npm 包名是 nexpath-cli,但安装出的命令是 nexpath 和 nexpath-serve,别装错;安装时需提供 OpenAI API key 或 Nexpath token,否则无法工作;执行 nexpath store disable 后功能会完全失效。
nexpath
hi0001234dApache-2.0活跃维护本地优先的 AI 编码工作流,帮独立开发者和产品经理在 Claude Code、Cursor、Windsurf 等工具里自动发现缺失的测试和安全检查。
Local-first AI coding workflow for vibe coders, indie hackers, technical founders and product managers — catch missing tests and safety checks across Claude Code, Cursor, Windsurf, Replit, Lovable and Bolt.new.
npm install -g nexpath-cli
nexpath install
nexpath --versionREADME 未说明硬件要求;核心为本地 CLI,需 Node 18 或以上,LLM 调用走 OpenAI API 或 Nexpath token。
本地优先的 AI 编码行为引导层,在 AI 生成代码变成上线风险前补上缺失的测试与安全检查
本地优先的 AI 编码工作流,帮独立开发者和产品经理在 Claude Code、Cursor、Windsurf 等工具里自动发现缺失的测试和安全检查。
核心能力
- 审查提示词并生成含范围、约束、验收与验证步骤的可编辑提示
- 对高风险任务追加确认、回滚、备份等安全要求
- 按任务复杂度自动拆分为多提示词序列(MPS)
- 自动脱敏 sk-*、ghp_* 等密钥后再本地存储
- 在 SWE-bench Verified 40 题上做了对照基准测试
容易踩的坑
- v0.1.58v0.1.58 Section Controls, Smarter Suggestions & Extension Updates最新正式版2026-10-17 · 2026-10-17 09:40 UTC
v0.1.58 — Section Controls, Smarter Suggestions & Extension Updates
Nexpath v0.1.58 introduces improved section management, clearer prompt presentation, smarter practice suggestions, and expanded coding history support across the CLI, VS Code extension, and browser extensions.
What's New
Section Management
- Added section numbering for improved prompt structure and readability.
- Added section removal controls:
- Ctrl+X in the popup
- Alt+Shift+R in the browser panel
- Made it easier to manage and navigate individual prompt sections.
Improved Readability
- Added bold formatting for key phrases in:
- Nexpath popup
- VS Code panel
- Browser panel
- Improved the visual hierarchy of important information to make prompts easier to scan and understand.
Smarter Practice Suggestions
- Updated skipped-practice suggestions to rank them according to the current stage.
- Improved the relevance of suggested practices so users can focus on what matters most at each stage of their workflow.
Expanded Coding History Import
- Added local history import support for Cursor and Devin.
- Continued support for Claude Code history import.
- History is imported once per project to avoid repeated imports.
Version Alignment
- Updated the version to 0.1.58 across:
- Nexpath CLI
- VS Code extension
- Chrome extension manifest
- Firefox extension manifest
Focus of This Release
This release focuses on making Nexpath easier to navigate, improving prompt readability, providing more relevant practice suggestions, and bringing coding history from additional AI coding tools into the Nexpath workflow.
- v0.1.57v0.1.57 — NPM Support & Easy Setup2026-10-01 · 2026-10-01 18:59 UTC
查看更新说明
Nexpath v0.1.57 — NPM Support & Easy Setup
Nexpath v0.1.57 introduces NPM support with a simpler and faster setup experience, making it easier to install Nexpath and add it to your existing AI coding workflow.
What's New
NPM Support
- Added support for installing Nexpath through NPM.
- Nexpath is now available through the
nexpath-cliNPM package. - Global installation makes the CLI available directly from your terminal.
- Supports Node.js 18 or later.
Easy & Fast Setup
Nexpath can now be set up with a simple three-step flow:
npm install -g nexpath-cli nexpath install nexpath --versionThe installation flow guides users through the required setup and helps connect Nexpath with their AI coding workflow.
Improved Developer Experience
- Simplified installation and initial setup.
- Faster onboarding for new users.
- Easier CLI-based installation and configuration.
- Improved setup consistency across supported environments.
- Continued improvements to the Nexpath Prompt Enhancement workflow.
Core Workflow
Nexpath helps AI coding workflows surface missing verification, safety, scope, maintenance, and acceptance checks while keeping the original developer request visible and editable.
The core workflow remains:
- Build with your AI coding agent
- Review with Nexpath
- Check the suggested guidance
- Continue with the reviewed prompt
Supported AI Coding Tools
Nexpath supports prompt capture across:
- Claude Code
- Cursor
- Windsurf
- Replit
- Lovable
- Bolt.new
Installation
Install Nexpath globally using NPM:
npm install -g nexpath-cliThen register Nexpath with your coding agent:
nexpath installVerify the installation:
nexpath --versionRequirements
- Node.js 18 or later
- NPM
What's Next
This release focuses on making Nexpath easier to install, configure, and start using, while continuing to improve the AI coding workflow and Prompt Enhancement experience.
- v0.1.5v0.1.5 — Browser Extension Update2026-09-04 · 2026-09-04 10:52 UTC
查看更新说明
Nexpath v0.1.5 brings the latest browser extension improvements, making the AI coding workflow smoother, more reliable, and easier to use across supported browsers.
What's New
Improvements
- Updated the browser extension experience for users.
- Improved the handling and behavior of Nexpath's guidance flow during AI coding sessions.
- Refined the extension experience for a smoother and more consistent workflow.
- Improved overall reliability and stability for users.
Browser Extension Updates
- Updated the Chrome extension with the latest changes.
- Updated the Firefox extension with the latest Nexpath workflow improvements.
- Improved compatibility and consistency across supported browsers.
- General UI, interaction, and stability improvements.
Browser Extensions
- Chrome: https://chromewebstore.google.com/detail/nexpath/gdkknhjgflkkeajbhalkaakohpoflolc
- Firefox: https://addons.mozilla.org/en-US/firefox/addon/nexpath/
What's Next
This release continues the improvements introduced in v0.1.4 and focuses on providing a more reliable and consistent Nexpath browser extension experience for users.
- v0.1.4v0.1.4 — Prompt Enhancement (PE) & Multi-Prompt Sequence (MPS)2026-08-21 · 2026-08-21 17:38 UTC
查看更新说明
Nexpath's first tagged release — born at AI Hackfest 2026 (MLH), now shipping the core of what Nexpath is built around: a local-first behaviour-guidance layer that catches what AI-generated work quietly leaves out, before it becomes shipped risk.
What's new
Prompt Enhancement (PE)
Every prompt gets a quality pass before it reaches your agent. PE reads your prompt, the current development stage, and relevant workflow signals, then rebuilds it into one editable, higher-quality prompt — your original intent stays intact, and missing pieces (scope, constraints, verification, rollback, acceptance criteria, safety confirmations) are added only when the task actually calls for them. No filler, no auto-send: you review, edit, or return to the original before anything goes out.
Multi-Prompt Sequence (MPS)
Bigger tasks rarely fit one prompt. When the work is complex enough, MPS decomposes it into a clear current task plus a compact, ordered sequence plan for what comes next — so multi-step changes stay structured across the whole sequence instead of drifting halfway through.
Both run automatically once installed, alongside Prompt Enhancement Feedback (PEF), the feedback loop underneath them.
Demo video
A demo video for this release is up on YouTube — watch Prompt Enhancement in action:
Agent support in v0.1.4
Agent Status Claude Code Fully supported — end-to-end tested Cursor, Windsurf, Replit, Lovable, Bolt.new Not yet supported — end-to-end testing planned for v0.1.5 Install
git clone https://github.com/hi0001234d/nexpath.git cd nexpath npm install npm run build npm link # Register with your coding agent and verify nexpath install nexpath --versionRequires Node 18+. Full setup, configuration, and troubleshooting are in the README.
Privacy
Local-first by design. All data stays under
~/.nexpath/; only targeted classification calls leave your machine, and secrets (API keys, bearer tokens, PEM blocks) are auto-redacted before anything is stored. Telemetry is a separate install-time consent and can be disabled anytime.Tell us where it breaks
This is a launch, and honest feedback shapes v0.1.5. Open a Discussion and tell us where the README lost you, where the install broke, or where an advisory fired at the wrong moment.
用户点评
登录用户的真实使用记录,可按版本和硬件筛选还没有人点评。第一个说出真实体验的人最有价值。
Nexpath CLI — Build Fast. Ship with Confidence.
A local-first behaviour guidance layer that helps builders catch missing checks before AI-generated work becomes shipped risk.
AI coding agents make it easy to move fast. Nexpath helps reduce the chance that speed quietly becomes an unverified bug, an unsafe change, an unmaintainable codebase, or hours of manual review later.
Prompt Enhancement — A Practical Twist
Within Nexpath's broader behaviour-guidance vision, Prompt Enhancement is the first feature we're introducing as a practical twist: it saves vibe coders from writing every prompt detail by hand while preserving their original intent. When a task needs more rigour, it can suggest missing development practices, verification, or confirmation steps — encouraging users to give a mature development flow the time it needs to finish.
Demo: Prompt Enhancement in action, on YouTube
Why Nexpath Exists
- AI can introduce a bug without making the risk obvious.
- Fast generation can leave a codebase harder to maintain after every change.
- Security, rollback, regression, and acceptance checks are easy to miss while momentum is high.
- Reviewing every AI-generated decision manually can cost more time than the generation saved.
Nexpath reduces these risks by noticing what the current workflow is missing and bringing the relevant check into the work at the right moment. It does not replace developer judgement or promise bug-free code; it helps make that judgement faster, more structured, and harder to skip.
A Workflow, Not Another Tool
- Build with your AI coding agent — Work in the tools and flow you already use.
- Review with Nexpath — Let the Prompt Quality Layer surface missing verification, safety, scope, or maintenance steps while the context is still fresh.
- Ship confidently — Move forward after the important checks are visible, reviewed, and included in the task.
Nexpath is one focused step inside a better shipping workflow — not a new place where development has to happen.
Built during AI Hackfest 2026 by MLH.
The Prompt Quality Layer — How It Works
- Understand — Nexpath reviews the prompt, the current development stage, and relevant workflow signals while preserving the complete original request.
- Structure — It builds one editable prompt with the sections the task needs, such as scope, constraints, acceptance expectations, verification, or missing-practice guidance.
- Safeguard — Higher-risk work can receive confirmation, safety, rollback, or evidence requirements. Complex work can also receive a sequence-aware breakdown when multiple prompts would be more effective.
- Review — You inspect and edit the result before sending it, or return to the original prompt. Nexpath provides the quality layer; you keep the final decision.
Benchmarked on SWE-bench Verified
Prompt quality is easy to demonstrate and hard to prove. To check whether Nexpath actually changes what a coding agent produces, we ran it against a public benchmark where the answer is graded by each project's own test suite — not by a person, and not by another model.
Setup: Claude Code (sonnet) attempted 40 tasks from SWE-bench Verified twice — once on its
own, once with the Nexpath-reviewed prompt. The task, starting commit, container, model, time
limit, and tools were identical in both runs. The prompt is the only thing that changed. Grading
used the official SWE-bench harness.
| Claude Code | Claude Code + Nexpath | |
|---|---|---|
| Tasks solved | 27/40 (67.5%) | 29/40 (72.5%) |
| Issue's own tests pass | 27/40 (67.5%) | 29/40 (72.5%) |
| Ran the project's tests before submitting | 38/40 (95.0%) | 39/40 (97.5%) |
Paired outcomes: solved by both — 27 · solved only with Nexpath — 2 · solved only without Nexpath — 0 · solved by neither — 11
Full results
Every number above traces to a file below. The full benchmark report (Nexpath_benchmark/README.md) has the method, the two tasks Nexpath won, and the eleven neither run could solve. These are the raw files behind it — all 40 tasks, both runs, and the list we locked before the first run.
| Complete report | Benchmark report |
| Every task, both runs | final_per_task.csv |
| All measurements | final_summary.json |
| Task list and settings, locked before the run | strat40-manifest.json |
| Prompt checks run before starting | preflight-strat40.json |
| Raw data for the confirmation-line test | before · after |
How Nexpath Reduces Risk
Fewer Silent Bugs and Missed Checks
- Verification and test expectations can be added for debugging, maintenance, planning, review, and other tasks that need proof of completion.
- Absence signals can surface missing regression checks, acceptance criteria, reproduction evidence, or project grounding.
- Weak or unrelated signals are not used as filler; guidance must match the current task. The core interaction keeps your request and the added workflow guidance together:
Safer High-Risk Changes
- Sensitive actions can receive explicit confirmation, rollback, backup, or safety requirements before the reviewed prompt is used.
- Double confirmation, cross-confirmation, and final confirmation are used only when the task's complexity or risk justifies them.
- The quality layer does not silently expand authority, auto-send work, or treat an agent response as proof of completion.
A More Maintainable Development Flow
- Scope, constraints, acceptance expectations, affected surfaces, and behaviour-preservation needs stay visible instead of being lost in a fast request.
- Complex work can be decomposed into a clear current task plus a compact, ordered sequence plan.
Less Review Overhead, Without Losing Control
- Your complete original request stays visible inside one editable, quality-reviewed prompt.
- You can edit the result, use it, or return to the original request before the reviewed version is sent.
Supported AI Coding Agents & Developer Tools
Nexpath CLI is built for prompt capture across AI coding agents.
| Agent | Status in v0.1.58 |
|---|---|
| Claude Code | Fully supported — end-to-end tested |
| Cursor | Fully supported — end-to-end tested |
| Windsurf | Fully supported — end-to-end tested |
| Replit | Fully supported — end-to-end tested |
| Lovable | Fully supported — end-to-end tested |
| Bolt.new | Fully supported — end-to-end tested |
Add Nexpath to Your Development Workflow — Installation
# Install
npm install -g nexpath-cli
# Register with your coding agent
nexpath install
# Verify
nexpath --version
Setup notes:
- The npm package is
nexpath-cli; the commands it installs arenexpathandnexpath-serve. Requires Node 18 or later. - Building from source instead? See the contribution guide.
- Install asks how Nexpath should run — one credential, two ways to give it: your own OpenAI API key (get one), or a Nexpath token from a free account at parseos.tech/nexpath if you would rather not create an OpenAI account. If both are configured, your OpenAI key is the one used.
- During install you pick your project role (what kind of work you do) so Nexpath tailors its guidance to how you build.
- Nexpath's core is Prompt Enhancement (PE), with Multi-Prompt Sequence (MPS) and Prompt Enhancement Feedback (PEF) — these work automatically as you code.
Uninstalling
# Remove the Nexpath CLI (package name: nexpath-cli, binary: nexpath)
nexpath uninstall
npm uninstall -g nexpath-cli
npm unlink -g nexpath-cli # only if you installed via npm link
# Verify it's gone
npm list -g nexpath-cli
which nexpath
# Clear local data and caches
rm -rf ~/.nexpath
rm -rf ~/.config/nexpath
rm -rf ~/.local/share/nexpath
rm -rf ~/.cache/nexpath
# Clear the npm cache
npm cache clean --force
nexpath uninstall disconnects Nexpath from all detected agents and offers to clear the stored
API key. The remaining steps remove the global package, any leftover binary, and all local
data and caches.
Configuration and Privacy
Privacy Controls
All data is stored locally only at ~/.nexpath/. Only targeted LLM calls used to classify or
prepare relevant guidance leave your machine.
- Automatic secret redaction — API keys (
sk-*,ghp_*,ghu_*), bearer tokens, and PEM blocks are automatically stripped from prompts before storage. - Telemetry is off unless you turn it on — install does not ask and does not enable it;
it starts off and stays off until you run
nexpath config set telemetry.enabled true. Local prompt capture and remote telemetry are independent — disable capture anytime vianexpath store disable(if you do this, nothing will work).
Deleting Stored Prompts
# Delete prompts for a specific project you no longer want to keep
nexpath store delete --project <path>
# Delete all stored prompts permanently
nexpath store delete -y
Troubleshooting
No Popup, Or A Suggestion That Looks Wrong?
Run nexpath status. It reports which credential is in effect and the last LLM call that
failed — for example a key that has run out of credit, been revoked, or been replaced. When a
call fails Nexpath falls back to local detection and goes quiet, which looks like nothing
happening rather than like an error.
Where Is My API Key Stored?
| Platform | Default location | Inspect with |
|---|---|---|
| macOS | Keychain | Keychain Access.app → search "nexpath" |
| Linux | Secret Service (libsecret) | secret-tool lookup service nexpath account openai_api_key |
| Windows | Credential Manager | Control Panel → Credential Manager → Web Credentials |
| Fallback (any OS) | ~/.nexpath/config.json (mode 0600) | cat ~/.nexpath/config.json |
Use nexpath config show-key-source to confirm which layer is currently active.
Contributing
License
Acknowledgements
- Major League Hacking (MLH) — For organizing AI Hackfest 2026
- Anthropic — For Claude Code, our primary development environment
- OpenAI — For models used in targeted classification and prompt-quality tasks
- Google — For Gemini AI, planned as an alternative LLM provider alongside OpenAI
Built with insights from the vibe coding community and developers building real projects with AI coding agents, coding AI tools, and AI developer tools.