🇺🇸English

Coding Guidelines

Apply these rules to ensure code quality, maintainability, and adherence to project standards.

Success Criteria

• Before declaring success or celebrating, run npm test. If the tests fail, there is more work to do. Don't stop until npm test passes on the code you have made.

CRITICAL: Placeholder tests don't count as success.

• Tests that just do assert.ok(true) or similar are NOT real tests

• DO NOT mark "Write tests" as complete until tests actually call the program instructions

• DO NOT ask "should I write real tests now?" - if the tests are placeholders, write real ones immediately

• Real tests must: initialize accounts, send transactions, verify state changes, check balances

• If you find yourself writing placeholder tests, stop and write real integration tests instead

• When summarizing your work, show the work items you have achieved with this symbol '✅' and there is more work to do, add a '❌' for each remaining work item.

Documentation Sources

Use these official documentation sources:

• Anchor : https://www.anchor-lang.com/docs
• Anchor Error Codes : https://raw.githubusercontent.com/coral-xyz/anchor/master/lang/src/error.rs
• Solana Kite : https://solanakite.org
• Solana Kit : https://solanakit.com
• Agave (Solana CLI) : https://docs.anza.xyz/ (Anza makes the Solana CLI and Agave.
• Switchboard (if used): https://docs.switchboard.xyz/docs-by-chain/solana-svm
• Arcium (if used): https://docs.arcium.com/developers

Do not use

• Do not use Solana Labs documentation. The company has been replaced by Anza.

• Do not use any documentaton or tools from Project Serum, which collapsed many years ago.

• Do not use yarn. Use npm. Yarn has no reason to exist and only adds unnecessary dependencies. Replace Yarn with npm everywhere you see it.

• Do not use Switchboard Functions - this product is dead and no longer maintained. (Note: Switchboard oracles are still active and usable.)

• Do not use Clockwork - this product is dead. For scheduled instruction handler invocation, use TukTuk instead.

Library versions

Use the latest stable Anchor, Rust, TypeScript, Solana Kit, and Kite you can. If a bug occurs, favor updating rather than rolling back.

Project Documentation

Every project must have a README.md file in the project root that includes:

• Purpose : Why the project exists and what problem it solves
• Major Concepts : Key architectural concepts, important PDAs, state structures, and program logic
• Testing : How to run the tests (e.g., npm test)
• Setup : Any prerequisites or setup steps needed to work with the project
• Usage : Basic usage examples or deployment instructions if applicable

Keep the README focused and practical. Avoid generic boilerplate - write documentation that would actually help someone understand and work with this specific project.

General Coding Guidelines

You are a deletionist

Your golden rule is "perfection isn't achieved when there's nothing more to add, rather perfection is achieved when there is nothing more to be taken away".

Remove:

• Comments that simply repeat what the code is doing, or the name of a variable, and do not add further insight.
• Repeated code that should be turned into a named function

Communication Style

• Do not make disclaimers about being a "complete project" or state what works
• It is expected that work is complete and functional - no need to state this explicitly
• Avoid phrases like "This is a complete implementation" or "All features are working"
• Just deliver the work without meta-commentary about its completeness

Working with Generated or Unfamiliar Code

CRITICAL - Verify Before Use:

• Before calling ANY function whose signature you don't know with certainty, read the actual source code/type definitions first
• NEVER guess or assume what parameters a function accepts based on what seems logical
• Don't invent convenience parameters that don't exist
• Generated code, third-party libraries, and unfamiliar codebases often have different APIs than you expect
• Common mistake: Assuming a function accepts high-level parameters → WRONG. Check the actual signature in the source files first

Code Honesty and Clarity

• It's important not to deceive anyone reading this code. Deception includes:
  • Variable names that do not match the purpose of the variable
  • Comments that no longer describe the code or are otherwise inaccurate
  • Temporary workarounds that aren't labelled as such using a comment (with a TODO letting the next programmer know when they can delete the workaround)

Variable Naming

Ensure good variable naming. Rather than add comments to explain what things are, give them useful names.

Don't do this:

// Foo
const shlerg = getFoo();

Do this instead:

const foo = getFoo();

Naming conventions:

• Arrays should be plurals (shoes), items within arrays should be the singular (shoes.forEach((shoe) => {...}))
• Functions should be verby, like calculateFoo or getBar
• Avoid abbreviations, use full words (e.g., context rather than ctx)
• Never use e for something thrown
• Name a transaction some variant of transaction. Name instructions some variant of instruction. Name signatures some variant of signature. Do not confuse them - eg if the type looks like an instruction, you should not call it a 'transaction' because that is deceptive.

You can still add comments for additional context, just be careful to avoid comments that are explaining things that would be better conveyed by good variable naming.

Code Quality

• Look out for repeated code that should be turned into functions
• Avoid 'magic numbers'. Make numbers either have a good variable name, a comment explaining why they are that value, or a reference to the URL you got the value from. If the values come from an IDL, download the IDL, import it, and make a function that gets the value from the IDL rather than copying the value into the source code

This is a magic number. Don't do this:

const FINALIZE_EVENT_DISCRIMINATOR = new Uint8Array([
  27, 75, 117, 221, 191, 213, 253, 249,
]);

Instead do this:

const FINALIZE_EVENT_DISCRIMINATOR = getEventDiscriminator(
  arciumIdl,
  "FinalizeComputationEvent",
);

• The code you are making is for production. You shouldn't have comments like // In production we'd do this differently or **Implementation incomplete** - Needs program config handling and proper PDA derivations or **WORK IN PROGRESS** in the final code you produce, or functions that return placeholder data. Instead: do the fucking work.
• Don't remove existing comments unless they are no longer useful or accurate
• Delete unused imports, unused constants, unused files and comments that no longer apply

TypeScript Guidelines

These guidelines apply to TypeScript unit tests, browser code, and any other places where TypeScript is used in the project.

General TypeScript

Avoid using a tsconfig.json unless it's needed, as we use tsx to run most typescript and it doesn't usually need one. If you do need a tsconfig.json, state why at the top of the file, and you can use the most modern version of ECMAScript/JavaScript you want - up to say 2023.

Async/await

Favor async/await and try/catch over .then() or .catch() or using callbacks for flow control. tsx has top level await so you don't need to wrap top level await in IIFEs.

Type System

• Always useArray<item>, never use item[] for consistency with other generic syntax like Promise<T>, Map<K, V>, and Set<T>
• Don't useany

Comments

• Most comments should use // and be above (not beside) the code
• The only exception is JSDoc/TSDoc comments which MUST use /* */ syntax

Solana-Specific TypeScript

• Don't make new @solana/web3.js version 1 code. Do not make new code using @coral-xyz/anchor package. Don't replace Solana Kit with web3.js version 1 code. web3.js version 1 is legacy and should be eventually removed. Solana Kit used to be called web3.js version 2. Use Solana Kit, preferably via Solana Kite.
• Use Kite's connection.getPDAAndBump() to turn seeds into PDAs and bumps
• In Solana Kit, you make instructions by making TS clients from IDLs using Codama. You can easily make Codama clients for installed IDLs using

npx create-codama-clients

• Do not use the bs58 npm package.

Don't do this:

import bs58 from "bs58";
const signature = bs58.encode(signatureBytes);

Do this instead:

import { getBase58Decoder } from "@solana/codecs";
const signature = getBase58Decoder().decode(signatureBytes);

Yes, these difference packages have difference concepts of 'encode' and 'decode'.

Unit Tests

• Create unit tests in TS in the tests directory
• Use the Node.js inbuilt test and assertion libraries (then start the tests using tsx instead of ts-mocha)

Unit testing imports:

import { before, describe, test } from "node:test";
import assert from "node:assert";

• Use test rather than it

Thrown object handling

• JavaScript allows arbitrary items - strings, array, numbers etc to be 'thrown'. However you can assume that any non-Error item that is thrown is an programmer error. Handle it like this (including the comment since most TypeScript developers don't know this):

  // In JS it's possible to throw anything. A sensible programmer // will only throw Errors but we must still check to satisfy // TypeScript (and flag any craziness) const ensureError = function (thrownObject: unknown): Error { if (thrownObject instanceof Error) { return thrownObject; } return new Error(Non-Error thrown: ${String(thrownObject)}); };

and

try {
  // some code that might throw
} catch (thrownObject) {
  const error = ensureError(thrownObject);
  throw error;
}

Rust Guidelines (Anchor Programs)

Platform Awareness

• Remember this is Solana not Ethereum.

  • Don't tell me about 'smart contracts' (use 'programs' instead)
  • Don't tell me about 'gas' (use 'transaction fees' instead)
  • There are no 'mempools'. Do not tell me about other things that are not relevant to Solana.

• Token program terminology:

  • Use 'Token Extensions Program' or 'Token extensions' for the newer token program (not 'Token 2022' which is just a code name)
  • Use 'Classic Token Program' for the older token program

• Onchain

  • Use onchain and offchain, like online and offline
  • Don't ever use 'on-chain' or 'off-chain'

Anchor Version

• Write all code like the latest stable Anchor (currently 0.32.1 but there may be a newer version by the time you read this)
• Do not use unnecessary macros that are not needed in the latest stable Anchor

Anchor has silly defaults

Every project will need an IDL.

[features]
idl-build = ["anchor-lang/idl-build", "anchor-spl/idl-build"]

and if it uses SPL Tokens (like almost every Anchor project) it will need this dependency (insert whatever version is applicable):

[dependencies]
anchor-spl = "0.32.1"

Project Structure

• Never modify the program ID in lib.rs or Anchor.toml when making changes
• Create files inside the state folder for whatever state is needed
• Create files inside the instructions or handlers folders (whichever exists) for whatever instruction handlers are needed
• Put Account Constraints in instruction files, but ensure the names end with AccountConstraints rather than just naming them the same thing as the function
• Handlers that are only for the admin should be in a new folder called admin inside whichever parent folder exists (instructions/admin/ or handlers/admin/)

Account Constraints

• Use a newline after each key in the account constraints struct, so the macro and the matching key/value have some space from other macros and their matching key/value

Bumps

• Use context.bumps.foo not context.bumps.get("foo").unwrap() - the latter is outdated

Data Structures

• When making structs ensure strings and Vectors have a max_len attribute
• Vectors have two numbers for max_len: the first is the max length of the vector, the second is the max length of the items in the vector

Space Calculation (CRITICAL - NO MAGIC NUMBERS)

• Do not use magic numbers anywhere. I don't want to see 8 + 32 or whatever
• Do not make constants for the sizes of various data structures
• For space, use syntax like: space = SomeStruct::DISCRIMINATOR.len() + SomeStruct::INIT_SPACE,
• All structs should have #[derive(InitSpace)] added to them, to get the INIT_SPACE trait
• DO NOT use magic numbers

Example:

#[derive(InitSpace)]
#[account]
pub struct UserProfile {
    pub authority: Pubkey,

    #[max_len(50)]
    pub username: String,

    pub bump: u8,
}

#[derive(Accounts)]
pub struct InitializeProfile<'info> {
    #[account(
        init,
        payer = authority,
        space = UserProfile::DISCRIMINATOR.len() + UserProfile::INIT_SPACE,
        seeds = [b"profile", authority.key().as_ref()],
        bump
    )]
    pub profile: Account<'info, UserProfile>,

    #[account(mut)]
    pub authority: Signer<'info>,

    pub system_program: Program<'info, System>,
}

Error Handling

• Return useful error messages
• Write code to handle common errors like insufficient funds, bad values for parameters, and other obvious situations

PDA Management

• Add pub bump: u8 to every struct stored in PDA
• Save the bumps inside each when the struct inside the PDA is created

System Functions

• When you get the time via Clock, use Clock::get()?; rather than anchor_lang::solana_program::clock

Git commits

Do not add "Co-Authored-By: Claude" or similar attribution when creating git commits.

Acknowledgment

• Acknowledge these guidelines have been applied when working on this project to indicate you have read these rules and found that they do apply to this project.

Weekly Installs

91

Repository

quiknode-labs/s…de-skill

GitHub Stars

76

First Seen

Feb 7, 2026

Security Audits

Gen Agent Trust HubPassSocketPassSnykWarn

Installed on

gemini-cli87

opencode87

codex86

github-copilot85

kimi-cli84

amp84