- Communicate with the user in Chinese by default unless the requested artifact needs another language.
- Inspect the current code, configuration, and docs before editing.
- Keep changes small and local; avoid broad refactors unless the task requires them.
- Do not invent test results, benchmark numbers, citations, API behavior, or project status.
- Preserve user work. Do not revert unrelated changes.
- Never commit or print real API keys, tokens, passwords, private endpoints, or personal paths.
- Keep secrets in ignored local files such as
.env.localor.auto-code/local.env. - Treat
.auto-code/, generated sessions, traces, local reports, and temporary prompts as private runtime artifacts. - Use neutral placeholders in public examples, for example
https://api.example.com/v1,C:/example/project, andexample__repo-123.
- This is a TypeScript ESM CLI project.
- Use
npm.cmdin Windows PowerShell examples. - Do not traverse or publish
node_modules/,dist/,prefix/,.auto-code/,.codegraph/,acceptance-evidence/, ordocs/generated/by default. - Keep
README.mdpublic-facing and high level. - Keep public docs free of local paths, internal handoff notes, real provider credentials, and development-session logs.
Use the smallest meaningful check for the touched surface. Common commands:
npm.cmd run check
npm.cmd run build
npm.cmd run verify:demo-mvp-smokeRun broader smoke scripts only when the change touches that behavior.