Cursor rule

1---
2description: PR and code review checklist – API stability, errors, compatibility, security, testing
3alwaysApply: true
4---
5 
6# Code Review Checklist – Contentstack iOS CDA SDK
7 
8Use this checklist when reviewing pull requests or before opening a PR.
9 
10## API design and stability
11 
12- [ ] **Public API:** New or changed public classes/methods/properties are necessary and documented (header comments / doc comments where the project documents API).
13- [ ] **Backward compatibility:** No breaking changes to public API unless explicitly called out and justified (e.g. major semver bump per release policy).
14- [ ] **Naming:** Method and type names are consistent with existing SDK style (Objective-C / Swift import names) and CDA terminology.
15 
16## Error handling and robustness
17 
18- [ ] **Errors:** API failures surface through existing patterns (`NSError **` out-parameters, failure blocks, or delegate callbacks as used in the touched code).
19- [ ] **Nullability:** `NS_ASSUME_NONNULL` / `nullable` annotations stay accurate; no unintended force-unwraps or ignored errors in new paths.
20- [ ] **Memory / threading:** Blocks and delegates retain cycles are avoided; main-queue vs background behavior matches existing networking code.
21 
22## Dependencies and security
23 
24- [ ] **Dependencies:** No new third-party or vendored code without justification; version bumps are intentional and do not introduce known vulnerabilities.
25- [ ] **SCA:** Address any security findings (e.g. from Snyk or similar) in the scope of the PR or in a follow-up.
26 
27## Testing
28 
29- [ ] **Coverage:** New or modified behavior is covered by XCTest unit and/or integration-style tests as appropriate.
30- [ ] **Test quality:** Tests are readable, stable (no flakiness), and follow project conventions (see **testing.mdc**).
31 
32## Severity (optional)
33 
34- **Blocker:** Must fix before merge (e.g. breaking public API without approval, security issue, no tests for new code).
35- **Major:** Should fix (e.g. inconsistent error handling, missing documentation on new public API).
36- **Minor:** Nice to fix (e.g. style, minor docs).
37