@bonesofspring/ai-rules 0.2.26 → 0.2.28

package/presets/claude/svelte/agents/openspec-author.md

@@ -4,6 +4,23 @@ description: OpenSpec (spec-driven SDD) specialist. Explores openspec/specs/**,
 model: inherit
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/svelte-app-core.md`
+- `.claude/rules/tooling-and-review/package-manager.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/architecture/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/post-change-lint.md` — lint/type-check after code edits
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are an **OpenSpec** (Fission AI spec-driven SDD) author for a frontend/backend agent team.
 
 Your only writes target `openspec/**` (and team artifact manifests). Production code lives behind `feature-developer`; you are **docs / spec only**.

package/presets/claude/svelte/agents/performance-auditor.md

@@ -4,6 +4,23 @@ description: Performance audit specialist. Reviews bundle size, lazy loading, re
 model: opus
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/svelte-app-core.md`
+- `.claude/rules/tooling-and-review/package-manager.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/architecture/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/post-change-lint.md` — lint/type-check after code edits
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are a frontend performance auditor for a SvelteKit Svelte application.
 
 ## Inputs

package/presets/claude/svelte/agents/playwright-test-generator.md

@@ -6,6 +6,25 @@ model: sonnet
 color: blue
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/svelte-app-core.md`
+- `.claude/rules/tooling-and-review/package-manager.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/architecture/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/post-change-lint.md` — lint/type-check after code edits
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.claude/rules/testing/playwright-agents.md`
+- `.claude/rules/testing/tests-e2e-structure.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are a Playwright Test Generator, an expert in browser automation and end-to-end testing.
 Your specialty is creating robust, reliable Playwright tests that accurately simulate user interactions and validate
 application behavior.

package/presets/claude/svelte/agents/playwright-test-healer.md

@@ -6,6 +6,25 @@ model: sonnet
 color: red
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/svelte-app-core.md`
+- `.claude/rules/tooling-and-review/package-manager.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/architecture/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/post-change-lint.md` — lint/type-check after code edits
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.claude/rules/testing/playwright-agents.md`
+- `.claude/rules/testing/tests-e2e-structure.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are the Playwright Test Healer, an expert test automation engineer specializing in debugging and
 resolving Playwright test failures. Your mission is to systematically identify, diagnose, and fix
 broken Playwright tests using a methodical approach.
@@ -65,4 +84,3 @@ Key principles:
 Load requestable rule `mcp-usage` when verifying third-party library APIs (Context7) or when a local overlay MCP is present and the task fits. Discover tools at runtime; do not invent schemas. Overlay absence is not a blocker unless the user required that MCP as source of truth.
 
 Use Playwright MCP when available for selector checks and failure reproduction. Chrome DevTools is for `debugger` / `performance-auditor`, not this e2e loop. Storybook MCP if present may inform component docs — do not replace `*.cases.md`.
-

package/presets/claude/svelte/agents/playwright-test-planner.md

@@ -6,6 +6,25 @@ model: sonnet
 color: green
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/svelte-app-core.md`
+- `.claude/rules/tooling-and-review/package-manager.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/architecture/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/post-change-lint.md` — lint/type-check after code edits
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.claude/rules/testing/playwright-agents.md`
+- `.claude/rules/testing/tests-e2e-structure.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are an expert web test planner with extensive experience in quality assurance, user experience testing, and test
 scenario design. Your expertise includes functional testing, edge case identification, and comprehensive test coverage
 planning.
@@ -64,4 +83,4 @@ You will:
 - Ensure scenarios are independent and can be run in any order
 
 **Output Format**: Always save the complete test plan as a markdown file with clear headings, numbered steps, and
-professional formatting suitable for sharing with development and QA teams.
+professional formatting suitable for sharing with development and QA teams.

package/presets/claude/svelte/agents/qa-tester.md

@@ -4,6 +4,26 @@ description: QA and test specialist. Adds or updates unit and e2e tests per deco
 model: inherit
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/svelte-app-core.md`
+- `.claude/rules/tooling-and-review/package-manager.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/architecture/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/post-change-lint.md` — lint/type-check after code edits
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.claude/rules/testing/tests-unit.md`
+- `.claude/rules/testing/playwright-agents.md`
+- `.claude/rules/testing/tests-e2e-structure.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are a QA engineer for a SvelteKit frontend with Jest/Vitest unit tests and Playwright e2e, depending on the target repository.
 
 ## Inputs

package/presets/claude/svelte/agents/security-reviewer.md

@@ -4,6 +4,23 @@ description: Security review specialist. Audits auth flows, token handling, XSS
 model: opus
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/svelte-app-core.md`
+- `.claude/rules/tooling-and-review/package-manager.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/architecture/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/post-change-lint.md` — lint/type-check after code edits
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are a frontend security reviewer for a SvelteKit TypeScript application.
 
 ## Inputs

package/presets/claude/svelte/agents/solution-architect.md

@@ -4,6 +4,23 @@ description: Solution architect for cross-layer features, API boundaries, and te
 model: opus
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/svelte-app-core.md`
+- `.claude/rules/tooling-and-review/package-manager.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/architecture/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/post-change-lint.md` — lint/type-check after code edits
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are a solution architect for a SvelteKit frontend with strict layer boundaries (types, api, store, ui).
 
 ## Inputs

package/presets/claude/svelte/agents/task-analyst.md

@@ -4,6 +4,23 @@ description: Task analysis specialist. Clarifies requirements, validates accepta
 model: fast
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/svelte-app-core.md`
+- `.claude/rules/tooling-and-review/package-manager.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/architecture/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/post-change-lint.md` — lint/type-check after code edits
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are a senior business/technical analyst for a SvelteKit frontend team.
 
 Your job is to reach **Definition of Ready (DoR)** before any implementation starts. You may write only `.ai.local/team/**` artifacts. You do **not** write production code or modify application source files.

package/presets/claude/svelte/agents/task-router.md

@@ -5,6 +5,23 @@ readonly: false
 model: fast
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/svelte-app-core.md`
+- `.claude/rules/tooling-and-review/package-manager.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/architecture/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/post-change-lint.md` — lint/type-check after code edits
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are a task router for a SvelteKit frontend agent team. You **do not** implement tasks — you classify intent and plan the agent pipeline.
 
 ## Inputs

package/presets/claude/svelte/agents/tech-writer.md

@@ -4,6 +4,23 @@ description: Technical documentation specialist. Writes feature READMEs, migrati
 model: fast
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/svelte-app-core.md`
+- `.claude/rules/tooling-and-review/package-manager.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/architecture/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/post-change-lint.md` — lint/type-check after code edits
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are a technical writer for a SvelteKit frontend team.
 
 ## Inputs

package/presets/claude/svelte/agents/unit-test-generator.md

@@ -4,6 +4,24 @@ description: Unit test generation specialist. Implements *.spec.ts from unit-tes
 model: inherit
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/svelte-app-core.md`
+- `.claude/rules/tooling-and-review/package-manager.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/architecture/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/post-change-lint.md` — lint/type-check after code edits
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.claude/rules/testing/tests-unit.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You generate unit tests from project test plans.
 
 ## Inputs

package/presets/claude/svelte/agents/unit-test-healer.md

@@ -4,6 +4,24 @@ description: Unit test healer. Fixes failing or flaky unit tests after refactors
 model: inherit
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/svelte-app-core.md`
+- `.claude/rules/tooling-and-review/package-manager.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/architecture/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/post-change-lint.md` — lint/type-check after code edits
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.claude/rules/testing/tests-unit.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You debug and fix failing unit tests.
 
 ## Inputs

package/presets/claude/svelte/agents/unit-test-planner.md

@@ -4,6 +4,24 @@ description: Unit test planning specialist. Creates coverage plans for mappers,
 model: inherit
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/svelte-app-core.md`
+- `.claude/rules/tooling-and-review/package-manager.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/architecture/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/post-change-lint.md` — lint/type-check after code edits
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.claude/rules/testing/tests-unit.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are a unit test planner for a SvelteKit frontend with Jest/Vitest and Testing Library.
 
 Use the **`unit-testing` skill** and **`rules/testing/tests-unit.md`**.

package/presets/claude/svelte/commands/task.md

@@ -1,6 +1,6 @@
 ---
 name: task
-description: Route a natural-language task through the agent-team pipeline: task-router, pipeline.json, and the first planned specialist.
+description: "Route a natural-language task through the agent-team pipeline: task-router, pipeline.json, and the first planned specialist."
 ---
 
 # Task — single entry point (router + pipeline)

package/presets/claude/svelte/hooks/chain-team-phases.sh

@@ -42,7 +42,10 @@ try {
 }
 
 const slug = active.slug;
-if (!slug) {
+// Reject non-kebab / traversal slugs: the runtime writes status.json and
+// metrics.json under tasks/<slug>, so an unchecked slug could escape the tree.
+const SLUG_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+if (typeof slug !== 'string' || slug.length > 48 || !SLUG_RE.test(slug)) {
   process.stdout.write('{}');
   process.exit(0);
 }
@@ -69,6 +72,9 @@ function waitForMetricsLock() {
   // and never blocked on the lock file, so two concurrent subagentStop events
   // could both acquire the lock and corrupt metrics.json. Retry EEXIST with a
   // 10 ms sleep up to 200 attempts (2 s ceiling). On any other error, throw.
+  // A lock left behind by a killed process is reclaimed once its mtime is older
+  // than STALE_LOCK_MS, so one crash cannot brick the task forever.
+  const STALE_LOCK_MS = 30000;
   for (let attempt = 0; attempt < 200; attempt += 1) {
     try {
       const fd = fs.openSync(METRICS_LOCK, 'wx');
@@ -76,6 +82,13 @@ function waitForMetricsLock() {
       return;
     } catch (error) {
       if (!error || error.code !== 'EEXIST') throw error;
+      try {
+        const lockStat = fs.statSync(METRICS_LOCK);
+        if (Date.now() - lockStat.mtimeMs > STALE_LOCK_MS) {
+          fs.unlinkSync(METRICS_LOCK);
+          continue;
+        }
+      } catch {}
       const until = Date.now() + 10;
       while (Date.now() < until) { /* 10 ms busy-wait */ }
     }
@@ -493,7 +506,10 @@ function legacyFlow() {
 
 
 if (hookInput.action === 'end_human_gate') {
-    status.awaitingHumanGate = false;
+  // Only advance when a gate was actually open. A duplicate or retried
+  // end_human_gate must be a no-op, not a silent pipeline skip.
+  const gateWasOpen = Boolean(status.activeHumanGateEventId) || status.awaitingHumanGate === true;
+  status.awaitingHumanGate = false;
   // A2 (retro §8): pin a single runId per pipeline so subsequent events don't
   // fragment the metrics ledger across multiple runId sequences. Prefer
   // metrics.json.task.runId when metrics already exist, then status.metricsRunId,
@@ -520,7 +536,7 @@ if (hookInput.action === 'end_human_gate') {
     });
     delete status.activeHumanGateEventId;
   }
-  if (hookInput.activateNext && fs.existsSync(pipelinePath)) {
+  if (gateWasOpen && hookInput.activateNext && fs.existsSync(pipelinePath)) {
     let resumePipeline = null;
     try { resumePipeline = JSON.parse(fs.readFileSync(pipelinePath, 'utf8')); } catch {}
     if (resumePipeline) {
@@ -542,6 +558,19 @@ if (hookInput.action === 'end_human_gate') {
         else out(handoffForAgent(resumeAgents[0], resumeNext.step.scope, resumeNext.step));
         process.exit(0);
       }
+      // Gate on the final step: no executable step remains. Complete the
+      // pipeline instead of leaving it in_progress forever.
+      status.state = 'completed';
+      completeTaskMetrics();
+      writeStatus({
+        pipelineIndex: resumeSteps.length,
+        phase: 'done',
+        state: 'completed',
+        currentAgent: null,
+        awaitingHumanGate: false,
+      });
+      out(`Pipeline complete for "${slug}". Run /technical-retro ${slug}.`);
+      process.exit(0);
     }
   }
   // A2 (retro §8): if gate closes the final human gate of the pipeline

package/presets/claude/svelte/hooks/examples/README.md

@@ -8,11 +8,13 @@ Optional scripts under `hooks/examples/`. **Not** referenced from default `hooks
 | `format-edited.example.sh` | Stack formatter / linter on edited files |
 | `test-on-save.example.sh` | Scoped tests for the stack |
 
-## Wiring (Cursor)
+## Wiring (Claude Code)
+
+Claude Code has no preset `hooks.json`; hooks are registered in `.claude/settings.json` and fire on events such as `PreToolUse`, `PostToolUse`, and `Stop`.
 
 1. Copy an example into `hooks/` (drop `.example` suffix), e.g. `cp hooks/examples/secret-guard.example.sh hooks/secret-guard.sh`.
 2. `chmod +x hooks/secret-guard.sh`.
-3. Add a hook entry in `.cursor/hooks.json` (e.g. `beforeShellExecution` or `afterFileEdit` — see Cursor hooks docs).
-4. Keep cookbook scripts **out** of the default preset `hooks.json` when contributing back upstream.
+3. Register the command in `.claude/settings.json` (see Claude Code hooks docs for event/matcher syntax).
+4. Keep cookbook scripts **out** of the default preset when contributing back upstream.
 
 Stack: **svelte** — recipes must stay stack-safe (no cross-stack lint/test commands).

package/presets/claude/svelte/rules/README.md

@@ -14,7 +14,7 @@ In Claude Code all `.md` under `rules/` are **discovered recursively**. Bodies a
 
 ## Loading strategy
 
-- **Session start (no `paths:`):** exactly **3** — `svelte-app-core`, `package-manager`, `code-quality`
+- **Session start (no `paths:`):** 3–5 — `svelte-app-core`, `package-manager`, `code-quality`
 - **On-demand (`paths:` or via commands):** `post-change-lint`, `security-sveltekit`, architecture, UI, tests, `svelte-sveltekit-anti-hallucination`, **preset-*** meta, …
 - **Skills:** `feature-delivery`, `svelte-performance`, `code-review`, …
 

package/presets/claude/svelte/rules/api-and-data/store-svelte.md

@@ -3,7 +3,7 @@ description: Svelte stores and runes — client state (SvelteKit)
 paths:
   - src/lib/stores/**/*.ts
   - src/lib/stores/**/*.js
-  - **/*.svelte.ts
+  - "**/*.svelte.ts"
 ---
 
 # Shared principles

package/presets/claude/svelte/rules/architecture/layer-barrel-exports.md

@@ -1,7 +1,7 @@
 ---
 description: Two-level barrel exports for layers with a regulated public API
 paths:
-  - **/index.ts
+  - "**/index.ts"
 ---
 
 # Barrel exports for layers with a public API

package/presets/claude/svelte/rules/architecture/reference-features.md

@@ -16,7 +16,7 @@ paths:
 
 Before implementing, find a feature of the same type and **mirror its structure**; do not invent a new file organization.
 
-Taxonomy / shared core: [`presets/_shared/README.md`](../../../../_shared/README.md) · [Preset contribution guide](../../../../docs/PRESET-CONTRIBUTION.md).
+Taxonomy / shared core: [`presets/_shared/README.md`](../../../../_shared/README.md) · [Preset contribution guide](../../../../../docs/PRESET-CONTRIBUTION.md).
 
 ## Reference table
 

package/presets/claude/svelte/rules/tooling-and-review/code-quality.md

@@ -18,6 +18,12 @@ description: Maintain and improve code quality and architecture
 - **CUPID:** Composable; Unix philosophy (one responsibility); Predictable; Idiomatic (repo); Domain-based.
 - **Composition over inheritance;** Law of Demeter — no `a.b.c.d` chains; via public API / facade.
 
+# Over-abstraction guardrails
+
+- **No unnecessary constants:** do not hoist a one-off literal, string, or boolean into a named constant. Inline it, or use an existing token/enum when the value is meaningful and reused. Named constants are for shared, semantic, or repeated values.
+- **No invented utilities:** do not add a `utils`/helper for a single call site or a thin pass-through wrapper. Inline it or extend the existing helper; a new shared utility is justified only after the Rule of Three.
+- **Decompose over conditionals:** a unit (function, component, hook) that accumulates several branches (`if` / ternary / `switch`) should be split into smaller units with one reason to change instead of piling up conditions.
+
 # Refactoring during changes
 
 - Light refactor is OK if it reduces duplication, improves readability, and does not break public contracts.

package/presets/claude/svelte/rules/tooling-and-review/mcp-usage.md

@@ -1,7 +1,7 @@
 ---
 description: When to call shipped Context7 and local overlay MCP — detect presence, use if the task fits, degrade.
 paths:
-  - **/*.{ts,tsx,svelte}
+  - "**/*.{ts,tsx,svelte}"
 ---
 
 <!-- shared-core: quality/mcp-usage.md -->

package/presets/claude/svelte/rules/tooling-and-review/preset-layering.md

@@ -1,5 +1,5 @@
 ---
-description: Preset authoring: Core → Stack → Platform layering. Use when editing packages/ai-rules/presets/**.
+description: "Preset authoring: Core → Stack → Platform layering. Use when editing packages/ai-rules/presets/**."
 paths:
   - packages/ai-rules/presets/**/*
   - .cursor/rules/**/*
@@ -17,7 +17,7 @@ Rules for **preset authors** (`packages/ai-rules/presets/**`). Not always-on in
 | Layer | Where | What to put |
 |-------|-------|-------------|
 | **Core** | `presets/_shared/core/**` | Stack-agnostic prose + checklists; no frontmatter; no paths `app/**`, `Features/**`, Playwright, xcodebuild |
-| **Stack** | `presets/{cursor\|claude\|mavis\|opencode}/<stack>/` | Domain/tooling, stack always-on trio, stack examples in **Stack notes** |
+| **Stack** | `presets/{cursor\|claude\|mavis\|opencode}/<stack>/` | Domain/tooling, stack always-on set (3–5), stack examples in **Stack notes** |
 | **Platform** | Cursor `.mdc` / Claude `.md` / Mavis `.md` / OpenCode `.md` | Frontmatter (`alwaysApply`/`globs` vs `paths:` vs OpenCode `mode`/`permission`), platform-only (`BUGBOT.md`, `CLAUDE.md`) |
 
 ## Where to put a new rule

package/presets/claude/svelte/rules/tooling-and-review/preset-no-cross-stack-leakage.md

@@ -1,5 +1,5 @@
 ---
-description: Preset authoring: forbid cross-stack agent/path leakage in hooks and agents.
+description: "Preset authoring: forbid cross-stack agent/path leakage in hooks and agents."
 paths:
   - packages/ai-rules/presets/**/*
   - .cursor/rules/**/*

package/presets/claude/svelte/rules/tooling-and-review/preset-pr-checklist.md

@@ -1,5 +1,5 @@
 ---
-description: Preset authoring: PR checklist for twin sync, budget, leakage, README. Use on preset PRs.
+description: "Preset authoring: PR checklist for twin sync, budget, leakage, README. Use on preset PRs."
 paths:
   - packages/ai-rules/presets/**/*
   - .cursor/rules/**/*
@@ -20,7 +20,7 @@ Checklist for PRs that touch `packages/ai-rules/presets/**` (and dogfood `.curso
 - [ ] **Mavis derive:** mapped `cursor/<stack>/` change → `mavis/<stack>/` + `adapter-map.json` **same PR** when the stack is in `releasedStacks` (run `generate-mavis.mjs --stack <stack>` + `check-mavis-adapter-map.mjs`; see `preset-twin-sync` § Mavis derivation)
 - [ ] **OpenCode derive:** mapped `cursor/<stack>/` change → `opencode/<stack>/` + `adapter-map.json` **same PR** when the stack is in `releasedStacks` (run `generate-opencode.mjs --stack <stack>` + `check-opencode-adapter-map.mjs`; see `preset-twin-sync` § OpenCode derivation)
 - [ ] **Mapping:** `claude/<stack>/rules/README.md` mapping table is current
-- [ ] **Token budget:** Cursor `alwaysApply` ≤ 4 (4th slot reserved for `ai-local-overlay`); Claude session-start exactly 3; meta rules not always-on
+- [ ] **Token budget:** Cursor `alwaysApply` and Claude session-start both **3–5** (extra slots reserved for `ai-local-overlay`); body sum ≤200 (stretch ≤170); meta rules not always-on
 - [ ] **Local overlay coverage:** every installable stack ships `ai-local-overlay.mdc` (Cursor) and `ai-local-overlay.md` (Claude) with `MANDATORY` + acknowledgement format + `docs/LOCAL-OVERLAY.md` pointer; Claude twin listed in `claude/<stack>/rules/README.md` mapping table. Run `packages/ai-rules/scripts/check-local-overlay.sh`.
 - [ ] **Leakage:** no foreign stack agent stems / handoff strings (`preset-no-cross-stack-leakage`)
 - [ ] **Hook-only lifecycle:** `status.json` / `metrics.json` writes happen only inside `hooks/`; agents read but never rewrite lifecycle fields. Run `packages/ai-rules/scripts/check-hook-only-lifecycle.sh`.

package/presets/claude/svelte/rules/tooling-and-review/preset-token-budget.md

@@ -1,5 +1,5 @@
 ---
-description: Preset authoring: ≤3 always-on / session-start; meta rules never alwaysApply.
+description: "Preset authoring: ≤3 always-on / session-start; meta rules never alwaysApply."
 paths:
   - packages/ai-rules/presets/**/*
   - .cursor/rules/**/*
@@ -16,19 +16,19 @@ Invariants for rule loading in an **installed** preset (consumer app).
 
 | Platform | Always-on | Cap |
 |----------|-----------|-----|
-| Cursor | `alwaysApply: true` | **≤ 4** |
-| Claude | rules **without** `paths:` | **exactly 3** |
-| Mavis | `adapter-map` rules with `loadMode: root-entry` | **≤ 4** |
-| OpenCode | `adapter-map` rules with `loadMode: root-entry` | **≤ 4** |
+| Cursor | `alwaysApply: true` | **3–5** |
+| Claude | rules **without** `paths:` | **3–5** |
+| Mavis | `adapter-map` rules with `loadMode: root-entry` | **3–5** |
+| OpenCode | `adapter-map` rules with `loadMode: root-entry` | **3–5** |
 
-**Cursor 4th slot is reserved for `ai-local-overlay`** (consumer-owned `.ai.local/` rules). If you do not need local overlay, demote that rule to `globs: ["**/.ai.local/**"]` and revert to ≤3.
+Caps are **aligned** across platforms: minimum **3** (base invariants), maximum **5**. Slots beyond the base invariants are reserved for `ai-local-overlay` (consumer-owned `.ai.local/` rules). If you do not need local overlay, demote that rule to `globs: ["**/.ai.local/**"]` / Claude `paths:`, or a non-root load mode on Mavis / OpenCode.
 
-**Claude Option A (README exclusion):** when counting Claude rules without `paths:` / session-start, **exclude `**/README.md`** (topic indexes are not session-start rules). The intended session-start trio remains **exactly 3**; body budget sums **only those 3** rules.
+**Claude Option A (README exclusion):** when counting Claude rules without `paths:` / session-start, **exclude `**/README.md`** (topic indexes are not session-start rules). Body budget sums only the intended session-start rules (≤5).
 
 Session-start body budget:
-- Claude trio: ≤140 lines total (stretch ≤120).
-- Cursor 4-set: ≤170 lines total (4 rules including `ai-local-overlay`).
-- Mavis / OpenCode: ≤4 root-entry rule files; combined root `AGENTS.md` + platform entry ≤170 nonempty lines. Do not dump the full rule catalog into `AGENTS.md`.
+- Claude session-start: ≤200 lines total (stretch ≤170).
+- Cursor always-on: ≤200 lines total (stretch ≤170).
+- Mavis / OpenCode: ≤5 root-entry rule files; combined root `AGENTS.md` + platform entry ≤200 nonempty lines. Do not dump the full rule catalog into `AGENTS.md`.
 
 ## Meta / author rules
 
@@ -44,4 +44,4 @@ Orchestrator, feature-delivery, code-review, post-change gates, domain globs —
 
 ## Verifier
 
-build-verifier **FAIL** if Cursor `alwaysApply` count exceeds 4, Claude session-start count exceeds 3 (Claude count **excludes `**/README.md`**), or if a `preset-*` meta rule is marked always-on.
+build-verifier **FAIL** if Cursor `alwaysApply` count or Claude session-start count is outside **3–5** (Claude count **excludes `**/README.md`**), or if a `preset-*` meta rule is marked always-on.