@ryuenn3123/agentic-senior-core 5.4.0 → 5.6.0

package/.kilocode/rules/agentic-senior-core.md

@@ -3,6 +3,8 @@
 You write code like a staff engineer. Efficient, safe, maintainable.
 The best code is the code never written. Write only what the task needs.
 
+When you see a 50-line function that does what a stdlib one-liner does — replace it. When asked to add a dependency that duplicates a built-in — push back.
+
 Before writing any code, stop at the first step that holds:
 
 1. Does this need to be built at all?
@@ -17,8 +19,8 @@ Before writing any code, stop at the first step that holds:
 - Descriptive variable and function names. No cryptic abbreviations.
 - Early returns over deep nesting. Keep the main flow traceable.
 - Three similar lines is better than a premature abstraction.
-- Don't add features, refactor, or abstractions beyond what the task requires.
-- Don't design for hypothetical future requirements.
+- Scope changes to what the task requires. Features, refactors, and abstractions beyond scope need explicit user confirmation.
+- Design for current requirements. Defer speculative extensions until evidence shows near-term need.
 - Delete code that carries no behavior, safety, or test value.
 
 ## Architecture
@@ -40,10 +42,10 @@ Before writing any code, stop at the first step that holds:
 ## Error Handling
 
 - Fail fast on invalid input.
-- Don't add error handling for scenarios that can't happen. Only validate at system boundaries.
+- Handle only errors that can actually occur. Validate at system boundaries where untrusted input enters.
 - Structured error responses with safe details only.
 - Distinguish client errors (4xx) from server errors (5xx).
-- No silent swallowing. Log operational errors with context.
+- Surface every operational error with context. Empty catch blocks mask production issues.
 
 ## Testing
 
@@ -61,7 +63,7 @@ Before writing any code, stop at the first step that holds:
 
 ## Database
 
-- Avoid N+1 queries. Paginate all growable datasets.
+- Use eager loading or batching to eliminate N+1 queries. Paginate all growable datasets.
 - Multi-table mutations run inside transactions.
 - Monetary amounts: integer minor units or exact decimal. Never floats.
 - Schema changes require versioned, reversible migrations.
@@ -86,4 +88,4 @@ Before writing any code, stop at the first step that holds:
 
 ## Response Style
 
-Write the smallest complete answer. Never add greetings, narration, trailing summaries, padding, or emoji. Preserve exact commands, file paths, error messages, validation status, risks, and next actions.
+Lead with what the developer needs to act: the command, file path, code change, or decision point. Format: direct statement, then evidence. Preserve exact commands, file paths, error messages, validation status, risks, and next actions.

package/.kiro/steering/agentic-senior-core.md

@@ -3,6 +3,8 @@
 You write code like a staff engineer. Efficient, safe, maintainable.
 The best code is the code never written. Write only what the task needs.
 
+When you see a 50-line function that does what a stdlib one-liner does — replace it. When asked to add a dependency that duplicates a built-in — push back.
+
 Before writing any code, stop at the first step that holds:
 
 1. Does this need to be built at all?
@@ -17,8 +19,8 @@ Before writing any code, stop at the first step that holds:
 - Descriptive variable and function names. No cryptic abbreviations.
 - Early returns over deep nesting. Keep the main flow traceable.
 - Three similar lines is better than a premature abstraction.
-- Don't add features, refactor, or abstractions beyond what the task requires.
-- Don't design for hypothetical future requirements.
+- Scope changes to what the task requires. Features, refactors, and abstractions beyond scope need explicit user confirmation.
+- Design for current requirements. Defer speculative extensions until evidence shows near-term need.
 - Delete code that carries no behavior, safety, or test value.
 
 ## Architecture
@@ -40,10 +42,10 @@ Before writing any code, stop at the first step that holds:
 ## Error Handling
 
 - Fail fast on invalid input.
-- Don't add error handling for scenarios that can't happen. Only validate at system boundaries.
+- Handle only errors that can actually occur. Validate at system boundaries where untrusted input enters.
 - Structured error responses with safe details only.
 - Distinguish client errors (4xx) from server errors (5xx).
-- No silent swallowing. Log operational errors with context.
+- Surface every operational error with context. Empty catch blocks mask production issues.
 
 ## Testing
 
@@ -61,7 +63,7 @@ Before writing any code, stop at the first step that holds:
 
 ## Database
 
-- Avoid N+1 queries. Paginate all growable datasets.
+- Use eager loading or batching to eliminate N+1 queries. Paginate all growable datasets.
 - Multi-table mutations run inside transactions.
 - Monetary amounts: integer minor units or exact decimal. Never floats.
 - Schema changes require versioned, reversible migrations.
@@ -86,4 +88,4 @@ Before writing any code, stop at the first step that holds:
 
 ## Response Style
 
-Write the smallest complete answer. Never add greetings, narration, trailing summaries, padding, or emoji. Preserve exact commands, file paths, error messages, validation status, risks, and next actions.
+Lead with what the developer needs to act: the command, file path, code change, or decision point. Format: direct statement, then evidence. Preserve exact commands, file paths, error messages, validation status, risks, and next actions.

package/.openclaw/skills/asc/SKILL.md

@@ -14,8 +14,19 @@ Universal AI coding rules. Write code like a staff engineer.
 - `/asc-refactor` -- Structured refactoring workflow with pre-checks and validation
 - `/asc-review` -- Production-risk code review with severity-ordered findings
 - `/asc-audit` -- Security and architecture audit
+- `/asc-reference` -- Domain-specific rules (testing, API, database, frontend, infra, resilience)
+- `/asc-debt` -- Track deferred enforcement violations (add, list, resolve, summary)
 - `/asc-help` -- Show this help
 
+## Enforcement
+
+On plugin-tier hosts (Claude Code, Codex CLI, Copilot CLI), a PostToolUse hook fires after every Edit/Write and checks:
+- New dependencies against stdlib duplicates (decision ladder step 3)
+- LOC delta > 30 lines on edits (step 5)
+- New files > 50 lines (steps 1–2)
+
+Violations inject a nudge referencing the specific ladder step. The hook is silent when no issues are found.
+
 ## What It Does
 
 Loads universal engineering rules on every session: code quality, architecture, security, error handling, testing, API design, database, frontend, infrastructure, resilience, and async patterns.

package/.openclaw/skills/asc-debt/SKILL.md

@@ -0,0 +1,71 @@
+---
+name: asc-debt
+description: "Track deferred enforcement violations. Log, list, resolve, and summarize shortcuts deferred during ASC ladder enforcement."
+homepage: https://github.com/fatidaprilian/Agentic-Senior-Core
+license: MIT
+---
+
+# Debt Ledger
+
+Track deferred enforcement violations. When an ASC ladder nudge fires and the shortcut is accepted rather than fixed, log it here for later resolution.
+
+## Storage
+
+Entries persist in `.agent-context/state/debt-ledger.json` via MCP `state_read`/`state_write`. The ledger is a JSON array of entry objects.
+
+## Entry Format
+
+```json
+{
+  "id": "sequential integer",
+  "file": "path/to/file.ts",
+  "ladderStep": "3",
+  "violation": "Added axios — stdlib fetch covers this",
+  "addedAt": "ISO-8601 timestamp",
+  "status": "open | resolved",
+  "resolvedAt": "ISO-8601 timestamp or null"
+}
+```
+
+## Operations
+
+### Add Entry
+
+When an enforcement nudge fires and the violation is deferred:
+
+1. Read the current ledger via `state_read` (path: `debt-ledger.json`). If missing, start with `[]`.
+2. Append a new entry with the next sequential `id`, the file path, ladder step, and a one-line violation summary.
+3. Write the updated ledger via `state_write` (path: `debt-ledger.json`, mode: `overwrite`).
+4. Confirm: "Logged to debt ledger: [violation summary]"
+
+### List Open Debt
+
+1. Read the ledger via `state_read`.
+2. Filter to entries where `status` is `"open"`.
+3. Display as a table: ID, file, ladder step, violation, age.
+4. If no open entries, say so explicitly.
+
+### Resolve Entry
+
+When a deferred violation has been addressed:
+
+1. Read the ledger.
+2. Set the matching entry's `status` to `"resolved"` and `resolvedAt` to the current timestamp.
+3. Write the updated ledger.
+4. Confirm: "Resolved debt #[id]: [violation summary]"
+
+### Summary
+
+1. Read the ledger.
+2. Report: total entries, open count, resolved count, oldest open entry age.
+
+## When to Log
+
+Log a debt entry when ALL of these are true:
+- The PostToolUse enforcement hook fired a nudge
+- The agent acknowledged the nudge but proceeded without fixing the violation
+- The violation is deferrable (not a security issue — security violations must be fixed immediately)
+
+## Integration
+
+The `/asc` skill documents the enforcement loop. This ledger captures what enforcement flags but the session defers. Use `/asc-debt` at session end or before commits to review outstanding shortcuts.

package/.openclaw/skills/asc-reference/SKILL.md

@@ -0,0 +1,58 @@
+---
+name: asc-reference
+description: "Domain-specific coding rules for testing, API design, database queries, frontend components, infrastructure configs, and service resilience."
+homepage: https://github.com/fatidaprilian/Agentic-Senior-Core
+license: MIT
+---
+
+# ASC Domain Reference
+
+Domain-specific coding rules for testing, API design, database queries, frontend components, infrastructure configs, and service resilience. Load this skill when working on any of these domains.
+
+## Testing
+
+- Write tests for business logic and boundary failures, not implementation details.
+- Cover happy path, error paths, edge cases, and empty states.
+- Tests must be fast, isolated, deterministic.
+- Integration tests for critical data paths.
+- Sensitive mutations need idempotency or duplicate-submit coverage.
+- CI pipelines block on test failures.
+
+## API Design
+
+- Consistent resource naming and HTTP semantics.
+- Bounded list reads: always paginate or set explicit limits.
+- Idempotent for side-effect mutations. Document retry behavior.
+- Backward-compatible by default. Version breaking changes explicitly.
+- Sync docs in the same commit when changing API, CLI, or schema.
+
+## Database
+
+- Use eager loading or batching to eliminate N+1 queries.
+- Paginate all growable datasets. No unbounded queries.
+- Multi-table mutations run inside transactions.
+- Monetary amounts: integer minor units or exact decimal. Never floats.
+- Timestamps in UTC. No naive timestamps.
+- Schema changes require versioned, reversible migrations.
+- Never modify merged migrations. Create new ones.
+
+## Frontend
+
+- Semantic HTML before custom components.
+- WCAG 2.2 AA is the accessibility floor.
+- Responsive by default. Handle empty, loading, error, and offline states.
+- No placeholder, lorem, or TODO content in production UI.
+
+## Infrastructure
+
+- Container configs: multi-stage builds, minimal base images, non-root users, no baked secrets.
+- Configuration from environment, validated at startup. Fail fast if invalid.
+- Structured logging with correlation IDs. No PII in logs.
+
+## Resilience
+
+- Every outbound network call has a strict timeout.
+- Retries use exponential backoff with jitter and max attempt limits.
+- Only retry idempotent operations.
+- Circuit breakers for unhealthy dependencies.
+- Graceful degradation on non-critical dependency failure.

package/.openclaw/skills/asc-review/SKILL.md

@@ -7,6 +7,7 @@ Production-risk code review. Prioritize findings by severity.
 1. Read the changed files and understand the scope.
 2. For UI changes, check accessibility and design consistency.
 3. For API changes, check contract stability and documentation sync.
+4. Walk the decision ladder for each new file or dependency: does this need to exist, could the stdlib or an existing dependency handle it?
 
 ## Finding Priority Order
 
@@ -33,11 +34,11 @@ Production-risk code review. Prioritize findings by severity.
 - External input validated at trust boundaries.
 - Secrets, tokens, credentials not committed or logged.
 - Authorization enforced at a trusted boundary.
-- Error responses do not leak internals.
+- Error responses keep internal details out of client responses.
 
 ### Architecture
-- Layer boundaries clear. Controllers do not hold business logic.
-- No premature abstraction. No clever hacks.
+- Layer boundaries clear. Controllers handle protocol translation only; business logic stays in services.
+- Abstractions backed by real duplication, not prediction. Straightforward code over clever solutions.
 - Complexity budget applied: fewer moving parts without losing safety.
 
 ### Testing

package/.openhands/microagents/agentic-senior-core.md

@@ -3,6 +3,8 @@
 You write code like a staff engineer. Efficient, safe, maintainable.
 The best code is the code never written. Write only what the task needs.
 
+When you see a 50-line function that does what a stdlib one-liner does — replace it. When asked to add a dependency that duplicates a built-in — push back.
+
 Before writing any code, stop at the first step that holds:
 
 1. Does this need to be built at all?
@@ -17,8 +19,8 @@ Before writing any code, stop at the first step that holds:
 - Descriptive variable and function names. No cryptic abbreviations.
 - Early returns over deep nesting. Keep the main flow traceable.
 - Three similar lines is better than a premature abstraction.
-- Don't add features, refactor, or abstractions beyond what the task requires.
-- Don't design for hypothetical future requirements.
+- Scope changes to what the task requires. Features, refactors, and abstractions beyond scope need explicit user confirmation.
+- Design for current requirements. Defer speculative extensions until evidence shows near-term need.
 - Delete code that carries no behavior, safety, or test value.
 
 ## Architecture
@@ -40,10 +42,10 @@ Before writing any code, stop at the first step that holds:
 ## Error Handling
 
 - Fail fast on invalid input.
-- Don't add error handling for scenarios that can't happen. Only validate at system boundaries.
+- Handle only errors that can actually occur. Validate at system boundaries where untrusted input enters.
 - Structured error responses with safe details only.
 - Distinguish client errors (4xx) from server errors (5xx).
-- No silent swallowing. Log operational errors with context.
+- Surface every operational error with context. Empty catch blocks mask production issues.
 
 ## Testing
 
@@ -61,7 +63,7 @@ Before writing any code, stop at the first step that holds:
 
 ## Database
 
-- Avoid N+1 queries. Paginate all growable datasets.
+- Use eager loading or batching to eliminate N+1 queries. Paginate all growable datasets.
 - Multi-table mutations run inside transactions.
 - Monetary amounts: integer minor units or exact decimal. Never floats.
 - Schema changes require versioned, reversible migrations.
@@ -86,4 +88,4 @@ Before writing any code, stop at the first step that holds:
 
 ## Response Style
 
-Write the smallest complete answer. Never add greetings, narration, trailing summaries, padding, or emoji. Preserve exact commands, file paths, error messages, validation status, risks, and next actions.
+Lead with what the developer needs to act: the command, file path, code change, or decision point. Format: direct statement, then evidence. Preserve exact commands, file paths, error messages, validation status, risks, and next actions.

package/.roo/rules/agentic-senior-core.md

@@ -3,6 +3,8 @@
 You write code like a staff engineer. Efficient, safe, maintainable.
 The best code is the code never written. Write only what the task needs.
 
+When you see a 50-line function that does what a stdlib one-liner does — replace it. When asked to add a dependency that duplicates a built-in — push back.
+
 Before writing any code, stop at the first step that holds:
 
 1. Does this need to be built at all?
@@ -17,8 +19,8 @@ Before writing any code, stop at the first step that holds:
 - Descriptive variable and function names. No cryptic abbreviations.
 - Early returns over deep nesting. Keep the main flow traceable.
 - Three similar lines is better than a premature abstraction.
-- Don't add features, refactor, or abstractions beyond what the task requires.
-- Don't design for hypothetical future requirements.
+- Scope changes to what the task requires. Features, refactors, and abstractions beyond scope need explicit user confirmation.
+- Design for current requirements. Defer speculative extensions until evidence shows near-term need.
 - Delete code that carries no behavior, safety, or test value.
 
 ## Architecture
@@ -40,10 +42,10 @@ Before writing any code, stop at the first step that holds:
 ## Error Handling
 
 - Fail fast on invalid input.
-- Don't add error handling for scenarios that can't happen. Only validate at system boundaries.
+- Handle only errors that can actually occur. Validate at system boundaries where untrusted input enters.
 - Structured error responses with safe details only.
 - Distinguish client errors (4xx) from server errors (5xx).
-- No silent swallowing. Log operational errors with context.
+- Surface every operational error with context. Empty catch blocks mask production issues.
 
 ## Testing
 
@@ -61,7 +63,7 @@ Before writing any code, stop at the first step that holds:
 
 ## Database
 
-- Avoid N+1 queries. Paginate all growable datasets.
+- Use eager loading or batching to eliminate N+1 queries. Paginate all growable datasets.
 - Multi-table mutations run inside transactions.
 - Monetary amounts: integer minor units or exact decimal. Never floats.
 - Schema changes require versioned, reversible migrations.
@@ -86,4 +88,4 @@ Before writing any code, stop at the first step that holds:
 
 ## Response Style
 
-Write the smallest complete answer. Never add greetings, narration, trailing summaries, padding, or emoji. Preserve exact commands, file paths, error messages, validation status, risks, and next actions.
+Lead with what the developer needs to act: the command, file path, code change, or decision point. Format: direct statement, then evidence. Preserve exact commands, file paths, error messages, validation status, risks, and next actions.

package/.windsurf/rules/agentic-senior-core.md

@@ -3,6 +3,8 @@
 You write code like a staff engineer. Efficient, safe, maintainable.
 The best code is the code never written. Write only what the task needs.
 
+When you see a 50-line function that does what a stdlib one-liner does — replace it. When asked to add a dependency that duplicates a built-in — push back.
+
 Before writing any code, stop at the first step that holds:
 
 1. Does this need to be built at all?
@@ -17,8 +19,8 @@ Before writing any code, stop at the first step that holds:
 - Descriptive variable and function names. No cryptic abbreviations.
 - Early returns over deep nesting. Keep the main flow traceable.
 - Three similar lines is better than a premature abstraction.
-- Don't add features, refactor, or abstractions beyond what the task requires.
-- Don't design for hypothetical future requirements.
+- Scope changes to what the task requires. Features, refactors, and abstractions beyond scope need explicit user confirmation.
+- Design for current requirements. Defer speculative extensions until evidence shows near-term need.
 - Delete code that carries no behavior, safety, or test value.
 
 ## Architecture
@@ -40,10 +42,10 @@ Before writing any code, stop at the first step that holds:
 ## Error Handling
 
 - Fail fast on invalid input.
-- Don't add error handling for scenarios that can't happen. Only validate at system boundaries.
+- Handle only errors that can actually occur. Validate at system boundaries where untrusted input enters.
 - Structured error responses with safe details only.
 - Distinguish client errors (4xx) from server errors (5xx).
-- No silent swallowing. Log operational errors with context.
+- Surface every operational error with context. Empty catch blocks mask production issues.
 
 ## Testing
 
@@ -61,7 +63,7 @@ Before writing any code, stop at the first step that holds:
 
 ## Database
 
-- Avoid N+1 queries. Paginate all growable datasets.
+- Use eager loading or batching to eliminate N+1 queries. Paginate all growable datasets.
 - Multi-table mutations run inside transactions.
 - Monetary amounts: integer minor units or exact decimal. Never floats.
 - Schema changes require versioned, reversible migrations.
@@ -86,4 +88,4 @@ Before writing any code, stop at the first step that holds:
 
 ## Response Style
 
-Write the smallest complete answer. Never add greetings, narration, trailing summaries, padding, or emoji. Preserve exact commands, file paths, error messages, validation status, risks, and next actions.
+Lead with what the developer needs to act: the command, file path, code change, or decision point. Format: direct statement, then evidence. Preserve exact commands, file paths, error messages, validation status, risks, and next actions.

package/.zed/rules/agentic-senior-core.md

@@ -3,6 +3,8 @@
 You write code like a staff engineer. Efficient, safe, maintainable.
 The best code is the code never written. Write only what the task needs.
 
+When you see a 50-line function that does what a stdlib one-liner does — replace it. When asked to add a dependency that duplicates a built-in — push back.
+
 Before writing any code, stop at the first step that holds:
 
 1. Does this need to be built at all?
@@ -17,8 +19,8 @@ Before writing any code, stop at the first step that holds:
 - Descriptive variable and function names. No cryptic abbreviations.
 - Early returns over deep nesting. Keep the main flow traceable.
 - Three similar lines is better than a premature abstraction.
-- Don't add features, refactor, or abstractions beyond what the task requires.
-- Don't design for hypothetical future requirements.
+- Scope changes to what the task requires. Features, refactors, and abstractions beyond scope need explicit user confirmation.
+- Design for current requirements. Defer speculative extensions until evidence shows near-term need.
 - Delete code that carries no behavior, safety, or test value.
 
 ## Architecture
@@ -40,10 +42,10 @@ Before writing any code, stop at the first step that holds:
 ## Error Handling
 
 - Fail fast on invalid input.
-- Don't add error handling for scenarios that can't happen. Only validate at system boundaries.
+- Handle only errors that can actually occur. Validate at system boundaries where untrusted input enters.
 - Structured error responses with safe details only.
 - Distinguish client errors (4xx) from server errors (5xx).
-- No silent swallowing. Log operational errors with context.
+- Surface every operational error with context. Empty catch blocks mask production issues.
 
 ## Testing
 
@@ -61,7 +63,7 @@ Before writing any code, stop at the first step that holds:
 
 ## Database
 
-- Avoid N+1 queries. Paginate all growable datasets.
+- Use eager loading or batching to eliminate N+1 queries. Paginate all growable datasets.
 - Multi-table mutations run inside transactions.
 - Monetary amounts: integer minor units or exact decimal. Never floats.
 - Schema changes require versioned, reversible migrations.
@@ -86,4 +88,4 @@ Before writing any code, stop at the first step that holds:
 
 ## Response Style
 
-Write the smallest complete answer. Never add greetings, narration, trailing summaries, padding, or emoji. Preserve exact commands, file paths, error messages, validation status, risks, and next actions.
+Lead with what the developer needs to act: the command, file path, code change, or decision point. Format: direct statement, then evidence. Preserve exact commands, file paths, error messages, validation status, risks, and next actions.

package/AGENTS.md

@@ -3,6 +3,8 @@
 You write code like a staff engineer. Efficient, safe, maintainable.
 The best code is the code never written. Write only what the task needs.
 
+When you see a 50-line function that does what a stdlib one-liner does — replace it. When asked to add a dependency that duplicates a built-in — push back.
+
 Before writing any code, stop at the first step that holds:
 
 1. Does this need to be built at all?
@@ -17,8 +19,8 @@ Before writing any code, stop at the first step that holds:
 - Descriptive variable and function names. No cryptic abbreviations.
 - Early returns over deep nesting. Keep the main flow traceable.
 - Three similar lines is better than a premature abstraction.
-- Don't add features, refactor, or introduce abstractions beyond what the task requires.
-- Don't design for hypothetical future requirements.
+- Scope changes to what the task requires. Features, refactors, and abstractions beyond scope need explicit user confirmation.
+- Design for current requirements. Defer speculative extensions until evidence shows near-term need.
 - Delete code that carries no behavior, safety, or test value.
 
 ## Architecture
@@ -43,63 +45,17 @@ Before writing any code, stop at the first step that holds:
 ## Error Handling
 
 - Fail fast on invalid input.
-- Don't add error handling for scenarios that can't happen. Only validate at system boundaries.
+- Handle only errors that can actually occur. Validate at system boundaries where untrusted input enters.
 - Structured error responses with safe details only. Use standard error codes (RFC 9457 when applicable).
 - Distinguish client errors (4xx) from server errors (5xx).
-- No silent swallowing. Log operational errors with context.
-
-## Testing
-
-- Write tests for business logic and boundary failures, not implementation details.
-- Cover happy path, error paths, edge cases, and empty states.
-- Tests must be fast, isolated, deterministic.
-- Integration tests for critical data paths.
-- Sensitive mutations need idempotency or duplicate-submit coverage.
-- CI pipelines block on test failures.
-
-## API Design
-
-- Consistent resource naming and HTTP semantics.
-- Bounded list reads: always paginate or set explicit limits.
-- Idempotent for side-effect mutations. Document retry behavior.
-- Backward-compatible by default. Version breaking changes explicitly.
-- Sync docs in the same commit when changing API, CLI, or schema.
-
-## Database
-
-- Avoid N+1 queries. Use eager loading or batching.
-- Paginate all growable datasets. No unbounded queries.
-- Multi-table mutations run inside transactions.
-- Monetary amounts: integer minor units or exact decimal. Never floats.
-- Timestamps in UTC. No naive timestamps.
-- Schema changes require versioned, reversible migrations.
-- Never modify merged migrations. Create new ones.
-
-## Frontend
-
-- Semantic HTML before custom components.
-- WCAG 2.2 AA is the accessibility floor.
-- Responsive by default. Handle empty, loading, error, and offline states.
-- No placeholder, lorem, or TODO content in production UI.
-
-## Infrastructure
-
-- Container configs: multi-stage builds, minimal base images, non-root users, no baked secrets.
-- Configuration from environment, validated at startup. Fail fast if invalid.
-- Structured logging with correlation IDs. No PII in logs.
-
-## Resilience
+- Surface every operational error with context. Empty catch blocks mask production issues.
 
-- Every outbound network call has a strict timeout.
-- Retries use exponential backoff with jitter and max attempt limits.
-- Only retry idempotent operations.
-- Circuit breakers for unhealthy dependencies.
-- Graceful degradation on non-critical dependency failures.
+For domain-specific rules (Testing, API Design, Database, Frontend, Infrastructure, Resilience), use `/asc-reference`.
 
 ## Response Style
 
-Write the smallest complete answer that lets the developer act correctly.
+Lead with what the developer needs to act: the command, file path, code change, or decision point. Follow with context only when the action depends on it.
 
-Never add: greetings, affirmations, narration about what you are about to do, trailing summaries of what you just did, padding paragraphs, generic closing offers, or emoji.
+Format: direct statement, then evidence. Example — "Add `--strict` to tsconfig. Without it, nullable checks in `UserService.ts:42` are silently skipped."
 
-Always preserve: exact commands, file paths, line numbers, error messages, exit codes, validation status, assumptions, blockers, risks, and next actions.
+Preserve: exact commands, file paths, line numbers, error messages, exit codes, validation status, assumptions, blockers, risks, and next actions.

package/CONVENTIONS.md

@@ -3,6 +3,8 @@
 You write code like a staff engineer. Efficient, safe, maintainable.
 The best code is the code never written. Write only what the task needs.
 
+When you see a 50-line function that does what a stdlib one-liner does — replace it. When asked to add a dependency that duplicates a built-in — push back.
+
 Before writing any code, stop at the first step that holds:
 
 1. Does this need to be built at all?
@@ -17,8 +19,8 @@ Before writing any code, stop at the first step that holds:
 - Descriptive variable and function names. No cryptic abbreviations.
 - Early returns over deep nesting. Keep the main flow traceable.
 - Three similar lines is better than a premature abstraction.
-- Don't add features, refactor, or abstractions beyond what the task requires.
-- Don't design for hypothetical future requirements.
+- Scope changes to what the task requires. Features, refactors, and abstractions beyond scope need explicit user confirmation.
+- Design for current requirements. Defer speculative extensions until evidence shows near-term need.
 - Delete code that carries no behavior, safety, or test value.
 
 ## Architecture
@@ -40,10 +42,10 @@ Before writing any code, stop at the first step that holds:
 ## Error Handling
 
 - Fail fast on invalid input.
-- Don't add error handling for scenarios that can't happen. Only validate at system boundaries.
+- Handle only errors that can actually occur. Validate at system boundaries where untrusted input enters.
 - Structured error responses with safe details only.
 - Distinguish client errors (4xx) from server errors (5xx).
-- No silent swallowing. Log operational errors with context.
+- Surface every operational error with context. Empty catch blocks mask production issues.
 
 ## Testing
 
@@ -61,7 +63,7 @@ Before writing any code, stop at the first step that holds:
 
 ## Database
 
-- Avoid N+1 queries. Paginate all growable datasets.
+- Use eager loading or batching to eliminate N+1 queries. Paginate all growable datasets.
 - Multi-table mutations run inside transactions.
 - Monetary amounts: integer minor units or exact decimal. Never floats.
 - Schema changes require versioned, reversible migrations.
@@ -86,4 +88,4 @@ Before writing any code, stop at the first step that holds:
 
 ## Response Style
 
-Write the smallest complete answer. Never add greetings, narration, trailing summaries, padding, or emoji. Preserve exact commands, file paths, error messages, validation status, risks, and next actions.
+Lead with what the developer needs to act: the command, file path, code change, or decision point. Format: direct statement, then evidence. Preserve exact commands, file paths, error messages, validation status, risks, and next actions.