aura-courier-mcp: Instructions file for Codex

AGENTS.md — aura-courier-mcp v2.5.4 → v2.6.0 hardening

Works for any coding agent (Claude Code, Codex, Antigravity/Gemini, Cursor). Save as AGENTS.md in the repo root (Claude Code: also copy/symlink to CLAUDE.md; Antigravity/Gemini: GEMINI.md if it does not read AGENTS.md). Then prompt: "Read AGENTS.md and execute it end to end."

Repo: https://github.com/auraajenticai/aura-courier-mcp (Apache-2.0, Node, Streamable-HTTP MCP, protocol 2024-11-05)

0. Ground rules (read first, obey always)

1. Discover before editing. Read the repo (entrypoint, tool registry, courier adapters, webhook handlers, config, existing tests, package.json) and write a 10-line "repo map" at the start of your report. Do not assume file names; the ones used below are placeholders.
2. Never invent facts. Anything marked OBSERVED below was seen in live behavior. Anything marked UNVERIFIED you must confirm from code or by running it, then state the result. If you cannot confirm, say so; do not guess.
3. Never create real shipments or move money. Do not call real courier booking, cancel, or payout endpoints. Use mocks/nock/fixtures for upstream APIs. No real customer phone numbers in tests; use 01700000000-style synthetic values only.
4. No secrets in code, logs, tests, or the report. Redact API keys, tokens, and merchant IDs.
5. Backward compatibility. Do not rename or remove existing tools or existing response fields. Add new fields. Deprecate loudly in descriptions.
6. Small, reviewable commits (one per task ID). Run the full test suite before each commit.
7. Stop and ask (end your turn with a question) only if a decision cannot be derived from code or this file, e.g. choosing a hosting secret store. Otherwise decide, document in the report, and continue.
8. Honest reporting. If a task is partly done, say exactly which acceptance tests pass and which fail.

1. Global response envelope (all tools)

{
  "ok": true,
  "data": {},
  "error": null,
  "meta": {
    "request_id": "uuid",
    "source": "live_api | static_tariff | cache | validator",
    "as_of": "ISO-8601"
  }
}