@su-record/vibe 2.9.22 → 2.9.23

package/.env.example

@@ -1,37 +1,37 @@
-# ─── VIBE Configuration ─────────────────────────────────────────────
-#
-# All credentials, channels, and model overrides are stored in:
-#   ~/.vibe/config.json
-#
-# Use CLI commands to configure:
-#   vibe setup                    Interactive setup wizard
-#   vibe gpt auth                 GPT OAuth (Plus/Pro)
-#   vibe gpt key <key>            GPT API key
-#   vibe gemini auth              Gemini OAuth
-#   vibe gemini key <key>         Gemini API key
-#   vibe claude key <key>         Claude API key
-#   vibe telegram setup <token>   Telegram bot
-#   vibe slack setup <bot> <app>  Slack bot
-#   vibe status                   Check all status
-#
-# Config structure (~/.vibe/config.json):
-# {
-#   "version": "1",
-#   "credentials": {
-#     "gpt": { "apiKey": "sk-..." },
-#     "gemini": { "apiKey": "AIza..." }
-#   },
-#   "channels": {
-#     "telegram": { "botToken": "123:ABC", "allowedChatIds": ["-100..."] },
-#     "slack": { "botToken": "xoxb-...", "appToken": "xapp-..." }
-#   },
-#   "models": {
-#     "gpt": "gpt-5.4",
-#     "gemini": "gemini-3.1-pro-preview",
-#     "claudeBackground": "claude-sonnet-4-5"
-#   }
-# }
-#
-# Environment variables are still supported as fallback:
-#   OPENAI_API_KEY, GEMINI_API_KEY, GPT_MODEL, etc.
-# ────────────────────────────────────────────────────────────────────
+# ─── VIBE Configuration ─────────────────────────────────────────────
+#
+# All credentials, channels, and model overrides are stored in:
+#   ~/.vibe/config.json
+#
+# Use CLI commands to configure:
+#   vibe setup                    Interactive setup wizard
+#   vibe gpt auth                 GPT OAuth (Plus/Pro)
+#   vibe gpt key <key>            GPT API key
+#   vibe gemini auth              Gemini OAuth
+#   vibe gemini key <key>         Gemini API key
+#   vibe claude key <key>         Claude API key
+#   vibe telegram setup <token>   Telegram bot
+#   vibe slack setup <bot> <app>  Slack bot
+#   vibe status                   Check all status
+#
+# Config structure (~/.vibe/config.json):
+# {
+#   "version": "1",
+#   "credentials": {
+#     "gpt": { "apiKey": "sk-..." },
+#     "gemini": { "apiKey": "AIza..." }
+#   },
+#   "channels": {
+#     "telegram": { "botToken": "123:ABC", "allowedChatIds": ["-100..."] },
+#     "slack": { "botToken": "xoxb-...", "appToken": "xapp-..." }
+#   },
+#   "models": {
+#     "gpt": "gpt-5.4",
+#     "gemini": "gemini-3.1-pro-preview",
+#     "claudeBackground": "claude-sonnet-4-5"
+#   }
+# }
+#
+# Environment variables are still supported as fallback:
+#   OPENAI_API_KEY, GEMINI_API_KEY, GPT_MODEL, etc.
+# ────────────────────────────────────────────────────────────────────

package/CLAUDE.md

@@ -1,105 +1,105 @@
-# VIBE
-
-> Source code for `@su-record/vibe` npm package. Modify files in THIS repository only — never the installed copies (`~/.claude/`, `~/.coco/`, `~/.vibe/`).
->
-> **File-to-CLI mapping:**
-> - `CLAUDE.md` — **Claude Code** (100% supported) · **content SSOT**
-> - `AGENTS.md` — **coco** (100% supported)
->
-> `AGENTS.md` is regenerated from this file via `/vibe.docs agent`. Edit here first.
-
-## Hard Rules
-
-### Behavior
-- **Modify only requested scope** — Every changed line traces to the user's request
-- **Edit existing files over creating new** — Fix at source
-- **Preserve existing style** — Match conventions even if you'd do it differently
-- **Respect Ctrl+C / Escape** — Previous task CANCELLED
-- **State assumptions, ask when uncertain** — Don't pick silently when ambiguity exists; push back if a simpler approach exists
-
-### Goal-Driven Execution
-Transform imperative tasks into verifiable goals **before** coding:
-
-| Instead of | Transform to |
-|---|---|
-| "Add validation" | "Tests for invalid inputs pass" |
-| "Fix the bug" | "A test reproducing it passes" |
-| "Refactor X" | "Tests pass before and after" |
-
-Weak criteria ("make it work") require constant clarification. Strong criteria let the loop run independently.
-
-### TypeScript (enforced by Quality Gate hooks)
-- No `any` / `as any` / `@ts-ignore` — use `unknown` + type guards; fix at root
-- Explicit return types on all functions
-
-### Complexity Limits
-Function ≤50 lines · Nesting ≤3 · Params ≤5 · Cyclomatic ≤10
-
-### Forbidden Patterns
-No `console.log` in commits · No hardcoded strings/numbers · No commented-out code · No incomplete code without TODO
-
-### Convergence (review / auto-fix loops)
-- **Loop until P1 = 0 AND no new findings** — no round cap
-- **Narrowing scope**: Round 1 full → Round 2 P1+P2 → Round 3+ P1 only
-- **Stuck detection** (same findings/score 2 rounds in a row) → ask user (fill values / approve sub-100 / abort). Never silently proceed sub-100
-- **`ultrawork` exception** — skip user prompt; record gaps as TODO to stay non-interactive
-- **Changed files only** — never full-project scan
-
-## Architecture (Non-Obvious)
-
-### Module System
-- ESM only (`"type": "module"`) — imports need `.js` extension
-- Build before test: `npm run build && npx vitest run`
-
-### Config Locations
-| Path | Purpose |
-|---|---|
-| `~/.vibe/config.json` | Global credentials, models (0o600) |
-| `.claude/vibe/config.json` | Project stacks, capabilities |
-| `.claude/settings.local.json` | Project hooks (auto-generated, don't commit) |
-
-### Gotchas
-- `better-sqlite3` WAL mode — synchronous API
-- `crypto.timingSafeEqual` requires same-length buffers — check length first
-- **Stack → asset SSOT**: `GLOBAL_SKILLS_*`, `STACK_TO_SKILLS`, `CAPABILITY_SKILLS` in `src/cli/postinstall/constants.ts`
-- **Hook dispatch order**: `prompt-dispatcher.js` → `keyword-detector.js` → `llm-orchestrate.js`
-
-## Workflow
-
-`/vibe.spec` is the single entry point — orchestrates interview → plan → spec → review → `/vibe.run` → `/vibe.verify` → `/vibe.contract` → `/vibe.trace`. For UI types (website/webapp/mobile), `/vibe.figma` branches in parallel. Smart Resume detects existing `.claude/vibe/{interviews,plans,specs}/*.md` to skip phases.
-
-**Quality-loop commands** (bug → prevention):
-- `/vibe.regress` — Regression test auto-evolution. Auto-registers on `/vibe.verify` failure; `generate` produces preventive tests; `cluster` promotes recurring patterns.
-- `/vibe.contract` — API contract drift detection. Compares the contract extracted from the SPEC against the implementation; P1 drift auto-propagates to `/vibe.regress`.
-- `/vibe.test` — vibe self-test across the CC ↔ coco harnesses. Subcommands: `parity` (static), `report` (runtime), `compare` (diff). P1 drift auto-propagates to `/vibe.regress`. Recommended before every release.
-
-| Task Size | Approach |
-|---|---|
-| 1–2 files | Plan Mode |
-| 3+ files | `/vibe.spec` |
-
-## Magic Keywords
-
-| Keyword | Effect |
-|---|---|
-| `ultrawork` / `ulw` | Parallel agents + auto-continue + Ralph Loop |
-| `ralph` | Iterate to 100% (no scope reduction) |
-| `ralplan` | Iterative planning + persistence |
-| `verify` | Strict verification mode |
-| `quick` | Fast mode, minimal verification |
-
-## Skill Tiers
-
-3 tiers prevent context overload: **core** (always active) / **standard** (project-setup selected) / **optional** (explicit `/skill` only). SSOT: `GLOBAL_SKILLS_CORE` + `GLOBAL_SKILLS_STANDARD` in `src/cli/postinstall/constants.ts`. Proactive triggers live in each skill's frontmatter.
-
-## Context Management
-
-- Exploration → Haiku · Implementation → Sonnet · Architecture → Opus
-- At 70%+ context: `save_memory` → `/new` → `/vibe.utils --continue`
-
-## Git
-
-**Include**: `.claude/vibe/{plans,specs,features,todos,research,regressions,contracts,test-reports}/`, `.claude/vibe/config.json`, `CLAUDE.md`
-**Exclude**: `~/.claude/{rules,commands,agents,skills}/`, `.claude/settings.local.json`
-
-<!-- VIBE:END -->
+# VIBE
+
+> Source code for `@su-record/vibe` npm package. Modify files in THIS repository only — never the installed copies (`~/.claude/`, `~/.coco/`, `~/.vibe/`).
+>
+> **File-to-CLI mapping:**
+> - `CLAUDE.md` — **Claude Code** (100% supported) · **content SSOT**
+> - `AGENTS.md` — **coco** (100% supported)
+>
+> `AGENTS.md` is regenerated from this file via `/vibe.docs agent`. Edit here first.
+
+## Hard Rules
+
+### Behavior
+- **Modify only requested scope** — Every changed line traces to the user's request
+- **Edit existing files over creating new** — Fix at source
+- **Preserve existing style** — Match conventions even if you'd do it differently
+- **Respect Ctrl+C / Escape** — Previous task CANCELLED
+- **State assumptions, ask when uncertain** — Don't pick silently when ambiguity exists; push back if a simpler approach exists
+
+### Goal-Driven Execution
+Transform imperative tasks into verifiable goals **before** coding:
+
+| Instead of | Transform to |
+|---|---|
+| "Add validation" | "Tests for invalid inputs pass" |
+| "Fix the bug" | "A test reproducing it passes" |
+| "Refactor X" | "Tests pass before and after" |
+
+Weak criteria ("make it work") require constant clarification. Strong criteria let the loop run independently.
+
+### TypeScript (enforced by Quality Gate hooks)
+- No `any` / `as any` / `@ts-ignore` — use `unknown` + type guards; fix at root
+- Explicit return types on all functions
+
+### Complexity Limits
+Function ≤50 lines · Nesting ≤3 · Params ≤5 · Cyclomatic ≤10
+
+### Forbidden Patterns
+No `console.log` in commits · No hardcoded strings/numbers · No commented-out code · No incomplete code without TODO
+
+### Convergence (review / auto-fix loops)
+- **Loop until P1 = 0 AND no new findings** — no round cap
+- **Narrowing scope**: Round 1 full → Round 2 P1+P2 → Round 3+ P1 only
+- **Stuck detection** (same findings/score 2 rounds in a row) → ask user (fill values / approve sub-100 / abort). Never silently proceed sub-100
+- **`ultrawork` exception** — skip user prompt; record gaps as TODO to stay non-interactive
+- **Changed files only** — never full-project scan
+
+## Architecture (Non-Obvious)
+
+### Module System
+- ESM only (`"type": "module"`) — imports need `.js` extension
+- Build before test: `npm run build && npx vitest run`
+
+### Config Locations
+| Path | Purpose |
+|---|---|
+| `~/.vibe/config.json` | Global credentials, models (0o600) |
+| `.claude/vibe/config.json` | Project stacks, capabilities |
+| `.claude/settings.local.json` | Project hooks (auto-generated, don't commit) |
+
+### Gotchas
+- `better-sqlite3` WAL mode — synchronous API
+- `crypto.timingSafeEqual` requires same-length buffers — check length first
+- **Stack → asset SSOT**: `GLOBAL_SKILLS_*`, `STACK_TO_SKILLS`, `CAPABILITY_SKILLS` in `src/cli/postinstall/constants.ts`
+- **Hook dispatch order**: `prompt-dispatcher.js` → `keyword-detector.js` → `llm-orchestrate.js`
+
+## Workflow
+
+`/vibe.spec` is the single entry point — orchestrates interview → plan → spec → review → `/vibe.run` → `/vibe.verify` → `/vibe.contract` → `/vibe.trace`. For UI types (website/webapp/mobile), `/vibe.figma` branches in parallel. Smart Resume detects existing `.claude/vibe/{interviews,plans,specs}/*.md` to skip phases.
+
+**Quality-loop commands** (bug → prevention):
+- `/vibe.regress` — Regression test auto-evolution. Auto-registers on `/vibe.verify` failure; `generate` produces preventive tests; `cluster` promotes recurring patterns.
+- `/vibe.contract` — API contract drift detection. Compares the contract extracted from the SPEC against the implementation; P1 drift auto-propagates to `/vibe.regress`.
+- `/vibe.test` — vibe self-test across the CC ↔ coco harnesses. Subcommands: `parity` (static), `report` (runtime), `compare` (diff). P1 drift auto-propagates to `/vibe.regress`. Recommended before every release.
+
+| Task Size | Approach |
+|---|---|
+| 1–2 files | Plan Mode |
+| 3+ files | `/vibe.spec` |
+
+## Magic Keywords
+
+| Keyword | Effect |
+|---|---|
+| `ultrawork` / `ulw` | Parallel agents + auto-continue + Ralph Loop |
+| `ralph` | Iterate to 100% (no scope reduction) |
+| `ralplan` | Iterative planning + persistence |
+| `verify` | Strict verification mode |
+| `quick` | Fast mode, minimal verification |
+
+## Skill Tiers
+
+3 tiers prevent context overload: **core** (always active) / **standard** (project-setup selected) / **optional** (explicit `/skill` only). SSOT: `GLOBAL_SKILLS_CORE` + `GLOBAL_SKILLS_STANDARD` in `src/cli/postinstall/constants.ts`. Proactive triggers live in each skill's frontmatter.
+
+## Context Management
+
+- Exploration → Haiku · Implementation → Sonnet · Architecture → Opus
+- At 70%+ context: `save_memory` → `/new` → `/vibe.utils --continue`
+
+## Git
+
+**Include**: `.claude/vibe/{plans,specs,features,todos,research,regressions,contracts,test-reports}/`, `.claude/vibe/config.json`, `CLAUDE.md`
+**Exclude**: `~/.claude/{rules,commands,agents,skills}/`, `.claude/settings.local.json`
+
+<!-- VIBE:END -->

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2025 Su
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2025 Su
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/agents/architect-low.md

@@ -1,41 +1,41 @@
-# Architect Agent - Low Tier (Haiku)
-
-Quick architecture queries and pattern matching.
-
-## Role
-
-- Architecture pattern lookup
-- Quick structure analysis
-- Simple design questions
-
-## Model
-
-**Haiku** - Fast pattern matching
-
-## When to Use
-
-- "What pattern does this use?"
-- "Where is X defined?"
-- Simple structural questions
-
-## Usage
-
-```
-Task(model: "haiku", subagent_type: "general-purpose", prompt: "What architecture pattern does this service use?")
-```
-
-## Process
-
-1. Quick codebase scan
-2. Pattern identification
-3. Return finding
-
-## Output
-
-```markdown
-## Architecture Query Result
-
-Pattern: Repository Pattern
-Location: src/repositories/
-Evidence: UserRepository, ProductRepository classes
-```
+# Architect Agent - Low Tier (Haiku)
+
+Quick architecture queries and pattern matching.
+
+## Role
+
+- Architecture pattern lookup
+- Quick structure analysis
+- Simple design questions
+
+## Model
+
+**Haiku** - Fast pattern matching
+
+## When to Use
+
+- "What pattern does this use?"
+- "Where is X defined?"
+- Simple structural questions
+
+## Usage
+
+```
+Task(model: "haiku", subagent_type: "general-purpose", prompt: "What architecture pattern does this service use?")
+```
+
+## Process
+
+1. Quick codebase scan
+2. Pattern identification
+3. Return finding
+
+## Output
+
+```markdown
+## Architecture Query Result
+
+Pattern: Repository Pattern
+Location: src/repositories/
+Evidence: UserRepository, ProductRepository classes
+```

package/agents/architect-medium.md

@@ -1,59 +1,59 @@
-# Architect Agent - Medium Tier (Sonnet)
-
-Module-level architecture and design.
-
-## Role
-
-- Module architecture
-- Component design
-- API design
-- Local optimization
-
-## Model
-
-**Sonnet** - Balanced for module-level decisions
-
-## When to Use
-
-- Single module design
-- API endpoint design
-- Component hierarchy
-- Local refactoring decisions
-
-## Usage
-
-```
-Task(model: "sonnet", subagent_type: "general-purpose", prompt: "Design the user service module")
-```
-
-## Process
-
-1. Understand module requirements
-2. Review existing patterns
-3. Design component structure
-4. Define interfaces
-5. Document decision
-
-## Output
-
-```markdown
-## Module Design
-
-### Structure
-```
-src/user/
-├── index.ts (exports)
-├── service.ts (business logic)
-├── repository.ts (data access)
-├── types.ts (type definitions)
-└── __tests__/
-```
-
-### Interfaces
-- UserService: create, read, update, delete
-- UserRepository: find, save, remove
-
-### Dependencies
-- Depends on: auth, database
-- Used by: profile, settings
-```
+# Architect Agent - Medium Tier (Sonnet)
+
+Module-level architecture and design.
+
+## Role
+
+- Module architecture
+- Component design
+- API design
+- Local optimization
+
+## Model
+
+**Sonnet** - Balanced for module-level decisions
+
+## When to Use
+
+- Single module design
+- API endpoint design
+- Component hierarchy
+- Local refactoring decisions
+
+## Usage
+
+```
+Task(model: "sonnet", subagent_type: "general-purpose", prompt: "Design the user service module")
+```
+
+## Process
+
+1. Understand module requirements
+2. Review existing patterns
+3. Design component structure
+4. Define interfaces
+5. Document decision
+
+## Output
+
+```markdown
+## Module Design
+
+### Structure
+```
+src/user/
+├── index.ts (exports)
+├── service.ts (business logic)
+├── repository.ts (data access)
+├── types.ts (type definitions)
+└── __tests__/
+```
+
+### Interfaces
+- UserService: create, read, update, delete
+- UserRepository: find, save, remove
+
+### Dependencies
+- Depends on: auth, database
+- Used by: profile, settings
+```