AGENTS.md

1# Repository Conventions
2 
3Conventions for human contributors and AI agents working on this component.
4 
5## Style
6 
7- Terse technical prose. No emojis in commits, issues, PR comments, or code.
8- TypeScript strict mode. No `any`, no `@ts-ignore`, no `@ts-expect-error`, no enums.
9- ESM modules with `.js` suffix in runtime import paths.
10- Tabs for indentation. Double quotes for strings.
11- Tests use vitest with `#given .. #when .. #then` descriptions or plain `// given / // when / // then` body comments.
12 
13## Commands
14 
15- `npm install` - install dependencies.
16- `npm test` - run vitest once.
17- `npm run typecheck` - strict TypeScript check.
18- `npm run check` - type check, biome, and build.
19- `npm run build` - emit `dist/`.
20- `node dist/cli.js hook session-start < fixture.json` - smoke-test the SessionStart hook.
21 
22## Constraints
23 
24- No Bun APIs. Runtime is Node only because Codex launches plugin hooks with Node.
25- The single hook handler is `runSessionStartHook`. Do not add new hook handlers without also wiring them in `hooks/hooks.json` and `plugin/hooks/hooks.json`.
26- Telemetry MUST be silent on every failure path. The CLI MUST exit 0 with empty stdout even when PostHog construction, capture, or shutdown throws.
27- Telemetry MUST be daily-deduplicated. Adding a new event type requires a new state file slot, not removal of the existing dedup.
28- Hook output MUST stay empty (no `additionalContext`, no `systemMessage`). This component is observability-only and MUST NOT inject context into the Codex conversation.
29- Constants in `src/product-identity.ts` MUST stay byte-equivalent with `packages/omo-codex/src/telemetry/product-identity.ts`. The cross-package equivalence test will fail otherwise.
30- Do not couple this component back to omo internal source paths beyond what `cross-package-equivalence.test.ts` already asserts at the constants layer.
31 
32## Don'ts
33 
34- No `git add -A` or `git add .`. Stage only the files you changed.
35- No `git commit --no-verify`. No force pushes. No history rewriting on shared branches.
36- No new network calls. PostHog is the only allowed sink.
37- No new env vars without README + privacy-policy update.
38