Add biome

Author: MaxLinCode

.dippy

@@ -0,0 +1,33 @@
+# .dippy
+
+# Let normal read / inspect commands flow
+allow git status
+allow git diff
+allow git log
+allow ls
+allow pwd
+allow cat
+allow sed
+allow grep
+allow rg
+allow find
+allow jq
+
+# Let normal monorepo validation commands flow
+allow pnpm --filter * typecheck
+allow pnpm --filter * test
+allow pnpm --filter * lint
+allow pnpm biome *
+allow pnpm exec biome *
+allow pnpm tsc *
+allow pnpm vitest *
+allow pnpm jest *
+
+# Keep obviously risky things gated
+deny rm -rf "Use trash or ask first before deleting recursively"
+deny git push --force "Force push requires review"
+deny git reset --hard "Hard reset requires review"
+deny pnpm publish "Publishing should always be confirmed"
+deny npm publish "Publishing should always be confirmed"
+deny-redirect **/.env* "Never write secrets into env files automatically"
+deny-redirect **/.env.local* "Never write secrets into env files automatically"

CLAUDE.md

@@ -110,10 +110,12 @@ Build Atlas as a production-quality, Telegram-first planning assistant. The code
 
 ## Git Workflow Rules
 
+- **Every workflow — no exceptions — must use a git worktree and a dedicated branch.**
+  - Create a worktree before touching any files: `git worktree add ../atlas-<short-description> -b codex/<short-description>`
+  - All edits, experiments, and commits happen inside that worktree, never in the main checkout.
+  - This prevents dirty-worktree collisions between concurrent tasks (e.g. formatting runs vs. feature work).
 - Follow `docs/workflows/feature-delivery.md` for product features, fixes, and behavior changes.
-- For any non-trivial code change, work on a feature branch named `codex/<short-description>`.
 - Do not commit or push implementation work directly to `main`.
-- Before pushing, confirm the current branch is not `main`.
 - If work is accidentally committed on `main`, move it to a feature branch before pushing.
 
 ## Execution Rules

apps/web/eslint.config.mjs

@@ -1,7 +1,7 @@
 import type { NextConfig } from "next";
 
 const nextConfig: NextConfig = {
-  typedRoutes: true
+  typedRoutes: true,
 };
 
 export default nextConfig;

apps/web/next.config.ts

@@ -4,7 +4,7 @@
   "scripts": {
     "dev": "next dev",
     "build": "next build",
-    "lint": "eslint src next.config.ts vitest.config.mts eslint.config.mjs --max-warnings=0",
+    "lint": "biome check src next.config.ts vitest.config.mts",
     "typecheck": "tsc --noEmit",
     "test": "vitest run"
   },
@@ -17,8 +17,6 @@
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
-    "eslint": "^9.22.0",
-    "eslint-config-next": "^15.5.12",
     "@types/node": "^22.10.2",
     "@types/react": "^19.0.2",
     "@types/react-dom": "^19.0.2",

apps/web/package.json

@@ -2,7 +2,9 @@ export default function InboxPage() {
   return (
     <main style={{ padding: "2rem" }}>
       <h1>Inbox Items</h1>
-      <p>Inspect raw messaging payloads, normalized text, and processing status.</p>
+      <p>
+        Inspect raw messaging payloads, normalized text, and processing status.
+      </p>
     </main>
   );
 }

apps/web/src/app/(admin)/inbox/page.tsx

@@ -2,8 +2,9 @@ export default function PlannerRunsPage() {
   return (
     <main style={{ padding: "2rem" }}>
       <h1>Planner Runs</h1>
-      <p>Review model inputs, structured outputs, confidence, and audit trails.</p>
+      <p>
+        Review model inputs, structured outputs, confidence, and audit trails.
+      </p>
     </main>
   );
 }
-

apps/web/src/app/(admin)/planner-runs/page.tsx

@@ -2,8 +2,9 @@ export default function SchedulePage() {
   return (
     <main style={{ padding: "2rem" }}>
       <h1>Schedule Blocks</h1>
-      <p>Inspect current block placement, stale items, and scheduling reasons.</p>
+      <p>
+        Inspect current block placement, stale items, and scheduling reasons.
+      </p>
     </main>
   );
 }
-

apps/web/src/app/(admin)/schedule/page.tsx

@@ -2,8 +2,10 @@ export default function SettingsPage() {
   return (
     <main style={{ padding: "2rem" }}>
       <h1>User Settings</h1>
-      <p>Manage work hours, blackout windows, focus block sizes, and reminder defaults.</p>
+      <p>
+        Manage work hours, blackout windows, focus block sizes, and reminder
+        defaults.
+      </p>
     </main>
   );
 }
-

apps/web/src/app/(admin)/settings/page.tsx

@@ -3,11 +3,11 @@ import { beforeEach, describe, expect, it, vi } from "vitest";
 import { POST } from "./route";
 
 const { reconcileGoogleCalendarConnectionsMock } = vi.hoisted(() => ({
-  reconcileGoogleCalendarConnectionsMock: vi.fn()
+  reconcileGoogleCalendarConnectionsMock: vi.fn(),
 }));
 
 vi.mock("@/lib/server/google-calendar", () => ({
-  reconcileGoogleCalendarConnections: reconcileGoogleCalendarConnectionsMock
+  reconcileGoogleCalendarConnections: reconcileGoogleCalendarConnectionsMock,
 }));
 
 describe("reconcile Google Calendar cron route", () => {
@@ -19,34 +19,36 @@ describe("reconcile Google Calendar cron route", () => {
       reconciledConnections: 0,
       syncedTasks: 0,
       outOfSyncTasks: 0,
-      failedConnections: 0
+      failedConnections: 0,
     });
   });
 
   it("rejects unauthenticated cron requests", async () => {
     process.env.CRON_SECRET = "cron-secret";
 
-    const response = await POST(new Request("http://localhost/api/cron/reconcile-google-calendar"));
+    const response = await POST(
+      new Request("http://localhost/api/cron/reconcile-google-calendar"),
+    );
 
     expect(response.status).toBe(401);
     await expect(response.json()).resolves.toMatchObject({
       accepted: false,
-      error: "invalid_cron_secret"
+      error: "invalid_cron_secret",
     });
     expect(reconcileGoogleCalendarConnectionsMock).not.toHaveBeenCalled();
   });
 
   it("fails closed when the cron secret is not configured", async () => {
     const response = await POST(
       new Request("http://localhost/api/cron/reconcile-google-calendar", {
-        method: "POST"
-      })
+        method: "POST",
+      }),
     );
 
     expect(response.status).toBe(503);
     await expect(response.json()).resolves.toMatchObject({
       accepted: false,
-      error: "cron_secret_not_configured"
+      error: "cron_secret_not_configured",
     });
   });
 
@@ -57,15 +59,15 @@ describe("reconcile Google Calendar cron route", () => {
       new Request("http://localhost/api/cron/reconcile-google-calendar", {
         method: "POST",
         headers: {
-          authorization: "Bearer cron-secret"
-        }
-      })
+          authorization: "Bearer cron-secret",
+        },
+      }),
     );
 
     expect(response.status).toBe(200);
     await expect(response.json()).resolves.toMatchObject({
       accepted: true,
-      reconciledConnections: 0
+      reconciledConnections: 0,
     });
     expect(reconcileGoogleCalendarConnectionsMock).toHaveBeenCalledTimes(1);
   });