From d924220572eaad82a4fcb420ddd387cfd3899e3c Mon Sep 17 00:00:00 2001 From: Austin Kidwell Date: Thu, 13 Aug 2026 08:19:35 -0700 Subject: [PATCH] chore(privacy): remove employer references from public toolkit Replaces hardcoded 'ASR Dropbox' paths with environment variables across 8 files, and removes the employer framing from the Construction-BI agent. Found by a full-history leakage audit (2026-08-13). None of this is a secret or a trade secret - the formulas are standard construction accounting and the compliance content is published law. The issue is employer NEXUS: the repo named the employer, published its internal project list, vendor stack and Dropbox folder taxonomy, which weakens the Labor Code 2870 own-time carve-out. - loop_driver.py paths now point at ~/.claude/automated-loop/ (it ships in this repo, so the absolute path was wrong as well as leaky) - decomp/ROM dirs -> $GBA_DECOMP_DIR, $NDS_ROM_DIR - Raken reference dir -> $RAKEN_REFERENCE_DIR (also drops the employer's '08_Financial_PayrollOperations/Certified Payroll' folder taxonomy) - Construction-BI: dropped employer name and internal project list; the generic construction-BI domain knowledge is unchanged Not pushed. Sanitization only - no files moved, deleted or relicensed. Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_01R1Dfu6aeAVFCoMDRbiD18w --- CLAUDE.md.example | 2 +- agents/construction-bi.md | 7 ++++--- commands/gba-ai-full.md | 2 +- commands/gba-build-develop.md | 2 +- commands/nds-test.md | 2 +- commands/orchestrator.md | 2 +- commands/profiles/pokemon-embergold.md | 2 +- commands/raken-api.md | 2 +- commands/raken-perplexity.md | 2 +- rules/raken-api.md | 2 +- 10 files changed, 13 insertions(+), 12 deletions(-) diff --git a/CLAUDE.md.example b/CLAUDE.md.example index c1d5f66..d41b5c3 100644 --- a/CLAUDE.md.example +++ b/CLAUDE.md.example @@ -50,7 +50,7 @@ Error handling: `patterns/PYTHON_PATTERNS.md#result-pattern`; Validation: `patte - Full checklist: `patterns/SECURITY_CHECKLIST.md` ## Git Workflow -- Branches: `feature/IGX-123-desc` | `bugfix/ASR-456-fix` | `hotfix/critical-patch` +- Branches: `feature/IGX-123-desc` | `bugfix/PRJ-456-fix` | `hotfix/critical-patch` - Commits: `feat(scope): add feature` | `fix(scope): resolve bug` | `refactor(scope): improve code` - Pre-commit: type check (`mypy src/` or `npm run type-check`); run affected tests; no hardcoded secrets; new env vars in `.env.example` diff --git a/agents/construction-bi.md b/agents/construction-bi.md index b269bae..927f3e9 100644 --- a/agents/construction-bi.md +++ b/agents/construction-bi.md @@ -1,6 +1,6 @@ --- name: Construction-BI -description: Construction industry domain specialist for Intellegix/ASR with Procore, Foundation, and Raken integrations +description: Construction industry domain specialist for job costing, WIP, and public-works compliance with Procore, Foundation, and Raken integrations tools: Read, Write, Edit, Bash, Grep, Glob, WebSearch model: sonnet memory: project @@ -12,7 +12,7 @@ skills: # Construction-BI Agent -You are the **Construction-BI** agent - the construction industry domain specialist for Austin Kidwell's Intellegix and ASR Inc projects. You understand construction business intelligence, job costing, and industry-specific compliance requirements. +You are the **Construction-BI** agent - the construction industry domain specialist. You understand construction business intelligence, job costing, and industry-specific compliance requirements. ## Core Responsibilities @@ -24,7 +24,8 @@ You are the **Construction-BI** agent - the construction industry domain special ## Scope -Projects: Intellegix, ASR Dashboard, RakenDashboard, Certified Payroll +Construction business-intelligence work: job costing, WIP reporting, and public-works +payroll compliance. Configure the specific projects for your own environment. ## Domain Terminology diff --git a/commands/gba-ai-full.md b/commands/gba-ai-full.md index 1937090..a1a84da 100644 --- a/commands/gba-ai-full.md +++ b/commands/gba-ai-full.md @@ -1,7 +1,7 @@ # /gba-ai-full — Full AI Behavior Regression Test ## MANDATORY FIRST STEP -Read `docs/gba-claude-guide.md` from `C:\Users\AustinKidwell\ASR Dropbox\Austin Kidwell\04_ResearchAnalysis\pokefirered-master\pokefirered-master` completely before any MCP tool call. +Read `docs/gba-claude-guide.md` from `$GBA_DECOMP_DIR` (set this to your pokefirered decomp checkout) completely before any MCP tool call. ## 5 ABSOLUTE RULES 1. VERIFY state before every action (screenshot + callback2) diff --git a/commands/gba-build-develop.md b/commands/gba-build-develop.md index 4f958e3..c386760 100644 --- a/commands/gba-build-develop.md +++ b/commands/gba-build-develop.md @@ -36,7 +36,7 @@ STAGE 6: SHIP ─── Full playthrough, profiling, production audit, docs - **Butano** (default engine) or **libtonc** — `BUTANO_PATH` set if using Butano - **mGBA** running with Lua MCP server on port 61337 - **git** initialized in project directory -- **loop_driver.py** at `"C:\Users\AustinKidwell\ASR Dropbox\Austin Kidwell\04_ResearchAnalysis\automated claude\automated-loop\loop_driver.py"` +- **loop_driver.py** at ``~/.claude/automated-loop/loop_driver.py`` - MCP server registered in `~/.claude/settings.json` --- diff --git a/commands/nds-test.md b/commands/nds-test.md index b149ced..3ad3ae1 100644 --- a/commands/nds-test.md +++ b/commands/nds-test.md @@ -136,4 +136,4 @@ After every test run, present results as: - If a tool returns `success: false` -> report the error, do not retry blindly - If the intro fails (story_state < 3) -> report the story_state value and which phase stalled - If ROM is not loaded -> call `nds_load_rom` with the ROM path first -- Default ROM path: `C:/Users/AustinKidwell/ASR Dropbox/Austin Kidwell/04_ResearchAnalysis/pokeheartgold-master/pokeheartgold.us.nds` +- Default ROM path: `$NDS_ROM_DIR/pokeheartgold.us.nds` diff --git a/commands/orchestrator.md b/commands/orchestrator.md index 6b65d71..7a481da 100644 --- a/commands/orchestrator.md +++ b/commands/orchestrator.md @@ -399,7 +399,7 @@ gotchas, and build commands. Do NOT write CLAUDE.md from shallow context alone. ### Step 1: Build Launch Command ``` -python "C:\Users\AustinKidwell\ASR Dropbox\Austin Kidwell\04_ResearchAnalysis\automated claude\automated-loop\loop_driver.py" --project "" --initial-prompt "Read CLAUDE.md first — it contains the current roadmap with phases and their status. Implement the first phase marked TODO. Do NOT output PROJECT_COMPLETE unless every phase in CLAUDE.md is marked COMPLETE." --verbose +python "$HOME/.claude/automated-loop/loop_driver.py" --project "" --initial-prompt "Read CLAUDE.md first — it contains the current roadmap with phases and their status. Implement the first phase marked TODO. Do NOT output PROJECT_COMPLETE unless every phase in CLAUDE.md is marked COMPLETE." --verbose ``` Add optional flags based on context: diff --git a/commands/profiles/pokemon-embergold.md b/commands/profiles/pokemon-embergold.md index ab68573..11e93ed 100644 --- a/commands/profiles/pokemon-embergold.md +++ b/commands/profiles/pokemon-embergold.md @@ -2,7 +2,7 @@ ## Identification - **ROM Title Pattern:** `POKEMON EMER` or `POKEMON FIRE` -- **Guide Path:** `C:\Users\AustinKidwell\ASR Dropbox\Austin Kidwell\04_ResearchAnalysis\pokefirered-master\pokefirered-master\docs\gba-claude-guide.md` +- **Guide Path:** `$GBA_DECOMP_DIR/docs/gba-claude-guide.md` ## MCP Tools (Game-Specific) This game provides custom MCP tools beyond the generic `gba_*` set: diff --git a/commands/raken-api.md b/commands/raken-api.md index 29a7c80..cd3e965 100644 --- a/commands/raken-api.md +++ b/commands/raken-api.md @@ -13,7 +13,7 @@ Examples: /raken-api timeCards, /raken-api members, /raken-api dailyReports oaut ## Documentation Directory ``` -C:/Users/AustinKidwell/ASR Dropbox/Austin Kidwell/08_Financial_PayrollOperations/Certified Payroll/Raken API +$RAKEN_REFERENCE_DIR ``` ## Execution diff --git a/commands/raken-perplexity.md b/commands/raken-perplexity.md index f6ef78d..e9e02dc 100644 --- a/commands/raken-perplexity.md +++ b/commands/raken-perplexity.md @@ -29,7 +29,7 @@ This project is being developed using Claude Code, Anthropic's official CLI tool All documentation lives at: ``` -C:/Users/AustinKidwell/ASR Dropbox/Austin Kidwell/08_Financial_PayrollOperations/Certified Payroll/Raken API +$RAKEN_REFERENCE_DIR ``` ### Key Files (MUST be read in Step 0) diff --git a/rules/raken-api.md b/rules/raken-api.md index d366ae8..c5245de 100644 --- a/rules/raken-api.md +++ b/rules/raken-api.md @@ -16,7 +16,7 @@ When working on any Raken API-related file, these rules apply: 2. **Check for compiled cache**: The compiled reference lives at: ``` - C:/Users/AustinKidwell/ASR Dropbox/Austin Kidwell/08_Financial_PayrollOperations/Certified Payroll/Raken API/raken-api-reference.md + $RAKEN_REFERENCE_DIR/raken-api-reference.md ``` If this file does not exist, prompt the user to run `/raken-api` to generate it.