vybekiit 0.7.28 → 0.7.32

package/dist/global-skills/vybekiitReferences/web/platform-skills/shadcn-vybekiit.md

@@ -0,0 +1,25 @@
+# Platform wrapper: shadcn/ui (web template)
+
+**Agent-only.** Invoked when building or editing UI — not a buyer goal skill.
+
+## Official upstream
+
+- Docs: https://ui.shadcn.com
+- MCP: shadcn/ui component search at edit time when available
+- **VybeKiit catalog MCP:** UI catalog tools in `.vybekiit/agent/mcp-agent.json` (server `vybekiit`) — search 474+ mirrored blocks across BundUI, Magic UI, Kokonut, Aceternity, Untitled, Gluestack
+- Block catalog: `.vybekiit/agent/ui-sources.md`
+- Intent routing: `ui-routing-vybekiit.md`
+
+## Kit conventions
+
+- Full shadcn base primitive set is pre-installed in `src/components/ui/` (including sidebar, table, form, etc.)
+- Signed-in dashboard chrome uses shadcn `Sidebar` via `src/components/app-sidebar.tsx` and `dashboard-shell.tsx`
+- Use existing primitives and shared shells — do not add a second design system
+- Read colors/spacing from CSS variables backed by `@vybekiit/tokens`
+- Forms: reuse `FormField` and shared error patterns from the template
+- Third-party blocks: **normalize on import** — see `ui-consistency-vybekiit.md`
+- Mirrored namespaces are read-only upstream copies — refresh with maintainer `pnpm sync:ui`
+
+## Verify-before-advance
+
+Visual change → confirm in dev preview; run component tests if present; grep for raw `<button` outside composed screens.

package/dist/global-skills/vybekiitReferences/web/platform-skills/ship-via-pr-vybekiit.md

@@ -0,0 +1,49 @@
+# Platform wrapper: ship via PR (agent-only)
+
+**Agent-only.** Save work through a safe branch + online checker — use when changes are large or the builder is waiting.
+
+## When
+
+- After meaningful progress and `back-up-my-code` already created a remote
+- Builder is impatient — use a **git worktree** so main stays runnable while you work in parallel
+- Before merging to `main`, CI must be green on all three OS jobs (`ci-vybekiit.md`)
+
+## Flow
+
+1. **Worktree (optional, parallel work):**
+   ```bash
+   git worktree add ../my-app-feature feature/save-progress
+   cd ../my-app-feature
+   ```
+
+2. **Branch + commit:**
+   ```bash
+   git checkout -b feature/save-progress
+   git add -A
+   git commit -m "Save progress"
+   ```
+
+3. **Push + open PR:**
+   ```bash
+   git push -u origin HEAD
+   gh pr create --title "Save progress" --body "Agent checkpoint — checks running."
+   ```
+
+4. **Wait for CI** — all ubuntu/macOS/Windows jobs green (`gh pr checks --watch`).
+
+5. **Merge when green:**
+   ```bash
+   gh pr merge --squash --delete-branch
+   ```
+
+6. Tell the builder in plain words: *"Your latest work is saved and checked."*
+
+## Rules
+
+- Never expose PR, worktree, or branch jargon — see `language.md`.
+- Pre-push hook runs before push; fix locally first.
+- Never merge red CI — fix and push again.
+
+## Verify
+
+PR merged · `main` green on GitHub · builder hears one plain success line

package/dist/global-skills/vybekiitReferences/web/platform-skills/stripe-vybekiit.md

@@ -0,0 +1,26 @@
+# Platform wrapper: Stripe (opt-in payments)
+
+**Agent-only.** Invoked by buyer skill `setup-payments` when `PAYMENTS_PROVIDER=stripe`.
+
+## Official upstream
+
+- Docs: https://docs.stripe.com
+- API reference: https://docs.stripe.com/api
+- Stripe MCP: https://docs.stripe.com/mcp
+- Pinned skill: `.agents/skills/stripe-best-practices/SKILL.md`
+
+## Kit wiring
+
+1. Merge `agent/mcp-stripe.json` into buyer MCP config — see `agent/mcp-setup.md` (Cursor, Claude Desktop, Codex)
+2. Builder completes Stripe OAuth once when prompted by MCP
+3. Agent creates product + price via Stripe MCP write tools; write restricted `STRIPE_SECRET_KEY` and webhook secret to `.env`
+4. Payments via `@vybekiit/payments` → `resolvePaymentProvider()` when `PAYMENTS_PROVIDER=stripe`
+5. Webhook route at `app/api/webhook/route.ts`; fulfillment in `src/lib/fulfillment.ts`
+6. Replace `TODO(vybekiit): … — skill: setup-payments` markers
+7. **Note:** Stripe is not Merchant of Record — explain tax handling in plain words if the builder asks
+
+## Verify-before-advance
+
+- MCP connected; test mode product/price visible in Stripe
+- Test checkout opens; webhook receives `checkout.session.completed` (test mode OK)
+- Order recorded; builder sees success in app

package/dist/global-skills/vybekiitReferences/web/platform-skills/supabase-vybekiit.md

@@ -0,0 +1,31 @@
+# Platform wrapper: Supabase (default data)
+
+> Agent-only: follow the Persistent features sequence in `.vybekiit/agent/session-bootstrap.md`. Reuse the relevant catalog presets before adding app-owned extensions, and record structural and behavioral evidence separately.
+
+**Agent-only.** Invoked by buyer skills `save-data`, `doctor`, and prerequisites for `add-signin`.
+
+## Official upstream
+
+- Docs: https://supabase.com/docs
+- Supabase MCP: https://supabase.com/docs/guides/ai-tools/mcp
+- CLI: `supabase` (installed by `vybekiit doctor`)
+- Pinned skills: `.agents/skills/supabase/SKILL.md`, `.agents/skills/supabase-postgres-best-practices/SKILL.md`
+
+## Kit wiring
+
+1. Merge `agent/mcp-supabase.json` into buyer MCP config — see `agent/mcp-setup.md` (Cursor, Claude Desktop, Codex)
+2. Builder completes Supabase OAuth once when MCP prompts on first use
+3. Data access via `@vybekiit/db` → `resolveDataProvider()` — never direct Supabase client in UI
+4. After `supabase login`, agent runs programmatic project create (see `doctor` / onboarding)
+5. Write `SUPABASE_URL` and `SUPABASE_ANON_KEY` to `settings.env`, the service role key to `.env`
+6. Migrations under `infra/`; RLS reviewed; service role server-side only
+7. For auth: also set `DATABASE_URL` (Postgres connection) for better-auth — see `better-auth-vybekiit.md`
+
+Optional: scope MCP URL with `?project_ref=…&read_only=true` per Supabase security guidance.
+
+## Verify-before-advance
+
+- MCP connected (list tables or run a read query)
+- `supabase projects list` works after login
+- `pingDatabase()` from `@vybekiit/db` succeeds
+- Migration applied; test read/write path green

package/dist/global-skills/vybekiitReferences/web/platform-skills/tenancy-vybekiit.md

@@ -0,0 +1,3 @@
+# tenancy-vybekiit
+
+Use `resolve*Provider()` from `@vybekiit/tenancy` — see package README.

package/dist/global-skills/vybekiitReferences/web/platform-skills/testing-vybekiit.md

@@ -0,0 +1,33 @@
+# Platform wrapper: testing (agent-only)
+
+**Agent-only.** Run tests with every feature — the builder never hears "vitest" or "unit test."
+
+## When
+
+Every new feature, bug fix, API route change, or hook change.
+
+## How
+
+- **Runner:** `pnpm test` (Vitest)
+- **Web:** React Testing Library for components; test files live in `src/**/__tests__/`
+- **Patterns:** follow existing tests in `src/lib/__tests__/`, `src/hooks/__tests__/`, `src/components/__tests__/`
+
+## Rules
+
+1. Test **behavior users care about** — form submit succeeds, auth error shows, checkout redirects.
+2. No `toBeDefined()` theater — assert outcomes, not existence.
+3. Mock network at the client boundary (`fetch-json`, auth/billing clients), not deep kit internals.
+4. Run `pnpm test` **before** telling the builder something works.
+
+## Also read
+
+- `nextjs-vybekiit.md` — App Router + API route patterns
+- `react-patterns-vybekiit.md` — hooks and forms to test
+
+## Verify
+
+```bash
+pnpm test
+```
+
+Green before "done."

package/dist/global-skills/vybekiitReferences/web/platform-skills/ui-consistency-vybekiit.md

@@ -0,0 +1,34 @@
+# Platform wrapper: UI consistency (agent-only)
+
+**Agent-only.** Professional, symmetric UI — not a buyer goal skill.
+
+## Catalog
+
+Web/extension: `.vybekiit/agent/ui-sources.md` · routing: `ui-routing-vybekiit.md`  
+Mobile: `.vybekiit/agent/ui-sources.mobile.md` · porting: `ui-port-from-web-vybekiit.md`
+
+## Non-negotiable contract
+
+1. **Primitive-first** — `Button`, `Input`, `Card`, … from `src/components/ui/` for standard controls in buyer screens
+2. **Namespace mirrors** — upstream copies live in `bundui/`, `magicui/`, `kokonutui/`, `aceternity/`, `untitled/`, `gluestack/`, `blocks/21st/` — never merge into `ui/` wholesale
+3. **Locked size scale** — `sm | default | lg | icon` only in buyer-facing screens
+4. **Token SSOT** — semantic colors from `@vybekiit/tokens` CSS vars
+5. **Normalize on import** — when composing screens from mirrored blocks, swap controls to kit primitives + token colors
+6. **One visual voice per screen** — one effect-library flavor per marketing page
+7. **No second design system** — HeroUI, MUI, Chakra forbidden; Untitled/Gluestack isolated in their namespaces
+
+## Normalize-on-import workflow
+
+1. Pick block via MCP `suggest_ui_blend` or search local mirror
+2. Copy/adapt into `app/` or `src/components/<feature>/`
+3. `rg '<button|<input' <file>` — replace with kit components
+4. Map colors to CSS variables / theme tokens
+5. Strip conflicting Tailwind size classes
+6. Preview in dev — confirm buttons match existing screens
+7. Run UI checks from `check-safety` step 7
+
+## Cross-refs
+
+- `shadcn-vybekiit.md` — kit component conventions
+- `ui-routing-vybekiit.md` — intent → source mapping
+- `code-hygiene-vybekiit.md` — no duplicate helpers in UI code

package/dist/global-skills/vybekiitReferences/web/platform-skills/ui-routing-vybekiit.md

@@ -0,0 +1,41 @@
+# Platform wrapper: UI routing (agent-only)
+
+**Agent-only.** Maps builder intent → mirrored UI source + normalize workflow.
+
+## Tools
+
+1. **VybeKiit UI catalog MCP** — `suggest_ui_blend`, `search_ui_components`, `get_ui_component`, `list_ui_sources`
+2. **shadcn MCP** — official primitive lookup
+3. **Local index** — `.vybekiit/agent/ui-catalog-index.json` (640+ mirrored components)
+
+## Intent routing
+
+| Builder says… | Primary source | Namespace | Fallback |
+|---|---|---|---|
+| hero / landing / wow effects | Aceternity or Magic UI | `aceternity/`, `magicui/` | `bundui/` hero blocks |
+| bento / features section | Magic UI or Kokonut | `magicui/`, `kokonutui/` | `bundui/` |
+| pricing / testimonials / FAQ | BundUI | `bundui/` | 21st blocks (when authed) |
+| dashboard / KPI / charts | shadcn Charts + Tremor | `ui/chart` | `bundui/`, `untitled/` tables |
+| forms / settings / admin | kit primitives | `ui/` | `bundui/` form variants |
+| AI chat / agent / streaming messages | AI Elements | `ai-elements/` | `kokonutui/` ai-prompt |
+| reasoning / tool calls / citations | AI Elements | `ai-elements/` | normalize to kit forms |
+| kanban / gantt / editor / data viz | Kibo UI | `kibo/` | `bundui/`, `untitled/` |
+| AI chat interface (legacy) | Kokonut / Cult patterns | `kokonutui/` | `ai-elements/` |
+| enterprise / dense admin | Untitled UI | `untitled/` | `bundui/` admin blocks |
+| cross-platform pattern ref | Gluestack (web mirror) | `gluestack/` | mobile StyleSheet port |
+| mobile version of X | Port from web block | mobile kit `ui/` | `building-native-ui` skill |
+
+## Workflow
+
+1. Call `suggest_ui_blend` with the builder's words
+2. Import from the returned namespace path — do not re-fetch upstream unless mirror is stale
+3. Compose in `app/` or feature components — **normalize-on-import** (see `ui-consistency-vybekiit.md`)
+4. One animated/marketing library flavor per page max
+5. Mobile: check `ui-catalog-index.mobile.json` `portable` flag before promising motion parity
+
+## Cross-refs
+
+- `ui-sources.md` — full catalog + registry URLs
+- `ui-consistency-vybekiit.md` — normalize contract
+- `shadcn-vybekiit.md` — kit primitives
+- mobile: `ui-port-from-web-vybekiit.md`

package/dist/global-skills/watch-my-app/SKILL.md

@@ -5,6 +5,12 @@ metadata:
   vybekiit-generated: buyer-skill-stub
 ---
 
+Prefer the current project instructions and matching project skill when inside a kit app.
+Outside a kit app, resolve guidance relative to this skill directory: ../vybekiitReferences/web/.
+That folder contains language.md, AGENTS.md, CODE-STYLE.md, agent/ and platform-skills/.
+Bare wrapper filenames refer to platform-skills/ there. Do not assume project code or recipe files exist globally.
+Inspect an existing app before changing it. Scaffold a new kit app only when the builder asked for a new app.
+
 <!-- vybekiit:generated:buyer-skill-stub -->
 
 # Skill: watch-my-app

package/dist/global-skills/web-to-native/SKILL.md

@@ -3,6 +3,7 @@ name: web-to-native
 description: Migrate an existing web React app to a native iOS/Android app with Expo. Use when the user wants to turn a website into a mobile app, port a Next.js/Vite/CRA React codebase to React Native, reuse web code on native incrementally, or asks how web idioms (the DOM, CSS, React Router, localStorage, window) map to native. This is the end-to-end migration guide; use the `use-dom` skill for the DOM-component mechanism itself.
 version: 1.0.0
 license: MIT
+disable-model-invocation: true
 ---
 
 # Web to Native

package/dist/global-skills/wire-auth/SKILL.md

@@ -5,6 +5,12 @@ metadata:
   vybekiit-generated: buyer-skill-stub
 ---
 
+Prefer the current project instructions and matching project skill when inside a kit app.
+Outside a kit app, resolve guidance relative to this skill directory: ../vybekiitReferences/backend/.
+That folder contains language.md, AGENTS.md, CODE-STYLE.md, agent/ and platform-skills/.
+Bare wrapper filenames refer to platform-skills/ there. Do not assume project code or recipe files exist globally.
+Inspect an existing app before changing it. Scaffold a new kit app only when the builder asked for a new app.
+
 <!-- vybekiit:generated:buyer-skill-stub -->
 
 # Skill: wire-auth

package/dist/global-skills/wire-database/SKILL.md

@@ -1,10 +1,16 @@
 ---
 name: wire-database
-description: "the server remembers things persistently. Use when the vibe coder says something like: save my data; remember this; store info; add a database; wire database."
+description: "the server remembers things persistently. Use when the vibe coder says something like: save my data; remember this; store info; add a database; book my classes; yoga booking."
 metadata:
   vybekiit-generated: buyer-skill-stub
 ---
 
+Prefer the current project instructions and matching project skill when inside a kit app.
+Outside a kit app, resolve guidance relative to this skill directory: ../vybekiitReferences/backend/.
+That folder contains language.md, AGENTS.md, CODE-STYLE.md, agent/ and platform-skills/.
+Bare wrapper filenames refer to platform-skills/ there. Do not assume project code or recipe files exist globally.
+Inspect an existing app before changing it. Scaffold a new kit app only when the builder asked for a new app.
+
 <!-- vybekiit:generated:buyer-skill-stub -->
 
 # Skill: wire-database
@@ -14,6 +20,14 @@ metadata:
 
 **Contract:** one action at a time · verify-before-advance · plain language (`language.md`) · translate every error · celebrate. Decide all technical choices yourself.
 
+## Reuse before implementation
+
+For bookings, class schedules, appointments, and cancellations, discover `booking` through
+`vybekiit list-presets`, then apply its prerequisites and migration. Use its atomic reservation and
+cancellation functions through verified server sessions. Add only missing app-specific fields and
+permissions. Do not substitute selling class packs for a request to book classes.
+For other requests, select matching presets from the catalog before authoring an extension.
+
 ## Steps
 
 1. Run `vybekiit plan-setup database` for the checklist.

package/dist/global-skills/wire-email/SKILL.md

@@ -5,6 +5,12 @@ metadata:
   vybekiit-generated: buyer-skill-stub
 ---
 
+Prefer the current project instructions and matching project skill when inside a kit app.
+Outside a kit app, resolve guidance relative to this skill directory: ../vybekiitReferences/backend/.
+That folder contains language.md, AGENTS.md, CODE-STYLE.md, agent/ and platform-skills/.
+Bare wrapper filenames refer to platform-skills/ there. Do not assume project code or recipe files exist globally.
+Inspect an existing app before changing it. Scaffold a new kit app only when the builder asked for a new app.
+
 <!-- vybekiit:generated:buyer-skill-stub -->
 
 # Skill: wire-email

package/dist/global-skills/wire-payments/SKILL.md

@@ -5,6 +5,12 @@ metadata:
   vybekiit-generated: buyer-skill-stub
 ---
 
+Prefer the current project instructions and matching project skill when inside a kit app.
+Outside a kit app, resolve guidance relative to this skill directory: ../vybekiitReferences/backend/.
+That folder contains language.md, AGENTS.md, CODE-STYLE.md, agent/ and platform-skills/.
+Bare wrapper filenames refer to platform-skills/ there. Do not assume project code or recipe files exist globally.
+Inspect an existing app before changing it. Scaffold a new kit app only when the builder asked for a new app.
+
 <!-- vybekiit:generated:buyer-skill-stub -->
 
 # Skill: wire-payments

package/dist/global-skills/workers-best-practices/SKILL.md

@@ -1,6 +1,7 @@
 ---
 name: workers-best-practices
 description: Cloudflare Workers best practices for production applications. Use when writing, reviewing, or configuring Workers.
+disable-model-invocation: true
 ---
 
 Your knowledge of Cloudflare Workers APIs, types, and configuration may be outdated. **Prefer retrieval over pre-training** when writing or reviewing Workers code.
@@ -17,7 +18,7 @@ Read the sections relevant to the task:
 | [Runtime patterns](references/runtime-patterns.md) | Streaming, promise lifetime, request state, service calls, security, and runtime tests |
 | [Platform API checks](references/platform-apis.md) | Handler signatures, platform classes, binding access, and serialization |
 
-For missing evidence, consult [Workers best practices](https://developers.cloudflare.com/workers/best-practices/workers-best-practices/) or find the affected product in the [Cloudflare docs directory](https://developers.cloudflare.com/directory/). Use the installed Wrangler schema for config fields. A newer type package does not supersede the project's configured target.
+For missing evidence, consult [Workers best practices](https://developers.cloudflare.com/workers/best-practices/workers-best-practices/index.md) or find the affected product in the [Cloudflare docs directory](https://developers.cloudflare.com/directory/index.md). Use the installed Wrangler schema for config fields. A newer type package does not supersede the project's configured target.
 
 ## Keep Compatibility Dates Current
 
@@ -25,7 +26,7 @@ Use today's date for new Workers. Encourage periodic updates for existing Worker
 
 ## Enable Observability
 
-Enable [Workers Logs](https://developers.cloudflare.com/workers/observability/logs/workers-logs/) and [Traces](https://developers.cloudflare.com/workers/observability/traces/) when creating or preparing a Worker for production. Set `observability.enabled` and `observability.traces.enabled` to `true`; the top-level setting alone does not enable traces. Use structured JSON logging and configure sampling for the workload. During reviews, flag missing logs or traces. See the [configuration example](references/configuration.md#enable-workers-logs-and-traces).
+Enable [Workers Logs](https://developers.cloudflare.com/workers/observability/logs/workers-logs/index.md) and [Traces](https://developers.cloudflare.com/workers/observability/traces/index.md) when creating or preparing a Worker for production. Set `observability.enabled` and `observability.traces.enabled` to `true`; the top-level setting alone does not enable traces. Use structured JSON logging and configure sampling for the workload. During reviews, flag missing logs or traces. See the [configuration example](references/configuration.md#enable-workers-logs-and-traces).
 
 ## Anti-Patterns to Flag
 
@@ -56,5 +57,5 @@ Use the project's existing checks for affected Workers behavior: type-check bind
 This skill covers Workers-specific best practices and code review. For related topics:
 
 - **Durable Objects**: load the `durable-objects` skill
-- **Workflows**: see [Rules of Workflows](https://developers.cloudflare.com/workflows/build/rules-of-workflows/)
+- **Workflows**: see [Rules of Workflows](https://developers.cloudflare.com/workflows/build/rules-of-workflows/index.md)
 - **Wrangler CLI commands**: load the `wrangler` skill

package/dist/global-skills/workers-best-practices/references/configuration.md

@@ -136,4 +136,4 @@ Anti-pattern:
 console.log("Got a request to " + url.pathname);
 ```
 
-**Retrieve**: [Workers Logs](https://developers.cloudflare.com/workers/observability/logs/workers-logs/) and [Traces](https://developers.cloudflare.com/workers/observability/traces/) for current config options.
+**Retrieve**: [Workers Logs](https://developers.cloudflare.com/workers/observability/logs/workers-logs/index.md) and [Traces](https://developers.cloudflare.com/workers/observability/traces/index.md) for current config options.

package/dist/global-skills/workers-best-practices/references/platform-apis.md

@@ -44,8 +44,8 @@ Check the API and encoding at each boundary. Structured clone support does not i
 
 | Boundary | What to check |
 |----------|---------------|
-| [Queue messages](https://developers.cloudflare.com/queues/configuration/javascript-apis/#queuescontenttype) | Match the body to `contentType`: `json` requires JSON-compatible data, `text` a string, `bytes` an `ArrayBuffer`, and `v8` supports structured-clone values such as `Map` and `Date`. Check the configured compatibility date when relying on the default encoding. |
-| [Workflow step results](https://developers.cloudflare.com/workflows/build/workers-api/) | Verify the step result against the documented serialization contract and the project's Workflow types before flagging a value. |
-| [Durable Object KV storage](https://developers.cloudflare.com/durable-objects/api/sqlite-storage-api/#put-1) | `storage.put()` supports structured-clone values; do not apply a blanket ban on `Map` or `Set`. |
-| [Durable Object SQL](https://developers.cloudflare.com/durable-objects/api/sqlite-storage-api/#exec) | Check bound parameters against the SQL API's supported types. Encode objects explicitly for the intended column representation. |
-| [WebSocket messages](https://developers.cloudflare.com/workers/runtime-apis/websockets/#send) | Use `send()` with a string, `ArrayBuffer`, or `ArrayBufferView`; encode objects, for example with `JSON.stringify()`. |
+| [Queue messages](https://developers.cloudflare.com/queues/configuration/javascript-apis/index.md#queuescontenttype) | Match the body to `contentType`: `json` requires JSON-compatible data, `text` a string, `bytes` an `ArrayBuffer`, and `v8` supports structured-clone values such as `Map` and `Date`. Check the configured compatibility date when relying on the default encoding. |
+| [Workflow step results](https://developers.cloudflare.com/workflows/build/workers-api/index.md) | Verify the step result against the documented serialization contract and the project's Workflow types before flagging a value. |
+| [Durable Object KV storage](https://developers.cloudflare.com/durable-objects/api/sqlite-storage-api/index.md#do-kv-async-put) | `storage.put()` supports structured-clone values; do not apply a blanket ban on `Map` or `Set`. |
+| [Durable Object SQL](https://developers.cloudflare.com/durable-objects/api/sqlite-storage-api/index.md#exec) | Check bound parameters against the SQL API's supported types. Encode objects explicitly for the intended column representation. |
+| [WebSocket messages](https://developers.cloudflare.com/workers/runtime-apis/websockets/index.md#send) | Use `send()` with a string, `ArrayBuffer`, or `ArrayBufferView`; encode objects, for example with `JSON.stringify()`. |

package/dist/global-skills/workers-best-practices/references/runtime-patterns.md

@@ -133,7 +133,7 @@ async fetch(request: Request, env: Env): Promise<Response> {
 }
 ```
 
-**Retrieve**: `/queues/` and `/workflows/` for current APIs. For Workflow-specific rules, see [Rules of Workflows](https://developers.cloudflare.com/workflows/build/rules-of-workflows/).
+**Retrieve**: `/queues/` and `/workflows/` for current APIs. For Workflow-specific rules, see [Rules of Workflows](https://developers.cloudflare.com/workflows/build/rules-of-workflows/index.md).
 
 ### Use service bindings for Worker-to-Worker communication
 

package/dist/global-skills/wrangler/SKILL.md

@@ -1,61 +1,64 @@
 ---
 name: wrangler
 description: Run or troubleshoot Wrangler CLI commands and configure Worker projects for local development, Previews, deployment, and Cloudflare resource management.
+disable-model-invocation: true
 ---
 
 # Wrangler CLI
 
+If the project has a `cloudflare.config.ts` file, or the user has asked you to use the `cf` CLI, do not use this skill. Follow the [Cloudflare CLI documentation](https://developers.cloudflare.com/cf/index.md) instead.
+
 Use the project's Wrangler version and retrieve the relevant documentation before writing commands or configuration. CLI flags and configuration fields change; do not rely on memorized examples.
 
 ## Inspect the Project
 
-- Find the package manager, installed Wrangler version, package scripts, framework, and Wrangler config. Run commands through the project's scripts or package manager so they use its local version. Install dependencies using the existing lockfile when needed; do not silently upgrade Wrangler to match current docs. If Wrangler is not a dependency, follow the [installation guide](https://developers.cloudflare.com/workers/wrangler/install-and-update/) to add it locally.
+- Find the package manager, installed Wrangler version, package scripts, framework, and Wrangler config. Run commands through the project's scripts or package manager so they use its local version. Install dependencies using the existing lockfile when needed; do not silently upgrade Wrangler to match current docs. If Wrangler is not a dependency, follow the [installation guide](https://developers.cloudflare.com/workers/wrangler/install-and-update/index.md) to add it locally.
 - Identify the config used by the build or deploy command, including framework-generated config. Edit its source rather than generated output.
 - Establish the target account, Worker, environment, and resource before running commands that change them. For data operations, determine whether the target is local or remote.
 
 ## Retrieve What the Task Needs
 
-Use the Cloudflare MCP `docs` tool if available, or fetch the relevant linked page directly. Follow links to the specific command or product involved; avoid loading the entire reference. If a page moves, rediscover it through the [Wrangler command index](https://developers.cloudflare.com/workers/wrangler/commands/) or Cloudflare docs search.
+Use the Cloudflare MCP `docs` tool if available, or fetch the relevant linked page directly. Follow links to the specific command or product involved; avoid loading the entire reference. If a page moves, rediscover it through the [Wrangler command index](https://developers.cloudflare.com/workers/wrangler/commands/index.md) or Cloudflare docs search.
 
 | Task | Source |
 | --- | --- |
-| Discover commands and flags, including resource management, deployments, rollback, and diagnostics | Project-local `wrangler --help` and `wrangler <command> --help`; [command reference](https://developers.cloudflare.com/workers/wrangler/commands/) |
-| Edit config or add a binding | Installed `wrangler/config-schema.json` (usually under `node_modules`); [configuration reference](https://developers.cloudflare.com/workers/wrangler/configuration/) |
-| Deploy a framework application | [Framework guides](https://developers.cloudflare.com/workers/framework-guides/); follow the guide for the project's existing framework and adapter |
-| Migrate an application to Workers when requested | [Pages to Workers](https://developers.cloudflare.com/workers/static-assets/migration-guides/migrate-from-pages/); [Vercel to Workers](https://developers.cloudflare.com/workers/static-assets/migration-guides/vercel-to-workers/) |
-| Configure staging or production | [Environments](https://developers.cloudflare.com/workers/wrangler/environments/) |
-| Set secrets locally, in CI, or on a deployed Worker | [Secrets](https://developers.cloudflare.com/workers/configuration/secrets/) |
-| Generate binding and runtime types | [TypeScript](https://developers.cloudflare.com/workers/languages/typescript/) |
-| Run locally or choose a testing approach | [Local development](https://developers.cloudflare.com/workers/local-development/); [testing](https://developers.cloudflare.com/workers/testing/) |
-| Choose roles, scopes, or API token permissions for Wrangler | [Roles and permissions](https://developers.cloudflare.com/workers/authorization/); [Workers roles and permissions](https://developers.cloudflare.com/workers/authorization/workers/#wrangler) |
-| Create or manage a branch or pull request environment | [Previews overview](https://developers.cloudflare.com/workers/previews/); [get started](https://developers.cloudflare.com/workers/previews/get-started/); [configuration](https://developers.cloudflare.com/workers/previews/configuration/) |
-| Decide whether Preview resources are isolated or shared | [Resources and isolation](https://developers.cloudflare.com/workers/previews/resources/), including its current limitations |
-| Configure Preview URLs, access, debugging, or CI | [Custom domains](https://developers.cloudflare.com/workers/previews/custom-domains/); [test and debug](https://developers.cloudflare.com/workers/previews/test-and-debug/); [examples](https://developers.cloudflare.com/workers/previews/examples/) |
-| Choose between Previews, Version URLs, and Wrangler environments | [Compare workflows](https://developers.cloudflare.com/workers/previews/compare-workflows/) |
-| Diagnose authentication or select an account | [General commands](https://developers.cloudflare.com/workers/wrangler/commands/general/), including `whoami`; [authentication profiles](https://developers.cloudflare.com/workers/wrangler/profiles/) |
-| Deploy an unauthenticated prototype | [Claim deployments](https://developers.cloudflare.com/workers/platform/claim-deployments/) for eligibility, expiry, and claim URL handling; use a permanent account for production or CI |
+| Discover commands and flags, including resource management, deployments, rollback, and diagnostics | Project-local `wrangler --help` and `wrangler <command> --help`; [command reference](https://developers.cloudflare.com/workers/wrangler/commands/index.md) |
+| Edit config or add a binding | Installed `wrangler/config-schema.json` (usually under `node_modules`); [configuration reference](https://developers.cloudflare.com/workers/wrangler/configuration/index.md) |
+| Deploy a framework application | [Framework guides](https://developers.cloudflare.com/workers/framework-guides/index.md); follow the guide for the project's existing framework and adapter |
+| Migrate an application to Workers when requested | [Pages to Workers](https://developers.cloudflare.com/workers/static-assets/migration-guides/migrate-from-pages/index.md); [Vercel to Workers](https://developers.cloudflare.com/workers/static-assets/migration-guides/vercel-to-workers/index.md) |
+| Configure staging or production | [Environments](https://developers.cloudflare.com/workers/wrangler/environments/index.md) |
+| Set secrets locally, in CI, or on a deployed Worker | [Secrets](https://developers.cloudflare.com/workers/configuration/secrets/index.md) |
+| Generate binding and runtime types | [TypeScript](https://developers.cloudflare.com/workers/languages/typescript/index.md) |
+| Run locally or choose a testing approach | [Local development](https://developers.cloudflare.com/workers/local-development/index.md); [testing](https://developers.cloudflare.com/workers/testing/index.md) |
+| Choose roles, scopes, or API token permissions for Wrangler | [Roles and permissions](https://developers.cloudflare.com/workers/authorization/index.md); [Workers roles and permissions](https://developers.cloudflare.com/workers/authorization/workers/index.md#wrangler) |
+| Create or manage a branch or pull request environment | [Previews overview](https://developers.cloudflare.com/workers/previews/index.md); [get started](https://developers.cloudflare.com/workers/previews/get-started/index.md); [configuration](https://developers.cloudflare.com/workers/previews/configuration/index.md) |
+| Decide whether Preview resources are isolated or shared | [Resources and isolation](https://developers.cloudflare.com/workers/previews/resources/index.md), including its current limitations |
+| Configure Preview URLs, access, debugging, or CI | [Custom domains](https://developers.cloudflare.com/workers/previews/custom-domains/index.md); [test and debug](https://developers.cloudflare.com/workers/previews/test-and-debug/index.md); [examples](https://developers.cloudflare.com/workers/previews/examples/index.md) |
+| Choose between Previews, Version URLs, and Wrangler environments | [Compare workflows](https://developers.cloudflare.com/workers/previews/compare-workflows/index.md) |
+| Diagnose authentication or select an account | [General commands](https://developers.cloudflare.com/workers/wrangler/commands/general/index.md), including `whoami`; [authentication profiles](https://developers.cloudflare.com/workers/wrangler/profiles/index.md) |
+| Deploy an unauthenticated prototype | [Claim deployments](https://developers.cloudflare.com/workers/platform/claim-deployments/index.md) for eligibility, expiry, and claim URL handling; use a permanent account for production or CI |
 
 Use installed help and schema to check whether documented features exist in the project's version. If a required feature needs an upgrade, make that dependency explicit. If retrieval is unavailable, state the gap and use available local evidence rather than inventing syntax.
 
 ## Apply the Change
 
-- Prefer `wrangler.jsonc` for new config. Set a new project's [compatibility date](https://developers.cloudflare.com/workers/configuration/compatibility-dates/) to today; review runtime changes and test when advancing an existing project's date. Preserve existing project conventions and avoid incidental format migrations.
+- Prefer `wrangler.jsonc` for new config. Set a new project's [compatibility date](https://developers.cloudflare.com/workers/configuration/compatibility-dates/index.md) to today; review runtime changes and test when advancing an existing project's date. Preserve existing project conventions and avoid incidental format migrations.
 - Check environment inheritance before adding bindings or variables. Some fields must be specified separately for each environment; a working default config does not establish that staging is configured.
-- With the Cloudflare Vite plugin, select the environment via `CLOUDFLARE_ENV` at dev or build time. Deploy the resulting build; setting an environment at deploy time does not retarget its flattened config. See [Vite environments](https://developers.cloudflare.com/workers/vite-plugin/reference/cloudflare-environments/).
-- Reconcile dashboard changes with the config before deploying: Wrangler can overwrite dashboard variables and routes. When binding existing resources, verify their identifiers; omitted identifiers can trigger [automatic provisioning](https://developers.cloudflare.com/workers/wrangler/configuration/#automatic-provisioning).
+- With the Cloudflare Vite plugin, select the environment via `CLOUDFLARE_ENV` at dev or build time. Deploy the resulting build; setting an environment at deploy time does not retarget its flattened config. See [Vite environments](https://developers.cloudflare.com/workers/vite-plugin/reference/cloudflare-environments/index.md).
+- Reconcile dashboard changes with the config before deploying: Wrangler can overwrite dashboard variables and routes. When binding existing resources, verify their identifiers; omitted identifiers can trigger [automatic provisioning](https://developers.cloudflare.com/workers/wrangler/configuration/index.md#automatic-provisioning).
 - Distinguish local simulation from remote bindings during development. A locally running Worker can still access real resources; check the selected bindings before testing writes.
 - Before a remote command, identify the authenticated member or API token and retrieve the current role and scope required for the exact operation. Prefer the narrowest scope that satisfies the user's intent. The `wrangler login` OAuth flow does not support granular authorization; use an account-owned API token when granular access is required, and never ask the user to paste its value into chat.
 - Keep secret values out of command arguments, source code, and logs. Use the documented interactive input or protected file/stdin mechanism for the command. Local secret files must be ignored by version control and are not automatically uploaded as deployed secrets. For missing local secrets, check file precedence and any `secrets.required` declaration in the secrets docs.
 - Treat `wrangler secret put` and `secret delete` as deployments: they create a version and deploy it immediately. Use the documented `wrangler versions secret` workflow when the change must be staged.
-- Before a rollback, check [rollback limitations](https://developers.cloudflare.com/workers/versions-and-deployments/rollbacks/): connected resources and their data are not rolled back with Worker code.
+- Before a rollback, check [rollback limitations](https://developers.cloudflare.com/workers/versions-and-deployments/rollbacks/index.md): connected resources and their data are not rolled back with Worker code.
 
 ## Work with Workers Previews
 
 - Workers Previews requires project-local Wrangler 4.135.0 or later; project commands do not use a newer global installation. Check the project's pinned version and make any required dependency upgrade explicit.
-- Use Previews for branch and pull request environments under the same Worker. Use Version URLs to inspect a specific uploaded version with production resources, and Wrangler environments for persistent, separately deployed Workers. Follow [Compare workflows](https://developers.cloudflare.com/workers/previews/compare-workflows/) rather than adapting an older aliased Version URL workflow.
+- Use Previews for branch and pull request environments under the same Worker. Use Version URLs to inspect a specific uploaded version with production resources, and Wrangler environments for persistent, separately deployed Workers. Follow [Compare workflows](https://developers.cloudflare.com/workers/previews/compare-workflows/index.md) rather than adapting an older aliased Version URL workflow.
 - First inspect how the user manages production configuration and deployments. Configure Preview domains through the same configuration system as production, such as Wrangler, the dashboard, or Terraform. Run Preview deployments through the user's existing path, such as the local CLI, Workers Builds, or external CI, unless the user requests a different workflow. Mirror the management approach, not production resource bindings or data.
-- Before deploying, follow the current [configuration placement table](https://developers.cloudflare.com/workers/previews/configuration/#what-goes-in-the-previews-block) and [resource matrix and limitations](https://developers.cloudflare.com/workers/previews/resources/). Do not infer isolation from the Preview name or allow writes to production resources unless the user explicitly intends to share them.
-- Tell the user that Preview URLs are public unless access controls are configured, then let them decide whether to protect the URLs. Follow the [custom domain and access guidance](https://developers.cloudflare.com/workers/previews/custom-domains/) for the chosen setup.
+- Before deploying, follow the current [configuration placement table](https://developers.cloudflare.com/workers/previews/configuration/index.md#what-goes-in-the-previews-block) and [resource matrix and limitations](https://developers.cloudflare.com/workers/previews/resources/index.md). Do not infer isolation from the Preview name or allow writes to production resources unless the user explicitly intends to share them.
+- Tell the user that Preview URLs are public unless access controls are configured, then let them decide whether to protect the URLs. Follow the [custom domain and access guidance](https://developers.cloudflare.com/workers/previews/custom-domains/index.md) for the chosen setup.
 - Confirm which Worker or Wrangler environment the user intends to target. When targeting a Wrangler environment, pass the same `--env` value to every Preview command; omitting it targets the top-level Worker.
 
 ## Validate

package/dist/global-skills/xcode-project-setup/SKILL.md

@@ -4,6 +4,7 @@ description: Safely modifies Xcode projects (.pbxproj) to add Swift Packages and
 compatibility: Requires Swift to be installed locally and macOS environment.
 metadata:
   category: ApplicationDevelopment
+disable-model-invocation: true
 ---
 
 # Xcode Project Setup

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vybekiit",
-  "version": "0.7.28",
+  "version": "0.7.32",
   "description": "Choose your services, sign in, create a VybeKiit app, and open its verified local welcome page.",
   "license": "MIT",
   "publishConfig": {
@@ -21,25 +21,28 @@
     "@clack/prompts": "1.7.0",
     "@neondatabase/serverless": "^0.10.4",
     "@supabase/supabase-js": "^2.47.10",
+    "cross-spawn": "7.0.6",
     "effect": "3.21.4",
     "firebase-admin": "^13.0.2",
     "mongodb": "^7.4.0",
     "open": "11.0.0",
-    "playwright": "^1.61.1"
+    "playwright": "^1.61.1",
+    "pg": "8.22.0"
   },
   "devDependencies": {
+    "@types/cross-spawn": "6.0.6",
     "@types/node": "22.20.0",
     "tsup": "8.5.1",
     "typescript": "5.7.2",
     "vitest": "3.2.6",
     "@effect/vitest": "0.29.0",
-    "@vybekiit/agent-kit": "0.7.28",
-    "@vybekiit/core": "0.7.28",
-    "@vybekiit/deploy": "0.7.28",
-    "@vybekiit/agent-mcp": "0.7.28",
-    "@vybekiit/payments": "0.7.28",
-    "@vybekiit/db": "0.7.28",
-    "@vybekiit/report-mode": "0.7.28"
+    "@vybekiit/agent-kit": "0.7.32",
+    "@vybekiit/agent-mcp": "0.7.32",
+    "@vybekiit/payments": "0.7.32",
+    "@vybekiit/core": "0.7.32",
+    "@vybekiit/db": "0.7.32",
+    "@vybekiit/report-mode": "0.7.32",
+    "@vybekiit/deploy": "0.7.32"
   },
   "scripts": {
     "build": "tsup && node scripts/bundleGlobalSkills.mjs",