development-workflow

Defines the standard development workflow, including the mandatory file analysis protocol, smart development patterns, and the prioritization of specialized MCP tools to ensure code quality, consistency, and efficiency.

Cursor rule for Cursor

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add rules/felipebarcelospro/igniter-js/development-workflow
Clone the repo
git clone --depth 1 https://github.com/felipebarcelospro/igniter-js

Made for: Cursor.

Per session 921 This file is loaded in full into every session.
When invoked 921 The same file — it is already loaded in full.
Security scan A 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00921 $0.00921
Opus 5 $0.00461 $0.00461
Sonnet 5 $0.00184 $0.00184
Haiku 4.5 $0.00092 $0.00092

Measured today against content hash 65c44e03c3e1, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

development-workflow scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

| **API Development** | `get_openapi_spec`, `make_api_request` | `curl` (unless `make_api_request` fails) |
apps/sample-realtime-chat/.cursor/rules/development-workflow.mdc · 67 lines

How it starts

The opening of the file, as written. The whole thing — 67 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Development Workflow

This document outlines the mandatory workflow for all development tasks. It ensures that every action is preceded by proper analysis, follows established patterns, and utilizes the most effective tools available.

1. Mandatory Protocol: Analyze Before Action

This is the most critical rule in the workflow. It is not optional.

NEVER read, modify, or work with any file without FIRST running analyze_file. This is a non-negotiable safety and quality protocol.

1.1. The Analysis Workflow

  1. Analyze the File: Before any operation, run analyze_file to get a comprehensive overview.
    {
      "tool": "analyze_file",
      "args": { "filePath": "/path/to/your/file.ts", "includeErrors": true }
    }
    
  2. Assess Health: Check the health_summary.overall_status.
    • "healthy": ✅ Safe to proceed.
    • "has_warnings": ⚠️ Proceed with caution.
    • "needs_attention": ❌ STOP. You MUST fix the TypeScript errors before making any other changes.
  3. Understand Context: Review the file's structure, imports, and exports to understand its role in the system.
  4. Store Insights: After analysis, store key findings in the memory system to accelerate future work.

1.2. Post-Modification Verification

After every modification, you MUST re-run analyze_file to verify that no new errors have been introduced and that the file's health has been maintained or improved.

2. Tool Prioritization: Use Specialized Tools

To ensure accuracy, context-awareness, and knowledge retention, you MUST prioritize specialized MCP Server tools over generic alternatives.

Tool Selection Hierarchy

Task ✅ ALWAYS USE (Primary MCP Tools) ❌ NEVER USE (Generic Alternatives)
File Analysis analyze_file, analyze_feature read_file (for initial analysis)
Code Investigation find_implementation, explore_source, trace_dependency_chain grep_search, codebase_search
API Development get_openapi_spec, make_api_request curl (unless make_api_request fails)
Knowledge Storage store_memory, relate_memories Storing info only in conversation history
Research get_documentation, search_github_issues Relying on outdated training data
Task Management create_task, list_tasks, update_task_status Manual, ad-hoc tracking
Agent Delegation delegate_to_agent, monitor_agent_tasks Performing all tasks manually

Read the full file on GitHub · 67 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today First seen · 67 lines · 921 tokens per session scan A 65c44e03c3e1

Subscribe to this mod's changes

development-workflow is a cursor rule published in the GitHub repository felipebarcelospro/igniter-js (242 stars, last pushed 2mo ago), licensed Apache-2.0. It adds 921 tokens to every session, about $0.0046 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-01.