@bonesofspring/ai-rules 0.2.25 → 0.2.27

package/presets/claude/svelte/hooks/chain-team-phases.sh

@@ -10,7 +10,7 @@ INPUT="$input" node <<'NODE'
 const fs = require('fs');
 const path = require('path');
 
-const TEAM_ROOT = path.join(process.cwd(), '.claude', 'team');
+const TEAM_ROOT = path.join(process.cwd(), '.ai.local', 'team');
 
 const inputRaw = process.env.INPUT || '';
 let hookInput;
@@ -42,7 +42,10 @@ try {
 }
 
 const slug = active.slug;
-if (!slug) {
+// Reject non-kebab / traversal slugs: the runtime writes status.json and
+// metrics.json under tasks/<slug>, so an unchecked slug could escape the tree.
+const SLUG_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+if (typeof slug !== 'string' || slug.length > 48 || !SLUG_RE.test(slug)) {
   process.stdout.write('{}');
   process.exit(0);
 }
@@ -69,6 +72,9 @@ function waitForMetricsLock() {
   // and never blocked on the lock file, so two concurrent subagentStop events
   // could both acquire the lock and corrupt metrics.json. Retry EEXIST with a
   // 10 ms sleep up to 200 attempts (2 s ceiling). On any other error, throw.
+  // A lock left behind by a killed process is reclaimed once its mtime is older
+  // than STALE_LOCK_MS, so one crash cannot brick the task forever.
+  const STALE_LOCK_MS = 30000;
   for (let attempt = 0; attempt < 200; attempt += 1) {
     try {
       const fd = fs.openSync(METRICS_LOCK, 'wx');
@@ -76,6 +82,13 @@ function waitForMetricsLock() {
       return;
     } catch (error) {
       if (!error || error.code !== 'EEXIST') throw error;
+      try {
+        const lockStat = fs.statSync(METRICS_LOCK);
+        if (Date.now() - lockStat.mtimeMs > STALE_LOCK_MS) {
+          fs.unlinkSync(METRICS_LOCK);
+          continue;
+        }
+      } catch {}
       const until = Date.now() + 10;
       while (Date.now() < until) { /* 10 ms busy-wait */ }
     }
@@ -316,7 +329,7 @@ function findNextExecutableStep(steps, startIdx, dir) {
 
 const AGENT_HANDOFF = {
   'task-analyst': (s) =>
-    `Invoke task-analyst for slug "${s}". Write brief.md and decomposition.md under .claude/team/tasks/${s}/. ` +
+    `Invoke task-analyst for slug "${s}". Write brief.md and decomposition.md under .ai.local/team/tasks/${s}/. ` +
     `Upsert the analysis receipt in artifact-manifest.json; do not mutate status.json lifecycle fields. Do not use legacy phase analysis.`,
   debugger: (s) =>
     `Invoke debugger subagent for slug "${s}". Investigate root cause; write debug-report.md with fixApplied: true/false. ` +
@@ -493,7 +506,10 @@ function legacyFlow() {
 
 
 if (hookInput.action === 'end_human_gate') {
-    status.awaitingHumanGate = false;
+  // Only advance when a gate was actually open. A duplicate or retried
+  // end_human_gate must be a no-op, not a silent pipeline skip.
+  const gateWasOpen = Boolean(status.activeHumanGateEventId) || status.awaitingHumanGate === true;
+  status.awaitingHumanGate = false;
   // A2 (retro §8): pin a single runId per pipeline so subsequent events don't
   // fragment the metrics ledger across multiple runId sequences. Prefer
   // metrics.json.task.runId when metrics already exist, then status.metricsRunId,
@@ -520,7 +536,7 @@ if (hookInput.action === 'end_human_gate') {
     });
     delete status.activeHumanGateEventId;
   }
-  if (hookInput.activateNext && fs.existsSync(pipelinePath)) {
+  if (gateWasOpen && hookInput.activateNext && fs.existsSync(pipelinePath)) {
     let resumePipeline = null;
     try { resumePipeline = JSON.parse(fs.readFileSync(pipelinePath, 'utf8')); } catch {}
     if (resumePipeline) {
@@ -542,6 +558,19 @@ if (hookInput.action === 'end_human_gate') {
         else out(handoffForAgent(resumeAgents[0], resumeNext.step.scope, resumeNext.step));
         process.exit(0);
       }
+      // Gate on the final step: no executable step remains. Complete the
+      // pipeline instead of leaving it in_progress forever.
+      status.state = 'completed';
+      completeTaskMetrics();
+      writeStatus({
+        pipelineIndex: resumeSteps.length,
+        phase: 'done',
+        state: 'completed',
+        currentAgent: null,
+        awaitingHumanGate: false,
+      });
+      out(`Pipeline complete for "${slug}". Run /technical-retro ${slug}.`);
+      process.exit(0);
     }
   }
   // A2 (retro §8): if gate closes the final human gate of the pipeline
@@ -653,7 +682,10 @@ function nearestPrecedingStepIndex(agent, fromIndex, fallback) {
 }
 function scheduleRetry(agent, retryAfterFix, predecessor, explicitStepIndex = null) {
   const currentIndex = typeof status.pipelineIndex === 'number' ? status.pipelineIndex : 0;
-  const stepIndex = Number.isInteger(explicitStepIndex) ? explicitStepIndex : nearestPrecedingStepIndex(agent, currentIndex, currentIndex);
+  const explicitOk = Number.isInteger(explicitStepIndex) && getStepAgents(steps[explicitStepIndex]).includes(agent);
+  const stepIndex = explicitOk ? explicitStepIndex : nearestPrecedingStepIndex(agent, currentIndex, -1);
+  // Refuse to activate an agent the pipeline never planned; callers fall back to a human gate.
+  if (stepIndex < 0) return -1;
   const predecessorAttemptId = predecessor?.attemptId || status.lastCompletedAttempt?.attemptId || null;
   appendMetric({ type: 'retry_scheduled', at: now, attemptId: predecessorAttemptId, nextAgent: agent, retryAfterFix: retryAfterFix || null, source: 'hook', attributionConfidence: predecessor ? predecessor.confidence : 'unknown' });
   activateAttempts(steps[stepIndex] || { agent }, stepIndex);
@@ -712,6 +744,18 @@ if (currentStep?.parallel && stepAgents.length > 1) {
         }
       : finishedAttempt;
     const developerIndex = scheduleRetry('feature-developer', retryReviewer, predecessor);
+    if (developerIndex < 0) {
+      beginHumanGate();
+      writeStatus({
+        awaitingHumanGate: true,
+        state: 'awaiting_approval',
+        currentAgent: retryReviewer,
+        parallelCompleted: [],
+        parallelOutcomes: {},
+      });
+      out(`${retryReviewer} requested changes for slug "${slug}" but this pipeline has no feature-developer step. Read the review artifact. Resume only via /task-continue.`);
+      process.exit(0);
+    }
     writeStatus({
       pipelineIndex: developerIndex,
       currentAgent: 'feature-developer',
@@ -754,6 +798,12 @@ if (status.state === 'changes_requested') {
   }
   const retryAfterFixStepIndex = typeof status.pipelineIndex === 'number' ? status.pipelineIndex : 0;
   const developerIndex = scheduleRetry('feature-developer', reviewer, finishedAttempt);
+  if (developerIndex < 0) {
+    beginHumanGate();
+    writeStatus({ awaitingHumanGate: true, state: 'awaiting_approval', currentAgent: reviewer });
+    out(`${reviewer} requested changes for slug "${slug}" but this pipeline has no feature-developer step. Read the review artifact. Resume only via /task-continue.`);
+    process.exit(0);
+  }
   writeStatus({
     pipelineIndex: developerIndex,
     currentAgent: 'feature-developer',
@@ -769,6 +819,12 @@ if (status.state === 'changes_requested') {
 if (status.state === 'validation_failed' && status.currentAgent === 'build-verifier') {
   const retryAfterFixStepIndex = typeof status.pipelineIndex === 'number' ? status.pipelineIndex : 0;
   const developerIndex = scheduleRetry('feature-developer', 'build-verifier', finishedAttempt);
+  if (developerIndex < 0) {
+    beginHumanGate();
+    writeStatus({ awaitingHumanGate: true, state: 'awaiting_approval', currentAgent: 'build-verifier' });
+    out(`Validation failed for slug "${slug}" but this pipeline has no feature-developer step. Read validation-report.md. Resume only via /task-continue.`);
+    process.exit(0);
+  }
   writeStatus({
     pipelineIndex: developerIndex,
     currentAgent: 'feature-developer',
@@ -784,9 +840,13 @@ if (status.state === 'validation_failed' && status.currentAgent === 'build-verif
 if (status.state === 'completed' && status.retryAfterFix) {
   const retry = status.retryAfterFix;
   const retryIndex = scheduleRetry(retry, null, finishedAttempt, status.retryAfterFixStepIndex);
-  writeStatus({ pipelineIndex: retryIndex, currentAgent: retry, state: 'in_progress', retryAfterFix: null, retryAfterFixStepIndex: null });
-  out(handoffForAgent(retry, steps[retryIndex]?.scope, steps[retryIndex]));
-  process.exit(0);
+  if (retryIndex >= 0) {
+    writeStatus({ pipelineIndex: retryIndex, currentAgent: retry, state: 'in_progress', retryAfterFix: null, retryAfterFixStepIndex: null });
+    out(handoffForAgent(retry, steps[retryIndex]?.scope, steps[retryIndex]));
+    process.exit(0);
+  }
+  // The reviewer to re-run is no longer in steps[]; drop the marker and advance normally.
+  writeStatus({ retryAfterFix: null, retryAfterFixStepIndex: null });
 }
 
 if (!currentStep) {

package/presets/claude/svelte/hooks/examples/README.md

@@ -8,11 +8,13 @@ Optional scripts under `hooks/examples/`. **Not** referenced from default `hooks
 | `format-edited.example.sh` | Stack formatter / linter on edited files |
 | `test-on-save.example.sh` | Scoped tests for the stack |
 
-## Wiring (Cursor)
+## Wiring (Claude Code)
+
+Claude Code has no preset `hooks.json`; hooks are registered in `.claude/settings.json` and fire on events such as `PreToolUse`, `PostToolUse`, and `Stop`.
 
 1. Copy an example into `hooks/` (drop `.example` suffix), e.g. `cp hooks/examples/secret-guard.example.sh hooks/secret-guard.sh`.
 2. `chmod +x hooks/secret-guard.sh`.
-3. Add a hook entry in `.cursor/hooks.json` (e.g. `beforeShellExecution` or `afterFileEdit` — see Cursor hooks docs).
-4. Keep cookbook scripts **out** of the default preset `hooks.json` when contributing back upstream.
+3. Register the command in `.claude/settings.json` (see Claude Code hooks docs for event/matcher syntax).
+4. Keep cookbook scripts **out** of the default preset when contributing back upstream.
 
 Stack: **svelte** — recipes must stay stack-safe (no cross-stack lint/test commands).

package/presets/claude/svelte/rules/README.md

@@ -14,7 +14,7 @@ In Claude Code all `.md` under `rules/` are **discovered recursively**. Bodies a
 
 ## Loading strategy
 
-- **Session start (no `paths:`):** exactly **3** — `svelte-app-core`, `package-manager`, `code-quality`
+- **Session start (no `paths:`):** 3–5 — `svelte-app-core`, `package-manager`, `code-quality`
 - **On-demand (`paths:` or via commands):** `post-change-lint`, `security-sveltekit`, architecture, UI, tests, `svelte-sveltekit-anti-hallucination`, **preset-*** meta, …
 - **Skills:** `feature-delivery`, `svelte-performance`, `code-review`, …
 

package/presets/claude/svelte/rules/api-and-data/store-svelte.md

@@ -3,7 +3,7 @@ description: Svelte stores and runes — client state (SvelteKit)
 paths:
   - src/lib/stores/**/*.ts
   - src/lib/stores/**/*.js
-  - **/*.svelte.ts
+  - "**/*.svelte.ts"
 ---
 
 # Shared principles

package/presets/claude/svelte/rules/architecture/layer-barrel-exports.md

@@ -1,7 +1,7 @@
 ---
 description: Two-level barrel exports for layers with a regulated public API
 paths:
-  - **/index.ts
+  - "**/index.ts"
 ---
 
 # Barrel exports for layers with a public API

package/presets/claude/svelte/rules/architecture/reference-features.md

@@ -16,7 +16,7 @@ paths:
 
 Before implementing, find a feature of the same type and **mirror its structure**; do not invent a new file organization.
 
-Taxonomy / shared core: [`presets/_shared/README.md`](../../../../_shared/README.md) · [Preset contribution guide](../../../../docs/PRESET-CONTRIBUTION.md).
+Taxonomy / shared core: [`presets/_shared/README.md`](../../../../_shared/README.md) · [Preset contribution guide](../../../../../docs/PRESET-CONTRIBUTION.md).
 
 ## Reference table
 
@@ -41,7 +41,7 @@ Replace **TBD** with real paths after team agreement (or on `ai-rules init` in t
 
 ## Living conventions
 
-Post-init gotchas / patterns / decisions: **`.claude/team/conventions.md`** (and the twin tool path if both Cursor and Claude are installed). Consumer-owned; not always-on. See root `AGENTS.md` § Living conventions.
+Post-init gotchas / patterns / decisions: **`.ai.local/conventions.md`** (shared across tools; `.ai.local/team/**` is pipeline artifacts, not rules). Consumer-owned; not always-on. See root `AGENTS.md` § Living conventions.
 
 ## Related rules
 

package/presets/claude/svelte/rules/tooling-and-review/agent-team-intake.md

@@ -1,7 +1,7 @@
 ---
 description: Use when user posts a work request without /task — suggest or use /task to run the agent team router. Lightweight intake hint only.
 paths:
-  - .claude/team/**
+  - .ai.local/team/**
 ---
 
 <!-- shared-core: agent-team/agent-team-intake.md -->

package/presets/claude/svelte/rules/tooling-and-review/agent-team-orchestrator.md

@@ -1,14 +1,14 @@
 ---
 description: Orchestrates the agent team via task-router and pipeline.json. Use for /task, /task-continue, task decomposition, or when the user describes a feature, bug, or review request.
 paths:
-  - .claude/team/**
+  - .ai.local/team/**
 ---
 
 <!-- shared-core: agent-team/agent-team-orchestrator.md -->
 
 # Agent team orchestrator
 
-Parent agent = **manager**. Router plans; specialists execute. Artifacts: `.claude/team/tasks/<slug>/`.
+Parent agent = **manager**. Router plans; specialists execute. Artifacts: `.ai.local/team/tasks/<slug>/`.
 
 Work request without `/task` — see **`agent-team-intake.md`** (when to suggest the router instead of coding directly).
 
@@ -51,9 +51,9 @@ Work request without `/task` — see **`agent-team-intake.md`** (when to suggest
 | `tech-writer` | docs / team | docs-only, feature/migration docs |
 | `openspec-author` | `openspec/**` only | openspec-change (`/opsx:propose`, `/opsx:apply`, `/opsx:archive`, openspec refresh) |
 
-**Cursor frontmatter:** all team pipeline agents use `readonly: false` so they can write `.claude/team/**`. Production/app restrictions live in the agent prompt body — do **not** set `readonly: true` (Cursor blocks *all* file writes, including team artifacts).
+**Cursor frontmatter:** all team pipeline agents use `readonly: false` so they can write `.ai.local/team/**`. Production/app restrictions live in the agent prompt body — do **not** set `readonly: true` (Cursor blocks *all* file writes, including team artifacts).
 
-Full prompts: `.claude/agents/*.md`. Artifact conventions: `.claude/team/README.md`; schema SoT: **agent-artifact-contracts**.
+Full prompts: `.claude/agents/*.md`. Artifact conventions: `.ai.local/team/README.md`; schema SoT: **agent-artifact-contracts**.
 
 **Behavioral UX:** `task-analyst` loads requestable skill `ux-design` for standalone intent `ux-design` and embedded required-signal / advisory UI AC. No `ux-designer` agent in v1.
 
@@ -93,7 +93,7 @@ Use the local `metrics.json` ledger described by **agent-task-metrics**: the orc
 
 ## Artifact context index and receipts
 
-Each slug has one `artifact-manifest.json`: `.claude/team/tasks/<slug>/` or `.claude/team/tasks/<slug>/`. Schema SoT: **agent-artifact-contracts**.
+Each slug has one `artifact-manifest.json` at `.ai.local/team/tasks/<slug>/`. Schema SoT: **agent-artifact-contracts**.
 
 - Read the manifest before broad prior-artifact discovery. Each step receives authoritative input entry IDs, owns named output entry IDs, and finishes with one terminal receipt linked to AC/task IDs.
 - Markdown remains detailed evidence; the manifest records producer, status, authoritative paths, timestamps, outcome, and evidence paths.
@@ -159,7 +159,7 @@ On each `subagentStop`, the hook reconciles `status.state` from the completing p
 
 ## Team artifact I/O (Cursor Shell sandbox)
 
-- Create/update `.claude/team/tasks/<slug>/**` with the **Write** tool (parents are created automatically). Do **not** bootstrap slug dirs with Shell `mkdir -p` — default sandbox returns `Operation not permitted` (worse on macOS Desktop/Documents with TCC `com.apple.macl`).
+- Create/update `.ai.local/team/tasks/<slug>/**` with the **Write** tool (parents are created automatically). Do **not** bootstrap slug dirs with Shell `mkdir -p` — default sandbox returns `Operation not permitted` (worse on macOS Desktop/Documents with TCC `com.apple.macl`).
 - If Shell must touch team paths and fails with EPERM, retry with `required_permissions: ["all"]`. Prefer Write for artifacts.
 - Prefer repo under `~/Projects` / `WebstormProjects` over `~/Desktop` when using agent team heavily.
 

package/presets/claude/svelte/rules/tooling-and-review/ai-local-overlay.md

@@ -16,7 +16,7 @@ This rule is mandatory. **You MUST** obey it on every turn, without exception.
 
 1. **Probe** — before answering, run `ls -la .ai.local` from the repository root.
 2. **Walk** — if `.ai.local/` exists at multiple levels (monorepo), read every level from root to leaf. **Deeper wins** in practice: more specific rules appear later in the assembled context and take precedence.
-3. **Apply** — treat every `.ai.local/rules/*.md` and `.ai.local/conventions.md` as a higher-priority rule for this repo. The block below ("Authoring `.ai.local/rules/*.md`") defines the conventions.
+3. **Apply** — treat every `.ai.local/rules/*.md` and `.ai.local/conventions.md` as a higher-priority rule for this repo. Do **not** load `.ai.local/team/**` as rules (shared pipeline artifacts). The block below ("Authoring `.ai.local/rules/*.md`") defines the conventions.
 4. **Conflict** — if a local rule conflicts with a preset rule, **the local rule wins**. If a local rule body contains `override: kill <preset-rule-name>`, drop that preset rule from your context window entirely.
 5. **Acknowledge** — when answering a user question, briefly state which `.ai.local/` rules apply to the current task (one line is enough). Format: `Using .ai.local: <rule-name>(, <rule-name>)*`. If no `.ai.local/` exists, do NOT mention this rule.
 
@@ -44,5 +44,5 @@ Keep files ≤ 120 lines. Match the style of preset rules (short sections, bulle
 ## Pointers
 
 - Authoring guide: `docs/LOCAL-OVERLAY.md` in the `@bonesofspring/ai-rules` package.
-- Living gotchas alternative: `.claude/team/conventions.md`.
+- Living gotchas: `.ai.local/conventions.md`. Pipeline artifacts: `.ai.local/team/` (do not load as rules).
 - Root `AGENTS.md` reinforces this rule with a `MANDATORY` section.

package/presets/claude/svelte/rules/tooling-and-review/code-quality.md

@@ -18,6 +18,12 @@ description: Maintain and improve code quality and architecture
 - **CUPID:** Composable; Unix philosophy (one responsibility); Predictable; Idiomatic (repo); Domain-based.
 - **Composition over inheritance;** Law of Demeter — no `a.b.c.d` chains; via public API / facade.
 
+# Over-abstraction guardrails
+
+- **No unnecessary constants:** do not hoist a one-off literal, string, or boolean into a named constant. Inline it, or use an existing token/enum when the value is meaningful and reused. Named constants are for shared, semantic, or repeated values.
+- **No invented utilities:** do not add a `utils`/helper for a single call site or a thin pass-through wrapper. Inline it or extend the existing helper; a new shared utility is justified only after the Rule of Three.
+- **Decompose over conditionals:** a unit (function, component, hook) that accumulates several branches (`if` / ternary / `switch`) should be split into smaller units with one reason to change instead of piling up conditions.
+
 # Refactoring during changes
 
 - Light refactor is OK if it reduces duplication, improves readability, and does not break public contracts.

package/presets/claude/svelte/rules/tooling-and-review/mcp-usage.md

@@ -1,7 +1,7 @@
 ---
 description: When to call shipped Context7 and local overlay MCP — detect presence, use if the task fits, degrade.
 paths:
-  - **/*.{ts,tsx,svelte}
+  - "**/*.{ts,tsx,svelte}"
 ---
 
 <!-- shared-core: quality/mcp-usage.md -->

package/presets/claude/svelte/rules/tooling-and-review/mockup-review.md

@@ -2,7 +2,7 @@
 description: Figma mockup review checklist (DS, coverage, viewports). On-demand — load via mockup-reviewer / skill mockup-review.
 paths:
   - .claude/commands/**/*
-  - .claude/team/**/*
+  - .ai.local/team/**/*
 ---
 
 <!-- shared-core: review/mockup-review.md -->

package/presets/claude/svelte/rules/tooling-and-review/preset-layering.md

@@ -1,9 +1,9 @@
 ---
-description: Preset authoring: Core → Stack → Platform layering. Use when editing packages/ai-rules/presets/**.
+description: "Preset authoring: Core → Stack → Platform layering. Use when editing packages/ai-rules/presets/**."
 paths:
   - packages/ai-rules/presets/**/*
   - .cursor/rules/**/*
-  - .cursor/team/tasks/**/*
+  - .ai.local/team/tasks/**/*
 ---
 
 <!-- shared-core: meta/preset-layering.md -->
@@ -17,7 +17,7 @@ Rules for **preset authors** (`packages/ai-rules/presets/**`). Not always-on in
 | Layer | Where | What to put |
 |-------|-------|-------------|
 | **Core** | `presets/_shared/core/**` | Stack-agnostic prose + checklists; no frontmatter; no paths `app/**`, `Features/**`, Playwright, xcodebuild |
-| **Stack** | `presets/{cursor\|claude\|mavis\|opencode}/<stack>/` | Domain/tooling, stack always-on trio, stack examples in **Stack notes** |
+| **Stack** | `presets/{cursor\|claude\|mavis\|opencode}/<stack>/` | Domain/tooling, stack always-on set (3–5), stack examples in **Stack notes** |
 | **Platform** | Cursor `.mdc` / Claude `.md` / Mavis `.md` / OpenCode `.md` | Frontmatter (`alwaysApply`/`globs` vs `paths:` vs OpenCode `mode`/`permission`), platform-only (`BUGBOT.md`, `CLAUDE.md`) |
 
 ## Where to put a new rule

package/presets/claude/svelte/rules/tooling-and-review/preset-no-cross-stack-leakage.md

@@ -1,9 +1,9 @@
 ---
-description: Preset authoring: forbid cross-stack agent/path leakage in hooks and agents.
+description: "Preset authoring: forbid cross-stack agent/path leakage in hooks and agents."
 paths:
   - packages/ai-rules/presets/**/*
   - .cursor/rules/**/*
-  - .cursor/team/tasks/**/*
+  - .ai.local/team/tasks/**/*
 ---
 
 <!-- shared-core: meta/preset-no-cross-stack-leakage.md -->

package/presets/claude/svelte/rules/tooling-and-review/preset-pr-checklist.md

@@ -1,9 +1,9 @@
 ---
-description: Preset authoring: PR checklist for twin sync, budget, leakage, README. Use on preset PRs.
+description: "Preset authoring: PR checklist for twin sync, budget, leakage, README. Use on preset PRs."
 paths:
   - packages/ai-rules/presets/**/*
   - .cursor/rules/**/*
-  - .cursor/team/tasks/**/*
+  - .ai.local/team/tasks/**/*
 ---
 
 <!-- shared-core: meta/preset-pr-checklist.md -->
@@ -17,10 +17,10 @@ Checklist for PRs that touch `packages/ai-rules/presets/**` (and dogfood `.curso
 - [ ] **SoT:** edits in `packages/…` (not only root `.cursor/`)
 - [ ] **Core:** if `_shared/core/**` changed — all `<!-- shared-core: … -->` consumers updated (or documented intentional fork)
 - [ ] **Twin:** Cursor change → Claude twin **same PR** (**FAIL** if missing on next, nuxt, svelte, ios-swift, android-kotlin, go, java, mcp-ts, php-hexagonal, and php-laravel — see `preset-twin-sync`)
-- [ ] **Mavis derive:** mapped `cursor/<stack>/` change → `mavis/<stack>/` + `adapter-map.json` **same PR** when the stack is in `releasedStacks` (run `generate-mavis-next.mjs` + `check-mavis-adapter-map.mjs` for `next`; see `preset-twin-sync` § Mavis derivation)
-- [ ] **OpenCode derive:** mapped `cursor/<stack>/` change → `opencode/<stack>/` + `adapter-map.json` **same PR** when the stack is in `releasedStacks` (run `generate-opencode-next.mjs` + `check-opencode-adapter-map.mjs` for `next`; see `preset-twin-sync` § OpenCode derivation)
+- [ ] **Mavis derive:** mapped `cursor/<stack>/` change → `mavis/<stack>/` + `adapter-map.json` **same PR** when the stack is in `releasedStacks` (run `generate-mavis.mjs --stack <stack>` + `check-mavis-adapter-map.mjs`; see `preset-twin-sync` § Mavis derivation)
+- [ ] **OpenCode derive:** mapped `cursor/<stack>/` change → `opencode/<stack>/` + `adapter-map.json` **same PR** when the stack is in `releasedStacks` (run `generate-opencode.mjs --stack <stack>` + `check-opencode-adapter-map.mjs`; see `preset-twin-sync` § OpenCode derivation)
 - [ ] **Mapping:** `claude/<stack>/rules/README.md` mapping table is current
-- [ ] **Token budget:** Cursor `alwaysApply` ≤ 4 (4th slot reserved for `ai-local-overlay`); Claude session-start exactly 3; meta rules not always-on
+- [ ] **Token budget:** Cursor `alwaysApply` and Claude session-start both **3–5** (extra slots reserved for `ai-local-overlay`); body sum ≤200 (stretch ≤170); meta rules not always-on
 - [ ] **Local overlay coverage:** every installable stack ships `ai-local-overlay.mdc` (Cursor) and `ai-local-overlay.md` (Claude) with `MANDATORY` + acknowledgement format + `docs/LOCAL-OVERLAY.md` pointer; Claude twin listed in `claude/<stack>/rules/README.md` mapping table. Run `packages/ai-rules/scripts/check-local-overlay.sh`.
 - [ ] **Leakage:** no foreign stack agent stems / handoff strings (`preset-no-cross-stack-leakage`)
 - [ ] **Hook-only lifecycle:** `status.json` / `metrics.json` writes happen only inside `hooks/`; agents read but never rewrite lifecycle fields. Run `packages/ai-rules/scripts/check-hook-only-lifecycle.sh`.

package/presets/claude/svelte/rules/tooling-and-review/preset-token-budget.md

@@ -1,9 +1,9 @@
 ---
-description: Preset authoring: ≤3 always-on / session-start; meta rules never alwaysApply.
+description: "Preset authoring: ≤3 always-on / session-start; meta rules never alwaysApply."
 paths:
   - packages/ai-rules/presets/**/*
   - .cursor/rules/**/*
-  - .cursor/team/tasks/**/*
+  - .ai.local/team/tasks/**/*
 ---
 
 <!-- shared-core: meta/preset-token-budget.md -->
@@ -16,19 +16,19 @@ Invariants for rule loading in an **installed** preset (consumer app).
 
 | Platform | Always-on | Cap |
 |----------|-----------|-----|
-| Cursor | `alwaysApply: true` | **≤ 4** |
-| Claude | rules **without** `paths:` | **exactly 3** |
-| Mavis | `adapter-map` rules with `loadMode: root-entry` | **≤ 4** |
-| OpenCode | `adapter-map` rules with `loadMode: root-entry` | **≤ 4** |
+| Cursor | `alwaysApply: true` | **3–5** |
+| Claude | rules **without** `paths:` | **3–5** |
+| Mavis | `adapter-map` rules with `loadMode: root-entry` | **3–5** |
+| OpenCode | `adapter-map` rules with `loadMode: root-entry` | **3–5** |
 
-**Cursor 4th slot is reserved for `ai-local-overlay`** (consumer-owned `.ai.local/` rules). If you do not need local overlay, demote that rule to `globs: ["**/.ai.local/**"]` and revert to ≤3.
+Caps are **aligned** across platforms: minimum **3** (base invariants), maximum **5**. Slots beyond the base invariants are reserved for `ai-local-overlay` (consumer-owned `.ai.local/` rules). If you do not need local overlay, demote that rule to `globs: ["**/.ai.local/**"]` / Claude `paths:`, or a non-root load mode on Mavis / OpenCode.
 
-**Claude Option A (README exclusion):** when counting Claude rules without `paths:` / session-start, **exclude `**/README.md`** (topic indexes are not session-start rules). The intended session-start trio remains **exactly 3**; body budget sums **only those 3** rules.
+**Claude Option A (README exclusion):** when counting Claude rules without `paths:` / session-start, **exclude `**/README.md`** (topic indexes are not session-start rules). Body budget sums only the intended session-start rules (≤5).
 
 Session-start body budget:
-- Claude trio: ≤140 lines total (stretch ≤120).
-- Cursor 4-set: ≤170 lines total (4 rules including `ai-local-overlay`).
-- Mavis / OpenCode: ≤4 root-entry rule files; combined root `AGENTS.md` + platform entry ≤170 nonempty lines. Do not dump the full rule catalog into `AGENTS.md`.
+- Claude session-start: ≤200 lines total (stretch ≤170).
+- Cursor always-on: ≤200 lines total (stretch ≤170).
+- Mavis / OpenCode: ≤5 root-entry rule files; combined root `AGENTS.md` + platform entry ≤200 nonempty lines. Do not dump the full rule catalog into `AGENTS.md`.
 
 ## Meta / author rules
 
@@ -44,4 +44,4 @@ Orchestrator, feature-delivery, code-review, post-change gates, domain globs —
 
 ## Verifier
 
-build-verifier **FAIL** if Cursor `alwaysApply` count exceeds 4, Claude session-start count exceeds 3 (Claude count **excludes `**/README.md`**), or if a `preset-*` meta rule is marked always-on.
+build-verifier **FAIL** if Cursor `alwaysApply` count or Claude session-start count is outside **3–5** (Claude count **excludes `**/README.md`**), or if a `preset-*` meta rule is marked always-on.

package/presets/claude/svelte/rules/tooling-and-review/preset-twin-sync.md

@@ -1,9 +1,9 @@
 ---
-description: Preset authoring: Cursor SoT → Claude twin same PR. Use when editing preset rules.
+description: "Preset authoring: Cursor SoT → Claude twin same PR. Use when editing preset rules."
 paths:
   - packages/ai-rules/presets/**/*
   - .cursor/rules/**/*
-  - .cursor/team/tasks/**/*
+  - .ai.local/team/tasks/**/*
 ---
 
 <!-- shared-core: meta/preset-twin-sync.md -->
@@ -31,7 +31,16 @@ Cursor `.mdc` — **SoT per stack**. Claude topic `.md` — derived twin.
 
 | Stack | Cursor SoT | Mavis derive | Manifest |
 |-------|------------|--------------|----------|
-| `next` | `presets/cursor/next/**` | `presets/mavis/next/**` via `generate-mavis-next.mjs` | **Required** `adapter-map.json` |
+| `next` | `presets/cursor/next/**` | `presets/mavis/next/**` via `generate-mavis.mjs --stack next` | **Required** `adapter-map.json` |
+| `nuxt` | `presets/cursor/nuxt/**` | `presets/mavis/nuxt/**` via `generate-mavis.mjs --stack nuxt` | **Required** `adapter-map.json` |
+| `svelte` | `presets/cursor/svelte/**` | `presets/mavis/svelte/**` via `generate-mavis.mjs --stack svelte` | **Required** `adapter-map.json` |
+| `ios-swift` | `presets/cursor/ios-swift/**` | `presets/mavis/ios-swift/**` via `generate-mavis.mjs --stack ios-swift` | **Required** `adapter-map.json` |
+| `android-kotlin` | `presets/cursor/android-kotlin/**` | `presets/mavis/android-kotlin/**` via `generate-mavis.mjs --stack android-kotlin` | **Required** `adapter-map.json` |
+| `go` | `presets/cursor/go/**` | `presets/mavis/go/**` via `generate-mavis.mjs --stack go` | **Required** `adapter-map.json` |
+| `java` | `presets/cursor/java/**` | `presets/mavis/java/**` via `generate-mavis.mjs --stack java` | **Required** `adapter-map.json` |
+| `mcp-ts` | `presets/cursor/mcp-ts/**` | `presets/mavis/mcp-ts/**` via `generate-mavis.mjs --stack mcp-ts` | **Required** `adapter-map.json` |
+| `php-hexagonal` | `presets/cursor/php-hexagonal/**` | `presets/mavis/php-hexagonal/**` via `generate-mavis.mjs --stack php-hexagonal` | **Required** `adapter-map.json` |
+| `php-laravel` | `presets/cursor/php-laravel/**` | `presets/mavis/php-laravel/**` via `generate-mavis.mjs --stack php-laravel` | **Required** `adapter-map.json` |
 
 Mavis is a **third platform adapter**, not a Claude-style topic twin:
 
@@ -39,13 +48,22 @@ Mavis is a **third platform adapter**, not a Claude-style topic twin:
 _shared/core  →  cursor/<stack>  →  mavis/<stack>
 ```
 
-Regenerate with `node packages/ai-rules/scripts/generate-mavis-next.mjs`; validate with `node packages/ai-rules/scripts/check-mavis-adapter-map.mjs`.
+Regenerate with `node packages/ai-rules/scripts/generate-mavis.mjs --stack <stack>`; validate with `node packages/ai-rules/scripts/check-mavis-adapter-map.mjs`.
 
 ## OpenCode derivation (not a Claude twin)
 
 | Stack | Cursor SoT | OpenCode derive | Manifest |
 |-------|------------|-----------------|----------|
-| `next` | `presets/cursor/next/**` | `presets/opencode/next/**` via `generate-opencode-next.mjs` | **Required** `adapter-map.json` |
+| `next` | `presets/cursor/next/**` | `presets/opencode/next/**` via `generate-opencode.mjs --stack next` | **Required** `adapter-map.json` |
+| `nuxt` | `presets/cursor/nuxt/**` | `presets/opencode/nuxt/**` via `generate-opencode.mjs --stack nuxt` | **Required** `adapter-map.json` |
+| `svelte` | `presets/cursor/svelte/**` | `presets/opencode/svelte/**` via `generate-opencode.mjs --stack svelte` | **Required** `adapter-map.json` |
+| `ios-swift` | `presets/cursor/ios-swift/**` | `presets/opencode/ios-swift/**` via `generate-opencode.mjs --stack ios-swift` | **Required** `adapter-map.json` |
+| `android-kotlin` | `presets/cursor/android-kotlin/**` | `presets/opencode/android-kotlin/**` via `generate-opencode.mjs --stack android-kotlin` | **Required** `adapter-map.json` |
+| `go` | `presets/cursor/go/**` | `presets/opencode/go/**` via `generate-opencode.mjs --stack go` | **Required** `adapter-map.json` |
+| `java` | `presets/cursor/java/**` | `presets/opencode/java/**` via `generate-opencode.mjs --stack java` | **Required** `adapter-map.json` |
+| `mcp-ts` | `presets/cursor/mcp-ts/**` | `presets/opencode/mcp-ts/**` via `generate-opencode.mjs --stack mcp-ts` | **Required** `adapter-map.json` |
+| `php-hexagonal` | `presets/cursor/php-hexagonal/**` | `presets/opencode/php-hexagonal/**` via `generate-opencode.mjs --stack php-hexagonal` | **Required** `adapter-map.json` |
+| `php-laravel` | `presets/cursor/php-laravel/**` | `presets/opencode/php-laravel/**` via `generate-opencode.mjs --stack php-laravel` | **Required** `adapter-map.json` |
 
 OpenCode is a **fourth platform adapter** with a **native** install root (`.opencode/`), not a Claude-style topic twin and not an owned overlay like `.mavis/`:
 
@@ -53,7 +71,7 @@ OpenCode is a **fourth platform adapter** with a **native** install root (`.open
 _shared/core  →  cursor/<stack>  →  opencode/<stack>
 ```
 
-Regenerate with `node packages/ai-rules/scripts/generate-opencode-next.mjs`; validate with `node packages/ai-rules/scripts/check-opencode-adapter-map.mjs`. Do not derive OpenCode sources from Claude.
+Regenerate with `node packages/ai-rules/scripts/generate-opencode.mjs --stack <stack>`; validate with `node packages/ai-rules/scripts/check-opencode-adapter-map.mjs`. Do not derive OpenCode sources from Claude.
 
 ## Same-PR checklist
 
@@ -61,8 +79,8 @@ Regenerate with `node packages/ai-rules/scripts/generate-opencode-next.mjs`; val
 2. Update Claude twin: body + `paths:` (from Cursor `globs:` / requestable triggers); drop `alwaysApply`.
 3. Update mapping table row if stem/path changed.
 4. If body embeds core (`<!-- shared-core: … -->`), sync core consumers across stacks when core changed.
-5. When mapped `cursor/<stack>/` sources change, regenerate `mavis/<stack>/` and refresh `adapter-map.json` `sourceRevision` in the **same PR** (run `generate-mavis-next.mjs` + `check-mavis-adapter-map.mjs` for `next`).
-6. When mapped `cursor/<stack>/` sources change, regenerate `opencode/<stack>/` and refresh `adapter-map.json` `sourceRevision` in the **same PR** (run `generate-opencode-next.mjs` + `check-opencode-adapter-map.mjs` for `next`).
+5. When mapped `cursor/<stack>/` sources change, regenerate `mavis/<stack>/` and refresh `adapter-map.json` `sourceRevision` in the **same PR** (run `generate-mavis.mjs --stack <stack>` + `check-mavis-adapter-map.mjs`).
+6. When mapped `cursor/<stack>/` sources change, regenerate `opencode/<stack>/` and refresh `adapter-map.json` `sourceRevision` in the **same PR** (run `generate-opencode.mjs --stack <stack>` + `check-opencode-adapter-map.mjs`).
 
 ## Twin depth
 
@@ -83,7 +101,7 @@ Regenerate with `node packages/ai-rules/scripts/generate-opencode-next.mjs`; val
 - **php-hexagonal:** missing Claude twin for a changed Cursor rule → **FAIL** (same as next / ios-swift / go / java / mcp-ts; mapping table required).
 - **php-laravel:** missing Claude twin for a changed Cursor rule → **FAIL** (same as next / ios-swift / go / java / mcp-ts / php-hexagonal; mapping table required).
 - **android-kotlin:** missing Claude twin for a changed Cursor rule → **FAIL** (same as next / ios-swift / go / java / mcp-ts / php-*; mapping table required).
-- **mavis/next:** `cursor/next` mapped source changed without mavis regeneration / `adapter-map.json` `sourceRevision` drift → **FAIL** (`check-mavis-adapter-map.mjs`).
-- **opencode/next:** `cursor/next` mapped source changed without opencode regeneration / `adapter-map.json` `sourceRevision` drift → **FAIL** (`check-opencode-adapter-map.mjs`).
+- **mavis/<stack>:** `cursor/<stack>` mapped source changed without mavis regeneration / `adapter-map.json` `sourceRevision` drift → **FAIL** (`check-mavis-adapter-map.mjs`).
+- **opencode/<stack>:** `cursor/<stack>` mapped source changed without opencode regeneration / `adapter-map.json` `sourceRevision` drift → **FAIL** (`check-opencode-adapter-map.mjs`).
 
 Dogfood: sync packages → root `.cursor/` after Cursor SoT changes (not the reverse). Use `packages/ai-rules/scripts/sync-dogfood-cursor.sh`.

package/presets/claude/svelte/rules/tooling-and-review/technical-retro.md

@@ -1,7 +1,7 @@
 ---
 description: Agent role for a team/sprint technical retrospective (retro). On-demand — prefer the /technical-retro slash command.
 paths:
-  - .claude/team/**
+  - .ai.local/team/**
 ---
 
 <!-- shared-core: review/technical-retro.md -->

package/presets/claude/svelte/rules/tooling-and-review/ux-design.md

@@ -2,7 +2,7 @@
 description: Behavioral UX design checklist (IA, flows, states). On-demand — load via task-analyst / skill ux-design.
 paths:
   - .claude/commands/**/*
-  - .claude/team/**/*
+  - .ai.local/team/**/*
 ---
 
 <!-- shared-core: review/ux-design.md -->

package/presets/claude/svelte/rules/ui-and-accessibility/no-rest-props-spread.md

@@ -1,7 +1,7 @@
 ---
 description: Ban undisciplined rest props / $$restProps bulk spread in Svelte
 paths:
-  - **/*.svelte
+  - "**/*.svelte"
 ---
 
 # No rest-props spread

package/presets/claude/svelte/rules/ui-and-accessibility/svelte-ui.md

@@ -16,6 +16,13 @@ paths:
 - A11y: `svelte-a11y-coding`.
 - UI boundaries: `architecture-boundaries-ui` — no DTO in markup; map in `src/lib/api/**`.
 
+# Conditional rendering
+
+- Prefer **decomposition over conditionals**: markup with several `{#if}` / `{:else if}` / `{:else}` branches should become a thin parent that renders child components, not one growing block.
+- Keep the condition in the parent; children receive resolved props.
+- No nested ternaries in markup. For loading / empty / error, use dedicated `EmptyState` / `ErrorState` components or snippets.
+- A `variant` / `mode` prop that renders two unrelated layouts is **two** components, not one.
+
 ## Incorrect
 
 ```svelte

package/presets/claude/svelte/skills/code-review/SKILL.md

@@ -7,7 +7,7 @@ description: Reviews pull requests, merge requests, git diffs, and branch change
 
 ## Inputs
 
-Use the local repository as the source of truth: `git status`, `git diff`, task artifacts under `.claude/team/tasks/<slug>/` when present, and opened files. Do not invent hosting metadata such as labels, CI status, or reviewers.
+Use the local repository as the source of truth: `git status`, `git diff`, task artifacts under `.ai.local/team/tasks/<slug>/` when present, and opened files. Do not invent hosting metadata such as labels, CI status, or reviewers.
 
 ## Review Order
 
@@ -31,7 +31,7 @@ Lead with findings ordered by severity. Required shape (also in `code-review-mr`
 - End with a verdict line: **`Safe to merge | needs changes | reject`**.
 - If there are no findings, say so and call out remaining test or validation risk.
 
-For agent team tasks, write `.claude/team/tasks/<slug>/review.md` and upsert the owned terminal receipt (`completed` or `changes_requested`); do not mutate `status.json`.
+For agent team tasks, write `.ai.local/team/tasks/<slug>/review.md` and upsert the owned terminal receipt (`completed` or `changes_requested`); do not mutate `status.json`.
 
 ## Receiving review feedback
 

package/presets/claude/svelte/skills/debug-investigation/SKILL.md

@@ -34,7 +34,7 @@ If **three** fix attempts fail, or the same symptom returns after two supposed f
 
 ### Artifacts
 
-For agent team tasks, write `.claude/team/tasks/<slug>/debug-report.md` with:
+For agent team tasks, write `.ai.local/team/tasks/<slug>/debug-report.md` with:
 
 - Reproduction steps or evidence source.
 - Root cause.