* chore(utils): migrate to shared random/ID utilities and add enforcement linting - Replace all Math.random(), crypto.randomUUID(), crypto.randomBytes(), nanoid, and uuid usages with shared @sim/utils/random and @sim/utils/id helpers across 72 files - Add new @sim/utils exports: deepClone, omit, filterUndefined (object), truncate (string), backoffWithJitter, parseRetryAfter (retry), getErrorMessage (errors) - Sweep all getErrorMessage, sleep, deepClone callsites across 500+ files to use shared utilities - Add Biome noRestrictedImports rule to catch nanoid, uuid, and crypto named imports at lint time - Add scripts/check-utils-enforcement.ts to catch Math.random and crypto.* global property access - Add check:utils script to package.json * chore(utils): replace deepClone wrapper with structuredClone built-in deepClone() was a one-line wrapper around structuredClone(), which is universally available in Node 17+ and all modern browsers. Removing the abstraction reduces indirection and means contributors don't need to learn a project-specific name for a well-known built-in. - Remove deepClone from packages/utils/src/object.ts and index.ts - Replace all 17 call sites with structuredClone() directly - Update check:utils script suggestion text - Update CLAUDE.md and global.md docs * fix(utils): add missing biome noRestrictedImports rule and correct truncate docs - Add noRestrictedImports to biome.json under style — bans nanoid and uuid package imports at lint time (crypto.randomUUID/randomBytes are caught by the check:utils grep script which handles global property access) - Correct truncate() TSDoc and parameter name: sliceLength makes it clear that total output length is sliceLength + suffix.length, matching the behavior all callers were already written to expect * fix(utils): add missing getErrorMessage imports at 4 call sites The sweep agents added getErrorMessage calls without the corresponding import in 4 files, causing test failures. Added the missing imports. * fix(utils): fix build errors from getErrorMessage sweep and retry.ts Turbopack issue - Fix retry.ts cross-file import: Turbopack cannot resolve './random.js' for internal package imports; inline the jitter crypto call directly - Add missing getErrorMessage imports to 32 files where the sweep added calls without the corresponding import (caught by type-check and test runs) - Remove accidental getErrorMessage import from crowdstrike/query/route.ts which has its own domain-specific getErrorMessage for parsing CrowdStrike's JSON error format - Fix use-sub-block-value.ts type error from structuredClone narrowing: add 'as T' cast at emitValue callsite (safe — valueCopy is always a structural copy of newValue) * fix(tools): use toError in crowdstrike catch block instead of local getErrorMessage The catch block was calling the local getErrorMessage function which parses CrowdStrike API JSON responses, not JavaScript Error objects. Use toError(error).message to correctly extract the message from a caught value in this context.
3.1 KiB
Global Standards
Logging
Import createLogger from @sim/logger. Use logger.info, logger.warn, logger.error instead of console.log. Inside API routes wrapped with withRouteHandler, loggers automatically include the request ID.
API Route Handlers
All API route handlers must be wrapped with withRouteHandler from @/lib/core/utils/with-route-handler. Never export a bare async function GET/POST/... — always use export const METHOD = withRouteHandler(...).
Comments
Use TSDoc for documentation. No ==== separators. No non-TSDoc comments.
Styling
Never update global styles. Keep all styling local to components.
ID Generation
Never use crypto.randomUUID(), nanoid, or the uuid package directly. Use the utilities from @sim/utils/id:
generateId()— UUID v4, use by defaultgenerateShortId(size?)— short URL-safe ID (default 21 chars), for compact identifiers
Both use crypto.getRandomValues() under the hood and work in all contexts including non-secure (HTTP) browsers.
// ✗ Bad
import { nanoid } from 'nanoid'
import { v4 as uuidv4 } from 'uuid'
const id = crypto.randomUUID()
// ✓ Good
import { generateId, generateShortId } from '@sim/utils/id'
const uuid = generateId()
const shortId = generateShortId()
const tiny = generateShortId(8)
Common Utilities
Use shared helpers from @sim/utils instead of writing inline implementations:
sleep(ms)from@sim/utils/helpers— async delay. Never writenew Promise(resolve => setTimeout(resolve, ms))toError(value)from@sim/utils/errors— normalize unknown caught values toError. Never writee instanceof Error ? e : new Error(String(e))getErrorMessage(value, fallback?)from@sim/utils/errors— extract error message string. Never writee instanceof Error ? e.message : 'fallback'structuredClone(value)— built-in deep clone, no import needed. Never writeJSON.parse(JSON.stringify(obj))omit(obj, keys)from@sim/utils/object— remove keys from objectfilterUndefined(obj)from@sim/utils/object— strip undefined-valued keys. Never writeObject.fromEntries(Object.entries(obj).filter(([, v]) => v !== undefined))truncate(str, maxLength, suffix?)from@sim/utils/string— safe string truncation with ellipsisbackoffWithJitter(attempt, retryAfterMs, options?)from@sim/utils/retry— exponential backoff with jitterparseRetryAfter(header)from@sim/utils/retry— parse HTTPRetry-Afterheader to milliseconds
// ✗ Bad
await new Promise(resolve => setTimeout(resolve, 1000))
const msg = error instanceof Error ? error.message : 'Unknown error'
const clone = JSON.parse(JSON.stringify(obj))
const filtered = Object.fromEntries(Object.entries(obj).filter(([, v]) => v !== undefined))
// ✓ Good
import { sleep } from '@sim/utils/helpers'
import { getErrorMessage, toError } from '@sim/utils/errors'
import { filterUndefined } from '@sim/utils/object'
await sleep(1000)
const msg = getErrorMessage(error, 'Unknown error')
const clone = structuredClone(obj)
const filtered = filterUndefined(obj)
Package Manager
Use bun and bunx, not npm and npx.