AGENTS.md · diff

git:20260406.d49efa6 to git:20261010.e8f4ed2

1 added, 0 removed. Audit A to A.

# AGENTS.md
## Refactoring Authority
This repository explicitly allows aggressive refactoring when it improves the design.
- Large-scale refactors, full rewrites, file moves, and architectural cleanup are allowed.
- Backward compatibility is not required unless a task explicitly asks for it.
- Prefer the cleanest end-state over incremental compatibility layers.
- Remove obsolete code paths instead of preserving them out of habit.
## Default Engineering Bias
- Optimize for clarity, fewer layers, and stronger core abstractions.
- If the current shape is fighting the design, rewrite it instead of patching around it.
- Keep migration logic only when there is a real user or release requirement.
## Trust Levels
`qq.yaml` supports a separate `trust_level` knob:
- `trusted`: current internal-team default
- `balanced`: only widen Codex into the source worktree for closeout-like flows
- `strict`: require explicit `--allow-source-worktree` and keep raw engine commands off the standard MCP surface
When touching host wrappers or MCP exposure, preserve this split:
- `work_mode` = task stage
- `policy_profile` = verification floor
- `trust_level` = automatic permission boundary
+ - `workflow` = how heavy the process is: `heavy-review` (Heavy Review, default) or `prototype-loop` (Prototype Loop, rules in `shared/prototype-loop.md`; drops the `review_gate` hook unless `hooks.enable` names it). It is not `work_mode: prototype`, which skips design and plan.
> Historical note: earlier versions had a "Context Capsule" consumption mechanism that the `balanced` level disabled. Context Capsule was removed in v1.10.0 — the trust-level split above reflects the current shape.
## Execution Environment Split
When developing this repository, treat execution environments as a hard split:
- Use **worktrees** to isolate tasks.
- Use **Docker / Dev Container** for repository-side development:
- `scripts/*.sh`
- `scripts/*.py`
- `README`
- `docs`
- `install.sh`
- `test.sh`
- policy / doctor / controller / runtime-core changes
- Use the **host machine** for engine-specific validation:
- `tykit` and other engine bridges
- engine compile / test routing (Unity, Godot, Unreal, S&box)
- real project install flow
- Editor-backed Claude / Codex E2E
- any check that depends on a live engine Editor
Do not try to force local engine Editor work into Docker.
Default repo-dev loop:
1. Create a dedicated worktree for the task.
2. Use `./scripts/docker-dev.sh build` once if needed.
3. Do repo-side development in `./scripts/docker-dev.sh shell`.
4. Run `./scripts/docker-dev.sh test` for repo-side validation.
5. If the change touches engine behavior (Unity / Godot / Unreal / S&box), switch back to the host and validate against a real project of that engine.
## Parallel Agent Rule
When one person is driving multiple agents at the same time:
- Use **one worktree per agent / feature**.
- It is fine to use **one Docker container session per agent**.
- Multiple agent containers may reuse the **same Docker image**.
- Do **not** let two agents share one worktree, even if they are running in different containers.
Why:
- **worktree** isolation protects files and git state
- **container** isolation protects process and shell state
If two agents mount the same worktree, they can still overwrite each other's files. Docker does not prevent that.
Recommended pattern:
1. Create one worktree per feature.
2. Build the repo-dev image once with `./scripts/docker-dev.sh build`.
3. Let each agent use its own worktree and its own `./scripts/docker-dev.sh shell` session.
4. Let each agent run `./scripts/docker-dev.sh test` in that worktree before handoff or merge.
5. If a task touches a live engine Editor or `tykit`, validate that task on the host machine instead of trying to force it into Docker.