vibesubin 0.3.0

vibesubin 0.3.0 — three new skills, one split, tighter harsh mode.

⚠ Breaking change — migration

manage-config-env has been split into two skills. Your existing calls need to move:

If you used to call	Use this now
/manage-config-env for .env, secrets, .gitignore, secret rotation	/manage-secrets-env
/manage-config-env for branch strategy, dep pinning, directory layout, hardcoded paths	/project-conventions

The umbrella router (/vibesubin) already knows both — you only need to update direct /manage-config-env invocations. Re-run /plugin marketplace update and the new names are picked up automatically.

New skills

manage-secrets-env — the high-stakes half of the old manage-config-env. Four-bucket decision tree for where a value lives, .env ↔ .env.example drift check, default-safe .gitignore template, full secret lifecycle (add / update / rotate / remove / migrate / audit drift / provision new environment).

project-conventions — the low-stakes half. Picks GitHub Flow for you, enforces exact-pinned production dependencies with a committed lockfile, pushes toward domain-first directory layout, audits for absolute paths and literal IPs in source.

manage-assets — diagnosis-only bloat scan. Detects oversized files in the working tree, large blobs hiding in git history, LFS migration candidates, asset-directory growth, duplicate binaries. Never deletes, never rewrites history — every destructive action hands off to refactor-verify for verification. Pairs especially well with open-sourcing.

unify-design — web-dev design-system auditor and token extractor. Detects the framework (Tailwind v3, Tailwind v4, CSS Modules, styled-components, Emotion, Material UI, Chakra UI, vanilla CSS), scaffolds a tokens file with opinionated defaults if missing, audits for drift (hardcoded hex, arbitrary Tailwind values, inline styles, duplicate Button/Card/Nav/Logo components, near-match colors), and rewrites drift back to tokens. Multi-file consolidations hand off to refactor-verify.

Improvements

• Harsh mode now covers every specialist. Previously only 2 of 6 workers implemented the tone=harsh marker switch; the umbrella propagated the marker but the other 4 silently fell back to balanced output. All 9 workers now implement the switch — /vibesubin harsh actually feels harsh end-to-end.
• write-for-ai enforces objectivity. A new section rules out marketing drift in generated docs: no unbacked adjectives (fast, production-ready, best-in-class), no superlatives without comparison, no weasel hedging, and every capability claim ships with a verification command. Enforced via the mandatory self-review checklist.
• fight-repo-rot adds test rot. Dead tests, obsolete fixtures, orphaned snapshot files, skipped tests older than six months, hardcoded sleeps inside test bodies, and oversized test files. Hands off to refactor-verify with the same HIGH/MEDIUM/LOW confidence framing as production dead code.
• vibesubin umbrella drops time estimates. Phrases like couple of minutes, Est. time column, 20 min example rows are gone — they were unreliable across environments and read as promises. Replaced with qualitative size buckets (S / M / L).

Under the hood

• docs/PHILOSOPHY.md now exists. MAINTENANCE.md had referenced it in the "future AI sessions should read this file" list, but the file was missing.
• plugins/vibesubin/.claude-plugin/plugin.json was stuck at 0.1.0 while .claude-plugin/marketplace.json had advanced to 0.2.0. Both now sync at 0.3.0.
• README.ko.md, README.ja.md, README.zh.md were rewritten end-to-end for the 0.3.0 structure in natural-voice translations, not literal.

The full, functional CHANGELOG is at CHANGELOG.md.