feat: initialize foundation and hybrid gRPC core loop

.github/labeler.yml

@@ -0,0 +1,21 @@
+# Configuration for actions/labeler
+
+rust:
+  - changed-files:
+    - any-glob-to-any-file: ['crates/**', 'Cargo.toml', 'Cargo.lock']
+
+python:
+  - changed-files:
+    - any-glob-to-any-file: ['python/**', 'requirements.txt', 'pyproject.toml']
+
+mojo:
+  - changed-files:
+    - any-glob-to-any-file: ['**/*.mojo', 'mojoproject.toml']
+
+documentation:
+  - changed-files:
+    - any-glob-to-any-file: ['**/*.md', 'docs/**']
+
+github:
+  - changed-files:
+    - any-glob-to-any-file: ['.github/**']

.github/workflows/ci.yml

@@ -37,6 +37,9 @@ jobs:
           else
             echo "skip=false" >> $GITHUB_OUTPUT
           fi
+      - name: Install dependencies
+        if: steps.guard.outputs.skip != 'true'
+        run: sudo apt-get update && sudo apt-get install -y protobuf-compiler
       - name: Setup Rust
         if: steps.guard.outputs.skip != 'true'
         uses: dtolnay/rust-toolchain@stable
@@ -63,6 +66,9 @@ jobs:
           else
             echo "skip=false" >> $GITHUB_OUTPUT
           fi
+      - name: Install dependencies
+        if: steps.guard.outputs.skip != 'true'
+        run: sudo apt-get update && sudo apt-get install -y protobuf-compiler
       - name: Setup Rust
         if: steps.guard.outputs.skip != 'true'
         uses: dtolnay/rust-toolchain@stable

.github/workflows/security.yml

@@ -7,6 +7,10 @@ on:
   schedule:
     - cron: '0 0 * * 1'
 
+permissions:
+  contents: read
+  security-events: write
+
 jobs:
   security-smoke-test:
     name: Security baseline
@@ -47,6 +51,7 @@ jobs:
     permissions:
       contents: read
       security-events: write
+      actions: read
     steps:
       - uses: actions/checkout@v4
       - name: Skip if no Cargo.toml
@@ -58,6 +63,9 @@ jobs:
           else
             echo "skip=false" >> $GITHUB_OUTPUT
           fi
+      - name: Install dependencies
+        if: steps.guard.outputs.skip != 'true'
+        run: sudo apt-get update && sudo apt-get install -y protobuf-compiler
       - name: Setup Rust
         if: steps.guard.outputs.skip != 'true'
         uses: dtolnay/rust-toolchain@stable
@@ -76,7 +84,7 @@ jobs:
         continue-on-error: true
       - name: Upload SARIF
         if: steps.guard.outputs.skip != 'true'
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: results.sarif
 

.gitignore

@@ -0,0 +1,5 @@
+/target
+/target/
+node_modules/
+.DS_Store
+*.log

CLAUDE.md

@@ -23,6 +23,14 @@ This file is the operational core for Claude. Gemini CLI and Claude MUST follow
    - Trigger stack-specific formatting (e.g., `cargo fmt`).
    - Run `pre-commit run --all-files` if available.
 
+## 🌐 Ecosystem Interaction Protocol
+1. **Multi-Repo Boundaries:** You MUST NOT directly modify code in other `vtuber-*` repositories (especially `vtuber-contracts`).
+2. **Issue-Based Communication:** When a change or resource is needed from another repository, you MUST:
+   - Draft the requirements locally in `docs/specs/ecosystem/`.
+   - Create a GitHub Issue in the target repository using `gh issue create`.
+   - Reference the Issue URL in your local progress reports.
+3. **Dependency Sync:** Only implement features depending on external changes (like new Schemas) after the corresponding Issue is resolved and released.
+
 ## 🛠️ Tooling & Standards
 - **Translation:** All technical specifications are English. `locales/` MUST be kept in sync and translated for users documentation.
 - **Workflow Mastery:** Use `/superpower:executing-plans` for feature work.