Block a user
Install deps above WORKDIR so no root-owned node_modules lands in the checkout
Compress AGENTS.md and add a standing rule to trim it on every edit
Compress AGENTS.md and add a standing rule to trim it on every edit
Install deps above WORKDIR so no root-owned node_modules lands in the checkout
Permission names are <resource>:<action>; permissions come from plugin code