@next-friday/create-app 9.3.0 → 9.3.1

package/README.md

@@ -32,7 +32,7 @@ Every stack is built from [`templates/base`](templates/base), which holds the sh
 - **Git hooks:** Husky runs gitleaks, `pnpm rules:check`, and lint-staged before each commit, commitlint on each message, and `pnpm check` before each push. After the first commit, commits to `main` are blocked, and local merges into `main` always are; pushes to `main` are blocked once it exists on the remote.
 - **CI:** GitHub Actions run the static checks, tests with patch coverage, the build, end-to-end tests for Next.js and Payload, a container build and vulnerability scan, Semgrep, OSV-Scanner, CodeQL, dependency review, OpenSSF Scorecard, gitleaks, TruffleHog, zizmor, and pull request title validation. Dependabot keeps dependencies current.
 - **Deployment:** a `Dockerfile` that runs as the `node` user, and a Railway workflow that promotes one commit through `dev`, `uat`, and `prod`.
-- **Agent rules:** `CLAUDE.md` imports `AGENTS.md`. Shared rules live in `.agents/rules`, with hooks that enforce them in Claude Code and Cursor, and a Cursor Bugbot configuration.
+- **Agent rules:** `CLAUDE.md` imports `AGENTS.md`. Shared rules live in `.agents/rules`, with hooks that enforce them in Claude Code and Cursor.
 
 ## Requirements
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@next-friday/create-app",
-  "version": "9.3.0",
+  "version": "9.3.1",
   "description": "Create a Next Friday project from a template.",
   "keywords": [
     "create",

package/templates/base/SETUP.md

@@ -81,10 +81,9 @@ Replace `security@example.com` in `SECURITY.md` with the contact the security po
 
 **Who:** a Cursor team admin.
 
-- **Bugbot:** enable the repository at [Bugbot](https://cursor.com/automations/from-cursor/bugbot). Bugbot reviews pull requests by the files `.cursor/BUGBOT.md` links, including `.agents/review.md`.
 - **Sandbox:** set the team's sandbox policy ([Cursor sandbox](https://cursor.com/docs/reference/sandbox)), which repository and user settings cannot weaken.
 
-**Check:** the test pull request gets a Bugbot review.
+**Check:** the team's settings in Cursor show the sandbox policy.
 
 ## 6. Team decisions
 

package/templates/base/.cursor/BUGBOT.md

@@ -1,23 +0,0 @@
-# Review rules
-
-Review pull requests against the project's agent guide and rules:
-
-- [Review instructions](../.agents/review.md)
-- [Agent guide](../AGENTS.md)
-- [Agent-Owned Work](../.agents/rules/agent-owned-work.md)
-- [Owned Checks](../.agents/rules/automation-owned-checks.md)
-- [Required Comments](../.agents/rules/code-comments.md)
-- [Codebase Hygiene](../.agents/rules/codebase-hygiene.md)
-- [Constitution Changes](../.agents/rules/constitution-changes.md)
-- [Current State](../.agents/rules/current-state-authority.md)
-- [Demand-Driven Configuration](../.agents/rules/demand-driven-configuration.md)
-- [Dependencies](../.agents/rules/dependency-security.md)
-- [Descriptive Naming](../.agents/rules/descriptive-naming.md)
-- [Test Admission](../.agents/rules/deterministic-testing.md)
-- [Diagnostics](../.agents/rules/diagnostics-and-error-handling.md)
-- [Evidence](../.agents/rules/evidence-before-claims.md)
-- [Findings](../.agents/rules/no-suppression.md)
-- [Platform and Library First](../.agents/rules/platform-and-library-first.md)
-- [Sibling Style](../.agents/rules/single-author-style.md)
-- [Logging](../.agents/rules/structured-logging.md)
-- [TypeScript-First](../.agents/rules/typescript-first.md)