From cbb2c377fe4d9772d1494454bfbddaccfff5ec02 Mon Sep 17 00:00:00 2001 From: Chance Kim Date: Wed, 29 Apr 2026 14:06:29 -0700 Subject: [PATCH 1/3] chore: add AGENTS.md coding-agent guidance --- AGENTS.md | 32 ++++++++++++++++++++++++++++++++ 1 file changed, 32 insertions(+) create mode 100644 AGENTS.md diff --git a/AGENTS.md b/AGENTS.md new file mode 100644 index 0000000..5bd0b35 --- /dev/null +++ b/AGENTS.md @@ -0,0 +1,32 @@ +# AGENTS.md + +This file is the source of truth for coding-agent instructions in this repository. + +## General Agent Guidance + +- Follow existing repository instructions first. +- Preserve existing `AGENTS.md`, `CLAUDE.md`, README, CI, release, and owner guidance. +- Do not overwrite repository-specific conventions with generic defaults. + +## Safety Rules + +- Do not make destructive or irreversible changes without explicit approval. +- Do not bypass branch protection, required checks, required reviewers, scanners, or tests. +- Do not force-push to protected branches or someone else's branch. +- Do not commit secrets, tokens, credentials, customer data, or private keys. +- Do not weaken authentication, authorization, IAM/RBAC, TLS, crypto, network exposure, or data-access controls without explicit approval. +- Do not disable TLS verification except in clearly dev-only code with a written rationale. +- Do not log secrets, auth headers, cookies, payment data, or customer PII. +- Use synthetic test data; do not add real customer data to tests, fixtures, or seed files. + +## Review And Escalation + +Stop and ask before changing: + +- production data, infra, deploy, or config +- secrets, auth, IAM, network exposure, or crypto +- public APIs or compatibility-sensitive behavior +- dependency/security scanner configuration +- anything destructive or hard to roll back + + \ No newline at end of file From 71b12e0bc4267f9749cc69c15ded004dcfaf22e9 Mon Sep 17 00:00:00 2001 From: Chance Kim Date: Wed, 29 Apr 2026 14:06:31 -0700 Subject: [PATCH 2/3] chore: add CLAUDE.md with reference to AGENTS.md --- CLAUDE.md | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 CLAUDE.md diff --git a/CLAUDE.md b/CLAUDE.md new file mode 100644 index 0000000..68e6a95 --- /dev/null +++ b/CLAUDE.md @@ -0,0 +1,3 @@ +# CLAUDE.md + +Read [AGENTS.md](AGENTS.md) for coding-agent instructions in this repository. From 45ec7f286cb72e460f6ac02f670959e949f90a01 Mon Sep 17 00:00:00 2001 From: jinku Date: Fri, 17 Jul 2026 02:59:00 -0700 Subject: [PATCH 3/3] docs: make agent guidance repository-specific --- AGENTS.md | 37 ++++++------------------------------- CLAUDE.md | 4 +--- 2 files changed, 7 insertions(+), 34 deletions(-) diff --git a/AGENTS.md b/AGENTS.md index 5bd0b35..487f624 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -1,32 +1,7 @@ -# AGENTS.md +# Repository guidance -This file is the source of truth for coding-agent instructions in this repository. - -## General Agent Guidance - -- Follow existing repository instructions first. -- Preserve existing `AGENTS.md`, `CLAUDE.md`, README, CI, release, and owner guidance. -- Do not overwrite repository-specific conventions with generic defaults. - -## Safety Rules - -- Do not make destructive or irreversible changes without explicit approval. -- Do not bypass branch protection, required checks, required reviewers, scanners, or tests. -- Do not force-push to protected branches or someone else's branch. -- Do not commit secrets, tokens, credentials, customer data, or private keys. -- Do not weaken authentication, authorization, IAM/RBAC, TLS, crypto, network exposure, or data-access controls without explicit approval. -- Do not disable TLS verification except in clearly dev-only code with a written rationale. -- Do not log secrets, auth headers, cookies, payment data, or customer PII. -- Use synthetic test data; do not add real customer data to tests, fixtures, or seed files. - -## Review And Escalation - -Stop and ask before changing: - -- production data, infra, deploy, or config -- secrets, auth, IAM, network exposure, or crypto -- public APIs or compatibility-sensitive behavior -- dependency/security scanner configuration -- anything destructive or hard to roll back - - \ No newline at end of file +- This is a Node.js 18+ ESM Codex plugin. Keep behavior portable across macOS, Linux, and native Windows. +- Fix shared behavior at the earliest common boundary, usually in `scripts/lib/`; do not add caller-specific workarounds. +- When changing a skill or runtime contract, keep `skills/`, `internal-skills/`, `scripts/`, and the matching tests in sync. +- Run `npm run check` before merging. +- For releases, update `CHANGELOG.md` and keep `package.json` and `.codex-plugin/plugin.json` versions synchronized. diff --git a/CLAUDE.md b/CLAUDE.md index 68e6a95..43c994c 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -1,3 +1 @@ -# CLAUDE.md - -Read [AGENTS.md](AGENTS.md) for coding-agent instructions in this repository. +@AGENTS.md