@reqvire-org/ads 0.3.2 → 0.3.3

package/dist/boundaries.mjs

@@ -90,31 +90,29 @@ function isWrite(node) {
     || ts.isDeleteExpression(parent);
 }
 
-// Inspects style access itself, so aliases, computed keys, cssText and bulk writes
-// cannot silently turn a narrow property exception into a whole-file exception.
+/** Exact writes and known reads share one interpretation with exception audits.
+ * undefined = unrelated, false = read, null = unknown/bulk, string = exact write. */
+export function styleAccessProperty(node) {
+  if (!isMember(node) || memberName(node) !== "style") return undefined;
+  const access = unwrapped(node), parent = access.parent;
+  if (!isMember(parent) || parent.expression !== access) return null;
+  const property = cssName(memberName(parent)), target = unwrapped(parent);
+  if (ts.isCallExpression(target.parent) && target.parent.expression === target) {
+    if (["set-property", "remove-property"].includes(property)) {
+      const name = target.parent.arguments[0];
+      return name && ts.isStringLiteralLike(name) ? name.text : null;
+    }
+    return ["get-property-value", "get-property-priority", "item"].includes(property) ? false : null;
+  }
+  if (isWrite(target)) return property ?? null;
+  return property && !["set-property", "remove-property"].includes(property) ? false : null;
+}
+
+// Aliases, computed keys, cssText and bulk writes cannot widen an exception.
 export function styleWriteViolation(node, filename, { root, config }) {
   const allowed = config.boundaries.styleWrites.find((boundary) => path.resolve(root, boundary.file) === filename)?.properties ?? [];
-  if (isMember(node) && memberName(node) === "style") {
-    const access = unwrapped(node);
-    const parent = access.parent;
-    let property;
-    if (isMember(parent) && parent.expression === access) {
-      property = cssName(memberName(parent));
-      const target = unwrapped(parent);
-      if (ts.isCallExpression(target.parent) && target.parent.expression === target) {
-        if (["set-property", "remove-property"].includes(property)) {
-          const name = target.parent.arguments[0];
-          property = name && ts.isStringLiteralLike(name) ? name.text : null;
-        } else if (["get-property-value", "get-property-priority", "item"].includes(property)) return null;
-        else property = null;
-      } else if (!isWrite(target)) {
-        // Plain property reads are allowed. Passing a method reference or a
-        // computed member elsewhere is not a known property read.
-        if (property && !["set-property", "remove-property"].includes(property)) return null;
-        property = null;
-      }
-    }
-    if (property && property !== "css-text" && allowed.includes(property)) return null;
+  const property = styleAccessProperty(node);
+  if (property !== undefined && property !== false && !(property && property !== "css-text" && allowed.includes(property))) {
     return "Imperative styles require a file boundary and an explicit property. Bulk writes, computed property names, and style-object escapes are forbidden.";
   }
   if (ts.isCallExpression(node) && isMember(node.expression) && ["setAttribute", "setAttributeNS"].includes(memberName(node.expression))) {

package/dist/check.mjs

@@ -14,8 +14,12 @@ import { inspectShowcasePages } from "./showcase.mjs";
 import { inspectShowcaseCoverage } from "./showcase-coverage.mjs";
 import { inspectScenarioCoverage } from "./scenarios.mjs";
 import { uiOperation, importedUiApi } from "./ui-framework.mjs";
+import { inspectStyleBoundaries, pointerCaptureAdvisories } from "./style-boundaries.mjs";
 import { foundationDeclaration, foundationSelector } from "./foundation.mjs";
 
+const scenarioLayoutGuidance = "Put demo-only sizing and framing in a public review/layout pattern. Keep required behavior in the runtime owner; add component props for deliberate product API needs.";
+const inlineStyleGuidance = `Own visual styles in component/pattern Linaria. ${scenarioLayoutGuidance} Reserve inlineStyleFiles for documented measured geometry, not demo layout.`;
+
 const showcaseControls = new Set(["a", "button", "input", "select", "textarea", "option", "optgroup", "table", "thead", "tbody", "tfoot", "tr", "td", "th", "dialog", "details", "summary", "progress", "meter"]);
 const svgTags = new Set(["svg", "g", "path", "circle", "rect", "ellipse", "line", "polyline", "polygon", "text", "tspan", "use", "defs", "clipPath", "mask", "filter", "linearGradient", "radialGradient", "stop", "marker", "pattern"]);
 const svgPresentation = new Set(["strokeWidth", "strokeLinecap", "strokeLinejoin", "strokeDasharray", "strokeDashoffset", "strokeOpacity", "strokeMiterlimit", "fillRule", "fillOpacity", "clipRule", "clipPath", "colorInterpolation", "colorInterpolationFilters", "floodColor", "floodOpacity", "stopColor", "stopOpacity", "fontFamily", "fontSize", "fontStyle", "fontWeight", "letterSpacing", "textAnchor", "dominantBaseline", "markerStart", "markerMid", "markerEnd", "vectorEffect", "shapeRendering", "textRendering", "paintOrder", "alignmentBaseline", "baselineShift", "transformOrigin"]);
@@ -24,7 +28,7 @@ const widgetRoles = new Set(["button", "link", "checkbox", "radio", "switch", "c
 export function checkProject(directory, { trackingRoot } = {}) {
   const options = { ...loadConfig(directory), ...(trackingRoot ? { trackingRoot: path.resolve(trackingRoot) } : {}) };
   const { root, config, dsRoot, sourceRoot } = options;
-  const diagnostics = [];
+  const diagnostics = [], advisories = [];
   for (const [field, file] of [["dsDir", dsRoot], ["publicEntry", path.join(dsRoot, config.publicEntry)], ["stylesEntry", path.join(dsRoot, config.stylesEntry)]]) {
     if (!existsSync(file) || (field === "dsDir" ? !statSync(file).isDirectory() : !statSync(file).isFile())) diagnostics.push({ rule: "project-structure", file: path.relative(root, file), line: 1, column: 1, message: `Missing or invalid ${field}. Bootstrap an empty ADS or configure its actual path.` });
   }
@@ -36,13 +40,15 @@ export function checkProject(directory, { trackingRoot } = {}) {
   const resolveImport = importResolver(options);
   const rootHtml = path.join(root, "index.html");
   const files = [...new Set([...sourceFiles(sourceRoot), ...sourceFiles(dsRoot), ...(existsSync(rootHtml) ? [rootHtml] : [])])];
-  const scriptFiles = files.filter((file) => /\.[cm]?[jt]sx?$/.test(file));
+  const boundaryFiles = [...config.inlineStyleFiles, ...config.boundaries.styleWrites.map(entry => entry.file)].map(file => path.resolve(root, file)).filter(file => existsSync(file) && statSync(file).isFile());
+  const scriptFiles = [...new Set([...files, ...boundaryFiles])].filter((file) => /\.[cm]?[jt]sx?$/.test(file));
   const compiler = projectCompilerOptions(options);
   const program = ts.createProgram(scriptFiles, { ...compiler, paths: { ...compiler.paths, [config.publicAlias]: [path.join(dsRoot, config.publicEntry)] }, allowJs: true, noResolve: true, noLib: true, types: [], target: ts.ScriptTarget.Latest, module: ts.ModuleKind.ESNext, jsx: ts.JsxEmit.Preserve });
   const checker = program.getTypeChecker();
   function report(file, rule, message, line = 1, column = 1) {
     diagnostics.push({ file: path.relative(root, file).replaceAll("\\", "/"), rule, message, line, column });
   }
+  inspectStyleBoundaries(options, program, report);
   inspectShowcasePages(options, program, resolveImport, report);
   inspectShowcaseCoverage(options, program, report);
   inspectScenarioCoverage(options, program, report);
@@ -60,7 +66,7 @@ export function checkProject(directory, { trackingRoot } = {}) {
     try { css = postcss.parse(text, { from: file }); }
     catch (error) { report(file, "css-syntax", error.reason ?? error.message, offset.line + (error.line ?? 1) - 1); return; }
     if (!foundation && (isDevelopmentFile(file, options) || !isInside(path.join(dsRoot, "components"), file) && !isInside(path.join(dsRoot, "patterns"), file) && file !== foundationEntry)) report(file, "style-ownership", "Visual CSS belongs to the local ADS's runtime components or patterns.");
-    if (isDevelopmentFile(file, options) && css.nodes.some((node) => node.type !== "comment" && !(node.type === "atrule" && node.name === "import"))) report(file, "showcase-style", "Scenarios and fixtures define no styles. Put the frame/layout in a public ADS pattern and product UI in ADS components or patterns.", offset.line);
+    if (isDevelopmentFile(file, options) && css.nodes.some((node) => node.type !== "comment" && !(node.type === "atrule" && node.name === "import"))) report(file, "showcase-style", `Scenarios and fixtures define no styles. ${scenarioLayoutGuidance}`, offset.line);
     css.walkAtRules("import", (rule) => {
       if (foundation) report(file, "foundation-import", "Import foundation sheets through the configured styles entry. Token sheets cannot import an unchecked styling layer.", rule.source.start.line);
       const first = valueParser(rule.params).nodes.find((node) => node.type !== "space" && node.type !== "comment");
@@ -128,6 +134,7 @@ export function checkProject(directory, { trackingRoot } = {}) {
     }
     const source = program.getSourceFile(file);
     if (!source) continue;
+    advisories.push(...pointerCaptureAdvisories(source).map(entry => ({ file: path.relative(root, file).replaceAll("\\", "/"), ...entry })));
     for (const diagnostic of program.getSyntacticDiagnostics(source)) {
       const position = source.getLineAndCharacterOfPosition(diagnostic.start ?? 0);
       report(file, "source-syntax", ts.flattenDiagnosticMessageText(diagnostic.messageText, "\n"), position.line + 1, position.character + 1);
@@ -186,14 +193,14 @@ export function checkProject(directory, { trackingRoot } = {}) {
         for (const property of properties) {
           if (!ts.isPropertyAssignment(property) || !(ts.isIdentifier(property.name) || ts.isStringLiteralLike(property.name))) continue;
           if (tag && ts.isStringLiteralLike(tag) && svgTags.has(tag.text) && importedUiApi(node.expression, checker)?.module === "preact") checkSvgAttribute(property, property.name.text);
-          if (property.name.text === "style" && (!inlineAllowed || showcase)) nodeReport(property, "no-inline-style", "UI factories follow the same style ownership as JSX. Use semantic ADS props or a narrow renderer boundary.");
+          if (property.name.text === "style" && (!inlineAllowed || showcase)) nodeReport(property, "no-inline-style", showcase ? `Scenarios define no inline styles. ${scenarioLayoutGuidance}` : inlineStyleGuidance);
           if (property.name.text === "style") inspectProperty(property.initializer);
           if (property.name.text === "className") inspectClass(property.initializer);
-          if (showcase && property.name.text === "className") nodeReport(property, "showcase-class", "Scenarios use public ADS props, not custom class names.");
+          if (showcase && property.name.text === "className") nodeReport(property, "showcase-class", `Scenarios define no custom class names. ${scenarioLayoutGuidance}`);
         }
         if (showcase && tag && ts.isStringLiteralLike(tag)) {
           const role = properties.find(property => ts.isPropertyAssignment(property) && (ts.isIdentifier(property.name) || ts.isStringLiteralLike(property.name)) && property.name.text === "role")?.initializer;
-          if (showcaseControls.has(tag.text) || role && ts.isStringLiteralLike(role) && widgetRoles.has(role.text)) nodeReport(node, "showcase-control", "Scenario controls must render public ADS components.");
+          if (showcaseControls.has(tag.text) || role && ts.isStringLiteralLike(role) && widgetRoles.has(role.text)) nodeReport(node, "showcase-control", `Scenario controls must render public ADS components for actual interaction. ${scenarioLayoutGuidance}`);
         }
       }
       if (isInside(dsRoot, file) && (ts.isIdentifier(node) && ["fetch", "XMLHttpRequest", "WebSocket", "EventSource"].includes(node.text) && !(ts.isPropertyAccessExpression(node.parent) && node.parent.name === node))) {
@@ -204,9 +211,9 @@ export function checkProject(directory, { trackingRoot } = {}) {
       if (showcase && (ts.isJsxOpeningElement(node) || ts.isJsxSelfClosingElement(node)) && ts.isIdentifier(node.tagName) && /^[a-z]/.test(node.tagName.text)) {
         const role = node.attributes.properties.find((attr) => ts.isJsxAttribute(attr) && attr.name.text === "role")?.initializer;
         const roleValue = role && ts.isStringLiteralLike(role) ? role.text : role && ts.isJsxExpression(role) && role.expression && ts.isStringLiteralLike(role.expression) ? role.expression.text : null;
-        if (showcaseControls.has(node.tagName.text) || widgetRoles.has(roleValue)) nodeReport(node, "showcase-control", "Showcase and mock controls must use public ADS components. Implement missing reusable controls in the ADS, then import them here.");
+        if (showcaseControls.has(node.tagName.text) || widgetRoles.has(roleValue)) nodeReport(node, "showcase-control", `Scenario controls must render public ADS components for actual interaction. ${scenarioLayoutGuidance}`);
       }
-      if (showcase && ts.isJsxAttribute(node) && ts.isIdentifier(node.name) && node.name.text === "className") nodeReport(node, "showcase-class", "Showcase and mocks use known public ADS entities and props, not custom class names. Put styling in the owning ADS component or frame pattern.");
+      if (showcase && ts.isJsxAttribute(node) && ts.isIdentifier(node.name) && node.name.text === "className") nodeReport(node, "showcase-class", `Scenarios define no custom class names. ${scenarioLayoutGuidance}`);
       let specifier;
       if ((ts.isImportDeclaration(node) || ts.isExportDeclaration(node)) && node.moduleSpecifier && ts.isStringLiteral(node.moduleSpecifier)) specifier = node.moduleSpecifier.text;
       if (ts.isCallExpression(node) && node.expression.kind === ts.SyntaxKind.ImportKeyword && node.arguments[0] && ts.isStringLiteral(node.arguments[0])) specifier = node.arguments[0].text;
@@ -214,13 +221,13 @@ export function checkProject(directory, { trackingRoot } = {}) {
       if (specifier && resolveImport(specifier, file).some((target) => (specifier.startsWith(".") || existsSync(target)) && target.endsWith(".css") && isInside(root, target) && !isInside(dsRoot, target) && target !== path.join(sourceRoot, "app-mount.css") && !isInside(path.join(root, "node_modules"), target))) nodeReport(node, "style-ownership", "Imported project CSS belongs to ADS components, patterns, or the foundation. Only structural app-mount.css is allowed outside the ADS.");
       if (specifier && appImportViolation(specifier, file, options, resolveImport)) nodeReport(node, "no-app-import", "ADS implementations and showcase fixtures must not import app code. Use public ADS APIs with local fixture data; keep application integration harnesses in application tests.");
       if (specifier && showcaseImportViolation(specifier, file, options, resolveImport)) nodeReport(node, "showcase-import", "Showcase code and styles are development fixtures; runtime code must not import them.");
-      if (ts.isJsxAttribute(node) && ts.isIdentifier(node.name) && node.name.text === "style" && (!inlineAllowed || showcase)) nodeReport(node, "no-inline-style", "Move visual policy into the local ADS, or document a narrow measured-geometry exception in inlineStyleFiles.");
+      if (ts.isJsxAttribute(node) && ts.isIdentifier(node.name) && node.name.text === "style" && (!inlineAllowed || showcase)) nodeReport(node, "no-inline-style", showcase ? `Scenarios define no inline styles. ${scenarioLayoutGuidance}` : inlineStyleGuidance);
       if (ts.isJsxAttribute(node) && ts.isIdentifier(node.name) && node.name.text === "style" && node.initializer) {
         inspectProperty(node.initializer);
       }
       const mutation = styleWriteViolation(node, file, options);
       if (mutation) nodeReport(node, "style-mutation", mutation);
-      if (!inlineAllowed && isUiCssProperties(node, checker)) nodeReport(node, "css-properties", "Do not expose CSSProperties-based visual plumbing. Use semantic props, or document a narrow JSX renderer boundary.");
+      if (!inlineAllowed && isUiCssProperties(node, checker)) nodeReport(node, "css-properties", "Keep CSSProperties out of the public API. Use deliberate component contracts or a documented measured-geometry renderer boundary; demo layout belongs in a public review pattern.");
       if (ts.isJsxAttribute(node) && ts.isIdentifier(node.name) && node.name.text === "className" && node.initializer) {
         inspectClass(node.initializer);
       }
@@ -234,5 +241,5 @@ export function checkProject(directory, { trackingRoot } = {}) {
     }
     visit(source);
   }
-  return { ok: diagnostics.length === 0, diagnostics };
+  return { ok: diagnostics.length === 0, diagnostics, ...(advisories.length ? { advisories } : {}) };
 }

package/dist/cli.mjs

@@ -96,6 +96,7 @@ async function main(args) {
   if (!json && result.diagnostics?.length) {
     for (const diagnostic of result.diagnostics) console.error(`${diagnostic.file}:${diagnostic.line}:${diagnostic.column} [${diagnostic.rule}] ${diagnostic.message}`);
   }
+  if (!json) for (const advisory of result.advisories ?? []) console.error(`${advisory.file}:${advisory.line}:${advisory.column} [advisory:${advisory.rule}] ${advisory.message}`);
   if (result.ok === false || result.diagnostics?.length) process.exitCode = 1;
 }
 

package/dist/mcp/mutations.mjs

@@ -291,7 +291,7 @@ export function createMutationController(directory) {
         }
         const warnings = [];
         if (!dryRun && (unit.startsWith("assets") || unit === "configuration")) { try { await generateBrandAssets(root); } catch (error) { warnings.push({ rule: "mutation-assets", message: `Source was applied; generated brand output needs recovery: ${error.message}` }); } }
-        return lastResult = { ok: true, unit, applied: !dryRun, changes: changes.map(change => ({ path: change.path, operation: change.content === null ? "delete" : change.expectedDigest === null ? "create" : "update", digest: change.content === null ? null : digest(Buffer.from(change.content)) })), checks: verified, ...(warnings.length ? { warnings } : {}),
+        return lastResult = { ok: true, unit, applied: !dryRun, changes: changes.map(change => ({ path: change.path, operation: change.content === null ? "delete" : change.expectedDigest === null ? "create" : "update", digest: change.content === null ? null : digest(Buffer.from(change.content)) })), checks: verified, ...(result.advisories?.length ? { advisories: result.advisories.slice(0, 50), advisoryCount: result.advisories.length } : {}), ...(warnings.length ? { warnings } : {}),
           preview: "Source validation passed. Inspect the managed preview build and rendered scenario after applying; validation is not visual verification." };
       } catch (error) {
         return lastResult = { ok: false, applied: false, diagnostics: [error.diagnostic ?? { rule: "mutation-error", message: error.message }], checks: verified };

package/dist/mcp/prompts.mjs

@@ -2,7 +2,7 @@ export const reasoning = `ADS is development tooling. The project owns its compo
 Start with ads_status and use its projectRoot, workflow and project commands; the MCP workspace may be nested inside the client repository. If ADS tools are not exposed, read ads://project/guide then ads://project/status. Find existing public UI with ads_catalog and load one relevant ADS workflow via ads_skills/ads_read_skill. UI implementation/refinement uses ads-designer; library adaptation ads-assimilate; ADS transfer ads-import; motion ads-motion; stress testing ads-break-ui. Domain-model workflows are separate. Inspect the relevant public API, local guide, token definitions and real showcase fixture before proposing changes. Keep source/instruction discovery scoped to the target project, ancestry and selected external sources; broad scans of /mnt or home are not needed to discover this ADS.
 When ads_status.mutations.enabled, discover one owner with ads_units, read relevant ranges with ads_read_file and send only a Git unified diff through ads_apply_patch({unit,patch,dryRun}). A unit includes its own scenarios/fixtures; imported peers remain separate. tokens is the token foundation unit. Only that owner's public re-exports may change in the shared entry; preserve unrelated statements including export {};. Token manifests list companionFiles: include required foundation import changes only for canonical token files created/deleted in the same patch, preserving other imports/comments and canonical order. Use dryRun to review validation. Rejected patches leave source unchanged; fix diagnostics rather than bypassing checks with direct writes. Shared globals use foundation; guides use documentation; assets use discovered assets/* units. Intentional configuration, registered project guards/builders and rule exceptions use configuration, which validates the proposed settings and refreshes its compiler. Keep mandatory ADS gates. For large/binary diffs, pass patchFile pointing to .ds/patches/<name>.patch rather than loading bytes into context; Git binary patches require installed Git. When editing is disabled, use local editing tools.
 Reason through Data (design-token values, semantic roles and relationships), UX (structure, behavior, accessibility, states and layout), and Skin (token-backed identity and visual states). Business data is a separate application-owned input, supplied through typed props or injected callbacks/services. The project uses Linaria extraction for owned styles; MCP adds no production runtime.
-Choose an existing public component or pattern first. Keep application data/routing/effects in the application and fixture data/state beside its scenario. Change presentation in its owning ADS implementation, then demonstrate the same public API in the showcase. Do not create a widget-only replica or override component internals.
+Choose an existing public component or pattern first. Keep application data/routing/effects in the application and fixture data/state beside its scenario. Change presentation in its owning ADS implementation, then demonstrate the same public API in the showcase. Put demo-only sizing and framing in a public review/layout pattern; add component props for deliberate runtime API needs and preserve required behavior. Do not create a widget-only replica or override component internals.
 For token source inspection, call ads_tokens with a focused query. For token samples, components, patterns and composition, use ads_scenarios to select a path-derived id and invoke ads_show_scenario. Showcase and MCP mount that exact entry and its colocated fixture; no page initialization is required. The showcase is a minimal tool-owned shell plus an MCP client and Apps host. Its menus come from tools; it invokes the same entry tools and refreshes the active scenario through notifications. The reusable App loads framework runtime, foundation CSS, fonts and selected modules via MCP resources inside its sandbox. Keep project execution and styles out of the outer host; preserve mount/unmount cleanup and lazy dependencies. Use the existing ads_status showcase URL, or ads showcase when no MCP runtime is connected. Projects supply scenarios/fixtures and the compiler, not browser page files or another shell. Tool metadata selects an MCP App; a resources/read of HTML alone is not proof of rendered UI. If the host has no Apps view, give the configured showcase URL and use text/resources.
 Check ads_status.previewWatch before launching a separate preview builder. A configured watcher is managed by ads mcp. Check ads_status.build or ads://project/build after changes: running does not mean ready, and unreported freshness is not evidence of current source. Reported preview failures include structured diagnostics; fix the owning source and wait for a successful rebuild, then invoke the preview tool again. Notifications may not reach the agent, so read status explicitly. Build revisions identify reported compilation attempts, not proof of runtime/visual correctness. Do not invent replacement UI to bypass a failed preview.
 Skills: use ads_skills to select a workflow and read its SKILL.md with ads_read_skill. Resolve relative supporting files from that skill URI. Reading instructions does not prove native skill activation or authorize unrelated actions.

package/dist/mcp/server.mjs

@@ -43,7 +43,7 @@ export function createAdsMcp(directory, { era = "legacy", skillDirectory, pollIn
   const project = () => { const context = projectContext(options); context.showcase.url = getShowcaseUrl(); return context; };
   const subscribed = new Set();
   const server = new Server({ name: "reqvire-ads", version: pkg.version }, {
-    instructions: `${serverInstructions} ${mutations ? "Guarded editing is enabled: discover one owner with ads_units, read relevant ranges with ads_read_file and send only a Git unified diff to ads_apply_patch with that unit ID. Include its own scenarios/fixtures and required re-exports together, never unrelated units. Token manifests list companionFiles for canonical foundation import changes required by token files created/deleted in the same patch. The server validates architecture, registered Oxlint and project checks before writing. Fix rejected patches in their owner. Intentional settings, project guards and builders use the configuration unit; mandatory ADS gates still run." : "Source mutation tools are disabled; source edits use the client's editor/filesystem tools."}`,
+    instructions: `${serverInstructions} ${mutations ? "Guarded editing is enabled: discover one owner with ads_units, read relevant ranges with ads_read_file and send only a Git unified diff to ads_apply_patch with that unit ID. Include its own scenarios/fixtures and required re-exports together, never unrelated units. Manifests list companionFiles: required canonical token imports, or only the selected runtime owner's style-boundary entries in ds.config.json alongside its source. Unused style permissions fail validation. The server validates architecture, registered Oxlint and project checks before writing. Fix rejected patches in their owner. Intentional settings, project guards and builders use the configuration unit; mandatory ADS gates still run." : "Source mutation tools are disabled; source edits use the client's editor/filesystem tools."}`,
     capabilities: { tools: { listChanged: true }, resources: { listChanged: true, subscribe: true }, prompts: {},
       extensions: { "io.modelcontextprotocol/ui": { mimeTypes: [APP_MIME] }, ...(era === "modern" ? { [SKILLS_EXTENSION]: { directoryRead: true } } : {}) } },
   });
@@ -181,9 +181,9 @@ export function createAdsMcp(directory, { era = "legacy", skillDirectory, pollIn
         const matches = inventory.tokens.filter((token) => token.name.toLowerCase().includes(search.toLowerCase()));
         return json({ total: matches.length, tokens: matches.slice(0, limit), categories: tokenScenarios(), diagnosticCount: inventory.diagnostics.length, resourceUri: `${PROJECT_URI}/tokens` });
       } },
-      { name: "ads_check", description: "Run read-only core ADS architecture checks. Project Oxlint, typecheck, build and browser tests remain separate.", schema: z.object({ limit: z.number().int().min(1).max(50).default(20) }).strict(), call: ({ limit }) => {
+      { name: "ads_check", description: "Run read-only core ADS architecture checks; returns blocking diagnostics separately from nonblocking review advisories. Project Oxlint, typecheck, build and browser tests remain separate.", schema: z.object({ limit: z.number().int().min(1).max(50).default(20) }).strict(), call: ({ limit }) => {
         const result = checkProject(root);
-        return json({ ok: result.ok, total: result.diagnostics.length, diagnostics: result.diagnostics.slice(0, limit), resourceUri: `${PROJECT_URI}/checks` });
+        return json({ ok: result.ok, total: result.diagnostics.length, diagnostics: result.diagnostics.slice(0, limit), advisoryCount: result.advisories?.length ?? 0, advisories: (result.advisories ?? []).slice(0, limit), resourceUri: `${PROJECT_URI}/checks` });
       } },
       { name: "ads_skills", description: "Select one ADS workflow after ads_status: ads-designer for building/refining/debugging UI; ads-assimilate for a library reference; ads-import for another project's ADS; ads-motion for animation; ads-break-ui for stress testing. Then read that workflow with ads_read_skill. Listing does not activate a native skill.", schema: empty, call: () => json({ skills: skills.skills.map(({ uri, frontmatter }) => ({ uri, ...frontmatter })) }) },
       { name: "ads_read_skill", description: "Read a selected skill or relative supporting text file in bounded chunks. This is explicit instruction access, not automatic native skill activation/install.", schema: z.object({ name: z.string().max(64), file: z.string().max(300).default("SKILL.md"), offset: z.number().int().min(0).default(0), limit: z.number().int().min(1).max(8000).default(6000) }).strict(), call: ({ name, file, offset, limit }) => {
@@ -214,19 +214,19 @@ export function createAdsMcp(directory, { era = "legacy", skillDirectory, pollIn
         }
         return json({ widget: { resourceUri: TOKENS_APP_URI }, category: null, tokenCount: inspectTokens(root).tokens.length, dataUri: `${PROJECT_URI}/tokens`, showcaseUrl: getShowcaseUrl() });
       } },
-      { name: "ads_units", description: "Discover editable ADS units and their files: components/patterns with colocated previews; composition; tokens; foundation shared files; documentation; assets/brand, assets/fonts and asset groups; configuration with ds.config.json, package/build/lint configuration and registered project guard/compiler sources. List summaries with query, or pass an exact unit ID for its manifest. Token manifests include companionFiles with the foundation entry path and allowed import changes. Imported peers stay separate. New owners follow the existing colocation convention.", schema: query.extend({ unit: z.string().min(1).max(256).optional() }), call: ({ unit, query: search = "", limit }) => {
+      { name: "ads_units", description: "Discover editable ADS units and their files: components/patterns with colocated previews; composition; tokens; foundation shared files; documentation; assets/brand, assets/fonts and asset groups; configuration with ds.config.json, package/build/lint configuration and registered project guard/compiler sources. List summaries with query, or pass an exact unit ID for its manifest. Manifests include companionFiles with permitted shared-entry or owner-only style-boundary bookkeeping; preserve peer permissions and unrelated configuration. Imported peers stay separate. New owners follow the existing colocation convention.", schema: query.extend({ unit: z.string().min(1).max(256).optional() }), call: ({ unit, query: search = "", limit }) => {
         const matches = edits.units().filter(item => unit ? item.id === unit : item.id.toLowerCase().includes(search.toLowerCase()));
         return json({ total: matches.length, units: matches.slice(0, limit).map(item => ({ id: item.id, kind: item.kind, fileCount: item.files.length, ...(unit ? { files: item.files.slice(0, 200), filesTruncated: item.files.length > 200, ...(item.companionFiles ? { companionFiles: item.companionFiles } : {}) } : {}) })) });
       } },
       { name: "ads_read_file", description: "Read a bounded range of ADS or registered configuration/extension source. Returns unit, full-file digest, startLine and nextOffset; default/max is 12000 UTF-16 characters. Binary assets return byte count/digest and no encoded content. Paths come from ads_units or discovery. Missing new paths return digest null. Read only relevant context before preparing a Git patch.", schema: z.object({ path: z.string().min(1).max(500), offset: z.number().int().min(0).default(0), limit: z.number().int().min(1).max(mutationLimits.readChars).default(mutationLimits.readChars) }).strict(), call: ({ path: file, ...range }) => json(edits.read(file, range)) },
-      ...(mutations ? [{ name: "ads_apply_patch", description: "Apply one Git diff to one ADS unit from ads_units. Pass exactly one of patch (inline) or patchFile (a regular .patch/.diff under .ds/patches/, for large/binary diffs without model-context bytes). Text uses --- a/path, +++ b/path and exact @@ hunks; /dev/null creates/deletes. Git binary patches require git diff --binary --full-index and installed Git. A unit owns its implementation, previews and fixtures; imported peers are separate. Foundation, documentation, assets and configuration are editable too. Configuration changes may register/edit project guards and builders; the proposed schema, mandatory core/Oxlint and candidate project checks must pass. Only selected-unit public re-exports may change; preserve unrelated statements including export {};. A tokens patch may include its companionFiles foundation entry only to add/remove canonical imports required by token files created/deleted in this patch, preserving other imports/comments and canonical order. Set dryRun true to validate without writing. Fix rejected patches and inspect current previews after acceptance.",
+      ...(mutations ? [{ name: "ads_apply_patch", description: "Apply one Git diff to one ADS unit from ads_units. Pass exactly one of patch (inline) or patchFile (a regular .patch/.diff under .ds/patches/, for large/binary diffs without model-context bytes). Text uses --- a/path, +++ b/path and exact @@ hunks; /dev/null creates/deletes. Git binary patches require git diff --binary --full-index and installed Git. A unit owns its implementation, previews and fixtures; imported peers are separate. Foundation, documentation, assets and configuration are editable too. Configuration changes may register/edit project guards and builders; the proposed schema, mandatory core/Oxlint and candidate project checks must pass. Only selected-unit public re-exports may change; preserve unrelated statements. A real selected-unit re-export may remove a redundant export {}; placeholder. A tokens patch may include its companionFiles foundation entry only to add/remove canonical imports required by token files created/deleted in this patch, preserving other imports/comments and canonical order. A runtime owner patch may also include its ds.config.json companion solely for that owner's inlineStyleFiles/styleWrites entries alongside its source. Unused permissions fail validation. Set dryRun true to validate without writing. Fix rejected patches and inspect current previews after acceptance.",
         schema: z.object({ unit: z.string().min(1).max(256), dryRun: z.boolean(), patch: z.string().min(1).max(mutationLimits.patchBytes).optional(), patchFile: z.string().min(1).max(500).optional() }).strict().refine(args => (args.patch !== undefined) !== (args.patchFile !== undefined), "Provide exactly one of patch or patchFile."),
         annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: false }, _meta: { ui: { visibility: ["model"] } },
         call: async (args, signal) => {
           const result = await edits.apply(args, signal);
           if (result.applied) {
             try {
-              if (result.unit === "configuration") await previewWatch?.reconfigure?.(loadConfig(root).config.mcp, true);
+              if (result.changes.some(change => change.path === "ds.config.json") || result.unit === "configuration") await previewWatch?.reconfigure?.(loadConfig(root).config.mcp, true);
               await refresh(true);
             }
             catch (error) { result.warnings = [...(result.warnings ?? []), { rule: "mutation-notification", message: `Changes were applied, but preview refresh failed: ${error.message.slice(0, 2000)}. Recheck ads_status and reopen the scenario.` }]; }

package/dist/oxlint.mjs

@@ -66,7 +66,7 @@ export default {
       },
     },
     "no-inline-style": {
-      meta: { type: "problem", schema, messages: { inline: "Move visual policy into the local ADS, or document a narrow exception in inlineStyleFiles." } },
+      meta: { type: "problem", schema, messages: { inline: "Own visual styles in component/pattern Linaria. Put demo-only sizing and framing in a public review/layout pattern. Reserve inlineStyleFiles for documented measured geometry; add component props for deliberate product API needs." } },
       create(context) {
         const { root, config } = options(context);
         const allowed = config.inlineStyleFiles.some((file) => path.resolve(root, file) === path.resolve(context.getFilename()));

package/dist/skills/ads-assimilate/SKILL.md

@@ -27,7 +27,11 @@ unrelated statements. Its real re-export may accompany removal of a redundant
 `export {};` placeholder; do not add empty exports. A `tokens` manifest lists the foundation
 entry in `companionFiles`: when creating/deleting a canonical token file such as
 `fonts.css`, include only its required import change there in the same patch.
-Preserve other imports/comments and the canonical order. Use `dryRun: true` to
+Preserve other imports/comments and the canonical order. Runtime owner manifests
+also list a `ds.config.json` companion: change only that owner's `inlineStyleFiles`
+and `boundaries.styleWrites` entries together with its source. Unused permissions
+fail the core checks; do not pre-register a boundary without its implementation.
+Use `dryRun: true` to
 inspect validation; applying re-runs the gates. Fix rejected patches in their
 owner. Report unsupported coupled changes instead of bypassing a rejection with
 direct source writes. Shared styles/helpers use `foundation`, root guides use
@@ -241,6 +245,15 @@ source definitions and values; inspecting definitions does not prove UI parity.
 The tool keeps the shared naming contract; sample templates and their token
 lists belong to the project.
 
+A public review pattern may be covered by real token or composition scenarios;
+it needs no redundant standalone entry. Remove an optional scenario only while
+retaining reachable render coverage. Keep directory ownership anchored by its
+runtime entry (`index` or a file matching the directory name) or colocated fixture.
+Import colocated image/font fixtures so MCP serves them through asset resources.
+For a broken-image case, use a local failing fixture, rather than an external
+network failure or a domain-specific CSP exception. Production asset APIs remain
+unrestricted by this fixture guidance.
+
 Scenarios, colocated fixtures and helpers are development-only. Never export them
 from the runtime barrel or import them in production, including through aliases,
 re-exports or dynamic imports. They may not import application stores, routers,
@@ -258,8 +271,10 @@ normalization; and global focus indicators/reduced-motion rules. Every selector
 branch, property and value must fit its role. Token-backed control skins, layout,
 interactive state rules and owner hooks are rejected even through `:where()`.
 Do not copy an unchecked upstream preflight or turn a component repair into a reset.
-Put skin/state/animation in the Linaria owner, and scenario layout variations in
-the public review pattern's typed API. Browser review still verifies the effects.
+Keep behavior and skin in their runtime owner. Put demo-only sizing and framing
+in a public review/layout pattern; add component props for a deliberate runtime
+API need. Preserve required capabilities while following ownership rules.
+Browser review still verifies the effects.
 
 Invalid metadata and source failures keep the managed compiler alive for repairs.
 Read `ads_status.build` or `ads://project/build`, fix the owner, then wait for current
@@ -277,7 +292,14 @@ scoped `oxlint.overrides` for justified file-specific settings; never edit
 `.ds/oxlintrc.json`. These overrides configure Oxlint, not the independent
 architecture checks in `ads check`. Measured renderer properties and documented
 non-state hooks use explicit `boundaries`; shared token writes and primitive
-state overrides cannot be allowlisted. Add generic architectural protections to
+state overrides cannot be allowlisted. When migrating JSX inline geometry to
+imperative writes, port the source and replace its own boundary entries together
+in the owner's patch. Remove obsolete `inlineStyleFiles` entries and unused
+`styleWrites` properties; do not broaden permissions to keep a migration passing.
+Pointer-capture advisories call for review of cancellation, capture loss and
+teardown, including cleanup delegated to hooks. Verify actual cleanup in a browser;
+a locally present handler alone does not prove correctness.
+Add generic architectural protections to
 ADS core and keep domain/component-specific rules registered in project setup.
 
 Update meaningful variants, states, content, themes, and container sizes in the

package/dist/skills/ads-assimilate/references/native-implementation.md

@@ -55,6 +55,22 @@ target framework. With the default root ADS layout:
   dimensions, positions, or transforms. Document and constrain the exception in
   the shared architecture guard; never broaden it to arbitrary visual styles.
 
+Preserve the reference's required capabilities while assigning each concern to
+its owner. Demo utilities for container size, border or framing become a public
+review/layout pattern around the real component. Add component props for a
+deliberate runtime API requirement; missing demo layout alone is not justification.
+For imperative geometry, register exact `styleWrites` properties. After migrating
+from JSX inline geometry, change source and its own config companion together:
+remove the obsolete `inlineStyleFiles` exception and register only properties the
+implementation actually writes. Verify the final component with that boundary.
+
+Keep presentational building blocks independent of an unnecessary form controller
+or other state engine. Scenario adapters may own demo state and validation. When
+a reusable controller is part of the intended product API, define and test its
+actual contract; a similar method shape alone does not establish compatibility
+with the reference library. Keep state updaters pure and verify submit, focus,
+validation, reset and asynchronous behavior that the API promises.
+
 Use current repository conventions in another target rather than assuming the
 same framework, directory structure, or lint tooling.
 

package/dist/skills/ads-break-ui/SKILL.md

@@ -30,7 +30,11 @@ unrelated statements. Its real re-export may accompany removal of a redundant
 `export {};` placeholder; do not add empty exports. A `tokens` manifest lists the foundation
 entry in `companionFiles`: when creating/deleting a canonical token file such as
 `fonts.css`, include only its required import change there in the same patch.
-Preserve other imports/comments and the canonical order. Use `dryRun: true` to
+Preserve other imports/comments and the canonical order. Runtime owner manifests
+also list a `ds.config.json` companion: change only that owner's `inlineStyleFiles`
+and `boundaries.styleWrites` entries together with its source. Unused permissions
+fail the core checks; do not pre-register a boundary without its implementation.
+Use `dryRun: true` to
 inspect validation; applying re-runs the gates. Fix rejected patches in their
 owner. Report unsupported coupled changes instead of bypassing a rejection with
 direct source writes. Shared styles/helpers use `foundation`, root guides use
@@ -193,6 +197,15 @@ source definitions and values; inspecting definitions does not prove UI parity.
 The tool keeps the shared naming contract; sample templates and their token
 lists belong to the project.
 
+A public review pattern may be covered by real token or composition scenarios;
+it needs no redundant standalone entry. Remove an optional scenario only while
+retaining reachable render coverage. Keep directory ownership anchored by its
+runtime entry (`index` or a file matching the directory name) or colocated fixture.
+Import colocated image/font fixtures so MCP serves them through asset resources.
+For a broken-image case, use a local failing fixture, rather than an external
+network failure or a domain-specific CSP exception. Production asset APIs remain
+unrestricted by this fixture guidance.
+
 Scenarios, colocated fixtures and helpers are development-only. Never export them
 from the runtime barrel or import them in production, including through aliases,
 re-exports or dynamic imports. They may not import application stores, routers,
@@ -210,8 +223,10 @@ normalization; and global focus indicators/reduced-motion rules. Every selector
 branch, property and value must fit its role. Token-backed control skins, layout,
 interactive state rules and owner hooks are rejected even through `:where()`.
 Do not copy an unchecked upstream preflight or turn a component repair into a reset.
-Put skin/state/animation in the Linaria owner, and scenario layout variations in
-the public review pattern's typed API. Browser review still verifies the effects.
+Keep behavior and skin in their runtime owner. Put demo-only sizing and framing
+in a public review/layout pattern; add component props for a deliberate runtime
+API need. Preserve required capabilities while following ownership rules.
+Browser review still verifies the effects.
 
 Invalid metadata and source failures keep the managed compiler alive for repairs.
 Read `ads_status.build` or `ads://project/build`, fix the owner, then wait for current
@@ -229,7 +244,14 @@ scoped `oxlint.overrides` for justified file-specific settings; never edit
 `.ds/oxlintrc.json`. These overrides configure Oxlint, not the independent
 architecture checks in `ads check`. Measured renderer properties and documented
 non-state hooks use explicit `boundaries`; shared token writes and primitive
-state overrides cannot be allowlisted. Add generic architectural protections to
+state overrides cannot be allowlisted. When migrating JSX inline geometry to
+imperative writes, port the source and replace its own boundary entries together
+in the owner's patch. Remove obsolete `inlineStyleFiles` entries and unused
+`styleWrites` properties; do not broaden permissions to keep a migration passing.
+Pointer-capture advisories call for review of cancellation, capture loss and
+teardown, including cleanup delegated to hooks. Verify actual cleanup in a browser;
+a locally present handler alone does not prove correctness.
+Add generic architectural protections to
 ADS core and keep domain/component-specific rules registered in project setup.
 
 Read [references/verification.md](references/verification.md) for viewport,

package/dist/skills/ads-designer/SKILL.md

@@ -62,7 +62,11 @@ unrelated statements. Its real re-export may accompany removal of a redundant
 `export {};` placeholder; do not add empty exports. A `tokens` manifest lists the foundation
 entry in `companionFiles`: when creating/deleting a canonical token file such as
 `fonts.css`, include only its required import change there in the same patch.
-Preserve other imports/comments and the canonical order. Use `dryRun: true` to
+Preserve other imports/comments and the canonical order. Runtime owner manifests
+also list a `ds.config.json` companion: change only that owner's `inlineStyleFiles`
+and `boundaries.styleWrites` entries together with its source. Unused permissions
+fail the core checks; do not pre-register a boundary without its implementation.
+Use `dryRun: true` to
 inspect validation; applying re-runs the gates. Fix rejected patches in their
 owner. Report unsupported coupled changes instead of bypassing a rejection with
 direct source writes. Shared styles/helpers use `foundation`, root guides use
@@ -331,6 +335,15 @@ source definitions and values; inspecting definitions does not prove UI parity.
 The tool keeps the shared naming contract; sample templates and their token
 lists belong to the project.
 
+A public review pattern may be covered by real token or composition scenarios;
+it needs no redundant standalone entry. Remove an optional scenario only while
+retaining reachable render coverage. Keep directory ownership anchored by its
+runtime entry (`index` or a file matching the directory name) or colocated fixture.
+Import colocated image/font fixtures so MCP serves them through asset resources.
+For a broken-image case, use a local failing fixture, rather than an external
+network failure or a domain-specific CSP exception. Production asset APIs remain
+unrestricted by this fixture guidance.
+
 Scenarios, colocated fixtures and helpers are development-only. Never export them
 from the runtime barrel or import them in production, including through aliases,
 re-exports or dynamic imports. They may not import application stores, routers,
@@ -348,8 +361,10 @@ normalization; and global focus indicators/reduced-motion rules. Every selector
 branch, property and value must fit its role. Token-backed control skins, layout,
 interactive state rules and owner hooks are rejected even through `:where()`.
 Do not copy an unchecked upstream preflight or turn a component repair into a reset.
-Put skin/state/animation in the Linaria owner, and scenario layout variations in
-the public review pattern's typed API. Browser review still verifies the effects.
+Keep behavior and skin in their runtime owner. Put demo-only sizing and framing
+in a public review/layout pattern; add component props for a deliberate runtime
+API need. Preserve required capabilities while following ownership rules.
+Browser review still verifies the effects.
 
 Invalid metadata and source failures keep the managed compiler alive for repairs.
 Read `ads_status.build` or `ads://project/build`, fix the owner, then wait for current
@@ -367,7 +382,14 @@ scoped `oxlint.overrides` for justified file-specific settings; never edit
 `.ds/oxlintrc.json`. These overrides configure Oxlint, not the independent
 architecture checks in `ads check`. Measured renderer properties and documented
 non-state hooks use explicit `boundaries`; shared token writes and primitive
-state overrides cannot be allowlisted. Add generic architectural protections to
+state overrides cannot be allowlisted. When migrating JSX inline geometry to
+imperative writes, port the source and replace its own boundary entries together
+in the owner's patch. Remove obsolete `inlineStyleFiles` entries and unused
+`styleWrites` properties; do not broaden permissions to keep a migration passing.
+Pointer-capture advisories call for review of cancellation, capture loss and
+teardown, including cleanup delegated to hooks. Verify actual cleanup in a browser;
+a locally present handler alone does not prove correctness.
+Add generic architectural protections to
 ADS core and keep domain/component-specific rules registered in project setup.
 
 Examples and composition scenarios must consume the same public components, patterns,

package/dist/skills/ads-import/SKILL.md

@@ -26,7 +26,11 @@ unrelated statements. Its real re-export may accompany removal of a redundant
 `export {};` placeholder; do not add empty exports. A `tokens` manifest lists the foundation
 entry in `companionFiles`: when creating/deleting a canonical token file such as
 `fonts.css`, include only its required import change there in the same patch.
-Preserve other imports/comments and the canonical order. Use `dryRun: true` to
+Preserve other imports/comments and the canonical order. Runtime owner manifests
+also list a `ds.config.json` companion: change only that owner's `inlineStyleFiles`
+and `boundaries.styleWrites` entries together with its source. Unused permissions
+fail the core checks; do not pre-register a boundary without its implementation.
+Use `dryRun: true` to
 inspect validation; applying re-runs the gates. Fix rejected patches in their
 owner. Report unsupported coupled changes instead of bypassing a rejection with
 direct source writes. Shared styles/helpers use `foundation`, root guides use
@@ -298,6 +302,15 @@ source definitions and values; inspecting definitions does not prove UI parity.
 The tool keeps the shared naming contract; sample templates and their token
 lists belong to the project.
 
+A public review pattern may be covered by real token or composition scenarios;
+it needs no redundant standalone entry. Remove an optional scenario only while
+retaining reachable render coverage. Keep directory ownership anchored by its
+runtime entry (`index` or a file matching the directory name) or colocated fixture.
+Import colocated image/font fixtures so MCP serves them through asset resources.
+For a broken-image case, use a local failing fixture, rather than an external
+network failure or a domain-specific CSP exception. Production asset APIs remain
+unrestricted by this fixture guidance.
+
 Scenarios, colocated fixtures and helpers are development-only. Never export them
 from the runtime barrel or import them in production, including through aliases,
 re-exports or dynamic imports. They may not import application stores, routers,
@@ -315,8 +328,10 @@ normalization; and global focus indicators/reduced-motion rules. Every selector
 branch, property and value must fit its role. Token-backed control skins, layout,
 interactive state rules and owner hooks are rejected even through `:where()`.
 Do not copy an unchecked upstream preflight or turn a component repair into a reset.
-Put skin/state/animation in the Linaria owner, and scenario layout variations in
-the public review pattern's typed API. Browser review still verifies the effects.
+Keep behavior and skin in their runtime owner. Put demo-only sizing and framing
+in a public review/layout pattern; add component props for a deliberate runtime
+API need. Preserve required capabilities while following ownership rules.
+Browser review still verifies the effects.
 
 Invalid metadata and source failures keep the managed compiler alive for repairs.
 Read `ads_status.build` or `ads://project/build`, fix the owner, then wait for current
@@ -334,7 +349,14 @@ scoped `oxlint.overrides` for justified file-specific settings; never edit
 `.ds/oxlintrc.json`. These overrides configure Oxlint, not the independent
 architecture checks in `ads check`. Measured renderer properties and documented
 non-state hooks use explicit `boundaries`; shared token writes and primitive
-state overrides cannot be allowlisted. Add generic architectural protections to
+state overrides cannot be allowlisted. When migrating JSX inline geometry to
+imperative writes, port the source and replace its own boundary entries together
+in the owner's patch. Remove obsolete `inlineStyleFiles` entries and unused
+`styleWrites` properties; do not broaden permissions to keep a migration passing.
+Pointer-capture advisories call for review of cancellation, capture loss and
+teardown, including cleanup delegated to hooks. Verify actual cleanup in a browser;
+a locally present handler alone does not prove correctness.
+Add generic architectural protections to
 ADS core and keep domain/component-specific rules registered in project setup.
 
 Write or update the imported item's local README with public usage, required

package/dist/skills/ads-motion/SKILL.md

@@ -47,7 +47,11 @@ unrelated statements. Its real re-export may accompany removal of a redundant
 `export {};` placeholder; do not add empty exports. A `tokens` manifest lists the foundation
 entry in `companionFiles`: when creating/deleting a canonical token file such as
 `fonts.css`, include only its required import change there in the same patch.
-Preserve other imports/comments and the canonical order. Use `dryRun: true` to
+Preserve other imports/comments and the canonical order. Runtime owner manifests
+also list a `ds.config.json` companion: change only that owner's `inlineStyleFiles`
+and `boundaries.styleWrites` entries together with its source. Unused permissions
+fail the core checks; do not pre-register a boundary without its implementation.
+Use `dryRun: true` to
 inspect validation; applying re-runs the gates. Fix rejected patches in their
 owner. Report unsupported coupled changes instead of bypassing a rejection with
 direct source writes. Shared styles/helpers use `foundation`, root guides use
@@ -188,6 +192,15 @@ source definitions and values; inspecting definitions does not prove UI parity.
 The tool keeps the shared naming contract; sample templates and their token
 lists belong to the project.
 
+A public review pattern may be covered by real token or composition scenarios;
+it needs no redundant standalone entry. Remove an optional scenario only while
+retaining reachable render coverage. Keep directory ownership anchored by its
+runtime entry (`index` or a file matching the directory name) or colocated fixture.
+Import colocated image/font fixtures so MCP serves them through asset resources.
+For a broken-image case, use a local failing fixture, rather than an external
+network failure or a domain-specific CSP exception. Production asset APIs remain
+unrestricted by this fixture guidance.
+
 Scenarios, colocated fixtures and helpers are development-only. Never export them
 from the runtime barrel or import them in production, including through aliases,
 re-exports or dynamic imports. They may not import application stores, routers,
@@ -205,8 +218,10 @@ normalization; and global focus indicators/reduced-motion rules. Every selector
 branch, property and value must fit its role. Token-backed control skins, layout,
 interactive state rules and owner hooks are rejected even through `:where()`.
 Do not copy an unchecked upstream preflight or turn a component repair into a reset.
-Put skin/state/animation in the Linaria owner, and scenario layout variations in
-the public review pattern's typed API. Browser review still verifies the effects.
+Keep behavior and skin in their runtime owner. Put demo-only sizing and framing
+in a public review/layout pattern; add component props for a deliberate runtime
+API need. Preserve required capabilities while following ownership rules.
+Browser review still verifies the effects.
 
 Invalid metadata and source failures keep the managed compiler alive for repairs.
 Read `ads_status.build` or `ads://project/build`, fix the owner, then wait for current
@@ -224,7 +239,14 @@ scoped `oxlint.overrides` for justified file-specific settings; never edit
 `.ds/oxlintrc.json`. These overrides configure Oxlint, not the independent
 architecture checks in `ads check`. Measured renderer properties and documented
 non-state hooks use explicit `boundaries`; shared token writes and primitive
-state overrides cannot be allowlisted. Add generic architectural protections to
+state overrides cannot be allowlisted. When migrating JSX inline geometry to
+imperative writes, port the source and replace its own boundary entries together
+in the owner's patch. Remove obsolete `inlineStyleFiles` entries and unused
+`styleWrites` properties; do not broaden permissions to keep a migration passing.
+Pointer-capture advisories call for review of cancellation, capture loss and
+teardown, including cleanup delegated to hooks. Verify actual cleanup in a browser;
+a locally present handler alone does not prove correctness.
+Add generic architectural protections to
 ADS core and keep domain/component-specific rules registered in project setup.
 
 - Motion constants belong in the project's token layer. Shared token meanings

package/dist/style-boundaries.mjs

@@ -0,0 +1,59 @@
+import path from "node:path";
+import ts from "typescript";
+import { isUiCssProperties, styleAccessProperty } from "./boundaries.mjs";
+import { uiOperation } from "./ui-framework.mjs";
+
+const nameOf = node => node && (ts.isIdentifier(node) || ts.isStringLiteralLike(node)) ? node.text : null;
+
+/** Audit explicit permissions without inferring project-specific style APIs. */
+export function inspectStyleBoundaries({ root, config }, program, report) {
+  const checker = program.getTypeChecker(), usage = new Map();
+  function inspect(file) {
+    if (usage.has(file)) return usage.get(file);
+    const result = { inline: false, writes: new Set() }, source = program.getSourceFile(file);
+    function visit(node) {
+      if ((ts.isJsxAttribute(node) && nameOf(node.name) === "style") || isUiCssProperties(node, checker)) result.inline = true;
+      if (ts.isCallExpression(node) && uiOperation(node.expression, checker) === "createElement") {
+        const props = node.arguments[1];
+        if (props && ts.isObjectLiteralExpression(props) && props.properties.some(property => nameOf(property.name) === "style")) result.inline = true;
+      }
+      const property = styleAccessProperty(node);
+      if (typeof property === "string") result.writes.add(property);
+      ts.forEachChild(node, visit);
+    }
+    if (source) visit(source);
+    usage.set(file, result);
+    return result;
+  }
+  const configFile = path.join(root, "ds.config.json");
+  for (const file of config.inlineStyleFiles) {
+    if (!inspect(path.resolve(root, file)).inline) report(configFile, "stale-style-boundary", `inlineStyleFiles entry ${file} has no JSX/factory style or UI CSSProperties use. Remove the unused permission; migrate source and its own boundary entries together in the owner's patch.`);
+  }
+  for (const { file, properties } of config.boundaries.styleWrites) {
+    const used = inspect(path.resolve(root, file)).writes;
+    for (const property of properties) if (!used.has(property)) report(configFile, "stale-style-boundary", `styleWrites entry ${file} never writes ${property}. Remove the unused property in the owner's source/boundary patch.`);
+  }
+}
+
+/** A local review signal, never proof that delegated cleanup is absent/correct. */
+export function pointerCaptureAdvisories(source) {
+  const captures = [], cleanup = [];
+  function hasHandler(node) {
+    while (node && (ts.isJsxExpression(node) || ts.isParenthesizedExpression(node) || ts.isAsExpression(node) || ts.isNonNullExpression(node))) node = node.expression;
+    return !!node && ![ts.SyntaxKind.NullKeyword, ts.SyntaxKind.FalseKeyword].includes(node.kind) && !(ts.isIdentifier(node) && node.text === "undefined");
+  }
+  function visit(node) {
+    if (ts.isCallExpression(node) && ts.isPropertyAccessExpression(node.expression)) {
+      if (node.expression.name.text === "setPointerCapture") captures.push(node);
+      if (node.expression.name.text === "addEventListener" && node.arguments[0] && ts.isStringLiteralLike(node.arguments[0]) && node.arguments[0].text === "lostpointercapture" && hasHandler(node.arguments[1])) cleanup.push(node);
+    }
+    if ((ts.isJsxAttribute(node) || ts.isPropertyAssignment(node) || ts.isMethodDeclaration(node)) && /^(?:onLostPointerCapture(?:Capture)?|onlostpointercapture)$/.test(nameOf(node.name) ?? "") && (ts.isMethodDeclaration(node) || hasHandler(node.initializer))) cleanup.push(node);
+    if (ts.isBinaryExpression(node) && node.operatorToken.kind === ts.SyntaxKind.EqualsToken && ts.isPropertyAccessExpression(node.left) && node.left.name.text === "onlostpointercapture" && hasHandler(node.right)) cleanup.push(node);
+    ts.forEachChild(node, visit);
+  }
+  visit(source);
+  return cleanup.length ? [] : captures.map(node => {
+    const position = source.getLineAndCharacterOfPosition(node.getStart(source));
+    return { rule: "pointer-capture-review", line: position.line + 1, column: position.character + 1, message: "Pointer capture has no locally visible lostpointercapture cleanup handler. Verify cancellation and capture-loss cleanup, including any delegated hook/helper. This advisory does not prove cleanup is missing or correct." };
+  });
+}

package/dist/units.mjs

@@ -84,7 +84,19 @@ export function inspectUnits(options) {
   }
   walk(dsRoot);
   files.sort();
-  const directoryUnits = files.filter(file => /(?:^|\/)Scenario\.[cm]?[jt]sx?$/.test(file)).map(file => slash(path.dirname(file))).sort((a, b) => b.length - a.length);
+  // Runtime entry conventions keep directory ownership stable when an optional
+  // preview is removed. A flat scenario family still denotes separate owners.
+  const sameName = name => name.replace(/[-_]/g, "").toLowerCase();
+  const flatFamilies = new Set(files.filter(file => /\.scenario\.[cm]?[jt]sx?$/.test(file)).map(file => path.posix.dirname(file)));
+  const directories = new Set(files.filter(file => /(?:^|\/)Scenario\.[cm]?[jt]sx?$/.test(file)).map(file => slash(path.dirname(file))));
+  for (const file of files) {
+    if (!/^(?:components|patterns|composition)\//.test(file) || !source.test(file)) continue;
+    const directory = slash(path.dirname(file)), name = path.basename(file).replace(source, "");
+    if (!directory.includes("/") || /\.(?:scenario|fixture|scenario-adapter)$/.test(name)) continue;
+    if (flatFamilies.has(directory)) continue;
+    if (name === "index" || sameName(name) === sameName(path.posix.basename(directory)) || name === "fixture") directories.add(directory);
+  }
+  const directoryUnits = [...directories].sort((a, b) => b.length - a.length);
   const flatUnits = [...new Set(files.filter(file => /^(?:components|patterns|composition)\//.test(file) && source.test(file) && !directoryUnits.some(directory => file.startsWith(directory + "/"))).map(file => {
     const base = path.basename(file).split(".")[0];
     return slash(path.join(path.dirname(file), base));
@@ -120,10 +132,15 @@ export function inspectUnits(options) {
     const file = slash(path.relative(root, path.join(dsRoot, relative)));
     if (!units.get(id).files.includes(file)) units.get(id).files.push(file);
   }
+  for (const unit of units.values()) if (boundaryCompanion(unit.id)) {
+    (unit.companionFiles ??= []).push({ path: "ds.config.json", allowedChanges: "Only this owner's inlineStyleFiles and boundaries.styleWrites entries, together with its source change; preserve all other configuration and peer permissions." });
+  }
   return { units: [...units.values()].sort((a, b) => a.id.localeCompare(b.id)), owner, publicEntry, stylesEntry, tokenDir,
     relative: file => slash(path.relative(dsRoot, path.resolve(root, file))) };
 }
 
+function boundaryCompanion(unit) { return !["configuration", "documentation", "assets"].includes(unit.split("/")[0]); }
+
 export function validateUnitId(unit) {
   if (typeof unit !== "string" || unit.length > 256 || !/^[A-Za-z0-9_-]+(?:\/[A-Za-z0-9_-]+)*$/.test(unit) || ["components", "patterns", "composition"].includes(unit)) throw fail("Select one ADS unit ID from ads_units or an unoccupied owner path following its colocation convention.");
 }
@@ -134,6 +151,7 @@ export function checkUnitFiles(options, unit, changes, inventory = inspectUnits(
   for (const change of changes) {
     const relative = inventory.relative(change.path);
     if (allowNew && unit === "configuration") continue; // The candidate must register every setup/extension file.
+    if (change.path === "ds.config.json" && boundaryCompanion(unit)) continue; // Validated against only this owner below.
     if (relative === inventory.publicEntry) continue;
     if (unit === "tokens" && relative === inventory.stylesEntry) continue; // Controlled foundation import bookkeeping.
     if (allowNew && change.originalContent === null && (relative.startsWith(unit + "/") || relative.startsWith(unit + "."))) continue;
@@ -153,6 +171,24 @@ export function checkUnitCandidate(afterOptions, unit, changes, before) {
     if (unit === "configuration" && (entry.id === "configuration" || after.owner(relative) === "configuration")) continue;
     if (after.owner(relative) !== entry.id) throw fail("A patch cannot change ownership of existing peer units. Choose an unoccupied owner path.", file);
   }
+  const boundaryChange = changes.find(change => change.path === "ds.config.json");
+  if (boundaryChange && unit !== "configuration") {
+    if (!boundaryCompanion(unit) || typeof boundaryChange.originalContent !== "string" || typeof boundaryChange.content !== "string") throw fail("This unit cannot create/delete configuration.", boundaryChange.path);
+    if (!changes.some(change => change.path !== boundaryChange.path && (before.owner(before.relative(change.path)) === unit || after.owner(after.relative(change.path)) === unit))) throw fail("Boundary companions require a source change in the selected owner.", boundaryChange.path);
+    function peerPolicy(content, inventory) {
+      const config = JSON.parse(content);
+      const owns = file => typeof file === "string" && inventory.owner(inventory.relative(file)) === unit;
+      config.inlineStyleFiles = (config.inlineStyleFiles ?? []).filter(file => !owns(file));
+      config.boundaries = { ...config.boundaries, styleWrites: (config.boundaries?.styleWrites ?? []).filter(entry => !owns(entry.file)) };
+      return config;
+    }
+    function canonical(value) {
+      if (Array.isArray(value)) return value.map(canonical);
+      if (value && typeof value === "object") return Object.fromEntries(Object.keys(value).sort().map(key => [key, canonical(value[key])]));
+      return value;
+    }
+    if (JSON.stringify(canonical(peerPolicy(boundaryChange.originalContent, before))) !== JSON.stringify(canonical(peerPolicy(boundaryChange.content, after)))) throw fail("Boundary companion patches may change only inlineStyleFiles and styleWrites entries owned by the selected unit; preserve all other configuration and peer permissions.", boundaryChange.path);
+  }
   const foundationChange = changes.find(change => before.relative(change.path) === before.stylesEntry);
   if (unit === "tokens" && foundationChange) {
     const { originalContent: current, content: proposed } = foundationChange;

package/docs/ADS.md

@@ -291,10 +291,14 @@ The checks enforce the architecture's ownership boundaries:
 | Tokens and styles | Fixed token vocabulary, required definitions, declared value types and references, raw visual values, shared-token assignments, foundation import order, and component/pattern namespaces |
 | Public API and dependencies | Consumers use public ADS imports; ADS implementations and showcase do not import application source; runtime code does not import showcase fixtures |
 | Interaction policy | Primitive state variables stay inside components; non-state customization hooks require explicit registration |
-| Renderer exceptions | Inline JSX styles and imperative style writes require narrow configured boundaries; public props omit inherited style and reject open-ended visual strings |
+| Renderer exceptions | Inline styles and imperative writes require used, narrow configured boundaries; stale entries fail; public props omit inherited style and reject open-ended visual strings |
 | Preview ownership | Scenarios define no CSS, custom classes, or native controls; all declared tokens and public renderable UI have reachable registered scenarios; token references must exist; legacy catalogue pages are checked when present |
 | Assets | Source/public collisions and configured generated artifacts in source are rejected |
 
+Pointer capture without locally visible capture-loss cleanup produces a
+nonblocking advisory. Review delegated cleanup and browser behavior; neither a
+warning nor a handler's presence establishes lifecycle correctness.
+
 Document a new ownership exception with its guard/configuration change and
 tests. Passing static checks establishes only the policies and source formats
 they cover. Browser review and behavior tests still verify accessibility,

package/docs/ARCHITECTURE.md

@@ -222,6 +222,8 @@ real public implementation. It mounts independently, without opening a showcase
 page or initializing the application's router, store or services first.
 
 Scenarios and their fixtures live beside the tokens, component or pattern they exercise.
+Demo framing belongs to public review/layout patterns; component props describe
+intentional product behavior and visual variants.
 Token scenarios choose real token names and sample inputs; a project-owned
 review pattern applies the foundation variables. The tool contains no project
 token list, sample templates or assumed visual identity. Even an initial token
@@ -303,9 +305,10 @@ remain in place for source changes made through other editors; preview review re
 necessary after either editing path.
 
 Required shared-entry bookkeeping can accompany its owner: component/pattern
-re-exports and canonical foundation imports for token files created or deleted in
-the same patch. ADS restricts these companion edits and validates the complete
-candidate before writing, so coupled changes do not need a guard bypass.
+re-exports, canonical foundation imports for token files created or deleted, and
+only that owner’s style-boundary entries in project configuration in the same
+patch. ADS restricts these companion edits and validates the complete candidate
+before writing, so coupled changes do not need a guard bypass.
 
 The architecture makes that inspection practical. A public export has an owning
 source and addressable preview coverage. Token definitions expose its visual

package/docs/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.3.3
+
+- Reject unused inline-style permissions and imperative property permissions.
+  Allow only the edited owner's boundary entries to accompany its source patch
+  atomically; preserve other settings and peer permissions.
+- Keep directory unit ownership stable when removing an optional standalone
+  scenario; require actual coverage from remaining entries.
+- Expose nonblocking pointer-capture cleanup advisories in CLI, MCP checks and
+  accepted mutations. Keep delegated cleanup and runtime correctness under review.
+- Clarify demo framing, intentional product APIs and local asset fixtures in
+  diagnostics and skills; preserve component capabilities without demo-only props.
+
 ## 0.3.2
 
 - Enforce foundation CSS roles, parsed selector boundaries, root-only shared token

package/docs/GUIDE.md

@@ -689,6 +689,15 @@ Registered project configuration and build helpers may import one another;
 this boundary is derived when lint configuration is generated. It does not
 allow application code to import private ADS modules or build helpers to import
 private UI implementation.
+
+Unused `inlineStyleFiles` entries and `styleWrites` properties fail the core
+`stale-style-boundary` check. Inline permissions recognize JSX, imported UI
+factories and UI `CSSProperties` use; property permissions require an exact write
+or removal, not a read. For MCP migrations, include the owner's source and only
+its own exception entries through its `ds.config.json` companion. Preserve peer
+permissions and other settings. A future filename can be valid configuration,
+but the complete checked candidate must contain the matching use.
+
 `inlineStyleFiles` should name only documented geometry/renderer boundaries,
 not broad styling exceptions. Ignore `.ds/`; generated paths refer to the project
 and its locally installed tool.

package/docs/MCP.md

@@ -209,6 +209,22 @@ imports for canonical files created/deleted in that patch. Preserve other import
 and comments, retain the foundation entry, and follow the required import order.
 Both files pass the same candidate checks before either is written.
 
+Runtime owner manifests also list `ds.config.json` in `companionFiles`. An owner's
+patch may update only its own `inlineStyleFiles` and `boundaries.styleWrites`
+entries together with its source. All other settings and peer permissions must
+remain unchanged. This supports atomic JSX-to-imperative geometry migrations,
+new boundaries and removal of obsolete permissions without bypassing the gate.
+Unused inline exceptions and properties never written fail `stale-style-boundary`;
+configuration-first registration of an unused boundary therefore fails validation.
+General policy, component customization hooks and compiler changes still use the
+`configuration` unit.
+
+A directory owner's runtime entry (`index` or a source file matching its directory
+name) or colocated fixture keeps ownership stable without `Scenario.tsx`.
+A redundant standalone scenario can be removed when other registered scenarios
+still declare and actually render its public exports. Coverage requirements remain
+in force; there is no metadata waiver for uncovered UI.
+
 The same discovery covers the rest of the project ADS:
 
 | Unit | Scope |
@@ -262,6 +278,13 @@ not an edit to live ADS source. Binary `ads_read_file` results return the digest
 byte count without encoded content. Git verifies the original binary blob and
 reconstructs the result inside the validation copy.
 
+Resolve ownership diagnostics by preserving the required capability in its proper
+layer. Demo-only sizing, borders and framing belong in a public review/layout
+pattern; a component API addition needs a runtime use case. Measured imperative
+geometry uses exact `styleWrites` properties. After migrating JSX inline geometry,
+replace its own boundary entries in the same owner patch and check the final state.
+After the gates pass, verify the behavior in a browser.
+
 A small change needs only its hunk. A complete new component may include its
 implementation, public re-export, scenario and fixture in the same unit patch,
 so coverage is checked against a complete candidate. New units use a new
@@ -378,6 +401,13 @@ and unchanged styles/fonts are reused. External hosts may create a fresh App for
 each tool call. Each fresh App loads independently through the same contract.
 There is no special local direct-artifact rendering path.
 
+`ads_check` returns blocking `diagnostics` separately from bounded nonblocking
+`advisories`, with `advisoryCount`. The checks resource contains the full result.
+For example, `pointer-capture-review` reports capture without a locally visible
+capture-loss handler. Cleanup can be delegated; inspect it and test cancellation,
+capture loss and teardown. A local handler suppresses that advisory but does not
+prove correct behavior. Accepted mutations also return bounded advisories.
+
 ### Host boundary and compatibility
 
 The showcase's packaged shell retains its own minimal CSS and navigation. It

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reqvire-org/ads",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "type": "module",
   "description": "A design system your agent can see and shape. Your components. Your look. Your code.",
   "repository": {