Never Bundle Secrets
Secrets come from each person's own settings, never from a file inside the plugin.
Where you'll practice this
One Promptles scenario teaches this principle directly.
Keep the Token Out of the Plugin
shipkit 0.3.0 adds a `github` MCP server so Claude can read merged PRs and create releases. To get it working, Dana pasted their personal GitHub token into `.mcp.json`, staged the file (marked it for the next commit), and asked you to look before they commit. Everyone who…
Other principles in Constraints
Define Component Boundaries
When splitting a component, give the decisions already made and say nothing on screen should change.
Define Inputs and Outputs
Say what goes in, what comes out, and what happens with bad input. Leave the inside to Claude.
Define the Business Logic
Turn business words into exact rules: the fields, the thresholds, and how they combine.
Deprecate Before Removing
Keep the old name working for a release, point to the replacement, and announce when it goes away.
Describe Edge Cases
Name the unusual cases you know about and what should happen in each.
Describe Type Contracts
Tell Claude the rules the code doesn't show, like allowed values and optional fields. It can work out the rest.