vibe-and-thrive 1.0.0

package/dist/utils/reporters.js

@@ -0,0 +1,115 @@
+/**
+ * Output formatters for CLI results
+ */
+// ANSI color codes
+const colors = {
+    reset: '\x1b[0m',
+    bold: '\x1b[1m',
+    dim: '\x1b[2m',
+    red: '\x1b[31m',
+    yellow: '\x1b[33m',
+    blue: '\x1b[34m',
+    cyan: '\x1b[36m',
+    gray: '\x1b[90m',
+};
+function severityColor(severity) {
+    switch (severity) {
+        case 'error':
+            return colors.red;
+        case 'warning':
+            return colors.yellow;
+        case 'info':
+            return colors.blue;
+    }
+}
+function severityIcon(severity) {
+    switch (severity) {
+        case 'error':
+            return '✖';
+        case 'warning':
+            return '⚠';
+        case 'info':
+            return 'ℹ';
+    }
+}
+/**
+ * Pretty format - colored terminal output
+ */
+export function formatPretty(summary) {
+    const lines = [];
+    // Header
+    lines.push('');
+    lines.push(`${colors.bold}vibe-check${colors.reset}`);
+    lines.push('');
+    // Results by file
+    for (const result of summary.results) {
+        if (result.issues.length === 0)
+            continue;
+        lines.push(`${colors.cyan}${result.filePath}${colors.reset}`);
+        for (const issue of result.issues) {
+            const color = severityColor(issue.severity);
+            const icon = severityIcon(issue.severity);
+            const location = issue.column
+                ? `${issue.line}:${issue.column}`
+                : `${issue.line}`;
+            lines.push(`  ${colors.gray}${location.padEnd(8)}${colors.reset}` +
+                `${color}${icon}${colors.reset} ` +
+                `${issue.message}  ${colors.dim}${issue.ruleId}${colors.reset}`);
+        }
+        lines.push('');
+    }
+    // Summary
+    const problems = [];
+    if (summary.errorCount > 0) {
+        problems.push(`${colors.red}${summary.errorCount} error${summary.errorCount === 1 ? '' : 's'}${colors.reset}`);
+    }
+    if (summary.warningCount > 0) {
+        problems.push(`${colors.yellow}${summary.warningCount} warning${summary.warningCount === 1 ? '' : 's'}${colors.reset}`);
+    }
+    if (summary.infoCount > 0) {
+        problems.push(`${colors.blue}${summary.infoCount} info${colors.reset}`);
+    }
+    if (problems.length > 0) {
+        lines.push(`${problems.join(', ')} in ${summary.filesWithIssues} file${summary.filesWithIssues === 1 ? '' : 's'}`);
+    }
+    else {
+        lines.push(`${colors.bold}✓${colors.reset} ${summary.filesChecked} file${summary.filesChecked === 1 ? '' : 's'} checked - no issues found`);
+    }
+    lines.push('');
+    return lines.join('\n');
+}
+/**
+ * JSON format - machine-readable output
+ */
+export function formatJson(summary) {
+    return JSON.stringify(summary, null, 2);
+}
+/**
+ * Compact format - one line per issue
+ */
+export function formatCompact(summary) {
+    const lines = [];
+    for (const result of summary.results) {
+        for (const issue of result.issues) {
+            const location = issue.column
+                ? `${issue.line}:${issue.column}`
+                : `${issue.line}`;
+            lines.push(`${result.filePath}:${location}: ${issue.severity}: ${issue.message} [${issue.ruleId}]`);
+        }
+    }
+    return lines.join('\n');
+}
+/**
+ * Format results based on output format option
+ */
+export function formatResults(summary, format) {
+    switch (format) {
+        case 'pretty':
+            return formatPretty(summary);
+        case 'json':
+            return formatJson(summary);
+        case 'compact':
+            return formatCompact(summary);
+    }
+}
+//# sourceMappingURL=reporters.js.map

package/dist/utils/reporters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reporters.js","sourceRoot":"","sources":["../../src/utils/reporters.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,mBAAmB;AACnB,MAAM,MAAM,GAAG;IACb,KAAK,EAAE,SAAS;IAChB,IAAI,EAAE,SAAS;IACf,GAAG,EAAE,SAAS;IACd,GAAG,EAAE,UAAU;IACf,MAAM,EAAE,UAAU;IAClB,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,UAAU;CACjB,CAAC;AAEF,SAAS,aAAa,CAAC,QAAkB;IACvC,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,OAAO;YACV,OAAO,MAAM,CAAC,GAAG,CAAC;QACpB,KAAK,SAAS;YACZ,OAAO,MAAM,CAAC,MAAM,CAAC;QACvB,KAAK,MAAM;YACT,OAAO,MAAM,CAAC,IAAI,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,QAAkB;IACtC,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,OAAO;YACV,OAAO,GAAG,CAAC;QACb,KAAK,SAAS;YACZ,OAAO,GAAG,CAAC;QACb,KAAK,MAAM;YACT,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,OAAsB;IACjD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,SAAS;IACT,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,aAAa,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACtD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,kBAAkB;IAClB,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAEzC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAE9D,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM;gBAC3B,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE;gBACjC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YAEpB,KAAK,CAAC,IAAI,CACR,KAAK,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE;gBACpD,GAAG,KAAK,GAAG,IAAI,GAAG,MAAM,CAAC,KAAK,GAAG;gBACjC,GAAG,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,CAClE,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,UAAU;IACV,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,OAAO,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QAC3B,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,GAAG,OAAO,CAAC,UAAU,SAAS,OAAO,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACjH,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,YAAY,WAAW,OAAO,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1H,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;QAC1B,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,GAAG,OAAO,CAAC,SAAS,QAAQ,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,OAAO,CAAC,eAAe,QAAQ,OAAO,CAAC,eAAe,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACrH,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,YAAY,QAAQ,OAAO,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,4BAA4B,CAAC,CAAC;IAC9I,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,OAAsB;IAC/C,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAAsB;IAClD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM;gBAC3B,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE;gBACjC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YAEpB,KAAK,CAAC,IAAI,CACR,GAAG,MAAM,CAAC,QAAQ,IAAI,QAAQ,KAAK,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,MAAM,GAAG,CACxF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAsB,EACtB,MAAqC;IAErC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,QAAQ;YACX,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC;QAC/B,KAAK,MAAM;YACT,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;QAC7B,KAAK,SAAS;YACZ,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;AACH,CAAC"}

package/dist/utils/types.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Shared types for vibe-and-thrive
+ */
+export type Severity = 'error' | 'warning' | 'info';
+export interface FileContext {
+    /** Absolute path to the file */
+    filePath: string;
+    /** File content as string */
+    content: string;
+    /** File extension without dot (e.g., 'ts', 'py') */
+    extension: string;
+}
+export interface HookResult {
+    /** 1-based line number */
+    line: number;
+    /** 0-based column number */
+    column?: number;
+    /** Human-readable message */
+    message: string;
+    /** Severity level */
+    severity: Severity;
+    /** Rule identifier (e.g., 'secrets/aws-key') */
+    ruleId: string;
+    /** Optional fix suggestion */
+    fix?: string;
+}
+export interface Hook {
+    /** Unique identifier (e.g., 'secrets', 'debug-statements') */
+    id: string;
+    /** Human-readable name */
+    name: string;
+    /** Description of what this hook checks */
+    description: string;
+    /** Default severity level */
+    severity: Severity;
+    /** File extensions this hook applies to (without dots) */
+    fileTypes: string[];
+    /** Check function that returns issues found */
+    check: (context: FileContext) => HookResult[];
+}
+export interface CheckOptions {
+    /** Only run these hooks (by id) */
+    only?: string[];
+    /** Skip these hooks (by id) */
+    skip?: string[];
+    /** Minimum severity to fail on */
+    failOn?: Severity;
+    /** Output format */
+    format?: 'pretty' | 'json' | 'compact';
+    /** Auto-fix issues where possible */
+    fix?: boolean;
+}
+export interface CheckResult {
+    /** File path */
+    filePath: string;
+    /** All issues found in this file */
+    issues: HookResult[];
+}
+export interface SummaryResult {
+    /** Total files checked */
+    filesChecked: number;
+    /** Files with issues */
+    filesWithIssues: number;
+    /** Total issues by severity */
+    errorCount: number;
+    warningCount: number;
+    infoCount: number;
+    /** All results */
+    results: CheckResult[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/utils/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/utils/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;AAEpD,MAAM,WAAW,WAAW;IAC1B,gCAAgC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,4BAA4B;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,qBAAqB;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,8BAA8B;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,IAAI;IACnB,8DAA8D;IAC9D,EAAE,EAAE,MAAM,CAAC;IACX,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,2CAA2C;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,6BAA6B;IAC7B,QAAQ,EAAE,QAAQ,CAAC;IACnB,0DAA0D;IAC1D,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,+CAA+C;IAC/C,KAAK,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,UAAU,EAAE,CAAC;CAC/C;AAED,MAAM,WAAW,YAAY;IAC3B,mCAAmC;IACnC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,+BAA+B;IAC/B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,kCAAkC;IAClC,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,oBAAoB;IACpB,MAAM,CAAC,EAAE,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAC;IACvC,qCAAqC;IACrC,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,MAAM,EAAE,UAAU,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,0BAA0B;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,wBAAwB;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,+BAA+B;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB;IAClB,OAAO,EAAE,WAAW,EAAE,CAAC;CACxB"}

package/dist/utils/types.js

@@ -0,0 +1,5 @@
+/**
+ * Shared types for vibe-and-thrive
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/utils/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/utils/types.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/integrations/cursorrules.template

@@ -0,0 +1,147 @@
+# Cursor Rules for Vibe Coding
+# Copy this file to your project root as `.cursorrules`
+
+You are an expert developer helping with this project. Follow these rules:
+
+## Code Quality
+
+### Never Use These Patterns
+- `any` type in TypeScript - create proper interfaces
+- Empty catch blocks - handle errors properly
+- `console.log` for error handling - use proper logging
+- Hardcoded URLs - use environment variables
+- Functions over 50 lines - break them up
+- Deep nesting (4+ levels) - refactor with early returns
+
+### Always Do This
+- Handle loading, error, and empty states
+- Use proper TypeScript types
+- Write descriptive variable names
+- Add error handling for async operations
+- Use environment variables for configuration
+
+## Response Format
+
+When writing code:
+1. Explain what you're doing briefly
+2. Write clean, typed code
+3. Include error handling
+4. Mention any edge cases to consider
+
+When I ask you to fix something:
+1. Explain what was wrong
+2. Show the fix
+3. Explain why it's better
+
+## TypeScript Rules
+
+```typescript
+// DON'T
+const data: any = await fetch('/api');
+function process(input: any): any { }
+
+// DO
+interface User { id: string; name: string; }
+const data: User = await fetchUser();
+function process(input: UserInput): ProcessedUser { }
+```
+
+## Error Handling
+
+```typescript
+// DON'T
+try { doThing(); } catch (e) { }
+
+// DO
+try {
+  await doThing();
+} catch (error) {
+  if (error instanceof NetworkError) {
+    logger.warn('Network error, retrying', { error });
+    return retry(doThing);
+  }
+  logger.error('Failed to do thing', { error });
+  throw error;
+}
+```
+
+## React Components
+
+```typescript
+// DON'T
+function UserProfile({ userId }) {
+  const [user, setUser] = useState();
+  // No loading/error handling
+  return <div>{user.name}</div>;
+}
+
+// DO
+function UserProfile({ userId }: { userId: string }) {
+  const { data: user, isLoading, error } = useUser(userId);
+
+  if (isLoading) return <Skeleton />;
+  if (error) return <ErrorMessage error={error} />;
+  if (!user) return <NotFound />;
+
+  return <div>{user.name}</div>;
+}
+```
+
+## Testing
+
+When I ask you to write tests:
+1. Use the SCENARIO/EXPECTED/FAILURE pattern
+2. Test behavior, not implementation
+3. Include happy path and error cases
+4. Keep tests independent
+
+```typescript
+test('user can submit form', async () => {
+  /**
+   * SCENARIO: User fills out valid form and submits
+   * EXPECTED: Success message shown, form cleared
+   * FAILURE: Error shown or form stuck
+   */
+});
+```
+
+## Security
+
+Never:
+- Put secrets in code
+- Use innerHTML with user content
+- Build SQL queries with string concatenation
+- Trust user input without validation
+
+Always:
+- Use parameterized queries
+- Sanitize HTML if you must render it
+- Validate input on both client and server
+- Use HTTPS for external requests
+
+## When Asked to Review Code
+
+Check for:
+1. Security vulnerabilities
+2. Missing error handling
+3. `any` types
+4. Code duplication
+5. Long functions
+6. Missing tests for critical paths
+
+## Project-Specific Notes
+
+<!-- Add your project-specific patterns here -->
+
+### Tech Stack
+- Frontend: [Your stack]
+- Backend: [Your stack]
+- Database: [Your database]
+
+### Patterns to Follow
+- [Pattern 1]
+- [Pattern 2]
+
+### Things to Avoid
+- [Anti-pattern 1]
+- [Anti-pattern 2]

package/integrations/eslint.config.js

@@ -0,0 +1,34 @@
+/**
+ * Example ESLint configuration using vibe-and-thrive plugin
+ *
+ * Copy this file to your project root and customize as needed.
+ */
+
+import vibe from "vibe-and-thrive/eslint-plugin";
+
+export default [
+  // Use the recommended config (balanced defaults)
+  vibe.configs.recommended,
+
+  // Or use strict config for stricter rules
+  // vibe.configs.strict,
+
+  // Custom configuration
+  {
+    files: ["**/*.ts", "**/*.tsx"],
+    rules: {
+      // Override specific rules if needed
+      // "vibe/no-any-type": "error",
+      // "vibe/max-function-length": ["warn", { max: 40 }],
+    },
+  },
+
+  // Disable rules for test files
+  {
+    files: ["**/*.test.ts", "**/*.test.tsx", "**/*.spec.ts", "**/*.spec.tsx"],
+    rules: {
+      "vibe/no-magic-numbers": "off",
+      "vibe/max-function-length": "off",
+    },
+  },
+];

package/integrations/lint-staged.config.js

@@ -0,0 +1,34 @@
+/**
+ * Ready-to-use lint-staged configuration for vibe-and-thrive
+ *
+ * Copy this file to your project root, or reference the config:
+ *
+ *   // package.json
+ *   {
+ *     "lint-staged": {
+ *       "*.{js,ts,jsx,tsx}": "vibe-check --fail-on error"
+ *     }
+ *   }
+ */
+
+export default {
+  // JavaScript/TypeScript files - full security and quality checks
+  '*.{js,jsx,ts,tsx,mjs,cjs}': [
+    'vibe-check --only secrets,urls,debug,unsafe-html,any-types,snake-case,empty-catch --fail-on error',
+  ],
+
+  // Python files
+  '*.py': [
+    'vibe-check --only secrets,urls,debug,empty-catch,magic-numbers --fail-on error',
+  ],
+
+  // Config files - secrets check only
+  '*.{json,yaml,yml,toml}': [
+    'vibe-check --only secrets --fail-on error',
+  ],
+
+  // Dockerfiles
+  'Dockerfile*': [
+    'vibe-check --only docker-platform --fail-on warning',
+  ],
+};

package/integrations/ruff.toml

@@ -0,0 +1,125 @@
+# Ruff Configuration for Vibe Coding
+#
+# Catches common AI-generated code issues in Python.
+# Copy to your project root as ruff.toml or pyproject.toml [tool.ruff] section.
+#
+# Install: pip install ruff
+
+# Target Python version
+target-version = "py311"
+
+# Line length (match Black)
+line-length = 100
+
+# Exclude common directories
+exclude = [
+    ".git",
+    ".venv",
+    "venv",
+    "__pycache__",
+    "migrations",
+    "node_modules",
+    "dist",
+    "build",
+    ".eggs",
+]
+
+[lint]
+# Enable these rule sets
+select = [
+    # ===========================================
+    # Core rules - catch common AI mistakes
+    # ===========================================
+    "E",      # pycodestyle errors
+    "W",      # pycodestyle warnings
+    "F",      # Pyflakes (unused imports, variables)
+    "I",      # isort (import sorting)
+    "B",      # flake8-bugbear (common bugs)
+    "C4",     # flake8-comprehensions
+    "UP",     # pyupgrade (modern Python syntax)
+    "SIM",    # flake8-simplify (simplify code)
+
+    # ===========================================
+    # Security - AI can introduce vulnerabilities
+    # ===========================================
+    "S",      # flake8-bandit (security issues)
+
+    # ===========================================
+    # Code quality
+    # ===========================================
+    "N",      # pep8-naming
+    "RUF",    # Ruff-specific rules
+    "PTH",    # flake8-use-pathlib
+    "ERA",    # eradicate (commented-out code)
+    "PL",     # Pylint
+    "PERF",   # Perflint (performance)
+
+    # ===========================================
+    # Type checking helpers
+    # ===========================================
+    "TCH",    # flake8-type-checking
+    "ANN",    # flake8-annotations
+]
+
+# Rules to ignore
+ignore = [
+    # Allow missing type annotations in some cases
+    "ANN101",  # Missing type annotation for self
+    "ANN102",  # Missing type annotation for cls
+    "ANN401",  # Dynamically typed expressions (Any)
+
+    # Allow assert in tests
+    "S101",    # Use of assert
+
+    # These can be too strict
+    "PLR0913", # Too many arguments
+    "PLR2004", # Magic value comparison
+    "PLR0911", # Too many return statements
+
+    # Let formatter handle these
+    "E501",    # Line too long (handled by formatter)
+]
+
+# Per-file ignores
+[lint.per-file-ignores]
+# Tests can have more relaxed rules
+"tests/**/*.py" = [
+    "S101",    # assert is fine in tests
+    "ANN",     # Don't require annotations in tests
+    "PLR2004", # Magic values OK in tests
+]
+# Migrations are auto-generated
+"**/migrations/*.py" = ["ALL"]
+# Config files
+"conftest.py" = ["ANN"]
+
+[lint.isort]
+# isort configuration
+known-first-party = ["app", "core", "services"]
+force-single-line = false
+combine-as-imports = true
+
+[lint.flake8-bugbear]
+# Extend immutable calls (AI often mutates defaults)
+extend-immutable-calls = ["fastapi.Depends", "fastapi.Query"]
+
+[lint.pylint]
+# Limit function complexity
+max-args = 7
+max-branches = 12
+max-returns = 6
+max-statements = 50
+
+[lint.mccabe]
+# Cyclomatic complexity threshold
+max-complexity = 10
+
+[format]
+# Use double quotes (match Black)
+quote-style = "double"
+
+# Indent with spaces
+indent-style = "space"
+
+# Unix line endings
+line-ending = "lf"

package/integrations/vibe-check.yml

@@ -0,0 +1,116 @@
+# GitHub Action: Vibe Check
+# Runs vibe-and-thrive pre-commit hooks on PRs
+#
+# Add this to your repo: .github/workflows/vibe-check.yml
+
+name: Vibe Check
+
+on:
+  pull_request:
+    branches: [main, master]
+  push:
+    branches: [main, master]
+
+jobs:
+  vibe-check:
+    name: Code Quality Check
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.11'
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+
+      - name: Install pre-commit
+        run: pip install pre-commit
+
+      - name: Run pre-commit hooks
+        run: pre-commit run --all-files --show-diff-on-failure
+        continue-on-error: true
+        id: precommit
+
+      - name: Comment on PR (if issues found)
+        if: steps.precommit.outcome == 'failure' && github.event_name == 'pull_request'
+        uses: actions/github-script@v7
+        with:
+          script: |
+            github.rest.issues.createComment({
+              issue_number: context.issue.number,
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              body: `## ⚠️ Vibe Check Found Issues
+
+            The pre-commit hooks found some issues in this PR. Please review the [workflow run](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}) for details.
+
+            Common fixes:
+            - \`any\` types → Create proper TypeScript interfaces
+            - Empty catch blocks → Add proper error handling
+            - Hardcoded URLs → Use environment variables
+            - console.log → Remove or use proper logging
+
+            Run \`pre-commit run --all-files\` locally to see all issues.`
+            })
+
+      - name: Check for blocking issues
+        run: |
+          # Only fail on blocking hooks (secrets, hardcoded URLs)
+          pre-commit run check-secrets --all-files
+          pre-commit run check-hardcoded-urls --all-files
+
+  # Optional: TypeScript type checking
+  typecheck:
+    name: TypeScript Check
+    runs-on: ubuntu-latest
+    if: hashFiles('**/tsconfig.json') != ''
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+        working-directory: ${{ hashFiles('frontend/package.json') != '' && 'frontend' || '.' }}
+
+      - name: Run type check
+        run: npm run typecheck || npm run tsc -- --noEmit
+        working-directory: ${{ hashFiles('frontend/package.json') != '' && 'frontend' || '.' }}
+        continue-on-error: true
+
+  # Optional: Python type checking
+  mypy:
+    name: Python Type Check
+    runs-on: ubuntu-latest
+    if: hashFiles('**/pyproject.toml') != '' || hashFiles('**/setup.py') != ''
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.11'
+
+      - name: Install dependencies
+        run: |
+          pip install mypy
+          pip install -e . || pip install -r requirements.txt || true
+
+      - name: Run mypy
+        run: mypy . --ignore-missing-imports
+        continue-on-error: true