build-dashclaw

# Build DashClaw Guide for contributing to the DashClaw codebase. Covers architecture, adding new capabilities, testing, and CI. ## Architecture Overview DashClaw is organized into 3 tiers: ### Tier 1: Core Runtime (`app/api/`) 7 mandatory endpoints that define DashClaw's governance category: | Route | Method | Purpose | |-------|--------|---------| | `/api/guard` | POST | Policy evaluation — "can I do this?" | | `/api/actions` | POST, PATCH, GET | Action lifecycle recording | | `/api/approvals` | POST | Human approval decisions | | `/api/assumptions` | POST, GET | Reasoning integrity tracking | | `/api/signals` | GET | Real-time anomaly detection | | `/api/policies` | GET, POST | Guard policy management | | `/api/health` | GET | System readiness | **The 7-route boundary is CI-enforced.** Adding a new core route requires justification. ### Tier 2: Extensions (`app/(extensions)/`) Modular operational intelligence: - Compliance, Drift, Evaluations, Scoring, Prompts, Webhooks, Learning ### Tier 3: Archived (`app/api/_archive/`) Legacy features from the "Agent Platform" era. Physically isolated. ## Tech Stack | Layer | Technology | |-------|------------| | Runtime | Node.js 20+ | | Framework | Next.js 16 (App Router) | | Database | Postgres (Neon recommended) | | ORM | Drizzle ORM | | Auth | NextAuth.js v4 | | UI | React 18, Tailwind CSS 3 | | Testing | Vitest + jsdom | | Package Manager | npm | ## Key Conventions ### TEXT Primary Keys All IDs are TEXT with crypto-ran...