@jgiox/goodvibes 1.1.0 → 1.4.0

package/dist/index.js

@@ -4,7 +4,8 @@
 import { Command } from "commander";
 
 // src/commands/init.ts
-import { intro, outro, note, tasks } from "@clack/prompts";
+import { readdirSync } from "fs";
+import { intro, outro, note, tasks, cancel } from "@clack/prompts";
 
 // src/steps/copy-templates.ts
 import { copy } from "fs-extra";
@@ -104,26 +105,46 @@ async function copyTemplates(templateDir, destDir, dryRun, minimal, projectType
   const selectedVariant = `ci-${projectType}.yml`;
   if (dryRun) {
     const all = await listTemplateFiles(templateDir);
-    return all.filter((p) => !ciVariants.some((v) => p.endsWith(v) && v !== selectedVariant));
+    return { written: all.filter((p) => !ciVariants.some((v) => p.endsWith(v) && v !== selectedVariant)), skipped: [] };
   }
-  await copy(templateDir, destDir, {
-    overwrite: false,
-    errorOnExist: false,
-    filter: (src) => {
-      if (src.endsWith("CLAUDE.md")) return false;
-      if (minimal && src.includes(".github/workflows")) return false;
-      if (relative(templateDir, src).includes("..")) return false;
-      for (const variant of ciVariants) {
-        if (src.endsWith(variant) && variant !== selectedVariant) return false;
+  const existingBefore = /* @__PURE__ */ new Set();
+  if (existsSync(destDir)) {
+    const beforeFiles = await walkDir(destDir, destDir).catch(() => []);
+    for (const f of beforeFiles) existingBefore.add(f);
+  }
+  const skippedFiles = [];
+  const destCiYml = join(destDir, ".github", "workflows", "ci.yml");
+  try {
+    await copy(templateDir, destDir, {
+      overwrite: false,
+      errorOnExist: false,
+      filter: (src) => {
+        if (src.endsWith("CLAUDE.md")) return false;
+        const rel = relative(templateDir, src);
+        if (minimal && (rel.startsWith(".github") || rel.startsWith("docs"))) return false;
+        if (rel.includes("..")) return false;
+        if (src.endsWith(selectedVariant) && existsSync(destCiYml)) return false;
+        for (const variant of ciVariants) {
+          if (src.endsWith(variant) && variant !== selectedVariant) return false;
+        }
+        return true;
       }
-      return true;
-    }
-  });
+    });
+  } catch (e) {
+    const err = e;
+    const hint = err.code === "EACCES" || err.code === "EPERM" ? "Check directory permissions." : "Check available disk space.";
+    err.message = `Cannot copy template files: ${err.message}. ${hint}`;
+    throw err;
+  }
   if (!minimal) {
     const variantPath = join(destDir, ".github", "workflows", selectedVariant);
     const ciPath = join(destDir, ".github", "workflows", "ci.yml");
     if (existsSync(variantPath)) {
-      await rename(variantPath, ciPath);
+      if (existsSync(ciPath)) {
+        skippedFiles.push(".github/workflows/ci.yml");
+      } else {
+        await rename(variantPath, ciPath);
+      }
     }
   }
   const claudeSrc = join(templateDir, "CLAUDE.md");
@@ -131,7 +152,11 @@ async function copyTemplates(templateDir, destDir, dryRun, minimal, projectType
   const templateContent = await readFile2(claudeSrc, "utf-8");
   await mergeClaude(claudeDest, templateContent);
   const destFiles = await walkDir(destDir, destDir);
-  return destFiles.sort();
+  const allDestFiles = destFiles.sort();
+  const written = allDestFiles.filter((f) => !existingBefore.has(f));
+  const writtenWithClaude = written.includes("CLAUDE.md") ? written : ["CLAUDE.md", ...written];
+  const skipped = [...allDestFiles.filter((f) => existingBefore.has(f) && f !== "CLAUDE.md"), ...skippedFiles];
+  return { written: writtenWithClaude.sort(), skipped: skipped.sort() };
 }
 
 // src/steps/install-headroom.ts
@@ -262,15 +287,24 @@ function registerInitCommand(program2) {
     const cwd = process.cwd();
     const projectType = detectProjectType(cwd);
     const templateDir = resolveTemplatesDir();
+    const ciVariants = ["ci-node.yml", "ci-python.yml", "ci-both.yml"];
+    const selectedVariant = `ci-${projectType}.yml`;
     intro("goodvibes init");
+    const existingEntries = readdirSync(cwd).filter((e) => e !== ".git" && e !== ".DS_Store");
+    if (existingEntries.length > 0) {
+      note("Existing files will not be overwritten.", "Non-empty project detected");
+    }
     if (dryRun) {
-      const files = await listTemplateFiles(templateDir);
+      const allFiles = await listTemplateFiles(templateDir);
+      const files = minimal ? allFiles.filter((f) => !f.startsWith(".github") && !f.startsWith("docs")) : allFiles.filter((f) => !ciVariants.some((v) => f.endsWith(v) && v !== selectedVariant));
       note(files.map((f) => `  Would write: ${f}`).join("\n"), "Dry run \u2014 no files written");
       note(
         [
-          "1. Open this project in Claude Code",
-          "2. In Claude Code CLI: /plugin marketplace add DietrichGebert/ponytail",
-          "3. Start coding \u2014 CLAUDE.md rules are already active"
+          "1. Open this project in your AI coding tool",
+          "2. Claude Code users: /plugin marketplace add DietrichGebert/ponytail",
+          "   Other IDEs (Cursor, Windsurf, Kiro, Antigravity, etc.): rules already active",
+          "3. Start coding \u2014 CLAUDE.md rules are already active",
+          ...minimal ? ["4. Run without --minimal to also add CI workflows and docs."] : []
         ].join("\n"),
         "Next steps"
       );
@@ -278,13 +312,15 @@ function registerInitCommand(program2) {
       return;
     }
     const createdFiles = [];
+    const skippedFiles = [];
     const taskList = [
       {
         title: "Copying template files",
         task: async (message) => {
-          const files = await copyTemplates(templateDir, cwd, false, minimal, projectType);
-          createdFiles.push(...files);
-          return `Copied ${files.length} files`;
+          const { written, skipped } = await copyTemplates(templateDir, cwd, false, minimal, projectType);
+          createdFiles.push(...written);
+          skippedFiles.push(...skipped);
+          return `Copied ${written.length} files`;
         }
       }
     ];
@@ -306,14 +342,34 @@ function registerInitCommand(program2) {
         }
       );
     }
-    await tasks(taskList);
-    note(createdFiles.join("\n"), "Files created");
+    try {
+      await tasks(taskList);
+    } catch (e) {
+      const err = e;
+      const msg = err.code === "EACCES" || err.code === "EPERM" ? `Cannot write files to ${cwd}.
+Why: You do not have write permission here.
+Fix: Make sure you are inside your project directory before running this command.
+      If permissions are the issue: chmod u+w ${cwd}  (macOS/Linux) or check folder properties (Windows)` : `Setup failed: ${err.message ?? String(e)}`;
+      cancel(msg);
+      process.exit(1);
+    }
+    note(createdFiles.join("\n") || "(none)", `Files written (${createdFiles.length})`);
+    if (skippedFiles.length > 0) {
+      note(skippedFiles.join("\n"), `Files skipped (${skippedFiles.length})`);
+    }
     const nextSteps = [
-      "1. Open this project in Claude Code",
-      "2. In Claude Code CLI: /plugin marketplace add DietrichGebert/ponytail",
+      "1. Open this project in your AI coding tool",
+      "2. Claude Code users: /plugin marketplace add DietrichGebert/ponytail",
+      "   Other IDEs (Cursor, Windsurf, Kiro, Antigravity, etc.): rules already active",
       "3. Start coding \u2014 CLAUDE.md rules are already active"
     ].join("\n");
     note(nextSteps, "Next steps");
+    if (minimal) {
+      note(
+        "CI workflows and docs were skipped.\nRun goodvibes init without --minimal to add them.",
+        "Skipped layers"
+      );
+    }
     outro("You're all set!");
   });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jgiox/goodvibes",
-  "version": "1.1.0",
+  "version": "1.4.0",
   "description": "One-command bootstrap for vibe coding projects",
   "type": "module",
   "bin": {
@@ -24,7 +24,10 @@
     "claude",
     "llm",
     "starter-kit",
-    "cli"
+    "cli",
+    "ai-coding",
+    "claude-code",
+    "copilot"
   ],
   "publishConfig": {
     "access": "public"
@@ -37,7 +40,7 @@
     "test:watch": "vitest"
   },
   "dependencies": {
-    "commander": "^15",
+    "commander": "^13",
     "@clack/prompts": "^1",
     "fs-extra": "^11",
     "execa": "^9"

package/templates/.amazonq/rules/goodvibes.md

@@ -0,0 +1,28 @@
+## Engineering Rules — goodvibes
+
+### Think before coding
+State assumptions before implementing. Stop if an assumption is security-sensitive, schema-sensitive, or has multiple materially different interpretations.
+
+### Simplicity first
+Stop at the first rung that holds:
+
+1. Does this need to exist at all? Speculative need → skip it. (YAGNI)
+2. Already in this codebase? Reuse it.
+3. Stdlib does it? Use it.
+4. Native platform feature covers it? Use it.
+5. Already-installed dependency solves it? Use it.
+6. Can it be one line? One line.
+7. Only then: the minimum code that works.
+
+No unrequested abstractions. No boilerplate for later. Deletion over addition.
+
+### Surgical changes
+Keep diffs narrow. No opportunistic reformats. No renames unless the task requires it. Only remove what your change made unused.
+
+### Fail loud
+No empty `catch` blocks. No silent retries. No returning fake success on real failure. Error messages must be actionable.
+
+### Security
+Validate input at the boundary. Keep secrets out of code and logs. Apply least privilege.
+
+Flag immediately: SQL injection, XSS, command injection, path traversal, broken auth, leaked secrets.

package/templates/.claude/skills/goodvibes-hygiene/SKILL.md

@@ -17,7 +17,14 @@ explicit on-demand audits.
 
 ## Setup
 
-Ponytail commands require the ponytail plugin. Install it in Claude Code:
+> **Using Cursor, Windsurf, Kiro, Copilot, Antigravity, Amazon Q, Cline, Continue.dev, Devin Desktop, or another IDE?**
+> The minimalism rules are already embedded in your project's IDE rule file
+> (`.cursor/rules/goodvibes.mdc`, `GEMINI.md`, `.windsurfrules`, `.kiro/steering/goodvibes.md`, `AGENTS.md`, `.clinerules/goodvibes.md`, `.amazonq/rules/goodvibes.md`, `.continue/rules/goodvibes.md`, `.devin/rules/goodvibes.md`)
+> and activate automatically — no plugin setup needed. The `/ponytail-review` and
+> `/ponytail-audit` commands below are **Claude Code CLI terminal only** and are not
+> available in other IDEs.
+
+Ponytail commands require the ponytail plugin. Install it in **Claude Code CLI terminal**:
 
 ```
 /plugin marketplace add DietrichGebert/ponytail

package/templates/.clinerules/goodvibes.md

@@ -0,0 +1,28 @@
+## Engineering Rules — goodvibes
+
+### Think before coding
+State assumptions before implementing. Stop if an assumption is security-sensitive, schema-sensitive, or has multiple materially different interpretations.
+
+### Simplicity first
+Stop at the first rung that holds:
+
+1. Does this need to exist at all? Speculative need → skip it. (YAGNI)
+2. Already in this codebase? Reuse it.
+3. Stdlib does it? Use it.
+4. Native platform feature covers it? Use it.
+5. Already-installed dependency solves it? Use it.
+6. Can it be one line? One line.
+7. Only then: the minimum code that works.
+
+No unrequested abstractions. No boilerplate for later. Deletion over addition.
+
+### Surgical changes
+Keep diffs narrow. No opportunistic reformats. No renames unless the task requires it. Only remove what your change made unused.
+
+### Fail loud
+No empty `catch` blocks. No silent retries. No returning fake success on real failure. Error messages must be actionable.
+
+### Security
+Validate input at the boundary. Keep secrets out of code and logs. Apply least privilege.
+
+Flag immediately: SQL injection, XSS, command injection, path traversal, broken auth, leaked secrets.

package/templates/.continue/rules/goodvibes.md

@@ -0,0 +1,28 @@
+## Engineering Rules — goodvibes
+
+### Think before coding
+State assumptions before implementing. Stop if an assumption is security-sensitive, schema-sensitive, or has multiple materially different interpretations.
+
+### Simplicity first
+Stop at the first rung that holds:
+
+1. Does this need to exist at all? Speculative need → skip it. (YAGNI)
+2. Already in this codebase? Reuse it.
+3. Stdlib does it? Use it.
+4. Native platform feature covers it? Use it.
+5. Already-installed dependency solves it? Use it.
+6. Can it be one line? One line.
+7. Only then: the minimum code that works.
+
+No unrequested abstractions. No boilerplate for later. Deletion over addition.
+
+### Surgical changes
+Keep diffs narrow. No opportunistic reformats. No renames unless the task requires it. Only remove what your change made unused.
+
+### Fail loud
+No empty `catch` blocks. No silent retries. No returning fake success on real failure. Error messages must be actionable.
+
+### Security
+Validate input at the boundary. Keep secrets out of code and logs. Apply least privilege.
+
+Flag immediately: SQL injection, XSS, command injection, path traversal, broken auth, leaked secrets.

package/templates/.cursor/rules/goodvibes.mdc

@@ -0,0 +1,28 @@
+---
+alwaysApply: true
+---
+
+## Engineering Rules — goodvibes
+
+### Think before coding
+State assumptions explicitly before implementing. Stop if an assumption is security-sensitive, schema-sensitive, or has multiple materially different interpretations.
+
+### Simplicity first
+Stop at the first rung that holds:
+
+1. Does this need to exist at all? Speculative need → skip it. (YAGNI)
+2. Already in this codebase? Reuse it.
+3. Stdlib does it? Use it.
+4. Native platform feature covers it? Use it.
+5. Already-installed dependency solves it? Use it.
+6. Can it be one line? One line.
+7. Only then: the minimum code that works.
+
+### Surgical changes
+Keep diffs narrow. No opportunistic reformats. No renames unless required. Only remove what your change made unused.
+
+### Fail loud
+No empty `catch` blocks. No silent retries. No returning fake success on real failure. Error messages must be actionable.
+
+### Security
+Validate input at the boundary. Keep secrets out of code and logs. Flag immediately: SQL injection, XSS, command injection, path traversal, broken auth, leaked secrets.

package/templates/.devin/rules/goodvibes.md

@@ -0,0 +1,28 @@
+## Engineering Rules — goodvibes
+
+### Think before coding
+State assumptions before implementing. Stop if an assumption is security-sensitive, schema-sensitive, or has multiple materially different interpretations.
+
+### Simplicity first
+Stop at the first rung that holds:
+
+1. Does this need to exist at all? Speculative need → skip it. (YAGNI)
+2. Already in this codebase? Reuse it.
+3. Stdlib does it? Use it.
+4. Native platform feature covers it? Use it.
+5. Already-installed dependency solves it? Use it.
+6. Can it be one line? One line.
+7. Only then: the minimum code that works.
+
+No unrequested abstractions. No boilerplate for later. Deletion over addition.
+
+### Surgical changes
+Keep diffs narrow. No opportunistic reformats. No renames unless the task requires it. Only remove what your change made unused.
+
+### Fail loud
+No empty `catch` blocks. No silent retries. No returning fake success on real failure. Error messages must be actionable.
+
+### Security
+Validate input at the boundary. Keep secrets out of code and logs. Apply least privilege.
+
+Flag immediately: SQL injection, XSS, command injection, path traversal, broken auth, leaked secrets.

package/templates/.github/copilot-instructions.md

@@ -0,0 +1,28 @@
+## Engineering Rules — goodvibes
+
+### Think before coding
+State assumptions before implementing. Stop if an assumption is security-sensitive, schema-sensitive, or has multiple materially different interpretations.
+
+### Simplicity first
+Stop at the first rung that holds:
+
+1. Does this need to exist at all? Speculative need → skip it. (YAGNI)
+2. Already in this codebase? Reuse it.
+3. Stdlib does it? Use it.
+4. Native platform feature covers it? Use it.
+5. Already-installed dependency solves it? Use it.
+6. Can it be one line? One line.
+7. Only then: the minimum code that works.
+
+No unrequested abstractions. No boilerplate for later. Deletion over addition.
+
+### Surgical changes
+Keep diffs narrow. No opportunistic reformats. No renames unless the task requires it. Only remove imports, variables, or functions that your change made unused.
+
+### Fail loud
+No empty `catch` blocks. No silent retries. No returning fake success on real failure. Error messages must be actionable and specific enough to debug.
+
+### Security
+Validate input at the boundary. Keep secrets out of code, commits, and logs. Apply least privilege for tokens and permissions.
+
+Flag immediately: SQL injection, XSS, command injection, path traversal, broken auth, leaked secrets, unsafe dependency additions.

package/templates/.kiro/steering/goodvibes.md

@@ -0,0 +1,28 @@
+---
+inclusion: always
+---
+
+## Engineering Rules — goodvibes
+
+### Think before coding
+State assumptions before implementing. Stop if an assumption is security-sensitive, schema-sensitive, or has multiple materially different interpretations.
+
+### Simplicity first
+Stop at the first rung that holds:
+
+1. Does this need to exist at all? Speculative need → skip it. (YAGNI)
+2. Already in this codebase? Reuse it.
+3. Stdlib does it? Use it.
+4. Native platform feature covers it? Use it.
+5. Already-installed dependency solves it? Use it.
+6. Can it be one line? One line.
+7. Only then: the minimum code that works.
+
+### Surgical changes
+Keep diffs narrow. No opportunistic reformats. No renames unless required. Only remove what your change made unused.
+
+### Fail loud
+No empty `catch` blocks. No silent retries. No returning fake success on real failure. Error messages must be actionable.
+
+### Security
+Validate input at the boundary. Keep secrets out of code and logs. Flag immediately: SQL injection, XSS, command injection, path traversal, broken auth, leaked secrets.

package/templates/.windsurfrules

@@ -0,0 +1,28 @@
+## Engineering Rules — goodvibes
+
+### Think before coding
+State assumptions before implementing. Stop if an assumption is security-sensitive, schema-sensitive, or has multiple materially different interpretations.
+
+### Simplicity first
+Stop at the first rung that holds:
+
+1. Does this need to exist at all? Speculative need → skip it. (YAGNI)
+2. Already in this codebase? Reuse it.
+3. Stdlib does it? Use it.
+4. Native platform feature covers it? Use it.
+5. Already-installed dependency solves it? Use it.
+6. Can it be one line? One line.
+7. Only then: the minimum code that works.
+
+No unrequested abstractions. No boilerplate for later. Deletion over addition.
+
+### Surgical changes
+Keep diffs narrow. No opportunistic reformats. No renames unless the task requires it. Only remove what your change made unused.
+
+### Fail loud
+No empty `catch` blocks. No silent retries. No returning fake success on real failure. Error messages must be actionable.
+
+### Security
+Validate input at the boundary. Keep secrets out of code and logs. Apply least privilege.
+
+Flag immediately: SQL injection, XSS, command injection, path traversal, broken auth, leaked secrets.

package/templates/AGENTS.md

@@ -0,0 +1,28 @@
+## Engineering Rules — goodvibes
+
+### Think before coding
+State assumptions before implementing. Stop if an assumption is security-sensitive, schema-sensitive, or has multiple materially different interpretations.
+
+### Simplicity first
+Stop at the first rung that holds:
+
+1. Does this need to exist at all? Speculative need → skip it. (YAGNI)
+2. Already in this codebase? Reuse it.
+3. Stdlib does it? Use it.
+4. Native platform feature covers it? Use it.
+5. Already-installed dependency solves it? Use it.
+6. Can it be one line? One line.
+7. Only then: the minimum code that works.
+
+No unrequested abstractions. No boilerplate for later. Deletion over addition.
+
+### Surgical changes
+Keep diffs narrow. No opportunistic reformats. No renames unless the task requires it. Only remove what your change made unused.
+
+### Fail loud
+No empty `catch` blocks. No silent retries. No returning fake success on real failure. Error messages must be actionable.
+
+### Security
+Validate input at the boundary. Keep secrets out of code and logs. Apply least privilege.
+
+Flag immediately: SQL injection, XSS, command injection, path traversal, broken auth, leaked secrets.

package/templates/CLAUDE.md

@@ -1,7 +1,7 @@
 # CLAUDE.md
 
 <!-- goodvibes:start -->
-# goodvibes: v1.1.0
+# goodvibes: v1.3.0
 
 ## Engineering Rules
 
@@ -53,6 +53,13 @@ Rules: do not rewrite history. Additive entries only. Keep it short, factual, an
 **Push to GitHub after every completed task or end of session.**
 A commit that only exists locally is one machine failure away from being lost. Run `git push origin <branch>` after each commit, or at minimum before stopping for the day. Never leave completed work unpushed for more than one session.
 
+### Tools and environment
+**IDE plugin commands are surface-specific.**
+A slash command or plugin install that works in Claude Code terminal will not work in the
+VS Code extension, Cursor, Windsurf, Kiro, or any other IDE. Before referencing a tool
+command in shared docs, prompts, or instructions, confirm which surface it runs on. If it
+only works in one place, say so explicitly — do not leave users to discover it silently fails.
+
 ## Ponytail — Minimalism Ruleset
 
 You are a lazy senior developer. Lazy means efficient, not careless. You have

package/templates/GEMINI.md

@@ -0,0 +1,28 @@
+## Engineering Rules — goodvibes
+
+### Think before coding
+State assumptions before implementing. Stop if an assumption is security-sensitive, schema-sensitive, or has multiple materially different interpretations.
+
+### Simplicity first
+Stop at the first rung that holds:
+
+1. Does this need to exist at all? Speculative need → skip it. (YAGNI)
+2. Already in this codebase? Reuse it.
+3. Stdlib does it? Use it.
+4. Native platform feature covers it? Use it.
+5. Already-installed dependency solves it? Use it.
+6. Can it be one line? One line.
+7. Only then: the minimum code that works.
+
+No unrequested abstractions. No boilerplate for later. Deletion over addition.
+
+### Surgical changes
+Keep diffs narrow. No opportunistic reformats. No renames unless the task requires it. Only remove what your change made unused.
+
+### Fail loud
+No empty `catch` blocks. No silent retries. No returning fake success on real failure. Error messages must be actionable.
+
+### Security
+Validate input at the boundary. Keep secrets out of code and logs. Apply least privilege.
+
+Flag immediately: SQL injection, XSS, command injection, path traversal, broken auth, leaked secrets.

package/templates/docs/onboarding.md

@@ -93,3 +93,21 @@ A maintainer will look at your PR and either approve it, request changes, or ask
 ---
 
 That is the full loop: clone → branch → commit → push → pull request. Every contribution, large or small, follows this same pattern.
+
+---
+
+## Troubleshooting IDE rules
+
+**Cursor — rules appear inactive in agent mode**
+
+Cursor 3.0.x has a known bug where `alwaysApply: true` rules are silently downgraded in agent mode. If your goodvibes rules seem to have no effect in Cursor:
+
+1. Open Settings (Cmd/Ctrl + ,) and search for "Rules".
+2. Verify that `goodvibes` is listed under "Always Active" rules.
+3. If it appears as "Requestable" instead, toggle it to "Always Active" manually.
+
+This is an upstream Cursor issue — the `goodvibes.mdc` file format is correct.
+
+**Using multiple AI coding tools?**
+
+`goodvibes init` writes an `AGENTS.md` file at your project root. This is a cross-tool standard natively read by Zed, Aider, JetBrains Junie (IntelliJ, PyCharm, WebStorm), Jules, Amp, Codex CLI, and many others — without any extra setup. If you switch to a new AI coding tool, check whether it reads `AGENTS.md` before creating a separate rules file.