Cline rules

1---
2description: ColorAgent Monorepo
3author: Sean Bellows
4version: 0.0.1
5---
6 
7# PROJECT GUIDELINES
8 
9## MONOREPO STRUCTURE
10 
11- Use Turborepo for build orchestration and caching
12- pnpm workspaces for dependency management
13- Separate backend and frontend as distinct workspaces
14 
15## DOCUMENTATION GUIDELINES
16 
17- Update relevant documentation in "/docs" when modifying features
18- Keep README.md in sync with new capabilities
19- Maintain changelog entries in CHANGELOG.md
20 
21### Architecture Decision Records
22 
23Create ADRs in /docs/adr for:
24 
25- Major dependency changes
26- pattern changes
27- New integration patterns
28- Database schema changes
29- Follow template in "/docs/adr/template.md"
30 
31## TESTING
32 
33- After adding or updating tests, make sure they pass, by running them with pytest.
34- When rerunning previously failed tests, specify the specific tests to re-run.
35- Aim for 80% code coverage in general, but utility functions should have 100% coverage.
36 
37### Unit Tests
38 
39A good unit test should:
40 
41- focus on a single use-case at a time
42- have a minimal set of assertions per test
43- demonstrate every use case. The rule of thumb is: if it can happen, it should be covered
44 
45## CODE STYLE AND STRUCTURE
46 
47- Prioritize maintainability over development speed
48- Keep data layer separate from view hierarchy
49- Write clear, understandable code
50- Think data first, implement views second
51- Follow clean architecture principles
52 
53## ERROR HANDLING
54 
55- Implement granular error types
56- Use graceful degradation strategies
57- Implement comprehensive error logging
58- Use error recovery mechanisms
59 
60## JSON SANITIZATION
61 
62- Sanitize JSON throughout the transformation pipeline
63- Handle BOM characters properly
64- Handle nested stringified JSON
65- Implement proper error handling for malformed JSON
66 
67## SECURITY
68 
69- Implement proper database security measures
70- Integrate infrastructure for using KeyCloak as the authorization platform in both the frontend and backend
71- Use secure headers and CORS policies
72- Implement audit logging for sensitive operations
73