Switching to AGENTS.md (this repo, not the copier template)

[cmungall]

This follows #9, we apply the template to ourself to get the changes
that affect AI usage for this repo itself.

[claude]

Claude finished @cmungall's task —— View job

---

PR Review Complete ✅

I've analyzed the changes in this PR that switches from CLAUDE.md to AGENTS.md as the standard. Here's my comprehensive review:

Todo List:

• Read and understand the changed files
• Analyze the AGENTS.md vs CLAUDE.md changes
• Review ai.just modifications
• Check for code quality issues and security concerns
• Provide comprehensive review feedback

🔍 Summary of Changes

This PR implements a strategic shift from CLAUDE.md to AGENTS.md as the unified configuration format for multiple AI tools. The changes create a symlink-based architecture where:

1. AGENTS.md becomes the single source of truth
2. CLAUDE.md becomes a symlink to AGENTS.md
3. .goosehints and .github/copilot-instructions.md also link to AGENTS.md
4. ai.just is enhanced with better secret management

✅ Code Quality & Best Practices

Excellent Design Decisions:

• DRY principle: Single source of truth eliminates content duplication
• Future-proof: Supports multiple AI tools (Claude, GitHub Copilot, Goose) from one file
• Backwards compatibility: CLAUDE.md still exists as a symlink
• Self-dogfooding: Repo applies its own template, ensuring template correctness

🔧 AI.just Improvements

The ai.just file shows significant improvements:

Good Changes:

• Robust error handling: Added set -euo pipefail for bash safety
• Flexible environment variable handling: Checks both GH_* and plain variable names
• Informative output: Provides clear feedback about which secrets are set/skipped
• Typo fix: CLAUDE_CODE_OATH_TOKEN → CLAUDE_CODE_OAUTH_TOKEN (ai.just:45)

Security Enhancement:

• The new conditional secret setting prevents failures when environment variables are missing
• More secure than the previous approach that would fail if any variable was unset

🔒 Security Assessment

No Security Issues Found:

• Symlinks are safe and appropriate for this use case
• Secret handling improvements reduce exposure risk
• No sensitive data hardcoded in the repository

⚡ Performance Considerations

Positive Impact:

• Symlinks are virtually zero-overhead
• Eliminates file duplication across AI tool configurations
• Build processes remain unchanged

🧪 Test Coverage

Template Self-Application:

• This PR demonstrates the template works correctly when applied to itself
• The fact that it generates working symlinks and configurations validates the template logic
• Consider adding a test to verify symlink integrity in CI

🚀 Recommendations

1. Documentation: Consider updating any README or documentation that references CLAUDE.md to mention the new AGENTS.md standard

2. Template Validation: The self-application is excellent validation. Consider automating this periodically to catch template regressions

3. Symlink Verification: You might want to add a simple test that verifies all expected symlinks exist and point to the correct target

🎯 Overall Assessment

This is a well-executed refactoring that:

• ✅ Maintains backwards compatibility
• ✅ Improves maintainability through DRY principles
• ✅ Enhances security in secret management
• ✅ Supports multiple AI tools from a single configuration
• ✅ Fixes a subtle typo in the OAuth token name

The changes are clean, purposeful, and follow good software engineering practices. The self-dogfooding approach validates that the template works correctly.

Recommendation: ✅ APPROVE - This PR successfully modernizes the AI configuration architecture while maintaining stability and improving functionality.