@relipa/ai-flow-kit 0.1.8 → 0.1.9

package/scripts/remove.js

@@ -1,224 +1,251 @@
-const fs = require('fs-extra');
-const path = require('path');
-const chalk = require('chalk');
-const { confirm } = require('@inquirer/prompts');
-
-const PROJECT_DIR = process.cwd();
-const AIFLOW_DIR  = path.join(PROJECT_DIR, '.aiflow');
-const STATE_FILE  = path.join(AIFLOW_DIR, 'state.json');
-
-// ──────────────────────────────────────────────────────────────
-// Entry point
-// ──────────────────────────────────────────────────────────────
-
-module.exports = async function remove(options = {}) {
-    try {
-        if (options.global) return await removeGlobal();
-        if (options.version) return await removeVersion(options.version);
-        return await removeFromProject();
-    } catch (err) {
-        console.error(chalk.red(`Error: ${err.message}`));
-    }
-};
-
-// ──────────────────────────────────────────────────────────────
-// Case 1: Remove ai-flow-kit setup from current project
-// Deletes .aiflow/, .claude/skills, .claude/hooks, .claude/settings.json, .rules/
-// Does NOT delete CLAUDE.md or .mcp.json (user content)
-// ──────────────────────────────────────────────────────────────
-
-async function removeFromProject() {
-    if (!(await fs.pathExists(AIFLOW_DIR))) {
-        console.log(chalk.yellow('ai-flow-kit is not initialized in this project.'));
-        return;
-    }
-
-    console.log(chalk.yellow('\nThis will remove ai-flow-kit from the current project:'));
-    console.log(chalk.gray('  • .aiflow/          (state, versions, context, memory)'));
-    console.log(chalk.gray('  • .claude/skills/   (superpowers + custom skills)'));
-    console.log(chalk.gray('  • .claude/hooks/    (SessionStart hook)'));
-    console.log(chalk.gray('  • .claude/settings.json (hook config)'));
-    console.log(chalk.gray('  • .rules/           (team rules)'));
-    console.log(chalk.gray('  ✗ CLAUDE.md and .mcp.json are NOT removed (your content)\n'));
-
-    const ok = await confirm({ message: 'Continue?' });
-    if (!ok) {
-        console.log(chalk.gray('Cancelled.'));
-        return;
-    }
-
-    // Remove .aiflow/
-    await fs.remove(AIFLOW_DIR);
-    console.log(chalk.green('✓ Removed .aiflow/'));
-
-    // Remove .claude/skills, hooks, settings.json — but keep the rest (e.g. context user may want)
-    const claudeDir   = path.join(PROJECT_DIR, '.claude');
-    const skillsDir   = path.join(claudeDir, 'skills');
-    const hooksDir    = path.join(claudeDir, 'hooks');
-    const settingsFile = path.join(claudeDir, 'settings.json');
-
-    if (await fs.pathExists(skillsDir)) {
-        await fs.remove(skillsDir);
-        console.log(chalk.green('✓ Removed .claude/skills/'));
-    }
-
-    if (await fs.pathExists(hooksDir)) {
-        await fs.remove(hooksDir);
-        console.log(chalk.green('✓ Removed .claude/hooks/'));
-    }
-
-    if (await fs.pathExists(settingsFile)) {
-        // Only remove the _aiflowKit hook entry, not the whole file
-        const settings = await fs.readJson(settingsFile).catch(() => ({}));
-        if (settings.hooks?.SessionStart) {
-            settings.hooks.SessionStart = settings.hooks.SessionStart.filter(
-                h => !h._aiflowKit
-            );
-            if (settings.hooks.SessionStart.length === 0) {
-                delete settings.hooks.SessionStart;
-            }
-            await fs.writeJson(settingsFile, settings, { spaces: 2 });
-            console.log(chalk.green('✓ Removed ai-flow-kit hook from .claude/settings.json'));
-        }
-    }
-
-    // Remove .rules/
-    const rulesDir = path.join(PROJECT_DIR, '.rules');
-    if (await fs.pathExists(rulesDir)) {
-        await fs.remove(rulesDir);
-        console.log(chalk.green('✓ Removed .rules/'));
-    }
-
-    // Clean up AI Tool files (CLAUDE.md, .cursorrules, etc.)
-    const { AI_TOOL_FILES } = require('./init');
-    const markerStart = '<!-- aiflow-kit-start -->';
-    const markerEnd   = '<!-- aiflow-kit-end -->';
-
-    for (const tool in AI_TOOL_FILES) {
-        const filePath = path.join(PROJECT_DIR, AI_TOOL_FILES[tool]);
-        if (!(await fs.pathExists(filePath))) continue;
-
-        let content = await fs.readFile(filePath, 'utf-8');
-        let cleaned = false;
-
-        if (content.includes(markerStart) && content.includes(markerEnd)) {
-            // Precise removal using markers
-            const startIndex = content.indexOf(markerStart);
-            const endIndex   = content.indexOf(markerEnd) + markerEnd.length;
-            content = content.slice(0, startIndex).trim() + '\n' + content.slice(endIndex).trim();
-            content = content.trim();
-            cleaned = true;
-        } else if (content.includes('## AI Skill Registry (Superpowers)')) {
-            // Fallback for legacy installs: remove sections by headers
-            console.log(chalk.yellow(`  ⚠ Found legacy aiflow sections in ${AI_TOOL_FILES[tool]}`));
-            const ok = await confirm({ message: `Remove ai-flow-kit sections from ${AI_TOOL_FILES[tool]}?`, default: true });
-            if (ok) {
-                // Heuristic: remove from "## AI Skill Registry" or "# Claude AI System Instructions"
-                // This is simple and covers most cases. For complex cases, user should manual clean.
-                const headers = [
-                    '# Claude AI System Instructions',
-                    '## AI Skill Registry (Superpowers)',
-                    '## MANDATORY: Strict Gate Workflow'
-                ];
-                let minIndex = content.length;
-                for (const h of headers) {
-                    const idx = content.indexOf(h);
-                    if (idx !== -1 && idx < minIndex) minIndex = idx;
-                }
-                if (minIndex < content.length) {
-                    content = content.slice(0, minIndex).trim();
-                    cleaned = true;
-                }
-            }
-        }
-
-        if (cleaned) {
-            if (content.length === 0) {
-                await fs.remove(filePath);
-                console.log(chalk.green(`✓ Deleted ${AI_TOOL_FILES[tool]} (it was aiflow-only)`));
-            } else {
-                await fs.writeFile(filePath, content);
-                console.log(chalk.green(`✓ Cleaned up ai-flow-kit instructions from ${AI_TOOL_FILES[tool]}`));
-            }
-        }
-    }
-
-    console.log(chalk.green('\n✨ ai-flow-kit removed from project.'));
-    console.log(chalk.gray('To reinstall: aiflow init'));
-}
-
-// ──────────────────────────────────────────────────────────────
-// Case 2: Uninstall the global npm package
-// ──────────────────────────────────────────────────────────────
-
-async function removeGlobal() {
-    console.log(chalk.yellow('\nThis will uninstall ai-flow-kit globally from your system.'));
-    console.log(chalk.gray('Project files (.aiflow/, .claude/, .rules/) are NOT affected.\n'));
-
-    const ok = await confirm({ message: 'Uninstall global package?' });
-    if (!ok) {
-        console.log(chalk.gray('Cancelled.'));
-        return;
-    }
-
-    const { execSync } = require('child_process');
-    try {
-        console.log(chalk.blue('Running: npm uninstall -g ai-flow-kit ...'));
-        execSync('npm uninstall -g ai-flow-kit', { stdio: 'inherit' });
-        console.log(chalk.green('\n✨ ai-flow-kit uninstalled globally.'));
-        console.log(chalk.gray('The `aiflow` command is no longer available.'));
-    } catch (err) {
-        // execSync throws on non-zero exit; message already printed via stdio: inherit
-        console.log(chalk.red('\nFailed to uninstall. Try manually: npm uninstall -g ai-flow-kit'));
-    }
-}
-
-// ──────────────────────────────────────────────────────────────
-// Case 3: Remove a specific cached version from .aiflow/versions/
-// ──────────────────────────────────────────────────────────────
-
-async function removeVersion(version) {
-    if (!(await fs.pathExists(STATE_FILE))) {
-        console.log(chalk.red('Project is not initialized. Run `aiflow init` first.'));
-        return;
-    }
-
-    const versionsDir = path.join(AIFLOW_DIR, 'versions');
-    const targetDir   = path.join(versionsDir, version);
-
-    if (!(await fs.pathExists(targetDir))) {
-        console.log(chalk.red(`Version v${version} is not cached in this project.`));
-
-        // Show what's available
-        if (await fs.pathExists(versionsDir)) {
-            const available = await fs.readdir(versionsDir);
-            if (available.length) {
-                console.log(chalk.gray(`Cached versions: ${available.map(v => `v${v}`).join(', ')}`));
-            }
-        }
-        return;
-    }
-
-    // Prevent removing the currently active version
-    const state = await fs.readJson(STATE_FILE);
-    if (state.current_version === version) {
-        console.log(chalk.red(`v${version} is currently active — cannot remove it.`));
-        console.log(chalk.gray('Switch to another version first: aiflow use <version>'));
-        return;
-    }
-
-    const ok = await confirm({ message: `Delete cached version v${version}?` });
-    if (!ok) {
-        console.log(chalk.gray('Cancelled.'));
-        return;
-    }
-
-    await fs.remove(targetDir);
-    console.log(chalk.green(`✓ Removed cached version v${version}.`));
-
-    // Show remaining versions
-    const remaining = await fs.readdir(versionsDir).catch(() => []);
-    if (remaining.length) {
-        console.log(chalk.gray(`Remaining: ${remaining.map(v => `v${v}`).join(', ')}`));
-    }
-}
+const fs = require('fs-extra');
+const path = require('path');
+const chalk = require('chalk');
+const { confirm } = require('@inquirer/prompts');
+
+const PROJECT_DIR = process.cwd();
+const AIFLOW_DIR  = path.join(PROJECT_DIR, '.aiflow');
+const STATE_FILE  = path.join(AIFLOW_DIR, 'state.json');
+
+// ──────────────────────────────────────────────────────────────
+// Entry point
+// ──────────────────────────────────────────────────────────────
+
+module.exports = async function remove(options = {}) {
+    try {
+        if (options.global) return await removeGlobal();
+        if (options.version) return await removeVersion(options.version);
+        return await removeFromProject();
+    } catch (err) {
+        console.error(chalk.red(`Error: ${err.message}`));
+    }
+};
+
+// ──────────────────────────────────────────────────────────────
+// Case 1: Remove ai-flow-kit setup from current project
+// Deletes .aiflow/, .claude/skills, .claude/hooks, .claude/settings.json, .rules/
+// Does NOT delete CLAUDE.md or .mcp.json (user content)
+// ──────────────────────────────────────────────────────────────
+
+async function removeFromProject() {
+    if (!(await fs.pathExists(AIFLOW_DIR))) {
+        console.log(chalk.yellow('ai-flow-kit is not initialized in this project.'));
+        return;
+    }
+
+    console.log(chalk.yellow('\nThis will remove ai-flow-kit from the current project:'));
+    console.log(chalk.gray('  • .aiflow/          (state, versions, context, memory)'));
+    console.log(chalk.gray('  • .claude/skills/   (superpowers + custom skills)'));
+    console.log(chalk.gray('  • .claude/hooks/    (SessionStart hook)'));
+    console.log(chalk.gray('  • .claude/settings.json (hook config)'));
+    console.log(chalk.gray('  • .rules/           (team rules)'));
+    console.log(chalk.gray('  • .codex/skills/    (Codex skill mirror)'));
+    console.log(chalk.gray('  • .codex/config.toml (only if kit-managed)'));
+    console.log(chalk.gray('  ✗ CLAUDE.md, AGENTS.md and .mcp.json are NOT removed (your content)\n'));
+
+    const ok = await confirm({ message: 'Continue?' });
+    if (!ok) {
+        console.log(chalk.gray('Cancelled.'));
+        return;
+    }
+
+    // Remove .aiflow/
+    await fs.remove(AIFLOW_DIR);
+    console.log(chalk.green('✓ Removed .aiflow/'));
+
+    // Remove .claude/skills, hooks, settings.json — but keep the rest (e.g. context user may want)
+    const claudeDir   = path.join(PROJECT_DIR, '.claude');
+    const skillsDir   = path.join(claudeDir, 'skills');
+    const hooksDir    = path.join(claudeDir, 'hooks');
+    const settingsFile = path.join(claudeDir, 'settings.json');
+
+    if (await fs.pathExists(skillsDir)) {
+        await fs.remove(skillsDir);
+        console.log(chalk.green('✓ Removed .claude/skills/'));
+    }
+
+    if (await fs.pathExists(hooksDir)) {
+        await fs.remove(hooksDir);
+        console.log(chalk.green('✓ Removed .claude/hooks/'));
+    }
+
+    if (await fs.pathExists(settingsFile)) {
+        // Only remove the _aiflowKit hook entry, not the whole file
+        const settings = await fs.readJson(settingsFile).catch(() => ({}));
+        if (settings.hooks?.SessionStart) {
+            settings.hooks.SessionStart = settings.hooks.SessionStart.filter(
+                h => !h._aiflowKit
+            );
+            if (settings.hooks.SessionStart.length === 0) {
+                delete settings.hooks.SessionStart;
+            }
+            await fs.writeJson(settingsFile, settings, { spaces: 2 });
+            console.log(chalk.green('✓ Removed ai-flow-kit hook from .claude/settings.json'));
+        }
+    }
+
+    // Remove .rules/
+    const rulesDir = path.join(PROJECT_DIR, '.rules');
+    if (await fs.pathExists(rulesDir)) {
+        await fs.remove(rulesDir);
+        console.log(chalk.green('✓ Removed .rules/'));
+    }
+
+    // Remove Codex assets. config.toml only if it still carries our header —
+    // a hand-edited config belongs to the developer.
+    const codexDir       = path.join(PROJECT_DIR, '.codex');
+    const codexSkillsDir = path.join(codexDir, 'skills');
+    const codexConfig    = path.join(codexDir, 'config.toml');
+
+    if (await fs.pathExists(codexSkillsDir)) {
+        await fs.remove(codexSkillsDir);
+        console.log(chalk.green('✓ Removed .codex/skills/'));
+    }
+    if (await fs.pathExists(codexConfig)) {
+        const cfg = await fs.readFile(codexConfig, 'utf-8').catch(() => '');
+        if (cfg.includes('# ai-flow-kit managed')) {
+            await fs.remove(codexConfig);
+            console.log(chalk.green('✓ Removed .codex/config.toml'));
+        } else {
+            console.log(chalk.gray('  Kept .codex/config.toml (hand-managed — not ours to delete)'));
+        }
+    }
+    // Drop .codex/ only when nothing of the developer's is left in it
+    if (await fs.pathExists(codexDir)) {
+        const leftovers = await fs.readdir(codexDir);
+        if (leftovers.length === 0) await fs.remove(codexDir);
+    }
+
+    // Clean up AI Tool files (CLAUDE.md, AGENTS.md, .cursorrules, etc.)
+    const { AI_TOOL_FILES } = require('./init');
+    const markerStart = '<!-- aiflow-kit-start -->';
+    const markerEnd   = '<!-- aiflow-kit-end -->';
+
+    for (const tool in AI_TOOL_FILES) {
+        const filePath = path.join(PROJECT_DIR, AI_TOOL_FILES[tool]);
+        if (!(await fs.pathExists(filePath))) continue;
+
+        let content = await fs.readFile(filePath, 'utf-8');
+        let cleaned = false;
+
+        if (content.includes(markerStart) && content.includes(markerEnd)) {
+            // Precise removal using markers
+            const startIndex = content.indexOf(markerStart);
+            const endIndex   = content.indexOf(markerEnd) + markerEnd.length;
+            content = content.slice(0, startIndex).trim() + '\n' + content.slice(endIndex).trim();
+            content = content.trim();
+            cleaned = true;
+        } else if (content.includes('## AI Skill Registry (Superpowers)')) {
+            // Fallback for legacy installs: remove sections by headers
+            console.log(chalk.yellow(`  ⚠ Found legacy aiflow sections in ${AI_TOOL_FILES[tool]}`));
+            const ok = await confirm({ message: `Remove ai-flow-kit sections from ${AI_TOOL_FILES[tool]}?`, default: true });
+            if (ok) {
+                // Heuristic: remove from "## AI Skill Registry" or "# Claude AI System Instructions"
+                // This is simple and covers most cases. For complex cases, user should manual clean.
+                const headers = [
+                    '# Claude AI System Instructions',
+                    '## AI Skill Registry (Superpowers)',
+                    '## MANDATORY: Strict Gate Workflow'
+                ];
+                let minIndex = content.length;
+                for (const h of headers) {
+                    const idx = content.indexOf(h);
+                    if (idx !== -1 && idx < minIndex) minIndex = idx;
+                }
+                if (minIndex < content.length) {
+                    content = content.slice(0, minIndex).trim();
+                    cleaned = true;
+                }
+            }
+        }
+
+        if (cleaned) {
+            if (content.length === 0) {
+                await fs.remove(filePath);
+                console.log(chalk.green(`✓ Deleted ${AI_TOOL_FILES[tool]} (it was aiflow-only)`));
+            } else {
+                await fs.writeFile(filePath, content);
+                console.log(chalk.green(`✓ Cleaned up ai-flow-kit instructions from ${AI_TOOL_FILES[tool]}`));
+            }
+        }
+    }
+
+    console.log(chalk.green('\n✨ ai-flow-kit removed from project.'));
+    console.log(chalk.gray('To reinstall: aiflow init'));
+}
+
+// ──────────────────────────────────────────────────────────────
+// Case 2: Uninstall the global npm package
+// ──────────────────────────────────────────────────────────────
+
+async function removeGlobal() {
+    console.log(chalk.yellow('\nThis will uninstall ai-flow-kit globally from your system.'));
+    console.log(chalk.gray('Project files (.aiflow/, .claude/, .rules/) are NOT affected.\n'));
+
+    const ok = await confirm({ message: 'Uninstall global package?' });
+    if (!ok) {
+        console.log(chalk.gray('Cancelled.'));
+        return;
+    }
+
+    const { execSync } = require('child_process');
+    try {
+        console.log(chalk.blue('Running: npm uninstall -g ai-flow-kit ...'));
+        execSync('npm uninstall -g ai-flow-kit', { stdio: 'inherit' });
+        console.log(chalk.green('\n✨ ai-flow-kit uninstalled globally.'));
+        console.log(chalk.gray('The `aiflow` command is no longer available.'));
+    } catch (err) {
+        // execSync throws on non-zero exit; message already printed via stdio: inherit
+        console.log(chalk.red('\nFailed to uninstall. Try manually: npm uninstall -g ai-flow-kit'));
+    }
+}
+
+// ──────────────────────────────────────────────────────────────
+// Case 3: Remove a specific cached version from .aiflow/versions/
+// ──────────────────────────────────────────────────────────────
+
+async function removeVersion(version) {
+    if (!(await fs.pathExists(STATE_FILE))) {
+        console.log(chalk.red('Project is not initialized. Run `aiflow init` first.'));
+        return;
+    }
+
+    const versionsDir = path.join(AIFLOW_DIR, 'versions');
+    const targetDir   = path.join(versionsDir, version);
+
+    if (!(await fs.pathExists(targetDir))) {
+        console.log(chalk.red(`Version v${version} is not cached in this project.`));
+
+        // Show what's available
+        if (await fs.pathExists(versionsDir)) {
+            const available = await fs.readdir(versionsDir);
+            if (available.length) {
+                console.log(chalk.gray(`Cached versions: ${available.map(v => `v${v}`).join(', ')}`));
+            }
+        }
+        return;
+    }
+
+    // Prevent removing the currently active version
+    const state = await fs.readJson(STATE_FILE);
+    if (state.current_version === version) {
+        console.log(chalk.red(`v${version} is currently active — cannot remove it.`));
+        console.log(chalk.gray('Switch to another version first: aiflow use <version>'));
+        return;
+    }
+
+    const ok = await confirm({ message: `Delete cached version v${version}?` });
+    if (!ok) {
+        console.log(chalk.gray('Cancelled.'));
+        return;
+    }
+
+    await fs.remove(targetDir);
+    console.log(chalk.green(`✓ Removed cached version v${version}.`));
+
+    // Show remaining versions
+    const remaining = await fs.readdir(versionsDir).catch(() => []);
+    if (remaining.length) {
+        console.log(chalk.gray(`Remaining: ${remaining.map(v => `v${v}`).join(', ')}`));
+    }
+}

package/scripts/update.js

@@ -126,7 +126,7 @@ module.exports = async function update(options = {}) {
 
     // Sync instruction files with the updated skills.
     // Support both old 'framework' (singular string) and new 'frameworks' (array).
-    const { setupFramework, AI_TOOL_FILES, ensureAiflowGitignored, setupClaudeCommands, copyDocsToProject } = require('./init');
+    const { setupFramework, AI_TOOL_FILES, ensureAiflowGitignored, setupClaudeCommands, copyDocsToProject, setupCodex } = require('./init');
     const frameworks = state.frameworks || (state.framework ? [state.framework] : []);
     const selectedTools = state.aiTools || Object.keys(AI_TOOL_FILES);
     for (const fw of frameworks) {
@@ -136,6 +136,10 @@ module.exports = async function update(options = {}) {
     // Install / refresh Claude Code custom commands (.claude/commands/)
     await setupClaudeCommands(projectDir);
 
+    // Refresh Codex assets (.codex/skills/, .codex/config.toml) when codex is selected.
+    // Runs after the skill copy above so the mirror picks up the new version's skills.
+    await setupCodex(projectDir, selectedTools);
+
     // Refresh .aiflow/docs with the latest docs/common/ (feeds `ak ask` / aiflow-help).
     // Without this, docs promoted after the project's `ak init` never reach the project.
     await copyDocsToProject(projectDir);

package/scripts/use.js

@@ -1072,11 +1072,15 @@ async function suggestNextStep() {
 
   console.log(chalk.cyan("\nNext Steps:"));
 
-  const hasCLI = aiTools.includes("claude") || aiTools.includes("gemini");
+  const hasCLI =
+    aiTools.includes("claude") ||
+    aiTools.includes("gemini") ||
+    aiTools.includes("codex");
   const hasIDE =
     aiTools.includes("claude") ||
     aiTools.includes("cursor") ||
-    aiTools.includes("copilot");
+    aiTools.includes("copilot") ||
+    aiTools.includes("codex");
 
   if (hasCLI) {
     console.log(chalk.white("\n  CLI:"));
@@ -1091,6 +1095,11 @@ async function suggestNextStep() {
         `    ${++step}. ${chalk.white("Gemini:")} Run ${chalk.bold.green("gemini")} then type ${chalk.bold.green('"start"')} or ${chalk.bold.green('"Gate 1"')}.`,
       );
     }
+    if (aiTools.includes("codex")) {
+      console.log(
+        `    ${++step}. ${chalk.white("Codex:")} Run ${chalk.bold.green("codex")} then use ${chalk.bold.green("/ak-coding")} ${chalk.gray("(or type \"Gate 1\")")}.`,
+      );
+    }
   }
 
   if (hasIDE) {
@@ -1098,6 +1107,16 @@ async function suggestNextStep() {
     console.log(
       `    Run ${chalk.bold.green("aiflow prompt")} → prompt auto-copied to clipboard → paste into your AI extension chat.`,
     );
+    if (aiTools.includes("codex")) {
+      console.log(
+        `    ${chalk.white("Codex (VS Code extension / ChatGPT desktop app):")} open this folder, then run ${chalk.bold.green("/ak-coding")} in the Codex panel.`,
+      );
+      console.log(
+        chalk.gray(
+          "      Codex has no session-start hook — start a NEW Codex session after `ak use` so it re-reads AGENTS.md and the ticket context.",
+        ),
+      );
+    }
   }
 
   console.log(

package/custom/rules/java/review-checklist.md

@@ -1,36 +0,0 @@
-# Code Review Checklist — Java / Spring Boot
-
-## Architecture
-- [ ] Controller only handles HTTP (parse request, call service, return response) — no business logic
-- [ ] Business logic resides in Service, not in Controller or Repository
-- [ ] Repository only performs data access — no business logic
-- [ ] Entity is not exposed directly — always use DTOs
-
-## Code Quality
-- [ ] No `@Autowired` field injection — use constructor injection (Lombok `@RequiredArgsConstructor`)
-- [ ] No `@Data` on Entity — use `@Getter @Setter` separately
-- [ ] No `new RuntimeException()` — create specific custom exceptions
-- [ ] No magic numbers/strings — use named constants
-- [ ] No dead code (commented-out code, unused variables)
-
-## Database & Performance
-- [ ] No N+1 queries — use `@EntityGraph` or `JOIN FETCH`
-- [ ] Lists are paginated — do not return the entire table
-- [ ] Read-only service methods have `@Transactional(readOnly = true)`
-- [ ] Indexes on columns frequently used in WHERE/JOIN
-
-## Testing
-- [ ] Unit tests for Service layer (Mockito)
-- [ ] Tests cover: happy path, error cases, edge cases
-- [ ] Do not mock things that don't need mocking
-
-## Security
-- [ ] Input is validated using Bean Validation (`@Valid`)
-- [ ] No logging of passwords, tokens, or PII
-- [ ] SQL injection is not possible (use parameterized JPA/JPQL)
-- [ ] Stack traces are not returned to the client
-
-## Logging
-- [ ] Use `@Slf4j` + SLF4J — no `System.out.println`
-- [ ] Correct log levels: `info` (normal), `warn` (recoverable), `error` (unexpected + exception)
-- [ ] Log messages have enough context for debugging (include ID, action)

package/custom/rules/ml-review-checklist.md

@@ -1,14 +0,0 @@
-# ML Review Checklist
-
-Before completing Gate 4 and creating a Pull Request, verify:
-
-- [ ] Evaluation metric matches the problem type and business goal defined in Gate 1.
-- [ ] Model beats the baseline by at least the success threshold defined in Gate 1.
-- [ ] No data leakage — all three types re-checked: target leakage, train/test contamination, and temporal leakage.
-- [ ] Result is reproducible: re-run with the logged seed, pinned environment, and saved config produces the same metric.
-- [ ] No overfitting: train / validation / test metric gap is acceptable and documented.
-- [ ] Error analysis performed: worst slices, classes, or failure cases identified and documented.
-- [ ] Robustness assessed: behavior under noise, shifted inputs, or edge cases verified; fairness across sensitive slices checked where applicable.
-- [ ] All experiments tracked: params, metrics, data version, and git commit SHA logged in MLflow / wandb for every run (including failures).
-- [ ] Model card present: intended use, training data, evaluation metrics, known limitations, and owner documented.
-- [ ] Impact on data pipeline assessed via `impact-analysis` skill and implications documented.

package/custom/rules/review-checklist.md

@@ -1,9 +0,0 @@
-# Code Review Checklist
-
-Before creating a Pull Request, verify:
-- [ ] Code compiles and passes all local tests.
-- [ ] No strict dependency on local environment (hardcoded IPs, paths).
-- [ ] Security checks: No exposed API keys, no raw SQL vulnerability.
-- [ ] Impact Analysis run (via `impact-analysis` skill) and implications documented.
-- [ ] Naming and Code Style rules observed.
-- [ ] Feature is covered by unit/feature tests where applicable.