docs(agents): prevent agents from modifying dependency manifests and lock files

Author: ivanvpetrov

.github/agents/bug-fixing-implementer-agent.md

@@ -114,6 +114,7 @@ If the bug requires SCSS, theme wiring, or style-test changes, do not implement
 - Do not update `README.md` — the `component-readme-agent` handles that.
 - Do not create migration schematics — the `migration-agent` handles that.
 - Do not update `CHANGELOG.md` — the `changelog-agent` handles that.
+- Do not modify `package.json`, `package-lock.json`, or any other dependency manifest or lock file.
 
 ---
 

.github/agents/bug-fixing-orchestrator-agent.md

@@ -68,6 +68,7 @@ You do NOT write tests, production code, or detailed implementation instructions
 - Do not write tests or production code
 - Do not specify exact test cases, exact implementations, or exact file changes
 - Do not over-constrain the handoff prompts — give scope and root cause, not specs
+- Do not modify `package.json`, `package-lock.json`, or any other dependency manifest or lock file
 
 ---
 

.github/agents/changelog-agent.md

@@ -13,6 +13,13 @@ You update `CHANGELOG.md` at the repository root for Ignite UI for Angular. Only
 
 ---
 
+## What You Do NOT Do
+
+- Do not modify production source code.
+- Do not modify `package.json`, `package-lock.json`, or any other dependency manifest or lock file.
+
+---
+
 ## Steps
 
 ### 1. Find the Latest Version

.github/agents/component-readme-agent.md

@@ -34,6 +34,7 @@ You do not implement production code, write tests, write migrations, or update `
 - Do not rewrite the whole README if only one area changed.
 - Do not update `CHANGELOG.md`.
 - Do not document private/internal implementation details.
+- Do not modify `package.json`, `package-lock.json`, or any other dependency manifest or lock file.
 
 ---
 

.github/agents/demo-sample-agent.md

@@ -39,6 +39,7 @@ You do not implement the library change itself, create new samples or demo folde
 - Do not update component `README.md`.
 - Do not update `CHANGELOG.md`.
 - Do not create migrations.
+- Do not modify `package.json`, `package-lock.json`, or any other dependency manifest or lock file.
 
 ---
 

.github/agents/feature-implementer-agent.md

@@ -118,6 +118,7 @@ Update component agent skills if you need to guide other agents on how to use th
 - Do not update `README.md` — the `component-readme-agent` handles that.
 - Do not create migration schematics — the `migration-agent` handles that.
 - Do not update `CHANGELOG.md` — the `changelog-agent` handles that.
+- Do not modify `package.json`, `package-lock.json`, or any other dependency manifest or lock file.
 
 ---
 

.github/agents/feature-orchestrator-agent.md

@@ -64,6 +64,7 @@ You do NOT write tests, production code, or detailed acceptance criteria. Each s
 - Do not write detailed acceptance criteria that downstream agents must encode literally
 - Do not specify exact test cases, exact implementations, or exact file changes
 - Do not over-constrain the handoff prompts — give scope, not specs
+- Do not modify `package.json`, `package-lock.json`, or any other dependency manifest or lock file
 
 ---
 

.github/agents/migration-agent.md

@@ -28,6 +28,12 @@ You create **`ng update` migration schematics** for breaking changes in Ignite U
 
 ---
 
+## What You Do NOT Do
+
+- Do not add, remove, or change entries in `package.json`, `package-lock.json`, or any other dependency manifest or lock file.
+
+---
+
 ## Steps
 
 ### 1. Determine Version and Number

.github/agents/tdd-test-writer-agent.md

@@ -55,6 +55,8 @@ Do not add extra scenarios unless they are explicitly requested, clearly require
    - No execution-order dependency.
 6. **Never write production code.**
    - Only test code in this phase to ensure the test does not give false negatives. The test MUST fail if the functionality is missing, or not behaving as intended.
+7. **Never modify dependency files.**
+   - `package.json`, `package-lock.json`, `yarn.lock`, `pnpm-lock.yaml`, and similar manifest or lock files are off-limits.
 
 ---
 

.github/agents/theming-styles-agent.md

@@ -121,6 +121,7 @@ If the task is purely documentation or planning, say clearly that style validati
 - Do not update component `README.md`.
 - Do not create migrations.
 - Do not update `CHANGELOG.md`.
+- Do not modify `package.json`, `package-lock.json`, or any other dependency manifest or lock file.
 
 ---