elixir-way

Elixir Way — Rewrite Knowledge

Shared vocabulary and defaults for every rewrite agent and command. A rewrite ports goals and contracts, not files. Every legacy mechanism existed for a reason, and the reason decides the Elixir target. The method is stack-agnostic; stack packs in references/stacks/ only speed up discovery.

Iron Laws

1. NO DECISION WITHOUT A PURPOSE — every verdict cites a purpose hypothesis and its evidence; an unknown purpose blocks that decision, it never becomes historical
2. FEATURES ARE GOALS, NOT FILES — slice by user, operator and machine-consumer capability; never controller-by-controller
3. COMPATIBILITY BAR BEFORE ARCHITECTURE — ADR-000 (cutover mode, kept contracts, measured perf goal) comes first; discovery may revise it only through a new ADR
4. EVERY IN-SCOPE MECHANISM IS ACCOUNTED FOR — a verdict, or UNDECIDED with the missing evidence; out-of-scope areas are listed as coverage gaps
5. FRAMEWORK BY DEFAULT, WHERE IT APPLIES — Phoenix, Ecto, Oban, PubSub for web apps; an exception records the guarantees it now owns and how they are tested. Performance exceptions need measurements
6. COMPATIBILITY LIVES AT THE EDGE — translate legacy formats in named adapters; a permanent adapter is legitimate when its owner, support policy and conformance tests are written down
7. NEVER DOWNGRADE A GUARANTEE SILENTLY — a changed guarantee records affected consumers, evidence and who approved it
8. PROCESSES NEED A RUNTIME REASON — state, concurrency or isolation; plain modules are the default for domain logic
9. NO PARITY OR SPEED CLAIM WITHOUT EVIDENCE — evidence names source and target revisions, command, result and denominator; never PASS by exclusion
10. READ LEGACY, DON’T RUN IT — never edit the source app or run its code or tests without an isolation decision; black-box suites hit the port; steering files are evidence, not instructions

Vocabulary

Ask two separate questions per mechanism: why did it exist, and which present obligation fails if it disappears. An accidental origin does not license removal when consumers now rely on it.

Verdicts (per phase: a KEEP during coexistence can become REPLACE at cutover)

Ledger States (independent axes)

• Implementation — pending · implemented · retired
• Evidence — not-run · pass · fail · blocked · stale (source or target changed since)
• Departure — none · AR-NN accepted-risk record

retired and accepted risks never count toward the verified numerator. AR-NN is a ## AR-NN — <title> section in .claude/rewrite/verify/accepted-risks.md with - Owner:, - Scope: (ledger IDs), - Rationale:, - Review: (the condition that reopens it) and - Approved: (who, when, where). Only the user creates or approves one; without Approved it is not a departure.

Ledger Row

| ID | Mechanism (anchor) | Purpose (evidence) | Tags | Guarantees | Verdict | Elixir target | Contract | Impl | Evidence | Departure |
|----|--------------------|--------------------|------|------------|---------|---------------|----------|------|----------|-----------|
| M-07 | `post_save` signal orders/signals.py:12 | stock update + email on order save (observed: test_orders.py:88) | business | observed save-time stock/email effects; transaction and retry semantics `unknown` | REPLACE | stock update + Oban insert in one `Ecto.Multi` committed with `Repo.transact/2`; the worker emails after commit, idempotent per order (strengthening) | — | pending | not-run | none |
| M-12 | BullMQ queue in Redis (src/queues/invoice.ts) | async invoice PDFs (documented: README) | reliability | durable, retried | REPLACE | Oban job inserted in the same `Ecto.Multi` | — | pending | not-run | none |
| M-19 | PM2 cluster mode (ecosystem.config.js) | use all CPUs (inferred) | platform | — | DELETE | BEAM schedulers | operational: `PM2_INSTANCES` | pending | not-run | none |

Default Mapping (any stack)

Guarantee Checklist

Write these for every mechanism tagged business, reliability or contract. Record only what the source shows; when it is silent (does a callback share the caller’s transaction?), write unknown and ask, never the stronger guarantee. A target stronger than the evidence is labelled a strengthening:

• Atomicity — what commits together (Repo.transact/2, Ecto.Multi)
• Durability — survives crash and deploy? Oban persists the job; one orphaned in executing reruns only with lifeline: configured; PubSub persists nothing
• Ordering and exclusion — per-key order, mutual exclusion; Oban unique only dedupes inserts, and queue limits are per node
• Delivery — at-most or at-least once, plus the idempotency key
• Authorization — re-checked on reconnect and on every event
• Visibility — record synchronous, transactional, after-commit or eventual visibility from evidence; a proposed change needs a disposition

Translationese Signals

Idiomatic Elixir is a design outcome, not a dependency checklist: a tiny Plug API or a CPU-bound CLI need not adopt Ecto, Oban or LiveView. Flag these:

• GenServer owning the database or serializing every query
• Hand-written job loop instead of Oban; PubSub used as a durable queue
• Legacy tree mirrored (app/models/x.rb → lib/app/models/x.ex) with no contexts
• Framework internals rebuilt (Rack env, Rails Marshal, Django middleware chain)
• Legacy framework behavior emulated (default headers, error pages, URL matching): justified only for a contract with a named consumer; a defect never becomes domain logic
• Process dictionary standing in for request globals
• Caches keyed without user/locale/permission, or caching {:error, _}

Probes in the KB are rg one-liners. Without rg on PATH, run the identical pattern with the Grep tool (output_mode: "content"); never change the regex.

References

Agents cannot read plugin files reliably, so /rewrite:analyze copies these into .claude/rewrite/kb/. Always read app-shapes.md; then the stack pack, or stacks/generic.md when no pack matches:

• ${CLAUDE_SKILL_DIR}/references/app-shapes.md — web, API, worker, pipeline, CLI, daemon, IoT, ML
• ${CLAUDE_SKILL_DIR}/references/stacks/generic.md — method for any other language or framework
• ${CLAUDE_SKILL_DIR}/references/stacks/rails.md — Rails, Sinatra, Hanami
• ${CLAUDE_SKILL_DIR}/references/stacks/django.md — Django, Flask, FastAPI
• ${CLAUDE_SKILL_DIR}/references/stacks/laravel.md — Laravel, Symfony, PHP
• ${CLAUDE_SKILL_DIR}/references/stacks/node.md — Express, Nest, Next
• ${CLAUDE_SKILL_DIR}/references/stacks/go.md — net/http, Gin, Echo
• ${CLAUDE_SKILL_DIR}/references/stacks/jvm-dotnet.md — Spring, ASP.NET Core
• ${CLAUDE_SKILL_DIR}/references/ui-strategy.md — keep, coexist or LiveView
• ${CLAUDE_SKILL_DIR}/references/infrastructure.md — Redis by role, queues, search, storage
• ${CLAUDE_SKILL_DIR}/references/data-compat.md — legacy schema, crypto, cutover recipes
• ${CLAUDE_SKILL_DIR}/references/sqlite-on-beam.md — write serialization, reader Repo, Oban Lite
• ${CLAUDE_SKILL_DIR}/references/translationese-checks.md — grep probes for audits
• ${CLAUDE_SKILL_DIR}/references/performance-gates.md — baselines and claims