git-vibe-setup 3.0.0 → 3.0.2

package/README.md

@@ -3,9 +3,9 @@
 Local initializer for GitVibe consumer repositories.
 
 ```bash
-npx --package=git-vibe-setup git-vibe-setup
+npx git-vibe-setup setup
 ```
 
-The command writes `.github` and `.git-vibe` starter files, pins reusable
+The `setup` command writes `.github` and `.git-vibe` starter files, pins reusable
 workflow refs to the latest stable `markhuangai/git-vibe` release, and fails
 before writing if release lookup or target-file validation fails.

package/dist/cli.d.ts

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
 interface SetupCliRuntime {
+    argv?: string[];
     cwd?: string;
     error?: (message: string) => void;
     fetchImpl?: typeof fetch;
@@ -8,4 +9,5 @@ interface SetupCliRuntime {
 }
 export declare function runSetup(runtime?: SetupCliRuntime): Promise<void>;
 export declare function setupCli(runtime?: SetupCliRuntime): Promise<number>;
+export declare function isDirectRun(moduleUrl: string, entrypoint?: string): boolean;
 export {};

package/dist/cli.js

@@ -1,10 +1,20 @@
 #!/usr/bin/env node
+import { realpathSync } from "node:fs";
 import { resolve } from "node:path";
 import { pathToFileURL } from "node:url";
 import { fileURLToPath } from "node:url";
 import { blockingInstallPaths, buildInstallFiles, existingFilesError, installFiles, } from "./install.js";
 import { renderManualSetupInstructions } from "./instructions.js";
 import { latestStableReleaseTag } from "./releases.js";
+const usage = `Usage:
+  git-vibe-setup setup
+  git-vibe-setup
+
+Commands:
+  setup   Install GitVibe starter files into the current repository.
+
+Options:
+  -h, --help   Show this help message.`;
 export async function runSetup(runtime = {}) {
     const cwd = runtime.cwd || process.cwd();
     const repositoryRoot = runtime.repositoryRoot || packageRoot();
@@ -17,6 +27,16 @@ export async function runSetup(runtime = {}) {
     (runtime.log || console.log)(renderManualSetupInstructions(releaseTag));
 }
 export async function setupCli(runtime = {}) {
+    const argv = runtime.argv || process.argv.slice(2);
+    const command = argv[0] || "setup";
+    if (command === "--help" || command === "-h" || command === "help") {
+        (runtime.log || console.log)(usage);
+        return 0;
+    }
+    if (command !== "setup") {
+        (runtime.error || console.error)(`Unknown command: ${command}\n\n${usage}`);
+        return 1;
+    }
     try {
         await runSetup(runtime);
         return 0;
@@ -36,6 +56,12 @@ if (isDirectRun(import.meta.url)) {
     process.exitCode = exitCode;
 }
 /* c8 ignore stop */
-function isDirectRun(moduleUrl, entrypoint = process.argv[1]) {
-    return Boolean(entrypoint && moduleUrl === pathToFileURL(resolve(entrypoint)).href);
+export function isDirectRun(moduleUrl, entrypoint = process.argv[1]) {
+    if (!entrypoint)
+        return false;
+    return (pathToFileURL(realpathSync(resolve(entrypoint))).href ===
+        pathToFileURL(modulePath(moduleUrl)).href);
+}
+function modulePath(moduleUrl) {
+    return realpathSync(fileURLToPath(moduleUrl));
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "git-vibe-setup",
-  "version": "3.0.0",
+  "version": "3.0.2",
   "private": false,
   "type": "module",
   "bin": {

package/templates/.github/git-vibe.yml

@@ -2,67 +2,110 @@
 
 version: 1
 
-branches:
-  base: ""
+permissions:
+  # Users with write, maintain, or admin can approve automation.
+  approver_roles:
+    - write
+    - maintain
+    - admin
 
-runner:
-  default: ubuntu-latest
+labels:
+  story: gvi:story
+  needs_discussion: gvi:needs-discussion
+  investigate: git-vibe:investigate
+  investigating: gvi:investigating
+  investigated: gvi:investigated
+  ready_for_approval: gvi:ready-for-approval
+  approved: git-vibe:approved
+  review: git-vibe:review
+  reviewing: gvi:reviewing
+  in_progress: gvi:in-progress
+  blocked: gvi:blocked
+  pr_opened: gvi:pr-opened
+  pr_approved: gvi:pr-approved
+  pr_merged: gvi:pr-merged
+  validate: git-vibe:validate
+  validating: gvi:validating
+  validated: gvi:validated
+
+commands:
+  prefix: /git-vibe
+  allow_external_agent_mentions: false
+
+event_delivery:
+  # webhook: repository webhook points at the self-hosted GitVibe server.
+  # relay: webhook proxy/tunnel such as Smee, Hookdeck, Cloudflare Tunnel, or ngrok.
+  # actions: no-server receiver workflows in the consumer repository.
+  # polling: local/scheduled worker polls GitHub APIs with cursors/ETags.
+  mode: webhook
+  relay:
+    provider: smee
+    # GitHub Actions Secret name. Relay URLs may contain delivery tokens; do not commit the real URL.
+    url_secret: GITVIBE_RELAY_URL
+  actions_receiver:
+    enabled: false
+    scheduled_scan: "*/15 * * * *"
+  polling:
+    enabled: false
+    interval_seconds: 300
 
 github_auth:
+  # Self-hosted default: the GitVibe server uses a fine-grained PAT scoped to this repository.
   mode: webhook-pat
   # GitHub Actions Secret name. Stores the GitHub write token.
   token_secret: GITVIBE_GITHUB_TOKEN
 
+tests:
+  commands: []
+
 ai:
-  default_profile: local_proxy
+  security:
+    web:
+      # Default for public repositories: let AI search current GitHub project material only.
+      # Add domains only for websites the repository owner trusts AI to search and fetch.
+      allowed_domains: []
+      # - github.com
+      # - "*.github.com"
   profiles:
     local_proxy:
-      enabled: true
       adapter: ai-sdk-agentool
+      # Optional: set to the selected model's context window.
+      # context_window_tokens: 128000
       provider:
-        type: openai-compatible # openai | anthropic | openai-compatible
+        # openai, anthropic, or openai-compatible.
+        type: openai-compatible
         # Model names are configuration, not credentials.
         model: glm-5
-        # Keys inside GITVIBE_AI_ENV_JSON.
+        # Keys inside GITVIBE_AI_ENV_JSON. Store provider credentials and endpoints there.
         base_url:
           from_bundle: GITVIBE_AI_BASE_URL
         api_key:
           from_bundle: GITVIBE_AI_API_KEY
       reasoning:
         effort: high
-      generation:
-        temperature: 0.2
-        max_output_tokens: 6000
-        max_steps: 90
-      # Optional explicit repo context. GitVibe does not auto-load AGENTS.md,
-      # CLAUDE.md, or other native CLI files.
-      # context:
-      #   files:
-      #     - AGENTS.md
+      provider_options:
+        openai:
+          reasoningEffort: high
+          reasoningSummary: concise
+        anthropic:
+          effort: high
     codex_cli:
-      enabled: false
       adapter: cli-codex
-      # Key inside GITVIBE_AI_ENV_JSON. Stores compact auth.json contents.
+      # Key inside GITVIBE_AI_ENV_JSON. Stores escaped auth.json text from jq -Rs .
+      # Requires GITVIBE_GITHUB_TOKEN repository Secrets read/write permission for refresh write-back.
       auth_json:
         from_bundle: CODEX_AUTH_JSON
       model: gpt-5.3-codex
-      # context:
-      #   files:
-      #     - AGENTS.md
       reasoning:
         effort: high
         summary: concise
     claude_code:
-      enabled: false
       adapter: cli-claude-code
       # Key inside GITVIBE_AI_ENV_JSON. Stores the Claude Code OAuth access token.
       env:
         CLAUDE_CODE_OAUTH_TOKEN:
           from_bundle: CLAUDE_OAUTH_TOKEN
       model: opus
-      # context:
-      #   files:
-      #     - .git-vibe/CLAUDE-extra.md
       reasoning:
         effort: xhigh
   role_groups:
@@ -78,29 +121,30 @@ ai:
           profile: local_proxy
   budgets:
     default_timeout_minutes: 60
+    review_timeout_minutes: 60
     implementation_timeout_minutes: 120
     feedback_timeout_minutes: 120
-    publish_timeout_minutes: 15
+    create_pr_timeout_minutes: 15
     default_max_turns: 90
-    implementation_max_turns: 120
+    implementation_max_turns: 200
     feedback_max_turns: 120
+    validation_repair_attempts: 3
+    validation_repair_max_turns: 45
+    pr_feedback_max_iterations: 3
+    request_retry_attempts: 3
+    request_retry_delay_seconds: 60
   stages:
     investigate:
       role_group: review_gate
     validate:
       role_group: review_gate
-    decompose:
-      profile: local_proxy
     materialize:
       profile: local_proxy
-    review-matrix:
-      role_group: review_gate
     implement:
       profile: local_proxy
+    review-matrix:
+      role_group: review_gate
     create-pr:
       profile: local_proxy
     address-pr-feedback:
       profile: local_proxy
-
-tests:
-  commands: []

package/templates/.github/workflows/develop.yml

@@ -27,7 +27,7 @@ jobs:
       runner: ubuntu-latest
       implementation_timeout_minutes: 120
       review_timeout_minutes: 60
-      publish_timeout_minutes: 15
+      create_pr_timeout_minutes: 15
       max_turns: 90
       implementation_max_turns: 120
       validation_repair_attempts: 2

package/templates/.github/workflows/decompose.yml

@@ -1,34 +0,0 @@
-name: GitVibe decompose
-run-name: "[git-vibe][decompose]: Discussion #${{ inputs.discussion-number }}"
-
-on:
-  workflow_dispatch:
-    inputs:
-      discussion-number:
-        description: Discussion number to decompose.
-        required: true
-        type: string
-      dry-run:
-        description: Validate without writing to GitHub.
-        required: false
-        type: boolean
-        default: false
-      source-comment:
-        description: JSON source comment metadata for replying to command comments.
-        required: false
-        type: string
-        default: ""
-
-jobs:
-  decompose:
-    uses: markhuangai/git-vibe/.github/workflows/decompose.yml@v3
-    with:
-      discussion-number: ${{ inputs.discussion-number }}
-      runner: ubuntu-latest
-      timeout_minutes: 60
-      max_turns: 90
-      dry-run: ${{ inputs.dry-run }}
-      source-comment: ${{ inputs.source-comment }}
-    secrets:
-      GITVIBE_GITHUB_TOKEN: ${{ secrets.GITVIBE_GITHUB_TOKEN }}
-      GITVIBE_AI_ENV_JSON: ${{ secrets.GITVIBE_AI_ENV_JSON }}