thrivekit 2.0.0

package/templates/optional/cursorrules.template

@@ -0,0 +1,147 @@
+# Cursor Rules for Vibe Coding
+# Copy this file to your project root as `.cursorrules`
+
+You are an expert developer helping with this project. Follow these rules:
+
+## Code Quality
+
+### Never Use These Patterns
+- `any` type in TypeScript - create proper interfaces
+- Empty catch blocks - handle errors properly
+- `console.log` for error handling - use proper logging
+- Hardcoded URLs - use environment variables
+- Functions over 50 lines - break them up
+- Deep nesting (4+ levels) - refactor with early returns
+
+### Always Do This
+- Handle loading, error, and empty states
+- Use proper TypeScript types
+- Write descriptive variable names
+- Add error handling for async operations
+- Use environment variables for configuration
+
+## Response Format
+
+When writing code:
+1. Explain what you're doing briefly
+2. Write clean, typed code
+3. Include error handling
+4. Mention any edge cases to consider
+
+When I ask you to fix something:
+1. Explain what was wrong
+2. Show the fix
+3. Explain why it's better
+
+## TypeScript Rules
+
+```typescript
+// DON'T
+const data: any = await fetch('/api');
+function process(input: any): any { }
+
+// DO
+interface User { id: string; name: string; }
+const data: User = await fetchUser();
+function process(input: UserInput): ProcessedUser { }
+```
+
+## Error Handling
+
+```typescript
+// DON'T
+try { doThing(); } catch (e) { }
+
+// DO
+try {
+  await doThing();
+} catch (error) {
+  if (error instanceof NetworkError) {
+    logger.warn('Network error, retrying', { error });
+    return retry(doThing);
+  }
+  logger.error('Failed to do thing', { error });
+  throw error;
+}
+```
+
+## React Components
+
+```typescript
+// DON'T
+function UserProfile({ userId }) {
+  const [user, setUser] = useState();
+  // No loading/error handling
+  return <div>{user.name}</div>;
+}
+
+// DO
+function UserProfile({ userId }: { userId: string }) {
+  const { data: user, isLoading, error } = useUser(userId);
+
+  if (isLoading) return <Skeleton />;
+  if (error) return <ErrorMessage error={error} />;
+  if (!user) return <NotFound />;
+
+  return <div>{user.name}</div>;
+}
+```
+
+## Testing
+
+When I ask you to write tests:
+1. Use the SCENARIO/EXPECTED/FAILURE pattern
+2. Test behavior, not implementation
+3. Include happy path and error cases
+4. Keep tests independent
+
+```typescript
+test('user can submit form', async () => {
+  /**
+   * SCENARIO: User fills out valid form and submits
+   * EXPECTED: Success message shown, form cleared
+   * FAILURE: Error shown or form stuck
+   */
+});
+```
+
+## Security
+
+Never:
+- Put secrets in code
+- Use innerHTML with user content
+- Build SQL queries with string concatenation
+- Trust user input without validation
+
+Always:
+- Use parameterized queries
+- Sanitize HTML if you must render it
+- Validate input on both client and server
+- Use HTTPS for external requests
+
+## When Asked to Review Code
+
+Check for:
+1. Security vulnerabilities
+2. Missing error handling
+3. `any` types
+4. Code duplication
+5. Long functions
+6. Missing tests for critical paths
+
+## Project-Specific Notes
+
+<!-- Add your project-specific patterns here -->
+
+### Tech Stack
+- Frontend: [Your stack]
+- Backend: [Your stack]
+- Database: [Your database]
+
+### Patterns to Follow
+- [Pattern 1]
+- [Pattern 2]
+
+### Things to Avoid
+- [Anti-pattern 1]
+- [Anti-pattern 2]

package/templates/optional/eslint.config.js

@@ -0,0 +1,34 @@
+/**
+ * Example ESLint configuration using thrivekit plugin
+ *
+ * Copy this file to your project root and customize as needed.
+ */
+
+import vibe from "thrivekit/eslint-plugin";
+
+export default [
+  // Use the recommended config (balanced defaults)
+  vibe.configs.recommended,
+
+  // Or use strict config for stricter rules
+  // vibe.configs.strict,
+
+  // Custom configuration
+  {
+    files: ["**/*.ts", "**/*.tsx"],
+    rules: {
+      // Override specific rules if needed
+      // "vibe/no-any-type": "error",
+      // "vibe/max-function-length": ["warn", { max: 40 }],
+    },
+  },
+
+  // Disable rules for test files
+  {
+    files: ["**/*.test.ts", "**/*.test.tsx", "**/*.spec.ts", "**/*.spec.tsx"],
+    rules: {
+      "vibe/no-magic-numbers": "off",
+      "vibe/max-function-length": "off",
+    },
+  },
+];

package/templates/optional/lint-staged.config.js

@@ -0,0 +1,34 @@
+/**
+ * Ready-to-use lint-staged configuration for thrivekit
+ *
+ * Copy this file to your project root, or reference the config:
+ *
+ *   // package.json
+ *   {
+ *     "lint-staged": {
+ *       "*.{js,ts,jsx,tsx}": "vibe-check --fail-on error"
+ *     }
+ *   }
+ */
+
+export default {
+  // JavaScript/TypeScript files - full security and quality checks
+  '*.{js,jsx,ts,tsx,mjs,cjs}': [
+    'vibe-check --only secrets,urls,debug,unsafe-html,any-types,snake-case,empty-catch --fail-on error',
+  ],
+
+  // Python files
+  '*.py': [
+    'vibe-check --only secrets,urls,debug,empty-catch,magic-numbers --fail-on error',
+  ],
+
+  // Config files - secrets check only
+  '*.{json,yaml,yml,toml}': [
+    'vibe-check --only secrets --fail-on error',
+  ],
+
+  // Dockerfiles
+  'Dockerfile*': [
+    'vibe-check --only docker-platform --fail-on warning',
+  ],
+};

package/templates/optional/ruff.toml

@@ -0,0 +1,125 @@
+# Ruff Configuration for Vibe Coding
+#
+# Catches common AI-generated code issues in Python.
+# Copy to your project root as ruff.toml or pyproject.toml [tool.ruff] section.
+#
+# Install: pip install ruff
+
+# Target Python version
+target-version = "py311"
+
+# Line length (match Black)
+line-length = 100
+
+# Exclude common directories
+exclude = [
+    ".git",
+    ".venv",
+    "venv",
+    "__pycache__",
+    "migrations",
+    "node_modules",
+    "dist",
+    "build",
+    ".eggs",
+]
+
+[lint]
+# Enable these rule sets
+select = [
+    # ===========================================
+    # Core rules - catch common AI mistakes
+    # ===========================================
+    "E",      # pycodestyle errors
+    "W",      # pycodestyle warnings
+    "F",      # Pyflakes (unused imports, variables)
+    "I",      # isort (import sorting)
+    "B",      # flake8-bugbear (common bugs)
+    "C4",     # flake8-comprehensions
+    "UP",     # pyupgrade (modern Python syntax)
+    "SIM",    # flake8-simplify (simplify code)
+
+    # ===========================================
+    # Security - AI can introduce vulnerabilities
+    # ===========================================
+    "S",      # flake8-bandit (security issues)
+
+    # ===========================================
+    # Code quality
+    # ===========================================
+    "N",      # pep8-naming
+    "RUF",    # Ruff-specific rules
+    "PTH",    # flake8-use-pathlib
+    "ERA",    # eradicate (commented-out code)
+    "PL",     # Pylint
+    "PERF",   # Perflint (performance)
+
+    # ===========================================
+    # Type checking helpers
+    # ===========================================
+    "TCH",    # flake8-type-checking
+    "ANN",    # flake8-annotations
+]
+
+# Rules to ignore
+ignore = [
+    # Allow missing type annotations in some cases
+    "ANN101",  # Missing type annotation for self
+    "ANN102",  # Missing type annotation for cls
+    "ANN401",  # Dynamically typed expressions (Any)
+
+    # Allow assert in tests
+    "S101",    # Use of assert
+
+    # These can be too strict
+    "PLR0913", # Too many arguments
+    "PLR2004", # Magic value comparison
+    "PLR0911", # Too many return statements
+
+    # Let formatter handle these
+    "E501",    # Line too long (handled by formatter)
+]
+
+# Per-file ignores
+[lint.per-file-ignores]
+# Tests can have more relaxed rules
+"tests/**/*.py" = [
+    "S101",    # assert is fine in tests
+    "ANN",     # Don't require annotations in tests
+    "PLR2004", # Magic values OK in tests
+]
+# Migrations are auto-generated
+"**/migrations/*.py" = ["ALL"]
+# Config files
+"conftest.py" = ["ANN"]
+
+[lint.isort]
+# isort configuration
+known-first-party = ["app", "core", "services"]
+force-single-line = false
+combine-as-imports = true
+
+[lint.flake8-bugbear]
+# Extend immutable calls (AI often mutates defaults)
+extend-immutable-calls = ["fastapi.Depends", "fastapi.Query"]
+
+[lint.pylint]
+# Limit function complexity
+max-args = 7
+max-branches = 12
+max-returns = 6
+max-statements = 50
+
+[lint.mccabe]
+# Cyclomatic complexity threshold
+max-complexity = 10
+
+[format]
+# Use double quotes (match Black)
+quote-style = "double"
+
+# Indent with spaces
+indent-style = "space"
+
+# Unix line endings
+line-ending = "lf"

package/templates/optional/vibe-check.yml

@@ -0,0 +1,116 @@
+# GitHub Action: Vibe Check
+# Runs vibe-and-thrive pre-commit hooks on PRs
+#
+# Add this to your repo: .github/workflows/vibe-check.yml
+
+name: Vibe Check
+
+on:
+  pull_request:
+    branches: [main, master]
+  push:
+    branches: [main, master]
+
+jobs:
+  vibe-check:
+    name: Code Quality Check
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.11'
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+
+      - name: Install pre-commit
+        run: pip install pre-commit
+
+      - name: Run pre-commit hooks
+        run: pre-commit run --all-files --show-diff-on-failure
+        continue-on-error: true
+        id: precommit
+
+      - name: Comment on PR (if issues found)
+        if: steps.precommit.outcome == 'failure' && github.event_name == 'pull_request'
+        uses: actions/github-script@v7
+        with:
+          script: |
+            github.rest.issues.createComment({
+              issue_number: context.issue.number,
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              body: `## ⚠️ Vibe Check Found Issues
+
+            The pre-commit hooks found some issues in this PR. Please review the [workflow run](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}) for details.
+
+            Common fixes:
+            - \`any\` types → Create proper TypeScript interfaces
+            - Empty catch blocks → Add proper error handling
+            - Hardcoded URLs → Use environment variables
+            - console.log → Remove or use proper logging
+
+            Run \`pre-commit run --all-files\` locally to see all issues.`
+            })
+
+      - name: Check for blocking issues
+        run: |
+          # Only fail on blocking hooks (secrets, hardcoded URLs)
+          pre-commit run check-secrets --all-files
+          pre-commit run check-hardcoded-urls --all-files
+
+  # Optional: TypeScript type checking
+  typecheck:
+    name: TypeScript Check
+    runs-on: ubuntu-latest
+    if: hashFiles('**/tsconfig.json') != ''
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+        working-directory: ${{ hashFiles('frontend/package.json') != '' && 'frontend' || '.' }}
+
+      - name: Run type check
+        run: npm run typecheck || npm run tsc -- --noEmit
+        working-directory: ${{ hashFiles('frontend/package.json') != '' && 'frontend' || '.' }}
+        continue-on-error: true
+
+  # Optional: Python type checking
+  mypy:
+    name: Python Type Check
+    runs-on: ubuntu-latest
+    if: hashFiles('**/pyproject.toml') != '' || hashFiles('**/setup.py') != ''
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.11'
+
+      - name: Install dependencies
+        run: |
+          pip install mypy
+          pip install -e . || pip install -r requirements.txt || true
+
+      - name: Run mypy
+        run: mypy . --ignore-missing-imports
+        continue-on-error: true

package/templates/optional/vscode-settings.json

@@ -0,0 +1,127 @@
+{
+  // VS Code Settings for Better AI-Assisted Coding
+  // Copy relevant settings to your .vscode/settings.json
+
+  // ============================================
+  // TypeScript - Catch issues early
+  // ============================================
+  "typescript.tsdk": "node_modules/typescript/lib",
+  "typescript.enablePromptUseWorkspaceTsdk": true,
+  "typescript.preferences.quoteStyle": "single",
+  "typescript.suggest.completeFunctionCalls": true,
+  "typescript.inlayHints.parameterNames.enabled": "all",
+  "typescript.inlayHints.functionLikeReturnTypes.enabled": true,
+
+  // Strict null checks in editor
+  "typescript.strict": true,
+
+  // ============================================
+  // Editor - Clean code formatting
+  // ============================================
+  "editor.formatOnSave": true,
+  "editor.defaultFormatter": "esbenp.prettier-vscode",
+  "editor.codeActionsOnSave": {
+    "source.fixAll.eslint": "explicit",
+    "source.organizeImports": "explicit"
+  },
+
+  // Show problems in editor
+  "editor.rulers": [80, 100],
+  "editor.wordWrap": "wordWrapColumn",
+  "editor.wordWrapColumn": 100,
+
+  // ============================================
+  // ESLint - Enforce code quality
+  // ============================================
+  "eslint.validate": [
+    "javascript",
+    "javascriptreact",
+    "typescript",
+    "typescriptreact"
+  ],
+  "eslint.codeActionsOnSave.mode": "all",
+
+  // ============================================
+  // Python - Type hints and formatting
+  // ============================================
+  "[python]": {
+    "editor.defaultFormatter": "ms-python.black-formatter",
+    "editor.formatOnSave": true,
+    "editor.codeActionsOnSave": {
+      "source.organizeImports": "explicit"
+    }
+  },
+  "python.analysis.typeCheckingMode": "basic",
+  "python.analysis.autoImportCompletions": true,
+
+  // ============================================
+  // Files - Keep workspace clean
+  // ============================================
+  "files.exclude": {
+    "**/__pycache__": true,
+    "**/.pytest_cache": true,
+    "**/node_modules": true,
+    "**/.git": true,
+    "**/dist": true,
+    "**/build": true,
+    "**/*.pyc": true
+  },
+  "files.trimTrailingWhitespace": true,
+  "files.insertFinalNewline": true,
+
+  // ============================================
+  // Search - Focus on relevant files
+  // ============================================
+  "search.exclude": {
+    "**/node_modules": true,
+    "**/dist": true,
+    "**/build": true,
+    "**/.git": true,
+    "**/coverage": true,
+    "**/*.min.js": true,
+    "**/package-lock.json": true,
+    "**/yarn.lock": true
+  },
+
+  // ============================================
+  // Git - Clean commits
+  // ============================================
+  "git.enableSmartCommit": true,
+  "git.confirmSync": false,
+  "git.autofetch": true,
+
+  // ============================================
+  // Terminal - Easy testing
+  // ============================================
+  "terminal.integrated.defaultProfile.osx": "zsh",
+  "terminal.integrated.defaultProfile.linux": "bash",
+
+  // ============================================
+  // Extensions - Recommended for vibe coding
+  // ============================================
+  // Install these extensions:
+  // - ESLint (dbaeumer.vscode-eslint)
+  // - Prettier (esbenp.prettier-vscode)
+  // - TypeScript Error Translator (mattpocock.ts-error-translator)
+  // - Error Lens (usernamehw.errorlens) - Shows errors inline
+  // - GitLens (eamodio.gitlens) - Better git integration
+  // - Python (ms-python.python)
+  // - Black Formatter (ms-python.black-formatter)
+  // - Pylance (ms-python.vscode-pylance)
+
+  // ============================================
+  // AI Assistant Settings
+  // ============================================
+  // If using GitHub Copilot:
+  "github.copilot.enable": {
+    "*": true,
+    "yaml": false,
+    "plaintext": false,
+    "markdown": false,
+    "env": false
+  },
+
+  // Show AI suggestions but don't auto-accept
+  "editor.inlineSuggest.enabled": true,
+  "editor.suggestSelection": "first"
+}

package/templates/signs.json

@@ -0,0 +1,46 @@
+{
+  "signs": [
+    {
+      "id": "sign-001",
+      "pattern": "NEVER hardcode AI model names (gpt-4, claude-3, gemini, etc) - always use environment variables or settings",
+      "category": "backend",
+      "learnedFrom": null,
+      "createdAt": "2026-01-20T00:00:00-08:00"
+    },
+    {
+      "id": "sign-002",
+      "pattern": "Use environment variables for all API keys and secrets, never hardcode them",
+      "category": "general",
+      "learnedFrom": null,
+      "createdAt": "2026-01-20T00:00:00-08:00"
+    },
+    {
+      "id": "sign-003",
+      "pattern": "Always handle loading, error, and empty states for async operations",
+      "category": "frontend",
+      "learnedFrom": null,
+      "createdAt": "2026-01-20T00:00:00-08:00"
+    },
+    {
+      "id": "sign-004",
+      "pattern": "Use camelCase for TypeScript/JavaScript variables, functions, and API response fields - convert snake_case from backend to camelCase in frontend",
+      "category": "frontend",
+      "learnedFrom": null,
+      "createdAt": "2026-01-20T00:00:00-08:00"
+    },
+    {
+      "id": "sign-005",
+      "pattern": "Add data-testid attributes to interactive elements for Playwright e2e tests",
+      "category": "frontend",
+      "learnedFrom": null,
+      "createdAt": "2026-01-20T00:00:00-08:00"
+    },
+    {
+      "id": "sign-006",
+      "pattern": "Never use 'any' type in TypeScript - create proper interfaces and types instead",
+      "category": "frontend",
+      "learnedFrom": null,
+      "createdAt": "2026-01-20T00:00:00-08:00"
+    }
+  ]
+}