git:20261018.17e96a6 to git:20261020.506ff63

5 added, 10 removed. Audit A to A.

# AGENTS.md

This repo is a personal career log (a Log, with its Engine; see [GLOSSARY.md](GLOSSARY.md)), managed through the `career-log` skill in `skills/career-log/`. Read `skills/career-log/SKILL.md`, the skill entry point (the modes are in `skills/career-log/modes/`), before creating or editing anything here; its rules (provenance, attribution, gaps) apply to every file.

Tool names in the skill (subagents, `Explore`, the PowerShell tool) are Claude Code's; use your agent's equivalent, or do the work inline.

Edit the skill here, in the repo, so changes are versioned.

## Machines

The log may be cloned on more than one machine (macOS, Windows, Linux). Per-machine setup (git identity, skill link, LaTeX toolchain) is in [SETUP.md](SETUP.md); the cross-platform rules for commands are in [SKILL.md › Platforms](skills/career-log/SKILL.md#platforms).

## Changes

- Log data (entries, profile, direction, applications, outputs, sources) is committed as [SKILL.md › Commits](skills/career-log/SKILL.md) says. Engine changes change how the agent behaves: every path in the `ALLOW` list of `tools/export-template.sh` (the skill, the tools and the Template skeleton in `tools/template/`, `SETUP.md`, this file and `CLAUDE.md`, `GLOSSARY.md`, `docs/adr/`, `docs/social-preview/`, `.gitignore`, `.gitattributes`, `entries/_template.md`), plus `.export-allow`. They never go straight to the default branch: work on a branch in a worktree (under `.worktrees/`, or where the agent's tooling puts them) started from the default branch, as for data branches (`worktree add --no-track … origin/<default>`, [SKILL.md › Commits](skills/career-log/SKILL.md)), open an issue describing the change, then a pull request with `Closes #<issue>`, and merge only when the user says so. Without `gh` or a GitHub remote, show the user the branch's diff instead, and merge it locally with `git merge --no-ff` only on their yes. Two guard files are exceptions: the names the `import` and `log` modes append to `.export-deny`, and the `sources/inbox/` lines that import-chats step 1 restores to `.gitignore`. Both go straight to the default branch at once, even during a bulk data session, because they protect the main checkout and every export made from it. A session that does both commits the data and the Engine change separately, each its own way. To take back an Engine commit that went straight to the default branch, revert it there and re-land it through a pull request; never rewrite the published history.

+ Log data (entries, profile, direction, applications, outputs, sources) is committed as [SKILL.md › Commits](skills/career-log/SKILL.md) says. Engine changes change how the agent behaves: every path in the `ALLOW` list of `tools/export-template.sh` (the skill, the tools and the Template skeleton in `tools/template/`, `SETUP.md`, this file and `CLAUDE.md`, `GLOSSARY.md`, `docs/adr/`, `docs/social-preview/`, `.gitignore`, `.gitattributes`, `entries/_template.md`).

- ## Sharing

+ Engine changes never go straight to the default branch: work on a branch in a worktree (under `.worktrees/`, or where the agent's tooling puts them) started from the default branch, as for data branches (`worktree add --no-track … origin/<default>`, [SKILL.md › Commits](skills/career-log/SKILL.md)), open an issue describing the change, then commit and push the branch as often as the work needs: the push backs the work up and lets another machine see it. Open the pull request, with `Closes #<issue>`, only once the change is finished: the issue's fix is done and the local checks the change touches have run (an export to a scratch directory with `tools/export-template.sh` after any Engine change, `tools/tests/test_chat_export.py` after a change to the parser or its tests), so the user reviews one finished diff. Once it is open, gather the fixes from a review and push them together, not one push per fix. Merge only when the user says so. Without `gh` or a GitHub remote, show the user the branch's diff instead, and merge it locally with `git merge --no-ff` only on their yes. Two guard files are exceptions: the names the `import` and `log` modes append to `.export-deny`, and the `sources/inbox/` lines that import-chats step 1 restores to `.gitignore`. Both go straight to the default branch at once, even during a bulk data session, because they protect the main checkout and every export made from it. A session that does both commits the data and the Engine change separately, each its own way. To take back an Engine commit that went straight to the default branch, revert it there and re-land it through a pull request; never rewrite the published history.

- `tools/export-template.sh <dest>` builds the shareable Template: the Engine (`skills/`, `tools/`, `SETUP.md`, this file and `CLAUDE.md`, `GLOSSARY.md`, `docs/adr/`, `docs/social-preview/social-preview.svg`) plus the empty Log skeleton in `tools/template/`. Keep every Engine file free of personal content: no names, employers, projects, dates or quotes from this Log. Those belong in the Log files (`direction.md`, entries). It exports committed content only, so commit before exporting, and, here (where `.export-allow` exists), writes the exported commit to `tools/TEMPLATE_VERSION`: a repo made with "Use this template" has no history, so that file is how its owner names their Template version when reporting upstream. It scans file names and contents for the patterns in `.export-deny` and fails on a hit; the `import` and `log` modes append new employer and project names, and the export refuses an empty list. Strings listed in `.export-allow` (fixed text, one per line, not exported) are masked before the content scan: the Template's own upstream URL is the only one, because it contains the author's handle.

+ ## Sharing

- The Template's front page comes in two languages: `tools/template/README.md` (English) and `tools/template/README.zh-TW.md` (Traditional Chinese, a full translation). A change to one must be made in the other in the same commit, except Entries-table rows, which live only in the English `README.md`.

+ `tools/export-template.sh <dest>` builds the shareable Template: the Engine (`skills/`, `tools/`, `SETUP.md`, this file and `CLAUDE.md`, `GLOSSARY.md`, `docs/adr/`, `docs/social-preview/social-preview.svg`) plus the empty Log skeleton in `tools/template/`. Keep every Engine file free of personal content: no names, employers, projects, dates or quotes from this Log. Those belong in the Log files (`direction.md`, entries). It exports committed content only, so commit before exporting. It scans file names and contents for the patterns in `.export-deny` and fails on a hit; the `import` and `log` modes append new employer and project names, and the export refuses an empty list.

- The public Template is https://github.com/mileschintw/career-log-template. Its GitHub issue form lives in `tools/template/.github/`, so it reaches the public repo through the skeleton overlay. Only the Template's own source repo (the one with an `.export-allow` file) has CI, in its `.github/workflows/`, which the export leaves out: `template-scan.yml` runs `tools/export-template.sh` on every pull request that touches an Engine path, and `parser-tests.yml` runs `tools/tests/test_chat_export.py` on Ubuntu with Python 3.9 (standing in for macOS's `python3`) and on Windows when the parser or its tests change. A newer push to the same pull request cancels the older run. Log data commits never trigger them. A failure is reported on the pull request; read it before asking the user to merge. A Log made from the Template has no CI: there, after a change to `tools/chat_export.py` or `tools/tests/`, run `python3 -I tools/tests/test_chat_export.py` yourself and report the result before asking the user to merge. For the Template's maintainer, publishing works like this:

- 1. Commit here, then `tools/export-template.sh <scratch>/export`.

- 2. Clone the public repo to `<scratch>/tpl`, delete everything in it except `.git`, copy in `<scratch>/export/.`, and `git add -A`.

- 3. Review `git diff --cached`: only Engine and skeleton changes, nothing from the Log.

- 4. Commit as `Update Template: <summary>`, with a body naming the source (`Exported from career-log <sha>`), and push to `main` once the user says yes.

+ A Log made from the Template has no CI: after an Engine change, run the checks [SETUP.md](SETUP.md) step 7 lists for what changed, and report their results before asking the user to merge.

- To take an upstream pull request back: the Engine paths are the same in both repos, so in this repo run `gh pr diff <N> -R mileschintw/career-log-template | git apply`, review it and run the checks it touches, commit and push here, then publish as above. Merging the PR on GitHub only changes the public snapshot: this repo stays the source, and the next publish would overwrite an unported change.