VibeDev
4pixeltechBR · 4pixeltechBR/VibeDev
Provides a governance framework for AI-assisted software development, orchestrating development cycles, defining phases, and ensuring security audits with a layman mode.
Framework de governança para desenvolvimento assistido por IA (Vibe Coding). / Governance framework for AI-assisted software development (Vibe Coding).
Preview
What you can do with it
- Structure AI agent's development process with defined phases and gates.
- Automatically conduct security audits during AI-assisted code generation.
- Guide AI agents with cost estimations and graceful project termination commands.
Safety check
No risky patterns found in the files we scanned.
Automated scan of the repo files. Always review code you run.
From the README
🚀 VibeDev + VibeShield Ecosystem / Ecossistema VibeDev + VibeShield
🌍 Read in / Leia em: English | Português
🇺🇸 English
VibeDev is a lightweight, rigorous governance framework specifically designed for AI-driven software development (Vibe Coding). Coupled with VibeShield, it provides automated security audits and native Layman Mode support.
🗺️ Ecosystem Structure
| Component | Role | When it triggers |
|---|---|---|
| VibeDev | Development cycle orchestrator. Defines phases, plans, gates, and post-mortems. | Every project session. |
| VibeShield | Security auditor. Detects authentication, database, API, and deploy actions. | Automatically via triggers G1-G7. |
🧭 Two Modes of Operation
The ecosystem automatically detects user profile via the modo_usuario field in PROJECT_STATE.md:
modo_usuario: tecnico(default): Formal risk registers, C1-C8 vulnerability categories, and OK/REVIEW/BLOCK verdicts.modo_usuario: leigo(Layman Mode): Auto-translated jargon (Glossary), mandatory cost estimation (Cost Guard), and/vd-killfor graceful exit.
Note: The written state in PROJECT_STATE.md always remains technical. Layman Mode only simplifies the conversational rendering.
🆕 What's new in v3.1.0
- 📖 Glossário Ativo — auto-translates jargon in Layman Mode (see
vibedev/references/glossario-leigo.md). - 💰 Guarda de Custo — mandatory 3-tier monthly cost estimation before leaving Phase 3 (see
vibedev/references/estimativa-custos.md). - 🪦
/vd-kill— graceful project termination command, archives state toIDEA_LOG.mdinstead of deleting. Anti-guilt.
🆕 What's new in v3.2.0
- ⏱️ Estimativas de Tempo Calibradas — realistic construction time by project category, surfaced before
/vd-start(seevibedev/references/tempo-construcao.md). - 🛡️ Anti-Feature-Creep — 3-layer scope containment during
/vd-build. Ideas land in backlog, not in code (seevibedev/references/anti-creep.md). - 🎯 Reconhecimento & Pausa — embedded rituals for sober progress acknowledgment + pause prompts at phase gates. Anti-burnout, anti-guilt.
🆕 What's new in v3.3.0 (Layman Lifecycle Complete)
- ✨
/vd-spark— pre-Phase-1 discovery for laymen with vague ideas. 4-round conversation extracts idea/persona/transformation/success-signal before/vd-startruns. Seevibedev/references/discovery-leigo.md. - 🚀
/vd-launch— post-Phase-7 communication blocks (elevator pitch, 3 tweet variants, LinkedIn post, landing page structure, beta email, private post-mortem) + 24h pre-launch checklist invibedev/assets/launch/. - 🇧🇷 Modo Brasil — auto-activated when pt-BR / BR context detected. BRL, Pix-first, LGPD explicit, BR hosting options. See
vibedev/references/brasil.md.
🆕 What's new in v3.4.0 (Layman Total + Country Mode)
- 🌍 Country Mode generic — 12 countries auto-detected by signals (TLD + currency + gateway + timezone). Replaces
brasil.md. Seevibedev/references/modo-pais.md. - 👋 Onboarding Tour — 3 messages in the first session for laymen (see
vibedev/references/onboarding-leigo.md). - 📊 Visual Progress Panel —
/vd-statusrenders an ASCII progress bar + phase checklist for laymen (seevibedev/references/painel-progresso.md). - 🤝 Confident Default Decision — IA chooses with 1-line justification when layman can't evaluate Type 1 options.
- 🛡️ Anti-"it's fine" validation —
/vd-checkrefuses vague approval. - 🔄 Automatic Recap — 7+ days gone = extended
/vd-statuswith options. - 💬 Assisted Feature Collection —
/vd-planopens with 3 conversational questions instead of "list 10 testable features."
🆕 What's new in v3.4.1 (Country Mode Reoriented)
- 🛠️ Country Mode reframed — the framework is civic technology for native developers building tools for their own country, with local gateways / hosts / laws / language. Not a guide for foreign companies entering other markets.
- 🇺🇦 🇷🇺 🇨🇳 CN / RU / UA reclassified from "Experimental" to "Stable (community-maintained)" with specific "known gaps — local contributor welcome" blocks per country.
🆕 What's new in v3.4.2 (Formal Credits)
- 🛠️ CREDITS.md at repository root with formal, dated, traceable record of people and papers that influenced VibeDev.
- 🔗 Hyperlinks to @sandeco and arXiv:2607.00038 added across release notes.
🆕 What's new in v3.5.0 (Router + Discipline)
- 🧭
/vd-helpcommand — router that maps the 11 VibeDev commands + emotional situations + main flow one-liner. Inspired byask-mattfrom mattpocock/skills (cited as competitive reference, not academic). Seevibedev/commands/vd-help.md. - 🏛️
.agents/adr/— 6 Architecture Decision Records documenting past and current design decisions (monolithic skill, country mode, 2 modes, anti-"tá", Sandeco credit, model-invoked-anunciado). - 🚫
.out-of-scope/— 7 documents explaining what VibeDev does NOT do (CI/CD, monorepo, issue tracker, low-code, replacement for VibeShield, stack recommendations, pretending to be VibeShield). - 🗣️ Invocation model in SKILL.md — explicit classification of all 11 commands + 7 silent rules as either
user-invokedormodel-invoked-anunciado. The adaptation twist from Pocock: we announce model-triggered actions instead of running them silently, because laymen need to see what the framework is doing.
🆕 What's new in v3.6.0 (Changesets + VibeShield v2.0.0)
- ⚙️ Changesets workflow at repo root —
pnpm changesetstyle, inspired by mattpocock/skills. README at.changeset/README.md. First changeset isinitial-setup.md(this release). - 🛡️ VibeShield v2.0.0 — major version bump for scope change.
vibeshield-code-reviewskill atvibeshield/commands/code-review.md. User-invoked. R