vibes-plug 2.14.1 → 3.9.0

package/.claude/rules/vibes-plug-core.md

@@ -1,5 +1,10 @@
 # Vibes-Plug Core Rules (Claude)
 
+## Primary Trigger & Skill Auto-Synchronization (Pemicu Utama)
+**MANDATORY**: Upon installation, `vibes-plug` acts as the PRIMARY TRIGGER and master conductor.
+- Claude automatically intercepts every request, evaluates user intent against the 127+ skills, and activates cooperating skills without waiting for manual invocation.
+- Multiple domains automatically synchronize: Frontend (`senior-frontend`), Backend (`js-backend-expert`), Database (`database-orm-expert`), Payments (`doku-payment-gateway`, `saas-billing`), QA (`autonomous-tdd-debugger`), Hardening (`production-ready-hardener`).
+
 ## Skill Resolution Protocol
 1. Before any task, identify relevant skills from `skills/` directory.
 2. Read the `SKILL.md` file of each relevant skill before writing code.

package/.cursor/rules/vibes-plug-core.mdc

@@ -1,13 +1,18 @@
 ---
 alwaysApply: true
-description: "Vibes-Plug 144+ Skills Ecosystem — Universal AI plugin for modern 2026 development"
+description: "Vibes-Plug 127+ Skills Ecosystem — Universal AI plugin for modern 2026 development"
 globs: "**/*"
 ---
 
 # Vibes-Plug Core Rules
 
+## Primary Trigger & Skill Auto-Synchronization (Pemicu Utama)
+**MANDATORY**: Upon installation, `vibes-plug` acts as the PRIMARY TRIGGER and master conductor for all tasks.
+- Cursor AI automatically detects user intent and auto-synchronizes cooperating skills without waiting for manual `@` mentions.
+- Cross-domain cooperation is automatic: Frontend (`senior-frontend`), Backend (`js-backend-expert`), Database (`database-orm-expert`), Payments (`doku-payment-gateway`, `saas-billing`), Hardening (`production-ready-hardener`).
+
 ## Skill Resolution Protocol
-This project uses 144+ specialized skills in the `skills/` directory. Each skill is a `SKILL.md` file.
+This project uses 127+ specialized skills in the `skills/` directory. Each skill is a `SKILL.md` file.
 
 **Before any task:**
 1. Identify relevant skills from the domain table below.

package/.cursorrules

@@ -1,8 +1,14 @@
-# Vibes-Plug — 144+ Skills Ecosystem (v2.12.0)
+# Vibes-Plug — 127+ Skills Ecosystem (v3.7.0)
 # Universal AI Plugin for Antigravity, Claude, and Cursor
 
+## Primary Trigger & Skill Auto-Synchronization (Pemicu Utama)
+Upon installation, `vibes-plug` is the **PRIMARY TRIGGER (Pemicu Utama)** for all Cursor AI interactions.
+- The AI agent MUST automatically intercept prompts and synchronize relevant skills without waiting for explicit `@` mentions.
+- Automatically connects cooperating skills (e.g. `doku-payment-gateway` + `saas-billing` + `payment-gateway-expert`; `senior-frontend` + `tailwind-expert`).
+- Multi-domain workflows trigger Swarm Topologies (Fan-Out/Fan-In, Pipeline Saga, Critic-Validator).
+
 ## About
-This project uses the vibes-plug skills ecosystem with 144+ specialized skills.
+This project uses the vibes-plug skills ecosystem with 127+ specialized skills.
 Each skill is a `SKILL.md` file in the `skills/` directory containing domain-specific
 instructions, patterns, and best practices for the modern 2026 tech stack.
 

package/AGENTS.md

@@ -2,7 +2,25 @@
 
 > **🌐 Universal Compatibility:** These rules apply to ALL AI platforms using vibes-plug:
 > **Antigravity (AGY)** via `AGENTS.md` | **Claude Code** via `CLAUDE.md` + `.claude/rules/` | **Cursor IDE** via `.cursorrules` + `.cursor/rules/`
-> Each platform has its own entry point, but the core rules and 145+ skills are shared.
+> Each platform has its own entry point, but the core rules and 127+ skills are shared.
+
+## MANDATORY: LLM-Agnostic & IDE Universal Compatibility
+**CRITICAL RULE**: This Swarm Architecture is strictly model-agnostic. It is engineered to extract maximum reasoning capabilities from ALL Frontier Models (Gemini 4 Pro, Claude 3.5/4.0, GPT-4.5/O3, OpenAI Codex, and DeepSeek-Pro). The AI MUST adapt the orchestration payload according to its native context window.
+
+## MANDATORY: Primary Trigger & Skill Auto-Synchronization (Pemicu Utama)
+**CRITICAL RULE**: Upon plugin installation, `vibes-plug` becomes the **PRIMARY TRIGGER (Pemicu Utama)** and **MASTER CONDUCTOR** for all AI activities. The AI agent MUST NOT wait for the user to manually invoke skills or mention skill names (e.g. `@senior-frontend` or `/ask-skill`).
+
+Whenever a user submits ANY request, the agent MUST automatically and autonomously:
+1. **Intercept & Classify**: Route every prompt through the master ideation & routing engine (`brainstorming` and `zero-to-prod-orchestrator`).
+2. **Auto-Synchronize Cooperating Skills**: Dynamically identify and bind all relevant domain skills from the 127+ skill registry:
+   - **Frontend & UI**: `senior-frontend` + `tailwind-expert` + `design-system-architect` + `form-validation-expert` + `ui-components-expert`.
+   - **Backend & APIs**: `js-backend-expert` + `database-orm-expert` + `api-design-expert` + `authentication-identity-expert`.
+   - **Payments & Billing**: `doku-payment-gateway` + `payment-gateway-expert` + `saas-billing` + `database-orm-expert` (atomic locks & idempotency).
+   - **AI & MCP**: `ai-llm-integration-expert` + `vercel-ai-sdk-expert` + `mcp-server-architect` + `doku-mcp-server`.
+   - **Testing & Quality**: `autonomous-tdd-debugger` + `e2e-testing-expert` + `autonomous-red-teamer` + `production-ready-hardener` + `anti-slop`.
+   - **Full Lifecycle**: `brainstorming` + `prd-architect` + `zero-to-prod-orchestrator`.
+3. **Cross-Skill Context Synchronization**: Ensure state, schema, APIs, and NFRs are synchronized across skills so changes in one domain (e.g., database schema) automatically propagate to others (e.g., backend models, API contracts, frontend types).
+4. **Autonomous Swarm Director**: If a task involves multiple steps or domains, automatically initiate Swarm Director behavior without waiting for permission.
 
 ## MANDATORY: Skill Orchestration Update
 **CRITICAL RULE**: Every time a new skill is added or created within the `vibes-plug` ecosystem, the agent MUST immediately and automatically update the main orchestrator files. 
@@ -42,7 +60,7 @@ This rule is absolute and applies to all AI agents interacting with this plugin.
 ```
 
 ### Swarm Director Protocols
-1. **Decompose and Delegate**: Break down complex tasks into independent sub-tasks and delegate them to specialized subagents using `invoke_subagent`. Assign clear, specific roles to each subagent based on the 145+ specialized skills in `vibes-plug`.
+1. **Decompose and Delegate**: Break down complex tasks into independent sub-tasks and delegate them to specialized subagents using `invoke_subagent`. Assign clear, specific roles to each subagent based on the 127+ specialized skills in `vibes-plug`.
 2. **Parallel Execution**: Invoke multiple subagents simultaneously whenever tasks can be performed in parallel (e.g., one subagent researches frontend UI, another analyzes backend DB schema).
 3. **Context Sharing**: Ensure subagents are given precise instructions and the necessary context (e.g., passing `CONTEXT_MAP.md`, PRD, or specific file paths). Communicate with active subagents via `send_message`.
 4. **Agent Synergy**: Rely on the `vibes-plug` skills ecosystem:
@@ -94,3 +112,6 @@ If it is missing from these files, the Swarm Auditor is authorized to add it.
 No generic "As an AI language model..." or overly verbose fluff. Instructions must be imperative, direct, and token-efficient. Use `token-saver` guidelines.
 
 > **Memory Graph Update:** 2026-08-12 - Initialized Gold Standard for Swarm Auditors.
+
+
+

package/CHANGELOG.md

@@ -5,6 +5,118 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.9.0] - 2026-09-29
+
+### Added / Ditambahkan
+- **Universal Multi-Agent Swarm Integration**: Dukungan konfigurasi aturan Swarm lintas IDE (`AGENTS.md` untuk Antigravity, `CLAUDE.md` untuk Claude Code, `.cursorrules` untuk Cursor, Windsurf, Trae, Cline, Kimi, dan Kiro).
+- **131-Skill Strict Validation**: Seluruh 131 skill diverifikasi dengan pipeline CI ketat (`scripts/validate-skills.mjs`), memastikan kepatuhan frontmatter YAML v3.0+, bebas referensi usang, dan struktur dwibahasa (Inggris & Indonesia).
+- **Zero Tech Debt Auditor Enhancements**: Standardisasi penuh spesifikasi `zero-tech-debt-auditor` dengan panduan bilingual dan protokol eliminasi dead code (Knip Protocol).
+
+### Fixed / Diperbaiki
+- **Frontmatter Deduplication**: Membersihkan duplikasi metadata header pada 114 skill untuk menjaga integritas pembacaan skill oleh runner model.
+- **Skill Count Synchronization**: Sinkronisasi total 131 skill di seluruh dokumentasi `package.json`, `plugin.json`, `README.md`, dan CLI.
+
+## [3.8.0] - 2026-09-28
+
+### Added / Ditambahkan
+- **Gemini 4 Pro (Next-Gen Readiness)**: Mengintegrasikan prinsip arsitektur masa depan ke orkestrator inti (gemini-agent-booster, multi-agent-orchestration, mcp-server-architect, rainstorming).
+- **Determinisme Prefix KV-Caching**: Mengunci struktur prompt statis (*static prefix*) pada orkestrator rainstorming/SKILL.md untuk memangkas latensi TTFT (*Time-to-First-Token*) hingga 90% pada konteks raksasa.
+- **Agentic MoE & Swarm Paralel Masif**: Mendorong eksekusi *subagent* massal serentak (*batch tooling*) dan penggunaan *state* memori monolitik daripada RAG terfragmentasi per agen.
+- **High-Throughput MCP Server**: Panduan penanganan konkurensi (pemanggilan serentak via Promise.all atau syncio.gather) di mcp-server-architect untuk mengimbangi kecepatan model-model *frontier* gen-4.
+- **Native Any-to-Any Multimodal Tokens**: Standarisasi integrasi API tanpa melalui perantara STT/TTS pada arsitektur agen real-time.
+
+## [3.7.0] - 2026-09-24
+
+### Added / Ditambahkan
+- **Standar SNAP BI 1.0 (Bank Indonesia)**: Implementasi penuh standar SNAP BI pada `doku-payment-gateway` dan `payment-gateway-expert`. Menggunakan enkripsi Asimetrik RSA-SHA256 untuk B2B Access Token (`/api/v1.0/access-token/b2b`) dan Simetrik **HMAC-SHA512** untuk endpoint transaksional (Virtual Account, QRIS, E-Wallet).
+- **Pencegahan Race Condition & Atomic Idempotency**:
+  - Pola **Atomic Update** (`UPDATE ... WHERE status = 'PENDING'`) dan penguncian tabel unik pada `saas-billing` dan `payment-gateway-expert`. Mencegah saldo/langganan bertambah ganda saat webhook DOKU/Stripe terpanggil serentak.
+  - Kewajiban penggunaan **Raw Body Parser** (`req.text()` atau `express.raw({ type: 'application/json' })`) untuk menjamin signature validasi tidak rusak akibat spasi atau serialisasi ulang JSON.
+- **Swarm Execution Topologies (2026 Master Protocol)**:
+  - Protokol pendelegasian subagent di `zero-to-prod-orchestrator` dan `brainstorming`: **Fan-Out / Fan-In** (paralel lintas UI, Backend, DB), **Pipeline Saga** (eksekusi 8-Fase berurutan), dan **Critic-Validator Gate** (audit mandiri sebelum serah terima).
+  - Integrasi loop pengujian otomatis perbaikan mandiri (**`autonomous-tdd-debugger`**) di `senior-frontend` dan `js-backend-expert`.
+
+### Changed / Diubah
+- **DOKU Gateway Integration**: Migrasi penuh dari legacy Jokul API v2 (HMAC-SHA256) ke standar SNAP BI (HMAC-SHA512).
+- **Frontend & Backend Standards**: Penegasan Tailwind CSS v4 CSS-first (`@theme`), Next.js 15 Partial Prerendering (PPR), React 19 Compiler tanpa `useMemo`/`useCallback`, dan Node.js 24 LTS.
+- **Version Bump**: Versi aplikasi dan plugin dinaikkan dari `3.6.0` ke `3.7.0` di `package.json`, `plugin.json`, `bin/vibes.mjs`, dan `CHANGELOG.md`.
+
+### Fixed / Diperbaiki
+- **Typo Skill References**: Memperbaiki salah ketik referensi skill (` utonomous-red-teamer` → `autonomous-red-teamer`) di `brainstorming/SKILL.md` dan `zero-to-prod-orchestrator/SKILL.md`.
+- **Duplicate ORM Reference**: Membersihkan penyebutan ganda `database-orm-expert` pada matriks orkestrasi `js-backend-expert`.
+
+---
+
+## [3.6.0] - 2026-09-14
+
+### Added / Ditambahkan
+- **CLI: `vibes search <query>`**: Pencarian semantik berbasis frekuensi kata kunci di seluruh 125 skill. Hasil diurutkan berdasarkan relevansi (score). Contoh: `vibes search payment` → 18 skill relevan, dipimpin oleh `doku-mcp-server` dan `payment-gateway-expert`.
+- **CLI: `vibes recipe list`**: Tampilkan 6 built-in skill bundles yang dikurasi dengan deskripsi dan daftar skill di tiap resep.
+- **CLI: `vibes recipe apply <name>`**: Install semua skill dari sebuah resep ke `.agents/skills/` sekaligus. Skip skill yang sudah terinstall. 6 resep tersedia:
+  - `ai-stack` — AI/LLM + RAG + Vector DB + Multi-Agent
+  - `fullstack-pro` — Next.js 15 + Auth + DB + Payments + Testing
+  - `security-hardened` — Zero-Trust + Rate-Limit + GDPR + Red Team
+  - `realtime-app` — WebSockets + SSE + CRDT + State
+  - `mobile-first` — Expo + PWA Offline + Push Notifications
+  - `data-platform` — ETL + Visualization + Telemetry + Search
+
+---
+
+## [3.5.0] - 2026-09-14
+
+### Added / Ditambahkan
+- **CLI: `vibes skill info <name>`**: Tampilkan metadata lengkap sebuah skill (name, version, description, author, orchestration links) langsung dari terminal. Juga menunjukkan apakah skill sudah terinstall di project lokal.
+- **CLI: `vibes hooks install`**: Install Git pre-commit hook yang menjalankan Anti-Slop Audit secara otomatis sebelum setiap `git commit`. Melindungi codebase dari AI placeholder code.
+- **CLI: `vibes hooks remove`**: Hapus Git pre-commit hook dengan aman.
+- **Bootstrap: 3 template baru** — `mobile` (Expo SDK), `api` (Hono/Node.js), `fullstack` (T3 Stack). Total kini 5 template: `saas`, `ecommerce`, `mobile`, `api`, `fullstack`. Setiap template dilengkapi dengan skill set yang sesuai domain.
+
+---
+
+## [3.4.0] - 2026-09-14
+
+### Added / Ditambahkan
+- **CLI: `vibes version current`**: Tampilkan versi saat ini dari `package.json`.
+- **CLI: `vibes version bump <major|minor|patch>`**: Bump versi secara terpusat dan sinkron di `package.json`, `plugin.json`, `vibes.mjs`, dan `CHANGELOG.md` sekaligus — eliminasi human error saat rilis.
+- **CLI: `vibes doctor`**: Health diagnostics — memeriksa Node.js version, npx, global skills directory, `@inquirer/prompts`, dan local `.agents/skills/` sekaligus dalam satu perintah.
+
+### Changed / Diubah
+- **CJS → ESM Migration**: Konversi `scripts/check-anti-slop.js` → `scripts/check-anti-slop.mjs` dan `scripts/update_skills.js` → `scripts/update_skills.mjs` menggunakan `import/export` syntax. Seluruh codebase kini 100% ESM.
+- **`package.json` scripts**: Ditambahkan `"audit"` dan `"update-skills"` npm script agar bisa dijalankan via `npm run audit` dan `npm run update-skills`.
+- **`runAudit`**: Diperbarui untuk menggunakan `check-anti-slop.mjs` (ESM) menggantikan versi CJS lama.
+
+---
+
+## [3.3.0] - 2026-09-14
+
+### Added / Ditambahkan
+- **CLI: `vibes list [filter]`**: New command to list all 125+ skills from the global registry. Shows which skills are already installed locally (✅ marker). Supports optional keyword filter (e.g., `vibes list saas` → shows 3 saas-related skills).
+- **CLI: `vibes remove <skill-name>`**: New command to cleanly uninstall a skill from the local project's `.agents/skills/` directory. Simetris dengan `vibes add`.
+- **CLI: `vibes bootstrap`**: Super-scaffold a full Next.js 15 app with auto-injected AI skills. Templates: `saas` and `ecommerce`.
+- **CLI: `vibes ui`**: Interactive TUI using `@inquirer/prompts` for visual multiselect skill installation.
+
+### Fixed / Diperbaiki
+- **Hardcoded skill count** di `scripts/validate-skills.mjs` — sebelumnya hardcode `"All 124 skills"`, sekarang dinamis menggunakan variabel `totalSkills`.
+- **Missing `version` tag** di frontmatter `frontier-ai-models-expert/SKILL.md` — menyebabkan validation gagal. Sekarang `version: "3.0.0"` ditambahkan.
+
+---
+
+## [3.2.0] - 2026-09-13
+
+### Added / Ditambahkan
+- **CLI Enhancements**:
+  - Added `vibes create-skill <skill-name>` command to easily scaffold new skills using a standard template.
+  - Added `vibes audit` command to manually run the Anti-AI Slop quality gate check.
+- **New Frontier Skill: `frontier-ai-models-expert`**:
+  - Added a dedicated skill for late-2026 frontier AI models, including Claude 5.1 (Fable/Mythos) and Project Astra (Gemini 3.1).
+  - Covers Enterprise Frontier Safeguards (EFS), zero data retention, and multimodal capabilities.
+  - Orchestrated in `brainstorming` and `zero-to-prod-orchestrator`.
+
+### Changed / Diubah
+- Synchronized orchestrator matrices in `brainstorming/SKILL.md` and `zero-to-prod-orchestrator/SKILL.md` to include `frontier-ai-models-expert`.
+- Bumped versions in `package.json` and `plugin.json` to 3.2.0.
+
+---
+
 ## [2.13.0] - 2026-09-11
 
 ### Added / Ditambahkan
@@ -412,3 +524,5 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 ### Changed / Diubah
 - Updated the `saas-mvp-launcher` skill file with state-of-the-art 2026 patterns.
   *(Memperbarui file skill `saas-mvp-launcher` dengan pola mutakhir 2026.)*
+
+

package/CLAUDE.md

@@ -1,10 +1,10 @@
-# Vibes-Plug — 145+ Skills Ecosystem for AI-Powered Development
+# Vibes-Plug — 127+ Skills Ecosystem for AI-Powered Development
 
-> **v2.13.0 (2026 Edition)** — Universal AI plugin with 145+ specialized skills for modern tech stacks (React 19, Next.js 15, Tailwind v4, Bun 1.2+, Hono v4, Node.js 24 LTS, Python 3.14, TypeScript 5.8+, Go 1.25+, Rust 2024).
+> **v3.7.0 (2026 Edition)** — Universal AI plugin with 127+ specialized skills for modern tech stacks (React 19, Next.js 15, Tailwind v4, Bun 1.2+, Hono v4, Node.js 24 LTS, Python 3.14, TypeScript 5.8+, Go 1.25+, Rust 2024).
 
 ## How This Plugin Works
 
-This repository contains **145+ specialized skill files** in the `skills/` directory. Each skill is a `SKILL.md` file with domain-specific instructions, best practices, and code patterns.
+This repository contains **127+ specialized skill files** in the `skills/` directory. Each skill is a `SKILL.md` file with domain-specific instructions, best practices, and code patterns.
 
 **Before starting any task**, identify which skills are relevant and read their `SKILL.md` files. Skills are organized by domain:
 
@@ -27,6 +27,13 @@ This repository contains **145+ specialized skill files** in the `skills/` direc
 
 ## Core Rules
 
+### 0. Primary Trigger & Skill Auto-Synchronization (Pemicu Utama)
+**MANDATORY**: Upon installation, `vibes-plug` is the **PRIMARY TRIGGER (Pemicu Utama)** for all interactions.
+- The AI agent MUST NOT wait for the user to specify skill names or `@` tags.
+- Every user prompt is automatically intercepted and routed through `brainstorming` and `zero-to-prod-orchestrator`.
+- The agent automatically binds and synchronizes cooperating skills across all involved domains (Frontend, Backend, Database, Payments, AI, QA).
+- For complex, multi-step requests, the agent automatically acts as a Swarm Director (Fan-Out/Fan-In, Pipeline Saga, or Critic-Validator).
+
 ### 1. Deep Reasoning Before Action
 Do not act impulsively. Before writing code, modifying files, or making architectural decisions, engage in a mandatory reasoning phase:
 1. **Analyze** constraints, edge cases, and implications.