claudeos-core 1.2.4 → 1.3.0

package/bootstrap.sh

@@ -23,6 +23,9 @@ GENERATED_DIR="$PROJECT_ROOT/claudeos-core/generated"
 
 cd "$PROJECT_ROOT"
 
+# Cleanup temp files on exit (Ctrl+C, errors, etc.)
+trap 'rm -f "$GENERATED_DIR"/_tmp_*.md "$GENERATED_DIR"/_tmp_*.md.final 2>/dev/null' EXIT
+
 # ─── Language selection (required) ──────────────────────────────
 SUPPORTED_LANGS=("en" "ko" "zh-CN" "ja" "es" "vi" "hi" "ru" "fr" "de")
 LANG_LABELS=("English" "한국어 (Korean)" "简体中文 (Chinese Simplified)" "日本語 (Japanese)" "Español (Spanish)" "Tiếng Việt (Vietnamese)" "हिन्दी (Hindi)" "Русский (Russian)" "Français (French)" "Deutsch (German)")
@@ -32,7 +35,7 @@ CLAUDEOS_LANG=""
 # Parse --lang argument
 while [[ $# -gt 0 ]]; do
   case $1 in
-    --lang) CLAUDEOS_LANG="$2"; shift 2 ;;
+    --lang) [ -z "$2" ] && echo "  ❌ --lang requires a value" && exit 1; CLAUDEOS_LANG="$2"; shift 2 ;;
     --lang=*) CLAUDEOS_LANG="${1#*=}"; shift ;;
     *) echo "⚠️  Unknown argument: $1 (ignored)"; shift ;;
   esac
@@ -42,17 +45,21 @@ done
 if [ -z "$CLAUDEOS_LANG" ]; then
   echo ""
   echo "╔══════════════════════════════════════════════════╗"
-  echo "║  Select output language (required)               ║"
+  echo "║  Select generated document language (required)   ║"
   echo "╚══════════════════════════════════════════════════╝"
   echo ""
+  echo "  Generated files (CLAUDE.md, Standards, Rules,"
+  echo "  Skills, Guides) will be written in this language."
+  echo ""
   for i in "${!SUPPORTED_LANGS[@]}"; do
     printf "    %2d. %-6s — %s\n" "$((i+1))" "${SUPPORTED_LANGS[$i]}" "${LANG_LABELS[$i]}"
   done
   echo ""
-  read -p "  Enter number (1-10) or language code: " LANG_INPUT
+  LANG_COUNT=${#SUPPORTED_LANGS[@]}
+  read -rp "  Enter number (1-${LANG_COUNT}) or language code: " LANG_INPUT
 
   # Accept number
-  if [[ "$LANG_INPUT" =~ ^[0-9]+$ ]] && [ "$LANG_INPUT" -ge 1 ] && [ "$LANG_INPUT" -le 10 ]; then
+  if [[ "$LANG_INPUT" =~ ^[0-9]+$ ]] && [ "$LANG_INPUT" -ge 1 ] && [ "$LANG_INPUT" -le "$LANG_COUNT" ]; then
     CLAUDEOS_LANG="${SUPPORTED_LANGS[$((LANG_INPUT-1))]}"
   else
     # Accept language code
@@ -76,12 +83,42 @@ fi
 export CLAUDEOS_LANG
 export CLAUDEOS_ROOT="$PROJECT_ROOT"
 
-# ─── Prompt placeholder substitution helper ────────────────────
-inject_project_root() {
-  # Use perl with $ENV{} to avoid sed metachar issues with &, \, etc. in paths
-  export _PROJECT_ROOT="$PROJECT_ROOT"
-  perl -pe 's/\{\{PROJECT_ROOT\}\}/$ENV{_PROJECT_ROOT}/g'
-}
+# ─── Prerequisites check ──────────────────────────────────────
+if ! command -v node &> /dev/null; then
+  echo ""
+  echo "  ❌ Node.js not found."
+  echo "  Install: https://nodejs.org/"
+  echo ""
+  exit 1
+fi
+
+NODE_MAJOR=$(node -e "console.log(process.versions.node.split('.')[0])")
+if ! [[ "$NODE_MAJOR" =~ ^[0-9]+$ ]] || [ "$NODE_MAJOR" -lt 18 ]; then
+  echo ""
+  echo "  ❌ Node.js v18+ required (current: v$(node --version))"
+  echo "  Install: https://nodejs.org/"
+  echo ""
+  exit 1
+fi
+
+if ! command -v claude &> /dev/null; then
+  echo ""
+  echo "  ❌ Claude Code CLI not found."
+  echo "  Install: https://code.claude.com/docs/en/overview"
+  echo "  Then run: claude (and complete authentication)"
+  echo ""
+  exit 1
+fi
+
+if ! command -v perl &> /dev/null; then
+  echo ""
+  echo "  ❌ perl not found (required for placeholder substitution)."
+  echo "  Install perl or use the Node.js CLI instead: npx claudeos-core init"
+  echo ""
+  exit 1
+fi
+
+
 
 echo ""
 echo "╔════════════════════════════════════════════════════╗"
@@ -176,24 +213,25 @@ for i in $(seq 1 "$TOTAL_GROUPS"); do
   if [ ! -f "$PROMPT_FILE" ]; then
     PROMPT_FILE="$GENERATED_DIR/pass1-prompt.md"
   fi
-  PASS1_TEMPLATE=$(cat "$PROMPT_FILE")
-
-  # Substitute placeholders via temp file (avoids sed special char issues with &, \, etc.)
+  # Substitute placeholders via temp file (avoids sed special char issues and $() newline stripping)
   TMP_PROMPT="$GENERATED_DIR/_tmp_pass1_prompt.md"
-  printf '%s' "$PASS1_TEMPLATE" > "$TMP_PROMPT"
+  cp "$PROMPT_FILE" "$TMP_PROMPT"
   # Use perl with $ENV{} for safe literal replacement (no shell interpolation into Perl code)
   export _DOMAIN_LIST="$DOMAIN_LIST"
   export _PASS_NUM="$i"
   perl -pi -e 's/\{\{DOMAIN_GROUP\}\}/$ENV{_DOMAIN_LIST}/g' "$TMP_PROMPT"
   perl -pi -e 's/\{\{PASS_NUM\}\}/$ENV{_PASS_NUM}/g' "$TMP_PROMPT"
-  # inject_project_root uses perl with $ENV{} which is safe for special chars in paths
-  PASS1_PROMPT=$(cat "$TMP_PROMPT" | inject_project_root)
-  rm -f "$TMP_PROMPT"
+  # inject_project_root: pipe through perl, write to final temp file
+  export _PROJECT_ROOT="$PROJECT_ROOT"
+  perl -pe 's/\{\{PROJECT_ROOT\}\}/$ENV{_PROJECT_ROOT}/g' "$TMP_PROMPT" > "${TMP_PROMPT}.final"
+  mv "${TMP_PROMPT}.final" "$TMP_PROMPT"
 
-  if ! (cd "$PROJECT_ROOT" && claude -p "$PASS1_PROMPT" --dangerously-skip-permissions); then
+  if ! (cd "$PROJECT_ROOT" && cat "$TMP_PROMPT" | claude -p --dangerously-skip-permissions); then
+    rm -f "$TMP_PROMPT"
     echo "    ❌ Pass 1-${i} failed. Aborting."
     exit 1
   fi
+  rm -f "$TMP_PROMPT"
 
   # Verify JSON was created
   if [ ! -f "$GENERATED_DIR/pass1-${i}.json" ]; then
@@ -203,6 +241,7 @@ for i in $(seq 1 "$TOTAL_GROUPS"); do
 
   echo "    ✅ pass1-${i}.json created"
 done
+unset _DOMAIN_LIST _PASS_NUM _PROJECT_ROOT
 echo ""
 
 # ─── [5] Pass 2: Merge analysis results ─────────────────────────
@@ -213,12 +252,16 @@ echo "━━━━━━━━━━━━━━━━━━━━━━━━
 if [ -f "$GENERATED_DIR/pass2-merged.json" ]; then
   echo "    ⏭️  pass2-merged.json already exists, skipping"
 else
-  PASS2_PROMPT=$(cat "$GENERATED_DIR/pass2-prompt.md" | inject_project_root)
+  TMP_PASS2="$GENERATED_DIR/_tmp_pass2_prompt.md"
+  export _PROJECT_ROOT="$PROJECT_ROOT"
+  perl -pe 's/\{\{PROJECT_ROOT\}\}/$ENV{_PROJECT_ROOT}/g' "$GENERATED_DIR/pass2-prompt.md" > "$TMP_PASS2"
 
-  if ! (cd "$PROJECT_ROOT" && claude -p "$PASS2_PROMPT" --dangerously-skip-permissions); then
+  if ! (cd "$PROJECT_ROOT" && cat "$TMP_PASS2" | claude -p --dangerously-skip-permissions); then
+    rm -f "$TMP_PASS2"
     echo "    ❌ Pass 2 failed. Aborting."
     exit 1
   fi
+  rm -f "$TMP_PASS2"
 
   if [ ! -f "$GENERATED_DIR/pass2-merged.json" ]; then
     echo "    ❌ pass2-merged.json was not created. Aborting."
@@ -233,17 +276,22 @@ echo ""
 echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
 echo "[6] Pass 3 — Generating all files..."
 echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
-PASS3_PROMPT=$(cat "$GENERATED_DIR/pass3-prompt.md" | inject_project_root)
+TMP_PASS3="$GENERATED_DIR/_tmp_pass3_prompt.md"
+export _PROJECT_ROOT="$PROJECT_ROOT"
+perl -pe 's/\{\{PROJECT_ROOT\}\}/$ENV{_PROJECT_ROOT}/g' "$GENERATED_DIR/pass3-prompt.md" > "$TMP_PASS3"
 
-if ! (cd "$PROJECT_ROOT" && claude -p "$PASS3_PROMPT" --dangerously-skip-permissions); then
+if ! (cd "$PROJECT_ROOT" && cat "$TMP_PASS3" | claude -p --dangerously-skip-permissions); then
+  rm -f "$TMP_PASS3"
   echo "    ❌ Pass 3 failed. Aborting."
   exit 1
 fi
+rm -f "$TMP_PASS3"
 
 if [ ! -f "$PROJECT_ROOT/CLAUDE.md" ]; then
   echo "    ❌ CLAUDE.md was not created. Pass 3 may have failed silently."
   exit 1
 fi
+unset _PROJECT_ROOT
 echo ""
 
 # ─── [7] Run verification tools ───────────────────────────────
@@ -271,7 +319,7 @@ fi
 echo ""
 
 # ─── Complete ───────────────────────────────────────────────
-TOTAL_FILES=$(find .claude claudeos-core -type f 2>/dev/null | grep -v node_modules | wc -l | tr -d ' ')
+TOTAL_FILES=$(find .claude claudeos-core -type f 2>/dev/null | grep -v '/node_modules/' | grep -v '/generated/' | wc -l | tr -d ' ')
 TOTAL_GROUPS_DONE=$TOTAL_GROUPS
 PASS1_FILES=$(ls -1 "$GENERATED_DIR"/pass1-*.json 2>/dev/null | wc -l | tr -d ' ')
 

package/content-validator/index.js

@@ -33,9 +33,9 @@ const GEN_DIR = path.join(ROOT, "claudeos-core/generated");
 function rel(p) { return path.relative(ROOT, p).replace(/\\/g, "/"); }
 
 async function main() {
-  console.log("\n╔══════════════════════════════════════╗");
+  console.log("\n╔═══════════════════════════════════════╗");
   console.log("║  ClaudeOS-Core — Content Validator    ║");
-  console.log("╚══════════════════════════════════════╝\n");
+  console.log("╚═══════════════════════════════════════╝\n");
 
   const errors = [];
   const warnings = [];
@@ -83,7 +83,10 @@ async function main() {
     const enKeywords = SECTION_KEYWORDS.en;
     for (let i = 0; i < enKeywords.length; i++) {
       const candidates = [enKeywords[i], langKeywords[i]].filter(Boolean);
-      const found = candidates.some(kw => content.toLowerCase().includes(kw.toLowerCase()));
+      const found = candidates.some(kw => {
+        const re = new RegExp(`(^|#|\\s)${kw.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}`, "im");
+        return re.test(content);
+      });
       if (!found) {
         warnings.push({ file: "CLAUDE.md", type: "MISSING_SECTION", msg: `'${enKeywords[i]}' / '${langKeywords[i]}' section is missing` });
       }
@@ -164,7 +167,9 @@ async function main() {
       if (!badKeywords.some(kw => c.includes(kw))) {
         warnings.push({ file: r, type: "NO_BAD_EXAMPLE", msg: "No incorrect example (❌) found" });
       }
-      if (!c.includes("|") && !c.includes("rule") && !c.includes("Rule") && !c.includes("table")) {
+      // Check for markdown table: at least one line with | col | col | pattern
+      const hasMarkdownTable = /\|.+\|.+\|/.test(c);
+      if (!hasMarkdownTable) {
         warnings.push({ file: r, type: "NO_TABLE", msg: "Rules summary table appears to be missing" });
       }
       // Kotlin code block check: core and backend standard files should contain ```kotlin blocks

package/health-checker/index.js

@@ -36,9 +36,9 @@ function run(name, script) {
 }
 
 function main() {
-  console.log("\n╔══════════════════════════════════════╗");
+  console.log("\n╔═══════════════════════════════════════╗");
   console.log("║  ClaudeOS-Core — Health Checker       ║");
-  console.log("╚══════════════════════════════════════╝\n");
+  console.log("╚═══════════════════════════════════════╝\n");
 
   // ─── [0] Run manifest-generator first (prerequisite) ──────────────────
   // Must run first because sync-checker reads sync-map.json
@@ -112,10 +112,11 @@ function main() {
     }
     ex.generatedAt = new Date().toISOString();
     ex.healthCheck = { results, status: hasErr ? "fail" : "pass" };
+    if (!ex.summary) ex.summary = {};
     ex.summary = {
       ...ex.summary,
       totalIssues: results.filter((r) => r.status === "fail").length,
-      status: hasErr ? "fail" : "ok",
+      healthStatus: hasErr ? "fail" : "ok",
     };
     fs.writeFileSync(rp, JSON.stringify(ex, null, 2));
   }

package/lib/safe-fs.js

@@ -0,0 +1,110 @@
+/**
+ * ClaudeOS-Core — Safe filesystem utilities
+ *
+ * Wraps fs operations with consistent error handling.
+ * All read functions return a fallback value on failure instead of throwing.
+ */
+
+const fs = require("fs");
+const path = require("path");
+
+/**
+ * Safely read a file as UTF-8 string.
+ * @param {string} filePath
+ * @param {string} [fallback=""] - returned on error
+ * @returns {string}
+ */
+function readFileSafe(filePath, fallback = "") {
+  try {
+    return fs.readFileSync(filePath, "utf-8");
+  } catch (e) {
+    if (e.code !== "ENOENT") {
+      console.warn(`    ⚠️  Cannot read ${path.basename(filePath)}: ${e.code || e.message}`);
+    }
+    return fallback;
+  }
+}
+
+/**
+ * Safely parse a JSON file.
+ * @param {string} filePath
+ * @param {*} [fallback=null] - returned on error
+ * @returns {*}
+ */
+function readJsonSafe(filePath, fallback = null) {
+  const raw = readFileSafe(filePath, null);
+  if (raw === null) return fallback;
+  try {
+    return JSON.parse(raw);
+  } catch (e) {
+    console.warn(`    ⚠️  JSON parse error in ${path.basename(filePath)}: ${e.message}`);
+    return fallback;
+  }
+}
+
+/**
+ * Check if a file exists (swallows permission errors).
+ * @param {string} filePath
+ * @returns {boolean}
+ */
+function existsSafe(filePath) {
+  try {
+    return fs.existsSync(filePath);
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * Ensure a directory exists (recursive).
+ * @param {string} dir
+ */
+function ensureDir(dir) {
+  if (!fs.existsSync(dir)) {
+    fs.mkdirSync(dir, { recursive: true });
+  }
+}
+
+/**
+ * Write a file with error reporting.
+ * @param {string} filePath
+ * @param {string} content
+ * @returns {boolean} success
+ */
+function writeFileSafe(filePath, content) {
+  try {
+    fs.writeFileSync(filePath, content);
+    return true;
+  } catch (e) {
+    console.error(`    ❌ Cannot write ${path.basename(filePath)}: ${e.code || e.message}`);
+    return false;
+  }
+}
+
+/**
+ * Get file stat safely.
+ * @param {string} filePath
+ * @returns {{ lines: number, bytes: number, modified: string } | null}
+ */
+function statSafe(filePath) {
+  try {
+    const c = fs.readFileSync(filePath, "utf-8");
+    const s = fs.statSync(filePath);
+    return {
+      lines: c.split("\n").length,
+      bytes: s.size,
+      modified: s.mtime.toISOString().split("T")[0],
+    };
+  } catch {
+    return null;
+  }
+}
+
+module.exports = {
+  readFileSafe,
+  readJsonSafe,
+  existsSafe,
+  ensureDir,
+  writeFileSafe,
+  statSafe,
+};

package/manifest-generator/index.js

@@ -67,9 +67,9 @@ function extractFileBlocks(f) {
 }
 
 async function main() {
-  console.log("\n╔══════════════════════════════════════╗");
+  console.log("\n╔═══════════════════════════════════════╗");
   console.log("║  ClaudeOS-Core — Manifest Generator   ║");
-  console.log("╚══════════════════════════════════════╝\n");
+  console.log("╚═══════════════════════════════════════╝\n");
 
   if (!fs.existsSync(GEN)) fs.mkdirSync(GEN, { recursive: true });
 
@@ -142,11 +142,17 @@ async function main() {
   fs.writeFileSync(path.join(GEN, "plan-manifest.json"), JSON.stringify(pm, null, 2));
   console.log(`  ✅ plan-manifest.json — ${pm.plans.length} plans`);
 
-  // ─── Initialize stale-report.json ──────────────────────────
-  fs.writeFileSync(
-    path.join(GEN, "stale-report.json"),
-    JSON.stringify({ generatedAt: new Date().toISOString(), summary: { totalIssues: 0, status: "initial" } }, null, 2)
-  );
+  // ─── Initialize stale-report.json (preserve existing sub-tool results) ──
+  const srPath = path.join(GEN, "stale-report.json");
+  let sr = {};
+  if (fs.existsSync(srPath)) {
+    try { sr = JSON.parse(fs.readFileSync(srPath, "utf-8")); } catch { sr = {}; }
+  }
+  sr.generatedAt = new Date().toISOString();
+  if (!sr.summary) sr.summary = {};
+  sr.summary.totalIssues = 0;
+  sr.summary.status = "initial";
+  fs.writeFileSync(srPath, JSON.stringify(sr, null, 2));
   console.log("  ✅ stale-report.json — initialized");
   console.log("\n  📁 Output: claudeos-core/generated/ (4 files)\n");
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claudeos-core",
-  "version": "1.2.4",
+  "version": "1.3.0",
   "description": "Auto-generate Claude Code documentation from your actual source code — Standards, Rules, Skills, and Guides tailored to your project",
   "main": "bin/cli.js",
   "bin": {
@@ -8,6 +8,7 @@
   },
   "files": [
     "bin/",
+    "lib/",
     "content-validator/",
     "health-checker/",
     "manifest-generator/",
@@ -37,7 +38,8 @@
     "validate": "node bin/cli.js validate",
     "refresh": "node bin/cli.js refresh",
     "restore": "node bin/cli.js restore",
-    "test": "node health-checker/index.js"
+    "test": "node --test tests/*.test.js",
+    "test:health": "node health-checker/index.js"
   },
   "keywords": [
     "claude-code",

package/pass-json-validator/index.js

@@ -24,9 +24,9 @@ const GEN_DIR = path.join(ROOT, "claudeos-core/generated");
 function rel(p) { return path.relative(ROOT, p).replace(/\\/g, "/"); }
 
 async function main() {
-  console.log("\n╔══════════════════════════════════════╗");
+  console.log("\n╔═══════════════════════════════════════╗");
   console.log("║  ClaudeOS-Core — Pass JSON Validator  ║");
-  console.log("╚══════════════════════════════════════╝\n");
+  console.log("╚═══════════════════════════════════════╝\n");
 
   if (!fs.existsSync(GEN_DIR)) {
     console.log("  ❌ claudeos-core/generated/ directory not found\n");
@@ -111,9 +111,7 @@ async function main() {
 
   // ─── 3. pass1-*.json ──────────────────────────────────
   console.log("  [3/4] pass1-*.json...");
-  const pass1Files = await glob("pass1-*.json", { cwd: GEN_DIR, absolute: true });
-  // Exclude pass1-prompt.md
-  const pass1JsonFiles = pass1Files.filter(f => f.endsWith(".json"));
+  const pass1JsonFiles = await glob("pass1-*.json", { cwd: GEN_DIR, absolute: true });
   if (pass1JsonFiles.length === 0) {
     warnings.push({ file: "pass1-*.json", type: "NO_FILES", msg: "No pass1 JSON found (not yet executed?)" });
   }

package/pass-prompts/templates/java-spring/pass1.md

@@ -12,6 +12,7 @@ Analysis items (per domain):
    - URL patterns (RESTful conventions, naming conventions, versioning)
    - Parameter binding (@RequestBody, @PathVariable, @RequestParam, @ModelAttribute, @RequestHeader)
    - Response format (ResponseEntity, custom response wrappers, direct return)
+   - If a custom response wrapper class exists, record its EXACT class name, EXACT method signatures (e.g., `success()`, `error()`), and EXACT import path. Do NOT guess or invent method names — read the actual source.
    - Error handling (try-catch patterns, @ExceptionHandler, @ControllerAdvice)
    - Authentication/authorization (@AuthenticationPrincipal, @PreAuthorize, SecurityContext)
    - API documentation (Swagger/SpringDoc annotations)
@@ -47,6 +48,8 @@ Analysis items (per domain):
    - Field type conventions (Boolean handling, date types, Enum management)
    - Validation annotations (@NotNull, @NotBlank, @Size, @Pattern, custom)
    - Conversion approach (MapStruct, ModelMapper, manual conversion)
+   - Import paths: record EXACT package paths for shared/utility classes
+   - Utility class locations: record EXACT package where shared utilities live
 
 5. Interceptor/Filter/AOP Patterns
    - HandlerInterceptor usage

package/pass-prompts/templates/java-spring/pass2.md

@@ -35,9 +35,9 @@ Merge items:
    - DB table/column naming
 
 6. Common Classes/Utilities List
-   - Base class fields (must not be redeclared)
-   - Shared utility classes
-   - Constants/Enum management approach
+   - Base class fields (must not be redeclared) with EXACT fully-qualified class names
+   - Shared utility classes with EXACT package paths (e.g., `com.company.common.util.DateUtils`)
+   - Constants/Enum management approach with EXACT locations
 
 7. Security/Authentication Patterns
    - Authentication method (JWT, Session, OAuth2)

package/pass-prompts/templates/java-spring/pass3.md

@@ -4,6 +4,23 @@ generate all ClaudeOS-Core files based on the analysis results.
 
 Do not read the original source code again. Reference only the analysis results.
 
+CRITICAL — Build Tool Consistency:
+Check `stack.buildTool` and `stack.packageManager` in project-analysis.json.
+ALL generated files MUST use the detected build tool's commands (e.g., Gradle or Maven).
+NEVER mix Gradle/Maven commands. Also verify actual task names from build files.
+
+CRITICAL — Cross-file Consistency:
+Rules (.claude/rules/) and Standards (claudeos-core/standard/) MUST NOT contradict each other.
+If a standard defines a specific pattern (e.g., import path, file naming, API usage),
+the corresponding rule MUST use the same pattern. Before generating each rule file,
+verify it is consistent with the related standard file.
+
+CRITICAL — CLAUDE.md Reference Table Completeness:
+The reference table in CLAUDE.md MUST list ALL generated standard files, not just core.
+Include all backend-api, security-db, infra, and verification standards.
+Alternatively, add a note directing readers to .claude/rules/00.core/00.standard-reference.md
+for the complete list.
+
 Generation targets:
 
 1. CLAUDE.md (project root)

package/pass-prompts/templates/kotlin-spring/pass1.md

@@ -14,6 +14,7 @@ Analysis items (per domain):
    - URL patterns (RESTful conventions, naming, versioning)
    - Parameter binding (@RequestBody, @PathVariable, @RequestParam, @ModelAttribute)
    - Response format (ResponseEntity, custom response wrappers, sealed class responses)
+   - If a custom response wrapper class exists, record its EXACT class name, EXACT method signatures (e.g., `success()`, `error()`), and EXACT import path. Do NOT guess or invent method names — read the actual source.
    - Error handling (try-catch, @ExceptionHandler, @ControllerAdvice, Result/Either pattern)
    - Authentication/authorization (@AuthenticationPrincipal, @PreAuthorize, SecurityContext)
    - API documentation (Swagger/SpringDoc annotations)
@@ -61,6 +62,8 @@ Analysis items (per domain):
    - Validation annotations (@field:NotNull, @field:NotBlank, @field:Size, custom)
    - Conversion approach (mapstruct-kotlin, manual extension functions, toEntity/toDto)
    - Serialization (Jackson Kotlin module, kotlinx.serialization)
+   - Import paths: record EXACT package paths for shared classes (e.g., `com.company.shared.util.DateUtils`, not an invented path)
+   - Utility class locations: record EXACT module and package where shared utilities live
 
 6. Aggregate/Aggregate Root Patterns
    - Aggregate boundary definition (which entities belong together)

package/pass-prompts/templates/kotlin-spring/pass2.md

@@ -43,11 +43,11 @@ Merge items:
    - Module naming conventions (what suffix: -server, -lib, -adapter)
 
 6. Common Classes/Utilities List
-   - Shared library (shared-lib) key classes and utilities
-   - Integration library (integration-lib) contracts and adapters
-   - Base classes (must not be redeclared)
-   - Shared constants/Enum management
-   - Common extension functions
+   - Shared library (shared-lib) key classes and utilities with EXACT package paths (e.g., `com.company.shared.util.DateUtils`)
+   - Integration library (integration-lib) contracts and adapters with EXACT package paths
+   - Base classes (must not be redeclared) with EXACT fully-qualified class names
+   - Shared constants/Enum management with EXACT locations
+   - Common extension functions with EXACT file locations
 
 7. BFF Patterns Summary
    - Feign Client declaration conventions

package/pass-prompts/templates/kotlin-spring/pass3.md

@@ -4,6 +4,23 @@ generate all ClaudeOS-Core files based on the analysis results.
 
 Do not read the original source code again. Reference only the analysis results.
 
+CRITICAL — Build Tool Consistency:
+Check `stack.buildTool` and `stack.packageManager` in project-analysis.json.
+ALL generated files MUST use the detected build tool's commands (e.g., Gradle tasks).
+NEVER mix Gradle/Maven commands. Also verify actual task names from build.gradle(.kts).
+
+CRITICAL — Cross-file Consistency:
+Rules (.claude/rules/) and Standards (claudeos-core/standard/) MUST NOT contradict each other.
+If a standard defines a specific pattern (e.g., import path, file naming, API usage),
+the corresponding rule MUST use the same pattern. Before generating each rule file,
+verify it is consistent with the related standard file.
+
+CRITICAL — CLAUDE.md Reference Table Completeness:
+The reference table in CLAUDE.md MUST list ALL generated standard files, not just core.
+Include all backend-api, security-db, infra, and verification standards.
+Alternatively, add a note directing readers to .claude/rules/00.core/00.standard-reference.md
+for the complete list.
+
 Generation targets:
 
 1. CLAUDE.md (project root)

package/pass-prompts/templates/node-express/pass1.md

@@ -12,6 +12,7 @@ Analysis items (per domain):
    - URL patterns (RESTful conventions, naming, versioning)
    - Parameter handling (req.body, req.params, req.query, @Body(), @Param(), @Query())
    - Response format (res.json, interceptor, class-transformer, custom wrapper)
+   - If a custom response wrapper/helper exists, record its EXACT function/class name, EXACT method signatures, and EXACT import path. Do NOT guess — read the actual source.
    - Error handling (try-catch, HttpException, ExceptionFilter, error middleware)
    - Authentication (Passport, JWT Guard, custom middleware)
    - API documentation (Swagger @ApiTags, @ApiOperation, JSDoc)
@@ -40,6 +41,8 @@ Analysis items (per domain):
    - TypeScript usage level (interface vs type vs class, Generic usage)
    - Serialization/deserialization (class-transformer, custom serializer)
    - Enum/constants management
+   - File entry pattern: is the main file `index.ts` or named by module (e.g., `users.controller.ts`)? Record the exact convention.
+   - Import paths: record EXACT path aliases and import patterns used (e.g., `@/modules/`, `@app/`, relative paths)
 
 5. Configuration/Environment Patterns
    - Environment variable management (@nestjs/config, dotenv, envalid)

package/pass-prompts/templates/node-express/pass2.md

@@ -29,12 +29,15 @@ Merge items:
 
 5. Naming Conventions Summary
    - File/directory naming (kebab-case, camelCase, PascalCase)
+   - File entry pattern (index.ts vs module-named files — pick ONE that the project actually uses)
    - DTO/type naming conventions
    - Route URL patterns
    - Module/package structure conventions
 
 6. Common Types/Interfaces List
-   - Shared type definition files
+   - Shared type definition files with EXACT import paths
+   - Utility functions with EXACT import paths
+   - Path aliases used in the project (e.g., `@/` → `src/`)
    - Utility types
    - Environment variable types
    - Constants/Enum management

package/pass-prompts/templates/node-express/pass3.md

@@ -4,11 +4,30 @@ generate all ClaudeOS-Core files based on the analysis results.
 
 Do not read the original source code again. Reference only the analysis results.
 
+CRITICAL — Package Manager Consistency:
+Check `stack.packageManager` in project-analysis.json (e.g., "pnpm", "yarn", "npm").
+ALL generated files MUST use ONLY that detected package manager's commands.
+For example, if packageManager is "pnpm": use `pnpm run build`, `pnpm run dev`, `pnpm install`, etc.
+NEVER mix npm/yarn/pnpm commands. Also check `scripts` field in the project's package.json
+for actual script names (e.g., "eslint" not "lint", "typecheck" not "tsc --noEmit").
+
+CRITICAL — Cross-file Consistency:
+Rules (.claude/rules/) and Standards (claudeos-core/standard/) MUST NOT contradict each other.
+If a standard defines a specific pattern (e.g., import path, file naming, API usage),
+the corresponding rule MUST use the same pattern. Before generating each rule file,
+verify it is consistent with the related standard file.
+
+CRITICAL — CLAUDE.md Reference Table Completeness:
+The reference table in CLAUDE.md MUST list ALL generated standard files, not just core.
+Include all frontend-ui, backend-api, security-db, infra, and verification standards.
+Alternatively, add a note directing readers to .claude/rules/00.core/00.standard-reference.md
+for the complete list.
+
 Generation targets:
 
 1. CLAUDE.md (project root)
    - Role definition (based on detected stack)
-   - Build & Run Commands (npm/yarn/pnpm)
+   - Build & Run Commands (use ONLY the detected packageManager — never hardcode npm/yarn/pnpm)
    - Core architecture diagram
    - DB table/collection naming
    - Standard/Skills/Guide reference table