@su-record/vibe 2.9.18 → 2.9.19

package/dist/cli/detect.js

@@ -562,45 +562,45 @@ export function getLanguageRulesForStacks(stacks) {
  * 언어별 CLAUDE.md 규칙
  */
 export const LANGUAGE_RULES = {
-    typescript: `### TypeScript Rules
-- No \`any\` type → use \`unknown\` + type guards
-- No \`as any\` casting → define proper interfaces
-- No \`@ts-ignore\` → fix type issues at root
+    typescript: `### TypeScript Rules
+- No \`any\` type → use \`unknown\` + type guards
+- No \`as any\` casting → define proper interfaces
+- No \`@ts-ignore\` → fix type issues at root
 - Explicit return types on all functions`,
-    python: `### Python Rules
-- Type hints required (parameters, return values)
-- No \`# type: ignore\` → fix type issues at root
-- Prefer f-strings (over format())
+    python: `### Python Rules
+- Type hints required (parameters, return values)
+- No \`# type: ignore\` → fix type issues at root
+- Prefer f-strings (over format())
 - Use list comprehensions appropriately`,
-    go: `### Go Rules
-- Handle errors immediately (if err != nil)
-- Explicit error wrapping (fmt.Errorf with %w)
-- Define interfaces at point of use
+    go: `### Go Rules
+- Handle errors immediately (if err != nil)
+- Explicit error wrapping (fmt.Errorf with %w)
+- Define interfaces at point of use
 - Prevent goroutine leaks (use context)`,
-    rust: `### Rust Rules
-- No unwrap()/expect() in production → handle Result/Option
-- Minimize unsafe blocks
-- Define explicit error types
+    rust: `### Rust Rules
+- No unwrap()/expect() in production → handle Result/Option
+- Minimize unsafe blocks
+- Define explicit error types
 - Document ownership/lifetime clearly`,
-    java: `### Java Rules
-- Use Optional (instead of null)
-- Prefer immutable objects (final fields)
-- Handle checked exceptions properly
+    java: `### Java Rules
+- Use Optional (instead of null)
+- Prefer immutable objects (final fields)
+- Handle checked exceptions properly
 - Utilize Stream API`,
-    kotlin: `### Kotlin Rules
-- Explicit nullable types (?)
-- No !! operator → use safe call (?.)
-- Use data classes actively
+    kotlin: `### Kotlin Rules
+- Explicit nullable types (?)
+- No !! operator → use safe call (?.)
+- Use data classes actively
 - Implement utilities as extension functions`,
-    dart: `### Dart Rules
-- Follow null safety (use ? and ! properly)
-- Avoid late keyword abuse
-- Use const constructors
+    dart: `### Dart Rules
+- Follow null safety (use ? and ! properly)
+- Avoid late keyword abuse
+- Use const constructors
 - Use async/await for async code`,
-    swift: `### Swift Rules
-- No force unwrapping → use guard let / if let
-- Prefer protocol-oriented programming
-- Prefer value types (struct)
+    swift: `### Swift Rules
+- No force unwrapping → use guard let / if let
+- Prefer protocol-oriented programming
+- Prefer value types (struct)
 - Watch memory management with @escaping closures`
 };
 /**

package/dist/cli/index.js

@@ -95,13 +95,13 @@ switch (command) {
                 claudeStatus();
                 break;
             default:
-                console.log(`
-Claude Commands:
-  vibe claude key <key>     Set Anthropic API key
-  vibe claude status        Check status
-  vibe claude logout        Remove key
-
-Get key: https://console.anthropic.com/settings/keys
+                console.log(`
+Claude Commands:
+  vibe claude key <key>     Set Anthropic API key
+  vibe claude status        Check status
+  vibe claude logout        Remove key
+
+Get key: https://console.anthropic.com/settings/keys
         `);
         }
         break;
@@ -128,15 +128,15 @@ Get key: https://console.anthropic.com/settings/keys
                 gptStatus();
                 break;
             default:
-                console.log(`
-GPT Commands:
-  vibe gpt key <key>     Set OpenAI API key (for embeddings)
-  vibe gpt status        Check status (Codex CLI + API key)
-  vibe gpt logout        Remove API key
-
-Text generation: codex exec (via Codex CLI)
-Embeddings: OpenAI API (requires API key)
-Codex auth: codex auth
+                console.log(`
+GPT Commands:
+  vibe gpt key <key>     Set OpenAI API key (for embeddings)
+  vibe gpt status        Check status (Codex CLI + API key)
+  vibe gpt logout        Remove API key
+
+Text generation: codex exec (via Codex CLI)
+Embeddings: OpenAI API (requires API key)
+Codex auth: codex auth
         `);
         }
         break;
@@ -165,14 +165,14 @@ Codex auth: codex auth
                 geminiStatus();
                 break;
             default:
-                console.log(`
-Gemini Commands:
-  vibe gemini key <key>            Set API key
-  vibe gemini status               Check status
-  vibe gemini logout               Clear config
-  vibe gemini remove               Remove config
-
-gemini-cli is auto-detected if installed.
+                console.log(`
+Gemini Commands:
+  vibe gemini key <key>            Set API key
+  vibe gemini status               Check status
+  vibe gemini logout               Clear config
+  vibe gemini remove               Remove config
+
+gemini-cli is auto-detected if installed.
         `);
         }
         break;
@@ -185,11 +185,11 @@ gemini-cli is auto-detected if installed.
                 skillsAdd(positionalArgs[2]);
                 break;
             default:
-                console.log(`
-Skills Commands:
-  vibe skills add <owner/repo>  Install skill from skills.sh
-
-Example: vibe skills add vercel-labs/skills
+                console.log(`
+Skills Commands:
+  vibe skills add <owner/repo>  Install skill from skills.sh
+
+Example: vibe skills add vercel-labs/skills
         `);
         }
         break;
@@ -371,10 +371,10 @@ Example: vibe skills add vercel-labs/skills
             console.log('');
         }
         else {
-            console.log(`
-Env Commands:
-  vibe env import [path]  .env 파일을 ~/.vibe/config.json으로 가져오기
-                          path 생략 시 현재 디렉토리의 .env 사용
+            console.log(`
+Env Commands:
+  vibe env import [path]  .env 파일을 ~/.vibe/config.json으로 가져오기
+                          path 생략 시 현재 디렉토리의 .env 사용
       `);
         }
         break;

package/dist/cli/llm/claude-commands.js

@@ -25,14 +25,14 @@ export function claudeStatus() {
     catch { /* ignore */ }
     const hasEnvKey = !!process.env.ANTHROPIC_API_KEY;
     if (!hasFileKey && !hasEnvKey) {
-        console.log(`
-Claude API: ✗ Not configured
-
-Setup:
-  vibe claude key <ANTHROPIC_API_KEY>
-  vibe setup
-
-Get key: https://console.anthropic.com/settings/keys
+        console.log(`
+Claude API: ✗ Not configured
+
+Setup:
+  vibe claude key <ANTHROPIC_API_KEY>
+  vibe setup
+
+Get key: https://console.anthropic.com/settings/keys
     `);
         return;
     }
@@ -41,14 +41,14 @@ Get key: https://console.anthropic.com/settings/keys
         methods.push(`✓ API Key (${maskedKey})`);
     if (hasEnvKey)
         methods.push('✓ ANTHROPIC_API_KEY env');
-    console.log(`
-Claude API: ${methods.join(', ')}
-
-Models: Claude Opus 4.5, Sonnet 4.5, Haiku 4.5
-Role: Fallback / Direct API
-
-Manage:
-  vibe claude logout    Remove key
+    console.log(`
+Claude API: ${methods.join(', ')}
+
+Models: Claude Opus 4.5, Sonnet 4.5, Haiku 4.5
+Role: Fallback / Direct API
+
+Manage:
+  vibe claude logout    Remove key
   `);
 }
 /**

package/dist/cli/llm/config.js

@@ -38,13 +38,13 @@ export const EXTERNAL_LLMS = {
  */
 export function setupExternalLLM(llmType, apiKey) {
     if (!apiKey) {
-        console.log(`
-API key required.
-
-Usage:
-  vibe ${llmType} key <api-key>
-
-${llmType === 'gpt' ? 'OpenAI API key: https://platform.openai.com/api-keys' : 'Google API key: https://aistudio.google.com/apikey'}
+        console.log(`
+API key required.
+
+Usage:
+  vibe ${llmType} key <api-key>
+
+${llmType === 'gpt' ? 'OpenAI API key: https://platform.openai.com/api-keys' : 'Google API key: https://aistudio.google.com/apikey'}
     `);
         return;
     }
@@ -79,17 +79,17 @@ ${llmType === 'gpt' ? 'OpenAI API key: https://platform.openai.com/api-keys' : '
         catch { /* ignore: optional operation */ }
     }
     const configJsonPath = path.join(getVibeDir(), 'config.json');
-    console.log(`
-${llmType.toUpperCase()} API key configured!
-
-Role: ${llmConfig.description}
-Stored: ${configJsonPath}
-
-${llmType.toUpperCase()} is called directly via Hooks:
-  - Auto-called with "${llmType}. query" prefix
-  - Direct use: import('@su-record/vibe/lib/${llmType}')
-
-Disable: vibe ${llmType} remove
+    console.log(`
+${llmType.toUpperCase()} API key configured!
+
+Role: ${llmConfig.description}
+Stored: ${configJsonPath}
+
+${llmType.toUpperCase()} is called directly via Hooks:
+  - Auto-called with "${llmType}. query" prefix
+  - Direct use: import('@su-record/vibe/lib/${llmType}')
+
+Disable: vibe ${llmType} remove
   `);
 }
 /**

package/dist/cli/llm/gemini-commands.js

@@ -27,14 +27,14 @@ export function geminiAuthCore() {
  * Gemini 인증 (CLI 명령어용)
  */
 export async function geminiAuth() {
-    console.log(`
-Gemini Authentication
-
-API Key (Google AI Studio):
-  vibe gemini key <your-api-key>
-
-Get your API key from:
-  https://aistudio.google.com/apikey
+    console.log(`
+Gemini Authentication
+
+API Key (Google AI Studio):
+  vibe gemini key <your-api-key>
+
+Get your API key from:
+  https://aistudio.google.com/apikey
   `);
     const config = readGlobalConfig();
     const apiKey = config.credentials?.gemini?.apiKey;
@@ -69,14 +69,14 @@ export function geminiStatus() {
             console.log(lines.join('\n'));
             return;
         }
-        console.log(`
-Gemini Status
-
-No credentials found.
-
-Set up:
-  vibe gemini key <your-api-key>
-  or set GEMINI_API_KEY env var
+        console.log(`
+Gemini Status
+
+No credentials found.
+
+Set up:
+  vibe gemini key <your-api-key>
+  or set GEMINI_API_KEY env var
     `);
     }
     catch (error) {

package/dist/cli/llm/gpt-commands.js

@@ -36,25 +36,25 @@ export function gptStatus() {
     }
     const modelGpt = config.models?.gpt || 'gpt-5.4 (default)';
     const modelCodex = config.models?.gptCodex || 'gpt-5.3-codex (default)';
-    console.log(`
-GPT Status
-
-Codex CLI: ${codexVersion}
-Codex Auth: ${codexAuthStatus}
-API Key: ${hasApiKey ? 'configured (for embeddings)' : 'not set'}
-
-Models:
-  gpt (review):    ${modelGpt}
-  gpt-codex (code review & analysis): ${modelCodex}
-
-Auth priority: codex-cli (~/.codex/auth.json) > apikey
-Stored: ~/.vibe/config.json
-
-Commands:
-  vibe gpt key <key>     Set OpenAI API key (for embeddings)
-  vibe gpt status        This status
-  vibe gpt logout        Remove API key
-  codex auth             Codex CLI authentication
+    console.log(`
+GPT Status
+
+Codex CLI: ${codexVersion}
+Codex Auth: ${codexAuthStatus}
+API Key: ${hasApiKey ? 'configured (for embeddings)' : 'not set'}
+
+Models:
+  gpt (review):    ${modelGpt}
+  gpt-codex (code review & analysis): ${modelCodex}
+
+Auth priority: codex-cli (~/.codex/auth.json) > apikey
+Stored: ~/.vibe/config.json
+
+Commands:
+  vibe gpt key <key>     Set OpenAI API key (for embeddings)
+  vibe gpt status        This status
+  vibe gpt logout        Remove API key
+  codex auth             Codex CLI authentication
   `);
 }
 /**

package/dist/cli/llm/help.js

@@ -5,33 +5,33 @@
  * Auth help (legacy - now shows new format)
  */
 export function showAuthHelp() {
-    console.log(`
-🔐 LLM Authentication
-
-GPT Commands:
-  vibe gpt key <KEY>      API key
-  vibe gpt status         Check status
-  codex auth              Codex CLI authentication
-
-Gemini Commands:
-  vibe gemini key <KEY>   API key
-  vibe gemini status      Check status
-
-Examples:
-  codex auth              Codex CLI login
-  vibe gpt key sk-xxx     API key setup
+    console.log(`
+🔐 LLM Authentication
+
+GPT Commands:
+  vibe gpt key <KEY>      API key
+  vibe gpt status         Check status
+  codex auth              Codex CLI authentication
+
+Gemini Commands:
+  vibe gemini key <KEY>   API key
+  vibe gemini status      Check status
+
+Examples:
+  codex auth              Codex CLI login
+  vibe gpt key sk-xxx     API key setup
   `);
 }
 /**
  * Logout help (legacy - now shows new format)
  */
 export function showLogoutHelp() {
-    console.log(`
-🚪 LLM Logout
-
-Usage:
-  vibe gpt logout       GPT logout
-  vibe gemini logout    Gemini logout
+    console.log(`
+🚪 LLM Logout
+
+Usage:
+  vibe gpt logout       GPT logout
+  vibe gemini logout    Gemini logout
   `);
 }
 //# sourceMappingURL=help.js.map

package/dist/cli/postinstall/cursor-agents.js

@@ -67,38 +67,38 @@ function convertAgentToCursor(content, filename) {
     const nextStepsSection = nextAgents
         .map((a) => `- For ${a.replace('-reviewer', '')} review: "Use ${a}"`)
         .join('\n');
-    return `---
-name: ${name}
-model: ${model}
-description: ${description}
----
-
-# ${title}
-
-## When Invoked
-
-1. Run \`git diff\` to see recent changes
-2. Focus on modified files relevant to this review type
-3. Begin review immediately without asking questions
-
-## Role
-
-${roleLines.map((r) => `- ${r}`).join('\n')}
-
-## Checklist
-
-${checklist}
-
-## Output Format
-
-${outputFormat}
-
-## Next Steps
-
-Review complete. Consider these follow-up actions:
-
-${nextStepsSection}
-- All reviews done: Ready to commit
+    return `---
+name: ${name}
+model: ${model}
+description: ${description}
+---
+
+# ${title}
+
+## When Invoked
+
+1. Run \`git diff\` to see recent changes
+2. Focus on modified files relevant to this review type
+3. Begin review immediately without asking questions
+
+## Role
+
+${roleLines.map((r) => `- ${r}`).join('\n')}
+
+## Checklist
+
+${checklist}
+
+## Output Format
+
+${outputFormat}
+
+## Next Steps
+
+Review complete. Consider these follow-up actions:
+
+${nextStepsSection}
+- All reviews done: Ready to commit
 `;
 }
 /**

package/dist/cli/postinstall/cursor-rules.js

@@ -21,13 +21,13 @@ function convertLanguageRuleToCursor(content, filename) {
     // glob 패턴 가져오기
     const globs = LANGUAGE_GLOBS[filename] || '**/*';
     // .mdc frontmatter + 본문
-    return `---
-description: ${description} - complexity limits, type safety, error handling
-globs: "${globs}"
-alwaysApply: false
----
-
-${normalizedContent}
+    return `---
+description: ${description} - complexity limits, type safety, error handling
+globs: "${globs}"
+alwaysApply: false
+---
+
+${normalizedContent}
 `;
 }
 /**
@@ -104,86 +104,86 @@ export function generateCursorRules(cursorRulesDir, detectedStacks = [], languag
     const commonRules = [
         {
             filename: 'code-quality.mdc',
-            content: `---
-description: General code quality rules for all files
-alwaysApply: true
----
-
-# Code Quality Rules
-
-## Core Principles
-- **Modify only requested scope** - Don't touch unrelated code
-- **Preserve existing style** - Follow project conventions
-- **Keep working code** - No unnecessary refactoring
-
-## Forbidden Patterns
-- No \`console.log\` in production code (remove after debugging)
-- No hardcoded strings/numbers → Extract to constants
-- No commented-out code in commits
-- No incomplete code without TODO marker
-
-## Naming Conventions
-- Variables/functions: camelCase
-- Classes/types: PascalCase
-- Constants: UPPER_SNAKE_CASE
-- Files: kebab-case or PascalCase (match project style)
-
-## Function Design
-- Single responsibility per function
-- Max 5 parameters (use object for more)
-- Descriptive names (verb + noun)
-- Document non-obvious behavior
-
-## Complexity Limits
-| Metric | Limit |
-|--------|-------|
-| Function length | ≤30 lines (recommended), ≤50 lines (max) |
-| Nesting depth | ≤3 levels |
-| Parameters | ≤5 |
-| Cyclomatic complexity | ≤10 |
-
-## Dependency Management
-- Avoid circular dependencies
-- Keep loose coupling (depend on interfaces)
-- High cohesion (group related functions)
+            content: `---
+description: General code quality rules for all files
+alwaysApply: true
+---
+
+# Code Quality Rules
+
+## Core Principles
+- **Modify only requested scope** - Don't touch unrelated code
+- **Preserve existing style** - Follow project conventions
+- **Keep working code** - No unnecessary refactoring
+
+## Forbidden Patterns
+- No \`console.log\` in production code (remove after debugging)
+- No hardcoded strings/numbers → Extract to constants
+- No commented-out code in commits
+- No incomplete code without TODO marker
+
+## Naming Conventions
+- Variables/functions: camelCase
+- Classes/types: PascalCase
+- Constants: UPPER_SNAKE_CASE
+- Files: kebab-case or PascalCase (match project style)
+
+## Function Design
+- Single responsibility per function
+- Max 5 parameters (use object for more)
+- Descriptive names (verb + noun)
+- Document non-obvious behavior
+
+## Complexity Limits
+| Metric | Limit |
+|--------|-------|
+| Function length | ≤30 lines (recommended), ≤50 lines (max) |
+| Nesting depth | ≤3 levels |
+| Parameters | ≤5 |
+| Cyclomatic complexity | ≤10 |
+
+## Dependency Management
+- Avoid circular dependencies
+- Keep loose coupling (depend on interfaces)
+- High cohesion (group related functions)
 `,
         },
         {
             filename: 'security-checklist.mdc',
-            content: `---
-description: Security checklist for code changes
-globs: "**/*.ts,**/*.tsx,**/*.js,**/*.jsx,**/*.py,**/*.go,**/*.rs,**/*.java,**/*.kt,**/*.swift"
-alwaysApply: false
----
-
-# Security Checklist
-
-## Input Validation
-- [ ] Validate all user inputs
-- [ ] Sanitize data before database queries
-- [ ] Use parameterized queries (prevent SQL injection)
-
-## Authentication
-- [ ] Secure password handling (never store plain text)
-- [ ] Session management is secure
-- [ ] Tokens have appropriate expiry
-
-## Data Protection
-- [ ] Sensitive data is encrypted
-- [ ] API keys not committed to code
-- [ ] Error messages don't leak sensitive info
-
-## OWASP Top 10 Awareness
-- Injection (SQL, XSS, Command)
-- Broken authentication
-- Sensitive data exposure
-- XML external entities (XXE)
-- Broken access control
-- Security misconfiguration
-- Cross-site scripting (XSS)
-- Insecure deserialization
-- Using components with known vulnerabilities
-- Insufficient logging & monitoring
+            content: `---
+description: Security checklist for code changes
+globs: "**/*.ts,**/*.tsx,**/*.js,**/*.jsx,**/*.py,**/*.go,**/*.rs,**/*.java,**/*.kt,**/*.swift"
+alwaysApply: false
+---
+
+# Security Checklist
+
+## Input Validation
+- [ ] Validate all user inputs
+- [ ] Sanitize data before database queries
+- [ ] Use parameterized queries (prevent SQL injection)
+
+## Authentication
+- [ ] Secure password handling (never store plain text)
+- [ ] Session management is secure
+- [ ] Tokens have appropriate expiry
+
+## Data Protection
+- [ ] Sensitive data is encrypted
+- [ ] API keys not committed to code
+- [ ] Error messages don't leak sensitive info
+
+## OWASP Top 10 Awareness
+- Injection (SQL, XSS, Command)
+- Broken authentication
+- Sensitive data exposure
+- XML external entities (XXE)
+- Broken access control
+- Security misconfiguration
+- Cross-site scripting (XSS)
+- Insecure deserialization
+- Using components with known vulnerabilities
+- Insufficient logging & monitoring
 `,
         },
     ];