Standard: Agent Tooling & Execution

How an AI assistant operates a mesh repo on this environment. Two rules that were being rediscovered per-project, lifted here so every node inherits them: use PowerShell + the file tools, never the Cowork bash sandbox, and execute the work directly rather than handing the user a script.

Canonical, project-agnostic standard (the version other repos copy). It belongs in each project's CLAUDE.md "Build / Run" + "Critical things not to get wrong" sections (the ai-context standard).

The rules

1. Never use the Cowork bash sandbox

On this Windows environment mcp__workspace__bash is actively broken, not just redundant — zero exceptions, including "quick" reads. Observed failures: stale / truncated file views (a 42-line file read back as 36), inability to touch .git (unable to unlink .git/objects/… Operation not permitted), and line-ending mangling (a 12-line changelog edit staged as 3,256 phantom CRLF-flip lines). Every slip risks a bad edit or a corrupted commit.

Use instead:

• File tools (Read / Edit / Write / Glob / Grep) for all file work.
• The Windows-MCP PowerShell tool for everything else — npm, git, node, builds, doc generators.

2. Execute, don't hand off

The assistant has PowerShell + full git/gh control on the machine at all times. When the user says ship / clean up and commit / verify, the assistant runs the gate, stages, commits, branches, merges, and releases itself — pausing only for the confirmations the workflow actually requires (e.g. the go-ahead to release to main, which "ship" already grants). "Here's a script for you to run" is the wrong default.

3. Known PowerShell gotchas to encode

• Get-Content -Raw | Set-Content (and positional Set-Content) can silently no-op on this machine. For scripted bulk replaces use [System.IO.File]::ReadAllText(...) / WriteAllText(...), or just the Read/Edit tools.
• gh api --input - (stdin) fails from PowerShell (UTF-16 stdin → "Problems parsing JSON"). Use a UTF-8 (no BOM) temp file + --input <file>.
• Respect the repo's core.autocrlf — PowerShell stages real diffs cleanly; the bash sandbox does not.

Line-ending hygiene (.gitattributes)

Every repo ships a root .gitattributes with * text=auto eol=lf (+ .bat/.cmd eol=crlf, explicit binary for images/fonts/media). It forces LF in the working tree on every platform regardless of each machine's core.autocrlf, so LF-expecting formatters (Prettier et al.) stop flagging phantom "modified" files — the recurring Windows CRLF noise (~178 files on a single format:check). One file, zero behavior change. Template: templates/project.gitattributes.

Verify (is it being followed?)

The per-standard slice the compliance audit aggregates — report done/partial/missing: