- Use pnpm:
pnpm install,pnpm test,pnpm run build,pnpm run smoke
- Never run
git pushwithout explicit user confirmation in the same turn. - Treat
git push origin main, tag pushes, and--force/--force-with-leasepushes as requiring confirmation. - If a push would expose private hostnames, URLs, tokens, or deployment details, stop and ask first.
- AI commits MUST include:
Co-Authored-By: (the agent model's name and attribution byline)
- Runtime target is Node 24: keep Docker, GitHub Actions,
engines, and@types/nodealigned. - Release images are published from
v*.*.*tags by the Release workflow. - Use
pnpm run smokebefore release tags.
- Use
docs-sshskill for project filesystem and SSH workflow. Seeplugins/docs-ssh/skills/docs-ssh/SKILL.md.