These rules are enforced by CI (cargo clippy -D warnings, Biome). Fixing them afterwards is wasted effort — emit code in the correct shape the FIRST time. Every CI failure caused by one of these rules means the agent didn't read this section.
- Default to no code comments. Add a comment only after solving a bug or working through a complex issue, and only when it captures non-obvious context that a future investigator or reviewer genuinely needs — e.g. why the fix looks the way it does, the upstream/platform bug being worked around, a non-obvious invariant or trade-off chosen after investigation, or a link to the PR/issue that explains the decision. Bad cases that remain banned: narrating what the code does, restating types, JSDoc that paraphrases parameter names, "TODO: refactor" or "this should be cleaner" notes, and any comment that just describes the change you are currently making. When in doubt, prefer better naming/types over a comment. Applies to every language: Rust, TS, JS, Python, shell, SQL, TOML, etc.
- Never edit generated files:
**/tauri.ts,**/queries.ts,apps/desktop/src-tauri/gen/**,packages/ui-solid/src/auto-imports.d.ts, Drizzle migration SQL underpackages/database/migrations/. - Never start additional dev servers (
pnpm dev,pnpm dev:web,pnpm dev:desktop, Docker services). Assume they are already running.
- Prefer scoped, fast checks over full workspace gates. Do not run long full-repo checks by default.
- Touched any Rust file →
cargo fmt --allandcargo check -p <crate>. Add--all-targets,--workspace, or clippy only when explicitly requested, when preparing CI/PR final validation, or when the change needs broader coverage. - Touched any TS / JS / JSON / CSS / MD file → run the narrowest applicable formatter/linter on touched files first, such as
pnpm exec biome check --write <files>. Use fullpnpm format,pnpm lint, andpnpm typecheckonly when explicitly requested or when the change spans shared types/packages. - Touched DB schema →
pnpm db:generatebefore relying on it.
All patterns below are deny in the workspace [workspace.lints] in Cargo.toml. Do not emit the left column; always emit the right column.
| ❌ Don't write | ✅ Write instead | Lint |
|---|---|---|
dbg!(x) |
tracing::debug!(?x) (or delete it) |
dbg_macro |
let _ = async_fn(); |
async_fn().await; or tokio::spawn(async_fn()); |
let_underscore_future |
a - b for Duration/Instant |
a.saturating_sub(b) |
unchecked_time_subtraction |
if a { if b { … } } |
if a && b { … } |
collapsible_if |
x.clone() when x: Copy |
x |
clone_on_copy |
iter.map(|x| foo(x)) |
iter.map(foo) |
redundant_closure |
fn f(v: &Vec<T>) / fn f(s: &String) |
fn f(v: &[T]) / fn f(s: &str) |
ptr_arg |
v.len() == 0 / v.len() > 0 |
v.is_empty() / !v.is_empty() |
len_zero |
let _ = unit_returning(); |
unit_returning(); |
let_unit_value |
opt.unwrap_or_else(|| 42) (cheap default) |
opt.unwrap_or(42) |
unnecessary_lazy_evaluations |
for i in 0..v.len() { v[i] … } |
for item in &v { … } or .iter().enumerate() |
needless_range_loop |
value.min(max).max(min) |
value.clamp(min, max) |
manual_clamp |
Additionally, unused_must_use = "deny" applies to all Rust code: every Result, Option, and #[must_use] value must be explicitly handled (?, .unwrap(), .ok(), let _ = …; is not allowed for unit-returning calls — see let_unit_value; it is the correct escape hatch for Result-returning calls you consciously discard, e.g. let _ = tx.send(msg);).
biome.json at repo root enforces (do not override locally):
- Indent: tab. Not two spaces, not four spaces. New files and edits must use tabs.
- Quotes: double.
"foo", never'foo', for JS/TS string literals. organizeImports: on— imports are sorted/grouped automatically; don't leave unused imports or hand-sort against the grain.- Recommended lint ruleset is on, with
suspicious.noShadowRestrictedNamesdisabled. Everything else (unused vars,noExplicitAny, dead code, etc.) applies. - Desktop code under
apps/desktop/**has a11y rules disabled; they are enforced everywhere else (apps/web,packages/ui, etc.). - CSS overrides:
noUnknownAtRules,noUnknownTypeSelector,noDescendingSpecificityare off for**/*.css.
- Avoid
any. Useunknown+ narrowing, or existing shared types from@cap/utils,@cap/web-domain, generated bindings, etc. - Do not introduce
@ts-expect-error/@ts-ignorewithout a concrete reason. Prefer fixing the type.
- Turborepo monorepo:
apps/desktop(Tauri v2 + SolidStart),apps/web(Next.js),apps/cli(Rust CLI).packages/*shared libs (e.g.,database,ui,ui-solid,utils,web-*).crates/*Rust media/recording/rendering/camera crates.scripts/*,infra/, andpackages/local-docker/for tooling and local services.
- Install:
pnpm install; setup:pnpm env-setupthenpnpm cap-setup. - Dev:
pnpm dev(web+desktop). Desktop only:pnpm dev:desktop. Web only:pnpm dev:weborcd apps/web && pnpm dev. - Build:
pnpm build(Turbo). Desktop release:pnpm tauri:build. - DB:
pnpm db:generate→pnpm db:push→pnpm db:studio. - Docker:
pnpm docker:up | docker:stop | docker:clean. - Quality:
pnpm lint,pnpm format,pnpm typecheck. Rust:cargo build -p <crate>,cargo test -p <crate>.
- TypeScript / JS / JSON / CSS: tab indent and double-quoted strings, enforced by Biome (see
biome.json). Do not configure per-file overrides. - Rust:
rustfmtdefault style + the denied clippy lints in the Pre-Generation Invariants above. - Naming: files kebab‑case (
user-menu.tsx); React/Solid components PascalCase; hooksuseX; Rust modules snake_case; crates kebab‑case. - Runtime: Node 20, pnpm 10.5.2, Rust 1.88+, Docker for MySQL/MinIO.
(See Pre-Generation Invariants at the top of this file for the comments policy and the denied clippy/Biome patterns. Those are the source of truth — do not duplicate or weaken them here.)
- TS/JS: Vitest where present (e.g., desktop). Name tests
*.test.ts(x)near sources. - Rust:
cargo testper crate; tests insrcortests. - Prefer unit tests for logic and light smoke tests for flows; no strict coverage yet.
- Conventional style:
feat:,fix:,chore:,improve:,refactor:,docs:(e.g.,fix: hide watermark for pro users). - PRs: clear description, linked issues, screenshots/GIFs for UI, env/migration notes. Keep scope tight and update docs when behavior changes.
- Do not start extra servers; use
pnpm dev:weborpnpm dev:desktopas needed. - Prefer existing scripts and Turbo filters over ad‑hoc commands; clear
.turboonly when necessary. - Database flow: always
db:generate→db:pushbefore relying on new schema. - Keep secrets out of VCS; configure via
.envfrompnpm env-setup. - macOS note: desktop permissions (screen/mic) apply to the terminal running
pnpm dev:desktop. - All other agent-facing rules (comments policy, no editing generated files, clippy/Biome shape, post-edit gates) live in Pre-Generation Invariants at the top of this file.
When asked to inspect, review, optimize, secure, or fix something, do not stop at the obvious local change. First trace the full path and run a second-pass blast-radius review:
- identify the real root cause, not only the symptom
- trace callers, side effects, async/runtime behavior, generated artifacts, caches, exports, old data, and platform-specific paths
- compare old vs new behavior when reviewing a diff
- call out what is verified vs merely plausible
- consider likely follow-up reviewer or user reports before calling it done
- verify the actual user-visible outcome where practical, not only compile/lint success
Prefer the smallest correct fix, but only after checking whether the narrow fix misses related consequences.
- Next.js API routes in
apps/web/app/api/*are built with@effect/platform'sHttpApibuilder; copy the existing class/group/endpoint pattern instead of ad-hoc handlers. - Acquire backend services (e.g.,
Videos,S3Buckets) insideEffect.genblocks and wire them throughLayer.provide/HttpApiBuilder.group, translating domain errors toHttpApiErrorvariants. - Convert the effectful API to a Next.js handler with
apiToHandler(ApiLive)from@/lib/serverand export the returnedhandler—avoid callingrunPromiseinside route files. - On the server, run effects through
EffectRuntime.runPromisefrom@/lib/server, typically afterprovideOptionalAuth, so cookies and per-request context are attached automatically. - On the client, use
useEffectQuery/useEffectMutationfrom@/lib/EffectRuntime; they already bind the managed runtime and tracing so you shouldn't callEffectRuntime.run*directly in components.
Before declaring any task complete, the agent should run the fastest useful check for every file type it touched and report anything skipped.
- Rust:
cargo fmt --allandcargo check -p <crate>for the touched crate. Add--all-targets,--workspace, orcargo clippy -p <crate> --all-targets -- -D warningsonly for explicit requests, CI/PR final validation, or changes that need broader coverage. - TS / JS / JSON / CSS / MD: prefer scoped checks such as
pnpm exec biome check --write <files>. Use fullpnpm format,pnpm lint, andpnpm typecheckonly when explicitly requested or when the change is broad enough to justify it. - If a scoped check fails, fix the violation in the source (do NOT suppress with
#[allow(...)],// biome-ignore, oranyunless explicitly approved). The Pre-Generation Invariants show the correct form for every denied lint.