@bonesofspring/ai-rules 0.2.27 → 0.2.29

package/presets/claude/mcp-ts/agents/feature-developer.md

@@ -4,6 +4,28 @@ description: Feature implementation specialist for TypeScript MCP servers. Imple
 readonly: false
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/mcp-ts-app-core.md`
+- `.claude/rules/architecture/mcp-server-boundaries.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.claude/rules/api-and-data/mcp-tool-design.md`
+- `.claude/rules/api-and-data/mcp-contract-testing.md`
+- `.claude/rules/api-and-data/mcp-auth-secrets.md`
+- `.claude/rules/api-and-data/mcp-transport-packaging.md`
+- `.claude/rules/stack/mcp-ts-conventions.md`
+- `.claude/rules/tooling-and-review/mcp-ts-tooling.md`
+- `.claude/rules/tooling-and-review/post-change-test.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Implement MCP server features following **mcp-ts** boundaries.
 
 ## Mandatory flow

package/presets/claude/mcp-ts/agents/security-reviewer.md

@@ -4,6 +4,21 @@ description: Security review specialist for TypeScript MCP servers. Audits tool
 readonly: false
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/mcp-ts-app-core.md`
+- `.claude/rules/architecture/mcp-server-boundaries.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Review MCP diffs against `security-mcp.mdc` and `mcp-auth-secrets.mdc`.
 
 ## Focus

package/presets/claude/mcp-ts/agents/solution-architect.md

@@ -4,6 +4,21 @@ description: Solution architect for TypeScript MCP servers. Designs tool/resourc
 readonly: false
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/mcp-ts-app-core.md`
+- `.claude/rules/architecture/mcp-server-boundaries.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Design MCP server changes for **mcp-ts**.
 
 ## Deliverable
@@ -25,4 +40,3 @@ Write `architecture.md` covering:
 ## MCP usage
 
 Load requestable rule `mcp-usage` when verifying third-party library APIs (Context7) or when a local overlay MCP is present and the task fits. Discover tools at runtime; do not invent schemas. Overlay absence is not a blocker unless the user required that MCP as source of truth.
-

package/presets/claude/mcp-ts/agents/task-analyst.md

@@ -4,6 +4,21 @@ description: Task analysis specialist. Clarifies requirements, validates accepta
 readonly: false
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/mcp-ts-app-core.md`
+- `.claude/rules/architecture/mcp-server-boundaries.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Analyze MCP server work requests for the **mcp-ts** preset.
 
 ## Classify first

package/presets/claude/mcp-ts/agents/task-router.md

@@ -5,6 +5,21 @@ readonly: false
 model: fast
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/mcp-ts-app-core.md`
+- `.claude/rules/architecture/mcp-server-boundaries.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/feature-delivery.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are a task router for a **TypeScript MCP server** agent team. You **do not** implement tasks — you classify intent and plan the agent pipeline.
 
 ## Inputs

package/presets/claude/mcp-ts/hooks/README.md

@@ -5,8 +5,13 @@
 | `guard-shell-command.sh` | Destructive git / JS package-manager mismatch; allows npm/npx/node/tsc |
 | `chain-team-phases.sh` | Auto-chain pipeline steps on `subagentStop` (Phase 1: build-verifier, security-reviewer; **no** `contract-test-*`) |
 
-Claude: register hooks per Claude Code project conventions.
+No `hooks.json`. Default chain and shell guard are registered in `.claude/settings.json` (see **Shipped wiring**). Cookbook scripts in `hooks/examples/` stay unwired.
 
-## Optional cookbook
+## Shipped wiring (Claude Code settings)
 
-See `hooks/examples/README.md` — secret-guard / format-edited / test-on-save. **Not** in default `hooks.json`.
+`.claude/settings.json` `hooks` (https://code.claude.com/docs/en/hooks) registers:
+
+- `PreToolUse` matcher `Bash` → `guard-shell-command.sh` (reads `tool_input.command`; emits `permissionDecision` `ask` or `allow`)
+- `SubagentStop` → `chain-team-phases.sh` (kebab-case `agent_type` maps to `status: completed`; empty or non-kebab types are ignored; `stop_hook_active` does not recurse)
+
+There is no `hooks.json`. Cookbook scripts under `hooks/examples/` stay unwired. A hook crash is not a deny (Cursor `failClosed` has no Claude field); `ask` is the supported review decision.

package/presets/claude/mcp-ts/hooks/chain-team-phases.sh

@@ -23,6 +23,24 @@ try {
   process.exit(0);
 }
 
+// Claude Code SubagentStop has hook_event_name / agent_type / stop_hook_active, not status.
+// Kebab-case agent_type (preset roles) is the completed signal. Empty or non-kebab
+// types (Claude internal agents) do not advance the pipeline. stop_hook_active
+// means this hook already continued the turn — do not recurse.
+// Manual pipes of {"status":"completed"} skip this block.
+if (hookInput.hook_event_name === 'SubagentStop') {
+  if (hookInput.stop_hook_active === true) {
+    process.stdout.write('{}');
+    process.exit(0);
+  }
+  const agentType = typeof hookInput.agent_type === 'string' ? hookInput.agent_type : '';
+  if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(agentType)) {
+    process.stdout.write('{}');
+    process.exit(0);
+  }
+  if (hookInput.status == null) hookInput.status = 'completed';
+}
+
 if (hookInput.status !== 'completed') {
   process.stdout.write('{}');
   process.exit(0);

package/presets/claude/mcp-ts/hooks/examples/README.md

@@ -9,3 +9,8 @@ Optional cookbook scripts — **not** wired into default `hooks.json`.
 | `test-on-save.example.sh` | Run scoped tests after edits |
 
 Adapt commands to the repository package manager (`mcp-ts-tooling`).
+
+
+## Wiring (Claude Code)
+
+Default `.claude/settings.json` already registers `guard-shell-command.sh` on `PreToolUse` (matcher `Bash`) and `chain-team-phases.sh` on `SubagentStop`. The cookbook scripts above are not in that default set. There is no `hooks.json`.

package/presets/claude/mcp-ts/hooks/guard-shell-command.sh

@@ -19,20 +19,43 @@ try {
   process.exit(0);
 }
 
-const command = String(event.command || event.input?.command || '');
-if (!command.trim()) {
-  process.stdout.write('{ "permission": "allow" }');
-  process.exit(0);
-}
+const claudePreTool = event.hook_event_name === 'PreToolUse';
+const command = String(
+  event.command
+  || (event.input && event.input.command)
+  || (event.tool_input && event.tool_input.command)
+  || '',
+);
 
-function out(permission, userMessage, agentMessage) {
+function out(permission, userMessage) {
+  if (claudePreTool) {
+    const decision = permission === 'ask' || permission === 'deny' ? permission : 'allow';
+    const hookSpecificOutput = {
+      hookEventName: 'PreToolUse',
+      permissionDecision: decision,
+    };
+    if (userMessage && decision !== 'allow') {
+      hookSpecificOutput.permissionDecisionReason = userMessage;
+    }
+    process.stdout.write(JSON.stringify({ hookSpecificOutput }));
+    return;
+  }
+  if (!userMessage) {
+    process.stdout.write('{ "permission": "allow" }');
+    return;
+  }
   process.stdout.write(JSON.stringify({
     permission,
     user_message: userMessage,
-    agent_message: agentMessage || userMessage,
+    agent_message: userMessage,
   }));
 }
 
+if (!command.trim()) {
+  out('allow');
+  process.exit(0);
+}
+
 const dangerousGit = /\bgit\s+(reset\s+--hard|clean\s+-[^\n]*f|push\s+--force|push\s+-f|checkout\s+--\s+)/;
 if (dangerousGit.test(command)) {
   out(
@@ -61,7 +84,7 @@ if (!expected && fs.existsSync('package.json')) {
 }
 
 if (!expected) {
-  process.stdout.write('{ "permission": "allow" }');
+  out('allow');
   process.exit(0);
 }
 
@@ -75,5 +98,5 @@ if (used && used !== expected) {
   process.exit(0);
 }
 
-process.stdout.write('{ "permission": "allow" }');
+out('allow');
 NODE

package/presets/claude/mcp-ts/rules/README.md

@@ -12,7 +12,7 @@ Claude topic `.md` files are **derived** from Cursor SoT `presets/cursor/mcp-ts/
 
 ## Loading budget
 
-- **Session-start (no `paths:`):** 3–5 — `mcp-ts-app-core`, `mcp-server-boundaries`, `code-quality`
+- **Session-start (no `paths:`):** 3–5 — `mcp-ts-app-core`, `mcp-server-boundaries`, `code-quality`, `ai-local-overlay`
 - All others — with `paths:`
 - **Twin depth:** domain rules target ≥15 body lines; thin aliases: `agent-team-intake`, `technical-retro`
 

package/presets/claude/mcp-ts/rules/tooling-and-review/ai-local-overlay.md

@@ -1,10 +1,5 @@
 ---
 description: Local overlay from .ai.local/ (consumer-owned rules with priority over preset rules) — MANDATORY
-paths:
-  - "**/.ai.local/**"
-  - "**/AGENTS.md"
-  - "**/CLAUDE.md"
-alwaysApply: false
 impact: CRITICAL
 ---
 

package/presets/claude/mcp-ts/rules/tooling-and-review/preset-pr-checklist.md

@@ -30,7 +30,7 @@ Checklist for PRs that touch `packages/ai-rules/presets/**` (and dogfood `.curso
 - [ ] **README:** stack `rules/README.md` core→stack mapping / catalog updated if stems added
 - [ ] **CHANGELOG / package README:** note when public preset paths or install surface change
 - [ ] **i18n anchors:** kept-marked Cyrillic fragments in `tests-unit.md(c)` stay consistent with their English counterparts. Run `packages/ai-rules/scripts/check-preset-i18n.sh`.
-- [ ] **Dogfood:** run `packages/ai-rules/scripts/sync-dogfood-cursor.sh` (and `sync-dogfood-mavis.sh` / `sync-dogfood-opencode.sh` when those platforms changed), or document an intentional skip, when maintaining this monorepo
+- [ ] **Dogfood:** run `packages/ai-rules/scripts/sync-dogfood-cursor.sh`, `sync-dogfood-claude.sh`, `sync-dogfood-mavis.sh`, and `sync-dogfood-opencode.sh` when those platforms changed, or document an intentional skip, when maintaining this monorepo
 - [ ] **shared-core drift:** for embed-mode stems, run `packages/ai-rules/scripts/check-shared-core-drift.sh` (or document intentional fork)
 
 ## Pointers
@@ -40,6 +40,6 @@ Checklist for PRs that touch `packages/ai-rules/presets/**` (and dogfood `.curso
 - Budget: `preset-token-budget`
 - Leakage: `preset-no-cross-stack-leakage`
 - Validation: stack `agents/build-verifier.md` → preset-structure section
-- Dogfood scripts: `packages/ai-rules/scripts/sync-dogfood-cursor.sh`, `sync-dogfood-mavis.sh`, `sync-dogfood-opencode.sh`
+- Dogfood scripts: `packages/ai-rules/scripts/sync-dogfood-cursor.sh`, `sync-dogfood-claude.sh`, `sync-dogfood-mavis.sh`, `sync-dogfood-opencode.sh`
 - Drift script: `packages/ai-rules/scripts/check-shared-core-drift.sh`
 - Orchestrator: when editing presets, load this checklist + twin-sync

package/presets/claude/mcp-ts/settings.json

@@ -0,0 +1,33 @@
+{
+  "$schema": "https://json.schemastore.org/claude-code-settings.json",
+  "permissions": {
+    "deny": [
+      "Bash(git commit *)",
+      "Bash(git push *)"
+    ],
+    "ask": []
+  },
+  "hooks": {
+    "PreToolUse": [
+      {
+        "matcher": "Bash",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "${CLAUDE_PROJECT_DIR}/.claude/hooks/guard-shell-command.sh"
+          }
+        ]
+      }
+    ],
+    "SubagentStop": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "${CLAUDE_PROJECT_DIR}/.claude/hooks/chain-team-phases.sh"
+          }
+        ]
+      }
+    ]
+  }
+}

package/presets/claude/next/CLAUDE.md

@@ -9,7 +9,8 @@ See @rules/README.md for the full catalog and loading strategy.
 ## Conventions
 
 - **One topic per file**; for large areas — subfolders under `rules/<topic>/`.
-- **Session-start rules** (no `paths:`) — exactly **three**: `next-app-core`, `package-manager`, `code-quality`.
+- **Session-start rules** (no `paths:`) — 3–5: `next-app-core`, `package-manager`, `code-quality`, `ai-local-overlay`.
+- **Local overlay (session-start):** `ai-local-overlay` has no `paths:` and counts in the 3–5 budget. On every turn, probe `ls -la .ai.local`, apply `.ai.local/rules/*.md` and `.ai.local/conventions.md`, and acknowledge `Using .ai.local: <rule-name>`. Guide: `docs/LOCAL-OVERLAY.md`.
 - **Domain-specific rules** — YAML frontmatter `paths:` (loaded when matching files are in play); `post-change-lint` — requestable (**required after code edits**); orchestrator and code-review — on-demand.
 - Slash commands — in `commands/`; scenarios — in `skills/`; subagents — in `agents/`.
 
@@ -37,3 +38,16 @@ npx @bonesofspring/ai-rules init claude --preset next
 ```
 
 Copies `CLAUDE.md`, `rules/**`, `commands/**`, `agents/**`, `hooks/**`, `MCP.md` into `.claude/`; seeds `.ai.local/team/` from `team/` (slugs preserved), plus `mcp.json` → **`.mcp.json`** and `REPO_AGENTS.md` → root **`AGENTS.md`**. Skills: `write-adr`, `react-performance` (on-demand).
+
+## Harness wiring
+
+- **Subagent rules** are re-declared inside every `.claude/agents/*.md` via
+  the `## Rules to load (subagent context)` block (always-on + zone rules
+  filtered to stems that exist for this stack, using the nested
+  `.claude/rules/<topic>/<stem>.md` paths). Claude Code subagents inherit
+  no parent context, so this block is the authoritative mechanism.
+- `.claude/settings.json` ships harness-level denials (universal
+  `git commit/push deny`; JS stacks also `npx jest* deny` and `npm/npx/pnpm/bun`
+  ask). Re-init overwrites the file (consumer can edit afterwards); mirror
+  with root `AGENTS.md` if you change the harness.
+- **Pipeline hooks:** `.claude/settings.json` `hooks` wires `guard-shell-command.sh` (`PreToolUse` / `Bash`, `permissionDecision` `ask` or `allow`) and `chain-team-phases.sh` (`SubagentStop` for kebab-case `agent_type`). See `hooks/README.md`. No `hooks.json`.

package/presets/claude/next/REPO_AGENTS.md

@@ -71,4 +71,4 @@ A `.ai.local/` directory MAY exist at the repo root or at any nesting depth in m
 
 Plain markdown rules under `.ai.local/rules/*.md` are read by the agent with higher priority than preset rules. Living gotchas live in `.ai.local/conventions.md`.
 
-Authoring guide: `docs/LOCAL-OVERLAY.md` in the `@bonesofspring/ai-rules` package. The `ai-local-overlay` rule (always-on for Cursor, on-demand for Claude) is the mechanism; this `MANDATORY` section is the reinforcement.
+On every turn, probe `ls -la .ai.local`, apply `.ai.local/rules/*.md` and `.ai.local/conventions.md`, and acknowledge `Using .ai.local: <rule-name>`. Authoring guide: `docs/LOCAL-OVERLAY.md` in the `@bonesofspring/ai-rules` package. The `ai-local-overlay` rule is always-on on Cursor and session-start on Claude (no `paths:`). Mavis and OpenCode have no native `alwaysApply`; this section plus the platform entry's essential-rules list is the reinforcement.

package/presets/claude/next/agents/accessibility-reviewer.md

@@ -4,6 +4,23 @@ description: Accessibility review specialist. Audits UI changes for keyboard nav
 model: inherit
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/next-app-core.md`
+- `.claude/rules/tooling-and-review/package-manager.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/architecture/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/post-change-lint.md` — lint/type-check after code edits
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are an accessibility reviewer for a Next.js React frontend.
 
 ## Inputs

package/presets/claude/next/agents/api-contract-reviewer.md

@@ -4,6 +4,25 @@ description: API contract review specialist. Validates DTOs, mappers, mocks, and
 model: inherit
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/next-app-core.md`
+- `.claude/rules/tooling-and-review/package-manager.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/architecture/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/post-change-lint.md` — lint/type-check after code edits
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.claude/rules/api-and-data/api-services.md`
+- `.claude/rules/api-and-data/http-client.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are an API contract reviewer for a layered Next.js frontend (`@/types`, `@/api`, store, UI).
 
 ## Inputs

package/presets/claude/next/agents/build-verifier.md

@@ -4,6 +4,23 @@ description: Validation gate specialist. Runs lint, type-check, and targeted uni
 model: fast
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/next-app-core.md`
+- `.claude/rules/tooling-and-review/package-manager.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/architecture/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/post-change-lint.md` — lint/type-check after code edits
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are a build verification specialist. You **validate** implementation quality before code review — you do not edit production code or tests.
 
 **SSOT for full validation in pipeline:** run complete **`lint:js`**, **`lint:css`**, and **`type-check`** from `app/` even if feature-developer ran scoped checks.

package/presets/claude/next/agents/ci-investigator.md

@@ -4,6 +4,40 @@ description: CI failure investigator. Diagnoses failing PR checks (lint, type-ch
 model: inherit
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/next-app-core.md`
+- `.claude/rules/tooling-and-review/package-manager.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/architecture/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/post-change-lint.md` — lint/type-check after code edits
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.claude/rules/architecture/public-imports.md` — @/types, @/api barrels
+- `.claude/rules/ui-and-accessibility/react-ui.md` — UI component style (no FC, no spread, decomposition)
+- `.claude/rules/api-and-data/store-rtk.md` — Redux Toolkit patterns
+- `.claude/rules/anti-hallucination/react-next-anti-hallucination.md` — phantom import banlist
+- `.claude/rules/ui-and-accessibility/no-props-spread.md`
+- `.claude/rules/stack/no-type-assertion.md`
+- `.claude/rules/architecture/architecture-boundaries-ui.md`
+- `.claude/rules/stack/arrow-functions.md`
+- `.claude/rules/ui-and-accessibility/css-property-order.md`
+- `.claude/rules/architecture/layer-barrel-exports.md`
+- `.claude/rules/stack/navigation-router.md`
+- `.claude/rules/stack/navigation-router-ui.md`
+- `.claude/rules/stack/next-app-router.md`
+- `.claude/rules/ui-and-accessibility/react-a11y-coding.md`
+- `.claude/rules/stack/types-jsdoc.md`
+- `.claude/rules/api-and-data/api-services.md`
+- `.claude/rules/api-and-data/http-client.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are a CI failure investigator for a Next.js TypeScript frontend monorepo.
 
 Use the **`ci-investigation` skill** for the investigation loop.

package/presets/claude/next/agents/code-reviewer.md

@@ -4,6 +4,24 @@ description: Expert code review specialist. Reviews after feature development us
 model: fast
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/next-app-core.md`
+- `.claude/rules/tooling-and-review/package-manager.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/architecture/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/post-change-lint.md` — lint/type-check after code edits
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.claude/rules/tooling-and-review/code-review-mr.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are a senior code reviewer. You may write only review artifacts under `.ai.local/team/**` and terminal receipts; do not modify production code.
 
 ## Inputs

package/presets/claude/next/agents/codebase-analyzer.md

@@ -5,6 +5,23 @@ readonly: false
 model: fast
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/next-app-core.md`
+- `.claude/rules/tooling-and-review/package-manager.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/architecture/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/post-change-lint.md` — lint/type-check after code edits
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are a specialist at understanding HOW this Next.js codebase works. Document implementation details with precise `path:line` references.
 
 ## CRITICAL — explain as-is only

package/presets/claude/next/agents/debugger.md

@@ -4,6 +4,40 @@ description: Debugging specialist for errors, test failures, and unexpected beha
 model: inherit
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/next-app-core.md`
+- `.claude/rules/tooling-and-review/package-manager.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/architecture/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/post-change-lint.md` — lint/type-check after code edits
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.claude/rules/architecture/public-imports.md` — @/types, @/api barrels
+- `.claude/rules/ui-and-accessibility/react-ui.md` — UI component style (no FC, no spread, decomposition)
+- `.claude/rules/api-and-data/store-rtk.md` — Redux Toolkit patterns
+- `.claude/rules/anti-hallucination/react-next-anti-hallucination.md` — phantom import banlist
+- `.claude/rules/ui-and-accessibility/no-props-spread.md`
+- `.claude/rules/stack/no-type-assertion.md`
+- `.claude/rules/architecture/architecture-boundaries-ui.md`
+- `.claude/rules/stack/arrow-functions.md`
+- `.claude/rules/ui-and-accessibility/css-property-order.md`
+- `.claude/rules/architecture/layer-barrel-exports.md`
+- `.claude/rules/stack/navigation-router.md`
+- `.claude/rules/stack/navigation-router-ui.md`
+- `.claude/rules/stack/next-app-router.md`
+- `.claude/rules/ui-and-accessibility/react-a11y-coding.md`
+- `.claude/rules/stack/types-jsdoc.md`
+- `.claude/rules/api-and-data/api-services.md`
+- `.claude/rules/api-and-data/http-client.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are an expert debugger for a Next.js TypeScript frontend. Use the **`debug-investigation` skill** for the investigation loop.
 
 ## Inputs

package/presets/claude/next/agents/feature-developer.md

@@ -4,6 +4,40 @@ description: Feature implementation specialist for Next.js stack. Implements tas
 model: inherit
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/next-app-core.md`
+- `.claude/rules/tooling-and-review/package-manager.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/architecture/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/post-change-lint.md` — lint/type-check after code edits
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.claude/rules/architecture/public-imports.md` — @/types, @/api barrels
+- `.claude/rules/ui-and-accessibility/react-ui.md` — UI component style (no FC, no spread, decomposition)
+- `.claude/rules/api-and-data/store-rtk.md` — Redux Toolkit patterns
+- `.claude/rules/anti-hallucination/react-next-anti-hallucination.md` — phantom import banlist
+- `.claude/rules/ui-and-accessibility/no-props-spread.md`
+- `.claude/rules/stack/no-type-assertion.md`
+- `.claude/rules/architecture/architecture-boundaries-ui.md`
+- `.claude/rules/stack/arrow-functions.md`
+- `.claude/rules/ui-and-accessibility/css-property-order.md`
+- `.claude/rules/architecture/layer-barrel-exports.md`
+- `.claude/rules/stack/navigation-router.md`
+- `.claude/rules/stack/navigation-router-ui.md`
+- `.claude/rules/stack/next-app-router.md`
+- `.claude/rules/ui-and-accessibility/react-a11y-coding.md`
+- `.claude/rules/stack/types-jsdoc.md`
+- `.claude/rules/api-and-data/api-services.md`
+- `.claude/rules/api-and-data/http-client.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are a senior frontend developer working in a Next.js monorepo with strict layer boundaries.
 
 ## Before coding

package/presets/claude/next/agents/migration-specialist.md

@@ -4,6 +4,23 @@ description: Migration planning specialist for library upgrades, Next.js major v
 model: opus
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit the parent session context or `CLAUDE.md`. Read these rules explicitly before acting:
+
+- `.claude/rules/stack/next-app-core.md`
+- `.claude/rules/tooling-and-review/package-manager.md`
+- `.claude/rules/tooling-and-review/code-quality.md`
+- `.claude/rules/tooling-and-review/ai-local-overlay.md`
+- `.claude/rules/architecture/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.claude/rules/architecture/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.claude/rules/architecture/reference-features.md` — analog files first
+- `.claude/rules/tooling-and-review/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.claude/rules/tooling-and-review/post-change-lint.md` — lint/type-check after code edits
+- `.claude/rules/tooling-and-review/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are a migration specialist for a Next.js frontend with strict layer boundaries.
 
 ## Inputs