@su-record/vibe 2.7.19 → 2.7.21

package/hooks/scripts/codex-detect.js

@@ -0,0 +1,46 @@
+#!/usr/bin/env node
+/**
+ * Codex 플러그인 감지 유틸
+ *
+ * 워크플로우 스킬(.md)에서 Bash로 호출하여 Codex 사용 가능 여부 확인.
+ *
+ * 사용법 (스킬 마크다운에서):
+ *   node {{VIBE_PATH}}/hooks/scripts/codex-detect.js
+ *
+ * 출력:
+ *   "available" — Codex CLI 설치 + auth 존재
+ *   "unavailable" — 미설치 또는 미인증
+ *
+ * 종료 코드:
+ *   0 — available
+ *   1 — unavailable
+ */
+
+import fs from 'fs';
+import path from 'path';
+import { execSync } from 'child_process';
+import os from 'os';
+
+const codexDir = process.env.CODEX_HOME || path.join(os.homedir(), '.codex');
+
+// CLI 설치 확인
+let cliInstalled = fs.existsSync(codexDir);
+if (!cliInstalled) {
+  try {
+    execSync('which codex', { stdio: 'ignore' });
+    cliInstalled = true;
+  } catch {
+    // not found
+  }
+}
+
+// 인증 확인
+const authExists = fs.existsSync(path.join(codexDir, 'auth.json'));
+
+if (cliInstalled && authExists) {
+  console.log('available');
+  process.exit(0);
+} else {
+  console.log('unavailable');
+  process.exit(1);
+}

package/hooks/scripts/codex-review-gate.js

@@ -0,0 +1,80 @@
+#!/usr/bin/env node
+/**
+ * Codex Review Gate — Stop 훅에서 자동 실행
+ *
+ * Claude Code 작업 완료(Stop) 시 Codex 플러그인이 설치되어 있으면
+ * /codex:review를 자동 트리거하여 최종 코드 리뷰 게이트 역할.
+ *
+ * 동작 조건:
+ * - Codex 플러그인 설치됨 (which codex 또는 ~/.codex/ 존재)
+ * - Stop 이벤트가 코드 변경을 포함 (Write/Edit 도구 사용됨)
+ * - config.json에서 codexReviewGate가 비활성화되지 않음
+ *
+ * 출력:
+ * - stdout로 Claude에게 /codex:review 호출 지시
+ * - 조건 미충족 시 빈 출력 (스킵)
+ */
+
+import fs from 'fs';
+import path from 'path';
+import { execSync } from 'child_process';
+import os from 'os';
+
+// stdin 읽기
+let input = '';
+for await (const chunk of process.stdin) {
+  input += chunk;
+}
+
+// Codex CLI/플러그인 설치 여부 확인
+function isCodexAvailable() {
+  const codexDir = path.join(os.homedir(), '.codex');
+  if (fs.existsSync(codexDir)) return true;
+
+  try {
+    execSync('which codex', { stdio: 'ignore' });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+// 프로젝트 config에서 codexReviewGate 설정 확인
+function isCodexReviewGateEnabled() {
+  try {
+    const configPath = path.join(process.cwd(), '.claude', 'vibe', 'config.json');
+    if (!fs.existsSync(configPath)) return true; // 기본: 활성화
+    const config = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
+    // 명시적으로 false일 때만 비활성화
+    return config.codexReviewGate !== false;
+  } catch {
+    return true;
+  }
+}
+
+// Stop 이벤트에 코드 변경이 포함되었는지 확인
+function hasCodeChanges() {
+  try {
+    const parsed = JSON.parse(input);
+    const toolUses = parsed.tool_uses || parsed.tools_used || [];
+
+    // Write 또는 Edit 도구가 사용되었으면 코드 변경 있음
+    if (Array.isArray(toolUses)) {
+      return toolUses.some(t => {
+        const name = t.tool || t.name || '';
+        return name === 'Write' || name === 'Edit';
+      });
+    }
+
+    // 파싱 실패 시 항상 실행 (안전한 방향)
+    return true;
+  } catch {
+    // stdin 파싱 실패 시 항상 실행
+    return true;
+  }
+}
+
+// 메인 로직
+if (isCodexAvailable() && isCodexReviewGateEnabled() && hasCodeChanges()) {
+  console.log('[CODEX REVIEW GATE] Run /codex:review for final code review before completing.');
+}

package/hooks/scripts/evolution-engine.js

@@ -0,0 +1,69 @@
+/**
+ * PostToolUse Hook - Evolution Engine
+ * Write/Edit 이벤트 후 인사이트 추출 및 자동 생성 파이프라인 트리거
+ */
+import { getLibBaseUrl, PROJECT_DIR } from './utils.js';
+import fs from 'fs';
+import path from 'path';
+
+async function main() {
+  // Evolution 활성화 여부 확인
+  const configPath = path.join(PROJECT_DIR, '.claude', 'vibe', 'config.json');
+  let config = { mode: 'suggest', enabled: false };
+
+  try {
+    if (fs.existsSync(configPath)) {
+      const raw = JSON.parse(fs.readFileSync(configPath, 'utf8'));
+      config = {
+        mode: raw.evolution?.mode || 'suggest',
+        enabled: raw.evolution?.enabled === true,
+      };
+    }
+  } catch { /* ignore */ }
+
+  if (!config.enabled) return;
+
+  // 비동기로 파이프라인 실행 (메인 훅 흐름 차단 안 함)
+  setImmediate(async () => {
+    try {
+      const LIB_BASE = getLibBaseUrl();
+      const [memMod, extractorMod, orchestratorMod] = await Promise.all([
+        import(`${LIB_BASE}memory/MemoryStorage.js`),
+        import(`${LIB_BASE}evolution/InsightExtractor.js`),
+        import(`${LIB_BASE}evolution/EvolutionOrchestrator.js`),
+      ]);
+
+      const storage = new memMod.MemoryStorage(PROJECT_DIR);
+
+      // Phase 2: 인사이트 추출
+      const extractor = new extractorMod.InsightExtractor(storage);
+      const extractResult = extractor.extractFromRecent(20);
+
+      if (extractResult.newInsights.length === 0 && extractResult.mergedInsights.length === 0) {
+        storage.close();
+        return;
+      }
+
+      // Phase 3: config.mode에 따라 생성
+      if (config.mode === 'suggest' || config.mode === 'auto') {
+        const orchestrator = new orchestratorMod.EvolutionOrchestrator(storage, {
+          mode: config.mode,
+        });
+        const genResult = orchestrator.generate();
+
+        if (genResult.generated.length > 0) {
+          const label = config.mode === 'auto' ? 'auto-generated' : 'suggested';
+          process.stderr.write(
+            `[Evolution] ${genResult.generated.length} artifacts ${label}\n`
+          );
+        }
+      }
+
+      storage.close();
+    } catch (e) {
+      process.stderr.write(`[Evolution] Engine error: ${e.message}\n`);
+    }
+  });
+}
+
+main();

package/hooks/scripts/llm-orchestrate.js

@@ -222,11 +222,15 @@ function callGeminiCli(prompt, sysPrompt, jsonMode, model) {
 async function callProvider(providerName, prompt, sysPrompt, jsonMode) {
   const vibeConfig = readVibeConfig();
 
-  if (providerName === 'gpt' || providerName === 'gpt-codex') {
-    const isCodex = providerName === 'gpt-codex';
-    const model = isCodex
-      ? (vibeConfig.models?.gptCodex || process.env.GPT_CODEX_MODEL || 'gpt-5.3-codex')
-      : (vibeConfig.models?.gpt || process.env.GPT_MODEL || 'gpt-5.4');
+  if (providerName === 'gpt' || providerName === 'gpt-codex' || providerName === 'gpt-spark') {
+    let model;
+    if (providerName === 'gpt-spark') {
+      model = vibeConfig.models?.gptCodexSpark || process.env.GPT_CODEX_SPARK_MODEL || 'gpt-5.3-codex-spark';
+    } else if (providerName === 'gpt-codex') {
+      model = vibeConfig.models?.gptCodex || process.env.GPT_CODEX_MODEL || 'gpt-5.3-codex';
+    } else {
+      model = vibeConfig.models?.gpt || process.env.GPT_MODEL || 'gpt-5.4';
+    }
     return await callCodexCli(prompt, sysPrompt, jsonMode, model);
   }
 

package/hooks/scripts/skill-injector.js

@@ -0,0 +1,83 @@
+/**
+ * SessionStart Hook - Auto-generated skill/agent/rule 주입
+ * auto/ 디렉토리를 스캔하여 .disabled가 아닌 파일을 로드하고 사용량 추적
+ */
+import fs from 'fs';
+import path from 'path';
+import os from 'os';
+import { getLibBaseUrl, PROJECT_DIR } from './utils.js';
+
+const HOME = os.homedir();
+
+// auto/ 디렉토리 경로
+const AUTO_DIRS = {
+  'user-auto': {
+    skills: path.join(HOME, '.claude', 'vibe', 'skills', 'auto'),
+    agents: path.join(HOME, '.claude', 'agents', 'auto'),
+    rules: path.join(HOME, '.claude', 'vibe', 'rules', 'auto'),
+  },
+  'project-auto': {
+    skills: path.join(PROJECT_DIR, '.claude', 'vibe', 'skills', 'auto'),
+    agents: path.join(PROJECT_DIR, '.claude', 'agents', 'auto'),
+    rules: path.join(PROJECT_DIR, '.claude', 'vibe', 'rules', 'auto'),
+  },
+};
+
+/**
+ * 디렉토리에서 .md 파일 스캔 (.disabled 제외)
+ */
+function scanAutoDir(dirPath) {
+  if (!fs.existsSync(dirPath)) return [];
+
+  return fs.readdirSync(dirPath)
+    .filter(f => f.endsWith('.md') && !f.endsWith('.disabled'))
+    .map(f => ({
+      name: f.replace(/\.md$/, ''),
+      path: path.join(dirPath, f),
+      content: fs.readFileSync(path.join(dirPath, f), 'utf8'),
+    }));
+}
+
+async function main() {
+  const allSkills = [];
+
+  for (const [source, dirs] of Object.entries(AUTO_DIRS)) {
+    for (const [type, dirPath] of Object.entries(dirs)) {
+      const files = scanAutoDir(dirPath);
+      for (const file of files) {
+        allSkills.push({ ...file, source, type, generated: true });
+      }
+    }
+  }
+
+  if (allSkills.length === 0) return;
+
+  // 사용량 추적
+  try {
+    const LIB_BASE = getLibBaseUrl();
+    const [memMod, trackerMod] = await Promise.all([
+      import(`${LIB_BASE}memory/MemoryStorage.js`),
+      import(`${LIB_BASE}evolution/UsageTracker.js`),
+    ]);
+
+    const storage = new memMod.MemoryStorage(PROJECT_DIR);
+    const tracker = new trackerMod.UsageTracker(storage);
+
+    for (const skill of allSkills) {
+      tracker.recordUsage({
+        generationId: skill.name,
+        event: 'injected',
+        metadata: { source: skill.source, type: skill.type, generated: skill.generated },
+      });
+    }
+
+    storage.close();
+  } catch {
+    // 추적 실패해도 주입은 계속
+  }
+
+  const summary = allSkills.map(s => `${s.source}/${s.type}/${s.name}`).join(', ');
+  process.stderr.write(`[Evolution] Injected ${allSkills.length} auto skills: ${summary}\n`);
+}
+
+main();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@su-record/vibe",
-  "version": "2.7.19",
+  "version": "2.7.21",
   "description": "AI Coding Framework for Claude Code — 49 agents, 41+ tools, multi-LLM orchestration",
   "type": "module",
   "main": "dist/cli/index.js",

package/skills/arch-guard/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: arch-guard
-description: "Generate architecture boundary tests that mechanically enforce layer constraints."
+description: "Generate architecture boundary tests that mechanically enforce layer constraints. Use when adding new modules, refactoring layers, or after detecting circular dependencies. Creates import-rule tests (e.g., 'UI must not import DB') that fail CI on violation. Must use this skill when user mentions layer enforcement, dependency rules, or architectural boundaries — even casually like 'make sure services don't import controllers'."
 triggers: [arch guard, architecture test, layer test, boundary test, structural test, arch validation]
 priority: 60
 ---

package/skills/brand-assets/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: brand-assets
-description: "Auto-generate app icons and favicons from SPEC brand information using Gemini Image API"
+description: "Auto-generate app icons (iOS/Android/PWA), favicons, and OG images from SPEC brand information using Gemini Image API. Use when the project needs visual brand assets, when user mentions 'icon', 'favicon', 'logo', or 'brand assets', or when a SPEC defines brand colors/identity but no assets exist yet. Outputs multiple sizes and formats ready for deployment. Not for complex illustration or marketing graphics — focused on app identity assets."
 triggers: [icon, favicon, brand, logo, app icon, branding, assets]
 priority: 65
 ---

package/skills/capability-loop/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: capability-loop
-description: "When an agent fails, diagnose which capability is missing and build it into the repo."
+description: "When an agent fails, diagnose which capability is missing and build it into the repo. Activates after repeated agent failures, tool errors, or when a task keeps failing in the same way. Analyzes failure transcripts, identifies the missing guardrail/tool/abstraction/doc, and creates it permanently. Use this skill whenever you see 3+ similar failures, an agent hitting the same wall repeatedly, or the user asking 'why does this keep failing'."
 triggers: [capability loop, failure loop, build capability, missing capability, agent failed, why did it fail]
 priority: 75
 ---

package/skills/characterization-test/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: characterization-test
-description: "Lock existing behavior with characterization tests before modifying code."
+description: "Lock existing behavior with characterization tests before modifying code. Use BEFORE any refactor, rewrite, or large-scale modification of existing code — especially legacy code without tests. Captures current input/output behavior as test cases so regressions are caught immediately. Must use this skill when touching files >200 lines with no existing tests, when user says 'refactor', 'rewrite', 'modernize', or 'clean up' existing code."
 triggers: [legacy, characterization test, lock behavior, regression prevention, before refactor, large file]
 priority: 65
 ---

package/skills/commerce-patterns/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: commerce-patterns
-description: "E-commerce domain patterns - cart, payment, inventory with transaction safety"
+description: "E-commerce domain patterns — cart management, payment processing (Toss/Stripe/PG), inventory tracking, and order state machines with transaction safety. Use when implementing any shopping cart, checkout flow, payment integration, stock management, or order lifecycle. Covers idempotency keys, double-charge prevention, stock reservation, and refund flows. Must use this skill when the codebase involves e-commerce — even for seemingly simple 'add to cart' features."
 triggers: [commerce, ecommerce, cart, payment, checkout, inventory, stock, order, pg, toss, stripe]
 priority: 70
 ---

package/skills/e2e-commerce/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: e2e-commerce
-description: "E2E test scenarios for commerce checkout and payment flows"
+description: "E2E test scenarios for commerce checkout and payment flows. Provides ready-made Playwright test templates for cart→checkout→payment→confirmation flows, including PG sandbox testing (Toss/Stripe), error scenarios (payment failure, timeout, stock exhaustion), and idempotency verification. Use when writing E2E tests for any e-commerce feature — checkout, payment, order status, or refund flows."
 triggers: [e2e commerce, checkout test, payment test, order flow test]
 priority: 65
 ---

package/skills/exec-plan/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: exec-plan
-description: "Convert SPEC into a self-contained execution plan that agents can run autonomously for hours."
+description: "Convert SPEC into a self-contained execution plan that agents can run autonomously for hours. Use when a SPEC has 3+ phases, multiple files to change, or complex dependencies between tasks. Produces a plan with explicit file paths, interface extracts, and acceptance criteria so agents never need to 'figure out' context. Must use this skill when launching long-running autonomous work, parallelizing implementation across agents, or when user says 'execute this spec' or 'run this plan'."
 triggers: [exec plan, execution plan, autonomous plan, self-contained plan, long-running]
 priority: 70
 ---

package/skills/parallel-research/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: parallel-research
-description: "Parallel research guide. Auto-activates for complex features, new technologies, security-critical work, architecture design, or technology selection decisions."
+description: "Parallel research with 4 specialized agents (best-practices, framework-docs, codebase-patterns, security-advisory) running simultaneously. Use when facing unfamiliar technology, choosing between libraries/frameworks, designing architecture for a new feature, or investigating security implications. Must use this skill when user asks 'how should we build X', 'which library for Y', or when starting work on a complex feature with unknown requirements. Not for simple lookups — use web search directly for those."
 triggers: [parallel research, complex feature, technology selection, architecture design, security critical]
 priority: 60
 ---

package/skills/seo-checklist/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: seo-checklist
-description: "SEO gotchas for web development - easy-to-miss items that hurt search ranking"
+description: "SEO gotchas for web development — easy-to-miss items that hurt search ranking. Covers meta tags, Open Graph, structured data (JSON-LD), sitemap, robots.txt, canonical URLs, and Naver/Google-specific requirements. Use when building or reviewing any public-facing web page, landing page, or marketing site. Must use this skill when user mentions SEO, search ranking, meta tags, or when deploying a web app that needs to be discoverable."
 triggers: [seo, search, meta, sitemap, schema, structured data, og, opengraph, google, naver]
 priority: 65
 ---

package/skills/ui-ux-pro-max/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: ui-ux-pro-max
-description: "UI/UX design intelligence with bold aesthetic direction. 50+ styles, 97 palettes, 57 font pairings, 99 UX guidelines, 25 chart types across 9 stacks."
+description: "UI/UX design intelligence with bold aesthetic direction. Searchable database: 50+ styles, 97 color palettes, 57 font pairings, 99 UX guidelines, 25 chart types across 9 stacks (React, Vue, Svelte, Angular, Astro, Next.js, Flutter, Swift, Kotlin). Use when building any UI component, choosing color schemes, selecting typography, applying design patterns, or reviewing UX compliance. Must use this skill when user builds frontend — pages, components, dashboards, or landing pages — to ensure design quality beyond generic AI output."
 ---
 
 # UI/UX Pro Max - Design Intelligence

package/skills/video-production/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: video-production
-description: "Video processing gotchas — FFmpeg, transcoding, streaming, subtitles."
+description: "Video processing gotchas — FFmpeg commands, transcoding pipelines, HLS/DASH streaming setup, subtitle embedding (SRT/VTT), and thumbnail extraction. Use when the project involves any video manipulation, media processing, or streaming infrastructure. Covers codec selection, bitrate optimization, and common FFmpeg pitfalls. Must use this skill when user works with video files, mentions FFmpeg, or needs media processing — even for simple tasks like 'generate a thumbnail'."
 triggers: [video, ffmpeg, transcode, encode, stream, media, subtitle, thumbnail, hls, dash]
 priority: 60
 ---