vibe-project-template: Instructions file for Codex

Agent Instructions — {{PROJECT_NAME}}

This is the master file. CLAUDE.md and GEMINI.md are symlinks to this file. Edit ONLY AGENTS.md — changes propagate automatically. NEVER break the symlink structure.

---

Critical Production Rules

1. Read-Only Mode (ABSOLUTE)

Default behavior on production servers: READ ONLY.

The agent MUST NOT perform any of these actions without explicit user permission:

• Install or remove software
• Modify configuration files (.env, service units, reverse proxy configs)
• Create, modify, or delete files on the server
• Start, stop, or restart any service
• Run database migrations or write to databases
• Create, modify, or remove system users
• Modify firewall rules or network configuration

If a write operation is needed: describe what you want to do, explain why, and WAIT for explicit "yes" from the user.

2. SSH Connection Failures

STOP on first SSH error. Do NOT retry.

Production servers use fail2ban. Repeated failed attempts will ban the IP address. If SSH fails:

1. Report the exact error to the user
2. Do NOT attempt alternative connections
3. Wait for user guidance

3. Database Migrations / Schema Changes

ALWAYS apply migrations to ALL project databases. Projects may use multiple databases (primary, analytics, secondary services, etc.).

Verify which databases exist and run migrations for each one.

4. Configuration Comments

ENGLISH ONLY (ASCII) in all configuration files:

• .env files
• Service unit files (systemd, supervisor, etc.)
• Shell scripts (.sh)
• Reverse proxy configs (nginx, caddy, traefik, etc.)
• Docker/Compose files
• CI/CD pipeline configs

Non-ASCII characters (Russian, Chinese, etc.) cause encoding issues in system services.

5. Timezone Awareness

ALWAYS use the project-configured timezone for:

• Scheduled tasks (cron, task queues, schedulers)
• Log analysis and timestamp comparisons
• Database queries with time filters

Never assume UTC unless the project explicitly uses it.