Skip to content

Add agent local configs and memories; repo-level CLAUDE.md [TASK-010]#2

Merged
lwyBZss8924d merged 1 commit intomainfrom
sdd-bootstrap-20250909
Sep 9, 2025
Merged

Add agent local configs and memories; repo-level CLAUDE.md [TASK-010]#2
lwyBZss8924d merged 1 commit intomainfrom
sdd-bootstrap-20250909

Conversation

@lwyBZss8924d
Copy link
Copy Markdown
Owner

@lwyBZss8924d lwyBZss8924d commented Sep 9, 2025

Add agent local configs and memories (Serena) and repo-level CLAUDE.md [TASK-010]

This PR adds local agent configuration and memory artifacts to improve AI engineer onboarding and continuity.

Added

  • .claude/settings.local.json (permissions allowlist for local Claude Code usage; no secrets)
  • .serena/.gitignore (Serena project ignores)
  • .serena/project.yml (project configuration)
  • .serena/memories/*.md (code style conventions, project overview, suggested commands, task completion checklist)
  • CLAUDE.md at repo root (high-level guidance for Claude Code)

Notes

  • No credentials or tokens are included.
  • Files align with SDD safety rules (no hardcoded secrets) and enhance agent context.

Checklist

  • Files copied from working repo and verified
  • No secrets exposed
  • SDD validator still passes

Summary by CodeRabbit

  • 文档
    • 新增项目概览、代码风格约定、建议命令、任务完成清单与 Claude 使用指南,完善规范与工作流指引。
  • 配置
    • 新增 Serena 项目配置文件与本地权限设置,明确可执行操作、忽略策略与编辑权限。
  • 杂务
    • 新增 .serena/.gitignore,忽略 cache 目录,优化版本控制清洁度。

@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented Sep 9, 2025

Caution

Review failed

The pull request is closed.

Walkthrough

本次变更新增了一系列配置与文档文件:新增 Claude 本地设置、Serena 项目配置与忽略规则,以及多份项目记忆文档与指导文档(代码风格、项目概览、常用命令、任务完成清单),并在仓库根目录加入 CLAUDE.md。无公开接口或可执行代码逻辑变更。

Changes

Cohort / File(s) Summary
Claude 本地设置
/.claude/settings.local.json
新增本地设置文件,定义权限策略:允许若干 mcp__serena 动作与指定 Bash/Python 命令;deny/ask 为空。
Serena Git 忽略
/.serena/.gitignore
新增忽略规则,排除 /.serena/cache
Serena 项目配置
/.serena/project.yml
新增 Serena agent 项目级配置(语言、忽略策略、读写权限、工具可见性、初始提示、项目名),并含内联工具说明。
Serena 记忆文档
.serena/memories/code_style_conventions.md, .serena/memories/project_overview.md, .serena/memories/suggested_commands.md, .serena/memories/task_completion_checklist.md
新增四份文档:代码/脚本与命名规范、项目概览、建议命令集、任务完成清单;均为静态 Markdown,无代码接口变更。
Claude 指南
/CLAUDE.md
新增面向 Claude Code 的项目指南,描述 SDD 工作流、架构与目录结构、开发脚本与约定。

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Poem

小兔挥耳检清单,
规约成册落笔安。
Serena 低语配权限,
Claude 备忘写心间。
枝叶虽繁皆成文,
根基此刻更稳然。 🐇📜

Tip

👮 Agentic pre-merge checks are now available in preview!

Pro plan users can now enable pre-merge checks in their settings to enforce checklists before merging PRs.

  • Built-in checks – Quickly apply ready-made checks to enforce title conventions, require pull request descriptions that follow templates, validate linked issues for compliance, and more.
  • Custom agentic checks – Define your own rules using CodeRabbit’s advanced agentic capabilities to enforce organization-specific policies and workflows. For example, you can instruct CodeRabbit’s agent to verify that API documentation is updated whenever API schema files are modified in a PR. Note: Upto 5 custom checks are currently allowed during the preview period. Pricing for this feature will be announced in a few weeks.

Example:

reviews:
  pre_merge_checks:
    custom_checks:
		  - name: "Undocumented Breaking Changes"
			  mode: "warning"
			  instructions: |
				  Flag potential breaking changes that are not documented:
				  1. Identify changes to public APIs/exports, CLI flags, environment variables, configuration keys, database schemas, or HTTP/GraphQL endpoints (including removed/renamed items and changes to types, required params, return values, defaults, or behavior).
				  2. Ignore purely internal/private changes (e.g., code not exported from package entry points or marked internal).
				  3. Verify documentation exists: a "Breaking Change" section in the PR description and updates to CHANGELOG.md.

Please share your feedback with us on this Discord post.


📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 08bbed1 and 20db158.

📒 Files selected for processing (8)
  • .claude/settings.local.json (1 hunks)
  • .serena/.gitignore (1 hunks)
  • .serena/memories/code_style_conventions.md (1 hunks)
  • .serena/memories/project_overview.md (1 hunks)
  • .serena/memories/suggested_commands.md (1 hunks)
  • .serena/memories/task_completion_checklist.md (1 hunks)
  • .serena/project.yml (1 hunks)
  • CLAUDE.md (1 hunks)
✨ Finishing Touches
🧪 Generate unit tests
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch sdd-bootstrap-20250909

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@lwyBZss8924d lwyBZss8924d merged commit 22f7b74 into main Sep 9, 2025
7 of 8 checks passed
lwyBZss8924d added a commit that referenced this pull request Sep 10, 2025
Addresses CodeQL security warnings about missing workflow permissions.
Following the principle of least privilege, all jobs now explicitly
declare 'contents: read' permission only.

Security improvements:
- Added global default permissions at workflow level
- Each job explicitly declares minimal required permissions
- Prevents unintended write access via GITHUB_TOKEN
- Complies with GitHub Actions security best practices

Fixes 6 CodeQL alerts: #1, #2, #3, #4, #6, #7
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant