vybekiit 0.7.29 → 0.7.32

package/dist/global-skills/vybekiitReferences/spa/agent/goal-routes.json

@@ -0,0 +1,267 @@
+{
+  "routes": [
+    {
+      "skill": "onboarding",
+      "path": ".agents/skills/onboarding/SKILL.md",
+      "phrases": [
+        "set up my app",
+        "let's start",
+        "get me going",
+        "just bought"
+      ],
+      "wholeRequestPhrases": [
+        "hi",
+        "help",
+        "hello",
+        "hey",
+        "what is this",
+        "what can you do",
+        "where do i start"
+      ]
+    },
+    {
+      "skill": "plan-my-idea",
+      "path": ".agents/skills/plan-my-idea/SKILL.md",
+      "phrases": [
+        "help me plan",
+        "figure out my idea",
+        "think it through",
+        "marketplace",
+        "like airbnb"
+      ],
+      "wholeRequestPhrases": []
+    },
+    {
+      "skill": "setup-payments",
+      "path": ".agents/skills/setup-payments/SKILL.md",
+      "phrases": [
+        "add payments",
+        "take money",
+        "sell something",
+        "charge people"
+      ],
+      "wholeRequestPhrases": []
+    },
+    {
+      "skill": "go-live",
+      "path": ".agents/skills/go-live/SKILL.md",
+      "phrases": [
+        "put it online",
+        "publish",
+        "make it live",
+        "ship it",
+        "deploy"
+      ],
+      "wholeRequestPhrases": []
+    },
+    {
+      "skill": "connect-account",
+      "path": ".agents/skills/connect-account/SKILL.md",
+      "phrases": [
+        "sign in",
+        "log in",
+        "create accounts",
+        "add users",
+        "forgot password",
+        "reset password",
+        "lost password",
+        "change password email",
+        "magic link",
+        "email link sign in",
+        "sign in without password",
+        "passwordless email",
+        "sign in with phone",
+        "text me a code",
+        "sms login",
+        "phone number login",
+        "set up sms",
+        "text messages",
+        "twilio",
+        "whatsapp messages",
+        "send texts"
+      ],
+      "wholeRequestPhrases": []
+    },
+    {
+      "skill": "save-data",
+      "path": ".agents/skills/save-data/SKILL.md",
+      "phrases": [
+        "save my data",
+        "remember this",
+        "store info",
+        "add a database",
+        "book my classes",
+        "yoga booking",
+        "cancel a reservation",
+        "class scheduling",
+        "booking",
+        "reservations",
+        "appointments",
+        "student accessibility"
+      ],
+      "wholeRequestPhrases": []
+    },
+    {
+      "skill": "design-my-data",
+      "path": ".agents/skills/design-my-data/SKILL.md",
+      "phrases": [
+        "design my database",
+        "what data do i need",
+        "what should my app remember"
+      ],
+      "wholeRequestPhrases": []
+    },
+    {
+      "skill": "add-files",
+      "path": ".agents/skills/add-files/SKILL.md",
+      "phrases": [
+        "upload",
+        "store files",
+        "attachments"
+      ],
+      "wholeRequestPhrases": []
+    },
+    {
+      "skill": "vybekiit-feedback",
+      "path": ".agents/skills/vybekiit-feedback/SKILL.md",
+      "phrases": [
+        "send feedback",
+        "report a kit bug",
+        "suggest a kit improvement",
+        "the kit is confusing"
+      ],
+      "wholeRequestPhrases": []
+    },
+    {
+      "skill": "doctor",
+      "path": ".agents/skills/doctor/SKILL.md",
+      "phrases": [
+        "it's broken",
+        "nothing works",
+        "get an error",
+        "check my app"
+      ],
+      "wholeRequestPhrases": []
+    },
+    {
+      "skill": "update-kit",
+      "path": ".agents/skills/update-kit/SKILL.md",
+      "phrases": [
+        "update the kit",
+        "get the latest",
+        "upgrade"
+      ],
+      "wholeRequestPhrases": []
+    },
+    {
+      "skill": "check-safety",
+      "path": ".agents/skills/check-safety/SKILL.md",
+      "phrases": [
+        "lock down",
+        "make it safe",
+        "protect from abuse",
+        "am i ready to ship",
+        "is my app safe",
+        "did we cover security"
+      ],
+      "wholeRequestPhrases": []
+    },
+    {
+      "skill": "add-images",
+      "path": ".agents/skills/add-images/SKILL.md",
+      "phrases": [
+        "add my logo",
+        "hero image",
+        "app icon",
+        "add images"
+      ],
+      "wholeRequestPhrases": []
+    },
+    {
+      "skill": "add-teams",
+      "path": ".agents/skills/add-teams/SKILL.md",
+      "phrases": [
+        "invite teammates",
+        "add my team",
+        "organizations"
+      ],
+      "wholeRequestPhrases": []
+    },
+    {
+      "skill": "add-notifications",
+      "path": ".agents/skills/add-notifications/SKILL.md",
+      "phrases": [
+        "notify users",
+        "send alerts"
+      ],
+      "wholeRequestPhrases": []
+    },
+    {
+      "skill": "add-analytics",
+      "path": ".agents/skills/add-analytics/SKILL.md",
+      "phrases": [
+        "visitor stats",
+        "analytics",
+        "track usage"
+      ],
+      "wholeRequestPhrases": []
+    },
+    {
+      "skill": "sign-in-with-google",
+      "path": ".agents/skills/sign-in-with-google/SKILL.md",
+      "phrases": [
+        "sign in with google",
+        "continue with google"
+      ],
+      "wholeRequestPhrases": []
+    },
+    {
+      "skill": "track-errors",
+      "path": ".agents/skills/track-errors/SKILL.md",
+      "phrases": [
+        "tell me when things break",
+        "error alerts",
+        "app crashes"
+      ],
+      "wholeRequestPhrases": []
+    },
+    {
+      "skill": "watch-my-app",
+      "path": ".agents/skills/watch-my-app/SKILL.md",
+      "phrases": [
+        "watch my app",
+        "check if my app is working",
+        "tell me when my app is down"
+      ],
+      "wholeRequestPhrases": []
+    },
+    {
+      "skill": "back-up-my-code",
+      "path": ".agents/skills/back-up-my-code/SKILL.md",
+      "phrases": [
+        "save my code",
+        "back up",
+        "put it on github"
+      ],
+      "wholeRequestPhrases": []
+    },
+    {
+      "skill": "add-language",
+      "path": ".agents/skills/add-language/SKILL.md",
+      "phrases": [
+        "translate my app",
+        "add spanish",
+        "make it hebrew"
+      ],
+      "wholeRequestPhrases": []
+    },
+    {
+      "skill": "connect-account-backend",
+      "path": ".agents/skills/connect-account-backend/SKILL.md",
+      "phrases": [
+        "connect account backend"
+      ],
+      "wholeRequestPhrases": []
+    }
+  ]
+}

package/dist/global-skills/vybekiitReferences/spa/agent/mcp-setup.md

@@ -5,7 +5,7 @@
 - Platform wrapper: `.vybekiit/platform-skills/mcp-tools-vybekiit.md`
 - Via MCP (when `vybekiit` server is connected): `search_skills({ query: "mcp tools" })` then `get_skill({ id: "use-kit-mcp" })` or `list_platform_skills({ query: "mcp" })`
 
-# MCP setup — Cursor, Claude Desktop, Codex (agent-only)
+# MCP setup — Cursor, Claude Code, Claude Desktop, Codex (agent-only)
 
 Merge provider snippets from `.vybekiit/agent/mcp-*.json` into the buyer's AI client config. **Preserve existing servers** — never replace the whole file.
 
@@ -17,6 +17,15 @@ Merge provider snippets from `.vybekiit/agent/mcp-*.json` into the buyer's AI cl
 2. Merge each needed fragment's `mcpServers` block into the top-level `mcpServers` object.
 3. Restart Cursor or open **Settings → Tools & MCP** and confirm each server is connected.
 
+## Claude Code
+
+**Config:** project `.mcp.json`, or `claude mcp add --scope project <name> ...`
+
+Add a server only when the skill you are following needs it. Every connected server adds its tools
+to each session, so an idle server costs the vibe coder time and money. Merge the needed fragment's
+`mcpServers` block into `.mcp.json` (same JSON shape as Cursor), run `/mcp` to confirm it is
+connected, and remove servers the app no longer uses.
+
 ## Claude Desktop
 
 **Config (macOS):** `~/Library/Application Support/Claude/claude_desktop_config.json`

package/dist/global-skills/vybekiitReferences/spa/agent/session-bootstrap.md

@@ -1,7 +1,7 @@
 # Session bootstrap (agent-only)
 
 <!-- vybekiit:generated:start session-bootstrap -->
-Reuse instructions already loaded in this conversation. Simple questions need brief answers, not setup. Inspect before project-specific claims; execute requests for work.
+Reuse instructions already loaded in this conversation. A greeting, a plain "help", or "what is this" in a project whose `checklist.md` Decision log has no dated entries starts the onboarding skill. Other simple questions need brief answers. Inspect before project-specific claims; execute requests for work.
 
 ## Read order (when needed)
 

package/dist/global-skills/vybekiitReferences/spa/agent/ui-sources.md

@@ -46,15 +46,18 @@ Do not add new TailAdmin components — migrate new UI to shadcn in `src/compone
 | [Magic UI](https://magicui.design) | Animated marketing, marquees, beams, bento | npx shadcn@latest add @magicui/<name> | Mirror in components/magicui/; normalize buttons/inputs to kit primitives |
 | [Kokonut UI](https://kokonutui.com) | Interactive marketing, modern layouts | npx shadcn@latest add @kokonutui/<name> | Mirror in components/kokonutui/; shadcn + Motion; strip custom button sizes |
 | [21st.dev](https://21st.dev) | Community blocks, agent templates | npx shadcn add <registry-url> | Mirror curated blocks in components/blocks/21st/; reject blocks that bypass primitives |
-| [Origin UI](https://originui.com) | Extra shadcn-style primitives | Registry CLI | Merge into src/components/ui/ once |
 | [Aceternity UI](https://ui.aceternity.com) | High-motion landing sections | npx shadcn@latest add https://ui.aceternity.com/registry/<name>.json | Mirror in components/aceternity/; free tier only; no OSS GitHub |
 | [Untitled UI React](https://www.untitledui.com/react) | Enterprise admin, dense application UI | npx untitledui@latest add <name> | Mirror in components/untitled/; React Aria — never merge into ui/ |
 | [Gluestack UI](https://gluestack.io/ui) | Cross-platform patterns (web mirror only in VybeKiit) | npx gluestack-ui@latest add <name> | Mirror web subset in components/gluestack/; mobile ports via kit StyleSheet only |
-| [Cult UI](https://cult-ui.com) | AI chat / agent UI patterns | Copy-paste / registry | Map to kit forms |
-| [Tailark](https://tailark.com) | Marketing blocks, conversion layouts | Copy-paste / registry | Keep token colors |
-| [Tremor](https://tremor.so) | Dashboards, KPI cards, charts | npm @tremor/react or blocks | Dashboard-only; wrap in kit Card |
-| [shadcn/ui Charts](https://ui.shadcn.com/charts) | Charts (Recharts) | npx shadcn@latest add chart | Preferred over random chart libs |
-| [shadcn.io blocks](https://shadcn.io/blocks) | Large block marketplace | Registry browse | Normalize before merge |
-| [Shadcnblocks](https://shadcnblocks.com) | Figma-aligned blocks | Registry / copy | Free blocks OK; paid agent-only |
-| [ReUI / Skiper UI / MynaUI](https://reui.io) | Additional shadcn-style sets | Registry | Secondary when official shadcn lacks a pattern |
+| [AI Elements](https://elements.ai-sdk.dev) | AI chat, agents, streaming, tool UI | npx shadcn@latest add @aielements/<name> | Mirror in components/ai-elements/; normalize to kit forms |
+| [Kibo UI](https://www.kibo-ui.com) | Application UI: kanban, editor, gantt, data viz | npx shadcn@latest add @kibo/<name> | Mirror in components/kibo/; never replace ui/ primitives |
+| [Tailark](https://tailark.com) | Marketing blocks, conversion layouts (Dusk + Mist kits) | npx shadcn@latest add @tailark/<name> | Mirror in components/tailark/; keep token colors |
+| [Cult UI](https://www.cult-ui.com) | Tasteful motion + AI SDK agent patterns | npx shadcn@latest add @cult/<name> | Mirror in components/cult/; map to kit forms; skip Cult Pro |
+| [COSS UI](https://coss.com/ui) | Advanced primitives and application blocks (Origin UI successor) | npx shadcn@latest add @coss/<name> | Mirror in components/coss/; never merge into ui/ wholesale |
+| [Prompt Kit](https://www.prompt-kit.com) | AI prompt input, chat shells, streaming UX | npx shadcn@latest add @prompt-kit/<name> | Mirror in components/prompt-kit/; pairs with AI Elements |
+| [Supabase UI](https://supabase.com/ui) | Auth blocks, Supabase-connected patterns | npx shadcn@latest add @supabase/<name> | Mirror in components/supabase/; default stack adapter is Supabase |
+| [Blocks.so](https://blocks.so) | Login, sidebar, dialog, app shell blocks | npx shadcn@latest add @blocks-so/<name> | Mirror in components/blocks-so/ |
+| [EvilCharts](https://evilcharts.com) | Animated Recharts dashboards | npx shadcn@latest add @evilcharts/<name> | Mirror in components/evilcharts/; wrap in kit Card |
+| [Shadcnblocks (free)](https://shadcnblocks.com) | Figma-aligned marketing blocks (free tier only) | npx shadcn@latest add @shadcnblocks/<name> | Mirror reachable free blocks in components/shadcnblocks/; never sync Pro tier |
+| [shadcn/ui Charts](https://ui.shadcn.com/charts) | Charts (Recharts) | npx shadcn@latest add chart | Preferred baseline chart primitive in ui/ |
 <!-- vybekiit:generated:end web-ui-sources -->

package/dist/global-skills/vybekiitReferences/spa/language.md

@@ -33,12 +33,6 @@ jargon column. See this file for the full table — agents read it first via ses
 Never say **Vite, TanStack, Tailwind, Socket.IO, Supabase, Stripe, GitHub** (or any provider name).
 Say **"your admin app"**, **"your backend"**, **"your database"**, **"your payment service"** instead.
 
-## Tone
-
-- Warm, confident, brief. One step at a time.
-- **No em dashes (`—`).** Use a period, comma, or colon instead.
-- UI titles: short phrases only; no trailing punctuation.
-
 <!-- vybekiit:generated:start tone -->
 ## Tone
 
@@ -99,10 +93,16 @@ Say **"your admin app"**, **"your backend"**, **"your database"**, **"your payme
 | agent / the model / the LLM | me / your assistant | they are talking to one helper, not a "model" — keep it personal and singular |
 | prompt | what you tell me / your request | their plain words to me — never frame it as a technical input they must craft |
 | context window | how much I can keep in mind at once | why I sometimes recap or ask them to confirm where we are — not a setting they manage |
-| rules file / AGENTS.md / CLAUDE.md / .cursor/rules | my instructions for your project | the file that tells me how to behave here — they never need to open or edit it |
+| rules file / AGENTS.md / .cursor/rules | my instructions for your project | the file that tells me how to behave here — they never need to open or edit it |
 | slash command | a shortcut I can run | a quick action I trigger for them — frame it as something I do, not something they type |
 | MCP / MCP server | a tool I can use for you | an extra capability I plug in on their behalf — the plumbing stays invisible |
 | pnpm / npm / package manager | getting the building blocks ready | one-time install wait — never name the package manager |
+| Terminal app (when they must open it) | the Terminal app: the window where you paste the one line I give you | only for a one-time setup step; give the exact line to paste and what they should see after |
+| JSON / .json file | a settings file | plain text the app reads; they never edit it by hand |
+| API / endpoint / REST | the connection to [service] | how the app talks to another service; name what it does, not the plumbing |
+| GitHub / repo / repository | your online copy of the code | where their work is saved online; the service name stays invisible |
+| Chrome profile / debugging port / Chromium | your Chrome browser | the browser they already use; the setup details stay invisible |
+| browser automation / CDP / headless browser | the browser helper: I open Chrome and copy the keys for you | they only sign in when asked; keys go straight into the app settings and are never shown |
 | GitHub Copilot / Copilot | your assistant | deliberately out of scope — collapse like other assistant products if it slips out |
 <!-- vybekiit:generated:end tool-vocabulary -->
 
@@ -213,9 +213,5 @@ Say **"your admin app"**, **"your backend"**, **"your database"**, **"your payme
 | idempotency | *(agent-internal — never say)* | agent-internal — never say |
 | race condition | *(agent-internal — never say)* | agent-internal — never say |
 | DOM / CSS selector / element selector | *(agent-internal — never say)* | agent-internal — say "what you clicked" or "location in code" in the handoff only |
-| sandbox | *(agent-internal — never say)* | agent-internal — never say |
-| ask mode / agent mode | *(agent-internal — never say)* | agent-internal — never say |
-| skills CLI / skills.sh | *(agent-internal — never say)* | agent-internal — never say |
-| *-vybekiit.md (Layer B wrapper paths) | *(agent-internal — never say)* | agent-internal file paths — never spoken aloud |
 | JWT / JWKS | *(agent-internal — never say)* | agent-internal — never say |
 <!-- vybekiit:generated:end agent-internal-vocabulary -->

package/dist/global-skills/vybekiitReferences/web/AGENTS.md

@@ -5,11 +5,13 @@
 > databases, or git. Your job is to make every technical decision and do the work — and translate
 > the few steps only they can do into plain, one-at-a-time instructions.
 >
-> This is the **single source of truth** for how you behave in this project. Codex reads this file
-> natively; `CLAUDE.md` (Claude Code) and `.cursor/rules/vybekiit.mdc` (Cursor) are thin pointers to
-> it; `.cursor/rules/patterns.mdc` summarizes code conventions (not SSOT). Supported assistants:
+> This is the **single source of truth** for how you behave in this project. Claude Code and Codex
+> read this file directly; `.cursor/rules/vybekiit.mdc` (Cursor) points to it;
+> `.cursor/rules/patterns.mdc` summarizes code conventions (not SSOT). Supported assistants:
 > Claude Code · Codex · Cursor.
 
+Use the plain words in @language.md whenever you talk to the vibe coder.
+
 <!-- vybekiit:generated:start contract -->
 ## The contract: Decide + Guide
 
@@ -26,7 +28,9 @@ A request such as "Can people book my classes?" means build the working feature.
 
 ## How to work
 
-Simple questions need brief answers, without setup or skill searches. Inspect before making
+A greeting, a plain "help", or "what is this" in a project whose `checklist.md` Decision log has
+no dated entries starts the onboarding skill (`.vybekiit/skills/onboarding.md`). Other simple
+questions need brief answers, without setup or skill searches. Inspect before making
 project-specific claims. Requests for work mean do the work and verify the requested behavior.
 Reuse instructions already loaded in the conversation. Continue authorized work independently;
 one action at a time limits steps the buyer must take. Prefer this project's skills over global
@@ -54,7 +58,7 @@ many features at once) and you have not planned together this session:
 
 1. **Offer once** (never force): *"Want to think it through together first? I'll ask one question at
    a time until we're totally aligned."*
-2. If they **accept** → follow `skills/plan-my-idea.md`.
+2. If they **accept** → follow `.vybekiit/skills/plan-my-idea.md`.
 3. If they **decline** → build anyway. Impatient vibe coders stay in control.
 
 During onboarding, preserve the requested goal. Ask about planning only if a missing product decision blocks the work or the builder asks to plan.
@@ -72,6 +76,10 @@ are **not** skills — just do them well, following the conventions below.
   truth. **Never read `.env` values aloud or paste them in chat** — reference keys from
   `.env.example` only. If the vibe coder pastes a secret in chat, warn them and have them paste into
   `.env` on their machine instead. Read `env-secrets-vybekiit.md`.
+- Settings that are not secret (which services the app uses, public ids, web addresses, ports)
+  live in `settings.env`, saved with the code. A key listed there is set there; secrets and
+  private values stay in `.env`. Never put a secret in `settings.env`. A value the host already
+  sets wins over both files.
 - Keep components small and readable. Use the kit's UI primitives in `src/components`.
 - Layout uses logical spacing (`ms-`, `me-`, `ps-`, `pe-`, `start-`, `end-`) so the app mirrors
   automatically for Hebrew/Arabic visitors. Never hard-code `left`/`right`.
@@ -81,7 +89,7 @@ are **not** skills — just do them well, following the conventions below.
 ### Before you write code (invisible quality — vibe coder never hears this)
 
 1. **Check before create** — search `src/lib/README.md` and `@vybekiit/*` before adding a helper; extend existing code if ≥80% overlap.
-2. **One home per concern** — auth → `auth-client.ts`, billing → `billing-client.ts`, logging → `logger.ts`. Never add a second `utils-*.ts`.
+2. **One home per concern** — auth → `authClient.ts`, billing → `billingClient.ts`, logging → `logger.ts`. Never add a second `utils-*.ts`.
 3. **Use the kit logger** — `import { log } from '@/lib/logger'`; never `console.log` in app/API code (tests may use console).
 4. **KISS** — no one-off wrappers around kit packages; validate API bodies with zod at the route boundary.
 5. **SSOT** — secrets in `.env` only; business constants in one file per domain (e.g. `plans.ts`).
@@ -120,30 +128,7 @@ grep -rn "TODO(vybekiit)" .
 Each marker names the skill that completes it (e.g. `add-signin`, `setup-payments`). Run that skill,
 replace the stub, verify, then re-grep — you're done when it comes back empty. The stubs are
 centralized so a skill edits **one** file, not every screen: sign-in lives in
-`src/lib/auth-client.ts`, checkout in `src/lib/billing-client.ts`. Never show the vibe coder a marker or
-the word "stub" — just do the work and tell them what now works.
-
-## Wire-up markers (how "finish setup" works)
-
-Some files ship as **ready layouts with the logic stubbed**, so the app builds and looks finished
-before any keys exist (the sign-in, sign-up, verify, pricing, and dashboard screens are like this).
-Every unfinished point carries one greppable marker:
-
-```
-TODO(vybekiit): <what to do> — skill: <skill-name>
-```
-
-When the vibe coder says "set it up", "finish setup", "wire it up", or "make it work", list every
-marker and resolve them one at a time:
-
-```
-grep -rn "TODO(vybekiit)" .
-```
-
-Each marker names the skill that completes it (e.g. `add-signin`, `setup-payments`). Run that skill,
-replace the stub, verify, then re-grep — you're done when it comes back empty. The stubs are
-centralized so a skill edits **one** file, not every screen: sign-in lives in
-`src/lib/auth-client.ts`, checkout in `src/lib/billing-client.ts`. Never show the vibe coder a marker or
+`src/lib/authClient.ts`, checkout in `src/lib/billingClient.ts`. Never show the vibe coder a marker or
 the word "stub" — just do the work and tell them what now works.
 
 ## Boundaries

package/dist/global-skills/vybekiitReferences/web/agent/goal-index.md

@@ -7,7 +7,7 @@ translate errors · celebrate.
 
 | The builder says something like… | Use this skill |
 |---|---|
-| "set up my app", "I just bought this", "let's start", "get me going" | `skills/onboarding.md` |
+| "hi", "help", "what is this", "set up my app", "I just bought this", "let's start", "get me going" | `skills/onboarding.md` |
 | "help me plan", "I'm not sure what I want", "think it through with me", "figure out my idea first" | `skills/plan-my-idea.md` |
 | big vague feature ("build me a marketplace", "I want something like Airbnb") before specifics | `skills/plan-my-idea.md` |
 | "add payments", "let me take money", "sell something", "charge people" | `skills/setup-payments.md` |