@praneeth_54/agentdoctor 0.1.0-beta → 0.1.1-beta

package/CHANGELOG.md

@@ -7,22 +7,26 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
-### Changed
+### Planned
+
+- Deterministic readiness scoring
+- Safe automatic fixes
+- Packaged GitHub Action
+
+## [0.1.1-beta] — 2026-07-29
 
-- Publish as scoped package `@praneeth_54/agentdoctor` (unscoped `agentdoctor` blocked by npm as too similar to `agent-doctor`)
+Patch release.
 
 ### Fixed
 
-- Track fake credential fixtures required by CI (were excluded by `.gitignore`)
-- Align package and docs URLs with the public GitHub repository
-- Release workflow selects notes by tag and attaches the npm tarball
-- CLI help text matches shipped capabilities (`--min-score` no-op until scoring)
+- False missing-path warnings for repository-root paths referenced from nested instruction files
+- CSS-like backtick tokens such as `.content` being interpreted as filesystem paths
 
-### Planned
+### Testing
 
-- Deterministic readiness scoring
-- Safe automatic fixes
-- Packaged GitHub Action
+- Added real-world regression fixtures
+- Added 17 regression tests
+- Total test suite is now 91 tests
 
 ## [0.1.0-beta] — 2026-07-29
 
@@ -40,6 +44,10 @@ First public beta.
 - Programmatic `scan()` API
 - Fixture-based unit and integration tests
 
+### Changed
+
+- Published npm package as `@praneeth_54/agentdoctor` (unscoped `agentdoctor` blocked by npm as too similar to `agent-doctor`)
+
 ### Security
 
 - Conservative wording for exposure findings
@@ -54,5 +62,6 @@ First public beta.
 - Not a complete secret scanner
 - Git “tracked secret” detection deferred
 
-[Unreleased]: https://github.com/pranee54/AgentDoctor/compare/v0.1.0-beta...HEAD
+[Unreleased]: https://github.com/pranee54/AgentDoctor/compare/v0.1.1-beta...HEAD
+[0.1.1-beta]: https://github.com/pranee54/AgentDoctor/releases/tag/v0.1.1-beta
 [0.1.0-beta]: https://github.com/pranee54/AgentDoctor/releases/tag/v0.1.0-beta

package/README.md

@@ -1,5 +1,12 @@
 # AgentDoctor
 
+[![npm](https://img.shields.io/npm/v/@praneeth_54/agentdoctor)](https://www.npmjs.com/package/@praneeth_54/agentdoctor)
+[![License](https://img.shields.io/github/license/pranee54/AgentDoctor)](LICENSE)
+[![GitHub Stars](https://img.shields.io/github/stars/pranee54/AgentDoctor)](https://github.com/pranee54/AgentDoctor/stargazers)
+[![CI](https://img.shields.io/github/actions/workflow/status/pranee54/AgentDoctor/ci.yml?branch=main&label=CI)](https://github.com/pranee54/AgentDoctor/actions)
+[![Node](https://img.shields.io/node/v/@praneeth_54/agentdoctor)](https://nodejs.org)
+[![Release](https://img.shields.io/badge/release-v0.1.1--beta-orange)](CHANGELOG.md)
+
 **Lighthouse for AI coding agents.**
 
 AgentDoctor audits a repository’s AI coding agent configuration — instructions, ignore rules, permissions, and MCP setup — using local static analysis. No API key. No upload by default.
@@ -15,12 +22,6 @@ npx @praneeth_54/agentdoctor
 | **Install**    | `npx @praneeth_54/agentdoctor` or `npm install -g @praneeth_54/agentdoctor`         |
 | **Requires**   | Node.js 20+                                                                         |
 
-[![CI](https://img.shields.io/github/actions/workflow/status/pranee54/AgentDoctor/ci.yml?branch=main&label=CI)](https://github.com/pranee54/AgentDoctor/actions)
-[![npm](https://img.shields.io/npm/v/@praneeth_54/agentdoctor?label=npm)](https://www.npmjs.com/package/@praneeth_54/agentdoctor)
-[![Node](https://img.shields.io/node/v/@praneeth_54/agentdoctor)](https://nodejs.org)
-[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
-[![Release](https://img.shields.io/badge/release-v0.1.0--beta-orange)](CHANGELOG.md)
-
 ---
 
 ## Demo
@@ -28,7 +29,7 @@ npx @praneeth_54/agentdoctor
 ```text
 $ npx @praneeth_54/agentdoctor
 
-AgentDoctor v0.1.0-beta
+AgentDoctor v0.1.1-beta
 
 Repository
   Framework: Next.js
@@ -87,13 +88,13 @@ AgentDoctor analyzes configuration files. It does not run agents or edit your pr
 ### One-shot
 
 ```bash
-npx @praneeth_54/agentdoctor
+npx @praneeth_54/agentdoctor@0.1.1-beta
 ```
 
 ### Global (optional)
 
 ```bash
-npm install -g @praneeth_54/agentdoctor
+npm install -g @praneeth_54/agentdoctor@0.1.1-beta
 agentdoctor
 ```
 
@@ -224,7 +225,7 @@ npx @praneeth_54/agentdoctor --json
 
 ```json
 {
-  "version": "0.1.0-beta",
+  "version": "0.1.1-beta",
   "repository": {
     "primaryFramework": "nextjs",
     "primaryLanguage": "typescript",

package/dist/constants.d.ts

@@ -1,4 +1,4 @@
-export declare const PACKAGE_VERSION = "0.1.0-beta";
+export declare const PACKAGE_VERSION = "0.1.1-beta";
 export declare const DEFAULT_MAX_FILE_SIZE_BYTES: number;
 /** Directories skipped during normal discovery (unless a rule needs them later). */
 export declare const DEFAULT_IGNORE_DIRECTORIES: Set<string>;

package/dist/constants.js

@@ -1,4 +1,4 @@
-export const PACKAGE_VERSION = "0.1.0-beta";
+export const PACKAGE_VERSION = "0.1.1-beta";
 export const DEFAULT_MAX_FILE_SIZE_BYTES = 2 * 1024 * 1024; // 2 MiB
 /** Directories skipped during normal discovery (unless a rule needs them later). */
 export const DEFAULT_IGNORE_DIRECTORIES = new Set([

package/dist/core/rules/instructions/missing-path-reference.d.ts

@@ -1,2 +1,22 @@
 import type { RuleDefinition } from "../types.js";
+export type ResolvedPathReference = {
+    status: "ok";
+    pathsToCheck: string[];
+    primaryRelative: string;
+} | {
+    status: "escape";
+    attempted: string;
+};
+/**
+ * Conservative local path classification for markdown links / backticks.
+ * Precision is more important than recall for this rule.
+ */
+export declare function isLikelyLocalPathReference(value: string): boolean;
+export declare function extractPathCandidates(text: string): string[];
+/**
+ * Resolve a candidate path reference with repository-aware semantics:
+ * - `./` and `../` → relative to the instruction file directory
+ * - otherwise → repository-root relative (avoids nesting under `.cursor/rules/`)
+ */
+export declare function resolveInstructionPathReference(instructionRelativePath: string, candidate: string): ResolvedPathReference;
 export declare const missingPathReferenceRule: RuleDefinition;

package/dist/core/rules/instructions/missing-path-reference.js

@@ -10,49 +10,97 @@ const INSTRUCTION_KINDS = new Set([
     "claude-local-md",
     "claude-rule-md",
 ]);
-/**
- * Conservative local path extraction:
- * - Markdown links: [text](relative/path.ext)
- * - Backticked paths with separators or extensions
- */
-function extractPathCandidates(text) {
-    const found = new Set();
-    for (const match of text.matchAll(/\[[^\]]*]\(([^)]+)\)/g)) {
-        const target = (match[1] ?? "").trim();
-        if (isConservativeLocalPath(target)) {
-            found.add(stripAnchor(target));
-        }
-    }
-    for (const match of text.matchAll(/`([^`]+)`/g)) {
-        const target = (match[1] ?? "").trim();
-        if (isConservativeLocalPath(target)) {
-            found.add(stripAnchor(target));
-        }
-    }
-    return [...found];
-}
+/** Extensions accepted for bare filenames (no `/`) — precision over recall. */
+const BARE_FILE_EXTENSION = /\.(mdc?|txt|tsx?|jsx?|mjs|cjs|json|ya?ml|toml|php|py|rb|go|rs|java|kt|css|scss|html|vue|svelte|sh|bash|zsh|sql|xml|svg|png|jpe?g|gif|webp|wasm|lock)$/i;
 function stripAnchor(value) {
     return value.split("#")[0] ?? value;
 }
-function isConservativeLocalPath(value) {
+function isExplicitRelativePath(value) {
+    return value.startsWith("./") || value.startsWith("../");
+}
+/**
+ * Conservative local path classification for markdown links / backticks.
+ * Precision is more important than recall for this rule.
+ */
+export function isLikelyLocalPathReference(value) {
     if (!value || value.length > 200)
         return false;
     if (/^(https?:|mailto:|file:)/i.test(value))
         return false;
     if (value.startsWith("#"))
         return false;
+    if (value.startsWith("--"))
+        return false;
     if (value.includes("://"))
         return false;
     if (value.includes("\n") || value.includes(" "))
         return false;
-    // Must look like a path: has / or a file extension
-    if (!value.includes("/") && !/\.[a-z0-9]{1,8}$/i.test(value))
-        return false;
-    // Reject shell-looking fragments
     if (/[;&|$]/.test(value))
         return false;
-    // Reject traversal escape attempts — still check but flag separately
-    return true;
+    if (value.startsWith("/") || /^[A-Za-z]:[\\/]/.test(value))
+        return false;
+    // CSS class / id-like bare selectors: `.content`, `.button`
+    if (/^\.[A-Za-z_][\w-]*$/.test(value))
+        return false;
+    if (value.includes("/")) {
+        // Reject empty segments like `foo//bar` while allowing trailing slash dirs
+        const normalized = value.replace(/\/+$/, "");
+        if (!normalized || normalized.split("/").some((part) => part === "")) {
+            return false;
+        }
+        return true;
+    }
+    // Bare filename: require a known file extension (not `.content`-style tokens)
+    return BARE_FILE_EXTENSION.test(value) && !value.startsWith(".");
+}
+export function extractPathCandidates(text) {
+    const found = new Set();
+    for (const match of text.matchAll(/\[[^\]]*]\(([^)]+)\)/g)) {
+        const target = stripAnchor((match[1] ?? "").trim());
+        if (isLikelyLocalPathReference(target)) {
+            found.add(target);
+        }
+    }
+    for (const match of text.matchAll(/`([^`]+)`/g)) {
+        const target = stripAnchor((match[1] ?? "").trim());
+        if (isLikelyLocalPathReference(target)) {
+            found.add(target);
+        }
+    }
+    return [...found];
+}
+function isEscapingRepoRelative(relativePath) {
+    return relativePath === ".." || relativePath.startsWith("../");
+}
+/**
+ * Resolve a candidate path reference with repository-aware semantics:
+ * - `./` and `../` → relative to the instruction file directory
+ * - otherwise → repository-root relative (avoids nesting under `.cursor/rules/`)
+ */
+export function resolveInstructionPathReference(instructionRelativePath, candidate) {
+    const instructionDir = path.posix.dirname(instructionRelativePath);
+    if (isExplicitRelativePath(candidate)) {
+        const joined = instructionDir === "."
+            ? path.posix.normalize(candidate)
+            : path.posix.normalize(path.posix.join(instructionDir, candidate));
+        if (isEscapingRepoRelative(joined)) {
+            return { status: "escape", attempted: joined };
+        }
+        return {
+            status: "ok",
+            pathsToCheck: [joined],
+            primaryRelative: joined,
+        };
+    }
+    const rootRelative = path.posix.normalize(candidate);
+    if (isEscapingRepoRelative(rootRelative) || rootRelative.startsWith("/")) {
+        return { status: "escape", attempted: rootRelative };
+    }
+    return {
+        status: "ok",
+        pathsToCheck: [rootRelative],
+        primaryRelative: rootRelative,
+    };
 }
 export const missingPathReferenceRule = {
     id: "instructions/missing-path-reference",
@@ -81,10 +129,8 @@ export const missingPathReferenceRule = {
                 }
                 const candidates = extractPathCandidates(cached.text);
                 for (const candidate of candidates) {
-                    // Resolve relative to instruction file directory, stay inside root
-                    const baseDir = path.posix.dirname(file.relativePath);
-                    const resolvedRelative = path.posix.normalize(baseDir === "." ? candidate : path.posix.join(baseDir, candidate));
-                    if (resolvedRelative.startsWith("../") || resolvedRelative === "..") {
+                    const resolved = resolveInstructionPathReference(file.relativePath, candidate);
+                    if (resolved.status === "escape") {
                         findings.push({
                             ruleId: "instructions/missing-path-reference",
                             category: "instructions",
@@ -101,11 +147,17 @@ export const missingPathReferenceRule = {
                         });
                         continue;
                     }
-                    const absolute = path.resolve(context.root, resolvedRelative);
-                    if (!isPathInsideRoot(context.root, absolute)) {
-                        continue;
+                    let exists = false;
+                    for (const relativePath of resolved.pathsToCheck) {
+                        const absolute = path.resolve(context.root, relativePath);
+                        if (!isPathInsideRoot(context.root, absolute)) {
+                            continue;
+                        }
+                        if (await pathExistsInsideRoot(context.root, relativePath)) {
+                            exists = true;
+                            break;
+                        }
                     }
-                    const exists = await pathExistsInsideRoot(context.root, resolvedRelative);
                     if (exists) {
                         continue;
                     }
@@ -120,7 +172,10 @@ export const missingPathReferenceRule = {
                         affectedAgents: context.agents
                             .filter((a) => a.configPaths.includes(file.relativePath))
                             .map((a) => a.id),
-                        evidence: { path: file.relativePath, detail: `missing=${resolvedRelative}` },
+                        evidence: {
+                            path: file.relativePath,
+                            detail: `missing=${resolved.primaryRelative}`,
+                        },
                         fixability: "manual",
                     });
                 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@praneeth_54/agentdoctor",
-  "version": "0.1.0-beta",
+  "version": "0.1.1-beta",
   "description": "Audit AI coding agent configuration in a repository — local, deterministic, no API key.",
   "type": "module",
   "bin": {