chore: Updated the Agents.md file

[pmathew92]

Changes

This PR updates the AGENTS.md file and creates a new CLAUDE.md file

Checklist

• I have read the Auth0 general contribution guidelines

• I have read the Auth0 Code of Conduct

• All existing and new tests complete without errors

Summary by CodeRabbit

• Documentation
  • Added a new AI coding assistant guide covering project overview, standard build/test commands, repository/module mapping, Kotlin/Java style conventions, and explicit error-handling rules.
  • Documented security practices (including PKCE/DPoP, credential storage, redirect/session handling) plus release workflow and contribution boundaries.
  • Updated the agent instructions to point to the new single source of guidelines, consolidating prior guidance.

[coderabbitai]

📝 Walkthrough

Walkthrough

The PR replaces detailed AI guidance in AGENTS.md with a pointer to a new CLAUDE.md, which documents Auth0.Android development, testing, security, contribution, release, and documentation practices.

Changes

AI contribution guidance

Layer / File(s)	Summary
Guidance foundation AGENTS.md, CLAUDE.md	AGENTS.md points to CLAUDE.md; the new document defines project context, Gradle commands, testing expectations, repository structure, and coding conventions.
Contribution and security rules CLAUDE.md	Contribution workflows, compatibility requirements, API parity, security practices, and common pitfalls are documented.
Maintenance and release reference CLAUDE.md	Dependency versions, release procedures, external references, documentation rules, and an agent completion checklist are added.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Suggested labels: documentation

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title is related to the main documentation change, though it mentions only AGENTS.md and omits the added CLAUDE.md file.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch update_agentmd_file

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[coderabbitai]

Actionable comments posted: 4

🧹 Nitpick comments (1)

CLAUDE.md (1)

55-56: 🎯 Functional Correctness | 🔵 Trivial | 💤 Low value

Rename this to an explicit-API compilation check — auth0:compileReleaseKotlin enforces -Xexplicit-api=strict, but it does not compare against a published API baseline.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@CLAUDE.md` around lines 55 - 56, Rename the documentation entry describing
auth0:compileReleaseKotlin to an explicit-API compilation check, making clear it
enforces -Xexplicit-api=strict rather than comparing against a published API
baseline. Keep the existing Gradle command unchanged.

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@AGENTS.md`:
- Around line 4-6: Update the CLAUDE.md reference in AGENTS.md to use the
portable Markdown link [CLAUDE.md](CLAUDE.md), preserving the surrounding
guidance and avoiding any other documentation changes.

In `@CLAUDE.md`:
- Around line 74-84: Update the fenced directory-tree code blocks in CLAUDE.md,
including the blocks around the authentication test layout and the additional
affected section, to specify the text language identifier. Preserve the
directory listings unchanged while changing each opening fence to use text.
- Line 660: Update the DPoP reference in the documentation list by replacing the
obsolete draft label and URL with the RFC 9449 label and official RFC 9449 link.
- Around line 478-482: Update the DPoP bullet in the documentation to describe
nonce retry handling as reducing replay risk rather than preventing replay
attacks, and note that replay protection also depends on server-enforced
freshness, request binding, key binding, and uniqueness.

---

Nitpick comments:
In `@CLAUDE.md`:
- Around line 55-56: Rename the documentation entry describing
auth0:compileReleaseKotlin to an explicit-API compilation check, making clear it
enforces -Xexplicit-api=strict rather than comparing against a published API
baseline. Keep the existing Gradle command unchanged.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: a687316b-0856-4af9-a4b8-4e1aeb7be9e3

📥 Commits

Reviewing files that changed from the base of the PR and between 6208c76 and c1381c7.

📒 Files selected for processing (2)

• AGENTS.md
• CLAUDE.md

[NandanPrabhu]

How are v4 changes embedded in this @pmathew92 ?

[pmathew92]

What changes are you exactly referring to ? This is more of a generic handling steps

[NandanPrabhu]

I guess I was referring to what we want claude to load at the start of the session as context specifically things added as part of v4.

[NandanPrabhu]

CLAUDE.md looks good but lets please include instruction if not present causes Claude to make mistakes avoiding bloated claude.md file

[pmathew92]

CLAUDE.md looks good but lets please include instruction if not present causes Claude to make mistakes avoiding bloated claude.md file
@NandanPrabhu Can you show some example on what exactly are you referring to ?