refactor(rules): move loading map to global instructions

This commit is contained in:
fraujulian committed 2026-09-24 18:48:17 +02:00
1 parent a50575dbec
commit aeec4d351c
14 files changed
+113 -192

No files matched your search

+25 -1
View File
@@ -6,7 +6,31 @@ Before applying generated instructions, read `~/.my-ai-configuration/instruction
For a tool credential, invoke `~/.my-ai-configuration/bin/with-credential.__SHELL__` with the client, credential key, and child command. It exposes the credential only to that child process. Never print credentials or place them in commands.
__RULE_LOADING__
When programming, always apply the security baseline: `rules/security.md` / `rules-security` (Codex file / Claude skill). This applies to implementing, modifying, debugging, reviewing, testing, and configuring software, scripts, hooks, infrastructure, and integrations.
Detect languages, frameworks, tools, and change areas from the repository and requested work. Apply every matching rule before editing. For Codex, read the listed rule file. For Claude, invoke the matching `rules-*` skill. Apply all matching rules when multiple areas apply.
Load or invoke rules for these areas:
- Angular component, template, or RxJS/signal work: `rules/angular/index.md` / `rules-angular`.
- C# or .NET implementation, review, or refactoring: `rules/csharp.md` / `rules-csharp`.
- Unresolved requirements, ambiguous behavior, or meaningful technical choices: `rules/decision-rule.md` / `rules-decision-rule`.
- Validating completion or review readiness: `rules/definition-of-done.md` / `rules-definition-of-done`.
- Git operations such as commits, branches, or merges: `rules/git.md` / `rules-git`.
- Microsoft 365, Azure DevOps, or Teams operations: `rules/microsoft.md` / `rules-microsoft`.
- Delegation, subagents, or long-running task state: `rules/orchestration.md` / `rules-orchestration`.
- Refactoring without behavior changes: `rules/refactoring.md` / `rules-refactoring`.
- Authentication, authorization, sessions, tokens, permissions, or tenant boundaries: `rules/security-auth.md` / `rules-security-auth`.
- HTTP APIs, request handling, serialization, or endpoints: `rules/security-api.md` / `rules-security-api`.
- Browser, frontend, cookies, redirects, XSS, or CSRF: `rules/security-web.md` / `rules-security-web`.
- Databases, queries, persistence, sensitive data, or tenant boundaries: `rules/security-data.md` / `rules-security-data`.
- Files, uploads, archives, paths, processes, IPC, or deserialization: `rules/security-files.md` / `rules-security-files`.
- Network access, URLs, proxies, outbound requests, TLS, or SSRF: `rules/security-network.md` / `rules-security-network`.
- Cryptography, secrets, credentials, keys, or tokens: `rules/security-crypto.md` / `rules-security-crypto`.
- Dependencies, packages, plugins, builds, deployments, or CI supply chains: `rules/security-supply-chain.md` / `rules-security-supply-chain`.
- TypeScript or modern ECMAScript implementation: `rules/typescript.md` / `rules-typescript`.
- UI or UX design and interaction: `rules/ui-ux/index.md` / `rules-ui-ux`.
- WPF, XAML, or MVVM desktop UI: `rules/wpf/index.md` / `rules-wpf`.
Use the `mcporter` CLI for MCP services by default. Use a native MCP connection when MCPorter is not active, or when the user explicitly requests it or selects a native MCP plugin in this configuration. If the requested route is unavailable, report the limitation instead of silently switching routes.