cursorrules

# Cursor Agents Guide (Using Cursor Rules)

This document explains how to use the rules in this repository with Cursor and serves as a single entry point that references the existing rule files. It avoids duplication by linking directly to the `.cursor/rules/*.mdc` sources.

If you installed these rules via the installer, a project‑local AGENTS.md can be generated that lists only the rules you chose. By default, the installer writes AGENTS.md if absent; it overwrites only when you pass `--yes`.

## How To Use With Cursor
- Open your project in Cursor. Rules under `.cursor/rules` are discovered automatically by Cursor.
- Keep this AGENTS.md handy as your quick index to the rule set.
- For installation methods and advanced options, see `README.md`.

## Installation Options
For full installation details and examples, see `README.md`.
- Core rules only: `--core`
- Web stack (includes core): `--web-stack` or `--ws`
- Python (includes core): `--python`
- JavaScript security (includes core): `--javascript`
- All rules: `--all`
- Tag-based selection: `--tags "<expression>"` or `--tag-preset <name>`
- Ignore files control: `--ignore-files yes|no|ask`

Tag taxonomy is documented in `TAG_STANDARDS.md`.

## Rule Bundles (Source of Truth)
Below are the rule bundles and their rule files. Each item links directly to the authoritative file under `.cursor/rules/`.

### Core
- [.cursor/rules/cursor-rules.mdc](.cursor/rules/cursor-rules.mdc)
- [.cursor/rules/git-commit-standards.mdc](.cursor/rules/git-commit-standards.mdc)
- [.cursor/rules/github-actions-standards.mdc](.cursor/rules/github-actions-standards.mdc)
- [.cursor/rules/improve-cursorrules-efficiency.mdc](.cursor/rules/improve-cursorrules-efficiency.mdc)
- [.cursor/rules/pull-request-changelist-instructions.mdc](.cursor/rules/pull-request-changelist-instructions.mdc)
- [.cursor/rules/readme-maintenance-standards.mdc](.cursor/rules/readme-maintenance-standards.mdc)
- [.cursor/rules/testing-guidelines.mdc](.cursor/rules/testing-guidelines.mdc)
 - [.cursor/rules/confluence-editing-standards.mdc](.cursor/rules/confluence-editing-standards.mdc)

### Web Stack
- [.cursor/rules/accessibility-standards.mdc](.cursor/rules/accessibility-standards.mdc)
- [.cursor/rules/api-standards.mdc](.cursor/rules/api-standards.mdc)
- [.cursor/rules/build-optimization.mdc](.cursor/rules/build-optimization.mdc)
- [.cursor/rules/code-generation-standards.mdc](.cursor/rules/code-generation-standards.mdc)
- [.cursor/rules/debugging-standards.mdc](.cursor/rules/debugging-standards.mdc)
- [.cursor/rules/docker-compose-standards.mdc](.cursor/rules/docker-compose-standards.mdc)
- [.cursor/rules/drupal-authentication-failures.mdc](.cursor/rules/drupal-authentication-failures.mdc)
- [.cursor/rules/drupal-broken-access-control.mdc](.cursor/rules/drupal-broken-access-control.mdc)
- [.cursor/rules/drupal-cryptographic-failures.mdc](.cursor/rules/drupal-cryptographic-failures.mdc)
- [.cursor/rules/drupal-database-standards.mdc](.cursor/rules/drupal-database-standards.mdc)
- [.cursor/rules/drupal-file-permissions.mdc](.cursor/rules/drupal-file-permissions.mdc)
- [.cursor/rules/drupal-injection.mdc](.cursor/rules/drupal-injection.mdc)
- [.cursor/rules/drupal-insecure-design.mdc](.cursor/rules/drupal-insecure-design.mdc)
- [.cursor/rules/drupal-integrity-failures.mdc](.cursor/rules/drupal-integrity-failures.mdc)
- [.cursor/rules/drupal-logging-failures.mdc](.cursor/rules/drupal-logging-failures.mdc)
- [.cursor/rules/drupal-security-misconfiguration.mdc](.cursor/rules/drupal-security-misconfiguration.mdc)
- [.cursor/rules/drupal-ssrf.mdc](.cursor/rules/drupal-ssrf.mdc)
- [.cursor/rules/drupal-vulnerable-components.mdc](.cursor/rules/drupal-vulnerable-components.mdc)
- [.cursor/rules/generic_bash_style.mdc](.cursor/rules/generic_bash_style.mdc)
- [.cursor/rules/javascript-performance.mdc](.cursor/rules/javascript-performance.mdc)
- [.cursor/rules/javascript-standards.mdc](.cursor/rules/javascript-standards.mdc)
- [.cursor/rules/lagoon-docker-compose-standards.mdc](.cursor/rules/lagoon-docker-compose-standards.mdc)
- [.cursor/rules/lagoon-yml-standards.mdc](.cursor/rules/lagoon-yml-standards.mdc)
- [.cursor/rules/multi-agent-coordination.mdc](.cursor/rules/multi-agent-coordination.mdc)
- [.cursor/rules/node-dependencies.mdc](.cursor/rules/node-dependencies.mdc)
- [.cursor/rules/php-drupal-best-practices.mdc](.cursor/rules/php-drupal-best-practices.mdc)
- [.cursor/rules/php-drupal-development-standards.mdc](.cursor/rules/php-drupal-development-standards.mdc)
- [.cursor/rules/php-memory-optimisation.mdc](.cursor/rules/php-memory-optimisation.mdc)
- [.cursor/rules/project-definition-template.mdc](.cursor/rules/project-definition-template.mdc)
- [.cursor/rules/react-patterns.mdc](.cursor/rules/react-patterns.mdc)
- [.cursor/rules/security-practices.mdc](.cursor/rules/security-practices.mdc)
- [.cursor/rules/secret-detection.mdc](.cursor/rules/secret-detection.mdc)
- [.cursor/rules/tailwind-standards.mdc](.cursor/rules/tailwind-standards.mdc)
- [.cursor/rules/tests-documentation-maintenance.mdc](.cursor/rules/tests-documentation-maintenance.mdc)
- [.cursor/rules/third-party-integration.mdc](.cursor/rules/third-party-integration.mdc)
- [.cursor/rules/vortex-cicd-standards.mdc](.cursor/rules/vortex-cicd-standards.mdc)
- [.cursor/rules/vortex-scaffold-standards.mdc](.cursor/rules/vortex-scaffold-standards.mdc)
- [.cursor/rules/vue-best-practices.mdc](.cursor/rules/vue-best-practices.mdc)
- [.cursor/rules/behat-steps.mdc](.cursor/rules/behat-steps.mdc)
- [.cursor/rules/behat-ai-guide.mdc](.cursor/rules/behat-ai-guide.mdc)

### Python
- [.cursor/rules/python-authentication-failures.mdc](.cursor/rules/python-authentication-failures.mdc)
- [.cursor/rules/python-broken-access-control.mdc](.cursor/rules/python-broken-access-control.mdc)
- [.cursor/rules/python-cryptographic-failures.mdc](.cursor/rules/python-cryptographic-failures.mdc)
- [.cursor/rules/python-injection.mdc](.cursor/rules/python-injection.mdc)
- [.cursor/rules/python-insecure-design.mdc](.cursor/rules/python-insecure-design.mdc)
- [.cursor/rules/python-integrity-failures.mdc](.cursor/rules/python-integrity-failures.mdc)
- [.cursor/rules/python-logging-monitoring-failures.mdc](.cursor/rules/python-logging-monitoring-failures.mdc)
- [.cursor/rules/python-security-misconfiguration.mdc](.cursor/rules/python-security-misconfiguration.mdc)
- [.cursor/rules/python-ssrf.mdc](.cursor/rules/python-ssrf.mdc)
- [.cursor/rules/python-vulnerable-outdated-components.mdc](.cursor/rules/python-vulnerable-outdated-components.mdc)
- [.cursor/rules/security-practices.mdc](.cursor/rules/security-practices.mdc)

### JavaScript Security
- [.cursor/rules/javascript-broken-access-control.mdc](.cursor/rules/javascript-broken-access-control.mdc)
- [.cursor/rules/javascript-cryptographic-failures.mdc](.cursor/rules/javascript-cryptographic-failures.mdc)
- [.cursor/rules/javascript-identification-authentication-failures.mdc](.cursor/rules/javascript-identification-authentication-failures.mdc)
- [.cursor/rules/javascript-injection.mdc](.cursor/rules/javascript-injection.mdc)
- [.cursor/rules/javascript-insecure-design.mdc](.cursor/rules/javascript-insecure-design.mdc)
- [.cursor/rules/javascript-security-logging-monitoring-failures.mdc](.cursor/rules/javascript-security-logging-monitoring-failures.mdc)
- [.cursor/rules/javascript-security-misconfiguration.mdc](.cursor/rules/javascript-security-misconfiguration.mdc)
- [.cursor/rules/javascript-server-side-request-forgery.mdc](.cursor/rules/javascript-server-side-request-forgery.mdc)
- [.cursor/rules/javascript-software-data-integrity-failures.mdc](.cursor/rules/javascript-software-data-integrity-failures.mdc)
- [.cursor/rules/javascript-vulnerable-outdated-components.mdc](.cursor/rules/javascript-vulnerable-outdated-components.mdc)

## Tag-Based Selection
The installer supports tag expressions and presets. Examples:
- `--tags "language:javascript category:security"`
- `--tags "framework:react"`
- `--tags "language:php standard:owasp-top10"`
- `--tag-preset js-owasp`

See `TAG_STANDARDS.md` for the complete tag taxonomy and guidance.

## Maintainer Checklist
- Before opening a pull request, prepend a new entry to `CHANGELOG.md` describing your changes (latest release first) and never delete prior history.
- Ensure the summary in `CHANGELOG.md` matches the work being done and that `CURSOR_RULES_VERSION` reflects the next release number.
- Record key implementation notes in this `AGENTS.md` only when they affect installer behaviour or rule coverage so the instructions stay current.
- Regenerate project-local `AGENTS.md` files with `--yes` when you need to refresh them after significant rule or command updates.

## Updating Or Removing
- To update, re-run the installer with your preferred options (it will copy over updated rules). See `README.md`.
- To remove rules, delete files from `.cursor/rules` and remove any generated `.cursorignore` files if not needed.

## References
- Project README: [README.md](README.md)
- Tag standards: [TAG_STANDARDS.md](TAG_STANDARDS.md)
- All rule sources: `.cursor/rules/*.mdc`

More agent context in ivangrynenko/cursorrules

70 other files this repository gives its agents, the first 60 shown.