@iamdevlinph/codex-kit 1.0.20 → 1.0.22

package/LICENSE

@@ -1,6 +1,3 @@
-This license applies only to files included in the published
-@iamdevlinph/codex-kit npm package. It does not apply to repository-only files.
-
 ISC License
 
 Copyright (c) 2026 Devlin Pajaron

package/README.md

@@ -246,9 +246,13 @@ standard-library modules.
 
 ## License
 
-Files included in the published `@iamdevlinph/codex-kit` npm package are
-licensed under the [ISC License](LICENSE). Repository-only files remain
-proprietary and are not covered by that license.
+This repository and the published `@iamdevlinph/codex-kit` package are licensed
+under the [ISC License](LICENSE).
+
+## Security
+
+See [SECURITY.md](SECURITY.md) for supported versions and private vulnerability
+reporting instructions.
 
 ## References
 

package/assets/TEMPLATE_AGENTS.md

@@ -92,6 +92,10 @@ conditional procedures into validated project skills.
 - Reuse existing constants, schemas, enums, shared types, and components before
   creating duplicates. Add reusable domain values at their existing source of
   truth instead of scattering magic strings.
+- Promote repeated closed-set domain values used in production control flow to
+  feature-owned immutable runtime constants. Where the language supports it,
+  derive static types from that runtime source; keep incidental presentation,
+  browser, protocol, route, environment, and test-contract strings inline.
 
 ## Project Discovery
 

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@iamdevlinph/codex-kit",
-	"version": "1.0.20",
+	"version": "1.0.22",
 	"description": "Portable Codex subagents and project AGENTS.md defaults.",
 	"type": "module",
 	"bin": {