estevanhernandez-stack-ed/vibe-plugins

Research feeder for vibe-thesis projects. Discovers cutting-edge thesis topics, gathers primary sources / opposing positions / methodological precedents across five research axes, and emits research notes + a Pandoc-ready BibTeX bibliography in vibe-thesis-shaped subdirectories ready to drop into ThesisStudio. Optional Smart Brevity blog adapter for BlogStudio.

Plot your course from idea to shipped app. Vibe coding course correction delivered as Claude Code slash commands: onboard, scope, prd, spec, checklist, build, iterate, reflect, reconnect, evolve-cart, tend, vitals, friction, coder-voice.

AI-powered documentation gap analyzer. Scans your codebase, classifies your project, identifies missing technical documentation, and generates professional docs from your existing artifacts.

The deep retrospective for your Claude Code work — the verbose /insights over your full history and every machine you code on. Coverage, where-was-I recall, token/cost (incl. the cache reveal), trends, how-you-work (tool mix, delegation, per-machine), ranked open-threads with prune candidates, decisions, languages, per-session friction/satisfaction/outcome, and a synthesized narrative read. Personal by default; optionally keep chosen sources or repos local-only (the privacy wall). Standalone engine; optional cc-logs extra keeps token numbers aligned with sibling tools. MCP-agnostic decisions overlay. No telemetry.

Iterate on a shipped product, one PR at a time. First-run bootstrap identifies the app type and interviews you for competitors + framework pins. Recommends the right mode (feature-add, competitive, ux-polish, bug-bash) for the moment; ships with regression-aware, small-diff posture. Includes radar (digest what's new), rate (score an idea before committing), spy (single-URL competitor read), scan-releases (per-lib changes since last bump), upgrade (surgical lib bumps with codemods when available), ship (hand-written brief, no ingestion). Composes with vibe-cartographer when installed (heavy-iteration delegation). Self-evolves via session + friction logging — :evolve-iterate proposes improvements based on your usage patterns. No telemetry.

Bootstrap a 626Labs-pattern CLAUDE.md — the load-bearing structural file every agent decision in the repo rests on. Interviews the user for org, decision surface, voice rules, and persona before drafting, so the produced file reflects THEIR conventions, not 626Labs defaults baked in. Tenant-aware; adapts to repo type (code platform / marketing site / long-form writing / mixed). Use when starting a new repo or when an existing CLAUDE.md is stale.

Localize your app's UI without corrupting its logic. Scans every user-facing string by kind — JSX text, placeholder, aria-label, title, alt, toast, locale-sensitive date — and emits a six-block readiness brief; audits the stack for the gotchas that bite i18n retrofits (firebase-admin in SSR, structural-vs-presentational Intl, the timeZone decision, RTL surfaces, dynamic-route guard globs); then runs a confidence-routed extract -> wire -> translate -> guard loop that mutates only with per-file backups and idempotent re-runs. Per-site routing means a heavy mixed component extracts its clean strings while genuinely-ambiguous sites stay inline. Deep on next-intl + App Router — cookie-driven locale, catalog parity guard, jsx-no-literals ratchet, ESM jest patch — with a real adapter seam that reports an honest not-yet-implemented for the rest instead of mishandling them. Dogfooded end-to-end on Celestia3: ~67 components / 720 UI strings localized with the app's own test suite staying green.

The prompt-engineering loop for your app's LLM features. /vibe-prompt:scan inventories every prompt site (registry and inline, TS/JS and Python, monorepo-aware); :audit fires 13 structural smells (F1-F13) scored on 5 dimensions, including the F10-F12 prompt-injection family; :eval behaviorally tests prompts against your production model with a calibrated LLM-judge (position-bias mitigation, verbosity penalty, optional jailbreak fixtures — cost-gated); :grade synthesizes composite grades with monotonic-baseline regression tracking; :remediate closes the audit-to-fix loop with confidence-routed diffs, backup, and rollback; :iterate proposes new AI features your app could ship next. Composer-aware across four composer kinds; injection findings hand off to vibe-sec. Validated on a real Next.js + Firebase + Gemini app, where it caught a live cross-vendor persona leak the master directive was supposed to prevent.

Security gap finder for vibe-coded apps — the tier-aware security audit and orchestration layer. Defers to gitleaks/OSV-Scanner/Semgrep/Trivy when present, falls back to an in-house baseline when absent, and owns the tier classification (mapped to OWASP ASVS), severity calibration, four-band report, confidence-routed fixes with destructive-action overrides, and threat-model synthesis. /vibe-sec:audit runs the full twelve-concern audit (secrets, deps, supply-chain, config, crypto/PII, auth-model, OWASP survey, rate-limiting, license-compliance, data-posture, threat-model, tier-scoring) — plus :scan, :deps, :gate (CI-safe), :posture, :fix, :threat-model, and :research. License compliance is distribution-model aware: GPL in a shipped binary flags high, the dual-license OR-trap doesn't flag at all. Validated on real Firebase apps.

Take it with you. Capture a feature out of one repo as a portable bundle (architecture sketch, contract surface, AI prompts, verbatim source snapshot, gotchas); plant it into another with stack-aware adaptation. /vibe-taker:capture reads source autonomously and only fires the interview gate when WHY can't be derived from source alone. /vibe-taker:plant detects the target's stack and picks code-lift on high match, spec-driven re-implementation on low match, or declines on hard cross-language mismatch — always with a mandatory diff confirmation before any write. /vibe-taker:list surfaces what's on the cross-repo shelf with search and Jaccard near-duplicate hints. Local-only by default; ~/.vibe-taker/library/ is the single source of truth.

Test analyzer and generator for vibe-coded apps. Classifies by app type and maturity tier, measures coverage honestly (no cherry-picked denominators), generates tests proportional to deployment risk — and catches the broken harnesses every other test tool assumes away.

Beta — scaffold and co-author thesis-shaped artifacts (academic dissertations, master's theses, long-form research articles, position essays) with Claude Code. Works standalone with bundled templates; pairs with thesis-engine (optional research feeder) and the ThesisStudio template (optional richer styling) but neither is required. Say 'scaffold a vibe thesis project,' get a styled PDF skeleton plus a working render pipeline in roughly 30 minutes. Includes the author-voice pipeline — voice synthesis, a smooth pass, and the synthesis-guard tone lint — so drafts read like you, not like a model.

Generate user onboarding for your app — but only when it earns one. Reads your UI surfaces, names the aha moment, and gives an honest verdict on whether a tour helps or hurts before building anything (don't-build is a first-class output). When warranted, generates a short, instrumented, replayable Driver.js spotlight tour with a human-gated data-tour anchor pass, a 6-event analytics adapter, and trigger wiring that reuses your app's existing first-run state. Emitted tours carry a keyboard/AT contract — focus return on close, escape hatch intact — enforced by emit-time assertions and a vitals check, not prose. Walkthrough mode for consumer apps; training mode comes later. Self-evolves via session + friction logging. No telemetry.

Session wrap-up that reads the breadcrumb trail your toolkit already left — not a cold reconstruction. Multi-repo aware: surfaces what shipped across every repo the session touched, what's uncommitted, and what's unpushed, then gates commit + push on the current repo only (read wide, mutate narrow). Six-section handoff written to docs/session-wraps/ and inline; every gate defaults to no-action with a second confirmation on secret-pattern matches. Pluggable decision log (Markdown / JSONL / 626Labs MCP / off). Self-evolving via session + friction logs. No telemetry.