@smartsoft001-mobilems/claude-plugins 2.94.0 → 2.96.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smartsoft001-mobilems/claude-plugins",
-  "version": "2.94.0",
+  "version": "2.96.0",
   "publishConfig": {
     "access": "public"
   },

package/plugins/mobilems/.claude-plugin/plugin.json

@@ -1,5 +1,5 @@
 {
   "name": "mobilems",
   "description": "MobilEMS-specific Claude Code skills (MuzaCMS / MobileMS indexer API)",
-  "version": "2.94.0"
+  "version": "2.96.0"
 }

package/plugins/mobilems/skills/mobilems-articles/references/module-and-routes.md

@@ -2,7 +2,7 @@
 
 An article module wraps `ArticlesSharedModule.forFeature` over the npm `Article` entity and filters
 its API requests with a `template` value. Thread `<PREFIX>` (the `environment` import) and the chosen
-`<name>` / `<entity>` / `<template>`. The `Masonry` factory returns the real library in the browser
+`<name>` / `<entity>` / `<template>`. The `Masonry` factory returns the real library in the browser (`window.Masonry`, set by `bootstrapApplication` from `@smartsoft001-mobilems/angular/bootstrap` in `main.ts`)
 and a no-op mock during SSR. Copy the file structure from an existing article module in the reference
 MobilEMS app and substitute the parameters.
 

package/plugins/mobilems/skills/mobilems-devops-config/references/env-and-lint.md

@@ -32,10 +32,11 @@ MULTIMEDIA_URL=https://muza-serwer-cdn.<museum-domain>/
 carried over from another project ships that project's domain in this app's SEO. Pass this project's
 expected host as the third argument to `verify-devops.sh` to have it checked.
 
-These keys map to the `/env.js` runtime-env template that `mobilems-project-init` sets up in
-`server.ts` (`API_URL`/`SITE_URL`/`APP_VERSION` are the base set; `MULTIMEDIA_URL` is the MobilEMS
-addition). If a project is missing `MULTIMEDIA_URL` handling in `server.ts`, that's a project-init
-gap — flag it, don't fix it here.
+These keys map to the `/env.js` runtime-env endpoint served by `createMobilemsServer`
+(`@smartsoft001-mobilems/angular/ssr`) from `server.ts`: `API_URL` / `SITE_URL` / `MULTIMEDIA_URL` /
+`APP_VERSION` / `USE_LOCAL_TRANSLATIONS` are the built-in set; project-specific keys are declared in
+its `env` option. If a project still hand-rolls `server.ts` (no `createMobilemsServer`) or lacks
+`MULTIMEDIA_URL` handling, that's a project-init gap — flag it, don't fix it here.
 
 ## `.eslintignore`
 

package/plugins/mobilems/skills/mobilems-devops-config/scripts/detect-foundation.sh

@@ -25,7 +25,7 @@ fail_no_foundation() {
 [ -f apps/web/src/server.ts ]                 || fail_no_foundation "apps/web/src/server.ts missing (no SSR)"
 [ -f package.json ]                           || fail_no_foundation "package.json missing"
 grep -q "@smartsoft001-mobilems" package.json || fail_no_foundation "@smartsoft001-mobilems/* not in package.json"
-grep -q "/api/translations" apps/web/src/server.ts || fail_no_foundation "/api/translations endpoint missing in server.ts"
+grep -qE "/api/translations|@smartsoft001-mobilems/angular/ssr" apps/web/src/server.ts || fail_no_foundation "server.ts is neither on createMobilemsServer (@smartsoft001-mobilems/angular/ssr) nor serving /api/translations"
 [ -f apps/web/public/translations.json ]      || fail_no_foundation "apps/web/public/translations.json missing"
 
 echo "MOBILEMS FOUNDATION OK."

package/plugins/mobilems/skills/mobilems-events/references/module-and-routes.md

@@ -23,7 +23,7 @@ export class MuseumEventsModule {}
 ## `events.routes.ts`
 
 Every page is loaded lazily with `loadComponent`. The list route additionally provides the `Masonry`
-SSR factory (the real library in the browser, a no-op mock during SSR). Copy verbatim — there is no
+SSR factory (the real library in the browser — `window.Masonry`, set by `bootstrapApplication` from `@smartsoft001-mobilems/angular/bootstrap` in `main.ts` — a no-op mock during SSR). Copy verbatim — there is no
 `<PREFIX>` to thread here either.
 
 ```ts

package/plugins/mobilems/skills/mobilems-project-init/SKILL.md

@@ -102,11 +102,16 @@ add `tailwind.config.js` + postcss wiring, and overwrite `apps/web/src/styles.sc
 global stylesheet (font-fallbacks, `.smart-container`, WCAG, masonry, fullscreen-dialog rules). The
 stylesheet is pure CSS — copying it verbatim is safe even before the components it targets exist.
 
-### 5. Runtime env — multimediaUrl + translations
+### 5. Runtime env + entry files on the framework
 
-Extend the base runtime-env infra per `references/server-env.md`: add `multimediaUrl` to
-`environment.ts`/`.prod.ts`, the `/env.js` template, and the SSR allowed-hosts list; and add the
-`/api/translations` endpoint to `server.ts`.
+Per `references/server-env.md`: add `multimediaUrl` to `environment.ts`/`.prod.ts` and
+`EnvironmentService`, then **overwrite** the three base entry files with the framework-backed ones —
+`main.ts` (`bootstrapApplication` from `@smartsoft001-mobilems/angular/bootstrap`, registers masonry
+on `window`), `main.server.ts` (`bootstrapServerApplication` from
+`@smartsoft001-mobilems/angular/bootstrap/server`; `./env-init` stays the first import) and
+`server.ts` (`createMobilemsServer` from `@smartsoft001-mobilems/angular/ssr` — allowed hosts,
+`/env.js` incl. `multimediaUrl`, `/api/translations`, `/robots.txt`, `/sitemap.xml`). Never
+hand-roll those endpoints or patch the base `server.ts` line by line.
 
 ### 6. app.config.ts → MobilEMS providers
 
@@ -165,8 +170,9 @@ not re-built.
 Apply `references/qa-hardening.md`. The copied foundation carries the _source project's_ identity,
 so this step removes leftovers and closes the recurring SEO/i18n/WCAG gaps:
 
-- dynamic `/sitemap.xml` + `/robots.txt` SSR endpoints driven by `SITE_URL` (never static copies —
-  they shipped another museum's domain twice),
+- `/sitemap.xml` + `/robots.txt` served by `createMobilemsServer` (`sitemap.routes`,
+  `robots.disallow` in `server.ts`), driven by `SITE_URL` — never static copies (they shipped
+  another museum's domain twice),
 - og/twitter images + URLs on the target domain, favicon set, skip links rewritten for this app,
 - meta description + OpenGraph on home in both languages; `og:locale` follows the active language,
 - default language = Polish, `<html lang>` synced on switch, zero hardcoded UI strings,
@@ -183,8 +189,9 @@ MobilEMS-specific permissions / MCP allow-lists, and seed `tools/specs` + `tools
 ### 12. Verify
 
 Run `scripts/verify-init.sh <workspace-root> <PREFIX>`. It asserts the delta landed (Tailwind,
-multimediaUrl, MobilEMS providers, populated shared-lib barrel), the QA-hardening basics (sitemap +
-robots endpoints, favicon, non-empty heading font), AND the foundation is self-contained (no
+multimediaUrl, the three framework entry files, MobilEMS providers, populated shared-lib barrel),
+the QA-hardening basics (sitemap routes configured, no static sitemap/robots, favicon, non-empty
+heading font), AND the foundation is self-contained (no
 `libs/museum-*`, no feature routes, and the build-safety invariant — no file under
 `libs/shared/angular/src` imports a feature package). Fix and re-run until it passes. Gate
 `npm install` behind an explicit ask — skip it during self-validation/eval.

package/plugins/mobilems/skills/mobilems-project-init/references/config-providers.md

@@ -2,7 +2,8 @@
 
 Overwrite `apps/web/src/app/app.config.ts` with the providers below (the base shipped a minimal
 version). Thread `<PREFIX>`. `app.config.server.ts` and
-`app.routes.server.ts` stay as the base emitted them.
+`app.routes.server.ts` stay as the base emitted them; `main.ts`, `main.server.ts` and `server.ts`
+are overwritten in step 5 (`references/server-env.md` §3).
 
 The imports from `@<PREFIX>/angular` (`LanguageInterceptor`, `PreviewAuthInterceptor`,
 `SsrTimeoutInterceptor`, `LocalStorageService`, `EnvironmentService`) come from the shared lib

package/plugins/mobilems/skills/mobilems-project-init/references/npm-deps.md

@@ -25,7 +25,9 @@ time — never hardcode.** Anchor on the installed `@smartsoft001/angular` line
 **Shared-UI / runtime libraries** (used by **generic** shared-lib components, so they are
 foundation deps — verified against the reference):
 
-- `@thisissoon/angular-masonry` + `masonry-layout` (masonry grids; `MasonryModule.forRoot()` in app.config)
+- `@thisissoon/angular-masonry` + `masonry-layout` (masonry grids; `MasonryModule.forRoot()` in app.config;
+  `masonry-layout` is also a peer of `@smartsoft001-mobilems/angular/bootstrap`, which registers it on
+  `window` from `main.ts` — keep `allowedCommonJsDependencies: ["masonry-layout"]` in `apps/web/project.json`)
 - `swiper` (generic `slider` component)
 - `leaflet` + `@types/leaflet` (generic `map` component + `styles.scss` `leaflet.css` import)
 - `openseadragon` + `@types/openseadragon` (generic `gallery/gallery-fullscreen` deep-zoom)
@@ -37,7 +39,8 @@ The runtime libraries go in `dependencies`; their `@types/*` packages (`@types/l
 (`@angular/core` version). `@angular/forms` is used by the shared filter components — it normally
 comes with the Angular base; ensure it's present (same Angular line) and add it if the base lacks it.
 
-> `express` + `dotenv` are already present from the base `server.ts` — verify, don't re-add.
+> `express`, `dotenv` and `@angular/ssr` are already present from the base `server.ts` — verify, don't
+> re-add. They are peers of `@smartsoft001-mobilems/angular/ssr` (`createMobilemsServer`).
 
 ## Feature packages — added by the module skills, not here
 

package/plugins/mobilems/skills/mobilems-project-init/references/qa-hardening.md

@@ -29,20 +29,19 @@ follows are the SEO-side items:
 
 ## 2. Dynamic sitemap + robots endpoints (server.ts)
 
-Put the logic in **pure, testable functions** in
-`apps/web/src/seo/seo-endpoints.ts` (`resolveSiteUrl`, `buildSitemapXml`, `buildRobotsTxt`), and
-wire thin routes in `server.ts`:
-
-- Register `GET /sitemap.xml` and `GET /robots.txt` **after** `/api/translations` but **before**
-  `express.static` and the `'/**'` SSR catch-all — otherwise SSR answers with HTML and status 200
-  and the endpoints "work" only apparently.
-- Normalize `SITE_URL`: strip trailing `/`, prepend `https://` when the schema is missing; fall back
-  to the request host when the env var is unset.
-- Headers: `application/xml; charset=utf-8` / `text/plain; charset=utf-8`,
-  `Cache-Control: public, max-age=3600`.
-- Sitemap content: home + the module list pages (`/strona-glowna`, `/obiekty`, `/kolekcje`, …). Do
-  **not** include CMS static pages (`/strona/:id`) — their ids are CMS-assigned and go stale.
-- `robots.txt` points `Sitemap:` at the same `SITE_URL`.
+Both endpoints come from `createMobilemsServer` (`@smartsoft001-mobilems/angular/ssr`, see
+`references/server-env.md` §3c) — never ship static files and never re-implement them in the app
+(no `seo-endpoints.ts`, no hand-written routes). The framework normalizes `SITE_URL` (trailing `/`
+stripped, `https://` prepended, request host as fallback), sets the content-type and
+`Cache-Control: public, max-age=3600` headers, registers the routes before `express.static` and the
+SSR catch-all, and points `robots.txt` `Sitemap:` at the same origin. What the project configures:
+
+- `sitemap.routes`: home + the module list pages (`/strona-glowna`, `/obiekty`, `/kolekcje`, …) with
+  `changefreq` / `priority`. Do **not** include CMS static pages (`/strona/:id`) — their ids are
+  CMS-assigned and go stale.
+- `sitemap.languages` / `sitemap.defaultLanguage` (defaults `['pl', 'en']` / `'pl'`) when the site is
+  not Polish-first with an English alternate.
+- `robots.disallow`: preview and search paths.
 
 ## 3. SEO meta (home + every routed page)
 

package/plugins/mobilems/skills/mobilems-project-init/references/server-env.md

@@ -1,9 +1,9 @@
-# Runtime env delta — multimediaUrl + /api/translations
+# Runtime env delta — multimediaUrl + framework entry files
 
 The base shipped `environment.{ts,prod.ts}`, `EnvironmentService`, a `server.ts` with `/env.js`, and
 the SSRF allowed-hosts list — all keyed on `API_URL` / `SITE_URL` / `APP_VERSION` only. MobilEMS adds
-a **`multimediaUrl`** key (media/CDN host) and an **`/api/translations`** dev endpoint. These are the
-only env changes; do not otherwise rewrite the base SSR infra.
+a **`multimediaUrl`** key (media/CDN host), and replaces the three entry files (`main.ts`,
+`main.server.ts`, `server.ts`) with thin wrappers over the framework entry points (section 3).
 
 ## 1. `libs/shared/angular/src/lib/environments/environment.ts` + `environment.prod.ts`
 
@@ -26,72 +26,106 @@ In `EnvironmentService.initFromProcessEnv()` and `init()`, propagate `multimedia
 transfer-state / `window.env` on the client). In reference mode this comes with the copied service —
 just confirm it.
 
-## 3. `apps/web/src/server.ts` — two additions
+## 3. Entry files — replace the base versions with the framework ones
 
-**a) Allowed-hosts:** after the `SITE_URL` block and before the `API_URL` block, add a
-`MULTIMEDIA_URL` host so SSR can fetch media during render:
+The base (`scaffold-nx-workspace`) emits a plain `main.ts`, a `main.server.ts` with `./env-init` and a
+hand-written generic `server.ts`. MobilEMS replaces all three with thin files on top of
+`@smartsoft001-mobilems/angular` entry points — do **not** patch the base files line by line, and
+never hand-roll `/env.js`, `/api/translations`, `/robots.txt` or `/sitemap.xml`.
 
-```ts
-const multimediaUrl = process.env['MULTIMEDIA_URL'];
-if (multimediaUrl) {
-  try {
-    allowedHosts.push(
-      new URL(
-        multimediaUrl.startsWith('http')
-          ? multimediaUrl
-          : `https://${multimediaUrl}`,
-      ).hostname,
-    );
-  } catch {
-    // ignore invalid URL
-  }
-}
-```
+### a) `apps/web/src/main.ts` (overwrite)
 
-**b) `/env.js` template:** add the `multimediaUrl` line + its replacement:
+`bootstrapApplication` from `@smartsoft001-mobilems/angular/bootstrap` registers `masonry-layout` on
+`window.Masonry` (the module skills' `Masonry` DI factories read it) and then bootstraps. Without
+this the masonry grids silently fall back to the SSR no-op mock in the browser.
 
 ```ts
-window['env']['multimediaUrl'] = '${MULTIMEDIA_URL}';
+// Browser entry. `@smartsoft001-mobilems/angular/bootstrap` registers the real
+// masonry-layout library on `window.Masonry` before bootstrapping; the SSR entry
+// (`main.server.ts`) keeps using Angular's own `bootstrapApplication`.
+import { bootstrapApplication } from '@smartsoft001-mobilems/angular/bootstrap';
+
+import { App } from './app/app';
+import { appConfig } from './app/app.config';
+
+bootstrapApplication(App, appConfig).catch((err) => console.error(err));
 ```
 
+Keep `"allowedCommonJsDependencies": ["masonry-layout"]` in `apps/web/project.json` build options
+(`masonry-layout` is CommonJS). Delete any local `masonry-layout.d.ts` stub — the entry point ships
+its own types.
+
+### b) `apps/web/src/main.server.ts` (overwrite)
+
+`bootstrapServerApplication` from `@smartsoft001-mobilems/angular/bootstrap/server` returns the
+`(context) => Promise<ApplicationRef>` factory Angular SSR expects as the default export. It lives in
+a separate entry point on purpose: `masonry-layout` touches `window` at import time and would crash
+Node. `./env-init` **must stay the first import**.
+
 ```ts
-    .replace(/\$\{MULTIMEDIA_URL\}/g, process.env['MULTIMEDIA_URL'] || '')
+/**
+ * CRITICAL: './env-init' MUST be the first import!
+ * It initializes environment variables from process.env BEFORE
+ * any modules that depend on them are evaluated.
+ */
+import './env-init';
+
+import { bootstrapServerApplication } from '@smartsoft001-mobilems/angular/bootstrap/server';
+
+import { App } from './app/app';
+import { config } from './app/app.config.server';
+
+export default bootstrapServerApplication(App, config);
 ```
 
-**c) `/api/translations` endpoint** (needs `import * as fs from 'fs'` and `import * as path from 'path'`
-at the top): serve the translations JSON from dist, falling back to the public source. Register it
-**before** the static-file middleware and the catch-all `app.use('/**', …)`:
+### c) `apps/web/src/server.ts` (overwrite)
+
+`createMobilemsServer` from `@smartsoft001-mobilems/angular/ssr` assembles the whole Express server:
+dotenv, the SSRF allowed-hosts list (hostnames of `SITE_URL` — with and without `www.` —
+`MULTIMEDIA_URL`, `API_URL`, plus `localhost` outside production), `GET /env.js` (`apiUrl`,
+`siteUrl`, `multimediaUrl`, `version`, `useLocalTranslations` — values JSON-encoded),
+`GET /api/translations` (source file first, then the browser dist copy), `GET /robots.txt`,
+`GET /sitemap.xml`, your custom routes, static files, the Angular handler and `app.listen` when the
+module is the entry point. Export its `reqHandler` — the Angular CLI dev server needs it.
 
 ```ts
-app.get('/api/translations', (req, res) => {
-  let translationPath = path.join(
-    process.cwd(),
-    'dist/apps/web/browser/translations.json',
-  );
-  if (!fs.existsSync(translationPath)) {
-    translationPath = path.join(
-      process.cwd(),
-      'apps/web/public/translations.json',
-    );
-  }
-  if (fs.existsSync(translationPath)) {
-    const translations = JSON.parse(fs.readFileSync(translationPath, 'utf8'));
-    res.json(translations);
-  } else {
-    console.error('Translation file not found at:', translationPath);
-    res.status(404).json({ error: 'Translation file not found' });
-  }
+import { createMobilemsServer } from '@smartsoft001-mobilems/angular/ssr';
+
+export const { reqHandler } = createMobilemsServer({
+  moduleUrl: import.meta.url,
+  sitemap: {
+    routes: [
+      { path: '/strona-glowna', changefreq: 'daily', priority: 1 },
+      { path: '/obiekty', changefreq: 'daily', priority: 0.9 },
+      { path: '/kolekcje', changefreq: 'weekly', priority: 0.9 },
+      { path: '/aktualnosci', changefreq: 'daily', priority: 0.8 },
+      { path: '/kontakt', changefreq: 'monthly', priority: 0.5 },
+    ],
+  },
+  robots: { disallow: ['/article-preview', '/wyszukaj'] },
 });
 ```
 
+Options you will actually touch (full list: the `ssr` section of the framework
+[`packages/shared/angular/README.md`](https://github.com/smartsoft001/mobilems-framework/blob/main/packages/shared/angular/README.md#ssr-server-ssr)):
+
+| Option                                  | Use                                                                                                                                                                                                           |
+| --------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `sitemap.routes`                        | home + the module **list** pages. Each module skill appends its own list route here. Never CMS static pages (`/strona/:id` — ids go stale). Omit `sitemap` entirely only for an app that must not be indexed. |
+| `sitemap.languages` / `defaultLanguage` | defaults `['pl', 'en']` / `'pl'` (the default language has no `?lang=`). Override for a non-PL-first site.                                                                                                    |
+| `robots.disallow`                       | preview / search paths (`/article-preview` is added by `mobilems-articles`).                                                                                                                                  |
+| `env`                                   | extra `window.env` keys the project needs: `{ gtmId: 'GTM_ID' }` (env var name) or a resolver `() => string`. Mirror each key in the shared lib's `environment.ts` + `EnvironmentService`.                    |
+| `configure(app)`                        | project endpoints (`app.get('/api/...')`) — registered before static files and SSR.                                                                                                                           |
+| `translations.paths`                    | only when the app is not at `apps/web`.                                                                                                                                                                       |
+
 The `app.config.ts` `provideAppInitializer` hits `/api/translations` in dev and `apiUrl + 'setting/theme'`
-in prod (see `references/config-providers.md`). Optionally seed an empty
-`apps/web/public/translations.json` (`{"en":{},"pl":{}}`) so dev SSR doesn't 404.
+in prod (see `references/config-providers.md`). Seed an empty `apps/web/public/translations.json`
+(`{"en":{},"pl":{}}`) so dev SSR doesn't 404.
 
-## 4. `/sitemap.xml` + `/robots.txt` — dynamic endpoints (required)
+## 4. `/sitemap.xml` + `/robots.txt` — configured, never hand-rolled
 
 Never ship static `sitemap.xml`/`robots.txt` copied from the reference — two projects went to QA
-with another museum's domain in them. Build them as SSR endpoints from `SITE_URL`, with the logic in
-pure functions (`apps/web/src/seo/seo-endpoints.ts`) and thin routes in `server.ts`, registered
-after `/api/translations` and **before** `express.static` + the `'/**'` catch-all. Full pattern
-(normalization, headers, content rules): `references/qa-hardening.md` §2.
+with another museum's domain in them — and never re-implement the endpoints in the app: they come
+from `createMobilemsServer` (`sitemap`, `robots` options above), normalized on `SITE_URL` with the
+request host as fallback, correct headers and caching, registered before static files and the SSR
+catch-all. Content rules: `references/qa-hardening.md` §2.

package/plugins/mobilems/skills/mobilems-project-init/scripts/verify-init.sh

@@ -25,13 +25,18 @@ grep -q "@smartsoft001-mobilems/angular" package.json && pass "mobilems framewor
 grep -q "@ngrx/store" package.json && pass "ngrx dep" || bad "@ngrx/store in package.json"
 grep -q "SharedModule.forRoot" apps/web/src/app/app.config.ts && pass "SharedModule.forRoot in app.config" || bad "SharedModule.forRoot in app.config.ts"
 grep -q "SEARCH_CONFIG_TOKEN" apps/web/src/app/app.config.ts && pass "SEARCH_CONFIG_TOKEN" || bad "SEARCH_CONFIG_TOKEN in app.config.ts"
-grep -q "multimediaUrl" apps/web/src/server.ts && pass "multimediaUrl in server.ts" || bad "multimediaUrl in server.ts"
-grep -q "/api/translations" apps/web/src/server.ts && pass "/api/translations endpoint" || bad "/api/translations in server.ts"
+grep -q "multimediaUrl" libs/shared/angular/src/lib/environments/environment.ts && pass "multimediaUrl in environment.ts" || bad "multimediaUrl in libs/shared/angular/src/lib/environments/environment.ts"
+# the three entry files are thin wrappers over the framework entry points (references/server-env.md §3)
+grep -q "@smartsoft001-mobilems/angular/bootstrap'" apps/web/src/main.ts && pass "main.ts uses bootstrapApplication from @smartsoft001-mobilems/angular/bootstrap" || bad "main.ts must import bootstrapApplication from @smartsoft001-mobilems/angular/bootstrap (registers masonry on window)"
+grep -q "@smartsoft001-mobilems/angular/bootstrap/server" apps/web/src/main.server.ts && pass "main.server.ts uses bootstrapServerApplication" || bad "main.server.ts must import bootstrapServerApplication from @smartsoft001-mobilems/angular/bootstrap/server"
+grep -q "@smartsoft001-mobilems/angular/ssr" apps/web/src/server.ts && pass "server.ts uses createMobilemsServer" || bad "server.ts must call createMobilemsServer from @smartsoft001-mobilems/angular/ssr (never a hand-rolled Express server)"
+grep -q "translations: false" apps/web/src/server.ts && bad "/api/translations disabled in server.ts (translations: false)" || pass "/api/translations served by createMobilemsServer"
 
 echo "== QA hardening (references/qa-hardening.md) =="
-# dynamic sitemap/robots endpoints — a static copy hardcodes whatever domain it was written with
-grep -q "sitemap.xml" apps/web/src/server.ts && pass "dynamic /sitemap.xml endpoint" || bad "/sitemap.xml endpoint in server.ts (SITE_URL-driven, never a static copy)"
-grep -q "robots.txt" apps/web/src/server.ts && pass "dynamic /robots.txt endpoint" || bad "/robots.txt endpoint in server.ts (SITE_URL-driven, never a static copy)"
+# sitemap/robots are served by createMobilemsServer — a static copy hardcodes whatever domain it was written with
+grep -qE "sitemap:[[:space:]]*\{" apps/web/src/server.ts && pass "sitemap routes configured in createMobilemsServer" || bad "sitemap option in createMobilemsServer (SITE_URL-driven /sitemap.xml, never a static copy)"
+grep -q "robots: false" apps/web/src/server.ts && bad "/robots.txt disabled in server.ts (robots: false)" || pass "dynamic /robots.txt served by createMobilemsServer"
+if ls apps/web/public/sitemap.xml apps/web/public/robots.txt >/dev/null 2>&1; then bad "static sitemap.xml/robots.txt in apps/web/public — delete them, the endpoints are dynamic"; else pass "no static sitemap.xml/robots.txt"; fi
 if ls apps/web/public/favicon.ico apps/web/src/favicon.ico >/dev/null 2>&1; then pass "favicon present"; else bad "favicon.ico missing"; fi
 # an empty fontFamily array silently falls back to system sans
 if grep -qE ":[[:space:]]*\[[[:space:]]*\]" tailwind.config.js 2>/dev/null; then bad "empty fontFamily array in tailwind.config.js (heading font falls back to system sans)"; else pass "no empty fontFamily entries"; fi

package/plugins/mobilems/skills/mobilems-search/SKILL.md

@@ -41,13 +41,10 @@ representations of the same object.
 
 ## Steps
 
-1. **Read the mockup — once** in `docs/mockups/` and write
-   `.ai/tasks/<issue>/mockup-notes.md` (layout, spacing, colours as token names,
-   typography, field order, states) before styling; work from the note and do
-   not re-read the image in this step. The searchbar and the result list item
-   are usually exported as separate design-system components rather than a full
-   screen, so match the component and keep the page layout consistent with the
-   rest of the portal.
+1. **Read the mockup** in `docs/mockups/` — the searchbar and the result list
+   item are usually exported as separate design-system components rather than a
+   full screen, so match the component and keep the page layout consistent with
+   the rest of the portal.
 2. **Tabs come from modules.** Each feature module registers a child route under
    `wyszukaj/:text` (its search module) and the page builds its tab list from
    what is registered. When a tab is missing, fix it in that module's skill

package/plugins/mobilems/skills/mobilems-static-pages/SKILL.md

@@ -39,13 +39,9 @@ exists. Re-implementing it is a defect, not a shortcut:
 
 ## Steps
 
-1. **Read the mockup — once.** Exports live in `docs/mockups/`; read them (Read)
-   rather than guessing from the Figma link, then immediately write
-   `.ai/tasks/<issue>/mockup-notes.md` (layout order, grid and spacing, colours
-   as token names, typography, field order, states, header and footer) and work
-   from the note. Note the container width, heading scale, spacing rhythm and
-   how the page header/hero differs from the module pages. Do not re-read the
-   image later in this step; `/flow:impl` reads it once more in its comparison.
+1. **Read the mockup.** Exports live in `docs/mockups/`; read them (Read) rather
+   than guessing from the Figma link. Note the container width, heading scale,
+   spacing rhythm and how the page header/hero differs from the module pages.
 2. **CMS data — render everything the API sends.** The page payload carries more
    than a title and body: `image`, `backgroundImage`, `links`, `slides`.
    A field that arrives and is not rendered reads to the client as a missing

package/plugins/mobilems/skills/mobilems-thematic-publications/references/module-and-routes.md

@@ -5,7 +5,7 @@
 Thread `<PREFIX>` (the `environment` + domain imports). This module REUSES `ArticlesSharedModule`
 (the same shared module the news/articles modules use) but configures it over its OWN
 `MuseumThematicPath` entity with its OWN `getReducer` and **no `baseQuery`**. The `Masonry` factory
-returns the real library in the browser and a no-op mock during SSR (identical to objects).
+returns the real library in the browser (`window.Masonry`, set by `bootstrapApplication` from `@smartsoft001-mobilems/angular/bootstrap` in `main.ts`) and a no-op mock during SSR (identical to objects).
 
 ```ts
 import { NgModule } from '@angular/core';