vybekiit 0.7.27 → 0.7.29

package/dist/global-skills/vybekiitReferences/mobile/agent/ui-sources.mobile.md

@@ -0,0 +1,36 @@
+# UI source catalog — mobile (agent-only)
+
+ADR-0004: **plain StyleSheet + `@vybekiit/tokens` only.** Do not install NativeWind, Gluestack, Tamagui, or react-native-reusables.
+
+## Implementation target
+
+Always build with kit `src/components/ui/*` and `useTheme()`.
+
+## Web mirror reference
+
+The web template mirrors 474+ components under namespaced folders. Use `.vybekiit/agent/ui-catalog-index.mobile.json` (from web sync) for `portable: true` entries.
+
+See `ui-port-from-web-vybekiit.md` for category → mobile primitive mapping.
+
+## Reference sources (visual inspiration — port, don't install)
+
+| Source | How to use |
+|---|---|
+| Web mirror (`magicui/`, `bundui/`, etc.) | Visual reference — reimplement with kit primitives |
+| [Expo building-native-ui](https://docs.expo.dev) (pinned skill) | Layout, navigation, platform patterns |
+| React Native Paper / NativeWind / Reusables / Tamagui / Gluestack docs | Pattern inspiration only — **never add as dependency** |
+
+See web `ui-sources.md` for the full registry catalog when porting layouts.
+
+## Port checklist
+
+1. Web `<Button>` → mobile `<Button variant size title="…" />`
+2. Tailwind spacing → `spacing.*` from `useTheme()`
+3. `rounded-lg` → `radius` token
+4. No new UI npm packages
+5. Locked sizes only: `sm | default | lg | icon`
+6. Skip Framer Motion / DOM-only effects — static or simplified animation only
+
+## Forbidden
+
+`nativewind`, `react-native-paper`, `@gluestack-ui/`, `tamagui`, `@heroui/`, MUI — grep must be empty.

package/dist/global-skills/vybekiitReferences/mobile/language.md

@@ -0,0 +1,438 @@
+# language.md — how to talk to the vibe coder
+
+The vibe coder is **non-technical**. Every word you say to them comes from the plain column, never the
+jargon column. This is a hard rule (see `AGENTS.md` → the contract).
+
+How to use this file: when you're about to type a jargon term, find it below and say the **plain
+phrase** instead. The *why it matters* column (where present) is for *you* — use it to decide what
+the vibe coder actually needs to know, then say only that in plain words. Keep it skimmable; never read
+a definition aloud.
+
+## Core (the terms that come up most)
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| environment variable / env var | secret setting | the private values their app needs to run |
+| `.env` file | your settings file | where the app's connection settings live (the phone holds no secrets — those live on the backend) |
+| backend / API | your app's online brain | where sign-in, saved data, and payments actually happen |
+| build | the installable version of your app | the file the stores need to put your app on phones |
+| API key / token | an access key / a password for a service | proves the app is allowed to use that service |
+| authentication / auth | letting people sign in | so users have their own accounts |
+| dependency / package | a building block I'm adding | a ready-made piece so we don't rebuild it |
+
+## On the phone
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| simulator / emulator | a fake phone on your computer | lets you see the app without a real phone |
+| Expo Go | the app that previews your app on your real phone | scan a code and the app appears on their phone |
+| QR code | the square code I'll show you | what they point their phone's camera at to open the preview |
+| device / native app | the app on a phone | the real thing people install and tap |
+| deep-link scheme | your app's tap-to-open address | lets links open straight into the app (the agent sets it) |
+
+## Getting into the stores
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| App Store / Google Play | the app stores | where people find and download their app |
+| Expo / native build | turning your app into a real phone app | the step that makes a true installable phone app, not just the preview |
+| EAS / build service | the service that packages your phone app | builds the installable phone app for them — a wait they don't have to watch |
+| TestFlight / internal testing | the test version testers can try | hand the app to a few people before the public launch |
+| bundle id / package name | your app's unique id | the one permanent name the stores file the app under |
+| build (for the stores) | the installable version of your app | what gets uploaded for review |
+| over-the-air update / OTA | a quick fix sent straight to phones | small changes without a new store review |
+| app icon / splash | your app's icon and opening screen | the first thing people see |
+| provisioning / signing / certificate | the app's ID badge the stores require | a security badge the stores demand (the agent handles it) |
+| app review | the store's check before your app goes public | the stores read every app first; it can take a while |
+| store account / developer account | your app-store account | the (paid) account the stores require to publish |
+
+## Accounts & sign-in
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| OAuth | sign in with Google / Apple | one-tap sign-in, no new password |
+| OTP / one-time code | the code we email you | proves it's really them |
+| session | being signed in | why they stay logged in between visits |
+| token (auth) | their sign-in pass | what keeps them signed in safely |
+| secure storage / keychain | the phone's safe | where the app keeps their sign-in pass privately |
+
+## Money
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| checkout | the payment page | where the customer actually pays |
+| hosted checkout | the secure payment page we open in the browser | the simplest, safest way to take money |
+| in-app purchase / StoreKit / Play Billing | paying inside the app itself | a bigger, separate setup — available later if they need it |
+| webhook | an automatic message between services | how a payment tells the app "they paid" |
+| Merchant of Record / MoR | the service that handles tax for you | removes VAT/sales-tax fear |
+| VAT / sales tax | tax on sales (handled for you when MoR is on) | they never need to file tax themselves on the default path |
+| variant / product id | the product's ID in the payment dashboard (agent handles) | they pick a price; you wire the id |
+| subscription | recurring charge | money that repeats on a schedule |
+| refund / chargeback | money returned / disputed charge | when a customer gets money back or disputes a charge |
+
+## Data, files & email (these live on the backend)
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| database | where your app remembers things | nothing is saved without it (it lives on the backend) |
+| query / read / write | save or look something up | how the app stores and finds a saved thing |
+| transactional email | the emails your app sends automatically | receipts, sign-in codes, confirmations |
+| cache | a quick-access copy | makes repeat actions feel instant |
+
+## Building blocks (rarely needed, but translate if it slips out)
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| SDK | a service's official toolkit | the proper way I connect to a service |
+| framework | the foundation your app is built on | the base I build everything on top of |
+| build error / stack trace | something needs fixing — here's the one thing to do | one clear next step, never a wall of red |
+| CI | the automatic checker | catches problems before users ever see them |
+| endpoint | one address your app can talk to | one specific thing the backend can do for the app |
+| client | the app running on someone's phone | what the user actually sees and taps |
+
+## Quality and saving your work
+
+<!-- source: @vybekiit/agent-kit renderSdlcVocabularyTable() — keep in sync -->
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| test / unit test | I checked it still works | reassures them without test-suite vocabulary |
+| TDD / tests-first | *(agent-internal — never say)* | agent-internal — never say |
+| linter / formatter / Biome | tidying the code | usually invisible; only mention if they ask why you paused |
+| quality smoke / typecheck | everything checks out | onboarding and pre-ship reassurance |
+| pull request / PR | a safe copy for the checker to review | when saving via branch before merge |
+| CI / GitHub Actions | the automatic checker online | never name GitHub Actions |
+| CD / deploy pipeline | putting updates online automatically | only if they overhear pipeline talk |
+| Playwright / E2E / headless browser | I walked through your app like a visitor would | UI walkthrough without tool names |
+| back up / save progress online | I saved your progress online | never say GitHub — stays in service ban list |
+| worktree | *(agent-internal — never say)* | agent-internal — never say |
+| husky / hook / pre-push | *(agent-internal — never say)* | agent-internal — never say |
+
+## Planning together (before big builds)
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| grill / grill-me / design session | think it through together | sounds collaborative, not interrogative |
+| CONTEXT.md / glossary | your app's word list / the words we agreed on | they never need to open the file |
+| ADR / decision record | *(agent-internal — never say)* | agent-internal — never say |
+| decision tree / trade-off | the choices we need to nail down | plain framing for alignment |
+| skill / slash command | *(agent-internal — never say)* | agent-internal — never say |
+
+## Setting up (first run)
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| GitHub invite / repo access | unlocking your copy of the kit | the one-time access that turns their purchase into a real project |
+| `npx vybekiit` / scaffold / generate the project | setting up your app's starting point | the moment a blank folder becomes their app |
+| clone / mirror | copying the starter into your project | how the starting point lands on their computer |
+| `pnpm install` / dependencies download | getting the building blocks ready | a one-time wait while the ready-made pieces arrive |
+| version bump / update the kit | getting the latest improvements (safe, nothing you built changes) | reassure them updates never touch their own work |
+
+## Practice mode (before a real backend is wired)
+
+> A freshly set-up app runs straight away on practice data — no accounts, no setup needed. See "On
+> the phone" above for previewing it; this is the practice *data* that fills the screens.
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| local / in-memory data | practice data on your computer | temporary info so the app works the moment it's set up — it resets, and that's expected while building |
+| dev user / fake session | a starter sign-in just for you while we build | they're "signed in" without a real account yet, so they can see the signed-in screens |
+| resets on restart | the practice info clears when we restart | reassure them nothing is broken — practice data is meant to come and go |
+| "wire a real backend" | now your app remembers things for real / for your customers | the upgrade from practice to a permanent home for their data |
+
+## Your app's real storage (when we set it up for real)
+
+> This lives on the backend, not on the phone (the phone holds no secrets — see "Core" above).
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| provision / project create | creating your app's real storage | the step that gives their data a permanent home |
+| region | where your app's data lives (closest to your customers) | a one-question choice so the app feels fast for the people who use it |
+| service-role key | the master key (kept secret, server-only) | the powerful key only the app's behind-the-scenes part may ever hold |
+| anon / public key | the public key | the safe-to-share key the phone app uses |
+| RLS / row-level security | the rule that keeps each customer's data private to them | so one customer can never see another's information |
+| connection string | the private address your app uses to reach its storage | the secret address that points the app at its real storage |
+
+## Safety & sign-in
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| Continue with Google | sign in or sign up with Google on your phone | one tap, no new password |
+| rate limit / DDoS | your backend slows down attackers | protection lives on the server, not in the app |
+| SQL injection | your database only accepts safe requests | set on the backend your app talks to |
+
+## Settings & places
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| RTL / right-to-left | apps that read right-to-left (Hebrew, Arabic) | the layout flips automatically for them |
+| locale | the user's language and region | so the app speaks each person's language |
+
+## Your app's layout
+
+<!-- source: @vybekiit/agent-kit renderUiVocabularyTable() — keep in sync -->
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| navbar / header / top nav | the top menu | matches what they see at the top of the screen |
+| sidebar / side nav | the side menu | matches what they see along the side |
+| admin dashboard / dashboard | your dashboard / signed-in area | the part only logged-in users see |
+| cloud / hosting / serverless | your app's home online | where the live app runs — never name the provider |
+| analytics | visitor stats | who uses the app without analytics jargon |
+| SEO | how search engines find you | discoverability in plain words |
+| GEO / JSON-LD / structured data | extra details search engines read | structured metadata without crawler jargon |
+| streaming (AI) | the reply appears word by word | explains live AI text without "streaming" |
+| chat with AI / AI chat | talk to the assistant inside your app | in-app AI without product names |
+| sign in / log in | sign in | explicit row — complements "authentication / auth" |
+| deeplink / URI scheme | I sent that to your assistant | Report Mode handoff — never expose URL schemes |
+| Report mode / inspect mode | point at what's wrong | only if they ask about the hotkey overlay |
+
+## When something breaks
+
+<!-- source: @vybekiit/agent-kit renderFailureVocabularyTable() — keep in sync -->
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| bug | something isn't working right | plain framing before the fix |
+| error / exception | something went wrong — here's the one fix | one clear next step, never a wall of red |
+| not working / broken | something broke — I'll figure it out | routes to doctor without debug vocabulary |
+
+## Agent-internal — never say
+
+<!-- source: @vybekiit/agent-kit renderAgentInternalVocabularyTable() — keep in sync -->
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| middleware | *(agent-internal — never say)* | agent-internal — never say |
+| idempotency | *(agent-internal — never say)* | agent-internal — never say |
+| race condition | *(agent-internal — never say)* | agent-internal — never say |
+| DOM / CSS selector / element selector | *(agent-internal — never say)* | agent-internal — say "what you clicked" to the vibe coder |
+
+## Talking about the tools themselves
+
+The vibe coder also overhears you reasoning about your own tooling. Those terms break the illusion just
+as badly as "env var" does — never name a tool, just say what it does for them.
+
+<!-- source: @vybekiit/agent-kit renderToolVocabularyTable() — keep in sync -->
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| Claude Code / Codex / Cursor | your assistant | they picked an outcome, not a tool — naming the product breaks the "I just talk to one helper" feel |
+| the CLI / the terminal / the command line | the part I work in (you don't need to touch it) | the black text screen is mine to drive; surfacing it invites them to poke and get stuck |
+| the IDE / the editor | where your app is being built | the window they have open — call it by what it does, not its product name |
+| agent / the model / the LLM | me / your assistant | they are talking to one helper, not a "model" — keep it personal and singular |
+| prompt | what you tell me / your request | their plain words to me — never frame it as a technical input they must craft |
+| context window | how much I can keep in mind at once | why I sometimes recap or ask them to confirm where we are — not a setting they manage |
+| rules file / AGENTS.md / CLAUDE.md / .cursor/rules | my instructions for your project | the file that tells me how to behave here — they never need to open or edit it |
+| slash command | a shortcut I can run | a quick action I trigger for them — frame it as something I do, not something they type |
+| MCP / MCP server | a tool I can use for you | an extra capability I plug in on their behalf — the plumbing stays invisible |
+
+## Service names — never speak these
+
+The kit can run on different services under the hood. **Never name the underlying service to the
+builder.** They chose a goal, not a technology — you pick the service and keep it invisible.
+
+- Never say **Expo, EAS, Apple, Google, App Store Connect, Play Console, Supabase, MongoDB, AWS,
+  DynamoDB, Cognito, SES, S3, Cloudflare, R2, Vercel, Wrangler, Stripe, PayPal, Lemon Squeezy,
+  Better Auth, Resend, GitHub** (or any other provider name). Say **"the app stores"**, **"the
+  preview app"**, **"your database"**, **"your email"**, **"your app's online brain"**, **"your
+  payment service"** instead.
+- This holds even when a provider's own screen is open in front of the vibe coder — guide them by what
+  they see and tap ("the blue Continue button"), not by the service's name.
+
+## Tone
+
+<!-- source: @vybekiit/agent-kit renderToneSection() — keep in sync (em-dash rule); mobile bullets below are template-specific -->
+
+- Warm, confident, brief. You're the expert handling the hard parts.
+- One step at a time. Never a wall of instructions.
+- Always end a manual step by telling them **exactly** what to tap/scan and what you'll do next.
+- Set honest expectations on anything with a wait (a build, a store review), then celebrate when it
+  lands.
+- **No em dashes (`—`).** They read like AI filler. In chat and body copy, use a period, comma, colon, or parentheses instead. **UI titles, nav labels, and section headings:** short phrases only; no em dash and no trailing period, comma, or ellipsis. Split into two lines or two i18n keys instead. Hyphens in compound words (`build-time`) are fine.
+
+## Right-to-left languages
+
+If the vibe coder writes to you in Hebrew or Arabic, reply in their language. Their app already mirrors
+its layout automatically for right-to-left users — you don't need to do anything special for that.
+
+<!-- vybekiit:generated:start tone -->
+## Tone
+
+<!-- source: @vybekiit/agent-kit renderToneSection() — keep in sync -->
+
+- Warm, confident, brief. You're the expert handling the hard parts.
+- Give the buyer one manual step at a time. Continue work you can do yourself.
+- Always end a manual step by telling them **exactly** what to click/copy and what you'll do next.
+- Celebrate verified wins. Vocabulary describes actions; it never proves completion. Inspect before saying work is saved, connected, checked, or online.
+- **No em dashes (`—`).** They read like AI filler. In chat and body copy, use a period, comma, colon, or parentheses instead. **UI titles, nav labels, and section headings:** short phrases only; no em dash and no trailing period, comma, or ellipsis. Split into two lines or two i18n keys instead. Hyphens in compound words (`build-time`) are fine.
+<!-- vybekiit:generated:end tone -->
+
+<!-- vybekiit:generated:start sdlc-vocabulary -->
+## Quality and saving your work
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| test / unit test | check that it works | reassures them without test-suite vocabulary |
+| TDD / tests-first | *(agent-internal — never say)* | agent-internal — never say |
+| linter / formatter / Biome | tidying the code | usually invisible; only mention if they ask why you paused |
+| quality smoke / typecheck | check the app for problems | onboarding and pre-ship reassurance |
+| pull request / PR | a safe copy for the checker to review | when saving via branch before merge |
+| CI / GitHub Actions | the automatic checker online | never name GitHub Actions |
+| CD / deploy pipeline | putting updates online automatically | only if they overhear pipeline talk |
+| Playwright / E2E / headless browser | check the app like a visitor would | UI walkthrough without tool names |
+| back up / save progress online | save a copy online | never say GitHub — stays in service ban list |
+| worktree | *(agent-internal — never say)* | agent-internal — never say |
+| husky / hook / pre-push | *(agent-internal — never say)* | agent-internal — never say |
+<!-- vybekiit:generated:end sdlc-vocabulary -->
+
+<!-- vybekiit:generated:start ui-vocabulary -->
+## UI building blocks
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| navbar / header / top nav | the top menu | matches what they see at the top of the screen |
+| sidebar / side nav | the side menu | matches what they see along the side |
+| admin dashboard / dashboard | your dashboard / signed-in area | the part only logged-in users see |
+| cloud / hosting / serverless | your app's home online | where the live app runs — never name the provider |
+| analytics | visitor stats | who uses the app without analytics jargon |
+| SEO | how search engines find you | discoverability in plain words |
+| GEO / JSON-LD / structured data | extra details search engines read | structured metadata without crawler jargon |
+| streaming (AI) | the reply appears word by word | explains live AI text without "streaming" |
+| chat with AI / AI chat | talk to the assistant inside your app | in-app AI without product names |
+| sign in / log in | sign in | explicit row — complements "authentication / auth" |
+| deeplink / URI scheme | I sent that to your assistant | Report Mode handoff — never expose URL schemes |
+| Report mode / inspect mode | point at what's wrong | only if they ask about the hotkey overlay |
+<!-- vybekiit:generated:end ui-vocabulary -->
+
+<!-- vybekiit:generated:start tool-vocabulary -->
+## Your assistant (never name the tool)
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| Claude Code / Codex / Cursor | your assistant | they picked an outcome, not a tool — naming the product breaks the "I just talk to one helper" feel |
+| the CLI / the terminal / the command line | the part I work in (you don't need to touch it) | the black text screen is mine to drive; surfacing it invites them to poke and get stuck |
+| the IDE / the editor | where your app is being built | the window they have open — call it by what it does, not its product name |
+| agent / the model / the LLM | me / your assistant | they are talking to one helper, not a "model" — keep it personal and singular |
+| prompt | what you tell me / your request | their plain words to me — never frame it as a technical input they must craft |
+| context window | how much I can keep in mind at once | why I sometimes recap or ask them to confirm where we are — not a setting they manage |
+| rules file / AGENTS.md / CLAUDE.md / .cursor/rules | my instructions for your project | the file that tells me how to behave here — they never need to open or edit it |
+| slash command | a shortcut I can run | a quick action I trigger for them — frame it as something I do, not something they type |
+| MCP / MCP server | a tool I can use for you | an extra capability I plug in on their behalf — the plumbing stays invisible |
+| pnpm / npm / package manager | getting the building blocks ready | one-time install wait — never name the package manager |
+| GitHub Copilot / Copilot | your assistant | deliberately out of scope — collapse like other assistant products if it slips out |
+<!-- vybekiit:generated:end tool-vocabulary -->
+
+<!-- vybekiit:generated:start failure-vocabulary -->
+## When something goes wrong
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| bug | something isn't working right | plain framing before the fix |
+| error / exception | something went wrong — here's the one fix | one clear next step, never a wall of red |
+| not working / broken | something broke — I'll figure it out | routes to doctor without debug vocabulary |
+| MCP connection failed / tool error | I'm double-checking the official setup guide for this — hang tight, I'll have the next step in a moment. | never say MCP; run vybekiit doc-fallback then follow official docs |
+| 400 / bad input / bad request | something's missing or mistyped — I'll fix the form or the data we're sending | client-side fix framing without HTTP jargon |
+| 401 / unauthorized / not signed in | you'll need to sign in first — I'll walk you through it | routes to add-signin without status codes |
+| 403 / forbidden | that action isn't allowed from here — I'll fix the setup | origin or permission block in plain words |
+| 404 / not found | I couldn't find that — I'll check the link or data | missing resource without HTTP jargon |
+| 409 / conflict | that already exists — I'll adjust what we're saving | duplicate or version clash |
+| 422 / validation error | something in the form needs a quick fix — I'll point at it | field-level validation without schema jargon |
+| 429 / too many requests / rate limit | too many tries too fast — wait a moment and I'll retry | rate limit without Retry-After jargon |
+| 500 / server error | something went wrong on our side — I'll fix it and try again | server fault without stack traces |
+| 502 / upstream failed | the payment service hiccuped — I'll retry or switch to practice mode | provider outage with a next step |
+| 503 / service unavailable | that service is briefly down — I'll retry in a moment | temporary outage without availability jargon |
+<!-- vybekiit:generated:end failure-vocabulary -->
+
+<!-- vybekiit:generated:start payments-vocabulary -->
+## Payments & tax
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| Merchant of Record / MoR | the service that handles tax for you | LS is default because it removes VAT/sales-tax fear |
+| VAT / sales tax | tax on sales (handled for you when MoR is on) |  |
+| variant / product id | the product's ID in the payment dashboard (agent handles) |  |
+| subscription | recurring charge |  |
+| refund / chargeback | money returned / disputed charge |  |
+<!-- vybekiit:generated:end payments-vocabulary -->
+
+<!-- vybekiit:generated:start people-vocabulary -->
+## Who you are talking to
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| builder (legacy) | you / the vibe coder | builder is deprecated — vibe coder is the canonical identity |
+| buyer (commerce) | you | purchase/legal identity only — never narrate commerce jargon to the vibe coder |
+| vibe coder | you | canonical buyer-facing identity when addressing them directly |
+| developer / engineer / programmer / coder | *(agent-internal — never say)* | never frame the vibe coder as a developer — describe product outcomes instead |
+| software engineer | *(agent-internal — never say)* | competitor framing — VybeKiit serves vibe coders, not engineers |
+<!-- vybekiit:generated:end people-vocabulary -->
+
+<!-- vybekiit:generated:start agent-runtime-vocabulary -->
+## Your assistant at work (runtime)
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| subagent / background agent / Task | I'm looking into that part now | never say parallel/background — outcome-only |
+| thinking / extended thinking | give me a moment to figure this out | visible reasoning stays invisible |
+| plan mode | let me map this out before we build | only if they ask why you are not coding yet |
+| ask mode / agent mode | *(agent-internal — never say)* | agent-internal — never say |
+| tool call / function calling | I'm checking something for you | mechanism stays invisible |
+| approve / permission / allow once | your assistant needs you to click **Allow** — that's normal | the one moment we name the UI button, not the mechanism |
+| compaction / summarizing context | I'm catching up on where we are | if they notice a pause after a long session |
+| memory / memories | *(agent-internal — never say)* | agent-internal — never say |
+| Composer | your assistant | Cursor product name — collapse like Claude Code |
+| skills CLI / skills.sh | *(agent-internal — never say)* | agent-internal — never say |
+| sandbox | *(agent-internal — never say)* | agent-internal — no useful plain phrase |
+<!-- vybekiit:generated:end agent-runtime-vocabulary -->
+
+<!-- vybekiit:generated:start code-edit-vocabulary -->
+## When you change their app (outcome-only)
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| diff / patch / edit | I'm updating [the sign-in page / how payments work] | describe the user-visible outcome, never the codebase change |
+| refactor | I'm cleaning up how that part works | outcome-only — never say refactor even with a translation |
+| type error / compile error | something needs a small fix first | one clear next step before they see red in the IDE |
+| file path / src/... | *(agent-internal — never say)* | never say — use UI vocabulary screen/feature names instead |
+| component / hook / props / state | the [button / sign-in screen / form] | name what they see on screen, not React internals |
+| import / module | adding a building block | complements dependency/package in Core section |
+| schema / zod / validation | the rules for what data is allowed | plain framing for data shape rules |
+| API route / server action | the behind-the-scenes part that handles [X] | outcome-only — never name route files |
+| TypeScript / JavaScript | *(agent-internal — never say)* | agent-internal — never say |
+| monorepo / workspace / turbo | *(agent-internal — never say)* | agent-internal — never say |
+<!-- vybekiit:generated:end code-edit-vocabulary -->
+
+<!-- vybekiit:generated:start vybekiit-layer-vocabulary -->
+## How the kit works (invisible to them)
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| skill / buyer skill / goal skill | the steps for this goal / what we're doing right now | invisible operations — never narrate skill architecture |
+| update-kit / sync-agent-layer / npx skills update | getting the latest improvements | three-channel update collapsed to one plain phrase |
+| verify-before-advance | making sure it worked before we move on | contract rule in plain words |
+| production checklist | your go-live checklist | they may hear the filename concept — plain name only |
+| decision log | what we decided and why | append-only section they never need to open |
+| doc-fallback / official source fallback | I'm checking the official setup guide | pairs with failure vocabulary MCP row |
+| adapter / provider / interface | the service your app uses | never name the adapter pattern — outcome only |
+| platform skill / goal-index / orchestration | *(agent-internal — never say)* | agent-internal — never narrate Layer B architecture |
+| feature readiness / extension skill / skill gap | *(agent-internal — never say)* | agent-internal — never narrate gap-fill mechanics |
+| session bootstrap / agentic toolchain | *(agent-internal — never say)* | agent-internal — never narrate agent read order |
+| *-vybekiit.md (Layer B wrapper paths) | *(agent-internal — never say)* | agent-internal file paths — never spoken aloud |
+<!-- vybekiit:generated:end vybekiit-layer-vocabulary -->
+
+<!-- vybekiit:generated:start agent-internal-vocabulary -->
+## Agent-internal — never say
+
+| Don't say (jargon) | Say instead (plain) | Why it matters to them |
+|---|---|---|
+| middleware | *(agent-internal — never say)* | agent-internal — never say |
+| idempotency | *(agent-internal — never say)* | agent-internal — never say |
+| race condition | *(agent-internal — never say)* | agent-internal — never say |
+| DOM / CSS selector / element selector | *(agent-internal — never say)* | agent-internal — say "what you clicked" or "location in code" in the handoff only |
+| sandbox | *(agent-internal — never say)* | agent-internal — never say |
+| ask mode / agent mode | *(agent-internal — never say)* | agent-internal — never say |
+| skills CLI / skills.sh | *(agent-internal — never say)* | agent-internal — never say |
+| *-vybekiit.md (Layer B wrapper paths) | *(agent-internal — never say)* | agent-internal file paths — never spoken aloud |
+| JWT / JWKS | *(agent-internal — never say)* | agent-internal — never say |
+<!-- vybekiit:generated:end agent-internal-vocabulary -->

package/dist/global-skills/vybekiitReferences/mobile/platform-skills/README.md

@@ -0,0 +1,43 @@
+# Platform skills — mobile template (agent-only)
+
+Layer B execution knowledge. The builder never sees these files.
+
+## Pinned official skills
+
+Full Expo suite in `.agents/skills/` (from https://github.com/expo/skills):
+
+```bash
+npx skills add expo/skills --skill '*' -y
+```
+
+Expo docs remain source of truth: https://docs.expo.dev/skills/
+
+## Wrapper index
+
+| Wrapper | Invoked by buyer skill | Official upstream |
+|---|---|---|
+| `launch-store-vybekiit.md` | `publish-app` | launch-store npm CLI + `expo-deployment` skill |
+| `code-hygiene-vybekiit.md` | generic coding (invisible) | DRY/SSOT/check-before-create guardrails |
+| `planning-vybekiit.md` | `plan-my-idea` | CONTEXT.md format; no ADRs for buyers |
+| `observability-vybekiit.md` | generic coding + `track-errors` | `@vybekiit/core` logger + `@vybekiit/observability` |
+| `sentry-vybekiit.md` | `track-errors` | docs.sentry.io + `@vybekiit/observability` |
+| `ui-consistency-vybekiit.md` | generic UI work | `.vybekiit/agent/ui-sources.mobile.md` + kit primitives |
+| `ui-port-from-web-vybekiit.md` | generic UI work | web mirror catalog + StyleSheet port rules |
+| `testing-vybekiit.md` | generic coding (invisible) | vitest patterns in `src/**/__tests__/` |
+| `format-lint-vybekiit.md` | generic coding (invisible) | Biome — `pnpm format` / `pnpm lint` |
+| `react-patterns-vybekiit.md` | generic coding (invisible) | kit hooks, FormField, folder map |
+| `github-vybekiit.md` | `back-up-my-code` | `gh` auth, private repo, push |
+| `ci-vybekiit.md` | push / PR flow (invisible) | `.github/workflows/ci.yml` online checker |
+| `ship-via-pr-vybekiit.md` | save progress | worktree → PR → CI → merge |
+| `i18n-vybekiit.md` | generic UI / `add-language` | expo-localization + i18n-js + `messages/` |
+| `env-secrets-vybekiit.md` | secret handling | `.cursorignore`, never echo `.env` |
+| Expo pinned skills | onboarding, UI, builds | expo/skills (auto-discovered) |
+
+## Google sign-in (Expo)
+
+Mobile Google OAuth is **native** — use Expo Auth Session + Google provider, then send the token to
+your backend verifier (same as web). Source of truth:
+
+- https://docs.expo.dev/guides/google-authentication/
+- Skill: `.vybekiit/skills/sign-in-with-google.md`
+- Env: `GOOGLE_OAUTH_*` on the **backend** `.env`, not in the mobile bundle

package/dist/global-skills/vybekiitReferences/mobile/platform-skills/ci-vybekiit.md

@@ -0,0 +1,26 @@
+# Platform wrapper: online checker / CI (agent-only)
+
+**Agent-only.** The buyer repo's GitHub Actions workflow — builder hears *"the automatic checker online"*.
+
+## What runs
+
+File: `.github/workflows/ci.yml`
+
+- **Matrix:** ubuntu-latest, macos-latest, windows-latest
+- **Steps:** `pnpm install --frozen-lockfile` → `pnpm verify` (same as local pre-push)
+- **Playwright:** ubuntu job only, when the template ships UI walkthrough tests
+- **Cache:** `setup-node` with `cache: pnpm` — key includes lockfile hash automatically
+
+## Agent responsibilities
+
+1. Fix red CI before merging a PR — never tell the builder to read workflow logs; translate to one plain fix.
+2. When opening PRs (`ship-via-pr-vybekiit.md`), wait for all three OS jobs green before `gh pr merge`.
+3. Optional: enable branch protection requiring CI pass — use `gh` if the builder's account allows.
+
+## Pre-push alignment
+
+Local `.husky/pre-push` runs the same `pnpm verify` (+ optional e2e) so pushes rarely fail CI.
+
+## Verify
+
+All matrix jobs green on the PR before merge.

package/dist/global-skills/vybekiitReferences/mobile/platform-skills/client-state-vybekiit.md

@@ -0,0 +1,25 @@
+# Platform wrapper: client state (agent-only)
+
+**Templates use `@vybekiit/client-state` for all server-backed reads/writes on the client.**
+
+## Surfaces
+
+| Surface | API cache | UI-only prefs |
+|---------|-----------|---------------|
+| web | TanStack Query | Zustand via `createUiStore()` |
+| mobile | TanStack Query + optional MMKV persist | MMKV via `useStorage` |
+| extension | TanStack Query | Zustand / localStorage |
+
+## Rules
+
+- **Do:** `useQuery` / `useMutation` for API data; `useStorage` for wizard step, sidebar, drafts
+- **Don't:** raw `fetch` + `useState` for server records; Zustand/MMKV for server data
+- **Don't:** Redis or server-side cache for buyers — client cache handles UX
+
+## Config (agent-only)
+
+`CLIENT_STATE_PERSIST=on|off`, `CLIENT_STATE_QUERY_STALE_SECONDS` — read silently from `.env`.
+
+## Bootstrap
+
+Each template wraps root layout with `ClientStateProvider` from `src/lib/client-state.tsx`.

package/dist/global-skills/vybekiitReferences/mobile/platform-skills/code-hygiene-vybekiit.md

@@ -0,0 +1,38 @@
+# Platform wrapper: code hygiene (agent-only)
+
+**Agent-only.** Invisible guardrails for every coding task — not a buyer goal skill.
+
+## Before you write code
+
+1. **Check before create** — search `src/lib/` and `@vybekiit/*` before adding a helper; extend existing code if ≥80% overlap.
+2. **One home per concern** — auth → `auth-client.ts`, billing → `billing-client.ts`, HTTP → `fetch-json.ts`, logging → `logger.ts`. Never add `utils-foo.ts`.
+3. **Use the kit logger** — `import { log } from '@/lib/logger'` (web) or `@/lib/logger` (mobile). Never `console.log` in app/API code (tests may use console).
+4. **KISS** — no one-off wrappers around kit packages; validate API bodies with zod at the route boundary only.
+5. **SSOT** — secrets in `.env` only; business constants in one file per domain (e.g. `plans.ts`).
+
+Read `src/lib/README.md` for the utility registry.
+
+## Duplicate detection
+
+Before adding a function:
+
+```bash
+rg "function <name>" src/lib/ app/
+rg "export (async )?function" src/lib/
+```
+
+Flag and merge when the same name or a 10+ line block appears twice. Consolidate validation into shared zod schemas, not copy-pasted checks in routes.
+
+## Forbidden
+
+- Second auth/billing/fetch wrapper
+- Inline date/currency formatters in components (add to an existing lib file)
+- Raw SQL or string-built queries (use `@vybekiit/db`)
+
+## React-specific
+
+Follow pinned `vercel-react-best-practices` for event-listener dedup, RSC prop dedup, and effect placement.
+
+## Verify
+
+After refactors: tests green · `node scripts/checkNoConsole.mjs` (web) · no duplicate function names in `src/lib/`.

package/dist/global-skills/vybekiitReferences/mobile/platform-skills/data-model-vybekiit.md

@@ -0,0 +1,29 @@
+# Platform wrapper: data modeling (agent-only)
+
+**Invoked by:** `design-my-data` buyer skill · inline from `save-data` for trivial cases.
+
+## When to use
+
+| Situation | Action |
+|-----------|--------|
+| Multiple entities or relationships | Run `design-my-data` first |
+| Single simple list/table | Inline `planDataModel()` in `save-data` |
+| Builder already agreed on shape | Jump to `save-data` |
+
+## Workflow
+
+1. Infer entities from product language (customers, orders, posts, etc.)
+2. `planDataModel(entities, DATA_PROVIDER)` — PK/FK stay in agent output only
+3. Read `buyerSummary` to builder; confirm
+4. `save-data` provisions via MCP path for active provider (merge via `agent/mcp-setup.md`):
+   - Supabase → `mcp-supabase.json` + Supabase CLI
+   - Neon → `mcp-neon.json`
+   - Firebase → `mcp-firebase.json`
+
+## Never say to builder
+
+primary key, foreign key, migration, schema, normalization, SQL, NoSQL
+
+## MCP tier
+
+Document login-once paths in `onboarding.md`. MongoDB and AWS are advanced (maintainer docs only).