Fill gaps in shared pattern contracts

- modal-workflows: full state machine, htmx pattern, validation rules
- go-api: REST conventions, URL naming, status codes, error format, list response
- import-export: streaming export 3-layer architecture with Go example
- CLAUDE.template.md: updated to include modals and REST API references

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

kit/ai/claude/CLAUDE.template.md

@@ -1,57 +1,55 @@
 # {{ .project_name }} — Instructions for Claude
 
-Read and follow the project Bible before making any changes:
+## Shared Engineering Rules
+Read `bible/` — shared rules for all projects (CSV, logging, DB, tables, background tasks, code style).
+Start with `bible/kit/patterns/` for specific contracts.
 
-**[`bible/README.md`](bible/README.md)**
-
-The Bible is the single source of truth for architecture, data models, API contracts, and UI
-pattern conventions. Every significant architectural decision must be recorded in the Bible
-decision log before or alongside the code change.
+## Project Architecture
+Read `bible-local/` — project-specific architecture.
+Every architectural decision specific to this project must be recorded in `bible-local/`.
 
 ---
 
-## Shared Engineering Rules
+## Quick Reference (full contracts in `bible/kit/patterns/`)
 
-The following rules apply to ALL changes in this project.
-They are maintained centrally in `tools/ui-design-code/kit/patterns/`.
+### Go Code Style (`go-code-style/contract.md`)
+- Handler → Service → Repository. No SQL in handlers, no HTTP writes in services.
+- Errors: `fmt.Errorf("context: %w", err)`. Never discard with `_`.
+- `gofmt` before every commit.
+- Thresholds and status logic on the server — UI only reflects what server returns.
 
-### Go Code Style
-See [`tools/ui-design-code/kit/patterns/go-code-style/contract.md`](tools/ui-design-code/kit/patterns/go-code-style/contract.md)
-- Handler → Service → Repository layering
-- Error wrapping with `fmt.Errorf("...: %w", err)`
-- Startup sequence: connect DB → migrate → start server
-- Business logic and status thresholds live on the server, not in JS
+### Logging (`go-logging/contract.md`)
+- `slog`, stdout/stderr only. Never `console.log` as substitute for server logging.
+- Always log: startup, task start/finish/error, export row counts, ingest results, any 500.
 
-### Logging
-See [`tools/ui-design-code/kit/patterns/go-logging/contract.md`](tools/ui-design-code/kit/patterns/go-logging/contract.md)
-- Use `slog`, log to binary stdout/stderr only
-- Never use `console.log` as a substitute for server-side logging
-- Always log: startup, background task start/finish/error, export row counts, ingest results
+### Database (`go-database/contract.md`)
+- **CRITICAL**: never run SQL on the same tx while iterating a cursor. Two-phase: read all → close → write.
+- Soft delete via `is_active = false`.
+- Fail-fast DB ping before starting HTTP server.
+- No N+1: use JOINs or batch `WHERE id IN (...)`.
+- GORM: `gorm:"-"` = fully ignored; `gorm:"-:migration"` = skip migration only.
 
-### Database
-See [`tools/ui-design-code/kit/patterns/go-database/contract.md`](tools/ui-design-code/kit/patterns/go-database/contract.md)
-- **CRITICAL**: never execute SQL on the same tx while iterating a cursor — two-phase only
-- Soft delete via `is_active = false`, not physical deletes
-- Fail-fast DB check before starting the HTTP server
-- No N+1 queries: use JOINs or batch `IN` queries
+### REST API (`go-api/contract.md`)
+- Plural nouns: `/api/assets`, `/api/components`.
+- Never `200 OK` for errors — use `422` for validation, `404`, `500`.
+- Error body: `{"error": "message", "fields": {"field": "reason"}}`.
+- List response always includes `total_count`, `page`, `per_page`, `total_pages`.
+- `/health` and `/api/db-status` required in every app.
 
-### Background Tasks
-See [`tools/ui-design-code/kit/patterns/go-background-tasks/contract.md`](tools/ui-design-code/kit/patterns/go-background-tasks/contract.md)
-- All slow operations: POST → task_id → client polls `/api/tasks/:id`
-- No SSE — polling only
-- Return `202 Accepted` when task is created
+### Background Tasks (`go-background-tasks/contract.md`)
+- Slow ops (>300ms): POST → `{task_id}` → client polls `/api/tasks/:id`.
+- No SSE. Polling only. Return `202 Accepted`.
 
-### Tables, Filtering, Pagination
-See [`tools/ui-design-code/kit/patterns/table-management/contract.md`](tools/ui-design-code/kit/patterns/table-management/contract.md)
-- Server-side filtering and pagination only
-- Filter state in URL query params; applying a filter resets to page 1
-- Response must include `total_count`, `page`, `per_page`, `total_pages`
-- Display format: "51–100 из 342"
+### Tables, Filtering, Pagination (`table-management/contract.md`)
+- Server-side only. Filter state in URL params. Filter resets to page 1.
+- Display: "51–100 из 342".
 
-### CSV Export
-See [`tools/ui-design-code/kit/patterns/import-export/contract.md`](tools/ui-design-code/kit/patterns/import-export/contract.md)
-- UTF-8 BOM required (`\xEF\xBB\xBF`)
-- Semicolon delimiter (`;`), not comma
-- Decimal separator: comma (`1 234,56`), not period
-- Dates as `DD.MM.YYYY`
-- `csv.Writer` with `Comma = ';'`
+### Modals (`modal-workflows/contract.md`)
+- States: open → submitting → success | error.
+- Destructive actions require confirmation modal naming the target.
+- Never close on error. Use `422` for validation errors in htmx flows.
+
+### CSV Export (`import-export/contract.md`)
+- BOM: `\xEF\xBB\xBF`. Delimiter: `;`. Decimal: `,` (`1 234,56`). Dates: `DD.MM.YYYY`.
+- Stream via callback — never load all rows into memory.
+- Always call `w.Flush()` after the loop.