project: throughline

defaults:
  role: reviewer
  readonly: true
  result_format: json

safety_profile: claude-hook-package

allowed_paths:
  - AGENTS.md
  - CLAUDE.md
  - README.md
  - README.ja.md
  - CHANGELOG.md
  - .gitignore
  - .codex-sidecar.yml
  - .claude/commands/
  - bin/
  - docs/
  - package.json
  - spike/
  - src/

deny_paths:
  - .env
  - .env.*
  - "**/*.key"
  - "**/*.pem"
  - "**/*.token"
  - "**/*.tokens"
  - "**/*token*.key"
  - "**/*token*.pem"
  - .claude/settings.json
  - .throughline/
  - .codex-sidecar/logs/

presets:
  work:
    workflow: work
    readonly: false
    prompt: "Implement the requested scoped change in the isolated worktree, run the listed verification commands, and report results."
  review:
    workflow: review
    readonly: true
    prompt: "Review the current Throughline change for regressions, Claude contract breaks, and missing tests."
  explore:
    workflow: explore
    readonly: true
    prompt: "Answer with codebase evidence and file references. Do not modify files."
  summarize-l1:
    workflow: explore
    readonly: true
    prompt: "Summarize the provided Throughline L2 turn into a compact L1 memory. Preserve proper nouns, numbers, decisions, causality, unresolved questions, and next actions. Return a concise summary only."
  opinion:
    workflow: opinion
    readonly: true
    prompt: "Challenge the current Throughline design and identify hidden assumptions."
  risk-check:
    workflow: risk-check
    readonly: true
    focus:
      - claude-hooks
      - transcript-parsing
      - sqlite-memory
      - codex-sidecar
      - secrets