claudex-setup 1.3.0 → 1.5.0

package/bin/cli.js

@@ -49,6 +49,12 @@ async function main() {
     dir: process.cwd()
   };
 
+  if (!require('fs').existsSync(options.dir)) {
+    console.error(`\n  Error: Directory not found: ${options.dir}`);
+    console.error('  Run claudex-setup from inside your project directory.\n');
+    process.exit(1);
+  }
+
   try {
     if (command === 'badge') {
       const { getBadgeMarkdown } = require('../src/badge');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claudex-setup",
-  "version": "1.3.0",
+  "version": "1.5.0",
   "description": "Audit and optimize any project for Claude Code. Powered by 1107 verified techniques.",
   "main": "src/index.js",
   "bin": {

package/src/audit.js

@@ -97,7 +97,18 @@ async function audit(options) {
   }
 
   if (options.json) {
-    console.log(JSON.stringify({ score, stacks, passed: passed.length, failed: failed.length, results }, null, 2));
+    const { version } = require('../package.json');
+    console.log(JSON.stringify({
+      version,
+      timestamp: new Date().toISOString(),
+      score,
+      stacks,
+      passed: passed.length,
+      failed: failed.length,
+      skipped: skipped.length,
+      checkCount: applicable.length,
+      results
+    }, null, 2));
     return { score, passed: passed.length, failed: failed.length, stacks, results };
   }
 

package/src/setup.js

@@ -29,8 +29,7 @@ function detectScripts(ctx) {
 // Helper: detect key dependencies and generate guidelines
 // ============================================================
 function detectDependencies(ctx) {
-  const pkg = ctx.jsonFile('package.json');
-  if (!pkg) return [];
+  const pkg = ctx.jsonFile('package.json') || {};
   const allDeps = { ...(pkg.dependencies || {}), ...(pkg.devDependencies || {}) };
   const guidelines = [];
 
@@ -153,6 +152,66 @@ function detectDependencies(ctx) {
   if (reqTxt.includes('redis')) {
     guidelines.push('- Redis is available for caching and task queues');
   }
+  if (reqTxt.includes('langchain')) {
+    guidelines.push('- Use LangChain for chain/agent orchestration. Define chains in chains/ directory');
+  }
+  if (reqTxt.includes('openai')) {
+    guidelines.push('- OpenAI SDK available. Use structured outputs where possible');
+  }
+  if (reqTxt.includes('anthropic')) {
+    guidelines.push('- Anthropic SDK available. Prefer Claude for complex reasoning tasks');
+  }
+  if (reqTxt.includes('chromadb')) {
+    guidelines.push('- Use ChromaDB for local vector storage. Persist collections to disk');
+  }
+  if (reqTxt.includes('pinecone')) {
+    guidelines.push('- Use Pinecone for production vector search. Define index schemas upfront');
+  }
+  if (reqTxt.includes('mlflow')) {
+    guidelines.push('- Use MLflow for experiment tracking. Log all model parameters and metrics');
+  }
+  if (reqTxt.includes('wandb')) {
+    guidelines.push('- Use Weights & Biases for experiment tracking and visualization');
+  }
+  if (reqTxt.includes('transformers')) {
+    guidelines.push('- HuggingFace Transformers available. Use AutoModel/AutoTokenizer for loading');
+  }
+
+  // JS AI/ML/Cloud deps
+  if (allDeps['@anthropic-ai/sdk']) {
+    guidelines.push('- Anthropic SDK configured. Use Messages API with structured tool_use for agents');
+  }
+  if (allDeps['openai']) {
+    guidelines.push('- OpenAI SDK available. Use structured outputs and function calling');
+  }
+  if (allDeps['@modelcontextprotocol/sdk']) {
+    guidelines.push('- MCP SDK available. Build MCP servers with stdio transport');
+  }
+  if (allDeps['langchain'] || allDeps['@langchain/core']) {
+    guidelines.push('- LangChain available. Use LCEL for chain composition');
+  }
+  if (allDeps['@aws-sdk/client-s3'] || allDeps['@aws-sdk/client-dynamodb']) {
+    guidelines.push('- AWS SDK v3 configured. Use modular imports, not aws-sdk v2');
+  }
+  if (allDeps['@aws-cdk/aws-lambda'] || allDeps['aws-cdk-lib']) {
+    guidelines.push('- AWS CDK available. Define stacks in lib/, constructs as separate classes');
+  }
+
+  // Security middleware
+  if (allDeps['express-rate-limit']) {
+    guidelines.push('- Rate limiting configured. Apply to auth endpoints. Set appropriate windowMs and max values');
+  }
+  if (allDeps['hpp']) {
+    guidelines.push('- HPP (HTTP Parameter Pollution) protection enabled');
+  }
+  if (allDeps['csurf']) {
+    guidelines.push('- CSRF protection enabled. Ensure tokens are included in all state-changing requests');
+  }
+
+  // AWS Lambda
+  if (allDeps['@aws-sdk/client-lambda'] || allDeps['@aws-cdk/aws-lambda'] || allDeps['aws-cdk-lib']) {
+    guidelines.push('- Lambda handlers: keep cold start fast, use layers for deps, set appropriate memory/timeout');
+  }
 
   return guidelines;
 }
@@ -328,7 +387,14 @@ function getFrameworkInstructions(stacks) {
 - Prefer Server Components by default; add 'use client' only when needed
 - Use next/image for images, next/link for navigation
 - API routes go in app/api/ (App Router) or pages/api/ (Pages Router)
-- Use loading.tsx, error.tsx, and not-found.tsx for route-level UX`);
+- Use loading.tsx, error.tsx, and not-found.tsx for route-level UX
+
+### Next.js App Router
+- Default to Server Components. Add 'use client' only when needed (hooks, events, browser APIs)
+- Use Server Actions for mutations. Validate with Zod, call revalidatePath after writes
+- Route handlers in app/api/ export named functions: GET, POST, PUT, DELETE
+- Use loading.tsx, error.tsx, not-found.tsx for route-level UI states
+- Middleware in middleware.ts for auth checks, redirects, headers`);
   } else if (stackKeys.includes('react')) {
     sections.push(`### React
 - Use functional components with hooks exclusively
@@ -401,7 +467,10 @@ function getFrameworkInstructions(stacks) {
 - Handle all errors explicitly — never ignore err returns
 - Use context.Context for cancellation and timeouts
 - Prefer table-driven tests
-- Run \`go vet\` and \`golangci-lint\` before committing`);
+- Run \`go vet\` and \`golangci-lint\` before committing
+- If using gRPC: define .proto files in proto/ or pkg/proto, generate with protoc
+- If Makefile exists: use make targets for build/test/lint
+- Organize: cmd/ for entry points, internal/ for private packages, pkg/ for public`);
   }
 
   if (stackKeys.includes('terraform')) {
@@ -410,7 +479,10 @@ function getFrameworkInstructions(stacks) {
 - Always run \`terraform plan\` before \`terraform apply\`
 - Store state remotely (S3 + DynamoDB, or Terraform Cloud)
 - Use variables.tf for all configurable values
-- Tag all resources consistently`);
+- Tag all resources consistently
+- If using Helm: define charts in charts/ or helm/, use values.yaml for config
+- Lock providers: always commit .terraform.lock.hcl
+- Use terraform fmt before committing`);
   }
 
   const hasJS = stackKeys.some(k => ['react', 'vue', 'angular', 'nextjs', 'node', 'svelte'].includes(k));
@@ -480,10 +552,24 @@ npm run lint         # or: npx eslint .`;
 
     // --- Framework-specific instructions ---
     const frameworkInstructions = getFrameworkInstructions(stacks);
-    const stackSection = frameworkInstructions
+    let stackSection = frameworkInstructions
       ? `\n## Stack-Specific Guidelines\n\n${frameworkInstructions}\n`
       : '';
 
+    // Check for security-focused project
+    const pkg2 = ctx.jsonFile('package.json') || {};
+    const allDeps2 = { ...(pkg2.dependencies || {}), ...(pkg2.devDependencies || {}) };
+    const hasSecurityDeps = allDeps2['helmet'] || allDeps2['jsonwebtoken'] || allDeps2['bcrypt'] || allDeps2['passport'];
+    if (hasSecurityDeps) {
+      stackSection += '\n### Security Best Practices\n';
+      stackSection += '- Follow OWASP Top 10 — run /security-review regularly\n';
+      stackSection += '- Never log sensitive data (passwords, tokens, PII)\n';
+      stackSection += '- Use parameterized queries — never string concatenation for SQL\n';
+      stackSection += '- Set security headers via Helmet. Review CSP policy for your frontend\n';
+      stackSection += '- Rate limit all authentication endpoints\n';
+      stackSection += '- Validate and sanitize all user input at API boundaries\n';
+    }
+
     // --- TypeScript-specific additions ---
     let tsSection = '';
     if (hasTS) {
@@ -564,6 +650,12 @@ Before completing any task, confirm:
 ${verificationSteps.join('\n')}
 </verification>
 
+## Context Management
+- Use /compact when context gets large (above 50% capacity)
+- Prefer focused sessions — one task per conversation
+- If a session gets too long, start fresh with /clear
+- Use subagents for research tasks to keep main context clean
+
 ## Workflow
 - Verify changes with tests before committing
 - Use descriptive commit messages (why, not what)