@synapta/skills 0.1.1 → 0.2.0

package/skills/repo-bootstrap/assets/scoped/symfony.md

@@ -0,0 +1,168 @@
+<!-- Managed by agent: keep sections and order; edit content, not structure. Last updated: {{TIMESTAMP}} -->
+
+# AGENTS.md — {{SCOPE_NAME}}
+
+<!-- AGENTS-GENERATED:START overview -->
+## Overview
+{{SCOPE_DESCRIPTION}}
+<!-- AGENTS-GENERATED:END overview -->
+
+<!-- AGENTS-GENERATED:START filemap -->
+## Key Files
+{{SCOPE_FILE_MAP}}
+<!-- AGENTS-GENERATED:END filemap -->
+
+<!-- AGENTS-GENERATED:START golden-samples -->
+## Golden Samples (follow these patterns)
+{{SCOPE_GOLDEN_SAMPLES}}
+<!-- AGENTS-GENERATED:END golden-samples -->
+
+<!-- AGENTS-GENERATED:START setup -->
+## Setup & environment
+{{INSTALL_LINE}}
+{{PHP_VERSION_LINE}}
+{{SYMFONY_VERSION_LINE}}
+{{DATABASE_LINE}}
+<!-- AGENTS-GENERATED:END setup -->
+
+<!-- AGENTS-GENERATED:START structure -->
+## Directory structure
+```
+src/
+  Controller/           → HTTP controllers
+  Entity/               → Doctrine entities
+  Repository/           → Doctrine repositories
+  Service/              → Business logic services
+  Form/                 → Form types
+  EventSubscriber/      → Event subscribers
+  Command/              → Console commands
+  Security/             → Voters, authenticators
+config/
+  packages/             → Bundle configuration
+  routes/               → Routing configuration
+  services.yaml         → Service definitions
+templates/              → Twig templates
+migrations/             → Doctrine migrations
+tests/                  → PHPUnit tests
+```
+<!-- AGENTS-GENERATED:END structure -->
+
+<!-- AGENTS-GENERATED:START commands -->
+## Build & tests
+{{COMMANDS_TABLE}}
+<!-- AGENTS-GENERATED:END commands -->
+
+<!-- AGENTS-GENERATED:START code-style -->
+## Code style & conventions
+- **PSR-12** coding standard with strict types
+- Use **constructor injection** for dependencies
+- Controllers are thin: delegate to services
+- Use **attributes** for routing, validation, ORM mapping
+- Services are autowired by default
+
+### Naming conventions
+| Type | Convention | Example |
+|------|------------|---------|
+| Controller | `<Entity>Controller` | `UserController` |
+| Service | `<Domain>Service` or `<Domain>Manager` | `UserService` |
+| Repository | `<Entity>Repository` | `UserRepository` |
+| Form | `<Entity>Type` | `UserType` |
+| Event | `<Entity><Action>Event` | `UserCreatedEvent` |
+| Command | `app:<domain>:<action>` | `app:user:import` |
+<!-- AGENTS-GENERATED:END code-style -->
+
+<!-- AGENTS-GENERATED:START patterns -->
+## Symfony-specific patterns
+
+### Controller with form handling
+```php
+#[Route('/user/new', name: 'user_new')]
+public function new(Request $request, EntityManagerInterface $em): Response
+{
+    $user = new User();
+    $form = $this->createForm(UserType::class, $user);
+    $form->handleRequest($request);
+
+    if ($form->isSubmitted() && $form->isValid()) {
+        $em->persist($user);
+        $em->flush();
+        return $this->redirectToRoute('user_show', ['id' => $user->getId()]);
+    }
+
+    return $this->render('user/new.html.twig', ['form' => $form]);
+}
+```
+
+### Service with dependency injection
+```php
+final class UserService
+{
+    public function __construct(
+        private readonly UserRepository $userRepository,
+        private readonly EventDispatcherInterface $dispatcher,
+    ) {}
+
+    public function createUser(string $email): User
+    {
+        $user = new User($email);
+        $this->userRepository->save($user, flush: true);
+        $this->dispatcher->dispatch(new UserCreatedEvent($user));
+        return $user;
+    }
+}
+```
+
+### Custom console command
+```php
+#[AsCommand(name: 'app:user:import', description: 'Import users from CSV')]
+final class ImportUsersCommand extends Command
+{
+    protected function execute(InputInterface $input, OutputInterface $output): int
+    {
+        // Implementation
+        return Command::SUCCESS;
+    }
+}
+```
+<!-- AGENTS-GENERATED:END patterns -->
+
+<!-- AGENTS-GENERATED:START security -->
+## Security & safety
+- Use **Voters** for authorization logic, not inline checks
+- Store secrets in `.env.local` (never commit)
+- Use **CSRF tokens** for all forms
+- Enable **security headers** via NelmioSecurityBundle
+- Validate all input with Symfony Validator constraints
+- Use **parameterized queries** (Doctrine handles this)
+<!-- AGENTS-GENERATED:END security -->
+
+<!-- AGENTS-GENERATED:START checklist -->
+## PR/commit checklist
+{{PHPSTAN_CHECKLIST_LINE}}
+{{CS_CHECKLIST_LINE}}
+{{TEST_CHECKLIST_LINE}}
+- [ ] Migrations are reversible (`down()` method works)
+- [ ] New routes have proper security annotations
+- [ ] Services are properly autowired (no manual config needed)
+- [ ] Cache cleared: `bin/console cache:clear`
+<!-- AGENTS-GENERATED:END checklist -->
+
+<!-- AGENTS-GENERATED:START examples -->
+## Patterns to Follow
+> **Prefer looking at real code in this repo over generic examples.**
+> See **Golden Samples** section above for files that demonstrate correct patterns.
+<!-- AGENTS-GENERATED:END examples -->
+
+<!-- AGENTS-GENERATED:START help -->
+## When stuck
+- Symfony docs: https://symfony.com/doc/current/
+- Best practices: https://symfony.com/doc/current/best_practices.html
+- Check existing controllers/services for patterns
+- Run `bin/console debug:router` to inspect routes
+- Run `bin/console debug:container` to inspect services
+- Review root AGENTS.md for project-wide conventions
+<!-- AGENTS-GENERATED:END help -->
+
+## House Rules (project-specific)
+<!-- This section is NOT auto-generated - add your project-specific rules here -->
+{{HOUSE_RULES}}

package/skills/repo-bootstrap/assets/scoped/testing.md

@@ -0,0 +1,87 @@
+<!-- Managed by agent: keep sections and order; edit content, not structure. Last updated: {{TIMESTAMP}} -->
+
+# AGENTS.md — {{SCOPE_NAME}}
+
+<!-- AGENTS-GENERATED:START overview -->
+## Overview
+{{SCOPE_DESCRIPTION}}
+<!-- AGENTS-GENERATED:END overview -->
+
+<!-- AGENTS-GENERATED:START filemap -->
+## Key Files
+{{SCOPE_FILE_MAP}}
+<!-- AGENTS-GENERATED:END filemap -->
+
+<!-- AGENTS-GENERATED:START golden-samples -->
+## Golden Samples (follow these patterns)
+{{SCOPE_GOLDEN_SAMPLES}}
+<!-- AGENTS-GENERATED:END golden-samples -->
+
+<!-- AGENTS-GENERATED:START setup -->
+## Setup & environment
+- Install dev dependencies before running tests
+- Some tests may require additional setup (see individual test files)
+- Use the project's test framework consistently
+<!-- AGENTS-GENERATED:END setup -->
+
+<!-- AGENTS-GENERATED:START commands -->
+## Running tests
+{{TEST_LINE}}
+{{TEST_SINGLE_LINE}}
+{{TEST_COVERAGE_LINE}}
+{{TEST_WATCH_LINE}}
+<!-- AGENTS-GENERATED:END commands -->
+
+<!-- AGENTS-GENERATED:START organization -->
+## Test organization
+- Group tests by feature or module
+- Name test files to match source files (e.g., `foo_test.go`, `foo.test.ts`)
+- Use descriptive test names that explain the expected behavior
+- Keep fixtures and mocks in dedicated directories
+<!-- AGENTS-GENERATED:END organization -->
+
+<!-- AGENTS-GENERATED:START code-style -->
+## Code style & conventions
+- One assertion per test when possible
+- Use descriptive test names: `test_should_return_error_when_input_is_empty`
+- Avoid testing implementation details; focus on behavior
+- Keep tests independent - no shared mutable state
+- Mock external dependencies (network, filesystem, time)
+- Use table-driven tests for multiple similar cases
+<!-- AGENTS-GENERATED:END code-style -->
+
+<!-- AGENTS-GENERATED:START security -->
+## Security & safety
+- Never commit real credentials in test fixtures
+- Use environment variables or mock services for sensitive data
+- Sanitize any test data that might contain PII
+- Ensure test databases are isolated from production
+<!-- AGENTS-GENERATED:END security -->
+
+<!-- AGENTS-GENERATED:START checklist -->
+## PR/commit checklist
+- [ ] All tests pass locally
+- [ ] New functionality has corresponding tests
+- [ ] Test names describe expected behavior
+- [ ] No hardcoded credentials or sensitive data
+- [ ] Mocks are appropriate and maintainable
+- [ ] Coverage hasn't decreased significantly
+<!-- AGENTS-GENERATED:END checklist -->
+
+<!-- AGENTS-GENERATED:START examples -->
+## Patterns to Follow
+> **Prefer looking at real code in this repo over generic examples.**
+> See **Golden Samples** section above for files that demonstrate correct patterns.
+<!-- AGENTS-GENERATED:END examples -->
+
+<!-- AGENTS-GENERATED:START help -->
+## When stuck
+- Check existing tests for patterns
+- Review test framework documentation
+- Ensure test isolation (no shared state)
+- Check root AGENTS.md for project conventions
+<!-- AGENTS-GENERATED:END help -->
+
+## House Rules (project-specific)
+<!-- This section is NOT auto-generated - add your project-specific rules here -->
+{{HOUSE_RULES}}

package/skills/repo-bootstrap/assets/scoped/typo3-docs.md

@@ -0,0 +1,103 @@
+<!-- Managed by agent: keep sections and order; edit content, not structure. Last updated: {{TIMESTAMP}} -->
+
+# AGENTS.md — {{SCOPE_NAME}}
+
+<!-- AGENTS-GENERATED:START overview -->
+## Overview
+TYPO3 extension documentation (RST format for docs.typo3.org). **Use the `typo3-docs` skill** for comprehensive guidance.
+<!-- AGENTS-GENERATED:END overview -->
+
+<!-- AGENTS-GENERATED:START filemap -->
+## Key Files
+{{SCOPE_FILE_MAP}}
+<!-- AGENTS-GENERATED:END filemap -->
+
+<!-- AGENTS-GENERATED:START golden-samples -->
+## Golden Samples (follow these patterns)
+{{SCOPE_GOLDEN_SAMPLES}}
+<!-- AGENTS-GENERATED:END golden-samples -->
+
+<!-- AGENTS-GENERATED:START structure -->
+## Structure (docs.typo3.org standard)
+```
+Documentation/
+├── Index.rst              # Main entry point (required)
+├── Settings.cfg           # Sphinx configuration (required)
+├── Includes.rst.txt       # Shared includes
+├── Introduction/
+│   └── Index.rst
+├── Installation/
+│   └── Index.rst
+├── Configuration/
+│   └── Index.rst
+├── Editor/
+│   └── Index.rst
+├── Developer/
+│   └── Index.rst
+└── Images/
+    └── *.png, *.svg
+```
+<!-- AGENTS-GENERATED:END structure -->
+
+<!-- AGENTS-GENERATED:START commands -->
+## Rendering Docs
+| Task | Command |
+|------|---------|
+| Render locally | `docker run --rm -v $(pwd):/project ghcr.io/typo3-documentation/render-guides:latest` |
+| Preview | Open `Documentation-GENERATED-temp/Index.html` |
+| Clean | `rm -rf Documentation-GENERATED-temp/` |
+<!-- AGENTS-GENERATED:END commands -->
+
+<!-- AGENTS-GENERATED:START patterns -->
+## Key Patterns (TYPO3-specific)
+- Use RST format, **not Markdown**
+- Use TYPO3 directives: `confval`, `versionadded`, `deprecated`, `t3-field-list-table`
+- Include code with `.. code-block:: php` or `.. literalinclude::`
+- Cross-reference with `:ref:` and proper labels
+- **Screenshots MANDATORY** for backend modules, config screens, UI workflows
+- Store in `Documentation/Images/`, use `.. figure::` with `:zoom: lightbox`
+<!-- AGENTS-GENERATED:END patterns -->
+
+<!-- AGENTS-GENERATED:START screenshots -->
+## Screenshots (MANDATORY for UI)
+```rst
+.. figure:: /Images/Configuration/ExtensionSettings.png
+   :alt: Extension configuration showing API settings
+   :zoom: lightbox
+   :class: with-border with-shadow
+
+   Configure the extension in Admin Tools > Settings
+```
+- Format: **PNG only**
+- Zoom modes: `lightbox` (default), `gallery` (tutorials), `inline` (diagrams)
+- Always include `:alt:` text
+<!-- AGENTS-GENERATED:END screenshots -->
+
+<!-- AGENTS-GENERATED:START code-style -->
+## RST Style
+- Headings: `=` for H1, `-` for H2, `~` for H3, `^` for H4
+- Line length: ~80 characters for readability
+- One sentence per line (for better diffs)
+- Use `.. note::`, `.. warning::`, `.. tip::` for admonitions
+- Tables: use `.. t3-field-list-table::` or grid tables
+<!-- AGENTS-GENERATED:END code-style -->
+
+<!-- AGENTS-GENERATED:START checklist -->
+## PR Checklist
+- [ ] RST syntax valid (renders without errors)
+- [ ] All internal links resolve
+- [ ] Images have `:alt:` text and `:zoom: lightbox`
+- [ ] **Screenshots exist** for all backend/config/UI sections
+- [ ] Code examples are tested
+- [ ] Follows docs.typo3.org structure
+<!-- AGENTS-GENERATED:END checklist -->
+
+<!-- AGENTS-GENERATED:START skill-reference -->
+## Skill Reference
+> For RST syntax, TYPO3 directives, screenshots, and docs.typo3.org deployment:
+> **Invoke skill:** `typo3-docs`
+<!-- AGENTS-GENERATED:END skill-reference -->
+
+## House Rules (project-specific)
+<!-- This section is NOT auto-generated - add your project-specific rules here -->
+{{HOUSE_RULES}}

package/skills/repo-bootstrap/assets/scoped/typo3-extension.md

@@ -0,0 +1,133 @@
+<!-- Managed by agent: keep sections and order; edit content, not structure. Last updated: {{TIMESTAMP}} -->
+
+# AGENTS.md — {{SCOPE_NAME}}
+
+<!-- AGENTS-GENERATED:START overview -->
+## Overview
+{{SCOPE_DESCRIPTION}}
+<!-- AGENTS-GENERATED:END overview -->
+
+<!-- AGENTS-GENERATED:START filemap -->
+## Key Files
+{{SCOPE_FILE_MAP}}
+<!-- AGENTS-GENERATED:END filemap -->
+
+<!-- AGENTS-GENERATED:START golden-samples -->
+## Golden Samples (follow these patterns)
+{{SCOPE_GOLDEN_SAMPLES}}
+<!-- AGENTS-GENERATED:END golden-samples -->
+
+<!-- AGENTS-GENERATED:START setup -->
+## Setup & environment
+{{INSTALL_LINE}}
+{{PHP_VERSION_LINE}}
+{{TYPO3_VERSION_LINE}}
+{{DEV_SETUP_LINE}}
+{{REQUIRED_EXTENSIONS_LINE}}
+<!-- AGENTS-GENERATED:END setup -->
+
+<!-- AGENTS-GENERATED:START structure -->
+## Directory structure
+```
+Classes/           → PHP classes (PSR-4: Vendor\ExtKey\)
+  Controller/      → Backend/Frontend controllers
+  Domain/          → Model, Repository, Validator
+  Service/         → Business logic services
+  ViewHelpers/     → Fluid ViewHelpers
+Configuration/     → TYPO3 configuration
+  TCA/             → Table Configuration Array
+  TypoScript/      → TypoScript setup/constants
+  FlexForms/       → FlexForm XML definitions
+  Backend/         → Backend module config
+Resources/
+  Private/         → Templates, Partials, Layouts (Fluid)
+  Public/          → CSS, JS, Icons
+Tests/
+  Unit/            → PHPUnit unit tests
+  Functional/      → Functional tests with DB
+Documentation/     → RST documentation for docs.typo3.org
+```
+<!-- AGENTS-GENERATED:END structure -->
+
+<!-- AGENTS-GENERATED:START commands -->
+## Build & tests
+{{COMMANDS_TABLE}}
+{{DDEV_ALTERNATIVE}}
+<!-- AGENTS-GENERATED:END commands -->
+
+<!-- AGENTS-GENERATED:START code-style -->
+## Code style & conventions
+- **PSR-12** + TYPO3 CGL (Coding Guidelines)
+- Strict types: `declare(strict_types=1);` in all PHP files
+- Namespace: `{{VENDOR}}\{{EXT_KEY}}\` (PSR-4 from Classes/)
+- Use dependency injection via `Services.yaml`, not `GeneralUtility::makeInstance()`
+- Extbase conventions for domain models and repositories
+- Fluid templates: use `<f:` and custom ViewHelpers
+- TCA: use TYPO3 API, not raw SQL for schema
+- Never use `$GLOBALS['TYPO3_DB']` (deprecated since v8)
+
+### Naming conventions
+| Type | Convention | Example |
+|------|------------|---------|
+| Extension key | `lowercase_underscore` | `my_extension` |
+| Composer name | `vendor/ext-key` | `vendor/my-extension` |
+| Namespace | `Vendor\ExtKey\` | `Vendor\MyExtension\` |
+| Controller | `*Controller` | `BlogController` |
+| Repository | `*Repository` | `PostRepository` |
+| ViewHelper | `*ViewHelper` | `FormatDateViewHelper` |
+<!-- AGENTS-GENERATED:END code-style -->
+
+<!-- AGENTS-GENERATED:START security -->
+## Security & safety
+- **Always use QueryBuilder** or Extbase repositories - never raw SQL
+- **Escape output** in Fluid: `{variable}` auto-escapes, use `<f:format.raw>` only when safe
+- **CSRF protection**: use `\TYPO3\CMS\Core\FormProtection\FormProtectionFactory` for forms
+- **Access checks**: use `$GLOBALS['BE_USER']->check()` for backend
+- **File handling**: use FAL (File Abstraction Layer), never direct file paths
+- **Never trust user input**: validate via Extbase validators or custom validation
+<!-- AGENTS-GENERATED:END security -->
+
+<!-- AGENTS-GENERATED:START checklist -->
+## PR/commit checklist
+{{CI_CHECKLIST_LINE}}
+{{PHPSTAN_CHECKLIST_LINE}}
+- [ ] ext_emconf.php version updated if releasing
+- [ ] TCA changes have matching SQL in ext_tables.sql
+- [ ] Documentation updated in Documentation/
+- [ ] No deprecated TYPO3 APIs (run Extension Scanner)
+{{TYPO3_VERSION_CHECKLIST_LINE}}
+<!-- AGENTS-GENERATED:END checklist -->
+
+<!-- AGENTS-GENERATED:START examples -->
+## Patterns to Follow
+> **Prefer looking at real code in this repo over generic examples.**
+> See **Golden Samples** section above for files that demonstrate correct patterns.
+<!-- AGENTS-GENERATED:END examples -->
+
+<!-- AGENTS-GENERATED:START upgrade -->
+## TYPO3 upgrade considerations
+- Run **Extension Scanner** before upgrading: Backend → Upgrade → Scan Extension Files
+- Use **Rector** for automated migrations: `vendor/bin/rector process`
+- Check **deprecation log** in TYPO3 backend
+- Review [TYPO3 Changelog](https://docs.typo3.org/c/typo3/cms-core/main/en-us/Index.html) for breaking changes
+<!-- AGENTS-GENERATED:END upgrade -->
+
+<!-- AGENTS-GENERATED:START help -->
+## When stuck
+- TYPO3 Documentation: https://docs.typo3.org
+- TCA Reference: https://docs.typo3.org/m/typo3/reference-tca/main/en-us/
+- Core API: https://docs.typo3.org/m/typo3/reference-coreapi/main/en-us/
+- Extbase Guide: https://docs.typo3.org/m/typo3/book-extbasefluid/main/en-us/
+- Check existing patterns in EXT:core or EXT:backend
+- Review root AGENTS.md for project-wide conventions
+<!-- AGENTS-GENERATED:END help -->
+
+<!-- AGENTS-GENERATED:START skill-reference -->
+## Skill Reference
+> For TYPO3 extension standards, TER compliance, and conformance checks:
+> **Invoke skill:** `typo3-conformance`
+<!-- AGENTS-GENERATED:END skill-reference -->
+
+## House Rules (project-specific)
+<!-- This section is NOT auto-generated - add your project-specific rules here -->
+{{HOUSE_RULES}}

package/skills/repo-bootstrap/assets/scoped/typo3-project.md

@@ -0,0 +1,137 @@
+<!-- Managed by agent: keep sections and order; edit content, not structure. Last updated: {{TIMESTAMP}} -->
+
+# AGENTS.md — {{SCOPE_NAME}}
+
+<!-- AGENTS-GENERATED:START overview -->
+## Overview
+{{SCOPE_DESCRIPTION}}
+<!-- AGENTS-GENERATED:END overview -->
+
+<!-- AGENTS-GENERATED:START filemap -->
+## Key Files
+{{SCOPE_FILE_MAP}}
+<!-- AGENTS-GENERATED:END filemap -->
+
+<!-- AGENTS-GENERATED:START golden-samples -->
+## Golden Samples (follow these patterns)
+{{SCOPE_GOLDEN_SAMPLES}}
+<!-- AGENTS-GENERATED:END golden-samples -->
+
+<!-- AGENTS-GENERATED:START setup -->
+## Setup & environment
+{{INSTALL_LINE}}
+{{PHP_VERSION_LINE}}
+{{TYPO3_VERSION_LINE}}
+{{DEV_SETUP_LINE}}
+{{COMPOSER_MODE_LINE}}
+<!-- AGENTS-GENERATED:END setup -->
+
+<!-- AGENTS-GENERATED:START structure -->
+## Directory structure
+```
+public/                 → Web root (DocumentRoot)
+  typo3/               → TYPO3 backend assets
+  typo3conf/           → Configuration (legacy, avoid)
+  fileadmin/           → User uploads (FAL)
+  index.php            → Entry point
+config/                → Project configuration
+  sites/               → Site configurations (YAML)
+    <site>/
+      config.yaml      → Site routing, languages
+  system/              → System-wide settings
+    settings.php       → LocalConfiguration equivalent
+    additional.php     → AdditionalConfiguration
+var/                   → Runtime data (cache, logs)
+  cache/               → Cache files
+  log/                 → Log files
+  session/             → Session data
+vendor/                → Composer dependencies
+packages/              → Local extensions (recommended)
+  my_extension/        → Custom extension
+```
+<!-- AGENTS-GENERATED:END structure -->
+
+<!-- AGENTS-GENERATED:START commands -->
+## Build & tests
+{{COMMANDS_TABLE}}
+<!-- AGENTS-GENERATED:END commands -->
+
+<!-- AGENTS-GENERATED:START code-style -->
+## Code style & conventions
+- **PSR-12** + TYPO3 CGL (Coding Guidelines)
+- Strict types: `declare(strict_types=1);` in all PHP files
+- Use **Composer Mode** for all extensions
+- Site configuration in `config/sites/` (not database)
+- Use environment variables for sensitive config
+- Avoid `typo3conf/` - use `config/` and `packages/` instead
+
+### Project vs Extension code
+| Type | Location | Purpose |
+|------|----------|---------|
+| Local extensions | `packages/` | Custom functionality |
+| Site config | `config/sites/` | Routing, languages |
+| System config | `config/system/` | TYPO3 settings |
+| Templates | Extension `Resources/` | Fluid templates |
+<!-- AGENTS-GENERATED:END code-style -->
+
+<!-- AGENTS-GENERATED:START extensions -->
+## Extension management
+- **Composer-only**: All extensions via `composer require`
+- **Local packages**: Use `packages/` with path repository
+- **Never use Extension Manager** for production
+- Lock extension versions in `composer.lock`
+
+### Adding local extension
+```json
+{
+    "repositories": [
+        {"type": "path", "url": "packages/*"}
+    ],
+    "require": {
+        "vendor/my-extension": "@dev"
+    }
+}
+```
+<!-- AGENTS-GENERATED:END extensions -->
+
+<!-- AGENTS-GENERATED:START security -->
+## Security & safety
+- **Environment variables**: Use for DB credentials, encryption key
+- **Restrict backend access**: Use `.htaccess` or server config
+- **Disable install tool**: Remove `ENABLE_INSTALL_TOOL` after setup
+- **File permissions**: Strict permissions on `var/`, `config/`
+- **HTTPS only**: Enforce in site configuration
+- **Update regularly**: Security updates for core and extensions
+<!-- AGENTS-GENERATED:END security -->
+
+<!-- AGENTS-GENERATED:START deployment -->
+## Deployment
+- Use `composer install --no-dev --optimize-autoloader`
+- Clear caches: `vendor/bin/typo3 cache:flush`
+- Warmup caches: `vendor/bin/typo3 cache:warmup`
+- Run database migrations: `vendor/bin/typo3 database:updateschema`
+- Never deploy `var/cache/` or `var/session/`
+<!-- AGENTS-GENERATED:END deployment -->
+
+<!-- AGENTS-GENERATED:START checklist -->
+## PR/commit checklist
+{{CI_CHECKLIST_LINE}}
+- [ ] Site configuration is valid YAML
+- [ ] No hardcoded credentials or paths
+- [ ] Extensions installed via Composer only
+- [ ] Database schema changes documented
+{{TYPO3_VERSION_CHECKLIST_LINE}}
+<!-- AGENTS-GENERATED:END checklist -->
+
+<!-- AGENTS-GENERATED:START help -->
+## When stuck
+- TYPO3 Documentation: https://docs.typo3.org
+- Installation Guide: https://docs.typo3.org/m/typo3/tutorial-getting-started/main/en-us/
+- Site Configuration: https://docs.typo3.org/m/typo3/reference-coreapi/main/en-us/ApiOverview/SiteHandling/
+- Console Commands: `vendor/bin/typo3 list`
+- Review root AGENTS.md for project-wide conventions
+<!-- AGENTS-GENERATED:END help -->
+
+## House Rules (project-specific)
+<!-- This section is NOT auto-generated - add your project-specific rules here -->
+{{HOUSE_RULES}}