@su-record/vibe 2.5.15 → 2.5.18

package/agents/research/best-practices-agent.md

@@ -1,189 +1,199 @@
-# Best Practices Research Agent
-
-<!-- Industry Best Practices Research Agent -->
-
-## Role
-
-- Industry standards research
-- Best practices collection
-- Recommended pattern suggestions
-- Anti-pattern warnings
-
-## Model
-
-**Haiku** (inherit) - Fast research
-
-## Usage
-
-Automatically called in parallel when `/vibe.spec` is executed
-
-```
-Task(
-  model: "haiku",
-  subagent_type: "Explore",
-  prompt: "Research best practices for [feature]. Include patterns, anti-patterns."
-)
-```
-
-## Research Areas
-
-### By Domain
-
-```
-Authentication:
-├── OAuth 2.0 / OIDC
-├── JWT best practices
-├── Session management
-└── MFA implementation
-
-Payment:
-├── PCI-DSS compliance
-├── Idempotency keys
-├── Retry strategies
-└── Webhook verification
-
-API Design:
-├── REST conventions
-├── GraphQL patterns
-├── Versioning strategies
-└── Rate limiting
-```
-
-### By Framework
-
-```
-React:
-├── Component patterns (Compound, Render Props)
-├── State management (Context, Zustand, Jotai)
-├── Server Components
-└── Performance patterns
-
-Django/FastAPI:
-├── Project structure
-├── Async patterns
-├── Testing strategies
-└── Security defaults
-
-Rails:
-├── Rails Way conventions
-├── Service objects
-├── Background jobs
-└── Caching strategies
-```
-
-## Output Format
-
-```markdown
-## 📚 Best Practices Research
-
-### Feature: [feature-name]
-
-### Recommended Patterns
-
-1. **Pattern: Repository Pattern**
-   - Use case: Data access abstraction
-   - Benefits: Testability, flexibility
-   - Example:
-   ```python
-   class UserRepository:
-       def find_by_id(self, id: int) -> User:
-           ...
-   ```
-
-2. **Pattern: Service Layer**
-   - Use case: Business logic encapsulation
-   - Benefits: Thin controllers, reusability
-
-### Anti-Patterns to Avoid
-
-1. **Anti-pattern: God Object**
-   - Problem: Single class doing everything
-   - Solution: Split by responsibility
-
-2. **Anti-pattern: Premature Optimization**
-   - Problem: Optimizing before measuring
-   - Solution: Measure first, optimize bottlenecks
-
-### Industry Standards
-
-- OWASP Security Guidelines
-- 12-Factor App Methodology
-- REST API Design Guidelines
-
-### Recommended Libraries
-
-| Purpose | Recommendation | Reason |
-|---------|---------------|--------|
-| Validation | Pydantic/Zod | Type-safe, fast |
-| Auth | NextAuth/Devise | Battle-tested |
-| Testing | Pytest/Jest | Community standard |
-
-### References
-
-- [Article/Doc 1](url)
-- [Article/Doc 2](url)
-```
-
-## Multi-LLM Enhancement (Quality Assurance)
-
-**vibe = Quality Assurance Framework**
-
-Best practices research uses **3 perspectives in parallel** for comprehensive coverage:
-
-```
-┌─────────────────────────────────────────────────────────────┐
-│  PARALLEL BEST PRACTICES RESEARCH                           │
-├─────────────────────────────────────────────────────────────┤
-│  Claude (Haiku)  │ Core patterns, anti-patterns            │
-│  GPT             │ Architecture patterns, code conventions  │
-│  Gemini          │ Latest trends, framework updates         │
-└─────────────────────────────────────────────────────────────┘
-        ↓
-    Merge & Dedupe
-        ↓
-    SPEC Context
-```
-
-**Execution flow:**
-
-```bash
-# 1. Claude (Primary) - Always runs
-Task(haiku, "Research best practices for [feature]")
-
-# 2. GPT (Parallel) - When enabled
-node "$VIBE_SCRIPTS/llm-orchestrate.js" gpt orchestrate-json \
-  "Best practices for [feature] with [stack]. Focus: architecture patterns, code conventions, testing strategies. Return JSON: {patterns: [], antiPatterns: [], libraries: []}"
-
-# 3. Gemini (Parallel) - When enabled
-node "$VIBE_SCRIPTS/llm-orchestrate.js" gemini orchestrate-json \
-  "Best practices for [feature] with [stack]. Focus: latest trends, framework updates, community recommendations. Return JSON: {patterns: [], antiPatterns: [], libraries: []}"
-```
-
-**Result merge strategy:**
-
-| Source | Priority | Focus Area |
-|--------|----------|------------|
-| Claude | High | Core patterns, anti-patterns |
-| GPT | Medium | Architecture, conventions |
-| Gemini | Medium | Latest trends, updates |
-
-**Merge rules:**
-- Duplicate patterns → Keep one with most detail
-- Conflicting advice → Claude takes precedence
-- Unique findings → All included
-
-## Integration with /vibe.spec
-
-```
-/vibe.spec "login feature"
-
-→ best-practices-agent execution (3 LLMs parallel):
-  - Claude: "Research authentication best practices: OAuth, JWT, session"
-  - GPT: "Architecture patterns for auth: repository, service layer"
-  - Gemini: "Latest auth trends: passkey, WebAuthn, passwordless"
-
-→ Merged results reflected in SPEC:
-  - Recommended libraries (consensus)
-  - Security considerations (all sources)
-  - Implementation patterns (deduplicated)
-```
+# Best Practices Research Agent
+
+<!-- Industry Best Practices Research Agent -->
+
+## Role
+
+- Industry standards research
+- Best practices collection
+- Recommended pattern suggestions
+- Anti-pattern warnings
+
+## Model
+
+**Haiku** (inherit) - Fast research
+
+## ⚠️ CRITICAL: NO FILE CREATION
+
+**THIS AGENT MUST NEVER CREATE FILES.**
+
+- ❌ DO NOT use Write tool
+- ❌ DO NOT create any files in project root
+- ❌ DO NOT create *_RESEARCH.md or *_SUMMARY.md files
+- ✅ ONLY return research results as text output
+- ✅ Results will be merged into SPEC by vibe.spec command
+
+## Usage
+
+Automatically called in parallel when `/vibe.spec` is executed
+
+```
+Task(
+  model: "haiku",
+  subagent_type: "Explore",
+  prompt: "Research best practices for [feature]. Include patterns, anti-patterns."
+)
+```
+
+## Research Areas
+
+### By Domain
+
+```
+Authentication:
+├── OAuth 2.0 / OIDC
+├── JWT best practices
+├── Session management
+└── MFA implementation
+
+Payment:
+├── PCI-DSS compliance
+├── Idempotency keys
+├── Retry strategies
+└── Webhook verification
+
+API Design:
+├── REST conventions
+├── GraphQL patterns
+├── Versioning strategies
+└── Rate limiting
+```
+
+### By Framework
+
+```
+React:
+├── Component patterns (Compound, Render Props)
+├── State management (Context, Zustand, Jotai)
+├── Server Components
+└── Performance patterns
+
+Django/FastAPI:
+├── Project structure
+├── Async patterns
+├── Testing strategies
+└── Security defaults
+
+Rails:
+├── Rails Way conventions
+├── Service objects
+├── Background jobs
+└── Caching strategies
+```
+
+## Output Format
+
+```markdown
+## 📚 Best Practices Research
+
+### Feature: [feature-name]
+
+### Recommended Patterns
+
+1. **Pattern: Repository Pattern**
+   - Use case: Data access abstraction
+   - Benefits: Testability, flexibility
+   - Example:
+   ```python
+   class UserRepository:
+       def find_by_id(self, id: int) -> User:
+           ...
+   ```
+
+2. **Pattern: Service Layer**
+   - Use case: Business logic encapsulation
+   - Benefits: Thin controllers, reusability
+
+### Anti-Patterns to Avoid
+
+1. **Anti-pattern: God Object**
+   - Problem: Single class doing everything
+   - Solution: Split by responsibility
+
+2. **Anti-pattern: Premature Optimization**
+   - Problem: Optimizing before measuring
+   - Solution: Measure first, optimize bottlenecks
+
+### Industry Standards
+
+- OWASP Security Guidelines
+- 12-Factor App Methodology
+- REST API Design Guidelines
+
+### Recommended Libraries
+
+| Purpose | Recommendation | Reason |
+|---------|---------------|--------|
+| Validation | Pydantic/Zod | Type-safe, fast |
+| Auth | NextAuth/Devise | Battle-tested |
+| Testing | Pytest/Jest | Community standard |
+
+### References
+
+- [Article/Doc 1](url)
+- [Article/Doc 2](url)
+```
+
+## Multi-LLM Enhancement (Quality Assurance)
+
+**vibe = Quality Assurance Framework**
+
+Best practices research uses **3 perspectives in parallel** for comprehensive coverage:
+
+```
+┌─────────────────────────────────────────────────────────────┐
+│  PARALLEL BEST PRACTICES RESEARCH                           │
+├─────────────────────────────────────────────────────────────┤
+│  Claude (Haiku)  │ Core patterns, anti-patterns            │
+│  GPT             │ Architecture patterns, code conventions  │
+│  Gemini          │ Latest trends, framework updates         │
+└─────────────────────────────────────────────────────────────┘
+        ↓
+    Merge & Dedupe
+        ↓
+    SPEC Context
+```
+
+**Execution flow:**
+
+```bash
+# 1. Claude (Primary) - Always runs
+Task(haiku, "Research best practices for [feature]")
+
+# 2. GPT (Parallel) - When enabled
+node "$VIBE_SCRIPTS/llm-orchestrate.js" gpt orchestrate-json \
+  "Best practices for [feature] with [stack]. Focus: architecture patterns, code conventions, testing strategies. Return JSON: {patterns: [], antiPatterns: [], libraries: []}"
+
+# 3. Gemini (Parallel) - When enabled
+node "$VIBE_SCRIPTS/llm-orchestrate.js" gemini orchestrate-json \
+  "Best practices for [feature] with [stack]. Focus: latest trends, framework updates, community recommendations. Return JSON: {patterns: [], antiPatterns: [], libraries: []}"
+```
+
+**Result merge strategy:**
+
+| Source | Priority | Focus Area |
+|--------|----------|------------|
+| Claude | High | Core patterns, anti-patterns |
+| GPT | Medium | Architecture, conventions |
+| Gemini | Medium | Latest trends, updates |
+
+**Merge rules:**
+- Duplicate patterns → Keep one with most detail
+- Conflicting advice → Claude takes precedence
+- Unique findings → All included
+
+## Integration with /vibe.spec
+
+```
+/vibe.spec "login feature"
+
+→ best-practices-agent execution (3 LLMs parallel):
+  - Claude: "Research authentication best practices: OAuth, JWT, session"
+  - GPT: "Architecture patterns for auth: repository, service layer"
+  - Gemini: "Latest auth trends: passkey, WebAuthn, passwordless"
+
+→ Merged results reflected in SPEC:
+  - Recommended libraries (consensus)
+  - Security considerations (all sources)
+  - Implementation patterns (deduplicated)
+```