@bonesofspring/ai-rules 0.2.5 → 0.2.6

package/presets/cursor/go/rules/go-conventions.mdc

@@ -0,0 +1,25 @@
+---
+description: Idiomatic Go conventions for this hexagonal preset
+globs:
+  - "**/*.go"
+alwaysApply: false
+---
+
+
+# Go conventions
+
+- Follow [Effective Go](https://go.dev/doc/effective_go) and repo `golangci-lint` / `staticcheck` when present.
+- Accept `context.Context` as first param on I/O and use-case methods.
+- Wrap errors: `fmt.Errorf("…: %w", err)`; avoid panics in library/service code.
+- Prefer `camelCase` unexported, `PascalCase` exported; package names short and lowercase.
+- Do not expose `internal/` outside the module.
+- Prefer table-driven tests; use `t.Parallel` only when safe.
+
+## Packages
+
+- Avoid `util`/`common` dumping grounds — name by domain capability.
+- Keep `main` packages thin (see composition-root).
+
+## Concurrency
+
+- Document cancelation; do not start unbounded goroutines from handlers without supervision.

package/presets/cursor/go/rules/go-tooling.mdc

@@ -0,0 +1,33 @@
+---
+description: Go toolchain commands (test, vet, lint, race) — requestable
+alwaysApply: false
+---
+
+
+# Go tooling (requestable)
+
+Before running commands, read **`go.mod`** for module path and Go version.
+
+## Common commands
+
+```bash
+go test ./...
+go vet ./...
+go test ./... -race
+go test ./... -cover
+```
+
+- If the repo has `golangci-lint` or `staticcheck`, use the project’s documented invocation (Makefile/taskfile).
+- Do not invent a lint stack; prefer what CI already runs.
+- Module ops: `go get`, `go mod tidy` only when deps change.
+- Prefer `go test ./path/to/pkg` while iterating; widen to `./...` before handoff.
+
+## Race / cover
+
+- Use `-race` for concurrent maps, workers, or shared caches.
+- Coverage is optional unless the task or CI requires a threshold.
+
+## Related
+
+- Mandatory after Go edits: **`post-change-test.mdc`**.
+- Pipeline gate: `build-verifier` (same commands; no yarn lint / xcodebuild).

package/presets/cursor/go/rules/messaging-adapters.mdc

@@ -0,0 +1,22 @@
+---
+description: Messaging driven/driving adapters for Go hexagonal services
+globs:
+  - "**/adapters/messaging/**/*"
+alwaysApply: false
+---
+
+
+# Messaging adapters
+
+- **Publisher** (driven): implements outbound port; serializes domain events / integration events.
+- **Consumer** (driving): deserializes → calls use case / inbound port; ack/nack policy here.
+- Idempotency keys and retry/DLQ are adapter concerns; document at-least-once assumptions.
+- Do not put broker client types in domain or application signatures.
+
+## Event shapes
+
+- Prefer explicit event structs in application or a small `events` package used by ports — map to wire format in the adapter.
+
+## Tests
+
+- Unit-test mapping with fakes; integration against embedded/broker test duals when the repo has them.

package/presets/cursor/go/rules/module-public-api.mdc

@@ -0,0 +1,24 @@
+---
+description: Public module API (pkg/) and internal boundaries for Go services
+globs:
+  - pkg/**/*
+  - go.mod
+alwaysApply: false
+---
+
+
+# Module public API
+
+- Anything under `pkg/` is a compatibility surface — change carefully; prefer additive APIs.
+- Service-private code stays in `internal/`.
+- Do not import another module's `internal/` (compiler enforces for separate modules).
+- Document breaking Go API changes in CHANGELOG when the repo publishes libraries.
+
+## go.mod
+
+- Module path and Go version are SoT for toolchain.
+- Prefer minimal direct deps; pin via `go.mod` / `go.sum`.
+
+## Cross-feature
+
+- Inside one module, features communicate via application ports or small `pkg` facades — not by importing sibling feature adapter packages.

package/presets/cursor/go/rules/persistence-adapters.mdc

@@ -0,0 +1,29 @@
+---
+description: Persistence driven adapters (SQL/repos) for Go hexagonal services
+globs:
+  - "**/adapters/persistence/**/*"
+  - "**/*repository*.go"
+alwaysApply: false
+---
+
+
+# Persistence adapters
+
+- Implement outbound repository ports from application.
+- Use parameterized queries; map rows → domain entities inside the adapter.
+- Transactions: expose via port (`Transactional`, `UnitOfWork`) implemented here — use cases call the port, not `*sql.Tx` directly.
+- Migrations live with infra (separate package/dir) — not in domain.
+
+## Mapping
+
+- Persistence models (db tags) stay private to the adapter package when possible.
+- Nullability and DB defaults converted to domain values explicitly.
+
+## Forbidden
+
+- Importing persistence from domain or leaking `*sql.DB` through port APIs.
+- Building SQL strings in use cases.
+
+## Tests
+
+- Integration tests with testcontainers / test DB preferred for repos; unit-test mappers with fixtures.

package/presets/cursor/go/rules/ports-interfaces.mdc

@@ -0,0 +1,35 @@
+---
+description: Inbound and outbound port interfaces for Go hexagonal services
+globs:
+  - "**/ports/**/*"
+  - internal/application/**/*port*
+  - "**/application/**/*port*"
+alwaysApply: false
+---
+
+
+# Ports (interfaces)
+
+## Outbound (driven)
+
+- Repository, cache, publisher, clock, ID generator, external client — defined by **application**.
+- Signatures use **domain** types (or small application DTOs), never ORM models.
+- Keep interfaces small (ISP); prefer role interfaces over god-repos.
+- Accept `context.Context` as the first parameter when the call may block or cancel.
+
+## Inbound (driving)
+
+- Optional interface wrapping use cases for multiple drivers (HTTP + gRPC + CLI).
+- Drivers depend on inbound ports / use-case APIs — not on each other.
+- Prefer a concrete use-case struct when only one driver exists; extract an interface when a second driver appears.
+
+## Naming
+
+- `SaveOrder`, `FindOrderByID`, `PublishOrderPlaced` — verb-oriented.
+- Implementation types live in adapters (`PostgresOrderRepository`), not beside the interface in domain.
+
+## Anti-patterns
+
+- Ports returning `map[string]any` or `json.RawMessage` without need.
+- Putting port interfaces inside adapter packages (wrong owner).
+- Leakage of SQL/`driver.Valuer` types through port method signatures.

package/presets/cursor/go/rules/post-change-test.mdc

@@ -0,0 +1,27 @@
+---
+description: Mandatory verification after Go code edits (go test / vet / lint-if-present)
+alwaysApply: false
+---
+
+
+# Post-change test (requestable, mandatory after Go edits)
+
+After changing `*.go` / `go.mod` in a consumer repo:
+
+1. `go test ./...` (or scoped packages touched).
+2. `go vet ./...`.
+3. If present: `golangci-lint run` and/or `staticcheck ./...` per repo docs.
+4. Optional: `go test ./... -race` for concurrency-sensitive changes (`go-tooling.mdc`).
+
+## Scope hints
+
+- Prefer package-scoped tests while iterating; run `./...` before claiming the task done.
+- If only `*_test.go` helpers changed, still run the package under test.
+- Module/`go.mod` changes: run `go test ./...` after `go mod tidy`.
+
+## Agent requirement
+
+- Do not claim completion without running the applicable gate (or noting why CI-only).
+- Pipeline `build-verifier` enforces the same checklist.
+- Record failing command output in the task artifact when the gate fails.
+- Skip only when the change is docs/config with no `*.go` / `go.mod` impact — state that explicitly.

package/presets/cursor/go/rules/preset-layering.mdc

@@ -0,0 +1,36 @@
+---
+description: Preset authoring meta-rule (preset-layering)
+globs:
+  - packages/ai-rules/presets/**/*
+  - .cursor/rules/**/*
+  - .cursor/team/tasks/**/*
+alwaysApply: false
+---
+
+<!-- shared-core: meta/preset-layering.md -->
+
+# Preset layering
+
+Правила для **авторов пресетов** (`packages/ai-rules/presets/**`). Не always-on в consumer apps.
+
+## Слои
+
+| Слой | Где | Что класть |
+|------|-----|------------|
+| **Core** | `presets/_shared/core/**` | Stack-agnostic prose + checklists; без frontmatter; без путей `app/**`, `Features/**`, Playwright, xcodebuild |
+| **Stack** | `presets/{cursor\|claude}/<stack>/` | Domain/tooling, always-on trio стека, stack examples в **Stack notes** |
+| **Platform** | Cursor `.mdc` / Claude `.md` | Frontmatter (`alwaysApply`/`globs` vs `paths:`), platform-only (`BUGBOT.md`, `CLAUDE.md`) |
+
+## Куда класть новое правило
+
+1. Общие принципы для всех стеков → **core** + адаптеры с `<!-- shared-core: … -->`.
+2. Только один из installable стеков (`next` / `ios-swift` / `go`) → **stack-specific** (не в `_shared`).
+3. Только Cursor или только Claude packaging → platform artifact / frontmatter, не дублировать семантику.
+
+## SoT
+
+- Packages path — SoT; root `.cursor/` — dogfood sync.
+- Per stack: **Cursor** `presets/cursor/<stack>/` → Claude twin same PR.
+- `_shared` **не** `--preset` и не копируется CLI `init`.
+
+См. также: `preset-twin-sync`, `preset-token-budget`, `preset-pr-checklist`, `preset-no-cross-stack-leakage`.

package/presets/cursor/go/rules/preset-no-cross-stack-leakage.mdc

@@ -0,0 +1,58 @@
+---
+description: Preset authoring meta-rule (preset-no-cross-stack-leakage)
+globs:
+  - packages/ai-rules/presets/**/*
+  - .cursor/rules/**/*
+  - .cursor/team/tasks/**/*
+alwaysApply: false
+---
+
+<!-- shared-core: meta/preset-no-cross-stack-leakage.md -->
+
+# Preset no cross-stack leakage
+
+Запрет протекания stack-specific имён, путей и handoff stems между пресетами.
+
+## Principles
+
+- `next` must not require iOS-only agents/tooling (`xcuitest-*`, `xcodebuild` as required handoff, Keychain-only rules).
+- `ios-swift` must not ship Playwright handoffs or Next lint recipes as required commands.
+- `go` must not ship Playwright, XCUITest, Next lint recipes, or `xcodebuild`/`SwiftLint` as required handoffs.
+- Shared core must not embed stack paths (`app/src/**`, `Features/**`, `playwright`, `xcodebuild`).
+
+## Forbidden in ios-swift hooks/agents (FAIL)
+
+In ios-swift `chain-team-phases.sh` / agent handoffs (Cursor + Claude):
+
+- `playwright-test-`, `playwright-agents`, `playwright-e2e`, `user-playwright`
+- `app/__tests__/e2e` as a required path
+- Positive yarn recipes `lint:js` / `lint:css` as commands to run (negation prose alone is weak — prefer zero occurrences)
+
+Required instead: `xcuitest-test-*` stems; build-verifier mentions `xcodebuild` or `post-change-build` / `xcode-tooling`.
+
+## Forbidden in next hooks/agents (FAIL when present as required)
+
+- `xcuitest-test-` as handoff stems
+- Requiring `xcodebuild` / SwiftLint as the default post-change gate for Next app work
+
+## Forbidden in go hooks/agents (FAIL)
+
+- `playwright-test-`, `playwright-e2e`, `user-playwright`, `app/__tests__/e2e`
+- Positive yarn recipes `lint:js` / `lint:css`
+- `xcuitest-test-`, `xcodebuild`, `SwiftLint` as required handoffs
+- Agent file `accessibility-reviewer` (no UI surface)
+
+Required instead: `integration-test-*`; build-verifier / `post-change-test` / `go-tooling` (`go test`, `go vet`).
+
+## Soft / document
+
+- Mentioning the other stack in **docs** comparing presets is OK.
+- `build-verifier` may reference other stacks when validating **preset packaging** (`scope: preset-structure-validation`).
+
+## Chain fork
+
+`hooks/chain-team-phases.sh` must differ **byte-wise** pairwise among `next`, `ios-swift`, and `go` (per platform).
+
+## Stack notes
+
+Forbidden positive handoffs on this stack are listed in core § go. Prefer `integration-test-*` and `post-change-test`.

package/presets/cursor/go/rules/preset-pr-checklist.mdc

@@ -0,0 +1,39 @@
+---
+description: Preset authoring meta-rule (preset-pr-checklist)
+globs:
+  - packages/ai-rules/presets/**/*
+  - .cursor/rules/**/*
+  - .cursor/team/tasks/**/*
+alwaysApply: false
+---
+
+<!-- shared-core: meta/preset-pr-checklist.md -->
+
+# Preset PR checklist
+
+Чеклист для PR, затрагивающих `packages/ai-rules/presets/**` (и dogfood `.cursor/` sync).
+
+## Before merge
+
+- [ ] **SoT:** правки в `packages/…` (не только root `.cursor/`)
+- [ ] **Core:** если менялся `_shared/core/**` — обновлены все `<!-- shared-core: … -->` consumers (или documented intentional fork)
+- [ ] **Twin:** Cursor change → Claude twin **same PR** (**FAIL** if missing on next, ios-swift, and go — см. `preset-twin-sync`)
+- [ ] **Mapping:** `claude/<stack>/rules/README.md` mapping table актуален
+- [ ] **Token budget:** alwaysApply / session-start ≤ 3; meta rules not always-on
+- [ ] **Leakage:** нет чужих stack agent stems / handoff strings (`preset-no-cross-stack-leakage`)
+- [ ] **Twin depth:** domain ≥15 lines; thin aliases documented
+- [ ] **README:** stack `rules/README.md` core→stack mapping / catalog updated if stems added
+- [ ] **CHANGELOG / package README:** note when public preset paths or install surface change
+- [ ] **Dogfood:** run `packages/ai-rules/scripts/sync-dogfood-cursor.sh` (or document intentional skip) when maintaining this monorepo
+- [ ] **shared-core drift:** for embed-mode stems, run `packages/ai-rules/scripts/check-shared-core-drift.sh` (or document intentional fork)
+
+## Pointers
+
+- Layering: `preset-layering`
+- Sync: `preset-twin-sync`
+- Budget: `preset-token-budget`
+- Leakage: `preset-no-cross-stack-leakage`
+- Validation: stack `agents/build-verifier.md` → preset-structure section
+- Dogfood script: `packages/ai-rules/scripts/sync-dogfood-cursor.sh`
+- Drift script: `packages/ai-rules/scripts/check-shared-core-drift.sh`
+- Orchestrator: when editing presets, load this checklist + twin-sync

package/presets/cursor/go/rules/preset-token-budget.mdc

@@ -0,0 +1,41 @@
+---
+description: Preset authoring meta-rule (preset-token-budget)
+globs:
+  - packages/ai-rules/presets/**/*
+  - .cursor/rules/**/*
+  - .cursor/team/tasks/**/*
+alwaysApply: false
+---
+
+<!-- shared-core: meta/preset-token-budget.md -->
+
+# Preset token budget
+
+Инварианты загрузки правил в **установленном** пресете (consumer app).
+
+## Hard caps
+
+| Platform | Always-on | Cap |
+|----------|-----------|-----|
+| Cursor | `alwaysApply: true` | **≤ 3** |
+| Claude | rules **without** `paths:` | **ровно 3** |
+
+**Claude Option A (README exclusion):** when counting Claude rules without `paths:` / session-start, **exclude `**/README.md`** (topic indexes are not session-start rules). The intended session-start trio remains **exactly 3**; body budget sums **only those 3** rules.
+
+Session-start body budget (где задокументировано): ≤120 строк суммарно (stretch ≤100).
+
+## Meta / author rules
+
+Rules for preset authors (`preset-layering`, `preset-twin-sync`, …):
+
+- **Never** `alwaysApply: true` on consumer installs.
+- Cursor: `globs` limited to `packages/ai-rules/presets/**` (and dogfood `.cursor/**` where useful).
+- Claude: `paths:` limited to `packages/ai-rules/presets/**` (and `.claude/**` dogfood if present).
+
+## Heavy workflows
+
+Orchestrator, feature-delivery, code-review, post-change gates, domain globs — **requestable / paths**, not always-on.
+
+## Verifier
+
+build-verifier **FAIL** if alwaysApply / session-start count exceeds 3 (Claude count **excludes `**/README.md`**), or if a `preset-*` meta rule is marked always-on.

package/presets/cursor/go/rules/preset-twin-sync.mdc

@@ -0,0 +1,42 @@
+---
+description: Preset authoring meta-rule (preset-twin-sync)
+globs:
+  - packages/ai-rules/presets/**/*
+  - .cursor/rules/**/*
+  - .cursor/team/tasks/**/*
+alwaysApply: false
+---
+
+<!-- shared-core: meta/preset-twin-sync.md -->
+
+# Preset twin sync
+
+Cursor `.mdc` — **SoT per stack**. Claude topic `.md` — derived twin.
+
+## Matrix
+
+| Stack | Cursor SoT | Claude derive | Mapping table |
+|-------|------------|---------------|---------------|
+| `next` | `presets/cursor/next/rules/*.mdc` | `presets/claude/next/rules/<topic>/` | **Required** in `claude/next/rules/README.md` |
+| `ios-swift` | `presets/cursor/ios-swift/rules/*.mdc` | `presets/claude/ios-swift/rules/<topic>/` | Keep in `claude/ios-swift/rules/README.md` |
+| `go` | `presets/cursor/go/rules/*.mdc` | `presets/claude/go/rules/<topic>/` | Keep in `claude/go/rules/README.md` |
+
+## Same-PR checklist
+
+1. Edit Cursor rule first (body + frontmatter).
+2. Update Claude twin: body + `paths:` (from Cursor `globs:` / requestable triggers); drop `alwaysApply`.
+3. Update mapping table row if stem/path changed.
+4. If body embeds core (`<!-- shared-core: … -->`), sync core consumers across stacks when core changed.
+
+## Twin depth
+
+- **Domain** rules: ≥15 body lines (FAIL if thin without documented alias reason).
+- **Thin aliases** (`agent-team-intake`, `technical-retro`): may be shorter (soft) if they only point to a command/skill.
+
+## Severity (build-verifier)
+
+- **next:** missing Claude twin for a changed Cursor rule → **FAIL** (mapping table required).
+- **ios-swift:** missing Claude twin for a changed Cursor rule → **FAIL**.
+- **go:** missing Claude twin for a changed Cursor rule → **FAIL** (same as next / ios-swift; mapping table required).
+
+Dogfood: sync packages → root `.cursor/` after Cursor SoT changes (not the reverse). Use `packages/ai-rules/scripts/sync-dogfood-cursor.sh`.

package/presets/cursor/go/rules/reference-features.mdc

@@ -0,0 +1,31 @@
+---
+description: Reference paths for Go hexagonal layout (fill after init)
+globs:
+  - internal/**/*
+  - cmd/**/*
+alwaysApply: false
+---
+
+<!-- shared-core: architecture/reference-features.template.md -->
+
+# Reference features (Go)
+
+Fill TBD paths after adopting this preset in a real service repo.
+
+| Area | Example path (TBD) | Glob hint |
+|------|--------------------|-----------|
+| Domain | `internal/domain/` | `**/domain/**` |
+| Application / ports | `internal/application/` | `**/application/**` |
+| HTTP adapter | `internal/adapters/http/` | `**/adapters/http/**` |
+| Persistence | `internal/adapters/persistence/` | `**/adapters/persistence/**` |
+| Composition root | `cmd/<service>/`, `internal/app/` | `cmd/**`, `internal/app/**` |
+| Unit tests | `*_test.go` beside packages | `**/*_test.go` |
+| Integration | `**/integration/` | `**/*_integration_test.go` |
+
+## Dogfood scenarios
+
+1. `/task` new use case — domain → ports → adapters → wire → `post-change-test`.
+2. Bug in handler mapping — debugger + httptest unit.
+3. Repository contract — integration-test trio.
+4. OpenAPI/proto drift — api-contract-reviewer.
+5. Secrets in logs — security-reviewer + `security-go`.

package/presets/cursor/go/rules/security-go.mdc

@@ -0,0 +1,23 @@
+---
+description: Security basics for Go backends (secrets, auth, PII, TLS)
+globs:
+  - "**/middleware/**/*"
+  - "**/auth/**/*"
+  - "**/config/**/*"
+alwaysApply: false
+---
+
+
+# Security (Go)
+
+- Secrets from env/secret manager — never commit keys; do not log tokens/passwords.
+- Validate and canonicalize untrusted input at the driving adapter edge.
+- Prefer prepared statements / parameterized queries in persistence adapters.
+- TLS and secure cookie/header defaults when exposing HTTP.
+- AuthN/AuthZ in middleware or driving adapters; pass identity into use cases as domain value (user ID / claims), not raw headers.
+- Minimize PII in logs; redact where needed.
+
+## Config
+
+- Distinguish public vs secret config fields in types.
+- Fail closed when auth is misconfigured in production builds.

package/presets/cursor/go/rules/technical-retro.mdc

@@ -0,0 +1,14 @@
+---
+description: Technical retro alias — use /technical-retro command
+alwaysApply: false
+---
+
+<!-- shared-core: review/technical-retro.md -->
+
+# Техническое ретро — rule alias
+
+Полный сценарий (включая блок **«Работа агентов»** для slug из team tasks) — в slash-команде:
+
+**`commands/technical-retro.md`** → `/technical-retro`
+
+Используй rule только если command недоступен. Не дублируй содержимое command в ответе — следуй command-файлу и skill `technical-retro`.

package/presets/cursor/go/rules/tests-e2e.mdc

@@ -0,0 +1,19 @@
+---
+description: End-to-end HTTP smoke tests for Go services
+globs:
+  - "**/e2e/**/*_test.go"
+  - "**/*_e2e_test.go"
+alwaysApply: false
+---
+
+
+# E2E / HTTP smoke
+
+- Black-box against a running server (httptest with full composition root, or localhost in CI).
+- Cover critical paths only; prefer integration + unit for breadth.
+- Stable test data; avoid depending on wall-clock flakiness.
+- Do not use browser/Playwright tooling in this preset.
+
+## Placement
+
+- `e2e/` package or `*_e2e_test.go` with build tags if needed.

package/presets/cursor/go/rules/tests-integration.mdc

@@ -0,0 +1,24 @@
+---
+description: Integration / adapter contract tests for Go hexagonal services
+globs:
+  - "**/integration/**/*_test.go"
+  - "**/*_integration_test.go"
+alwaysApply: false
+---
+
+
+# Integration tests
+
+- Exercise driven adapters against real infra doubles (testcontainers, docker compose test DB, miniredis, etc.).
+- Or exercise HTTP adapter with `httptest` + wired use case + fake/real ports — still no full prod cluster required.
+- Build tags (`//go:build integration`) if the repo separates CI jobs.
+- Keep fixtures deterministic; clean up data between tests.
+
+## Scope
+
+- Contract of a port implementation (repo save/load roundtrip).
+- Not a substitute for domain unit tests.
+
+## Agents
+
+- Planning/generation: `integration-test-{planner,generator,healer}` + skill `integration-testing`.

package/presets/cursor/go/rules/tests-unit.mdc

@@ -0,0 +1,25 @@
+---
+description: Unit testing conventions for Go hexagonal services
+globs:
+  - "**/*_test.go"
+alwaysApply: false
+---
+
+
+# Unit tests
+
+- Table-driven tests; clear arrange/act/assert.
+- Domain and application: mock/fake **ports** only — no real DB/network.
+- Prefer fakes over heavy mocking frameworks when simple.
+- Skip integration/e2e files matching `*_integration_test.go`, `*_e2e_test.go`, or dirs `integration/`, `e2e/` — those use other rules.
+
+## Forbidden smells
+
+- `gin.Context` / `http.Request` in domain tests.
+- SQL or live HTTP in use-case unit tests.
+- Brittle tests on unexported adapter internals without need.
+- Structural smells vocabulary (Feature Envy, Message Chains, …): see requestable `design-guidance` — do not duplicate the catalog here.
+
+## Naming
+
+- `TestUseCase_DoX` / `TestEntity_Invariant`.

package/presets/cursor/go/skills/README.md

@@ -0,0 +1,5 @@
+# Skills (preset go)
+
+7 skills: `feature-delivery`, `unit-testing`, `integration-testing`, `ci-investigation`, `debug-investigation`, `code-review`, `technical-retro`.
+
+No `playwright-e2e` / `xcuitest-e2e`.

package/presets/cursor/go/skills/ci-investigation/SKILL.md

@@ -0,0 +1,11 @@
+---
+name: ci-investigation
+description: Investigates failing CI checks on PRs and branches — go test, vet, lint, integration, preset-structure — with local reproduction and minimal fixes. Use when CI is red or for ci-fix pipeline tasks.
+---
+
+# CI investigation (Go)
+
+1. Identify job + log excerpt.
+2. Reproduce locally with the same commands.
+3. Minimal fix; for ai-rules preset PRs run `yarn check:preset-structure`.
+4. Do not treat Playwright/xcodebuild/`lint:js` as default Go gates.

package/presets/cursor/go/skills/code-review/SKILL.md

@@ -0,0 +1,16 @@
+---
+name: code-review
+description: Reviews pull requests and branch diffs for Go hexagonal services using architecture, ports/adapters, networking, and testing standards. Use when the user asks for review or when code-reviewer runs.
+---
+
+# Code review (Go)
+
+1. Diff-first; load `code-review-mr.mdc` + hexagonal rules.
+2. Check layer leaks, port ownership, composition root purity, tests, security-sensitive bits.
+3. Write `review.md` with APPROVE or REQUEST_CHANGES.
+
+Never require iOS/Next-only gates (XCUITest, Playwright, `lint:js`).
+
+## Design guidance
+
+- Load `design-guidance` (rule stem) when assessing structure, smells, or pattern fit.

package/presets/cursor/go/skills/debug-investigation/SKILL.md

@@ -0,0 +1,15 @@
+---
+name: debug-investigation
+description: Investigates bugs, failing tests, and unexpected behavior in Go services with runtime evidence before applying minimal fixes. Use for bugfix tasks, debugger agent runs, or regressions.
+---
+
+# Debug investigation (Go)
+
+1. Capture failing `go test` / logs / stack traces.
+2. Hypothesize layer (domain vs adapter vs wiring).
+3. Minimal fix + regression test when appropriate.
+4. Document in `debug-report.md`.
+
+## Design guidance
+
+- Load `design-guidance` (rule stem) when assessing structure, smells, or pattern fit.

package/presets/cursor/go/skills/feature-delivery/SKILL.md

@@ -0,0 +1,26 @@
+---
+name: feature-delivery
+description: Delivers Go hexagonal backend features end-to-end across domain, application/ports, adapters, composition root, tests, and post-change-test validation. Use when implementing or extending a feature, especially through /task or feature-developer.
+---
+
+# Feature Delivery (Go hexagonal)
+
+1. Read brief, AC, and decomposition.
+2. Follow `feature-delivery-workflow.mdc` + `reference-features.mdc`: domain → application/ports → driven adapters → driving adapters → composition root → tests.
+3. Wire DI only in `cmd/` / `internal/app`.
+4. Add unit tests for domain/use cases; integration tests for risky adapters.
+5. After Go edits: **invoke** `post-change-test.mdc` (+ `go-tooling.mdc`).
+
+## Do / Don't
+
+- **Do** keep ports owned by application; map wire types at adapters.
+- **Don't** put SQL/business rules in HTTP handlers or frameworks in domain.
+- **Don't** use Playwright, XCUITest, or yarn lint as this stack's gate.
+
+## Handoff
+
+Summarize by layer + validation. Update `.cursor/team/tasks/<slug>/status.json`.
+
+## Design guidance
+
+- Load `design-guidance` (rule stem) when assessing structure, smells, or pattern fit.