@imfusion/web-ui 0.5.1-dev.28.g1156ad00 → 0.5.1-dev.3.g8e0a047a

package/src/llms/skills/imf-web-ui-frontend-conventions/references/git.md

@@ -1,33 +0,0 @@
-# Git
-
-## git:config
-
-One script holds the repo's git configuration, run by hand once per clone (the README names it):
-
-```
-git config core.hooksPath .githooks && git config pull.rebase true && git config merge.ff only
-```
-
-Hooks live in a tracked directory; history strategy doesn't depend on personal git config. Two silent failure modes to check
-for: `git:config` never run (hooks exist only on the machine that configured by hand), and `core.hooksPath` pointing at a
-directory that doesn't exist. Config **and** directory.
-
-## Verify scopes
-
-Two blocking, one advisory:
-
-- **staged** — `verify:staged`, called by the pre-commit hook: lint, format, restage. Fast; a passing commit is not CI green.
-- **full** — `verify:full`: the build plus every `verify:*` check. What CI runs.
-- **files** — post-edit agent hook. Advisory, never exits non-zero, so a mid-flight refactor can't trap the agent.
-
-One script owns each scope's step list; npm scripts and hooks only launch them. Name by depth, not by occasion — a
-`preflight` needs explaining and invites a near-identical sibling, and two of those drift into "passes locally, fails in CI".
-
-## Staleness at commit time
-
-Pre-commit also runs the advisory staleness checks — warn, never block:
-
-- **Vendored baseline** — `.agents/hooks/imf-web-ui/baseline-staleness.sh` compares the installed `imf-web-ui-*` skill
-  markers against the installed package version; the fix it names is `npx web-ui-install`.
-- **Docs** — a staged change that invalidates a doc updates that doc in the same commit
-  ([docs-structure.md](docs-structure.md)). Where the repo has an agent commit workflow, a staged docs audit belongs in it.

package/src/llms/skills/imf-web-ui-frontend-conventions/references/library-boundary.md

@@ -1,37 +0,0 @@
-# Library boundary
-
-The contract between an app and `@imfusion/web-ui`.
-
-## Stay behind the library
-
-Never import Base UI (or any other upstream the library wraps) directly — no upstream stylesheets, no upstream components,
-even when upstream docs show it that way. Everything a component needs ships in `@imfusion/web-ui`. If the library is missing
-something upstream has, report the gap (see `imf-web-ui-components`); don't reach around it.
-
-## Wrap primitives when the app has a reason to
-
-When the app keeps repeating something around a primitive — default props, a styling override, a composition, an
-accessibility refinement, a restriction of the API — wrap it once in an app-level dumb component and use that. The wrapper
-derives its props from the primitive (`React.ComponentProps<typeof Button>`, narrowed or extended), lives in `components/`
-like any other dumb component ([components.md](components.md)), and styles itself through the sanctioned seams — it never
-reaches into the library's internals.
-
-Two rules keep wrappers honest:
-
-- Wrap for a reason — any repeated adaptation counts. A wrapper that only renames a primitive is indirection with no payoff.
-- Components marked `experimental` in the identity index get wrapped **always**, even with nothing added yet — a breaking
-  upstream change then lands in one file instead of every call site.
-
-## Derive types, don't import them
-
-Prop types come from the components themselves: `React.ComponentProps<typeof Button>`. The library deliberately exports no
-`Props` types — don't look for them, and don't re-declare prop shapes by hand.
-
-## Integrations own their peers
-
-Components under `@imfusion/web-ui/integrations/*` depend on optional peers (e.g. `@tanstack/highlight` for `CodeHighlight`).
-Add the peer explicitly to the consumer's `package.json` — never rely on hoisting.
-
-## Styling crosses the boundary through seams
-
-Tokens in, sanctioned selectors at the edge, never the library's internals — the full contract is [styling.md](styling.md).

package/src/llms/skills/imf-web-ui-frontend-conventions/references/npm-project.md

@@ -1,57 +0,0 @@
-# npm project
-
-How the npm side of an ImFusion frontend is structured: `package.json`, scripts, dependencies. `imf-web-ui-frontend-setup`
-audits against this file.
-
-## package.json
-
-The exemplary shape:
-
-```jsonc
-{
-  "name": "@imfusion/scan-review",
-  "type": "module",
-  "private": true, // only when the package is not meant to be published
-  "engines": { "node": ">=22" },
-  "imports": { "#/*": "./src/*" }
-}
-```
-
-- `"type": "module"` always.
-- `"private": true` for apps that never publish; a publishable package drops it.
-- Node pinned via `engines.node` or `.nvmrc` — not a personal version manager's config.
-- The `#/` alias wired through `imports` ([project-structure.md](project-structure.md)).
-
-## Scripts
-
-Same name, same meaning, every repo — "what can I run to check this?" is answered by tab-completing `verify:`.
-
-| Script             | Runs                                                                  |
-| ------------------ | --------------------------------------------------------------------- |
-| `dev`              | dev server                                                            |
-| `build`            | production build                                                      |
-| `verify:deps`      | exact-pin check over `dependencies` and `devDependencies`             |
-| `verify:format`    | `prettier --check .`                                                  |
-| `verify:lint`      | `eslint . --cache --max-warnings=0`                                   |
-| `verify:typecheck` | `tsc --noEmit` (or `tsc -b --noEmit` in a project-references setup)   |
-| `verify:tests`     | `vitest run`                                                          |
-| `verify:staged`    | staged-file subset, called by the pre-commit hook                     |
-| `verify:full`      | every `verify:*` check plus the build; what CI runs                   |
-| `format`           | `prettier --write .`                                                  |
-| `lint`             | `eslint . --cache --fix`                                              |
-| `git:config`       | see [git.md](git.md); run by hand once per clone, named in the README |
-
-Two rules generate the names:
-
-- **Every check is `verify:*`.** One namespace for everything that reads and reports.
-- **Write-mode scripts keep the tool name.** `format` and `lint` change files, which isn't verifying — no prefix, no `:fix`
-  suffix.
-
-`verify:staged` is fast and partial; a passing commit is not CI green. `verify:full` is the CI gate.
-
-## Dependencies
-
-- **Pinned exactly.** No `^`, `~`, or `latest`, in `dependencies` and `devDependencies` alike. `verify:deps` catches drift;
-  `save-exact=true` in `.npmrc` prevents it.
-- **`ignore-scripts=true` in `.npmrc`.** Blocks lifecycle scripts on install (the supply-chain vector). Setup that matters is
-  a command someone runs, not a hook that fires on install.

package/src/llms/skills/imf-web-ui-frontend-conventions/references/project-structure.md

@@ -1,21 +0,0 @@
-# Project structure
-
-Kebab-case throughout, folders and files alike. Exported symbols stay PascalCase — only the filename is kebab.
-
-```
-src/
-  routes/          # TanStack Router file-based routes; routing only — they compose, they don't fetch inline
-  api/             # one folder per API topic — layout and behaviour in data.md
-  components/      # grouped by kind — anatomy in components.md
-  http/            # transport: client, error normalisation — the only transport-aware place (data.md)
-  lib/             # framework-free helpers
-```
-
-Each subtree's own rules live with its topic: [data.md](data.md) for `api/` and `http/`, [components.md](components.md) for
-`components/`.
-
-## Imports
-
-The `#/` alias for anything outside the current folder, plain `./` for siblings. The alias is always `#/` → `src/` — `#` is
-Node's own subpath-import prefix, so it can't collide with an npm scope. Wire it once, through `package.json`'s `imports`
-field where the toolchain resolves it natively, with a matching tsconfig `paths` entry.

package/src/llms/skills/imf-web-ui-frontend-conventions/references/stack.md

@@ -1,39 +0,0 @@
-# Stack
-
-The topic→tool map for an ImFusion frontend. Check this before adding a dependency; check the TanStack suite before adding a
-non-TanStack one.
-
-| Topic                 | Tool                                                                                                  |
-| --------------------- | ----------------------------------------------------------------------------------------------------- |
-| Build                 | [Vite](https://vite.dev)                                                                              |
-| Routing, URL state    | [TanStack Router](https://tanstack.com/router) — file-based, type-safe search params                  |
-| Server state          | [TanStack Query](https://tanstack.com/query) — the pattern around it is [data.md](data.md)            |
-| Forms                 | [TanStack Form](https://tanstack.com/form)                                                            |
-| Data grids            | [TanStack Table](https://tanstack.com/table) + web-ui's styled `Table` parts                          |
-| App-wide client state | [TanStack Store](https://tanstack.com/store) — last resort in the state ladder ([react.md](react.md)) |
-| Schema validation     | [Zod](https://zod.dev) — at the network boundary ([data.md](data.md))                                 |
-| Styling               | CSS Modules ([styling.md](styling.md))                                                                |
-| Test                  | [Vitest](https://vitest.dev)                                                                          |
-| Format                | [Prettier](https://prettier.io) — values in [tooling.md](tooling.md)                                  |
-| Lint                  | [ESLint](https://eslint.org) flat config ([tooling.md](tooling.md))                                   |
-| Types                 | `tsc --noEmit` — own script, own CI step                                                              |
-| Staged files          | [lint-staged](https://github.com/lint-staged/lint-staged) (or nano-staged, drop-in)                   |
-| Dead code             | [knip](https://knipjs.dev) — needs per-repo config                                                    |
-
-## Devtools come with the library
-
-Every TanStack library that ships a devtools package gets it as a dev dependency, mounted in development only. Router is a
-given, so `@tanstack/react-router-devtools` is a given too; Query's goes in when Query does. Look for a `-devtools` sibling
-whenever you add a TanStack dependency — the set grows, and not every library has one yet. Once a project has several,
-`@tanstack/devtools` hosts them in one panel.
-
-## When a library owns a layer
-
-A library owns the layer once you find yourself rebuilding what it does: validation timing and cross-field rules (Form),
-caching and refetching (Query), URL as the source of truth (Router), sorting and pagination over rows (Table). Adding the
-library mid-project is normal and cheap; unpicking a hand-rolled version later is not.
-
-## Docs over memory
-
-`npx @tanstack/cli` for TanStack docs — never work from memory. Where a project has wired up `@tanstack/intent`, use it to
-reach the Agent Skills its TanStack dependencies ship, and read those too.

package/src/llms/skills/imf-web-ui-frontend-conventions/references/styling.md

@@ -1,91 +0,0 @@
-# Styling
-
-**CSS Modules with native CSS by default** — nesting and custom properties are the DRY mechanism; no Sass, no CSS-in-JS, no
-utility-class framework. Where the stylesheet lives and who owns one is [components.md](components.md).
-
-- **Nest pseudo-elements, states, and child selectors under the root** so a selector prefix is written once:
-
-  ```css
-  .root {
-    transition: clip-path var(--ease);
-    &:focus-visible {
-      outline: var(--imf-ui-border-size-2) solid var(--imf-ui-color-fg-support);
-    }
-    &[data-disabled] {
-      opacity: 0.5;
-    }
-  }
-  ```
-
-- **Lift a repeated literal into a custom property** (an easing, a colour-math result) and reference it. Custom properties
-  also carry per-state/per-variant values down the tree — the parameterisation a mixin would provide, done natively.
-- Don't "merge" rules that only look similar. Structurally different output (three distinct `clip-path` polygons) isn't
-  repetition a mixin can remove. Keep it explicit.
-
-## Build custom UI from tokens
-
-Anything you build that the library doesn't cover — a stat widget, a custom panel — uses `--imf-ui-*` variables for color,
-spacing, radius, and type instead of hardcoded values. That's what makes custom UI look native next to library components,
-and what keeps it correct when the theme changes. A hex code or a magic `px` next to a concept the tokens already name is a
-defect.
-
-Geometry that can't be a token (a clip-path percentage, a hairline `1px`) lives in a named custom property at the top of the
-stylesheet, with the invariant written next to it. Don't silently approximate to the nearest token.
-
-## Override through the sanctioned seams
-
-All library styles live in the `imf-ui.components` CSS layer, so **any plain selector you write wins** — that's the whole
-override contract:
-
-- Target the stable hooks: `data-imf-ui-component` attributes and your own classes/wrappers.
-- Never target the library's internal class names — they are generated and change without notice.
-- Never `!important` — if you think you need it, you're targeting the wrong thing.
-- **Style against state via data attributes** (`[data-checked]`, `[data-disabled]`, `[data-popup-open]`) — components expose
-  their state there, so you never maintain your own state classes. `className` is purely a styling surface:
-
-  ```css
-  [data-imf-ui-component="Switch"][data-checked] {
-    outline: 2px solid var(--imf-ui-color-bg-positive);
-  }
-  ```
-
-## The color system
-
-The color roles you can name: **surfaces** (`main` the canvas, `support` panels, `minor` popovers), **brand** (identity, full
-saturation) vs **primary** (contrast-tuned, CTAs — distinct roles on purpose), **status** (`negative`, `warning`, `positive`,
-`info`), and three **accent** slots.
-
-Two layers:
-
-- **Controls** are the 80/20 customization surface — override one and every derived token shifts:
-
-  ```css
-  :root {
-    --imf-ui-color-primary-hue: 30; /* every primary semantic token follows */
-  }
-  ```
-
-- **Semantic tokens** are what you consume in your own CSS: `--imf-ui-color-bg-{name}` per role, a flat
-  `--imf-ui-color-fg-{main|support|minor|oncolor|…}` ladder for text. Borders and rings draw from the `fg-*` space.
-
-Rules of thumb: if you push a hue control into a pale corner, you own overriding the matching `fg-*` token; the color scheme
-is `<html data-imf-ui-color-scheme="light|dark">` (the provider sets it) — scheme-specific styling selects via that
-attribute.
-
-## Responsive styling
-
-- **Tune components per breakpoint by overriding their `--imf-ui-*` variables inside your own media queries** — custom
-  properties cross the `@media` boundary, props don't. That's why components expose sizing as variables instead of a `width`
-  prop:
-
-  ```css
-  @media (min-width: 768px) {
-    .my-shell {
-      --imf-ui-appshell-navbar-width: 22rem;
-    }
-  }
-  ```
-
-- **Write literal breakpoint values.** The library's `@custom-media` aliases are build-internal and don't ship.
-- **JS only for behaviour** (render a burger menu on mobile): `useMediaQuery(minWidth("md"))`. Never for styling CSS can do.
-- **No responsive props.** `size={{ sm: … }}` objects are deliberately not offered — write the media query.

package/src/llms/skills/imf-web-ui-frontend-conventions/references/testing.md

@@ -1,18 +0,0 @@
-# Testing
-
-Test the **decisions**, not the rendering.
-
-- **Pure logic gets unit tests** — pricing, permissions, date math, parsing, reducers. These are cheap, fast, and the place
-  bugs actually hide.
-- **Presentational components generally don't.** A component that maps props onto web-ui primitives has no logic of its own;
-  asserting that it rendered a `<Button>` tests React, not your code.
-- **Behaviour a user performs gets an interaction test** — a form that validates, a flow with steps. Test it through the
-  interface the user has (roles, labels, visible text), not through internals.
-- **Extract the decision out of a hook and test that.** A hook whose interesting part is a plain function is easier to test
-  as a plain function than through a render harness. A hook that only wraps a browser API has no decision to extract.
-
-The data layer has its own recipe — stub `fetch`, run the real query client — in [data.md](data.md). A schema whose
-constraints or transforms encode product behavior gets focused accepted, rejected, and transformed cases; see
-[validation.md](validation.md).
-
-The measure isn't coverage percentage. It's whether a test failing tells you something you didn't already know.

package/src/llms/skills/imf-web-ui-frontend-conventions/references/tooling.md

@@ -1,76 +0,0 @@
-# Tooling config
-
-The config baselines for the tools in [stack.md](stack.md). Prefer typed config (`.ts` over `.json`) where the tool supports
-it.
-
-## Prettier
-
-Config file shape is free (`.prettierrc`, `prettier.config.ts`); the values are not:
-
-```ts
-import type { Config } from "prettier";
-
-const config: Config = {
-  printWidth: 125,
-  tabWidth: 2,
-  useTabs: false,
-  trailingComma: "none",
-  arrowParens: "avoid",
-  semi: true,
-  singleQuote: false,
-  proseWrap: "always"
-};
-```
-
-No config file means Prettier runs on defaults — the values silently differ.
-
-## ESLint
-
-Flat config (`eslint.config.ts`):
-
-- `strictTypeChecked` + `stylisticTypeChecked`, `projectService: true`
-- `as` and `!` banned outside tests (`consistent-type-assertions`)
-- `.gitignore` as the ignore source (`includeIgnoreFile` from `@eslint/compat`) — ignores aren't maintained twice
-- The `#/` alias enforced via `no-restricted-imports` banning the `../*` pattern — parent-relative paths error, siblings
-  (`./`) stay relative ([project-structure.md](project-structure.md))
-
-## tsconfig
-
-```jsonc
-{
-  "compilerOptions": {
-    "strict": true,
-    "moduleResolution": "bundler",
-    "verbatimModuleSyntax": true, // import type stays import type
-    "noUnusedLocals": true,
-    "noUnusedParameters": true,
-    "noFallthroughCasesInSwitch": true,
-    "noUncheckedSideEffectImports": true,
-    "skipLibCheck": true,
-    "paths": { "#/*": ["./src/*"] }
-  }
-}
-```
-
-The `#/` → `src/` alias and its rationale: [project-structure.md](project-structure.md).
-
-## Staged files
-
-Runner config (lint-staged or nano-staged) applying eslint `--fix` and prettier `--write` to staged files only.
-
-## CSS class names
-
-Generated CSS Module class names are readable in the DOM, `{prefix}-{file}-{local}`, never the default hash. A legible DOM is
-what makes devtools and browser automation usable. The library ships the plugin that produces them; pass your own short,
-app-scoped prefix:
-
-```ts
-import { readableCssModuleNames } from "@imfusion/web-ui/build/vite-css-module-names";
-
-export default defineConfig({
-  plugins: [react(), readableCssModuleNames({ prefix: "acme" })]
-});
-```
-
-One pattern for dev, Storybook, and production. Register the plugin in **every** tool that compiles the CSS — a compiler left
-out generates different names for the same source file, and its styles silently don't apply.

package/src/llms/skills/imf-web-ui-frontend-conventions/references/typescript.md

@@ -1,46 +0,0 @@
-# TypeScript & code style
-
-Functional by default: pure functions over stateful classes, immutable data over in-place mutation, expressions over
-statements, side effects at the edges (network, DOM, store).
-
-## Types
-
-- No `any`. `unknown` at a boundary you can't type, narrowed before use.
-- Infer locals; annotate contracts. Exported functions get an explicit return type.
-- No temporal coupling — model the states instead of initialising `null` and filling in later.
-- Avoid `as`. Fix the type. The honest exception: an untyped third-party boundary, kept at the boundary.
-- Derive, don't duplicate:
-
-```ts
-const sizes = ["sm", "md", "lg"] as const;
-type Size = (typeof sizes)[number];
-
-const labels: Record<Size, string> = { sm: "S", md: "M", lg: "L" }; // compiler breaks if `sizes` changes
-```
-
-Across boundaries the same rule: library props via `React.ComponentProps<typeof Button>`
-([library-boundary.md](library-boundary.md)), untrusted data via a runtime schema and `z.infer`
-([validation.md](validation.md)).
-
-- Function signatures: 1–2 positional arguments; at 3+, one destructured object.
-
-## Immutability & expressions
-
-- Array methods before loops — `map`, `filter`, `find`, `some`, `flatMap` name what they do:
-
-```ts
-const activeNames = users.filter(u => u.isActive).map(u => u.name);
-```
-
-- Produce new values: spreads and `structuredClone` over in-place edits, `toSorted`/`toReversed` over `sort`/`reverse` (which
-  mutate their receiver).
-- Allowed exceptions: a genuine early exit (`for` + `break`), a measured hot loop.
-- Keep chains flat: 3–4 steps read well; longer wants named intermediates, and a `reduce` doing four things wants to be a
-  loop.
-
-## Naming
-
-- Say what it is, not what it's made of: `useUserQuery`, not `useUserHook`; `retryDelay`, not `num`.
-- Booleans read as assertions: `isOpen`, `hasAccess`, `canSubmit`.
-- Handlers: `onX` as props, `handleX` as implementations.
-- Match the vocabulary the product and the API already use — no synonyms for terms the backend named.

package/src/llms/skills/imf-web-ui-frontend-conventions/references/validation.md

@@ -1,88 +0,0 @@
-# Validation
-
-Runtime validation belongs where data crosses from an untrusted representation into frontend-owned values. The schema is the
-single source of truth for both the runtime check and the TypeScript type.
-
-## Boundaries
-
-Validate once, at the edge:
-
-- network responses when they enter the frontend;
-- URL path and search parameters before business logic uses them;
-- persisted browser data when it is read;
-- user input when it becomes a submitted domain value or request value.
-
-Code inside that boundary receives parsed values and does not repeat defensive shape checks. An outgoing request built from
-an already parsed domain value is serialized, not validated a second time. A typed client returning a handwritten generic is
-not validation: it only asserts that an untrusted response has the requested type.
-
-## Schema first, type derived
-
-Use Zod for the runtime schema and derive the type with `z.infer`:
-
-```ts
-import { z } from "zod";
-
-export const userSchema = z.object({
-  id: z.string(),
-  email: z.email()
-});
-
-export type User = z.infer<typeof userSchema>;
-```
-
-Do not maintain a handwritten `User` beside `userSchema`. Request and response shapes follow the same rule when the frontend
-owns or consumes their runtime representation.
-
-## TanStack Router search params
-
-TanStack Router v1 accepts a Zod v4 schema directly in `validateSearch`; no adapter or parsing wrapper is needed:
-
-```tsx
-import { createFileRoute } from "@tanstack/react-router";
-import { z } from "zod";
-
-const searchSchema = z.object({
-  page: z.number().int().positive().catch(1),
-  filter: z.string().catch("")
-});
-
-type UserSearch = z.infer<typeof searchSchema>;
-
-export const Route = createFileRoute("/users")({
-  validateSearch: searchSchema,
-  component: Users
-});
-
-function Users() {
-  const search = Route.useSearch();
-  return <UserList page={search.page} filter={search.filter} />;
-}
-```
-
-`Route.useSearch()` returns `UserSearch` by inference from `validateSearch`. Use `.catch()` when malformed URL input should
-fall back without interrupting navigation. Use `.default()` only when a missing value gets a default while malformed values
-should still follow the route's validation error path.
-
-## Failure handling
-
-Use `schema.parse(value)` when invalid data is a contract failure that should follow the normal error path, such as a
-malformed backend response reaching a route error boundary. Use `schema.safeParse(value)` when failure is expected and the
-caller must render or otherwise handle validation issues, such as submitted user input.
-
-Transforms and coercion belong in the boundary schema when they are part of entering the domain. Do not scatter trimming,
-number conversion, or defaulting through downstream components.
-
-## Audit
-
-A boundary is aligned when:
-
-- the untrusted source is represented as `unknown` until parsed;
-- a Zod schema parses it at the point of entry;
-- exported TypeScript types use `z.infer<typeof schema>`;
-- downstream code consumes the parsed value without duplicate checks or assertions;
-- parse failures reach the intended error or user-feedback path;
-- behavior-changing schemas have focused tests for accepted, rejected, and transformed values.
-
-TanStack Query placement is in [data.md](data.md), general type derivation in [typescript.md](typescript.md), URL and form
-ownership in [react.md](react.md), and test selection in [testing.md](testing.md).

package/src/llms/skills/imf-web-ui-frontend-setup/SKILL.md

@@ -1,66 +0,0 @@
----
-name: imf-web-ui-frontend-setup
-description:
-  "Assess an ImFusion frontend against the project baseline and write a reviewable FRONTEND_SETUP_REPORT.md: new-project
-  setup needs, existing-project gaps, alignment migrations, or one named topic (for example data, lifecycle hooks, CSS class
-  names, or Prettier). Covers stack, package scripts, tooling, verification, project shape, data, docs, and agent wiring.
-  House conventions, not industry standards. This skill inspects and plans; approved implementation is a separate task. Not
-  for wiring the library itself (imf-web-ui-library-setup)."
-argument-hint: "[new|audit|align|<topic>]"
-allowed-tools: Read Glob Grep
----
-
-# imf-web-ui-frontend-setup
-
-You are the frontend setup auditor. Investigate the repository statically, record every supported conclusion in
-`FRONTEND_SETUP_REPORT.md`, then stop for human review. You must follow the applicable `imf-web-ui-frontend-conventions`
-references, cite repository evidence, distinguish defects from working deviations, and never present the baseline as
-universal best practice.
-
-## Workflow
-
-1. Resolve the requested mode and scope.
-2. Read every applicable convention reference below. For agent tooling, also read the vendored
-   `imf-web-ui-agent-setup/SKILL.md` and its templates.
-3. Inspect the repository and write or refresh `FRONTEND_SETUP_REPORT.md` from
-   [`templates/FRONTEND_SETUP_REPORT.md`](templates/FRONTEND_SETUP_REPORT.md). The template is the report contract. Preserve
-   everything under `## Reviewer notes` verbatim.
-4. Return the report path and a short verdict. Change nothing else; implementation is a separate, approved task.
-
-## Safety
-
-Use only static inspection: Read, Glob, Grep, and equivalent non-executing search tools. Do not use a shell or invoke Node,
-npm, npx, package scripts, hooks, config imports, linters, tests, builds, Git commands, or project binaries. Read config as
-text and report runtime or machine-local state that cannot be established statically as unverified.
-
-Only `FRONTEND_SETUP_REPORT.md` may be written. Write is intentionally not pre-approved in `allowed-tools`; the report
-follows the host's ordinary write approval. Host-managed hooks may run after that write; the skill neither invokes nor
-suppresses them, but it does report broken or unexpected hook behavior found during static inspection.
-
-## Modes
-
-- **New** — record what exists and what setup work is needed.
-- **Audit** — report broken and missing pieces. A working project convention wins; differences are deviations, not defects.
-- **Align** — use the same evidence, but make deviations explicit migration proposals.
-- **One topic** — resolve any other argument to matching rows below and assess only those. If none match, list the available
-  rows instead of guessing or widening scope.
-
-## References
-
-| Reference                         | Assess                                                                    |
-| --------------------------------- | ------------------------------------------------------------------------- |
-| `stack.md`                        | dependencies, dead-code detection, and matching devtools                  |
-| `npm-project.md`                  | package metadata, scripts, pins, npm and Node config                      |
-| `tooling.md`                      | Prettier, ESLint, TypeScript, staged files, CSS class names               |
-| `git.md`                          | tracked hooks, verification scopes, staleness wiring                      |
-| `project-structure.md`            | source tree, naming, imports                                              |
-| `components.md`                   | component folders and colocation                                          |
-| `styling.md`                      | CSS Modules, tokens, prohibited styling systems                           |
-| `validation.md`                   | runtime schemas, boundary parsing, derived types                          |
-| `data.md`                         | transport, query/mutation options, keys, invalidation                     |
-| `docs-structure.md`               | README, AGENTS, docs index and content boundaries                         |
-| `imf-web-ui-agent-setup/SKILL.md` | installed skills, AGENTS fence, lifecycle hooks, registrations, staleness |
-
-Knip is required for dead-code detection. `eslint-plugin-jsx-a11y` remains a recommendation when the project is user-facing;
-its absence is not a finding. CI, env and secrets, error tracking, deploy, dependency updates, and library wiring are out of
-scope.

package/src/llms/skills/imf-web-ui-frontend-setup/templates/AGENTS.md

@@ -1,34 +0,0 @@
-# AGENTS.md
-
-<Keep this file lean — target ~50 lines. Decision test for every line: would the agent make a costly mistake without it? If
-it would just need to read a file first, cut it. Dev commands, path aliases, and tool config are discoverable from the files
-themselves.>
-
-<One paragraph: what the app is and the stack in one line.>
-
-Scripts, deps, and setup: [`README.md`](./README.md) and [`package.json`](./package.json) are the source of truth. Check the
-`package.json` scripts before running or suggesting a command — don't infer one exists by pattern-matching a sibling.
-
-## Read before you write
-
-<One bullet per doc in docs/, each with when to read it, e.g.:>
-
-- [`docs/<topic>.md`](./docs/<topic>.md) — <what it covers>. Read before <the change it governs>.
-
-[`docs/index.md`](./docs/index.md) registers all of them.
-
-## Working here
-
-<The fenced block below is the only part of this file `npx web-ui-install` touches: its content comes from this template and
-is refreshed on every skills install. Everything else in the file is scaffolded once by the setup skill and then owned by the
-repo.>
-
-<!-- imf-web-ui:begin — managed by `npx web-ui-install`; edits inside the fence are overwritten -->
-
-`.agents/skills/imf-web-ui-*` is vendored from `@imfusion/web-ui` and resynced with `npx web-ui-install`. Don't edit it and
-don't put repo conventions there. Load the matching `imf-web-ui-*` skill before writing code, styles, data fetching, or docs;
-repo docs hold only what is unique to this repo.
-
-<!-- imf-web-ui:end -->
-
-<Repo-specific agent guidance: generated files that are committed, tools to verify APIs against, things never to touch.>

package/src/llms/skills/imf-web-ui-frontend-setup/templates/FRONTEND_SETUP_REPORT.md

@@ -1,45 +0,0 @@
-# Frontend Setup Report
-
-Mode: `<new|audit|align|topic>` Scope: `<all applicable references or resolved topic references>`
-
-<!--
-This template is the report contract. Keep every H2 below once and in this order.
-Use `None.` for an empty section.
-
-Broken, Missing, Deviations, and Unverified entries use:
-- **[high|medium|low] reference-or-agent-tooling — Short title**
-  - Evidence: `path:line`
-  - Impact: concrete consequence
-  - Next action: smallest selectable follow-up
-
-Present entries name the reference and evidence path. Deviations are selectable follow-up work, not defects; in align mode,
-their next actions are migration proposals. Optional tools are not missing findings.
--->
-
-## Verdict
-
-<One short assessment of the current frontend setup.>
-
-## Broken
-
-None.
-
-## Missing
-
-None.
-
-## Deviations
-
-None.
-
-## Present
-
-None.
-
-## Unverified
-
-None.
-
-## Reviewer notes
-
-<!-- Human-owned. Preserve everything under this heading verbatim when refreshing the report. -->