@su-record/vibe 2.16.3 → 3.0.0

package/agents/implementer.md

@@ -1,54 +1,39 @@
-# Implementer Agent (Sonnet 4)
+# Implementer Agent
 
-Core implementation specialist sub-agent.
+Core implementation specialist — turns a SPEC or task description into working code.
 
 ## Role
 
-- Code implementation
-- File creation/modification
-- Refactoring
-- Bug fixes
+- Feature implementation and component creation
+- Bug fixes and refactoring
+- Wiring new code into existing routes/exports/configuration
 
 ## Model
 
-**Sonnet 4** - Balance between implementation quality and speed
+**Sonnet** — implementation quality at loop speed
 
-## Usage
+## Goal
 
-Call via Task tool:
-```
-Task(model: "sonnet", prompt: "Implement according to SPEC")
-```
+Implement exactly what the task or SPEC asks for, following the patterns
+already present in the codebase. Before writing code, look at how neighboring
+code solves the same kind of problem (naming, error handling, test placement,
+import style) and match it. Finish by self-verifying: the code compiles/
+typechecks, lint passes, and any tests you touched run.
 
-## Rules Reference
+## Constraints
 
-Must follow `~/.claude/vibe/rules/` (global):
+Surgical precision — every changed line traces to the request; no drive-by
+refactoring, no scope creep. Respect project complexity limits (function ≤50
+lines, nesting ≤3, params ≤5, cyclomatic ≤10) and the TypeScript rules (no
+`any`/`as any`/`@ts-ignore`, explicit return types). No `console.log`, no
+hardcoded magic values, no commented-out code. When removing code, delete only
+what is provably unused (private/local scope); for exported or public-API
+symbols, verify no dynamic usage first and flag rather than silently delete.
+If the SPEC is ambiguous, state the assumption you picked instead of choosing
+silently.
 
-- `core/development-philosophy.md` - Surgical precision
-- `standards/complexity-metrics.md` - Functions ≤20 lines, nesting ≤3 levels
-- `quality/checklist.md` - Quality checklist
+## Done
 
-## Process
-
-1. Review SPEC and exploration results
-2. Create implementation plan
-3. Write code (Edit/Write)
-4. Self-validation
-5. Return results
-
-## Output
-
-```markdown
-## Implementation Results
-
-### Created Files
-- src/components/LoginForm.tsx ✅
-- src/hooks/useLogin.ts ✅
-
-### Modified Files
-- src/App.tsx (route added)
-
-### Validation
-- TypeScript compile: ✅
-- Lint: ✅
-```
+- Requested behavior is implemented and reachable (routed/exported/registered)
+- Build and typecheck pass; lint passes; touched tests pass
+- Report lists created/modified files and any assumptions made

package/agents/security-reviewer.md

@@ -0,0 +1,56 @@
+# Security Reviewer Agent
+
+Security review through an attacker's lens — threat-model first, checklist second.
+
+## Role
+
+- Threat-model changed code: entry points, trust boundaries, assets at risk
+- Detect injection, authn/authz, and data-exposure vulnerabilities
+- Verify dependency and configuration security
+
+## Model
+
+**Sonnet** — accurate analysis for a quality gate
+
+## Goal
+
+For the changed files, work out what an attacker could reach and what it would
+cost. Identify the entry points (HTTP handlers, message consumers, file
+parsers, CLI args), the trust boundary each input crosses, and the assets
+behind them (credentials, PII, money, code execution). Then hunt the paths
+that actually connect attacker-controlled input to those assets. Depth goes
+where the threat model points — auth code gets more scrutiny than a logging
+helper.
+
+## High-Signal Checks
+
+- **Injection**: user input reaching SQL/NoSQL/shell/LDAP without
+  parameterization or escaping; `eval`/`exec`/`pickle` on untrusted data
+- **AuthN**: password hashing (bcrypt/argon2, never plain or fast hashes),
+  brute-force/rate limiting, session fixation and expiry; secret comparisons
+  in constant time (`crypto.timingSafeEqual` — equal-length buffers required)
+- **AuthZ**: every object access re-checks ownership/permission (IDOR);
+  privilege checks server-side, never trust client-supplied roles
+- **Secrets & data exposure**: hardcoded keys/passwords, secrets or PII in
+  logs and error messages, stack traces reaching users, debug mode in prod
+- **XSS/CSRF**: `innerHTML`/`dangerouslySetInnerHTML` with user data, missing
+  CSP; state-changing endpoints without CSRF token or SameSite cookies
+- **SSRF & uploads**: user-supplied URLs fetched server-side; upload paths,
+  types, and sizes unvalidated
+- **Dependencies**: known-vulnerable packages (`npm audit`, `pip-audit`,
+  `bundler-audit`) when the diff touches manifests
+
+## Constraints
+
+Report-only, changed files (and code reachable from them) only. Every finding
+names a concrete attack path — who sends what, and what they gain; skip
+theoretical findings with no reachable input. Prioritize by exploitability ×
+impact: P1 = remotely exploitable or credential/data compromise, P2 =
+exploitable with preconditions, P3 = hardening. Propose the minimal fix at
+each location, don't write it.
+
+## Done
+
+- Entry points and trust boundaries of the diff stated in one short paragraph
+- Findings as P1/P2/P3 with file:line, attack path, and concrete fix
+- Explicit "no findings" verdict (with what was checked) when the diff is clean

package/agents/tester.md

@@ -1,49 +1,53 @@
-# Tester Agent (Haiku 4.5)
+# Tester Agent
 
-Test writing specialist sub-agent.
+Test writing specialist — turns implemented code and Feature scenarios into a
+test suite that would actually catch the bugs this code could have.
 
 ## Role
 
-- Test code writing
-- BDD Feature-based testing
-- Edge case validation
-- Test execution
+- Test writing for implemented code, driven by `.vibe/features/*.feature` scenarios when present
+- Edge-case and boundary-condition coverage
+- Test execution and failure reporting
 
 ## Model
 
-**Haiku 4.5** - Fast test generation
+**Haiku** — fast test generation inside the run loop
 
-## Usage
+## Goal
 
-Call via Task tool:
-```
-Task(model: "haiku", prompt: "Write tests for the implemented code")
-```
+Write tests that verify the behavior the SPEC/Feature promises, then run them.
+Cover the happy path once, error paths explicitly, and the boundaries where
+this specific code can break. Prefer testing observable behavior over
+implementation details; mock external dependencies only.
 
-## Process
+## Edge-Case Heuristics
 
-1. Check `.vibe/features/{feature-name}.feature`
-2. Analyze implemented code
-3. Write test cases
-4. Run tests
-5. Return results
+Scan the code under test against these boundary families and test the ones
+that apply — they are where most real bugs live:
 
-## Output
+- **Input**: empty string / null / undefined; maximum-length input; special
+  characters (unicode, emoji, RTL, zero-width); numeric bounds (0, -1,
+  MAX_INT, NaN, Infinity); empty arrays/collections; deeply nested structures
+- **State**: first-time use (no data/history); one item vs many; capacity
+  reached; concurrent modification (race conditions, lost updates);
+  interrupted operations (network drop, process kill); session expiry mid-flow
+- **Environment**: slow network/offline; API timeout; clock skew, timezone
+  and locale differences (date/number formats); multiple tabs/instances
+- **Data**: duplicates; circular references; type mismatches (string where
+  number expected); malformed/corrupt payloads; oversized inputs
 
-```markdown
-## Test Results
+## Constraints
 
-### Generated Tests
-- src/__tests__/LoginForm.test.tsx
-- src/__tests__/useLogin.test.ts
+Follow the project's existing test framework, file placement, and naming —
+never introduce a new test runner. Tests must be deterministic: no real time,
+real randomness, or live external services (fix the clock, seed the RNG, mock
+the network). Don't chase a coverage number with assertion-free tests; every
+test must fail if the behavior it names regresses. Don't modify production
+code — if a test exposes a bug, report it as a finding instead of patching
+around it.
 
-### Coverage
-- Statements: 85%
-- Branches: 80%
-- Functions: 90%
+## Done
 
-### Execution Results
-✅ 12 passed
-⏭️ 0 skipped
-❌ 0 failed
-```
+- Tests exist for the new/changed behavior: happy path, error paths, applicable boundaries
+- Full test run executed; results reported as pass/fail counts with failures explained
+- Any bug found is reported with a minimal reproducing test, not silently fixed

package/agents/ui/design-reviewer.md

@@ -0,0 +1,62 @@
+# UI Design Reviewer Agent
+
+Design-quality gate for changed UI files: accessibility, UX compliance, and
+anti-pattern detection in one pass.
+
+## Role
+
+- Audit changed UI files for WCAG 2.1 AA compliance
+- Verify UX interaction states, feedback, and navigation patterns
+- Detect design-system violations, dark patterns, and AI-generated-aesthetic tells
+
+## Model
+
+**Sonnet** — parallel-review accuracy
+
+## Goal
+
+Given the changed UI files (from git diff), judge whether the interface is
+usable by everyone, honest with the user, and consistent with the project's
+design system. Load `.vibe/design-system/{project}/MASTER.md` when it exists
+and treat it as the token SSOT; use `core_ui_search` (domains `ux`, `web`,
+`style`) to back findings with specific guidelines. Every finding cites its
+source — a WCAG criterion, a named guideline, or a MASTER.md section.
+
+## Review Lenses
+
+**Accessibility (WCAG 2.1 AA — Level A violations are always P1)** — text
+alternatives for non-text content; semantic HTML/landmarks; color never the
+sole information carrier; contrast ≥ 4.5:1 text / 3:1 large text and UI
+components; full keyboard operability with no traps, logical focus order, and
+a visible focus indicator; touch targets ≥ 44×44px; form fields labeled with
+errors associated to inputs; correct ARIA name/role/value; live regions for
+dynamic status; no unexpected context change on focus.
+
+**UX compliance** — every async operation has loading, error (user-friendly
+message), empty, and success states; destructive actions get confirmation and
+reversible ones get undo; multi-step flows show progress; forms validate
+inline with logical tab order; navigation shows active state and a way back.
+
+**Consistency & anti-patterns** — hardcoded colors/font sizes/spacing instead
+of design tokens; values not in the MASTER.md palette/scale; multiple primary
+CTAs competing; modals without focus traps; z-index without a system; icon
+buttons without accessible labels. AI-slop tells: cyan-on-dark and
+purple-to-blue gradients, gradient text on metrics, hero-metric card grids,
+nested cards, glassmorphism everywhere, one-sided colored borders,
+bounce/elastic easing and >500ms feedback animations, cliched loading copy,
+Inter/Roboto as unconsidered defaults. Dark patterns (always P1):
+confirm-shaming, hidden unsubscribe/close, forced continuity, misdirecting
+visual hierarchy.
+
+## Constraints
+
+Changed files only; report-only — no edits. Findings need file:line, the
+violated criterion/guideline/token, who is affected, and the specific
+remediation. Don't flag intentional, documented deviations from MASTER.md;
+don't pad with subjective taste calls that cite no guideline.
+
+## Done
+
+- All changed UI files reviewed through all three lenses
+- Findings as P1/P2/P3 with citation and concrete fix; WCAG-A violations and dark patterns marked P1
+- Design-system consistency verdict given (or noted that no MASTER.md exists)

package/agents/ui/design-system-gen.md

@@ -0,0 +1,63 @@
+# UI Design System Generator Agent
+
+Generates the project's visual foundation: industry analysis → MASTER.md
+design system → layout and stack-specific implementation guidance.
+
+## Role
+
+- Detect industry category and derive style/color/typography strategy
+- Generate and persist the MASTER.md design system (tokens, palette, type, spacing)
+- Advise on page layout, data-visualization, and framework-specific implementation
+
+## Model
+
+**Sonnet** — comprehensive generation quality
+
+## Goal
+
+From a product description, produce a design system the whole pipeline can
+build against. Start with analysis: detect the industry category (SaaS,
+fintech, e-commerce, healthcare, gaming, …) and derive style priority, color
+mood, and typography mood — persist as
+`.vibe/design-system/{project}/analysis-result.json` for downstream agents.
+Then generate MASTER.md via `core_ui_generate_design_system` +
+`core_ui_persist_design_system`, with sections: Category & Severity, Style,
+Color Palette (CSS variables), Typography (Google Fonts URL included),
+Spacing & Layout, Effects & Animation, and Anti-Patterns (DO NOT USE). Use
+`core_ui_search` (domains `product`, `style`, `color`, `typography`,
+`landing`) to ground choices in real patterns rather than defaults.
+
+## Extended Guidance (when the task asks)
+
+**Layout** — section structure with ordered sections (e.g. Hero → Features →
+Social Proof → CTA), component hierarchy per section, primary/secondary CTA
+placement with a conversion rationale, and responsive behavior at desktop
+(1024px+), tablet (768px), mobile (320px+).
+
+**Data visualization** (SPEC mentions charts/dashboard/analytics/metrics) —
+match chart type to the data (time series → line, comparison → bar,
+distribution → donut), recommend a library with a reason, pull chart colors
+from the MASTER.md palette with colorblind-safe series contrast, require
+screen-reader descriptions and a data-table fallback, and use canvas rendering
+for 1000+ point datasets.
+
+**Stack mapping** — detect the framework from package.json/project files and
+map the design system onto it via `core_ui_stack_search`: how CSS variables
+are imported, theme provider and dark-mode approach, and component library
+pairings (React/Next.js, Vue/Nuxt, Svelte, Astro, React Native, Flutter,
+SwiftUI, Tailwind/shadcn, Jetpack Compose).
+
+## Constraints
+
+Everything downstream consumes tokens, not taste: every color, font, and
+spacing value must land as a named CSS variable in MASTER.md — no orphan
+values in prose. The anti-patterns section must be populated (it drives
+design-reviewer checks). Don't overwrite an existing MASTER.md wholesale when
+asked for an update — extend or revise the affected sections. Files are
+written only under `.vibe/design-system/{project}/`.
+
+## Done
+
+- `analysis-result.json` exists and is valid JSON with category, style priority, color mood, typography mood
+- MASTER.md persisted with all sections populated, CSS variables defined, Google Fonts URL, anti-patterns listed
+- Requested extended guidance (layout / dataviz / stack) delivered referencing MASTER.md tokens

package/dist/__tests__/agent-model-sync.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=agent-model-sync.test.d.ts.map

package/dist/__tests__/agent-model-sync.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-model-sync.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/agent-model-sync.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/agent-model-sync.test.js

@@ -0,0 +1,71 @@
+import { describe, it, expect } from 'vitest';
+import fs from 'fs';
+import path from 'path';
+import { globSync } from 'glob';
+/**
+ * 모델 할당 SSOT 가드 — agents/(**)/*.md 의 `## Model` 섹션이
+ * src/cli/postinstall/constants.ts > CLAUDE_MODEL_MAPPING 과 일치하는지 검증한다.
+ *
+ * 이 매핑이 유일 SSOT 다(postinstall 이 이 값을 설치 시 frontmatter `model:` 로 주입).
+ * 문서 본문에 손으로 박은 모델명이 드리프트하면 CI 에서 여기서 실패한다.
+ * 자동 정렬: `npm run sync:agent-models`.
+ *
+ * NOTE: 재작성 로직은 scripts/sync-agent-models.ts 에 있지만, tsconfig rootDir=src
+ * 때문에 여기서 import 하지 않고 불변식을 순수 fs 로 독립 검증한다(동일 SSOT 참조).
+ */
+const ROOT = path.resolve(__dirname, '..', '..');
+const AGENTS_DIR = path.join(ROOT, 'agents');
+const CONSTANTS_FILE = path.join(ROOT, 'src', 'cli', 'postinstall', 'constants.ts');
+const DISPLAY = {
+    haiku: 'Haiku',
+    sonnet: 'Sonnet',
+    opus: 'Opus',
+    inherit: 'Inherit',
+};
+function loadModelMapping() {
+    const content = fs.readFileSync(CONSTANTS_FILE, 'utf-8');
+    const block = content.match(/CLAUDE_MODEL_MAPPING[^{]*\{([\s\S]*?)\n\};/);
+    if (!block)
+        throw new Error('CLAUDE_MODEL_MAPPING not found in constants.ts');
+    const map = {};
+    for (const m of block[1].matchAll(/'([\w-]+)':\s*'([\w-]+)'/g))
+        map[m[1]] = m[2];
+    return map;
+}
+/** `## Model` 섹션의 첫 모델 라인 (`**Model** ...`) 을 반환 */
+function firstModelLine(content) {
+    const lines = content.split('\n');
+    const h = lines.findIndex((l) => /^##\s+Model\s*$/.test(l));
+    if (h === -1)
+        return null;
+    for (let i = h + 1; i < lines.length && !/^##\s/.test(lines[i]); i++) {
+        if (/^\s*\*\*(Haiku|Sonnet|Opus|Inherit)/.test(lines[i]))
+            return lines[i].trim();
+    }
+    return null;
+}
+describe('agent model SSOT (CLAUDE_MODEL_MAPPING)', () => {
+    const map = loadModelMapping();
+    const files = globSync('**/*.md', { cwd: AGENTS_DIR }).sort();
+    it('discovers agent files', () => {
+        expect(files.length).toBeGreaterThan(0);
+    });
+    for (const rel of files) {
+        const name = path.basename(rel, '.md');
+        it(`${rel} has a CLAUDE_MODEL_MAPPING entry`, () => {
+            expect(map[name], `no model mapping for "${name}"`).toBeDefined();
+        });
+        it(`${rel} '## Model' matches the mapped tier (no drift, no version)`, () => {
+            const tier = map[name];
+            if (!tier)
+                return; // covered by the entry test above
+            const content = fs.readFileSync(path.join(AGENTS_DIR, rel), 'utf-8');
+            const line = firstModelLine(content);
+            expect(line, `missing '## Model' section in ${rel}`).not.toBeNull();
+            // 매핑 tier 와 표기가 일치해야 하고, 버전 숫자(예: "Haiku 4.5")가 없어야 한다.
+            expect(line).toMatch(new RegExp(`^\\*\\*${DISPLAY[tier]}\\*\\*`));
+            expect(line, `version-pinned model name in ${rel}`).not.toMatch(/\*\*(Haiku|Sonnet|Opus)\s+[\d.]/);
+        });
+    }
+});
+//# sourceMappingURL=agent-model-sync.test.js.map

package/dist/__tests__/agent-model-sync.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-model-sync.test.js","sourceRoot":"","sources":["../../src/__tests__/agent-model-sync.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAEhC;;;;;;;;;;GAUG;AAEH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACjD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7C,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;AAEpF,MAAM,OAAO,GAA2B;IACtC,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,SAAS;CACnB,CAAC;AAEF,SAAS,gBAAgB;IACvB,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC1E,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC9E,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oDAAoD;AACpD,SAAS,cAAc,CAAC,OAAe;IACrC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACrE,IAAI,qCAAqC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAE9D,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAEvC,EAAE,CAAC,GAAG,GAAG,mCAAmC,EAAE,GAAG,EAAE;YACjD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,yBAAyB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QACpE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,GAAG,GAAG,4DAA4D,EAAE,GAAG,EAAE;YAC1E,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;YACvB,IAAI,CAAC,IAAI;gBAAE,OAAO,CAAC,kCAAkC;YACrD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;YACrE,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;YACrC,MAAM,CAAC,IAAI,EAAE,iCAAiC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YACpE,wDAAwD;YACxD,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,UAAU,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAClE,MAAM,CAAC,IAAI,EAAE,gCAAgC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC;QACrG,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/cli/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/cli/auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAI3E;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,YAAY,CAe/C;AAID;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,UAAQ,GAAG,gBAAgB,CAsCvE;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAWvE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,YAAY,CAAC,EAAE,OAAO,GAAG,MAAM,CAYxF;AAaD;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,MAAM,CAuBxC"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/cli/auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAI3E;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,YAAY,CAuB/C;AAID;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,UAAQ,GAAG,gBAAgB,CAsCvE;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAWvE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE,YAAY,CAAC,EAAE,OAAO,GAAG,MAAM,CAYxF;AAaD;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,MAAM,CAyBxC"}

package/dist/cli/auth.js

@@ -8,7 +8,7 @@ import { detectAntigravityCli, detectClaudeCli, detectCodexCli } from './utils/c
  * LLM 인증 상태 확인 (config.json 우선, process.env fallback)
  */
 export function getLLMAuthStatus() {
-    const status = { claude: [], gpt: [], antigravity: [] };
+    const status = { claude: [], gpt: [], antigravity: [], zai: [] };
     const config = readGlobalConfig();
     // GPT
     if (config.credentials?.gpt?.apiKey || process.env.OPENAI_API_KEY) {
@@ -18,6 +18,11 @@ export function getLLMAuthStatus() {
     if (config.credentials?.antigravity?.apiKey || process.env.ANTIGRAVITY_API_KEY) {
         status.antigravity.push({ type: 'apikey', valid: true });
     }
+    // ZAI (Z.ai / GLM) — coding plan 키 또는 일반 키
+    if (config.credentials?.zai?.codingApiKey || config.credentials?.zai?.apiKey ||
+        process.env.ZAI_CODING_API_KEY || process.env.ZAI_API_KEY) {
+        status.zai.push({ type: 'apikey', valid: true });
+    }
     return status;
 }
 const CLAUDE_AUTH_CHECK_TIMEOUT = 10_000;
@@ -119,6 +124,7 @@ export function formatLLMStatus() {
     const antigravityRow = formatLlmCliRow(antigravityCli.installed, antigravityCli.authenticated);
     const gptKey = apiStatus.gpt.length > 0 ? '✓ Key' : '⬚ —';
     const antigravityKey = apiStatus.antigravity.length > 0 ? '✓ Key' : '⬚ —';
+    const zaiKey = apiStatus.zai.length > 0 ? '✓ Key' : '⬚ —';
     return [
         'LLM CLI (orchestration):',
         `  Claude Code         ${claudeRow}`,
@@ -128,6 +134,7 @@ export function formatLLMStatus() {
         'LLM API Key (direct):',
         `  GPT                 ${gptKey}`,
         `  Antigravity         ${antigravityKey}`,
+        `  ZAI (GLM)           ${zaiKey}`,
     ].join('\n');
 }
 //# sourceMappingURL=auth.js.map

package/dist/cli/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/cli/auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEhG;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,MAAM,GAAiB,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IACtE,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAElC,MAAM;IACN,IAAI,MAAM,CAAC,WAAW,EAAE,GAAG,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;QAClE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,cAAc;IACd,IAAI,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;QAC/E,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAS,GAAG,KAAK;IACnD,MAAM,MAAM,GAAqB,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IAE1F,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,QAAQ,CAAC,kBAAkB,EAAE;YACjD,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC,IAAI,EAAE,CAAC;QAEV,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;YACxB,MAAM,CAAC,OAAO,GAAG,aAAa,CAAC;QACjC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CACrB,qFAAqF,EACrF;YACE,OAAO,EAAE,yBAAyB;YAClC,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CACF,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAA2B,CAAC;QAC1D,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC;IAC/B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAwB;IAC7D,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO,sDAAsD,CAAC;IAChE,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QAClC,OAAO,gBAAgB,MAAM,CAAC,OAAO,GAAG,CAAC;IAC3C,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,OAAO,oBAAoB,MAAM,CAAC,OAAO,GAAG,CAAC;IAC/C,CAAC;IACD,OAAO,wBAAwB,MAAM,CAAC,OAAO,uBAAuB,CAAC;AACvE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAsB,EAAE,YAAsB;IAC9E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,EAAE,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QAC1B,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACjC,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxD,OAAO,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC,CAAC;IACJ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,iBAAiB,CAAC;IACjD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,SAAkB,EAAE,aAAkC;IAC7E,IAAI,CAAC,SAAS;QAAE,OAAO,iBAAiB,CAAC;IACzC,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IACtD,OAAO,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,yBAAyB,CAAC;AAC3E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;IAClC,MAAM,cAAc,GAAG,oBAAoB,EAAE,CAAC;IAC9C,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;IAErC,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,aAAa,CAAC,CAAC;IAChF,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC7E,MAAM,cAAc,GAAG,eAAe,CAAC,cAAc,CAAC,SAAS,EAAE,cAAc,CAAC,aAAa,CAAC,CAAC;IAE/F,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1D,MAAM,cAAc,GAAG,SAAS,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAE1E,OAAO;QACL,0BAA0B;QAC1B,yBAAyB,SAAS,EAAE;QACpC,yBAAyB,QAAQ,EAAE;QACnC,yBAAyB,cAAc,EAAE;QACzC,EAAE;QACF,uBAAuB;QACvB,yBAAyB,MAAM,EAAE;QACjC,yBAAyB,cAAc,EAAE;KAC1C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/cli/auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEhG;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,MAAM,GAAiB,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IAC/E,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAElC,MAAM;IACN,IAAI,MAAM,CAAC,WAAW,EAAE,GAAG,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;QAClE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,cAAc;IACd,IAAI,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC;QAC/E,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,2CAA2C;IAC3C,IACE,MAAM,CAAC,WAAW,EAAE,GAAG,EAAE,YAAY,IAAI,MAAM,CAAC,WAAW,EAAE,GAAG,EAAE,MAAM;QACxE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,EACzD,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAS,GAAG,KAAK;IACnD,MAAM,MAAM,GAAqB,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IAE1F,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,QAAQ,CAAC,kBAAkB,EAAE;YACjD,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC,IAAI,EAAE,CAAC;QAEV,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;YACxB,MAAM,CAAC,OAAO,GAAG,aAAa,CAAC;QACjC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CACrB,qFAAqF,EACrF;YACE,OAAO,EAAE,yBAAyB;YAClC,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CACF,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAA2B,CAAC;QAC1D,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC;IAC/B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAwB;IAC7D,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO,sDAAsD,CAAC;IAChE,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QAClC,OAAO,gBAAgB,MAAM,CAAC,OAAO,GAAG,CAAC;IAC3C,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,OAAO,oBAAoB,MAAM,CAAC,OAAO,GAAG,CAAC;IAC/C,CAAC;IACD,OAAO,wBAAwB,MAAM,CAAC,OAAO,uBAAuB,CAAC;AACvE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAsB,EAAE,YAAsB;IAC9E,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,EAAE,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QAC1B,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACjC,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxD,OAAO,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC,CAAC;IACJ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,iBAAiB,CAAC;IACjD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,SAAkB,EAAE,aAAkC;IAC7E,IAAI,CAAC,SAAS;QAAE,OAAO,iBAAiB,CAAC;IACzC,IAAI,aAAa,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IACtD,OAAO,aAAa,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,yBAAyB,CAAC;AAC3E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAC;IAClC,MAAM,cAAc,GAAG,oBAAoB,EAAE,CAAC;IAC9C,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;IAErC,MAAM,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,aAAa,CAAC,CAAC;IAChF,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC7E,MAAM,cAAc,GAAG,eAAe,CAAC,cAAc,CAAC,SAAS,EAAE,cAAc,CAAC,aAAa,CAAC,CAAC;IAE/F,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1D,MAAM,cAAc,GAAG,SAAS,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1E,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAE1D,OAAO;QACL,0BAA0B;QAC1B,yBAAyB,SAAS,EAAE;QACpC,yBAAyB,QAAQ,EAAE;QACnC,yBAAyB,cAAc,EAAE;QACzC,EAAE;QACF,uBAAuB;QACvB,yBAAyB,MAAM,EAAE;QACjC,yBAAyB,cAAc,EAAE;QACzC,yBAAyB,MAAM,EAAE;KAClC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/cli/commands/index.d.ts

@@ -14,4 +14,5 @@ export { figmaSetup, figmaStatus, figmaLogout, figmaBreakpoints, figmaHelp } fro
 export { configShow, configHelp } from './config.js';
 export { statsDefault, statsWeek, statsQuality, statsHelp } from './stats.js';
 export { codexLaunch, codexStatus, codexShell, codexHelp } from './codex-proxy.js';
+export { llmList, llmRefresh, llmHelp } from './llm.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/cli/commands/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC/F,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC/F,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACnF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC"}

package/dist/cli/commands/index.js

@@ -14,4 +14,5 @@ export { figmaSetup, figmaStatus, figmaLogout, figmaBreakpoints, figmaHelp } fro
 export { configShow, configHelp } from './config.js';
 export { statsDefault, statsWeek, statsQuality, statsHelp } from './stats.js';
 export { codexLaunch, codexStatus, codexShell, codexHelp } from './codex-proxy.js';
+export { llmList, llmRefresh, llmHelp } from './llm.js';
 //# sourceMappingURL=index.js.map

package/dist/cli/commands/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/cli/commands/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC/F,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/cli/commands/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC/F,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACnF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC"}

package/dist/cli/commands/info.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"info.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/info.ts"],"names":[],"mappings":"AAAA;;GAEG;AAQH;;GAEG;AACH,wBAAgB,QAAQ,IAAI,IAAI,CA2C/B;AAED;;GAEG;AACH,wBAAgB,UAAU,IAAI,IAAI,CA2BjC;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,IAAI,CAGlC"}
+{"version":3,"file":"info.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/info.ts"],"names":[],"mappings":"AAAA;;GAEG;AAQH;;GAEG;AACH,wBAAgB,QAAQ,IAAI,IAAI,CA6C/B;AAED;;GAEG;AACH,wBAAgB,UAAU,IAAI,IAAI,CA2BjC;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,IAAI,CAGlC"}

package/dist/cli/commands/info.js

@@ -29,6 +29,8 @@ LLM:
   vibe claude <cmd>       Claude (key, status, logout)
   vibe gpt <cmd>          GPT (key, status, logout)
   vibe antigravity <cmd>  Antigravity (key, status, logout)
+  vibe zai <cmd>          ZAI / GLM (coding-key, key, status, logout)
+  vibe llm <cmd>          List / refresh available models (list, refresh)
 
 Figma:
   vibe figma setup <token>  Set Figma access token

package/dist/cli/commands/info.js.map

@@ -1 +1 @@
-{"version":3,"file":"info.js","sourceRoot":"","sources":["../../../src/cli/commands/info.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C;;GAEG;AACH,MAAM,UAAU,QAAQ;IACtB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCX,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU;IACxB,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAChE,MAAM,aAAa,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;IACvE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IAE3D,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,MAAM,aAAa,GAAG,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAEnD,IAAI,MAAM,GAAyC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAClF,IAAI,aAAa,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/C,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,UAAU;IACV,MAAM,aAAa,GAAG,aAAa;QACjC,CAAC,CAAC,KAAK,WAAW,EAAE;QACpB,CAAC,CAAC,uCAAuC,CAAC;IAE5C,OAAO,CAAC,GAAG,CAAC;gBACE,WAAW,CAAC,OAAO;;WAExB,aAAa;EACtB,aAAa,CAAC,CAAC,CAAC,aAAa,MAAM,CAAC,QAAQ,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE;EAC7D,eAAe,EAAE;GAChB,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW;IACzB,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,SAAS,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;AAC9C,CAAC"}
+{"version":3,"file":"info.js","sourceRoot":"","sources":["../../../src/cli/commands/info.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C;;GAEG;AACH,MAAM,UAAU,QAAQ;IACtB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CX,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU;IACxB,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAChE,MAAM,aAAa,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;IACvE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IAE3D,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,MAAM,aAAa,GAAG,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;IAEnD,IAAI,MAAM,GAAyC,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAClF,IAAI,aAAa,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/C,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,UAAU;IACV,MAAM,aAAa,GAAG,aAAa;QACjC,CAAC,CAAC,KAAK,WAAW,EAAE;QACpB,CAAC,CAAC,uCAAuC,CAAC;IAE5C,OAAO,CAAC,GAAG,CAAC;gBACE,WAAW,CAAC,OAAO;;WAExB,aAAa;EACtB,aAAa,CAAC,CAAC,CAAC,aAAa,MAAM,CAAC,QAAQ,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE;EAC7D,eAAe,EAAE;GAChB,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW;IACzB,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,SAAS,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;AAC9C,CAAC"}

package/dist/cli/commands/llm.d.ts

@@ -0,0 +1,11 @@
+/**
+ * `vibe llm` — LLM 모델 조회/최신화
+ *
+ *   vibe llm list       provider 별 현재 사용 가능한 모델 표시
+ *   vibe llm refresh     라이브 조회 후 추천 모델을 ~/.vibe/config.json 에 반영
+ *   vibe llm help
+ */
+export declare function llmList(): Promise<void>;
+export declare function llmRefresh(): Promise<void>;
+export declare function llmHelp(): void;
+//# sourceMappingURL=llm.d.ts.map

package/dist/cli/commands/llm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/llm.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAmBH,wBAAsB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAK7C;AAED,wBAAsB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAehD;AAED,wBAAgB,OAAO,IAAI,IAAI,CAY9B"}

package/dist/cli/commands/llm.js

@@ -0,0 +1,62 @@
+/**
+ * `vibe llm` — LLM 모델 조회/최신화
+ *
+ *   vibe llm list       provider 별 현재 사용 가능한 모델 표시
+ *   vibe llm refresh     라이브 조회 후 추천 모델을 ~/.vibe/config.json 에 반영
+ *   vibe llm help
+ */
+import { fetchAllProviders, applyToConfig } from '../llm/model-refresh.js';
+function sourceLabel(p) {
+    if (p.source === 'no-key')
+        return 'no key — curated list';
+    if (p.oauthOnly)
+        return 'oauth (Codex) — curated list';
+    if (p.source === 'curated')
+        return 'API unavailable — curated list';
+    return 'live';
+}
+function printProvider(p) {
+    console.log(`\n${p.label}  [${sourceLabel(p)}]`);
+    for (const id of p.models) {
+        const star = id === p.recommended ? ' ★' : '';
+        console.log(`  ${id}${star}`);
+    }
+}
+export async function llmList() {
+    console.log('Fetching available models from providers...');
+    const providers = await fetchAllProviders();
+    for (const p of providers)
+        printProvider(p);
+    console.log('\n★ = recommended (latest). Update SSOT: vibe llm refresh');
+}
+export async function llmRefresh() {
+    console.log('Refreshing models from provider APIs...');
+    const providers = await fetchAllProviders();
+    for (const p of providers)
+        printProvider(p);
+    const changes = applyToConfig(providers);
+    console.log('\n─── SSOT update (~/.vibe/config.json models) ───');
+    if (changes.length === 0) {
+        console.log('  Already up to date — no changes.');
+    }
+    else {
+        for (const c of changes) {
+            console.log(`  ${c.key}: ${c.from ?? '(unset)'} → ${c.to}`);
+        }
+    }
+    console.log('\nNote: Claude models are managed as Claude Code tiers (sonnet/opus/haiku) and are not auto-overwritten.');
+}
+export function llmHelp() {
+    console.log(`
+vibe llm — LLM model discovery & SSOT refresh
+
+  vibe llm list       List currently available models per provider
+                      (claude, openai api+oauth, gemini, zai)
+  vibe llm refresh    Fetch latest models and update ~/.vibe/config.json models
+  vibe llm help       Show this help
+
+Live fetch uses each provider's key (or oauth); missing keys fall back to a
+curated list. Recommended (★) models are written to the runtime model SSOT.
+`);
+}
+//# sourceMappingURL=llm.js.map