@bonesofspring/ai-rules 0.2.31 → 0.2.32

package/presets/mavis/go/adapter-map.json

@@ -3,7 +3,7 @@
   "platform": "mavis",
   "stack": "go",
   "semanticSource": "cursor/go",
-  "sourceRevision": "082c8aec1536c91c49993c58c6f9ad587da93c4a5bbef82b7b73eece4402eab9",
+  "sourceRevision": "a10667f5e6e99f00e672d48fced90254249ba8d887c4a9ae1173a22ae671a9d9",
   "entries": [
     {
       "source": "AGENTS.md",

package/presets/mavis/go/rules/agent-team-orchestrator.md

@@ -109,8 +109,7 @@ Each slug has one `artifact-manifest.json` at `.ai.local/team/tasks/<slug>/`. Th
 
 - Read the manifest before broad prior-artifact discovery. Each step receives authoritative input entry IDs, owns named output entry IDs, and finishes with one terminal receipt linked to AC/task IDs.
 - Markdown remains detailed evidence; the manifest points to authoritative paths and records producer, status, timestamps, outcome, and evidence paths.
-- 
-                  Agents upsert only the items in `manifest.artifacts[]` they own and preserve foreign items. Parallel agents use distinct IDs; the parent/orchestrator serializes manifest merges.
+- Agents upsert only the items they own in `manifest.artifacts[]` and preserve all foreign items in that array. Parallel agents use distinct IDs; the parent/orchestrator serializes manifest merges. The top-level array key is `artifacts` — not `entries`; see `agent-artifact-contracts.md` for the schema callout.
 - The orchestration runtime/hook is the single writer for `status.json` lifecycle fields and `metrics.json`. Agents read status for eligibility but never rewrite unrelated state, gate, retry, attempt, timestamp, or metrics fields.
 - Missing/stale manifests are reported as a handoff gap; fall back to `brief.md`, `decomposition.md`, and `pipeline.json` rather than inventing authority.
 

package/presets/mavis/go/rules/code-quality-and-refactoring.md

@@ -51,5 +51,5 @@ Style enforcement (formatter / linter / post-change gate) lives in the **stack t
 - Public API between packages: exported types/funcs in `pkg/` or explicit ports — avoid deep imports of another feature's `internal`.
 - Prefer wrapping errors with `%w`; check with `errors.Is` / `errors.As`.
 - Interfaces belong at **ports** (consumer side), not on every struct.
-- Post-change gate: **`post-change-test.mdc`** + **`go-tooling.mdc`** (not yarn lint / xcodebuild).
+- Post-change gate: **`post-change-test.md`** + **`go-tooling.md`** (not yarn lint / xcodebuild).
 - Style: **gofmt** / **goimports** + **golangci-lint** when configured — authoritative style gate; do not duplicate linter rules in prose.

package/presets/mavis/ios-swift/adapter-map.json

@@ -3,7 +3,7 @@
   "platform": "mavis",
   "stack": "ios-swift",
   "semanticSource": "cursor/ios-swift",
-  "sourceRevision": "6109fce820397ca0bc6b9a2f09290049e4a0e88a5c8dfb5267f52ff8b46f30e5",
+  "sourceRevision": "937738f39c2c848d8187165c9eb63070218c522570ec6529fd4c8b12db317432",
   "entries": [
     {
       "source": "AGENTS.md",

package/presets/mavis/ios-swift/rules/agent-team-orchestrator.md

@@ -109,8 +109,7 @@ Each slug has one `artifact-manifest.json` at `.ai.local/team/tasks/<slug>/`. Th
 
 - Read the manifest before broad prior-artifact discovery. Each step receives authoritative input entry IDs, owns named output entry IDs, and finishes with one terminal receipt linked to AC/task IDs.
 - Markdown remains detailed evidence; the manifest points to authoritative paths and records producer, status, timestamps, outcome, and evidence paths.
-- 
-                  Agents upsert only the items in `manifest.artifacts[]` they own and preserve foreign items. Parallel agents use distinct IDs; the parent/orchestrator serializes manifest merges.
+- Agents upsert only the items they own in `manifest.artifacts[]` and preserve all foreign items in that array. Parallel agents use distinct IDs; the parent/orchestrator serializes manifest merges. The top-level array key is `artifacts` — not `entries`; see `agent-artifact-contracts.md` for the schema callout.
 - The orchestration runtime/hook is the single writer for `status.json` lifecycle fields and `metrics.json`. Agents read status for eligibility but never rewrite unrelated state, gate, retry, attempt, timestamp, or metrics fields.
 - Missing/stale manifests are reported as a handoff gap; fall back to `brief.md`, `decomposition.md`, and `pipeline.json` rather than inventing authority.
 

package/presets/mavis/ios-swift/rules/code-quality-and-refactoring.md

@@ -50,5 +50,5 @@ Style enforcement (formatter / linter / post-change gate) lives in the **stack t
 - Before adding a new UI control, check DesignSystem and existing components.
 - Public API: protocols and facades between features.
 - Acceptable examples: shared mapper/validation; replace force unwrap; split an overloaded ViewModel into use cases; design tokens instead of magic numbers/colors; remove a direct View→Data dependency in favor of a protocol.
-- Post-change gate: **`post-change-build.mdc`** + `xcode-tooling.mdc` (not yarn lint).
+- Post-change gate: **`post-change-build.md`** + `xcode-tooling.md` (not yarn lint).
 - Style: **SwiftLint** (+ SwiftFormat when configured) — authoritative style gate; do not duplicate linter rules in prose.

package/presets/mavis/ios-swift/rules/code-review-mr.md

@@ -48,7 +48,7 @@ On-demand rule for review flows (not always-on).
   - Rely on the local repository: branch, `git diff`, open files.
 
 - **What the agent must check**
-  - **Architecture and layers** (`architecture-boundaries.mdc`, `ios-app-core.mdc`):
+  - **Architecture and layers** (`architecture-boundaries.md`, `ios-app-core.md`):
     - View does not call APIs and does not know DTOs.
     - ViewModel does not depend on Data implementations directly.
     - Domain does not import SwiftUI/UIKit.
@@ -57,21 +57,21 @@ On-demand rule for review flows (not always-on).
     - DI via protocols; composition root in App.
     - No deep-import between features.
     - Files in the correct layers (`Presentation`, `Domain`, `Data`, `DesignSystem`).
-  - **Swift and concurrency** (`swift-conventions.mdc`):
+  - **Swift and concurrency** (`swift-conventions.md`):
     - `@MainActor` on UI; no unjustified force unwraps.
     - Typed errors; correct Task cancellation where needed.
-  - **UI** (`swiftui-ui.mdc`):
+  - **UI** (`swiftui-ui.md`):
     - Thin Views; Design System tokens; accessibility identifiers for testable elements.
-  - **Networking and data** (`networking-services.mdc`):
+  - **Networking and data** (`networking-services.md`):
     - DTOs separated from domain; mappers cover edge cases.
   - **Tests**:
-    - Non-trivial logic — unit (`tests-unit.mdc`); user flows — UI (`tests-ui.mdc`).
+    - Non-trivial logic — unit (`tests-unit.md`); user flows — UI (`tests-ui.md`).
     - State which tests to add or update.
 
 - **Depth and format**
   - Focus on the **MR diff**, not the whole project.
   - Overview first (MR goal, risks), then concrete comments with file and a fix suggestion matching repo patterns.
-  - No “big refactors” without a request (`code-quality-and-refactoring.mdc`).
+  - No “big refactors” without a request (`code-quality-and-refactoring.md`).
 
 - **Constraints**
   - Do not invent CI/MR hosting metadata without local data.

package/presets/mavis/ios-swift/rules/feature-delivery-workflow.md

@@ -52,16 +52,16 @@ Filled in the stack adapter: concrete globs/paths and `.mdc` / topic `.md` names
 
 When the prompt or `brief.md` contains a `figma.com` URL, **mockup review** (`mockup-reviewer` / skill `mockup-review`) must complete — or the user must continue past FAIL/`BLOCKED_MCP` via `/task-continue` — **before UI implementation**. Non-UI tasks no-op this gate. When required-signal and **no** `figma.com`, **`ux-design.md`** (on the analysis manifest entry) must exist and not be `INCOMPLETE` before UI work — else **blocked**, hand back to `task-analyst`. Parallel to the mockup gate.
 
-Typical feature with data and UI. Layer details — `architecture-boundaries.mdc`, `ios-app-core.mdc`.
+Typical feature with data and UI. Layer details — `architecture-boundaries.md`, `ios-app-core.md`.
 
 ## Checklist (work order)
 
 1. **Domain** — entities, value types, repository / use case protocols (`Features/**/Domain/**`).
-2. **Data** — DTOs (`Codable`), Domain ↔ DTO mappers, repository implementations, API client (`networking-services.mdc`).
-3. **ViewModel** — state, use case / protocol calls; DI from App; no DTOs or URLs (`state-and-viewmodels.mdc`).
-4. **View / navigation** — thin SwiftUI Views, Design System; navigation as in the repo (`swiftui-ui.mdc`).
-5. **Tests** — unit for mappers / use cases / VM (`tests-unit.mdc`); UI flows — XCUITest (`tests-ui.mdc`).
-6. **Completion** — **invoke** `post-change-build.mdc` (+ `xcode-tooling.mdc` for schemes/commands): build touched targets + lint/format per repo config. When the current WP spans **more than one** layer or module, `implementation.md` includes a **Code Map** (3–8 annotated paths) and **Suggested Review Order** (`concern | path:line | ≤15 word note`). Omit both for a single-file or single-layer WP.
+2. **Data** — DTOs (`Codable`), Domain ↔ DTO mappers, repository implementations, API client (`networking-services.md`).
+3. **ViewModel** — state, use case / protocol calls; DI from App; no DTOs or URLs (`state-and-viewmodels.md`).
+4. **View / navigation** — thin SwiftUI Views, Design System; navigation as in the repo (`swiftui-ui.md`).
+5. **Tests** — unit for mappers / use cases / VM (`tests-unit.md`); UI flows — XCUITest (`tests-ui.md`).
+6. **Completion** — **invoke** `post-change-build.md` (+ `xcode-tooling.md` for schemes/commands): build touched targets + lint/format per repo config. When the current WP spans **more than one** layer or module, `implementation.md` includes a **Code Map** (3–8 annotated paths) and **Suggested Review Order** (`concern | path:line | ≤15 word note`). Omit both for a single-file or single-layer WP.
 
 ## Data flow (orientation)
 
@@ -99,14 +99,14 @@ flowchart LR
 
 | Zone | Rules |
 |------|---------|
-| `Features/**/Domain/**`, `Core/Domain/**` | `architecture-boundaries.mdc`, `ios-app-core.mdc` |
-| `Features/**/Data/**`, `**/Network*/**` | `networking-services.mdc`, `architecture-boundaries.mdc` |
-| `*ViewModel*.swift`, Presentation state | `state-and-viewmodels.mdc` |
-| `Presentation/**`, `DesignSystem/**` | `swiftui-ui.mdc`, `architecture-boundaries.mdc` |
-| `**/*.swift` (style) | `swift-conventions.mdc` |
-| `*Tests/**` | `tests-unit.mdc` |
-| `*UITests/**` | `tests-ui.mdc` |
-| After Swift edits | `post-change-build.mdc` |
+| `Features/**/Domain/**`, `Core/Domain/**` | `architecture-boundaries.md`, `ios-app-core.md` |
+| `Features/**/Data/**`, `**/Network*/**` | `networking-services.md`, `architecture-boundaries.md` |
+| `*ViewModel*.swift`, Presentation state | `state-and-viewmodels.md` |
+| `Presentation/**`, `DesignSystem/**` | `swiftui-ui.md`, `architecture-boundaries.md` |
+| `**/*.swift` (style) | `swift-conventions.md` |
+| `*Tests/**` | `tests-unit.md` |
+| `*UITests/**` | `tests-ui.md` |
+| After Swift edits | `post-change-build.md` |
 
 When adding or extending a feature, **walk the checklist** and the table rules for touched zones.
 

package/presets/mavis/ios-swift/rules/reference-features.md

@@ -81,7 +81,7 @@ Run after preset init (manual smoke for agents):
 2. ViewModel bug — debugger → fix → unit test.
 3. DTO↔domain mapper — unit-test-planner/generator.
 4. UI flow — `xcuitest-test-planner` → generator (accessibilityIdentifier).
-5. Auth/Keychain touch — security-reviewer + `security-ios.mdc`.
+5. Auth/Keychain touch — security-reviewer + `security-ios.md`.
 
 ## Living conventions
 
@@ -89,6 +89,6 @@ Post-init gotchas / patterns / decisions: **`.ai.local/conventions.md`** (shared
 
 ## Related rules
 
-- `code-quality-and-refactoring.mdc` — repeat patterns.
-- `feature-delivery-workflow.mdc` — layer order.
+- `code-quality-and-refactoring.md` — repeat patterns.
+- `feature-delivery-workflow.md` — layer order.
 - skill `feature-delivery` — end-to-end scenario.

package/presets/mavis/java/adapter-map.json

@@ -3,7 +3,7 @@
   "platform": "mavis",
   "stack": "java",
   "semanticSource": "cursor/java",
-  "sourceRevision": "644b4a47fead34d4c5745a9290e800b99b6948a174edcf5c74621999068dd14e",
+  "sourceRevision": "f817ff79b2cc0a6c212b33bf8d1e926be75de0cc957c5edc06ca13c61971d3bd",
   "entries": [
     {
       "source": "AGENTS.md",

package/presets/mavis/java/rules/agent-team-orchestrator.md

@@ -109,8 +109,7 @@ Each slug has one `artifact-manifest.json` at `.ai.local/team/tasks/<slug>/`. Th
 
 - Read the manifest before broad prior-artifact discovery. Each step receives authoritative input entry IDs, owns named output entry IDs, and finishes with one terminal receipt linked to AC/task IDs.
 - Markdown remains detailed evidence; the manifest points to authoritative paths and records producer, status, timestamps, outcome, and evidence paths.
-- 
-                  Agents upsert only the items in `manifest.artifacts[]` they own and preserve foreign items. Parallel agents use distinct IDs; the parent/orchestrator serializes manifest merges.
+- Agents upsert only the items they own in `manifest.artifacts[]` and preserve all foreign items in that array. Parallel agents use distinct IDs; the parent/orchestrator serializes manifest merges. The top-level array key is `artifacts` — not `entries`; see `agent-artifact-contracts.md` for the schema callout.
 - The orchestration runtime/hook is the single writer for `status.json` lifecycle fields and `metrics.json`. Agents read status for eligibility but never rewrite unrelated state, gate, retry, attempt, timestamp, or metrics fields.
 - Missing/stale manifests are reported as a handoff gap; fall back to `brief.md`, `decomposition.md`, and `pipeline.json` rather than inventing authority.
 

package/presets/mavis/java/rules/code-quality-and-refactoring.md

@@ -51,5 +51,5 @@ Style enforcement (formatter / linter / post-change gate) lives in the **stack t
 - Public API between packages: exported types in module API or explicit ports — avoid deep imports of another feature's internals.
 - Prefer checked/unchecked exceptions with clear translation at adapter edges; do not leak persistence exceptions upward.
 - Interfaces belong at **ports** (consumer side), not on every class; prefer composition over inheritance.
-- Post-change gate: **`post-change-test.mdc`** + **`java-tooling.mdc`** (not yarn lint / xcodebuild / Playwright).
+- Post-change gate: **`post-change-test.md`** + **`java-tooling.md`** (not yarn lint / xcodebuild / Playwright).
 - Style/static analysis: use **repository/CI** formatter and checks — do not invent a parallel Checkstyle/SpotBugs bible in rules.

package/presets/mavis/mcp-ts/adapter-map.json

@@ -3,7 +3,7 @@
   "platform": "mavis",
   "stack": "mcp-ts",
   "semanticSource": "cursor/mcp-ts",
-  "sourceRevision": "008356a19bf3609e33b39cb6a5397384b45078380661e6b944b1f86ced6aae7d",
+  "sourceRevision": "3c9fa1ca7b809872976784c16439a35be56bd3719267217a4b67fc91686c7181",
   "entries": [
     {
       "source": "AGENTS.md",

package/presets/mavis/mcp-ts/rules/agent-team-orchestrator.md

@@ -109,8 +109,7 @@ Each slug has one `artifact-manifest.json` at `.ai.local/team/tasks/<slug>/`. Th
 
 - Read the manifest before broad prior-artifact discovery. Each step receives authoritative input entry IDs, owns named output entry IDs, and finishes with one terminal receipt linked to AC/task IDs.
 - Markdown remains detailed evidence; the manifest points to authoritative paths and records producer, status, timestamps, outcome, and evidence paths.
-- 
-                  Agents upsert only the items in `manifest.artifacts[]` they own and preserve foreign items. Parallel agents use distinct IDs; the parent/orchestrator serializes manifest merges.
+- Agents upsert only the items they own in `manifest.artifacts[]` and preserve all foreign items in that array. Parallel agents use distinct IDs; the parent/orchestrator serializes manifest merges. The top-level array key is `artifacts` — not `entries`; see `agent-artifact-contracts.md` for the schema callout.
 - The orchestration runtime/hook is the single writer for `status.json` lifecycle fields and `metrics.json`. Agents read status for eligibility but never rewrite unrelated state, gate, retry, attempt, timestamp, or metrics fields.
 - Missing/stale manifests are reported as a handoff gap; fall back to `brief.md`, `decomposition.md`, and `pipeline.json` rather than inventing authority.
 

package/presets/mavis/next/REPO_AGENTS.md

@@ -43,6 +43,8 @@ Working directory for app scripts: **`app/`**. Detect the package manager from l
 
 After code edits: invoke **`post-change-lint`** (requestable). Full gate: agent `build-verifier`.
 
+Repositories with more than one package (e.g. `app/` + `storybook/`) run each package's own scripts from its own directory; do not conflate runners.
+
 ## Security basics
 
 - Do not commit secrets (`.env`, tokens, credentials).
@@ -65,10 +67,18 @@ Skills: `.cursor/skills/`, `.claude/skills/`, `.mavis/skills/`, or `.opencode/sk
 
 Gotchas, local patterns, and team decisions: **`.ai.local/conventions.md`** (fill after init; `init` does not overwrite it).
 
+## Seed library (`.ai.local/rules-library/`)
+
+`init` seeds **staged-inactive** rule templates here (Cursor `.mdc` sources analog: `presets/cursor/next/ai-local/rules-library/**`). They are **not** active until moved into `.ai.local/rules/`. When a seed matches the task scope, apply it and tell the owner to move it. Typical seeds: `router-pages` (Pages Router override), `no-react-fc`, `component-child-decomposition`, `single-source-copy-constants`, `commit-hygiene`, `pre-pr-checklist`, `api-contract-source`, `agent-pipeline-gates`, `task-levels`, `analytics-events`, `feature-flags-experiments`, `pwa-service-worker`, `qa-test-cases`, `forms-validation`, and the `storybook-*` set.
+
+## Managed vs preserved
+
+`init` owns `.cursor/**`, `.claude/**`, `.mavis/**`, `.opencode/**`, root `AGENTS.md`, and the tool MCP config; it **overwrites/merges** them. Durable project config and authoritative specs belong **outside** those trees: `.ai.local/**`, `.ai/context/**`, `docs/specs/**`, `openspec/**`, repo-root `.mcp.json`. After a re-init, re-check any consumer-owned block added to a managed file.
+
 ## Local overlay (`.ai.local/`) — MANDATORY
 
 A `.ai.local/` directory MAY exist at the repo root or at any nesting depth in monorepos. **All agents MUST read and apply it on every turn.** Rules there override preset rules; in conflicts, the local rule wins. `override: kill <preset-rule-name>` drops the named preset rule from the agent's context entirely.
 
-Plain markdown rules under `.ai.local/rules/*.md` are read by the agent with higher priority than preset rules. Living gotchas live in `.ai.local/conventions.md`.
+Plain markdown rules under `.ai.local/rules/*.md` are read by the agent with higher priority than preset rules. Living gotchas live in `.ai.local/conventions.md`. Staged seeds live in `.ai.local/rules-library/**`; a matching seed must be moved into `.ai.local/rules/` to activate.
 
 On every turn, probe `ls -la .ai.local`, apply `.ai.local/rules/*.md` and `.ai.local/conventions.md`, and acknowledge `Using .ai.local: <rule-name>`. Authoring guide: `docs/LOCAL-OVERLAY.md` in the `@bonesofspring/ai-rules` package. The `ai-local-overlay` rule is always-on on Cursor and session-start on Claude (no `paths:`). Mavis and OpenCode have no native `alwaysApply`; this section plus the platform entry's essential-rules list is the reinforcement.

package/presets/mavis/next/adapter-map.json

@@ -3,7 +3,7 @@
   "platform": "mavis",
   "stack": "next",
   "semanticSource": "cursor/next",
-  "sourceRevision": "be3247c939b52878a3d3d93245cd63c02e259418104111458f04ef0b737e5d27",
+  "sourceRevision": "be4e35ed4a2c1a3f44e976c64eb4ba9dc9940f91b5c440e72ac1375f62e4a481",
   "entries": [
     {
       "source": "AGENTS.md",
@@ -250,7 +250,47 @@
       "category": "ai-local",
       "disposition": "transform",
       "loadMode": "manual",
-      "reason": "Consumer-owned overlay template; seeded to .ai.local/conventions.md on init"
+      "reason": "Staged-inactive local overlay rule template; copied to .ai.local/rules-library/ on init (activate by moving it to .ai.local/rules/)"
+    },
+    {
+      "source": "ai-local/rules-library/agent-pipeline-gates.md",
+      "target": "ai-local/rules-library/agent-pipeline-gates.md",
+      "category": "ai-local",
+      "disposition": "transform",
+      "loadMode": "manual",
+      "reason": "Staged-inactive local overlay rule template; copied to .ai.local/rules-library/ on init (activate by moving it to .ai.local/rules/)"
+    },
+    {
+      "source": "ai-local/rules-library/analytics-events.md",
+      "target": "ai-local/rules-library/analytics-events.md",
+      "category": "ai-local",
+      "disposition": "transform",
+      "loadMode": "manual",
+      "reason": "Staged-inactive local overlay rule template; copied to .ai.local/rules-library/ on init (activate by moving it to .ai.local/rules/)"
+    },
+    {
+      "source": "ai-local/rules-library/api-contract-source.md",
+      "target": "ai-local/rules-library/api-contract-source.md",
+      "category": "ai-local",
+      "disposition": "transform",
+      "loadMode": "manual",
+      "reason": "Staged-inactive local overlay rule template; copied to .ai.local/rules-library/ on init (activate by moving it to .ai.local/rules/)"
+    },
+    {
+      "source": "ai-local/rules-library/artifact-lifecycle.md",
+      "target": "ai-local/rules-library/artifact-lifecycle.md",
+      "category": "ai-local",
+      "disposition": "transform",
+      "loadMode": "manual",
+      "reason": "Staged-inactive local overlay rule template; copied to .ai.local/rules-library/ on init (activate by moving it to .ai.local/rules/)"
+    },
+    {
+      "source": "ai-local/rules-library/code-style.md",
+      "target": "ai-local/rules-library/code-style.md",
+      "category": "ai-local",
+      "disposition": "transform",
+      "loadMode": "manual",
+      "reason": "Staged-inactive local overlay rule template; copied to .ai.local/rules-library/ on init (activate by moving it to .ai.local/rules/)"
     },
     {
       "source": "ai-local/rules-library/commit-hygiene.md",
@@ -258,7 +298,23 @@
       "category": "ai-local",
       "disposition": "transform",
       "loadMode": "manual",
-      "reason": "Consumer-owned overlay template; seeded to .ai.local/conventions.md on init"
+      "reason": "Staged-inactive local overlay rule template; copied to .ai.local/rules-library/ on init (activate by moving it to .ai.local/rules/)"
+    },
+    {
+      "source": "ai-local/rules-library/component-child-decomposition.md",
+      "target": "ai-local/rules-library/component-child-decomposition.md",
+      "category": "ai-local",
+      "disposition": "transform",
+      "loadMode": "manual",
+      "reason": "Staged-inactive local overlay rule template; copied to .ai.local/rules-library/ on init (activate by moving it to .ai.local/rules/)"
+    },
+    {
+      "source": "ai-local/rules-library/feature-flags-experiments.md",
+      "target": "ai-local/rules-library/feature-flags-experiments.md",
+      "category": "ai-local",
+      "disposition": "transform",
+      "loadMode": "manual",
+      "reason": "Staged-inactive local overlay rule template; copied to .ai.local/rules-library/ on init (activate by moving it to .ai.local/rules/)"
     },
     {
       "source": "ai-local/rules-library/mcp-required-for-ui-layout.md",
@@ -266,7 +322,15 @@
       "category": "ai-local",
       "disposition": "transform",
       "loadMode": "manual",
-      "reason": "Consumer-owned overlay template; seeded to .ai.local/conventions.md on init"
+      "reason": "Staged-inactive local overlay rule template; copied to .ai.local/rules-library/ on init (activate by moving it to .ai.local/rules/)"
+    },
+    {
+      "source": "ai-local/rules-library/no-react-fc.md",
+      "target": "ai-local/rules-library/no-react-fc.md",
+      "category": "ai-local",
+      "disposition": "transform",
+      "loadMode": "manual",
+      "reason": "Staged-inactive local overlay rule template; copied to .ai.local/rules-library/ on init (activate by moving it to .ai.local/rules/)"
     },
     {
       "source": "ai-local/rules-library/no-test-driven-behavior-change.md",
@@ -274,7 +338,7 @@
       "category": "ai-local",
       "disposition": "transform",
       "loadMode": "manual",
-      "reason": "Consumer-owned overlay template; seeded to .ai.local/conventions.md on init"
+      "reason": "Staged-inactive local overlay rule template; copied to .ai.local/rules-library/ on init (activate by moving it to .ai.local/rules/)"
     },
     {
       "source": "ai-local/rules-library/pre-pr-checklist.md",
@@ -282,7 +346,23 @@
       "category": "ai-local",
       "disposition": "transform",
       "loadMode": "manual",
-      "reason": "Consumer-owned overlay template; seeded to .ai.local/conventions.md on init"
+      "reason": "Staged-inactive local overlay rule template; copied to .ai.local/rules-library/ on init (activate by moving it to .ai.local/rules/)"
+    },
+    {
+      "source": "ai-local/rules-library/pwa-service-worker.md",
+      "target": "ai-local/rules-library/pwa-service-worker.md",
+      "category": "ai-local",
+      "disposition": "transform",
+      "loadMode": "manual",
+      "reason": "Staged-inactive local overlay rule template; copied to .ai.local/rules-library/ on init (activate by moving it to .ai.local/rules/)"
+    },
+    {
+      "source": "ai-local/rules-library/qa-test-cases.md",
+      "target": "ai-local/rules-library/qa-test-cases.md",
+      "category": "ai-local",
+      "disposition": "transform",
+      "loadMode": "manual",
+      "reason": "Staged-inactive local overlay rule template; copied to .ai.local/rules-library/ on init (activate by moving it to .ai.local/rules/)"
     },
     {
       "source": "ai-local/rules-library/router-pages.md",
@@ -290,7 +370,7 @@
       "category": "ai-local",
       "disposition": "transform",
       "loadMode": "manual",
-      "reason": "Consumer-owned overlay template; seeded to .ai.local/conventions.md on init"
+      "reason": "Staged-inactive local overlay rule template; copied to .ai.local/rules-library/ on init (activate by moving it to .ai.local/rules/)"
     },
     {
       "source": "ai-local/rules-library/single-source-copy-constants.md",
@@ -298,7 +378,87 @@
       "category": "ai-local",
       "disposition": "transform",
       "loadMode": "manual",
-      "reason": "Consumer-owned overlay template; seeded to .ai.local/conventions.md on init"
+      "reason": "Staged-inactive local overlay rule template; copied to .ai.local/rules-library/ on init (activate by moving it to .ai.local/rules/)"
+    },
+    {
+      "source": "ai-local/rules-library/storybook-catalog-structure.md",
+      "target": "ai-local/rules-library/storybook-catalog-structure.md",
+      "category": "ai-local",
+      "disposition": "transform",
+      "loadMode": "manual",
+      "reason": "Staged-inactive local overlay rule template; copied to .ai.local/rules-library/ on init (activate by moving it to .ai.local/rules/)"
+    },
+    {
+      "source": "ai-local/rules-library/storybook-cleanup-temp-screenshots.md",
+      "target": "ai-local/rules-library/storybook-cleanup-temp-screenshots.md",
+      "category": "ai-local",
+      "disposition": "transform",
+      "loadMode": "manual",
+      "reason": "Staged-inactive local overlay rule template; copied to .ai.local/rules-library/ on init (activate by moving it to .ai.local/rules/)"
+    },
+    {
+      "source": "ai-local/rules-library/storybook-csf-authoring.md",
+      "target": "ai-local/rules-library/storybook-csf-authoring.md",
+      "category": "ai-local",
+      "disposition": "transform",
+      "loadMode": "manual",
+      "reason": "Staged-inactive local overlay rule template; copied to .ai.local/rules-library/ on init (activate by moving it to .ai.local/rules/)"
+    },
+    {
+      "source": "ai-local/rules-library/storybook-dev-compare-figma.md",
+      "target": "ai-local/rules-library/storybook-dev-compare-figma.md",
+      "category": "ai-local",
+      "disposition": "transform",
+      "loadMode": "manual",
+      "reason": "Staged-inactive local overlay rule template; copied to .ai.local/rules-library/ on init (activate by moving it to .ai.local/rules/)"
+    },
+    {
+      "source": "ai-local/rules-library/storybook-keep-tests-current.md",
+      "target": "ai-local/rules-library/storybook-keep-tests-current.md",
+      "category": "ai-local",
+      "disposition": "transform",
+      "loadMode": "manual",
+      "reason": "Staged-inactive local overlay rule template; copied to .ai.local/rules-library/ on init (activate by moving it to .ai.local/rules/)"
+    },
+    {
+      "source": "ai-local/rules-library/storybook-modals.md",
+      "target": "ai-local/rules-library/storybook-modals.md",
+      "category": "ai-local",
+      "disposition": "transform",
+      "loadMode": "manual",
+      "reason": "Staged-inactive local overlay rule template; copied to .ai.local/rules-library/ on init (activate by moving it to .ai.local/rules/)"
+    },
+    {
+      "source": "ai-local/rules-library/storybook-no-app-node-modules.md",
+      "target": "ai-local/rules-library/storybook-no-app-node-modules.md",
+      "category": "ai-local",
+      "disposition": "transform",
+      "loadMode": "manual",
+      "reason": "Staged-inactive local overlay rule template; copied to .ai.local/rules-library/ on init (activate by moving it to .ai.local/rules/)"
+    },
+    {
+      "source": "ai-local/rules-library/storybook-ui-quality-gate.md",
+      "target": "ai-local/rules-library/storybook-ui-quality-gate.md",
+      "category": "ai-local",
+      "disposition": "transform",
+      "loadMode": "manual",
+      "reason": "Staged-inactive local overlay rule template; copied to .ai.local/rules-library/ on init (activate by moving it to .ai.local/rules/)"
+    },
+    {
+      "source": "ai-local/rules-library/task-levels.md",
+      "target": "ai-local/rules-library/task-levels.md",
+      "category": "ai-local",
+      "disposition": "transform",
+      "loadMode": "manual",
+      "reason": "Staged-inactive local overlay rule template; copied to .ai.local/rules-library/ on init (activate by moving it to .ai.local/rules/)"
+    },
+    {
+      "source": "ai-local/rules-library/ui-change-review-gate.md",
+      "target": "ai-local/rules-library/ui-change-review-gate.md",
+      "category": "ai-local",
+      "disposition": "transform",
+      "loadMode": "manual",
+      "reason": "Staged-inactive local overlay rule template; copied to .ai.local/rules-library/ on init (activate by moving it to .ai.local/rules/)"
     },
     {
       "source": "commands/spec-start.md",
@@ -473,6 +633,14 @@
       "reason": "Requestable Cursor rule: referenced from entry files; not claimed as MiniMax auto-load",
       "sharedCoreStem": "review/code-review-mr.md"
     },
+    {
+      "source": "rules/component-catalog-gate.mdc",
+      "target": "rules/component-catalog-gate.md",
+      "category": "rules",
+      "disposition": "transform",
+      "loadMode": "referenced",
+      "reason": "Requestable Cursor rule: referenced from entry files; not claimed as MiniMax auto-load"
+    },
     {
       "source": "rules/css-property-order-stylelint.mdc",
       "target": "rules/css-property-order-stylelint.md",
@@ -507,6 +675,14 @@
       "reason": "Requestable Cursor rule: referenced from entry files; not claimed as MiniMax auto-load",
       "sharedCoreStem": "architecture/feature-delivery-workflow.md"
     },
+    {
+      "source": "rules/forms-validation.mdc",
+      "target": "rules/forms-validation.md",
+      "category": "rules",
+      "disposition": "transform",
+      "loadMode": "referenced",
+      "reason": "Requestable Cursor rule: referenced from entry files; not claimed as MiniMax auto-load"
+    },
     {
       "source": "rules/http-client.mdc",
       "target": "rules/http-client.md",
@@ -573,6 +749,14 @@
       "loadMode": "referenced",
       "reason": "Requestable Cursor rule: referenced from entry files; not claimed as MiniMax auto-load"
     },
+    {
+      "source": "rules/next-static-export.mdc",
+      "target": "rules/next-static-export.md",
+      "category": "rules",
+      "disposition": "transform",
+      "loadMode": "referenced",
+      "reason": "Requestable Cursor rule: referenced from entry files; not claimed as MiniMax auto-load"
+    },
     {
       "source": "rules/no-props-spread.mdc",
       "target": "rules/no-props-spread.md",

package/presets/mavis/next/agents/build-verifier.md

@@ -33,6 +33,7 @@ Use **`package-manager.md`** for the repo package manager.
 2. **`lint:css`** — full Stylelint.
 3. **`type-check`** — when TypeScript changed.
 4. **Unit tests** — run specs for changed modules (paths from diff); if unclear, run the narrowest parent suite that covers changed mappers/services/store.
+5. **Component catalog** — when the repo ships a catalog (e.g. `storybook/`) and `app/src/ui/**` or catalog files changed, run the catalog's own test/visual-baseline suite from the catalog package and require green **without** `--update` (`component-catalog-gate`). A green app unit run does not cover catalog stories.
 
 Prefer **`lint`** (= js + css + type-check) before handoff on large changes.
 

package/presets/mavis/next/agents/code-reviewer.md

@@ -110,5 +110,6 @@ Do not mix this output with retrospective facilitation — keep review and retro
 
 - **Authoritative inputs:** read `.ai.local/team/tasks/<slug>/artifact-manifest.json` first; consume handoff `artifactInputIds` when supplied, otherwise consume the items in `manifest.artifacts[]` for brief/decomposition, implementation, validation evidence, and the scoped git diff.
 - **Owned outputs:** `review.md`; upsert only the entry in `manifest.artifacts[]` assigned by handoff (`artifactOutputId`; fallback `review`) and preserve all foreign items in `manifest.artifacts[]`.
+- **Commit hygiene:** never run `git commit` / `git push`. Reviewer turns end with findings only; when asked for commit guidance, propose an area-split commit plan (source / artifacts / docs) with the owning slug.
 - **Terminal receipt:** cover applicable AC/task IDs, list authoritative evidence paths, and emit `completed` or `changes_requested`. Bind it to the supplied `attemptId` when present.
 - **Shared state:** never create or mutate `status.json` or `metrics.json`; the orchestration runtime/hook owns lifecycle, gates, retries, attempts, and timestamps.

package/presets/mavis/next/agents/feature-developer.md

@@ -153,5 +153,6 @@ Shipped browser split: Playwright MCP for e2e specs/selectors; Chrome DevTools M
 
 - **Authoritative inputs:** read `.ai.local/team/tasks/<slug>/artifact-manifest.json` first; consume handoff `artifactInputIds` when supplied, otherwise consume the items in `manifest.artifacts[]` for `brief.md`, `decomposition.md`, current scope, and applicable prior findings.
 - **Owned outputs:** `implementation.md` plus changed implementation/test paths; upsert only the entry in `manifest.artifacts[]` assigned by handoff (`artifactOutputId`; fallback `implementation`) and preserve all foreign items in `manifest.artifacts[]`.
+- **Commit hygiene:** never run `git commit` / `git push`. At the end of the turn return a `## Human commits` block: files touched + a proposed commit message, split by area (source / artifacts / docs) with the owning slug/ticket in the subject. See the consumer `commit-hygiene` local rule.
 - **Terminal receipt:** cover applicable AC/task IDs, list authoritative evidence paths, and emit `completed` or `blocked`. Bind it to the supplied `attemptId` when present.
 - **Shared state:** never create or mutate `status.json` or `metrics.json`; the orchestration runtime/hook owns lifecycle, gates, retries, attempts, and timestamps.

package/presets/mavis/next/agents/openspec-author.md

@@ -71,6 +71,8 @@ Hard constraints (read `config.yaml rules.proposal` first — they win):
 
 - `proposal.md` ≤ 500 words.
 - `## Non-goals` section mandatory (omit → `blocked`).
+- `## Compliance impact` block mandatory in `proposal.md` and `design.md` (None | Affected — list PD / medical / analytics / SSR-cookie / third-party surfaces); when unclear, default to `Affected` and block.
+- `## Hard rules applied` block at the top of `proposal.md` / `design.md` / `tasks.md` (applicable rules + how applied; `N/A — reason` for the rest), when the consumer repo maintains hard rules.
 - `## What Changes` lists capability deltas **only**; no implementation steps.
 - `## Capabilities` table groups deltas by capability slug; cite spec paths.
 - Spec deltas use `## MODIFIED Requirements` heading (or `## REMOVED Requirements`); Each `### Requirement:` block carries `SHALL` statements and `#### Scenario:` Given/When/Then. Mirror existing capability voice.

package/presets/mavis/next/agents/task-analyst.md

@@ -60,6 +60,13 @@ Create or update files under `.ai.local/team/tasks/<slug>/`:
 ## Slug
 <slug>
 
+## Hard rules applied
+- <applicable preset/local rule> — <how applied>
+- N/A — <reason>   (list non-applicable hard rules explicitly)
+
+## Compliance impact
+None | Affected — <surfaces: PD / medical data / analytics / SSR cookies / error reporting / third-party scripts>
+
 ## Goal
 ...
 

package/presets/mavis/next/agents/task-router.md

@@ -111,6 +111,7 @@ Keep top-level `profile` and emit this top-level object in every new `pipeline.j
 - If prompt or `brief.md` contains `figma.com` on `feature` / `refactor` / `spike` / `spec-gen`, insert **mockup-reviewer** after **task-analyst** (when present) and before **solution-architect** and **feature-developer**. Set `model: "strong"` on that step. Do not add static `humanGates: ["after:mockup-reviewer"]` (FAIL-only hook exception). Never put `mockup-reviewer` in a `parallel: true` step (FAIL-only gate is serial).
 - Classify intent `mockup-review` **before** `ux-design` **before** `review-only`. A `figma.com` URL with review-not-implement language is `mockup-review` even without the word «макет», including when the user said «ревью UX». <!-- i18n-keep: E4 -->
 - If UI stack and (required-signal or advisory UI AC), instruct **task-analyst** to load skill `ux-design` (no new pipeline step; analyst default model, not `strong`). Required-signal: user asked UX, or AC require flows/states, or spec-gen page/feature.
+- If the resolved scope touches UI paths (`app/src/ui/**`, or the repo's component-catalog root) on `feature` / `refactor`, insert **mockup-reviewer** even **without** a `figma.com` URL — it reviews against the AC / `ux-design.md` instead of Figma. Pair it with a **`mockup-review.md`** terminal artifact requirement (the UI change is not complete without it) and, where the repo ships a component catalog, a catalog-test note on `build-verifier` (`component-catalog-gate`).
 - Skip **task-analyst** if AC/scope fully specified → document in `skipped`.
 - Add **solution-architect** for cross-layer / new public APIs — after analyst, before developer.
 - Add **api-contract-reviewer** for new/changed backend contracts — before developer.