engrm 0.1.0

package/VIBE-CODER-STRATEGY.md

@@ -0,0 +1,250 @@
+# Engrm — Vibe Coder's Companion Strategy
+
+## Market Reality (March 2026)
+
+### The Vibe Coding Explosion
+
+"Vibe coding" — using AI to generate code without fully understanding it — has gone mainstream. r/vibecoding has 89K members. A vibe coding platform advertised at the Super Bowl. 95% of developers now use AI tools weekly, and a growing segment can't code without them.
+
+These users are underserved. Every AI coding memory tool targets experienced developers. Nobody is building the safety net for the millions who are learning to code through AI.
+
+### Competitive Landscape
+
+#### AI Agent Memory (Direct Competitors)
+
+| Product | Pricing | GitHub Stars | Funding | Key Weakness |
+|---|---|---|---|---|
+| **Mem0** | Free → $19/mo → $249/mo | 41K | $24M | SaaS-only, massive pricing gap ($19→$249), no code-specific features |
+| **Zep** | $25/mo → $475/mo | — | $2.3M (YC) | Enterprise-only positioning, complex credit system |
+| **Letta (MemGPT)** | Beta (free) | — | $10M | No pricing yet, academic-first, not shipping |
+| **LangMem** | Open source | — | — | Bundled with LangSmith ($39/seat), not standalone |
+
+#### Claude Code Memory Plugins (All Free, All Local-Only)
+
+| Plugin | Approach | Limitation |
+|---|---|---|
+| **claude-mem** | Auto-capture + ChromaDB | Single device, no team, no sync, AGPL |
+| **MemCP** | MCP server, token reduction | Local only, no quality filtering |
+| **Memory Anchor** | 5-layer cognitive model | Complex, no sync, niche |
+| **memory-mcp** | Persistent + git snapshots | No search, no team sharing |
+
+#### Code Review / Quality Tools
+
+| Product | Pricing | What It Does | Key Weakness |
+|---|---|---|---|
+| **CodeRabbit** | $24/seat/mo | PR-level AI review | Post-commit only, no memory |
+| **Qodo** | $30/seat/mo | Test generation + PR review | Post-commit only, no learning |
+| **Greptile** | $30/seat/mo | Codebase-aware review | Post-commit only, no persistence |
+| **Ellipsis** | $20/seat/mo | Automated code review | Post-commit only, no context |
+
+### The Gap Nobody Fills
+
+**No product combines all of these:**
+
+1. ✅ Cross-device sync (not local-only)
+2. ✅ Team shared memory (not single-user)
+3. ✅ Offline-first (works without internet)
+4. ✅ Pre-execution code audit (not post-PR)
+5. ✅ Quality-filtered capture (not "save everything")
+6. ✅ Pre-loaded knowledge for beginners
+7. ✅ Risk scoring and decision audit
+8. ✅ Pattern recurrence detection
+9. ✅ Agent-agnostic (MCP standard)
+10. ✅ Self-hosted option
+
+Engrm already has 1-5 and 9-10 built. Items 6-8 are content and lightweight code additions.
+
+### The Vibe Coder Opportunity
+
+| Segment | Size (est.) | Needs | Willingness to Pay |
+|---|---|---|---|
+| Experienced devs | ~5M AI coding users | Context persistence, team sharing | Medium ($10-20/mo) |
+| **Vibe coders** | ~10-15M and growing fast | Safety net, learning, guardrails | High ($10-15/mo, because they need it more) |
+| Teams | ~2M team seats | Shared knowledge, standards | High ($12-25/seat) |
+
+The vibe coder segment is 2-3x the experienced dev segment and growing faster. They have higher churn risk (frustration → quit) but also higher retention if you become indispensable (they literally can't code without you).
+
+---
+
+## Influencer & Launch Strategy
+
+### Tier 1: Credibility Builders (Reach: Senior Devs)
+
+| Who | Platform | Audience | Why |
+|---|---|---|---|
+| **Boris Cherny** (Claude Code creator) | X/Twitter | Claude Code ecosystem | A nod from Boris = instant legitimacy |
+| **swyx / Latent Space** | Podcast + X | 200K+ subs, AI engineers | Top 10 US tech podcast, shapes tooling narrative |
+| **ThePrimeagen** | YouTube 524K + Twitch | Advanced devs | Built his own AI agent "99"; credibility with seniors |
+| **Theo Browne (t3dotgg)** | YouTube 512K + X | TypeScript/full-stack | Honest tool reviews, massive TS community influence |
+| **Peter Steinberger (steipete)** | X/Blog | Senior engineers | iOS legend, now agentic engineering; blog is "required reading" |
+
+### Tier 2: Amplifiers (Reach: Working Devs + Vibe Coders)
+
+| Who | Platform | Audience | Why |
+|---|---|---|---|
+| **Sabrina Ramonov** | YouTube 164K + Substack | AI automation, vibe coders | Forbes 30u30, Claude Code tutorials, exactly our demographic |
+| **Nick Saraev** | YouTube 264K | AI automation, business | 4-hour Claude Code masterclass; audience builds real things |
+| **Fireship** | YouTube 4.1M | Broad developer | "100 seconds of Engrm" = millions of eyeballs |
+| **Jack Herrington** | YouTube 184K | React/frontend | Professional devs using AI in production |
+| **Matt Pocock / AI Hero** | X + Newsletter | TypeScript | AI Hero newsletter is a new channel into this space |
+
+### Tier 3: Community Amplifiers
+
+| Who | Platform | Audience | Why |
+|---|---|---|---|
+| **Indy Dev Dan** | YouTube | Claude Code builders | Hands-on tutorials, accessible, likely to review |
+| **AI Labs Channel** | YouTube | AI tool users | 34-63K views on Claude Code workflow videos |
+| **Traversy Media** | YouTube 2.4M | Beginners | Gateway to the "learning to code with AI" audience |
+| **Pragmatic Engineer** (Gergely Orosz) | Newsletter + Podcast | Senior engineers | Already covered "Building Claude Code with Boris Cherny" |
+
+### Launch Communities (Ranked by Impact)
+
+1. **Hacker News (Show HN)** — Dev tools regularly hit front page. Technical positioning: "offline-first team memory layer with hybrid search." Time for 9-10am ET.
+2. **r/ClaudeAI + r/ClaudeCode** — 4,200+ weekly contributors. They already discuss hooks and MCP. Engrm solves their #1 pain (lost context).
+3. **r/vibecoding** — 89K members. Frame as "never lose your project context again."
+4. **Product Hunt** — Dev tools consistently hit #1. Kilo Code went from PH launch → 500K downloads → $8M funding.
+5. **X/Twitter build-in-public** — Claude Code has 75% share of voice among coding agent influencers on X.
+
+### Outreach Sequence
+
+**Week 1-2 (Credibility):** Show HN + r/ClaudeAI + r/ClaudeCode + X thread
+**Week 3-4 (Amplification):** Product Hunt + Indy Dev Dan + AI Labs + r/vibecoding
+**Month 2 (Scale):** Sabrina Ramonov + Nick Saraev tutorials + Latent Space pitch
+**Month 3+ (Mainstream):** Theo + ThePrimeagen reviews + Fireship pitch
+
+---
+
+## Phased Build Plan
+
+### Phase A: Foundation Polish (Weeks 1-2)
+**Goal:** Ship what we have, well. Make the free tier genuinely useful.
+
+| Task | Effort | Description |
+|---|---|---|
+| Starter Packs v1 | 3 days | Curate 3 packs (Web Security 101, React Gotchas, API Best Practices). 50 pre-loaded observations each as JSON seed files. `engrm init --pack=web-security` |
+| `engrm status` polish | 1 day | Show security findings, session summaries, confidence indicators |
+| Dashboard: Decision Log page | 2 days | New page at /decisions — chronological decisions with context |
+| Dashboard: Security Findings page | 1 day | Expand existing findings display into dedicated page with severity filters |
+| Website: /pricing page | 2 days | Pricing table with Free/Solo/Pro/Team tiers |
+| Website: /docs quickstart | 2 days | 5-minute setup guide with GIFs |
+| README + Show HN draft | 1 day | Compelling GitHub README and HN submission |
+
+**Website changes:**
+- New pages: `/pricing`, `/docs`, `/decisions` (dashboard)
+- Update `/` landing: add "Vibe Coder's Companion" messaging alongside existing dev positioning
+- Add testimonial/demo section showing starter packs + Sentinel preview
+
+### Phase B: Vibe Coder Features (Weeks 3-6)
+**Goal:** The features that make vibe coders unable to live without Engrm.
+
+| Task | Effort | Description |
+|---|---|---|
+| Pattern Recurrence Detector | 3 days | Post-save hook: search existing bugfixes by semantic similarity. If >0.85 match from different session, auto-create pattern observation + surface warning |
+| Session Risk Score | 2 days | Calculate per-session: security findings, decisions without rationale, files modified without tests, unresolved bugfixes. Traffic light (green/amber/red) |
+| Danger Dashboard | 3 days | New dashboard panel: sessions by risk level, trend over time, clickable drill-down |
+| Cross-Project Search | 1 day | Config option `search.scope: "all"` → search all projects in namespace. Context injection includes cross-project matches |
+| Dependency Monitor | 3 days | PostToolUse hook detects `npm install`, `pip install` etc. Auto-creates observation. Dashboard shows dependencies added per session |
+| Starter Pack Marketplace | 3 days | `/packs` page on website. Community-submitted packs reviewed and published. `engrm install-pack <name>` CLI command |
+
+**Website changes:**
+- New dashboard pages: `/risk` (danger dashboard), `/dependencies`
+- Update dashboard home: add risk score badge per session, dependency count
+- New page: `/packs` (starter pack browse + install instructions)
+
+### Phase C: Sentinel MVP (Weeks 7-10)
+**Goal:** Pre-execution code audit — the feature nobody else has.
+
+| Task | Effort | Description |
+|---|---|---|
+| Sentinel core engine | 5 days | PreToolUse hook intercepts Write/Edit. Builds diff context. Routes to configurable LLM provider. Returns PASS/WARN/BLOCK |
+| Built-in rule packs | 3 days | Ship 5 default standard sets: Security (SQL injection, XSS, eval), Auth (token storage, password hashing), API (rate limiting, input validation), React (hooks rules, state management), Database (parameterized queries, connection pooling) |
+| Sentinel config UI | 2 days | Dashboard page: enable/disable, choose mode (advisory/blocking), select rule packs, add custom standards |
+| Sentinel findings feed | 2 days | Dashboard page: real-time feed of WARN/BLOCK events, groupable by standard, exportable |
+| Sentinel pricing gate | 1 day | Free: not available. Pro ($15/mo): advisory only, 100 audits/day. Team ($25/seat): full blocking + shared standards |
+| LLM provider support | 3 days | OpenAI, Anthropic, xAI (Grok), Mistral, Ollama, custom OpenAI-compatible (e.g., local vLLM) |
+
+**Website changes:**
+- New page: `/sentinel` (product page with demo, pricing, comparison to CodeRabbit/Qodo)
+- Update `/pricing`: add Sentinel tiers
+- Dashboard: `/sentinel/config`, `/sentinel/feed`
+
+### Phase D: Intelligence Layer (Weeks 11-14)
+**Goal:** The features that make Engrm smarter the more you use it.
+
+| Task | Effort | Description |
+|---|---|---|
+| Code Confidence Score | 3 days | Per-project metric: discovery/change ratio, bugfix frequency, test coverage signal, decision documentation rate. Dashboard gauge |
+| Session Replay | 4 days | Dashboard timeline view: discoveries → decisions → changes → outcomes. Highlight learning moments and self-corrections |
+| "You Solved This Before" | 2 days | Cross-project semantic search on errors. When bugfix saved, auto-search other projects. Surface in context injection |
+| Decision Conflict Detection | 2 days | When new decision saved, search for contradicting decisions in same project. Flag in dashboard |
+| Weekly Digest Email | 3 days | Opt-in email: observations this week, risk score, recurring patterns, Sentinel blocks. Drives dashboard re-engagement |
+
+**Website changes:**
+- Dashboard: `/replay` (session timeline), `/confidence` (project scores)
+- Email templates for weekly digest
+- Settings page: notification preferences
+
+### Phase E: Community & Scale (Weeks 15-20)
+**Goal:** Network effects and community-driven growth.
+
+| Task | Effort | Description |
+|---|---|---|
+| Anonymous Insight Aggregation | 5 days | Opt-in: anonymise observations, aggregate patterns across users. "87% of projects using Stripe also verify webhook signatures — yours doesn't" |
+| Community Pack Submissions | 3 days | GitHub PR workflow for submitting starter packs. Review + publish pipeline |
+| Team Onboarding Mode | 2 days | New team member gets "Top 20 things to know about this codebase" auto-generated from team observations |
+| Public API | 3 days | REST API for external integrations (CI/CD pipelines, Slack bots, custom dashboards) |
+| Multi-Agent Support | 3 days | Extend beyond Claude Code: Cline, Aider, OpenClaw via MCP |
+
+**Website changes:**
+- New pages: `/community` (pack submissions, leaderboard), `/api` (docs)
+- Update landing: "Works with Claude Code, Cline, OpenClaw" badges
+
+---
+
+## Timeline Summary
+
+```
+Week 1-2:   Phase A — Foundation Polish + Launch Prep
+Week 2:     🚀 Show HN + Reddit Launch
+Week 3-4:   Phase B — Vibe Coder Features
+Week 4:     🚀 Product Hunt Launch
+Week 5-6:   Phase B continued + Influencer Outreach Begins
+Week 7-10:  Phase C — Sentinel MVP
+Week 10:    🚀 Sentinel Launch (Blog + YouTube demos)
+Week 11-14: Phase D — Intelligence Layer
+Week 15-20: Phase E — Community & Scale
+```
+
+**Milestone targets:**
+
+| Week | Free Users | Paid Users | MRR |
+|---|---|---|---|
+| 2 (HN/Reddit launch) | 500 | 15 | $200 |
+| 4 (Product Hunt) | 3,000 | 120 | $1,600 |
+| 10 (Sentinel launch) | 10,000 | 400 | $5,200 |
+| 14 (Intelligence layer) | 20,000 | 800 | $10,400 |
+| 20 (Community) | 30,000 | 1,200 | $15,600 |
+
+---
+
+## Pricing (Revised with Sentinel)
+
+| Tier | Price | Observations | Devices | Sentinel | Target |
+|---|---|---|---|---|---|
+| **Free** | $0 | 10K | 2 | — | Try it, get hooked |
+| **Solo** | $9/mo | 50K | Unlimited | — | Multi-machine devs |
+| **Pro** | $15/mo | Unlimited | Unlimited | Advisory (100/day) | Vibe coders who need guardrails |
+| **Team** | $25/seat/mo | Unlimited | Unlimited | Full blocking + shared standards | Teams enforcing quality |
+| **Enterprise** | Custom | Unlimited | Unlimited | Custom + self-hosted | Compliance, SSO, SLA |
+
+**Key insight:** Pro at $15/mo is the vibe coder tier. It's cheaper than CodeRabbit ($24) and does more (persistent memory + pre-execution audit vs post-PR review). The pitch: "For less than a CodeRabbit seat, get memory that makes your AI smarter AND guardrails that catch mistakes before they happen."
+
+---
+
+## The Two-Sentence Pitch
+
+**For devs:** "Engrm gives your AI coding agent persistent memory across sessions, devices, and teammates — so it never forgets what it learned."
+
+**For vibe coders:** "Engrm is the experienced developer watching over your shoulder — it remembers every mistake, warns you before you repeat them, and blocks dangerous code before it's written."
+
+Same product. Two audiences. One subscription.