Шаблон проектного AGENTS.md

Скопируйте блок в отдельный проект и удалите неприменимые варианты. Команды должны быть фактическими, а не placeholder, до начала автономной работы Codex. Общие технические слова объясняются в справочнике терминов. В документации для начинающих первая встреча нового термина должна ссылаться на этот справочник; отсутствующий термин сначала добавляется туда простым языком.

# Project rules

## Product and stack

- This repository builds <APP_NAME>: <ONE_SENTENCE_PURPOSE>.
- Runtime: <NATIVE_KOTLIN_COMPOSE | CAPACITOR_8>.
- Data mode: <OFFLINE | OFFLINE_FIRST | NETWORK_REQUIRED_WITH_OFFLINE_ERRORS>.
- minSdk: <MIN>; targetSdk/compileSdk: <CURRENT_PLAY_REQUIREMENT>.
- Package ID: <PACKAGE_ID>. Never change it without an explicit migration task.
- Sensitive domains/features: <NONE | ACCOUNTS | CHILDREN | HEALTH | FINANCE |
  UGC | AI | LOCATION | VPN | BACKGROUND | OTHER>.

## Commands

- Bootstrap: `<COMMAND>`
- Lint/unit: `<COMMAND>`
- UI/instrumentation: `<COMMAND>`
- Debug APK: `<COMMAND>`
- Release AAB: `<COMMAND>`
- Full local verification: `<COMMAND>`

## Architecture and data

- Keep UI, domain decisions and local/remote data access separated.
- Define loading, empty, error, offline and expired-session states when relevant.
- Keep API keys and server secrets off-device; treat the APK as public.
- Document local data, retention, export and deletion behavior.

## Change boundaries

- Keep changes scoped; preserve public APIs and stored-data compatibility.
- Do not add permissions, analytics, ads, remote code or SDKs without an
  explicit product reason and Play/Data Safety review.
- Use Gradle Wrapper. Keep dependency versions and lock files pinned.
- For Capacitor, never hand-edit generated assets under android/app/src/main/assets.

## Secrets and release

- Never read, print or commit keystores, passwords, service-account JSON or tokens.
- Keep upload signing external. Play publication/rollout requires explicit scope.
- Do not invent legal, privacy, audience or Data Safety answers.

## Done when

- The primary user flow and applicable failure/lifecycle cases pass on AVD/device.
- Lint, unit, build and relevant instrumentation checks pass.
- Final permissions/dependencies and Play declarations match the shipped code.
- Diff has no secrets, local SDK paths, debug logs, caches or build artifacts.
- Report changed, verified and still unverified separately.

Для каждой новой capability добавьте конкретные сценарии: например, для камеры — отказ permission и отсутствие камеры; для API — timeout/401/offline; для БД — миграция с предыдущей версии; для background — Doze/reboot.