codeninja 2.0.0 → 3.1.0

package/ide/antigravity/.agents/skills/reactjs/SKILL.md

@@ -0,0 +1,211 @@
+---
+skill: reactjs
+scope: reactjs-commands
+loaded-for:
+  - /codeninja:init (reactjs type)
+  - @modularize
+  - @validate-page
+  - @integrate-api
+description: >
+  All technical standards for ReactJS frontend development — file structure,
+  apiClient/apiHandler patterns, encryption inheritance, routing standards,
+  and component conventions. The reactjs-frontend persona uses this skill.
+---
+
+# Skill: ReactJS Frontend
+
+Technical standards for every ReactJS file in this project.
+
+---
+
+## Backend Linking (enforced before any generation)
+
+```
+context.current_init.linked_service     → backend service name
+context.services[linked].port           → REACT_APP_BASE_URL port
+context.services[linked].encryption_key → REACT_APP_KEY
+context.services[linked].encryption_iv  → REACT_APP_IV
+context.services[linked].api_key        → REACT_APP_API_KEY
+```
+
+These 4 values are inherited — NEVER ask the user for them.
+NEVER hardcode any key, IV, or API key value.
+
+---
+
+## apiClient.js — Exact Specification
+
+```javascript
+// src/api/apiClient.js
+// Axios instance — all cross-cutting concerns live here
+
+import axios from 'axios';
+import CryptoJS from 'crypto-js';
+import { logOutRedirectCall, showErrorMessage } from '../pages/common/Utils';
+
+const KEY = CryptoJS.enc.Hex.parse(process.env.REACT_APP_KEY);
+const IV  = CryptoJS.enc.Hex.parse(process.env.REACT_APP_IV);
+
+const axiosClient = axios.create({
+  baseURL: process.env.REACT_APP_BASE_URL,
+  headers: {
+    'api-key': process.env.REACT_APP_API_KEY,
+    'Content-Type': 'text/plain',
+  },
+});
+
+// Request interceptor: encrypt body, attach token
+axiosClient.interceptors.request.use((config) => {
+  const token = localStorage.getItem('wa_token');
+  if (token) {
+    config.headers['token'] = CryptoJS.AES.encrypt(token, KEY, { iv: IV }).toString();
+  }
+  if (config.data) {
+    config.data = CryptoJS.AES.encrypt(JSON.stringify(config.data), KEY, { iv: IV }).toString();
+  }
+  return config;
+});
+
+// Response interceptor: decrypt body
+axiosClient.interceptors.response.use(
+  (response) => {
+    try {
+      const bytes = CryptoJS.AES.decrypt(response.data, KEY, { iv: IV });
+      const parsed = JSON.parse(bytes.toString(CryptoJS.enc.Utf8));
+      if (parsed.status === -1) { logOutRedirectCall(); }
+      return { ...response, data: parsed };
+    } catch {
+      return response;
+    }
+  },
+  (error) => {
+    if (!error.response || error.response.status === 401) {
+      logOutRedirectCall();
+      showErrorMessage('Session expired. Please log in again.');
+    }
+    return Promise.reject(error);
+  }
+);
+
+export default axiosClient;
+```
+
+---
+
+## apiHandler.js — Pattern
+
+```javascript
+// src/api/apiHandler.js
+import axiosClient from './apiClient';
+import { saveWebSession } from '../pages/common/Utils';
+
+// POST /login — authenticate user
+export const webLogin = async ({ email, password }) => {
+  const payload = { email, password, device_type: 'web', device_token: '' };
+  const res = await axiosClient.post('/login', payload);
+  if (res.data.status === 1) saveWebSession(res.data.data);
+  return res.data;
+};
+
+// POST /<path> — description
+export const <functionName> = async (data) => {
+  const res = await axiosClient.post('/<path>', data);
+  return res.data;
+};
+```
+
+Rules:
+- One function per endpoint
+- No try/catch here — interceptors handle errors
+- No decryption here — interceptors handle it
+- Session saving happens in the handler, not in UI components
+- Generate handlers matching `context.api_routes` for the linked service
+
+---
+
+## Component Standards
+
+- Functional components only — no class components
+- JSDoc above every exported function and component
+- No inline styles — `.module.css` per page, `global.css` for shared
+- No `console.log` — use `showMessage` / `showErrorMessage`
+- No hardcoded API paths — all calls through `apiHandler.js`
+
+---
+
+## Welcome Page Standard
+
+```jsx
+// src/pages/Welcome/index.jsx
+import React from 'react';
+import styles from './Welcome.module.css';
+
+/**
+ * Default landing page displayed after app initialisation.
+ * @returns {JSX.Element} Welcome screen with project name.
+ */
+const Welcome = () => (
+  <div className={styles.container}>
+    <h1>{process.env.REACT_APP_PROJECT_NAME || '<project_name>'}</h1>
+    <p>Welcome. Your application is ready.</p>
+  </div>
+);
+
+export default Welcome;
+```
+
+---
+
+## App.jsx Standard
+
+```jsx
+import { BrowserRouter, Routes, Route } from 'react-router-dom';
+import Welcome from './pages/Welcome';
+
+function App() {
+  return (
+    <BrowserRouter>
+      <Routes>
+        <Route path="/" element={<Welcome />} />
+        {/* Additional routes added as project grows */}
+      </Routes>
+    </BrowserRouter>
+  );
+}
+
+export default App;
+```
+
+---
+
+## @modularize Workflow
+
+1. Scan all pages in `src/pages/`
+2. Identify repeated layout blocks (header, footer, sidebar, nav)
+3. Show user: "Found repeated blocks in X pages. Extract to components?"
+4. For each block → create `src/components/<BlockName>/index.jsx` + `.module.css`
+5. Rewrite each page to import and use the component
+6. Never change the page's data-fetching logic or state — layout only
+
+---
+
+## @validate-page Workflow
+
+1. Ask: which page to add validation to
+2. Read the page file
+3. Ask: preferred validation library (validatorjs / Yup / custom)
+4. Add validation on form submit — check required fields, types, formats
+5. Display error messages per field below the input
+6. Never add validation that requires a backend call — client-side only
+
+---
+
+## @integrate-api Workflow
+
+1. Ask: which page to wire up
+2. Read the page file and `src/api/apiHandler.js`
+3. Identify buttons/forms in the page that need API calls
+4. Add the appropriate handler function in `apiHandler.js` if not present
+5. Wire form submit and button clicks to handler functions
+6. Add loading state (boolean), error state (string), success state
+7. Show loading spinner during API call, error message on failure, success feedback on completion

package/ide/antigravity/.agents/workflows/codeninja-api.md

@@ -0,0 +1,28 @@
+---
+slash_command: /codeninja:api
+personas: [global-orchestrator, nodejs-backend]
+skills: [mcp-and-context, api-builder]
+description: Add a new API endpoint to an existing NodeJS service using the 5-step SOP
+---
+
+# /codeninja:api
+
+Delegates to: `.codeninja/commands/create-api.workflow.md`
+
+## Before Running
+1. Call `context_check_stale`
+2. Call `context_read` — load `context.services` and `context.db.schema`
+3. Read 1–2 existing modules in the target service to understand current patterns
+
+## Execution
+Read and execute `create-api.workflow.md` step by step.
+ONE confirmation after showing module details, then generate all files silently:
+- `route.js` → task: generate-route
+- `<module>_model.js` → task: generate-model
+- Append to `route_manager.js` → `file_insert_after` MCP tool (NEVER rewrite)
+- Patch `swagger_doc.json` → `file_insert_after` MCP tool (add new path only)
+
+## After Running
+Call `context_write` — append to `context.api_routes`, update `context.services[<n>].modules`.
+Call `context_clear_scratchpad` for `current_api`.
+Show `show-final-summary` task output.

package/ide/antigravity/.agents/workflows/codeninja-audit.md

@@ -0,0 +1,23 @@
+---
+slash_command: /codeninja:audit
+personas: [global-orchestrator, nodejs-backend]
+skills: [mcp-and-context, api-builder, code-intelligence]
+description: Security and quality review of a NodeJS service
+---
+
+# /codeninja:audit
+
+Delegates to: `.codeninja/commands/audit.workflow.md`
+
+## Before Running
+1. Call `context_read`
+2. Ask: "Which service do you want to audit?" — list from `context.services`
+
+## Execution
+Read and execute `audit.workflow.md`.
+Use MCP tools: `analyze_middleware_order`, `analyze_encryption_library`,
+`analyze_language_keys`, `analyze_dependencies`, `analyze_env_file`.
+
+## Output
+Severity-ranked report: CRITICAL → WARNING → SUGGESTION.
+Offer to auto-fix SUGGESTION items. Fix WARNING/CRITICAL one at a time with confirmation.

package/ide/antigravity/.agents/workflows/codeninja-db-create.md

@@ -0,0 +1,11 @@
+---
+slash_command: /codeninja:db:create
+personas: [global-orchestrator, database-architect]
+skills: [mcp-and-context, database]
+description: Design and generate a new table with migration file
+---
+# /codeninja:db:create
+Delegates to: `.codeninja/commands/db-create-table.workflow.md`
+Before: `context_read` (load context.db fully), `context_check_stale`, `migration_next_number`.
+One question at a time. Never invent names — all from context.db.schema.
+After: `context_write` updated schema, `context_clear_scratchpad` for current_table.

package/ide/antigravity/.agents/workflows/codeninja-db-drop.md

@@ -0,0 +1,11 @@
+---
+slash_command: /codeninja:db:drop
+personas: [global-orchestrator, database-architect]
+skills: [mcp-and-context, database]
+description: Drop a table with a DROP migration file
+---
+# /codeninja:db:drop
+Delegates to: `.codeninja/commands/db-drop-table.workflow.md`
+Before: `context_read`, `migration_next_number`.
+WARN user: "This is destructive. Confirm you want to DROP [table]?"
+After: `context_write` — remove table from context.db.schema.

package/ide/antigravity/.agents/workflows/codeninja-db-index.md

@@ -0,0 +1,11 @@
+---
+slash_command: /codeninja:db:index
+personas: [global-orchestrator, database-architect]
+skills: [mcp-and-context, database]
+description: Add a new index to an existing table with migration file
+---
+# /codeninja:db:index
+Delegates to: `.codeninja/commands/db-add-index.workflow.md`
+Before: `context_read`, `migration_next_number`.
+Show existing indexes from context.db.schema before suggesting new ones.
+After: `context_write` with updated index list.

package/ide/antigravity/.agents/workflows/codeninja-db-modify.md

@@ -0,0 +1,11 @@
+---
+slash_command: /codeninja:db:modify
+personas: [global-orchestrator, database-architect]
+skills: [mcp-and-context, database]
+description: Add, rename, or drop a column via ALTER migration
+---
+# /codeninja:db:modify
+Delegates to: `.codeninja/commands/db-modify-table.workflow.md`
+Before: `context_read`, `migration_next_number`.
+Show existing columns from context.db.schema before asking which to change.
+After: `context_write` with updated column list.

package/ide/antigravity/.agents/workflows/codeninja-db-seed.md

@@ -0,0 +1,10 @@
+---
+slash_command: /codeninja:db:seed
+personas: [global-orchestrator, database-architect]
+skills: [mcp-and-context, database]
+description: Add or update seed data for a table
+---
+# /codeninja:db:seed
+Delegates to: `.codeninja/commands/db-seed.workflow.md`
+Before: `context_read` — load context.db.schema for real column names.
+After: `context_write` to record seed file location.

package/ide/antigravity/.agents/workflows/codeninja-db-sync.md

@@ -0,0 +1,12 @@
+---
+slash_command: /codeninja:db:sync
+personas: [global-orchestrator, database-architect]
+skills: [mcp-and-context, database]
+description: Scan migration files and rebuild context.db.schema
+---
+# /codeninja:db:sync
+Delegates to: `.codeninja/commands/db-sync.workflow.md`
+Before: `context_read`, `fs_list` all migration files.
+Compare files on disk vs context.db.schema — surface all gaps.
+User approves before context is updated.
+After: `context_write` with fully rebuilt context.db.schema.

package/ide/antigravity/.agents/workflows/codeninja-debug.md

@@ -0,0 +1,12 @@
+---
+slash_command: /codeninja:debug
+personas: [global-orchestrator, nodejs-backend]
+skills: [mcp-and-context, api-builder, code-intelligence]
+description: Diagnose and fix a bug by tracing the actual request code path
+---
+# /codeninja:debug
+Delegates to: `.codeninja/commands/debug.workflow.md`
+Before: `context_read`. Gather: error + stack, endpoint, expected vs actual, recent changes.
+Trace full request lifecycle. Find exact failure step.
+Output: root cause + before/after fix. Confirm before applying.
+Suggest one guard to prevent recurrence.

package/ide/antigravity/.agents/workflows/codeninja-design.md

@@ -0,0 +1,21 @@
+---
+slash_command: /codeninja:design
+personas: [global-orchestrator, nodejs-backend OR database-architect]
+skills: [mcp-and-context, api-builder OR database]
+description: Plan a feature, API contract, or DB change before writing any code
+---
+
+# /codeninja:design
+
+Delegates to: `.codeninja/commands/design.workflow.md`
+
+## Before Running
+1. Call `context_read` — load full project context
+2. Determine if this is an API design (nodejs-backend + api-builder) or DB design (database-architect + database)
+
+## Execution
+Read and execute `design.workflow.md` step by step.
+Produce a written plan before any code is generated. User approves plan before execution begins.
+
+## After Running
+Call `context_write` with design notes stored in `context.current_design`.

package/ide/antigravity/.agents/workflows/codeninja-explain.md

@@ -0,0 +1,11 @@
+---
+slash_command: /codeninja:explain
+personas: [global-orchestrator, context-aware]
+skills: [mcp-and-context, code-intelligence]
+description: Explain any file, function, pattern, or concept with full project context
+---
+# /codeninja:explain
+Delegates to: `.codeninja/commands/explain.workflow.md`
+Before: call `context_read`, `fs_read` on target.
+Structure: What it is → How it works → Why this way → Where it connects.
+Use real names from context. End with offer to explain further.

package/ide/antigravity/.agents/workflows/codeninja-init.md

@@ -0,0 +1,29 @@
+---
+slash_command: /codeninja:init
+personas: [global-orchestrator, nodejs-backend OR reactjs-frontend OR database-architect]
+skills: [mcp-and-context, api-builder OR reactjs OR database]
+description: Bootstrap a new NodeJS service, ReactJS app, or database
+---
+
+# /codeninja:init
+
+Delegates to: `.codeninja/commands/initialize-project.workflow.md`
+
+## Before Running
+1. Call `context_check_stale` — resolve stale operations first
+2. Call `context_read` — if context_version > 0, warn: "Already initialized. Use /codeninja:sync to update."
+3. Determine project type → route to correct specialist persona and load matching skill
+
+## Specialist Routing
+- NodeJS service → `nodejs-backend` persona + `api-builder` skill
+- ReactJS app → `reactjs-frontend` persona + `reactjs` skill (requires linked NodeJS service)
+- Database → `database-architect` persona + `database` skill
+
+## Execution
+Read and execute `initialize-project.workflow.md` step by step. One question at a time.
+ONE confirmation at `show-init-summary`, then generate all files silently.
+
+## After Running
+Call `context_write` with all project information.
+Call `context_clear_scratchpad` for `current_init`.
+Show `show-init-summary` task output.

package/ide/antigravity/.agents/workflows/codeninja-integrate-api.md

@@ -0,0 +1,11 @@
+---
+slash_command: @integrate-api
+personas: [global-orchestrator, reactjs-frontend]
+skills: [mcp-and-context, reactjs]
+description: Wire forms and action buttons to API handler functions
+---
+# @integrate-api
+Delegates to: `.codeninja/commands/integrate-api.workflow.md`
+Before: `context_read`. Read target page and apiHandler.js.
+Add handler functions in apiHandler.js if missing.
+Wire buttons/forms to handlers. Add loading, error, success states.

package/ide/antigravity/.agents/workflows/codeninja-modularize.md

@@ -0,0 +1,11 @@
+---
+slash_command: @modularize
+personas: [global-orchestrator, reactjs-frontend]
+skills: [mcp-and-context, reactjs]
+description: Extract repeated layout blocks into reusable React components
+---
+# @modularize
+Delegates to: `.codeninja/commands/modularize.workflow.md`
+Before: `context_read`. Confirm linked NodeJS service exists.
+Scan all pages, identify repeated layout blocks.
+Show user what will be extracted and confirm before changes.

package/ide/antigravity/.agents/workflows/codeninja-optimize.md

@@ -0,0 +1,13 @@
+---
+slash_command: /codeninja:optimize
+personas: [global-orchestrator, nodejs-backend, database-architect]
+skills: [mcp-and-context, api-builder, database, code-intelligence]
+description: Find and fix performance bottlenecks with concrete impact estimates
+---
+# /codeninja:optimize
+Delegates to: `.codeninja/commands/optimize.workflow.md`
+Before: `context_read` for `context.db.schema` and `context.services`.
+Ask: slow endpoint / heavy query / startup / describe it.
+Cross-reference existing indexes. Generate migration via `migration_next_number`.
+Output: [HIGH|MED|LOW] ranked. Confirm before applying.
+`context_write` after index additions.

package/ide/antigravity/.agents/workflows/codeninja-refactor.md

@@ -0,0 +1,23 @@
+---
+slash_command: /codeninja:refactor
+personas: [global-orchestrator, nodejs-backend]
+skills: [mcp-and-context, api-builder]
+description: Rename or restructure code with full context tracking
+---
+
+# /codeninja:refactor
+
+Delegates to: `.codeninja/commands/refactor.workflow.md`
+
+## Before Running
+1. Call `context_read`
+2. Ask: "What are you refactoring?" — field rename, file restructure, module rename?
+
+## Execution
+Read and execute `refactor.workflow.md`.
+Show full list of affected files before making any change.
+ONE confirmation, then apply all changes.
+Update `context.change_log` with before/after record.
+
+## After Running
+Call `context_write` with updated service/module names if renamed.

package/ide/antigravity/.agents/workflows/codeninja-review.md

@@ -0,0 +1,12 @@
+---
+slash_command: /codeninja:review
+personas: [global-orchestrator, nodejs-backend]
+skills: [mcp-and-context, api-builder, code-intelligence]
+description: Code review — severity-ranked findings with exact before/after fixes
+---
+# /codeninja:review
+Delegates to: `.codeninja/commands/review.workflow.md`
+Before: `context_read`, `fs_read` target, read 1–2 sibling modules.
+Run full checklist: Security → Architecture → Code Quality → Database.
+Output: [CRITICAL|WARNING|SUGGESTION] with before/after code.
+Offer to apply fixes. Confirm each before writing.

package/ide/antigravity/.agents/workflows/codeninja-sync.md

@@ -0,0 +1,23 @@
+---
+slash_command: /codeninja:sync
+personas: [global-orchestrator, nodejs-backend]
+skills: [mcp-and-context]
+description: Scan the entire repo and rebuild context.json from disk
+---
+
+# /codeninja:sync
+
+Delegates to: `.codeninja/commands/sync.workflow.md`
+
+## Before Running
+1. Call `context_read` — load current state
+2. Call `service_scan` — discover all services on disk
+
+## Execution
+Read and execute `sync.workflow.md`.
+Use `run_drift_check` MCP tool to compare context vs disk.
+Surface all detected drifts before writing anything.
+User approves the sync before context is updated.
+
+## After Running
+Call `context_write` with fully rebuilt context.

package/ide/antigravity/.agents/workflows/codeninja-test.md

@@ -0,0 +1,19 @@
+---
+slash_command: /codeninja:test
+personas: [global-orchestrator, nodejs-backend]
+skills: [mcp-and-context, api-builder]
+description: Generate Jest + Supertest test files for a module
+---
+
+# /codeninja:test
+
+Delegates to: `.codeninja/commands/test.workflow.md`
+
+## Before Running
+1. Call `context_read`
+2. Ask: "Which module and service?" — list from `context.services[<n>].modules`
+
+## Execution
+Read and execute `test.workflow.md`.
+Generate `tests/v1/<ModuleName>.test.js`.
+Tests cover: happy path, each validation failure, auth failure, edge cases.

package/ide/antigravity/.agents/workflows/codeninja-validate-page.md

@@ -0,0 +1,11 @@
+---
+slash_command: @validate-page
+personas: [global-orchestrator, reactjs-frontend]
+skills: [mcp-and-context, reactjs]
+description: Add client-side form validation to a specific React page
+---
+# @validate-page
+Delegates to: `.codeninja/commands/validate-page.workflow.md`
+Before: `context_read`. Ask which page. Ask preferred validation library.
+Add per-field validation on submit. Display error messages below inputs.
+Client-side only — no backend calls.

package/ide/cursor/.cursor/mcp.json

@@ -0,0 +1,8 @@
+{
+  "mcpServers": {
+    "codeninja": {
+      "command": "node",
+      "args": [".codeninja/mcp-server.js"]
+    }
+  }
+}

package/ide/cursor/.cursor/rules/01-global-orchestrator.mdc

@@ -0,0 +1,60 @@
+---
+description: codeninja global orchestrator — routing, context, activation. Always applied.
+globs: ["**/*"]
+alwaysApply: true
+---
+
+# codeninja — Global Orchestrator
+
+You are a Senior Software Architect managing this project via the codeninja agent system.
+
+## Activation Sequence (every session)
+1. Call `context_check_stale` — resolve stale operations first
+2. Call `context_read` — load full context
+3. Call `service_scan` — compare with `context.services`; if drift detected, suggest `/codeninja:sync`
+4. Load `context.project_info` for all suggestions
+
+## Routing
+| Keyword | Specialist |
+|---------|-----------|
+| express, node, api, service, encryption | nodejs-backend rules |
+| react, frontend, ui, component | reactjs-frontend rules |
+| postgres, mysql, db, schema, migration, table | database-architect rules |
+| /codeninja:db:* | always database-architect |
+
+## Context Rules
+- NEVER read/write context.json directly — always use `context_read` / `context_write`
+- `context_write` deep-merges — never overwrites
+- `change_log` append-only
+
+## Batch Generation Rule
+ONE confirmation per operation. After user confirms → generate all files silently.
+
+## Response Style
+- One question at a time
+- Confirm before creating or modifying files
+- `database/` folder ALWAYS at repository root — never inside a service
+
+## Slash Commands
+| Command | Description |
+|---------|-------------|
+| `/codeninja:init` | Bootstrap NodeJS service, ReactJS app, or database |
+| `/codeninja:api` | Add API endpoint (5-step SOP) |
+| `/codeninja:design` | Plan feature before coding |
+| `/codeninja:audit` | Security and quality review |
+| `/codeninja:test` | Generate Jest tests |
+| `/codeninja:refactor` | Rename with context tracking |
+| `/codeninja:sync` | Rebuild context from repo |
+| `/codeninja:explain` | Explain any file or pattern |
+| `/codeninja:review` | Code review with findings |
+| `/codeninja:debug` | Debug with code path trace |
+| `/codeninja:optimize` | Performance improvements |
+| `/codeninja:db:create` | New table + migration |
+| `/codeninja:db:modify` | Alter column |
+| `/codeninja:db:index` | Add index |
+| `/codeninja:db:drop` | Drop table |
+| `/codeninja:db:seed` | Add seed data |
+| `/codeninja:db:sync` | Rebuild DB schema |
+| `@modularize` | Extract React layout components |
+| `@validate-page` | Add form validation |
+| `@integrate-api` | Wire forms to API handlers |

package/ide/cursor/.cursor/rules/02-mcp-and-context.mdc

@@ -0,0 +1,38 @@
+---
+description: codeninja MCP tools and context management — always applied
+globs: ["**/*"]
+alwaysApply: true
+---
+
+# codeninja — MCP and Context
+
+## MCP Tools Reference
+| Tool | Use |
+|------|-----|
+| `context_read` | Load project context — FIRST on every activation |
+| `context_write` | Persist changes — deep-merge, never overwrite |
+| `context_clear_scratchpad` | Clear current_* key after operation |
+| `context_check_stale` | Detect unresolved operations — Step 0 |
+| `service_scan` | Discover services on disk |
+| `migration_next_number` | Before any migration file creation |
+| `fs_read` | Read file before modifying |
+| `fs_list` | List directory contents |
+| `fs_exists` | Check existence before conditional ops |
+| `file_insert_after` | Surgical append (route_manager, swagger) |
+| `file_contains` | Check before appending to avoid duplicates |
+| `run_drift_check` | Context vs disk comparison during @sync |
+| `lint_file` | Lint after generating JS/SQL |
+| `analyze_middleware_order` | Check middleware chain during @audit |
+| `analyze_encryption_library` | Verify encryption during @audit |
+| `analyze_language_keys` | Check i18n during @audit |
+| `analyze_dependencies` | Scan package.json during @audit |
+| `analyze_env_file` | Check .env completeness during @audit |
+| `validate_redis_connection` | Test Redis during init |
+| `validate_postgres_connection` | Test DB during init |
+
+## Absolute Rules
+- NEVER read context.json with fs_read — always `context_read`
+- NEVER write context.json directly — always `context_write`
+- `change_log` is append-only — never delete entries
+- Always call `context_check_stale` before starting any workflow
+- Always call `context_clear_scratchpad` after completing a workflow