diff --git a/AGENTS.md b/AGENTS.md
index 909621e4..4847e2cd 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -1,6 +1,7 @@
 # AGENTS.md — AI Coding Agent Instructions
 
 <!-- BEGIN: canonical-behavior-pointer (auto-managed) -->
+
 > **Read first (ecosystem-wide agent behavior):**
 > [`AI.dev/SKILLS/agent-behavior-guidelines.md`](AI.dev/SKILLS/agent-behavior-guidelines.md)
 >
@@ -10,6 +11,7 @@
 > Cosmos doc, conventional commits, style preservation).
 >
 > The per-repo content below extends — never duplicates — the canonical rules.
+
 <!-- END: canonical-behavior-pointer -->
 
 > **For:** Claude Code, OpenAI Codex, Cursor, GitHub Copilot, Windsurf Cascade, and any AI coding agent.
@@ -158,7 +160,7 @@ learning_ai_common_plat/
 - **Template:** `scripts/npmrc.template` in this repo (learning_ai_common_plat)
 - **Sync:** `bash scripts/sync-npmrc.sh` — copies template to all 13 product repos
 - **Audit:** `bash scripts/check-npmrc-drift.sh` — detects drift (CI-ready, exits 1 on mismatch)
-- **Key config:** `@bytelyst:registry` uses `${GITEA_NPM_HOST:-localhost}:3300` SSH tunnel — never hardcode `gitea.bytelyst.com` (unreachable on corp network)
+- **Key config:** `@bytelyst:registry` uses `${GITEA_NPM_HOST:-localhost}` — never hardcode `gitea.bytelyst.com` (unreachable on corp network)
 - **If adding a new repo:** add it to the `REPOS` array in both `sync-npmrc.sh` and `check-npmrc-drift.sh`, then run sync
 
 ### MUST NOT do
@@ -166,7 +168,7 @@ learning_ai_common_plat/
 - Never use `console.log` in production code — use `req.log` or `app.log` in Fastify
 - Never use `any` type — use Zod inference or explicit types
 - Never hardcode secrets or API keys
-- Never hardcode `gitea.bytelyst.com` in `.npmrc` — use `${GITEA_NPM_HOST:-localhost}:3300` via the canonical template
+- Never hardcode `gitea.bytelyst.com` in `.npmrc` — use `${GITEA_NPM_HOST:-localhost}` via the canonical template
 - Secret guardrails: Husky runs `scripts/secret-scan-staged.sh` (pre-commit) and `scripts/secret-scan-repo.sh` (pre-push). See `docs/WINDSURF/CODEX_SESSION_SUMMARY_AND_PLAYBOOK.md`.
 - Never commit real emulator keys or blob account keys in tracked files; keep placeholders in `.env.example`
 - Never modify tests to make them pass — fix the actual code
diff --git a/scripts/npmrc.template b/scripts/npmrc.template
index a14197cc..3948b354 100644
--- a/scripts/npmrc.template
+++ b/scripts/npmrc.template
@@ -1,5 +1,5 @@
-@bytelyst:registry=http://${GITEA_NPM_HOST:-localhost}:3300/api/packages/${GITEA_NPM_OWNER:-learning_ai_user}/npm/
-//${GITEA_NPM_HOST:-localhost}:3300/api/packages/${GITEA_NPM_OWNER:-learning_ai_user}/npm/:_authToken=${GITEA_NPM_TOKEN}
+@bytelyst:registry=http://${GITEA_NPM_HOST:-localhost}/api/packages/${GITEA_NPM_OWNER:-learning_ai_user}/npm/
+//${GITEA_NPM_HOST:-localhost}/api/packages/${GITEA_NPM_OWNER:-learning_ai_user}/npm/:_authToken=${GITEA_NPM_TOKEN}
 strict-ssl=false
 link-workspace-packages=true
 prefer-workspace-packages=true