@goodtek/vibeops 0.7.22 → 1.0.0

package/CHANGELOG.md

@@ -2,7 +2,27 @@
 
 All notable changes to VibeOps are documented here.
 
-## Unreleased
+## 1.0.0 - 2026-05-27
+
+### Breaking
+
+- **Four commands only:** `init`, `task add`, `task done`, `status`.
+- **Removed:** `plan`, `start`, `next`, `rollback`, `notion`, `github`, `task generate`, `task check`, `task prompt`, `task pull`, `agent`, and separate `task status`.
+- **Removed Notion:** no `@notionhq/client`, no Notion config in `.vibeops.json`.
+- **Single TASK model:** `TASK-NNN-<slug>.md` only (no `TASK-mvp` workflow).
+- **`task add`:** if a TASK is In Progress, **guide only** and exit 1 — no auto `task done`.
+- **Templates:** no `.vibeops/agents`, workflows, or prompts; slim `docs/project/` set.
+
+### Added
+
+- **`task add`** creates TASK file, task branch, and In Progress status in one step (replaces `start`).
+- **`task done`** LLM assist for Result/Test Result and patches to `05-current-state`, `06-decisions`, `03-architecture`, daily log.
+- **Unified `status`** briefing without Notion/GitHub sections.
+- v3 Cursor rules (3) and optional skills (`plan-task`, `implement-task`).
+
+### Fixed
+
+- Governance stash **pop** after branch switch so new TASK files stay on disk.
 
 ## 0.7.22 - 2026-05-16
 

package/README.md

@@ -1,425 +1,105 @@
 # VibeOps
 
-> Workflow rails for Cursor-based vibe coding projects.
+> Minimal CLI rails for Cursor-based TASK-driven vibe coding.
 
 [![npm version](https://img.shields.io/npm/v/@goodtek/vibeops.svg)](https://www.npmjs.com/package/@goodtek/vibeops)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
 
-VibeOps is a local CLI that installs and operates the project structure needed to run Cursor-based vibe coding as reproducible TASKs: `AGENTS.md`, Cursor rules, project docs, TASK files, agents/prompts/workflows, Git lifecycle helpers, and optional Notion dashboard sync.
+VibeOps bootstraps a **Cursor-friendly repo**, starts numbered **TASK** files on Git branches, and closes them while updating **project memory** in Git. Cursor plans and implements; the CLI handles files, Git, and short LLM assists.
 
-VibeOps does not write product code for you. Cursor is the builder. VibeOps keeps the workflow on rails.
+## Four commands
 
-## What Is VibeOps?
+| Command | Purpose |
+|---------|---------|
+| `vibeops init` | Install AGENTS.md, Cursor rules/skills, docs layout, `.vibeops.json` |
+| `vibeops task add` | New `TASK-NNN` file + task branch (blocks if another TASK is In Progress) |
+| `vibeops task done` | LLM fills Result/Test + updates project docs; commit + merge |
+| `vibeops status` | Briefing: active TASK, branch, doc health, next hint |
 
-VibeOps is a **local CLI** for turning an idea into a repository that Cursor agents can work on safely and repeatably.
-
-It gives a project:
-
-- `docs/project/*` for product and architecture context.
-- `docs/tasks/TASK-*.md` as the AI execution source of truth.
-- `.cursor/rules/*` and `AGENTS.md` so Cursor knows how to behave.
-- `.vibeops/agents`, `.vibeops/prompts`, `.vibeops/workflows` for reusable agent instructions.
-- MVP workflow: `plan` → `start` → build in Cursor → `done` (Git merge included).
-- Notion metadata sync for a human dashboard.
-
-## Why It Exists
-
-Vibe coding is fast, but chat history is a weak source of truth. Without a durable workflow, agents repeat work, drift outside scope, lose decision history, and leave teammates without a dashboard. VibeOps moves the durable context into Git files and uses CLI commands to keep each TASK bounded.
-
-## Core Philosophy
-
-- **VibeOps = workflow rail**: it structures the work, validates state, and prints prompts.
-- **Cursor = builder**: Cursor reads the docs/TASKs and writes application code.
-- **Git `docs/tasks` = AI execution source of truth**: TASK markdown beats chat memory.
-- **Notion = human dashboard**: Notion shows metadata and progress, not canonical task bodies.
-
-| What | Source of truth |
-| --- | --- |
-| AI execution input | Git `docs/tasks/*.md` |
-| Project design/status | Git `docs/project/*.md` |
-| Change and rollback evidence | Git commits/branches |
-| Human dashboard | Notion Projects/Tasks DB |
-| Not a source of truth | Cursor chat, Slack, memory |
-
-## Installation
-
-VibeOps requires Node.js 20+.
-
-```bash
-npm install -g @goodtek/vibeops
-vibeops --help
-```
-
-The published package is `@goodtek/vibeops`. The installed CLI command is `vibeops`.
-
-For local development from this repository:
-
-```bash
-pnpm install
-pnpm build
-node dist/cli.js --help
-```
-
-## Quick Start
-
-```bash
-# 1. Install VibeOps workflow files into the current project.
-# Interactive mode can also initialize Git and create the first commit.
-vibeops init
-
-# Non-interactive Git bootstrap:
-vibeops init --git --initial-commit
-
-# 2. LLM planning → brief + TASK-mvp + mvp-build.md (OpenAI, Codex OAuth, or Cursor agent CLI).
-vibeops plan
-
-# 3. Task branch for the single MVP TASK.
-vibeops start
-
-# 4. Drag .vibeops/generated/mvp-build.md into a new Cursor chat and implement.
-
-# 5. Finish: verify Result/Test Result, merge to main, delete task branch.
-vibeops done
-
-# 6. Optional: interactive nudge
-vibeops next
-
-# 7. Optional Notion dashboard sync.
-vibeops notion init
-vibeops notion test
-vibeops notion sync --dry-run
-```
-
-## Quick Tutorial: Acme Automator
-
-Suppose the idea is: “Build **Acme Automator**, a SaaS that schedules and runs browser automation jobs for marketing teams.”
-
-```bash
-mkdir acme-automator
-cd acme-automator
-
-vibeops init --name "Acme Automator" --git --initial-commit
-vibeops plan --idea "Acme Automator: schedule and run browser automation jobs for marketing teams"
-vibeops start
-# Drag .vibeops/generated/mvp-build.md into Cursor and build the MVP.
-vibeops done
-```
-
-If a Notion dashboard is enabled:
-
-```bash
-vibeops notion init
-vibeops notion test
-vibeops notion sync --dry-run
-vibeops notion sync
-```
-
-## Full Command Flow
-
-```text
-vibeops
-├─ init
-├─ plan
-├─ start [mvp]
-├─ done [mvp]
-├─ next
-├─ status
-├─ rollback [mvp]
-├─ notion { init | test | sync }
-└─ github { status | init }
-```
-
-Run any command with `--help` for the option details.
-
-## Features
-
-### Project Bootstrapper
-
-`vibeops init` installs a project operating system: `AGENTS.md`, `.cursor/rules`, `docs/project`, `docs/tasks`, `.vibeops/agents`, `.vibeops/prompts`, `.vibeops/workflows`, `.vibeops.json`, and `.vibeops.env.example`. It is idempotent by default and only overwrites when `--force` is used.
-
-### Interactive Planner
-
-`vibeops plan` (requires `.vibeops.json`) runs an LLM discovery session (OpenAI, Codex OAuth, or Cursor Agent CLI), then writes:
-
-- `.vibeops/brief/project-brief.md`
-- `docs/tasks/TASK-mvp-*.md`
-- `.vibeops/generated/mvp-build.md` — **drag this file into Cursor** to implement the MVP
-
-Use `--from` to regenerate MVP artifacts from an edited brief. Use `--non-interactive` in CI (placeholders only).
-
-### MVP Git Rails
-
-- `vibeops start` — task branch + Git Context on **TASK-mvp**
-- `vibeops done` — verify Result/Test Result, mark Done, merge, **Notion sync** (when enabled), post-MVP dirty-tree cleanup, next-task LLM suggestion
-- `vibeops next` — interactive guide (start → build → finish)
-- `vibeops rollback` — advisory by default; `--confirm` / `--confirm-destructive` to execute
-
-### Notion Dashboard Sync
-
-`notion init/test/sync` pushes project + TASK **metadata** only (not markdown bodies).
-
-## Runner Modes
-
-- **Prompt mode (default)**: VibeOps prints Cursor-ready prompts. Cursor executes the code changes.
-- VibeOps does not call LLM APIs and does not invoke Cursor CLI directly today; it works as a workflow rail around the human + Cursor loop.
-
-## Notion Setup
-
-Notion is optional. If enabled:
-
-- `NOTION_TOKEN` is the **only** environment variable VibeOps reads. It lives in `.vibeops.env` (gitignored) or in `process.env`.
-- Target IDs live in `.vibeops.json`, not in `.vibeops.env`.
-- `projectsTargetId` / `tasksTargetId` are preferred resolved **data_source** IDs.
-- `projectsDatabaseId` / `tasksDatabaseId` remain legacy/container fallbacks.
-- `notion init` uses data_source-first discovery. If no data sources are found, it can search accessible pages, scan 1-depth inline database blocks, then resolve child databases to data source IDs.
-- Legacy `NOTION_API_KEY` / `NOTION_PROJECT_DB` / `NOTION_TASK_DB` environment variables are no longer used. The `.vibeops.env.example` that `vibeops init` writes contains only `NOTION_TOKEN=`.
-
-Required Projects DB properties:
-
-| Property | Type |
-| --- | --- |
-| `Name` | `title` |
-| `Project ID` | `rich_text` |
-| `Status` | `status` |
-| `Local Path` | `rich_text` |
-| `Git Repo` | `rich_text` or `url` |
-| `Current Phase` | `select` |
-| `Docs Path` | `rich_text` |
-| `Summary` | `rich_text` |
-
-Required Tasks DB properties:
-
-| Property | Type |
-| --- | --- |
-| `Name` | `title` |
-| `Task ID` | `rich_text` |
-| `Project ID` | `rich_text` |
-| `Status` | `status` |
-| `Priority` | `select` |
-| `MVP Phase` | `select` |
-| `Git Branch` | `rich_text` |
-| `Docs Path` | `rich_text` |
-| `Summary` | `rich_text` |
-| `Result Summary` | `rich_text` |
-
-> `MVP Phase` here is a Notion property name kept for compatibility with existing dashboards. It is a free-form label column and is not an internal release-phase tag.
-
-Required Status options:
-
-- Projects DB: `Building`, `Planning`, `Paused`, `Done`, `Archived`
-- Tasks DB: `Planned`, `In Progress`, `Review`, `Done`, `Blocked`
-
-VibeOps validates these options in `notion test` and `notion sync --dry-run`, but it never creates or mutates Notion schema.
-
-## GitHub Setup
-
-GitHub integration runs on top of the GitHub CLI (`gh`). VibeOps never stores `GITHUB_TOKEN` — authentication is owned by `gh auth login`.
-
-1. Install `gh`:
-
-   ```bash
-   brew install gh
-   # or follow https://cli.github.com/
-   ```
-
-2. Authenticate:
-
-   ```bash
-   gh auth login
-   ```
-
-3. Probe state:
-
-   ```bash
-   vibeops github status
-   ```
-
-4. Connect or create a repo interactively:
-
-   ```bash
-   # plan only — no gh / git / file mutation
-   vibeops github init --dry-run
-
-   # plan a new public repo
-   vibeops github init --dry-run --owner <user> --repo <name> --public
-
-   # connect to an existing repo by slug or URL
-   vibeops github init --dry-run --connect <owner>/<repo>
-   vibeops github init --dry-run --connect https://github.com/<owner>/<repo>.git
-   vibeops github init --dry-run --connect git@github.com:<owner>/<repo>.git
-   ```
-
-`vibeops github init` applies four things in sequence:
-
-- (optional) `gh repo create <owner>/<repo> --public|--private --source=. --remote=origin` for new repos.
-- `git remote add origin <url>` (or `git remote set-url`) for the `--connect` path. Existing remotes are never silently overwritten — VibeOps asks first and defaults to No.
-- Updates `package.json` `repository.url`, `homepage`, `bugs.url` (skip with `--no-package-update`).
-- Writes the `github` section of `.vibeops.json`: `enabled`, `mode = "gh-cli"`, `owner`, `repo`, `remote`, `visibility`, `url`.
-
-VibeOps never runs `git push`. Push your branch manually with `git push -u <remote> <branch>`.
-
-## Init Git Bootstrap
-
-`vibeops init` can optionally do the first local Git setup while installing the workflow files. In interactive mode it asks:
-
-- Initialize Git repository?
-- Use `main` as default branch?
-- Create initial commit?
-- Initial commit message
-
-For non-interactive setup:
+## Workflow
 
 ```bash
-vibeops init --git --initial-commit
-vibeops init --git --no-initial-commit
-vibeops init --git --default-branch main --commit-message "chore: initialize vibeops project"
-```
-
-Safety rules:
+vibeops init --git --initial-commit   # once per repo
 
-- Existing Git repositories skip `git init`.
-- Existing repositories with commits skip the initial commit path.
-- `--dry-run` runs no Git commands.
-- VibeOps never pushes and never changes remotes during `init`.
-- Before the initial commit, VibeOps prints how many files will be included.
+vibeops task add                      # interactive: idea → TASK file + branch
+# Plan in Cursor Ask:  @docs/tasks/TASK-NNN-….md
+# Build in Cursor Agent: same file + Scope / Acceptance Criteria
 
-Before the first commit, `vibeops status` distinguishes an unborn branch from a detached HEAD:
-
-```text
-Git
-  branch  main (unborn, no commits yet)
-  status  dirty
-  hint    create the first commit or run `vibeops init --git --initial-commit`
+vibeops task done                     # close TASK, update memory, merge branch
+vibeops status                        # anytime snapshot
 ```
 
-## Status Output
-
-`vibeops status` summarizes the local project surface only. It never calls the Notion API and never spawns `gh`. The Notion section reads from `.vibeops.env` / `process.env` (for `NOTION_TOKEN` presence) and `.vibeops.json` (for target IDs). The GitHub section reads from `.vibeops.json`. The Package section reads from `package.json`.
-
-Example output for a fully-configured project:
-
-```text
-Git
-  branch  main
-  status  clean
-
-Notion
-  enabled          yes
-  token            configured (.vibeops.env)
-  projects target  configured
-  tasks target     configured
-  hint             run `vibeops notion test`
-
-GitHub
-  enabled     yes
-  mode        gh-cli
-  owner/repo  goodtekxyz/vibeops
-  remote      origin
-  url         https://github.com/goodtekxyz/vibeops
-
-Package
-  name     @goodtek/vibeops
-  version  0.2.0
-  bin      vibeops
-```
+If a TASK is already **In Progress**, `task add` prints a guide and exits with code 1 — it does **not** auto-run `task done`.
 
-For a fresh project that has not been wired to Notion or GitHub yet:
+## What `init` creates
 
-```text
-Notion
-  enabled          no
-  token            missing
-  projects target  missing
-  tasks target     missing
-  hint             run `vibeops notion init`
+| Path | Role |
+|------|------|
+| `AGENTS.md` | Source of truth, read order, four CLI commands |
+| `.cursor/rules/` | Task source of truth, Git safety, docs on done |
+| `.cursor/skills/` | Optional `plan-task` and `implement-task` skills |
+| `docs/tasks/TASK-000-template.md` | Section template for new TASKs |
+| `docs/project/05-current-state.md` | Facts: stage, active TASK, next step |
+| `docs/project/06-decisions.md` | Append-only decision log |
+| `docs/project/03-architecture.md` | Living architecture |
+| `docs/logs/README.md` | Daily log convention |
+| `.vibeops.json` | Project metadata (no Notion) |
 
-GitHub
-  enabled  no
-  hint     run `vibeops github init`
-```
+## Source of truth
 
-If the project has no `package.json`, the Package section degrades gracefully:
+| What | Where |
+|------|--------|
+| Current work | `docs/tasks/TASK-NNN-*.md` |
+| Project memory | `docs/project/05-current-state.md`, `03-architecture.md`, `06-decisions.md` |
+| Change history | Git commits on task branches |
+| **Not** trusted | Cursor chat, Slack |
 
-```text
-Package
-  package.json missing
-```
+## LLM (optional)
 
-`vibeops status --json` exposes the same surface programmatically, including `notion.tokenSource`, `notion.hasProjectsTarget`, `notion.hasTasksTarget`, the entire `github` object, and the entire `package` object. Legacy environment variables (`NOTION_API_KEY`, `NOTION_PROJECT_DB`, `NOTION_TASK_DB`) are no longer surfaced — VibeOps only uses `NOTION_TOKEN`.
+Used only for **`task add`** (scaffold title/slug/sections) and **`task done`** (Result, Test Result, project doc patches).
 
-## Git Rollback Safety
+Providers (first match wins): Codex OAuth (`~/.codex/auth.json`), Cursor Agent CLI, `OPENAI_API_KEY` in `.vibeops.env`.
 
-- `task start` records base branch, base commit, and task branch in task state.
-- `task check` is read-only and reports working tree + committed changes.
-- `task done` validates TASK Result/Test Result and moves to Review by default.
-- `task rollback` is advisory unless explicit confirmation flags are supplied.
+Without LLM, `task add` falls back to a minimal template; `task done` uses a git-diff fallback for Result sections.
 
-## Agent Workflow
+## Installation
 
-Agents are Markdown files under `.vibeops/agents`. Use:
+Node.js 20+ required.
 
 ```bash
-vibeops agent list
-vibeops agent show builder
-vibeops task prompt TASK-001 --agent builder
-```
-
-The default project template includes agents such as `orchestrator`, `planner`, `architect`, `builder`, `reviewer`, `tester`, `docs`, and `recovery`.
-
-## Packaging / npm Usage
-
-This package exposes the `vibeops` binary:
-
-```json
-{
-  "bin": {
-    "vibeops": "dist/cli.js"
-  }
-}
+npm install -g @goodtek/vibeops
+vibeops --help
 ```
 
-Package contents are limited by `package.json#files` to built output, templates, and top-level docs/license files. `dist/` is generated by `pnpm build` / `prepack` and is not committed.
-
-Useful maintainer commands:
+Local development:
 
 ```bash
-pnpm typecheck
+pnpm install
 pnpm build
-pnpm smoke
-pnpm pack
-pnpm publish --dry-run --access public --no-git-checks
+pnpm smoke          # typecheck + build + smoke cases
+node dist/cli.js --help
 ```
 
-Actual `npm publish` is a manual release action and is not performed by this repository workflow.
+## Flags (common)
 
-## Security Notes
+- **`init`**: `--dry-run`, `--cwd`, `--name`, `--git`, `--no-git`, `--initial-commit`, `--force`
+- **`task add`**: `--dry-run`, `--non-interactive --idea "…"` (CI/smoke)
+- **`task done`**: `--dry-run`, `--no-merge`, `--allow-dirty`, `--yes`, `--cwd`
+- **`status`**: `--json`, `--cwd`
 
-- `.vibeops.env` is gitignored and must contain secrets such as `NOTION_TOKEN`.
-- VibeOps masks tokens in CLI output.
-- Notion test/debug output is token-safe.
-- `notion sync --dry-run` performs no mutation.
-- `task pull --dry-run` performs no file or Notion mutation.
-- Notion page bodies are never synced.
-- Git destructive rollback paths require explicit confirmation.
-- `github init` uses `gh` CLI auth — VibeOps never stores `GITHUB_TOKEN`.
-- `github init --dry-run` runs zero `gh` / `git remote` / file mutations and produces only a plan.
+## Git conventions
 
-## Support
+- Task branch: `task/<slug>` from current HEAD
+- Commit message: `feat(task-nnn): <short title>`
+- Merge via `task done` (confirm in TTY; `--yes` to skip prompt)
+- No force-push
 
-- Bugs, setup issues, and usage questions: [support@goodtek.xyz](mailto:support@goodtek.xyz)
-- Collaboration and feedback: [hello@goodtek.xyz](mailto:hello@goodtek.xyz)
-- Issue tracker: [github.com/goodtekxyz/vibeops/issues](https://github.com/goodtekxyz/vibeops/issues)
+## Breaking change: 1.0.0
 
-## Documentation
+v1.0 removes `plan`, `start`, `next`, `rollback`, `notion`, `github`, and legacy task subcommands. Pin `@goodtek/vibeops@0.7` if you still need them.
 
-- [`AGENTS.md`](AGENTS.md) — agent operating guide.
-- [`docs/project/00-overview.md`](docs/project/00-overview.md) — vision and scope.
-- [`docs/project/01-architecture.md`](docs/project/01-architecture.md) — CLI / config / data flow.
-- [`docs/project/03-current-state.md`](docs/project/03-current-state.md) — current implementation state.
-- [`docs/project/04-decisions.md`](docs/project/04-decisions.md) — decisions already made.
-- [`docs/project/05-backlog.md`](docs/project/05-backlog.md) — task order.
-- [`docs/tasks/`](docs/tasks/) — TASK files used by Cursor.
+See [CHANGELOG.md](CHANGELOG.md) and [docs/project/v3-scope.md](docs/project/v3-scope.md).
 
 ## License
 
-MIT © VibeOps contributors
+MIT

package/dist/bootstrap/installer.js

@@ -6,24 +6,12 @@ import { loadManifest, resolveDestination } from "./manifest.js";
 import { applySubstitutions, buildSubstitutions, isTextPath, } from "./substitute.js";
 import { configToJson } from "../lib/config.js";
 function envExampleContents() {
-    // Modern VibeOps reads exactly one Notion secret: NOTION_TOKEN.
-    // Notion Projects / Tasks target IDs live in `.vibeops.json` under
-    // `notion.projectsTargetId` / `notion.tasksTargetId` (configured by
-    // `vibeops notion init`), so they are NOT environment variables.
-    //
-    // We intentionally do NOT seed GITHUB_TOKEN / OPENAI_* here:
-    //   - GitHub integration uses `gh` CLI auth.
-    //   - VibeOps' default runner is prompt mode and does not call LLM APIs.
     return [
-        "# VibeOps · environment example",
-        "# Copy this file to .vibeops.env and fill in the value.",
-        "# Never commit .vibeops.env — it is added to .gitignore by `vibeops init`.",
+        "# VibeOps · optional environment",
+        "# Copy to .vibeops.env (gitignored). Never commit secrets.",
         "#",
-        "# NOTION_TOKEN is the only secret VibeOps reads. Get it from",
-        "# https://www.notion.so/profile/integrations after creating an internal",
-        "# integration and sharing the target databases with it.",
-        "",
-        "NOTION_TOKEN=",
+        "# LLM for task add / task done (optional — Codex OAuth and Cursor Agent CLI also work):",
+        "# OPENAI_API_KEY=",
         "",
     ].join("\n");
 }