vybekiit 0.7.27 → 0.7.29

package/dist/global-skills/vybekiitReferences/web/agent/session-bootstrap.md

@@ -0,0 +1,44 @@
+# Session bootstrap (agent-only)
+
+<!-- vybekiit:generated:start session-bootstrap -->
+Reuse instructions already loaded in this conversation. Simple questions need brief answers, not setup. Inspect before project-specific claims; execute requests for work.
+
+## Read order (when needed)
+
+1. `AGENTS.md` (contract)
+2. `.vybekiit/agent/session-bootstrap.md` (this file)
+3. `.vybekiit/agent/goal-index.md` → pick the matching skill (merge rows from `.vybekiit/extensions/goal-index.md` when present)
+4. Routine coding needs no new skill. Consult a platform wrapper only for the capability being changed; extend capabilities only for a real uncovered integration.
+5. Follow the skill exactly; use `language.md` for voice
+6. On skill complete: append one entry to `checklist.md` Decision log via `formatChecklistEntry()`
+7. Stuck on an integration after one MCP or debug attempt: `vybekiit doc-fallback <tech-id>` and tell the builder the plain stuck phrase only
+
+## Persistent features
+
+- For booking, payments, membership, and shared information: inspect the app and authorized connection, discover relevant presets, identify only missing behavior, review and apply migrations, wire existing adapters, then verify persistence, authorization, and concurrency.
+- Use the preset catalog matching skills, dependencies, versions, and provider requirements. A missing dedicated skill does not mean a capability is missing: inspect `vybekiit list-presets` before proposing custom storage or a different product. Load relevant manifests once; do not reload the entire catalog or unrelated integrations each turn.
+- Ordinary product intent authorizes ordinary implementation choices. Continue without asking the builder to design tables or reconfirm their request. Ask only for a missing product decision or a genuinely missing access step.
+- Store app-specific manifests and generated SQL under `.vybekiit/extensions/database/`. Use the same preset contract and `apply-preset <id> --manifest=<path>`; register extension table names with the selected relational adapter. Existing generic collections stay unchanged.
+- Read structured upgrade diagnostics before using `--upgrade`. Existing nulls, duplicates, incompatible definitions, or drift block the change. Preserve every existing row; never delete projects to free capacity. Never read or write a preset table before `verify-presets` shows its preset applied.
+- Reuse `booking` for capacity and cancellation and `organizations` for membership. One business owns its schedule: identify its owner with the app's existing admin check, never an organization per account. Only the owner and permitted staff create or change classes; students browse and book without an organization of their own. Call `reserveBooking` and `cancelBooking` through the selected data adapter, supplying the verified session identity from the server. Report what they return: a cancellation that changed nothing is not a success. Show remaining places from every student's active reservations without revealing who booked. Named staff roles are server-controlled permissions stored as memberships of the business's organization: use the tenancy provider's `inviteMember`, `updateMemberRole`, and `listMembers` (`organization_members.role`) and check them on the server next to the admin check. A super moderator is not a database administrator and cannot change roles without an explicit permission.
+- A browser-only or in-memory demonstration is a preview. It cannot complete a shared booking, payment, or membership request. Structural verification is separate from behavioral evidence; test unauthorized access, cross-organization access, duplicate requests, and simultaneous reservations against the running app with separate owner and student sign-ins. Install missing dependencies and start the app yourself, then check every new or changed permission with real sign-ins against the running app. Tests against mocked data are not behavioral evidence.
+- Record preset versions, extension paths, migration checksums, remaining limitations, and verification evidence in checklist.md Progress and Decision log. Resume from that evidence when asked where things stand.
+
+## Quiet process lifecycle
+
+- Execute ordinary commands with your own shell tool. Never open a terminal window or tab, invoke a terminal app, or ask the builder to run a command just to keep work visible.
+- Before starting a server or watcher, check its health URL or port and your current background tasks. Reuse a matching process that is already running.
+- Run long-lived servers and watchers with the agent's native background-task support. Keep the returned task handle and use it to read output, stop, or restart that process.
+- Keep at most one process per app service. Stop the tracked process before replacing it when a real restart is required.
+- Use bounded commands for tests and logs. Do not use watch mode for one-time checks.
+
+## Project skill discovery
+
+- Auto-discovered Agent Skills: `.agents/skills/<goal>/SKILL.md` (Cursor + Claude via `.cursor/skills` / `.claude/skills` symlinks; Codex when project skills are enabled).
+- Authoring fallback: `.vybekiit/skills/<goal>.md` (same body; used when a goal-index row is opened explicitly).
+- First-party MCP catalog (agent-only): `.agents/skills/use-kit-mcp/SKILL.md` and `.vybekiit/platform-skills/mcp-tools-vybekiit.md` — also via MCP `get_skill` / `list_platform_skills` / `search_skills` ("mcp tools").
+- Do not invent skills outside those folders or the buyer-owned `.vybekiit/extensions/` tree.
+
+Buyer-owned files you may append to (never delete): `checklist.md` Decision log, `CONTEXT.md` app glossary, `.vybekiit/extensions/**` (extension skills).
+Machine-global skills live in tool-specific paths (see `extend-capabilities-vybekiit.md`); tools auto-discover them.
+<!-- vybekiit:generated:end session-bootstrap -->

package/dist/global-skills/vybekiitReferences/web/agent/tech-references.md

@@ -0,0 +1,28 @@
+# Official tech references (agent-only)
+
+<!-- vybekiit:generated:start tech-references -->
+# Official tech references (agent-only)
+
+When MCP or first-pass debug fails, run `vybekiit doc-fallback <id>` and follow these URLs.
+
+| id | Docs | MCP | Env keys |
+|---|---|---|---|
+| better-auth | https://www.better-auth.com/docs | — | AUTH_PROVIDER, BETTER_AUTH_SECRET, BETTER_AUTH_URL, DATABASE_URL |
+| twilio | https://www.twilio.com/docs | https://mcp.twilio.com/docs | TWILIO_ACCOUNT_SID, TWILIO_AUTH_TOKEN, TWILIO_FROM_NUMBER, TWILIO_VERIFY_SERVICE_SID |
+| twilio-whatsapp | https://www.twilio.com/docs/whatsapp | https://mcp.twilio.com/docs | TWILIO_WHATSAPP_FROM |
+| supabase | https://supabase.com/docs | — | SUPABASE_URL, SUPABASE_ANON_KEY, SUPABASE_PUBLISHABLE_KEY, SUPABASE_SERVICE_ROLE_KEY, SUPABASE_SECRET_KEY, DATABASE_URL |
+| stripe | https://docs.stripe.com | — | STRIPE_SECRET_KEY, STRIPE_WEBHOOK_SECRET |
+| neon | https://neon.tech/docs | — | DATABASE_URL |
+| firebase | https://firebase.google.com/docs | — | — |
+| mongodb | https://www.mongodb.com/docs/ | https://www.mongodb.com/docs/mcp-server/overview/ | DATA_PROVIDER, MONGODB_URI, MONGODB_DB |
+| express | https://expressjs.com | — | — |
+| expo | https://docs.expo.dev | — | — |
+| nextjs | https://nextjs.org/docs | — | — |
+| cloudflare | https://developers.cloudflare.com | — | — |
+| railway | https://docs.railway.com | https://docs.railway.com/ai/mcp-server | HOSTING_PROVIDER, DATA_PROVIDER, DATABASE_URL, RAILWAY_PROJECT_ID, RAILWAY_SERVICE_ID |
+| resend | https://resend.com/docs | — | EMAIL_PROVIDER, RESEND_API_KEY |
+| lemon-squeezy | https://docs.lemonsqueezy.com | — | LEMONSQUEEZY_API_KEY, LEMONSQUEEZY_STORE_ID |
+| sentry | https://docs.sentry.io | https://mcp.sentry.dev/mcp | OBSERVABILITY_PROVIDER, SENTRY_DSN |
+| posthog | https://posthog.com/docs | https://mcp.posthog.com/mcp | ANALYTICS_PROVIDER, POSTHOG_API_KEY, POSTHOG_HOST |
+| plausible | https://plausible.io/docs | — | PLAUSIBLE_DOMAIN, ANALYTICS_PROVIDER |
+<!-- vybekiit:generated:end tech-references -->