repo-fingerprintlisted

# VibeFlow Repo Fingerprint Scans an existing codebase and writes a compact, evidence-backed snapshot to `.vibeflow/artifacts/repo-fingerprint.json`. Every field records the file(s) that justified the detection, so downstream skills can audit the inference. ## Detection Priorities (never guess) 1. **Package manifest first** — `package.json`, `pyproject.toml`, `go.mod`, `Cargo.toml`, `pom.xml`, `build.gradle(.kts)`. 2. **Import graph second** — a top-hit grep for `from fastify`, `from express`, `from nestjs`, `import "fmt"`, etc. confirms what the manifest declared. 3. **Heuristics last** — directory layout (`src/`, `app/`, `pkg/`) is used only to fill gaps, and the finding is tagged `confidence: 0.5`. ## Output Schema ```json { "generatedAt": "ISO-8601", "languages": [{ "name": "typescript", "files": 142, "evidence": ["package.json"] }], "frameworks": [{ "name": "fastify", "version": "^4.26.0", "evidence": ["package.json", "src/server.ts:3"] }], "testRunners": [{ "name": "vitest", "evidence": ["package.json", "vitest.config.ts"] }], "buildTools": [{ "name": "tsc", "evidence": ["tsconfig.json"] }], "moduleLayout": { "sourceDirs": ["src/"], "testDirs": ["tests/", "src/**/*.test.ts"], "entryPoints": ["src/index.ts"] }, "hotspots": [ { "finding": "src/legacy/ has 2k lines untouched in 18 months", "why": "git log --since suggests cold code, high change ripples", "impact": "higher regression risk when modified", "c