P7: Remaining card categories + plugin polish

[tkowalczyk]

Parent PRD

#1

What to build

Hand-author the remaining six card categories so the rule library covers the full surface described in PRD #1 "User Stories" 23–28:

• shadcn/* — primitive bypass (raw Radix where shadcn primitive exists), missing cn() / cva use, custom variants instead of cva, naming convention violations between components/ui/ and components/
• a11y/* — label-input pairing, focus traps in Dialog/Sheet, missing aria-label, forwardRef correctness
• tanstack/* — Query (fetching-in-effect when useQuery is correct), Router (loaders), Form (controlled state)
• server-client/* — "use client" misuse, hydration mismatches, server/client boundary leaks
• typescript/* — Readonly/Required props, any in handlers, forwardRef typing, properly typed children
• styling/* — inline styles, design-token CSS vars over arbitrary values, arbitrary-value misuse

Cards may land inkrementalnie within this issue; the issue closes when each of the six categories has at least one shipping card and the plugin distribution is in a marketplace-ready state.

Plugin distribution polish:

• plugins/<name>/ mirrors created for the four new skills (react-audit, react-review, react-rules, react-rules-sync)
• llms.txt updated to index the four new skills, the shared cards index, and any new references
• Schema-validation script run as part of the issue's exit checklist

See PRD #1 "Further Notes" → "Subsequent card categories" and PRD #1 "Out of Scope" → authoring all ~60 cards on day 1.

Acceptance criteria

• At least one card exists in each of the six new categories with valid frontmatter and source citation
• Card index file lists every shipping card across all categories
• plugins/react-audit/, plugins/react-review/, plugins/react-rules/, plugins/react-rules-sync/ mirror the canonical skills/<name>/ folders
• llms.txt includes all four new skills and the shared cards index
• Schema-validation script passes for the full library with zero violations
• /react-audit on a real Auditmos template (e.g., tstack-on-cf) produces actionable findings across at least three categories

Blocked by

• Blocked by P4: /react-review on diff + 1-hop neighbors #7
• Blocked by P5: /react-rules — rule-file read + drift detection #8
• Blocked by P6: /react-rules-sync — source fetch + diff preview #9

User stories addressed

• User story 23
• User story 24
• User story 25
• User story 26
• User story 27
• User story 28
• User story 37