@bonesofspring/ai-rules 0.2.26 → 0.2.28

package/presets/opencode/php-hexagonal/rules/README.md

@@ -4,8 +4,13 @@ Plain Markdown. OpenCode does **not** auto-load these files. Root `AGENTS.md`
 and `.opencode/AGENTS.md` list four essential paths to Read immediately; the
 rest are lazy-loaded when the task matches.
 
-Do not put this catalog into `opencode.json` `instructions` as the only
-always-on path (V2 may ignore that field).
+Subagent tasks (`Task`/`@name`) start blank and never read these rule files;
+the **authoritative** mechanism is the `## Rules to load (subagent context)`
+block injected into every `.opencode/agents/*.md`. The preset also adds a
+compact `opencode.json` `instructions` list (alwaysOn paths +
+`.opencode/AGENTS.md`) as a hedge for the parent context, with
+`bin/opencode-install.js` filling-if-absent on re-init; do **not** treat
+`instructions` as the only always-on path (V2 may ignore the field).
 
 ## Essential (entry-critical)
 

package/presets/opencode/php-hexagonal/rules/agent-team-intake.md

@@ -9,3 +9,7 @@ When the user message looks like a **work request** (implement, add, fix, refact
 3. Pure questions (“how does X work”, “explain”) — prefer agent **`codebase-analyzer`** (explain-as-is); trivial one-liners may be answered inline. Do not open `/task`.
 
 Exceptions: user explicitly says “no pipeline”, “just do it”, or continues an active slug.
+
+## Stack notes
+
+- Scope: PHP services (`src/**`, `Composition/`, `Composition/*`) — hexagonal ports/adapters — not Playwright/XCUITest UI flows.

package/presets/opencode/php-hexagonal/rules/code-quality-and-refactoring.md

@@ -14,6 +14,12 @@
 - **CUPID:** Composable; Unix philosophy (one responsibility); Predictable; Idiomatic (repo); Domain-based.
 - **Composition over inheritance;** Law of Demeter — no `a.b.c.d` chains; via public API / facade.
 
+# Over-abstraction guardrails
+
+- **No unnecessary constants:** do not hoist a one-off literal, string, or boolean into a named constant. Inline it, or use an existing token/enum when the value is meaningful and reused. Named constants are for shared, semantic, or repeated values.
+- **No invented utilities:** do not add a `utils`/helper for a single call site or a thin pass-through wrapper. Inline it or extend the existing helper; a new shared utility is justified only after the Rule of Three.
+- **Decompose over conditionals:** a unit (function, component, hook) that accumulates several branches (`if` / ternary / `switch`) should be split into smaller units with one reason to change instead of piling up conditions.
+
 # Refactoring during changes
 
 - Light refactor is OK if it reduces duplication, improves readability, and does not break public contracts.
@@ -38,3 +44,12 @@ Essentials below. Full procedural set (~17 rules) → load **`anti-sycophancy-di
 Style enforcement (formatter / linter / post-change gate) lives in the **stack toolchain** — see each adapter’s **Stack notes**.
 
 > Stack-specific lint gates, examples, and toolchain — in the preset adapter **Stack notes** section.
+
+## Stack notes
+
+- **No UI layer in this preset** — ignore shared-core bullets about design system / UI packages / CSS tokens; apply public-API and boy-scout rules to PHP packages/ports instead.
+- Public API between packages: exported types in module API or explicit ports — avoid deep imports of another feature's internals.
+- Prefer checked/unchecked exceptions with clear translation at adapter edges; do not leak persistence exceptions upward.
+- Interfaces belong at **ports** (consumer side), not on every class; prefer composition over inheritance.
+- Post-change gate: **`post-change-test.mdc`** + **`php-tooling.mdc`** (not yarn lint / xcodebuild / Playwright).
+- Style/static analysis: use **repository/CI** formatter and checks — do not invent a parallel PHP-CS-Fixer/PHPStan bible in rules.

package/presets/opencode/php-hexagonal/rules/code-review-mr.md

@@ -38,3 +38,12 @@ Procedure details live in skill `code-review`. Required shape:
 - Rank by severity: **`blocker` | `important` | `nit`** (list blocker → nit).
 - Vague («looks risky») is not a finding — cite evidence or ask for surrounding file context.
 - End with a verdict on its own line: **`Safe to merge | needs changes | reject`**.
+
+## Stack notes
+
+- Hexagonal boundaries: `architecture-boundaries`, `domain-layer`, ports vs adapters; framework/ORM only at edges.
+- HTTP DTO validation/mapping and persistence entity isolation: `api-http`, `persistence-adapters`.
+- Composition root (`Composition/`, `Composition/*`) has no business logic.
+- Tests: `tests-unit` (PHPUnit), `tests-integration` (integration DB fixtures); post-change: `post-change-test` / `php-tooling`.
+- Security: secrets/PII/`security-php`; framework Security config stays out of domain.
+- Never require Playwright, XCUITest, `lint:js`, or `xcodebuild` for PHP MRs.

package/presets/opencode/php-hexagonal/rules/design-guidance.md

@@ -97,3 +97,9 @@ Do not introduce a second stem (`refactoring-smells` / `design-patterns-for-agen
 - Ubiquitous language: `feature-delivery-workflow` (lineage).
 - MR checklist (smells in scope; pattern name only if repo uses it): `code-review-mr`.
 - Token / twin policy for authors: `preset-token-budget`, `preset-twin-sync` (meta, not consumer always-on).
+
+## Stack notes
+
+- Strategy via small interfaces at **ports**; adapters (framework/ORM/HTTP) implement, domain stays free of frameworks.
+- Suggest Facade at package public API; avoid Singleton in favor of composition root / `@Configuration` wiring.
+- Prefer records / immutable VOs for Strategy inputs when the repo already uses them — do not invent patterns mid-module.

package/presets/opencode/php-hexagonal/rules/mcp-usage.md

@@ -84,3 +84,9 @@ Policy is stack-class-specific — see adapter **Stack notes**. If a Figma **plu
 - Treating overlay absence as blocked (except user-required SoT)
 - Tracker/admin write tools without an explicit ask
 - Calling overlay MCP “just in case” on unrelated tasks
+
+## Stack notes
+
+- Shipped MCP is Context7 only. Do **not** require Storybook, Playwright, Chrome DevTools, or Figma as delivery gates.
+- Observability and ticket overlays still apply when present.
+- `init` **merges** `mcpServers`: preset keys update; extra local servers are kept.

package/presets/opencode/php-hexagonal/rules/preset-layering.md

@@ -9,7 +9,7 @@ Rules for **preset authors** (`packages/ai-rules/presets/**`). Not always-on in
 | Layer | Where | What to put |
 |-------|-------|-------------|
 | **Core** | `presets/_shared/core/**` | Stack-agnostic prose + checklists; no frontmatter; no paths `app/**`, `Features/**`, Playwright, xcodebuild |
-| **Stack** | `presets/{cursor\|claude\|mavis\|opencode}/<stack>/` | Domain/tooling, stack always-on trio, stack examples in **Stack notes** |
+| **Stack** | `presets/{cursor\|claude\|mavis\|opencode}/<stack>/` | Domain/tooling, stack always-on set (3–5), stack examples in **Stack notes** |
 | **Platform** | Cursor `.mdc` / Claude `.md` / Mavis `.md` / OpenCode `.md` | Frontmatter (`alwaysApply`/`globs` vs `paths:` vs OpenCode `mode`/`permission`), platform-only (`BUGBOT.md`, `CLAUDE.md`) |
 
 ## Where to put a new rule

package/presets/opencode/php-hexagonal/rules/preset-pr-checklist.md

@@ -12,7 +12,7 @@ Checklist for PRs that touch `packages/ai-rules/presets/**` (and dogfood `.curso
 - [ ] **Mavis derive:** mapped `cursor/<stack>/` change → `mavis/<stack>/` + `adapter-map.json` **same PR** when the stack is in `releasedStacks` (run `generate-mavis.mjs --stack <stack>` + `check-mavis-adapter-map.mjs`; see `preset-twin-sync` § Mavis derivation)
 - [ ] **OpenCode derive:** mapped `cursor/<stack>/` change → `opencode/<stack>/` + `adapter-map.json` **same PR** when the stack is in `releasedStacks` (run `generate-opencode.mjs --stack <stack>` + `check-opencode-adapter-map.mjs`; see `preset-twin-sync` § OpenCode derivation)
 - [ ] **Mapping:** `claude/<stack>/rules/README.md` mapping table is current
-- [ ] **Token budget:** Cursor `alwaysApply` ≤ 4 (4th slot reserved for `ai-local-overlay`); Claude session-start exactly 3; meta rules not always-on
+- [ ] **Token budget:** Cursor `alwaysApply` and Claude session-start both **3–5** (extra slots reserved for `ai-local-overlay`); body sum ≤200 (stretch ≤170); meta rules not always-on
 - [ ] **Local overlay coverage:** every installable stack ships `ai-local-overlay.mdc` (Cursor) and `ai-local-overlay.md` (Claude) with `MANDATORY` + acknowledgement format + `docs/LOCAL-OVERLAY.md` pointer; Claude twin listed in `claude/<stack>/rules/README.md` mapping table. Run `packages/ai-rules/scripts/check-local-overlay.sh`.
 - [ ] **Leakage:** no foreign stack agent stems / handoff strings (`preset-no-cross-stack-leakage`)
 - [ ] **Hook-only lifecycle:** `status.json` / `metrics.json` writes happen only inside `hooks/`; agents read but never rewrite lifecycle fields. Run `packages/ai-rules/scripts/check-hook-only-lifecycle.sh`.

package/presets/opencode/php-hexagonal/rules/preset-token-budget.md

@@ -8,19 +8,19 @@ Invariants for rule loading in an **installed** preset (consumer app).
 
 | Platform | Always-on | Cap |
 |----------|-----------|-----|
-| Cursor | `alwaysApply: true` | **≤ 4** |
-| Claude | rules **without** `paths:` | **exactly 3** |
-| Mavis | `adapter-map` rules with `loadMode: root-entry` | **≤ 4** |
-| OpenCode | `adapter-map` rules with `loadMode: root-entry` | **≤ 4** |
+| Cursor | `alwaysApply: true` | **3–5** |
+| Claude | rules **without** `paths:` | **3–5** |
+| Mavis | `adapter-map` rules with `loadMode: root-entry` | **3–5** |
+| OpenCode | `adapter-map` rules with `loadMode: root-entry` | **3–5** |
 
-**Cursor 4th slot is reserved for `ai-local-overlay`** (consumer-owned `.ai.local/` rules). If you do not need local overlay, demote that rule to `globs: ["**/.ai.local/**"]` and revert to ≤3.
+Caps are **aligned** across platforms: minimum **3** (base invariants), maximum **5**. Slots beyond the base invariants are reserved for `ai-local-overlay` (consumer-owned `.ai.local/` rules). If you do not need local overlay, demote that rule to `globs: ["**/.ai.local/**"]` / Claude `paths:`, or a non-root load mode on Mavis / OpenCode.
 
-**Claude Option A (README exclusion):** when counting Claude rules without `paths:` / session-start, **exclude `**/README.md`** (topic indexes are not session-start rules). The intended session-start trio remains **exactly 3**; body budget sums **only those 3** rules.
+**Claude Option A (README exclusion):** when counting Claude rules without `paths:` / session-start, **exclude `**/README.md`** (topic indexes are not session-start rules). Body budget sums only the intended session-start rules (≤5).
 
 Session-start body budget:
-- Claude trio: ≤140 lines total (stretch ≤120).
-- Cursor 4-set: ≤170 lines total (4 rules including `ai-local-overlay`).
-- Mavis / OpenCode: ≤4 root-entry rule files; combined root `AGENTS.md` + platform entry ≤170 nonempty lines. Do not dump the full rule catalog into `AGENTS.md`.
+- Claude session-start: ≤200 lines total (stretch ≤170).
+- Cursor always-on: ≤200 lines total (stretch ≤170).
+- Mavis / OpenCode: ≤5 root-entry rule files; combined root `AGENTS.md` + platform entry ≤200 nonempty lines. Do not dump the full rule catalog into `AGENTS.md`.
 
 ## Meta / author rules
 
@@ -36,4 +36,4 @@ Orchestrator, feature-delivery, code-review, post-change gates, domain globs —
 
 ## Verifier
 
-build-verifier **FAIL** if Cursor `alwaysApply` count exceeds 4, Claude session-start count exceeds 3 (Claude count **excludes `**/README.md`**), or if a `preset-*` meta rule is marked always-on.
+build-verifier **FAIL** if Cursor `alwaysApply` count or Claude session-start count is outside **3–5** (Claude count **excludes `**/README.md`**), or if a `preset-*` meta rule is marked always-on.

package/presets/opencode/php-hexagonal/rules/product-specs-authoring.md

@@ -110,3 +110,9 @@ Block handoff via `open_questions` until fixed:
 - Skill `spec-authoring` — procedural checklist
 - Skill `spec-discovery` — opt-in research-before-spec (not default)
 - Optional consumer script `scripts/check-product-specs.sh` (ships in the npm package; WARN default; `--strict` FAIL). Bash checks INDEX links, required frontmatter keys, and body headings — it does **not** evaluate `frontmatter-v1.schema.json`
+
+## Stack notes
+
+- Author via skill `spec-authoring`; prefer `type: feature`; `ui`/`store` usually `[]`.
+- **Forbidden:** web UI / Playwright path recipes.
+- Requestable — not always-on / session-start.

package/presets/opencode/php-hexagonal/rules/product-specs.md

@@ -54,3 +54,9 @@ Same-changeset INDEX updates, frontmatter v1, required body headings, templates,
 - Skill `spec-discovery` — opt-in research-before-spec (author mode only; not default consume).
 - `reference-features` — code structure mirror (how to layout files), not product behavior.
 - Consumer `.ai/context/**` when present — review/domain glossary; cross-link, do not replace.
+
+## Stack notes
+
+- `routes`: HTTP paths. `ui` / `store`: usually `[]` (or handler/port labels). `e2e`: integration/contract test paths.
+- **Forbidden:** requiring `app/src/ui`, Playwright paths, or Next lint recipes.
+- Requestable / `docs/specs/**` globs — not always-on / session-start.

package/presets/opencode/php-hexagonal/skills/ci-investigation/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: ci-investigation
-description: Investigates failing CI checks on PRs and branches — composer test / vendor/bin/phpunit (Pest if present), optional PHPStan/Psalm, integration, preset-structure — with local reproduction and minimal fixes. Use when CI is red or for ci-fix pipeline tasks.
+description: "Investigates failing CI checks on PRs and branches — composer test / vendor/bin/phpunit (Pest if present), optional PHPStan/Psalm, integration, preset-structure — with local reproduction and minimal fixes. Use when CI is red or for ci-fix pipeline tasks."
 ---
 
 # CI investigation (PHP)

package/presets/opencode/php-hexagonal/skills/code-review/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: code-review
-description: Reviews pull requests and branch diffs for PHP hexagonal services using architecture, ports/adapters, networking, and testing standards. Use when the user asks for review or when code-reviewer runs.
+description: "Reviews pull requests and branch diffs for PHP hexagonal services using architecture, ports/adapters, networking, and testing standards. Use when the user asks for review or when code-reviewer runs."
 ---
 
 # Code review (PHP)

package/presets/opencode/php-hexagonal/skills/debug-investigation/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: debug-investigation
-description: Investigates bugs, failing tests, and unexpected behavior in PHP services with runtime evidence before applying minimal fixes. Use for bugfix tasks, debugger agent runs, or regressions.
+description: "Investigates bugs, failing tests, and unexpected behavior in PHP services with runtime evidence before applying minimal fixes. Use for bugfix tasks, debugger agent runs, or regressions."
 ---
 
 <!-- shared-core: quality/debug-investigation.md -->

package/presets/opencode/php-hexagonal/skills/feature-delivery/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: feature-delivery
-description: Delivers PHP hexagonal backend features end-to-end across domain, application/ports, adapters, composition root, tests, and post-change-test validation. Use when implementing or extending a feature, especially through /task or feature-developer.
+description: "Delivers PHP hexagonal backend features end-to-end across domain, application/ports, adapters, composition root, tests, and post-change-test validation. Use when implementing or extending a feature, especially through /task or feature-developer."
 ---
 
 # Feature Delivery (PHP hexagonal)

package/presets/opencode/php-hexagonal/skills/integration-testing/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: integration-testing
-description: Plans, generates, and heals PHP integration and adapter contract tests (HTTP controller tests, integration DB fixtures). Use for integration-test-* agents or adapter/e2e coverage.
+description: "Plans, generates, and heals PHP integration and adapter contract tests (HTTP controller tests, integration DB fixtures). Use for integration-test-* agents or adapter/e2e coverage."
 ---
 
 # Integration testing (PHP)

package/presets/opencode/php-hexagonal/skills/spec-authoring/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: spec-authoring
-description: Author or bootstrap consumer docs/specs (INDEX, page/feature templates, frontmatter v1). Use with task-analyst author mode, /spec-start, or when brief AC requests Generate/Bootstrap.
+description: "Author or bootstrap consumer docs/specs (INDEX, page/feature templates, frontmatter v1). Use with task-analyst author mode, /spec-start, or when brief AC requests Generate/Bootstrap."
 ---
 
 # Spec authoring

package/presets/opencode/php-hexagonal/skills/spec-discovery/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: spec-discovery
-description: Opt-in research-before-spec for task-analyst author mode. 11 named methods plus a mandatory claim ledger. Use when the user or AC asks discovery before generating docs/specs — not default /task consume.
+description: "Opt-in research-before-spec for task-analyst author mode. 11 named methods plus a mandatory claim ledger. Use when the user or AC asks discovery before generating docs/specs — not default /task consume."
 ---
 
 # Spec discovery

package/presets/opencode/php-hexagonal/skills/technical-retro/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: technical-retro
-description: Facilitates technical retrospectives for tasks, sprints, incidents, releases, and agent-team pipelines. Use when the user asks for retro, postmortem, process review, or action items after delivery.
+description: "Facilitates technical retrospectives for tasks, sprints, incidents, releases, and agent-team pipelines. Use when the user asks for retro, postmortem, process review, or action items after delivery."
 ---
 
 # Technical Retro

package/presets/opencode/php-hexagonal/skills/unit-testing/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: unit-testing
-description: Plans, generates, and heals parameterized PHPUnit unit tests for domain, use cases, and mappers using *Test.php and tests-unit rules. Use for unit-test planning, generation, or healing.
+description: "Plans, generates, and heals parameterized PHPUnit unit tests for domain, use cases, and mappers using *Test.php and tests-unit rules. Use for unit-test planning, generation, or healing."
 ---
 
 # Unit testing (PHP)

package/presets/opencode/php-hexagonal/skills/write-adr/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: write-adr
-description: Author an Architecture Decision Record (ADR) with Context, Decision, Consequences, and Links. Use when capturing a durable technical choice for the team.
+description: "Author an Architecture Decision Record (ADR) with Context, Decision, Consequences, and Links. Use when capturing a durable technical choice for the team."
 ---
 
 # Write ADR

package/presets/opencode/php-laravel/OPENCODE.md

@@ -24,6 +24,19 @@ Root `AGENTS.md` is native always-on. Read it first, then this file.
 
 See `.opencode/rules/README.md` for the full catalog and loading strategy.
 
+## Harness wiring
+
+- `opencode.json` carries a compact `instructions` list (always-on rule
+  paths + `.opencode/AGENTS.md`) and a harness-level `permission.bash`
+  block. On re-init, `mergeOpencodeConfig` unions preset instruction paths
+  into the consumer list and fills missing bash keys. Extra paths and
+  same-key overrides stay.
+- **Subagent rules** are re-declared inside every `.opencode/agents/*.md`
+  via the `## Rules to load (subagent context)` block (always-on + zone
+  rules filtered to stems that exist for this stack). `Task`-launched
+  subagents do not inherit the parent's `instructions`, so this block
+  is the authoritative mechanism.
+
 **Platform docs:** published with the `@bonesofspring/ai-rules` package
 (`docs/OPENCODE.md`, `docs/OPENCODE-COMPATIBILITY.md`) — **not** copied into
 the consumer repo. Source: https://github.com/bonesofspring/ai-rules
@@ -50,4 +63,5 @@ npx @bonesofspring/ai-rules init opencode --preset php-laravel
 
 Copies rules, commands, agents, hooks, skills, `OPENCODE.md` →
 `.opencode/AGENTS.md`, `MCP.md`, `opencode.json` → project `opencode.json`
-(`mcp` merge), plus `REPO_AGENTS.md` → root `AGENTS.md`. Seeds `.ai.local/team/`.
+(`mcp` merge, instruction-path union, missing bash keys), plus
+`REPO_AGENTS.md` → root `AGENTS.md`. Seeds `.ai.local/team/`.

package/presets/opencode/php-laravel/adapter-map.json

@@ -3,7 +3,7 @@
   "platform": "opencode",
   "stack": "php-laravel",
   "semanticSource": "cursor/php-laravel",
-  "sourceRevision": "5698bcaa527331354cbb52e3640be3cf30ef9bd64483906b77ea2f17ae3c26d6",
+  "sourceRevision": "c9cb7fb568009a1d15b619b194f62899cd25e1b9a2349c8fb1b4d737b778414a",
   "entries": [
     {
       "source": "AGENTS.md",
@@ -314,7 +314,7 @@
       "category": "mcp",
       "disposition": "transform",
       "loadMode": "manual",
-      "reason": "Cursor mcp.json → opencode.json mcp (local/remote types)"
+      "reason": "Cursor mcp.json → opencode.json mcp (local/remote types); emits permission.bash + compact instructions"
     },
     {
       "source": "rules/actions-services.mdc",

package/presets/opencode/php-laravel/agents/api-contract-reviewer.md

@@ -10,6 +10,24 @@ permission:
 
 Write only team artifacts under `.ai.local/team/**`. Do not edit production code.
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/laravel-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.opencode/rules/http-layer.md`
+- `.opencode/rules/routes-api.md`
+- `.opencode/rules/form-requests.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Review **HTTP/gRPC contract alignment** for Laravel services.
 
 ## Focus

package/presets/opencode/php-laravel/agents/build-verifier.md

@@ -10,6 +10,23 @@ permission:
 
 Write only team artifacts under `.ai.local/team/**`. Do not edit production code.
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/laravel-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.opencode/rules/php-tooling.md`
+- `.opencode/rules/post-change-test.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are the build verifier for **Laravel** services (and for **ai-rules preset packaging** when scope says so).
 
 ## Consumer Laravel / PHP repos
@@ -41,7 +58,7 @@ Hard gates for the **php-laravel** stack (and peers):
 | Gate | FAIL when |
 |------|-----------|
 | **twin-map** | `php-laravel` missing from `STACKS`, or Cursor↔Claude orphan/missing twins |
-| **token-budget** | Cursor `alwaysApply` ≠ 3 or Claude session-start (excl. README) ≠ 3, or trio body sum > 140 |
+| **token-budget** | Cursor/Claude always-on count outside 3–5 (extra slots = `ai-local-overlay`), or body sum > 200 |
 | **leakage** | `PHP_FORBIDDEN_*` hits (Playwright/XCUITest/`lint:js`/`accessibility-reviewer` / `mockup-reviewer` as required handoffs) |
 | **chain fork** | `hooks/chain-team-phases.sh` byte-identical to **next**, **ios-swift**, **go**, **java**, **mcp-ts**, or **php-hexagonal** (same platform) |
 

package/presets/opencode/php-laravel/agents/ci-investigator.md

@@ -6,6 +6,35 @@ permission:
   edit: allow
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/laravel-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.opencode/rules/domain-layer.md`
+- `.opencode/rules/actions-services.md`
+- `.opencode/rules/eloquent-persistence.md`
+- `.opencode/rules/events-listeners.md`
+- `.opencode/rules/jobs-queues.md`
+- `.opencode/rules/laravel-conventions.md`
+- `.opencode/rules/module-public-api.md`
+- `.opencode/rules/policies-authorization.md`
+- `.opencode/rules/service-providers.md`
+- `.opencode/rules/http-layer.md`
+- `.opencode/rules/routes-api.md`
+- `.opencode/rules/form-requests.md`
+- `.opencode/rules/php-tooling.md`
+- `.opencode/rules/post-change-test.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Triage red CI for PHP repos (and ai-rules preset-structure when relevant).
 
 ## Steps

package/presets/opencode/php-laravel/agents/code-reviewer.md

@@ -10,6 +10,22 @@ permission:
 
 Write only review artifacts under `.ai.local/team/**`. Do not edit production code.
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/laravel-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.opencode/rules/code-review-mr.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are a senior Laravel code reviewer. Write only review artifacts under `.ai.local/team/**`; do not modify production code.
 
 ## Inputs

package/presets/opencode/php-laravel/agents/codebase-analyzer.md

@@ -10,6 +10,21 @@ permission:
 
 Write only team artifacts under `.ai.local/team/**`. Do not edit production code.
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/laravel-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are a specialist at understanding HOW this Laravel service works. Document implementation details with precise `path:line` references.
 
 ## CRITICAL — explain as-is only

package/presets/opencode/php-laravel/agents/debugger.md

@@ -6,6 +6,35 @@ permission:
   edit: allow
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/laravel-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.opencode/rules/domain-layer.md`
+- `.opencode/rules/actions-services.md`
+- `.opencode/rules/eloquent-persistence.md`
+- `.opencode/rules/events-listeners.md`
+- `.opencode/rules/jobs-queues.md`
+- `.opencode/rules/laravel-conventions.md`
+- `.opencode/rules/module-public-api.md`
+- `.opencode/rules/policies-authorization.md`
+- `.opencode/rules/service-providers.md`
+- `.opencode/rules/http-layer.md`
+- `.opencode/rules/routes-api.md`
+- `.opencode/rules/form-requests.md`
+- `.opencode/rules/php-tooling.md`
+- `.opencode/rules/post-change-test.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Investigate with **runtime evidence**: failing `composer test` / `vendor/bin/phpunit` output, logs, stack traces, minimal repro.
 
 Use the **`debug-investigation` skill** for the investigation loop.

package/presets/opencode/php-laravel/agents/feature-developer.md

@@ -6,6 +6,35 @@ permission:
   edit: allow
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/laravel-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.opencode/rules/domain-layer.md`
+- `.opencode/rules/actions-services.md`
+- `.opencode/rules/eloquent-persistence.md`
+- `.opencode/rules/events-listeners.md`
+- `.opencode/rules/jobs-queues.md`
+- `.opencode/rules/laravel-conventions.md`
+- `.opencode/rules/module-public-api.md`
+- `.opencode/rules/policies-authorization.md`
+- `.opencode/rules/service-providers.md`
+- `.opencode/rules/http-layer.md`
+- `.opencode/rules/routes-api.md`
+- `.opencode/rules/form-requests.md`
+- `.opencode/rules/php-tooling.md`
+- `.opencode/rules/post-change-test.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Implement Laravel features following Laravel-first layer boundaries.
 
 ## Order

package/presets/opencode/php-laravel/agents/integration-test-generator.md

@@ -6,6 +6,23 @@ permission:
   edit: allow
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/laravel-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.opencode/rules/tests-integration.md`
+- `.opencode/rules/tests-e2e.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are the **integration-test-generator** for Laravel services.
 
 ## Scope

package/presets/opencode/php-laravel/agents/integration-test-healer.md

@@ -6,6 +6,23 @@ permission:
   edit: allow
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/laravel-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.opencode/rules/tests-integration.md`
+- `.opencode/rules/tests-e2e.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are the **integration-test-healer** for Laravel services.
 
 ## Scope

package/presets/opencode/php-laravel/agents/integration-test-planner.md

@@ -10,6 +10,23 @@ permission:
 
 Write only team artifacts under `.ai.local/team/**`. Do not edit production code.
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/laravel-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.opencode/rules/tests-integration.md`
+- `.opencode/rules/tests-e2e.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are the **integration-test-planner** for Laravel services.
 
 ## Scope

package/presets/opencode/php-laravel/agents/migration-specialist.md

@@ -10,6 +10,21 @@ permission:
 
 Write only team artifacts under `.ai.local/team/**`. Do not edit production code.
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/laravel-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You plan migrations for **PHP modules** (toolchain, deps, layout refactors). Do not edit production code.
 
 ## Inputs