aigroup-workflow 1.2.7 → 2.0.0

package/docs/red-flags.md

@@ -1,24 +1,29 @@
-# 危险信号检测（Red Flags）
-
-Max 在工作流中必须持续监测以下危险信号。检测到任何一个时，**立即阻止并采取对应行动**。
-
-## 信号清单
-
-| # | 危险信号 | 行动 | 严重度 |
-|---|---------|------|--------|
-| 1 | 需求不清就开始编码 | 停下来，启动 brainstorming | 🔴 高 |
-| 2 | 没有实现计划就开始开发 | 停下来，先写 writing-plans | 🔴 高 |
-| 3 | Jarvis 说"搞定了"但没有验证证据 | 要求运行测试并展示输出 | 🔴 高 |
-| 4 | Kyle 审查只做了一个阶段 | 要求完成两阶段审查 | 🟡 中 |
-| 5 | 审查发现问题但直接跳过 | 要求 Jarvis 修复后重新审查 | 🔴 高 |
-| 6 | 有人想跳过工作流环节 | 拒绝，除非符合简单任务豁免 | 🔴 高 |
-| 7 | 使用"应该没问题""看起来对了" | 要求提供验证命令和输出证据 | 🟡 中 |
-| 8 | 同一类错误反复出现 | 触发 [转向循环](steering-loop.md)，将修复编码为规则 | 🟡 中 |
-| 9 | 文档与代码不一致 | 触发 [熵管理](../skills/max/workflow/entropy-management/SKILL.md)，修复漂移 | 🟡 中 |
-| 10 | Harness 传感器长期无告警 | 审查传感器有效性，可能检测不足 | 🟡 中 |
-
-## 升级机制
-
-- 🔴 高：立即中断当前流程，回到正确阶段
-- 🟡 中：在当前阶段结束前处理
-- 信号 #8 是 Harness Engineering 的核心：**重复问题不应靠人工反复修正，而应编码为自动化约束**
+# 危险信号检测（Red Flags）
+
+主会话必须持续监测以下危险信号。检测到任何一个时，**立即阻止并采取对应行动**。
+
+**适用范围**：
+- **始终生效**：信号 #3、#5、#7、#8、#9、#10、#11 —— 与运行模式无关
+- **仅工作流模式生效**：信号 #1、#2、#4、#6 —— 默认模式下用户未启动管道，这些不触发
+
+## 信号清单
+
+| # | 危险信号 | 行动 | 严重度 | 适用 |
+|---|---------|------|--------|------|
+| 1 | 需求不清就开始编码 | 停下来，建议用户 `/workflow-start` 启动 brainstorming | 🔴 高 | 工作流模式 |
+| 2 | 没有实现计划就开始开发 | 停下来，先写 writing-plans | 🔴 高 | 工作流模式 |
+| 3 | 实现 agent 说"搞定了"但没有验证证据 | 要求运行测试并展示输出 | 🔴 高 | 始终 |
+| 4 | code-reviewer 审查只做了一个阶段 | 要求完成两阶段审查 | 🟡 中 | 工作流模式 |
+| 5 | 审查发现问题但直接跳过 | 要求对应实现 agent 修复后重新审查 | 🔴 高 | 始终 |
+| 6 | 工作流中有人想跳过关键 phase | 说清楚跳过的理由，让用户确认（phase 按需裁剪，但不能无声跳过） | 🔴 高 | 工作流模式 |
+| 7 | 使用"应该没问题""看起来对了" | 要求提供验证命令和输出证据 | 🟡 中 | 始终 |
+| 8 | 同一类错误反复出现 | 运行 `bash scripts/harness/logs-query.sh --hotspots --days 30` 查看高频失败项 | 🟡 中 | 始终 |
+| 9 | 文档与代码不一致 | 触发 [熵管理](../skills/entropy-management/SKILL.md)，修复漂移 | 🟡 中 | 始终 |
+| 10 | Harness 传感器长期无告警 | 审查传感器有效性，可能检测不足 | 🟡 中 | 始终 |
+| 11 | 主会话直接写代码/做设计/做测试 | 立即停下，按任务类型派遣专项 agent 执行 | 🔴 高 | 始终 |
+
+## 升级机制
+
+- 🔴 高：立即中断当前流程，回到正确阶段
+- 🟡 中：在当前阶段结束前处理
+- 信号 #8 是 Harness Engineering 的核心：**重复问题不应靠人工反复修正，而应编码为自动化约束**

package/docs/rules/README.md

@@ -0,0 +1,51 @@
+# Rules
+
+> 短小、强制、可勾选的规则集。Skills 告诉你"怎么做"，Rules 告诉你"必须做什么"。
+> 通用规则按领域切分（agents / coding-style / git / testing / security / performance / hooks），语言专项按栈分目录（采用 ECC 规则原版）。
+
+## 通用规则（所有项目）
+
+| 文件 | 主题 |
+|------|------|
+| [agents.md](agents.md) | Agent 派遣规则（采用 ECC zh） |
+| [coding-style.md](coding-style.md) | 编码风格、命名、错误处理、中文注释 |
+| [git-workflow.md](git-workflow.md) | Conventional Commits、Git 安全 |
+| [testing.md](testing.md) | TDD、覆盖率、测试结构 |
+| [security.md](security.md) | 安全清单、密钥管理、应急响应 |
+| [performance.md](performance.md) | MCP / tool 预算、上下文卫生、长任务拆分 |
+| [hooks.md](hooks.md) | Hooks 使用规则（Claude 自动 / Codex 手动） |
+
+## 语言专项（按栈加载，采用 ECC 规则原版）
+
+每个语言目录含 5 个标准维度：`coding-style.md` / `patterns.md` / `testing.md` / `security.md` / `hooks.md`。`web` 额外含 `design-quality.md` / `performance.md`。
+
+| 目录 | 适用 |
+|------|------|
+| [cpp/](cpp/) | C / C++ |
+| [csharp/](csharp/) | C# / .NET |
+| [dart/](dart/) | Dart / Flutter |
+| [golang/](golang/) | Go |
+| [java/](java/) | Java / Spring Boot / Kotlin (JVM) |
+| [kotlin/](kotlin/) | Kotlin / Android / KMP |
+| [perl/](perl/) | Perl |
+| [php/](php/) | PHP / Laravel |
+| [python/](python/) | Python / Django / FastAPI / PyTorch |
+| [rust/](rust/) | Rust |
+| [swift/](swift/) | Swift / iOS |
+| [typescript/](typescript/) | TypeScript / JavaScript / React / Next.js |
+| [web/](web/) | HTML / CSS / 前端通用（额外含 design-quality / performance） |
+
+## Rules vs Skills
+
+- **Rules** — 始终遵守的标准（"测试覆盖率 ≥ 80%"、"密钥不入代码"、"派遣不可跳过"）
+- **Skills** — 完成具体任务的方法论与示例（`writing-plans/SKILL.md`、`code-reviewer/SKILL.md`）
+
+Rules 决定**必须做什么**；Skills 决定**怎么做**。
+
+## 与现有文档的关系
+
+| 现有文档 | 作用 | 与 rules/ 的关系 |
+|----------|------|------------------|
+| `docs/red-flags.md` | 危险信号检测 | rules/agents.md + rules/security.md 的反向版本 |
+| `docs/workflow-pipeline.md` | 工作流 phase 心智模型 | rules/agents.md 的"何时使用"展开 |
+| `.codex/config.toml` | Codex MCP 与 persona 基线 | rules/performance.md 约束默认启用范围 |

package/docs/rules/agents.md

@@ -0,0 +1,50 @@
+# 代理编排
+
+## 可用代理
+
+位于 `~/.claude/agents/`：
+
+| 代理 | 用途 | 何时使用 |
+|-------|---------|------------|
+| planner | 实现规划 | 复杂功能、重构 |
+| architect | 系统设计 | 架构决策 |
+| tdd-guide | 测试驱动开发 | 新功能、bug 修复 |
+| code-reviewer | 代码审查 | 编写代码后 |
+| security-reviewer | 安全分析 | 提交前 |
+| build-error-resolver | 修复构建错误 | 构建失败时 |
+| e2e-runner | E2E 测试 | 关键用户流程 |
+| refactor-cleaner | 死代码清理 | 代码维护 |
+| doc-updater | 文档 | 更新文档 |
+| rust-reviewer | Rust 代码审查 | Rust 项目 |
+
+## 立即使用代理
+
+无需用户提示：
+1. 复杂功能请求 - 使用 **planner** 代理
+2. 刚编写/修改的代码 - 使用 **code-reviewer** 代理
+3. Bug 修复或新功能 - 使用 **tdd-guide** 代理
+4. 架构决策 - 使用 **architect** 代理
+
+## 并行任务执行
+
+对独立操作始终使用并行 Task 执行：
+
+```markdown
+# 好：并行执行
+同时启动 3 个代理：
+1. 代理 1：认证模块安全分析
+2. 代理 2：缓存系统性能审查
+3. 代理 3：工具类型检查
+
+# 坏：不必要的顺序
+先代理 1，然后代理 2，然后代理 3
+```
+
+## 多视角分析
+
+对于复杂问题，使用分角色子代理：
+- 事实审查者
+- 高级工程师
+- 安全专家
+- 一致性审查者
+- 冗余检查者

package/docs/rules/coding-style.md

@@ -0,0 +1,79 @@
+# Coding Style
+
+## Core Principles
+
+### KISS（保持简单）
+- 用最简单可行的方案
+- 避免过早优化
+- 优化清晰度而非聪明
+
+### DRY（不重复自己）
+- 重复逻辑提取为公共函数
+- 不要复制粘贴出现实现漂移
+- 真出现重复才抽象，不要为投机抽象
+
+### YAGNI（你不会需要它）
+- 不构建当下不需要的功能
+- 避免投机性通用化
+- 先简单做出来，需要时再重构
+
+### 防御编程
+- 在系统边界（用户输入、外部 API、文件读取）做输入校验
+- 用 schema 校验，快速失败并给出明确错误
+- 不信任外部数据
+
+## File Organization
+
+**多个小文件 > 少个大文件**：
+- 高内聚低耦合
+- 200–400 行常规，800 行上限
+- 大模块抽取工具函数
+- 按特性/领域组织，不按类型
+
+## Error Handling
+
+- 每一层显式处理错误
+- UI 面向用户的代码给友好消息
+- 服务端记录详细上下文
+- **绝不静默吞错误**
+
+## Naming
+
+- 变量与函数：`camelCase`，描述性命名
+- 布尔值：用 `is` / `has` / `should` / `can` 前缀
+- 接口、类型、组件：`PascalCase`
+- 常量：`UPPER_SNAKE_CASE`
+- 自定义 hook：`use` 前缀的 `camelCase`
+
+## 中文注释规则
+
+1. 所有代码注释必须使用**中文**（函数、类、模块、关键逻辑）
+2. **禁止尾行注释**——注释写在代码上方单独一行
+3. 一目了然的赋值与 import 语句不需要注释
+4. 不写纯叙述性注释，只注释**非显而易见的意图与约束**
+
+## Code Smells（避免）
+
+- **深嵌套**：超过 4 层时用早返回拆开
+- **魔法数字**：用具名常量代替阈值/延时/限制
+- **长函数**：50 行以上拆分到职责清晰的小函数
+- **变异**：优先创建新对象，不修改原对象（除非语言惯用法相反）
+
+## 开发流程纪律
+
+- **先读后写** — 先理解现有代码模式再动手
+- **精准修改** — 只改需要改的部分
+- **闭环优先** — 先跑通再优化，不过度设计
+
+## Code Quality Checklist
+
+提交前自检：
+
+- [ ] 代码可读、命名得当
+- [ ] 函数小（< 50 行）
+- [ ] 文件聚焦（< 800 行）
+- [ ] 无深嵌套（≤ 4 层）
+- [ ] 错误处理完整
+- [ ] 无硬编码值（用常量或 config）
+- [ ] 中文注释规范，无尾行注释
+- [ ] 通过 `node scripts/hooks/dispatcher.cjs stop`

package/docs/rules/cpp/coding-style.md

@@ -0,0 +1,44 @@
+---
+paths:
+  - "**/*.cpp"
+  - "**/*.hpp"
+  - "**/*.cc"
+  - "**/*.hh"
+  - "**/*.cxx"
+  - "**/*.h"
+  - "**/CMakeLists.txt"
+---
+# C++ Coding Style
+
+> This file extends [common/coding-style.md](../common/coding-style.md) with C++ specific content.
+
+## Modern C++ (C++17/20/23)
+
+- Prefer **modern C++ features** over C-style constructs
+- Use `auto` when the type is obvious from context
+- Use `constexpr` for compile-time constants
+- Use structured bindings: `auto [key, value] = map_entry;`
+
+## Resource Management
+
+- **RAII everywhere** — no manual `new`/`delete`
+- Use `std::unique_ptr` for exclusive ownership
+- Use `std::shared_ptr` only when shared ownership is truly needed
+- Use `std::make_unique` / `std::make_shared` over raw `new`
+
+## Naming Conventions
+
+- Types/Classes: `PascalCase`
+- Functions/Methods: `snake_case` or `camelCase` (follow project convention)
+- Constants: `kPascalCase` or `UPPER_SNAKE_CASE`
+- Namespaces: `lowercase`
+- Member variables: `snake_case_` (trailing underscore) or `m_` prefix
+
+## Formatting
+
+- Use **clang-format** — no style debates
+- Run `clang-format -i <file>` before committing
+
+## Reference
+
+See skill: `cpp-coding-standards` for comprehensive C++ coding standards and guidelines.

package/docs/rules/cpp/hooks.md

@@ -0,0 +1,39 @@
+---
+paths:
+  - "**/*.cpp"
+  - "**/*.hpp"
+  - "**/*.cc"
+  - "**/*.hh"
+  - "**/*.cxx"
+  - "**/*.h"
+  - "**/CMakeLists.txt"
+---
+# C++ Hooks
+
+> This file extends [common/hooks.md](../common/hooks.md) with C++ specific content.
+
+## Build Hooks
+
+Run these checks before committing C++ changes:
+
+```bash
+# Format check
+clang-format --dry-run --Werror src/*.cpp src/*.hpp
+
+# Static analysis
+clang-tidy src/*.cpp -- -std=c++17
+
+# Build
+cmake --build build
+
+# Tests
+ctest --test-dir build --output-on-failure
+```
+
+## Recommended CI Pipeline
+
+1. **clang-format** — formatting check
+2. **clang-tidy** — static analysis
+3. **cppcheck** — additional analysis
+4. **cmake build** — compilation
+5. **ctest** — test execution with sanitizers

package/docs/rules/cpp/patterns.md

@@ -0,0 +1,51 @@
+---
+paths:
+  - "**/*.cpp"
+  - "**/*.hpp"
+  - "**/*.cc"
+  - "**/*.hh"
+  - "**/*.cxx"
+  - "**/*.h"
+  - "**/CMakeLists.txt"
+---
+# C++ Patterns
+
+> This file extends [common/patterns.md](../common/patterns.md) with C++ specific content.
+
+## RAII (Resource Acquisition Is Initialization)
+
+Tie resource lifetime to object lifetime:
+
+```cpp
+class FileHandle {
+public:
+    explicit FileHandle(const std::string& path) : file_(std::fopen(path.c_str(), "r")) {}
+    ~FileHandle() { if (file_) std::fclose(file_); }
+    FileHandle(const FileHandle&) = delete;
+    FileHandle& operator=(const FileHandle&) = delete;
+private:
+    std::FILE* file_;
+};
+```
+
+## Rule of Five/Zero
+
+- **Rule of Zero**: Prefer classes that need no custom destructor, copy/move constructors, or assignments
+- **Rule of Five**: If you define any of destructor/copy-ctor/copy-assign/move-ctor/move-assign, define all five
+
+## Value Semantics
+
+- Pass small/trivial types by value
+- Pass large types by `const&`
+- Return by value (rely on RVO/NRVO)
+- Use move semantics for sink parameters
+
+## Error Handling
+
+- Use exceptions for exceptional conditions
+- Use `std::optional` for values that may not exist
+- Use `std::expected` (C++23) or result types for expected failures
+
+## Reference
+
+See skill: `cpp-coding-standards` for comprehensive C++ patterns and anti-patterns.

package/docs/rules/cpp/security.md

@@ -0,0 +1,51 @@
+---
+paths:
+  - "**/*.cpp"
+  - "**/*.hpp"
+  - "**/*.cc"
+  - "**/*.hh"
+  - "**/*.cxx"
+  - "**/*.h"
+  - "**/CMakeLists.txt"
+---
+# C++ Security
+
+> This file extends [common/security.md](../common/security.md) with C++ specific content.
+
+## Memory Safety
+
+- Never use raw `new`/`delete` — use smart pointers
+- Never use C-style arrays — use `std::array` or `std::vector`
+- Never use `malloc`/`free` — use C++ allocation
+- Avoid `reinterpret_cast` unless absolutely necessary
+
+## Buffer Overflows
+
+- Use `std::string` over `char*`
+- Use `.at()` for bounds-checked access when safety matters
+- Never use `strcpy`, `strcat`, `sprintf` — use `std::string` or `fmt::format`
+
+## Undefined Behavior
+
+- Always initialize variables
+- Avoid signed integer overflow
+- Never dereference null or dangling pointers
+- Use sanitizers in CI:
+  ```bash
+  cmake -DCMAKE_CXX_FLAGS="-fsanitize=address,undefined" ..
+  ```
+
+## Static Analysis
+
+- Use **clang-tidy** for automated checks:
+  ```bash
+  clang-tidy --checks='*' src/*.cpp
+  ```
+- Use **cppcheck** for additional analysis:
+  ```bash
+  cppcheck --enable=all src/
+  ```
+
+## Reference
+
+See skill: `cpp-coding-standards` for detailed security guidelines.

package/docs/rules/cpp/testing.md

@@ -0,0 +1,44 @@
+---
+paths:
+  - "**/*.cpp"
+  - "**/*.hpp"
+  - "**/*.cc"
+  - "**/*.hh"
+  - "**/*.cxx"
+  - "**/*.h"
+  - "**/CMakeLists.txt"
+---
+# C++ Testing
+
+> This file extends [common/testing.md](../common/testing.md) with C++ specific content.
+
+## Framework
+
+Use **GoogleTest** (gtest/gmock) with **CMake/CTest**.
+
+## Running Tests
+
+```bash
+cmake --build build && ctest --test-dir build --output-on-failure
+```
+
+## Coverage
+
+```bash
+cmake -DCMAKE_CXX_FLAGS="--coverage" -DCMAKE_EXE_LINKER_FLAGS="--coverage" ..
+cmake --build .
+ctest --output-on-failure
+lcov --capture --directory . --output-file coverage.info
+```
+
+## Sanitizers
+
+Always run tests with sanitizers in CI:
+
+```bash
+cmake -DCMAKE_CXX_FLAGS="-fsanitize=address,undefined" ..
+```
+
+## Reference
+
+See skill: `cpp-testing` for detailed C++ testing patterns, TDD workflow, and GoogleTest/GMock usage.

package/docs/rules/csharp/coding-style.md

@@ -0,0 +1,72 @@
+---
+paths:
+  - "**/*.cs"
+  - "**/*.csx"
+---
+# C# Coding Style
+
+> This file extends [common/coding-style.md](../common/coding-style.md) with C#-specific content.
+
+## Standards
+
+- Follow current .NET conventions and enable nullable reference types
+- Prefer explicit access modifiers on public and internal APIs
+- Keep files aligned with the primary type they define
+
+## Types and Models
+
+- Prefer `record` or `record struct` for immutable value-like models
+- Use `class` for entities or types with identity and lifecycle
+- Use `interface` for service boundaries and abstractions
+- Avoid `dynamic` in application code; prefer generics or explicit models
+
+```csharp
+public sealed record UserDto(Guid Id, string Email);
+
+public interface IUserRepository
+{
+    Task<UserDto?> FindByIdAsync(Guid id, CancellationToken cancellationToken);
+}
+```
+
+## Immutability
+
+- Prefer `init` setters, constructor parameters, and immutable collections for shared state
+- Do not mutate input models in-place when producing updated state
+
+```csharp
+public sealed record UserProfile(string Name, string Email);
+
+public static UserProfile Rename(UserProfile profile, string name) =>
+    profile with { Name = name };
+```
+
+## Async and Error Handling
+
+- Prefer `async`/`await` over blocking calls like `.Result` or `.Wait()`
+- Pass `CancellationToken` through public async APIs
+- Throw specific exceptions and log with structured properties
+
+```csharp
+public async Task<Order> LoadOrderAsync(
+    Guid orderId,
+    CancellationToken cancellationToken)
+{
+    try
+    {
+        return await repository.FindAsync(orderId, cancellationToken)
+            ?? throw new InvalidOperationException($"Order {orderId} was not found.");
+    }
+    catch (Exception ex)
+    {
+        logger.LogError(ex, "Failed to load order {OrderId}", orderId);
+        throw;
+    }
+}
+```
+
+## Formatting
+
+- Use `dotnet format` for formatting and analyzer fixes
+- Keep `using` directives organized and remove unused imports
+- Prefer expression-bodied members only when they stay readable

package/docs/rules/csharp/hooks.md

@@ -0,0 +1,25 @@
+---
+paths:
+  - "**/*.cs"
+  - "**/*.csx"
+  - "**/*.csproj"
+  - "**/*.sln"
+  - "**/Directory.Build.props"
+  - "**/Directory.Build.targets"
+---
+# C# Hooks
+
+> This file extends [common/hooks.md](../common/hooks.md) with C#-specific content.
+
+## PostToolUse Hooks
+
+Configure in `~/.claude/settings.json`:
+
+- **dotnet format**: Auto-format edited C# files and apply analyzer fixes
+- **dotnet build**: Verify the solution or project still compiles after edits
+- **dotnet test --no-build**: Re-run the nearest relevant test project after behavior changes
+
+## Stop Hooks
+
+- Run a final `dotnet build` before ending a session with broad C# changes
+- Warn on modified `appsettings*.json` files so secrets do not get committed

package/docs/rules/csharp/patterns.md

@@ -0,0 +1,50 @@
+---
+paths:
+  - "**/*.cs"
+  - "**/*.csx"
+---
+# C# Patterns
+
+> This file extends [common/patterns.md](../common/patterns.md) with C#-specific content.
+
+## API Response Pattern
+
+```csharp
+public sealed record ApiResponse<T>(
+    bool Success,
+    T? Data = default,
+    string? Error = null,
+    object? Meta = null);
+```
+
+## Repository Pattern
+
+```csharp
+public interface IRepository<T>
+{
+    Task<IReadOnlyList<T>> FindAllAsync(CancellationToken cancellationToken);
+    Task<T?> FindByIdAsync(Guid id, CancellationToken cancellationToken);
+    Task<T> CreateAsync(T entity, CancellationToken cancellationToken);
+    Task<T> UpdateAsync(T entity, CancellationToken cancellationToken);
+    Task DeleteAsync(Guid id, CancellationToken cancellationToken);
+}
+```
+
+## Options Pattern
+
+Use strongly typed options for config instead of reading raw strings throughout the codebase.
+
+```csharp
+public sealed class PaymentsOptions
+{
+    public const string SectionName = "Payments";
+    public required string BaseUrl { get; init; }
+    public required string ApiKeySecretName { get; init; }
+}
+```
+
+## Dependency Injection
+
+- Depend on interfaces at service boundaries
+- Keep constructors focused; if a service needs too many dependencies, split responsibilities
+- Register lifetimes intentionally: singleton for stateless/shared services, scoped for request data, transient for lightweight pure workers

package/docs/rules/csharp/security.md

@@ -0,0 +1,58 @@
+---
+paths:
+  - "**/*.cs"
+  - "**/*.csx"
+  - "**/*.csproj"
+  - "**/appsettings*.json"
+---
+# C# Security
+
+> This file extends [common/security.md](../common/security.md) with C#-specific content.
+
+## Secret Management
+
+- Never hardcode API keys, tokens, or connection strings in source code
+- Use environment variables, user secrets for local development, and a secret manager in production
+- Keep `appsettings.*.json` free of real credentials
+
+```csharp
+// BAD
+const string ApiKey = "sk-live-123";
+
+// GOOD
+var apiKey = builder.Configuration["OpenAI:ApiKey"]
+    ?? throw new InvalidOperationException("OpenAI:ApiKey is not configured.");
+```
+
+## SQL Injection Prevention
+
+- Always use parameterized queries with ADO.NET, Dapper, or EF Core
+- Never concatenate user input into SQL strings
+- Validate sort fields and filter operators before using dynamic query composition
+
+```csharp
+const string sql = "SELECT * FROM Orders WHERE CustomerId = @customerId";
+await connection.QueryAsync<Order>(sql, new { customerId });
+```
+
+## Input Validation
+
+- Validate DTOs at the application boundary
+- Use data annotations, FluentValidation, or explicit guard clauses
+- Reject invalid model state before running business logic
+
+## Authentication and Authorization
+
+- Prefer framework auth handlers instead of custom token parsing
+- Enforce authorization policies at endpoint or handler boundaries
+- Never log raw tokens, passwords, or PII
+
+## Error Handling
+
+- Return safe client-facing messages
+- Log detailed exceptions with structured context server-side
+- Do not expose stack traces, SQL text, or filesystem paths in API responses
+
+## References
+
+See skill: `security-review` for broader application security review checklists.