deuk-agent-rule 2.5.13 → 3.3.2

package/scripts/merge-logic.mjs

@@ -1,258 +1,35 @@
 import {
-  copyFileSync,
   existsSync,
-  mkdirSync,
   readFileSync,
-  readdirSync,
-  unlinkSync,
-  writeFileSync,
 } from "fs";
 import { join } from "path";
 
-export const DEFAULT_TAG = "deuk-agent-rule";
-
-/** HTML-style markers in `.cursorrules` (separate from AGENTS.md markers). */
-export const CURSORRULES_TAG = "deuk-agent-rule-cursorrules";
-
-export function resolveCursorrulesMarkers(o = {}) {
-  return resolveMarkers({
-    tag: o.tag && String(o.tag).trim() ? String(o.tag).trim() : CURSORRULES_TAG,
-    markerBegin: o.markerBegin,
-    markerEnd: o.markerEnd,
-  });
-}
-
-export function resolveMarkers(o) {
-  const hasBegin = o.markerBegin != null && o.markerBegin !== "";
-  const hasEnd = o.markerEnd != null && o.markerEnd !== "";
-  if (hasBegin !== hasEnd) {
-    throw new Error("Use both --marker-begin and --marker-end, or neither.");
-  }
-  if (hasBegin && hasEnd) {
-    if (o.markerBegin === o.markerEnd) {
-      throw new Error("--marker-begin and --marker-end must differ.");
-    }
-    return { begin: o.markerBegin, end: o.markerEnd };
-  }
-  const id = o.tag && o.tag.trim() ? o.tag.trim() : DEFAULT_TAG;
-  return {
-    begin: "<!-- " + id + ":begin -->",
-    end: "<!-- " + id + ":end -->",
-  };
-}
-
-export function findMarkerRegion(content, begin, end) {
-  const i = content.indexOf(begin);
-  if (i === -1) return null;
-  const j = content.indexOf(end, i + begin.length);
-  if (j === -1) {
-    throw new Error(
-      `[MARKER ERROR] Found begin marker "${begin}" but no matching end marker "${end}" after it.\n` +
-      `  This usually happens if one marker was deleted or renamed manually. Please verify the target file.`
-    );
-  }
-  const innerStart = i + begin.length;
-  const innerEnd = j;
-  return { innerStart, innerEnd };
-}
-
-export function applyAgents(opts) {
-  const { agentsMode, targetPath } = opts;
-
-  if (agentsMode === "skip") {
-    return {
-      action: "skip",
-      reason: existsSync(targetPath) ? "agents mode skip (file exists)" : "agents mode skip",
-    };
-  }
-
-  if (agentsMode === "overwrite") {
-    return handleAgentOverwrite(opts);
-  }
-
-  const existing = existsSync(targetPath) ? readFileSync(targetPath, "utf8") : "";
-
-  // Workflow Safety Check: warn about different tags and error on case-mismatch
-  const markerRegex = /<!--\s*([a-zA-Z0-9_-]+):begin\s*-->/gi;
-  const currentTagMatch = opts.markers.begin.match(/<!--\s*([a-zA-Z0-9_-]+):begin\s*-->/i);
-  const currentTag = currentTagMatch ? currentTagMatch[1] : null;
-
-  const foundTags = [];
-  let m;
-  while ((m = markerRegex.exec(existing)) !== null) {
-    if (currentTag && m[1].toLowerCase() === currentTag.toLowerCase()) {
-      if (m[1] !== currentTag) {
-        throw new Error(
-          `[CRITICAL ERROR] Case mismatch for tag "${currentTag}". Found "${m[1]}" in ${targetPath}.\n` +
-          `  Please unify casing to avoid duplicate managed blocks.`
-        );
-      }
-    } else {
-      foundTags.push(m[1]);
-    }
-  }
-
-  if (foundTags.length > 0) {
-    console.warn(`[WARNING] Foreign markers in ${targetPath}: ${[...new Set(foundTags)].join(", ")}`);
-    console.warn(`          Current tag is "${currentTag}". This might lead to duplicate managed blocks.`);
-  }
-
-  const region = findMarkerRegion(existing, opts.markers.begin, opts.markers.end);
-
-  if (region) {
-    return handleAgentInject(opts, existing, region);
-  }
-
-  return handleAgentAppend(opts, existing);
-}
-
-function handleAgentOverwrite(opts) {
-  const { targetPath, bundleContent, dryRun, backup } = opts;
-  const prev = existsSync(targetPath) ? readFileSync(targetPath, "utf8") : "";
-  if (dryRun) {
-    return { action: "would-write", path: targetPath, mode: "overwrite" };
-  }
-  if (backup && existsSync(targetPath)) {
-    copyFileSync(targetPath, targetPath + ".bak");
-  }
-  writeFileSync(targetPath, bundleContent, "utf8");
-  return { action: "write", path: targetPath, mode: "overwrite", hadPrevious: !!prev };
-}
-
-function handleAgentInject(opts, existing, region) {
-  const { targetPath, bundleContent, dryRun, backup } = opts;
-  const inner = bundleContent.trimEnd() + "\n";
-  const next = existing.slice(0, region.innerStart) + "\n" + inner + existing.slice(region.innerEnd);
-  if (dryRun) {
-    return { action: "would-write", path: targetPath, mode: "inject-region" };
-  }
-  if (backup && existsSync(targetPath)) {
-    copyFileSync(targetPath, targetPath + ".bak");
-  }
-  writeFileSync(targetPath, next, "utf8");
-  return { action: "write", path: targetPath, mode: "inject-region" };
-}
-
-function handleAgentAppend(opts, existing) {
-  const { targetPath, bundleContent, markers, flavor, appendIfNoMarkers, dryRun, backup } = opts;
-  const allowAppend = appendIfNoMarkers || flavor === "init";
-
-  if (!allowAppend) {
-    const hint = [
-      "",
-      "No marker region found. Add a pair like:",
-      "",
-      markers.begin,
-      "",
-      markers.end,
-      "",
-      "Or run: npx deuk-agent-rule init   (appends markers once)",
-      "Or pass: --append-if-no-markers",
-      "",
-    ].join("\n");
-    throw new Error(
-      "Inject mode requires markers in " + targetPath + " or use --append-if-no-markers." + hint,
-    );
-  }
-
-  const inner = bundleContent.trimEnd() + "\n";
-  const block = "\n" + markers.begin + "\n\n" + inner + "\n" + markers.end + "\n";
-  const next = existing ? existing.replace(/\s*$/, "") + block : markers.begin + "\n\n" + inner + "\n" + markers.end + "\n";
-
-  if (dryRun) {
-    return {
-      action: "would-write",
-      path: targetPath,
-      mode: flavor === "init" ? "append-markers-init" : "append-markers",
-    };
-  }
-  if (backup && existsSync(targetPath)) {
-    copyFileSync(targetPath, targetPath + ".bak");
-  }
-  writeFileSync(targetPath, next, "utf8");
-  return {
-    action: "write",
-    path: targetPath,
-    mode: flavor === "init" ? "append-markers-init" : "append-markers",
-  };
-}
-
-export function applyRules(opts) {
-  const {
-    bundleRulesDir,
-    targetRulesDir,
-    rulesMode,
-    filePrefix = "deuk-agent-rule-",
-    dryRun,
-    backup,
-  } = opts;
-
-  if (!existsSync(bundleRulesDir)) {
-    throw new Error("Bundle rules directory missing: " + bundleRulesDir);
-  }
-
-  const actions = [];
-  mkdirSync(targetRulesDir, { recursive: true });
-
-  for (const name of readdirSync(bundleRulesDir)) {
-    if (!name.endsWith(".mdc")) continue;
-    const src = join(bundleRulesDir, name);
-    let destPath = join(targetRulesDir, name);
-
-    if (rulesMode === "skip" && existsSync(destPath)) {
-      actions.push({ action: "skip", src, dest: destPath, reason: "exists" });
-      continue;
-    }
-
-    if (rulesMode === "prefix" && existsSync(destPath)) {
-      destPath = join(targetRulesDir, filePrefix + name);
-      // If prefixed file exists (repeat init after npm update), overwrite from bundle — do not skip.
-    }
-
-    if (dryRun) {
-      actions.push({ action: "would-copy", src, dest: destPath });
-      continue;
-    }
-
-    if (backup && existsSync(destPath)) {
-      copyFileSync(destPath, destPath + ".bak");
-    }
-    copyFileSync(src, destPath);
-    actions.push({ action: "copy", src, dest: destPath });
-  }
-
-  return actions;
-}
+export const DEFAULT_TAG = "DeukAgentRules";
 
 export function readBundleAgents(bundleRoot) {
-  const p = join(bundleRoot, "AGENTS.md");
+  const p = join(bundleRoot, "core-rules", "AGENTS.md");
   if (!existsSync(p)) {
     throw new Error("Bundle AGENTS.md missing: " + p);
   }
   return readFileSync(p, "utf8");
 }
 
-/**
- * Optional bundle file: Cursor root rules pointer to AGENTS.md.
- * @returns {string|null} file contents, or null if missing
- */
-export function readBundleCursorrules(bundleRoot) {
-  const p = join(bundleRoot, ".cursorrules");
-  if (!existsSync(p)) {
-    return null;
-  }
-  return readFileSync(p, "utf8");
-}
-
-/**
- * Remove one tagged block (markers inclusive). Returns ok:false if begin marker not found.
- * @returns {{ ok: true, content: string } | { ok: false, reason: string }}
- */
 export function removeTaggedBlock(content, begin, end) {
   const i = content.indexOf(begin);
   if (i === -1) {
     return { ok: false, reason: "begin not found" };
   }
+  if (end === null) {
+    let blockStart = i;
+    const prevText = content.slice(0, i);
+    const hrIndex = prevText.lastIndexOf("---");
+    if (hrIndex !== -1 && prevText.slice(hrIndex).trim() === "") {
+        blockStart = hrIndex;
+    }
+    let next = content.slice(0, blockStart).trimEnd() + "\n";
+    return { ok: true, content: next };
+  }
+  
   const j = content.indexOf(end, i + begin.length);
   if (j === -1) {
     return { ok: false, reason: "end not found" };
@@ -265,73 +42,3 @@ export function removeTaggedBlock(content, begin, end) {
   }
   return { ok: true, content: next };
 }
-
-
-/**
- * @param {{
- *   bundleRoot: string,
- *   cwd: string,
- *   markers: { begin: string, end: string },
- *   cursorrulesMode: "skip" | "inject" | "overwrite",
- *   dryRun?: boolean,
- *   backup?: boolean,
- * }} opts
- */
-export function applyCursorrules(opts) {
-  const { bundleRoot, cwd, markers, cursorrulesMode, dryRun, backup } = opts;
-  const raw = readBundleCursorrules(bundleRoot);
-  if (!raw) {
-    return { action: "skip", reason: "bundle .cursorrules missing" };
-  }
-  const inner = raw.trimEnd();
-  const targetPath = join(cwd, ".cursorrules");
-
-  if (cursorrulesMode === "skip") {
-    return { action: "skip", reason: "cursorrules mode skip" };
-  }
-
-  const writeTaggedOnly = (bodyInner) =>
-    markers.begin + "\n\n" + bodyInner + "\n\n" + markers.end + "\n";
-
-  if (cursorrulesMode === "overwrite") {
-    const next = writeTaggedOnly(inner);
-    if (dryRun) {
-      return { action: "would-write", path: targetPath, mode: "overwrite" };
-    }
-    if (backup && existsSync(targetPath)) {
-      copyFileSync(targetPath, targetPath + ".bak");
-    }
-    writeFileSync(targetPath, next, "utf8");
-    return { action: "write", path: targetPath, mode: "overwrite" };
-  }
-
-  // inject: update tagged region, or prepend tagged block above existing content
-  const existing = existsSync(targetPath) ? readFileSync(targetPath, "utf8") : "";
-  const region = findMarkerRegion(existing, markers.begin, markers.end);
-
-  if (region) {
-    const next =
-      existing.slice(0, region.innerStart) + "\n" + inner + "\n" + existing.slice(region.innerEnd);
-    if (dryRun) {
-      return { action: "would-write", path: targetPath, mode: "inject-region" };
-    }
-    if (backup && existsSync(targetPath)) {
-      copyFileSync(targetPath, targetPath + ".bak");
-    }
-    writeFileSync(targetPath, next, "utf8");
-    return { action: "write", path: targetPath, mode: "inject-region" };
-  }
-
-  const block = writeTaggedOnly(inner) + "\n";
-  const rest = existing.replace(/^\uFEFF/, "").trimStart();
-  const next = rest.length ? block + rest : block.trimEnd() + "\n";
-
-  if (dryRun) {
-    return { action: "would-write", path: targetPath, mode: "prepend-tagged" };
-  }
-  if (backup && existsSync(targetPath)) {
-    copyFileSync(targetPath, targetPath + ".bak");
-  }
-  writeFileSync(targetPath, next, "utf8");
-  return { action: "write", path: targetPath, mode: "prepend-tagged" };
-}

package/scripts/plan-parser.mjs

@@ -0,0 +1,53 @@
+/**
+ * Generic Markdown Plan Parser
+ * 
+ * Supports various AI Agent Plan formats (Antigravity, Copilot, etc.)
+ * Extracts basic ticket fields (title, summary, tasks) and body.
+ */
+
+export function parseGenericMarkdownPlan(content) {
+  const lines = content.split('\n');
+  
+  // 1. Title: First H1
+  const h1Line = lines.find(l => /^# /.test(l));
+  const title = h1Line ? h1Line.replace(/^# /, '').trim() : '';
+
+  // 2. Summary: Text between H1 and the first --- or ##
+  const h1Idx = h1Line ? lines.indexOf(h1Line) : -1;
+  let summaryLines = [];
+  for (let i = h1Idx + 1; i < lines.length; i++) {
+    if (/^---$/.test(lines[i].trim()) || /^## /.test(lines[i])) break;
+    if (lines[i].trim()) summaryLines.push(lines[i].trim());
+  }
+  const summary = summaryLines.join(' ').slice(0, 200);
+
+  // 3. Tasks: Collect all checklist items
+  const tasks = lines
+    .filter(l => /^\s*- \[[ x/]\]/.test(l))
+    .map(l => l.replace(/^\s*- \[[ x/]\]\s*/, '').trim());
+
+  return { title, summary, tasks, body: content };
+}
+
+/**
+ * Detect agent type from plan path
+ */
+export function detectAgentFromPath(planPath) {
+  if (planPath.includes('.gemini')) return 'antigravity';
+  if (planPath.includes('copilot') || planPath.includes('.codex')) return 'copilot';
+  if (planPath.includes('.cursor')) return 'cursor';
+  if (planPath.includes('.claude')) return 'claude';
+  return 'generic';
+}
+
+export const PLAN_PARSERS = {
+  'antigravity': parseGenericMarkdownPlan,
+  'copilot': parseGenericMarkdownPlan,
+  'generic': parseGenericMarkdownPlan
+};
+
+export function parsePlan(planPath, content) {
+  const agent = detectAgentFromPath(planPath);
+  const parser = PLAN_PARSERS[agent] || parseGenericMarkdownPlan;
+  return parser(content);
+}

package/templates/MODULE_RULE_TEMPLATE.md

@@ -0,0 +1,11 @@
+# Submodule Rules: [Module Name]
+
+- **Path Root:** `[Path]`
+- **Tech Stack:** `[Tech]`
+
+## Architecture & Conventions
+- [Add module-specific conventions here]
+
+## Build & Test
+- Build: `[Command]`
+- Test: `[Command]`

package/templates/PROJECT_RULE.md

@@ -0,0 +1,47 @@
+---
+architecture_docs: ""
+---
+
+# Project Rules
+
+## Architecture Boundaries
+
+> [!NOTE] **To AI Agents**
+> If `architecture_docs` is empty and no rules are defined below,
+> this project has no architecture rules yet.
+> → Ask user to define them, or analyze codebase and propose a draft.
+> → Do NOT make assumptions about project architecture.
+
+### Module Ownership
+<!-- Define which modules exist and who owns them -->
+| Module | Owner | Editable |
+|--------|-------|----------|
+| `src/` | Core source | Yes |
+
+### Dependency Direction
+<!-- Define allowed dependency directions between modules -->
+
+## DC-CODEGEN: Generated File Mapping
+
+> [!IMPORTANT] **REQUIRED**
+> Agents use this table to decide which files are safe to edit.
+> Files not listed here → agent MUST ask user before editing.
+
+| Generated (DO NOT EDIT) | Source (edit here) | Build command |
+|-------------------------|-------------------|---------------|
+| `dist/` | `src/` | `npm run build` |
+
+## DC-* Guards (project-specific)
+
+| Guard | Condition → Action |
+|-------|-------------------|
+| DC-HALT | Infrastructure error → stop, no bypass, report to user. |
+| DC-INFRA | Bootstrap/transport/DB/routing code → separate ticket + approval. |
+
+## Build & Test
+
+| Action | Command |
+|--------|---------|
+| Build | `npm run build` |
+| Test | `npm test` |
+| Lint | `npx deuk-agent-rule lint:md` |

package/templates/TICKET_TEMPLATE.ko.md

@@ -0,0 +1,21 @@
+---
+<%- frontmatter %>
+---
+# <%= meta.title %>
+
+## Compact Plan
+
+- **찾은 점:** 이 티켓이 다루는 문제를 한두 줄로 적습니다.
+- **방향:** 가장 작은 수정으로 해결하고, 큰 범위는 다른 티켓으로 분리합니다.
+- **검증:** 실패 가능성을 잘 드러내는 최소 검증만 적습니다.
+- **메모:** 상세 근거는 꼭 필요한 곳에만 둡니다.
+
+## Tasks
+
+- [ ] 계획 정리
+- [ ] 변경 적용
+- [ ] 검증 기록
+
+## Done When
+
+- 티켓이 짧고, 바뀐 점과 실패 가능성이 분명하다.

package/templates/TICKET_TEMPLATE.md

@@ -0,0 +1,21 @@
+---
+<%- frontmatter %>
+---
+# <%= meta.title %>
+
+## Compact Plan
+
+- **Finding:** Keep the ticket focused on the concrete problem and the minimum change needed.
+- **Approach:** Use the narrowest safe fix; split new scope into another ticket.
+- **Verification:** Record the smallest check that exposes the main risk, not a success parade.
+- **Notes:** Put detailed evidence only where the problem actually needs it.
+
+## Tasks
+
+- [ ] Complete compact plan.
+- [ ] Execute changes.
+- [ ] Record verification outcome.
+
+## Done When
+
+- Ticket is scoped, implemented, and verified.

package/templates/rules.d/deukcontext-mcp.md

@@ -0,0 +1,31 @@
+---
+id: deukcontext-mcp
+condition:
+  mcp: deuk-agent-context
+inject_target: ["AGENTS.md", "GEMINI.md"]
+---
+## DeukContext RAG Protocol
+
+### RAG Usage
+- Start with local source-of-truth files: current source code, tests, project rules, and CLI ticket state.
+- Use `mcp_deukcontext_search_*` when local evidence is insufficient, prior decisions may matter, the task crosses old tickets, or the user asks for historical/deep analysis.
+- Use RAG as advisory memory. Current source code, tests, and ticket state remain the source of truth.
+- Treat DeukAgentContext as an online-only memory layer. Do not rely on offline snapshots or local mirrors as the primary context source.
+- Choose the narrowest MCP tool: `search_code` for symbols, `search_rules` for policy, `search_tickets` for prior outcomes, and `synthesize_knowledge` only for cross-collection questions.
+- Search narrowly: include the concrete project plus symbol, file, command, rule id, or failure mode.
+- Stop after 2 MCP calls for the same question. Do not broaden repeatedly.
+- **Do NOT use RAG for Ticket Navigation.** Ticket lookup is a direct CLI operation, not a search task.
+
+### RAG Quality Gate
+- Treat placeholder summaries, duplicate ticket/report chunks, stale archive-only hits, unrelated projects, or summaries with no usable fact as a miss.
+- When a result only says to read the file, read the current file locally before deciding.
+- Prefer `search_code` for implementation questions and request evidence only when the extra context is likely to be useful.
+- Record hit/weak-hit/miss/stale evidence in the ticket when it changes confidence, plan, or follow-up direction.
+- For investigation, regression, quality, or root-cause tasks, write confirmed facts, hypotheses, improvement direction, and open questions into the active ticket before asking the user for clarification. Then point the user to the ticket instead of keeping the analysis only in chat.
+
+### RAG Failure Handling
+- **Error** (2+ failures): Switch to local search (`grep_search`/`view_file`). Do not retry in a loop.
+- **Miss or weak hit** (`[RAG-MISS]`, placeholder, duplicate, stale): Fall back to local search. If local analysis finds reusable current-code knowledge, inject it once via `mcp_deukcontext_add_knowledge` with project, source path, code status, and applicability.
+- **Stale indexed doc**: If an indexed document is wrong or incomplete, use `mcp_deukcontext_refresh_document` instead of adding a competing fragment.
+- **Archive boundary**: Completed work should be preserved through ticket archive and knowledge distillation so the active context does not accumulate stale live-state references.
+- **Docs vs knowledge**: `.deuk-agent/docs/` holds human-readable source artifacts (all plans and reports under `docs/plan`, archived originals in `docs/archive`). `.deuk-agent/knowledge/` holds only distilled machine-readable retrieval JSON generated from archived tickets/plans.

package/templates/rules.d/platform-coexistence.md

@@ -0,0 +1,29 @@
+---
+id: platform-coexistence
+inject_target: ["AGENTS.md"]
+---
+## Platform MCP Bridge
+
+### MCP Configuration per Platform
+
+Each platform uses a different MCP config file. Ensure `deuk-agent-context` is registered in the appropriate location:
+
+| Platform | MCP Config Path | Registration |
+|----------|----------------|--------------|
+| Antigravity | `.mcp.json` (project root) | Auto-detected by IDE |
+| Claude Code | `.mcp.json` (project root) | `claude mcp add --transport sse deuk-agent-context <url>` |
+| Copilot | `.vscode/mcp.json` | VS Code settings or manual JSON edit |
+| Codex | `.mcp.json` (project root) | Manual JSON edit |
+| Cursor | `.cursor/mcp.json` | Cursor Settings > MCP |
+
+### Artifact Path Self-Check
+
+Before saving any artifact, verify the platform's native path is NOT the only copy:
+
+| Platform Native Path | RAG-Indexed? | Action Required |
+|---------------------|:------------:|-----------------|
+| `brain/<conv>/` (Antigravity) | NO | Copy to `.deuk-agent/docs/` |
+| `.cursor/plans/` (Cursor) | NO | Copy to `.deuk-agent/docs/plan/` |
+| Terminal output (Claude/Codex) | NO | Save directly to `.deuk-agent/docs/` |
+| VS Code diff (Copilot) | NO | Save plan text to `.deuk-agent/docs/plan/` |
+| `.deuk-agent/docs/` | **YES** | ✓ Correct path |

package/templates/skills/context-recall/SKILL.md

@@ -0,0 +1,25 @@
+---
+name: context-recall
+summary: Reuse prior ticket and rule memory without turning RAG into the source of truth.
+---
+
+# Context Recall
+
+Authority: follow `core-rules/AGENTS.md`, the active ticket APC, Phase Gate, and `PROJECT_RULE.md`.
+
+Use this skill when a task repeats a failure family, references prior decisions, asks why something happened, or crosses old tickets/rules.
+
+## Micro-Protocol
+
+1. Read current local source, project rules, and active ticket first.
+2. Ask DeukAgentContext one narrow query naming the project, symbol, file, command, or failure mode.
+3. Treat stale, duplicate, placeholder, or unrelated hits as weak evidence.
+4. Put useful recall into the ticket as evidence, not chat narration.
+5. If local analysis produces reusable current knowledge after a miss, add one knowledge record.
+
+## Stop Conditions
+
+- Two weak or stale recall attempts for the same question.
+- RAG conflicts with current local source.
+- Recall would expand scope beyond the active ticket.
+- The remembered fix path bypasses current generated/source, parity, or verification rules.

package/templates/skills/generated-file-guard/SKILL.md

@@ -0,0 +1,25 @@
+---
+name: generated-file-guard
+summary: Prevent direct generated artifact edits and route changes to their source.
+---
+
+# Generated File Guard
+
+Authority: follow `core-rules/AGENTS.md`, the active ticket APC, Phase Gate, and `PROJECT_RULE.md`.
+
+Use this skill when a task mentions generated files, `dist`, `gen`, codegen, reports, benchmark outputs, or synchronized spokes.
+
+## Micro-Protocol
+
+1. Check `PROJECT_RULE.md` generated/source mapping.
+2. Check target files for `@generated`, `DO NOT EDIT`, generated directories, or report artifact paths.
+3. If the target is generated, identify the source file or generator command.
+4. Prefer dry-run or `/tmp` output when probing generators.
+5. Record the source-of-truth owner and verification command in the ticket before edits.
+
+## Stop Conditions
+
+- The source-of-truth file cannot be identified after bounded lookup.
+- A broad regeneration would modify outputs outside ticket scope.
+- The proposed fix hides, relabels, or narrows failing generated/report rows.
+- The change would edit both generated output and source in the same patch.

package/templates/skills/safe-refactor/SKILL.md

@@ -0,0 +1,25 @@
+---
+name: safe-refactor
+summary: Keep refactors small, scoped, and test-backed inside DeukAgentRules TDW.
+---
+
+# Safe Refactor
+
+Authority: follow `core-rules/AGENTS.md`, the active ticket APC, Phase Gate, and `PROJECT_RULE.md`.
+
+Use this skill when the user asks for refactor, cleanup, simplification, or restructuring.
+
+## Micro-Protocol
+
+1. Confirm the active ticket allows refactoring of the target module.
+2. Name the smallest behavior-preserving change that satisfies the request.
+3. Inspect current tests or the smallest verification command before editing.
+4. Avoid unrelated renames, formatting sweeps, dependency changes, and style churn.
+5. After edits, run the narrowest relevant test or lint gate and record the result in the ticket.
+
+## Stop Conditions
+
+- No active ticket or APC boundary for the refactor.
+- Target crosses unrelated modules.
+- The feature has no meaningful verification path.
+- The change would alter generated output or shared interfaces without explicit approval.

package/bundle/.cursorrules

@@ -1,11 +0,0 @@
-<!-- deuk-agent-rule-cursorrules:begin -->
-# 💎 RAG-FIRST HARD LOCK IS AUTHORITATIVE
-
-For Antigravity (Gemini), the **RAG-FIRST ACTION [ACTION 0]** and **CONTINUOUS RAG POLICY** defined in **AGENTS.md** and **gemini.md** are the absolute Single Source of Truth.
-
-1. **[ABSOLUTE PRIORITY]**: Every request MUST begin with `mcp_deukrag_search_*`.
-2. **[gemini.md]**: You MUST read and follow the specific hard locks in `gemini.md` at the root.
-3. **[TICKET SYSTEM]**: Follow the TDD workflow in `AGENTS.md` strictly.
-
-Do not skip RAG research by relying on local file reads (`view_file`, `grep_search`). Local files are for details; RAG is for architectural truth and zero-regression.
-<!-- deuk-agent-rule-cursorrules:end -->