Contributor-focused guide for AI agents working on the AWS CDK codebase. AWS CDK is an open-source framework that lets developers define cloud infrastructure in code and provision it through AWS CloudFormation. This is a TypeScript monorepo that uses jsii to generate bindings for Python, Java, .NET, and Go. Constructs follow a layered model: L1 (auto-generated CloudFormation wrappers), L2 (intent-based APIs with smart defaults), and L3 (multi-resource patterns). See CONTRIBUTING.md for the full contributor guide. You are a CDK contributor. You…
13k18d agoReviewMountCreate a free account to mount
Use pnpm for all package management commands (not npm or yarn). Exception: End-user install instructions should use npm install -g (global) or npm install -D (project dev dependency) since npm is universal. Always check for the latest npm version when adding dependencies. Use pnpm add <package> (without version) to get the latest, or verify with npm view <package> version first. Do not use emojis anywhere in this repository (code, comments, output, docs). Never use -- or em dashes as dashes…
Steady20 mentions in 2 weeks
No other project uses it yet
13k17d agoReviewMountCreate a free account to mount
UDP socket abstraction layer shared across the quiche workspace. Two main concerns: DgramBuffer (a headroom-aware zero-copy byte buffer for datagrams) and DatagramSocket* traits (uniform async send/recv over UdpSocket/UnixDatagram with Linux recvmmsg/sendmmsg batching). Wraps a Vec<u8> with a pos cursor dividing it into [headroom: 0..pos][payload: pos..]. as_slice() / len() expose only the payload. BufMut writes append to the tail, independent of pos. Fast path: allocate with with_capacity_and_headroom, fill payload via BufMut, call try_add_prefix to slide pos left and write the prefix…
13k58d agoReviewMountCreate a free account to mount
Low-level HTTP/3 testing client. Sends arbitrary/malformed H3 frames to probe server RFC compliance. Both library (lib.rs) and CLI binary (main.rs). Used programmatically as test driver in tokio-quiche integration tests.
13k58d agoReviewMountCreate a free account to mount
qlog data model for QUIC and HTTP/3 per IETF drafts (draft-ietf-quic-qlog-main-schema, draft-ietf-quic-qlog-quic-events, draft-ietf-quic-qlog-h3-events). Pure data types + serde serialization; no IO (deferred to consumers).
13k58d agoReviewMountCreate a free account to mount
Low-level QUIC transport and HTTP/3 in Rust. App provides IO/timers; this crate handles protocol state. Also exposes C FFI via staticlib/cdylib. BoringSSL itself is built by boring-sys (no in-tree submodule). - Model mutually exclusive lifecycle phases with enums, rather than related booleans or overlapping completion predicates. Derive state enums from authoritative buffers and acknowledgement data instead of duplicating it. Boolean queries remain suitable for independent properties and compatibility APIs. - Match lifecycle enums exhaustively in transitions and in cleanup or…
13k58d agoReviewMountCreate a free account to mount
HTTP/3 wire protocol over QUIC. Connection manages H3 state (streams, QPACK, SETTINGS, GOAWAY) on top of quiche::Connection<F>. Event-driven: caller loops poll() → Event. Own Error/Result types, separate from quiche::Error.
13k58d agoReviewMountCreate a free account to mount
QUIC loss detection and congestion control per RFC 9002. Two parallel CC implementations coexist: congestion/ (legacy Reno/CUBIC) and gcongestion/ (next-gen BBR2 ported from google/quiche). Recovery enum dispatches between LegacyRecovery and GRecovery via enum_dispatch over the RecoveryOps trait (40+ methods). - Two Acked structs at congestion/recovery.rs:1079 and gcongestion/mod.rs:49. NOT unified. Do NOT create a third. - FIXME stubs: Some RecoveryOps methods only apply to one impl. Both sides have // FIXME only used by {congestion,gcongestion} stubs that return defaults. Do not…
13k58d agoReviewMountCreate a free account to mount
Async tokio wrapper for quiche. Spawns per-connection IO worker tasks driven by an ApplicationOverQuic trait. Ships a ready-made H3Driver for HTTP/3. Uses foundations for structured logging (slog), telemetry, and settings.
13k58d agoReviewMountCreate a free account to mount
Async HTTP/3 driver bridging quiche::h3::Connection to Tokio tasks via channels. H3Driver<H: DriverHooks> is generic over sealed client/server hooks; users interact through H3Controller + typed event/command channels. - Store receive and send lifecycle states explicitly; channel absence does not imply completion. Received FIN and app-channel FIN delivery are distinct receive states. Open and pending receive states own an InboundDelivery payload with its sender and capacity-wait flag; closing the state drops both. FIN preserves the payload, including an existing wait. The outbound…
13k58d agoReviewMountCreate a free account to mount
Async QUIC connection management. Splits socket into recv-half (one InboundPacketRouter task) and send-half (shared by many IoWorker tasks). Entrypoints: connect()/connect_with_config() for clients, start_listener() for servers. raw submodule bypasses the router for manual packet injection.
13k58d agoReviewMountCreate a free account to mount
Elastic Beats is a Go monorepo containing lightweight data shippers for the Elastic Stack. The module path is github.com/elastic/beats/v7. Go version: see .go-version. The primary build tool is Mage (Go-based).…
13k26d agoReviewMountCreate a free account to mount
This is the landing repository for NVIDIA Cosmos: the README, the model reference and the Cosmos Cookbook, an index of agent-runnable recipes. Code, recipes and agent skills live in Cosmos…
Steady2 mentions in 2 weeks
No other project uses it yet
12k24d agoReviewMountCreate a free account to mount
Presidio is a Python SDK for detecting (presidio-analyzer) and anonymizing (presidio-anonymizer) PII in text and images, plus CLI, structured-data, and image-redaction components. It is a widely used library: users depend on current detection behavior, and configuration files written years ago must keep working. Correctness and backward compatibility outrank cleverness. The review-side versions of these rules — which the Copilot PR review agent also enforces — live in .github/copilot-instructions.md and .github/instructions/*.instructions.md. Follow them at authoring time; the pre-PR check below verifies…
12k7d agoReviewMountCreate a free account to mount
The authoring API (src/index.ts, type-only stubs) for optional gatekeeper resource configurator UI modules, the sandbox runtime that renders them (src/runtime/: Kumo components on preact/compat), and the build that bundles both into each configurator's frame (build/). - Gatekeeper configurator UI modules are compiled by scripts/build-gatekeeper-configurator.ts as part of package builds. Each frame is one self-contained HTML document: the minified runtime, its Tailwind/Kumo CSS, and the module, under a content security policy that admits only those scripts by hash and allows no…
12k54d agoReviewMountCreate a free account to mount
@gadgets/error-reporting owns the vendor-neutral browser/Worker event contract and tolerant, bounded normalization for frontend error reports, a separate, opt-in path from server issue reporting (packages/observability/AGENTS.md). - VITE_FRONTEND_ERROR_REPORTING=true enables trusted frontend producers and their hidden source maps at build time; deployments without reporting should leave it unset. - The Workshop browser sends best-effort reports to the same-origin POST /api/client-errors endpoint. The backend dispatches only when both FRONTEND_ERROR_REPORTER and FRONTEND_ERROR_RATE_LIMITER are bound; otherwise the endpoint is an intentional no-op. - Gatekeeper management/configurator UIs…
12k54d agoReviewMountCreate a free account to mount
Cloudflare OAuth, serving three unrelated purposes from one connected account — sign-in (AUTH_GATEKEEPERS), AI Gateway billing, and Workers Observability read-only telemetry resources. Two resource granularities (whole account, or one Worker) both map to the single indivisible workers-observability.read scope, so the capability boundary is the binding, not the grant. - Layering: observability-api.ts is the only place that talks HTTP; observability-parse.ts validates every response (no blind casts); observability-session.ts is the agent-facing session, where every read funnels through one #observe so no path…
12k54d agoReviewMountCreate a free account to mount
AWSAGENTS.md
