Borrowing it
Nothing to install: this file belongs to sagar25-Code-it/ps3d-cad-studio. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/sagar25-Code-it/ps3d-cad-studio/main/.cursor/project-context/project.mdcgit clone --depth 1 https://github.com/sagar25-Code-it/ps3d-cad-studioWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/rules/sagar25-code-it/ps3d-cad-studio/project)<a href="https://agentmods.dev/rules/sagar25-code-it/ps3d-cad-studio/project"><img src="https://agentmods.dev/badge/rules/sagar25-code-it/ps3d-cad-studio/project/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/rules/sagar25-code-it/ps3d-cad-studio/project"><img src="https://agentmods.dev/badge/rules/sagar25-code-it/ps3d-cad-studio/project.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00014 | $0.01198 |
| Opus 5.5 | $0.00006 | $0.00479 |
| Sonnet 5.5 | $0.00003 | $0.00240 |
| Haiku 4.5 | $0.00001 | $0.00120 |
Grade A, and why
project scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 135 lines — stays where its author put it; the contents beside it link to each section on GitHub.
PS3D project configuration
project:
name: ps3d-cad-studio-original
displayName: PS3D CAD Studio
type: browser-app-plus-local-and-remote-mcp
repositories:
primary: https://github.com/sagar25-Code-it/ps3d-cad-studio
modifiable:
- https://github.com/sagar25-Code-it/ps3d-cad-studio
readOnly: []
involved:
- https://github.com/sagar25-Code-it/ps3d-cad-studio
localWorkspace: true
remoteStatus: release-candidate-source-present; live GitHub/Vercel/Supabase resources pending browser publication
technology:
languages:
- TypeScript
- JavaScript
- CSS
- HTML
- JSON
- Markdown
languageVersions:
node: ">=24.0.0"
typescript: "7.0.2"
ecmascriptTarget: ES2023
frameworks:
- React 19.2.8
- React DOM 19.2.8
- Three.js 0.185.1
- Vite 7.3.6
- Web Workers
- IndexedDB
- Model Context Protocol SDK 2.0.0 (local Node stdio only)
- Zod 4.4.3 (local MCP schemas only)
- Vercel Web-standard Node.js Functions
- Supabase Auth and Postgres REST/RPC
buildTool: pnpm 11.9.0 workspace
testCommands:
fullSuite: pnpm test
singleClass: pnpm test
typecheck: pnpm typecheck
productionBuild: pnpm build
packageRoots:
- apps/mcp-server/src
- apps/studio-web/src
- api
- packages/commands/src
- packages/evidence/src
- packages/import-export/src
- packages/model-schema/src
- packages/model-worker/src
- packages/persistence/src
- packages/sketch-kernel/src
- packages/solid-bracket-kernel/src
- packages/solid-kernel-api/src
- packages/solid-manifold-adapter/src
- packages/viewport-three/src
- packages/workbench-core/src
- packages/workbench-drawing/src
- packages/workbench-geometry/src
- packages/workbench-mcp/src
- packages/workbench-sketch/src
- packages/worker-protocol/src
- scripts
- supabase/migrations
- tests
routeConfigPatterns:
- apps/studio-web/index.html
bugbot:
enabled: false
repoUrl: https://github.com/sagar25-Code-it/ps3d-cad-studio
triggerOnDraftPr: false
botLogins: []
jira:
enabled: false
baseUrl: TBD
projectKey: TBD
projectStyle: none
branching:
defaultBranch: main
mergeStrategy: pull-request
commitConvention: conventional-with-accurate-signoff
dependencies:
internal:
- project-owned workspace packages under packages/*
external:
- react 19.2.8
- react-dom 19.2.8
- three 0.185.1
- @modelcontextprotocol/server 2.0.0 (local Node stdio only)
- zod 4.4.3 (local Node stdio only)
- TypeScript 7.0.2
- Vite 7.3.6
- manifold-3d 3.5.1 (development-only candidate; forbidden from production graph)
agentVerification:
runLocally: browser-compatible checks only on the protected workstation
ciCommands:
compile: pnpm typecheck
unitTests: pnpm test
build: pnpm build
skipLocal: []
deferTo:
- GitHub Actions clean runner for frozen install, typecheck, full tests, production build, CodeQL, and dependency review
constraints:
- Work only in ps3d-cad-studio-original; do not inspect or reuse the older derived project
- Implement from neutral PS3D requirements and approved primary technical sources only
- Do not copy third-party CAD code, UI, assets, wording, samples, or distinctive workflows
- Keep the semantic document authoritative and derived geometry disposable
- Preserve worker isolation, bounded input validation, atomic persistence, and explicit failure diagnostics
- Keep manifold-3d, WASM, and dynamic evaluation out of the production browser graph
- Keep the Node-only MCP SDK, protocol core, Zod, and apps/mcp-server out of the production browser graph; remote functions may call only the project-owned pure handler layer
- Add no dependency or asset without provenance, license, lockfile, notice, security, and build-boundary review
- Do not commit secrets, tokens, .env files, private keys, personal data, build output, or unexplained binaries
- Do not claim exact B-rep, NURBS, persistent face naming, universal robustness, or production readiness without evidence
- Publish, commit, and deploy only through the explicitly authorized Chrome Incognito release workflow; stop for any paid plan, unexpected privilege, or unrecoverable action
- Only .cursor/project-context files may be project-specific under .cursor
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 135 lines · 14 tokens per session scan A 2e089f3a5772
project is a cursor rule published in the GitHub repository sagar25-Code-it/ps3d-cad-studio (0 stars, last pushed 3d ago), licensed MIT. It adds 14 tokens to every session and 1,198 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other cursor rules, from other repositories
ponytail
Ponytail, lazy senior dev mode. Always pick the simplest solution that works.
angular-20
This rule provides comprehensive best practices and coding standards for Angular development, focusing on modern TypeScript, standalone components, signals, and performance optimizations.
dev-standard
Apache Superset development standards and guidelines for Cursor IDE.
prefer-direct-imports-over-module-mocks
Prefer extracting a testable core over vi.mock / vi.resetModules when unit tests need to reach production logic entangled with config, env, or singletons.
config-validation-and-normalization
Config validation and normalization responsibilities (defineConfig normalizes, the orm section schema validates and resolves paths, the loader reports per-section diagnostics).
control-plane-descriptors
Control plane descriptor and instance implementation patterns.