vibe-coding-master 0.3.9 → 0.3.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (30) hide show
  1. package/README.md +20 -7
  2. package/dist/backend/api/codex-hook-routes.js +7 -0
  3. package/dist/backend/api/codex-translation-routes.js +50 -0
  4. package/dist/backend/cli/install-vcm-harness.js +29 -1
  5. package/dist/backend/gateway/gateway-settings-service.js +4 -3
  6. package/dist/backend/server.js +17 -2
  7. package/dist/backend/services/app-settings-service.js +2 -2
  8. package/dist/backend/services/artifact-service.js +2 -1
  9. package/dist/backend/services/codex-hook-service.js +12 -9
  10. package/dist/backend/services/codex-translation-service.js +964 -0
  11. package/dist/backend/services/harness-service.js +28 -1
  12. package/dist/backend/services/session-service.js +42 -21
  13. package/dist/backend/services/translation-service.js +120 -35
  14. package/dist/backend/templates/harness/codex-review.js +68 -3
  15. package/dist/backend/vcm-data-dir.js +7 -0
  16. package/dist/shared/constants.js +15 -1
  17. package/dist-frontend/assets/index-B13y-ZM8.css +32 -0
  18. package/dist-frontend/assets/index-C7Nb1xPJ.js +92 -0
  19. package/dist-frontend/index.html +2 -2
  20. package/docs/codex-review-gates.md +26 -7
  21. package/docs/codex-translation-plan.md +1164 -0
  22. package/docs/full-harness-baseline.md +1 -1
  23. package/docs/gateway-design.md +7 -4
  24. package/docs/product-design.md +10 -9
  25. package/docs/v0.2-implementation-plan.md +3 -3
  26. package/docs/vcm-cc-best-practices.md +3 -3
  27. package/package.json +1 -1
  28. package/dist-frontend/assets/index-CR1EOe-w.css +0 -32
  29. package/dist-frontend/assets/index-D-6FVz_K.js +0 -92
  30. package/docs/codex-file-translation-plan.md +0 -618
package/dist-frontend/index.html CHANGED
@@ -4,8 +4,8 @@
4
4
  <meta charset="UTF-8" />
5
5
  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
6
6
  <title>VibeCodingMaster</title>
7
- <script type="module" crossorigin src="/assets/index-D-6FVz_K.js"></script>
8
- <link rel="stylesheet" crossorigin href="/assets/index-CR1EOe-w.css">
7
+ <script type="module" crossorigin src="/assets/index-C7Nb1xPJ.js"></script>
8
+ <link rel="stylesheet" crossorigin href="/assets/index-B13y-ZM8.css">
9
9
  </head>
10
10
  <body>
11
11
  <div id="root"></div>
package/docs/codex-review-gates.md CHANGED
@@ -306,7 +306,7 @@ Codex review outputs live under:
306
306
  ```
307
307
 
308
308
  VCM stores Codex Review Gate switches outside the repository in the global
309
- `~/.vcm/settings.json` file as one VCM-wide selected gate list. The
309
+ `<vcmDataDir>/settings.json` file as one VCM-wide selected gate list. The
310
310
  project-local `.ai/codex/config.toml` must not store gate enablement, VCM must
311
311
  not key these switches by project or task, and VCM must not create a separate
312
312
  Codex review settings file for them.
@@ -453,7 +453,7 @@ status, decision, report path, and any failure or exception metadata.
453
453
  The Codex CLI provider uses the long-lived embedded terminal session, not
454
454
  `codex exec`, because VCM needs Codex `UserPromptSubmit` and `Stop` hook events
455
455
  and the user may continue discussing the review after the report is written.
456
- Current implementation shape for a fresh terminal:
456
+ Default local implementation shape for a fresh terminal:
457
457
 
458
458
  ```bash
459
459
  codex \
@@ -467,6 +467,24 @@ codex \
467
467
  --config model_reasoning_effort="<effort-selected-in-VCM-UI>"
468
468
  ```
469
469
 
470
+ When VCM runs inside a Dev Container with `VCM_SANDBOX=devcontainer`, the
471
+ container is the security boundary. VCM then starts Codex Reviewer without
472
+ Codex's nested filesystem sandbox to avoid Linux container `bwrap` and
473
+ `apply_patch` write failures:
474
+
475
+ ```bash
476
+ codex \
477
+ --cd <taskRepoRoot>/.ai/codex \
478
+ --dangerously-bypass-approvals-and-sandbox \
479
+ --dangerously-bypass-hook-trust \
480
+ --search \
481
+ --model <model-selected-in-VCM-UI> \
482
+ --config model_reasoning_effort="<effort-selected-in-VCM-UI>"
483
+ ```
484
+
485
+ Use this mode only when VCM, Codex, Claude Code, and the target repository all
486
+ run inside the same trusted container or VM boundary.
487
+
470
488
  VCM omits `--model` or `model_reasoning_effort` when the user selects
471
489
  `Default`, letting Codex CLI use its account or CLI default. `--search` enables
472
490
  Codex CLI's native web search tool for reviewer checks that need current
@@ -476,10 +494,11 @@ Starting from `.ai/codex` causes Codex to load `.ai/codex/AGENTS.md` through
476
494
  its normal `AGENTS.md` discovery path and `.ai/codex/.codex/hooks.json` through
477
495
  the Codex project hook path. VCM sends the gate prompt into this terminal,
478
496
  validates the report path, request id, and decision before marking a gate
479
- completed, then callbacks PM. `--ask-for-approval never` and the VCM-owned hook
480
- trust bypass prevent Codex from pausing at permission or hook trust prompts;
481
- execution failures are recorded as `failed` so the user can retry, skip, or
482
- override.
497
+ completed, then callbacks PM. In default local mode, `--ask-for-approval never`
498
+ and the VCM-owned hook trust bypass prevent Codex from pausing at permission or
499
+ hook trust prompts; in Dev Container mode, the Codex approval and sandbox bypass
500
+ does the same while relying on the container boundary. Execution failures are
501
+ recorded as `failed` so the user can retry, skip, or override.
483
502
 
484
503
  ## 10. UI Shape
485
504
 
@@ -491,7 +510,7 @@ connected active task and contains three independent toggles:
491
510
  - Final Diff
492
511
 
493
512
  All three toggles default to `off`. Turning on any gate writes the selected
494
- global gate list to `~/.vcm/settings.json`. Turning all gates off stores an
513
+ global gate list to `<vcmDataDir>/settings.json`. Turning all gates off stores an
495
514
  empty selected gate list. VCM then mirrors this global setting into the active
496
515
  task's `.ai/vcm/codex-reviews/index.json` as runtime state for PM/tool
497
516
  consumption.