🚀 Socket Launch Week Day 5:Introducing Repository Access Permissions and Custom Roles.Learn more
Sign In

@graph8/devex

Package Overview
Dependencies
Maintainers
1
Versions
13
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@graph8/devex

DevEx bootstrap CLI for spec-driven development with Cursor

npmnpm
Version
1.5.2
Version published
Weekly downloads
39
44.44%
Maintainers
1
Weekly downloads
 
Created
Source

g8-devex

Canonical Cursor governance + spec-driven development rules for graph8 repos.

What This Repo Is

A template payload + CLI consumed by npx @graph8/devex init to bootstrap:

  • .cursor/rules/* — Cursor enforcement rules
  • Governance files — manifesto.md, standards.md, playbook.md, AGENTS.md
  • specs/ — Spec-driven development scaffolding

Quick Start

In any target repo:

npx @graph8/devex init

Then commit the created files. Done.

Commands

npx @graph8/devex init

Bootstrap governance + Cursor rules into current repo.

Safe mode (default):

  • Creates missing files only
  • Never overwrites existing files
  • Leaves custom rules untouched
npx @graph8/devex init

Force mode:

  • Overwrites existing standard files with latest templates
npx @graph8/devex init --force

npx @graph8/devex doctor

Check repo DevEx health and report issues.

npx @graph8/devex doctor        # Check health
npx @graph8/devex doctor --fix  # Auto-fix issues

Reports:

  • Missing governance files and Cursor rules
  • Placeholder detection in AGENTS.md
  • Backlog sync with spec directories
  • Custom rules missing globs patterns
  • Governance Level (0–5)

Smart Init

Init automatically detects your repo structure and fills in AGENTS.md:

  • Monorepo detection: Scans apps/, packages/, services/, src/
  • Multi-stack: Detects Python + Node in same repo
  • Path-aware commands: Generates cd apps/backend && pip install

Example output for a monorepo:

Install: `cd apps/backend && pip install` && `cd apps/frontend && npm install`
Test: `cd apps/backend && pytest` && `cd apps/frontend && npm test`

What Gets Installed

Cursor Rules (.cursor/rules/)

FilePurpose
00-principles.mdcCore engineering philosophy
10-governance.mdcRule severity levels, dependency rules
20-spec-protocol.mdcWhen/how to create specs before coding
90-emergency.mdcHard stops, escalation triggers

Governance Files

FilePurpose
manifesto.mdEngineering philosophy
standards.mdTechnical standards and constraints
playbook.mdTeam process and SLOs
AGENTS.mdQuick commands for AI agents

Specs Directory

FilePurpose
specs/backlog.mdTracks active and completed specs
specs/plan.template.mdTemplate for new specs

Cursor Skills (.cursor/rules/skills/)

FilePurpose
spec-author.mdcCompress intent into structured specs
scoped-implementer.mdcImplement exactly what spec defines
proof-gate.mdcRequire verification evidence
agents-updater.mdcGenerate comprehensive AGENTS.md

AI-Powered AGENTS.md

After g8 init, open Cursor and say "update AGENTS.md" to generate comprehensive documentation:

  • Project Overview
  • Tech Stack (auto-detected)
  • Architecture
  • File Structure
  • Environment Variables
  • Development Patterns
  • API Routes / Database Schema

The agent analyzes your repo and imports from existing CLAUDE.md if present.

Documentation

  • Migration Guide — migrate from .cursorrules to .cursor/rules/
  • Spec Example — real example of a well-structured spec
  • Changelog — version history

Versioning

This repo is versioned via git tags (e.g. v1.0.0). The CLI defaults to the version it was published with.

Development

# Install dependencies
npm install

# Build
npm run build

# Test locally
node dist/index.js init

Safety Guarantees

ScenarioBehavior
Standard file missingCreate
Standard file existsSkip
Standard file modifiedReport only
Custom rule fileLeave untouched
.cursorrules presentWarn; do not delete

Overwrite requires explicit --force.

Keywords

devex

FAQs

Package last updated on 26 Dec 2025

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts