Codex opened a PR that also deletes my lockfile and .env.example

Close that PR and run the task again with tighter instructions. Fixing a messy PR with more prompts usually makes it messier.

In AGENTS.md:

• "Never delete or regenerate package-lock.json unless the task is about dependencies."
• "Do not reformat files you did not need to change."

And always read the list of changed files before the description. The description is the model's summary of what it meant to do, the file list is what it did.

Make the rules enforceable too. Two cheap guards in CI:

• npm ci fails when package-lock.json doesn't match package.json, so a deleted or regenerated lockfile breaks the build instead of slipping through review.
• Run your formatter in check mode (prettier --check .). Once the whole repo is formatted, the "30 files of formatting" noise disappears, because there's nothing left to reformat.

The second one sounds unrelated, but half of these drive-by diffs are the agent running a formatter the repo itself never ran.