@thedecipherist/claude-packs 0.0.0-stage → 1.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (827) hide show
  1. package/CHANGELOG.md +680 -0
  2. package/LICENSE +21 -0
  3. package/README.md +316 -2
  4. package/bin/claude-packs.mjs +204 -0
  5. package/configurations/base/config.json +85 -0
  6. package/configurations/cpp/config.json +92 -0
  7. package/configurations/full-stack/config.json +152 -0
  8. package/configurations/go/config.json +96 -0
  9. package/configurations/node/config.json +100 -0
  10. package/configurations/python/config.json +97 -0
  11. package/configurations/synth-creator/config.json +148 -0
  12. package/global/hooks/gnu-shell.mjs +131 -0
  13. package/global/hooks/lib/program-read.mjs +196 -0
  14. package/global/hooks/lib/program-writes.mjs +177 -0
  15. package/global/hooks/lib/shell-writes.mjs +293 -0
  16. package/global/hooks/shell-traps.mjs +79 -0
  17. package/global/hooks/version-pin-guard.mjs +280 -0
  18. package/global/skills/latest-versions/SKILL.md +49 -0
  19. package/lib/backup.mjs +34 -0
  20. package/lib/claude-md.mjs +58 -0
  21. package/lib/config-cli.mjs +36 -0
  22. package/lib/configs.mjs +145 -0
  23. package/lib/coverage.mjs +86 -0
  24. package/lib/custom-packs.mjs +93 -0
  25. package/lib/doctor.mjs +115 -0
  26. package/lib/fix-plan.mjs +71 -0
  27. package/lib/git-tokens.mjs +64 -0
  28. package/lib/global.mjs +125 -0
  29. package/lib/hook-proof.mjs +28 -0
  30. package/lib/hook-timing.mjs +42 -0
  31. package/lib/hover-gate.mjs +29 -0
  32. package/lib/kit-lock.mjs +149 -0
  33. package/lib/layout.mjs +75 -0
  34. package/lib/logs.mjs +69 -0
  35. package/lib/manifest.mjs +24 -0
  36. package/lib/new.mjs +49 -0
  37. package/lib/once-only-report.mjs +54 -0
  38. package/lib/pack-manifest.mjs +20 -0
  39. package/lib/packs.mjs +107 -0
  40. package/lib/planner.mjs +59 -0
  41. package/lib/repeats.mjs +65 -0
  42. package/lib/repo-weight.mjs +28 -0
  43. package/lib/rules.mjs +40 -0
  44. package/lib/scan-detect.mjs +94 -0
  45. package/lib/scan.mjs +168 -0
  46. package/lib/selftest-cache.mjs +39 -0
  47. package/lib/settings.mjs +138 -0
  48. package/lib/shape-cli.mjs +76 -0
  49. package/lib/shape.mjs +4 -0
  50. package/lib/suggest.mjs +18 -0
  51. package/lib/switches.mjs +44 -0
  52. package/lib/symmetry-doctor.mjs +26 -0
  53. package/lib/sync.mjs +130 -0
  54. package/package.json +34 -4
  55. package/packs/ai/checks/boundary-computes-its-own-hash.json +30 -0
  56. package/packs/ai/checks/model-call-needs-boundary.json +29 -0
  57. package/packs/ai/checks/model-id-from-config.json +28 -0
  58. package/packs/ai/checks/model-output-validated.json +26 -0
  59. package/packs/ai/pack.json +38 -0
  60. package/packs/ai/rules/ai-input-sha-boundary.md +31 -0
  61. package/packs/ai/rules/llm-pipeline-security.md +26 -0
  62. package/packs/audio-core/checks/denormals-not-in-prepare.json +12 -0
  63. package/packs/audio-core/checks/dsp-without-apvts.json +12 -0
  64. package/packs/audio-core/checks/float-phase-or-rate.json +12 -0
  65. package/packs/audio-core/checks/juce-snap-to-zero-off.json +12 -0
  66. package/packs/audio-core/checks/keep-werror.json +12 -0
  67. package/packs/audio-core/checks/no-fast-math.json +14 -0
  68. package/packs/audio-core/checks/no-locale-change.json +12 -0
  69. package/packs/audio-core/checks/no-march-native.json +14 -0
  70. package/packs/audio-core/clang-tidy +28 -0
  71. package/packs/audio-core/hooks/lib/realtime-checks.mjs +56 -0
  72. package/packs/audio-core/hooks/param-id-lock.mjs +129 -0
  73. package/packs/audio-core/hooks/realtime-guard.mjs +67 -0
  74. package/packs/audio-core/pack.json +187 -0
  75. package/packs/audio-core/rules/audio-thread-realtime-safe.md +27 -0
  76. package/packs/audio-core/rules/audio-ui-thread-handoff.md +21 -0
  77. package/packs/audio-core/rules/boundary-tests-cross-the-boundary.md +16 -0
  78. package/packs/audio-core/rules/build-flags-safe.md +20 -0
  79. package/packs/audio-core/rules/cached-parameter-pointers.md +28 -0
  80. package/packs/audio-core/rules/clang-tidy-core-guidelines.md +21 -0
  81. package/packs/audio-core/rules/control-reaches-every-surface.md +23 -0
  82. package/packs/audio-core/rules/cpu-worst-case-per-block.md +26 -0
  83. package/packs/audio-core/rules/dc-block-after-asymmetry.md +22 -0
  84. package/packs/audio-core/rules/discrete-params-snap.md +19 -0
  85. package/packs/audio-core/rules/double-where-precision-matters.md +20 -0
  86. package/packs/audio-core/rules/filters-stable-under-modulation.md +29 -0
  87. package/packs/audio-core/rules/host-parameters-at-scale.md +24 -0
  88. package/packs/audio-core/rules/house-control-behaviours.md +34 -0
  89. package/packs/audio-core/rules/math-domain-guards.md +19 -0
  90. package/packs/audio-core/rules/modulated-delay-interpolation.md +22 -0
  91. package/packs/audio-core/rules/multiband-phase-coherent.md +22 -0
  92. package/packs/audio-core/rules/nonlinear-stages-antialiased.md +28 -0
  93. package/packs/audio-core/rules/note-ledger-and-pedals.md +22 -0
  94. package/packs/audio-core/rules/one-formula-per-value.md +20 -0
  95. package/packs/audio-core/rules/optimisations-are-null-tested.md +23 -0
  96. package/packs/audio-core/rules/oscillators-bandlimited.md +23 -0
  97. package/packs/audio-core/rules/output-limiter.md +23 -0
  98. package/packs/audio-core/rules/parameter-ids-never-change.md +20 -0
  99. package/packs/audio-core/rules/params-and-state-thread-safe.md +19 -0
  100. package/packs/audio-core/rules/params-snapshot-per-block.md +21 -0
  101. package/packs/audio-core/rules/patch-excludes-performance-controls.md +18 -0
  102. package/packs/audio-core/rules/per-sample-code-inlinable.md +22 -0
  103. package/packs/audio-core/rules/prepare-is-repeatable.md +23 -0
  104. package/packs/audio-core/rules/recursive-state-nan-guard.md +20 -0
  105. package/packs/audio-core/rules/reverb-loop-gain-bounded.md +24 -0
  106. package/packs/audio-core/rules/sample-accurate-midi.md +22 -0
  107. package/packs/audio-core/rules/sample-rate-and-block-size-from-host.md +23 -0
  108. package/packs/audio-core/rules/scoped-no-denormals.md +26 -0
  109. package/packs/audio-core/rules/smooth-continuous-parameters.md +22 -0
  110. package/packs/audio-core/rules/state-load-versioned-and-safe.md +22 -0
  111. package/packs/audio-core/rules/straight-on-and-aligned.md +21 -0
  112. package/packs/audio-core/rules/ui-matches-reference-look.md +21 -0
  113. package/packs/audio-core/rules/undo-one-gesture-one-step.md +21 -0
  114. package/packs/audio-core/rules/voice-steal-fades.md +21 -0
  115. package/packs/audio-core/rules/voice-sum-headroom.md +20 -0
  116. package/packs/audio-core/skills/analyse-reference-look/SKILL.md +21 -0
  117. package/packs/audio-core/skills/copy-and-prove/SKILL.md +98 -0
  118. package/packs/audio-core/skills/juce-realtime-audit/SKILL.md +22 -0
  119. package/packs/audio-core/skills/measure-tone/SKILL.md +20 -0
  120. package/packs/audio-core/skills/new-panel-control/SKILL.md +15 -0
  121. package/packs/audio-core/skills/prove-control/SKILL.md +23 -0
  122. package/packs/audio-core/skills/trace-parameter/SKILL.md +29 -0
  123. package/packs/audio-core/tools/lib/spectrum.mjs +112 -0
  124. package/packs/audio-core/tools/lib/wav.mjs +41 -0
  125. package/packs/audio-core/tools/tone-report.mjs +47 -0
  126. package/packs/base/checks/field-map-over-if-runs.json +25 -0
  127. package/packs/base/checks/lookup-over-if-chains.json +25 -0
  128. package/packs/base/checks/lookup-over-ternary-chains.json +20 -0
  129. package/packs/base/checks/no-code-after-midline-comment.json +12 -0
  130. package/packs/base/checks/one-walk-per-template.json +23 -0
  131. package/packs/base/checks/stub-reports-success.json +31 -0
  132. package/packs/base/checks/test-skip-on-failed-setup.json +17 -0
  133. package/packs/base/hooks/brief-guard.mjs +96 -0
  134. package/packs/base/hooks/code-shape.mjs +95 -0
  135. package/packs/base/hooks/dispatch-once.mjs +87 -0
  136. package/packs/base/hooks/file-size-guard.mjs +61 -0
  137. package/packs/base/hooks/folder-law.mjs +74 -0
  138. package/packs/base/hooks/git-guard.mjs +289 -0
  139. package/packs/base/hooks/lesson-checks.mjs +174 -0
  140. package/packs/base/hooks/lib/apply-edit.mjs +20 -0
  141. package/packs/base/hooks/lib/code-shapes.mjs +137 -0
  142. package/packs/base/hooks/lib/content.mjs +14 -0
  143. package/packs/base/hooks/lib/cpp-scan.mjs +94 -0
  144. package/packs/base/hooks/lib/dup-index.mjs +199 -0
  145. package/packs/base/hooks/lib/dup.mjs +127 -0
  146. package/packs/base/hooks/lib/elements.mjs +87 -0
  147. package/packs/base/hooks/lib/event-log.mjs +67 -0
  148. package/packs/base/hooks/lib/function-shapes.mjs +90 -0
  149. package/packs/base/hooks/lib/git-adds.mjs +20 -0
  150. package/packs/base/hooks/lib/git-guard-selftest.mjs +99 -0
  151. package/packs/base/hooks/lib/glob.mjs +33 -0
  152. package/packs/base/hooks/lib/hook-log.mjs +100 -0
  153. package/packs/base/hooks/lib/house.py +77 -0
  154. package/packs/base/hooks/lib/languages.mjs +66 -0
  155. package/packs/base/hooks/lib/layout.mjs +54 -0
  156. package/packs/base/hooks/lib/making-check-selftest.mjs +109 -0
  157. package/packs/base/hooks/lib/near-copies.mjs +76 -0
  158. package/packs/base/hooks/lib/program-read.mjs +196 -0
  159. package/packs/base/hooks/lib/program-writes.mjs +177 -0
  160. package/packs/base/hooks/lib/project.mjs +81 -0
  161. package/packs/base/hooks/lib/prose.mjs +11 -0
  162. package/packs/base/hooks/lib/pushed.mjs +201 -0
  163. package/packs/base/hooks/lib/repo-index.mjs +52 -0
  164. package/packs/base/hooks/lib/secret-patterns.mjs +18 -0
  165. package/packs/base/hooks/lib/selftest.mjs +45 -0
  166. package/packs/base/hooks/lib/shape-code.mjs +126 -0
  167. package/packs/base/hooks/lib/shape.mjs +294 -0
  168. package/packs/base/hooks/lib/shell-writes-selftest.mjs +65 -0
  169. package/packs/base/hooks/lib/shell-writes.mjs +293 -0
  170. package/packs/base/hooks/lib/turn.mjs +81 -0
  171. package/packs/base/hooks/lib/writes.mjs +71 -0
  172. package/packs/base/hooks/making-check.mjs +243 -0
  173. package/packs/base/hooks/making.mjs +106 -0
  174. package/packs/base/hooks/once-only.mjs +150 -0
  175. package/packs/base/hooks/placement-law.mjs +84 -0
  176. package/packs/base/hooks/repo-litter.mjs +75 -0
  177. package/packs/base/hooks/reuse-hint.mjs +75 -0
  178. package/packs/base/hooks/run-hooks.mjs +132 -0
  179. package/packs/base/hooks/secrets-guard.mjs +99 -0
  180. package/packs/base/hooks/shape-law.mjs +133 -0
  181. package/packs/base/hooks/suite-once.mjs +80 -0
  182. package/packs/base/hooks/template-law.mjs +148 -0
  183. package/packs/base/hooks/untrusted-boundary.mjs +53 -0
  184. package/packs/base/pack.json +214 -0
  185. package/packs/base/rules/a-control-is-seen-to-fire.md +27 -0
  186. package/packs/base/rules/behaviour-lives-with-its-kind.md +51 -0
  187. package/packs/base/rules/bug-fix-starts-red.md +25 -0
  188. package/packs/base/rules/field-map-over-if-runs.md +47 -0
  189. package/packs/base/rules/finished-work-lands.md +17 -0
  190. package/packs/base/rules/git-right-first-time.md +19 -0
  191. package/packs/base/rules/instances-by-index-identities-by-id.md +54 -0
  192. package/packs/base/rules/lookup-over-if-chains.md +49 -0
  193. package/packs/base/rules/making-line-first.md +14 -0
  194. package/packs/base/rules/open-items-tagged.md +17 -0
  195. package/packs/base/rules/plan-and-logs.md +22 -0
  196. package/packs/base/rules/references-use-anchors.md +19 -0
  197. package/packs/base/rules/refusals-are-judged.md +18 -0
  198. package/packs/base/rules/reuse-before-writing.md +15 -0
  199. package/packs/base/rules/secrets-never-committed.md +16 -0
  200. package/packs/base/rules/skill-writing.md +23 -0
  201. package/packs/base/rules/split-before-the-limit.md +14 -0
  202. package/packs/base/rules/subagent-dispatch.md +26 -0
  203. package/packs/base/rules/test-only-what-changed.md +17 -0
  204. package/packs/base/rules/test-the-template-once.md +22 -0
  205. package/packs/base/rules/untrusted-content-boundary.md +15 -0
  206. package/packs/base/skills/add-lesson-check/SKILL.md +26 -0
  207. package/packs/base/skills/fix-from-scan/SKILL.md +25 -0
  208. package/packs/base/skills/land-branch/SKILL.md +24 -0
  209. package/packs/base/skills/make-it-a-template/SKILL.md +23 -0
  210. package/packs/base/skills/pdf-to-md/SKILL.md +25 -0
  211. package/packs/base/skills/pick-tests/SKILL.md +20 -0
  212. package/packs/base/skills/pressure-test-skill/SKILL.md +23 -0
  213. package/packs/base/skills/prove-instances-identical/SKILL.md +37 -0
  214. package/packs/base/tools/shape-symmetry-selftest.mjs +66 -0
  215. package/packs/base/tools/shape-symmetry.mjs +178 -0
  216. package/packs/base/tools/test-verdict.mjs +75 -0
  217. package/packs/ci/checks/ci-permissions-stated.json +18 -0
  218. package/packs/ci/checks/ci-tools-pinned.json +14 -0
  219. package/packs/ci/pack.json +21 -0
  220. package/packs/ci/rules/ci-covers-what-ships.md +20 -0
  221. package/packs/ci/rules/generated-files-have-no-diff.md +15 -0
  222. package/packs/content-site/checks/captcha-is-not-constant.json +27 -0
  223. package/packs/content-site/checks/img-has-size.json +20 -0
  224. package/packs/content-site/checks/page-head-complete.json +26 -0
  225. package/packs/content-site/pack.json +22 -0
  226. package/packs/content-site/rules/content-has-one-source.md +23 -0
  227. package/packs/content-site/rules/media-is-sized.md +24 -0
  228. package/packs/content-site/rules/page-head-is-complete.md +26 -0
  229. package/packs/content-site/rules/public-forms-are-defended.md +27 -0
  230. package/packs/content-site/skills/publish-a-page/SKILL.md +21 -0
  231. package/packs/cpp/checks/cpp-clamp-before-cast.json +16 -0
  232. package/packs/cpp/checks/cpp-find-with-the-library.json +12 -0
  233. package/packs/cpp/checks/cpp-hardened-test-build.json +18 -0
  234. package/packs/cpp/checks/cpp-m-pi-not-standard.json +23 -0
  235. package/packs/cpp/checks/cpp-no-atoi.json +16 -0
  236. package/packs/cpp/checks/cpp-no-const-cast.json +16 -0
  237. package/packs/cpp/checks/cpp-no-float-loop-counter.json +16 -0
  238. package/packs/cpp/checks/cpp-no-getenv-in-product.json +22 -0
  239. package/packs/cpp/checks/cpp-no-mutable-global.json +20 -0
  240. package/packs/cpp/checks/cpp-no-mutable-local-static.json +23 -0
  241. package/packs/cpp/checks/cpp-no-unchecked-fwrite.json +17 -0
  242. package/packs/cpp/checks/cpp-no-using-namespace-in-header.json +19 -0
  243. package/packs/cpp/checks/cpp-no-zero-size-array.json +23 -0
  244. package/packs/cpp/checks/cpp-numbers-pi.json +16 -0
  245. package/packs/cpp/pack.json +22 -0
  246. package/packs/cpp/rules/cpp-absent-and-failed-are-types.md +24 -0
  247. package/packs/cpp/rules/cpp-builds-everywhere.md +26 -0
  248. package/packs/cpp/rules/cpp-faults-only-in-the-test-build.md +21 -0
  249. package/packs/cpp/rules/cpp-find-with-the-library.md +19 -0
  250. package/packs/cpp/rules/cpp-gates-share-one-reader.md +22 -0
  251. package/packs/cpp/rules/cpp-headers-declare.md +22 -0
  252. package/packs/cpp/rules/cpp-numbers-and-casts.md +22 -0
  253. package/packs/cpp/rules/cpp-repeats-become-templates.md +33 -0
  254. package/packs/cpp/rules/cpp-static-analysis-runs.md +22 -0
  255. package/packs/cpp/rules/cpp-thread-contracts-are-code.md +23 -0
  256. package/packs/cpp/skills/cpp-extract-template/SKILL.md +38 -0
  257. package/packs/docker/checks/alpine-with-native-build.json +13 -0
  258. package/packs/docker/checks/compose-db-needs-auth.json +14 -0
  259. package/packs/docker/checks/compose-image-pinned.json +14 -0
  260. package/packs/docker/checks/compose-no-hardcoded-ip.json +12 -0
  261. package/packs/docker/checks/compose-no-host-bind-for-data.json +18 -0
  262. package/packs/docker/checks/compose-no-plaintext-secret.json +13 -0
  263. package/packs/docker/checks/compose-no-swarm-ignored-keys.json +13 -0
  264. package/packs/docker/checks/compose-overlay-not-bridge.json +13 -0
  265. package/packs/docker/checks/compose-service-needs-healthcheck.json +11 -0
  266. package/packs/docker/checks/compose-service-needs-init.json +11 -0
  267. package/packs/docker/checks/copy-needs-chown-with-user.json +17 -0
  268. package/packs/docker/checks/copy-source-before-deps.json +13 -0
  269. package/packs/docker/checks/docker-exec-form.json +16 -0
  270. package/packs/docker/checks/dockerfile-needs-healthcheck.json +17 -0
  271. package/packs/docker/checks/dockerfile-needs-user.json +21 -0
  272. package/packs/docker/checks/dockerignore-has-the-basics.json +21 -0
  273. package/packs/docker/checks/gitattributes-forces-lf.json +17 -0
  274. package/packs/docker/checks/health-checks-nothing.json +25 -0
  275. package/packs/docker/checks/no-crlf-in-scripts.json +15 -0
  276. package/packs/docker/checks/no-latest-base.json +13 -0
  277. package/packs/docker/checks/no-secret-in-image.json +13 -0
  278. package/packs/docker/checks/no-sensitive-file-copy.json +13 -0
  279. package/packs/docker/checks/node-env-before-install.json +13 -0
  280. package/packs/docker/checks/npm-ci-not-install.json +13 -0
  281. package/packs/docker/pack.json +46 -0
  282. package/packs/docker/rules/compose-pinned-and-closed.md +21 -0
  283. package/packs/docker/rules/compose-swarm-safe.md +26 -0
  284. package/packs/docker/rules/docker-exec-form.md +19 -0
  285. package/packs/docker/rules/dockerfile-multistage.md +13 -0
  286. package/packs/docker/rules/dockerfile-production.md +25 -0
  287. package/packs/docker/skills/docker-diagnose/SKILL.md +23 -0
  288. package/packs/dynamic-data/checks/draft-on-the-server.json +27 -0
  289. package/packs/dynamic-data/checks/guard-does-its-job.json +28 -0
  290. package/packs/dynamic-data/checks/key-is-not-a-display-name.json +28 -0
  291. package/packs/dynamic-data/checks/no-code-from-data.json +29 -0
  292. package/packs/dynamic-data/checks/no-collection-from-request.json +27 -0
  293. package/packs/dynamic-data/checks/no-pipeline-from-stored-text.json +27 -0
  294. package/packs/dynamic-data/checks/no-regexp-from-stored-config.json +27 -0
  295. package/packs/dynamic-data/checks/no-template-from-stored-text.json +27 -0
  296. package/packs/dynamic-data/checks/save-takes-named-paths.json +27 -0
  297. package/packs/dynamic-data/pack.json +23 -0
  298. package/packs/dynamic-data/rules/a-list-is-a-saved-query.md +23 -0
  299. package/packs/dynamic-data/rules/definitions-are-validated-data.md +24 -0
  300. package/packs/dynamic-data/rules/every-dynamic-surface-has-a-boundary.md +29 -0
  301. package/packs/dynamic-data/rules/fields-have-owners.md +22 -0
  302. package/packs/dynamic-data/rules/imports-drop-nothing.md +26 -0
  303. package/packs/dynamic-data/rules/one-definition-many-surfaces.md +24 -0
  304. package/packs/dynamic-data/rules/one-fact-one-place.md +28 -0
  305. package/packs/dynamic-data/rules/rules-live-in-the-engine.md +29 -0
  306. package/packs/dynamic-data/rules/saves-are-patches.md +28 -0
  307. package/packs/dynamic-data/rules/tenant-costs-one-document.md +22 -0
  308. package/packs/dynamic-data/skills/design-a-definition/SKILL.md +24 -0
  309. package/packs/fastify/checks/api-routes-versioned.json +28 -0
  310. package/packs/fastify/checks/cookie-host-prefix.json +24 -0
  311. package/packs/fastify/checks/hijack-needs-try.json +28 -0
  312. package/packs/fastify/checks/no-cast-at-route-boundary.json +24 -0
  313. package/packs/fastify/checks/no-db-in-route-file.json +28 -0
  314. package/packs/fastify/checks/no-err-message-to-client.json +24 -0
  315. package/packs/fastify/checks/no-regexp-from-input.json +24 -0
  316. package/packs/fastify/checks/no-trust-proxy-true.json +25 -0
  317. package/packs/fastify/checks/one-error-body.json +26 -0
  318. package/packs/fastify/checks/origin-from-config-not-host.json +31 -0
  319. package/packs/fastify/checks/password-needs-slow-hash.json +30 -0
  320. package/packs/fastify/checks/sec-headers-present.json +28 -0
  321. package/packs/fastify/checks/secrets-compared-constant-time.json +24 -0
  322. package/packs/fastify/checks/sse-needs-error-listener.json +28 -0
  323. package/packs/fastify/checks/user-bytes-need-disposition.json +29 -0
  324. package/packs/fastify/pack.json +41 -0
  325. package/packs/fastify/rules/credentials-and-input.md +23 -0
  326. package/packs/fastify/rules/security-one-switch.md +28 -0
  327. package/packs/fastify/rules/streams-and-hijacks.md +22 -0
  328. package/packs/fastify/rules/tests-use-inject.md +13 -0
  329. package/packs/fastify/rules/three-layers.md +20 -0
  330. package/packs/fastify/rules/trust-config-not-headers.md +24 -0
  331. package/packs/full-stack/checks/no-express-no-vite.json +23 -0
  332. package/packs/full-stack/hooks/stack-guard.mjs +90 -0
  333. package/packs/full-stack/pack.json +76 -0
  334. package/packs/full-stack/rules/stack-is-fastify-and-nextjs.md +20 -0
  335. package/packs/go/checks/go-exec-result-ignored.json +15 -0
  336. package/packs/go/checks/go-unmarshal-error-ignored.json +15 -0
  337. package/packs/go/pack.json +21 -0
  338. package/packs/go/rules/go-errors-are-handled.md +22 -0
  339. package/packs/gpu-painter/checks/dawn-backends-and-validation.json +9 -0
  340. package/packs/gpu-painter/checks/dawn-no-spontaneous.json +10 -0
  341. package/packs/gpu-painter/checks/dawn-present-on-render-thread.json +17 -0
  342. package/packs/gpu-painter/checks/gpu-no-frame-stalls.json +12 -0
  343. package/packs/gpu-painter/checks/no-opengl-link.json +11 -0
  344. package/packs/gpu-painter/checks/no-opengl.json +13 -0
  345. package/packs/gpu-painter/hooks/browser-guard.py +196 -0
  346. package/packs/gpu-painter/pack.json +91 -0
  347. package/packs/gpu-painter/rules/dawn-build-and-shaders.md +27 -0
  348. package/packs/gpu-painter/rules/dawn-device-and-render-thread.md +26 -0
  349. package/packs/gpu-painter/rules/gpu-antialiasing.md +20 -0
  350. package/packs/gpu-painter/rules/gpu-blend-order.md +22 -0
  351. package/packs/gpu-painter/rules/gpu-bloom.md +20 -0
  352. package/packs/gpu-painter/rules/gpu-frame-budget.md +25 -0
  353. package/packs/gpu-painter/rules/gpu-frame-pacing-and-power.md +27 -0
  354. package/packs/gpu-painter/rules/gpu-frame-work.md +30 -0
  355. package/packs/gpu-painter/rules/gpu-golden-images.md +21 -0
  356. package/packs/gpu-painter/rules/gpu-hdr-and-tonemap.md +23 -0
  357. package/packs/gpu-painter/rules/gpu-picking-on-cpu.md +19 -0
  358. package/packs/gpu-painter/rules/gpu-render-lifecycle.md +25 -0
  359. package/packs/gpu-painter/rules/gpu-text-atlas.md +24 -0
  360. package/packs/gpu-painter/rules/gpu-travellers-from-snapshot.md +24 -0
  361. package/packs/gpu-painter/rules/hover-every-pressable.md +25 -0
  362. package/packs/gpu-painter/skills/gpu-capture/SKILL.md +15 -0
  363. package/packs/gpu-painter/skills/gpu-frame-bench/SKILL.md +14 -0
  364. package/packs/gpu-painter/skills/gpu-golden-check/SKILL.md +13 -0
  365. package/packs/gpu-painter/skills/gpu-golden-update/SKILL.md +16 -0
  366. package/packs/gpu-painter/skills/gpu-lifecycle-stress/SKILL.md +15 -0
  367. package/packs/gpu-painter/skills/hover-state/SKILL.md +33 -0
  368. package/packs/hook-proof/checks/hook-catch-must-not-allow.json +16 -0
  369. package/packs/hook-proof/checks/hook-command-no-pipe.json +16 -0
  370. package/packs/hook-proof/checks/hook-exit-1-does-not-block.json +17 -0
  371. package/packs/hook-proof/checks/hook-no-or-true.json +18 -0
  372. package/packs/hook-proof/checks/hook-refusal-on-stderr.json +17 -0
  373. package/packs/hook-proof/pack.json +38 -0
  374. package/packs/hook-proof/rules/a-refusal-is-exit-2.md +28 -0
  375. package/packs/hook-proof/skills/prove-a-hook/SKILL.md +21 -0
  376. package/packs/host-agent/checks/file-path-from-param.json +27 -0
  377. package/packs/host-agent/checks/integrity-check-optional.json +27 -0
  378. package/packs/host-agent/checks/quoted-value-into-config.json +24 -0
  379. package/packs/host-agent/checks/secret-on-argv.json +28 -0
  380. package/packs/host-agent/checks/ssh-verifies-host-key.json +27 -0
  381. package/packs/host-agent/checks/system-file-written-in-place.json +26 -0
  382. package/packs/host-agent/checks/tmp-path-predictable.json +27 -0
  383. package/packs/host-agent/pack.json +22 -0
  384. package/packs/host-agent/rules/root-on-other-machines.md +27 -0
  385. package/packs/html-ui/checks/email-html-escapes.json +25 -0
  386. package/packs/html-ui/checks/external-link-rel.json +21 -0
  387. package/packs/html-ui/checks/no-duplicate-escape.json +26 -0
  388. package/packs/html-ui/checks/no-inline-client-script.json +21 -0
  389. package/packs/html-ui/checks/no-inline-style.json +23 -0
  390. package/packs/html-ui/pack.json +33 -0
  391. package/packs/html-ui/rules/email-html-escapes.md +19 -0
  392. package/packs/html-ui/rules/server-html-escapes-everything.md +22 -0
  393. package/packs/http-api/checks/api-path-versioned.json +31 -0
  394. package/packs/http-api/checks/authz-from-request-body.json +26 -0
  395. package/packs/http-api/checks/client-calls-a-version.json +28 -0
  396. package/packs/http-api/checks/client-ip-not-leftmost-xff.json +28 -0
  397. package/packs/http-api/checks/cors-needs-origin.json +26 -0
  398. package/packs/http-api/checks/csp-not-switched-off.json +28 -0
  399. package/packs/http-api/checks/debug-route-not-shipped.json +26 -0
  400. package/packs/http-api/checks/encrypted-name-plaintext-value.json +26 -0
  401. package/packs/http-api/checks/err-text-stays-server-side.json +27 -0
  402. package/packs/http-api/checks/failure-is-not-empty.json +28 -0
  403. package/packs/http-api/checks/gate-is-not-a-todo.json +27 -0
  404. package/packs/http-api/checks/guard-fails-open.json +28 -0
  405. package/packs/http-api/checks/hmac-over-reserialised-body.json +26 -0
  406. package/packs/http-api/checks/jwt-verify-pins-algorithm.json +26 -0
  407. package/packs/http-api/checks/middleware-skips-without-user.json +26 -0
  408. package/packs/http-api/checks/next-api-route-versioned.json +47 -0
  409. package/packs/http-api/checks/no-security-off-switch.json +28 -0
  410. package/packs/http-api/checks/oauth-state-signed.json +26 -0
  411. package/packs/http-api/checks/one-time-code-compared-raw.json +26 -0
  412. package/packs/http-api/checks/query-cast-is-not-validation.json +28 -0
  413. package/packs/http-api/checks/queue-action-from-client.json +26 -0
  414. package/packs/http-api/checks/rate-limit-one-module.json +28 -0
  415. package/packs/http-api/checks/role-checked-in-one-guard.json +27 -0
  416. package/packs/http-api/checks/route-body-needs-schema.json +31 -0
  417. package/packs/http-api/checks/route-scopes-to-the-caller.json +31 -0
  418. package/packs/http-api/checks/secret-compared-constant-time-any.json +28 -0
  419. package/packs/http-api/checks/secret-in-job-record.json +27 -0
  420. package/packs/http-api/checks/server-fetches-tenant-url.json +30 -0
  421. package/packs/http-api/checks/short-code-needs-limit.json +26 -0
  422. package/packs/http-api/checks/user-url-through-safe-fetch.json +28 -0
  423. package/packs/http-api/checks/webhook-dedupes-event-id.json +30 -0
  424. package/packs/http-api/pack.json +45 -0
  425. package/packs/http-api/rules/adapters-one-db-gateway.md +18 -0
  426. package/packs/http-api/rules/apis-are-versioned.md +27 -0
  427. package/packs/http-api/rules/credentials-handled-safely.md +22 -0
  428. package/packs/http-api/rules/handlers-own-the-work.md +17 -0
  429. package/packs/http-api/rules/health-and-correlation.md +17 -0
  430. package/packs/http-api/rules/one-error-contract.md +17 -0
  431. package/packs/http-api/rules/routes-are-thin.md +17 -0
  432. package/packs/http-api/rules/routes-scope-to-the-caller.md +26 -0
  433. package/packs/http-api/rules/routes-validate-and-answer.md +25 -0
  434. package/packs/http-api/skills/change-an-api/SKILL.md +20 -0
  435. package/packs/http-api/skills/secure-a-route/SKILL.md +21 -0
  436. package/packs/instrument-shell/checks/no-raw-struct-blob.json +23 -0
  437. package/packs/instrument-shell/pack.json +22 -0
  438. package/packs/instrument-shell/rules/fold-keeps-every-route.md +24 -0
  439. package/packs/instrument-shell/rules/quiet-announces-itself.md +22 -0
  440. package/packs/instrument-shell/rules/render-the-extremes.md +25 -0
  441. package/packs/instrument-shell/rules/seams-are-declared.md +27 -0
  442. package/packs/instrument-shell/rules/session-blob-append-only.md +25 -0
  443. package/packs/instrument-shell/skills/gates-from-commit-one/SKILL.md +20 -0
  444. package/packs/instrument-shell/skills/hit-the-painted-control/SKILL.md +18 -0
  445. package/packs/js-ts/checks/async-callback-unguarded.json +26 -0
  446. package/packs/js-ts/checks/background-loop-needs-stop.json +28 -0
  447. package/packs/js-ts/checks/child-process-error-handler.json +28 -0
  448. package/packs/js-ts/checks/entry-registers-shutdown.json +31 -0
  449. package/packs/js-ts/checks/fetch-needs-timeout.json +30 -0
  450. package/packs/js-ts/checks/job-only-in-memory.json +28 -0
  451. package/packs/js-ts/checks/json-only-through-helper.json +29 -0
  452. package/packs/js-ts/checks/line-under-200-chars.json +34 -0
  453. package/packs/js-ts/checks/localhost-default-in-server.json +29 -0
  454. package/packs/js-ts/checks/no-any.json +27 -0
  455. package/packs/js-ts/checks/no-cast-escape-hatches.json +24 -0
  456. package/packs/js-ts/checks/no-console-in-app.json +31 -0
  457. package/packs/js-ts/checks/no-dynamic-import-node-builtin.json +25 -0
  458. package/packs/js-ts/checks/no-inline-binary.json +20 -0
  459. package/packs/js-ts/checks/no-inline-zod-outside-schemas.json +27 -0
  460. package/packs/js-ts/checks/no-local-sleep.json +25 -0
  461. package/packs/js-ts/checks/no-nested-ternary.json +20 -0
  462. package/packs/js-ts/checks/no-secret-in-log.json +24 -0
  463. package/packs/js-ts/checks/no-shell-string-interpolation.json +24 -0
  464. package/packs/js-ts/checks/no-swallowed-errors.json +25 -0
  465. package/packs/js-ts/checks/no-ts-enum.json +20 -0
  466. package/packs/js-ts/checks/process-env-only-in-config.json +31 -0
  467. package/packs/js-ts/checks/race-leaves-work-running.json +23 -0
  468. package/packs/js-ts/checks/reject-as-catch-all-exists.json +24 -0
  469. package/packs/js-ts/checks/secret-has-no-fallback.json +24 -0
  470. package/packs/js-ts/checks/secret-needs-crypto-random.json +24 -0
  471. package/packs/js-ts/checks/server-close-awaited.json +27 -0
  472. package/packs/js-ts/checks/session-user-typed-once.json +24 -0
  473. package/packs/js-ts/checks/switch-is-a-table.json +24 -0
  474. package/packs/js-ts/checks/test-imports-the-source.json +19 -0
  475. package/packs/js-ts/checks/test-name-says-behaviour.json +16 -0
  476. package/packs/js-ts/checks/tsconfig-flags.json +21 -0
  477. package/packs/js-ts/checks/void-needs-catch.json +24 -0
  478. package/packs/js-ts/checks/zod-string-needs-max.json +25 -0
  479. package/packs/js-ts/checks/zod-v4-formats.json +23 -0
  480. package/packs/js-ts/pack.json +84 -0
  481. package/packs/js-ts/rules/await-handled-at-a-boundary.md +66 -0
  482. package/packs/js-ts/rules/env-through-config.md +36 -0
  483. package/packs/js-ts/rules/errors-never-swallowed.md +33 -0
  484. package/packs/js-ts/rules/files-under-300-lines.md +18 -0
  485. package/packs/js-ts/rules/guard-clauses-over-nesting.md +34 -0
  486. package/packs/js-ts/rules/js-repeats-become-templates.md +26 -0
  487. package/packs/js-ts/rules/json-only-through-one-helper.md +62 -0
  488. package/packs/js-ts/rules/named-constants-not-magic-numbers.md +34 -0
  489. package/packs/js-ts/rules/no-any.md +34 -0
  490. package/packs/js-ts/rules/no-console.md +30 -0
  491. package/packs/js-ts/rules/no-floating-promises.md +31 -0
  492. package/packs/js-ts/rules/no-param-mutation.md +28 -0
  493. package/packs/js-ts/rules/no-unsafe-assertions.md +30 -0
  494. package/packs/js-ts/rules/one-logger.md +24 -0
  495. package/packs/js-ts/rules/outbound-calls-have-a-limit.md +20 -0
  496. package/packs/js-ts/rules/parallel-independent-awaits.md +29 -0
  497. package/packs/js-ts/rules/process-lifecycle.md +47 -0
  498. package/packs/js-ts/rules/schema-single-source-of-truth.md +36 -0
  499. package/packs/js-ts/rules/secrets-stay-secret.md +22 -0
  500. package/packs/js-ts/rules/small-functions.md +20 -0
  501. package/packs/js-ts/rules/test-names-describe-behavior.md +28 -0
  502. package/packs/js-ts/rules/tests-can-fail.md +19 -0
  503. package/packs/js-ts/rules/tsconfig-strict.md +32 -0
  504. package/packs/js-ts/rules/typed-exports.md +27 -0
  505. package/packs/js-ts/rules/types-once-at-the-edge.md +18 -0
  506. package/packs/js-ts/rules/unions-over-enums.md +29 -0
  507. package/packs/js-ts/rules/zod-at-route-boundaries.md +40 -0
  508. package/packs/midi/checks/active-sensing-no-pulse.json +24 -0
  509. package/packs/midi/checks/clock-not-at-sample-zero.json +23 -0
  510. package/packs/midi/checks/midi-realtime-first.json +27 -0
  511. package/packs/midi/checks/no-tempo-writeback.json +23 -0
  512. package/packs/midi/checks/position-not-integrated.json +25 -0
  513. package/packs/midi/checks/stub-playhead-advances.json +27 -0
  514. package/packs/midi/checks/sysex-length-literal.json +23 -0
  515. package/packs/midi/checks/sysex-not-on-audio.json +24 -0
  516. package/packs/midi/checks/sysex-survives-realtime.json +27 -0
  517. package/packs/midi/pack.json +22 -0
  518. package/packs/midi/rules/clock-is-a-pulse-stream.md +30 -0
  519. package/packs/midi/rules/imports-count-every-loss.md +25 -0
  520. package/packs/midi/rules/measure-the-clock-in-audio.md +30 -0
  521. package/packs/midi/rules/sync-is-a-mode.md +29 -0
  522. package/packs/midi/rules/sysex-is-a-record.md +29 -0
  523. package/packs/midi/skills/clock-probe/SKILL.md +23 -0
  524. package/packs/midi/skills/clock-probe/clock-law.md +417 -0
  525. package/packs/midi/skills/does-it-sync/SKILL.md +19 -0
  526. package/packs/mongo/checks/bulk-over-many.json +28 -0
  527. package/packs/mongo/checks/created-at-immutable.json +25 -0
  528. package/packs/mongo/checks/driver-outside-gateway.json +24 -0
  529. package/packs/mongo/checks/key-lookup-is-hashed.json +24 -0
  530. package/packs/mongo/checks/mongoclient-cached-and-named.json +34 -0
  531. package/packs/mongo/checks/mongoclient-outside-gateway.json +24 -0
  532. package/packs/mongo/checks/no-count-plus-one-ids.json +25 -0
  533. package/packs/mongo/checks/no-db-write-in-loop.json +25 -0
  534. package/packs/mongo/checks/no-drop-in-code.json +27 -0
  535. package/packs/mongo/checks/no-empty-deletemany.json +26 -0
  536. package/packs/mongo/checks/no-find-reads.json +26 -0
  537. package/packs/mongo/checks/no-input-spread-into-write.json +24 -0
  538. package/packs/mongo/checks/no-mongoose.json +23 -0
  539. package/packs/mongo/checks/no-negation-delete.json +26 -0
  540. package/packs/mongo/checks/no-non-null-after-findone.json +25 -0
  541. package/packs/mongo/checks/objectid-equals.json +26 -0
  542. package/packs/mongo/checks/update-then-reread.json +24 -0
  543. package/packs/mongo/checks/watch-not-poll.json +25 -0
  544. package/packs/mongo/pack.json +52 -0
  545. package/packs/mongo/rules/deletes-name-what-dies.md +21 -0
  546. package/packs/mongo/rules/driver-only-in-gateway.md +26 -0
  547. package/packs/mongo/rules/keys-hashed-input-picked.md +21 -0
  548. package/packs/mongo/rules/one-client-one-pool.md +32 -0
  549. package/packs/mongo/rules/reads-aggregate-writes-bulk.md +25 -0
  550. package/packs/mongo/rules/writes-are-atomic.md +27 -0
  551. package/packs/multi-tenant/checks/role-sees-all-tenants.json +26 -0
  552. package/packs/multi-tenant/checks/tenant-filter-from-url.json +25 -0
  553. package/packs/multi-tenant/pack.json +22 -0
  554. package/packs/multi-tenant/rules/no-role-crosses-a-tenant.md +21 -0
  555. package/packs/multi-tenant/skills/prove-tenant-isolation/SKILL.md +19 -0
  556. package/packs/nginx/checks/modsec-no-blanket-off.json +16 -0
  557. package/packs/nginx/checks/nginx-csp-no-unsafe.json +15 -0
  558. package/packs/nginx/checks/nginx-headers-always.json +15 -0
  559. package/packs/nginx/checks/nginx-keepalive-http11.json +20 -0
  560. package/packs/nginx/checks/nginx-logs-to-stdout.json +15 -0
  561. package/packs/nginx/checks/nginx-no-crlf.json +17 -0
  562. package/packs/nginx/checks/nginx-resolver-ttl.json +19 -0
  563. package/packs/nginx/pack.json +43 -0
  564. package/packs/nginx/rules/modsecurity-tuning.md +22 -0
  565. package/packs/nginx/rules/nginx-production.md +26 -0
  566. package/packs/nginx/skills/waf-rollout/SKILL.md +20 -0
  567. package/packs/python/checks/py-no-bare-except.json +18 -0
  568. package/packs/python/checks/py-no-eval.json +18 -0
  569. package/packs/python/checks/py-no-mutable-default.json +18 -0
  570. package/packs/python/checks/py-no-shell-true.json +18 -0
  571. package/packs/python/checks/py-no-star-import.json +18 -0
  572. package/packs/python/checks/py-no-swallowed-exception.json +18 -0
  573. package/packs/python/checks/py-none-by-is.json +18 -0
  574. package/packs/python/checks/py-open-with-with.json +18 -0
  575. package/packs/python/checks/py-requests-timeout.json +18 -0
  576. package/packs/python/checks/py-subprocess-output-checked.json +18 -0
  577. package/packs/python/checks/py-yaml-safe-load.json +18 -0
  578. package/packs/python/pack.json +26 -0
  579. package/packs/python/rules/python-errors-and-resources.md +26 -0
  580. package/packs/python/rules/python-repeats-become-templates.md +27 -0
  581. package/packs/python/skills/python-extract-template/SKILL.md +35 -0
  582. package/packs/react/checks/dialog-needs-role.json +28 -0
  583. package/packs/react/checks/effect-not-for-derived-state.json +24 -0
  584. package/packs/react/checks/icon-button-needs-name.json +24 -0
  585. package/packs/react/checks/label-needs-a-field.json +24 -0
  586. package/packs/react/checks/ui-failed-fetch-says-so.json +23 -0
  587. package/packs/react/checks/ui-ok-branch-has-an-else.json +23 -0
  588. package/packs/react/pack.json +20 -0
  589. package/packs/react/rules/react-accessible-controls.md +20 -0
  590. package/packs/react/rules/react-state-and-effects.md +23 -0
  591. package/packs/reverse-engineering/checks/ear-constant-tagged.json +23 -0
  592. package/packs/reverse-engineering/checks/no-default-on-distrust.json +24 -0
  593. package/packs/reverse-engineering/checks/no-rom-table-literal.json +29 -0
  594. package/packs/reverse-engineering/checks/prose-never-decides.json +22 -0
  595. package/packs/reverse-engineering/hooks/firmware-out-of-git.mjs +49 -0
  596. package/packs/reverse-engineering/pack.json +35 -0
  597. package/packs/reverse-engineering/rules/a-negative-names-what-was-scanned.md +19 -0
  598. package/packs/reverse-engineering/rules/account-every-term.md +20 -0
  599. package/packs/reverse-engineering/rules/addresses-name-their-space.md +21 -0
  600. package/packs/reverse-engineering/rules/every-law-has-a-source.md +18 -0
  601. package/packs/reverse-engineering/rules/findings-are-withdrawn-in-place.md +17 -0
  602. package/packs/reverse-engineering/rules/firmware-stays-out.md +18 -0
  603. package/packs/reverse-engineering/rules/names-before-code.md +19 -0
  604. package/packs/reverse-engineering/rules/reproduction-or-original.md +18 -0
  605. package/packs/reverse-engineering/rules/two-sources-before-naming.md +21 -0
  606. package/packs/reverse-engineering/skills/bank-census/SKILL.md +18 -0
  607. package/packs/reverse-engineering/skills/gather-sources/SKILL.md +21 -0
  608. package/packs/reverse-engineering/skills/menu-map/SKILL.md +28 -0
  609. package/packs/reverse-engineering/skills/names-first/SKILL.md +41 -0
  610. package/packs/reverse-engineering/skills/re-deliverables/SKILL.md +21 -0
  611. package/packs/reverse-engineering/skills/tripwire-the-law/SKILL.md +19 -0
  612. package/packs/reverse-engineering/tools/lib/unwrap.mjs +115 -0
  613. package/packs/reverse-engineering/tools/names-sweep.mjs +264 -0
  614. package/packs/shell/checks/sh-mktemp.json +18 -0
  615. package/packs/shell/checks/sh-no-backticks.json +18 -0
  616. package/packs/shell/checks/sh-no-eval.json +18 -0
  617. package/packs/shell/checks/sh-no-parse-ls.json +18 -0
  618. package/packs/shell/checks/sh-no-pipe-to-shell.json +18 -0
  619. package/packs/shell/checks/sh-no-program-in-heredoc.json +18 -0
  620. package/packs/shell/checks/sh-quote-arguments.json +18 -0
  621. package/packs/shell/checks/sh-rm-guarded.json +18 -0
  622. package/packs/shell/checks/sh-strict-mode.json +20 -0
  623. package/packs/shell/pack.json +28 -0
  624. package/packs/shell/rules/shell-repeats-become-templates.md +23 -0
  625. package/packs/shell/rules/shell-strict-and-quoted.md +27 -0
  626. package/packs/shell/skills/shell-extract-template/SKILL.md +32 -0
  627. package/packs/shell-hooks/checks/gnu-only-in-shell.json +18 -0
  628. package/packs/shell-hooks/checks/hook-command-anchored.json +12 -0
  629. package/packs/shell-hooks/checks/hook-json-by-tool.json +18 -0
  630. package/packs/shell-hooks/checks/no-bash-c-with-variable.json +20 -0
  631. package/packs/shell-hooks/pack.json +36 -0
  632. package/packs/shell-hooks/rules/hooks-portable-anchored-quoted.md +26 -0
  633. package/packs/sound-design/checks/audio-seed-fixed.json +23 -0
  634. package/packs/sound-design/checks/mix-is-a-crossfade.json +30 -0
  635. package/packs/sound-design/checks/no-hash-in-the-signal.json +30 -0
  636. package/packs/sound-design/checks/no-literal-key-anchor.json +30 -0
  637. package/packs/sound-design/checks/test-compares-a-function-with-itself.json +22 -0
  638. package/packs/sound-design/pack.json +22 -0
  639. package/packs/sound-design/rules/algorithms-are-data.md +26 -0
  640. package/packs/sound-design/rules/meter-before-engine.md +27 -0
  641. package/packs/sound-design/rules/neutral-is-exact.md +26 -0
  642. package/packs/sound-design/rules/test-off-the-easy-point.md +28 -0
  643. package/packs/sound-design/rules/unreachable-is-said.md +25 -0
  644. package/packs/sound-design/rules/waveforms-and-octaves.md +24 -0
  645. package/packs/sound-design/skills/choose-observable/SKILL.md +18 -0
  646. package/packs/sound-design/skills/measure-a-law/SKILL.md +18 -0
  647. package/packs/sound-design/skills/measure-reverb/SKILL.md +19 -0
  648. package/packs/sound-design/skills/spread-probe/SKILL.md +18 -0
  649. package/packs/stellix/checks/no-keyboard-focus.json +12 -0
  650. package/packs/stellix/checks/one-seeded-random.json +16 -0
  651. package/packs/stellix/checks/world-never-includes-painter.json +12 -0
  652. package/packs/stellix/checks/world-no-libm.json +15 -0
  653. package/packs/stellix/checks/world-no-unordered.json +10 -0
  654. package/packs/stellix/hooks/no-shipped-images.mjs +88 -0
  655. package/packs/stellix/pack.json +61 -0
  656. package/packs/stellix/rules/stellix-deterministic-world.md +29 -0
  657. package/packs/stellix/rules/stellix-reset-generated.md +24 -0
  658. package/packs/stellix/rules/stellix-world-snapshot.md +27 -0
  659. package/packs/stellix/rules/world-continuous-collision.md +26 -0
  660. package/packs/stellix/rules/world-fp-determinism.md +28 -0
  661. package/packs/stored-text/checks/no-raw-html-from-data.json +31 -0
  662. package/packs/stored-text/checks/stored-text-libs-only-in-renderer.json +31 -0
  663. package/packs/stored-text/checks/stored-text-renderer-complete.json +24 -0
  664. package/packs/stored-text/checks/stored-text-through-renderer.json +25 -0
  665. package/packs/stored-text/pack.json +41 -0
  666. package/packs/stored-text/rules/stored-text-renders-once.md +26 -0
  667. package/packs/stored-text/skills/render-stored-text/SKILL.md +24 -0
  668. package/packs/synth-creator/checks/timing-from-synthcore.json +24 -0
  669. package/packs/synth-creator/checks/ui-drawn-in-code.json +23 -0
  670. package/packs/synth-creator/hooks/build-guard.mjs +232 -0
  671. package/packs/synth-creator/hooks/build-sweep.mjs +166 -0
  672. package/packs/synth-creator/hooks/frozen-files.mjs +63 -0
  673. package/packs/synth-creator/hooks/idle-wake.mjs +90 -0
  674. package/packs/synth-creator/hooks/protect-vendor.mjs +174 -0
  675. package/packs/synth-creator/hooks/spec-lock.mjs +117 -0
  676. package/packs/synth-creator/hooks/stage-guard.mjs +50 -0
  677. package/packs/synth-creator/hooks/time-guard.mjs +292 -0
  678. package/packs/synth-creator/hooks/user-asks.mjs +165 -0
  679. package/packs/synth-creator/pack.json +136 -0
  680. package/packs/synth-creator/rules/copy-trees-read-only.md +25 -0
  681. package/packs/synth-creator/rules/debug-by-measurement.md +20 -0
  682. package/packs/synth-creator/rules/done-means-fresh-evidence.md +18 -0
  683. package/packs/synth-creator/rules/hooks-and-gates.md +21 -0
  684. package/packs/synth-creator/rules/long-work-in-the-background.md +16 -0
  685. package/packs/synth-creator/rules/timing-from-synthcore.md +16 -0
  686. package/packs/synth-creator/skills/build-step/SKILL.md +125 -0
  687. package/packs/synth-creator/skills/build-through-the-queue/SKILL.md +19 -0
  688. package/packs/synth-creator/tools/freeze.mjs +36 -0
  689. package/packs/tui/checks/tui-entry-restores-terminal.json +27 -0
  690. package/packs/tui/checks/tui-gates-on-tty.json +25 -0
  691. package/packs/tui/checks/tui-no-ris-reset.json +22 -0
  692. package/packs/tui/checks/tui-resize-listener-removed.json +26 -0
  693. package/packs/tui/checks/tui-width-is-state.json +33 -0
  694. package/packs/tui/pack.json +44 -0
  695. package/packs/tui/rules/tui-resize-and-screen.md +25 -0
  696. package/packs/tui/skills/build-tui/SKILL.md +21 -0
  697. package/packs/ui-craft/checks/ui-input-needs-autocomplete.json +23 -0
  698. package/packs/ui-craft/checks/ui-intl-for-dates.json +21 -0
  699. package/packs/ui-craft/checks/ui-no-ai-palette.json +22 -0
  700. package/packs/ui-craft/checks/ui-no-animate-layout.json +22 -0
  701. package/packs/ui-craft/checks/ui-no-assistant-palette.json +23 -0
  702. package/packs/ui-craft/checks/ui-no-bounce-easing.json +22 -0
  703. package/packs/ui-craft/checks/ui-no-custom-cursor.json +22 -0
  704. package/packs/ui-craft/checks/ui-no-emoji-as-ui.json +22 -0
  705. package/packs/ui-craft/checks/ui-no-empty-image.json +21 -0
  706. package/packs/ui-craft/checks/ui-no-eyebrow.json +21 -0
  707. package/packs/ui-craft/checks/ui-no-furniture-text.json +22 -0
  708. package/packs/ui-craft/checks/ui-no-gradient-text.json +22 -0
  709. package/packs/ui-craft/checks/ui-no-index-numbering.json +21 -0
  710. package/packs/ui-craft/checks/ui-no-lorem.json +22 -0
  711. package/packs/ui-craft/checks/ui-no-marketing-buzzword.json +22 -0
  712. package/packs/ui-craft/checks/ui-no-paste-block.json +21 -0
  713. package/packs/ui-craft/checks/ui-no-placeholder-names.json +21 -0
  714. package/packs/ui-craft/checks/ui-no-scroll-hijack.json +21 -0
  715. package/packs/ui-craft/checks/ui-no-side-tab.json +21 -0
  716. package/packs/ui-craft/checks/ui-no-stock-labels.json +22 -0
  717. package/packs/ui-craft/checks/ui-no-transition-all.json +22 -0
  718. package/packs/ui-craft/checks/ui-no-uppercase-table-header.json +21 -0
  719. package/packs/ui-craft/checks/ui-no-zebra-rows.json +22 -0
  720. package/packs/ui-craft/checks/ui-no-zoom-lock.json +21 -0
  721. package/packs/ui-craft/pack.json +43 -0
  722. package/packs/ui-craft/rules/apps-are-not-pages.md +26 -0
  723. package/packs/ui-craft/rules/data-tells-the-truth.md +26 -0
  724. package/packs/ui-craft/rules/dates-and-numbers.md +18 -0
  725. package/packs/ui-craft/rules/forms-never-fight.md +22 -0
  726. package/packs/ui-craft/rules/interface-copy.md +26 -0
  727. package/packs/ui-craft/rules/motion-is-rare.md +31 -0
  728. package/packs/ui-craft/rules/no-generated-look.md +37 -0
  729. package/packs/ui-craft/rules/page-holds-its-frame.md +28 -0
  730. package/packs/ui-craft/rules/page-proved-rendered.md +19 -0
  731. package/packs/ui-craft/rules/pictures-do-a-job.md +25 -0
  732. package/packs/ui-craft/rules/pointer-feedback.md +28 -0
  733. package/packs/ui-craft/rules/screen-answers-one-question.md +24 -0
  734. package/packs/ui-craft/rules/survives-real-data.md +23 -0
  735. package/packs/ui-craft/rules/touch-and-small-screens.md +19 -0
  736. package/packs/ui-craft/rules/type-space-colour.md +26 -0
  737. package/packs/ui-craft/rules/url-holds-the-state.md +19 -0
  738. package/packs/ui-craft/skills/app-screen/SKILL.md +33 -0
  739. package/packs/ui-craft/skills/build-from-reference/SKILL.md +28 -0
  740. package/packs/ui-craft/skills/chart-choice/SKILL.md +34 -0
  741. package/packs/ui-craft/skills/hover-state/SKILL.md +28 -0
  742. package/packs/ui-craft/skills/page-critique/SKILL.md +33 -0
  743. package/packs/ui-craft/skills/prove-page/SKILL.md +23 -0
  744. package/packs/ui-craft/skills/redesign-page/SKILL.md +19 -0
  745. package/packs/ui-craft/skills/ui-code-review/SKILL.md +22 -0
  746. package/packs/ui-craft/skills/write-the-page/SKILL.md +21 -0
  747. package/packs/ui-craft/tools/page-measure.mjs +41 -0
  748. package/packs/web/checks/a11y-img-needs-alt.json +26 -0
  749. package/packs/web/checks/a11y-no-bare-outline-none.json +21 -0
  750. package/packs/web/checks/a11y-no-clickable-div.json +26 -0
  751. package/packs/web/checks/a11y-no-positive-tabindex.json +26 -0
  752. package/packs/web/checks/client-no-api-key.json +29 -0
  753. package/packs/web/checks/client-no-browser-global-at-module-scope.json +28 -0
  754. package/packs/web/checks/client-no-server-import.json +31 -0
  755. package/packs/web/checks/client-no-window-location-nav.json +28 -0
  756. package/packs/web/checks/css-no-inline-style.json +30 -0
  757. package/packs/web/checks/ds-pages-compose-primitives.json +28 -0
  758. package/packs/web/checks/key-from-index.json +23 -0
  759. package/packs/web/checks/prodbuild-no-cdn-runtime-deps.json +21 -0
  760. package/packs/web/checks/prodbuild-no-dev-flags.json +21 -0
  761. package/packs/web/checks/prodbuild-no-remote-fonts.json +22 -0
  762. package/packs/web/checks/rcss-button-cursor.json +30 -0
  763. package/packs/web/checks/rcss-no-100vw.json +21 -0
  764. package/packs/web/checks/rcss-no-fixed-wide-width.json +21 -0
  765. package/packs/web/checks/rcss-viewport-meta.json +28 -0
  766. package/packs/web/checks/secret-not-in-web-storage.json +25 -0
  767. package/packs/web/checks/tw-no-raw-hex-in-markup.json +34 -0
  768. package/packs/web/checks/wp-hero-not-lazy.json +27 -0
  769. package/packs/web/checks/wp-img-needs-dimensions.json +26 -0
  770. package/packs/web/pack.json +73 -0
  771. package/packs/web/rules/accessibility.md +26 -0
  772. package/packs/web/rules/client-boundaries.md +23 -0
  773. package/packs/web/rules/production-build.md +22 -0
  774. package/packs/web/rules/secrets-not-in-the-browser.md +18 -0
  775. package/packs/web/rules/styles-live-in-stylesheets.md +23 -0
  776. package/packs/web/rules/tailwind-v4.md +23 -0
  777. package/packs/web/rules/ui-primitives-one-module.md +30 -0
  778. package/packs/web/rules/web-performance.md +21 -0
  779. package/packs/web/skills/design-direction/SKILL.md +30 -0
  780. package/packs/web/skills/design-review/SKILL.md +28 -0
  781. package/packs/web/skills/pick-rendering-mode/SKILL.md +21 -0
  782. package/packs/web/skills/preflight-build/SKILL.md +23 -0
  783. package/packs/web/skills/seo-audit/SKILL.md +22 -0
  784. package/packs/websocket/checks/no-token-in-query.json +26 -0
  785. package/packs/websocket/checks/stale-socket-deletes-new-entry.json +25 -0
  786. package/packs/websocket/checks/ws-identity-from-message.json +26 -0
  787. package/packs/websocket/pack.json +21 -0
  788. package/packs/websocket/rules/identity-comes-from-the-connection.md +24 -0
  789. package/packs/writing/checks/ascii-no-em-dash.json +17 -0
  790. package/packs/writing/checks/no-copula-dodging.json +18 -0
  791. package/packs/writing/checks/no-dramatic-colon.json +18 -0
  792. package/packs/writing/checks/no-not-x-but-y.json +18 -0
  793. package/packs/writing/checks/no-participial-opener.json +18 -0
  794. package/packs/writing/checks/no-pseudo-wisdom.json +18 -0
  795. package/packs/writing/checks/no-slop-words.json +18 -0
  796. package/packs/writing/checks/no-stock-connectors.json +18 -0
  797. package/packs/writing/checks/no-time-or-date.json +27 -0
  798. package/packs/writing/checks/no-trailing-ing.json +18 -0
  799. package/packs/writing/checks/no-vague-attribution.json +18 -0
  800. package/packs/writing/pack.json +43 -0
  801. package/packs/writing/rules/ascii-no-em-dash.md +21 -0
  802. package/packs/writing/rules/cut-the-padding.md +20 -0
  803. package/packs/writing/rules/direct-voice.md +22 -0
  804. package/packs/writing/rules/no-cargo-cult.md +16 -0
  805. package/packs/writing/rules/no-scaffolding.md +19 -0
  806. package/packs/writing/rules/no-stock-language.md +27 -0
  807. package/packs/writing/rules/no-time-or-date.md +18 -0
  808. package/packs/writing/rules/rhythm-like-talk.md +20 -0
  809. package/packs/writing/rules/write-from-your-own-corner.md +20 -0
  810. package/packs/writing/skills/argument-post/SKILL.md +28 -0
  811. package/packs/writing/skills/humanize/SKILL.md +28 -0
  812. package/packs/writing/skills/launch-post/SKILL.md +38 -0
  813. package/packs/writing/skills/pick-subreddit/SKILL.md +69 -0
  814. package/packs/writing/skills/post-voice/SKILL.md +22 -0
  815. package/packs/writing/skills/reddit-post/SKILL.md +63 -0
  816. package/packs/writing/skills/reddit-title/SKILL.md +23 -0
  817. package/packs/writing/skills/reply-moves/SKILL.md +40 -0
  818. package/packs/writing/skills/reply-stance/SKILL.md +23 -0
  819. package/packs/writing/skills/should-i-reply/SKILL.md +21 -0
  820. package/packs/zod/hooks/schemas-only.mjs +53 -0
  821. package/packs/zod/pack.json +44 -0
  822. package/packs/zod/rules/env-shapes-only.md +14 -0
  823. package/packs/zod/rules/zod-4-schemas.md +14 -0
  824. package/profiles/stellix.layout.json +315 -0
  825. package/profiles/sub37.layout.json +247 -0
  826. package/prompts/scan-review.md +40 -0
  827. package/prompts/survey.md +82 -0
@@ -0,0 +1,315 @@
1
+ {
2
+ "_comment": "Stellix, tailored from docs/project.md (surveyed 2026-10-26, branch work/notes-hit, b41d77d). Complete: packs add no default folders. stage-guard is disabled: the house git-guard already refuses git add -A. 0.4.0: the SOUND and MIXER layers (lib/app/src/layer*, cards, controls) are UI, so the control and look rules load there; confirm against the re-survey. 0.6.0: the copy trees are folders of kind copy (protect-vendor guards them; copy-tree-guard.py is merged into it), and guards carries Stellix's values for the house guards. enable: the opt-in hooks Stellix runs (user-asks, idle-wake); guards.git.refuseTrunk: Stellix works on a branch per step.",
3
+ "complete": true,
4
+ "folders": {
5
+ "app": {
6
+ "path": "lib/app",
7
+ "purpose": "the standalone, processor, editor, player, demo and the one launch function (launch.cpp)"
8
+ },
9
+ "app_copy": {
10
+ "path": "lib/app/tabula",
11
+ "kind": "copy",
12
+ "purpose": "a COPY TREE (kind copy): Tabula 1's PIANO loader, bridge and prebuild tool, copied unchanged by tools/copy_tabula.py; read-only as every copy tree"
13
+ },
14
+ "snapshot": {
15
+ "path": "lib/snapshot",
16
+ "purpose": "the one shared snapshot header the painter reads (header-only)"
17
+ },
18
+ "world": {
19
+ "path": "lib/world",
20
+ "purpose": "the world: travellers, strikes, rebounds, PULL, walls, the snapshot ring, State and the seeded RandomSource"
21
+ },
22
+ "engines": {
23
+ "path": "lib/engines",
24
+ "purpose": "SlotSound and Tabula 1's voice, copied and proved (src/tabula is read-only)"
25
+ },
26
+ "engines_copy": {
27
+ "path": "lib/engines/src/tabula",
28
+ "kind": "copy",
29
+ "purpose": "a COPY TREE (kind copy): Tabula 1's voice, effects and dspblocks files, copied unchanged by tools/copy_tabula.py; read-only (L8), each file with its origin line"
30
+ },
31
+ "engines_own": {
32
+ "path": "lib/engines/src/own",
33
+ "kind": "own",
34
+ "purpose": "PROMOTED files (kind own): copied files that measured identical, moved out of the copy tree by tools/copy_promote.py with their .origin record; these may be changed"
35
+ },
36
+ "dsp": {
37
+ "path": "lib/effects",
38
+ "purpose": "effects and dynamics: delay, EQ, compressor, limiter (S11a-S11d)"
39
+ },
40
+ "painter": {
41
+ "path": "lib/painter",
42
+ "purpose": "everything drawn: scene, camera, card, GPU layer, shaders, the Painter facade"
43
+ },
44
+ "records": {
45
+ "path": "data",
46
+ "purpose": "data/records (fixed ids, moons) and data/bank (factory patches)"
47
+ },
48
+ "probes": {
49
+ "path": "probes",
50
+ "purpose": "probe executables, each with --selftest, and the shot program (pictures, benches)"
51
+ },
52
+ "plants": {
53
+ "path": "tools/plants",
54
+ "purpose": "planted-fault sources run by tools/plants.sh"
55
+ },
56
+ "docs": {
57
+ "path": "docs",
58
+ "purpose": "spec, delay spec, laws, licences, research, work order (plan and logs at the root: build.md, bugs.md, workflow-bugs.md)"
59
+ },
60
+ "tools": {
61
+ "path": "tools",
62
+ "purpose": "build.sh, step.py, gates/, hooks/, plants.sh and plants.d/, copy and compare tools"
63
+ }
64
+ },
65
+ "concepts": {
66
+ "cpp": [
67
+ "lib/**/*.cpp",
68
+ "lib/**/*.h",
69
+ "lib/**/*.mm",
70
+ "probes/**/*.cpp",
71
+ "probes/**/*.h",
72
+ "tools/plants/**/*.cpp"
73
+ ],
74
+ "audio": [
75
+ "lib/app/src/processor.h",
76
+ "lib/app/src/processor.cpp",
77
+ "lib/app/src/sound.h",
78
+ "lib/app/src/mixer.h",
79
+ "lib/engines/include/**",
80
+ "lib/engines/src/*.cpp",
81
+ "lib/effects/**"
82
+ ],
83
+ "dsp": [
84
+ "lib/effects/**",
85
+ "lib/engines/include/**",
86
+ "lib/engines/src/*.cpp"
87
+ ],
88
+ "params": [
89
+ "lib/app/src/controls.h",
90
+ "lib/app/src/params.h",
91
+ "lib/app/src/moonparams.h",
92
+ "lib/app/src/host_params.h",
93
+ "lib/app/src/processor.h",
94
+ "data/records/**",
95
+ "data/bank/**"
96
+ ],
97
+ "records": [
98
+ "data/records/**",
99
+ "data/bank/**",
100
+ "lib/world/include/stellix/world/state.h"
101
+ ],
102
+ "world": [
103
+ "lib/world/**",
104
+ "lib/snapshot/**",
105
+ "lib/app/src/launch.*",
106
+ "lib/app/src/demo.cpp"
107
+ ],
108
+ "painter": [
109
+ "lib/painter/**"
110
+ ],
111
+ "shaders": [
112
+ "lib/painter/src/card/*_glsl.h",
113
+ "lib/painter/src/card/ui2d_*.h",
114
+ "lib/painter/src/gl/glsl.h",
115
+ "**/*.wgsl"
116
+ ],
117
+ "ui": [
118
+ "lib/app/src/editor*.h",
119
+ "lib/app/src/live.*",
120
+ "lib/painter/src/view.*",
121
+ "lib/app/src/layer*",
122
+ "lib/app/src/*card*",
123
+ "lib/app/src/*control*"
124
+ ],
125
+ "app": [
126
+ "lib/app/**"
127
+ ],
128
+ "tests": [
129
+ "probes/**",
130
+ "lib/*/tests/**",
131
+ "tools/gates/**",
132
+ "tools/plants/**",
133
+ "tools/plants.d/**"
134
+ ],
135
+ "bench": [
136
+ "probes/shot/cpugate.cpp",
137
+ "probes/shot/simbench.cpp",
138
+ "probes/shot/shot.cpp",
139
+ "probes/machine/**"
140
+ ],
141
+ "build": [
142
+ "CMakeLists.txt",
143
+ "**/CMakeLists.txt",
144
+ "cmake/**"
145
+ ],
146
+ "claude": [
147
+ ".claude/skills/**",
148
+ "**/.claude/skills/**",
149
+ ".claude/agents/**",
150
+ ".claude/rules/**"
151
+ ],
152
+ "notes": [
153
+ "build.md",
154
+ "bugs.md",
155
+ "workflow-bugs.md",
156
+ "docs/**/*.md"
157
+ ],
158
+ "docs-folder": [
159
+ "docs"
160
+ ]
161
+ },
162
+ "files": {
163
+ "seeded_random": "lib/world/include/stellix/world/random_source.h",
164
+ "world_math": "lib/world/src/sim_fly.h",
165
+ "snapshot": "lib/world/src/sim.h",
166
+ "render_thread": "lib/app/src/editor.h"
167
+ },
168
+ "protected": [
169
+ "lib/engines/src/tabula/**",
170
+ "design/reference/**",
171
+ "build/evidence/**"
172
+ ],
173
+ "disable": [
174
+ "hooks/no-shipped-images.mjs",
175
+ "checks/one-seeded-random.json",
176
+ "hooks/stage-guard.mjs"
177
+ ],
178
+ "gates": {
179
+ "hover": "bash tools/gates/hover_gate.sh"
180
+ },
181
+ "commands": {
182
+ "build": "bash tools/build.sh build",
183
+ "test": "bash tools/build.sh test",
184
+ "test-one": "bash tools/build.sh test -R <name>",
185
+ "plants": "bash tools/plants.sh",
186
+ "run": "bash tools/build.sh run",
187
+ "step": "python3 tools/step.py status",
188
+ "cpu-gate": "bash tools/build.sh test -R stellix.cpu_gate",
189
+ "frame-bench": "stellix_shot --bench (built by `bash tools/build.sh build`)",
190
+ "picture-gates": "bash tools/build.sh test -R '_gate'"
191
+ },
192
+ "siblings": [
193
+ "../"
194
+ ],
195
+ "kinds": {
196
+ "audio-entry": {
197
+ "what": "processBlock and the processor, voices, sound and mixer",
198
+ "in": "lib/app/src/processor.* (audio files) or lib/engines",
199
+ "concepts": [
200
+ "audio",
201
+ "dsp",
202
+ "tests"
203
+ ],
204
+ "content": "\\b(processBlock|renderNextBlock|getNextAudioBlock)\\s*\\("
205
+ },
206
+ "world": {
207
+ "what": "travellers, strikes, rebounds, PULL, walls, the world step, the snapshot ring, seeded random",
208
+ "in": "world"
209
+ },
210
+ "snapshot": {
211
+ "what": "the one plain-data snapshot type the painter reads",
212
+ "in": "snapshot"
213
+ },
214
+ "engine": {
215
+ "what": "SlotSound and the copied Tabula voice (src/tabula is read-only)",
216
+ "in": "engines"
217
+ },
218
+ "dsp-block": {
219
+ "what": "effects and dynamics: delay, EQ, compressor, limiter",
220
+ "in": "dsp"
221
+ },
222
+ "gpu-code": {
223
+ "what": "anything that calls Dawn/WebGPU, the scene, camera, card, Painter facade",
224
+ "in": "painter",
225
+ "concepts": [
226
+ "painter",
227
+ "tests"
228
+ ],
229
+ "content": "\\b(wgpu::|wgpu[A-Z]\\w*\\s*\\(|WGPU[A-Z]\\w+)"
230
+ },
231
+ "shader": {
232
+ "what": "WGSL shaders",
233
+ "in": "painter",
234
+ "concepts": [
235
+ "painter"
236
+ ],
237
+ "files": [
238
+ "**/*.wgsl"
239
+ ]
240
+ },
241
+ "editor": {
242
+ "what": "the editor, live view and UI wiring",
243
+ "in": "app",
244
+ "concepts": [
245
+ "ui",
246
+ "painter",
247
+ "app",
248
+ "tests"
249
+ ],
250
+ "content": "\\bvoid\\s+(?:\\w+::)*paint\\s*\\(\\s*(?:juce::)?Graphics\\b"
251
+ },
252
+ "records": {
253
+ "what": "fixed-id records, moons, factory patches",
254
+ "in": "records"
255
+ },
256
+ "probe": {
257
+ "what": "a probe executable with --selftest, the shot program",
258
+ "in": "probes"
259
+ },
260
+ "plant": {
261
+ "what": "a planted-fault source for tools/plants.sh",
262
+ "in": "plants"
263
+ },
264
+ "docs": {
265
+ "what": "spec, laws, licences, research, work orders",
266
+ "in": "docs",
267
+ "concepts": [
268
+ "docs-folder"
269
+ ],
270
+ "files": [
271
+ "**/laws.md",
272
+ "**/*-spec.md"
273
+ ]
274
+ },
275
+ "tools": {
276
+ "what": "build.sh, step.py, gates, hooks, copy and compare tools",
277
+ "in": "tools"
278
+ }
279
+ },
280
+ "guards": {
281
+ "git": {
282
+ "safeRestore": "python3 tools/safe_restore.py <paths>",
283
+ "branchStart": "python3 tools/step.py start <STEP> \"task\" (work that is not a step: start --work <name> \"task\")",
284
+ "refuseTrunk": true,
285
+ "house": true
286
+ },
287
+ "copy": {
288
+ "tools": [
289
+ "tools/copy_tabula.py",
290
+ "tools/copy_reimport.py",
291
+ "tools/copy_promote.py"
292
+ ]
293
+ },
294
+ "time": {
295
+ "saveCommand": "add new files by path, then python3 tools/step.py save \"<note>\""
296
+ },
297
+ "browser": {
298
+ "pictureCommand": "the shot program (stellix_shot --render)"
299
+ },
300
+ "images": {
301
+ "guarded": [
302
+ "**"
303
+ ],
304
+ "allowed": [
305
+ "design/reference/**",
306
+ "build/pictures/**",
307
+ "out/**"
308
+ ]
309
+ }
310
+ },
311
+ "enable": [
312
+ "hooks/user-asks.mjs",
313
+ "hooks/idle-wake.mjs"
314
+ ]
315
+ }
@@ -0,0 +1,247 @@
1
+ {
2
+ "_comment": "Sub37, tailored from docs/project.md answer (b) (surveyed 2026-10-31, main 0ee9e78). Install on the tree as it is: `init audio-core --profile sub37`, never gpu-painter or stellix. Complete: packs add no default folders. Probes stay in tools/ until the probes-to-tests/ decision is made once for every synthkit unit. paramIds reads the ids from the generated header and the panel binding ids from panel/bindings.json; the unit's own kFrozenIds gate in tools/tests_main.cpp stays the authority. No bench folder exists, so no bench concept. The tools/ folder is keyed \"probes\": folder-law treats a folder named tools as scripts only, and Sub37's C++ probes live there.",
3
+ "complete": true,
4
+ "folders": {
5
+ "app": {
6
+ "path": "src",
7
+ "purpose": "PluginProcessor and PluginEditor, flat in src/: parameters, programs, session, clock, the window, bindings, actions"
8
+ },
9
+ "audio": {
10
+ "path": "src/engine",
11
+ "purpose": "the audio-thread code: the paraphonic voice, the ladder, MultiDrive, envelopes, mod buses (Engine, Coeffs)"
12
+ },
13
+ "params": {
14
+ "path": "src/patch",
15
+ "purpose": "the program record and the sysex both ways"
16
+ },
17
+ "generated": {
18
+ "path": "src/generated",
19
+ "purpose": "Sub37Params.h and Sub37Factory.h, written by tools/gen_headers.py from data/; never hand edited"
20
+ },
21
+ "ui": {
22
+ "path": "src/ui",
23
+ "purpose": "the shell adapter; after the rebuild, the native panel component and its gestures"
24
+ },
25
+ "data": {
26
+ "path": "data",
27
+ "purpose": "params.csv (the parameter table, append only) and factory.csv (the factory bank)"
28
+ },
29
+ "panel": {
30
+ "path": "panel",
31
+ "purpose": "gen_panel.py (the panel's source), measure_overlay.py, and their output panel.json and bindings.json"
32
+ },
33
+ "resources": {
34
+ "path": "resources",
35
+ "purpose": "the PNG panel export (resources/native), until the native rebuild deletes it"
36
+ },
37
+ "design": {
38
+ "path": "design/reference",
39
+ "purpose": "reference pictures and their measured analysis; read-only, never read by a build step"
40
+ },
41
+ "probes": {
42
+ "path": "tools",
43
+ "purpose": "the probes and gates (*_probe.cpp, tests_main.cpp, clock_gate_test.cpp, param_reaches_audio.cpp), snapshot_main.cpp, gen_headers.py, measure scripts"
44
+ },
45
+ "cmake": {
46
+ "path": "cmake",
47
+ "purpose": "Siblings.cmake, CheckGenerated.cmake, GenVersion.cmake (copies of synthkit/cmake)"
48
+ },
49
+ "docs": {
50
+ "path": "docs",
51
+ "purpose": "laws, research, manual audit, provenance, the gates, licences (logs at the root: bugs.md, todo.md, build.md)"
52
+ }
53
+ },
54
+ "concepts": {
55
+ "cpp": [
56
+ "src/**/*.cpp",
57
+ "src/**/*.h",
58
+ "tools/**/*.cpp",
59
+ "tools/**/*.h"
60
+ ],
61
+ "audio": [
62
+ "src/engine/**",
63
+ "src/PluginProcessor.h",
64
+ "src/PluginProcessor.cpp"
65
+ ],
66
+ "dsp": [
67
+ "src/engine/**"
68
+ ],
69
+ "params": [
70
+ "src/PluginProcessor.h",
71
+ "src/PluginProcessor.cpp",
72
+ "src/patch/**",
73
+ "src/generated/**",
74
+ "data/params.csv"
75
+ ],
76
+ "presets": [
77
+ "data/factory.csv",
78
+ "data/params.csv",
79
+ "src/patch/**"
80
+ ],
81
+ "generated": [
82
+ "src/generated/**"
83
+ ],
84
+ "ui": [
85
+ "src/PluginEditor.h",
86
+ "src/PluginEditor.cpp",
87
+ "src/ui/**"
88
+ ],
89
+ "app": [
90
+ "src/PluginProcessor.*",
91
+ "src/PluginEditor.*"
92
+ ],
93
+ "panel-spec": [
94
+ "panel/**",
95
+ "**/bindings.json"
96
+ ],
97
+ "reference": [
98
+ "design/reference/**"
99
+ ],
100
+ "tests": [
101
+ "tools/*_probe.cpp",
102
+ "tools/tests_main.cpp",
103
+ "tools/clock_gate_test.cpp",
104
+ "tools/param_reaches_audio.cpp"
105
+ ],
106
+ "build": [
107
+ "CMakeLists.txt",
108
+ "**/CMakeLists.txt",
109
+ "cmake/**"
110
+ ],
111
+ "claude": [
112
+ ".claude/skills/**",
113
+ "**/.claude/skills/**",
114
+ ".claude/agents/**",
115
+ ".claude/rules/**"
116
+ ],
117
+ "notes": [
118
+ "bugs.md",
119
+ "todo.md",
120
+ "build.md",
121
+ "workflow-bugs.md",
122
+ "docs/**/*.md"
123
+ ],
124
+ "docs-folder": [
125
+ "docs"
126
+ ]
127
+ },
128
+ "files": {},
129
+ "protected": [
130
+ "design/reference/**"
131
+ ],
132
+ "disable": [],
133
+ "commands": {
134
+ "configure": "cmake -B build -DCMAKE_BUILD_TYPE=RelWithDebInfo",
135
+ "build": "buildq cmake --build build",
136
+ "test": "buildq ctest --test-dir build --output-on-failure",
137
+ "test-one": "buildq ctest --test-dir build --output-on-failure -R <name>",
138
+ "standalone": "buildq cmake --build build --target Sub37_Standalone",
139
+ "panel-check": "npm run panel:validate && npm run panel:check",
140
+ "panel-export": "npm run panel:native",
141
+ "snapshot": "Sub37Snapshot (built by the build command) writes the editor to PNG"
142
+ },
143
+ "siblings": [
144
+ "../"
145
+ ],
146
+ "paramIds": {
147
+ "extensions": "(\\.(cpp|h|hpp|cc|mm)|bindings\\.json)$",
148
+ "patterns": [
149
+ "\\{\\s*\"([a-z][a-z0-9_]*)\",\\s*\"[^\"]*\",\\s*\"(?:float|choice)\"",
150
+ "\"([a-z][a-z0-9_]*)\":\\s*\\{\\s*\"kind\""
151
+ ]
152
+ },
153
+ "kinds": {
154
+ "audio-entry": {
155
+ "what": "processBlock and the audio-thread engine: voice, ladder, MultiDrive, envelopes, mod buses",
156
+ "in": "audio",
157
+ "concepts": [
158
+ "audio",
159
+ "tests"
160
+ ],
161
+ "content": "\\b(processBlock|renderNextBlock|getNextAudioBlock)\\s*\\("
162
+ },
163
+ "processor": {
164
+ "what": "the processor: parameter registration, programs, session, clock",
165
+ "in": "app"
166
+ },
167
+ "editor": {
168
+ "what": "the window and anything that paints: the editor, the native panel component, its gestures",
169
+ "in": "ui",
170
+ "concepts": [
171
+ "ui",
172
+ "tests"
173
+ ],
174
+ "content": "\\bvoid\\s+(?:\\w+::)*paint\\s*\\(\\s*(?:juce::)?Graphics\\b"
175
+ },
176
+ "patch": {
177
+ "what": "the program record and the sysex both ways",
178
+ "in": "params"
179
+ },
180
+ "generated": {
181
+ "what": "the generated headers (Sub37Params.h, Sub37Factory.h): run tools/gen_headers.py, never hand edit",
182
+ "in": "generated",
183
+ "concepts": [
184
+ "generated"
185
+ ],
186
+ "files": [
187
+ "**/Sub37Params.h",
188
+ "**/Sub37Factory.h"
189
+ ]
190
+ },
191
+ "bank": {
192
+ "what": "the parameter table (append only) and the factory bank",
193
+ "in": "data",
194
+ "concepts": [
195
+ "presets"
196
+ ],
197
+ "files": [
198
+ "**/factory.csv",
199
+ "**/params.csv"
200
+ ]
201
+ },
202
+ "panel": {
203
+ "what": "the panel source (gen_panel.py) and its output panel.json and bindings.json",
204
+ "in": "panel",
205
+ "concepts": [
206
+ "panel-spec"
207
+ ],
208
+ "files": [
209
+ "**/panel.json",
210
+ "**/bindings.json"
211
+ ]
212
+ },
213
+ "probe": {
214
+ "what": "a probe or gate with --selftest (the house template keeps them in tools/)",
215
+ "in": "probes",
216
+ "concepts": [
217
+ "tests"
218
+ ],
219
+ "files": [
220
+ "**/*_probe.cpp"
221
+ ]
222
+ },
223
+ "reference": {
224
+ "what": "reference pictures and their measured analysis",
225
+ "in": "design"
226
+ },
227
+ "export": {
228
+ "what": "the PNG panel export, until the native rebuild deletes it",
229
+ "in": "resources"
230
+ },
231
+ "docs": {
232
+ "what": "laws, research, provenance, the gates, licences",
233
+ "in": "docs",
234
+ "concepts": [
235
+ "docs-folder"
236
+ ],
237
+ "files": [
238
+ "**/laws.md",
239
+ "**/*-spec.md"
240
+ ]
241
+ },
242
+ "tools": {
243
+ "what": "scripts: gen_headers.py, measure scripts, the snapshot renderer",
244
+ "in": "probes"
245
+ }
246
+ }
247
+ }
@@ -0,0 +1,40 @@
1
+ Review the copy of this project in the current folder, and write a report the owner can act on. `claude-packs scan` already ran every check over every file; its report is `claude-packs-scan.md` in this folder. The checks find patterns. Your job is the bugs they cannot see, and to say which of their hits are real.
2
+
3
+ <constraints>
4
+ Always do:
5
+ - Treat this as read-only. This folder is a throwaway copy; the owner's code is elsewhere. The only file you write is `claude-packs-review.md`.
6
+ - Read the code. Every finding names the file and the symbol.
7
+ - Split the review by concern, one reviewer each, so none of them skims:
8
+ 1. **Security:** who can reach what. Injection and XSS through query strings and stored text, open redirects, OAuth `redirect_uri`, what the CSP really stops, authorization on every route, secrets and prompts written to disk or logs.
9
+ 2. **Runaway work:** anything that sets off itself: a watcher that writes what it watches, retries with no limit, loops with no stop, polling, anything that costs money per call.
10
+ 3. **Work that disappears:** a failed send marked delivered, a box cleared before the send succeeded, a queue item lost on restart, errors swallowed, no shutdown handling.
11
+ 4. **Docs that lie:** compare CLAUDE.md, the README and the deploy notes with the code. A stale CLAUDE.md misleads every session, so name each claim that is no longer true: a stack, a command, a folder.
12
+ 5. **Platform and operations:** what behaves differently on the other OS, signals that do nothing, a deploy that drops in-flight work.
13
+ - Verify the hits in `claude-packs-scan.md`. Sample each check, and count real and false for what you read. Give counts only for what you counted; say so when a count is partial.
14
+ - Mark every finding with how you know it: **measured** (you ran it), **read in the code** (you traced it, did not fire it), or **claim** (likely, not confirmed). Measure what you can run safely in this copy.
15
+ - Rank by what happens to the owner, worst first, and give each finding one plain sentence of consequence.
16
+ - List checks that misfired or missed something: they are bugs in claude-packs, not in this project.
17
+
18
+ Never do:
19
+ - Change, format or "fix" any code.
20
+ - Connect to a production database, a live API or any service with real credentials, or use any token you find. A finding that needs production to confirm says so, and the owner decides.
21
+ - Print a secret's value. Name the file and line.
22
+ - Call a hit a bug because a check fired, or call the project clean because the checks passed.
23
+ </constraints>
24
+
25
+ ## Report format
26
+
27
+ Lead with the most urgent finding, in one sentence.
28
+
29
+ **What to install:** the configuration and packs, why, and what was left out and why. If the scan's recommendation is wrong for this project, say so.
30
+
31
+ **What the review found:** hits checked and how many were real, then the worst findings as a table:
32
+
33
+ | Bug | Problem | How I know |
34
+ |---|---|---|
35
+
36
+ Then the rest by concern, in plain sentences: what happens, not how the code is shaped.
37
+
38
+ **Decisions for you:** each rule that does not fit this project, with your recommendation and the count it affects.
39
+
40
+ **Next step:** the order to fix things in, the first one named. Nothing is fixed, merged or deployed by this review.
@@ -0,0 +1,82 @@
1
+ Survey this repository and write `docs/project.md`: a complete, factual description of how the project is laid out and how its code is written. It will be used to tailor the claude-packs rules, checks, hooks and skills so each one triggers exactly where it's needed.
2
+
3
+ <constraints>
4
+ Always do:
5
+ - Read the code. Every statement in project.md comes from files you opened, with the path cited. Where something isn't in the repo, write "not present", never a guess.
6
+ - Treat this as read-only: the only file you create or change is `docs/project.md`.
7
+ - Use real paths and real names: folders, files, classes, namespaces, CMake targets, test names.
8
+ - Keep it complete but plain: tables and short lists, no essays.
9
+
10
+ Never do:
11
+ - Change, move, format or "fix" any code, config, rule or skill while surveying.
12
+ - Describe what the spec *plans* as if it exists. Mark planned-but-absent things as planned, with the spec section.
13
+ - Run builds, installers or anything that writes files (reading `git log`, `ls`, `cmake --help`-style queries is fine).
14
+ </constraints>
15
+
16
+ ## What project.md must contain
17
+
18
+ ### 1. Folder tree
19
+ The full directory tree (folders only, to depth 4, excluding `build*`, `.git`, `node_modules`, `JUCE`, `_deps`, vendored libraries), and for every folder: what lives there, file count, main languages, and one example file.
20
+
21
+ ### 2. Where each concern lives
22
+ A table with one row per concern: the folders and files that hold it, the main classes, and whether it runs on the audio thread, the message thread, the render thread, or offline.
23
+ Concerns: plugin/standalone entry and processor; voices and voice allocation; sound engines (each oscillator kind); filters; effects (each); dynamics (EQ, compressor, limiter); the world (travellers, hits, pushes, tick); the world snapshot and handoff; the seeded random generator; parameters and IDs; patches, presets, state save/load, reset; records (layout and state); the painter / GPU code; shaders; UI input, gestures, camera, picking; undo; MIDI, MPE, note tracking, sustain; tempo and clock; tests and gates; benchmarks; tools and scripts; research data.
24
+
25
+ ### 3. How code is written
26
+ - C++ standard, compiler flags (from CMake), warnings, sanitizer presets.
27
+ - Naming conventions (files, classes, members, constants, namespaces), with examples.
28
+ - File-size distribution: largest 15 source files with line counts, and how many exceed 300 lines.
29
+ - Error handling style, ownership style (unique_ptr, raw, references), use of `juce::` vs `std::` types.
30
+ - How modules are structured (base classes, registries, "everything extends from core"), with the base class names.
31
+ - Threading model: which threads exist, and what communicates between them (atomics, FIFOs, snapshots, locks — name the files).
32
+ - How parameters are declared and how their IDs are made.
33
+
34
+ ### 4. Build, dependencies, tests
35
+ - Build system and targets (CMake target names, formats built: standalone/VST3/AU/CLAP).
36
+ - JUCE version (read it from the repo), Dawn or other GPU library and version or commit, every other third-party library with version and licence.
37
+ - Test framework, test target names, how gates and planted faults are run, golden files and where they live.
38
+ - CI, if any.
39
+
40
+ ### 5. Claude setup already in the repo
41
+ - Contents of `CLAUDE.md` and any nested `CLAUDE.md` (summarise, quote headings).
42
+ - Every file in `.claude/` (rules with their `paths:`, skills with their descriptions, hooks and what they block, settings), and any `build.md`, `bugs.md`, `step.py`, work orders and laws files.
43
+ - Anything that duplicates or conflicts with another rule, skill or hook.
44
+
45
+ ### 6. Proposed layout for claude-packs
46
+ Finish with this JSON block, filled from what you found (use the real folder paths; add folders that exist and matter; mark a folder `"planned": true` if the spec calls for it but it doesn't exist yet):
47
+
48
+ ```json
49
+ {
50
+ "folders": {
51
+ "app": { "path": "", "purpose": "" },
52
+ "audio": { "path": "", "purpose": "" },
53
+ "engines": { "path": "", "purpose": "" },
54
+ "dsp": { "path": "", "purpose": "" },
55
+ "params": { "path": "", "purpose": "" },
56
+ "world": { "path": "", "purpose": "" },
57
+ "records": { "path": "", "purpose": "" },
58
+ "painter": { "path": "", "purpose": "" },
59
+ "shaders": { "path": "", "purpose": "" },
60
+ "ui": { "path": "", "purpose": "" },
61
+ "tests": { "path": "", "purpose": "" },
62
+ "bench": { "path": "", "purpose": "" },
63
+ "docs": { "path": "", "purpose": "" },
64
+ "tools": { "path": "", "purpose": "" }
65
+ },
66
+ "extra_folders": {},
67
+ "files_to_move": [ { "from": "", "to": "", "why": "" } ],
68
+ "special_files": {
69
+ "seeded_random": "",
70
+ "world_math": "",
71
+ "render_thread": "",
72
+ "snapshot": ""
73
+ }
74
+ }
75
+ ```
76
+
77
+ `files_to_move` lists source files that sit outside any folder above, or in the wrong one (for example drawing code in an audio folder). List them; don't move them.
78
+
79
+ ### 7. Open questions
80
+ Anything you couldn't determine, as a numbered list.
81
+
82
+ When done, reply with one line: the path of project.md and how many open questions it has.