npq 3.25.0 → 3.26.0

package/README.md

@@ -233,7 +233,9 @@ npq install express --json
 When npq detects a supported coding-agent environment, it automatically uses
 the same audit-only JSON mode. This applies to `npq` and to install commands
 intercepted by `npq-hero`; non-install `npq-hero` commands still pass through to
-the configured package manager. See [JSON audit output](docs/feature/json-output.md#coding-agent-detection).
+the configured package manager. See the [full coding-agent detection signal
+table](docs/feature/json-output.md#coding-agent-detection) for the supported
+signals and contextual matchers.
 
 JSON mode never invokes the package manager. It exits `0` for a clean audit,
 `1` for findings, and `2` when the audit cannot complete. See

package/lib/helpers/codingAgentEnvironment.js

@@ -11,13 +11,34 @@ const CODING_AGENT_ENVIRONMENT_VARIABLES = Object.freeze([
   'WINDSURF_AGENT',
   'CODEIUM_AGENT',
   'AGENT',
-  'AI_AGENT'
+  'AI_AGENT',
+  'CLAUDE_CODE',
+  'REPL_ID',
+  'OPENCODE',
+  'AUGMENT_AGENT',
+  'GOOSE_PROVIDER',
+  'JUNIE_DATA',
+  'JUNIE_SHIM_PATH'
 ])
 
-function isCodingAgentEnvironment(env = process.env) {
-  return CODING_AGENT_ENVIRONMENT_VARIABLES.some(
-    (name) => typeof env[name] === 'string' && env[name].length > 0
-  )
+function hasNonEmptyValue(env, name) {
+  return typeof env[name] === 'string' && env[name].length > 0
+}
+
+function isCodingAgentEnvironment(env = process.env, { stdoutIsTTY = process.stdout?.isTTY } = {}) {
+  if (CODING_AGENT_ENVIRONMENT_VARIABLES.some((name) => hasNonEmptyValue(env, name))) {
+    return true
+  }
+
+  if (typeof env.PATH === 'string' && /\.pi[\\/]agent/.test(env.PATH)) {
+    return true
+  }
+
+  if (typeof env.EDITOR === 'string' && /devin/i.test(env.EDITOR)) {
+    return true
+  }
+
+  return !stdoutIsTTY && typeof env.TERM_PROGRAM === 'string' && /kiro/i.test(env.TERM_PROGRAM)
 }
 
 module.exports = { CODING_AGENT_ENVIRONMENT_VARIABLES, isCodingAgentEnvironment }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "npq",
-  "version": "3.25.0",
+  "version": "3.26.0",
   "description": "marshall your npm/npm package installs with high quality and class 🎖",
   "bin": {
     "npq": "./bin/npq.js",