minimal-vibe-coding-kit 0.4.1 → 0.4.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.agents/skills/agentshield-security-review/scripts/agentshield_repo_probe.py +28 -3
- package/.agents/skills/prompt-sharpener/SKILL.md +54 -0
- package/.agents/skills/vibekit-init/SKILL.md +2 -2
- package/.claude/settings.json +10 -3
- package/.claude/skills/agentshield-security-review/scripts/agentshield_repo_probe.py +28 -3
- package/.claude/skills/prompt-sharpener/SKILL.md +54 -0
- package/.claude/skills/vibekit-init/SKILL.md +2 -2
- package/.codex/rules/vibekit.rules +77 -0
- package/.codex-plugin/plugin.json +1 -1
- package/.cursor/cli.json +18 -0
- package/.cursor/settings.json +15 -8
- package/.cursor/skills/prompt-sharpener/SKILL.md +54 -0
- package/.grok/README.md +13 -0
- package/.grok/config.example.toml +13 -0
- package/.grok/config.toml +29 -0
- package/.grok/rules/safe-delete.md +11 -0
- package/.grok/rules/security.md +5 -0
- package/.grok/rules/vibe-core.md +8 -0
- package/.grok/skills/agentshield-security-review/SKILL.md +75 -0
- package/.grok/skills/agentshield-security-review/agents/openai.yaml +5 -0
- package/.grok/skills/agentshield-security-review/references/native-install.md +97 -0
- package/.grok/skills/agentshield-security-review/references/report-template.md +54 -0
- package/.grok/skills/agentshield-security-review/references/review-checklist.md +45 -0
- package/.grok/skills/agentshield-security-review/scripts/agentshield_repo_probe.py +135 -0
- package/.grok/skills/autoresearch-coding/README.md +15 -0
- package/.grok/skills/autoresearch-coding/SKILL.md +101 -0
- package/.grok/skills/autoresearch-coding/references/experiment-contract.md +13 -0
- package/.grok/skills/autoresearch-coding/references/metric-extraction.md +8 -0
- package/.grok/skills/autoresearch-coding/references/result-ledger.md +15 -0
- package/.grok/skills/autoresearch-coding/scripts/log_result.py +24 -0
- package/.grok/skills/autoresearch-coding/scripts/run_logged.py +30 -0
- package/.grok/skills/clearthought/SKILL.md +100 -0
- package/.grok/skills/clearthought/examples/decision-framework.md +441 -0
- package/.grok/skills/clearthought/examples/metagame-examples.md +536 -0
- package/.grok/skills/clearthought/examples/sequential-thinking.md +380 -0
- package/.grok/skills/clearthought/references/output-schemas.md +494 -0
- package/.grok/skills/clearthought/references/parameter-reference.md +482 -0
- package/.grok/skills/coding-level/SKILL.md +34 -0
- package/.grok/skills/coding-level/references/level-0.md +131 -0
- package/.grok/skills/coding-level/references/level-1.md +118 -0
- package/.grok/skills/coding-level/references/level-2.md +140 -0
- package/.grok/skills/coding-level/references/level-3.md +142 -0
- package/.grok/skills/coding-level/references/level-4.md +152 -0
- package/.grok/skills/coding-level/references/level-5.md +84 -0
- package/.grok/skills/daily-workflow-curator/SKILL.md +52 -0
- package/.grok/skills/memento/SKILL.md +36 -0
- package/.grok/skills/parallel-analysis/SKILL.md +160 -0
- package/.grok/skills/path-sensitive-shell-safety/SKILL.md +69 -0
- package/.grok/skills/path-sensitive-shell-safety/references/workflow.md +127 -0
- package/.grok/skills/prompt-sharpener/SKILL.md +54 -0
- package/.grok/skills/reviewing-4p-priorities/SKILL.md +72 -0
- package/.grok/skills/reviewing-4p-priorities/examples.md +298 -0
- package/.grok/skills/sequential-thinking/SKILL.md +106 -0
- package/.grok/skills/sequential-thinking/examples/adaptive-depth.md +542 -0
- package/.grok/skills/sequential-thinking/examples/branching-exploration.md +474 -0
- package/.grok/skills/sequential-thinking/examples/linear-reasoning.md +210 -0
- package/.grok/skills/sequential-thinking/examples/revision-pattern.md +304 -0
- package/.grok/skills/sequential-thinking/references/output-schema.md +483 -0
- package/.grok/skills/sequential-thinking/references/parameters.md +463 -0
- package/.grok/skills/sequential-thinking/references/patterns.md +666 -0
- package/.grok/skills/vibekit-init/SKILL.md +52 -0
- package/.grok/skills/visual-design-loop/SKILL.md +103 -0
- package/.grok/skills/visual-design-loop/agents/openai.yaml +4 -0
- package/.vibekit/docs/BACKBONE_REFERENCE.md +1 -1
- package/.vibekit/docs/INSTALL.md +9 -7
- package/.vibekit/docs/SECURITY_MODEL.md +1 -1
- package/.vibekit/docs/TOOLING_GUIDE.md +5 -0
- package/.vibekit/docs/templates/CONTEXT_TEMPLATE.md +1 -1
- package/.vibekit/init/CLAUDE-template.md +1 -0
- package/.vibekit/init/FIRST_PROMPT.md +1 -1
- package/.vibekit/init/FIRST_TIME_INIT.md +2 -2
- package/.vibekit/scripts/doctor.mjs +11 -4
- package/.vibekit/scripts/mvck.mjs +24 -9
- package/.vibekit/scripts/test-install.mjs +8 -0
- package/.vibekit/scripts/validate-kit.mjs +104 -39
- package/.vibekit/skills/agentshield-security-review/scripts/agentshield_repo_probe.py +28 -3
- package/.vibekit/skills/prompt-sharpener/SKILL.md +54 -0
- package/.vibekit/skills/vibekit-init/SKILL.md +2 -2
- package/AGENTS.md +2 -2
- package/CHANGELOG.md +10 -0
- package/README.md +17 -12
- package/backbone.yml +2 -1
- package/docs/README.vi.md +56 -51
- package/package.json +7 -2
|
@@ -0,0 +1,304 @@
|
|
|
1
|
+
# Revision Pattern - Example
|
|
2
|
+
|
|
3
|
+
## Scenario: Authentication Strategy Selection
|
|
4
|
+
|
|
5
|
+
**Problem:** Choose authentication method for new API
|
|
6
|
+
|
|
7
|
+
**Pattern:** Revision Chain (initial assumptions proved wrong)
|
|
8
|
+
|
|
9
|
+
**Initial estimate:** 5 thoughts
|
|
10
|
+
**Actual:** 8 thoughts (with 2 revisions)
|
|
11
|
+
|
|
12
|
+
---
|
|
13
|
+
|
|
14
|
+
## Thought Sequence
|
|
15
|
+
|
|
16
|
+
### Thought 1: Initial Hypothesis
|
|
17
|
+
|
|
18
|
+
**Input:**
|
|
19
|
+
```bash
|
|
20
|
+
/sequential-thinking "Hypothesis: JWT tokens are best for stateless API authentication. Plan to implement JWT with RS256 signing." thoughtNumber=1 totalThoughts=5 nextThoughtNeeded=true
|
|
21
|
+
```
|
|
22
|
+
|
|
23
|
+
**Output:**
|
|
24
|
+
```json
|
|
25
|
+
{
|
|
26
|
+
"thoughtNumber": 1,
|
|
27
|
+
"thoughtContent": "Hypothesis: JWT tokens are best for stateless API authentication. Plan to implement JWT with RS256 signing.",
|
|
28
|
+
"totalThoughts": 5,
|
|
29
|
+
"nextThoughtNeeded": true,
|
|
30
|
+
"branches": [],
|
|
31
|
+
"thoughtHistoryLength": 1,
|
|
32
|
+
"sessionContext": {
|
|
33
|
+
"sessionId": "conversation",
|
|
34
|
+
"remainingThoughts": 99
|
|
35
|
+
}
|
|
36
|
+
}
|
|
37
|
+
```
|
|
38
|
+
|
|
39
|
+
---
|
|
40
|
+
|
|
41
|
+
### Thought 2: Implementation Planning
|
|
42
|
+
|
|
43
|
+
**Input:**
|
|
44
|
+
```bash
|
|
45
|
+
/sequential-thinking "JWT Implementation plan: 1) Generate RSA key pair, 2) Create /login endpoint returning access token, 3) Add middleware to verify tokens on protected routes, 4) Set token expiry to 1 hour." thoughtNumber=2 totalThoughts=5 nextThoughtNeeded=true
|
|
46
|
+
```
|
|
47
|
+
|
|
48
|
+
**Output:**
|
|
49
|
+
```json
|
|
50
|
+
{
|
|
51
|
+
"thoughtNumber": 2,
|
|
52
|
+
"thoughtContent": "JWT Implementation plan: 1) Generate RSA key pair, 2) Create /login endpoint returning access token, 3) Add middleware to verify tokens on protected routes, 4) Set token expiry to 1 hour.",
|
|
53
|
+
"totalThoughts": 5,
|
|
54
|
+
"nextThoughtNeeded": true,
|
|
55
|
+
"branches": [],
|
|
56
|
+
"thoughtHistoryLength": 2,
|
|
57
|
+
"sessionContext": {
|
|
58
|
+
"sessionId": "conversation",
|
|
59
|
+
"remainingThoughts": 98
|
|
60
|
+
}
|
|
61
|
+
}
|
|
62
|
+
```
|
|
63
|
+
|
|
64
|
+
---
|
|
65
|
+
|
|
66
|
+
### Thought 3: Discovery (Contradiction)
|
|
67
|
+
|
|
68
|
+
**Input:**
|
|
69
|
+
```bash
|
|
70
|
+
/sequential-thinking "Wait - just learned we need to support third-party OAuth providers (Google, GitHub) for social login. Pure JWT won't work because we need to integrate with external identity providers." thoughtNumber=3 totalThoughts=5 nextThoughtNeeded=true
|
|
71
|
+
```
|
|
72
|
+
|
|
73
|
+
**Output:**
|
|
74
|
+
```json
|
|
75
|
+
{
|
|
76
|
+
"thoughtNumber": 3,
|
|
77
|
+
"thoughtContent": "Wait - just learned we need to support third-party OAuth providers (Google, GitHub) for social login. Pure JWT won't work because we need to integrate with external identity providers.",
|
|
78
|
+
"totalThoughts": 5,
|
|
79
|
+
"nextThoughtNeeded": true,
|
|
80
|
+
"branches": [],
|
|
81
|
+
"thoughtHistoryLength": 3,
|
|
82
|
+
"sessionContext": {
|
|
83
|
+
"sessionId": "conversation",
|
|
84
|
+
"remainingThoughts": 97
|
|
85
|
+
}
|
|
86
|
+
}
|
|
87
|
+
```
|
|
88
|
+
|
|
89
|
+
---
|
|
90
|
+
|
|
91
|
+
### Thought 4: Revision #1 (Correcting Hypothesis)
|
|
92
|
+
|
|
93
|
+
**Input:**
|
|
94
|
+
```bash
|
|
95
|
+
/sequential-thinking "REVISION: My thought #1 was wrong. We don't need pure JWT - we need OAuth2 with OpenID Connect (OIDC). This allows both social login (external providers) and traditional login (internal users), with JWTs as the token format." thoughtNumber=4 totalThoughts=5 nextThoughtNeeded=true isRevision=true revisesThought=1
|
|
96
|
+
```
|
|
97
|
+
|
|
98
|
+
**Output:**
|
|
99
|
+
```json
|
|
100
|
+
{
|
|
101
|
+
"thoughtNumber": 4,
|
|
102
|
+
"thoughtContent": "REVISION: My thought #1 was wrong. We don't need pure JWT - we need OAuth2 with OpenID Connect (OIDC). This allows both social login (external providers) and traditional login (internal users), with JWTs as the token format.",
|
|
103
|
+
"totalThoughts": 5,
|
|
104
|
+
"nextThoughtNeeded": true,
|
|
105
|
+
"branches": [],
|
|
106
|
+
"thoughtHistoryLength": 4,
|
|
107
|
+
"revisionOf": 1,
|
|
108
|
+
"sessionContext": {
|
|
109
|
+
"sessionId": "conversation",
|
|
110
|
+
"remainingThoughts": 96,
|
|
111
|
+
"revisionsMade": 1,
|
|
112
|
+
"revisedThoughts": [1]
|
|
113
|
+
}
|
|
114
|
+
}
|
|
115
|
+
```
|
|
116
|
+
|
|
117
|
+
---
|
|
118
|
+
|
|
119
|
+
### Thought 5: New Implementation Plan (Based on Revision)
|
|
120
|
+
|
|
121
|
+
**Input:**
|
|
122
|
+
```bash
|
|
123
|
+
/sequential-thinking "Revised plan using OAuth2/OIDC: 1) Integrate Auth0 or Keycloak as identity provider, 2) Configure social providers (Google, GitHub), 3) Implement authorization code flow, 4) Store provider tokens, 5) Map external users to internal user model." thoughtNumber=5 totalThoughts=8 nextThoughtNeeded=true
|
|
124
|
+
```
|
|
125
|
+
|
|
126
|
+
**Output:**
|
|
127
|
+
```json
|
|
128
|
+
{
|
|
129
|
+
"thoughtNumber": 5,
|
|
130
|
+
"thoughtContent": "Revised plan using OAuth2/OIDC: 1) Integrate Auth0 or Keycloak as identity provider, 2) Configure social providers (Google, GitHub), 3) Implement authorization code flow, 4) Store provider tokens, 5) Map external users to internal user model.",
|
|
131
|
+
"totalThoughts": 8,
|
|
132
|
+
"nextThoughtNeeded": true,
|
|
133
|
+
"branches": [],
|
|
134
|
+
"thoughtHistoryLength": 5,
|
|
135
|
+
"totalThoughtsAdjusted": true,
|
|
136
|
+
"originalEstimate": 5,
|
|
137
|
+
"sessionContext": {
|
|
138
|
+
"sessionId": "conversation",
|
|
139
|
+
"remainingThoughts": 95
|
|
140
|
+
}
|
|
141
|
+
}
|
|
142
|
+
```
|
|
143
|
+
|
|
144
|
+
---
|
|
145
|
+
|
|
146
|
+
### Thought 6: Security Consideration
|
|
147
|
+
|
|
148
|
+
**Input:**
|
|
149
|
+
```bash
|
|
150
|
+
/sequential-thinking "Security review: Need to validate provider tokens, implement PKCE flow for SPAs, store refresh tokens securely (encrypted), handle token expiry and refresh logic." thoughtNumber=6 totalThoughts=8 nextThoughtNeeded=true
|
|
151
|
+
```
|
|
152
|
+
|
|
153
|
+
**Output:**
|
|
154
|
+
```json
|
|
155
|
+
{
|
|
156
|
+
"thoughtNumber": 6,
|
|
157
|
+
"thoughtContent": "Security review: Need to validate provider tokens, implement PKCE flow for SPAs, store refresh tokens securely (encrypted), handle token expiry and refresh logic.",
|
|
158
|
+
"totalThoughts": 8,
|
|
159
|
+
"nextThoughtNeeded": true,
|
|
160
|
+
"branches": [],
|
|
161
|
+
"thoughtHistoryLength": 6,
|
|
162
|
+
"sessionContext": {
|
|
163
|
+
"sessionId": "conversation",
|
|
164
|
+
"remainingThoughts": 94
|
|
165
|
+
}
|
|
166
|
+
}
|
|
167
|
+
```
|
|
168
|
+
|
|
169
|
+
---
|
|
170
|
+
|
|
171
|
+
### Thought 7: Provider Selection Discovery
|
|
172
|
+
|
|
173
|
+
**Input:**
|
|
174
|
+
```bash
|
|
175
|
+
/sequential-thinking "Researching providers: Auth0 is expensive ($150/mo), Keycloak is open-source but complex to self-host. Actually, AWS Cognito might be best - integrates with our existing AWS infrastructure, supports social login, and costs $0.0055 per MAU." thoughtNumber=7 totalThoughts=8 nextThoughtNeeded=true
|
|
176
|
+
```
|
|
177
|
+
|
|
178
|
+
**Output:**
|
|
179
|
+
```json
|
|
180
|
+
{
|
|
181
|
+
"thoughtNumber": 7,
|
|
182
|
+
"thoughtContent": "Researching providers: Auth0 is expensive ($150/mo), Keycloak is open-source but complex to self-host. Actually, AWS Cognito might be best - integrates with our existing AWS infrastructure, supports social login, and costs $0.0055 per MAU.",
|
|
183
|
+
"totalThoughts": 8,
|
|
184
|
+
"nextThoughtNeeded": true,
|
|
185
|
+
"branches": [],
|
|
186
|
+
"thoughtHistoryLength": 7,
|
|
187
|
+
"sessionContext": {
|
|
188
|
+
"sessionId": "conversation",
|
|
189
|
+
"remainingThoughts": 93
|
|
190
|
+
}
|
|
191
|
+
}
|
|
192
|
+
```
|
|
193
|
+
|
|
194
|
+
---
|
|
195
|
+
|
|
196
|
+
### Thought 8: Revision #2 (Update Provider Choice)
|
|
197
|
+
|
|
198
|
+
**Input:**
|
|
199
|
+
```bash
|
|
200
|
+
/sequential-thinking "REVISION: Revising thought #5 - Using AWS Cognito instead of Auth0/Keycloak. Updated plan: 1) Create Cognito User Pool, 2) Configure Google/GitHub as identity providers, 3) Use Cognito SDK for token verification, 4) Implement refresh token rotation, 5) Use Cognito Hosted UI for login flows." thoughtNumber=8 totalThoughts=8 nextThoughtNeeded=false isRevision=true revisesThought=5
|
|
201
|
+
```
|
|
202
|
+
|
|
203
|
+
**Output:**
|
|
204
|
+
```json
|
|
205
|
+
{
|
|
206
|
+
"thoughtNumber": 8,
|
|
207
|
+
"thoughtContent": "REVISION: Revising thought #5 - Using AWS Cognito instead of Auth0/Keycloak. Updated plan: 1) Create Cognito User Pool, 2) Configure Google/GitHub as identity providers, 3) Use Cognito SDK for token verification, 4) Implement refresh token rotation, 5) Use Cognito Hosted UI for login flows.",
|
|
208
|
+
"totalThoughts": 8,
|
|
209
|
+
"nextThoughtNeeded": false,
|
|
210
|
+
"branches": [],
|
|
211
|
+
"thoughtHistoryLength": 8,
|
|
212
|
+
"revisionOf": 5,
|
|
213
|
+
"status": "complete",
|
|
214
|
+
"sessionContext": {
|
|
215
|
+
"sessionId": "conversation",
|
|
216
|
+
"remainingThoughts": 92,
|
|
217
|
+
"revisionsMade": 2,
|
|
218
|
+
"revisedThoughts": [1, 5]
|
|
219
|
+
}
|
|
220
|
+
}
|
|
221
|
+
```
|
|
222
|
+
|
|
223
|
+
---
|
|
224
|
+
|
|
225
|
+
## Revision Chain Visualization
|
|
226
|
+
|
|
227
|
+
```
|
|
228
|
+
Thought 1: JWT hypothesis
|
|
229
|
+
↓
|
|
230
|
+
Thought 2: JWT implementation plan
|
|
231
|
+
↓
|
|
232
|
+
Thought 3: ⚠️ Discovery: Need OAuth providers
|
|
233
|
+
↓
|
|
234
|
+
Thought 4: 🔄 REVISION of #1 → OAuth2/OIDC needed
|
|
235
|
+
↓
|
|
236
|
+
Thought 5: OAuth2 implementation plan (Auth0/Keycloak)
|
|
237
|
+
↓
|
|
238
|
+
Thought 6: Security considerations
|
|
239
|
+
↓
|
|
240
|
+
Thought 7: ⚠️ Discovery: AWS Cognito better fit
|
|
241
|
+
↓
|
|
242
|
+
Thought 8: 🔄 REVISION of #5 → AWS Cognito plan
|
|
243
|
+
```
|
|
244
|
+
|
|
245
|
+
---
|
|
246
|
+
|
|
247
|
+
## Analysis
|
|
248
|
+
|
|
249
|
+
### Pattern: Revision Chain
|
|
250
|
+
- **Revisions:** 2 (thoughts #4 and #8)
|
|
251
|
+
- **Revised thoughts:** #1 (JWT), #5 (Provider choice)
|
|
252
|
+
- **Reason for revisions:**
|
|
253
|
+
- #1: New requirement (social login) invalidated pure JWT
|
|
254
|
+
- #5: Cost analysis favored different provider
|
|
255
|
+
|
|
256
|
+
### Why Revisions Were Necessary
|
|
257
|
+
1. ✅ **New information** emerged (social login requirement)
|
|
258
|
+
2. ✅ **Cost analysis** changed decision (AWS vs Auth0)
|
|
259
|
+
3. ✅ **Initial assumption** was wrong (JWT insufficient)
|
|
260
|
+
|
|
261
|
+
### Benefits of Revision Pattern
|
|
262
|
+
- ✅ Transparent reasoning evolution
|
|
263
|
+
- ✅ Complete audit trail (original thoughts preserved)
|
|
264
|
+
- ✅ Shows learning and adaptation
|
|
265
|
+
- ✅ Final plan is well-informed
|
|
266
|
+
|
|
267
|
+
### Outcome
|
|
268
|
+
**Final solution:** AWS Cognito with OAuth2/OIDC
|
|
269
|
+
- Supports social login ✅
|
|
270
|
+
- Cost-effective ($5.50 per 1000 users) ✅
|
|
271
|
+
- Integrates with existing AWS ✅
|
|
272
|
+
- Secure token handling ✅
|
|
273
|
+
|
|
274
|
+
---
|
|
275
|
+
|
|
276
|
+
## Key Takeaways
|
|
277
|
+
|
|
278
|
+
### When to Use Revision Pattern
|
|
279
|
+
1. Initial assumptions might be wrong
|
|
280
|
+
2. Requirements discovered during analysis
|
|
281
|
+
3. Cost/trade-off analysis changes decision
|
|
282
|
+
4. New information contradicts earlier thoughts
|
|
283
|
+
|
|
284
|
+
### Revision Best Practices
|
|
285
|
+
- ✅ Explicitly mark as revision (`isRevision=true`)
|
|
286
|
+
- ✅ Reference specific thought (`revisesThought=N`)
|
|
287
|
+
- ✅ Explain what changed and why
|
|
288
|
+
- ✅ Update subsequent thoughts based on revision
|
|
289
|
+
|
|
290
|
+
### Comparison with Linear Pattern
|
|
291
|
+
| Aspect | Linear | Revision Chain |
|
|
292
|
+
|--------|--------|----------------|
|
|
293
|
+
| **Assumptions** | Stable | Evolving |
|
|
294
|
+
| **Information** | Complete upfront | Discovered during |
|
|
295
|
+
| **Path** | Straight | Zigzag |
|
|
296
|
+
| **Thoughts** | 5-8 | 8-12 (more iterations) |
|
|
297
|
+
| **Complexity** | Low | Medium |
|
|
298
|
+
|
|
299
|
+
---
|
|
300
|
+
|
|
301
|
+
**For other patterns:**
|
|
302
|
+
- [linear-reasoning.md](linear-reasoning.md) - Straightforward analysis
|
|
303
|
+
- [branching-exploration.md](branching-exploration.md) - Multiple approaches
|
|
304
|
+
- [adaptive-depth.md](adaptive-depth.md) - Uncertain scope
|