nexpath

hi0001234dApache-2.0活跃维护

本地优先的 AI 编码工作流,帮独立开发者和产品经理在 Claude Code、Cursor、Windsurf 等工具里自动发现缺失的测试和安全检查。

Local-first AI coding workflow for vibe coders, indie hackers, technical founders and product managers — catch missing tests and safety checks across Claude Code, Cursor, Windsurf, Replit, Lovable and Bolt.new.

v0.1.58发布于 2026-10-17 09:40 UTC360star +1 / 7 天20fork同步于 2026-11-10 18:01 UTC

怎么上手

由 README 提炼,执行前请确认
npm install -g nexpath-cli
nexpath install
nexpath --version
硬件要求按 README 说明

README 未说明硬件要求;核心为本地 CLI,需 Node 18 或以上,LLM 调用走 OpenAI API 或 Nexpath token。

下载:源码 zip·GitHub Releases(安装包)本站不镜像安装包

项目说明

由 README 自动翻译提炼

本地优先的 AI 编码行为引导层,在 AI 生成代码变成上线风险前补上缺失的测试与安全检查

本地优先的 AI 编码工作流,帮独立开发者和产品经理在 Claude Code、Cursor、Windsurf 等工具里自动发现缺失的测试和安全检查。

核心能力

  • 审查提示词并生成含范围、约束、验收与验证步骤的可编辑提示
  • 对高风险任务追加确认、回滚、备份等安全要求
  • 按任务复杂度自动拆分为多提示词序列(MPS)
  • 自动脱敏 sk-*、ghp_* 等密钥后再本地存储
  • 在 SWE-bench Verified 40 题上做了对照基准测试

容易踩的坑

npm 包名是 nexpath-cli,但安装出的命令是 nexpath 和 nexpath-serve,别装错;安装时需提供 OpenAI API key 或 Nexpath token,否则无法工作;执行 nexpath store disable 后功能会完全失效。

内容由模型根据 README 生成,可能不完整或不准确,以官方文档为准。看原文 README

最近发版

4 个版本v0.1.58
  1. v0.1.58v0.1.58 Section Controls, Smarter Suggestions & Extension Updates最新正式版2026-10-17 · 2026-10-17 09:40 UTC

    v0.1.58 — Section Controls, Smarter Suggestions & Extension Updates

    Nexpath v0.1.58 introduces improved section management, clearer prompt presentation, smarter practice suggestions, and expanded coding history support across the CLI, VS Code extension, and browser extensions.

    What's New

    Section Management

    • Added section numbering for improved prompt structure and readability.
    • Added section removal controls:
      • Ctrl+X in the popup
      • Alt+Shift+R in the browser panel
    • Made it easier to manage and navigate individual prompt sections.

    Improved Readability

    • Added bold formatting for key phrases in:
      • Nexpath popup
      • VS Code panel
      • Browser panel
    • Improved the visual hierarchy of important information to make prompts easier to scan and understand.

    Smarter Practice Suggestions

    • Updated skipped-practice suggestions to rank them according to the current stage.
    • Improved the relevance of suggested practices so users can focus on what matters most at each stage of their workflow.

    Expanded Coding History Import

    • Added local history import support for Cursor and Devin.
    • Continued support for Claude Code history import.
    • History is imported once per project to avoid repeated imports.

    Version Alignment

    • Updated the version to 0.1.58 across:
      • Nexpath CLI
      • VS Code extension
      • Chrome extension manifest
      • Firefox extension manifest

    Focus of This Release

    This release focuses on making Nexpath easier to navigate, improving prompt readability, providing more relevant practice suggestions, and bringing coding history from additional AI coding tools into the Nexpath workflow.

  2. v0.1.57v0.1.57 — NPM Support & Easy Setup2026-10-01 · 2026-10-01 18:59 UTC
    查看更新说明

    Nexpath v0.1.57 — NPM Support & Easy Setup

    Nexpath v0.1.57 introduces NPM support with a simpler and faster setup experience, making it easier to install Nexpath and add it to your existing AI coding workflow.

    What's New

    NPM Support

    • Added support for installing Nexpath through NPM.
    • Nexpath is now available through the nexpath-cli NPM package.
    • Global installation makes the CLI available directly from your terminal.
    • Supports Node.js 18 or later.

    Easy & Fast Setup

    Nexpath can now be set up with a simple three-step flow:

    npm install -g nexpath-cli
    nexpath install
    nexpath --version
    

    The installation flow guides users through the required setup and helps connect Nexpath with their AI coding workflow.

    Improved Developer Experience

    • Simplified installation and initial setup.
    • Faster onboarding for new users.
    • Easier CLI-based installation and configuration.
    • Improved setup consistency across supported environments.
    • Continued improvements to the Nexpath Prompt Enhancement workflow.

    Core Workflow

    Nexpath helps AI coding workflows surface missing verification, safety, scope, maintenance, and acceptance checks while keeping the original developer request visible and editable.

    The core workflow remains:

    1. Build with your AI coding agent
    2. Review with Nexpath
    3. Check the suggested guidance
    4. Continue with the reviewed prompt

    Supported AI Coding Tools

    Nexpath supports prompt capture across:

    • Claude Code
    • Cursor
    • Windsurf
    • Replit
    • Lovable
    • Bolt.new

    Installation

    Install Nexpath globally using NPM:

    npm install -g nexpath-cli
    

    Then register Nexpath with your coding agent:

    nexpath install
    

    Verify the installation:

    nexpath --version
    

    Requirements

    • Node.js 18 or later
    • NPM

    What's Next

    This release focuses on making Nexpath easier to install, configure, and start using, while continuing to improve the AI coding workflow and Prompt Enhancement experience.

  3. v0.1.5v0.1.5 — Browser Extension Update2026-09-04 · 2026-09-04 10:52 UTC
    查看更新说明

    Nexpath v0.1.5 brings the latest browser extension improvements, making the AI coding workflow smoother, more reliable, and easier to use across supported browsers.

    What's New

    Improvements

    • Updated the browser extension experience for users.
    • Improved the handling and behavior of Nexpath's guidance flow during AI coding sessions.
    • Refined the extension experience for a smoother and more consistent workflow.
    • Improved overall reliability and stability for users.

    Browser Extension Updates

    • Updated the Chrome extension with the latest changes.
    • Updated the Firefox extension with the latest Nexpath workflow improvements.
    • Improved compatibility and consistency across supported browsers.
    • General UI, interaction, and stability improvements.

    Browser Extensions

    What's Next

    This release continues the improvements introduced in v0.1.4 and focuses on providing a more reliable and consistent Nexpath browser extension experience for users.

  4. v0.1.4v0.1.4 — Prompt Enhancement (PE) & Multi-Prompt Sequence (MPS)2026-08-21 · 2026-08-21 17:38 UTC
    查看更新说明

    Nexpath's first tagged release — born at AI Hackfest 2026 (MLH), now shipping the core of what Nexpath is built around: a local-first behaviour-guidance layer that catches what AI-generated work quietly leaves out, before it becomes shipped risk.

    What's new

    Prompt Enhancement (PE)

    Every prompt gets a quality pass before it reaches your agent. PE reads your prompt, the current development stage, and relevant workflow signals, then rebuilds it into one editable, higher-quality prompt — your original intent stays intact, and missing pieces (scope, constraints, verification, rollback, acceptance criteria, safety confirmations) are added only when the task actually calls for them. No filler, no auto-send: you review, edit, or return to the original before anything goes out.

    Multi-Prompt Sequence (MPS)

    Bigger tasks rarely fit one prompt. When the work is complex enough, MPS decomposes it into a clear current task plus a compact, ordered sequence plan for what comes next — so multi-step changes stay structured across the whole sequence instead of drifting halfway through.

    Both run automatically once installed, alongside Prompt Enhancement Feedback (PEF), the feedback loop underneath them.

    Demo video

    A demo video for this release is up on YouTube — watch Prompt Enhancement in action:

    https://youtu.be/pNejtPA5DPU

    Agent support in v0.1.4

    AgentStatus
    Claude CodeFully supported — end-to-end tested
    Cursor, Windsurf, Replit, Lovable, Bolt.newNot yet supported — end-to-end testing planned for v0.1.5

    Install

    git clone https://github.com/hi0001234d/nexpath.git
    cd nexpath
    npm install
    npm run build
    npm link
     
    # Register with your coding agent and verify
    nexpath install
    nexpath --version
    

    Requires Node 18+. Full setup, configuration, and troubleshooting are in the README.

    Privacy

    Local-first by design. All data stays under ~/.nexpath/; only targeted classification calls leave your machine, and secrets (API keys, bearer tokens, PEM blocks) are auto-redacted before anything is stored. Telemetry is a separate install-time consent and can be disabled anytime.

    Tell us where it breaks

    This is a launch, and honest feedback shapes v0.1.5. Open a Discussion and tell us where the README lost you, where the install broke, or where an advisory fired at the wrong moment.

用户点评

登录用户的真实使用记录,可按版本和硬件筛选
共 0 条

    还没有人点评。第一个说出真实体验的人最有价值。

    README 原文

    未翻译

    Nexpath CLI — Build Fast. Ship with Confidence.

    License: Apache 2.0 Built at MLH AI Hackfest 2026 Follow on X Discord Extension npm version Chrome Web Store Firefox Add-ons Demo

    A local-first behaviour guidance layer that helps builders catch missing checks before AI-generated work becomes shipped risk.

    AI coding agents make it easy to move fast. Nexpath helps reduce the chance that speed quietly becomes an unverified bug, an unsafe change, an unmaintainable codebase, or hours of manual review later.

    Prompt Enhancement — A Practical Twist

    Within Nexpath's broader behaviour-guidance vision, Prompt Enhancement is the first feature we're introducing as a practical twist: it saves vibe coders from writing every prompt detail by hand while preserving their original intent. When a task needs more rigour, it can suggest missing development practices, verification, or confirmation steps — encouraging users to give a mature development flow the time it needs to finish.

    Demo: Prompt Enhancement in action, on YouTube


    Why Nexpath Exists

    • AI can introduce a bug without making the risk obvious.
    • Fast generation can leave a codebase harder to maintain after every change.
    • Security, rollback, regression, and acceptance checks are easy to miss while momentum is high.
    • Reviewing every AI-generated decision manually can cost more time than the generation saved.

    Nexpath reduces these risks by noticing what the current workflow is missing and bringing the relevant check into the work at the right moment. It does not replace developer judgement or promise bug-free code; it helps make that judgement faster, more structured, and harder to skip.


    A Workflow, Not Another Tool

    1. Build with your AI coding agent — Work in the tools and flow you already use.
    2. Review with Nexpath — Let the Prompt Quality Layer surface missing verification, safety, scope, or maintenance steps while the context is still fresh.
    3. Ship confidently — Move forward after the important checks are visible, reviewed, and included in the task.

    Nexpath is one focused step inside a better shipping workflow — not a new place where development has to happen.

    Built during AI Hackfest 2026 by MLH.


    The Prompt Quality Layer — How It Works

    1. Understand — Nexpath reviews the prompt, the current development stage, and relevant workflow signals while preserving the complete original request.
    2. Structure — It builds one editable prompt with the sections the task needs, such as scope, constraints, acceptance expectations, verification, or missing-practice guidance.
    3. Safeguard — Higher-risk work can receive confirmation, safety, rollback, or evidence requirements. Complex work can also receive a sequence-aware breakdown when multiple prompts would be more effective.
    4. Review — You inspect and edit the result before sending it, or return to the original prompt. Nexpath provides the quality layer; you keep the final decision.

    Benchmarked on SWE-bench Verified

    Prompt quality is easy to demonstrate and hard to prove. To check whether Nexpath actually changes what a coding agent produces, we ran it against a public benchmark where the answer is graded by each project's own test suite — not by a person, and not by another model.

    Setup: Claude Code (sonnet) attempted 40 tasks from SWE-bench Verified twice — once on its own, once with the Nexpath-reviewed prompt. The task, starting commit, container, model, time limit, and tools were identical in both runs. The prompt is the only thing that changed. Grading used the official SWE-bench harness.

    Claude CodeClaude Code + Nexpath
    Tasks solved27/40 (67.5%)29/40 (72.5%)
    Issue's own tests pass27/40 (67.5%)29/40 (72.5%)
    Ran the project's tests before submitting38/40 (95.0%)39/40 (97.5%)

    Paired outcomes: solved by both — 27 · solved only with Nexpath — 2 · solved only without Nexpath — 0 · solved by neither — 11

    Full results

    Every number above traces to a file below. The full benchmark report (Nexpath_benchmark/README.md) has the method, the two tasks Nexpath won, and the eleven neither run could solve. These are the raw files behind it — all 40 tasks, both runs, and the list we locked before the first run.

    Complete reportBenchmark report
    Every task, both runsfinal_per_task.csv
    All measurementsfinal_summary.json
    Task list and settings, locked before the runstrat40-manifest.json
    Prompt checks run before startingpreflight-strat40.json
    Raw data for the confirmation-line testbefore · after

    How Nexpath Reduces Risk

    Fewer Silent Bugs and Missed Checks

    • Verification and test expectations can be added for debugging, maintenance, planning, review, and other tasks that need proof of completion.
    • Absence signals can surface missing regression checks, acceptance criteria, reproduction evidence, or project grounding.
    • Weak or unrelated signals are not used as filler; guidance must match the current task. The core interaction keeps your request and the added workflow guidance together:

    Safer High-Risk Changes

    • Sensitive actions can receive explicit confirmation, rollback, backup, or safety requirements before the reviewed prompt is used.
    • Double confirmation, cross-confirmation, and final confirmation are used only when the task's complexity or risk justifies them.
    • The quality layer does not silently expand authority, auto-send work, or treat an agent response as proof of completion.

    A More Maintainable Development Flow

    • Scope, constraints, acceptance expectations, affected surfaces, and behaviour-preservation needs stay visible instead of being lost in a fast request.
    • Complex work can be decomposed into a clear current task plus a compact, ordered sequence plan.

    Less Review Overhead, Without Losing Control

    • Your complete original request stays visible inside one editable, quality-reviewed prompt.
    • You can edit the result, use it, or return to the original request before the reviewed version is sent.

    Supported AI Coding Agents & Developer Tools

    Nexpath CLI is built for prompt capture across AI coding agents.

    AgentStatus in v0.1.58
    Claude CodeFully supported — end-to-end tested
    CursorFully supported — end-to-end tested
    WindsurfFully supported — end-to-end tested
    ReplitFully supported — end-to-end tested
    LovableFully supported — end-to-end tested
    Bolt.newFully supported — end-to-end tested

    Add Nexpath to Your Development Workflow — Installation

    # Install
    npm install -g nexpath-cli
    
    # Register with your coding agent
    nexpath install
    
    # Verify
    nexpath --version
    

    Setup notes:

    • The npm package is nexpath-cli; the commands it installs are nexpath and nexpath-serve. Requires Node 18 or later.
    • Building from source instead? See the contribution guide.
    • Install asks how Nexpath should run — one credential, two ways to give it: your own OpenAI API key (get one), or a Nexpath token from a free account at parseos.tech/nexpath if you would rather not create an OpenAI account. If both are configured, your OpenAI key is the one used.
    • During install you pick your project role (what kind of work you do) so Nexpath tailors its guidance to how you build.
    • Nexpath's core is Prompt Enhancement (PE), with Multi-Prompt Sequence (MPS) and Prompt Enhancement Feedback (PEF) — these work automatically as you code.

    Uninstalling

    # Remove the Nexpath CLI (package name: nexpath-cli, binary: nexpath)
    nexpath uninstall
    npm uninstall -g nexpath-cli
    npm unlink -g nexpath-cli    # only if you installed via npm link
    
    # Verify it's gone
    npm list -g nexpath-cli
    which nexpath
    
    # Clear local data and caches
    rm -rf ~/.nexpath
    rm -rf ~/.config/nexpath
    rm -rf ~/.local/share/nexpath
    rm -rf ~/.cache/nexpath
    
    # Clear the npm cache
    npm cache clean --force
    

    nexpath uninstall disconnects Nexpath from all detected agents and offers to clear the stored API key. The remaining steps remove the global package, any leftover binary, and all local data and caches.


    Configuration and Privacy

    Privacy Controls

    All data is stored locally only at ~/.nexpath/. Only targeted LLM calls used to classify or prepare relevant guidance leave your machine.

    • Automatic secret redaction — API keys (sk-*, ghp_*, ghu_*), bearer tokens, and PEM blocks are automatically stripped from prompts before storage.
    • Telemetry is off unless you turn it on — install does not ask and does not enable it; it starts off and stays off until you run nexpath config set telemetry.enabled true. Local prompt capture and remote telemetry are independent — disable capture anytime via nexpath store disable (if you do this, nothing will work).

    Deleting Stored Prompts

    # Delete prompts for a specific project you no longer want to keep
    nexpath store delete --project <path>
    
    # Delete all stored prompts permanently
    nexpath store delete -y
    

    Troubleshooting

    No Popup, Or A Suggestion That Looks Wrong?

    Run nexpath status. It reports which credential is in effect and the last LLM call that failed — for example a key that has run out of credit, been revoked, or been replaced. When a call fails Nexpath falls back to local detection and goes quiet, which looks like nothing happening rather than like an error.

    Where Is My API Key Stored?

    PlatformDefault locationInspect with
    macOSKeychainKeychain Access.app → search "nexpath"
    LinuxSecret Service (libsecret)secret-tool lookup service nexpath account openai_api_key
    WindowsCredential ManagerControl Panel → Credential Manager → Web Credentials
    Fallback (any OS)~/.nexpath/config.json (mode 0600)cat ~/.nexpath/config.json

    Use nexpath config show-key-source to confirm which layer is currently active.


    Contributing

    Contribution guide


    License

    Apache License 2.0


    Acknowledgements

    • Major League Hacking (MLH) — For organizing AI Hackfest 2026
    • Anthropic — For Claude Code, our primary development environment
    • OpenAI — For models used in targeted classification and prompt-quality tasks
    • Google — For Gemini AI, planned as an alternative LLM provider alongside OpenAI

    Built with insights from the vibe coding community and developers building real projects with AI coding agents, coding AI tools, and AI developer tools.