@bonesofspring/ai-rules 0.2.10 → 0.2.11

package/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 ## Unreleased
 
+### MCP TypeScript preset (`mcp-ts`)
+
+- New installable preset **`mcp-ts`** (Cursor + Claude twins): TypeScript MCP server authoring with `@modelcontextprotocol/sdk`, stdio-first transport, Context7-only MCP, package-manager–discovered typecheck/test via `mcp-ts-tooling` / `post-change-test`.
+- Full mapped rule catalog (~25 stems); always-on trio `mcp-ts-app-core`, `mcp-server-boundaries`, `code-quality-and-refactoring` (session-start body budget ≤140).
+- Agent-team surface (Phase 1): 6 agents (`task-router`, `task-analyst`, `solution-architect`, `feature-developer`, `build-verifier`, `security-reviewer`), 4 skills, 5 commands, hooks + team fixtures; no Playwright/XCUITest/a11y/`integration-test-*`.
+- Structure scripts (`twin-map`, `token-budget`, `leakage`) include `mcp-ts`; leakage `MCP_TS_FORBIDDEN_*` + pairwise chain forks vs other stacks.
+- Install: `npx @bonesofspring/ai-rules init cursor|claude --preset mcp-ts`.
+- Dogfood: `dogfood/mcp-ts-sample` (scenarios M1–M3 in `reference-features`).
+- Platform asymmetry: `BUGBOT.md` + `hooks.json` Cursor-only; `CLAUDE.md` Claude-only.
+
 ### Go/Java stub thicken + session-start budget raise (`go-java-rules-thicken-dogfood`)
 
 - **Session-start body cap:** **120 → 140** (stretch **≤120**); `alwaysApply` / Claude session-start count stays **exactly 3**. Checker `BODY_CAP=140`; policy core + embed adapters + build-verifier copy updated.

package/README.md

@@ -53,7 +53,7 @@ Where things go on `init`:
 
 Skills of note: `write-adr` (all stacks); `react-performance` (**next only**). Living gotchas: `team/conventions.md`. Opt-in rule samples eval: `yarn check:rule-eval` (workflow `rule-eval.yml`; not part of `check:preset-structure`).
 
-The package ships presets including **`next`** (Next.js stack), **`ios-swift`** (iOS apps on Swift / SwiftUI), **`go`** (Go backends with hexagonal architecture), and **`java`** (Java / Spring Boot hexagonal backends). Other preset names: see `presets/` in the [repo](https://github.com/bonesofspring/ai-rules). Name is a single path segment, no `/` or `..`.
+The package ships presets including **`next`** (Next.js stack), **`ios-swift`** (iOS apps on Swift / SwiftUI), **`go`** (Go backends with hexagonal architecture), **`java`** (Java / Spring Boot hexagonal backends), and **`mcp-ts`** (TypeScript MCP servers with `@modelcontextprotocol/sdk`). Other preset names: see `presets/` in the [repo](https://github.com/bonesofspring/ai-rules). Name is a single path segment, no `/` or `..`.
 
 ```bash
 npx @bonesofspring/ai-rules init cursor --preset ios-swift
@@ -62,6 +62,8 @@ npx @bonesofspring/ai-rules init cursor --preset go
 npx @bonesofspring/ai-rules init claude --preset go
 npx @bonesofspring/ai-rules init cursor --preset java
 npx @bonesofspring/ai-rules init claude --preset java
+npx @bonesofspring/ai-rules init cursor --preset mcp-ts
+npx @bonesofspring/ai-rules init claude --preset mcp-ts
 ```
 
 Help: `ai-rules --help`.

package/bin/cli.js

@@ -73,10 +73,12 @@ Examples:
   npx @bonesofspring/ai-rules init cursor --preset ios-swift
   npx @bonesofspring/ai-rules init cursor --preset go
   npx @bonesofspring/ai-rules init cursor --preset java
+  npx @bonesofspring/ai-rules init cursor --preset mcp-ts
   npx @bonesofspring/ai-rules init claude
   npx @bonesofspring/ai-rules init claude --preset ios-swift
   npx @bonesofspring/ai-rules init claude --preset go
   npx @bonesofspring/ai-rules init claude --preset java
+  npx @bonesofspring/ai-rules init claude --preset mcp-ts
   npx @bonesofspring/ai-rules clean cursor
 `);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bonesofspring/ai-rules",
-  "version": "0.2.10",
+  "version": "0.2.11",
   "description": "Presets of Cursor and Claude rules/commands for Revy Ross personal use",
   "license": "MIT",
   "author": "Revy Ross",

package/presets/_shared/core/meta/preset-no-cross-stack-leakage.md

@@ -6,7 +6,8 @@
 
 - `next` must not require iOS-only agents/tooling (`xcuitest-*`, `xcodebuild` as required handoff, Keychain-only rules).
 - `ios-swift` must not ship Playwright handoffs or Next lint recipes as required commands.
-- `go` / `java` must not ship Playwright, XCUITest, Next lint recipes, or `xcodebuild`/`SwiftLint` as required handoffs.
+- `go` / `java` / `mcp-ts` must not ship Playwright, XCUITest, Next lint recipes, or `xcodebuild`/`SwiftLint` as required handoffs.
+- `mcp-ts` must not ship Go tool commands (`go test`, `go vet`, `golangci-lint`) or `integration-test-*` agents as required delivery gates.
 - Shared core must not embed stack paths (`app/src/**`, `Features/**`, `playwright`, `xcodebuild`).
 
 ## Forbidden in ios-swift hooks/agents (FAIL)
@@ -35,6 +36,18 @@ Shared backend-stack bans (both `go` and `java`):
 
 Required instead: `integration-test-*`; build-verifier / `post-change-test` plus stack tooling — `go-tooling` (`go test`, `go vet`) or `java-tooling` (`mvn test` / `./gradlew test`).
 
+## Forbidden in mcp-ts hooks/agents (FAIL)
+
+Same UI/mobile bans as backend stacks, plus:
+
+- `playwright-test-`, `playwright-agents`, `playwright-e2e`, `user-playwright`, `app/__tests__/e2e`
+- Positive yarn recipes `lint:js` / `lint:css` as required gates
+- `xcuitest-test-`, `xcodebuild`, `SwiftLint` as required handoffs
+- Go tool commands as required MCP delivery gates: `go test`, `go vet`, `golangci-lint`
+- Agent files: `playwright-test-*`, `xcuitest-test-*`, `integration-test-*`, `accessibility-reviewer`
+
+Required instead: package-manager–discovered typecheck/test (`mcp-ts-tooling`, `post-change-test`); Phase 1 gates `build-verifier` + `security-reviewer`.
+
 ## Soft / document
 
 - Mentioning the other stack in **docs** comparing presets is OK.
@@ -42,4 +55,4 @@ Required instead: `integration-test-*`; build-verifier / `post-change-test` plus
 
 ## Chain fork
 
-`hooks/chain-team-phases.sh` must differ **byte-wise** pairwise among `next`, `ios-swift`, `go`, and `java` (per platform).
+`hooks/chain-team-phases.sh` must differ **byte-wise** pairwise among `next`, `ios-swift`, `go`, `java`, and `mcp-ts` (per platform).

package/presets/_shared/core/meta/preset-twin-sync.md

@@ -10,6 +10,7 @@ Cursor `.mdc` — **SoT per stack**. Claude topic `.md` — derived twin.
 | `ios-swift` | `presets/cursor/ios-swift/rules/*.mdc` | `presets/claude/ios-swift/rules/<topic>/` | Keep in `claude/ios-swift/rules/README.md` |
 | `go` | `presets/cursor/go/rules/*.mdc` | `presets/claude/go/rules/<topic>/` | Keep in `claude/go/rules/README.md` |
 | `java` | `presets/cursor/java/rules/*.mdc` | `presets/claude/java/rules/<topic>/` | Keep in `claude/java/rules/README.md` |
+| `mcp-ts` | `presets/cursor/mcp-ts/rules/*.mdc` | `presets/claude/mcp-ts/rules/<topic>/` | Keep in `claude/mcp-ts/rules/README.md` |
 
 ## Same-PR checklist
 
@@ -29,5 +30,6 @@ Cursor `.mdc` — **SoT per stack**. Claude topic `.md` — derived twin.
 - **ios-swift:** missing Claude twin for a changed Cursor rule → **FAIL**.
 - **go:** missing Claude twin for a changed Cursor rule → **FAIL** (same as next / ios-swift; mapping table required).
 - **java:** missing Claude twin for a changed Cursor rule → **FAIL** (same as next / ios-swift / go; mapping table required).
+- **mcp-ts:** missing Claude twin for a changed Cursor rule → **FAIL** (same as next / ios-swift / go / java; mapping table required).
 
 Dogfood: sync packages → root `.cursor/` after Cursor SoT changes (not the reverse). Use `packages/ai-rules/scripts/sync-dogfood-cursor.sh`.

package/presets/claude/go/rules/tooling-and-review/preset-no-cross-stack-leakage.md

@@ -17,7 +17,8 @@ paths:
 
 - `next` must not require iOS-only agents/tooling (`xcuitest-*`, `xcodebuild` as required handoff, Keychain-only rules).
 - `ios-swift` must not ship Playwright handoffs or Next lint recipes as required commands.
-- `go` / `java` must not ship Playwright, XCUITest, Next lint recipes, or `xcodebuild`/`SwiftLint` as required handoffs.
+- `go` / `java` / `mcp-ts` must not ship Playwright, XCUITest, Next lint recipes, or `xcodebuild`/`SwiftLint` as required handoffs.
+- `mcp-ts` must not ship Go tool commands (`go test`, `go vet`, `golangci-lint`) or `integration-test-*` agents as required delivery gates.
 - Shared core must not embed stack paths (`app/src/**`, `Features/**`, `playwright`, `xcodebuild`).
 
 ## Forbidden in ios-swift hooks/agents (FAIL)
@@ -46,6 +47,18 @@ Shared backend-stack bans (both `go` and `java`):
 
 Required instead: `integration-test-*`; build-verifier / `post-change-test` plus stack tooling — `go-tooling` (`go test`, `go vet`) or `java-tooling` (`mvn test` / `./gradlew test`).
 
+## Forbidden in mcp-ts hooks/agents (FAIL)
+
+Same UI/mobile bans as backend stacks, plus:
+
+- `playwright-test-`, `playwright-agents`, `playwright-e2e`, `user-playwright`, `app/__tests__/e2e`
+- Positive yarn recipes `lint:js` / `lint:css` as required gates
+- `xcuitest-test-`, `xcodebuild`, `SwiftLint` as required handoffs
+- Go tool commands as required MCP delivery gates: `go test`, `go vet`, `golangci-lint`
+- Agent files: `playwright-test-*`, `xcuitest-test-*`, `integration-test-*`, `accessibility-reviewer`
+
+Required instead: package-manager–discovered typecheck/test (`mcp-ts-tooling`, `post-change-test`); Phase 1 gates `build-verifier` + `security-reviewer`.
+
 ## Soft / document
 
 - Mentioning the other stack in **docs** comparing presets is OK.
@@ -53,4 +66,4 @@ Required instead: `integration-test-*`; build-verifier / `post-change-test` plus
 
 ## Chain fork
 
-`hooks/chain-team-phases.sh` must differ **byte-wise** pairwise among `next`, `ios-swift`, `go`, and `java` (per platform).
+`hooks/chain-team-phases.sh` must differ **byte-wise** pairwise among `next`, `ios-swift`, `go`, `java`, and `mcp-ts` (per platform).

package/presets/claude/go/rules/tooling-and-review/preset-twin-sync.md

@@ -21,6 +21,7 @@ Cursor `.mdc` — **SoT per stack**. Claude topic `.md` — derived twin.
 | `ios-swift` | `presets/cursor/ios-swift/rules/*.mdc` | `presets/claude/ios-swift/rules/<topic>/` | Keep in `claude/ios-swift/rules/README.md` |
 | `go` | `presets/cursor/go/rules/*.mdc` | `presets/claude/go/rules/<topic>/` | Keep in `claude/go/rules/README.md` |
 | `java` | `presets/cursor/java/rules/*.mdc` | `presets/claude/java/rules/<topic>/` | Keep in `claude/java/rules/README.md` |
+| `mcp-ts` | `presets/cursor/mcp-ts/rules/*.mdc` | `presets/claude/mcp-ts/rules/<topic>/` | Keep in `claude/mcp-ts/rules/README.md` |
 
 ## Same-PR checklist
 
@@ -40,5 +41,6 @@ Cursor `.mdc` — **SoT per stack**. Claude topic `.md` — derived twin.
 - **ios-swift:** missing Claude twin for a changed Cursor rule → **FAIL**.
 - **go:** missing Claude twin for a changed Cursor rule → **FAIL** (same as next / ios-swift; mapping table required).
 - **java:** missing Claude twin for a changed Cursor rule → **FAIL** (same as next / ios-swift / go; mapping table required).
+- **mcp-ts:** missing Claude twin for a changed Cursor rule → **FAIL** (same as next / ios-swift / go / java; mapping table required).
 
 Dogfood: sync packages → root `.cursor/` after Cursor SoT changes (not the reverse). Use `packages/ai-rules/scripts/sync-dogfood-cursor.sh`.

package/presets/claude/ios-swift/rules/tooling-and-review/preset-no-cross-stack-leakage.md

@@ -17,7 +17,8 @@ paths:
 
 - `next` must not require iOS-only agents/tooling (`xcuitest-*`, `xcodebuild` as required handoff, Keychain-only rules).
 - `ios-swift` must not ship Playwright handoffs or Next lint recipes as required commands.
-- `go` / `java` must not ship Playwright, XCUITest, Next lint recipes, or `xcodebuild`/`SwiftLint` as required handoffs.
+- `go` / `java` / `mcp-ts` must not ship Playwright, XCUITest, Next lint recipes, or `xcodebuild`/`SwiftLint` as required handoffs.
+- `mcp-ts` must not ship Go tool commands (`go test`, `go vet`, `golangci-lint`) or `integration-test-*` agents as required delivery gates.
 - Shared core must not embed stack paths (`app/src/**`, `Features/**`, `playwright`, `xcodebuild`).
 
 ## Forbidden in ios-swift hooks/agents (FAIL)
@@ -46,6 +47,18 @@ Shared backend-stack bans (both `go` and `java`):
 
 Required instead: `integration-test-*`; build-verifier / `post-change-test` plus stack tooling — `go-tooling` (`go test`, `go vet`) or `java-tooling` (`mvn test` / `./gradlew test`).
 
+## Forbidden in mcp-ts hooks/agents (FAIL)
+
+Same UI/mobile bans as backend stacks, plus:
+
+- `playwright-test-`, `playwright-agents`, `playwright-e2e`, `user-playwright`, `app/__tests__/e2e`
+- Positive yarn recipes `lint:js` / `lint:css` as required gates
+- `xcuitest-test-`, `xcodebuild`, `SwiftLint` as required handoffs
+- Go tool commands as required MCP delivery gates: `go test`, `go vet`, `golangci-lint`
+- Agent files: `playwright-test-*`, `xcuitest-test-*`, `integration-test-*`, `accessibility-reviewer`
+
+Required instead: package-manager–discovered typecheck/test (`mcp-ts-tooling`, `post-change-test`); Phase 1 gates `build-verifier` + `security-reviewer`.
+
 ## Soft / document
 
 - Mentioning the other stack in **docs** comparing presets is OK.
@@ -53,4 +66,4 @@ Required instead: `integration-test-*`; build-verifier / `post-change-test` plus
 
 ## Chain fork
 
-`hooks/chain-team-phases.sh` must differ **byte-wise** pairwise among `next`, `ios-swift`, `go`, and `java` (per platform).
+`hooks/chain-team-phases.sh` must differ **byte-wise** pairwise among `next`, `ios-swift`, `go`, `java`, and `mcp-ts` (per platform).

package/presets/claude/ios-swift/rules/tooling-and-review/preset-twin-sync.md

@@ -21,6 +21,7 @@ Cursor `.mdc` — **SoT per stack**. Claude topic `.md` — derived twin.
 | `ios-swift` | `presets/cursor/ios-swift/rules/*.mdc` | `presets/claude/ios-swift/rules/<topic>/` | Keep in `claude/ios-swift/rules/README.md` |
 | `go` | `presets/cursor/go/rules/*.mdc` | `presets/claude/go/rules/<topic>/` | Keep in `claude/go/rules/README.md` |
 | `java` | `presets/cursor/java/rules/*.mdc` | `presets/claude/java/rules/<topic>/` | Keep in `claude/java/rules/README.md` |
+| `mcp-ts` | `presets/cursor/mcp-ts/rules/*.mdc` | `presets/claude/mcp-ts/rules/<topic>/` | Keep in `claude/mcp-ts/rules/README.md` |
 
 ## Same-PR checklist
 
@@ -40,5 +41,6 @@ Cursor `.mdc` — **SoT per stack**. Claude topic `.md` — derived twin.
 - **ios-swift:** missing Claude twin for a changed Cursor rule → **FAIL**.
 - **go:** missing Claude twin for a changed Cursor rule → **FAIL** (same as next / ios-swift; mapping table required).
 - **java:** missing Claude twin for a changed Cursor rule → **FAIL** (same as next / ios-swift / go; mapping table required).
+- **mcp-ts:** missing Claude twin for a changed Cursor rule → **FAIL** (same as next / ios-swift / go / java; mapping table required).
 
 Dogfood: sync packages → root `.cursor/` after Cursor SoT changes (not the reverse). Use `packages/ai-rules/scripts/sync-dogfood-cursor.sh`.

package/presets/claude/java/rules/tooling-and-review/preset-no-cross-stack-leakage.md

@@ -17,7 +17,8 @@ paths:
 
 - `next` must not require iOS-only agents/tooling (`xcuitest-*`, `xcodebuild` as required handoff, Keychain-only rules).
 - `ios-swift` must not ship Playwright handoffs or Next lint recipes as required commands.
-- `go` / `java` must not ship Playwright, XCUITest, Next lint recipes, or `xcodebuild`/`SwiftLint` as required handoffs.
+- `go` / `java` / `mcp-ts` must not ship Playwright, XCUITest, Next lint recipes, or `xcodebuild`/`SwiftLint` as required handoffs.
+- `mcp-ts` must not ship Go tool commands (`go test`, `go vet`, `golangci-lint`) or `integration-test-*` agents as required delivery gates.
 - Shared core must not embed stack paths (`app/src/**`, `Features/**`, `playwright`, `xcodebuild`).
 
 ## Forbidden in ios-swift hooks/agents (FAIL)
@@ -46,6 +47,18 @@ Shared backend-stack bans (both `go` and `java`):
 
 Required instead: `integration-test-*`; build-verifier / `post-change-test` plus stack tooling — `go-tooling` (`go test`, `go vet`) or `java-tooling` (`mvn test` / `./gradlew test`).
 
+## Forbidden in mcp-ts hooks/agents (FAIL)
+
+Same UI/mobile bans as backend stacks, plus:
+
+- `playwright-test-`, `playwright-agents`, `playwright-e2e`, `user-playwright`, `app/__tests__/e2e`
+- Positive yarn recipes `lint:js` / `lint:css` as required gates
+- `xcuitest-test-`, `xcodebuild`, `SwiftLint` as required handoffs
+- Go tool commands as required MCP delivery gates: `go test`, `go vet`, `golangci-lint`
+- Agent files: `playwright-test-*`, `xcuitest-test-*`, `integration-test-*`, `accessibility-reviewer`
+
+Required instead: package-manager–discovered typecheck/test (`mcp-ts-tooling`, `post-change-test`); Phase 1 gates `build-verifier` + `security-reviewer`.
+
 ## Soft / document
 
 - Mentioning the other stack in **docs** comparing presets is OK.
@@ -53,4 +66,4 @@ Required instead: `integration-test-*`; build-verifier / `post-change-test` plus
 
 ## Chain fork
 
-`hooks/chain-team-phases.sh` must differ **byte-wise** pairwise among `next`, `ios-swift`, `go`, and `java` (per platform).
+`hooks/chain-team-phases.sh` must differ **byte-wise** pairwise among `next`, `ios-swift`, `go`, `java`, and `mcp-ts` (per platform).

package/presets/claude/java/rules/tooling-and-review/preset-twin-sync.md

@@ -21,6 +21,7 @@ Cursor `.mdc` — **SoT per stack**. Claude topic `.md` — derived twin.
 | `ios-swift` | `presets/cursor/ios-swift/rules/*.mdc` | `presets/claude/ios-swift/rules/<topic>/` | Keep in `claude/ios-swift/rules/README.md` |
 | `go` | `presets/cursor/go/rules/*.mdc` | `presets/claude/go/rules/<topic>/` | Keep in `claude/go/rules/README.md` |
 | `java` | `presets/cursor/java/rules/*.mdc` | `presets/claude/java/rules/<topic>/` | Keep in `claude/java/rules/README.md` |
+| `mcp-ts` | `presets/cursor/mcp-ts/rules/*.mdc` | `presets/claude/mcp-ts/rules/<topic>/` | Keep in `claude/mcp-ts/rules/README.md` |
 
 ## Same-PR checklist
 
@@ -40,5 +41,6 @@ Cursor `.mdc` — **SoT per stack**. Claude topic `.md` — derived twin.
 - **ios-swift:** missing Claude twin for a changed Cursor rule → **FAIL**.
 - **go:** missing Claude twin for a changed Cursor rule → **FAIL** (same as next / ios-swift; mapping table required).
 - **java:** missing Claude twin for a changed Cursor rule → **FAIL** (same as next / ios-swift / go; mapping table required).
+- **mcp-ts:** missing Claude twin for a changed Cursor rule → **FAIL** (same as next / ios-swift / go / java; mapping table required).
 
 Dogfood: sync packages → root `.cursor/` after Cursor SoT changes (not the reverse). Use `packages/ai-rules/scripts/sync-dogfood-cursor.sh`.

package/presets/claude/mcp-ts/CLAUDE.md

@@ -0,0 +1,13 @@
+# TypeScript MCP (Claude)
+
+Preset for authoring TypeScript MCP servers with `@modelcontextprotocol/sdk`.
+
+**Repo-root agents:** see [`AGENTS.md`](../../AGENTS.md) at the project root.
+
+- Session-start: `mcp-ts-app-core`, `architecture/mcp-server-boundaries`, `code-quality` (exactly 3).
+- Delivery: `architecture/feature-delivery.md` + skill `feature-delivery`.
+- After TS edits: `tooling-and-review/post-change-test.md`.
+- Contract checks: `mcp-contract-testing` rule (Phase 1: feature-developer owns verification).
+- Never schedule Playwright / XCUITest / `accessibility-reviewer` / `integration-test-*`.
+
+Init: `npx @bonesofspring/ai-rules init claude --preset mcp-ts` (also copies `REPO_AGENTS.md` → root `AGENTS.md`).

package/presets/claude/mcp-ts/MCP.md

@@ -0,0 +1,37 @@
+# MCP (preset `mcp-ts`, Claude)
+
+Копируется в **корень проекта** как `.mcp.json` при `ai-rules init claude --preset mcp-ts`.
+
+## Servers (active in shipped config)
+
+| Name | Package | Зачем |
+|------|---------|--------|
+| `context7` | `@upstash/context7-mcp@3.2.5` (pinned in `mcp.json`) | Versioned docs for `@modelcontextprotocol/sdk` and related libraries |
+
+**No** Figma, browser automation, or Playwright MCP in this preset.
+
+### Upgrading Context7
+
+Shipped `.mcp.json` pins `@upstash/context7-mcp@<version>` so `init` does not pull floating `latest` on every MCP start. To upgrade: bump the pin in both Cursor and Claude `mcp-ts/mcp.json`, note the version here, and smoke-check Context7 after dogfood sync.
+
+## Inactive example — local server under development
+
+> **INACTIVE — do not add to shipped `mcp.json` / `.mcp.json`.**
+> A server-under-development cannot be valid at preset install time. Keep this example in docs only until the package exists and the team explicitly opts in.
+
+```json
+{
+  "mcpServers": {
+    "my-mcp-server": {
+      "command": "node",
+      "args": ["dist/index.js"]
+    }
+  }
+}
+```
+
+Adjust `command`/`args` to the project's `bin` / `npx` entry after packaging. Prefer stdio for local Cursor/Claude use.
+
+Секреты в файл не кладём. Опционально: `CONTEXT7_API_KEY` в окружении.
+
+После init: Settings → MCP → включить серверы. `init` перезаписывает одноимённый MCP config.

package/presets/claude/mcp-ts/README.md

@@ -0,0 +1,11 @@
+# Preset `mcp-ts` (Claude)
+
+Installable guidance for **authoring TypeScript MCP servers** with `@modelcontextprotocol/sdk`.
+
+```bash
+npx @bonesofspring/ai-rules init claude --preset mcp-ts
+```
+
+Claude topic rules are derived from Cursor SoT. Mapping: `rules/README.md`.
+
+Session-start (exactly 3, no `paths:`): `mcp-ts-app-core`, `mcp-server-boundaries`, `code-quality`.

package/presets/claude/mcp-ts/REPO_AGENTS.md

@@ -0,0 +1,49 @@
+# TypeScript MCP — agent instructions
+
+Cross-tool repo-root guide. Tool-specific maps stay under `.cursor/AGENTS.md` and `.claude/CLAUDE.md`.
+
+## Cross-tool setup
+
+- Treat this file as the **shared** entry for any agent (Cursor, Claude Code, or other).
+- Tool maps live in `.cursor/AGENTS.md` / `.claude/CLAUDE.md` when that tool is installed.
+- Install:
+
+```bash
+npx @bonesofspring/ai-rules init cursor --preset mcp-ts
+npx @bonesofspring/ai-rules init claude --preset mcp-ts
+```
+
+`init` overwrites this file from the preset (`REPO_AGENTS.md` → `AGENTS.md`). Living gotchas belong in `team/conventions.md`, not here.
+
+## Commands (test / typecheck / build)
+
+Discover the package manager from lockfile / `packageManager` (`mcp-ts-tooling`). Typical gates:
+
+| Gate | Typical command |
+|------|-----------------|
+| Typecheck | `tsc --noEmit` or project `typecheck` script |
+| Test | project `test` / `vitest` / `jest` script |
+| Build | project `build` / `tsc` as configured |
+| Package | validate `bin` / package entry for stdio server |
+
+After code edits: invoke **`post-change-test`** (requestable). Full gate: agent `build-verifier`.
+
+## Security basics
+
+- Do not commit secrets (tokens, `.env`, private keys).
+- Review destructive git before running; respect shell hooks.
+- Do not weaken CI or skip hooks unless the user explicitly asks.
+- Tool handlers must not log secrets or widen filesystem/network capability without AC.
+
+## Tool entry points
+
+| Tool | Map |
+|------|-----|
+| Cursor | `.cursor/AGENTS.md` (optional if Cursor not installed) |
+| Claude Code | `.claude/CLAUDE.md` (optional if Claude not installed) |
+
+Rules: `.cursor/rules/` or `.claude/rules/`. Skills: `.cursor/skills/` or `.claude/skills/`.
+
+## Living conventions
+
+Gotchas, local patterns, and team decisions: **`.cursor/team/conventions.md`** and/or **`.claude/team/conventions.md`** (fill after init).

package/presets/claude/mcp-ts/agents/README.md

@@ -0,0 +1,21 @@
+# Agents (mcp-ts Phase 1)
+
+| Agent | Role |
+|-------|------|
+| `task-router` | Intent → `pipeline.json` |
+| `task-analyst` | brief + decomposition |
+| `solution-architect` | architecture.md |
+| `feature-developer` | contract→schema→handler→register→test→package |
+| `build-verifier` | typecheck/tests (+ preset-structure) |
+| `security-reviewer` | threat model / capabilities |
+
+Phase 2 adds parity agents (`contract-test-*`, `code-reviewer`, `codebase-analyzer`, `debugger`, …) — **do not** schedule them as required handoffs in Phase 1.
+
+## Review-only (Phase 1)
+
+| Diff kind | Pipeline |
+|-----------|----------|
+| Tools / auth / secrets / capabilities | `security-reviewer` → parent skill `code-review` → `review.md` |
+| Schema / style only | Parent skill `code-review` only (`security-reviewer` in `skipped`) |
+
+There is **no** `code-reviewer` agent until Phase 2.

package/presets/claude/mcp-ts/agents/build-verifier.md

@@ -0,0 +1,39 @@
+---
+name: build-verifier
+description: Validation gate specialist. Runs repository-discovered typecheck/tests after MCP implementation; writes validation-report.md. Never fixes app source. For preset packaging tasks, also validates mcp-ts preset structure gates.
+readonly: false
+model: fast
+---
+
+You are the build verifier for **TypeScript MCP servers** (and for **ai-rules preset packaging** when scope says so).
+
+## Consumer MCP repos
+
+1. Discover package manager (`mcp-ts-tooling`).
+2. Run typecheck (`tsc --noEmit` or project script).
+3. Run tests (project `test` / Vitest / Jest / scoped).
+4. Optional Inspector smoke — not required.
+5. Write `.cursor/team/tasks/<slug>/validation-report.md` with commands + results.
+6. On failure: set status `validation_failed` — do **not** patch production code.
+
+**Never** require Playwright, XCUITest, `lint:js`/`lint:css`, `xcodebuild`/`SwiftLint`, or Go tools (`go test` / `go vet` / `golangci-lint`) as the MCP gate.
+
+## Preset-structure validation (when editing `packages/ai-rules/presets/**`)
+
+From `packages/ai-rules/`:
+
+```bash
+yarn check:preset-structure
+```
+
+Hard gates: twin-map (stacks include **mcp-ts**), token-budget (alwaysApply/session-start = 3), leakage (`MCP_TS_FORBIDDEN_IN_CHAIN`, `MCP_TS_FORBIDDEN_AGENT_STEMS`, chain forks mcp-ts≠next≠ios-swift≠go≠java), shared-core drift (`AI_RULES_DRIFT_FAIL=1` via `check:preset-structure`).
+
+Document PASS/FAIL in `validation-report.md`. Soft leakage output:
+
+- **Negation** of forbidden stems in agents → suppressed (INFO count). **Not** a merge blocker.
+- **WARN** only for non-negation packaging mentions in this verifier (and rare chain-skip WARNs). Do not treat INFO/WARN counts as FAIL.
+
+1. **Root AGENTS template:** each installable preset (`cursor|claude` × `next|ios-swift|go|java|mcp-ts`) must ship `REPO_AGENTS.md` when validating preset packaging → **FAIL** if missing.
+2. **Hooks cookbook:** default `hooks.json` must **not** reference `hooks/examples/` → **FAIL** if it does.
+3. **Forbidden agent filenames** (Playwright / XCUITest / integration-test / accessibility-reviewer / contract-test): must be absent → **FAIL** via `check:preset-leakage`.
+4. **Rule eval (WARN):** optional maintainer smoke — not part of default `check:preset-structure`.

package/presets/claude/mcp-ts/agents/feature-developer.md

@@ -0,0 +1,47 @@
+---
+name: feature-developer
+description: Feature implementation specialist for TypeScript MCP servers. Implements tasks from decomposition.md following feature-delivery workflow. Use after brief approval or when explicitly asked to implement an approved task slug.
+readonly: false
+---
+
+Implement MCP server features following **mcp-ts** boundaries.
+
+## Mandatory flow
+
+1. **Contract** — finalize name/description/input/output (`mcp-tool-design`).
+2. **Schema** — Zod authoring + JSON Schema-compatible registration (`mcp-ts-conventions`).
+3. **Handler** — validated inputs → scoped capability → safe errors.
+4. **Registration** — wire modules; keep `src/index.ts` lifecycle-only.
+5. **Unit / contract verification** — schema + handler tests (`tests-unit`, `mcp-contract-testing`).
+6. **Package validation** — typecheck/test via `post-change-test` (+ `mcp-ts-tooling`); Inspector smoke optional.
+
+## Order
+
+1. Read `feature-delivery-workflow.mdc`, `mcp-server-boundaries.mdc`, `reference-features.mdc`.
+2. After `*.ts` edits: invoke `post-change-test.mdc` (+ `mcp-ts-tooling.mdc`).
+
+## Do / Don't
+
+- **Do** keep registration, validation, and handlers separable.
+- **Do** use `// VERIFY: @modelcontextprotocol/sdk @ <version>` when inventing SDK calls would be risky.
+- **Don't** require Playwright, XCUITest, Next lint, or Go tools as gates.
+- **Don't** register a server-under-dev into shipped consumer `mcp.json`.
+
+## Zero improvisation
+
+- Implement **only** what the brief / AC / current decomposition task require.
+- If requirements are ambiguous — **ask** before coding.
+- Forbidden without explicit AC: unrelated security hardening, extra validation, drive-by refactors, new config/env.
+- Boy scout / `design-guidance` improvements stay **within** touched files.
+
+## Will / Will not
+
+**Will:** follow contract→schema→handler→register→test→package; add required unit tests; run `post-change-test`; update task artifacts.
+
+**Will not:** formal code review; invent AC; pull Next/iOS/Go gates; auto-continue past human gates.
+
+## Design guidance / anti-sycophancy
+
+- Load `design-guidance` and `anti-sycophancy-discipline` when writing or changing code.
+
+Update `.cursor/team/tasks/<slug>/status.json` when done.

package/presets/claude/mcp-ts/agents/security-reviewer.md

@@ -0,0 +1,21 @@
+---
+name: security-reviewer
+description: Security review specialist for TypeScript MCP servers. Audits tool capabilities, prompt-injection boundaries, secrets/redaction, path/SSRF risks. Readonly — writes security-review.md only.
+readonly: false
+---
+
+Review MCP diffs against `security-mcp.mdc` and `mcp-auth-secrets.mdc`.
+
+## Focus
+
+- Capability minimization (FS/network/shell)
+- Schema validation before side effects
+- Secrets in repo/logs/tool results
+- Path traversal / SSRF allowlists
+- Fail-closed auth for remote transports
+
+## Output
+
+`.cursor/team/tasks/<slug>/security-review.md`. Do not edit production code.
+
+Never require Keychain/ATS/iOS-only or browser CSP checklists as the primary MCP review.

package/presets/claude/mcp-ts/agents/solution-architect.md

@@ -0,0 +1,23 @@
+---
+name: solution-architect
+description: Solution architect for TypeScript MCP servers. Designs tool/resource/prompt contracts, transport/auth choices, and module boundaries before implementation. Readonly design docs — not production code.
+readonly: false
+---
+
+Design MCP server changes for **mcp-ts**.
+
+## Deliverable
+
+Write `architecture.md` covering:
+
+- Contract surface (names, schemas, versioning)
+- Module boundaries (entry / registration / handler / capability)
+- Transport default (stdio) and any remote/auth decisions
+- Test strategy (unit + contract fixtures; Inspector optional)
+- Explicit non-goals (no UI, no browser automation)
+
+## Constraints
+
+- Follow `mcp-server-boundaries` and `mcp-tool-design`.
+- Do not invent SDK APIs — mark VERIFY or research via Context7.
+- Do not introduce Go/Java hexagonal prescriptions unless the repo already uses them.

package/presets/claude/mcp-ts/agents/task-analyst.md

@@ -0,0 +1,25 @@
+---
+name: task-analyst
+description: Task analysis specialist. Clarifies requirements, validates acceptance criteria, and decomposes work into concrete tasks. Use for /feature-start, task intake, or when the user asks to analyze or decompose a feature before coding. Writes only team artifacts; never writes production code.
+readonly: false
+---
+
+Analyze MCP server work requests for the **mcp-ts** preset.
+
+## Deliverables
+
+1. `brief.md` — goal, AC, out of scope, assumptions, risks.
+2. `decomposition.md` — ordered tasks (contract → schema → handler → register → test → package).
+3. Update `status.json` (`awaiting_approval` when human gate applies).
+
+## Focus
+
+- Tool/resource/prompt contracts and capability scope.
+- Zod/JSON Schema obligations; stdio vs remote transport needs.
+- Security/capability questions early for FS/network tools.
+
+## Will not
+
+- Implement production code.
+- Schedule Phase 2-only agents.
+- Prescribe Go hexagonal or Next app layers.

package/presets/claude/mcp-ts/agents/task-router.md

@@ -0,0 +1,73 @@
+---
+name: task-router
+description: Task routing specialist. Analyzes user prompt, detects intent, and writes pipeline.json with ordered agent steps. Use first for /task or when determining which subagents to run and in what order. No production code — writes team artifacts only.
+readonly: false
+model: fast
+---
+
+You are a task router for a **TypeScript MCP server** agent team. You **do not** implement tasks — you classify intent and plan the agent pipeline.
+
+## Inputs
+
+- User task description (from `/task` or orchestrator).
+- Optional: existing files under `.cursor/team/tasks/<slug>/`.
+- Pipeline JSON schema — **`agents/README.md`**.
+
+## Intent detection (Phase 1 roster)
+
+| intent | Signals | Default steps |
+|--------|---------|---------------|
+| `feature` | «добавь tool», «новая», «реализуй», schema/handler | task-analyst → feature-developer → build-verifier → **security-reviewer** when [sensitive](#security-reviewer-routing); else document skip |
+| `bugfix` | «баг», «fix», «не работает», «падает» | task-analyst → feature-developer → build-verifier → **security-reviewer** when [sensitive](#security-reviewer-routing); else document skip |
+| `review-only` | «ревью», «review MR», «проверь diff» | `security-reviewer` for threat/capability/auth/secrets diffs; **plus** parent applies skill `code-review` (write `review.md`) — no `code-reviewer` agent in Phase 1. Pure schema/style-only diffs: skip security step, parent skill only (document in `skipped`) |
+| `spike` | «исследуй», «spike», proof of concept | task-analyst → solution-architect |
+| `refactor` | «рефакторинг», «без изменения поведения» | task-analyst → feature-developer → build-verifier → **security-reviewer** when [sensitive](#security-reviewer-routing); else document skip |
+| `retro` | «ретро», «postmortem» | (orchestrator → `/technical-retro`) |
+
+### Security-reviewer routing
+
+Append **`security-reviewer` after `build-verifier`** for `feature` / `bugfix` / `refactor` when **any** of:
+
+- Diff touches `auth/**`, secrets/config (`.env*`, `**/secrets/**`), or stems `security-mcp` / `mcp-auth-secrets`
+- Tool FS/network capability changes (new or widened allowlists, adapters, SSRF surface)
+- User signals auth, secrets, bearer/OAuth, or capability expansion
+
+**Documented skip only** for proven schema/style-only changes (no auth/secrets/capability). Put `security-reviewer` in `skipped` with that reason — never silent omit.
+
+**`profile: light` is invalid** when FS/net/auth expands — use `standard`/`full` and include `security-reviewer`.
+
+**Phase 1 available agents only:** `task-router`, `task-analyst`, `solution-architect`, `feature-developer`, `build-verifier`, `security-reviewer`.
+
+**Never schedule** Playwright (`playwright-test-*`), XCUITest (`xcuitest-test-*`), `accessibility-reviewer`, `integration-test-*`, or Phase 2 `contract-test-*`. Put them in `skipped` with reason «mcp-ts Phase 1 roster».
+
+## Pipeline profiles
+
+`"profile": "full" | "standard" | "light"`. Default: **standard** for feature/refactor/bugfix; **light** for tiny single-file fixes with **no** FS/net/auth expansion.
+
+**Never skip `build-verifier`** after developer when TypeScript sources changed.
+
+## Model tiers (`steps[].model`)
+
+Optional: `"model": "cheap" | "standard" | "strong"`.
+
+- `light` → `cheap` on all steps
+- security-sensitive / spike architect → `strong` on those steps
+- never `strong` on build-verifier / task-router
+
+Fixtures: `.cursor/team/fixtures/` (feature-full, feature-light, bugfix-standard).
+
+## humanGates (defaults)
+
+| Intent | Default humanGates |
+|--------|-------------------|
+| feature, refactor | `["after:task-analyst"]` |
+| spike | `["after:solution-architect"]` |
+| bugfix, review-only | `[]` |
+
+## Output
+
+Write `.cursor/team/tasks/<slug>/pipeline.json` and initial `status.json` via the **Write** tool; set `.cursor/team/active-task.json`.
+
+## Handoff
+
+Intent + steps table + skipped + gates → invoke `steps[0].agent` (unless retro).