@bonesofspring/ai-rules 0.2.25 → 0.2.27

package/presets/claude/next/agents/openspec-author.md

@@ -21,8 +21,8 @@ If `openspec/` is absent in the repo, stop and report `blocked` with the message
 
 ## Inputs
 
-1. `.claude/team/tasks/<slug>/{brief.md, decomposition.md, architecture.md}` (Cursor: `.cursor/team/tasks/<slug>/`).
-2. `.claude/team/tasks/<slug>/artifact-manifest.json` — read first, consume `artifactInputIds`.
+1. `.ai.local/team/tasks/<slug>/{brief.md, decomposition.md, architecture.md}` (Cursor: `.ai.local/team/tasks/<slug>/`).
+2. `.ai.local/team/tasks/<slug>/artifact-manifest.json` — read first, consume `artifactInputIds`.
 3. `openspec/config.yaml` — schema, context block, `rules.proposal | specs | design | tasks`. **Source of truth** for word limits, Non-goals mandate, SHALL statement format, data-flow expectation, and task granularity. Never fork.
 4. `openspec/specs/<capability>/spec.md` — surviving applied specs (the "as-is" target).
 5. `openspec/changes/archive/<YYYY-MM-DD>-<change-id>/` — prior decisions (D-1..) and open questions (OQ-1..) reusable across changes.
@@ -121,14 +121,14 @@ If `scope` carries multiple phases (e.g. `openspec:<change-id>:propose+apply`),
 
 ## Artifact contract
 
-- **Authoritative inputs:** read `.claude/team/tasks/<slug>/artifact-manifest.json` first; consume handoff `artifactInputIds` when supplied, otherwise consume the manifest entries for brief/decomposition and available architecture/migration/review artifacts.
-- **Owned outputs:** `openspec/changes/<change-id>/**` (proposal.md, design.md, tasks.md, .openspec.yaml, specs/<capability>/spec.md delta) plus the team slot `openspec-change.md` in `.claude/team/tasks/<slug>/` when the orchestrator asks for a summary handoff. Preserve all foreign entries; upsert only the manifest entry assigned by handoff (`artifactOutputId`; fallback `openspec-change`).
+- **Authoritative inputs:** read `.ai.local/team/tasks/<slug>/artifact-manifest.json` first; consume handoff `artifactInputIds` when supplied, otherwise consume the manifest entries for brief/decomposition and available architecture/migration/review artifacts.
+- **Owned outputs:** `openspec/changes/<change-id>/**` (proposal.md, design.md, tasks.md, .openspec.yaml, specs/<capability>/spec.md delta) plus the team slot `openspec-change.md` in `.ai.local/team/tasks/<slug>/` when the orchestrator asks for a summary handoff. Preserve all foreign entries; upsert only the manifest entry assigned by handoff (`artifactOutputId`; fallback `openspec-change`).
 - **Terminal receipt:** cover applicable AC/task IDs, list authoritative evidence paths under `openspec/changes/<change-id>/**`, attach `openspec validate <change-id> --type change --strict` exit code + deltas-only summary, and emit `completed` or `blocked`. Bind it to the supplied `attemptId` when present.
 - **Shared state:** never create or mutate `status.json` or `metrics.json`; the orchestration runtime/hook owns lifecycle, gates, retries, attempts, and timestamps.
 
 ## Output
 
-When invoked directly (no pipeline), write the spec handoff at `.claude/team/tasks/<slug>/openspec-change.md`:
+When invoked directly (no pipeline), write the spec handoff at `.ai.local/team/tasks/<slug>/openspec-change.md`:
 
 ```markdown
 # OpenSpec change: <change-id>

package/presets/claude/next/agents/performance-auditor.md

@@ -8,7 +8,7 @@ You are a frontend performance auditor for a Next.js React application.
 
 ## Inputs
 
-1. Task description or `.claude/team/tasks/<slug>/brief.md`.
+1. Task description or `.ai.local/team/tasks/<slug>/brief.md`.
 2. Git diff or specified files/routes to audit.
 3. `rules/stack/next-app-core.md`, `rules/ui-and-accessibility/react-ui.md`, store/API patterns for data-fetching review.
 
@@ -25,7 +25,7 @@ You are a frontend performance auditor for a Next.js React application.
 
 ## Output
 
-Write `.claude/team/tasks/<slug>/perf-report.md`:
+Write `.ai.local/team/tasks/<slug>/perf-report.md`:
 
 ```markdown
 # Performance audit: <slug>
@@ -60,7 +60,7 @@ If Chrome DevTools MCP is ready and the app is running, use it for console/netwo
 
 ## Artifact contract
 
-- **Authoritative inputs:** read `.claude/team/tasks/<slug>/artifact-manifest.json` first; consume handoff `artifactInputIds` when supplied, otherwise consume the manifest entries for brief when present and the scoped git diff / routes under audit.
+- **Authoritative inputs:** read `.ai.local/team/tasks/<slug>/artifact-manifest.json` first; consume handoff `artifactInputIds` when supplied, otherwise consume the manifest entries for brief when present and the scoped git diff / routes under audit.
 - **Owned outputs:** `perf-report.md`; upsert only the manifest entry assigned by handoff (`artifactOutputId`; fallback `perf-report`) and preserve all foreign entries.
 - **Terminal receipt:** cover applicable AC/task IDs, list authoritative evidence paths, and emit `completed` or `blocked`. Bind it to the supplied `attemptId` when present.
 - **Shared state:** never create or mutate `status.json` or `metrics.json`; the orchestration runtime/hook owns lifecycle, gates, retries, attempts, and timestamps.

package/presets/claude/next/agents/qa-tester.md

@@ -8,8 +8,8 @@ You are a QA engineer for a Next.js frontend with Jest/Vitest unit tests and Pla
 
 ## Inputs
 
-1. `.claude/team/tasks/<slug>/brief.md` — acceptance criteria drive test scenarios.
-2. `.claude/team/tasks/<slug>/decomposition.md` — test-related tasks (unit, e2e).
+1. `.ai.local/team/tasks/<slug>/brief.md` — acceptance criteria drive test scenarios.
+2. `.ai.local/team/tasks/<slug>/decomposition.md` — test-related tasks (unit, e2e).
 3. Reviewer notes if `changes_requested` was resolved.
 
 ## Test strategy
@@ -37,7 +37,7 @@ When the task is mostly e2e, prefer invoking the dedicated `playwright-test-plan
 
 ## Artifact contract
 
-- **Authoritative inputs:** read `.claude/team/tasks/<slug>/artifact-manifest.json` first; consume handoff `artifactInputIds` when supplied, otherwise consume the manifest entries for brief/decomposition, reviewer notes when present, and prior implementation/validation artifacts.
+- **Authoritative inputs:** read `.ai.local/team/tasks/<slug>/artifact-manifest.json` first; consume handoff `artifactInputIds` when supplied, otherwise consume the manifest entries for brief/decomposition, reviewer notes when present, and prior implementation/validation artifacts.
 - **Owned outputs:** changed/added test paths (and any QA notes written under the slug dir); upsert only the manifest entry assigned by handoff (`artifactOutputId`; fallback `qa-tester`) and preserve all foreign entries.
 - **Terminal receipt:** cover applicable AC/task IDs, list authoritative evidence paths, and emit `completed` or `blocked`. Bind it to the supplied `attemptId` when present.
 - **Shared state:** never create or mutate `status.json` or `metrics.json`; the orchestration runtime/hook owns lifecycle, gates, retries, attempts, and timestamps.

package/presets/claude/next/agents/security-reviewer.md

@@ -8,8 +8,8 @@ You are a frontend security reviewer for a Next.js TypeScript application.
 
 ## Inputs
 
-1. `.claude/team/tasks/<slug>/brief.md` and `decomposition.md`.
-2. `.claude/team/tasks/<slug>/review.md` if code-reviewer already ran.
+1. `.ai.local/team/tasks/<slug>/brief.md` and `decomposition.md`.
+2. `.ai.local/team/tasks/<slug>/review.md` if code-reviewer already ran.
 3. Git diff — focus on auth, forms, API integration, env usage, user-generated content.
 
 ## Review scope
@@ -26,7 +26,7 @@ Load `tooling-and-review/security-next.md` for coding-time invariants. Focus on:
 
 ## Output
 
-Write `.claude/team/tasks/<slug>/security-review.md`:
+Write `.ai.local/team/tasks/<slug>/security-review.md`:
 
 ```markdown
 # Security review: <slug>
@@ -50,7 +50,7 @@ PASS | PASS_WITH_NOTES | FAIL
 
 ## Artifact contract
 
-- **Authoritative inputs:** read `.claude/team/tasks/<slug>/artifact-manifest.json` first; consume handoff `artifactInputIds` when supplied, otherwise consume the manifest entries for brief/decomposition, prior `review.md` when present, and the scoped git diff.
+- **Authoritative inputs:** read `.ai.local/team/tasks/<slug>/artifact-manifest.json` first; consume handoff `artifactInputIds` when supplied, otherwise consume the manifest entries for brief/decomposition, prior `review.md` when present, and the scoped git diff.
 - **Owned outputs:** `security-review.md`; upsert only the manifest entry assigned by handoff (`artifactOutputId`; fallback `security-review`) and preserve all foreign entries.
 - **Terminal receipt:** cover applicable AC/task IDs, list authoritative evidence paths, and emit `completed` or `changes_requested`. Bind it to the supplied `attemptId` when present.
 - **Shared state:** never create or mutate `status.json` or `metrics.json`; the orchestration runtime/hook owns lifecycle, gates, retries, attempts, and timestamps.

package/presets/claude/next/agents/solution-architect.md

@@ -8,13 +8,13 @@ You are a solution architect for a Next.js frontend with strict layer boundaries
 
 ## Inputs
 
-1. `.claude/team/tasks/<slug>/brief.md` and `decomposition.md` (from analyst).
-2. `.claude/team/tasks/<slug>/pipeline.json`.
+1. `.ai.local/team/tasks/<slug>/brief.md` and `decomposition.md` (from analyst).
+2. `.ai.local/team/tasks/<slug>/pipeline.json`.
 3. Existing patterns in the repo (`rules/architecture/architecture-boundaries.md`, `rules/architecture/feature-delivery-workflow.md`).
 
 ## Deliverable
 
-Write `.claude/team/tasks/<slug>/architecture.md`:
+Write `.ai.local/team/tasks/<slug>/architecture.md`:
 
 ```markdown
 # Architecture: <slug>
@@ -60,7 +60,7 @@ Load requestable rule `mcp-usage` when verifying third-party library APIs (Conte
 
 ## Artifact contract
 
-- **Authoritative inputs:** read `.claude/team/tasks/<slug>/artifact-manifest.json` first; consume handoff `artifactInputIds` when supplied, otherwise consume the manifest entries for brief/decomposition and applicable prior analysis artifacts.
+- **Authoritative inputs:** read `.ai.local/team/tasks/<slug>/artifact-manifest.json` first; consume handoff `artifactInputIds` when supplied, otherwise consume the manifest entries for brief/decomposition and applicable prior analysis artifacts.
 - **Owned outputs:** `architecture.md`; upsert only the manifest entry assigned by handoff (`artifactOutputId`; fallback `architecture`) and preserve all foreign entries.
 - **Terminal receipt:** cover applicable AC/task IDs, list authoritative evidence paths, and emit `completed` or `blocked`. Bind it to the supplied `attemptId` when present.
 - **Shared state:** never create or mutate `status.json` or `metrics.json`; the orchestration runtime/hook owns lifecycle, gates, retries, attempts, and timestamps.

package/presets/claude/next/agents/task-analyst.md

@@ -6,7 +6,7 @@ model: fast
 
 You are a senior business/technical analyst for a Next.js frontend team.
 
-Your job is to reach **Definition of Ready (DoR)** before any implementation starts. You may write only `.claude/team/**` artifacts. You do **not** write production code or modify application source files.
+Your job is to reach **Definition of Ready (DoR)** before any implementation starts. You may write only `.ai.local/team/**` artifacts. You do **not** write production code or modify application source files.
 
 ## Classify first
 
@@ -39,7 +39,7 @@ Before writing artifacts, confirm:
 
 ## Artifacts (required output)
 
-Create or update files under `.claude/team/tasks/<slug>/`:
+Create or update files under `.ai.local/team/tasks/<slug>/`:
 
 ### `brief.md`
 
@@ -87,7 +87,7 @@ Create or update files under `.claude/team/tasks/<slug>/`:
 
 The orchestration runtime/hook owns `status.json`; the analyst does not create or mutate lifecycle fields.
 
-Also write `.claude/team/active-task.json`:
+Also write `.ai.local/team/active-task.json`:
 
 ```json
 { "slug": "<slug>" }
@@ -122,7 +122,7 @@ Do not invoke the developer or any implementation subagent.
 
 **`none`:** skip INDEX row requirement and author mode; do not invent a dummy INDEX.
 
-**Research-before-spec (opt-in):** load skill **`spec-discovery`** only when the user/AC asks research before authoring (not default consume `/task`). Run a **subset** of methods; **`claim-ledger` is mandatory** whenever the skill loads. Append chronological notes to `.claude/team/tasks/<slug>/.memlog.md` (append-only; do not mutate `status.json`).
+**Research-before-spec (opt-in):** load skill **`spec-discovery`** only when the user/AC asks research before authoring (not default consume `/task`). Run a **subset** of methods; **`claim-ledger` is mandatory** whenever the skill loads. Append chronological notes to `.ai.local/team/tasks/<slug>/.memlog.md` (append-only; do not mutate `status.json`).
 
 **applyReadiness (author blocked):** if specs are drafted but the human gate has not passed, or a required named spec is missing, emit `applyReadiness: { "state": "blocked", "contextFiles": ["…"] }` on the analysis receipt. Do not invoke feature-developer.
 
@@ -148,7 +148,7 @@ Load requestable skill **`ux-design`** and rule **`ux-design`** when:
 
 **Order:** write `ux-design.md` **before** author mode / skill `spec-authoring` when both apply. You remain the only INDEX writer.
 
-Write `.claude/team/tasks/<slug>/ux-design.md` with the headings in rule `ux-design` (Mode, Verdict, Scope, IA, Entry/actors, Primary flows, States, Interaction notes, Microcopy direction, Accessibility floor, Spec feed, Open probes). Modes: `synthesize` | `review`.
+Write `.ai.local/team/tasks/<slug>/ux-design.md` with the headings in rule `ux-design` (Mode, Verdict, Scope, IA, Entry/actors, Primary flows, States, Interaction notes, Microcopy direction, Accessibility floor, Spec feed, Open probes). Modes: `synthesize` | `review`.
 
 **Required vs advisory:** required-signal + missing named primary flows **or** empty/error/loading matrix → DoR not met (`open_questions` / blocked analysis). Isolated missing microcopy never blocks. Advisory `INCOMPLETE` → notes only. Do **not** copy the mockup FAIL-only hook.
 
@@ -166,7 +166,7 @@ If the prompt/brief has a tracker URL (Linear/Jira/Notion/…) and that MCP is r
 
 ## Artifact contract
 
-- **Authoritative inputs:** read `.claude/team/tasks/<slug>/artifact-manifest.json` first; consume `pipeline.json`, the manifest routing entry, user-approved decisions, and any authoritative architecture/approval entries.
+- **Authoritative inputs:** read `.ai.local/team/tasks/<slug>/artifact-manifest.json` first; consume `pipeline.json`, the manifest routing entry, user-approved decisions, and any authoritative architecture/approval entries.
 - **Owned outputs:** `brief.md` and `decomposition.md` (plus `ux-design.md` when produced); upsert only the manifest entry assigned by handoff (`artifactOutputId`; fallback `analysis`) and preserve all foreign entries.
 - **Terminal receipt:** cover applicable AC/task IDs, list authoritative evidence paths, and emit `completed` or `blocked`. Bind it to the supplied `attemptId` when present.
 - **Shared state:** never create or mutate `status.json` or `metrics.json`; the orchestration runtime/hook owns lifecycle, gates, retries, attempts, and timestamps.

package/presets/claude/next/agents/task-router.md

@@ -9,7 +9,7 @@ You are a task router for a Next.js frontend agent team. You **do not** implemen
 ## Inputs
 
 - User task description (from `/task` or orchestrator).
-- Optional: existing files under `.claude/team/tasks/<slug>/`.
+- Optional: existing files under `.ai.local/team/tasks/<slug>/`.
 - Pipeline JSON schema, examples, step fields — **`agents/README.md`**.
 
 ## Intent detection
@@ -72,7 +72,7 @@ SoT: `agent-team/task-classification` (shared-core marker above; do not invent a
 | `docs-only` | tech-writer (skip analyst if brief exists) |
 | `ci-fix` | ci-investigator → build-verifier (`skipIf: ci-investigator.resolved`) |
 
-Fixtures: `.claude/team/fixtures/` (feature-full, feature-light, bugfix-standard).
+Fixtures: `.ai.local/team/fixtures/` (feature-full, feature-light, bugfix-standard).
 
 ## Routing decision rubric
 
@@ -142,7 +142,7 @@ Claude Code mapping when orchestrator invokes Agent tool: `cheap` → `haiku` (o
 
 ## Output
 
-Write `.claude/team/tasks/<slug>/pipeline.json` and initialize the routing entry in `artifact-manifest.json`; set `.claude/team/active-task.json`. The orchestration runtime creates and owns `status.json`.
+Write `.ai.local/team/tasks/<slug>/pipeline.json` and initialize the routing entry in `artifact-manifest.json`; set `.ai.local/team/active-task.json`. The orchestration runtime creates and owns `status.json`.
 
 ## Handoff to orchestrator
 
@@ -178,7 +178,7 @@ Return the routing receipt to the orchestrator. The orchestration runtime/hook e
 
 ## Artifact contract
 
-- **Authoritative inputs:** read `.claude/team/tasks/<slug>/artifact-manifest.json` first; consume the user request and any existing authoritative task/decision entries.
+- **Authoritative inputs:** read `.ai.local/team/tasks/<slug>/artifact-manifest.json` first; consume the user request and any existing authoritative task/decision entries.
 - **Owned outputs:** `pipeline.json` and the routing manifest entry; upsert only the manifest entry assigned by handoff (`artifactOutputId`; fallback `routing`) and preserve all foreign entries.
 - **Terminal receipt:** cover applicable AC/task IDs, list authoritative evidence paths, and emit `completed` or `blocked`. Bind it to the supplied `attemptId` when present.
 - **Shared state:** never create or mutate `status.json` or `metrics.json`; the orchestration runtime/hook owns lifecycle, gates, retries, attempts, and timestamps.

package/presets/claude/next/agents/tech-writer.md

@@ -8,13 +8,13 @@ You are a technical writer for a Next.js frontend team.
 
 ## Inputs
 
-1. `.claude/team/tasks/<slug>/brief.md`, `decomposition.md`, `architecture.md`, `migration-plan.md`, `review.md` as available.
+1. `.ai.local/team/tasks/<slug>/brief.md`, `decomposition.md`, `architecture.md`, `migration-plan.md`, `review.md` as available.
 2. Git diff summary or list of changed modules.
 3. User-specified doc target (e.g. `docs/`, feature README, ADR).
 
 ## Deliverable
 
-Write `.claude/team/tasks/<slug>/documentation.md` and/or update paths agreed in the task:
+Write `.ai.local/team/tasks/<slug>/documentation.md` and/or update paths agreed in the task:
 
 ```markdown
 # Documentation: <slug>
@@ -53,7 +53,7 @@ Post-delivery: when behavior or public docs changed and `docs/specs/` is in play
 
 ## Artifact contract
 
-- **Authoritative inputs:** read `.claude/team/tasks/<slug>/artifact-manifest.json` first; consume handoff `artifactInputIds` when supplied, otherwise consume the manifest entries for brief/decomposition and available architecture/migration/review artifacts.
+- **Authoritative inputs:** read `.ai.local/team/tasks/<slug>/artifact-manifest.json` first; consume handoff `artifactInputIds` when supplied, otherwise consume the manifest entries for brief/decomposition and available architecture/migration/review artifacts.
 - **Owned outputs:** `documentation.md` (and any explicitly requested docs paths); upsert only the manifest entry assigned by handoff (`artifactOutputId`; fallback `documentation`) and preserve all foreign entries.
 - **Terminal receipt:** cover applicable AC/task IDs, list authoritative evidence paths, and emit `completed` or `blocked`. Bind it to the supplied `attemptId` when present.
 - **Shared state:** never create or mutate `status.json` or `metrics.json`; the orchestration runtime/hook owns lifecycle, gates, retries, attempts, and timestamps.

package/presets/claude/next/agents/unit-test-generator.md

@@ -8,8 +8,8 @@ You generate unit tests from project test plans.
 
 ## Inputs
 
-- `.claude/team/tasks/<slug>/unit-test-plan.md`
-- `.claude/team/tasks/<slug>/brief.md` for AC alignment
+- `.ai.local/team/tasks/<slug>/unit-test-plan.md`
+- `.ai.local/team/tasks/<slug>/brief.md` for AC alignment
 - Existing specs and test utilities in the target module area
 
 ## Rules
@@ -27,7 +27,7 @@ Run affected unit tests from `app/` when feasible. Report files changed, command
 
 ## Artifact contract
 
-- **Authoritative inputs:** read `.claude/team/tasks/<slug>/artifact-manifest.json` first; consume handoff `artifactInputIds` when supplied, otherwise consume the manifest entries for `unit-test-plan.md`, brief/decomposition when present, and target modules.
+- **Authoritative inputs:** read `.ai.local/team/tasks/<slug>/artifact-manifest.json` first; consume handoff `artifactInputIds` when supplied, otherwise consume the manifest entries for `unit-test-plan.md`, brief/decomposition when present, and target modules.
 - **Owned outputs:** generated/updated `*.spec.ts` / `*.spec.tsx` paths; upsert only the manifest entry assigned by handoff (`artifactOutputId`; fallback `unit-test-generator`) and preserve all foreign entries.
 - **Terminal receipt:** cover applicable AC/task IDs, list authoritative evidence paths, and emit `completed` or `blocked`. Bind it to the supplied `attemptId` when present.
 - **Shared state:** never create or mutate `status.json` or `metrics.json`; the orchestration runtime/hook owns lifecycle, gates, retries, attempts, and timestamps.

package/presets/claude/next/agents/unit-test-healer.md

@@ -9,7 +9,7 @@ You debug and fix failing unit tests.
 ## Inputs
 
 - Failing test output and command.
-- Matching `*.spec.ts` / `*.spec.tsx` and `.claude/team/tasks/<slug>/unit-test-plan.md` if present.
+- Matching `*.spec.ts` / `*.spec.tsx` and `.ai.local/team/tasks/<slug>/unit-test-plan.md` if present.
 - Recent diff that may have caused the failure.
 
 Use **`unit-testing` skill**, **`debug-investigation` skill**, and **`rules/testing/tests-unit.md`**.
@@ -28,7 +28,7 @@ Report root cause, files changed, validation result, and remaining risk.
 
 ## Artifact contract
 
-- **Authoritative inputs:** read `.claude/team/tasks/<slug>/artifact-manifest.json` first; consume handoff `artifactInputIds` when supplied, otherwise consume the manifest entries for failing test evidence, `unit-test-plan.md` when present, and recent diff.
+- **Authoritative inputs:** read `.ai.local/team/tasks/<slug>/artifact-manifest.json` first; consume handoff `artifactInputIds` when supplied, otherwise consume the manifest entries for failing test evidence, `unit-test-plan.md` when present, and recent diff.
 - **Owned outputs:** healed `*.spec.ts` / `*.spec.tsx` paths (and minimal production fixes only when evidenced); upsert only the manifest entry assigned by handoff (`artifactOutputId`; fallback `unit-test-healer`) and preserve all foreign entries.
 - **Terminal receipt:** cover applicable AC/task IDs, list authoritative evidence paths, and emit `completed` or `blocked`. Bind it to the supplied `attemptId` when present.
 - **Shared state:** never create or mutate `status.json` or `metrics.json`; the orchestration runtime/hook owns lifecycle, gates, retries, attempts, and timestamps.

package/presets/claude/next/agents/unit-test-planner.md

@@ -10,7 +10,7 @@ Use the **`unit-testing` skill** and **`rules/testing/tests-unit.md`**.
 
 ## Inputs
 
-1. `.claude/team/tasks/<slug>/brief.md` and `decomposition.md`.
+1. `.ai.local/team/tasks/<slug>/brief.md` and `decomposition.md`.
 2. Changed or target modules under `app/src/**`.
 3. Existing `*.spec.ts` / `*.spec.tsx` in the same areas.
 
@@ -23,7 +23,7 @@ Use the **`unit-testing` skill** and **`rules/testing/tests-unit.md`**.
 
 ## Output
 
-Write `.claude/team/tasks/<slug>/unit-test-plan.md`:
+Write `.ai.local/team/tasks/<slug>/unit-test-plan.md`:
 
 ```markdown
 # Unit test plan: <slug>
@@ -48,7 +48,7 @@ Test titles in the plan must follow Russian capitalization rules from `rules/tes
 
 ## Artifact contract
 
-- **Authoritative inputs:** read `.claude/team/tasks/<slug>/artifact-manifest.json` first; consume handoff `artifactInputIds` when supplied, otherwise consume the manifest entries for brief/decomposition and target modules under `app/src/**`.
+- **Authoritative inputs:** read `.ai.local/team/tasks/<slug>/artifact-manifest.json` first; consume handoff `artifactInputIds` when supplied, otherwise consume the manifest entries for brief/decomposition and target modules under `app/src/**`.
 - **Owned outputs:** `unit-test-plan.md`; upsert only the manifest entry assigned by handoff (`artifactOutputId`; fallback `unit-test-planner`) and preserve all foreign entries.
 - **Terminal receipt:** cover applicable AC/task IDs, list authoritative evidence paths, and emit `completed` or `blocked`. Bind it to the supplied `attemptId` when present.
 - **Shared state:** never create or mutate `status.json` or `metrics.json`; the orchestration runtime/hook owns lifecycle, gates, retries, attempts, and timestamps.

package/presets/claude/{java/team → next/ai-local}/conventions.md

@@ -1,4 +1,4 @@
-# Living conventions (team)
+# Living conventions
 
 Consumer-owned store for post-init gotchas, patterns, and decisions. **Not** always-on. Fill after `ai-rules init`. Root `AGENTS.md` only points here.
 

package/presets/claude/next/commands/README.md

@@ -8,4 +8,4 @@ Slash-command definitions and on-demand scenarios. Copied to `.claude/commands/`
 | `task-continue.md` | Resume after human gate / pause via `pipeline.json` |
 | `technical-retro.md` | Technical retro facilitation, including the “Agent work” block |
 
-See also the preset root `README.md` — Claude Code uses `skills/`, `agents/`, `hooks/`, `team/` in addition to `rules/` and `commands/`.
+See also the preset root `README.md`. Artifacts: `.ai.local/team/README.md`.

package/presets/claude/next/commands/spec-start.md

@@ -11,8 +11,8 @@ Routes intent **`spec-gen`** (or bootstrap) → **task-analyst** in **author mod
 
 1. Extract description from arguments after `/spec-start` (domain, page/feature ids, sources).
 2. Generate a **slug** (kebab-case, ≤48 chars), e.g. `spec-<domain>-<id>`.
-3. Ensure `.claude/team/tasks/<slug>/` exists (Write artifacts; not Shell mkdir).
-4. Write `.claude/team/active-task.json` → `{ "slug": "<slug>" }`.
+3. Ensure `.ai.local/team/tasks/<slug>/` exists (Write artifacts; not Shell mkdir).
+4. Write `.ai.local/team/active-task.json` → `{ "slug": "<slug>" }`.
 5. Write minimal `pipeline.json`: task-analyst → (optional stop) → feature-developer only if user asked implement-after. **No separate spec-author agent.**
 6. Invoke **task-analyst** with: author mode; load **`product-specs`** + **`product-specs-authoring`** + skill **`spec-authoring`**; Bootstrap if `docs/specs/` absent, else Generate. Optional: if arguments/AC ask research-before-spec, also load skill **`spec-discovery`** (not default).
 7. Wait for analyst. **Do not** invoke feature-developer until human gate passes.

package/presets/claude/next/commands/task-continue.md

@@ -13,7 +13,7 @@ Resume the pipeline from `pipeline.json`.
 
 ## Preconditions
 
-1. Read `.claude/team/tasks/<slug>/pipeline.json` and `status.json`.
+1. Read `.ai.local/team/tasks/<slug>/pipeline.json` and `status.json`.
 2. Continue if:
    - `awaitingHumanGate: true` or `state: awaiting_approval`, **or**
    - `state: changes_requested` (after review), **or**
@@ -21,7 +21,7 @@ Resume the pipeline from `pipeline.json`.
 
 ## Algorithm
 
-1. Write `.claude/team/active-task.json` → `{ "slug": "<slug>" }`.
+1. Write `.ai.local/team/active-task.json` → `{ "slug": "<slug>" }`.
 2. **Human gate resume** (`awaitingHumanGate` / `awaiting_approval`):
    1. **Do not** manually increment `pipelineIndex` or invent `currentAgent` first.
    2. Close the gate + activate the next attempt via the **installed** hook (single authority for ledger + status):

package/presets/claude/next/commands/task.md

@@ -1,6 +1,6 @@
 ---
 name: task
-description: Route a natural-language task through the agent-team pipeline: task-router, pipeline.json, and the first planned specialist.
+description: "Route a natural-language task through the agent-team pipeline: task-router, pipeline.json, and the first planned specialist."
 ---
 
 # Task — single entry point
@@ -27,7 +27,7 @@ Examples:
 
 ## Algorithm
 
-1. **Slug** — kebab-case from description (≤48 characters). Create `.claude/team/tasks/<slug>/` via Write / Edit; runtime/hook owns `status.json` — **do not** rely on Shell `mkdir` as the only way to create the directory.
+1. **Slug** — kebab-case from description (≤48 characters). Create `.ai.local/team/tasks/<slug>/` via Write / Edit; runtime/hook owns `status.json` — **do not** rely on Shell `mkdir` as the only way to create the directory.
 2. **Router** — invoke subagent **task-router** with the task description and slug path.
 3. **Plan** — show the user the table from `pipeline.json`: intent, steps, skipped, humanGates.
 4. **Intent retro** — if `intent === "retro"`, run `/technical-retro` and **stop**.

package/presets/claude/next/hooks/README.md

@@ -2,13 +2,7 @@
 
 | File | Purpose |
 |------|---------|
-| `chain-team-phases.sh` | Pipeline chaining after subagent stop; `skipIf`, parallel, `validation_failed`, `retryAfterFix` |
+| `chain-team-phases.sh` | Continues `/task` after a producer receipt. Reads/writes `.ai.local/team/`. Agents must not patch `status.json` / `metrics.json`. |
 | `guard-shell-command.sh` | Destructive git / package-manager guard |
 
-Wire into Claude Code hooks per project documentation when enabling agent team auto-chain.
-
-## Optional cookbook
-
-Example scripts live in `hooks/examples/` (secret-guard, format-edited, test-on-save). They are **not** auto-enabled.
-
-To wire in Claude Code: copy an `.example.sh` into `hooks/`, make executable, and register per [Claude Code hooks](https://code.claude.com/docs/en/hooks) for your project. Keep stack-safe recipes (this preset: **next**). Cursor twin examples under `presets/cursor/next/hooks/examples/` are the same allowlist forks.
+No `hooks.json`. Wire `chain-team-phases.sh` per [Claude Code hooks](https://code.claude.com/docs/en/hooks). Cookbook: `hooks/examples/` (not enabled by default).

package/presets/claude/next/hooks/chain-team-phases.sh

@@ -10,7 +10,7 @@ INPUT="$input" node <<'NODE'
 const fs = require('fs');
 const path = require('path');
 
-const TEAM_ROOT = path.join(process.cwd(), '.claude', 'team');
+const TEAM_ROOT = path.join(process.cwd(), '.ai.local', 'team');
 
 const inputRaw = process.env.INPUT || '';
 let hookInput;
@@ -42,7 +42,10 @@ try {
 }
 
 const slug = active.slug;
-if (!slug) {
+// Reject non-kebab / traversal slugs: the runtime writes status.json and
+// metrics.json under tasks/<slug>, so an unchecked slug could escape the tree.
+const SLUG_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+if (typeof slug !== 'string' || slug.length > 48 || !SLUG_RE.test(slug)) {
   process.stdout.write('{}');
   process.exit(0);
 }
@@ -69,6 +72,9 @@ function waitForMetricsLock() {
   // and never blocked on the lock file, so two concurrent subagentStop events
   // could both acquire the lock and corrupt metrics.json. Retry EEXIST with a
   // 10 ms sleep up to 200 attempts (2 s ceiling). On any other error, throw.
+  // A lock left behind by a killed process is reclaimed once its mtime is older
+  // than STALE_LOCK_MS, so one crash cannot brick the task forever.
+  const STALE_LOCK_MS = 30000;
   for (let attempt = 0; attempt < 200; attempt += 1) {
     try {
       const fd = fs.openSync(METRICS_LOCK, 'wx');
@@ -76,6 +82,13 @@ function waitForMetricsLock() {
       return;
     } catch (error) {
       if (!error || error.code !== 'EEXIST') throw error;
+      try {
+        const lockStat = fs.statSync(METRICS_LOCK);
+        if (Date.now() - lockStat.mtimeMs > STALE_LOCK_MS) {
+          fs.unlinkSync(METRICS_LOCK);
+          continue;
+        }
+      } catch {}
       const until = Date.now() + 10;
       while (Date.now() < until) { /* 10 ms busy-wait */ }
     }
@@ -316,7 +329,7 @@ function findNextExecutableStep(steps, startIdx, dir) {
 
 const AGENT_HANDOFF = {
   'task-analyst': (s) =>
-    `Invoke task-analyst for slug "${s}". Write brief.md and decomposition.md under .claude/team/tasks/${s}/. ` +
+    `Invoke task-analyst for slug "${s}". Write brief.md and decomposition.md under .ai.local/team/tasks/${s}/. ` +
     `Upsert the analysis receipt in artifact-manifest.json; do not mutate status.json lifecycle fields. Do not use legacy phase analysis.`,
   debugger: (s) =>
     `Invoke debugger subagent for slug "${s}". Investigate root cause; write debug-report.md with fixApplied: true/false. ` +
@@ -493,7 +506,10 @@ function legacyFlow() {
 
 
 if (hookInput.action === 'end_human_gate') {
-    status.awaitingHumanGate = false;
+  // Only advance when a gate was actually open. A duplicate or retried
+  // end_human_gate must be a no-op, not a silent pipeline skip.
+  const gateWasOpen = Boolean(status.activeHumanGateEventId) || status.awaitingHumanGate === true;
+  status.awaitingHumanGate = false;
   // A2 (retro §8): pin a single runId per pipeline so subsequent events don't
   // fragment the metrics ledger across multiple runId sequences. Prefer
   // metrics.json.task.runId when metrics already exist, then status.metricsRunId,
@@ -520,7 +536,7 @@ if (hookInput.action === 'end_human_gate') {
     });
     delete status.activeHumanGateEventId;
   }
-  if (hookInput.activateNext && fs.existsSync(pipelinePath)) {
+  if (gateWasOpen && hookInput.activateNext && fs.existsSync(pipelinePath)) {
     let resumePipeline = null;
     try { resumePipeline = JSON.parse(fs.readFileSync(pipelinePath, 'utf8')); } catch {}
     if (resumePipeline) {
@@ -542,6 +558,19 @@ if (hookInput.action === 'end_human_gate') {
         else out(handoffForAgent(resumeAgents[0], resumeNext.step.scope, resumeNext.step));
         process.exit(0);
       }
+      // Gate on the final step: no executable step remains. Complete the
+      // pipeline instead of leaving it in_progress forever.
+      status.state = 'completed';
+      completeTaskMetrics();
+      writeStatus({
+        pipelineIndex: resumeSteps.length,
+        phase: 'done',
+        state: 'completed',
+        currentAgent: null,
+        awaitingHumanGate: false,
+      });
+      out(`Pipeline complete for "${slug}". Run /technical-retro ${slug}.`);
+      process.exit(0);
     }
   }
   // A2 (retro §8): if gate closes the final human gate of the pipeline
@@ -653,7 +682,10 @@ function nearestPrecedingStepIndex(agent, fromIndex, fallback) {
 }
 function scheduleRetry(agent, retryAfterFix, predecessor, explicitStepIndex = null) {
   const currentIndex = typeof status.pipelineIndex === 'number' ? status.pipelineIndex : 0;
-  const stepIndex = Number.isInteger(explicitStepIndex) ? explicitStepIndex : nearestPrecedingStepIndex(agent, currentIndex, currentIndex);
+  const explicitOk = Number.isInteger(explicitStepIndex) && getStepAgents(steps[explicitStepIndex]).includes(agent);
+  const stepIndex = explicitOk ? explicitStepIndex : nearestPrecedingStepIndex(agent, currentIndex, -1);
+  // Refuse to activate an agent the pipeline never planned; callers fall back to a human gate.
+  if (stepIndex < 0) return -1;
   const predecessorAttemptId = predecessor?.attemptId || status.lastCompletedAttempt?.attemptId || null;
   appendMetric({ type: 'retry_scheduled', at: now, attemptId: predecessorAttemptId, nextAgent: agent, retryAfterFix: retryAfterFix || null, source: 'hook', attributionConfidence: predecessor ? predecessor.confidence : 'unknown' });
   activateAttempts(steps[stepIndex] || { agent }, stepIndex);
@@ -712,6 +744,18 @@ if (currentStep?.parallel && stepAgents.length > 1) {
         }
       : finishedAttempt;
     const developerIndex = scheduleRetry('feature-developer', retryReviewer, predecessor);
+    if (developerIndex < 0) {
+      beginHumanGate();
+      writeStatus({
+        awaitingHumanGate: true,
+        state: 'awaiting_approval',
+        currentAgent: retryReviewer,
+        parallelCompleted: [],
+        parallelOutcomes: {},
+      });
+      out(`${retryReviewer} requested changes for slug "${slug}" but this pipeline has no feature-developer step. Read the review artifact. Resume only via /task-continue.`);
+      process.exit(0);
+    }
     writeStatus({
       pipelineIndex: developerIndex,
       currentAgent: 'feature-developer',
@@ -754,6 +798,12 @@ if (status.state === 'changes_requested') {
   }
   const retryAfterFixStepIndex = typeof status.pipelineIndex === 'number' ? status.pipelineIndex : 0;
   const developerIndex = scheduleRetry('feature-developer', reviewer, finishedAttempt);
+  if (developerIndex < 0) {
+    beginHumanGate();
+    writeStatus({ awaitingHumanGate: true, state: 'awaiting_approval', currentAgent: reviewer });
+    out(`${reviewer} requested changes for slug "${slug}" but this pipeline has no feature-developer step. Read the review artifact. Resume only via /task-continue.`);
+    process.exit(0);
+  }
   writeStatus({
     pipelineIndex: developerIndex,
     currentAgent: 'feature-developer',
@@ -769,6 +819,12 @@ if (status.state === 'changes_requested') {
 if (status.state === 'validation_failed' && status.currentAgent === 'build-verifier') {
   const retryAfterFixStepIndex = typeof status.pipelineIndex === 'number' ? status.pipelineIndex : 0;
   const developerIndex = scheduleRetry('feature-developer', 'build-verifier', finishedAttempt);
+  if (developerIndex < 0) {
+    beginHumanGate();
+    writeStatus({ awaitingHumanGate: true, state: 'awaiting_approval', currentAgent: 'build-verifier' });
+    out(`Validation failed for slug "${slug}" but this pipeline has no feature-developer step. Read validation-report.md. Resume only via /task-continue.`);
+    process.exit(0);
+  }
   writeStatus({
     pipelineIndex: developerIndex,
     currentAgent: 'feature-developer',
@@ -784,9 +840,13 @@ if (status.state === 'validation_failed' && status.currentAgent === 'build-verif
 if (status.state === 'completed' && status.retryAfterFix) {
   const retry = status.retryAfterFix;
   const retryIndex = scheduleRetry(retry, null, finishedAttempt, status.retryAfterFixStepIndex);
-  writeStatus({ pipelineIndex: retryIndex, currentAgent: retry, state: 'in_progress', retryAfterFix: null, retryAfterFixStepIndex: null });
-  out(handoffForAgent(retry, steps[retryIndex]?.scope, steps[retryIndex]));
-  process.exit(0);
+  if (retryIndex >= 0) {
+    writeStatus({ pipelineIndex: retryIndex, currentAgent: retry, state: 'in_progress', retryAfterFix: null, retryAfterFixStepIndex: null });
+    out(handoffForAgent(retry, steps[retryIndex]?.scope, steps[retryIndex]));
+    process.exit(0);
+  }
+  // The reviewer to re-run is no longer in steps[]; drop the marker and advance normally.
+  writeStatus({ retryAfterFix: null, retryAfterFixStepIndex: null });
 }
 
 if (!currentStep) {

package/presets/claude/next/hooks/examples/README.md

@@ -8,11 +8,13 @@ Optional scripts under `hooks/examples/`. **Not** referenced from default `hooks
 | `format-edited.example.sh` | Stack formatter / linter on edited files |
 | `test-on-save.example.sh` | Scoped tests for the stack |
 
-## Wiring (Cursor)
+## Wiring (Claude Code)
+
+Claude Code has no preset `hooks.json`; hooks are registered in `.claude/settings.json` and fire on events such as `PreToolUse`, `PostToolUse`, and `Stop`.
 
 1. Copy an example into `hooks/` (drop `.example` suffix), e.g. `cp hooks/examples/secret-guard.example.sh hooks/secret-guard.sh`.
 2. `chmod +x hooks/secret-guard.sh`.
-3. Add a hook entry in `.cursor/hooks.json` (e.g. `beforeShellExecution` or `afterFileEdit` — see Cursor hooks docs).
-4. Keep cookbook scripts **out** of the default preset `hooks.json` when contributing back upstream.
+3. Register the command in `.claude/settings.json` (see Claude Code hooks docs for event/matcher syntax).
+4. Keep cookbook scripts **out** of the default preset when contributing back upstream.
 
 Stack: **next** — recipes must stay stack-safe (no cross-stack lint/test commands).

package/presets/claude/next/rules/README.md

@@ -14,7 +14,7 @@ In Claude Code all `.md` files under `rules/` are **discovered recursively**. Bo
 
 ## Loading strategy
 
-- **Session start (no `paths:`):** exactly **3** — `next-app-core`, `package-manager`, `code-quality`
+- **Session start (no `paths:`):** 3–5 — `next-app-core`, `package-manager`, `code-quality`
 - **On-demand (`paths:` or via commands):** `post-change-lint` (**must after code edits**), `agent-team-intake`, `agent-team-orchestrator`, `code-review-mr`, `security-next`, architecture, imports, UI, tests, feature-delivery-workflow, `design-guidance`, `mcp-usage`, `anti-sycophancy-discipline`, `react-next-anti-hallucination`, reference-features, next-app-router, react-a11y-coding, `technical-retro`, `mockup-review`, `ux-design`, **preset-*** meta (paths on `packages/ai-rules/presets/**`)
 - **Skills:** long workflows (`feature-delivery`, `spec-authoring`, `spec-discovery`, `code-review`, …)