EvilBit-Labs
diff --git a/‎.cursor/commands/cicheck.md‎
Lines changed: 1 addition & 0 deletions b/‎.cursor/commands/cicheck.md‎
Lines changed: 1 addition & 0 deletions
diff --git a/‎.eslintrc.json‎
Lines changed: 0 additions & 47 deletions b/‎.eslintrc.json‎
Lines changed: 0 additions & 47 deletions
diff --git a/‎.gitattributes‎
Lines changed: 155 additions & 0 deletions b/‎.gitattributes‎
Lines changed: 155 additions & 0 deletions
diff --git a/‎.github/prompts/ci_check.prompt.md‎
Lines changed: 20 additions & 0 deletions b/‎.github/prompts/ci_check.prompt.md‎
Lines changed: 20 additions & 0 deletions
diff --git a/‎.github/prompts/code_review.prompt.md‎
Lines changed: 53 additions & 0 deletions b/‎.github/prompts/code_review.prompt.md‎
Lines changed: 53 additions & 0 deletions
@@ -0,0 +1 @@
+Follow the instructions in .github/prompts/ci_check.prompt.md to run the ci-check command.
@@ -0,0 +1,155 @@
+# Auto-detect text files and normalize to LF in the repo
+* text=auto eol=lf
+
+# Explicit Next.js / Node.js settings
+# JavaScript / TypeScript source stays LF everywhere
+*.js   text eol=lf diff=javascript
+*.jsx  text eol=lf diff=javascript
+*.ts   text eol=lf
+*.tsx  text eol=lf
+
+# Common Node / Next.js text assets
+*.json   text eol=lf
+*.yml    text eol=lf
+*.yaml   text eol=lf
+*.toml   text eol=lf
+*.css    text eol=lf diff=css
+*.scss   text eol=lf
+*.sass   text eol=lf
+*.html   text eol=lf diff=html
+*.md     text eol=lf diff=markdown
+*.env    text eol=lf
+
+# Lockfiles – keep exact byte-for-byte consistency
+package-lock.json -text
+pnpm-lock.yaml   -text
+yarn.lock        -text
+
+# Shell and scripts (LF in repo; Windows scripts use CRLF)
+*.sh   text eol=lf
+*.bash text eol=lf
+*.zsh  text eol=lf
+*.ps1  text eol=crlf
+*.cmd  text eol=crlf
+*.bat  text eol=crlf
+
+# Python files
+*.pxd    text diff=python
+*.py     text diff=python
+*.py3    text diff=python
+*.pyw    text diff=python
+*.pyx    text diff=python
+*.pyz    text diff=python
+*.pyi    text diff=python
+*.ipynb  text diff=python
+
+# Docker files
+Dockerfile text
+*.dockerfile text
+docker-compose*.yml text
+.dockerignore text
+
+# Git files
+*.gitattributes text
+.gitignore      text
+*.md            text diff=markdown
+.gitattributes  export-ignore
+.gitignore      export-ignore
+*.gitattributes linguist-language=gitattributes
+*.gitattributes linguist-detectable=true
+*.gitattributes linguist-documentation=false
+
+# Documentation
+*.md text diff=markdown
+*.txt text
+*.rst text
+LICENSE text
+
+# Config files
+*.json   text
+*.toml    text
+*.yml      text
+*.yaml     text
+*.ini      text
+*.cfg      text
+*.conf     text
+*.xml      text
+
+# Web files
+*.html      text diff=html
+*.html.j2   text diff=html
+*.css       text diff=css
+*.js        text diff=javascript
+*.jsx       text diff=javascript
+*.ts        text
+*.tsx       text
+*.vue       text
+
+# SQL files
+*.sql text
+
+# Binary files
+*.db     binary
+*.p      binary
+*.pkl    binary
+*.pickle binary
+*.pyc    binary export-ignore
+*.pyd    binary export-ignore
+*.pyo    binary export-ignore
+*.pdb    binary
+
+# Image files
+*.png      binary
+*.jpg      binary
+*.jpeg     binary
+*.gif      binary
+*.tif      binary
+*.tiff     binary
+*.ico      binary
+*.svg      text
+*.eps      binary
+
+# Scripts
+*.bash     text eol=lf
+*.fish     text eol=lf
+*.ksh      text eol=lf
+*.sh       text eol=lf
+*.zsh      text eol=lf
+*.bat      text eol=crlf
+*.cmd      text eol=crlf
+*.ps1      text eol=crlf
+
+# Font files
+*.ttf       binary
+*.eot binary
+*.woff binary
+*.woff2 binary
+
+# Archive files
+*.7z       binary
+*.bz       binary
+*.bz2      binary
+*.bzip2    binary
+*.gz       binary
+*.lz       binary
+*.lzma     binary
+*.rar      binary
+*.tar      binary
+*.taz      binary
+*.tbz      binary
+*.tbz2     binary
+*.tgz      binary
+*.tlz      binary
+*.txz      binary
+*.xz       binary
+*.Z        binary
+*.zip      binary
+*.zst      binary
+
+# Executables
+*.exe binary
+*.dll binary
+*.so binary
+*.dylib binary
+
+.env text=utf-8 eol=lf
@@ -0,0 +1,20 @@
+---
+mode: agent
+model: Auto (copilot)
+tools: [githubRepo, edit, search, new, runCommands, runTasks, usages, vscodeAPI, think, problems, changes, testFailure, openSimpleBrowser, fetch, extensions, todos, memory]
+description: Ensure code changes pass all CI checks before merging.
+---
+
+1. First, run `just ci-check` to identify any failures
+2. Analyze the output to understand what specific checks are failing. If everything passes, you're done.
+3. Make minimal, targeted fixes to address ONLY the failing checks:
+   - For formatting issues: run `just format`
+   - For linting issues (ESLint): fix the specific violations reported (rerun with `just lint`)
+   - For type errors: fix the underlying TypeScript code until `just type-check` succeeds
+   - For test failures: fix the failing tests or underlying code (verify with `just test`, `just test-backend`, `just test-frontend`, or `just test-integration`)
+   - For dependency security issues: run `npm audit` and address findings, update dependencies as needed
+4. After making fixes, run `just ci-check` again to verify all checks pass
+5. If any checks still fail, repeat steps 2-4 until all checks pass
+6. Provide a summary of what was fixed and confirm that `just ci-check` now passes completely
+
+Keep changes minimal and focused - only fix what's actually causing the CI failures. Do not make unnecessary refactoring or style changes beyond what's required to pass the checks.
@@ -0,0 +1,53 @@
+---
+mode: agent
+model: GPT-5 (copilot)
+tools: [githubRepo, edit, search, new, runCommands, runTasks, usages, vscodeAPI, think, problems, changes, testFailure, openSimpleBrowser, fetch, extensions, todos, memory]
+description: Analyze diff, apply safe internal fixes, report results
+---
+
+Analyze only the changed files (diff scope) and improve them while preserving public APIs. Focus categories: (1) Code Smells (large/duplicate/complex) (2) Design Patterns (service layer, factory, builder, repository) (3) Best Practices (TypeScript strict mode, project conventions, MERN stack patterns) (4) Readability (naming, structure, cohesion) (5) Maintainability (modularization, clarity, service layer separation) (6) Performance (async/await, MongoDB queries, Redis operations, blocking I/O) (7) Type Safety (strict TypeScript, avoid `any`, proper Zod schemas, Mongoose types) (8) Error Handling (AppError class, structured errors, no silent failures, proper logging with Pino). Context: HashHive = MERN stack, service-layer architecture, project-scoped multi-tenancy, security-first, zero-warnings, memory conscious. Prefer clear + secure over clever.
+
+## ACTION WORKFLOW (MANDATORY)
+
+1. Collect diff file list. 2. Analyze per focus category. 3. Classify each finding: `safe-edit` (apply now), `deferred`, `requires-approval`. 4. Auto-apply only `safe-edit` (mechanical, internal, non-breaking, warning removal, correctness, logging consistency, blocking I/O → async/await, console.log → Pino logger). 5. Run `just lint` then `just test`. On failure: isolate failing hunk, revert it, re-run, document skip. 6. Generate report (summary table, applied edits + rationale, deferred backlog, approval-needed with risks, next-step roadmap). 7. Output unified diff (never commit). If zero safe edits: state "No safe automatic edits applied" and still output full report.
+
+## AUTO-EDIT CONSTRAINTS (STRICT)
+
+- Scope: Only diff-related files
+- Gates: Must pass `just lint` + tests
+- User Control: Never commit/stage
+- Public API: No signature/visibility/export changes
+- Validation: Always run quality gates before reporting
+
+## CRITICAL REQUIREMENTS
+
+- Actionable suggestions (code examples when clearer)
+- Auto-apply only clearly safe internal fixes
+- Prioritize runtime correctness, safety, type rigor, security posture
+- Preserve all public APIs (no signature/visibility changes)
+- Avoid cleverness; optimize for clarity & maintainability
+
+## REPO RULES (REINFORCED)
+
+Zero warnings (ESLint) | Strict TypeScript (no `any`) | Precise typing | Async/await for I/O | Service-layer architecture | AppError for errors | Zod validation | Project-scoped multi-tenancy | Memory efficient | S3-compatible storage (MinIO) | Path validation | No secrets in logs | JSDoc for all public APIs | Pino logging (no console.log)
+
+---
+
+## EXECUTION CHECKLIST
+
+1 Diff scan 2 Analyze 3 Classify 4 Safe edits applied 5 Gates pass 6 Report (summary/applied/deferred/approval-needed/roadmap) 7 Output diff. On blocker: report + remediation guidance.
+
+## QUICK REFERENCE MATRIX
+
+Category -> Examples of Safe Edits:
+
+- Smells: remove dead code, split oversized internal function (no visibility change)
+- Patterns: introduce small private helper or service method internally
+- Best Practices: replace blocking fs in async with fs/promises or async fs operations
+- Readability: rename local vars (non-public), add JSDoc comments/examples
+- Maintainability: extract internal module or service method (keep public API stable)
+- Performance: eliminate needless object cloning, memoize constant, bound array growth
+- Type Safety: replace `string` boolean flags with small internal enum (private), add proper Zod schemas
+- Error Handling: add context via AppError, convert generic string errors to structured variants if already internal
+
+If ambiguity arises, default to: classify (deferred) instead of applying.
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+Follow the instructions in .github/prompts/ci_check.prompt.md to run the ci-check command.`