@vibecodetown/mcp-server 2.1.0

package/build/tools/vibe_pm/scaffold.js

@@ -0,0 +1,550 @@
+// adapters/mcp-ts/src/tools/vibe_pm/scaffold.ts
+// vibe_pm.scaffold - Vibe Standard Directory Structure (Vibe-SDS) generator
+// Creates standardized project structure for AI-friendly development
+import fs from "node:fs/promises";
+import path from "node:path";
+const ZONE_COMMENTS = {
+    BLACK: "[BLACK ZONE] AI 접근 금지 - 시스템 전용",
+    RED: "[RED ZONE] AI 수정 금지 - 설정 파일",
+    GREEN: "[GREEN ZONE] AI 작업 구역",
+    YELLOW: "[YELLOW ZONE] AI 수정 가능 - 주의 필요",
+};
+// ============================================================
+// AI Context & Rules Templates
+// ============================================================
+const CURSORRULES_CONTENT = `# Vibe PM Enforced Rules (DO NOT DELETE)
+# This file ensures AI agents follow Vibe PM protocol in this project.
+
+## IDENTITY
+You are a Vibe PM Worker. You are NOT an autonomous coding agent.
+You operate under the strict supervision of Vibe PM.
+
+## PRIME DIRECTIVES
+1. **NO TICKET, NO WORK**: You cannot modify code without an active "Work Order".
+   - If user asks for code changes, run \`vibe_pm.create_work_order\` first.
+   - Exception: Minor typo fixes or formatting (still report via \`vibe_pm.status\`).
+
+2. **CONTEXT AWARENESS**: At the start of every session, run \`vibe_pm.status\` or \`vibe_pm.briefing\` to understand the current phase.
+
+3. **SAFETY ZONES (Vibe-SDS)**:
+   - ✅ WRITE: \`src/\`, \`tests/\`
+   - ⚠️ READ-ONLY: \`docs/\`, \`AI_ENTRYPOINT.md\`
+   - ⛔ FORBIDDEN: \`config/\`, \`.vibe/\`, \`.env\`
+
+## TOOL USAGE
+- Use \`vibe_pm.get_decision\` when ambiguity exists (A/B/C choices).
+- Use \`vibe_pm.inspect_code\` after EVERY implementation step.
+- Use \`vibe_pm.repair_plan\` when inspection fails.
+
+## COMMUNICATION
+- Explain decisions in simple Korean (한국어) for non-technical founders.
+- Always confirm before making significant changes.
+- Reference \`AI_ENTRYPOINT.md\` for project-specific context.
+
+## CLEAN DESK POLICY (DOCUMENTATION)
+1. **START**: Read requirements from \`docs/planning/\`.
+2. **UPDATE**: As you implement, verify against the checklist in the plan file.
+3. **FINISH**: When running \`vibe_pm.finalize_work\`, ALWAYS provide \`completed_plan_path\`.
+   - The system will automatically move it to \`docs/archive/\`.
+   - Do NOT delete the file yourself. Let the tool handle it.
+
+## FINALIZATION PROTOCOL (CRITICAL)
+1. **Definition of Done**:
+   - Coding is NOT the last step.
+   - \`inspect_code\` passing ("GO") is NOT the last step.
+   - You MUST run \`vibe_pm.finalize_work\` to finish a task.
+
+2. **No Fragmentation**:
+   - NEVER create scattered markdown files like \`feature_login.md\`.
+   - All updates go to \`docs/specs/CURRENT_SPEC.md\` via \`finalize_work\`.
+
+3. **Logging Standard**:
+   - Write \`task_summary\` for a non-technical founder.
+   - ✅ "사용자가 이메일로 로그인할 수 있게 되었습니다."
+   - ❌ "Implemented bcrypt hash in auth.py."
+
+4. **Git Standard**:
+   - Use Conventional Commits (e.g., \`feat: user login\`).
+   - NEVER commit directly using shell commands.
+   - ALWAYS use \`vibe_pm.finalize_work\`.
+
+## SELF-HEALING PROTOCOL
+1. **BE PROACTIVE**: Do NOT ask for permission for trivial fixes.
+   - Missing package? → Just install it.
+   - Syntax error? → Just fix it.
+   - Format issue? → Just format it.
+
+2. **REPORT AFTERWARDS**: Instead of "Shall I fix it?", say:
+   "I detected a missing package and fixed it automatically. The code is now verified."
+
+3. **ONLY ASK WHEN RISKY**: Ask ONLY when:
+   - Changing database schema (data loss risk)
+   - Modifying business logic
+   - Touching security configurations
+   - Deleting existing data
+
+4. **EXAMPLE RESPONSES**:
+   - ✅ "검증 과정에서 'pandas' 패키지가 누락된 것을 발견하여 자동으로 설치했습니다."
+   - ❌ "'pandas' 패키지가 없습니다. 설치할까요?"
+`;
+const CURRENT_SPEC_CONTENT = `# Project Specification
+
+> This is the **Living Spec** - the single source of truth for this project.
+> Last updated: ${new Date().toISOString().split('T')[0]}
+
+## 1. Overview
+
+<!-- vibe_pm.briefing 후 자동 채워짐 -->
+**Project**: Not initialized
+**Goal**: Run \`vibe_pm.briefing\` to set up.
+
+## 2. Architecture
+
+<!-- 시스템 구조 설명 -->
+TBD
+
+## 3. Database Schema
+
+<!-- 데이터베이스 스키마 -->
+TBD
+
+## 4. API Endpoints
+
+<!-- API 엔드포인트 목록 -->
+TBD
+
+## 5. Security
+
+<!-- 보안 관련 설정 -->
+TBD
+
+---
+
+*This file is managed by \`vibe_pm.finalize_work\`. Do not edit manually.*
+`;
+const VIBE_CI_WORKFLOW_CONTENT = `name: Vibe PM CI
+
+on:
+  push:
+  pull_request:
+
+jobs:
+  baseline-check:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - name: Install & Test (Node)
+        if: \${{ hashFiles('package.json') != '' }}
+        run: |
+          if [ -f package-lock.json ]; then npm ci; else npm install; fi
+          node -e "const p=require('./package.json');process.exit(p.scripts&&p.scripts.test?0:1)" \\
+            && npm test \\
+            || echo "::notice::No npm test script found. CI ran baseline checks only."
+
+      - name: Install & Test (Python)
+        if: \${{ hashFiles('pyproject.toml') != '' || hashFiles('requirements.txt') != '' }}
+        run: |
+          python -m pip install --upgrade pip
+          if [ -f requirements.txt ]; then pip install -r requirements.txt; fi
+          if [ -f pyproject.toml ]; then pip install -e .; fi
+          if [ -d tests ]; then
+            pip install pytest
+            pytest -q
+          else
+            echo "::notice::No tests/ directory found. CI ran baseline checks only."
+          fi
+`;
+const AI_ENTRYPOINT_CONTENT = `# AI Entrypoint: Vibe PM Project
+
+> This project is managed by **Vibe PM**. Any AI agent accessing this codebase MUST adhere to the following protocols.
+
+## 1. Project Overview
+
+<!-- This section will be auto-updated by vibe_pm.briefing -->
+**Status**: Not briefed yet. Run \`vibe_pm.briefing\` to initialize.
+
+## 2. Directory Structure (Vibe-SDS)
+
+| Path | Permission | Purpose |
+|:-----|:-----------|:--------|
+| \`src/\` | **R/W** | Main implementation code. Your workspace. |
+| \`tests/\` | **R/W** | Test files. Always add tests for new features. |
+| \`docs/\` | **READ** | Documentation. Read for context, don't modify without approval. |
+| \`config/\` | **FORBIDDEN** | Configuration files. Protected by Vibe PM. |
+| \`.vibe/\` | **FORBIDDEN** | Internal system state. Never touch. |
+
+## 3. Workflow Protocol
+
+\`\`\`
+1. Briefing     → vibe_pm.briefing      → Understand the goal
+2. Decision     → vibe_pm.get_decision  → Clarify trade-offs (A/B/C)
+3. Work Order   → vibe_pm.create_work_order → Receive specific tasks
+4. Implementation → Write code in src/  → Follow the work order
+5. Inspection   → vibe_pm.inspect_code  → Validate your work
+\`\`\`
+
+## 4. Quick Start
+
+\`\`\`bash
+# Check current project status
+vibe_pm.status
+
+# Start a new project
+vibe_pm.briefing { "project_brief": "Your idea here" }
+
+# Get pending decisions
+vibe_pm.get_decision
+\`\`\`
+
+## 5. Rules Summary
+
+1. **No Ticket, No Work**: Always get a Work Order before coding.
+2. **Zone Safety**: Only modify files in \`src/\` and \`tests/\`.
+3. **Inspect After Implementation**: Run \`vibe_pm.inspect_code\` after every change.
+4. **Finalize After Approval**: Run \`vibe_pm.finalize_work\` after "GO" to update docs and commit.
+5. **Ask When Uncertain**: Use \`vibe_pm.get_decision\` for ambiguous choices.
+
+## 6. Documentation Architecture (Living Spec)
+
+We follow the "Living Spec" approach - no fragmentation allowed.
+
+| Path | Purpose |
+|------|---------|
+| \`docs/specs/CURRENT_SPEC.md\` | The absolute truth of the system |
+| \`docs/specs/CHANGELOG.md\` | High-level version history |
+| \`docs/dev_logs/\` | Daily work logs (auto-generated) |
+
+### Rules
+- Do NOT create scattered markdown files like \`feature_login.md\`.
+- Do NOT edit spec files manually. Use \`vibe_pm.finalize_work\`.
+- If you touch the code, you must leave a trace in both DEV_LOG and Git.
+- Every task must end with \`finalize_work\`, not just \`inspect_code\`.
+
+## 7. Self-Healing System
+
+Vibe PM automatically fixes trivial issues without asking:
+
+| Issue | Auto-Fix | Example |
+|-------|----------|---------|
+| Missing package | ✅ | Adds to requirements.txt |
+| Syntax error | ✅ | Fixes indentation |
+| Format issue | ✅ | Runs formatter |
+| Logic change | ❌ | Asks user |
+| Data deletion | ❌ | Asks user |
+
+### How It Works
+1. \`inspect_code\` runs with \`auto_fix=true\` (default)
+2. Safe issues are fixed immediately
+3. You see: "Auto-fixed 2 issues. All tests passed."
+4. Only risky changes require your approval.
+
+---
+
+*This file is auto-generated by \`vibe_pm.scaffold\`. Do not delete.*
+`;
+const TEMPLATES = {
+    minimal: [
+        { path: "src/.gitkeep", content: "", description: "소스 코드 디렉토리" },
+        { path: "README.md", content: `# Project\n\nCreated with Vibe PM.\n` },
+        // AI Context & Rules (always included)
+        { path: ".cursorrules", content: CURSORRULES_CONTENT, description: "Cursor AI 행동 규칙" },
+        { path: "AI_ENTRYPOINT.md", content: AI_ENTRYPOINT_CONTENT, description: "AI 에이전트 진입점" },
+    ],
+    standard: [
+        // BLACK ZONE - System only
+        { path: ".vibe/.gitkeep", content: "", description: ZONE_COMMENTS.BLACK },
+        { path: ".vibe/state/.gitkeep", content: "" },
+        { path: ".vibe/decisions/.gitkeep", content: "" },
+        // RED ZONE - Protected config
+        {
+            path: "config/settings.yaml",
+            content: `# ${ZONE_COMMENTS.RED}\n# Project Settings\nenv: development\n`,
+            description: ZONE_COMMENTS.RED,
+        },
+        // GREEN ZONE - AI workspace
+        { path: "src/.gitkeep", content: "", description: ZONE_COMMENTS.GREEN },
+        { path: "src/components/.gitkeep", content: "" },
+        { path: "src/lib/.gitkeep", content: "" },
+        { path: "tests/.gitkeep", content: "", description: ZONE_COMMENTS.GREEN },
+        // YELLOW ZONE - Documentation (Living Spec)
+        { path: "docs/specs/CURRENT_SPEC.md", content: CURRENT_SPEC_CONTENT, description: "살아있는 스펙 (SSOT)" },
+        { path: "docs/specs/CHANGELOG.md", content: "# Changelog\n\nAll notable changes to this project.\n\n---\n", description: "버전 히스토리" },
+        { path: "docs/dev_logs/.gitkeep", content: "", description: "일일 개발 일지" },
+        { path: "docs/planning/.gitkeep", content: "", description: "작업대 (기획 및 체크리스트)" },
+        { path: "docs/archive/.gitkeep", content: "", description: "창고 (완료된 작업)" },
+        // GitHub Actions (CI)
+        {
+            path: ".github/workflows/vibe-ci.yml",
+            content: VIBE_CI_WORKFLOW_CONTENT,
+            description: "GitHub Actions CI (baseline-check)",
+        },
+        // Root files
+        {
+            path: "README.md",
+            content: `# Project
+
+Created with [Vibe PM](https://vibecode.town) - AI Project Manager for non-technical founders.
+
+## Directory Structure
+
+\`\`\`
+.vibe/          # System state (do not edit)
+config/         # Configuration (protected)
+src/            # Source code (AI workspace)
+  components/   # UI components
+  lib/          # Utilities
+tests/          # Test files
+docs/           # Documentation
+\`\`\`
+
+## Getting Started
+
+1. Describe your project idea
+2. Make decisions with vibe_pm.get_decision
+3. Let AI implement in src/
+4. Verify with vibe_pm.inspect_code
+`,
+        },
+        {
+            path: ".gitignore",
+            content: `# Vibe PM state (local only)
+.vibe/state/
+
+# Environment
+.env
+.env.local
+.env.*.local
+
+# Dependencies
+node_modules/
+__pycache__/
+*.pyc
+venv/
+.venv/
+
+# Build outputs
+dist/
+build/
+*.egg-info/
+
+# IDE
+.idea/
+.vscode/
+*.swp
+*.swo
+
+# OS
+.DS_Store
+Thumbs.db
+`,
+        },
+        // AI Context & Rules (always included)
+        { path: ".cursorrules", content: CURSORRULES_CONTENT, description: "Cursor AI 행동 규칙" },
+        { path: "AI_ENTRYPOINT.md", content: AI_ENTRYPOINT_CONTENT, description: "AI 에이전트 진입점" },
+    ],
+    python_cli: [
+        // Inherit from standard
+        ...[], // Will be merged below
+        // Python-specific
+        {
+            path: "src/main.py",
+            content: `#!/usr/bin/env python3
+"""Main entry point for the application."""
+
+def main():
+    print("Hello from Vibe PM!")
+
+if __name__ == "__main__":
+    main()
+`,
+        },
+        { path: "requirements.txt", content: "# Add your dependencies here\n" },
+        {
+            path: "pyproject.toml",
+            content: `[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
+name = "my-project"
+version = "0.1.0"
+description = "Created with Vibe PM"
+requires-python = ">=3.10"
+
+[project.scripts]
+my-project = "src.main:main"
+`,
+        },
+    ],
+    node_api: [
+        // Inherit from standard
+        ...[], // Will be merged below
+        // Node-specific
+        {
+            path: "src/index.ts",
+            content: `// Main entry point
+console.log("Hello from Vibe PM!");
+`,
+        },
+        {
+            path: "package.json",
+            content: JSON.stringify({
+                name: "my-project",
+                version: "0.1.0",
+                description: "Created with Vibe PM",
+                type: "module",
+                main: "dist/index.js",
+                scripts: {
+                    dev: "tsx watch src/index.ts",
+                    build: "tsc",
+                    start: "node dist/index.js",
+                    test: "vitest",
+                },
+                devDependencies: {
+                    typescript: "^5.0.0",
+                    tsx: "^4.0.0",
+                    vitest: "^1.0.0",
+                },
+            }, null, 2) + "\n",
+        },
+        {
+            path: "tsconfig.json",
+            content: JSON.stringify({
+                compilerOptions: {
+                    target: "ES2022",
+                    module: "NodeNext",
+                    moduleResolution: "NodeNext",
+                    outDir: "./dist",
+                    strict: true,
+                    esModuleInterop: true,
+                    skipLibCheck: true,
+                },
+                include: ["src/**/*"],
+                exclude: ["node_modules", "dist"],
+            }, null, 2) + "\n",
+        },
+    ],
+};
+// Merge python_cli and node_api with standard template
+TEMPLATES.python_cli = [...TEMPLATES.standard, ...TEMPLATES.python_cli.filter(t => t.path !== "")];
+TEMPLATES.node_api = [...TEMPLATES.standard, ...TEMPLATES.node_api.filter(t => t.path !== "")];
+// ============================================================
+// Helper Functions
+// ============================================================
+/**
+ * Generate ASCII tree representation of created structure
+ */
+function generateTree(items) {
+    const dirs = new Set();
+    const files = [];
+    for (const item of items) {
+        const parts = item.path.split("/");
+        if (parts.length > 1) {
+            // Add all parent directories
+            let current = "";
+            for (let i = 0; i < parts.length - 1; i++) {
+                current = current ? `${current}/${parts[i]}` : parts[i];
+                dirs.add(current);
+            }
+        }
+        files.push(item.path);
+    }
+    const allPaths = [...Array.from(dirs).sort(), ...files.sort()];
+    const lines = [];
+    for (let i = 0; i < allPaths.length; i++) {
+        const p = allPaths[i];
+        const depth = p.split("/").length - 1;
+        const isLast = i === allPaths.length - 1 || allPaths[i + 1]?.split("/").length - 1 < depth;
+        const prefix = "  ".repeat(depth) + (isLast ? "└── " : "├── ");
+        const name = p.split("/").pop() || p;
+        const isDir = dirs.has(p);
+        lines.push(`${prefix}${name}${isDir ? "/" : ""}`);
+    }
+    return lines.join("\n");
+}
+/**
+ * Check if directory is empty (or doesn't exist)
+ */
+async function isDirectoryEmpty(dir) {
+    try {
+        const entries = await fs.readdir(dir);
+        // Ignore hidden files like .git
+        const nonHidden = entries.filter(e => !e.startsWith("."));
+        return nonHidden.length === 0;
+    }
+    catch {
+        // Directory doesn't exist - treat as empty
+        return true;
+    }
+}
+// ============================================================
+// Main Implementation
+// ============================================================
+export async function scaffold(input, basePath = process.cwd()) {
+    const projectRoot = basePath;
+    const template = TEMPLATES[input.template] || TEMPLATES.standard;
+    // Safety check: don't overwrite non-empty directory without force
+    if (!input.force) {
+        const isEmpty = await isDirectoryEmpty(projectRoot);
+        if (!isEmpty) {
+            // Check if .vibe already exists (already scaffolded)
+            try {
+                await fs.access(path.join(projectRoot, ".vibe"));
+                // Already scaffolded - continue to fill in missing pieces
+            }
+            catch {
+                // Not scaffolded, not empty, not forced - refuse
+                return {
+                    success: false,
+                    created_paths: [],
+                    skipped_paths: [],
+                    structure_tree: "",
+                    next_action: {
+                        tool: "vibe_pm.scaffold",
+                        reason: "디렉토리가 비어있지 않습니다. force: true 옵션을 사용하거나 빈 디렉토리에서 실행하세요.",
+                    },
+                    error: "directory_not_empty",
+                };
+            }
+        }
+    }
+    const created = [];
+    const skipped = [];
+    for (const item of template) {
+        const fullPath = path.join(projectRoot, item.path);
+        try {
+            // Check if already exists
+            await fs.access(fullPath);
+            skipped.push(item.path);
+        }
+        catch {
+            // Create parent directories
+            await fs.mkdir(path.dirname(fullPath), { recursive: true });
+            // Create file
+            await fs.writeFile(fullPath, item.content);
+            created.push(item.path);
+        }
+    }
+    const structureTree = generateTree(template);
+    return {
+        success: true,
+        created_paths: created,
+        skipped_paths: skipped,
+        structure_tree: structureTree,
+        next_action: {
+            tool: "vibe_pm.briefing",
+            reason: "프로젝트 구조가 준비되었습니다. 이제 프로젝트 아이디어를 브리핑하세요.",
+        },
+    };
+}

package/build/tools/vibe_pm/search_oss.js

@@ -0,0 +1,124 @@
+// adapters/mcp-ts/src/tools/vibe_pm/search_oss.ts
+// vibe_pm.search_oss - Search OSS repos (gh) and write evidence under runs/<run_id>/export/
+import { McpError, ErrorCode } from "@modelcontextprotocol/sdk/types.js";
+import { runEngine } from "../../engine.js";
+import { safeJsonParse } from "../../cli.js";
+import { validateToolInput } from "../../security/input-validator.js";
+import { resolveProjectId, resolveRunId } from "./context.js";
+function toCsv(values) {
+    return values
+        .map((v) => (typeof v === "string" ? v.trim() : ""))
+        .filter(Boolean)
+        .join(",");
+}
+function toInt(v) {
+    if (typeof v === "number" && Number.isFinite(v))
+        return Math.trunc(v);
+    if (typeof v === "string") {
+        const n = Number(v);
+        if (Number.isFinite(n))
+            return Math.trunc(n);
+    }
+    return undefined;
+}
+export async function searchOss(input) {
+    const basePath = process.cwd();
+    validateToolInput({ project_id: input.project_id, run_id: input.run_id });
+    const resolvedRun = resolveRunId(input.run_id ?? input.project_id, basePath);
+    const run_id = resolvedRun.run_id;
+    const project_id = resolveProjectId(run_id, basePath);
+    const keywords = Array.isArray(input.keywords) ? input.keywords.map((k) => String(k).trim()).filter(Boolean) : [];
+    if (keywords.length === 0) {
+        throw new McpError(ErrorCode.InvalidParams, "[VALIDATION] keywords is required");
+    }
+    const cmd = [
+        "search-oss",
+        run_id,
+        "--intent",
+        String(input.intent ?? "").trim(),
+        "--keywords",
+        toCsv(keywords)
+    ];
+    const constraints = input?.constraints ?? {};
+    const licenseAllowlist = Array.isArray(constraints?.license_allowlist)
+        ? constraints.license_allowlist.map((x) => String(x).trim()).filter(Boolean)
+        : [];
+    if (licenseAllowlist.length > 0) {
+        cmd.push("--license-allowlist", toCsv(licenseAllowlist));
+    }
+    const minStars = toInt(constraints?.min_stars);
+    if (minStars !== undefined)
+        cmd.push("--min-stars", String(minStars));
+    const updatedWithinDays = toInt(constraints?.updated_within_days);
+    if (updatedWithinDays !== undefined)
+        cmd.push("--updated-within-days", String(updatedWithinDays));
+    const language = typeof constraints?.language === "string" ? constraints.language.trim() : "";
+    if (language)
+        cmd.push("--language", language);
+    const limit = toInt(constraints?.limit);
+    if (limit !== undefined)
+        cmd.push("--limit", String(limit));
+    const sort = typeof constraints?.sort === "string" ? constraints.sort.trim() : "";
+    if (sort)
+        cmd.push("--sort", sort);
+    const writeEvidence = input?.write_evidence !== false;
+    if (!writeEvidence)
+        cmd.push("--no-write-evidence");
+    const res = await runEngine("vibecoding-helper", cmd, { timeoutMs: 180_000 });
+    if (res.code !== 0) {
+        throw new Error(`search-oss failed: ${res.stderr || res.stdout || `exit_code=${res.code}`}`);
+    }
+    const parsed = safeJsonParse(res.stdout);
+    if (!parsed.ok) {
+        throw new Error(`search-oss invalid_json: ${parsed.error}`);
+    }
+    const doc = parsed.value;
+    const query = typeof doc?.query === "string" && doc.query.trim()
+        ? String(doc.query).trim()
+        : keywords.map((k) => k.trim()).filter(Boolean).join(" ");
+    const warnings = [];
+    if (Array.isArray(doc?.warnings)) {
+        for (const w of doc.warnings) {
+            if (typeof w === "string" && w.trim())
+                warnings.push(w.trim());
+        }
+    }
+    const candidates = [];
+    const rawCandidates = Array.isArray(doc?.candidates) ? doc.candidates : [];
+    for (const c of rawCandidates) {
+        const obj = c;
+        const repo = typeof obj?.repo === "string" ? obj.repo.trim() : "";
+        if (!repo)
+            continue;
+        const urlRaw = typeof obj?.url === "string" ? obj.url.trim() : "";
+        const url = urlRaw || `https://github.com/${repo}`;
+        candidates.push({
+            repo,
+            url,
+            description: typeof obj?.description === "string" ? obj.description : "",
+            license: typeof obj?.license === "string" ? obj.license : "",
+            stars: typeof obj?.stars === "number" ? obj.stars : 0,
+            updated_at: typeof obj?.updated_at === "string" ? obj.updated_at : "",
+            ref_candidates: Array.isArray(obj?.ref_candidates)
+                ? obj.ref_candidates.map((x) => String(x)).filter(Boolean)
+                : []
+        });
+    }
+    const evidencePath = typeof doc?.evidence_path === "string" && doc.evidence_path.trim() ? String(doc.evidence_path).trim() : undefined;
+    const out = {
+        success: true,
+        project_id,
+        run_id,
+        intent: String(input.intent ?? "").trim(),
+        query,
+        candidates,
+        warnings,
+        next_action: {
+            tool: "vibe_pm.export_output",
+            reason: "Pick a template repo + pinned ref, then export using target=web_template_repo."
+        }
+    };
+    if (evidencePath)
+        out.evidence_path = evidencePath;
+    return out;
+}