EvilBit-Labs
diff --git a/‎.claude/hookify.block-banned-packages.local.md‎
Lines changed: 22 additions & 0 deletions b/‎.claude/hookify.block-banned-packages.local.md‎
Lines changed: 22 additions & 0 deletions
diff --git a/‎.claude/hookify.block-npm-yarn-pnpm.local.md‎
Lines changed: 19 additions & 0 deletions b/‎.claude/hookify.block-npm-yarn-pnpm.local.md‎
Lines changed: 19 additions & 0 deletions
diff --git a/‎.claude/hookify.block-wrong-test-runners.local.md‎
Lines changed: 19 additions & 0 deletions b/‎.claude/hookify.block-wrong-test-runners.local.md‎
Lines changed: 19 additions & 0 deletions
diff --git a/‎.claude/hookify.warn-bun-add.local.md‎
Lines changed: 13 additions & 0 deletions b/‎.claude/hookify.warn-bun-add.local.md‎
Lines changed: 13 additions & 0 deletions
diff --git a/‎.claude/instincts/biome-useLiteralKeys.md‎
Lines changed: 26 additions & 0 deletions b/‎.claude/instincts/biome-useLiteralKeys.md‎
Lines changed: 26 additions & 0 deletions
diff --git a/‎.claude/instincts/httpexception-in-onerror.md‎
Lines changed: 31 additions & 0 deletions b/‎.claude/instincts/httpexception-in-onerror.md‎
Lines changed: 31 additions & 0 deletions
diff --git a/‎.claude/instincts/schema-flow.md‎
Lines changed: 35 additions & 0 deletions b/‎.claude/instincts/schema-flow.md‎
Lines changed: 35 additions & 0 deletions
@@ -0,0 +1,22 @@
+---
+name: block-banned-packages
+enabled: true
+event: bash
+pattern: \bbun\s+add\s+.*(express|fastify|next|prisma|mongodb|mongoose|eslint|prettier|redux|mobx|recoil|jotai|nx|lerna|create-react-app)\b
+action: block
+---
+
+**Banned package detected.** This project has explicit technology constraints:
+
+| Banned | Use Instead |
+|--------|-------------|
+| express, fastify | **Hono** (on Bun.serve()) |
+| next, create-react-app | **Vite + React 19** |
+| prisma | **Drizzle ORM** |
+| redis *(direct)*, bull *(v3)* | **ioredis + BullMQ** (approved for async jobs) |
+| mongodb, mongoose | **PostgreSQL + Drizzle** |
+| eslint, prettier | **Biome** |
+| redux, mobx, recoil, jotai | **Zustand** (UI state) + **TanStack Query** (server state) |
+| nx, lerna | **Turborepo + Bun workspaces** |
+
+See `.kiro/steering/tech.md` for the full constraints.
@@ -0,0 +1,19 @@
+---
+name: block-npm-yarn-pnpm
+enabled: true
+event: bash
+pattern: \b(npm|yarn|pnpm)\s+(install|i|add|remove|run|ci|test|start|exec|init|create|publish|pack)\b
+action: block
+---
+
+**This project uses Bun exclusively as its runtime and package manager.**
+
+Do not use npm, yarn, or pnpm. Replace with the Bun equivalent:
+
+- `npm install` -> `bun install`
+- `npm add <pkg>` -> `bun add <pkg>`
+- `npm run <script>` -> `bun run <script>` or `bun <script>`
+- `npm test` -> `bun test`
+- `npx <cmd>` -> `bunx <cmd>`
+
+See `.kiro/steering/tech.md` and `AGENTS.md`.
@@ -0,0 +1,19 @@
+---
+name: block-wrong-test-runners
+enabled: true
+event: bash
+pattern: \b(jest|vitest)\b
+action: block
+---
+
+**This project uses `bun:test` for all tests.**
+
+Do not use Jest or Vitest. Replace with:
+
+- `jest` -> `bun test`
+- `vitest` -> `bun test`
+- `npx jest` -> `bun test`
+
+Test files use `import { describe, expect, it } from 'bun:test'`.
+
+See `AGENTS.md` and `.kiro/steering/tech.md`.
@@ -0,0 +1,13 @@
+---
+name: warn-bun-add
+enabled: true
+event: bash
+pattern: \bbun\s+(add|remove|install)\b
+action: warn
+---
+
+**Check for running tests before modifying packages.**
+
+Running `bun add` or `bun remove` while `bun test` is active corrupts `node_modules` mid-flight, causing ENOENT errors and broken module resolution.
+
+Before proceeding, verify no test processes are running.
@@ -0,0 +1,26 @@
+---
+id: hashhive-biome-literal-keys
+trigger: "when configuring Biome or accessing properties on index-signature types"
+confidence: 0.95
+domain: biome-config
+source: local-repo-analysis
+---
+
+# Keep useLiteralKeys Off
+
+## Action
+
+Never enable `useLiteralKeys` in biome.json. It conflicts with TypeScript's `noPropertyAccessFromIndexSignature`.
+
+Always use bracket notation for index-signature access:
+```typescript
+// With noPropertyAccessFromIndexSignature: true
+const val = body['key'];  // GOOD
+const val = body.key;     // BAD — TS error on index signatures
+```
+
+## Evidence
+
+- `noPropertyAccessFromIndexSignature: true` in tsconfig.base.json
+- `useLiteralKeys: "off"` in biome.json
+- Enabling it creates an irreconcilable conflict between Biome wanting `obj.key` and TS requiring `obj['key']`
@@ -0,0 +1,31 @@
+---
+id: hashhive-httpexception-handling
+trigger: "when adding or modifying Hono onError handler"
+confidence: 0.95
+domain: hono
+source: local-repo-analysis
+---
+
+# Check HTTPException Before Generic Error Handling
+
+## Action
+
+Hono's `app.onError()` catches ALL errors including `HTTPException`. Always check for `HTTPException` first and return its response, otherwise auth 401s become 500s.
+
+```typescript
+import { HTTPException } from 'hono/http-exception';
+
+app.onError((err, c) => {
+  if (err instanceof HTTPException) {
+    return err.getResponse();
+  }
+  // ... generic 500 handling
+});
+```
+
+## Evidence
+
+- Discovered when all 401 auth responses became 500s
+- Auth middleware uses `throw new HTTPException(401, { res: ... })`
+- The onError handler was catching it and returning a generic 500
+- Fixed in packages/backend/src/index.ts
@@ -0,0 +1,35 @@
+---
+id: hashhive-schema-flow
+trigger: "when adding or modifying database tables, Zod schemas, or TypeScript types"
+confidence: 0.95
+domain: architecture
+source: local-repo-analysis
+---
+
+# Follow the One-Way Schema Flow
+
+## Action
+
+Schema changes flow in ONE direction. Never create types or schemas manually — always derive them.
+
+```
+shared/src/db/schema.ts       ← EDIT HERE (Drizzle tables)
+    ↓
+shared/src/schemas/index.ts   ← Add createInsertSchema/createSelectSchema
+    ↓
+shared/src/types/index.ts     ← Add z.infer<typeof schema> exports
+```
+
+When adding a new table:
+1. Add Drizzle table definition in `schema.ts`
+2. Add `createInsertSchema(table)` + `createSelectSchema(table)` in `schemas/index.ts`
+3. Add `type Insert* = z.infer<...>` + `type Select* = z.infer<...>` in `types/index.ts`
+4. Run `bun --filter shared build` to regenerate
+
+These three files ALWAYS change together.
+
+## Evidence
+
+- All 15 database tables follow this exact pattern
+- Co-change analysis shows schema.ts, schemas/index.ts, and types/index.ts always modified together
+- drizzle-zod generates runtime-safe Zod validators from Drizzle definitions