@thedecipherist/claude-packs 0.0.0-stage → 1.0.0

package/packs/shell/checks/sh-quote-arguments.json

@@ -0,0 +1,18 @@
+{
+  "id": "sh-quote-arguments",
+  "why": "An unquoted variable splits on spaces and expands globs, so a path with a space becomes two arguments.",
+  "rule": ".claude/rules/shell-strict-and-quoted.md",
+  "concepts": [
+    "shell"
+  ],
+  "globs": [],
+  "exclude": [
+    "**/node_modules/**",
+    "**/.venv/**",
+    "**/venv/**"
+  ],
+  "pattern": "^[^#\\\"'\\n]*\\b(?:cp|mv|rm|cat|cd|mkdir|touch|chmod|chown|source)\\s+[^\\\"'\\n#]*\\$[A-Za-z_{]",
+  "flags": "m",
+  "bad": "cp $src $dst",
+  "good": "cp \"$src\" \"$dst\""
+}

package/packs/shell/checks/sh-rm-guarded.json

@@ -0,0 +1,18 @@
+{
+  "id": "sh-rm-guarded",
+  "why": "An empty variable turns `rm -rf \"$dir/\"` into a delete from the root. `${dir:?}` stops the script instead.",
+  "rule": ".claude/rules/shell-strict-and-quoted.md",
+  "concepts": [
+    "shell"
+  ],
+  "globs": [],
+  "exclude": [
+    "**/node_modules/**",
+    "**/.venv/**",
+    "**/venv/**"
+  ],
+  "pattern": "\\brm\\s+-[a-zA-Z]*[rR][a-zA-Z]*\\s+\\\"?\\$\\{?\\w+(?!\\w*:\\?)\\}?",
+  "flags": "m",
+  "bad": "rm -rf \"$dir/build\"",
+  "good": "rm -rf \"${dir:?}/build\""
+}

package/packs/shell/checks/sh-strict-mode.json

@@ -0,0 +1,20 @@
+{
+  "id": "sh-strict-mode",
+  "why": "Without strict mode a failed step is ignored and the script carries on with bad state. A file only sourced is left out.",
+  "rule": ".claude/rules/shell-strict-and-quoted.md",
+  "concepts": [
+    "shell"
+  ],
+  "globs": [],
+  "exclude": [
+    "**/node_modules/**"
+  ],
+  "pattern": "^#![^\\n]*\\b(?:ba|z|da)?sh\\b",
+  "flags": "m",
+  "bad": "#!/usr/bin/env bash\nset -u\necho done",
+  "good": "#!/usr/bin/env bash\nset -euo pipefail\necho done\n",
+  "mode": "needs",
+  "needs": [
+    "^\\s*set\\s+-\\w*e\\w*(?:\\s+-o\\s+pipefail|\\w*o\\s+pipefail)"
+  ]
+}

package/packs/shell/pack.json

@@ -0,0 +1,28 @@
+{
+  "name": "shell",
+  "version": "1.0.0",
+  "description": "Shell scripts: strict mode, quoted arguments, shared functions in one sourced file, tables and loops, and programs kept out of heredocs.",
+  "type": "stock",
+  "author": "claude-packs",
+  "license": "MIT",
+  "homepage": "https://github.com/TheDecipherist/claude-packs",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/TheDecipherist/claude-packs.git",
+    "directory": "packs/shell"
+  },
+  "keywords": [
+    "shell",
+    "bash"
+  ],
+  "engines": {
+    "claude-packs": ">=0.25.0"
+  },
+  "concepts": {
+    "shell": [
+      "**/*.sh",
+      "**/*.bash",
+      "**/*.zsh"
+    ]
+  }
+}

package/packs/shell/rules/shell-repeats-become-templates.md

@@ -0,0 +1,23 @@
+---
+# concepts: shell
+paths:
+  - "placeholder"
+---
+
+# Anything repeated in shell becomes a template: a function in one sourced file, or a table and a loop
+
+Measured on real repos: the same wait-and-check block in five gate scripts, the same retry and logging at the top of every hook, and one command written out dozens of times with other arguments.
+
+<constraints>
+Always do:
+- Put what scripts share in one file they source: logging, waiting, cleanup, argument checks. `. "$(dirname "$0")/lib.sh"`.
+- Turn one command repeated with other arguments into an array of rows and one loop, or a function called from a table.
+- Start a new script from the shared file: it holds only what this script does.
+
+Never do:
+- Copy a script to start the next one.
+- Paste the same `if` or `trap` block at the top of each script.
+</constraints>
+
+## Check
+`template-law` refuses a new copy, a near copy or a function the repo already has. The `shell-extract-template` skill walks the change.

package/packs/shell/rules/shell-strict-and-quoted.md

@@ -0,0 +1,27 @@
+---
+# concepts: shell
+paths:
+  - "placeholder"
+---
+
+# Shell fails loudly and quotes everything
+
+<constraints>
+Always do:
+- Start a script with `set -euo pipefail`. A file that is only sourced leaves that to its caller.
+- Quote every expansion: `"$file"`, `"${list[@]}"`.
+- Use `$(...)`, never backticks.
+- Guard a variable in a delete: `rm -rf "${dir:?}/build"`.
+- Make a temp file with `mktemp`, and remove it with `trap`.
+- Stop what you start: after `child &`, `trap 'kill "$pid" 2>/dev/null' EXIT INT TERM`.
+- Keep a program in its own file: a script that needs Python or Node calls a file, which can be linted and tested.
+- Run `shellcheck` where the project has it.
+
+Never do:
+- Use `eval`, or pipe a download into a shell.
+- Parse `ls`: use a glob.
+- Write to a fixed path in `/tmp`.
+</constraints>
+
+## Check
+`sh-strict-mode`, `sh-no-backticks`, `sh-no-eval`, `sh-no-parse-ls`, `sh-rm-guarded`, `sh-quote-arguments`, `sh-no-pipe-to-shell`, `sh-mktemp`, `sh-no-program-in-heredoc`.

package/packs/shell/skills/shell-extract-template/SKILL.md

@@ -0,0 +1,32 @@
+---
+name: shell-extract-template
+description: Use when template-law refuses shell code, when scan lists repeated shell, or when copying a script to start another.
+---
+
+# Extract a shell repeat into one template (one job: pick the shell form, and move every copy to it)
+
+Follow `make-it-a-template`. This skill is its shell forms.
+
+<constraints>
+Always do:
+1. A repeated block: one function in the shared file, what differs as its arguments, read into named locals.
+   ```bash
+   wait_for_file() {
+     local file="$1" what="$2"
+     wingate_wait "$pid" "[ -s '$file' ]" || exit 1
+     [ -s "$file" ] || { echo "FAIL no $what" >&2; exit 1; }
+   }
+   ```
+2. One command with other arguments: a table and one loop.
+   ```bash
+   rows=("a silent slot|PLANT_SILENT" "a dead key|PLANT_DEAD")
+   for row in "${rows[@]}"; do expect_fail "${row%%|*}" env "${row##*|}=1" "$gate"; done
+   ```
+3. Source the shared file by its own location, so it works from any folder: `. "$(dirname "$0")/lib.sh"`.
+4. A program pasted into a heredoc: move it to its own file and call it.
+5. Run the scripts the change reaches. Then search for the old block: none is left.
+
+Never do:
+- Pass values through globals when an argument will do.
+- Use `eval` to make a function general.
+</constraints>

package/packs/shell-hooks/checks/gnu-only-in-shell.json

@@ -0,0 +1,18 @@
+{
+  "id": "gnu-only-in-shell",
+  "why": "GNU-only: on macOS `date +%N` prints the literal N, sha1sum/stat -c/readlink -f do not exist, and the hook exits non-zero, which blocks every tool call. Use node -e for time, hashes and file stats.",
+  "rule": ".claude/rules/hooks-portable-anchored-quoted.md",
+  "concepts": [
+    "shell-hooks"
+  ],
+  "globs": [
+    "**/*.sh"
+  ],
+  "exclude": [
+    "**/node_modules/**"
+  ],
+  "code": false,
+  "pattern": "\\bdate\\s+\\+\\S*%\\d*N|\\b(?:sha1|sha256|md5)sum\\b|\\bstat\\s+-c\\b|\\breadlink\\s+-f\\b|\\bsed\\s+-i\\s+(?!'')(?!\\\")[^\\s]",
+  "bad": "NOW=$(date +%s%3N)",
+  "good": "NOW=$(node -e 'console.log(Date.now())')\nH=$(node -e 'const c=require(\"node:crypto\");console.log(c.createHash(\"sha1\").update(process.argv[1]).digest(\"hex\").slice(0,12))' \"$DIR\")"
+}

package/packs/shell-hooks/checks/hook-command-anchored.json

@@ -0,0 +1,12 @@
+{
+  "id": "hook-command-anchored",
+  "why": "A relative hook command resolves only when Claude Code starts in one directory; from a subfolder or /cd it silently never runs. Anchor on $CLAUDE_PROJECT_DIR or an absolute path.",
+  "rule": ".claude/rules/hooks-portable-anchored-quoted.md",
+  "concepts": [
+    "hook-settings"
+  ],
+  "code": false,
+  "pattern": "\\\"command\\\"\\s*:\\s*\\\"(?!(?:node|bash|sh|python3?|npx)\\s+\\\\?\\\"?(?:\\$CLAUDE_PROJECT_DIR|\\$HOME|~|/))(?!\\$CLAUDE_PROJECT_DIR|/|~)",
+  "bad": "\"command\": \"bash packages/channel/hooks/check-signal.sh\"",
+  "good": "\"command\": \"node \\\"$CLAUDE_PROJECT_DIR/.claude/hooks/check-signal.mjs\\\"\""
+}

package/packs/shell-hooks/checks/hook-json-by-tool.json

@@ -0,0 +1,18 @@
+{
+  "id": "hook-json-by-tool",
+  "why": "printf-built JSON breaks on the first quote or backslash in a value and the consumer drops the line silently. Produce JSON with node -e or jq.",
+  "rule": ".claude/rules/hooks-portable-anchored-quoted.md",
+  "concepts": [
+    "shell-hooks"
+  ],
+  "globs": [
+    "**/*.sh"
+  ],
+  "exclude": [
+    "**/node_modules/**"
+  ],
+  "code": false,
+  "pattern": "\\b(?:printf|echo)\\s+(?:-e\\s+)?['\\\"]\\s*\\{[^'\\\"]*\\\\?\\\"\\w+\\\\?\\\"\\s*:",
+  "bad": "printf '{\"decision\":\"block\",\"reason\":\"%s\"}' \"$1\"",
+  "good": "node -e 'console.log(JSON.stringify({ decision: \"block\", reason: process.argv[1] }))' \"$1\""
+}

package/packs/shell-hooks/checks/no-bash-c-with-variable.json

@@ -0,0 +1,20 @@
+{
+  "id": "no-bash-c-with-variable",
+  "why": "bash -c with a string the project can edit runs whatever that file says; a gate command rewritten to `true` turns red green. Hash-pin the config or pass an argv array.",
+  "rule": ".claude/rules/hooks-portable-anchored-quoted.md",
+  "globs": [
+    "**/*.ts",
+    "**/*.js",
+    "**/*.mjs"
+  ],
+  "exclude": [
+    "**/node_modules/**",
+    "**/dist/**",
+    "**/*.test.*",
+    "**/test/**"
+  ],
+  "code": false,
+  "pattern": "\\bspawn(?:Sync)?\\s*\\(\\s*['\\\"](?:bash|sh|zsh)['\\\"]\\s*,\\s*\\[\\s*['\\\"]-c['\\\"]\\s*,\\s*(?!['\\\"`])[\\w.]+",
+  "bad": "const child = spawn('bash', ['-c', command], { cwd });",
+  "good": "const child = spawn(argv[0], argv.slice(1), { cwd });"
+}

package/packs/shell-hooks/pack.json

@@ -0,0 +1,36 @@
+{
+  "name": "shell-hooks",
+  "version": "1.0.0",
+  "description": "Shell and Node hooks for Claude Code: portable, anchored, quoted, one prelude, JSON by a tool.",
+  "type": "stock",
+  "author": "claude-packs",
+  "license": "MIT",
+  "homepage": "https://github.com/TheDecipherist/claude-packs",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/TheDecipherist/claude-packs.git",
+    "directory": "packs/shell-hooks"
+  },
+  "keywords": [
+    "hooks",
+    "shell"
+  ],
+  "engines": {
+    "claude-packs": ">=0.19.0"
+  },
+  "folders": {},
+  "concepts": {
+    "shell-hooks": [
+      "**/hooks/**/*.sh",
+      "**/hooks/**/*.mjs",
+      "**/hooks/**/*.js",
+      "**/hooks/**/*.cjs"
+    ],
+    "hook-settings": [
+      "**/.claude/settings.json",
+      "**/.claude/settings.local.json"
+    ]
+  },
+  "skillsIn": null,
+  "hooks": {}
+}

package/packs/shell-hooks/rules/hooks-portable-anchored-quoted.md

@@ -0,0 +1,26 @@
+---
+# concepts: shell-hooks, hook-settings
+paths:
+  - "placeholder"
+---
+
+# A hook is portable, anchored, quoted, and fails open on its own bugs only
+
+A PreToolUse hook that errors blocks **every** tool call. `date +%s%3N` prints the literal `3N` on macOS and the arithmetic that follows exits non-zero: one GNU-ism blocks the whole session on a Mac.
+
+<constraints>
+Always do:
+- Time, hashes and JSON in a hook come from `node -e` (or the `.mjs` hook itself), never GNU-only binaries: no `date +%N`, `sha1sum`, `stat -c`, `readlink -f`, `sed -i` without a suffix (`gnu-only-in-shell`). Prefer `.mjs` hooks over `.sh` for anything beyond ten lines.
+- JSON is produced by `node -e`/`jq`, never by `printf '{"a":"%s"}'` (`hook-json-by-tool`): an unescaped quote or backslash corrupts the line and the consumer drops it silently.
+- Hook commands in `settings.json` are anchored: `node "$CLAUDE_PROJECT_DIR/.claude/hooks/x.mjs"`. A relative `bash packages/x/hooks/y.sh` resolves only from one cwd (`hook-command-anchored`).
+- Shared logic (read stdin, find the marker, freshness test) lives in **one** `lib/` file that every hook imports or sources; a change to the marker format is one edit.
+- Anything a hook spools to disk is written with mode 0600 and masked **before** it hits disk; the terminal prompt may contain a pasted token.
+- Credentials come from one documented env var; a hook never searches `~/.claude.json`, a repo `.env` and the environment in turn.
+- `--selftest` in every hook; the project test suite runs each hook's selftest and fires every hook at a sibling project path, which must never block (`never block other projects`).
+- A hook that fails open says so in one comment at the top, and names what is unenforced during an outage.
+
+Never do:
+- `bash -c "${command}"` with a string the project (the executor) can edit; gates run from a hash-pinned config or argv arrays.
+- Parse JSON with `grep -o '"key":"value"'` that depends on `JSON.stringify` key order; use `node -e` with `JSON.parse`.
+- Rewrite `settings.local.json` on server boot; installers are explicit commands with a dry run.
+</constraints>

package/packs/sound-design/checks/audio-seed-fixed.json

@@ -0,0 +1,23 @@
+{
+  "id": "audio-seed-fixed",
+  "why": "An unseeded source makes two renders differ, and every measurement then carries noise.",
+  "rule": ".claude/rules/meter-before-engine.md",
+  "globs": [
+    "**/*.cpp",
+    "**/*.cc",
+    "**/*.h",
+    "**/*.hpp",
+    "**/*.mm"
+  ],
+  "exclude": [
+    "**/build/**",
+    "**/out/**",
+    "**/_deps/**",
+    "**/JUCE/**",
+    "**/node_modules/**"
+  ],
+  "pattern": "\\bstd::random_device\\b|\\bsrand\\s*\\(\\s*(?:std::)?time\\s*\\(|\\bjuce::Random::getSystemRandom\\s*\\(|\\bjuce::Random\\s+\\w+\\s*;",
+  "bad": "std::mt19937 rng{std::random_device{}()};",
+  "good": "std::mt19937 rng{kNoiseSeed};",
+  "code": true
+}

package/packs/sound-design/checks/mix-is-a-crossfade.json

@@ -0,0 +1,30 @@
+{
+  "id": "mix-is-a-crossfade",
+  "why": "A mix that scales only the wet path is silent at 0%. It is a crossfade.",
+  "rule": ".claude/rules/neutral-is-exact.md",
+  "globs": [
+    "**/*.cpp",
+    "**/*.cc",
+    "**/*.h",
+    "**/*.hpp",
+    "**/*.mm"
+  ],
+  "exclude": [
+    "**/build/**",
+    "**/out/**",
+    "**/_deps/**",
+    "**/JUCE/**",
+    "**/node_modules/**",
+    "**/tests/**",
+    "**/test/**",
+    "**/probes/**",
+    "**/gates/**",
+    "**/*_test.*",
+    "**/*.test.*"
+  ],
+  "pattern": "=\\s*\\w*wet\\w*\\s*\\*\\s*\\w*mix\\w*\\s*;",
+  "bad": "out = wet * mix;",
+  "good": "out = dry * c + wet * s;",
+  "flags": "i",
+  "code": true
+}

package/packs/sound-design/checks/no-hash-in-the-signal.json

@@ -0,0 +1,30 @@
+{
+  "id": "no-hash-in-the-signal",
+  "why": "A hash in the signal path invents a difference the machine does not have, and hides a missing law.",
+  "rule": ".claude/rules/neutral-is-exact.md",
+  "globs": [
+    "**/*.cpp",
+    "**/*.cc",
+    "**/*.h",
+    "**/*.hpp",
+    "**/*.mm"
+  ],
+  "exclude": [
+    "**/build/**",
+    "**/out/**",
+    "**/_deps/**",
+    "**/JUCE/**",
+    "**/node_modules/**",
+    "**/tests/**",
+    "**/test/**",
+    "**/probes/**",
+    "**/gates/**",
+    "**/*_test.*",
+    "**/*.test.*"
+  ],
+  "pattern": "(?:cut|res|gain|level|filter)\\w*\\s*[*+]?=[^;\\n]*\\bhash\\w*\\s*\\(",
+  "bad": "cutoff *= 0.7f + 0.6f * hash01 (id);",
+  "good": "cutoff *= zone.trim;",
+  "flags": "i",
+  "code": true
+}

package/packs/sound-design/checks/no-literal-key-anchor.json

@@ -0,0 +1,30 @@
+{
+  "id": "no-literal-key-anchor",
+  "why": "A hard-coded key anchor is zero exactly where everyone auditions, so a wrong law passes by ear. Name it, with its source.",
+  "rule": ".claude/rules/test-off-the-easy-point.md",
+  "globs": [
+    "**/*.cpp",
+    "**/*.cc",
+    "**/*.h",
+    "**/*.hpp",
+    "**/*.mm"
+  ],
+  "exclude": [
+    "**/build/**",
+    "**/out/**",
+    "**/_deps/**",
+    "**/JUCE/**",
+    "**/node_modules/**",
+    "**/tests/**",
+    "**/test/**",
+    "**/probes/**",
+    "**/gates/**",
+    "**/*_test.*",
+    "**/*.test.*"
+  ],
+  "pattern": "(?:cut|filter|key)\\w*[^;\\n]*\\(\\s*\\w*note\\w*\\s*-\\s*60(?:\\.0*f?)?\\s*\\)",
+  "bad": "cut += kt * (note - 60) / 12.0;",
+  "good": "cut += kt * (note - kKeyAnchor) / 12.0;",
+  "flags": "i",
+  "code": true
+}

package/packs/sound-design/checks/test-compares-a-function-with-itself.json

@@ -0,0 +1,22 @@
+{
+  "id": "test-compares-a-function-with-itself",
+  "why": "A test that compares a function with itself passes by construction. Assert the printed value.",
+  "rule": ".claude/rules/test-off-the-easy-point.md",
+  "globs": [
+    "**/*.cpp",
+    "**/*.cc",
+    "**/*.h",
+    "**/*.hpp",
+    "**/*.mm"
+  ],
+  "exclude": [
+    "**/build/**",
+    "**/out/**",
+    "**/_deps/**",
+    "**/JUCE/**",
+    "**/node_modules/**"
+  ],
+  "pattern": "\\b(?:EXPECT_(?:EQ|NEAR|DOUBLE_EQ|FLOAT_EQ)|ASSERT_(?:EQ|NEAR)|expectWithinAbsoluteError|expectEquals)\\s*\\(\\s*([\\w:.]+)\\s*\\([^()]*\\)\\s*,\\s*\\1\\s*\\(",
+  "bad": "EXPECT_NEAR(cutoffHz(v), cutoffHz(v), 0.01);",
+  "good": "EXPECT_NEAR(cutoffHz(74), 987.8, 0.1);"
+}

package/packs/sound-design/pack.json

@@ -0,0 +1,22 @@
+{
+  "name": "sound-design",
+  "version": "1.0.0",
+  "description": "Sound that is proved by measuring audio: algorithms are data, neutral is exact, the meter is suspected before the engine, and tests sit off the easy point.",
+  "type": "stock",
+  "author": "claude-packs",
+  "license": "MIT",
+  "homepage": "https://github.com/TheDecipherist/claude-packs",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/TheDecipherist/claude-packs.git",
+    "directory": "packs/sound-design"
+  },
+  "keywords": [
+    "audio",
+    "dsp",
+    "sound-design"
+  ],
+  "engines": {
+    "claude-packs": ">=0.28.0"
+  }
+}

package/packs/sound-design/rules/algorithms-are-data.md

@@ -0,0 +1,26 @@
+---
+paths:
+  - "**/*.cpp"
+  - "**/*.cc"
+  - "**/*.h"
+  - "**/*.hpp"
+  - "**/*.mm"
+  - "**/*.py"
+  - "**/*.ts"
+  - "**/*.js"
+  - "**/*.mjs"
+---
+
+# A machine's algorithm list is real only if each one is the right kind of effect
+
+<constraints>
+Always do:
+- Make each algorithm a block graph, as data, run by one loop.
+- Prove the kind by measuring: a delay delays, a comb combs, a filtered delay is filtered.
+- Report spread per algorithm and across the bank, as medians, over 8 seconds or more, with log-spaced frames.
+- Use the machine's own numbers: its stage count, its interval, its delay memory.
+
+Never do:
+- Pass a table test as proof. One unit had 15 algorithms on 1 DSP path, and another had 13 of 23 that were a wire.
+- Build a family of effects on a single generic engine and call the list done.
+</constraints>

package/packs/sound-design/rules/meter-before-engine.md

@@ -0,0 +1,27 @@
+---
+paths:
+  - "**/*.cpp"
+  - "**/*.cc"
+  - "**/*.h"
+  - "**/*.hpp"
+  - "**/*.mm"
+  - "**/*.py"
+  - "**/*.ts"
+  - "**/*.js"
+  - "**/*.mjs"
+---
+
+# Suspect the meter before the engine, and make the render repeat
+
+<constraints>
+Always do:
+- Make a probe's first assertion that the render reproduces. Reset every phase, ramp and seed on prepare, in its own commit.
+- Read a constant ratio or an exact multiple as a meter fault first. Fix it, re-fit what was tuned against it, and grep for the same code.
+- Assert against an absolute expected value. A meter wrong by a steady percentage passes every comparison of measurements.
+- Flush between programs, and silence earlier voices.
+- Use an RMS window longer than the oscillator's period, and RMS over whole periods for a rate.
+
+Never do:
+- Believe a factor of two: filter resonance puts two level peaks in every LFO cycle.
+- Leave a meter bug in place because it flatters the score.
+</constraints>

package/packs/sound-design/rules/neutral-is-exact.md

@@ -0,0 +1,26 @@
+---
+paths:
+  - "**/*.cpp"
+  - "**/*.cc"
+  - "**/*.h"
+  - "**/*.hpp"
+  - "**/*.mm"
+  - "**/*.py"
+  - "**/*.ts"
+  - "**/*.js"
+  - "**/*.mjs"
+---
+
+# A control at its neutral computes exactly nothing
+
+<constraints>
+Always do:
+- Make a control at its documented neutral compute exactly 1.0, or exactly 0.
+- Make 0% wet come out dry, never silent: a mix is a crossfade.
+- Start blank programs at neutral. A modulation byte of 0 can mean full negative depth.
+- Fail on a blank extraction row: clamping it to zero rendered 66 presets silent.
+
+Never do:
+- Leave a default that colours every preset: this is how a bank ends up "all sounding the same".
+- Hash a value into the signal path to make voices differ.
+</constraints>

package/packs/sound-design/rules/test-off-the-easy-point.md

@@ -0,0 +1,28 @@
+---
+paths:
+  - "**/*.cpp"
+  - "**/*.cc"
+  - "**/*.h"
+  - "**/*.hpp"
+  - "**/*.mm"
+  - "**/*.py"
+  - "**/*.ts"
+  - "**/*.js"
+  - "**/*.mjs"
+---
+
+# Test where a wrong answer cannot pass
+
+<constraints>
+Always do:
+- Vary the thing the error lives in, all the way down: low, middle and high notes; the tempo, not the division; two points for "A follows B"; phase apart from rate.
+- Take expected values from the printed source, not the code.
+- Trace where a term acts: velocity on depth is not velocity on output.
+- Excite what you test. A click hid 100x of preset difference.
+- Use two anchors to fix a law: one fits any curve.
+
+Never do:
+- Use one point that is zero exactly where everyone auditions: `note - 60` passes at middle C.
+- Compare a function with itself.
+- Invent a term. It is worse than a missing one.
+</constraints>

package/packs/sound-design/rules/unreachable-is-said.md

@@ -0,0 +1,25 @@
+---
+paths:
+  - "**/*.cpp"
+  - "**/*.cc"
+  - "**/*.h"
+  - "**/*.hpp"
+  - "**/*.mm"
+  - "**/*.py"
+  - "**/*.ts"
+  - "**/*.js"
+  - "**/*.mjs"
+---
+
+# What cannot be reached is said, never clamped
+
+<constraints>
+Always do:
+- Silence and count an out-of-range target.
+- Grey what a destination cannot reach, and say why.
+- Find the real control rate, not the timer period: a scheduler serving 16 voices in turn scales every envelope by 16.
+- Read both signs of a law before linearising it, and suspect the fixed-point format when a constant lands near a real number.
+
+Never do:
+- Clamp in silence, or let an array bound thin a pattern.
+</constraints>

package/packs/sound-design/rules/waveforms-and-octaves.md

@@ -0,0 +1,24 @@
+---
+paths:
+  - "**/*.cpp"
+  - "**/*.cc"
+  - "**/*.h"
+  - "**/*.hpp"
+  - "**/*.mm"
+  - "**/*.py"
+  - "**/*.ts"
+  - "**/*.js"
+  - "**/*.mjs"
+---
+
+# A waveform can be data, an oscillator or a generator; an octave can be locked or free
+
+<constraints>
+Always do:
+- Decide what a waveform is: data read from a table, what the oscillator itself is, or a generator beside it. If two cannot coexist on the original, they are modes.
+- Derive a locked sub from its parent's increment.
+- Treat a free layer as a whole voice.
+
+Never do:
+- Dedupe pitches in the allocator: two layers on one note is the sound.
+</constraints>