AGENTS.md · diff

git:20260920.befdae7 to git:20260920.e3b2a14

17 added, 0 removed. Audit A to A.

IMPORTANT: You MUST read ./docs/development.md and ./docs/docs-overview.md for project
documentation. (This project uses Speculate project structure.)
IMPORTANT: Before adding or upgrading any dependency, follow the install rules in
./SUPPLY-CHAIN-SECURITY.md (14-day cool-off, no unthinking installs, audit after each
install). Deeper background: `tbd guidelines supply-chain-hardening`.
## Landing the Plane (Session Completion)
**When ending a work session**, you MUST complete ALL steps below.
Work is NOT complete until `git push` succeeds.
**MANDATORY WORKFLOW:**
1. **File issues for remaining work** - Create issues for anything that needs follow-up
2. **Run quality gates** (if code changed) - Tests, linters, builds
3. **Update issue status** - Close finished work, update in-progress items
4. **PUSH TO REMOTE** - This is MANDATORY:
```bash
git pull --rebase
tbd sync
git push
git status # MUST show "up to date with origin"
```
5. **Clean up** - Clear stashes, prune remote branches
6. **Verify** - All changes committed AND pushed
7. **Hand off** - Provide context for next session
**CRITICAL RULES:**
- Work is NOT complete until `git push` succeeds
- NEVER stop before pushing - that leaves work stranded locally
- NEVER say “ready to push when you are” - YOU must push
- If push fails, resolve and retry until it succeeds
<!-- BEGIN TBD INTEGRATION format=f100 surface=agents-md -->
## tbd
This repository uses **tbd** for git-native issue tracking (beads), spec-driven
planning, and on-demand engineering guidelines.
As the agent, you operate tbd on the user’s behalf: translate their requests into tbd
actions rather than telling them to run commands.
- Run `tbd prime` to load current project state and the full tbd workflow.
- Run `tbd skill` for the complete reusable tbd skill instructions.
- Run `tbd shortcut --list` and `tbd guidelines --list` for on-demand resources.
- Before a GitHub mutation, a merge, or a delegation to sub-agents, check the project’s
policy grants with `tbd policy show`; `tbd guidelines agent-policy-grants` defines
them. A grant is the user’s standing consent; the current conversation overrides it.
- To create or update a pull request, run `tbd shortcut create-or-update-pr-simple`.
Create a stack of dependent PRs with `tbd shortcut stacked-prs` only when
`github-stacked-prs` is granted; otherwise propose separate PRs.
A PR that is already stacked keeps its stack handling either way.
Chained branch bases are not a formal stack.
- Track all work as beads: `tbd create`, `tbd ready`, `tbd start`, `tbd close`, and
`tbd sync`.
- Before editing a bead, pull and re-read it, run `tbd start <id>`, then run `tbd sync`
so other replicas can see the claim.
+ <!-- BEGIN TBD POLICY GRANTS v=1 -->
+ ### Agent Policy Grants
+
+ The user granted these policies explicitly for this project. A user instruction in the
+ current conversation overrides them. For what each policy means, run
+ `tbd guidelines agent-policy-grants`; to change them, run `tbd policy`.
+
+ - `github-workflows`: granted
+ - `github-editing`: granted
+ - `github-merge`: per-request
+ - `github-stacked-prs`: granted
+ - `subagents`: granted
+ - `pr-review-requirements`: standard
+ - `linear`: epics + specs
+
+ Recorded 2026-09-17.
+ <!-- END TBD POLICY GRANTS -->
<!-- END TBD INTEGRATION -->