Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 9 additions & 7 deletions .claude/CLAUDE.md
Original file line number Diff line number Diff line change
Expand Up @@ -82,12 +82,12 @@ cargo build -p ambientops-clinician --all-features # Everything (slow)
| **D** | Driver/deployment layer | Adapters, execution, IO boundaries |
| **V** | Verification layer | Policy, plan verification, schema conformance |
| **AffineScript** | Primary application code | Compiles to JS, type-safe; AmbientOps primary |
| **Deno** | Runtime & package management | Replaces Node/npm/bun |
| **Bun** | JS runtime & package management (tier 1) | Default for all new work. Runs compiled ESM/JS directly — no bundler step. Uses an npm-compatible `package.json` plus `bun.lock` — both are expected, not anti-patterns. |
| **Rust** | Agent/verify boxes only | Isolated repos (`*-agent-rs/`, `*-verify-rs/`) |
| **Elixir** | Observability/event hub only | NEVER source of truth |
| **Gleam** | Backend services | Runs on BEAM or compiles to JS |
| **Bash/POSIX Shell** | Scripts, automation | Keep minimal |
| **JavaScript** | Only where AffineScript cannot | MCP protocol glue, Deno APIs |
| **JavaScript** | Only where AffineScript cannot | MCP protocol glue, Bun APIs |

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚪ LOW RISK

Nitpick: The repair of 'blanking scars' (restoring 'AffineScript') appears redundant for this file as the old hunk already contained the target text.

| **Nickel** | Configuration language | For complex configs |
| **Guile Scheme** | State/meta files | .machine_readable/6a2/STATE.a2ml, .machine_readable/6a2/META.a2ml, .machine_readable/6a2/ECOSYSTEM.a2ml |
| **Julia** | Batch scripts, data processing | Per RSR |
Expand All @@ -102,8 +102,10 @@ cargo build -p ambientops-clinician --all-features # Everything (slow)
| Banned | Replacement | Reason |
|--------|-------------|--------|
| TypeScript | AffineScript | Type safety without JS baggage |
| Node.js | Deno | Security-first runtime |
| npm/yarn/pnpm/bun | Deno | Deno manages deps |
| ReScript | AffineScript | Type safety without JS baggage |
| Deno | Bun | Being removed per the 2026-08-26 ruling; migrate, or document why not |
| Node.js | Bun | Node-compatible; run the code, drop the runtime |

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚪ LOW RISK

Nitpick: The phrase 'drop the runtime' is ambiguous as Bun is itself a runtime. If this refers to Bun's ability to bundle standalone executables, it should be stated explicitly.

Suggested change
| Node.js | Bun | Node-compatible; run the code, drop the runtime |
Node.js | Bun | Node-compatible; supports standalone binaries and drop-in replacement |

| npm/yarn/pnpm | Bun | Bun manages deps |
Comment thread
coderabbitai[bot] marked this conversation as resolved.
| Go | Rust | Memory safety without GC |
| **Python** | AffineScript/Rust/D/V | **Completely banned** (SaltStack abandoned) |
| Java/Kotlin | Rust/Tauri | No JVM |
Expand All @@ -127,8 +129,8 @@ Elixir is allowed **only for observability/event hubs**:
### Enforcement Rules

1. **No new TypeScript files** - Convert existing TS to AffineScript

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 MEDIUM RISK

Divergence from description: Rule 1 was not updated to mention ReScript as specified in the PR intent; it remains focused on TypeScript.

2. **No package.json for runtime deps** - Use deno.json imports
3. **No node_modules in production** - Deno caches deps automatically
2. **Use `package.json` + `bun.lock` for JS runtime deps** - Bun is npm-compatible; a manifest is REQUIRED
3. **`bun install --production --frozen-lockfile` for production deps** - resolved from `package.json` and pinned via `bun.lock`; `--frozen-lockfile` makes a lockfile mismatch a build failure rather than a silent re-resolve
4. **No Go code** - Use Rust instead
5. **No Python anywhere** - Completely banned
6. **No Kotlin/Swift for mobile** - Use Tauri 2.0+ or Dioxus
Expand All @@ -137,7 +139,7 @@ Elixir is allowed **only for observability/event hubs**:

- **Primary**: Guix (guix.scm)
- **Fallback**: Guix (flake.guix)
- **JS deps**: Deno (deno.json imports)
- **JS deps**: Bun (`package.json` + `bun.lock`). Declare tooling as a devDependency and run `bunx --no-install --bun <tool>` — a bare `bunx <tool>` can fetch an unpinned package and may start Node via its shebang.

### Security Requirements

Expand Down
18 changes: 9 additions & 9 deletions broad-spectrum/.claude/CLAUDE.md
Original file line number Diff line number Diff line change
Expand Up @@ -20,13 +20,13 @@ The following files in `.machine_readable/` contain structured project metadata:
| Language/Tool | Use Case | Notes |
|---------------|----------|-------|
| **AffineScript** | Primary application code | Compiles to JS, type-safe |
| **Deno** | Runtime & package management | Replaces Node/npm/bun |
| **Bun** | JS runtime & package management (tier 1) | Default for all new work. Runs compiled ESM/JS directly — no bundler step. Uses an npm-compatible `package.json` plus `bun.lock` — both are expected, not anti-patterns. |
| **Rust** | Performance-critical, systems, WASM | Preferred for CLI tools |
| **Tauri 2.0+** | Mobile apps (iOS/Android) | Rust backend + web UI |
| **Dioxus** | Mobile apps (native UI) | Pure Rust, React-like |
| **Gleam** | Backend services | Runs on BEAM or compiles to JS |
| **Bash/POSIX Shell** | Scripts, automation | Keep minimal |
| **JavaScript** | Only where AffineScript cannot | MCP protocol glue, Deno APIs |
| **JavaScript** | Only where AffineScript cannot | MCP protocol glue, Bun APIs |
| **Nickel** | Configuration language | For complex configs |
| **Guile Scheme** | State/meta files | STATE.scm, META.scm, ECOSYSTEM.scm |
| **Julia** | Batch scripts, data processing | Per RSR |
Expand All @@ -38,10 +38,10 @@ The following files in `.machine_readable/` contain structured project metadata:
| Banned | Replacement |
|--------|-------------|
| TypeScript | AffineScript |
| Node.js | Deno |
| npm | Deno |
| Bun | Deno |
| pnpm/yarn | Deno |
| Deno | Bun |
| Node.js | Bun |
| npm | Bun |
| pnpm/yarn | Bun |
| Go | Rust |
| Python | Julia/Rust/AffineScript |
| Java/Kotlin | Rust/Tauri/Dioxus |
Expand All @@ -61,8 +61,8 @@ Both are FOSS with independent governance (no Big Tech).
### Enforcement Rules

1. **No new TypeScript files** - Convert existing TS to AffineScript
2. **No package.json for runtime deps** - Use deno.json imports
3. **No node_modules in production** - Deno caches deps automatically
2. **Use `package.json` + `bun.lock` for JS runtime deps** - Bun is npm-compatible; a manifest is REQUIRED
3. **`bun install --production` for production deps** - resolved from `package.json`, pinned via `bun.lock`
4. **No Go code** - Use Rust instead
5. **No Python anywhere** - Use Julia for data/batch, Rust for systems, AffineScript for apps
6. **No Kotlin/Swift for mobile** - Use Tauri 2.0+ or Dioxus
Expand All @@ -71,7 +71,7 @@ Both are FOSS with independent governance (no Big Tech).

- **Primary**: Guix (guix.scm)
- **Fallback**: Guix (flake.guix)
- **JS deps**: Deno (deno.json imports)
- **JS deps**: Bun (`package.json` + `bun.lock`). Declare tooling as a devDependency and run `bunx --no-install --bun <tool>` — a bare `bunx <tool>` can fetch an unpinned package and may start Node via its shebang.

### Security Requirements

Expand Down
18 changes: 9 additions & 9 deletions cicada/.claude/CLAUDE.md
Original file line number Diff line number Diff line change
Expand Up @@ -20,13 +20,13 @@ The following files in `.machine_readable/` contain structured project metadata:
| Language/Tool | Use Case | Notes |
|---------------|----------|-------|
| **AffineScript** | Primary application code | Compiles to JS, type-safe |
| **Deno** | Runtime & package management | Replaces Node/npm/bun |
| **Bun** | JS runtime & package management (tier 1) | Default for all new work. Runs compiled ESM/JS directly — no bundler step. Uses an npm-compatible `package.json` plus `bun.lock` — both are expected, not anti-patterns. |
| **Rust** | Performance-critical, systems, WASM | Preferred for CLI tools |
| **Tauri 2.0+** | Mobile apps (iOS/Android) | Rust backend + web UI |
| **Dioxus** | Mobile apps (native UI) | Pure Rust, React-like |
| **Gleam** | Backend services | Runs on BEAM or compiles to JS |
| **Bash/POSIX Shell** | Scripts, automation | Keep minimal |
| **JavaScript** | Only where AffineScript cannot | MCP protocol glue, Deno APIs |
| **JavaScript** | Only where AffineScript cannot | MCP protocol glue, Bun APIs |
| **Nickel** | Configuration language | For complex configs |
| **Guile Scheme** | State/meta files | STATE.scm, META.scm, ECOSYSTEM.scm |
| **Julia** | Batch scripts, data processing | Per RSR |
Expand All @@ -38,10 +38,10 @@ The following files in `.machine_readable/` contain structured project metadata:
| Banned | Replacement |
|--------|-------------|
| TypeScript | AffineScript |
| Node.js | Deno |
| npm | Deno |
| Bun | Deno |
| pnpm/yarn | Deno |
| Deno | Bun |
| Node.js | Bun |
| npm | Bun |
| pnpm/yarn | Bun |
| Go | Rust |
| Python | Julia/Rust/AffineScript |
| Java/Kotlin | Rust/Tauri/Dioxus |
Expand All @@ -61,8 +61,8 @@ Both are FOSS with independent governance (no Big Tech).
### Enforcement Rules

1. **No new TypeScript files** - Convert existing TS to AffineScript
2. **No package.json for runtime deps** - Use deno.json imports
3. **No node_modules in production** - Deno caches deps automatically
2. **Use `package.json` + `bun.lock` for JS runtime deps** - Bun is npm-compatible; a manifest is REQUIRED
3. **`bun install --production` for production deps** - resolved from `package.json`, pinned via `bun.lock`
4. **No Go code** - Use Rust instead
5. **No Python anywhere** - Use Julia for data/batch, Rust for systems, AffineScript for apps
6. **No Kotlin/Swift for mobile** - Use Tauri 2.0+ or Dioxus
Expand All @@ -71,7 +71,7 @@ Both are FOSS with independent governance (no Big Tech).

- **Primary**: Guix (guix.scm)
- **Fallback**: Guix (flake.guix)
- **JS deps**: Deno (deno.json imports)
- **JS deps**: Bun (`package.json` + `bun.lock`). Declare tooling as a devDependency and run `bunx --no-install --bun <tool>` — a bare `bunx <tool>` can fetch an unpinned package and may start Node via its shebang.

### Security Requirements

Expand Down
18 changes: 9 additions & 9 deletions czech-file-knife/.claude/CLAUDE.md
Original file line number Diff line number Diff line change
Expand Up @@ -20,13 +20,13 @@ The following files in `.machine_readable/` contain structured project metadata:
| Language/Tool | Use Case | Notes |
|---------------|----------|-------|
| **AffineScript** | Primary application code | Compiles to JS, type-safe |
| **Deno** | Runtime & package management | Replaces Node/npm/bun |
| **Bun** | JS runtime & package management (tier 1) | Default for all new work. Runs compiled ESM/JS directly — no bundler step. Uses an npm-compatible `package.json` plus `bun.lock` — both are expected, not anti-patterns. |
| **Rust** | Performance-critical, systems, WASM | Preferred for CLI tools |
| **Tauri 2.0+** | Mobile apps (iOS/Android) | Rust backend + web UI |
| **Dioxus** | Mobile apps (native UI) | Pure Rust, React-like |
| **Gleam** | Backend services | Runs on BEAM or compiles to JS |
| **Bash/POSIX Shell** | Scripts, automation | Keep minimal |
| **JavaScript** | Only where AffineScript cannot | MCP protocol glue, Deno APIs |
| **JavaScript** | Only where AffineScript cannot | MCP protocol glue, Bun APIs |
| **Nickel** | Configuration language | For complex configs |
| **Guile Scheme** | State/meta files | STATE.scm, META.scm, ECOSYSTEM.scm |
| **Julia** | Batch scripts, data processing | Per RSR |
Expand All @@ -38,10 +38,10 @@ The following files in `.machine_readable/` contain structured project metadata:
| Banned | Replacement |
|--------|-------------|
| TypeScript | AffineScript |
| Node.js | Deno |
| npm | Deno |
| Bun | Deno |
| pnpm/yarn | Deno |
| Deno | Bun |
| Node.js | Bun |
| npm | Bun |
| pnpm/yarn | Bun |
| Go | Rust |
| Python | Julia/Rust/AffineScript |
| Java/Kotlin | Rust/Tauri/Dioxus |
Expand All @@ -61,8 +61,8 @@ Both are FOSS with independent governance (no Big Tech).
### Enforcement Rules

1. **No new TypeScript files** - Convert existing TS to AffineScript
2. **No package.json for runtime deps** - Use deno.json imports
3. **No node_modules in production** - Deno caches deps automatically
2. **Use `package.json` + `bun.lock` for JS runtime deps** - Bun is npm-compatible; a manifest is REQUIRED
3. **`bun install --production` for production deps** - resolved from `package.json`, pinned via `bun.lock`
4. **No Go code** - Use Rust instead
5. **No Python anywhere** - Use Julia for data/batch, Rust for systems, AffineScript for apps
6. **No Kotlin/Swift for mobile** - Use Tauri 2.0+ or Dioxus
Expand All @@ -71,7 +71,7 @@ Both are FOSS with independent governance (no Big Tech).

- **Primary**: Guix (guix.scm)
- **Fallback**: Guix (flake.guix)
- **JS deps**: Deno (deno.json imports)
- **JS deps**: Bun (`package.json` + `bun.lock`). Declare tooling as a devDependency and run `bunx --no-install --bun <tool>` — a bare `bunx <tool>` can fetch an unpinned package and may start Node via its shebang.

### Security Requirements

Expand Down
15 changes: 8 additions & 7 deletions emergency-button/.claude/CLAUDE.md
Original file line number Diff line number Diff line change
Expand Up @@ -29,12 +29,12 @@ The following files in `.machine_readable/` contain structured project metadata:
| **D** | Driver/deployment layer | Adapters, execution, IO boundaries |
| **V** | Verification layer | Policy, plan verification, schema conformance |
| **AffineScript** | Primary application code | Compiles to JS, type-safe; AmbientOps primary |
| **Deno** | Runtime & package management | Replaces Node/npm/bun |
| **Bun** | JS runtime & package management (tier 1) | Default for all new work. Runs compiled ESM/JS directly — no bundler step. Uses an npm-compatible `package.json` plus `bun.lock` — both are expected, not anti-patterns. |
| **Rust** | Agent/verify boxes only | Isolated repos (`*-agent-rs/`, `*-verify-rs/`) |
| **Elixir** | Observability/event hub only | NEVER source of truth |
| **Gleam** | Backend services | Runs on BEAM or compiles to JS |
| **Bash/POSIX Shell** | Scripts, automation | Keep minimal |
| **JavaScript** | Only where AffineScript cannot | MCP protocol glue, Deno APIs |
| **JavaScript** | Only where AffineScript cannot | MCP protocol glue, Bun APIs |
| **Nickel** | Configuration language | For complex configs |
| **Guile Scheme** | State/meta files | STATE.scm, META.scm, ECOSYSTEM.scm |
| **Julia** | Batch scripts, data processing | Per RSR |
Expand All @@ -48,8 +48,9 @@ The following files in `.machine_readable/` contain structured project metadata:
| Banned | Replacement | Reason |
|--------|-------------|--------|
| TypeScript | AffineScript | Type safety without JS baggage |
| Node.js | Deno | Security-first runtime |
| npm/yarn/pnpm/bun | Deno | Deno manages deps |
| Deno | Bun | Being removed per the 2026-08-26 ruling; migrate, or document why not |
| Node.js | Bun | Node-compatible; run the code, drop the runtime |
| npm/yarn/pnpm | Bun | Bun manages deps |
| Go | Rust | Memory safety without GC |
| **Python** | AffineScript/Rust/D/V | **Completely banned** (SaltStack abandoned) |
| Java/Kotlin | Rust/Tauri | No JVM |
Expand All @@ -73,8 +74,8 @@ Elixir is allowed **only for observability/event hubs**:
### Enforcement Rules

1. **No new TypeScript files** - Convert existing TS to AffineScript
2. **No package.json for runtime deps** - Use deno.json imports
3. **No node_modules in production** - Deno caches deps automatically
2. **Use `package.json` + `bun.lock` for JS runtime deps** - Bun is npm-compatible; a manifest is REQUIRED
3. **`bun install --production` for production deps** - resolved from `package.json`, pinned via `bun.lock`
4. **No Go code** - Use Rust instead
5. **No Python anywhere** - Completely banned
6. **No Kotlin/Swift for mobile** - Use Tauri 2.0+ or Dioxus
Expand All @@ -83,7 +84,7 @@ Elixir is allowed **only for observability/event hubs**:

- **Primary**: Guix (guix.scm)
- **Fallback**: Guix (flake.guix)
- **JS deps**: Deno (deno.json imports)
- **JS deps**: Bun (`package.json` + `bun.lock`). Declare tooling as a devDependency and run `bunx --no-install --bun <tool>` — a bare `bunx <tool>` can fetch an unpinned package and may start Node via its shebang.

### Security Requirements

Expand Down
18 changes: 9 additions & 9 deletions hybrid-automation-router/.claude/CLAUDE.md
Original file line number Diff line number Diff line change
Expand Up @@ -20,13 +20,13 @@ The following files in `.machine_readable/` contain structured project metadata:
| Language/Tool | Use Case | Notes |
|---------------|----------|-------|
| **AffineScript** | Primary application code | Compiles to JS, type-safe |
| **Deno** | Runtime & package management | Replaces Node/npm/bun |
| **Bun** | JS runtime & package management (tier 1) | Default for all new work. Runs compiled ESM/JS directly — no bundler step. Uses an npm-compatible `package.json` plus `bun.lock` — both are expected, not anti-patterns. |
| **Rust** | Performance-critical, systems, WASM | Preferred for CLI tools |
| **Tauri 2.0+** | Mobile apps (iOS/Android) | Rust backend + web UI |
| **Dioxus** | Mobile apps (native UI) | Pure Rust, React-like |
| **Gleam** | Backend services | Runs on BEAM or compiles to JS |
| **Bash/POSIX Shell** | Scripts, automation | Keep minimal |
| **JavaScript** | Only where AffineScript cannot | MCP protocol glue, Deno APIs |
| **JavaScript** | Only where AffineScript cannot | MCP protocol glue, Bun APIs |
| **Nickel** | Configuration language | For complex configs |
| **Guile Scheme** | State/meta files | STATE.scm, META.scm, ECOSYSTEM.scm |
| **Julia** | Batch scripts, data processing | Per RSR |
Expand All @@ -38,10 +38,10 @@ The following files in `.machine_readable/` contain structured project metadata:
| Banned | Replacement |
|--------|-------------|
| TypeScript | AffineScript |
| Node.js | Deno |
| npm | Deno |
| Bun | Deno |
| pnpm/yarn | Deno |
| Deno | Bun |
| Node.js | Bun |
| npm | Bun |
| pnpm/yarn | Bun |
| Go | Rust |
| Python | Julia/Rust/AffineScript |
| Java/Kotlin | Rust/Tauri/Dioxus |
Expand All @@ -61,8 +61,8 @@ Both are FOSS with independent governance (no Big Tech).
### Enforcement Rules

1. **No new TypeScript files** - Convert existing TS to AffineScript
2. **No package.json for runtime deps** - Use deno.json imports
3. **No node_modules in production** - Deno caches deps automatically
2. **Use `package.json` + `bun.lock` for JS runtime deps** - Bun is npm-compatible; a manifest is REQUIRED
3. **`bun install --production` for production deps** - resolved from `package.json`, pinned via `bun.lock`
4. **No Go code** - Use Rust instead
5. **No Python anywhere** - Use Julia for data/batch, Rust for systems, AffineScript for apps
6. **No Kotlin/Swift for mobile** - Use Tauri 2.0+ or Dioxus
Expand All @@ -71,7 +71,7 @@ Both are FOSS with independent governance (no Big Tech).

- **Primary**: Guix (guix.scm)
- **Fallback**: Guix (flake.guix)
- **JS deps**: Deno (deno.json imports)
- **JS deps**: Bun (`package.json` + `bun.lock`). Declare tooling as a devDependency and run `bunx --no-install --bun <tool>` — a bare `bunx <tool>` can fetch an unpinned package and may start Node via its shebang.

### Security Requirements

Expand Down
Loading
Loading