+ */
75
+ const PROPAGATION_CHECKLIST = [
76
+ {
77
+ trigger: 'Aider release with new config keys',
78
+ targets: [
79
+ 'src/aider/techniques.js — update checks for new keys',
80
+ 'src/aider/config-parser.js — update if YAML handling changes',
81
+ 'src/aider/setup.js — update generated .aider.conf.yml template',
82
+ ],
83
+ },
84
+ {
85
+ trigger: 'New Aider model support or role changes',
86
+ targets: [
87
+ 'src/aider/techniques.js — update model config checks',
88
+ 'src/aider/context.js — update modelRoles()',
89
+ 'src/aider/governance.js — update policy packs if needed',
90
+ ],
91
+ },
92
+ {
93
+ trigger: 'New Aider edit format or architect changes',
94
+ targets: [
95
+ 'src/aider/techniques.js — update edit format checks',
96
+ 'src/aider/setup.js — update template comments',
97
+ ],
98
+ },
99
+ {
100
+ trigger: 'Aider CLI flag changes (renamed/removed)',
101
+ targets: [
102
+ 'src/aider/techniques.js — update flag pattern matching',
103
+ 'src/aider/setup.js — update generated config',
104
+ 'src/aider/interactive.js — update wizard options',
105
+ ],
106
+ },
107
107
  {
108
108
  trigger: 'Aider domain pack definitions change',
109
109
  targets: [
@@ -136,29 +136,29 @@ const PROPAGATION_CHECKLIST = [
136
136
  ],
137
137
  },
138
138
  ];
139
-
140
- /**
139
+
140
+ /**
141
141
  * Check release gate — are all P0 sources fresh?
142
142
  */
143
143
  function checkReleaseGate(overrides = {}) {
144
144
  const now = new Date();
145
145
  const results = P0_SOURCES.map(source => {
146
- const verifiedAt = overrides[source.key] || source.verifiedAt;
147
- if (!verifiedAt) {
148
- return { ...source, status: 'unverified', daysStale: null };
149
- }
150
-
151
- const verifiedDate = new Date(verifiedAt);
152
- const daysSince = Math.floor((now - verifiedDate) / (1000 * 60 * 60 * 24));
153
-
154
- return {
155
- ...source,
156
- verifiedAt,
157
- status: daysSince <= source.stalenessThresholdDays ? 'fresh' : 'stale',
158
- daysStale: daysSince,
159
- };
160
- });
161
-
146
+ const verifiedAt = overrides[source.key] || source.verifiedAt;
147
+ if (!verifiedAt) {
148
+ return { ...source, status: 'unverified', daysStale: null };
149
+ }
150
+
151
+ const verifiedDate = new Date(verifiedAt);
152
+ const daysSince = Math.floor((now - verifiedDate) / (1000 * 60 * 60 * 24));
153
+
154
+ return {
155
+ ...source,
156
+ verifiedAt,
157
+ status: daysSince <= source.stalenessThresholdDays ? 'fresh' : 'stale',
158
+ daysStale: daysSince,
159
+ };
160
+ });
161
+
162
162
  const stale = results.filter((result) => result.status === 'stale' || result.status === 'unverified');
163
163
  const fresh = results.filter((result) => result.status === 'fresh');
164
164
  const allFresh = stale.length === 0;
@@ -182,35 +182,35 @@ function formatReleaseGate(gateResult) {
182
182
  `Status: ${gateResult.ready ? 'READY' : 'NOT READY'}`,
183
183
  '',
184
184
  ];
185
-
186
- for (const result of gateResult.results) {
187
- const icon = result.status === 'fresh' ? '✓' : result.status === 'stale' ? '✗' : '?';
188
- const age = result.daysStale !== null ? ` (${result.daysStale}d ago)` : ' (unverified)';
189
- lines.push(` ${icon} ${result.label}${age} — threshold: ${result.stalenessThresholdDays}d`);
190
- }
191
-
192
- if (!gateResult.ready) {
193
- lines.push('');
194
- lines.push('Action required: verify stale/unverified sources before claiming release freshness.');
195
- }
196
-
197
- return lines.join('\n');
198
- }
199
-
200
- /**
201
- * Get propagation targets for a given trigger.
202
- */
203
- function getPropagationTargets(triggerKeyword) {
204
- const keyword = triggerKeyword.toLowerCase();
205
- return PROPAGATION_CHECKLIST.filter(item =>
206
- item.trigger.toLowerCase().includes(keyword)
207
- );
208
- }
209
-
210
- module.exports = {
211
- P0_SOURCES,
212
- PROPAGATION_CHECKLIST,
213
- checkReleaseGate,
214
- formatReleaseGate,
215
- getPropagationTargets,
216
- };
185
+
186
+ for (const result of gateResult.results) {
187
+ const icon = result.status === 'fresh' ? '✓' : result.status === 'stale' ? '✗' : '?';
188
+ const age = result.daysStale !== null ? ` (${result.daysStale}d ago)` : ' (unverified)';
189
+ lines.push(` ${icon} ${result.label}${age} — threshold: ${result.stalenessThresholdDays}d`);
190
+ }
191
+
192
+ if (!gateResult.ready) {
193
+ lines.push('');
194
+ lines.push('Action required: verify stale/unverified sources before claiming release freshness.');
195
+ }
196
+
197
+ return lines.join('\n');
198
+ }
199
+
200
+ /**
201
+ * Get propagation targets for a given trigger.
202
+ */
203
+ function getPropagationTargets(triggerKeyword) {
204
+ const keyword = triggerKeyword.toLowerCase();
205
+ return PROPAGATION_CHECKLIST.filter(item =>
206
+ item.trigger.toLowerCase().includes(keyword)
207
+ );
208
+ }
209
+
210
+ module.exports = {
211
+ P0_SOURCES,
212
+ PROPAGATION_CHECKLIST,
213
+ checkReleaseGate,
214
+ formatReleaseGate,
215
+ getPropagationTargets,
216
+ };