@su-record/vibe 2.9.24 → 2.9.32

package/.env.example

@@ -1,37 +1,37 @@
-# ─── VIBE Configuration ─────────────────────────────────────────────
-#
-# All credentials, channels, and model overrides are stored in:
-#   ~/.vibe/config.json
-#
-# Use CLI commands to configure:
-#   vibe setup                    Interactive setup wizard
-#   vibe gpt auth                 GPT OAuth (Plus/Pro)
-#   vibe gpt key <key>            GPT API key
-#   vibe gemini auth              Gemini OAuth
-#   vibe gemini key <key>         Gemini API key
-#   vibe claude key <key>         Claude API key
-#   vibe telegram setup <token>   Telegram bot
-#   vibe slack setup <bot> <app>  Slack bot
-#   vibe status                   Check all status
-#
-# Config structure (~/.vibe/config.json):
-# {
-#   "version": "1",
-#   "credentials": {
-#     "gpt": { "apiKey": "sk-..." },
-#     "gemini": { "apiKey": "AIza..." }
-#   },
-#   "channels": {
-#     "telegram": { "botToken": "123:ABC", "allowedChatIds": ["-100..."] },
-#     "slack": { "botToken": "xoxb-...", "appToken": "xapp-..." }
-#   },
-#   "models": {
-#     "gpt": "gpt-5.4",
-#     "gemini": "gemini-3.1-pro-preview",
-#     "claudeBackground": "claude-sonnet-4-5"
-#   }
-# }
-#
-# Environment variables are still supported as fallback:
-#   OPENAI_API_KEY, GEMINI_API_KEY, GPT_MODEL, etc.
-# ────────────────────────────────────────────────────────────────────
+# ─── VIBE Configuration ─────────────────────────────────────────────
+#
+# All credentials, channels, and model overrides are stored in:
+#   ~/.vibe/config.json
+#
+# Use CLI commands to configure:
+#   vibe setup                    Interactive setup wizard
+#   vibe gpt auth                 GPT OAuth (Plus/Pro)
+#   vibe gpt key <key>            GPT API key
+#   vibe gemini auth              Gemini OAuth
+#   vibe gemini key <key>         Gemini API key
+#   vibe claude key <key>         Claude API key
+#   vibe telegram setup <token>   Telegram bot
+#   vibe slack setup <bot> <app>  Slack bot
+#   vibe status                   Check all status
+#
+# Config structure (~/.vibe/config.json):
+# {
+#   "version": "1",
+#   "credentials": {
+#     "gpt": { "apiKey": "sk-..." },
+#     "gemini": { "apiKey": "AIza..." }
+#   },
+#   "channels": {
+#     "telegram": { "botToken": "123:ABC", "allowedChatIds": ["-100..."] },
+#     "slack": { "botToken": "xoxb-...", "appToken": "xapp-..." }
+#   },
+#   "models": {
+#     "gpt": "gpt-5.4",
+#     "gemini": "gemini-3.1-pro-preview",
+#     "claudeBackground": "claude-sonnet-4-5"
+#   }
+# }
+#
+# Environment variables are still supported as fallback:
+#   OPENAI_API_KEY, GEMINI_API_KEY, GPT_MODEL, etc.
+# ────────────────────────────────────────────────────────────────────

package/CLAUDE.md

@@ -1,105 +1,109 @@
-# VIBE
-
-> Source code for `@su-record/vibe` npm package. Modify files in THIS repository only — never the installed copies (`~/.claude/`, `~/.coco/`, `~/.vibe/`).
->
-> **File-to-CLI mapping:**
-> - `CLAUDE.md` — **Claude Code** (100% supported) · **content SSOT**
-> - `AGENTS.md` — **coco** (100% supported)
->
-> `AGENTS.md` is regenerated from this file via `/vibe.docs agent`. Edit here first.
-
-## Hard Rules
-
-### Behavior
-- **Modify only requested scope** — Every changed line traces to the user's request
-- **Edit existing files over creating new** — Fix at source
-- **Preserve existing style** — Match conventions even if you'd do it differently
-- **Respect Ctrl+C / Escape** — Previous task CANCELLED
-- **State assumptions, ask when uncertain** — Don't pick silently when ambiguity exists; push back if a simpler approach exists
-
-### Goal-Driven Execution
-Transform imperative tasks into verifiable goals **before** coding:
-
-| Instead of | Transform to |
-|---|---|
-| "Add validation" | "Tests for invalid inputs pass" |
-| "Fix the bug" | "A test reproducing it passes" |
-| "Refactor X" | "Tests pass before and after" |
-
-Weak criteria ("make it work") require constant clarification. Strong criteria let the loop run independently.
-
-### TypeScript (enforced by Quality Gate hooks)
-- No `any` / `as any` / `@ts-ignore` — use `unknown` + type guards; fix at root
-- Explicit return types on all functions
-
-### Complexity Limits
-Function ≤50 lines · Nesting ≤3 · Params ≤5 · Cyclomatic ≤10
-
-### Forbidden Patterns
-No `console.log` in commits · No hardcoded strings/numbers · No commented-out code · No incomplete code without TODO
-
-### Convergence (review / auto-fix loops)
-- **Loop until P1 = 0 AND no new findings** — no round cap
-- **Narrowing scope**: Round 1 full → Round 2 P1+P2 → Round 3+ P1 only
-- **Stuck detection** (same findings/score 2 rounds in a row) → ask user (fill values / approve sub-100 / abort). Never silently proceed sub-100
-- **`ultrawork` exception** — skip user prompt; record gaps as TODO to stay non-interactive
-- **Changed files only** — never full-project scan
-
-## Architecture (Non-Obvious)
-
-### Module System
-- ESM only (`"type": "module"`) — imports need `.js` extension
-- Build before test: `npm run build && npx vitest run`
-
-### Config Locations
-| Path | Purpose |
-|---|---|
-| `~/.vibe/config.json` | Global credentials, models (0o600) |
-| `.claude/vibe/config.json` | Project stacks, capabilities |
-| `.claude/settings.local.json` | Project hooks (auto-generated, don't commit) |
-
-### Gotchas
-- `better-sqlite3` WAL mode — synchronous API
-- `crypto.timingSafeEqual` requires same-length buffers — check length first
-- **Stack → asset SSOT**: `GLOBAL_SKILLS_*`, `STACK_TO_SKILLS`, `CAPABILITY_SKILLS` in `src/cli/postinstall/constants.ts`
-- **Hook dispatch order**: `prompt-dispatcher.js` → `keyword-detector.js` → `llm-orchestrate.js`
-
-## Workflow
-
-`/vibe.spec` is the single entry point — orchestrates interview → plan → spec → review → `/vibe.run` → `/vibe.verify` → `/vibe.contract` → `/vibe.trace`. For UI types (website/webapp/mobile), `/vibe.figma` branches in parallel. Smart Resume detects existing `.claude/vibe/{interviews,plans,specs}/*.md` to skip phases.
-
-**Quality-loop commands** (bug → prevention):
-- `/vibe.regress` — Regression test auto-evolution. Auto-registers on `/vibe.verify` failure; `generate` produces preventive tests; `cluster` promotes recurring patterns.
-- `/vibe.contract` — API contract drift detection. Compares the contract extracted from the SPEC against the implementation; P1 drift auto-propagates to `/vibe.regress`.
-- `/vibe.test` — vibe self-test across the CC ↔ coco harnesses. Subcommands: `parity` (static), `report` (runtime), `compare` (diff). P1 drift auto-propagates to `/vibe.regress`. Recommended before every release.
-
-| Task Size | Approach |
-|---|---|
-| 1–2 files | Plan Mode |
-| 3+ files | `/vibe.spec` |
-
-## Magic Keywords
-
-| Keyword | Effect |
-|---|---|
-| `ultrawork` / `ulw` | Parallel agents + auto-continue + Ralph Loop |
-| `ralph` | Iterate to 100% (no scope reduction) |
-| `ralplan` | Iterative planning + persistence |
-| `verify` | Strict verification mode |
-| `quick` | Fast mode, minimal verification |
-
-## Skill Tiers
-
-3 tiers prevent context overload: **core** (always active) / **standard** (project-setup selected) / **optional** (explicit `/skill` only). SSOT: `GLOBAL_SKILLS_CORE` + `GLOBAL_SKILLS_STANDARD` in `src/cli/postinstall/constants.ts`. Proactive triggers live in each skill's frontmatter.
-
-## Context Management
-
-- Exploration → Haiku · Implementation → Sonnet · Architecture → Opus
-- At 70%+ context: `save_memory` → `/new` → `/vibe.utils --continue`
-
-## Git
-
-**Include**: `.claude/vibe/{plans,specs,features,todos,research,regressions,contracts,test-reports}/`, `.claude/vibe/config.json`, `CLAUDE.md`
-**Exclude**: `~/.claude/{rules,commands,agents,skills}/`, `.claude/settings.local.json`
-
-<!-- VIBE:END -->
+# VIBE
+
+> Source code for `@su-record/vibe` npm package. Modify files in THIS repository only — never the installed copies (`~/.claude/`, `~/.coco/`, `~/.vibe/`).
+>
+> **File-to-CLI mapping:**
+> - `CLAUDE.md` — **Claude Code** (100% supported) · **content SSOT**
+> - `AGENTS.md` — **coco** (100% supported)
+>
+> `AGENTS.md` is regenerated from this file via `/vibe.docs agent`. Edit here first.
+
+## Hard Rules
+
+### Behavior
+- **Modify only requested scope** — Every changed line traces to the user's request
+- **Edit existing files over creating new** — Fix at source
+- **Preserve existing style** — Match conventions even if you'd do it differently
+- **Respect Ctrl+C / Escape** — Previous task CANCELLED
+- **State assumptions, ask when uncertain** — Don't pick silently when ambiguity exists; push back if a simpler approach exists
+
+### Goal-Driven Execution
+Transform imperative tasks into verifiable goals **before** coding:
+
+| Instead of | Transform to |
+|---|---|
+| "Add validation" | "Tests for invalid inputs pass" |
+| "Fix the bug" | "A test reproducing it passes" |
+| "Refactor X" | "Tests pass before and after" |
+
+Weak criteria ("make it work") require constant clarification. Strong criteria let the loop run independently.
+
+### TypeScript (enforced by Quality Gate hooks)
+- No `any` / `as any` / `@ts-ignore` — use `unknown` + type guards; fix at root
+- Explicit return types on all functions
+
+### Complexity Limits
+Function ≤50 lines · Nesting ≤3 · Params ≤5 · Cyclomatic ≤10
+
+### Forbidden Patterns
+No `console.log` in commits · No hardcoded strings/numbers · No commented-out code · No incomplete code without TODO
+
+### Convergence (review / auto-fix loops)
+- **Loop until P1 = 0 AND no new findings** — no round cap
+- **Narrowing scope**: Round 1 full → Round 2 P1+P2 → Round 3+ P1 only
+- **Stuck detection** (same findings/score 2 rounds in a row) → ask user (fill values / approve sub-100 / abort). Never silently proceed sub-100
+- **`ultrawork` exception** — skip user prompt; record gaps as TODO to stay non-interactive
+- **Changed files only** — never full-project scan
+
+## Architecture (Non-Obvious)
+
+### Module System
+- ESM only (`"type": "module"`) — imports need `.js` extension
+- Build before test: `npm run build && npx vitest run`
+
+### Config Locations
+| Path | Purpose |
+|---|---|
+| `~/.vibe/config.json` | Global credentials, models (0o600) |
+| `.vibe/config.json` | Project stacks, capabilities — Claude/coco 공용 SSOT |
+| `.claude/settings.local.json` | Claude Code hooks (auto-generated, don't commit) |
+| `.coco/settings.local.json` | coco hooks (auto-generated, don't commit) |
+
+Legacy: 기존 `.claude/vibe/`·`.coco/vibe/` 는 런타임에 자동 인식되며 `vibe init`/`update` 시 `.vibe/` 로 이동한다.
+
+### Gotchas
+- `better-sqlite3` WAL mode — synchronous API
+- `crypto.timingSafeEqual` requires same-length buffers — check length first
+- **Stack → asset SSOT**: `GLOBAL_SKILLS_*`, `STACK_TO_SKILLS`, `CAPABILITY_SKILLS` in `src/cli/postinstall/constants.ts`
+- **Hook dispatch order**: `prompt-dispatcher.js` → `keyword-detector.js` → `llm-orchestrate.js`
+
+## Workflow
+
+`/vibe.spec` is the single entry point — orchestrates interview → plan → spec → review → `/vibe.run` → `/vibe.verify` → `/vibe.contract` → `/vibe.trace`. For UI types (website/webapp/mobile), `/vibe.figma` branches in parallel. Smart Resume detects existing `.claude/vibe/{interviews,plans,specs}/*.md` to skip phases.
+
+**Quality-loop commands** (bug → prevention):
+- `/vibe.regress` — Regression test auto-evolution. Auto-registers on `/vibe.verify` failure; `generate` produces preventive tests; `cluster` promotes recurring patterns.
+- `/vibe.contract` — API contract drift detection. Compares the contract extracted from the SPEC against the implementation; P1 drift auto-propagates to `/vibe.regress`.
+- `/vibe.test` — vibe self-test across the CC ↔ coco harnesses. Subcommands: `parity` (static), `report` (runtime), `compare` (diff). P1 drift auto-propagates to `/vibe.regress`. Recommended before every release.
+
+| Task Size | Approach |
+|---|---|
+| 1–2 files | Plan Mode |
+| 3+ files | `/vibe.spec` |
+
+## Magic Keywords
+
+| Keyword | Effect |
+|---|---|
+| `ultrawork` / `ulw` | Parallel agents + auto-continue + Ralph Loop |
+| `ralph` | Iterate to 100% (no scope reduction) |
+| `ralplan` | Iterative planning + persistence |
+| `verify` | Strict verification mode |
+| `quick` | Fast mode, minimal verification |
+
+## Skill Tiers
+
+3 tiers prevent context overload: **core** (always active) / **standard** (project-setup selected) / **optional** (explicit `/skill` only). SSOT: `GLOBAL_SKILLS_CORE` + `GLOBAL_SKILLS_STANDARD` in `src/cli/postinstall/constants.ts`. Proactive triggers live in each skill's frontmatter.
+
+## Context Management
+
+- Exploration → Haiku · Implementation → Sonnet · Architecture → Opus
+- At 70%+ context: `save_memory` → `/new` → `/vibe.utils --continue`
+
+## Git
+
+**Include**: `.vibe/{plans,specs,features,todos,research,regressions,contracts,config.json,constitution.md}`, `CLAUDE.md`
+**Vibe-global (not project-local)**: `~/.vibe/test-reports/` — `/vibe.test` artifacts live with the vibe install, not with the project
+**Exclude**: `~/.claude/{rules,commands,agents,skills}/`, `.claude/settings.local.json`, `.coco/settings.local.json`, `.vibe/{memories,checkpoints,metrics}/`
+
+<!-- VIBE:END -->

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2025 Su
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2025 Su
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.