@softspark/ai-toolkit 1.3.14 → 1.4.0

package/app/skills/review/SKILL.md

@@ -117,17 +117,40 @@ After all reviewers complete:
 - **Lines Added**: [+count]
 - **Lines Removed**: [-count]
 - **Issues Found**: [count]
+- **Overall Confidence**: [1-10] — how confident the reviewer is in the assessment
 
 ### Findings
 
 #### Critical
 - **[file:line]**: [issue]
-  - [explanation]
+  - Severity: critical | Confidence: [1-10]
+  - Evidence: [specific code reference and reasoning]
   - Suggested fix: [code]
 
-#### Suggestions
+#### Major
+- **[file:line]**: [issue]
+  - Severity: major | Confidence: [1-10]
+  - Evidence: [specific code reference and reasoning]
+  - Suggested fix: [code]
+
+#### Minor
+- **[file:line]**: [issue]
+  - Severity: minor | Confidence: [1-10]
+  - Evidence: [line number + reasoning]
+
+#### Nit
 - **[file:line]**: [suggestion]
-  - [explanation]
+  - Severity: nit | Confidence: [1-10]
+
+### Confidence Guide
+
+| Score | Meaning |
+|-------|---------|
+| 9-10 | Certain — verified via code, tests, or documentation |
+| 7-8 | High — strong evidence, minor assumptions |
+| 5-6 | Medium — plausible issue, needs author confirmation |
+| 3-4 | Low — speculative, based on patterns not proof |
+| 1-2 | Guess — flag for discussion, don't block on this |
 
 ### Positive Notes
 - [What's good about the code]
@@ -136,6 +159,38 @@ After all reviewers complete:
 [APPROVE / REQUEST_CHANGES / NEEDS_DISCUSSION]
 ```
 
+## Common Rationalizations
+
+| Excuse | Why It's Wrong |
+|--------|----------------|
+| "Small change, quick scan is enough" | Small changes introduce subtle bugs — apply consistent review regardless of size |
+| "Tests pass, so the code is correct" | Tests validate specific scenarios, not all behaviors — verify missing coverage |
+| "It's just a refactor, no need for deep review" | Refactors change invariants — verify behavior preservation, not just compilation |
+| "The author is senior, they know what they're doing" | Seniority doesn't prevent mistakes — review the code, not the person |
+| "We're in a hurry, ship it" | Rushed reviews create tech debt that costs 10x more to fix later |
+
+## Self-Evaluation (LLM-as-Judge)
+
+After completing the review, perform a self-evaluation pass:
+
+### Check for Blind Spots
+1. **Did I verify, or assume?** — For each finding, confirm you read the actual code (not inferred from context)
+2. **Did I miss the inverse?** — If you flagged X as a problem, did you check if NOT doing X is also a problem elsewhere?
+3. **Did I anchor on the first issue?** — Review whether early findings biased you toward similar patterns, missing different issue classes
+4. **Did I check the unhappy path?** — Error handling, edge cases, failure modes — not just the golden path
+5. **Did I flag uncertainty?** — Findings with confidence < 6 should be clearly marked as "needs author input"
+
+### Calibrate Confidence
+- If all findings are confidence 7+, you may be overconfident — re-examine the weakest finding
+- If any finding lacks a file:line reference, downgrade it or remove it
+- If you found zero issues, state what you specifically checked (not "looks good")
+
 ## READ-ONLY
 
 This skill only analyzes. It does NOT modify any files.
+
+## Related Skills
+- Issues found? → `/debug` to trace root causes
+- Missing tests? → `/tdd` to add test-first coverage
+- Security findings? → `/cve-scan` for dependency vulnerabilities
+- Architecture concerns? → `/analyze` for deeper code quality metrics

package/app/skills/security-patterns/SKILL.md

@@ -81,6 +81,16 @@ async def resource():
 
 ---
 
+## Common Rationalizations
+
+| Excuse | Why It's Wrong |
+|--------|----------------|
+| "It's an internal API, security doesn't matter" | Internal APIs get exposed — lateral movement is attackers' primary technique |
+| "The framework handles security" | Frameworks provide tools, not guarantees — misconfiguration is OWASP #5 |
+| "We'll add auth later" | Unauthenticated endpoints in production get discovered within hours |
+| "Nobody would exploit this" | Automated scanners don't care about your threat model — they scan everything |
+| "It's behind a VPN" | VPNs are perimeter defense — zero trust assumes breach already happened |
+
 ## Reference Guides
 
 For authentication patterns (JWT, passwords, token strategy), see [reference/authentication.md](reference/authentication.md).

package/app/skills/tdd/SKILL.md

@@ -172,3 +172,9 @@ Before marking work complete:
 - [ ] Edge cases and errors covered
 
 Can't check all boxes? You skipped TDD. Start over.
+
+## Related Skills
+- Feature complete? → `/review` to get a code review
+- Need to plan the feature first? → `/plan` for task breakdown
+- Want a full test coverage sweep? → `/workflow test-coverage`
+- Debugging a test failure? → `/debug` for systematic root cause analysis

package/app/skills/testing-patterns/SKILL.md

@@ -72,3 +72,13 @@ For PHP PHPUnit patterns, see [reference/php-phpunit.md](reference/php-phpunit.m
 For Go testing patterns, see [reference/go-testing.md](reference/go-testing.md).
 
 For Flutter/Dart testing patterns, see [reference/flutter-testing.md](reference/flutter-testing.md).
+
+## Common Rationalizations
+
+| Excuse | Why It's Wrong |
+|--------|----------------|
+| "It's too simple to test" | Simple code breaks in integration — test the contract, not the complexity |
+| "Tests slow down development" | Tests slow down bugs reaching production — that's the point |
+| "We'll add tests later" | Untested code accumulates — later means never, and coverage gaps compound |
+| "Mocking everything is fine" | Over-mocking tests the mocks, not the code — mock at boundaries only |
+| "100% coverage means no bugs" | Coverage measures execution, not correctness — focus on behavior assertions |

package/bin/ai-toolkit.js

@@ -76,17 +76,24 @@ const COMMANDS = {
   mcp: 'Manage MCP server templates (list, show, add, remove)',
   plugin: 'Manage plugin packs (install, remove, update, clean, list, status)',
   sync: 'Sync config to/from GitHub Gist (--export, --push, --pull, --import)',
-  'cursor-rules': 'Generate .cursorrules for Cursor IDE',
-  'windsurf-rules': 'Generate .windsurfrules for Windsurf',
+  'cursor-rules': 'Generate .cursorrules for Cursor IDE (legacy)',
+  'cursor-mdc': 'Generate .cursor/rules/*.mdc for Cursor IDE (recommended)',
+  'windsurf-rules': 'Generate .windsurfrules for Windsurf (legacy)',
+  'windsurf-dir-rules': 'Generate .windsurf/rules/*.md for Windsurf (recommended)',
   'copilot-instructions': 'Generate .github/copilot-instructions.md',
   'gemini-md': 'Generate GEMINI.md for Gemini CLI',
-  'cline-rules': 'Generate .clinerules for Cline',
+  'cline-rules': 'Generate .clinerules for Cline (legacy)',
+  'cline-dir-rules': 'Generate .cline/rules/*.md for Cline (recommended)',
   'roo-modes': 'Generate .roomodes for Roo Code',
+  'roo-dir-rules': 'Generate .roo/rules/*.md shared rules for Roo Code',
   'aider-conf': 'Generate .aider.conf.yml for Aider',
-  'augment-rules': 'Generate .augment/rules/ai-toolkit.md for Augment',
+  'conventions-md': 'Generate CONVENTIONS.md for Aider (auto-loaded)',
+  'augment-rules': 'Generate .augment/rules/ai-toolkit.md for Augment (legacy)',
+  'augment-dir-rules': 'Generate .augment/rules/ai-toolkit-*.md for Augment (recommended)',
+  'antigravity-rules': 'Generate .agent/rules/ and .agent/workflows/ for Google Antigravity',
   'agents-md': 'Regenerate AGENTS.md from agent definitions',
   'llms-txt': 'Generate llms.txt and llms-full.txt',
-  'generate-all': 'Generate all platform configs at once (agents, cursor, windsurf, copilot, gemini, cline, roo, aider, augment, llms)',
+  'generate-all': 'Generate all platform configs at once (agents, cursor, windsurf, copilot, gemini, cline, roo, aider, augment, antigravity, llms)',
   help: 'Show this help message',
 };
 
@@ -191,6 +198,9 @@ function showHelp() {
   console.log('  --local         Also set up project-local configs (CLAUDE.md, settings, constitution, copilot, cline, roo, aider, git hooks)');
   console.log('  --profile <p>   Install profile: minimal (agents+skills), standard (default), strict (all+git hooks)');
   console.log('  --modules <list>  Install specific modules (e.g. core,agents,rules-typescript)');
+  console.log('  --lang <list>   Explicitly select language rules (e.g. typescript, go,python)');
+  console.log('  --editors <list> Install editor configs: cursor,windsurf,cline,roo,aider,augment,copilot,antigravity (or "all")');
+  console.log('                  Default with --local: auto-detect from existing project files');
   console.log('  --auto-detect   Detect project languages and install matching rule modules');
   console.log('  --list, --dry-run  Dry-run: show what would be applied');
   console.log('\nOptions for create:');
@@ -372,6 +382,17 @@ function handleGenerateAll(_args) {
   for (const gen of Object.values(GENERATORS)) {
     writeGeneratorOutput(gen);
   }
+  // Directory-based generators (multi-file output)
+  run(scriptPath('generate_antigravity.py'), [CWD]);
+  run(scriptPath('generate_cursor_mdc.py'), [CWD]);
+  run(scriptPath('generate_windsurf_rules.py'), [CWD]);
+  run(scriptPath('generate_cline_rules.py'), [CWD]);
+  run(scriptPath('generate_roo_rules.py'), [CWD]);
+  run(scriptPath('generate_augment_rules.py'), [CWD]);
+  // Single-file generators
+  const conventionsOut = runGenerator('generate_conventions.py');
+  fs.writeFileSync(path.join(CWD, 'CONVENTIONS.md'), conventionsOut);
+  console.log('Generated: CONVENTIONS.md');
   generateLlmsTxt();
 }
 
@@ -429,6 +450,13 @@ const SPECIAL_HANDLERS = {
   'inject-hook':  handleInjectHook,
   'remove-hook':  handleRemoveHook,
   'llms-txt':     (_args) => generateLlmsTxt(),
+  'antigravity-rules': (_args) => run(scriptPath('generate_antigravity.py'), [CWD]),
+  'cursor-mdc':   (_args) => run(scriptPath('generate_cursor_mdc.py'), [CWD]),
+  'windsurf-dir-rules': (_args) => run(scriptPath('generate_windsurf_rules.py'), [CWD]),
+  'cline-dir-rules': (_args) => run(scriptPath('generate_cline_rules.py'), [CWD]),
+  'roo-dir-rules': (_args) => run(scriptPath('generate_roo_rules.py'), [CWD]),
+  'conventions-md': (_args) => { const out = runGenerator('generate_conventions.py'); fs.writeFileSync(path.join(CWD, 'CONVENTIONS.md'), out); console.log('Generated: CONVENTIONS.md'); },
+  'augment-dir-rules': (_args) => run(scriptPath('generate_augment_rules.py'), [CWD]),
   'generate-all': handleGenerateAll,
 };
 

package/kb/procedures/release-verification-sop.md

@@ -0,0 +1,283 @@
+---
+title: "SOP: Release Verification"
+category: procedures
+service: ai-toolkit
+tags: [sop, verification, release, smoke-test, install, update, qa]
+version: "1.1.0"
+created: "2026-04-08"
+last_updated: "2026-04-08"
+description: "End-to-end smoke test after installing or updating @softspark/ai-toolkit — verifies CLI, install, doctor, validation, tests, and eject from user perspective."
+---
+
+# SOP: Release Verification
+
+End-to-end smoke test after installing or updating `@softspark/ai-toolkit`.
+Verifies all critical paths from the user's perspective.
+
+**Use this SOP when:**
+- After `npm install -g @softspark/ai-toolkit@latest`
+- After `ai-toolkit update`
+- Before tagging a new version (`git tag`)
+- Before publishing to npm (`npm publish`)
+- As a smoke test in CI/CD
+
+**Prerequisites:**
+- Node.js >= 18, Python 3, `bats`, git
+- `@softspark/ai-toolkit` installed globally
+
+**Time:** 10-15 minutes (full), 2 minutes (quick checklist)
+
+---
+
+## Quick Checklist (TL;DR)
+
+9 commands — if all pass, the release is ready:
+
+```bash
+# Pre-commit (Phase 0)
+python3 scripts/generate_agents_md.py > AGENTS.md   # 1. Regenerate artifacts
+python3 scripts/generate_llms_txt.py > llms.txt      # 2. Regenerate llms.txt
+python3 scripts/validate.py --strict                 # 3. Validation passed?
+npm test                                             # 4. All tests passed?
+
+# Post-install verification (Phases 1-7)
+ai-toolkit --version                                 # 5. Version OK?
+ai-toolkit status                                    # 6. Status OK?
+ai-toolkit doctor                                    # 7. Health check passed?
+ai-toolkit install --dry-run                         # 8. Global install OK?
+python3 scripts/audit_skills.py --ci                 # 9. Security audit clean?
+```
+
+---
+
+## Phase 0: Pre-Commit & Pre-Push (2 min)
+
+Run these commands **before every commit and push to main**. CI validates
+counts but does NOT auto-regenerate — you must do it locally.
+
+```bash
+# 1. Regenerate generated artifacts
+python3 scripts/generate_agents_md.py > AGENTS.md
+python3 scripts/generate_llms_txt.py > llms.txt
+python3 scripts/generate_llms_txt.py --full > llms-full.txt
+
+# 2. Validate everything (catches stale counts, missing assets)
+python3 scripts/validate.py --strict
+
+# 3. Security audit
+python3 scripts/audit_skills.py --ci
+
+# 4. Run tests
+npm test
+
+# 5. Stage and commit
+git add AGENTS.md llms.txt llms-full.txt
+git add -p  # stage your other changes
+git commit -m "feat: your change description"
+```
+
+**Why local?** Branch protection on `main` requires PRs and status checks.
+CI cannot push directly to `main`, so generated artifacts must be committed
+by the developer as part of their PR.
+
+**One-liner (copy-paste):**
+```bash
+python3 scripts/generate_agents_md.py > AGENTS.md && python3 scripts/generate_llms_txt.py > llms.txt && python3 scripts/generate_llms_txt.py --full > llms-full.txt && python3 scripts/validate.py --strict && python3 scripts/audit_skills.py --ci && npm test
+```
+
+---
+
+## Phase 1: CLI & Version (1 min)
+
+```bash
+ai-toolkit --version
+ai-toolkit --help
+which ai-toolkit
+```
+
+**Verify:**
+- [ ] `--version` returns correct semver (e.g., `1.4.0`)
+- [ ] `--help` displays full command list without errors
+- [ ] `which` points to global npm bin path
+
+---
+
+## Phase 2: Global Install & Status (2 min)
+
+```bash
+ai-toolkit install --dry-run
+ai-toolkit status
+```
+
+**Verify `--dry-run`:**
+- [ ] Agents >= 40
+- [ ] Skills >= 80
+- [ ] Hooks merged into settings.json
+- [ ] "Other AI Tools" section lists cursor, windsurf, gemini, augment (antigravity via --local)
+
+**Verify `status`:**
+- [ ] Version matches expected
+- [ ] Profile: minimal/standard/strict
+- [ ] Modules: list of installed modules
+- [ ] Latest: up to date / update available
+
+---
+
+## Phase 3: Doctor Health Check (1 min)
+
+```bash
+ai-toolkit doctor
+```
+
+**Expected sections (all OK):**
+- Environment: node, bash, python3, bats
+- Global Install: .claude exists, agents/skills symlinks (0 broken), settings.json hooks
+- Hook Scripts: all present and executable
+- Hook Configuration: 12 events registered
+- Generated Artifacts: AGENTS.md, llms.txt, llms-full.txt
+- Planned Assets: plugin.json, benchmarks, plugin packs
+- Benchmark Freshness: < 30 days
+- Stale Rules: all healthy
+
+**Verify:**
+- [ ] `Errors: 0 | Warnings: 0`
+- [ ] `HEALTH CHECK PASSED`
+
+If doctor detects problems: `ai-toolkit doctor --fix` auto-repairs
+(broken symlinks, non-executable hooks, missing scripts, missing llms-full.txt).
+
+---
+
+## Phase 4: Local Install (2 min)
+
+```bash
+mkdir -p /tmp/ai-toolkit-verify && cd /tmp/ai-toolkit-verify
+git init -q
+ai-toolkit install --local --editors all --dry-run
+cd - && rm -rf /tmp/ai-toolkit-verify
+```
+
+**Verify "Project-local" section:**
+- [ ] Would create: CLAUDE.md
+- [ ] Would create: .claude/settings.local.json
+- [ ] Would inject: .claude/constitution.md
+- [ ] Editors: all 8 listed (copilot, cursor, windsurf, cline, roo, aider, augment, antigravity)
+- [ ] Would generate configs for each editor (legacy + directory-based)
+- [ ] Would install: .git/hooks/pre-commit
+- [ ] Would inject language rules (auto-detected)
+
+**Also test auto-detect (no --editors flag):**
+```bash
+ai-toolkit install --local --dry-run
+# → Editors: none (empty project has no existing configs)
+```
+
+---
+
+## Phase 5: Validation & Security Audit (3 min)
+
+```bash
+python3 scripts/validate.py --strict
+python3 scripts/audit_skills.py --ci
+```
+
+**Verify validate.py:**
+- [ ] Agents >= 40, Skills >= 80, Tests >= 350
+- [ ] Hook events: 12, Hook scripts: >= 20
+- [ ] Plugin packs >= 10, KB documents >= 20
+- [ ] `Errors: 0 | Warnings: 0` → `VALIDATION PASSED`
+
+**Verify audit_skills.py:**
+- [ ] `HIGH: 0` (MUST be zero — CI fails otherwise)
+- [ ] `WARN: 0`
+- [ ] `INFO: N` (acceptable — broad-access skills: orchestrate, swarm, teams)
+
+---
+
+## Phase 6: Tests (3-5 min)
+
+```bash
+npm test
+```
+
+**Verify:**
+- [ ] Bats runs tests in parallel (4 jobs)
+- [ ] All `ok` — zero `not ok`
+- [ ] Groups: agents, autodetect, cli, generators, guards, hooks, inject,
+      install, kb, mcp, readme, profiles, uninstall, validate
+
+**Key test areas:**
+- Guards: rm -rf, DROP TABLE, git push --force blocked
+- Install: idempotent, profiles, --only/--skip, orphan cleanup
+- Eject: real files (not symlinks), inlined rules
+- Uninstall: removes toolkit, preserves user content
+
+---
+
+## Phase 7: Eject (1 min)
+
+```bash
+mkdir -p /tmp/ai-toolkit-eject-test
+cd /tmp/ai-toolkit-eject-test
+ai-toolkit eject
+cd - && rm -rf /tmp/ai-toolkit-eject-test
+```
+
+**Verify:**
+- [ ] Agents copied as real files (not symlinks)
+- [ ] Skills copied as real directories
+- [ ] Rules inlined into CLAUDE.md
+- [ ] constitution.md and ARCHITECTURE.md copied
+
+---
+
+## Troubleshooting
+
+### `ai-toolkit: command not found`
+
+```bash
+npm install -g @softspark/ai-toolkit
+# or check PATH:
+export PATH="$(npm config get prefix)/bin:$PATH"
+```
+
+### Doctor: broken symlinks
+
+```bash
+ai-toolkit doctor --fix    # auto-repair
+ai-toolkit update          # or full re-install
+```
+
+### Tests fail: missing bats
+
+```bash
+brew install bats-core     # macOS
+npm install -g bats        # cross-platform
+```
+
+### validate.py: stale counts
+
+README badges don't match the current agents/skills/tests counts.
+Update README.md and re-run.
+
+### Eject: missing skills
+
+```bash
+ai-toolkit update          # re-link missing symlinks
+ai-toolkit eject /tmp/test # retry
+```
+
+---
+
+## Success Criteria
+
+| Area | Criterion |
+|------|-----------|
+| CLI | `--version` correct, `--help` full list, `status` current |
+| Health | `doctor`: 0 errors, 0 warnings, PASSED |
+| Install | `--dry-run` correct counts, `--local` all configs |
+| Quality | `validate.py --strict`: PASSED |
+| Security | `audit_skills.py --ci`: 0 HIGH |
+| Tests | `npm test`: N/N passed, 0 failures |
+| Eject | Standalone .claude/ with real files |
+| Guards | Destructive commands blocked |

package/kb/reference/architecture-overview.md

@@ -3,7 +3,7 @@ title: "AI Toolkit - Architecture Overview"
 category: reference
 service: ai-toolkit
 tags: [architecture, overview, design, structure]
-version: "1.3.14"
+version: "1.4.0"
 created: "2026-03-23"
 last_updated: "2026-04-08"
 description: "Architecture of ai-toolkit: directory layout, global install model, skill tiers, and integration with projects."
@@ -13,7 +13,7 @@ description: "Architecture of ai-toolkit: directory layout, global install model
 
 ## Purpose
 
-Shared, project-agnostic AI development toolkit for Claude Code (and compatible assistants like Cursor, Windsurf, Copilot, Gemini, Cline, Roo Code, Aider, and Augment). Provides specialized agents, skills (slash commands + knowledge), expanded lifecycle hooks, persona presets, and experimental opt-in plugin packs that teams can adopt separately from the default global install.
+Shared, project-agnostic AI development toolkit for Claude Code (and compatible assistants like Cursor, Windsurf, Copilot, Gemini, Cline, Roo Code, Aider, Augment, and Google Antigravity). Provides specialized agents, skills (slash commands + knowledge), expanded lifecycle hooks, persona presets, and experimental opt-in plugin packs that teams can adopt separately from the default global install.
 
 ## Design Principles
 
@@ -103,14 +103,19 @@ Machine (global)                              Project (local)
 
 **`ai-toolkit update`** — re-apply after `npm install -g @softspark/ai-toolkit@latest` or after `add-rule` / `remove-rule`. Same as `install` but semantically correct for update flows.
 
-**`ai-toolkit install --local`** (or `update --local`) — run per project, creates `CLAUDE.md` template + `.claude/settings.local.json` (only if missing, initialized with MCP defaults), and injects `constitution.md` + Copilot + Cline + Roo Code + Aider configs into local `.claude/` (preserves existing user content). Installs `--local` git hooks as a fallback for quality gates. Hooks are global-only — not merged into project settings.
+**`ai-toolkit install --local`** — run per project. Always installs Claude Code configs (CLAUDE.md, settings.local.json, constitution.md, language rules). Editor configs are opt-in via `--editors`:
+- `--editors all` — install all 8 editors (Cursor, Windsurf, Cline, Roo, Aider, Augment, Copilot, Antigravity)
+- `--editors cursor,aider` — install only selected editors
+- (no flag) — auto-detect from existing project files; `update --local` picks up whatever editors already have configs
+
+Each editor gets both legacy single-file format (for backwards compat) and new directory-based format (`.cursor/rules/*.mdc`, `.windsurf/rules/*.md`, `.cline/rules/*.md`, `.roo/rules/*.md`, `.augment/rules/ai-toolkit-*.md`, `.agent/rules/*.md`, `CONVENTIONS.md`). Hooks are global-only — not merged into project settings.
 
 ## CLI Commands
 
 | Command | Target | What it does |
 |---------|--------|-------------|
 | `install` | `~/.claude/` | First-time: per-file symlinks + JSON merge + marker injection + rules |
-| `install --local` | `./` | Also set up project-local: `CLAUDE.md` + `settings.local.json` + constitution + Copilot + Cline + Roo + Aider + Git Hooks (hooks stay global-only) |
+| `install --local` | `./` | Claude Code configs + editors via `--editors` (auto-detect or explicit) |
 | `update` | `~/.claude/` | Re-apply after npm update or after add-rule/remove-rule |
 | `update --local` | `./` | Re-apply + refresh project-local configs |
 | `uninstall` | `~/.claude/` | Strips toolkit components (preserves user content) |
@@ -120,13 +125,20 @@ Machine (global)                              Project (local)
 | `doctor` | toolkit | Install health, hooks, benchmark freshness, and artifact drift diagnostics |
 | `benchmark-ecosystem` | toolkit | Benchmark snapshot for official Claude Code and external ecosystem repos |
 | `evaluate` | toolkit | Skill quality report |
-| `cursor-rules` | `./` | Generates `.cursorrules` |
-| `windsurf-rules` | `./` | Generates `.windsurfrules` |
+| `cursor-rules` | `./` | Generates `.cursorrules` (legacy) |
+| `cursor-mdc` | `./` | Generates `.cursor/rules/*.mdc` (recommended) |
+| `windsurf-rules` | `./` | Generates `.windsurfrules` (legacy) |
+| `windsurf-dir-rules` | `./` | Generates `.windsurf/rules/*.md` |
 | `copilot-instructions` | `./` | Generates `.github/copilot-instructions.md` |
 | `gemini-md` | `./` | Generates `GEMINI.md` |
-| `cline-rules` | `./` | Generates `.clinerules` |
+| `cline-rules` | `./` | Generates `.clinerules` (legacy) |
+| `cline-dir-rules` | `./` | Generates `.cline/rules/*.md` |
 | `roo-modes` | `./` | Generates `.roomodes` |
+| `roo-dir-rules` | `./` | Generates `.roo/rules/*.md` |
 | `aider-conf` | `./` | Generates `.aider.conf.yml` |
+| `conventions-md` | `./` | Generates `CONVENTIONS.md` (Aider auto-loaded) |
+| `augment-dir-rules` | `./` | Generates `.augment/rules/ai-toolkit-*.md` |
+| `antigravity-rules` | `./` | Generates `.agent/rules/` + `.agent/workflows/` |
 | `agents-md` | toolkit | Regenerates `AGENTS.md` |
 | `llms-txt` | `./` | Generates `llms.txt` |
 | `generate-all` | `./` | Generates all platform configs at once |
@@ -178,6 +190,23 @@ Skills that spawn real parallel agents use:
 
 `CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1` must be set for Agent Teams (tmux-based) support.
 
+## Quality Guardrails
+
+### Anti-Rationalization Tables
+15 core skills include `## Common Rationalizations` tables — domain-specific excuses with rebuttals that prevent agent drift. Skills: `/review`, `/debug`, `/refactor`, `/tdd`, `/plan`, `/docs`, `/analyze`, `security-patterns`, `testing-patterns`, `api-patterns`, `ci-cd-patterns`, `clean-code`, `performance-profiling`, `git-mastery`, `database-patterns`.
+
+### Confidence Scoring & LLM-as-Judge (`/review`)
+Review findings include per-issue confidence scores (1-10) and severity tiers (critical/major/minor/nit). A self-evaluation pass after review checks for anchoring bias, assumption vs verification, and calibrates confidence.
+
+### Agent Verification Checklists
+10 agents have `## Verification Checklist` — domain-specific exit criteria: `code-reviewer`, `test-engineer`, `security-auditor`, `debugger`, `backend-specialist`, `frontend-specialist`, `database-architect`, `performance-optimizer`, `devops-implementer`, `documenter`.
+
+### Skill Reference Routing
+7 core skills include `## Related Skills` suggesting follow-up skills: `/review`, `/debug`, `/plan`, `/refactor`, `/tdd`, `/docs`, `/analyze`.
+
+### Intent Capture Interview (`/onboard`)
+Step 0 interview — 5 questions to capture undocumented project intent before setup.
+
 ## Component Relationships
 
 ```