fix(pf): align §11/§12 preview manifests with canonical v1.3.0 YAML schema

The framework's own example manifests are YAML with a richer schema than the
TOML FT-141/142 first shipped; `product preview` could not read them. Reworked
to the canonical shape so the tool validates the framework's examples verbatim:

- design-system: nested under `design_system:`; `contexts_supported` is a
  {form_factor, modality} space; `reification[].when` is a partial predicate
  (unconstrained dimension = wildcard, `{}` = all); `satisfies[].via`; `tokens`
  are {id, type}. Coupling now checks every AIO the What's UI steps *reference*
  has a reifying CIO compatible with each declared context of use (§11.2 seam),
  matching `when` against a context's dimension/value.
- content-store: nested under `content_store:` with `entries` inside; YAML.

Parsing switched TOML→serde_yaml. Vendored the canonical checkout example
manifests under examples/checkout/ as a live fixture. Synced
docs/product-framework-open.md from v1.2 to v1.3.0 (§3.1 structure/data split,
§6.3 data-conformance kind, §13 Data Conformance Profile).

`product preview design-system|content-store examples/checkout/*.yaml` → whole.
`product verify` → TC-1015/1016/1017/1018 PASS. Full suite green; clippy clean.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

Author: Hafeok

.product/requests.jsonl

@@ -63,3 +63,5 @@
 {"applied-at":"2026-06-22T13:02:14Z","applied-by":"git:Emil Klein -  Claude Code AI <[email protected]>","commit":"dbd1b0c","entry-hash":"f8b1da3a2952da40d666dc674d09149456b18afac3453afeb0f3cf445126d53c","feature":"FT-140","id":"req-20260622-001","prev-hash":"803d01d81968600b8cef0e79f5794208b04f9c7510feccd3eee5ab68e2d52e5a","reason":"verify FT-140: 3/3 passing","result":{"failing":[],"passing":["TC-1012","TC-1013","TC-1014"],"tag-created":"product/FT-140/complete","tcs-run":["TC-1012","TC-1013","TC-1014"]},"type":"verify"}
 {"applied-at":"2026-06-22T13:20:01Z","applied-by":"git:Emil Klein -  Claude Code AI <[email protected]>","commit":"f457f25","entry-hash":"9e201e8cb8826354df33f72372322df8666c03184f0c0a90c105dbb8c008f236","feature":"FT-141","id":"req-20260622-002","prev-hash":"f8b1da3a2952da40d666dc674d09149456b18afac3453afeb0f3cf445126d53c","reason":"verify FT-141: 2/2 passing","result":{"failing":[],"passing":["TC-1015","TC-1016"],"tag-created":"product/FT-141/complete","tcs-run":["TC-1015","TC-1016"]},"type":"verify"}
 {"applied-at":"2026-06-22T13:23:55Z","applied-by":"git:Emil Klein -  Claude Code AI <[email protected]>","commit":"f457f25","entry-hash":"94ec3f19bffc7829b60138726d316d1666c951e762dbce55592e1db78de0ab38","feature":"FT-142","id":"req-20260622-003","prev-hash":"9e201e8cb8826354df33f72372322df8666c03184f0c0a90c105dbb8c008f236","reason":"verify FT-142: 2/2 passing","result":{"failing":[],"passing":["TC-1017","TC-1018"],"tag-created":"product/FT-142/complete","tcs-run":["TC-1017","TC-1018"]},"type":"verify"}
+{"applied-at":"2026-06-22T18:49:07Z","applied-by":"git:Emil Klein -  Claude Code AI <[email protected]>","commit":"d5877cd","entry-hash":"2432e827e4e970e5f668e19d175fa42c3c5e533847bb36a6c24e76c5117cdafa","feature":"FT-141","id":"req-20260622-004","prev-hash":"94ec3f19bffc7829b60138726d316d1666c951e762dbce55592e1db78de0ab38","reason":"verify FT-141: 2/2 passing","result":{"failing":[],"passing":["TC-1015","TC-1016"],"tag-created":"product/FT-141/complete-v2","tcs-run":["TC-1015","TC-1016"]},"type":"verify"}
+{"applied-at":"2026-06-22T18:49:09Z","applied-by":"git:Emil Klein -  Claude Code AI <[email protected]>","commit":"d5877cd","entry-hash":"3a4db3fd135dc20af5cc5ffb730cdec8f0d58f68a713fa61662d486eb1fccc3f","feature":"FT-142","id":"req-20260622-005","prev-hash":"2432e827e4e970e5f668e19d175fa42c3c5e533847bb36a6c24e76c5117cdafa","reason":"verify FT-142: 2/2 passing","result":{"failing":[],"passing":["TC-1017","TC-1018"],"tag-created":"product/FT-142/complete-v2","tcs-run":["TC-1017","TC-1018"]},"type":"verify"}

docs/product-framework-open.md

@@ -0,0 +1,57 @@
+# content-store.manifest.yaml  (PREVIEW — exercises §12)
+# A conforming content store for the checkout example. Resolves every content key
+# the What references, across the locales it claims (§12.1: keyed catalog with
+# roles, locale coverage, role conformance). Demonstrates "one What, many words".
+
+content_store:
+  id: "wire-content"
+  version: "0.1.0"
+  locales_supported: [en, es]
+
+  entries:
+    - key: checkout.review.heading
+      role: heading
+      values:
+        en: "Review your order"
+        es: "Revisa tu pedido"
+
+    - key: checkout.payment.heading
+      role: heading
+      values:
+        en: "How would you like to pay?"
+        es: "¿Cómo quieres pagar?"
+
+    - key: confirm.heading
+      role: heading
+      values:
+        en: "You're all set"
+        es: "Todo listo"
+
+    - key: browse.heading
+      role: heading
+      values:
+        en: "Browse the shop"
+        es: "Explora la tienda"
+
+    - key: orders.heading
+      role: heading
+      values:
+        en: "Your orders"
+        es: "Tus pedidos"
+
+    - key: cart.empty.message
+      role: empty-message            # role: must be non-empty and actionable
+      values:
+        en: "Nothing to check out yet — add something to get started."
+        es: "Aún no hay nada para pagar — añade algo para empezar."
+
+    - key: cart.failed.message
+      role: error-message            # role: must say what went wrong and how to recover
+      values:
+        en: "Couldn't load your cart. Check your connection and retry."
+        es: "No se pudo cargar tu carrito. Revisa tu conexión e inténtalo de nuevo."
+
+# Coverage check (§12.2): every content key referenced by the What's UI steps and
+# shell resolves in both `en` and `es`; every empty-/error-message role is non-empty.
+# A renderer coupling this store with locale=es produces the same screens in Spanish,
+# with no change to the What.

examples/checkout/content-store.manifest.yaml

@@ -0,0 +1,70 @@
+# design-system.manifest.yaml  (PREVIEW — exercises §11)
+# A conforming design system for the checkout example. Declares the four
+# obligations of §11.1: a CIO catalog, reification coverage, a token surface,
+# and per-component WCAG guarantees.
+
+design_system:
+  id: "wire-ds"
+  version: "0.1.0"
+  wcag_target: "2.2-AA"
+
+  contexts_supported:
+    form_factor: [phone, tablet]
+    modality:    [touch, pointer]
+
+  components:                       # the CIO catalog
+    - id: searchable-list
+      tokens: [color.fg, color.bg, space.inset, type.body]
+      satisfies:
+        - { criterion: "1.3.1", level: A,  via: machine }
+        - { criterion: "4.1.2", level: A,  via: machine }
+        - { criterion: "2.4.7", level: AA, via: assisted }
+    - id: segmented-control
+      tokens: [color.fg, color.bg, space.inset]
+      satisfies:
+        - { criterion: "1.3.1", level: A,  via: machine }
+        - { criterion: "4.1.2", level: A,  via: machine }
+    - id: list
+      tokens: [color.fg, space.inset, type.body]
+      satisfies:
+        - { criterion: "1.3.1", level: A, via: machine }
+    - id: value-block
+      tokens: [color.fg, type.display]
+      satisfies:
+        - { criterion: "1.3.1", level: A, via: machine }
+    - id: primary-button
+      tokens: [color.accent, color.on-accent, space.inset, type.label]
+      satisfies:
+        - { criterion: "2.5.8", level: AA, via: machine }    # target size
+        - { criterion: "2.4.7", level: AA, via: assisted }
+    - id: drawer                    # the burger menu — root navigation reified
+      tokens: [color.bg, color.fg, space.inset]
+      satisfies:
+        - { criterion: "2.4.7", level: AA, via: assisted }
+        - { criterion: "2.1.1", level: A,  via: manual }     # keyboard operable
+    - id: rail                      # tablet root navigation
+      tokens: [color.bg, color.fg]
+      satisfies:
+        - { criterion: "2.4.7", level: AA, via: assisted }
+
+  reification:                      # reify(AIO, context) -> CIO ; must cover every pair
+    - { aio: single-select,      when: { form_factor: phone,  options: many }, cio: searchable-list,
+        rationale: "no room for many side-by-side options on a phone" }
+    - { aio: single-select,      when: { form_factor: tablet, options: few  }, cio: segmented-control,
+        rationale: "few options, ample width — direct choice beats a menu" }
+    - { aio: display-collection, when: {}, cio: list }
+    - { aio: display-value,      when: {}, cio: value-block }
+    - { aio: trigger-action,     when: { emphasis: primary }, cio: primary-button }
+    - { aio: navigate,           when: { scope: root, form_factor: phone  }, cio: drawer,
+        rationale: "global destinations behind a drawer on a phone" }
+    - { aio: navigate,           when: { scope: root, form_factor: tablet }, cio: rail }
+
+  tokens:                           # the token surface
+    - { id: color.fg,        type: color }
+    - { id: color.bg,        type: color }
+    - { id: color.accent,    type: color }
+    - { id: color.on-accent, type: color }
+    - { id: space.inset,     type: dimension }
+    - { id: type.body,       type: typography }
+    - { id: type.label,      type: typography }
+    - { id: type.display,    type: typography }

examples/checkout/design-system.manifest.yaml

@@ -60,9 +60,10 @@ fn content_store(manifest: PathBuf, couple: bool, product: Option<String>) -> Bo
         findings.extend(product_core::pf::manifest_content::couple_content(&m, &graph));
     }
 
+    let cs = &m.content_store;
     let summary = format!("content store '{}': {{scope}} — {} entries, {} locales",
-        m.content_store.id, m.entries.len(), m.content_store.locales_supported.len());
-    report(&format!("content store '{}'", m.content_store.id), couple, &summary, findings)
+        cs.id, cs.entries.len(), cs.locales_supported.len());
+    report(&format!("content store '{}'", cs.id), couple, &summary, findings)
 }
 
 /// Print the scope line (whole / whole + coupled) on success, or each finding on
@@ -91,9 +92,10 @@ fn design_system(manifest: PathBuf, couple: bool, product: Option<String>) -> Bo
         findings.extend(product_core::pf::manifest::couple_ds(&m, &graph));
     }
 
+    let ds = &m.design_system;
     let summary = format!("design system '{}': {{scope}} — {} components, {} reification rules",
-        m.design_system.id, m.components.len(), m.reification.len());
-    report(&format!("design system '{}'", m.design_system.id), couple, &summary, findings)
+        ds.id, ds.components.len(), ds.reification.len());
+    report(&format!("design system '{}'", ds.id), couple, &summary, findings)
 }
 
 /// Load the captured What graph for the coupling check.

product-cli/src/commands/preview.rs

@@ -9803,27 +9803,38 @@ fn tc_1014_seam_composes_coverage_failures() {
     }
 }
 
-/// A whole §11.3 design-system manifest reifying every core AIO on `phone`.
+/// A §11.3 design-system manifest (canonical YAML) with the given reification
+/// rules (each `(aio, when, cio)`). `whole_ds_manifest` reifies single-select on
+/// phone and trigger-action by emphasis.
+fn ds_manifest(rules: &[(&str, &str, &str)]) -> String {
+    let reify: String = rules.iter().map(|(aio, when, cio)| format!(
+        "    - {{ aio: {aio}, when: {{ {when} }}, cio: {cio}, rationale: x }}\n")).collect();
+    format!(
+        "design_system:\n  id: acme\n  version: \"1.0\"\n  wcag_target: \"2.2-AA\"\n\
+         \x20 contexts_supported: {{ form_factor: [phone, tablet], modality: [touch] }}\n\
+         \x20 components:\n\
+         \x20   - {{ id: searchable-list, tokens: [color.accent], satisfies: [{{ criterion: \"1.3.1\", level: A, via: machine }}] }}\n\
+         \x20   - {{ id: primary-button, tokens: [color.accent], satisfies: [{{ criterion: \"2.5.8\", level: AA, via: machine }}] }}\n\
+         \x20 reification:\n{reify}\
+         \x20 tokens: [{{ id: color.accent, type: color }}]\n")
+}
+
 fn whole_ds_manifest() -> String {
-    let aios = ["trigger-action", "single-select", "multi-select", "text-entry", "numeric-entry",
-        "date-entry", "display-value", "display-collection", "navigate", "edit"];
-    let rules: String = aios.iter().map(|a| format!(
-        "[[reification]]\naio = \"{a}\"\nwhen = \"phone\"\ncio = \"segmented-control\"\nrationale = \"x\"\n")).collect();
-    format!("[design_system]\nid = \"acme\"\nversion = \"1.0\"\nwcag_target = \"AA\"\n\
-        contexts_supported = [\"phone\"]\ntokens = [\"color.accent\"]\n\
-        [[components]]\nid = \"segmented-control\"\ntokens = [\"color.accent\"]\n\
-        satisfies = [{{ criterion = \"1.3.1\", level = \"A\", verification = \"machine\" }}]\n{rules}")
+    ds_manifest(&[
+        ("single-select", "form_factor: phone", "searchable-list"),
+        ("trigger-action", "emphasis: primary", "primary-button"),
+    ])
 }
 
 #[test]
 fn tc_1015_design_system_manifest_validates_internally() {
     let h = Harness::new_bare();
     h.run(&["init", "--yes", "--name", "shop", "--demo"]).assert_exit(0);
-    h.write("ds.toml", &whole_ds_manifest());
-    h.run(&["preview", "design-system", "ds.toml"]).assert_exit(0);
+    h.write("ds.yaml", &whole_ds_manifest());
+    h.run(&["preview", "design-system", "ds.yaml"]).assert_exit(0);
     // A reification naming a cio absent from components fails wholeness.
-    h.write("bad.toml", &whole_ds_manifest().replacen("cio = \"segmented-control\"", "cio = \"ghost-cio\"", 1));
-    let out = h.run(&["preview", "design-system", "bad.toml"]);
+    h.write("bad.yaml", &whole_ds_manifest().replacen("cio: searchable-list", "cio: ghost-cio", 1));
+    let out = h.run(&["preview", "design-system", "bad.yaml"]);
     out.assert_exit(1);
     assert!(out.stderr.contains("ghost-cio") && out.stderr.contains("absent"), "stderr:\n{}", out.stderr);
 }
@@ -9832,42 +9843,45 @@ fn tc_1015_design_system_manifest_validates_internally() {
 fn tc_1016_design_system_coupling_covers_every_aio_context() {
     let h = Harness::new_bare();
     h.run(&["init", "--yes", "--name", "shop", "--demo"]).assert_exit(0);
-    h.run(&["domain", "new", "context-of-use", "phone", "--label", "P"]).assert_exit(0);
-    h.write("ds.toml", &whole_ds_manifest());
-    // Full reification over phone → coupling complete.
-    h.run(&["preview", "design-system", "ds.toml", "--couple"]).assert_exit(0);
+    h.run(&["domain", "new", "context-of-use", "phone", "--label", "P",
+        "--dimension", "form_factor", "--value", "phone"]).assert_exit(0);
+    // A UI step referencing single-select (surfaced) + trigger-action (offered),
+    // against the demo's existing read model + command.
+    h.run(&["domain", "new", "ui-step", "Pick", "--label", "Pick",
+        "--surfaces", "OrderSummary:single-select", "--offers", "PlaceOrder:trigger-action"]).assert_exit(0);
+    h.write("ds.yaml", &whole_ds_manifest());
+    // Both referenced AIOs reify on phone → coupling complete.
+    h.run(&["preview", "design-system", "ds.yaml", "--couple"]).assert_exit(0);
     // Drop single-select's rule → non-conforming for phone, naming the gap.
-    let dropped = whole_ds_manifest().replacen(
-        "[[reification]]\naio = \"single-select\"\nwhen = \"phone\"\ncio = \"segmented-control\"\nrationale = \"x\"\n", "", 1);
-    h.write("gap.toml", &dropped);
-    let out = h.run(&["preview", "design-system", "gap.toml", "--couple"]);
+    h.write("gap.yaml", &ds_manifest(&[("trigger-action", "emphasis: primary", "primary-button")]));
+    let out = h.run(&["preview", "design-system", "gap.yaml", "--couple"]);
     out.assert_exit(1);
     assert!(out.stderr.contains("single-select") && out.stderr.contains("phone"), "stderr:\n{}", out.stderr);
 }
 
-/// A whole §12.2 content-store manifest with two entries over en/de.
+/// A whole §12.2 content-store manifest (canonical YAML) with two entries over en/de.
 fn whole_content_manifest() -> String {
-    "[content_store]\nid = \"copy\"\nversion = \"1.0\"\nlocales_supported = [\"en\", \"de\"]\n\
-     [[entries]]\nkey = \"cart.empty.message\"\nrole = \"empty-message\"\n\
-     values = { en = \"Your cart is empty\", de = \"Ihr Warenkorb ist leer\" }\n\
-     [[entries]]\nkey = \"checkout.title\"\nrole = \"heading\"\n\
-     values = { en = \"Checkout\", de = \"Kasse\" }\n".to_string()
+    "content_store:\n  id: copy\n  version: \"1.0\"\n  locales_supported: [en, de]\n  entries:\n\
+     \x20   - key: cart.empty.message\n      role: empty-message\n\
+     \x20     values: { en: \"Your cart is empty\", de: \"Ihr Warenkorb ist leer\" }\n\
+     \x20   - key: checkout.title\n      role: heading\n\
+     \x20     values: { en: \"Checkout\", de: \"Kasse\" }\n".to_string()
 }
 
 #[test]
 fn tc_1017_content_store_manifest_validates_internally() {
     let h = Harness::new_bare();
     h.run(&["init", "--yes", "--name", "shop", "--demo"]).assert_exit(0);
-    h.write("cs.toml", &whole_content_manifest());
-    h.run(&["preview", "content-store", "cs.toml"]).assert_exit(0);
+    h.write("cs.yaml", &whole_content_manifest());
+    h.run(&["preview", "content-store", "cs.yaml"]).assert_exit(0);
     // A key missing a value for a claimed locale fails wholeness.
-    h.write("nolocale.toml", &whole_content_manifest().replacen(", de = \"Kasse\"", "", 1));
-    let a = h.run(&["preview", "content-store", "nolocale.toml"]);
+    h.write("nolocale.yaml", &whole_content_manifest().replacen(", de: \"Kasse\"", "", 1));
+    let a = h.run(&["preview", "content-store", "nolocale.yaml"]);
     a.assert_exit(1);
     assert!(a.stderr.contains("checkout.title") && a.stderr.contains("de"), "stderr:\n{}", a.stderr);
     // An error/empty-message role resolving to empty text fails.
-    h.write("empty.toml", &whole_content_manifest().replacen("Your cart is empty", "", 1));
-    let b = h.run(&["preview", "content-store", "empty.toml"]);
+    h.write("empty.yaml", &whole_content_manifest().replacen("Your cart is empty", "", 1));
+    let b = h.run(&["preview", "content-store", "empty.yaml"]);
     b.assert_exit(1);
     assert!(b.stderr.contains("cart.empty.message") && b.stderr.contains("empty"), "stderr:\n{}", b.stderr);
 }
@@ -9878,12 +9892,12 @@ fn tc_1018_content_store_coupling_resolves_every_referenced_key() {
     h.run(&["init", "--yes", "--name", "shop", "--demo"]).assert_exit(0);
     h.run(&["domain", "new", "ui-step", "Cart", "--label", "Cart",
         "--content", "cart.empty.message:empty-message"]).assert_exit(0);
-    h.write("cs.toml", &whole_content_manifest());
+    h.write("cs.yaml", &whole_content_manifest());
     // The store resolves the referenced key in every locale → coupling complete.
-    h.run(&["preview", "content-store", "cs.toml", "--couple"]).assert_exit(0);
+    h.run(&["preview", "content-store", "cs.yaml", "--couple"]).assert_exit(0);
     // A UI step referencing an unresolved key → non-conforming for that locale.
     h.run(&["domain", "new", "ui-step", "P2", "--label", "P2", "--content", "missing.key:body"]).assert_exit(0);
-    let out = h.run(&["preview", "content-store", "cs.toml", "--couple"]);
+    let out = h.run(&["preview", "content-store", "cs.yaml", "--couple"]);
     out.assert_exit(1);
     assert!(out.stderr.contains("missing.key") && (out.stderr.contains("de") || out.stderr.contains("en")), "stderr:\n{}", out.stderr);
 }