@bonesofspring/ai-rules 0.1.40 → 0.1.41

package/presets/cursor/next/hooks/chain-team-phases.sh

@@ -10,6 +10,8 @@ INPUT="$input" node <<'NODE'
 const fs = require('fs');
 const path = require('path');
 
+const TEAM_ROOT = path.join(process.cwd(), '.cursor', 'team');
+
 const inputRaw = process.env.INPUT || '';
 let hookInput;
 try {
@@ -24,8 +26,7 @@ if (hookInput.status !== 'completed') {
   process.exit(0);
 }
 
-const teamRoot = path.join(process.cwd(), '.cursor', 'team');
-const activePath = path.join(teamRoot, 'active-task.json');
+const activePath = path.join(TEAM_ROOT, 'active-task.json');
 
 if (!fs.existsSync(activePath)) {
   process.stdout.write('{}');
@@ -46,7 +47,7 @@ if (!slug) {
   process.exit(0);
 }
 
-const taskDir = path.join(teamRoot, 'tasks', slug);
+const taskDir = path.join(TEAM_ROOT, 'tasks', slug);
 const statusPath = path.join(taskDir, 'status.json');
 const pipelinePath = path.join(taskDir, 'pipeline.json');
 
@@ -74,58 +75,176 @@ function out(message) {
   process.stdout.write(JSON.stringify({ followup_message: message }));
 }
 
+function readArtifact(name) {
+  const p = path.join(taskDir, name);
+  if (!fs.existsSync(p)) return '';
+  try {
+    return fs.readFileSync(p, 'utf8');
+  } catch {
+    return '';
+  }
+}
+
+function getStepAgents(step) {
+  if (!step) return [];
+  return Array.isArray(step.agent) ? step.agent : [step.agent];
+}
+
+function skipIfMatches(skipIf, dir) {
+  if (!skipIf) return false;
+  if (skipIf === 'debugger.fixed') {
+    const text = readArtifact('debug-report.md');
+    return /fixApplied:\s*true/i.test(text) || /\*\*Fix applied:\*\*\s*true/i.test(text);
+  }
+  if (skipIf === 'ci-investigator.resolved') {
+    const text = readArtifact('ci-report.md');
+    return /fixApplied:\s*true/i.test(text) || /## Verdict\s*\nPASS/i.test(text);
+  }
+  return false;
+}
+
+function findNextExecutableStep(steps, startIdx, dir) {
+  for (let i = startIdx; i < steps.length; i++) {
+    if (!skipIfMatches(steps[i].skipIf, dir)) {
+      return { step: steps[i], index: i };
+    }
+  }
+  return null;
+}
+
 const AGENT_HANDOFF = {
   'task-analyst': (s) =>
     `Invoke task-analyst for slug "${s}". Write brief.md and decomposition.md under .cursor/team/tasks/${s}/. ` +
-    `Set status.json state to awaiting_approval if human gate applies.`,
+    `Set status.json: phase executing, state awaiting_approval if human gate applies. Do not use legacy phase analysis.`,
   debugger: (s) =>
-    `Invoke debugger subagent for slug "${s}". Investigate root cause; write debug-report.md. ` +
+    `Invoke debugger subagent for slug "${s}". Investigate root cause; write debug-report.md with fixApplied: true/false. ` +
     `Update status.json when done.`,
   'solution-architect': (s) =>
-    `Invoke solution-architect for slug "${s}". Read brief.md; write architecture.md. ` +
-    `Update status.json when done.`,
+    `Invoke solution-architect for slug "${s}". Read brief.md; write architecture.md. Update status.json when done.`,
+  'migration-specialist': (s) =>
+    `Invoke migration-specialist for slug "${s}". Read brief.md; write migration-plan.md. Update status.json when done.`,
+  'api-contract-reviewer': (s) =>
+    `Invoke api-contract-reviewer (readonly) for slug "${s}". Write api-contract-review.md. Update status.json when done.`,
+  'ci-investigator': (s) =>
+    `Invoke ci-investigator for slug "${s}". Diagnose CI failure; write ci-report.md; apply minimal fix. ` +
+    `Use ci-investigation skill. Update status.json when done.`,
   'feature-developer': (s) =>
-    `Invoke feature-developer for slug "${s}". Read brief.md, decomposition.md, architecture.md and debug-report.md if present. ` +
-    `Follow feature-delivery-workflow.mdc. Update status.json when done.`,
+    `Invoke feature-developer for slug "${s}". Read brief.md, decomposition.md, validation-report.md, review.md, architecture.md, migration-plan.md, api-contract-review.md, debug-report.md if present. ` +
+    `Follow feature-delivery-workflow.mdc and reference-features.mdc. Include unit tests for mappers/logic before handoff. Update status.json when done.`,
+  'build-verifier': (s) =>
+    `Invoke build-verifier (readonly) for slug "${s}". Run lint:js, lint:css, type-check, and targeted unit tests from app/. ` +
+    `Write validation-report.md. Set state completed or validation_failed. Do not edit production code.`,
+  'accessibility-reviewer': (s) =>
+    `Invoke accessibility-reviewer (readonly) for slug "${s}". Review UI diff; write a11y-review.md. Update status.json when done.`,
+  'performance-auditor': (s) =>
+    `Invoke performance-auditor (readonly) for slug "${s}". Write perf-report.md. Update status.json when done.`,
   'code-reviewer': (s) =>
     `Invoke code-reviewer subagent (readonly) for slug "${s}". Review git diff vs brief.md per code-review-mr.mdc. ` +
     `Update status.json when done.`,
+  'security-reviewer': (s) =>
+    `Invoke security-reviewer (readonly) for slug "${s}". Write security-review.md. Update status.json when done.`,
   'qa-tester': (s, scope) =>
     `Invoke qa-tester for slug "${s}"${scope ? ` (scope: ${scope})` : ''}. ` +
-    `Add/update unit and e2e tests per brief. Follow playwright-agents.mdc. Update status.json when done.`,
+    `Add/update tests per brief. Follow playwright-agents.mdc. Update status.json when done.`,
+  'unit-test-planner': (s) =>
+    `Invoke unit-test-planner for slug "${s}". Write unit-test-plan.md. Use unit-testing skill. Update status.json when done.`,
+  'unit-test-generator': (s) =>
+    `Invoke unit-test-generator for slug "${s}". Implement specs from unit-test-plan.md. Use unit-testing skill. Update status.json when done.`,
+  'unit-test-healer': (s) =>
+    `Invoke unit-test-healer for slug "${s}". Fix failing unit tests. Use unit-testing and debug-investigation skills. Update status.json when done.`,
+  'playwright-test-planner': (s) =>
+    `Invoke playwright-test-planner for slug "${s}". Create/update app/__tests__/e2e/**/*.cases.md. ` +
+    `Follow playwright-agents.mdc and the playwright-e2e skill. Update status.json when done.`,
+  'playwright-test-generator': (s) =>
+    `Invoke playwright-test-generator for slug "${s}". Generate/update *.spec.ts from matching *.cases.md. ` +
+    `Use user-playwright MCP when available. Follow playwright-agents.mdc and the playwright-e2e skill. Update status.json when done.`,
+  'playwright-test-healer': (s) =>
+    `Invoke playwright-test-healer for slug "${s}". Fix failing/flaky e2e while preserving cases.md assertions. ` +
+    `Use user-playwright MCP when available. Follow playwright-agents.mdc and debug-investigation. Update status.json when done.`,
+  'tech-writer': (s) =>
+    `Invoke tech-writer for slug "${s}". Write documentation.md from task artifacts. Update status.json when done.`,
 };
 
+const REVIEW_AGENTS = new Set([
+  'code-reviewer',
+  'accessibility-reviewer',
+  'security-reviewer',
+  'api-contract-reviewer',
+]);
+
 function handoffForAgent(agent, scope) {
   const fn = AGENT_HANDOFF[agent];
   return fn ? fn(slug, scope) : `Invoke ${agent} subagent for slug "${slug}". Update status.json when done.`;
 }
 
+function handoffForParallelStep(step) {
+  const agents = getStepAgents(step);
+  return (
+    `Invoke IN PARALLEL (one message, multiple Task calls): ${agents.join(' AND ')} for slug "${slug}". ` +
+    `Each agent writes its artifact and appends itself to status.json parallelCompleted when done.`
+  );
+}
+
 function hasGateAfter(agent, humanGates) {
   return Array.isArray(humanGates) && humanGates.includes(`after:${agent}`);
 }
 
-// --- Legacy flow (no pipeline.json) ---
+function hasGateAfterStep(step, humanGates) {
+  return getStepAgents(step).some((a) => hasGateAfter(a, humanGates));
+}
+
 function legacyFlow() {
   if (status.phase === 'analysis') {
     process.stdout.write('{}');
     process.exit(0);
   }
   if (status.phase === 'development' && (status.state === 'completed' || status.state === 'in_progress')) {
-    writeStatus({ phase: 'review', state: 'in_progress', currentAgent: 'code-reviewer' });
+    writeStatus({ phase: 'executing', state: 'in_progress', currentAgent: 'build-verifier' });
+    out(handoffForAgent('build-verifier'));
+    process.exit(0);
+  }
+  if (status.currentAgent === 'build-verifier' && status.state === 'completed') {
+    writeStatus({ phase: 'executing', state: 'in_progress', currentAgent: 'code-reviewer' });
     out(handoffForAgent('code-reviewer'));
     process.exit(0);
   }
   if (status.phase === 'review' && status.state === 'completed') {
-    writeStatus({ phase: 'testing', state: 'in_progress', currentAgent: 'qa-tester' });
+    writeStatus({ phase: 'executing', state: 'in_progress', currentAgent: 'qa-tester' });
     out(handoffForAgent('qa-tester'));
     process.exit(0);
   }
-  if (status.phase === 'review' && status.state === 'changes_requested') {
+  if (status.state === 'changes_requested' && REVIEW_AGENTS.has(status.currentAgent)) {
+    writeStatus({
+      currentAgent: 'feature-developer',
+      state: 'in_progress',
+      phase: 'executing',
+      retryAfterFix: status.currentAgent,
+    });
+    out(
+      handoffForAgent('feature-developer') +
+        ` After fixes, re-run ${status.currentAgent}.`,
+    );
+    process.exit(0);
+  }
+  if (status.state === 'validation_failed' && status.currentAgent === 'build-verifier') {
+    writeStatus({
+      currentAgent: 'feature-developer',
+      state: 'in_progress',
+      phase: 'executing',
+      retryAfterFix: 'build-verifier',
+    });
     out(
-      `Review requested changes for slug "${slug}". Invoke feature-developer with fix list, then code-reviewer.`,
+      handoffForAgent('feature-developer') +
+        ` Read validation-report.md. After fixes, re-run build-verifier.`,
     );
     process.exit(0);
   }
+  if (status.state === 'completed' && status.retryAfterFix) {
+    const retry = status.retryAfterFix;
+    writeStatus({ currentAgent: retry, state: 'in_progress', retryAfterFix: null });
+    out(handoffForAgent(retry));
+    process.exit(0);
+  }
   if (status.phase === 'testing' && status.state === 'completed') {
     writeStatus({ phase: 'done', state: 'completed' });
     out(`Pipeline complete for "${slug}". Run /technical-retro ${slug}.`);
@@ -152,20 +271,44 @@ if (steps.length === 0 || pipeline.autoChain === false) {
   process.exit(0);
 }
 
-// Human gate active — do not chain
 if (status.awaitingHumanGate || status.state === 'awaiting_approval') {
   process.stdout.write('{}');
   process.exit(0);
 }
 
-// Review blocked — re-run developer
-if (status.state === 'changes_requested' && status.currentAgent === 'code-reviewer') {
+if (status.state === 'changes_requested' && REVIEW_AGENTS.has(status.currentAgent)) {
+  const reviewer = status.currentAgent;
+  writeStatus({
+    currentAgent: 'feature-developer',
+    state: 'in_progress',
+    phase: 'executing',
+    retryAfterFix: reviewer,
+  });
+  out(
+    handoffForAgent('feature-developer') +
+      ` After fixes, re-run ${reviewer}.`,
+  );
+  process.exit(0);
+}
+
+if (status.state === 'validation_failed' && status.currentAgent === 'build-verifier') {
   writeStatus({
     currentAgent: 'feature-developer',
     state: 'in_progress',
     phase: 'executing',
+    retryAfterFix: 'build-verifier',
   });
-  out(handoffForAgent('feature-developer'));
+  out(
+    handoffForAgent('feature-developer') +
+      ` Read validation-report.md. After fixes, re-run build-verifier.`,
+  );
+  process.exit(0);
+}
+
+if (status.state === 'completed' && status.retryAfterFix) {
+  const retry = status.retryAfterFix;
+  writeStatus({ currentAgent: retry, state: 'in_progress', retryAfterFix: null });
+  out(handoffForAgent(retry));
   process.exit(0);
 }
 
@@ -177,10 +320,24 @@ if (!currentStep) {
   process.exit(0);
 }
 
-const completedAgent = status.currentAgent || currentStep.agent;
+const completedAgent = status.currentAgent || getStepAgents(currentStep)[0];
+const stepAgents = getStepAgents(currentStep);
 
-// Gate after the step that just finished
-if (hasGateAfter(completedAgent, pipeline.humanGates)) {
+if (currentStep.parallel && stepAgents.length > 1) {
+  const done = [...(status.parallelCompleted || [])];
+  if (completedAgent && !done.includes(completedAgent)) {
+    done.push(completedAgent);
+  }
+  writeStatus({ parallelCompleted: done });
+  const remaining = stepAgents.filter((a) => !done.includes(a));
+  if (remaining.length > 0) {
+    process.stdout.write('{}');
+    process.exit(0);
+  }
+  writeStatus({ parallelCompleted: [] });
+}
+
+if (hasGateAfterStep(currentStep, pipeline.humanGates)) {
   writeStatus({
     awaitingHumanGate: true,
     state: 'awaiting_approval',
@@ -190,10 +347,10 @@ if (hasGateAfter(completedAgent, pipeline.humanGates)) {
   process.exit(0);
 }
 
-const nextIdx = idx + 1;
-if (nextIdx >= steps.length) {
+const next = findNextExecutableStep(steps, idx + 1, taskDir);
+if (!next) {
   writeStatus({
-    pipelineIndex: nextIdx,
+    pipelineIndex: steps.length,
     phase: 'done',
     state: 'completed',
     currentAgent: null,
@@ -203,14 +360,21 @@ if (nextIdx >= steps.length) {
   process.exit(0);
 }
 
-const nextStep = steps[nextIdx];
+const { step: nextStep, index: nextIdx } = next;
+const nextAgents = getStepAgents(nextStep);
+
 writeStatus({
   pipelineIndex: nextIdx,
-  currentAgent: nextStep.agent,
+  currentAgent: nextAgents[0],
   phase: 'executing',
   state: 'in_progress',
   awaitingHumanGate: false,
+  parallelCompleted: [],
 });
 
-out(handoffForAgent(nextStep.agent, nextStep.scope));
+if (nextStep.parallel && nextAgents.length > 1) {
+  out(handoffForParallelStep(nextStep));
+} else {
+  out(handoffForAgent(nextAgents[0], nextStep.scope));
+}
 NODE

package/presets/cursor/next/hooks/guard-shell-command.sh

@@ -0,0 +1,77 @@
+#!/usr/bin/env bash
+# Lightweight shell guard for Cursor projects using this preset.
+
+set -euo pipefail
+
+input=$(cat)
+
+INPUT="$input" node <<'NODE'
+const fs = require('fs');
+
+const raw = process.env.INPUT || '';
+let event;
+try {
+  event = JSON.parse(raw);
+} catch {
+  process.stdout.write('{ "permission": "allow" }');
+  process.exit(0);
+}
+
+const command = String(event.command || event.input?.command || '');
+if (!command.trim()) {
+  process.stdout.write('{ "permission": "allow" }');
+  process.exit(0);
+}
+
+function out(permission, userMessage, agentMessage) {
+  process.stdout.write(JSON.stringify({
+    permission,
+    user_message: userMessage,
+    agent_message: agentMessage || userMessage,
+  }));
+}
+
+const dangerousGit = /\bgit\s+(reset\s+--hard|clean\s+-[^\n]*f|push\s+--force|push\s+-f|checkout\s+--\s+)/;
+if (dangerousGit.test(command)) {
+  out(
+    'ask',
+    'This command looks destructive for git state. Review it before continuing.',
+    'A project hook flagged a destructive git command. Ask the user before running it.',
+  );
+  process.exit(0);
+}
+
+const managerByFile = [
+  ['yarn.lock', 'yarn'],
+  ['pnpm-lock.yaml', 'pnpm'],
+  ['package-lock.json', 'npm'],
+].find(([file]) => fs.existsSync(file));
+
+let expected = managerByFile?.[1];
+if (!expected && fs.existsSync('package.json')) {
+  try {
+    const pkg = JSON.parse(fs.readFileSync('package.json', 'utf8'));
+    const pm = typeof pkg.packageManager === 'string' ? pkg.packageManager : '';
+    expected = pm.split('@')[0] || undefined;
+  } catch {
+    // Ignore invalid package.json in the hook; the agent can diagnose it later.
+  }
+}
+
+if (!expected) {
+  process.stdout.write('{ "permission": "allow" }');
+  process.exit(0);
+}
+
+const used = command.match(/(^|[;&|]\s*)(npm|yarn|pnpm)\s+/)?.[2];
+if (used && used !== expected) {
+  out(
+    'ask',
+    `This repository appears to use ${expected}, but the command uses ${used}. Confirm before continuing.`,
+    `Use ${expected} for package scripts and installs unless the user explicitly approves ${used}.`,
+  );
+  process.exit(0);
+}
+
+process.stdout.write('{ "permission": "allow" }');
+NODE

package/presets/cursor/next/hooks.json

@@ -1,10 +1,16 @@
 {
   "version": 1,
   "hooks": {
+    "beforeShellExecution": [
+      {
+        "command": ".cursor/hooks/guard-shell-command.sh",
+        "failClosed": true
+      }
+    ],
     "subagentStop": [
       {
         "command": ".cursor/hooks/chain-team-phases.sh",
-        "loop_limit": 5
+        "loop_limit": 15
       }
     ]
   }

package/presets/cursor/next/rules/README.md

@@ -17,20 +17,30 @@
 - **Legacy:** `/feature-start` → `/feature-continue`.
 - **Сквозной чеклист слоёв (для developer):** **`feature-delivery-workflow.mdc`**.
 
-### Эталонные фичи (заполняет команда)
+### Loading strategy
 
-Имена папок в `app/src/ui/pages/**`, `app/src/store/slices/**`, `app/src/api/services/**`, которые считаются образцом структуры — **TBD** (заменить на реальные пути после договорённости в команде).
+- **`alwaysApply: true`** (Cursor) / **без `paths:`** (Claude) — только базовые инварианты:
+  - `next-app-core`, `post-change-lint`, `package-manager`, `agent-team-intake`, `code-quality-and-refactoring`
+- **Globs / `paths:`** — architecture, imports, UI, tests, feature-delivery-workflow, reference-features, next-app-router, react-a11y-coding
+- **Skills** — длинные процедуры (`feature-delivery`, `code-review`, …)
+
+### Эталонные фичи
+
+Заполните **`reference-features.mdc`** (TBD → реальные пути) после `init` в целевом репо.
 
 ### Каталог ключевых правил
 
 | Файл | Назначение |
 |------|------------|
-| `agent-team-orchestrator.mdc` | `/task`, router, `pipeline.json`, динамический пайплайн subagents |
+| `reference-features.mdc` | Эталонные пути UI/store/API/types/tests |
+| `next-app-router.mdc` | App Router, RSC, loading/error |
+| `react-a11y-coding.mdc` | A11y при написании UI |
+| `feature-delivery-workflow.mdc` | Сквозной чеклист (on-demand, не always-on) |
 | `agent-team-intake.mdc` | Автоподсказка `/task` при постановке задачи (alwaysApply) |
 | `package-manager.mdc` | Перед `install` / `run` в терминале определить менеджер пакетов репо (lockfile, `packageManager`) и использовать только его |
-| `feature-delivery-workflow.mdc` | Сквозной порядок работ по фиче, mermaid‑поток, матрица слой → правило `.mdc` |
-| `next-app-core.mdc` | Стек, слои, порты‑адаптеры (кратко), доменная логика vs state, общие требования к агенту |
-| `post-change-lint.mdc` | **Обязательный** прогон ESLint + Stylelint после любых изменений кода, исправление срабатываний |
+| `agent-team-orchestrator.mdc` | `/task`, router, `pipeline.json`, build-verifier, parallel steps |
+| `next-app-core.mdc` | Стек, слои, порты‑адаптеры (alwaysApply) |
+| `post-change-lint.mdc` | **Обязательный** прогон ESLint + Stylelint после любых изменений кода |
 | `architecture-boundaries.mdc` | Границы UI / store / API, импорты (`@/types`, `@/api`), порты‑адаптеры, фича как срез |
 | `http-client.mdc` | Один HTTP‑стек, контракты из `@/types`, без разбросанного низкоуровневого API |
 | `api-services.mdc` | Сервисы, мапперы, вызовы через прикладные API‑клиенты |

package/presets/cursor/next/rules/agent-team-orchestrator.mdc

@@ -22,12 +22,26 @@ Parent agent = **manager**. Router plans; specialists execute. Artifacts: `.curs
 | Agent | readonly | Typical intent |
 |-------|----------|----------------|
 | `task-router` | yes | Every `/task` — writes `pipeline.json` |
-| `task-analyst` | yes | feature, refactor, test-only |
+| `task-analyst` | yes | feature, refactor, test-only, a11y, docs-only, migration |
 | `solution-architect` | yes | spike, complex cross-layer feature |
+| `migration-specialist` | yes | migration — phased upgrade plan |
+| `api-contract-reviewer` | yes | new/changed backend API contracts |
 | `debugger` | no | bugfix |
-| `feature-developer` | no | feature, bugfix, refactor |
+| `ci-investigator` | no | ci-fix — minimal CI repair |
+| `feature-developer` | no | feature, bugfix, refactor, migration, a11y |
+| `build-verifier` | yes | lint/type-check/unit gate after developer |
+| `accessibility-reviewer` | yes | a11y, UI-heavy feature |
+| `performance-auditor` | yes | perf-audit, perf-sensitive feature |
 | `code-reviewer` | yes | most pipelines, review-only |
+| `security-reviewer` | yes | auth, forms, sensitive data |
 | `qa-tester` | no | feature, bugfix, test-only |
+| `unit-test-planner` | yes | unit-only — coverage plan |
+| `unit-test-generator` | no | unit-only — spec generation |
+| `unit-test-healer` | no | failing/flaky unit tests |
+| `playwright-test-planner` | no | e2e scenario planning |
+| `playwright-test-generator` | no | e2e spec generation |
+| `playwright-test-healer` | no | failing/flaky e2e fixes |
+| `tech-writer` | yes | docs-only, feature/migration docs |
 
 Full prompts: `.cursor/agents/*.md`. Artifact conventions: `.cursor/team/README.md`.
 
@@ -74,18 +88,28 @@ flowchart TD
 | `in_progress` | Current step running |
 | `completed` | Current step done; hook advances |
 | `awaiting_approval` | Human gate; wait for `/task-continue` |
-| `changes_requested` | Reviewer blocked; re-run developer |
+| `changes_requested` | Reviewer blocked; re-run developer (`retryAfterFix`) |
+| `validation_failed` | build-verifier failed; re-run developer then build-verifier |
+
+## Pipeline step options
+
+| Field | Use |
+|-------|-----|
+| `skipIf` | `debugger.fixed` / `ci-investigator.resolved` — hook skips step when artifact says fix applied |
+| `parallel: true` | `agent` is array — invoke **all** agents in one parent turn; each appends to `parallelCompleted` |
+| `scope` | e.g. `unit-in-dev`, `e2e-only` — passed to developer/qa |
 
 ## Rules (strict)
 
 1. **`/task` always starts with task-router** (except user says "skip router" with documented pipeline).
 2. Read `pipeline.json` before every subagent invocation.
-3. One role per Task/subagent call.
+3. One role per Task call — **except** parallel steps: multiple Task calls in one message.
 4. **Never** skip `humanGates` without `/task-continue` or explicit user approval.
-5. Persist handoffs to disk (`brief.md`, `decomposition.md`, `debug-report.md`, `architecture.md`).
-6. On `changes_requested`: re-invoke `feature-developer`, then `code-reviewer` — do not advance `pipelineIndex` until review passes.
-7. When all steps complete, suggest `/technical-retro <slug>`.
-8. If `autoChain: false` in pipeline, do not rely on hook — manual step only.
+5. Persist handoffs to disk (`brief.md`, `decomposition.md`, `debug-report.md`, `validation-report.md`, `architecture.md`, `migration-plan.md`, `ci-report.md`, `a11y-review.md`, `perf-report.md`, `security-review.md`, `api-contract-review.md`, `unit-test-plan.md`, `documentation.md`, `review.md`).
+6. On `changes_requested` from reviewers: hook sets `retryAfterFix` → developer → same reviewer.
+7. On `validation_failed` from `build-verifier`: hook sets `retryAfterFix: build-verifier` → developer → build-verifier.
+8. When all steps complete, suggest `/technical-retro <slug>`.
+9. If `autoChain: false` in pipeline, do not rely on hook — manual step only.
 
 ## Invoking agents
 

package/presets/cursor/next/rules/api-public-imports.mdc

@@ -1,6 +1,7 @@
 ---
 description: Импорт из API-слоя только через публичный barrel @/api
-alwaysApply: true
+globs: app/src/**/*.ts,app/src/**/*.tsx
+alwaysApply: false
 ---
 
 # Импорты из `@/api`

package/presets/cursor/next/rules/architecture-boundaries.mdc

@@ -1,6 +1,7 @@
 ---
 description: Архитектурные границы и правила импортов
-alwaysApply: true
+globs: app/src/**/*
+alwaysApply: false
 ---
 
 # Границы между слоями

package/presets/cursor/next/rules/arrow-functions.mdc

@@ -1,6 +1,7 @@
 ---
 description: Предпочитать стрелочные функции при написании кода
-alwaysApply: true
+globs: app/src/**/*.{ts,tsx,js,jsx}
+alwaysApply: false
 ---
 
 # Стрелочные функции

package/presets/cursor/next/rules/code-review-mr.mdc

@@ -1,6 +1,6 @@
 ---
 description: Требования к code review агентами Cursor для merge requests
-alwaysApply: true
+alwaysApply: false
 ---
 
 # Code review merge requests

package/presets/cursor/next/rules/css-property-order-stylelint.mdc

@@ -1,6 +1,9 @@
 ---
 description: Порядок CSS-свойств по Stylelint (idiomatic-order) — для любых стилей в проекте
-alwaysApply: true
+globs:
+  - app/src/**/*.{css,ts,tsx}
+  - app/**/*.css
+alwaysApply: false
 ---
 
 # Порядок CSS-свойств (как в Stylelint)

package/presets/cursor/next/rules/feature-delivery-flow.mdc

@@ -1,6 +1,6 @@
 ---
 description: Сквозной flow фичи (типы, API, моки, store, UI, тесты) и точки регистрации в репозитории
-alwaysApply: true
+alwaysApply: false
 ---
 
 # Поставка фичи: порядок слоёв и регистрация

package/presets/cursor/next/rules/feature-delivery-workflow.mdc

@@ -1,6 +1,6 @@
 ---
-description: Сквозной чеклист новой фичи и матрица «слой → правило Cursor»
-alwaysApply: true
+description: Сквозной чеклист новой фичи и матрица «слой → правило Cursor». Use when implementing features via feature-developer or feature-delivery skill.
+alwaysApply: false
 ---
 
 # Доставка фичи (сквозной порядок)

package/presets/cursor/next/rules/layer-barrel-exports.mdc

@@ -1,6 +1,7 @@
 ---
 description: Двухуровневые barrel-экспорты для слоёв с регламентированным public API
-alwaysApply: true
+globs: app/src/**/*
+alwaysApply: false
 ---
 
 # Barrel-экспорты слоёв с public API

package/presets/cursor/next/rules/navigation-router-stack.mdc

@@ -1,6 +1,7 @@
 ---
 description: Выбор API навигации по стеку проекта (Next.js vs React Router)
-alwaysApply: true
+globs: app/src/ui/**/*
+alwaysApply: false
 ---
 
 # Навигация и роутинг: сначала стек проекта

package/presets/cursor/next/rules/next-app-router.mdc

@@ -0,0 +1,36 @@
+---
+description: Next.js App Router — Server/Client Components, data fetching, loading and error UI
+globs: app/src/app/**/*,app/**/app/**/*
+alwaysApply: false
+---
+
+# Next.js App Router
+
+Применять при работе с `app/src/app/**` или маршрутами App Router в целевом репо.
+
+## Server vs Client
+
+- **Server Components по умолчанию** — без `'use client'`, если не нужны hooks, browser API, event handlers.
+- **`'use client'`** — только для интерактива, `useState`/`useEffect`, browser-only API.
+- Не тянуть store/RTK и тяжёлый client-state в Server Components без необходимости.
+
+## Data fetching
+
+- Предпочитать fetch/data-loader на **server** (RSC, route handlers, server actions — по принятому в репо паттерну).
+- **Не дублировать** один запрос в RSC и client без причины.
+- Кеш и revalidate — как в существующих страницах репо (`fetch` options, `revalidate`, tags).
+
+## Маршруты и UX
+
+- Для async routes использовать **`loading.tsx`**, **`error.tsx`**, **`not-found.tsx`** по образцу соседних routes.
+- **Suspense** — для медленных client/server секций; fallback согласован с дизайн-системой.
+- Навигация — `navigation-router-stack.mdc` + router/link паттерны проекта.
+
+## Границы слоёв
+
+- RSC/route handlers **не импортируют UI-компоненты с client-only зависимостями** напрямую в server tree без `'use client'` границы.
+- Доменные типы — `@/types`; вызовы backend — через `@/api` / services, не raw `fetch` из page.tsx без слоя API.
+
+## Эталон
+
+Смотри существующий route той же сложности в `app/src/app/**` и повтори структуру (`reference-features.mdc`).