vybekiit 0.6.1 → 0.7.2

package/dist/global-skills/add-ai/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: add-ai
-description: the builder wants smart replies or another AI feature in their app. Use when the builder says something like: add ai; chatbot; smart replies.
+description: "the builder wants smart replies or another AI feature in their app. Use when the builder says something like: add ai; chatbot; smart replies."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/add-analytics/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: add-analytics
-description: the builder can see who uses their app — visitor stats in plain language. Use when the builder says something like: visitor stats; analytics; track usage.
+description: "the builder can see who uses their app — visitor stats in plain language. Use when the builder says something like: visitor stats; analytics; track usage."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/add-blog/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: add-blog
-description: the builder wants a blog or changelog on their site. Use when the builder says something like: add a blog; write articles; changelog.
+description: "the builder wants a blog or changelog on their site. Use when the builder says something like: add a blog; write articles; changelog."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/add-crud/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: add-crud
-description: scaffold create/read/update/delete routes for a resource. Use when the builder says something like: crud; create read update delete.
+description: "scaffold create/read/update/delete routes for a resource. Use when the builder says something like: crud; create read update delete."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/add-files/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: add-files
-description: users can upload files and images, and see them back in the app. Use when the builder says something like: upload; store files; attachments.
+description: "users can upload files and images, and see them back in the app. Use when the builder says something like: upload; store files; attachments."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/add-images/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: add-images
-description: add logos, hero images, icons, and other pictures that ship with the app (not user uploads). Use when the builder says something like: add my logo; hero image; app icon; add images.
+description: "add logos, hero images, icons, and other pictures that ship with the app (not user uploads). Use when the builder says something like: add my logo; hero image; app icon; add images."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/add-language/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: add-language
-description: make the app speak another language — the builder asks in plain words ("make it Hebrew",. Use when the builder says something like: translate my app; add spanish; make it hebrew.
+description: "make the app speak another language — the builder asks in plain words (\"make it Hebrew\",. Use when the builder says something like: translate my app; add spanish; make it hebrew."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/add-notifications/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: add-notifications
-description: the builder's users get notified — by email first; push can come later. Use when the builder says something like: notify users; send alerts.
+description: "the builder's users get notified — by email first; push can come later. Use when the builder says something like: notify users; send alerts."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/add-realtime/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: add-realtime
-description: the builder's app can push live updates to signed-in users. Use when the builder says something like: live updates; real-time; push changes instantly; refresh without reload.
+description: "the builder's app can push live updates to signed-in users. Use when the builder says something like: live updates; real-time; push changes instantly; refresh without reload."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/add-route/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: add-route
-description: add a new API endpoint without hand-writing boilerplate. Use when the builder says something like: add an endpoint; add api; new route.
+description: "add a new API endpoint without hand-writing boilerplate. Use when the builder says something like: add an endpoint; add api; new route."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/add-search/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: add-search
-description: users can search the builder's data in plain language. Use when the builder says something like: let users search; find things; search my data.
+description: "users can search the builder's data in plain language. Use when the builder says something like: let users search; find things; search my data."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/add-signin/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: add-signin
-description: people can create accounts and log in to the builder's app. Use when the builder says something like: sign in; log in; create accounts; add users.
+description: "people can create accounts and log in to the builder's app. Use when the builder says something like: sign in; log in; create accounts; add users."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/add-teams/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: add-teams
-description: the builder can invite teammates and work in shared organizations. Use when the builder says something like: invite teammates; add my team; organizations.
+description: "the builder can invite teammates and work in shared organizations. Use when the builder says something like: invite teammates; add my team; organizations."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/add-upload/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: add-upload
-description: let clients upload files safely. Use when the builder says something like: upload; store files; attachments; file upload endpoint.
+description: "let clients upload files safely. Use when the builder says something like: upload; store files; attachments; file upload endpoint."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/back-up-my-code/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: back-up-my-code
-description: the builder's project is saved on GitHub so they never lose work. Use when the builder says something like: save my code; back up; put it on github.
+description: "the builder's project is saved on GitHub so they never lose work. Use when the builder says something like: save my code; back up; put it on github."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/buy-domain/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: buy-domain
-description: the app uses the builder's own web address instead of a temporary one. Use when the builder says something like: get a domain; buy a web address; my own url.
+description: "the app uses the builder's own web address instead of a temporary one. Use when the builder says something like: get a domain; buy a web address; my own url."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/check-safety/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: check-safety
-description: confirm the app is protected end-to-end before ship — abuse, database safety, and every. Use when the builder says something like: am i ready to ship; is my app safe; did we cover security.
+description: "confirm the app is protected end-to-end before ship — abuse, database safety, and every. Use when the builder says something like: am i ready to ship; is my app safe; did we cover security."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/configure-capabilities/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: configure-capabilities
-description: the app has **only the permissions it needs** — the builder never thinks about Info.plist, Android manifest, or Expo plugins. Use when the builder says something like: camera; location permission; notifications permission.
+description: "the app has **only the permissions it needs** — the builder never thinks about Info.plist, Android manifest, or Expo plugins. Use when the builder says something like: camera; location permission; notifications permission."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/connect-account/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: connect-account
-description: people can create accounts and sign in **inside the app**. Use when the builder says something like: sign in; log in; create accounts; add users; forgot password; reset password.
+description: "people can create accounts and sign in **inside the app**. Use when the builder says something like: sign in; log in; create accounts; add users; forgot password; reset password."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/connect-account-backend/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: connect-account-backend
-description: people can sign in from the phone app or extension. Use when the builder says something like: connect account backend.
+description: "people can sign in from the phone app or extension. Use when the builder says something like: connect account backend."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/design-my-data/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: design-my-data
-description: figure out what the app should remember before wiring storage. Use when the builder says something like: design my database; what data do i need; what should my app remember.
+description: "figure out what the app should remember before wiring storage. Use when the builder says something like: design my database; what data do i need; what should my app remember."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/doctor/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: doctor
-description: find out why something isn't working and fix it — without making the builder debug. Use when the builder says something like: it's broken; nothing works; get an error; check my app.
+description: "find out why something isn't working and fix it — without making the builder debug. Use when the builder says something like: it's broken; nothing works; get an error; check my app."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/feedback/SKILL.md

@@ -0,0 +1,63 @@
+---
+name: feedback
+description: "send a private note about VybeKiit so the team can improve the kit. Use when the builder says something like: send feedback; report a kit bug; suggest a kit improvement; the kit is confusing."
+metadata:
+  vybekiit-generated: buyer-skill-stub
+---
+
+<!-- vybekiit:generated:buyer-skill-stub -->
+
+# Skill: feedback
+
+**Goal:** send a private note about VybeKiit so the team can improve the kit.
+
+**Contract:** one action at a time · verify-before-advance · plain language · translate errors · celebrate.
+
+## Safety boundary
+
+Include only:
+
+- kind: `bug`, `idea`, or `confusing`
+- the builder's short message
+- a short agent-written summary
+- up to 10 short steps that reproduce the problem
+- template: `web`, `mobile`, `extension`, `backend`, `spa`, or `unknown`
+- trigger: `explicit` or `automatic-suggestion`
+- agent name/version, kit version, and operating system name
+
+Exclude source code, command output, transcripts, stack traces, email, secrets, tokens, absolute paths,
+machine names, and private issue links. Never send automatically.
+
+## Steps
+
+1. **Prepare one safe draft.** Write the allowlisted JSON fields to
+   `.vybekiit/feedback-drafts/<timestamp>.json`. Create the folder if needed.
+   **Verify:** read the draft back and check that every field is allowed and bounded.
+
+2. **Show the preview.** Explain in plain language exactly what will be sent. Do not show removed
+   private details.
+   **Verify:** the builder can read the full safe preview.
+
+3. **Ask once.** Ask: *"Send this private feedback report to the VybeKiit team now?"*
+   If the builder does not clearly agree, stop and keep the local draft.
+   **Verify:** a clear yes was received in this conversation.
+
+4. **Send after approval.** Run:
+   `vybekiit feedback submit .vybekiit/feedback-drafts/<timestamp>.json --confirm`
+   GitHub may open once to confirm which paid buyer is reporting.
+   **Verify:** the command returns `{"ok":true,"reference":"FB-..."}`.
+
+5. **Record progress.** Add the safe reference to the Decision log and mark feedback sent in the
+   Progress section. Do not record the private issue URL or report body.
+   **Verify:** `checklist.md` contains only the safe reference.
+
+## If sending fails
+
+Say: *"Your note was not sent, but the safe draft is still saved. I can try again when you are
+ready."* Keep the draft. Do not fall back to `gh issue create`, `curl`, email, or another network
+service.
+
+## Definition of done
+
+The builder approved the exact safe preview, the command returned a feedback reference, and
+`checklist.md` records only that reference.

package/dist/global-skills/go-live/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: go-live
-description: the builder's app is online at a real web address that anyone can open. Use when the builder says something like: put it online; publish; make it live; ship it; deploy.
+description: "the builder's app is online at a real web address that anyone can open. Use when the builder says something like: put it online; publish; make it live; ship it; deploy."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/harden/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: harden
-description: the builder's app is protected against the common attacks every app faces — someone. Use when the builder says something like: lock down; make it safe; protect from abuse.
+description: "the builder's app is protected against the common attacks every app faces — someone. Use when the builder says something like: lock down; make it safe; protect from abuse."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/manifest.json

@@ -57,6 +57,7 @@
     "expo-ui",
     "expo-upgrade",
     "expo-web-to-native",
+    "feedback",
     "firebase-ai-logic-basics",
     "firebase-app-hosting-basics",
     "firebase-auth-basics",
@@ -121,5 +122,5 @@
     "wrangler",
     "xcode-project-setup"
   ],
-  "count": 120
+  "count": 121
 }

package/dist/global-skills/onboarding/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: onboarding
-description: take the builder from "I just bought this" to **their app running and visible in front of. Use when the builder says something like: set up my app; let's start; get me going; just bought.
+description: "take the builder from \"I just bought this\" to **their app running and visible in front of. Use when the builder says something like: set up my app; let's start; get me going; just bought."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/plan-my-idea/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: plan-my-idea
-description: help the builder figure out exactly what they want **before** you build — so the first. Use when the builder says something like: help me plan; figure out my idea; think it through; marketplace; like airbnb.
+description: "help the builder figure out exactly what they want **before** you build — so the first. Use when the builder says something like: help me plan; figure out my idea; think it through; marketplace; like airbnb."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/publish-app/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: publish-app
-description: the builder's app is **in the App Store and Google Play** for anyone to download. This is. Use when the builder says something like: put it online; publish; make it live; ship it; deploy; publish app.
+description: "the builder's app is **in the App Store and Google Play** for anyone to download. This is. Use when the builder says something like: put it online; publish; make it live; ship it; deploy; publish app."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/publish-extension/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: publish-extension
-description: the builder's extension is **listed in the Chrome Web Store** for anyone to install. Use when the builder says something like: put it online; publish; make it live; ship it; deploy; chrome store.
+description: "the builder's extension is **listed in the Chrome Web Store** for anyone to install. Use when the builder says something like: put it online; publish; make it live; ship it; deploy; chrome store."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/reset-password/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: reset-password
-description: people who forgot their password can get a reset link and set a new one. Use when the builder says something like: forgot password; reset password; lost password; change password email.
+description: "people who forgot their password can get a reset link and set a new one. Use when the builder says something like: forgot password; reset password; lost password; change password email."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/save-data/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: save-data
-description: the app can remember things — save information and read it back later. Use when the builder says something like: save my data; remember this; store info; add a database.
+description: "the app can remember things — save information and read it back later. Use when the builder says something like: save my data; remember this; store info; add a database."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/setup-email/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: setup-email
-description: the app can send emails — welcome notes, receipts, and sign-in codes. Use when the builder says something like: send emails; email my users; set up email.
+description: "the app can send emails — welcome notes, receipts, and sign-in codes. Use when the builder says something like: send emails; email my users; set up email."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/setup-payments/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: setup-payments
-description: the builder can take real money. By the end, a test purchase succeeds end-to-end. Use when the builder says something like: add payments; take money; sell something; charge people.
+description: "the builder can take real money. By the end, a test purchase succeeds end-to-end. Use when the builder says something like: add payments; take money; sell something; charge people."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/setup-sms/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: setup-sms
-description: text messages (and optional WhatsApp) work for sign-in codes and alerts. Use when the builder says something like: set up sms; text messages; twilio; whatsapp messages; send texts.
+description: "text messages (and optional WhatsApp) work for sign-in codes and alerts. Use when the builder says something like: set up sms; text messages; twilio; whatsapp messages; send texts."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/sign-in-with-email-link/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: sign-in-with-email-link
-description: people can sign in with a one-click email link (no password). Use when the builder says something like: magic link; email link sign in; sign in without password; passwordless email.
+description: "people can sign in with a one-click email link (no password). Use when the builder says something like: magic link; email link sign in; sign in without password; passwordless email."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/sign-in-with-google/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: sign-in-with-google
-description: people can tap **Continue with Google** — one button that signs them in **or** creates. Use when the builder says something like: sign in with google; continue with google.
+description: "people can tap **Continue with Google** — one button that signs them in **or** creates. Use when the builder says something like: sign in with google; continue with google."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/sign-in-with-phone/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: sign-in-with-phone
-description: people can sign in with a text message code. Use when the builder says something like: sign in with phone; text me a code; sms login; phone number login.
+description: "people can sign in with a text message code. Use when the builder says something like: sign in with phone; text me a code; sms login; phone number login."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/track-errors/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: track-errors
-description: the builder gets alerted when something breaks in their live app — without watching logs themselves. Use when the builder says something like: tell me when things break; error alerts; app crashes.
+description: "the builder gets alerted when something breaks in their live app — without watching logs themselves. Use when the builder says something like: tell me when things break; error alerts; app crashes."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/update-kit/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: update-kit
-description: get the latest kit improvements safely, without breaking the builder's app. Use when the builder says something like: update the kit; get the latest; upgrade.
+description: "get the latest kit improvements safely, without breaking the builder's app. Use when the builder says something like: update the kit; get the latest; upgrade."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/wire-auth/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: wire-auth
-description: people can sign in through this API (mobile/extension clients call these routes). Use when the builder says something like: sign in; log in; create accounts; add users; wire auth.
+description: "people can sign in through this API (mobile/extension clients call these routes). Use when the builder says something like: sign in; log in; create accounts; add users; wire auth."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/wire-database/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: wire-database
-description: the server remembers things persistently. Use when the builder says something like: save my data; remember this; store info; add a database; wire database.
+description: "the server remembers things persistently. Use when the builder says something like: save my data; remember this; store info; add a database; wire database."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/wire-email/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: wire-email
-description: send emails from the API. Use when the builder says something like: send emails; email my users; set up email; wire email.
+description: "send emails from the API. Use when the builder says something like: send emails; email my users; set up email; wire email."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/dist/global-skills/wire-payments/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: wire-payments
-description: the API can process payments for mobile/extension clients. Use when the builder says something like: add payments; take money; sell something; charge people; wire payments.
+description: "the API can process payments for mobile/extension clients. Use when the builder says something like: add payments; take money; sell something; charge people; wire payments."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vybekiit",
-  "version": "0.6.1",
+  "version": "0.7.2",
   "description": "Set up tools and create a VybeKiit app: `npx vybekiit setup` then `npx vybekiit create app --web`.",
   "license": "MIT",
   "publishConfig": {
@@ -23,19 +23,19 @@
     "effect": "3.21.4",
     "firebase-admin": "^13.0.2",
     "mongodb": "^7.4.0",
-    "open": "11.0.0"
+    "open": "11.0.0",
+    "@vybekiit/agent-kit": "0.7.2"
   },
   "devDependencies": {
     "@types/node": "22.20.0",
     "tsup": "8.5.1",
     "typescript": "5.7.2",
     "vitest": "3.2.6",
-    "@vybekiit/agent-kit": "0.6.1",
-    "@vybekiit/core": "0.6.1",
-    "@vybekiit/db": "0.6.1",
-    "@vybekiit/report-mode": "0.6.1",
-    "@vybekiit/deploy": "0.6.1",
-    "@vybekiit/payments": "0.6.1"
+    "@vybekiit/core": "0.7.2",
+    "@vybekiit/report-mode": "0.7.2",
+    "@vybekiit/db": "0.7.2",
+    "@vybekiit/deploy": "0.7.2",
+    "@vybekiit/payments": "0.7.2"
   },
   "scripts": {
     "build": "tsup && node scripts/bundleGlobalSkills.mjs",