@bonesofspring/ai-rules 0.2.10 → 0.2.12

package/presets/cursor/next/team/fixtures/metrics-scenarios/tasks/parallel-receipts/metrics.json

@@ -0,0 +1,79 @@
+{
+  "schemaVersion": 1,
+  "task": {
+    "runId": "parallel-receipts-run",
+    "slug": "parallel-receipts",
+    "preset": "ai-rules",
+    "stack": "next",
+    "platform": "cursor",
+    "intent": "feature",
+    "profile": "full"
+  },
+  "events": [
+    {
+      "eventId": "parallel-receipts-run:task",
+      "type": "task_started",
+      "at": "2026-07-31T16:00:00.000Z",
+      "source": "router",
+      "attributionConfidence": "high"
+    },
+    {
+      "eventId": "parallel-receipts-run:1:code-reviewer:1:start",
+      "type": "attempt_started",
+      "at": "2026-07-31T16:00:00.000Z",
+      "attemptId": "parallel-receipts-run:step-1:code-reviewer:attempt-1",
+      "stepIndex": 1,
+      "stepLabel": null,
+      "agent": "code-reviewer",
+      "role": "review",
+      "attempt": 1,
+      "parallelGroupId": "parallel-receipts-run:step-1",
+      "source": "hook",
+      "attributionConfidence": "high"
+    },
+    {
+      "eventId": "parallel-receipts-run:1:security-reviewer:1:start",
+      "type": "attempt_started",
+      "at": "2026-07-31T16:00:00.000Z",
+      "attemptId": "parallel-receipts-run:step-1:security-reviewer:attempt-1",
+      "stepIndex": 1,
+      "stepLabel": null,
+      "agent": "security-reviewer",
+      "role": "review",
+      "attempt": 1,
+      "parallelGroupId": "parallel-receipts-run:step-1",
+      "source": "hook",
+      "attributionConfidence": "high"
+    },
+    {
+      "eventId": "parallel-receipts-run:1:security-reviewer:1:finish",
+      "type": "attempt_finished",
+      "at": "2026-07-31T16:01:00.000Z",
+      "attemptId": "parallel-receipts-run:step-1:security-reviewer:attempt-1",
+      "outcome": "completed",
+      "durationMs": 60000,
+      "retryAfterFix": null,
+      "source": "agent",
+      "attributionConfidence": "fallback"
+    },
+    {
+      "eventId": "parallel-receipts-run:1:code-reviewer:1:finish",
+      "type": "attempt_finished",
+      "at": "2026-07-31T16:02:00.000Z",
+      "attemptId": "parallel-receipts-run:step-1:code-reviewer:attempt-1",
+      "outcome": "completed",
+      "durationMs": 120000,
+      "retryAfterFix": null,
+      "source": "agent",
+      "attributionConfidence": "fallback"
+    },
+    {
+      "eventId": "parallel-receipts-run:done",
+      "type": "task_completed",
+      "at": "2026-07-31T16:02:00.000Z",
+      "outcome": "completed",
+      "source": "hook",
+      "attributionConfidence": "high"
+    }
+  ]
+}

package/presets/cursor/next/team/fixtures/metrics-scenarios/tasks/serial-retry/metrics.json

@@ -0,0 +1,124 @@
+{
+  "schemaVersion": 1,
+  "task": {
+    "runId": "serial-retry-run",
+    "slug": "serial-retry",
+    "preset": "ai-rules",
+    "stack": "next",
+    "platform": "cursor",
+    "intent": "feature",
+    "profile": "full"
+  },
+  "events": [
+    {
+      "eventId": "serial-retry-run:task",
+      "type": "task_started",
+      "at": "2026-07-31T14:00:00.000Z",
+      "source": "router",
+      "attributionConfidence": "high"
+    },
+    {
+      "eventId": "serial-retry-run:2:code-reviewer:1:start",
+      "type": "attempt_started",
+      "at": "2026-07-31T14:00:00.000Z",
+      "attemptId": "serial-retry-run:step-2:code-reviewer:attempt-1",
+      "stepIndex": 2,
+      "stepLabel": null,
+      "agent": "code-reviewer",
+      "role": "review",
+      "attempt": 1,
+      "parallelGroupId": null,
+      "source": "hook",
+      "attributionConfidence": "high"
+    },
+    {
+      "eventId": "serial-retry-run:2:code-reviewer:1:finish",
+      "type": "attempt_finished",
+      "at": "2026-07-31T14:01:00.000Z",
+      "attemptId": "serial-retry-run:step-2:code-reviewer:attempt-1",
+      "outcome": "changes_requested",
+      "durationMs": 60000,
+      "retryAfterFix": null,
+      "source": "hook",
+      "attributionConfidence": "high"
+    },
+    {
+      "eventId": "serial-retry-run:retry:1",
+      "type": "retry_scheduled",
+      "at": "2026-07-31T14:01:00.000Z",
+      "attemptId": "serial-retry-run:step-2:code-reviewer:attempt-1",
+      "nextAgent": "feature-developer",
+      "retryAfterFix": "code-reviewer",
+      "source": "hook",
+      "attributionConfidence": "high"
+    },
+    {
+      "eventId": "serial-retry-run:1:feature-developer:1:start",
+      "type": "attempt_started",
+      "at": "2026-07-31T14:01:00.000Z",
+      "attemptId": "serial-retry-run:step-1:feature-developer:attempt-1",
+      "stepIndex": 1,
+      "stepLabel": null,
+      "agent": "feature-developer",
+      "role": "implementation",
+      "attempt": 1,
+      "parallelGroupId": null,
+      "source": "hook",
+      "attributionConfidence": "high"
+    },
+    {
+      "eventId": "serial-retry-run:1:feature-developer:1:finish",
+      "type": "attempt_finished",
+      "at": "2026-07-31T14:03:00.000Z",
+      "attemptId": "serial-retry-run:step-1:feature-developer:attempt-1",
+      "outcome": "completed",
+      "durationMs": 120000,
+      "retryAfterFix": null,
+      "source": "hook",
+      "attributionConfidence": "high"
+    },
+    {
+      "eventId": "serial-retry-run:retry:2",
+      "type": "retry_scheduled",
+      "at": "2026-07-31T14:03:00.000Z",
+      "attemptId": "serial-retry-run:step-1:feature-developer:attempt-1",
+      "nextAgent": "code-reviewer",
+      "retryAfterFix": null,
+      "source": "hook",
+      "attributionConfidence": "high"
+    },
+    {
+      "eventId": "serial-retry-run:2:code-reviewer:2:start",
+      "type": "attempt_started",
+      "at": "2026-07-31T14:03:00.000Z",
+      "attemptId": "serial-retry-run:step-2:code-reviewer:attempt-2",
+      "stepIndex": 2,
+      "stepLabel": null,
+      "agent": "code-reviewer",
+      "role": "review",
+      "attempt": 2,
+      "parallelGroupId": null,
+      "source": "hook",
+      "attributionConfidence": "high"
+    },
+    {
+      "eventId": "serial-retry-run:2:code-reviewer:2:finish",
+      "type": "attempt_finished",
+      "at": "2026-07-31T14:04:00.000Z",
+      "attemptId": "serial-retry-run:step-2:code-reviewer:attempt-2",
+      "outcome": "completed",
+      "durationMs": 60000,
+      "retryAfterFix": null,
+      "source": "hook",
+      "attributionConfidence": "high"
+    },
+    {
+      "eventId": "serial-retry-run:done",
+      "type": "task_completed",
+      "at": "2026-07-31T14:04:00.000Z",
+      "outcome": "completed",
+      "source": "hook",
+      "attributionConfidence": "high"
+    }
+  ]
+}

package/presets/cursor/next/team/fixtures/metrics-scenarios/tasks/validation-failed/metrics.json

@@ -0,0 +1,124 @@
+{
+  "schemaVersion": 1,
+  "task": {
+    "runId": "validation-failed-run",
+    "slug": "validation-failed",
+    "preset": "ai-rules",
+    "stack": "next",
+    "platform": "cursor",
+    "intent": "feature",
+    "profile": "full"
+  },
+  "events": [
+    {
+      "eventId": "validation-failed-run:task",
+      "type": "task_started",
+      "at": "2026-07-31T15:00:00.000Z",
+      "source": "router",
+      "attributionConfidence": "high"
+    },
+    {
+      "eventId": "validation-failed-run:2:build-verifier:1:start",
+      "type": "attempt_started",
+      "at": "2026-07-31T15:00:00.000Z",
+      "attemptId": "validation-failed-run:step-2:build-verifier:attempt-1",
+      "stepIndex": 2,
+      "stepLabel": null,
+      "agent": "build-verifier",
+      "role": "validation",
+      "attempt": 1,
+      "parallelGroupId": null,
+      "source": "hook",
+      "attributionConfidence": "high"
+    },
+    {
+      "eventId": "validation-failed-run:2:build-verifier:1:finish",
+      "type": "attempt_finished",
+      "at": "2026-07-31T15:02:00.000Z",
+      "attemptId": "validation-failed-run:step-2:build-verifier:attempt-1",
+      "outcome": "validation_failed",
+      "durationMs": 120000,
+      "retryAfterFix": null,
+      "source": "hook",
+      "attributionConfidence": "high"
+    },
+    {
+      "eventId": "validation-failed-run:retry:1",
+      "type": "retry_scheduled",
+      "at": "2026-07-31T15:02:00.000Z",
+      "attemptId": "validation-failed-run:step-2:build-verifier:attempt-1",
+      "nextAgent": "feature-developer",
+      "retryAfterFix": "build-verifier",
+      "source": "hook",
+      "attributionConfidence": "high"
+    },
+    {
+      "eventId": "validation-failed-run:1:feature-developer:1:start",
+      "type": "attempt_started",
+      "at": "2026-07-31T15:02:00.000Z",
+      "attemptId": "validation-failed-run:step-1:feature-developer:attempt-1",
+      "stepIndex": 1,
+      "stepLabel": null,
+      "agent": "feature-developer",
+      "role": "implementation",
+      "attempt": 1,
+      "parallelGroupId": null,
+      "source": "hook",
+      "attributionConfidence": "high"
+    },
+    {
+      "eventId": "validation-failed-run:1:feature-developer:1:finish",
+      "type": "attempt_finished",
+      "at": "2026-07-31T15:05:00.000Z",
+      "attemptId": "validation-failed-run:step-1:feature-developer:attempt-1",
+      "outcome": "completed",
+      "durationMs": 180000,
+      "retryAfterFix": null,
+      "source": "hook",
+      "attributionConfidence": "high"
+    },
+    {
+      "eventId": "validation-failed-run:retry:2",
+      "type": "retry_scheduled",
+      "at": "2026-07-31T15:05:00.000Z",
+      "attemptId": "validation-failed-run:step-1:feature-developer:attempt-1",
+      "nextAgent": "build-verifier",
+      "retryAfterFix": null,
+      "source": "hook",
+      "attributionConfidence": "high"
+    },
+    {
+      "eventId": "validation-failed-run:2:build-verifier:2:start",
+      "type": "attempt_started",
+      "at": "2026-07-31T15:05:00.000Z",
+      "attemptId": "validation-failed-run:step-2:build-verifier:attempt-2",
+      "stepIndex": 2,
+      "stepLabel": null,
+      "agent": "build-verifier",
+      "role": "validation",
+      "attempt": 2,
+      "parallelGroupId": null,
+      "source": "hook",
+      "attributionConfidence": "high"
+    },
+    {
+      "eventId": "validation-failed-run:2:build-verifier:2:finish",
+      "type": "attempt_finished",
+      "at": "2026-07-31T15:06:00.000Z",
+      "attemptId": "validation-failed-run:step-2:build-verifier:attempt-2",
+      "outcome": "completed",
+      "durationMs": 60000,
+      "retryAfterFix": null,
+      "source": "hook",
+      "attributionConfidence": "high"
+    },
+    {
+      "eventId": "validation-failed-run:done",
+      "type": "task_completed",
+      "at": "2026-07-31T15:06:00.000Z",
+      "outcome": "completed",
+      "source": "hook",
+      "attributionConfidence": "high"
+    }
+  ]
+}

package/presets/cursor/next/team/fixtures/metrics.example.json

@@ -0,0 +1,54 @@
+{
+  "schemaVersion": 1,
+  "task": {
+    "runId": "example-run-1",
+    "slug": "example-feature-full",
+    "preset": "ai-rules",
+    "stack": "next",
+    "platform": "cursor",
+    "intent": "feature",
+    "profile": "full"
+  },
+  "events": [
+    {
+      "eventId": "example-run-1:task_started",
+      "type": "task_started",
+      "at": "2026-07-31T14:00:00.000Z",
+      "source": "router",
+      "attributionConfidence": "high"
+    },
+    {
+      "eventId": "example-run-1:attempt-1:start",
+      "type": "attempt_started",
+      "at": "2026-07-31T14:00:00.000Z",
+      "attemptId": "example-run-1:step-0:task-analyst:attempt-1",
+      "stepIndex": 0,
+      "stepLabel": "Clarify and decompose",
+      "agent": "task-analyst",
+      "role": "planning",
+      "attempt": 1,
+      "parallelGroupId": null,
+      "source": "router",
+      "attributionConfidence": "high"
+    },
+    {
+      "eventId": "example-run-1:attempt-1:end",
+      "type": "attempt_finished",
+      "at": "2026-07-31T14:02:00.000Z",
+      "attemptId": "example-run-1:step-0:task-analyst:attempt-1",
+      "outcome": "completed",
+      "durationMs": 120000,
+      "retryAfterFix": null,
+      "source": "hook",
+      "attributionConfidence": "high"
+    },
+    {
+      "eventId": "example-run-1:task_completed",
+      "type": "task_completed",
+      "at": "2026-07-31T14:02:00.000Z",
+      "outcome": "completed",
+      "source": "hook",
+      "attributionConfidence": "high"
+    }
+  ]
+}

package/presets/cursor/php-hexagonal/AGENTS.md

@@ -0,0 +1,39 @@
+# PHP hexagonal stack — Cursor agent team
+
+**Repo-root agents:** see [`AGENTS.md`](../../AGENTS.md) at the project root (cross-tool setup, commands, security, living conventions pointers).
+
+| Задача | Куда смотреть |
+|--------|----------------|
+| Новая work-задача | `/task` → `commands/task.md` + `agent-team-orchestrator.mdc` |
+| Фича end-to-end | skill `feature-delivery` + `feature-delivery-workflow.mdc` |
+| Стек и слои | `php-app-core.mdc`, `architecture-boundaries.mdc` |
+| После правок PHP | `post-change-test.mdc` (+ `php-tooling.mdc`) |
+| Integration tests | `integration-test-*` + skill `integration-testing` |
+| Unit tests | `unit-test-*` + skill `unit-testing` |
+| Code review | skill `code-review` + `code-review-mr.mdc` |
+| ADR | skill `write-adr` (on-demand) |
+| Как работает X | agent `codebase-analyzer` (explain-as-is; без `/task`) |
+
+## Install
+
+```bash
+npx @bonesofspring/ai-rules init cursor --preset php-hexagonal
+```
+
+Копирует rules/agents/hooks/skills/commands/team + `REPO_AGENTS.md` → корневой `AGENTS.md`.
+
+## Inventory
+
+- **21 agents** — see `agents/README.md` (no a11y / Playwright / XCUITest)
+- **8 skills** — `feature-delivery`, `unit-testing`, `integration-testing`, `ci-investigation`, `debug-investigation`, `code-review`, `technical-retro`, `write-adr`
+- **5 commands** — `/task`, `/task-continue`, `/feature-start`, `/feature-continue`, `/technical-retro`
+
+## Dogfood (5 сценариев)
+
+Host: `dogfood/php-hexagonal`.
+
+1. `/task` — новый use case (domain → ports → adapters → wire) на sample.
+2. Баг маппинга HTTP — debugger + `TodoController` unit.
+3. Repository contract — integration-test trio (sample: in-memory persistence).
+4. Unit use case — unit-test planner/generator (PHPUnit + port fake/mock).
+5. Secrets in logs — security-reviewer + `security-php`.

package/presets/cursor/php-hexagonal/BUGBOT.md

@@ -0,0 +1,11 @@
+# Bugbot — PHP / Composer hexagonal
+
+Priority review signals for this preset:
+
+- Domain purity: no framework/ORM/HTTP types in `Domain/` / `domain/`
+- Ports in `Application/`; adapters map at the edge
+- Secrets, PII, and authz checks — never log tokens/credentials
+- Persistence models must not leak upward past outbound ports
+- Prefer existing Composer/CI gates over inventing new static-analysis tools
+- Prefer `integration-test-*` for adapter contracts — never Playwright/XCUITest
+- After production edits: `post-change-test` / `php-tooling` (`composer test` / `vendor/bin/phpunit`)

package/presets/cursor/php-hexagonal/MCP.md

@@ -0,0 +1,15 @@
+# MCP (preset `php-hexagonal`, Cursor)
+
+Копируется в `.cursor/mcp.json` при `ai-rules init cursor --preset php-hexagonal`.
+
+## Servers
+
+| Name | Package | Зачем |
+|------|---------|--------|
+| `context7` | `@upstash/context7-mcp` | Актуальная документация PHP / Composer / популярных библиотек |
+
+Figma и browser e2e MCP (Playwright / Chrome DevTools) **не** входят в php-hexagonal-пресет (backend-only).
+
+Секреты в файл не кладём. Опционально: `CONTEXT7_API_KEY` в окружении.
+
+После init: Settings → MCP → включить серверы. `init` перезаписывает одноимённый `mcp.json`.

package/presets/cursor/php-hexagonal/README.md

@@ -0,0 +1,26 @@
+# Preset `php-hexagonal` (Cursor)
+
+Installable Cursor preset for **PHP hexagonal** services (PSR / Composer-first; Laravel & Symfony as documented variants).
+
+```bash
+npx @bonesofspring/ai-rules init cursor --preset php-hexagonal
+```
+
+## Layout
+
+| Path | Role |
+|------|------|
+| `rules/*.mdc` | Cursor SoT (34 stems); always-on trio ≤140 lines |
+| `agents/` | 21 agents + README (no a11y / Playwright / XCUITest) |
+| `skills/` | 8 skills + README |
+| `commands/` | 5 slash commands |
+| `team/` | conventions + fixtures (`feature-full`, `feature-light`, `bugfix-standard`) |
+| `hooks/` + `hooks.json` | Shell guard + team chain (byte-forked) — **Cursor-only** |
+| `REPO_AGENTS.md` | → consumer root `AGENTS.md` |
+| `AGENTS.md` | Cursor quick-start map + dogfood scenarios |
+| `BUGBOT.md` | Bugbot review priorities (PHP) — **Cursor-only** |
+| `MCP.md` / `mcp.json` | Context7 only |
+
+**Platform asymmetry:** `BUGBOT.md` and `hooks.json` ship only on Cursor. Claude twin uses `CLAUDE.md` (no `hooks.json` / no `BUGBOT.md`).
+
+Claude twin: `presets/claude/php-hexagonal/`. Contribution: `docs/PRESET-CONTRIBUTION.md`.

package/presets/cursor/php-hexagonal/REPO_AGENTS.md

@@ -0,0 +1,46 @@
+# PHP — agent instructions
+
+Cross-tool repo-root guide for the **php-hexagonal** preset (PSR / Composer-first). Tool-specific maps stay under `.cursor/AGENTS.md` and `.claude/CLAUDE.md`.
+
+## Cross-tool setup
+
+- Treat this file as the **shared** entry for any agent (Cursor, Claude Code, or other).
+- Install:
+
+```bash
+npx @bonesofspring/ai-rules init cursor --preset php-hexagonal
+npx @bonesofspring/ai-rules init claude --preset php-hexagonal
+```
+
+`init` overwrites this file from the preset (`REPO_AGENTS.md` → `AGENTS.md`).
+
+## Commands (test / verify)
+
+Detect Composer from the repo (`composer.json` / `composer.lock`). Prefer Composer scripts when present.
+
+| Gate | Typical command |
+|------|-----------------|
+| Tests | `composer test` or `vendor/bin/phpunit` (Pest if that is the repo default) |
+| Static analysis (if configured) | `vendor/bin/phpstan` / `vendor/bin/psalm` |
+| Format (if configured) | `vendor/bin/php-cs-fixer` / `vendor/bin/pint` |
+| Post-change | requestable `post-change-test` + `php-tooling` |
+
+Static analysis / format — only tools already configured in the repo/CI.
+
+## Security basics
+
+- Do not commit secrets (`.env`, tokens, credentials).
+- Review destructive git before running; respect shell hooks.
+
+## Tool entry points
+
+| Tool | Map |
+|------|-----|
+| Cursor | `.cursor/AGENTS.md` |
+| Claude Code | `.claude/CLAUDE.md` |
+
+Rules: `.cursor/rules/` or `.claude/rules/`. Integration tests: `integration-test-*` (never Playwright/XCUITest).
+
+## Living conventions
+
+Gotchas and team decisions: `.cursor/team/conventions.md` and/or `.claude/team/conventions.md` (fill after init; fixtures ship with the preset).

package/presets/cursor/php-hexagonal/agents/README.md

@@ -0,0 +1,36 @@
+# `.cursor/agents` (preset php-hexagonal)
+
+Ролевые subagents для командного пайплайна Cursor (PHP hexagonal).
+
+## Analysis (on-demand)
+
+| Agent | Файл | Production-код |
+|-------|------|----------------|
+| Codebase analyzer | `codebase-analyzer.md` | no (explain-as-is only) |
+
+## Roster (21)
+
+| Agent | Production writes |
+|-------|-------------------|
+| task-router, task-analyst, solution-architect | team only |
+| codebase-analyzer | no (explain-as-is only) |
+| feature-developer | yes (PHP sources) |
+| build-verifier | no (report only) |
+| debugger, ci-investigator | minimal |
+| code-reviewer, security-reviewer, performance-auditor | team only |
+| migration-specialist, api-contract-reviewer, tech-writer | team / docs |
+| qa-tester, unit-test-*, integration-test-* | tests |
+
+**No** `accessibility-reviewer`, Playwright, or XCUITest stems. Replace those intents with **`integration-test-*`**.
+
+## Frontmatter `readonly`
+
+Все agents — **`readonly: false`** (нужна запись в `.cursor/team/**`). Ограничения production — в теле промпта.
+
+## Model matrix (frontmatter `model`)
+
+| Tier | Frontmatter | Agents |
+|------|-------------|--------|
+| **cheap** | `fast` | router, analyst, build-verifier, code-reviewer, tech-writer, codebase-analyzer |
+| **standard** | `inherit` | developer, debugger, ci-investigator, api-contract, qa, unit-*, integration-* |
+| **strong** | `claude-opus-4-8[effort=high]` | solution-architect, migration-specialist, security-reviewer, performance-auditor |

package/presets/cursor/php-hexagonal/agents/api-contract-reviewer.md

@@ -0,0 +1,23 @@
+---
+name: api-contract-reviewer
+description: API contract review specialist. Validates OpenAPI/Protobuf DTOs, mappers, and driving adapters against contracts. Readonly — writes api-contract-review.md only; never edits production code.
+readonly: false
+---
+
+Review **HTTP/gRPC contract alignment** for PHP hexagonal services.
+
+## Focus
+
+- OpenAPI / proto definitions vs adapter DTOs
+- Mapping at driving edge (no domain pollution with wire types)
+- Status/error code mapping consistency
+- Backward compatibility of public Composer packages / published HTTP or gRPC contracts
+
+## Output
+
+`.cursor/team/tasks/<slug>/api-contract-review.md` — gaps, severity, suggested fixes (no code edits).
+
+## Non-scope
+
+- iOS Feature Presentation/Data framing
+- Choosing a new framework

package/presets/cursor/php-hexagonal/agents/build-verifier.md

@@ -0,0 +1,45 @@
+---
+name: build-verifier
+description: Validation gate specialist. Runs composer test / vendor/bin/phpunit and configured static analysis after implementation; writes validation-report.md. Never fixes app source. For preset packaging tasks, also validates php-hexagonal preset structure gates.
+readonly: false
+model: fast
+---
+
+You are the build verifier for **PHP hexagonal** services (and for **ai-rules preset packaging** when scope says so).
+
+## Consumer PHP repos
+
+1. Detect Composer from `composer.json` / `composer.lock`; prefer Composer scripts when present.
+2. Run from module/project root: `composer test` or `vendor/bin/phpunit` (or Pest if that is the repo default / CI).
+3. If present in **repo or CI**: formatter + static analysis (PHP-CS-Fixer, Pint, PHPStan, Psalm, or project-equivalent) per `php-tooling` / `post-change-test`. Mirror CI gates locally when configs/scripts exist; do **not** invent a tool the repo does not use.
+4. Write `.cursor/team/tasks/<slug>/validation-report.md` with commands + results.
+5. On failure: set status `validation_failed` — do **not** patch production code (developer retries).
+
+**Never** require Playwright, XCUITest, `lint:js`/`lint:css`, `xcodebuild`/`SwiftLint`, `mvn`, or `gradlew` as the PHP gate.
+
+## Preset-structure validation (when editing `packages/ai-rules/presets/**`)
+
+From `packages/ai-rules/`:
+
+```bash
+yarn check:preset-structure
+```
+
+Hard gates for the **php-hexagonal** stack (and peers):
+
+| Gate | FAIL when |
+|------|-----------|
+| **twin-map** | `php-hexagonal` missing from `STACKS`, or Cursor↔Claude orphan/missing twins |
+| **token-budget** | Cursor `alwaysApply` ≠ 3 or Claude session-start (excl. README) ≠ 3, or trio body sum > 140 |
+| **leakage** | `PHP_FORBIDDEN_*` hits (Playwright/XCUITest/`lint:js`/`accessibility-reviewer` as required handoffs) |
+| **chain fork** | `hooks/chain-team-phases.sh` byte-identical to **next**, **ios-swift**, **go**, **java**, **mcp-ts**, or **php-laravel** (same platform) |
+
+Also document:
+
+1. **Root AGENTS template:** each installable preset (`cursor|claude` × `next|ios-swift|go|java|mcp-ts|php-hexagonal`) must ship `REPO_AGENTS.md` → **FAIL** if missing.
+2. **Hooks cookbook:** default `hooks.json` must **not** reference `hooks/examples/` → **FAIL** if it does.
+3. **No react-performance / Playwright / a11y on backend stacks:** skill directory / required handoff must be absent under go, java, php-hexagonal, php-laravel, mcp-ts → **FAIL** (leakage). Prefer `check:preset-leakage`.
+4. **Shared-core drift (hard in `check:preset-structure`):** `check-shared-core-drift` with `AI_RULES_DRIFT_FAIL=1`.
+5. **Rule eval (WARN):** `yarn check:rule-eval` is **next-only** (`eval/next/`); optional for maintainers; not part of default `check:preset-structure`. Missing php-hexagonal eval stems is not a FAIL.
+
+Document PASS/FAIL in `validation-report.md`.

package/presets/cursor/php-hexagonal/agents/ci-investigator.md

@@ -0,0 +1,21 @@
+---
+name: ci-investigator
+description: Investigates failing CI checks on PRs and branches — composer test / vendor/bin/phpunit, vet, configured static analysis, integration jobs — with local reproduction and minimal fixes. Use when CI is red or for ci-fix pipeline tasks.
+readonly: false
+---
+
+Triage red CI for PHP repos (and ai-rules preset-structure when relevant).
+
+## Steps
+
+1. Identify failing job/logs.
+2. Reproduce locally (`composer test` / `vendor/bin/phpunit`, compiler/static analysis, lint-if-present, or `yarn check:preset-structure` for preset PRs).
+3. Minimal fix or document blocker; update `debug-report.md` / status.
+
+## Never
+
+- Never treat `lint:js` / Playwright / xcodebuild as the PHP default gate.
+
+## Anti-sycophancy discipline
+
+- When writing or changing code, load / follow rule `anti-sycophancy-discipline`.