Files
JATMNandGitHub 39c3850c2e docs: tighten PR review expectations in CONTRIBUTING and AGENTS guides (#2151)
* docs: tighten PR review expectations in CONTRIBUTING and AGENTS guides

- Add drift caveat to CodeRabbit findings: verify suggestions against
  PR intent before applying; decline out-of-scope with justification
  or ask a maintainer; never silently ignore findings
- Add Keep Your Branch Current subsection (rebase duty, fix-churn warning)
- Require full local CI-equivalent suite green before every push, with
  cross-platform exception
- Add ignored/filler PR template submissions to close-without-review list
- Expand follow-up guidance: multi-round review is normal, repeated fix
  requests signal root-cause investigation and better agent prompting
- Mirror all of the above in AGENTS.md for coding agents

* docs: address CodeRabbit findings on review-expectations guides

- Make CONTRIBUTING.md Validation the single authoritative pre-push
  validation contract mirroring .github/workflows/pr-checks.yml exactly:
  --frozen-lockfile install, launcher compatibility checks, provider
  recommendation via npm as CI does, web job carve-out
- Remove conflicting 'relevant subset' wording; cross-platform exception
  is the only carve-out from the full suite
- AGENTS.md now defers to the CONTRIBUTING contract instead of defining
  a divergent core-checks list
- Reword ambiguous 'submit the PR template ignored' bullet to 'submit a
  PR with the PR template ignored'

* docs: align pre-push validation suite with CI semantics

- Drop standalone 'bun run test:full'; bun run check already includes it
- Document web workspace install (bun install --cwd web --frozen-lockfile)
  before web checks, matching the web CI job
- Pass explicit --base/--head to security:pr-scan so local scans target
  the PR merge-base like CI does instead of script defaults

* docs: use PR base commit ref for local security scan parity

Replace git merge-base computation with origin/main and document the
required invariant (fetch + keep branch rebased onto current origin/main)
so the local scan matches CI's PR base.sha instead of diverging.

* docs: use exact PR base for security scan

* docs: make local validation contract portable

* docs: scope local checks and baseline waivers

* docs: harden contributor workflow guidance

* docs: pin contributor safety contracts
2026-08-24 10:20:19 +08:00
..