Internal - change a Porkbun-registered domain's nameservers to point to Cloudflare. Uses Porkbun's REST API v3 directly via curl with API key + secret (no CLI install). Triggered by /add-domain when the registrar is Porkbun.
Internal skill called by /add-domain. Configures a custom domain in Resend for professional email sending via the Resend REST API (curl + key from the vault). Adds the DNS records (SPF, DKIM, MX bounce) via the Cloudflare REST API (curl + Cloudflare token from the vault). No Resend CLI. Not meant to be called directly…
Internal - guide the user click-by-click to change a Squarespace-registered domain's nameservers manually. Squarespace shut down the Google Domains API after the 2024 acquisition - there is no public API for nameserver changes. Triggered by /add-domain when the registrar is Squarespace (typically a legacy Google…
Internal - guarantees the project can call a model through its single AI brick (src/server/ai.ts, OpenRouter): a validated budget, a provider-side spending cap, and the no-training routing. Not meant to be invoked directly by users.
Internal preflight - make sure the Bitwarden vault is unlocked before a skill reads any global key. Run at the start of every skill that will consume a vault secret (Cloudflare, Neon, Resend/Brevo, Hostinger, Anthropic…), so the unlock window pops once up-front instead of a key-read silently failing mid-flow. Not…
Internal helper to generate a cryptographically secure random secret (API key, JWT secret, webhook secret, CRONSECRET, etc.). Delegates to the bundled scripts/generate-secret.mjs. Shell-safe by default. Invoked by skills that need a fresh secret (add-auth AUTHSECRET, add-cron CRONSECRET, webhook secrets). Not meant to…
Internal pattern for reading a secret from the user's Bitwarden vault inside any skill. Defines the canonical Bash idiom (read into a shell variable, never print) plus the auto-unlock orchestration (if the vault is locked or the 12h session expired, open the unlock window, then retry). Referenced by every skill that…
Internal helper to hash a password with Node's native scrypt (NOT bcrypt - bcrypt hashes contain $ characters that break shell and env var handling). Delegates to the bundled scripts/hash-password.mjs. Can hash a provided password or generate + hash a random one. Output format is salt:hash (hex:hex), shell-safe. Used…
Internal helper invoked by /start. One-time migration for users coming from a Hypervibe version older than 2.5: consolidates the old separate background mechanisms (db-backup, quota-monitor, cron-dispatcher, each a loose Cloudflare worker) into the new unified shared worker hypervibe-jobs (one worker, one cron slot…
Internal helper to pull environment variables from Vercel for a given target (production, preview, development) and return them as JSON or merge them into the local .env.local. Delegates to the bundled scripts/pull-env-vars.mjs. Used by skills that need to read current Vercel state - rotate-secret (verify before…
Internal helper to push environment variables safely to the local .env AND to Vercel (production + preview + development). Delegates to the bundled scripts/push-env-vars.mjs. Triggered by any skill that needs to set env vars (add-db, add-auth, add-stripe, add-email, add-google-auth, add-github-auth, add-storage…
Internal. Sets up 2FA (TOTP) on a hypervibe admin-credentials login - mandatory for the single admin. TOTP code after the password, trusted-device cookie (24h), backup codes, idle auto-logout. The TOTP secret + backup codes are written to the Bitwarden vault (never the chat). Invoked by /add-2fa when the project is in…
Internal. Sets up optional per-user 2FA (TOTP) on a hypervibe user-accounts auth. Each user enables 2FA from their account page (scan a QR, confirm a code), with the secret + one-off backup codes stored per-user in the database. Login asks for the code after the password only for users who enabled it. Invoked by…
Internal helper - sets up NextAuth in admin-credentials mode (fixed login via env vars, no DB, no OAuth). Invoked by add-auth when the user chose the "admin-only interface" option. Installs NextAuth core, configures the CredentialsProvider with a single hardcoded admin, generates dev + prod password hashes, adds rate…
Internal helper - sets up NextAuth in user-credentials mode (DB-backed email+password auth with signup, signin, account page with delete, and optional forgot/reset password if email is configured). Invoked by add-auth when the user chose the "system for users" option. Also offers OAuth add-ons (Google, GitHub) after…
Internal helper invoked by /add-collab. Sets up GitHub Actions to deploy a Vercel-linked project, replacing Vercel's native Git integration. Configures Vercel token, GitHub secrets, the deploy workflow file, updates CLAUDE.md, and tells the user to suspend Vercel's native integration. Not meant to be invoked directly…
Internal helper to connect Google Search Console via a service account stored in the Bitwarden vault (no MCP, no Python, no restart). Guides the one-time creation of a Google service account, stores its JSON key in the vault (item GSCSERVICEACCOUNT), and grants it owner access on the GSC property. Triggered by /gsc…
Internal helper to set up IndexNow (proactive URL submission to Bing, Yandex, Seznam) on a Next.js project. Generates the proof key, drops the verification file in /public, creates a reusable helper, and wires the ping to the project's publication event (cron, postbuild, webhook, or manual CLI). Triggered by /geo when…
Internal helper that ensures the Render API key lives in the Bitwarden vault (item RENDER, field apikey). Triggered by /add-automation and create-agent before any Render REST API call. No CLI install - Render is driven 100% via its REST API (api.render.com/v1). Not meant to be invoked directly by users.
Internal helper to install and authenticate the Stripe CLI on the user's machine. Triggered automatically by /add-stripe (and any other skill that needs Stripe CLI access) when stripe --version fails or when the user is not logged in. Not meant to be invoked directly by users.
Internal helper to install and authenticate Wrangler (the Cloudflare CLI). Triggered automatically by /add-storage (and any other skill that needs Wrangler) when wrangler --version fails or when wrangler whoami reports the user is not logged in. Not meant to be invoked directly by users.
Internal helper - records a cloud resource in the project's resource manifest (.hypervibe/resources.json), right after a skill creates or adopts it. The manifest is what /save-project and /delete-project read first, instead of guessing resources by name similarity. Triggered by every provisioning skill (add-db…
Internal helper to add or update entries in the project CLAUDE.md file idempotently. Accepts a target section (Stack, Key Commands, Conventions, Environment Variables, or a custom heading) and one or more lines to add. Detects and skips duplicates so re-running a skill doesn't add the same line twice. Creates missing…
Internal helper to add or remove subprocessors in the project's RGPD privacy policy registry idempotently. Delegates to the bundled scripts/update-privacy-policy.mjs. Triggered by every add- skill that introduces a third-party data processor (add-db, add-auth, add-google-auth, add-github-auth, add-stripe, add-email…