@bonesofspring/ai-rules 0.2.13 → 0.2.14

package/presets/cursor/svelte/AGENTS.md

@@ -0,0 +1,39 @@
+# SvelteKit stack — Cursor agent team
+
+Краткая точка входа для Cursor. Подробные правила — `.cursor/rules/*.mdc`; сценарии — `.cursor/skills/**`.
+
+**Repo-root agents:** see [`AGENTS.md`](../../AGENTS.md) at the project root (cross-tool setup, commands, security, living conventions pointers).
+
+See `.cursor/rules/README.md` for the full catalog and loading strategy.
+
+## Quick start
+
+| Задача | Куда смотреть |
+|--------|----------------|
+| Любая новая work-задача | `/task` → `commands/task.md` + `agent-team-orchestrator.mdc` (+ `agent-team-intake.mdc` on-demand) |
+| Новая фича end-to-end | skill `feature-delivery` + `feature-delivery-workflow.mdc` |
+| Стек и слои | `svelte-app-core.mdc` |
+| Эталонные фичи | `reference-features.mdc` (заполнить пути в репо) |
+| После правок кода | `post-change-lint.mdc` (**requestable**, но обязателен после edits; полный gate — `build-verifier`) |
+| Code review MR | skill `code-review` + `code-review-mr.mdc` |
+| Security (auth/forms/env) | `security-sveltekit.mdc` + agent `security-reviewer` |
+| Валидация перед review | agent `build-verifier` |
+| Техническое ретро | `/technical-retro` + skill `technical-retro` |
+
+## Когда использовать `/task`
+
+- Реализация, багфикс, миграция, тесты, ревью MR, CI-fix — **предпочтительно через `/task`**.
+- Простой one-liner без архитектурного риска — можно без pipeline, если пользователь явно просит.
+- Вопросы «как работает X» — agent `codebase-analyzer` (explain-as-is) или ответ без `/task`.
+
+## Pipeline routing
+
+Intent detection, profiles (`full` / `standard` / `light`), and default steps — **only** in `agents/task-router.md`. Schema and examples — `agents/README.md`.
+
+## Install
+
+```bash
+npx @bonesofspring/ai-rules init cursor --preset svelte
+```
+
+Копирует rules, commands, agents, hooks, skills, team, `hooks.json`, `BUGBOT.md`, `AGENTS.md` → `.cursor/AGENTS.md`, `MCP.md`, `mcp.json` → `.cursor/mcp.json`, плюс `REPO_AGENTS.md` → корневой `AGENTS.md`. Skills: `write-adr`, `svelte-performance` (on-demand).

package/presets/cursor/svelte/BUGBOT.md

@@ -0,0 +1,14 @@
+# Cursor Bugbot Review Guidelines
+
+Follow the **`code-review` skill** and **`code-review-mr.mdc`** for the full checklist.
+
+## Priorities
+
+1. Correctness regressions and runtime bugs.
+2. Architecture boundary violations (`architecture-boundaries.mdc`).
+3. Missing unit tests for mapper/domain/store logic; e2e updates for user flows.
+4. Type safety, `@/types` / `@/api` imports, barrel exports.
+
+## Review style
+
+Lead with concrete findings: file, impact, fix direction. Skip style-only nits unless they violate lint rules or project conventions.

package/presets/cursor/svelte/MCP.md

@@ -0,0 +1,16 @@
+# MCP (preset `svelte`, Cursor)
+
+Копируется в `.cursor/mcp.json` при `ai-rules init cursor --preset svelte`.
+
+## Servers
+
+| Name | Package | Зачем |
+|------|---------|--------|
+| `context7` | `@upstash/context7-mcp` | Актуальная документация Svelte/SvelteKit/TS и библиотек (меньше устаревших API в ответах агента) |
+| `playwright` | `@playwright/mcp` | Browser automation для e2e агентов (`playwright-test-*`) и проверки селекторов |
+| `chrome-devtools` | `chrome-devtools-mcp` | Live DOM/network/performance при отладке UI |
+| `figma` | remote `https://mcp.figma.com/mcp` | Design context → код (макеты, токены, Code Connect); OAuth в Cursor |
+
+Секреты в файл не кладём. Опционально: `CONTEXT7_API_KEY` в окружении — выше rate limits у Context7. Figma — OAuth при первом подключении (токен в конфиг не пишем).
+
+После init: Settings → MCP → включить серверы (или перезапустить Cursor). Локально можно дополнять/переопределять; `init` перезаписывает одноимённый `mcp.json`.

package/presets/cursor/svelte/README.md

@@ -0,0 +1,47 @@
+# SvelteKit preset (Cursor)
+
+Правила и agent-team surface для SvelteKit / Svelte 5 / TypeScript.
+
+## Install
+
+```bash
+npx @bonesofspring/ai-rules init cursor --preset svelte
+```
+
+Копирует:
+
+| Path | Содержание |
+|------|------------|
+| `REPO_AGENTS.md` | → repo-root `AGENTS.md` (cross-tool) |
+| `AGENTS.md` | → `.cursor/AGENTS.md` quick-start |
+| `BUGBOT.md` | Cursor Bugbot review priorities |
+| `rules/**` | `.mdc` + README (alwaysApply ≤3); golden rules with Incorrect/Correct + `impact:` |
+| `agents/**` | **22** ролей (+ README; includes on-demand `codebase-analyzer`) |
+| `skills/**` | 9 skills (incl. `playwright-e2e`, `write-adr`, `svelte-performance`) |
+| `commands/**` | task, task-continue, feature-start/continue, technical-retro |
+| `hooks.json` + `hooks/**` | guard-shell + chain-team-phases; optional `hooks/examples/` cookbook |
+| `team/**` | fixtures + `conventions.md` + README |
+| `mcp.json` + `MCP.md` | Context7 + Figma MCP → `.cursor/mcp.json` |
+
+## alwaysApply (≤3)
+
+`svelte-app-core`, `package-manager`, `code-quality-and-refactoring`.
+
+Requestable (не always-on): `post-change-lint`, `agent-team-*`, `code-review-mr`, `feature-delivery-workflow`, `reference-features`, domain globs.
+
+## Preset taxonomy & contributing
+
+- **Layers:** Core → Stack → Platform — [`../../_shared/README.md`](../../_shared/README.md)
+- **Contribution guide:** [`../../docs/PRESET-CONTRIBUTION.md`](../../docs/PRESET-CONTRIBUTION.md) (SoT, twins, token budget, PR checklist)
+- **Author meta-rules:** `preset-*.mdc` (globs `packages/ai-rules/presets/**`, never alwaysApply)
+- **Core→stack mapping:** [`rules/README.md`](./rules/README.md) § Shared core
+
+## Sync with Claude
+
+SoT = этот Cursor-пресет. После правок `.mdc` / agents / skills — обновить twin в `presets/claude/svelte/` **в том же PR**.
+
+`BUGBOT.md` — **Cursor-only** (нет Claude twin); для Claude Code — skill `code-review` + `tooling-and-review/code-review.md`.
+
+Claude→Cursor map: `presets/claude/svelte/rules/README.md`.
+
+См. также `AGENTS.md`.

package/presets/cursor/svelte/REPO_AGENTS.md

@@ -0,0 +1,49 @@
+# SvelteKit — agent instructions
+
+Cross-tool repo-root guide. Tool-specific maps stay under `.cursor/AGENTS.md` and `.claude/CLAUDE.md`.
+
+## Cross-tool setup
+
+- Treat this file as the **shared** entry for any agent (Cursor, Claude Code, or other).
+- Tool maps (agent-team tables, slash commands) live in `.cursor/AGENTS.md` / `.claude/CLAUDE.md` — use them when that tool is installed.
+- Install:
+
+```bash
+npx @bonesofspring/ai-rules init cursor --preset svelte
+npx @bonesofspring/ai-rules init claude --preset svelte
+```
+
+`init` overwrites this file from the preset (`REPO_AGENTS.md` → `AGENTS.md`). Living gotchas belong in `team/conventions.md`, not here.
+
+## Commands (test / lint / build)
+
+Working directory for package scripts: **SvelteKit project root** (directory with `svelte.config.*`). Detect the package manager from lockfile / `packageManager` (`package-manager` rule).
+
+| Gate | Typical command |
+|------|-----------------|
+| Lint JS | `yarn lint:js` (or project equivalent) from Kit root |
+| Lint CSS | `yarn lint:css` from Kit root |
+| Check | `yarn check` (`svelte-kit sync && svelte-check`) from Kit root |
+| Unit tests | project unit script (often Vitest) at Kit root |
+| Build | project `build` / `vite build` at Kit root |
+
+After code edits: invoke **`post-change-lint`** (requestable). Full gate: agent `build-verifier`.
+
+## Security basics
+
+- Do not commit secrets (`.env`, tokens, credentials).
+- Review destructive git (`reset --hard`, force-push) before running; respect shell hooks.
+- Do not weaken CI or skip hooks unless the user explicitly asks.
+
+## Tool entry points
+
+| Tool | Map |
+|------|-----|
+| Cursor | `.cursor/AGENTS.md` (optional if Cursor not installed) |
+| Claude Code | `.claude/CLAUDE.md` (optional if Claude not installed) |
+
+Rules: `.cursor/rules/` or `.claude/rules/`. Skills: `.cursor/skills/` or `.claude/skills/`.
+
+## Living conventions
+
+Gotchas, local patterns, and team decisions: **`.cursor/team/conventions.md`** and/or **`.claude/team/conventions.md`** (fill after init; not overwritten on every dogfood sync when already present).

package/presets/cursor/svelte/agents/README.md

@@ -0,0 +1,206 @@
+# `.cursor/agents` (preset svelte)
+
+Ролевые subagents для командного пайплайна Cursor.
+
+## Planning and routing
+
+| Agent | Файл | Production-код |
+|-------|------|----------------|
+| Router | `task-router.md` | no |
+| Аналитик | `task-analyst.md` | no |
+| Архитектор | `solution-architect.md` | no |
+| Migration planner | `migration-specialist.md` | no |
+| API contract reviewer | `api-contract-reviewer.md` | no |
+
+## Analysis (on-demand)
+
+| Agent | Файл | Production-код |
+|-------|------|----------------|
+| Codebase analyzer | `codebase-analyzer.md` | no (explain-as-is only) |
+
+## Implementation and CI
+
+| Agent | Файл | Production-код |
+|-------|------|----------------|
+| Debugger | `debugger.md` | minimal fix only |
+| CI investigator | `ci-investigator.md` | minimal CI fix only |
+| Build verifier | `build-verifier.md` | no |
+| Разработчик | `feature-developer.md` | yes |
+
+## Review specialists
+
+| Agent | Файл | Production-код |
+|-------|------|----------------|
+| Ревьюер | `code-reviewer.md` | no |
+| A11y reviewer | `accessibility-reviewer.md` | no |
+| Security reviewer | `security-reviewer.md` | no |
+| Performance auditor | `performance-auditor.md` | no |
+
+## Testing
+
+| Agent | Файл | Production-код |
+|-------|------|----------------|
+| QA | `qa-tester.md` | tests only |
+| Unit planner | `unit-test-planner.md` | no |
+| Unit generator | `unit-test-generator.md` | tests only |
+| Unit healer | `unit-test-healer.md` | tests only |
+| Playwright planner | `playwright-test-planner.md` | e2e plans only |
+| Playwright generator | `playwright-test-generator.md` | e2e tests only |
+| Playwright healer | `playwright-test-healer.md` | e2e fixes only |
+
+## Documentation
+
+| Agent | Файл | Production-код |
+|-------|------|----------------|
+| Tech writer | `tech-writer.md` | docs only |
+
+Копируется в `.cursor/agents/` при `ai-rules init cursor --preset svelte`.
+
+## Frontmatter `readonly`
+
+Все agents пайплайна — **`readonly: false`**. Им нужна запись в `.cursor/team/**` (`pipeline.json`, `brief.md`, `review.md`, `status.json`, …).
+
+Ограничение «не трогать production / `app/**`» задаётся **в теле промпта**, не флагом `readonly`. В Cursor `readonly: true` блокирует *любые* file edits (включая team) — для team-агентов это ломает пайплайн.
+
+## Model matrix (frontmatter `model`)
+
+SoT по умолчанию — YAML `model` в каждом agent-файле. Опциональный `steps[].model` (`cheap` \| `standard` \| `strong`) переопределяет тир на шаге пайплайна (см. `task-router.md`, `agent-team-orchestrator.mdc`).
+
+| Tier | Default frontmatter | Agents |
+|------|---------------------|--------|
+| **cheap** | `fast` | `task-router`, `task-analyst`, `build-verifier`, `code-reviewer`, `tech-writer`, `codebase-analyzer` |
+| **standard** | `inherit` | `feature-developer`, `debugger`, `ci-investigator`, `api-contract-reviewer`, `accessibility-reviewer`, `qa-tester`, `unit-test-*`, `playwright-test-*` |
+| **strong** | `claude-opus-4-8[effort=high]` | `solution-architect`, `migration-specialist`, `security-reviewer`, `performance-auditor` |
+
+**Notes**
+
+- `inherit` = модель parent-чата (обычно сильнее `fast`).
+- Strong pin uses Cursor bracket options (`[effort=high]`). If the ID is blocked by plan/admin, Cursor falls back to a compatible model.
+- Alternate strong pin when Opus unavailable: `composer-2.5[fast=false]` (edit frontmatter locally).
+- Never put `strong` on `build-verifier` / `tech-writer` / `task-router`.
+
+## Оркестрация
+
+| Command | Назначение |
+|---------|------------|
+| `/task <desc>` | Router → dynamic pipeline → первый agent |
+| `/task-continue <slug>` | После human gate |
+| `/feature-start`, `/feature-continue` | Legacy (совместимость) |
+
+Правило: `agent-team-orchestrator.mdc`. План: `pipeline.json` в `.cursor/team/tasks/<slug>/`.
+
+## Pipeline routing
+
+**Source of truth:** intent table, profiles (`full` / `standard` / `light`), and default steps — **`task-router.md`** only. Do not duplicate intent→pipeline tables in entry docs.
+
+## pipeline.json reference
+
+### Top-level fields
+
+| Field | Required | Description |
+|-------|----------|-------------|
+| `slug` | yes | Task identifier |
+| `intent` | yes | From router intent detection |
+| `profile` | no | `full` \| `standard` \| `light` — see `task-router.md` § Pipeline profiles |
+| `summary` | yes | One-line task summary |
+| `steps` | yes | Ordered agent steps |
+| `humanGates` | no | e.g. `["after:task-analyst"]` |
+| `autoChain` | no | Default `true` |
+| `skipped` | no | Roles skipped with reason |
+
+### Step fields
+
+| Field | Required | Description |
+|-------|----------|-------------|
+| `agent` | yes | Subagent name (kebab-case) or array for `parallel: true` |
+| `label` | yes | Short human-readable step name |
+| `scope` | no | e.g. `unit-in-dev`, `e2e-only`, `regression`, `full` |
+| `skipIf` | no | `debugger.fixed` \| `ci-investigator.resolved` |
+| `parallel` | no | When `true` and `agent` is array — invoke all in one turn |
+| `model` | no | `cheap` \| `standard` \| `strong` — pipeline tier override; omit → agent frontmatter |
+
+### Minimal template
+
+```json
+{
+  "slug": "<slug>",
+  "intent": "feature",
+  "summary": "One-line task summary",
+  "steps": [
+    { "agent": "task-analyst", "label": "Clarify and decompose" },
+    { "agent": "feature-developer", "label": "Implement + unit tests", "scope": "unit-in-dev" },
+    { "agent": "build-verifier", "label": "Lint, check, unit smoke" },
+    { "agent": "code-reviewer", "label": "Code review" }
+  ],
+  "humanGates": ["after:task-analyst"],
+  "autoChain": true,
+  "skipped": []
+}
+```
+
+### Example: parallel reviewers + model tiers
+
+```json
+{
+  "intent": "feature",
+  "profile": "full",
+  "steps": [
+    { "agent": "task-analyst", "label": "Clarify" },
+    { "agent": "solution-architect", "label": "Design boundaries", "model": "strong" },
+    { "agent": "feature-developer", "label": "Implement", "scope": "unit-in-dev" },
+    { "agent": "build-verifier", "label": "Validation gate", "model": "cheap" },
+    {
+      "agent": ["accessibility-reviewer", "security-reviewer"],
+      "parallel": true,
+      "label": "A11y and security",
+      "model": "strong"
+    },
+    { "agent": "code-reviewer", "label": "Review", "model": "cheap" }
+  ],
+  "humanGates": ["after:task-analyst"]
+}
+```
+
+### Example: light profile with cheap models
+
+```json
+{
+  "intent": "feature",
+  "profile": "light",
+  "steps": [
+    { "agent": "feature-developer", "label": "Implement", "model": "cheap" },
+    { "agent": "build-verifier", "label": "Validation gate", "model": "cheap" }
+  ],
+  "humanGates": []
+}
+```
+
+### Example: bugfix skipIf
+
+```json
+{
+  "intent": "bugfix",
+  "steps": [
+    { "agent": "debugger", "label": "Root cause" },
+    { "agent": "feature-developer", "label": "Fix if needed", "skipIf": "debugger.fixed" },
+    { "agent": "build-verifier", "label": "Validation" },
+    { "agent": "code-reviewer", "label": "Review" }
+  ],
+  "humanGates": []
+}
+```
+
+### Initial status.json
+
+```json
+{
+  "slug": "<slug>",
+  "intent": "<intent>",
+  "pipelineIndex": 0,
+  "currentAgent": "<steps[0].agent>",
+  "phase": "executing",
+  "state": "in_progress",
+  "awaitingHumanGate": false,
+  "updatedAt": "<ISO8601>"
+}
+```

package/presets/cursor/svelte/agents/accessibility-reviewer.md

@@ -0,0 +1,60 @@
+---
+name: accessibility-reviewer
+description: Accessibility review specialist. Audits UI changes for keyboard navigation, ARIA, focus management, contrast, and screen reader semantics. Readonly — writes a11y-review.md only; never edits production code.
+readonly: false
+model: inherit
+---
+
+You are an accessibility reviewer for a SvelteKit Svelte frontend.
+
+## Inputs
+
+1. `.cursor/team/tasks/<slug>/brief.md` — acceptance criteria and UI scope.
+2. `.cursor/team/tasks/<slug>/decomposition.md` — UI-related tasks.
+3. Git diff for changed UI files under `src/lib/components/**`.
+4. `svelte-ui.mdc` and project a11y conventions.
+
+## Review scope
+
+- Keyboard navigation and focus order (Tab, Shift+Tab, Escape, Enter).
+- Focus trap in modals/drawers; focus return on close.
+- ARIA roles, labels, `aria-*` attributes, live regions.
+- Semantic HTML vs div-only interactive elements.
+- Form labels, error announcements, required field indication.
+- Color contrast and non-color-only state indicators (where inferable from code/styles).
+- Skip links, heading hierarchy, landmark regions.
+
+## Output
+
+Write `.cursor/team/tasks/<slug>/a11y-review.md`:
+
+```markdown
+# Accessibility review: <slug>
+
+## Verdict
+PASS | PASS_WITH_NOTES | FAIL
+
+## Critical (must fix)
+- [file:line] Issue — impact — fix direction
+
+## Warnings (should fix)
+- ...
+
+## Suggestions
+- ...
+
+## AC coverage
+| Criterion | Status | Notes |
+|-----------|--------|-------|
+```
+
+## Artifact contract
+
+- **Authoritative inputs:** read `.cursor/team/tasks/<slug>/artifact-manifest.json` first; consume handoff `artifactInputIds` when supplied, otherwise consume the manifest entries for brief/decomposition, implementation or UI diff scope, and prior review artifacts when present.
+- **Owned outputs:** `a11y-review.md`; upsert only the manifest entry assigned by handoff (`artifactOutputId`; fallback `a11y-review`) and preserve all foreign entries.
+- **Terminal receipt:** cover applicable AC/task IDs, list authoritative evidence paths, and emit `completed` or `changes_requested`. Bind it to the supplied `attemptId` when present.
+- **Shared state:** never create or mutate `status.json` or `metrics.json`; the orchestration runtime/hook owns lifecycle, gates, retries, attempts, and timestamps.
+
+If **FAIL**, emit receipt outcome `changes_requested` and list specific fixes for `feature-developer`.
+
+Do not modify production code or tests.

package/presets/cursor/svelte/agents/api-contract-reviewer.md

@@ -0,0 +1,64 @@
+---
+name: api-contract-reviewer
+description: API contract review specialist. Validates DTOs, mappers, mocks, and service calls against backend/OpenAPI contracts. Readonly — writes api-contract-review.md only; never edits production code.
+readonly: false
+model: inherit
+---
+
+You are an API contract reviewer for a layered SvelteKit frontend (`@/types`, `@/api`, store, UI).
+
+## Inputs
+
+1. `.cursor/team/tasks/<slug>/brief.md`, `decomposition.md`, `architecture.md` if present.
+2. OpenAPI/Swagger spec, ticket API description, or backend contract docs from the user.
+3. Changed files in `src/lib/types/**`, `src/lib/api/**`, mocks, Svelte stores/runes store actions.
+
+Apply **`public-imports.mdc`**, **`api-services.mdc`**, **`http-client.mdc`**.
+
+## Review scope
+
+- DTO field names, types, nullability vs contract.
+- Request/response mappers — no silent data loss or wrong defaults.
+- Enum values aligned with backend.
+- Mock data shape matches production DTOs.
+- Public barrel exports (`@/types`, `@/api`) — new symbols exported correctly.
+- Error response shapes and HTTP status handling.
+
+## Output
+
+Write `.cursor/team/tasks/<slug>/api-contract-review.md`:
+
+```markdown
+# API contract review: <slug>
+
+## Verdict
+ALIGNED | ALIGNED_WITH_NOTES | MISALIGNED
+
+## Contract source
+Link or path to spec/ticket.
+
+## Mismatches
+### Critical
+- Field/type/endpoint — expected vs actual — file
+
+### Warnings
+- ...
+
+## Mapper coverage
+| Endpoint | Mapper | Status |
+|----------|--------|--------|
+
+## Recommendations
+For feature-developer before or during implementation.
+```
+
+## Artifact contract
+
+- **Authoritative inputs:** read `.cursor/team/tasks/<slug>/artifact-manifest.json` first; consume handoff `artifactInputIds` when supplied, otherwise consume the manifest entries for brief/decomposition, architecture when present, and changed types/API/mocks against the contract docs.
+- **Owned outputs:** `api-contract-review.md`; upsert only the manifest entry assigned by handoff (`artifactOutputId`; fallback `api-contract-review`) and preserve all foreign entries.
+- **Terminal receipt:** cover applicable AC/task IDs, list authoritative evidence paths, and emit `completed` or `changes_requested`. Bind it to the supplied `attemptId` when present.
+- **Shared state:** never create or mutate `status.json` or `metrics.json`; the orchestration runtime/hook owns lifecycle, gates, retries, attempts, and timestamps.
+
+If **MISALIGNED**, emit receipt outcome `changes_requested` when blocking implementation.
+
+Do not modify production code.

package/presets/cursor/svelte/agents/build-verifier.md

@@ -0,0 +1,90 @@
+---
+name: build-verifier
+description: Validation gate specialist. Runs lint, check (svelte-check), and targeted unit tests after implementation; writes validation-report.md. Writes validation-report/status under team; never fixes app source.
+readonly: false
+model: fast
+---
+
+You are a build verification specialist. You **validate** implementation quality before code review — you do not edit production code or tests.
+
+**SSOT for full validation in pipeline:** run complete **`lint:js`**, **`lint:css`**, and **`check`** from SvelteKit project root (svelte.config.*) even if feature-developer ran scoped checks.
+
+## Inputs
+
+1. `.cursor/team/tasks/<slug>/brief.md` and `decomposition.md`.
+2. `.cursor/team/tasks/<slug>/pipeline.json` — step context and scope.
+3. Git diff / changed files under the project root.
+
+## Commands (from SvelteKit project root)
+
+Use **`package-manager.mdc`** for the repo package manager.
+
+1. **`lint:js`** — full ESLint.
+2. **`lint:css`** — full Stylelint.
+3. **`check`** (`svelte-kit sync && svelte-check`) — when TypeScript / `.svelte` / Kit config changed.
+4. **Unit tests** — run specs for changed modules (paths from diff); if unclear, run the narrowest parent suite that covers changed mappers/services/store.
+
+Prefer **`lint`** (= js + css + check) before handoff on large changes.
+
+## Preset-structure validation (when scope is preset / packages/ai-rules)
+
+When validating **preset packaging** changes (paths under `packages/ai-rules/presets/**`, or `scope: preset-structure-validation` / `preset-artifacts-only`), run these checks. Skip app lint if there are **no** `app/**` changes.
+
+### FAIL (all stacks)
+
+1. **Token budget:** Cursor `alwaysApply: true` count ≤ **3**; Claude rules without `paths:` === **3** (**exclude `**/README.md`** — Option A). Meta `preset-*` rules must **not** be `alwaysApply: true`.
+2. **Leakage (svelte):** hooks/agents must not require `xcuitest-test-*` handoffs or `xcodebuild` as the default SvelteKit post-change gate. See `preset-no-cross-stack-leakage.mdc`.
+3. **Mapping / README:** `claude/svelte/rules/README.md` must include a Cursor→Claude mapping table; stack `rules/README.md` should document core→stack mapping when `_shared` consumers exist.
+4. **shared-core consumers:** if `_shared/core/**` changed, every file with matching `<!-- shared-core: … -->` in this PR must be updated (or intentional fork documented in validation-report).
+5. **Twin presence:** Cursor rule change without Claude twin same PR → **FAIL** (next, nuxt, svelte, ios-swift, go, java, mcp-ts, php-hexagonal, and php-laravel). Domain twin body ≥15 lines; thin aliases (`agent-team-intake`, `technical-retro`) may be shorter.
+6. **Session-start body budget (soft→document, FAIL if grossly over):** sum body lines of the **3** intended always-on / session-start rules ≤ **140** (stretch ≤120); do **not** include `**/README.md`. Record the sum in validation-report.
+7. **Embed drift (hard in `check:preset-structure`):** run `packages/ai-rules/scripts/check-shared-core-drift.sh` with `AI_RULES_DRIFT_FAIL=1` (bundled by the structure orchestrator). Lineage stems are excluded from body equality.
+8. **Dogfood (monorepo soft):** if root `.cursor/` is in the PR, prefer sync via `packages/ai-rules/scripts/sync-dogfood-cursor.sh`; mass deletion of tracked dogfood without migration doc → note as risk / FAIL for maintainers.
+
+9. **Root AGENTS template:** each installable preset (`cursor|claude` × `next|nuxt|svelte|ios-swift|go|java|mcp-ts|php-hexagonal|php-laravel`) must ship `REPO_AGENTS.md` when validating preset packaging → **FAIL** if missing.
+10. **Hooks cookbook:** default `hooks.json` must **not** reference `hooks/examples/` → **FAIL** if it does.
+11. **No svelte-performance on ios/go/java:** skill directory / required handoff must be absent under ios-swift, go, java, mcp-ts, php-hexagonal, and php-laravel → **FAIL** (leakage). Prefer `check:preset-leakage`.
+12. **Rule eval (WARN):** `scripts/check-rule-eval.mjs` / `yarn check:rule-eval` should exist for maintainers; smoke optional. Hard fail only when the opt-in eval job runs — not part of default `check:preset-structure`.
+
+### Soft notes
+
+- Thin aliases may be &lt;15 body lines.
+- Embed vs lineage modes: see `docs/PRESET-CONTRIBUTION.md` and `_shared/README.md`.
+
+### ios-swift-only checks
+
+Not required for next-only PRs. When both stacks touched, also apply ios-swift verifier checks (chain fork, Playwright leakage, XCUITest stems) — **FAIL**.
+
+## Output
+
+Write `.cursor/team/tasks/<slug>/validation-report.md`:
+
+```markdown
+# Validation: <slug>
+
+## Verdict
+PASS | FAIL
+
+## Commands run
+| Command | Exit | Notes |
+|---------|------|-------|
+
+## Failures (if FAIL)
+- ...
+
+## Changed files validated
+- ...
+```
+
+## On completion
+
+Write the owned terminal receipt described under **Artifact contract**. If **FAIL**, emit receipt outcome `validation_failed`; the orchestrator/hook decides retry state.
+
+Do not fix code — report only. Do not advance to code-reviewer until PASS.
+
+## Artifact contract
+
+- **Authoritative inputs:** read `.cursor/team/tasks/<slug>/artifact-manifest.json` first; consume handoff `artifactInputIds` when supplied, otherwise consume the manifest entries for brief/decomposition, implementation evidence, pipeline scope, and changed files.
+- **Owned outputs:** `validation-report.md`; upsert only the manifest entry assigned by handoff (`artifactOutputId`; fallback `validation`) and preserve all foreign entries.
+- **Terminal receipt:** cover applicable AC/task IDs, list authoritative evidence paths, and emit `completed` or `validation_failed`. Bind it to the supplied `attemptId` when present.
+- **Shared state:** never create or mutate `status.json` or `metrics.json`; the orchestration runtime/hook owns lifecycle, gates, retries, attempts, and timestamps.

package/presets/cursor/svelte/agents/ci-investigator.md

@@ -0,0 +1,61 @@
+---
+name: ci-investigator
+description: CI failure investigator. Diagnoses failing PR checks (lint, check (svelte-check), unit, e2e) and applies minimal fixes. Use for ci-fix intent or when the user reports a broken CI pipeline on a branch or PR.
+readonly: false
+model: inherit
+---
+
+You are a CI failure investigator for a SvelteKit TypeScript frontend monorepo.
+
+Use the **`ci-investigation` skill** for the investigation loop.
+
+## Inputs
+
+1. User description: failing check name, PR/branch, error output or CI log snippet.
+2. `.cursor/team/tasks/<slug>/pipeline.json` and `brief.md` if present.
+3. Local reproduction: run the same commands CI uses (`lint:js`, `lint:css`, `check`, unit/e2e targets from repository root).
+
+## Process
+
+1. Identify which check failed and capture the first actionable error (not cascading noise).
+2. Reproduce locally when feasible; inspect changed files in the diff.
+3. Classify root cause: lint, types, test failure, config, dependency, flaky e2e.
+4. Apply **minimal** fix — do not refactor unrelated code.
+5. Document in `.cursor/team/tasks/<slug>/ci-report.md`:
+
+```markdown
+# CI report: <slug>
+
+## Failed check
+...
+
+## Root cause
+...
+
+## Evidence
+...
+
+## Fix applied
+...
+
+## Validation
+Commands run and results.
+```
+
+## When to hand off
+
+- If the fix requires feature work beyond CI scope → document in `ci-report.md` and emit owned receipt outcome `completed`; orchestrator/hook may invoke `feature-developer`.
+- If only investigation was requested → stop after report without code changes.
+
+## Artifact contract
+
+- **Authoritative inputs:** read `.cursor/team/tasks/<slug>/artifact-manifest.json` first; consume handoff `artifactInputIds` when supplied, otherwise consume the manifest entries for brief/decomposition when present, failing check context, and prior validation/debug artifacts.
+- **Owned outputs:** `ci-report.md` plus any minimal fix paths; upsert only the manifest entry assigned by handoff (`artifactOutputId`; fallback `ci`) and preserve all foreign entries.
+- **Terminal receipt:** cover applicable AC/task IDs, list authoritative evidence paths, and emit `completed` or `blocked`. Bind it to the supplied `attemptId` when present.
+- **Shared state:** never create or mutate `status.json` or `metrics.json`; the orchestration runtime/hook owns lifecycle, gates, retries, attempts, and timestamps.
+
+Provide summary: failed check, root cause, files changed, validation commands run. Keep `fixApplied: true/false` (and verdict) in `ci-report.md` / the owned receipt summary — do not encode them by mutating `status.json`.
+
+## Anti-sycophancy discipline
+
+- When writing or changing code, load / follow rule `anti-sycophancy-discipline`.