CLAUDE.md examples from real projects

trycompaiCLAUDE.md

comp

trycompai/comp/CLAUDE.md

Monorepo Structure ``` apps/ api/ # NestJS API (auth, RBAC, business logic) app/ # Next.js frontend (compliance + security products) portal/ # Employee portal packages/ auth/ # RBAC definitions (permissions.ts) — single source of truth db/ # Prisma

MicrosoftCLAUDE.md

PowerApps-Samples

microsoft/PowerApps-Samples/CLAUDE.md

ImageOperations**: Image column handling - **Schema**: Metadata operations, entity creation - **Search**: Dataverse search, elastic search - **Security**: Role management, sharing, field security - **ServiceClient**: Modern client usage patterns - **Solutions**: Solution management and deployment

vstorm-coCLAUDE.md

full-stack-ai-agent-template

vstorm-co/full-stack-ai-agent-template/CLAUDE.md

backend/ │ ├── app/ │ │ ├── main.py # FastAPI app with lifespan │ │ ├── api/ # Routes, deps, exception handlers │ │ ├── core/ # Config, security, middleware │ │ ├── db/ # Models, session management │ │ ├── schemas/ # Pydantic request/response models │ │ ├── repositories/ # Data access layer │ │ ├── services/ # Business

bcgitCLAUDE.md

bc-csharp

bcgit/bc-csharp/CLAUDE.md

source tree; the FIPS distribution is separate. Root namespace: `Org.BouncyCastle`. NuGet package id: `BouncyCastle.Cryptography`. Security issues: see [SECURITY.md](SECURITY.md) — report privately to feedback-crypto@bouncycastle.org rather than filing a public issue. ## Solution

openagenCLAUDE.md

zeroclaw

openagen/zeroclaw/CLAUDE.md

Rust-first autonomous agent runtime optimized for performance, efficiency, stability, extensibility, sustainability, and security. Core architecture is trait-driven and modular. Extend by implementing traits and registering in factory modules

trailofbitsCLAUDE.md

publications

trailofbits/publications/CLAUDE.md

Papers 3. Guides and Handbooks 4. Conference Presentations 5. Podcasts 6. Public Comments 7. Security Reviews 8. Disclosures 9. Workshops 10. Datasets 11. Service Overviews - Within each section, entries should

Datus-aiCLAUDE.md

Datus-agent

Datus-ai/Datus-agent/CLAUDE.md

cases: deprecated public APIs/config fields (e.g. a removed YAML key must be silently ignored), security fixes (e.g. secrets must not appear in logs), and removed side effects with real regression

No other project uses it yet

meganzCLAUDE.md

android / data

meganz/android/data/CLAUDE.md

Repository` implementations of `:domain` interfaces (also organized into feature subpackages: `chat/`, `account/`, `photos/`, `files/`, `security/`, etc.). - `gateway/` — interfaces abstracting SDK and platform access (e.g. `gateway/api/MegaApiGateway`, `MegaChatApiGateway`, `MegaApiFolderGateway`, `StreamingGateway`, plus `FileGateway

CactiCLAUDE.md

cacti

Cacti/cacti/CLAUDE.md

adds test organization, path-depth and dependency rules. Keep shared guidance free of private security-research notes. Use `mise` for the PHP/Node versions declared by Composer, `.nvmrc

mercurjsCLAUDE.md

mercur

mercurjs/mercur/CLAUDE.md

Medusa", load `.claude/skills/mercur-review/SKILL.md`. It runs independent reviewer agents (Medusa patterns, dashboard patterns, technical QA, security, taste) against `references/`, triages findings into actionable / nit / ambiguous, fixes the actionable ones, verifies them

AnthropicCLAUDE.md

claude-agent-sdk-typescript

anthropics/claude-agent-sdk-typescript/CLAUDE.md

CLAUDE.md Guidance for Claude Code and other coding agents working in this repository. ## Security hardening for GitHub Actions Workflow jobs in this repository that call Claude run with three protections

No other project uses it yet

NikolaySCLAUDE.md

pgque

NikolayS/pgque/CLAUDE.md

Architecture Two-layer design: - **pgque-core:** Productization of PgQ (rename, PG14+ modernization, pg_cron, security hardening, single-file install). Mechanical transformation of ~4,028 lines of proven PL/pgSQL. - **pgque

OpenAdaptAICLAUDE.md

OpenAdapt

OpenAdaptAI/OpenAdapt/CLAUDE.md

monolith - `docs/`: noncanonical historical repository documentation; docs.openadapt.ai is maintained in `OpenAdaptAI/openadapt-ops` - `.github/`: CI, security, dependency, and release workflows ## Development and delivery ```bash python -m pip install -e '.[dev]' pytest ruff

No other project uses it yet

kenn-ioCLAUDE.md

roborev

kenn-io/roborev/CLAUDE.md

prompt), `compact` (consolidated multi-agent), `fix` (background worktree fix) ### Review types Empty/`"review"` (standard), `"security"`, `"design"` — changes the system prompt. `"exhaustive"` keeps the standard prompt and appends an instruction

DialmasterOrgCLAUDE.md

Youtarr

DialmasterOrg/Youtarr/CLAUDE.md

docstrings, type comments or explanatory prose to code you did not change. ## Security Youtarr shells out to `yt-dlp` and writes files using user-influenced paths, so this section

SupabaseCLAUDE.md

postgres

supabase/postgres/CLAUDE.md

style compliance specs run against built images | | `.claude/skills/pg-security-release-analysis/` | Skill for triaging upstream PG quarterly security releases into a CVE/impact catalog — see below | ## Building and testing Exact commands verified against `nix/docs/build-postgres.md

security-unionCLAUDE.md

videocall-rs

security-union/videocall-rs/CLAUDE.md

Before making any recommendation or assessment about transport protocols (WebTransport, WebSocket, QUIC, datagrams, reliability), security design, or performance trade-offs, delegate to the relevant specialist agent first. Do not reason

RackulaLivesCLAUDE.md

Rackula

RackulaLives/Rackula/CLAUDE.md

release approval gate; it runs `versions deploy` only, so it never touches routes. Security headers come from `scripts/gen-headers.mjs`, which transcribes `deploy/security-headers.conf` by value and is parity-checked in CI. They

bohanwoodCLAUDE.md

debi

bohanwood/debi/CLAUDE.md

remote monitoring - `in_target()`: Executes commands within the target installation environment - `prompt_password()`: Securely handles password input with validation ## Important Configuration Variables The script uses 80+ configuration options. Key ones

Macro-Deck-AppCLAUDE.md

Macro-Deck

Macro-Deck-App/Macro-Deck/CLAUDE.md

documentation. Comment only for a reason the code cannot express: a security or trust assumption, a compatibility or protocol constraint, a platform workaround, an ordering or race requirement, deliberately surprising