@bonesofspring/ai-rules 0.2.16 → 0.2.18

package/CHANGELOG.md

@@ -2,6 +2,47 @@
 
 ## Unreleased
 
+### UX design skill (UI stacks)
+
+- New requestable skill/rule **`ux-design`** on **`next`**, **`nuxt`**, **`svelte`**, **`ios-swift`**, **`android-kotlin`** (Cursor + Claude twins). Shared-core checklist: `presets/_shared/core/review/ux-design.md`. Invoked by **`task-analyst`** — **no** `ux-designer` agent, **no** FAIL-only hook, **no** Figma MCP in the skill/rule.
+- Standalone intent **`ux-design`**: synthesize or review behavioral UX (IA, named flows, empty/error/loading matrix) → profile `light`, steps only `task-analyst`, `humanGates: []`. Classify `mockup-review` before `ux-design` before `review-only`.
+- Embedded: on UI required-signal or advisory AC, analyst loads the skill (no new pipeline step). Required `INCOMPLETE` blocks DoR; advisory notes only. Developer gate: required-signal + no Figma + missing/`INCOMPLETE` UX artifact → `blocked`, hand back to analyst.
+- Backend stacks (`go`, `java`, `mcp-ts`, `php-*`) never ship `skills/ux-design` / `rules/ux-design` or `agents/ux-designer.md`; leakage checker forbids those stems.
+- `/task` examples include standalone UX (no Figma). `artifact-manifest.example.json` analysis paths append `ux-design.md` on web stacks.
+- Consumers: re-run `npx @bonesofspring/ai-rules init cursor|claude --preset <ui-stack>` after publish.
+
+### Mockup reviewer (UI stacks)
+
+- New **`mockup-reviewer`** agent + requestable skill/rule **`mockup-review`** on **`next`**, **`nuxt`**, **`svelte`**, **`ios-swift`**, **`android-kotlin`** (Cursor + Claude twins). Shared-core checklist: `presets/_shared/core/review/mockup-review.md`. Report template fence is a single closed block (no stray fence after AC coverage).
+- Standalone intent **`mockup-review`**: `/task` + Figma URL (e.g. «ревью макета …») → profile `light`, steps only `mockup-reviewer`, report-only exit on FAIL (like `perf-audit`).
+- Embedded: `figma.com` in feature/refactor/spike/spec-gen → reviewer after `task-analyst`, before architect/developer. Embedded **FAIL** → receipt `changes_requested` + FAIL-only hook gate (`awaiting_approval`); resume via `/task-continue` only — no `feature-developer` retry. Orchestrator rule 6 and UI `chain-team-phases.sh` parallel-join now match that exception; ios-swift/android-kotlin `AGENT_HANDOFF` includes `mockup-reviewer`. Never put `mockup-reviewer` in `parallel: true`.
+- Figma MCP-first (read-only subset + node caps); `BLOCKED_MCP` when OAuth/MCP unavailable. Go keeps optional Figma MCP for ad-hoc context — **not** a mockup-review pipeline.
+- Backend stacks (`go`, `java`, `mcp-ts`, `php-*`) never schedule `mockup-reviewer`; leakage checker forbids agent stem on backend.
+- Consumers: re-run `npx @bonesofspring/ai-rules init cursor|claude --preset <ui-stack>` after publish.
+
+### Product specs authoring (Phases A–E)
+
+- **Generation modes** (shared-core): **Consume** (default discovery, soft-fail on miss) · **Generate** (explicit intent / AC / `/spec-start` with existing tree) · **Bootstrap** (same triggers when `docs/specs/` absent). Greenfield policy: no INDEX/spec invention without explicit intent; conflict precedence human > brief AC > approved spec > code.
+- Split requestable stems: lean `architecture/product-specs.md` (Consume) + `architecture/product-specs-authoring.md` (Generate / Bootstrap, INDEX + frontmatter v1, body checklist). Both ×20 Cursor + Claude adapters (`alwaysApply: false` / Claude `paths: docs/specs/**/*`); Stack notes map `routes` / `ui` / `store` / `e2e` per stack class (mcp-ts: tool names; empty `ui`/`store`).
+- **Assets SoT:** `presets/_shared/assets/docs-specs/` — INDEX stub, `_templates/page.md` / `feature.md`, optional `schemas/frontmatter-v1.schema.json`.
+- **CLI seed policy:** on `init`, when consumer `docs/specs/` directory is **absent**, copy INDEX stub + `_templates/*` from assets (idempotent; **never overwrite** existing INDEX). If the directory already exists (even empty), seed is skipped — remove the folder or copy templates manually if you created an empty tree before first `init`.
+- **Author surface:** extend **task-analyst** (primary author; **mcp-ts analyst-only** — no tech-writer) + **tech-writer** post-delivery sync (9 stacks); requestable skill **`spec-authoring`**; **feature-developer** / **feature-delivery** treat approved specs as behavior SoT.
+- **Pipeline:** optional `/spec-start` (spec-gen → analyst author mode → human gate); task-router `spec-gen` / bootstrap signals; orchestrator passes spec paths + INDEX diff (no dedicated `spec-author` agent).
+- **Validation severity:** code-reviewer **WARN** code/spec drift, **FAIL** broken INDEX links or missing required frontmatter on touched `docs/specs/**`; build-verifier **FAIL** missing shared assets / broken twins / non-requestable stems; optional `scripts/check-product-specs.sh` (**WARN** default, **`--strict`** FAIL) — not mandatory consumer CI.
+- **Dogfood:** `dogfood/mcp-ts-sample/docs/specs/` (INDEX + `domains/echo/echo-tool.md`; sample spec human-promoted to `active`). Soft WARN in `check:preset-structure` + GitHub `preset-structure` workflow (`yarn check:product-specs:dogfood`, `continue-on-error`).
+- **Follow-ups:** dogfood `.cursor/` re-synced from next; removed ambiguous `**mcp-ts:**` footnote from non–mcp-ts `task-analyst` twins (mcp-ts analyst-only wording kept on mcp-ts only).
+- **Consumers:** after publish, re-run `npx @bonesofspring/ai-rules init cursor|claude --preset <stack>` to pick up new stems, `/spec-start`, and `spec-authoring` skill; preset files under `.cursor/` / `.claude/` are overwritten on init — existing consumer `docs/specs/` trees are **not** overwritten.
+
+### Product specs stem (`product-specs`)
+
+- New shared-core embed stem `architecture/product-specs.md`: stack-agnostic `docs/specs` INDEX discovery, soft-fail on miss, authoring/INDEX same-PR, non-goals vs `.ai/context` / `reference-features`.
+- Requestable Cursor + Claude adapters ×10 stacks (`product-specs.mdc` / `architecture/product-specs.md`) with frontend / mobile / backend Stack notes (no cross-stack UI-path leakage).
+- Agent one-liners: `task-analyst`, `feature-developer`, orchestrator adapters; `tech-writer` (stacks with tech-writer agent; mcp-ts excluded); `feature-delivery` skill early INDEX step; optional Related on `feature-delivery-workflow`.
+- Token budget: `alwaysApply: false` / Claude `paths: docs/specs/**` — not session-start.
+- Consumers: after publish, re-run `npx @bonesofspring/ai-rules init cursor|claude --preset <stack>` to pick up the stem.
+- Follow-up polish: android-kotlin Stack notes use `features/**` (not iOS `Features/**`); Claude next/nuxt/ios/android feature-delivery INDEX step numbering aligned with Cursor; next `code-reviewer` checks `docs/specs/**` drift via `product-specs`.
+
+
 ### Android Kotlin preset (`android-kotlin`)
 
 - New installable preset **`android-kotlin`** (Cursor + Claude twins): Clean Architecture multimodule Android/Kotlin — Compose Material 3, MVI/UDF ViewModels, Dagger feature holders (no Hilt by default), `api`/`impl` modules, Gradle convention plugins / version catalog discovery, instrumentation UI-test agents.

package/README.md

@@ -50,8 +50,25 @@ Where things go on `init`:
 | MCP | `mcp.json` → `.cursor/mcp.json`, `MCP.md` → `.cursor/` | `mcp.json` → **`.mcp.json`** (project root), `MCP.md` → `.claude/` |
 | tool map | `AGENTS.md` → `.cursor/AGENTS.md`, `BUGBOT.md` | `CLAUDE.md` → `.claude/CLAUDE.md` |
 | **repo-root agents** | `REPO_AGENTS.md` → **`<cwd>/AGENTS.md`** | same |
+| **docs/specs seed** | When `<cwd>/docs/specs/` is **absent**, copy INDEX stub + `_templates/*` from `presets/_shared/assets/docs-specs/` (never overwrite existing INDEX) | same |
 
-Skills of note: `write-adr` (all stacks); `react-performance` (**next only**); `vue-performance` (**nuxt only**); `svelte-performance` (**svelte only**). Living gotchas: `team/conventions.md`. Opt-in rule samples eval: `yarn check:rule-eval` (workflow `rule-eval.yml`; not part of `check:preset-structure`).
+Skills of note: `write-adr` (all stacks); `spec-authoring` (Generate/Bootstrap `docs/specs`); `mockup-review` (**next** / **nuxt** / **svelte** / **ios-swift** / **android-kotlin** — Figma mockup reviewer via agent `mockup-reviewer`); `ux-design` (**next** / **nuxt** / **svelte** / **ios-swift** / **android-kotlin** — behavioral UX via `task-analyst`, no agent); `react-performance` (**next only**); `vue-performance` (**nuxt only**); `svelte-performance` (**svelte only**). Optional command `/spec-start`. Living gotchas: `team/conventions.md`. Opt-in rule samples eval: `yarn check:rule-eval` (workflow `rule-eval.yml`; not part of `check:preset-structure`). Optional consumer specs check: `yarn check:product-specs` (WARN default; `--strict` FAIL).
+
+## Product specs (`docs/specs/`)
+
+Presets support **behavior specs** under `docs/specs/**` (INDEX, frontmatter v1, page/feature templates). Three modes:
+
+| Mode | Trigger | Agent behavior |
+|------|---------|----------------|
+| **Consume** | Default when working on listed routes/features | Discover via INDEX; soft-fail on miss; do not invent product behavior |
+| **Generate** | Brief AC, `/spec-start`, or router `spec-gen` with existing tree | **task-analyst** authors/updates specs + INDEX (skill **`spec-authoring`**) |
+| **Bootstrap** | Same triggers when `docs/specs/` absent | Create INDEX + templates + first domain spec |
+
+**First-time seed:** `init` copies INDEX stub + `_templates/*` from package assets when `<cwd>/docs/specs/` is **absent** (see table above). **Troubleshooting:** if you created an empty `docs/specs/` folder before `init`, seed is skipped — delete the folder and re-run `init`, or copy from `presets/_shared/assets/docs-specs/` manually.
+
+**After a package upgrade:** re-run `init` for your stack to refresh rules, `/spec-start`, and `spec-authoring` skill. Agent-generated specs default to `status: draft` until a human promotes them.
+
+**Optional validation** (from `packages/ai-rules/`): `yarn check:product-specs <repo-root>` (WARN) or `--strict` (FAIL). Monorepo dogfood example: `dogfood/mcp-ts-sample/docs/specs/`.
 
 The package ships presets including **`next`** (Next.js stack), **`nuxt`** (Nuxt 3 / Vue 3 / Pinia), **`svelte`** (SvelteKit / Svelte 5 / TypeScript / `store-svelte`), **`ios-swift`** (iOS apps on Swift / SwiftUI), **`android-kotlin`** (Android multimodule Kotlin / Compose / Gradle), **`go`** (Go backends with hexagonal architecture), **`java`** (Java / Spring Boot hexagonal backends), **`mcp-ts`** (TypeScript MCP servers with `@modelcontextprotocol/sdk`), **`php-hexagonal`** (PHP / Composer hexagonal backends), and **`php-laravel`** (Laravel backend/API with Eloquent, Form Requests, Policies, Actions/Services). Other preset names: see `presets/` in the [repo](https://github.com/bonesofspring/ai-rules). Name is a single path segment, no `/` or `.`.
 
@@ -82,7 +99,7 @@ Help: `ai-rules --help`.
 
 Presets are developed in this monorepo under `presets/`. If you add or change rules, agents, or platform artifacts:
 
-- **Taxonomy & layers:** [`presets/_shared/README.md`](presets/_shared/README.md) — shared core (`_shared/core`), stack adapters, platform packaging
+- **Taxonomy & layers:** [`presets/_shared/README.md`](presets/_shared/README.md) — shared core (`_shared/core`), stack adapters, platform packaging (includes requestable embed stem `architecture/product-specs` for consumer `docs/specs` INDEX discovery)
 - **Contribution guide:** [`docs/PRESET-CONTRIBUTION.md`](docs/PRESET-CONTRIBUTION.md) — SoT, twin sync, embed vs lineage, token budget (≤3 always-on), PR checklist, new stack preset, platform-only files (`BUGBOT.md`, `CLAUDE.md`)
 - **Dogfood / drift scripts:** [`scripts/sync-dogfood-cursor.sh`](scripts/sync-dogfood-cursor.sh) (also syncs root `AGENTS.md` from `REPO_AGENTS.md`; seeds `team/conventions.md` if absent), [`scripts/check-shared-core-drift.sh`](scripts/check-shared-core-drift.sh)
 - **Preset structure CI gates** (exit non-zero on FAIL): `yarn check:preset-structure` (or `bash scripts/check-preset-structure.sh`) — twin map, session-start budget (Option A), leakage, shared-core drift (`AI_RULES_DRIFT_FAIL=1`)

package/bin/cli.js

@@ -64,6 +64,7 @@ Notes:
   Cursor init copies rules, commands, agents, hooks, skills, team, hooks.json, BUGBOT.md, AGENTS.md → .cursor/AGENTS.md, MCP.md, mcp.json → .cursor/mcp.json.
   Claude init copies rules, commands, skills, agents, hooks, team, CLAUDE.md, MCP.md, and mcp.json → .mcp.json (project root).
   Both tools also copy REPO_AGENTS.md → <cwd>/AGENTS.md (repo-root cross-tool agents file; overwrite).
+  When <cwd>/docs/specs/ is absent, init also seeds INDEX.md stub + _templates/* from package assets (never overwrites an existing INDEX).
   clean removes tool dirs/files and <cwd>/AGENTS.md (shared across tools — re-init the other tool to restore).
   Command forms: "init cursor --preset next", "init cursor next", "--preset next init cursor", "cursor init --preset next".
 
@@ -223,6 +224,40 @@ function copyDir(src, dest) {
   }
 }
 
+/**
+ * Seed consumer docs/specs when the tree is absent.
+ * Idempotent: never overwrite existing INDEX; skip entirely if docs/specs exists.
+ */
+function seedDocsSpecsIfAbsent(packageRoot, cwd) {
+  const destRoot = path.join(cwd, 'docs', 'specs');
+  if (fs.existsSync(destRoot)) {
+    console.log('Skipped docs/specs seed (directory already exists)');
+    return false;
+  }
+  const assetsRoot = path.join(
+    packageRoot,
+    'presets',
+    '_shared',
+    'assets',
+    'docs-specs'
+  );
+  if (!fs.existsSync(assetsRoot)) {
+    console.log('Skipped docs/specs seed (package assets missing)');
+    return false;
+  }
+  fs.mkdirSync(destRoot, { recursive: true });
+  const indexSrc = path.join(assetsRoot, 'INDEX.md');
+  if (fs.existsSync(indexSrc)) {
+    fs.copyFileSync(indexSrc, path.join(destRoot, 'INDEX.md'));
+  }
+  const templatesSrc = path.join(assetsRoot, '_templates');
+  if (fs.existsSync(templatesSrc)) {
+    copyDir(templatesSrc, path.join(destRoot, '_templates'));
+  }
+  console.log('Seeded docs/specs/ (INDEX stub + _templates)');
+  return true;
+}
+
 function getOptionalDirs(cfg) {
   return cfg.optionalCursorDirs || cfg.optionalClaudeDirs || [];
 }
@@ -422,6 +457,10 @@ function cmdInit(tool, preset, cwdOption) {
         copiedSteps++;
       }
     }
+
+    if (seedDocsSpecsIfAbsent(packageRoot, cwd)) {
+      copiedSteps++;
+    }
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
     console.error(`init failed: ${msg}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bonesofspring/ai-rules",
-  "version": "0.2.16",
+  "version": "0.2.18",
   "description": "Presets of Cursor and Claude rules/commands for Revy Ross personal use",
   "license": "MIT",
   "author": "Revy Ross",
@@ -31,6 +31,8 @@
     "check:preset-leakage": "bash scripts/check-preset-leakage.sh",
     "check:preset-i18n": "AI_RULES_I18N_FAIL=1 AI_RULES_I18N_SOFT=0 bash scripts/check-preset-i18n.sh",
     "check:shared-core-drift": "bash scripts/check-shared-core-drift.sh",
+    "check:product-specs": "bash scripts/check-product-specs.sh",
+    "check:product-specs:dogfood": "bash scripts/check-product-specs.sh ../../dogfood/mcp-ts-sample",
     "check:rule-eval": "node scripts/check-rule-eval.mjs"
   },
   "engines": {

package/presets/_shared/README.md

@@ -1,6 +1,6 @@
 # Shared preset core (`presets/_shared`)
 
-Stack-agnostic **prose and checklists** for all installable presets: `next`, `nuxt`, `ios-swift`, `go`, `java`, `mcp-ts`, `php-hexagonal`, and `php-laravel` (`cursor/<stack>`, `claude/<stack>`).
+Stack-agnostic **prose and checklists** for all installable presets: `next`, `nuxt`, `svelte`, `ios-swift`, `android-kotlin`, `go`, `java`, `mcp-ts`, `php-hexagonal`, and `php-laravel` (`cursor/<stack>`, `claude/<stack>`).
 
 **Not an installable preset.** CLI `init` copies only under `presets/cursor/<name>/` or `presets/claude/<name>/` — this sibling is never shipped to consumer apps.
 
@@ -38,8 +38,8 @@ Do **not** expect lineage adapters to byte-match core. Embed adapters should mat
 |-----|----------|
 | `core/quality/` | Boy-scout + Principles (always-on slim); requestable `anti-sycophancy-discipline` (~17 rules); requestable `design-guidance` (smells ≤12 + GoF ≤8) |
 | `core/agent-team/` | Orchestrator + intake (pipeline language) |
-| `core/architecture/` | Feature-delivery abstract + reference-features template |
-| `core/review/` | Code-review MR + technical-retro alias |
+| `core/architecture/` | Feature-delivery abstract + reference-features template + product-specs (+ product-specs-authoring) + assets/docs-specs templates |
+| `core/review/` | Code-review MR + technical-retro alias + mockup-review checklist + ux-design checklist |
 | `core/meta/` | Author-facing preset meta-rules |
 
 ## CLI note

package/presets/_shared/assets/docs-specs/INDEX.md

@@ -0,0 +1,9 @@
+# Product specs INDEX
+
+Discovery table for `docs/specs/**`. Agents start here when the file exists.
+
+| id | type | domain | title | path | routes | aliases | status |
+|----|------|--------|-------|------|--------|---------|--------|
+| <!-- example-row: example-page | page | example | Example page | docs/specs/domains/example/example-page.md | /example | ExamplePage | draft --> |
+
+<!-- Add one row per page/feature spec. Keep `id` and `path` in sync with frontmatter. -->

package/presets/_shared/assets/docs-specs/_templates/feature.md

@@ -0,0 +1,32 @@
+---
+id: example-feature
+type: feature
+domain: example
+routes: []
+ui: []
+store: []
+api: []
+aliases: []
+e2e: []
+status: draft
+owners: []
+related: []
+---
+
+# Example feature
+
+## Overview
+
+Cross-page shared behavior for this domain. Prefer `type: feature` on backend/MCP stacks.
+
+## Shared behavior / constraints
+
+- Invariants that apply across related pages/tools.
+
+## Related pages
+
+- Link page specs in this domain (or N/A).
+
+## Cross-cutting states
+
+N/A

package/presets/_shared/assets/docs-specs/_templates/page.md

@@ -0,0 +1,47 @@
+---
+id: example-page
+type: page
+domain: example
+routes: []
+ui: []
+store: []
+api: []
+aliases: []
+e2e: []
+status: draft
+owners: []
+related: []
+---
+
+# Example page
+
+## Overview
+
+Short product behavior summary. Replace placeholders from brief AC / user / labeled sources.
+
+## Entry / actors
+
+Who enters this page and from where.
+
+## Primary flows
+
+1. Happy path steps.
+
+## States
+
+- Loading: …
+- Empty: …
+- Error: …
+- Success: …
+
+## Acceptance criteria
+
+- [ ] Link or restated AC from brief / product source.
+
+## Edge cases
+
+N/A
+
+## Related specs
+
+- (optional feature.md or sibling page ids)

package/presets/_shared/assets/docs-specs/schemas/frontmatter-v1.schema.json

@@ -0,0 +1,22 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://bonesofspring.github.io/ai-rules/schemas/frontmatter-v1.schema.json",
+  "title": "Product spec frontmatter v1",
+  "type": "object",
+  "required": ["id", "type", "domain", "routes", "ui", "store", "api", "aliases", "e2e"],
+  "properties": {
+    "id": { "type": "string", "minLength": 1 },
+    "type": { "type": "string", "enum": ["page", "feature"] },
+    "domain": { "type": "string", "minLength": 1 },
+    "routes": { "type": "array", "items": { "type": "string" } },
+    "ui": { "type": "array", "items": { "type": "string" } },
+    "store": { "type": "array", "items": { "type": "string" } },
+    "api": { "type": "array", "items": { "type": "string" } },
+    "aliases": { "type": "array", "items": { "type": "string" } },
+    "e2e": { "type": "array", "items": { "type": "string" } },
+    "status": { "type": "string", "enum": ["draft", "active", "deprecated"] },
+    "owners": { "type": "array", "items": { "type": "string" } },
+    "related": { "type": "array", "items": { "type": "string" } }
+  },
+  "additionalProperties": true
+}

package/presets/_shared/core/agent-team/agent-artifact-contracts.md

@@ -103,12 +103,15 @@ A producer finishes its step by upserting only its owned artifact entry and term
 | `security-reviewer` | `security-review` | `security-review.md` |
 | `accessibility-reviewer` | `a11y-review` | `a11y-review.md` |
 | `performance-auditor` | `perf-report` | `perf-report.md` |
+| `mockup-reviewer` | `mockup-review` | `mockup-review.md` |
 | `api-contract-reviewer` | `api-contract-review` | `api-contract-review.md` |
 | `qa-tester` / unit or e2e planners | stack-native test IDs | plan/spec paths named in the agent prompt |
 | `tech-writer` | `documentation` | `documentation.md` |
 
 Use these defaults unless a step's `artifactOutputId` / `artifactOutputIds` assigns a distinct owned ID (parallel reviewers must not share one `id`). `artifactInputIds` defaults to the applicable authoritative entries already present in the manifest.
 
+**v1 UX artifact:** when `task-analyst` produces `ux-design.md`, append it to the **`analysis`** entry `authoritativePaths` and `evidencePaths`. Do **not** add a default producer row for `ux-designer` in v1.
+
 ## Minimal terminal handoff
 
 Report the owned entry ID, outcome, authoritative paths, covered AC/task IDs, and remaining gaps. The hook advances pipeline state from the terminal receipt; the agent receipt is evidence that drives the state transition, not a substitute for writing `status.json`.

package/presets/_shared/core/agent-team/agent-team-orchestrator.md

@@ -20,9 +20,9 @@ Roster of specialists is **stack-specific** (agent names and write scopes differ
 
 | Kind | Examples (names vary by stack) |
 |------|--------------------------------|
-| Planning | `task-router`, `task-analyst`, `solution-architect`, `migration-specialist` |
+| Planning | `task-router`, `task-analyst` (plus skill `ux-design` for behavioral UX **where the stack has a UI surface**), `solution-architect`, `migration-specialist` |
 | Implementation | `feature-developer`, `debugger`, `ci-investigator` |
-| Gates / review | `build-verifier`, `code-reviewer`, `security-reviewer`, `performance-auditor`; plus stack-native a11y/UI reviewer **only when the stack has a UI surface** |
+| Gates / review | `build-verifier`, `code-reviewer`, `security-reviewer`, `performance-auditor`; plus stack-native a11y/UI reviewer and `mockup-reviewer` **only when the stack has a UI surface** |
 | Tests | unit planner/generator/healer; e2e/UI planner/generator/healer (stack-native) |
 | Docs | `tech-writer` |
 
@@ -158,8 +158,8 @@ On each `subagentStop`, the hook reconciles `status.state` from the completing p
 2. Read `pipeline.json` before every subagent invocation.
 3. One role per Task call — **except** parallel steps: multiple Task calls in one message.
 4. **Never** skip `humanGates` without `/task-continue` or explicit user approval.
-5. Persist handoffs to disk (`brief.md`, `decomposition.md`, `debug-report.md`, `validation-report.md`, `architecture.md`, `migration-plan.md`, `ci-report.md`, `a11y-review.md`, `perf-report.md`, `security-review.md`, `api-contract-review.md`, `unit-test-plan.md`, `documentation.md`, `review.md`) and update the producer-owned terminal receipt in `artifact-manifest.json`.
-6. On `changes_requested` from reviewers: hook sets `retryAfterFix` → developer → same reviewer.
+5. Persist handoffs to disk (`brief.md`, `decomposition.md`, `debug-report.md`, `validation-report.md`, `architecture.md`, `migration-plan.md`, `ci-report.md`, `a11y-review.md`, `perf-report.md`, `security-review.md`, `api-contract-review.md`, `unit-test-plan.md`, `documentation.md`, `review.md`, `mockup-review.md`, `ux-design.md`) and update the producer-owned terminal receipt in `artifact-manifest.json`.
+6. On `changes_requested` from reviewers: hook sets `retryAfterFix` → developer → same reviewer. Exception: embedded `mockup-reviewer` FAIL (`changes_requested` while the completed/current agent is `mockup-reviewer`) → `awaiting_approval` / `/task-continue` only — do **not** `retryAfterFix` to developer.
 7. On `validation_failed` from `build-verifier`: hook sets `retryAfterFix: build-verifier` → developer → build-verifier.
 8. When all steps complete, suggest `/technical-retro <slug>`.
 9. If `autoChain: false` in pipeline, do not rely on hook — manual step only.

package/presets/_shared/core/architecture/feature-delivery-workflow.md

@@ -8,7 +8,7 @@ Typical feature with data and UI. Concrete directories and rule stems — in the
 2. **Transport / DTO** — DTOs and mappers Domain ↔ transport (must not leak into UI).
 3. **Services / Data** — repository / API-service implementations via the stack’s public clients.
 4. **State** — store / ViewModel / use cases; no direct HTTP and no DTOs in UI.
-5. **UI** — thin views/components; data via state; design system.
+5. **UI** — thin views/components; data via state; design system. If the prompt or `brief.md` contains a `figma.com` URL, **mockup review must complete** (or the user must continue past FAIL/`BLOCKED_MCP` via `/task-continue`) **before UI work**. When required-signal and **no** `figma.com`, **`ux-design.md` must exist** (not `INCOMPLETE`) before UI work — else blocked, hand back to analyst. Non-UI tasks no-op these gates.
 6. **Tests** — unit for mappers / non-trivial logic; e2e/UI per stack convention.
 7. **Completion** — stack post-change gate (lint/build) + package/toolchain rules.
 

package/presets/_shared/core/architecture/product-specs-authoring.md

@@ -0,0 +1,107 @@
+# Product specs authoring
+
+Load when **Generate** or **Bootstrap** is requested (`/spec-start`, router `spec-gen`, brief AC, or analyst author mode). Discovery-only work stays on **`product-specs`**.
+
+## Modes
+
+1. **Consume** — default; never invent INDEX/specs (see `product-specs`).
+2. **Generate** — create/update page/feature specs + INDEX rows from brief AC, user intent, Figma, or code archaeology. Inventing *product* behavior is forbidden without a stated source (AC / user / UI copy / code-observed behavior labeled `status: draft` or `inferred`).
+3. **Bootstrap** — create `INDEX.md` + `_templates/` copies + first domain spec under greenfield policy.
+
+## Greenfield policy
+
+Agents **may** create INDEX + first specs **only when** one of:
+
+1. User runs `/spec-start` or explicitly asks to bootstrap `docs/specs`.
+2. Brief/AC includes generation or bootstrap language.
+3. Router detects `spec-gen` intent.
+
+Otherwise: missing INDEX → optional tree; do **not** invent INDEX merely because discovery loaded.
+
+## Conflict precedence
+
+1. **Human gate** decision (approved brief/spec edits).
+2. **Current task `brief.md` AC** — if AC contradicts an existing spec, analyst must reconcile (update spec as `draft` or revise AC) before developer; no silent contradiction.
+3. **Approved `docs/specs/**`** — behavior SoT for feature-developer once gate passed.
+4. **Code / `.ai/context`** — discovery evidence only; never override approved spec without gate.
+
+Label inferred-from-code lines with `status: draft` until human promotes.
+
+## INDEX.md contract (v1)
+
+| Column | Required | Notes |
+|--------|----------|-------|
+| `id` | yes | Stable kebab/id matching frontmatter `id` |
+| `type` | yes | `page` \| `feature` |
+| `domain` | yes | Domain folder under `docs/specs/domains/<domain>/` |
+| `title` | yes | Human label |
+| `path` | yes | Repo-relative path to markdown file |
+| `routes` | no | Summary; may duplicate frontmatter |
+| `aliases` | no | Comma-separated PageName / deep-link aliases |
+| `status` | no | `draft` \| `active` \| `deprecated` |
+
+Layout: `docs/specs/domains/<domain>/<id>.md` (page) and optional `docs/specs/domains/<domain>/feature.md`. Adding/renaming/removing a linked file **must** update INDEX in the **same change set**.
+
+## Frontmatter v1
+
+| Field | Type | Required | Notes |
+|-------|------|----------|-------|
+| `id` | string | yes | Unique; matches INDEX |
+| `type` | enum `page` \| `feature` | yes | Backend/MCP: prefer `feature` |
+| `domain` | string | yes | |
+| `routes` | string[] | yes (may be `[]`) | Web: URL paths; mobile: deep links/screens; backend: HTTP paths; mcp-ts: tool names |
+| `ui` | string[] | yes (may be `[]`) | Component/screen refs; empty on backend/mcp |
+| `store` | string[] | yes (may be `[]`) | Slice/module refs; empty when N/A |
+| `api` | string[] | yes (may be `[]`) | Services/ports/tools |
+| `aliases` | string[] | yes (may be `[]`) | |
+| `e2e` | string[] | yes (may be `[]`) | Stack-appropriate test paths |
+| `status` | enum | no | default `draft` on agent generate |
+| `owners` | string[] | no | |
+| `related` | string[] | no | Spec ids or paths |
+
+Arrays are **always present** (empty allowed). Do not omit keys for N/A stacks.
+
+## Body headings (minimum)
+
+**`page` required:** Overview; Entry / actors; Primary flows; States (loading / empty / error / success as applicable — mark N/A explicitly); Acceptance criteria (links or bullets to brief AC / product source).
+
+**`page` optional:** Analytics, Accessibility, Edge cases, Related specs.
+
+**`feature` required:** Overview; Shared behavior / constraints; Related pages (links).
+
+**`feature` optional:** Cross-cutting states, Analytics.
+
+Compliant = valid frontmatter + all required headings present (non-empty prose or explicit `N/A`) + INDEX row with resolvable `path`.
+
+## Templates & assets
+
+**Package SoT:** `packages/ai-rules/presets/_shared/assets/docs-specs/` (`INDEX.md` stub, `_templates/page.md`, `_templates/feature.md`; optional `schemas/frontmatter-v1.schema.json`).
+
+**CLI `init`:** when consumer `docs/specs/` is **absent**, copy INDEX stub + `_templates/*` (idempotent; **never overwrite** existing INDEX). When the tree already exists, skip seed entirely.
+
+**Skill fallback:** if consumer `_templates/` missing during author mode, copy from package/skill assets before authoring.
+
+## Author roles
+
+| Role | Responsibility |
+|------|----------------|
+| **task-analyst** | Primary author (Generate + Bootstrap); INDEX bootstrap; brief **Related specs** + **Spec gaps / generation requested**; loads this stem + skill `spec-authoring` |
+| **tech-writer** | Post-delivery sync where present; never invent product behavior without AC/code source |
+| **feature-developer** | Consumes approved specs as SoT; mechanical INDEX/frontmatter fixes only on renames |
+| **mcp-ts** | No tech-writer — author + post-sync via **task-analyst** only |
+
+## Self-check before handoff (soft block)
+
+Block handoff via `open_questions` until fixed:
+
+- [ ] Required frontmatter keys present; arrays always present (may be `[]`)
+- [ ] Required body headings present (or explicit `N/A`)
+- [ ] INDEX row added/updated with resolvable `path` in the **same change set**
+- [ ] Sources cited; invented product behavior absent (or labeled `draft` / `inferred`)
+- [ ] Conflict with brief AC reconciled or flagged
+
+## Related
+
+- `product-specs` — discovery / consume
+- Skill `spec-authoring` — procedural checklist
+- Optional consumer script `scripts/check-product-specs.sh` (WARN default; `--strict` FAIL)

package/presets/_shared/core/architecture/product-specs.md

@@ -0,0 +1,49 @@
+# Product specs (docs/specs)
+
+Product page/feature **behavior** specs live under the consumer repo `docs/specs/**`. This stem covers **discovery and presence** — not layer implementation order (see `feature-delivery-workflow`) and not code-structure mirroring (see `reference-features`).
+
+**Authoring** (Generate / Bootstrap modes, INDEX/frontmatter v1, body checklist, greenfield, conflict precedence) → load **`product-specs-authoring`** when generation is requested (`/spec-start`, brief AC, or router `spec-gen`).
+
+## Modes (summary)
+
+| Mode | When | Behavior |
+|------|------|----------|
+| **Consume** (default) | INDEX exists or globs hit `docs/specs/**` without generate intent | Discover via INDEX; soft-fail on miss; **never invent** INDEX/specs |
+| **Generate** | Explicit generate intent / AC / `/spec-start` with existing tree | Create/update page/feature specs + INDEX from stated sources |
+| **Bootstrap** | Explicit bootstrap / `/spec-start` when tree absent | Create INDEX + templates + first domain spec |
+
+Greenfield: agents may create INDEX/specs **only** on explicit intent, AC, or `/spec-start`. Missing INDEX alone does **not** authorize inventing the tree.
+
+## Presence policy
+
+- If `docs/specs/INDEX.md` is **missing** → the tree is **optional** (greenfield OK for *consume*). Continue with code/brief discovery; do not invent an INDEX solely because this stem loaded.
+- If INDEX **exists** → it is the **required discovery path** for work that touches a listed page, feature, route, or alias.
+
+## Discovery algorithm
+
+1. Always start at `docs/specs/INDEX.md` when present.
+2. Resolve the entry by: route, stable `id`, PageName / alias, or domain folder.
+3. Read the linked page spec (and optional domain `feature.md` when the INDEX or page Related links it).
+
+## Miss policy (INDEX present, row or file missing)
+
+- Record the gap in `open_questions` / handoff gaps.
+- Fall back to code discovery and consumer `.ai/context/**` when present.
+- **Do not invent** product behavior, states, interactions, or contracts.
+- Hard-fail / block only when the task’s acceptance criteria explicitly require a named spec that is absent (human/gate decision).
+
+## Authoring pointer
+
+Same-changeset INDEX updates, frontmatter v1, required body headings, templates, and conflict precedence live in **`product-specs-authoring`**. Do not paste the full checklist here.
+
+## Non-goals
+
+- Not a replacement for `.ai/context/**` (external AI Code Review glossary) or `reference-features` (file-layout mirror).
+- Not Tessl / an external host as primary SoT.
+- No stack filesystem path recipes in this core body — path examples belong only in adapter **Stack notes**.
+
+## Related
+
+- `product-specs-authoring` — generation modes, contracts, self-check.
+- `reference-features` — code structure mirror (how to layout files), not product behavior.
+- Consumer `.ai/context/**` when present — review/domain glossary; cross-link, do not replace.

package/presets/_shared/core/meta/preset-no-cross-stack-leakage.md

@@ -59,7 +59,8 @@ Shared backend-stack bans (`go`, `java`, `php-hexagonal`, and `php-laravel`):
 - `playwright-test-`, `playwright-e2e`, `user-playwright`, `app/__tests__/e2e`
 - Positive yarn recipes `lint:js` / `lint:css`
 - `xcuitest-test-`, `instrumentation-test-`, `xcodebuild`, `SwiftLint` as required handoffs
-- Agent file `accessibility-reviewer` (no UI surface)
+- Agent files `accessibility-reviewer`, `mockup-reviewer`, `ux-designer` (no UI surface)
+- Required `skills/ux-design`, required `rules/ux-design`, or required pipeline handoff stem `ux-design`
 
 Required instead: `integration-test-*`; build-verifier / `post-change-test` plus stack tooling — `go-tooling` (`go test`, `go vet`), `java-tooling` (`mvn test` / `./gradlew test`), or `php-tooling` (`php artisan test` / `composer test` / `vendor/bin/phpunit`).
 
@@ -71,7 +72,8 @@ Same UI/mobile bans as backend stacks, plus:
 - Positive yarn recipes `lint:js` / `lint:css` as required gates
 - `xcuitest-test-`, `instrumentation-test-`, `xcodebuild`, `SwiftLint` as required handoffs
 - Go tool commands as required MCP delivery gates: `go test`, `go vet`, `golangci-lint`
-- Agent files: `playwright-test-*`, `xcuitest-test-*`, `instrumentation-test-*`, `integration-test-*`, `accessibility-reviewer`
+- Agent files: `playwright-test-*`, `xcuitest-test-*`, `instrumentation-test-*`, `integration-test-*`, `accessibility-reviewer`, `mockup-reviewer`, `ux-designer`
+- Required `skills/ux-design`, required `rules/ux-design`, or required pipeline handoff stem `ux-design`
 
 Required instead: package-manager–discovered typecheck/test (`mcp-ts-tooling`, `post-change-test`); Phase 1 gates `build-verifier` + `security-reviewer`.