git-vibe-setup 3.0.0 → 3.0.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "git-vibe-setup",
-  "version": "3.0.0",
+  "version": "3.0.1",
   "private": false,
   "type": "module",
   "bin": {

package/templates/.github/git-vibe.yml

@@ -2,67 +2,110 @@
 
 version: 1
 
-branches:
-  base: ""
+permissions:
+  # Users with write, maintain, or admin can approve automation.
+  approver_roles:
+    - write
+    - maintain
+    - admin
 
-runner:
-  default: ubuntu-latest
+labels:
+  story: gvi:story
+  needs_discussion: gvi:needs-discussion
+  investigate: git-vibe:investigate
+  investigating: gvi:investigating
+  investigated: gvi:investigated
+  ready_for_approval: gvi:ready-for-approval
+  approved: git-vibe:approved
+  review: git-vibe:review
+  reviewing: gvi:reviewing
+  in_progress: gvi:in-progress
+  blocked: gvi:blocked
+  pr_opened: gvi:pr-opened
+  pr_approved: gvi:pr-approved
+  pr_merged: gvi:pr-merged
+  validate: git-vibe:validate
+  validating: gvi:validating
+  validated: gvi:validated
+
+commands:
+  prefix: /git-vibe
+  allow_external_agent_mentions: false
+
+event_delivery:
+  # webhook: repository webhook points at the self-hosted GitVibe server.
+  # relay: webhook proxy/tunnel such as Smee, Hookdeck, Cloudflare Tunnel, or ngrok.
+  # actions: no-server receiver workflows in the consumer repository.
+  # polling: local/scheduled worker polls GitHub APIs with cursors/ETags.
+  mode: webhook
+  relay:
+    provider: smee
+    # GitHub Actions Secret name. Relay URLs may contain delivery tokens; do not commit the real URL.
+    url_secret: GITVIBE_RELAY_URL
+  actions_receiver:
+    enabled: false
+    scheduled_scan: "*/15 * * * *"
+  polling:
+    enabled: false
+    interval_seconds: 300
 
 github_auth:
+  # Self-hosted default: the GitVibe server uses a fine-grained PAT scoped to this repository.
   mode: webhook-pat
   # GitHub Actions Secret name. Stores the GitHub write token.
   token_secret: GITVIBE_GITHUB_TOKEN
 
+tests:
+  commands: []
+
 ai:
-  default_profile: local_proxy
+  security:
+    web:
+      # Default for public repositories: let AI search current GitHub project material only.
+      # Add domains only for websites the repository owner trusts AI to search and fetch.
+      allowed_domains: []
+      # - github.com
+      # - "*.github.com"
   profiles:
     local_proxy:
-      enabled: true
       adapter: ai-sdk-agentool
+      # Optional: set to the selected model's context window.
+      # context_window_tokens: 128000
       provider:
-        type: openai-compatible # openai | anthropic | openai-compatible
+        # openai, anthropic, or openai-compatible.
+        type: openai-compatible
         # Model names are configuration, not credentials.
         model: glm-5
-        # Keys inside GITVIBE_AI_ENV_JSON.
+        # Keys inside GITVIBE_AI_ENV_JSON. Store provider credentials and endpoints there.
         base_url:
           from_bundle: GITVIBE_AI_BASE_URL
         api_key:
           from_bundle: GITVIBE_AI_API_KEY
       reasoning:
         effort: high
-      generation:
-        temperature: 0.2
-        max_output_tokens: 6000
-        max_steps: 90
-      # Optional explicit repo context. GitVibe does not auto-load AGENTS.md,
-      # CLAUDE.md, or other native CLI files.
-      # context:
-      #   files:
-      #     - AGENTS.md
+      provider_options:
+        openai:
+          reasoningEffort: high
+          reasoningSummary: concise
+        anthropic:
+          effort: high
     codex_cli:
-      enabled: false
       adapter: cli-codex
-      # Key inside GITVIBE_AI_ENV_JSON. Stores compact auth.json contents.
+      # Key inside GITVIBE_AI_ENV_JSON. Stores escaped auth.json text from jq -Rs .
+      # Requires GITVIBE_GITHUB_TOKEN repository Secrets read/write permission for refresh write-back.
       auth_json:
         from_bundle: CODEX_AUTH_JSON
       model: gpt-5.3-codex
-      # context:
-      #   files:
-      #     - AGENTS.md
       reasoning:
         effort: high
         summary: concise
     claude_code:
-      enabled: false
       adapter: cli-claude-code
       # Key inside GITVIBE_AI_ENV_JSON. Stores the Claude Code OAuth access token.
       env:
         CLAUDE_CODE_OAUTH_TOKEN:
           from_bundle: CLAUDE_OAUTH_TOKEN
       model: opus
-      # context:
-      #   files:
-      #     - .git-vibe/CLAUDE-extra.md
       reasoning:
         effort: xhigh
   role_groups:
@@ -78,29 +121,30 @@ ai:
           profile: local_proxy
   budgets:
     default_timeout_minutes: 60
+    review_timeout_minutes: 60
     implementation_timeout_minutes: 120
     feedback_timeout_minutes: 120
-    publish_timeout_minutes: 15
+    create_pr_timeout_minutes: 15
     default_max_turns: 90
-    implementation_max_turns: 120
+    implementation_max_turns: 200
     feedback_max_turns: 120
+    validation_repair_attempts: 3
+    validation_repair_max_turns: 45
+    pr_feedback_max_iterations: 3
+    request_retry_attempts: 3
+    request_retry_delay_seconds: 60
   stages:
     investigate:
       role_group: review_gate
     validate:
       role_group: review_gate
-    decompose:
-      profile: local_proxy
     materialize:
       profile: local_proxy
-    review-matrix:
-      role_group: review_gate
     implement:
       profile: local_proxy
+    review-matrix:
+      role_group: review_gate
     create-pr:
       profile: local_proxy
     address-pr-feedback:
       profile: local_proxy
-
-tests:
-  commands: []

package/templates/.github/workflows/develop.yml

@@ -27,7 +27,7 @@ jobs:
       runner: ubuntu-latest
       implementation_timeout_minutes: 120
       review_timeout_minutes: 60
-      publish_timeout_minutes: 15
+      create_pr_timeout_minutes: 15
       max_turns: 90
       implementation_max_turns: 120
       validation_repair_attempts: 2

package/templates/.github/workflows/decompose.yml

@@ -1,34 +0,0 @@
-name: GitVibe decompose
-run-name: "[git-vibe][decompose]: Discussion #${{ inputs.discussion-number }}"
-
-on:
-  workflow_dispatch:
-    inputs:
-      discussion-number:
-        description: Discussion number to decompose.
-        required: true
-        type: string
-      dry-run:
-        description: Validate without writing to GitHub.
-        required: false
-        type: boolean
-        default: false
-      source-comment:
-        description: JSON source comment metadata for replying to command comments.
-        required: false
-        type: string
-        default: ""
-
-jobs:
-  decompose:
-    uses: markhuangai/git-vibe/.github/workflows/decompose.yml@v3
-    with:
-      discussion-number: ${{ inputs.discussion-number }}
-      runner: ubuntu-latest
-      timeout_minutes: 60
-      max_turns: 90
-      dry-run: ${{ inputs.dry-run }}
-      source-comment: ${{ inputs.source-comment }}
-    secrets:
-      GITVIBE_GITHUB_TOKEN: ${{ secrets.GITVIBE_GITHUB_TOKEN }}
-      GITVIBE_AI_ENV_JSON: ${{ secrets.GITVIBE_AI_ENV_JSON }}