From 222e97eb564a4672a959de98ccba6a9b26f9f527 Mon Sep 17 00:00:00 2001 From: moonrailgun Date: Sun, 19 Jul 2026 19:53:16 +0800 Subject: [PATCH] docs(agents): add secret handling rule --- AGENTS.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/AGENTS.md b/AGENTS.md index d2ca8610..d2aebf15 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -51,12 +51,12 @@ subprojects have distinct build systems even when their source lives here. 6. Add or update focused tests beside the behavior being changed. 7. Run checks proportional to the affected subsystem. 8. Report exact commands, failures, skipped checks, and environment blockers. +9. Never expose passwords, JWT secrets, API tokens, admin credentials, or `.env` contents in source, logs, tests, generated artifacts, or responses. Do not run repository-wide `pnpm lint:fix` by default. It can rewrite files outside the task. Lint or format only files in scope. -Do not edit `node_modules` or generated `dist`/build/coverage/runtime output as -source. Tracked tooling under `client/build` and `client/web/build` is source. +Do not edit `node_modules` or generated `dist`/build/coverage/runtime output as source. Tracked tooling under `client/build` and `client/web/build` is source. ## Toolchains and package ownership