aws-test-plugin CLAUDE.md

CLAUDE.md — Agent Instructions for aws-test-plugin

This file is read by Claude Code before any operation in this repository. Follow all rules here in addition to the instructions in src/aws_test_plugin/AGENTS.md.

Commands

# Sync dependencies (after cloning or pulling)
uv sync --locked

# Run all tests
uv run pytest tests/ -v

# Lint — check mode (CI)
uv run ruff check src tests
uv run ruff format --check src tests

# Lint — fix mode (local dev: always fix before format)
uv run ruff check --fix src tests
uv run ruff format src tests

# Type checking — ty is the primary checker (fast, replaces mypy)
uv run ty check src

# Type checking — mypy (secondary; kept for compatibility)
uv run mypy src

# Security scans
uv run bandit -q -c pyproject.toml -r src
# CVE-2026-4539: pygments ReDoS (local-only, no fix yet) — remove ignore once patched
# CVE-2026-25645: requests 2.32.5 — fix in 2.33.0, blocked by exclude-newer cooldown
uv run pip-audit --ignore-vuln CVE-2026-4539 --ignore-vuln CVE-2026-25645

# Verify lockfile is up to date (must pass before any commit)
uv lock --check

# Regenerate lockfile when pyproject.toml changes
uv lock

Change Workflow

Every change, regardless of size, follows this sequence:

1. Branch — git checkout -b feat/<name> or fix/<name> from develop
2. Implement — make the change
3. Docs review — ask: does this change affect README.md, CONTRIBUTING.md, or CLAUDE.md?
   • CI/CD changes → update CLAUDE.md (Commands section) if any command changes
   • Dependency changes → update README.md and CONTRIBUTING.md if setup steps change
   • Workflow/process changes → update CLAUDE.md (relevant section)
   • src/ public API changes → update README.md usage examples
4. Version bump — see Version Policy below
5. Local checks — must all pass before committing:

   uv lock --check
   uv run ruff check src tests
   uv run ruff format --check src tests
   uv run ty check src        # or: uv run mypy src
   uv run pytest tests/ -v
   uv run bandit -q -c pyproject.toml -r src
   uv run pip-audit --ignore-vuln CVE-2026-4539 --ignore-vuln CVE-2026-25645
   

6. Commit — conventional commit with full body for non-trivial changes
7. PR → develop → main — follow Branch Strategy below