csinmamit/ai.config.yaml at master · csinitte/csinmamit · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
# ai.config.yaml - Enhanced Security Configuration

# === Cursor ===
cursor:
  ignore:
    - node_modules/
    - .env
    - coverage/
    - build/
    - dist/
    - *.log
    - *.pem
    - *.key
    - *.crt
    - secrets/
    - private/
  rules:
    - pattern: "**/.env"
      policy: readonly
    - pattern: "**/secrets/**"
      policy: readonly
    - pattern: "**/private/**"
      policy: readonly
    - pattern: "**/config/secret/**"
      policy: readonly
    - pattern: "**/*.js"
      requireDocstring: true
      forbid: ["eval", "child_process", "exec", "spawn", "require('child_process')", "process.env.SECRET", "process.env.PASSWORD", "process.env.API_KEY"]
    - pattern: "**/*.ts"
      requireDocstring: true
      forbid: ["eval", "child_process", "exec", "spawn", "require('child_process')", "process.env.SECRET", "process.env.PASSWORD", "process.env.API_KEY"]

# === Gemini CLI ===
gemini:
  rules:
    - match: "**/.env"
      mode: readonly
    - match: "**/secrets/**"
      mode: readonly
    - match: "**/private/**"
      mode: readonly
    - match: "**/*.js"
      forbid: ["eval", "exec", "spawn", "child_process", "process.env.SECRET", "process.env.PASSWORD", "process.env.API_KEY", "document.write", "innerHTML"]
    - match: "**/*.ts"
      forbid: ["eval", "exec", "spawn", "child_process", "process.env.SECRET", "process.env.PASSWORD", "process.env.API_KEY"]
    - match: "src/**/*.js"
      maxLines: 300
      requireDoc: true

# === Claude Code ===
claude:
  policy:
    - path: "**/.env"
      action: readonly
    - path: "**/secrets/**"
      action: readonly
    - path: "**/private/**"
      action: readonly
    - path: "**/config/secret/**"
      action: readonly
    - path: "**/*.js"
      forbid: ["eval(", "new Function", "child_process", "exec(", "spawn(", "require('child_process')", "process.env.SECRET", "process.env.PASSWORD", "process.env.API_KEY"]
    - path: "**/*.ts"
      forbid: ["eval(", "new Function", "child_process", "exec(", "spawn(", "require('child_process')", "process.env.SECRET", "process.env.PASSWORD", "process.env.API_KEY"]
    - path: "src/**/*.js"
      enforce:
        minCommentsPercent: 5
    - path: "src/**/*.ts"
      enforce:
        minCommentsPercent: 5

# === Trae AI ===
trae:
  rules:
    - match: "**/*.js"
      forbid: ["eval", "document.write", "innerHTML", "child_process", "exec", "spawn", "process.env.SECRET", "process.env.PASSWORD", "process.env.API_KEY"]
      requireDoc: true
    - match: "**/*.ts"
      forbid: ["eval", "child_process", "exec", "spawn", "process.env.SECRET", "process.env.PASSWORD", "process.env.API_KEY"]
      requireDoc: true
    - match: "**/.env"
      mode: readonly
    - match: "**/secrets/**"
      mode: readonly
    - match: "**/private/**"
      mode: readonly
    - match: "routes/**"
      enforceNaming: camelCase

# === Wrap AI ===
wrap:
  rules:
    - match: "**/*.js"
      forbid: ["eval", "exec", "spawn", "child_process", "process.env.SECRET", "process.env.PASSWORD", "process.env.API_KEY", "document.write", "innerHTML"]
      requireDoc: true
      maxFunctionsPerFile: 15
    - match: "**/*.ts"
      forbid: ["eval", "exec", "spawn", "child_process", "process.env.SECRET", "process.env.PASSWORD", "process.env.API_KEY"]
      requireDoc: true
      maxFunctionsPerFile: 15
    - match: "**/.env"
      mode: readonly
    - match: "**/secrets/**"
      mode: readonly
    - match: "**/private/**"
      mode: readonly
    - match: "src/**/*"
      enforceNaming: camelCase
      maxLines: 400

# === Kiro AI ===
kiro:
  rules:
    - match: "**/*.js"
      forbid: ["eval", "exec", "spawn", "child_process", "process.env.SECRET", "process.env.PASSWORD", "process.env.API_KEY", "document.write", "innerHTML"]
      requireDoc: true
      maxFunctionsPerFile: 12
    - match: "**/*.ts"
      forbid: ["eval", "exec", "spawn", "child_process", "process.env.SECRET", "process.env.PASSWORD", "process.env.API_KEY"]
      requireDoc: true
      maxFunctionsPerFile: 12
    - match: "**/.env"
      mode: readonly
    - match: "**/secrets/**"
      mode: readonly
    - match: "**/private/**"
      mode: readonly
    - match: "**/routes/**"
      enforceNaming: camelCase
    - match: "src/**/*"
      maxLines: 350