fix: patch development dependencies and share project instructions

AGENTS.md

@@ -0,0 +1,20 @@
+# @coroboros/clone
+
+Prototype-aware deep clone and deep freeze for Node.js 22+, with zero runtime dependencies.
+
+## Project constraints
+
+- Preserve the `clone`, `freeze`, options and error contracts in `README.md` and `src/index.ts`, including generic return types, defaults, prototypes and property descriptors.
+- Keep cycle-safe traversal enabled by default. Preserve the ArrayBuffer-view exception in `freeze`.
+- Keep `exists`, `getType` and `primitives` in `src/helpers.ts` internal. Add no runtime dependencies; use native `fetch` where network access is needed.
+- Preserve the public scoped package and dual ESM/CJS exports.
+
+## Validation
+
+Use the scripts in `package.json`. Source or dependency changes require `pnpm lint`, `pnpm typecheck`, `pnpm test` and `pnpm build`; documentation-only edits need Markdown and reference checks.
+
+For changes to `src/clone.ts`, run `pnpm bench` against the bucket budgets in `bench/baseline.md`. Reuse passing results while the tested inputs remain unchanged.
+
+## Release
+
+Target `main` through a PR and squash-merge the reviewed head. After release approval, tag the merge commit with the next SemVer. `.github/workflows/ci.yml` delegates version updates, changelog, npm publication and GitHub release to the shared package pipeline; leave those generated artifacts to CI. Publishing uses OIDC with provenance; do not add an npm token or publish locally.

CLAUDE.md

@@ -1,51 +1 @@
-# @coroboros/clone
-
-Deep clone and deep freeze for JavaScript — prototype-aware. Preserves the prototype chain, property descriptors, boxed primitives, and native types (Map, Set, Date, RegExp, Error subclasses, TypedArray, DataView, ArrayBuffer, Buffer). Cycle-safe.
-
-## Canonical rules
-
-Follows the Coroboros engineering global rules. Repo-specific divergences are stated inline in `## Rules` below.
-
-## Tech Stack
-- TypeScript strict, ES modules + CJS dual build (tsdown)
-- Vitest + `fast-check` for property tests, Biome for lint/format
-- `mitata` for benchmarks (`pnpm bench`)
-- Node.js 22 LTS
-- Zero runtime dependencies
-
-## Commands
-- `pnpm build` — bundle ESM + CJS + types to `dist/`
-- `pnpm test` — run Vitest suite (97 tests, incl. property-based)
-- `pnpm lint` / `pnpm lint:fix` — Biome check
-- `pnpm typecheck` — tsc --noEmit
-- `pnpm bench` — build then run `bench/clone.bench.mjs`
-- `pnpm dev` — tsdown watch mode
-
-## Important Files
-- `src/index.ts` — public entry: `clone`, `freeze`, `CloneOptions`, `CloneError`, `CloneErrorCode`
-- `src/clone.ts` — deep clone with prototype + descriptor preservation, cycle-safe via WeakMap
-- `src/freeze.ts` — deep freeze (skips ArrayBufferView via `ArrayBuffer.isView`)
-- `src/error.ts` — `CloneError` class with `code` + `cause`
-- `src/helpers.ts` — internal: `exists`, `getType`, `primitives` (NOT exported)
-- `tests/` — one spec per source module + `clone.property.test.ts` for `fast-check` invariants
-- `bench/clone.bench.mjs` — mitata bench vs structuredClone, lodash, rfdc, fast-copy
-- `bench/baseline.md` — 1.0.0 numbers + regression budget
-
-## Public API (1.0.0 contract)
-- `clone<T>(thing: T, options?: CloneOptions): T` — generic-preserving deep clone
-- `freeze<T>(thing: T): T` — recursive deep freeze
-- `CloneOptions` — `{ ignoreUndefinedProperties?, cycles?, preservePrototype?, copyDescriptors? }` — all booleans, all default `true` except `ignoreUndefinedProperties` which defaults `false`
-- `CloneError` — extends `Error`, exposes `code: CloneErrorCode`, supports `Error.cause`
-- `CloneErrorCode` — `'UNSUPPORTED_TYPE'`
-
-## Rules
-- **NEVER** break the public API above. The signatures and semantics are the 1.0.0 contract.
-- **NEVER** add a runtime dependency. Zero-dep is a feature.
-- **NEVER** export `exists`, `getType`, `primitives` — they are internal helpers only.
-- **NEVER** use `axios`, `request`, or `node-fetch` — use native `fetch` (Node 22+).
-- Cycle handling via WeakMap visited-cache is contract — never remove the default.
-- Run `pnpm lint && pnpm typecheck && pnpm test` before every commit.
-- Run `pnpm bench` against `bench/baseline.md` when touching `src/clone.ts` — no regression > 10 % at fixed feature set.
-- Scoped package — `publishConfig.access = "public"` is mandatory, do not remove.
-- **Publish** — OIDC Trusted Publisher + `npm provenance`. `ci.yml` forwards no npm token; never re-add one.
-- **Git** — `main`-only; branch → PR → squash-merge → tag the merge commit. The tag is the only manual step; release automation (version bump, `CHANGELOG.md`, npm publish, GitHub release) is owned by [`coroboros/ci`](https://github.com/coroboros/ci). Never hand-edit `package.json` version or `CHANGELOG.md`. Run `pnpm lint && pnpm typecheck && pnpm test && pnpm build` before tagging.
+@AGENTS.md

package.json

@@ -81,6 +81,7 @@
     "rfdc": "^1.4.1",
     "tsdown": "^0.21.9",
     "typescript": "^6.0.3",
+    "vite": "^8.0.16",
     "vitest": "^4.1.4"
   }
 }