# AGENTS.md — coding agents in property.bot

This repo is **property.bot** (spoken persona **PropertyBot**). Legal entity: FREAKINAMAZING LLC.

## Isolation

- **property.bot is not FlowStay.** Do not couple Workers, D1, secrets, or branding to FlowStay accounts or code paths.
- Cloudflare account for this stack is the property.bot / sterlingcobb account pinned in `wrangler.toml`. Never deploy to a different account by accident.

## Privacy and phones

- Phones are PII. In **new** UI/docs copy prefer last-4 only (WhatsApp …0663, voice/SMS Telnyx …1919) or link canonical pages (`/contact`, `wa.me`, `tel:`).
- Do **not** put secrets, bearer tokens, or other people’s full phone numbers in chat, issues, or PRs.
- Product MCP at `https://mcp.property.bot/mcp` stays **OAuth / Bearer gated**. Do not ungate person lookup, `send_text`, or matching tools for public agents.
- Public docs MCP (if present) is documentation-only: no person tools, no PII tools.

## Data and migrations

- D1 is the source of truth for matching memory. Apply migrations with the repo Makefile / `wrangler d1 migrations` discipline—never invent ad-hoc schema on production.
- Prefer small, reversible migrations. Test locally before remote.

## Site / agent surfaces

- Marketing + discovery files live under `site/` (served by the Worker + ASSETS). Keep `llms.txt`, OpenAPI, ARD/ai-catalog, and `?mode=agent` honest.
- Brand in UI/docs: lowercase **property.bot**. Spoken name: **PropertyBot**.

## Skills and plugins

- Published agent skills: `site/skills/*/SKILL.md` and `/.well-known/agent-skills/`.
- Agent Plugins package: root `plugin.json` + `mcp.json` + `skills/` (see https://agent-plugins.org/specification).
- Public mirrors on the site: https://property.bot/AGENTS.md · https://property.bot/plugin.json · https://property.bot/agent-plugins/
- **Public GitHub for Ora/repo probes:** https://github.com/fourcolors/property-bot-grok-plugin — fetch `AGENTS.md` and `plugin.json` there first.
- Application source (`fourcolors/property-bot`) remains private; discovery must not require it.

## Before shipping

- Prefer code over orphan markdown.
- Run worker tests (`npm test` / vitest) for site and MCP changes.
- Do not open product MCP without auth to chase score theater.