vanilla-rails/skills/vanilla-rails/SKILL.md
Design and review Rails applications using Vanilla Rails philosophy from 37signals/Basecamp. Emphasizes thin controllers, rich domain models, and avoiding unnecessary service layers. Use when analyzing Rails codebases, reviewing PRs, or refactoring toward simpler architecture. Triggers on "service layer", "service object", "thin controller", "rich model", "vanilla rails", "dhh style", "over-engineering", "unnecessary abstraction".
npx skillsauth add iuhoay/skills vanilla-railsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Design and review Rails applications using the Vanilla Rails philosophy from 37signals/Basecamp.
This skill is informed by Fizzy - a production Rails application from 37signals.
Key Fizzy patterns:
@board.update!(board_params), @card.comments.create!(comment_params)include Closeable, Golden, Postponable, Watchablehas_one :closure, has_one :goldnessapp/services/ directoryVanilla Rails embraces Rails's built-in patterns and avoids premature abstraction:
Core Philosophy: Thin controllers that directly invoke a rich domain model. No service layers or other artifacts unless genuinely justified.
┌─────────────────────────────────────────┐
│ CONTROLLERS │
│ (Thin - HTTP concerns only) │
└─────────────────────────────────────────┘
↓
┌─────────────────────────────────────────┐
│ MODELS │
│ (Rich - Business logic lives here) │
└─────────────────────────────────────────┘
↓
┌─────────────────────────────────────────┐
│ ACTIVE RECORD / DATABASE │
└─────────────────────────────────────────┘
Core Rule: Don't add layers beyond what Rails provides unless you have a clear, justified reason.
/vanilla-rails:review for Vanilla Rails architecture review/vanilla-rails:analyze to identify over-engineering/vanilla-rails:simplify [goal] to plan refactoring toward Vanilla Rails| Anti-Pattern | Example | Fix | |--------------|---------|-----| | Fat service | 100-line service with domain logic | Move logic to model | | Anemic model | Model with only attributes and associations | Add business methods | | Controller as orchestrator | Controller calling multiple services | Call rich model methods | | Premature service | Simple CRUD wrapped in service | Use plain Active Record | | Service explosion | DoSomethingService for every action | Most should be model methods |
See Anti-Patterns Reference for complete list.
Services are justified when:
Fizzy uses plain objects for this:
# Multi-step signup with ActiveModel::Model
class Signup
include ActiveModel::Model
validates :email_address, format: { with: URI::MailTo::EMAIL_REGEXP }
validates :full_name, presence: true
def create_identity
@identity = Identity.find_or_create_by!(email_address: email_address)
@identity.send_magic_link(for: :sign_up)
end
def complete
# Complex account creation with rollback handling
end
end
Fizzy uses ActiveRecord models for stateful operations:
# Stateful import with status tracking
class Account::Import < ApplicationRecord
enum :status, %w[ pending processing completed failed ].index_by(&:itself), default: :pending
def process(start: nil, callback: nil)
processing!
# Import logic with ZIP file handling
mark_completed
rescue => e
mark_as_failed
raise e
end
end
Prefer expanded conditionals over guard clauses (unless returning early at method start for non-trivial bodies).
# Bad - Guard clause
def todos_for_new_group
ids = params.require(:todolist)[:todo_ids]
return [] unless ids
@bucket.recordings.todos.find(ids.split(","))
end
# Good - Expanded conditional
def todos_for_new_group
if ids = params.require(:todolist)[:todo_ids]
@bucket.recordings.todos.find(ids.split(","))
else
[]
end
end
class methodspublic methods (with initialize at top)private methodsOrder methods vertically by invocation order to help readers follow code flow.
Model endpoints as REST operations. Don't add custom actions - introduce new resources instead.
# Bad
resources :cards do
post :close
post :reopen
end
# Good
resources :cards do
resource :closure
end
No newline under visibility modifiers; indent content under them.
class SomeClass
def some_method
# ...
end
private
def some_private_method
# ...
end
end
If a module only has private methods, mark private at top with extra newline but don't indent.
Write shallow job classes that delegate to domain models:
_later suffix for methods that enqueue jobs_now suffix for synchronous methods# Fizzy pattern: _later enqueues, _now does the work
module Event::Relaying
extend ActiveSupport::Concern
included do
after_create_commit :relay_later
end
def relay_later
Event::RelayJob.perform_later(self)
end
def relay_now
# actual implementation
end
end
class Event::RelayJob < ApplicationJob
def perform(event)
event.relay_now
end
end
Only use ! for methods with a counterpart without !. Don't use ! to flag destructive actions.
| Pattern | Use When | Reference | |---------|----------|-----------| | Plain Active Record | Simple CRUD, no coordination needed | plain-activerecord.md | | Rich Model API | Complex behavior single model should own | rich-models.md | | Concern | Shared behavior across models, or organizing one rich model | concerns.md | | Delegated Type | "Is-a" relationships with shared identity | delegated-type.md | | Service/Form | Only when genuinely justified | when-to-use-services.md |
Run /vanilla-rails:analyze to detect:
See examples/ directory for before/after comparisons showing the Vanilla Rails approach.
"Vanilla Rails is plenty." - DHH
Most applications don't need layers beyond what Rails provides. Embrace:
ActiveRecord models as the home of business logicResist:
For more depth, read the Vanilla Rails blog post.
development
Configure recommended Rails development dependencies. Checks for essential gems like strong_migrations, herb, bullet, and letter_opener. Provides installation and configuration guidance.
development
Maintainer-only workflow for handling GitHub Secret Scanning alerts on OpenClaw. Use when Codex needs to triage, redact, clean up, and resolve secret leakage found in issue comments, issue bodies, PR comments, or other GitHub content.
development
Maintainer workflow for OpenClaw releases, prereleases, changelog release notes, and publish validation. Use when Codex needs to prepare or verify stable or beta release steps, align version naming, assemble release notes, check release auth requirements, or validate publish-time commands and artifacts.
development
Run, watch, debug, and extend OpenClaw QA testing with qa-lab and qa-channel. Use when Codex needs to execute the repo-backed QA suite, inspect live QA artifacts, debug failing scenarios, add new QA scenarios, or explain the OpenClaw QA workflow. Prefer the live OpenAI lane with regular openai/gpt-5.4 in fast mode; do not use gpt-5.4-pro or gpt-5.4-mini unless the user explicitly overrides that policy.