fix(ai): address PR #217 review comments — commands, rules, gitignore, templates

- Add .agents/commands/sdd-full-bootstrap.md and sdd-lite-bootstrap.md
  with repo-specific workflow notes, verified commands, approval gates
  and quality checklists (resolves Lurian's comment on .agents/commands/)
- Add .agents/rules/00-baseline.md (applyTo: **/*) and 10-react.md
  (applyTo: react/**/*) with valid YAML frontmatter so rules are
  auto-injected into every agent conversation without manual AGENTS.md
  reads (resolves Lurian's comment on .agents/rules/)
- Tighten .gitignore: replace blanket /specs with granular patterns
  (specs/**/plan.md, tasks.md, analysis.md) so spec.md is committed;
  add .specify/cache/ and .specify/.tmp/ (resolves lucvysk's comment)
- Remove .specify/templates/ — pulled from spec-kit tool, not the repo
  (resolves huandrey's comment)

Author: Lurian

.agents/commands/.gitkeep

@@ -0,0 +1,65 @@
+# SDD Full Bootstrap — pickup-points-modal
+
+Use this command when starting a **new feature** on this repo that requires the Full SDD flow.
+
+## When to use Full SDD
+
+- Any new user-facing feature or behavioral change in `react/`.
+- Changes to the public component API (`PickupPointsModal.js` props, events, `orderForm` shape).
+- Changes that touch `manifest.json`, `package.json`, or CI pipelines.
+- All work on `main`-targeted branches (not hotfix branches).
+
+**Lite-only is allowed** for hotfixes on `fix/*` or `chk-*` branches. See `sdd-lite-bootstrap.md`.
+
+## Pipeline
+
+```
+/speckit-specify   → generates specs/<feature>/spec.md
+/speckit-plan      → generates specs/<feature>/plan.md
+/speckit-tasks     → generates specs/<feature>/tasks.md
+/speckit-implement → executes tasks in code
+/speckit-analyze   → audits consistency between spec/plan/tasks/code
+```
+
+Or use the higher-level skill aliases:
+
+```
+/specification  → Business Context + Arch Decisions + Technical Contract (spec.md)
+/implementing   → Implement from an approved spec up to the PR
+```
+
+## Before starting
+
+1. Read `AGENTS.md` — verified commands, autonomy limits, sources of truth.
+2. Read `.specify/memory/constitution.md` — binding principles.
+3. Confirm the Jira/GitHub issue exists and acceptance criteria are clear.
+4. Run `yarn install` from repo root.
+
+## Verified commands
+
+```bash
+yarn lint          # ESLint over js,jsx,ts,tsx
+yarn lint:ts       # tsc --noEmit
+yarn lint:locales  # intl-equalizer (i18n key parity)
+yarn test          # Jest on react/
+yarn test:coverage # Jest with coverage report
+yarn build         # Production build (lib/ + locales)
+```
+
+## Files that require human approval before touching
+
+- `manifest.json` — version, dependencies, builders.
+- `package.json` — dependencies, scripts, engines.
+- `react/PickupPointsModal.js` — root component (public API).
+- `react/ModalState.js` — root state manager.
+- `.travis.yml`, `.github/**`, `.vtex/deployment.yaml` — CI/CD.
+- `CHANGELOG.md` bumps and `vtex publish` / `npm publish`.
+
+## Quality gates before opening PR
+
+- [ ] `yarn lint` passes (0 errors).
+- [ ] `yarn lint:ts` passes (0 type errors).
+- [ ] `yarn lint:locales` passes (all locale files in sync).
+- [ ] `yarn test` passes (all existing tests green).
+- [ ] New behavior covered by at least one Jest test.
+- [ ] `spec.md` approved before implementation starts.

.agents/commands/sdd-full-bootstrap.md

@@ -0,0 +1,49 @@
+# SDD Lite Bootstrap — pickup-points-modal
+
+Use this command for **hotfixes** on `fix/*` or `chk-*` branches where Full SDD would be excessive overhead.
+
+## When Lite is allowed
+
+- Bug fixes with a clear, contained scope (no public API change).
+- Branch name starts with `fix/` or `chk-`.
+- Change touches fewer than 3 files in `react/components/` or `react/utils/`.
+- No changes to `manifest.json`, root components, or CI.
+
+For everything else, use the Full SDD flow (`sdd-full-bootstrap.md`).
+
+## Pipeline
+
+```
+/specification  → creates a lightweight spec.md (Business Context + Technical Contract)
+/implementing   → implements from the approved spec up to the PR
+```
+
+## Before starting
+
+1. Read `AGENTS.md` — verified commands, autonomy limits, sources of truth.
+2. Confirm the bug is reproducible and the fix scope is clear.
+3. Run `yarn install` from repo root.
+
+## Verified commands
+
+```bash
+yarn lint          # ESLint over js,jsx,ts,tsx
+yarn lint:ts       # tsc --noEmit
+yarn lint:locales  # intl-equalizer (i18n key parity)
+yarn test          # Jest on react/
+yarn test:coverage # Jest with coverage report
+```
+
+## Files that require human approval even on hotfix branches
+
+- `manifest.json` — version bump.
+- `react/PickupPointsModal.js` — public API surface.
+- `react/ModalState.js` — root state manager.
+- `.travis.yml`, `.github/**` — CI/CD.
+
+## Quality gates before opening PR
+
+- [ ] `yarn lint` passes (0 errors).
+- [ ] `yarn lint:ts` passes (0 type errors).
+- [ ] `yarn test` passes (all tests green).
+- [ ] Reproducing test added (failing before fix, green after).

.agents/commands/sdd-lite-bootstrap.md

@@ -0,0 +1,61 @@
+---
+name: pickup-points-modal-baseline
+description: Baseline rules every agent must follow when editing this repo.
+applyTo: "**/*"
+---
+
+# Baseline Rules — pickup-points-modal
+
+## Stack
+
+- **App:** `vtex.pickup-points-modal` — VTEX IO React component for checkout.
+- **Source:** `react/` (no `node/` builder). Legacy JS + TypeScript coexist.
+- **Test runner:** Jest via `vtex-test-tools` (`yarn test` from repo root).
+- **Linter:** ESLint with `eslint-config-vtex` (root) and `eslint-config-vtex-react` (`react/`).
+- **Formatter:** Prettier with `@vtex/prettier-config`.
+- **Type checker:** `tsc --noEmit -p react/tsconfig.json`.
+
+## Verified commands (always run from repo root)
+
+```bash
+yarn install          # install all dependencies first
+yarn lint             # ESLint — must pass before any PR
+yarn lint:ts          # TypeScript check — must pass before any PR
+yarn lint:locales     # i18n key parity check — must pass before any PR
+yarn test             # Jest test suite — must pass before any PR
+yarn test:coverage    # Jest with coverage
+yarn format           # Prettier auto-fix
+yarn build            # production build
+```
+
+## Autonomy limits
+
+**May modify freely:**
+- `react/components/`, `react/containers/`, `react/utils/`, `react/fetchers/`, `react/types/`
+- Tests: `react/**/__tests__/`, `react/**/*.test.{js,ts,tsx}`
+- Messages: `messages/` — add keys to ALL locale files in the same PR
+
+**Must ask for human approval:**
+- `manifest.json` (version, dependencies, builders)
+- `package.json` (dependencies, scripts, engines)
+- `.travis.yml`, `.github/**`, `.vtex/deployment.yaml` (CI/CD)
+- `react/PickupPointsModal.js` or `react/ModalState.js` (root/public API)
+- Any publish action: `vtex publish`, `npm publish`, `CHANGELOG.md` bump
+
+**Must never:**
+- Run `git push --force` on `main` or skip hooks with `--no-verify`
+- Commit secrets, `.env*` files, or Google Maps keys
+- Remove tests to unblock a build
+- Mock `orderForm` in integration tests — use `react/__mocks__/` fixtures
+
+## SDD flow
+
+- **Default:** Full SDD for all features (see `.agents/commands/sdd-full-bootstrap.md`)
+- **Lite-only:** hotfixes on `fix/*` or `chk-*` branches (see `.agents/commands/sdd-lite-bootstrap.md`)
+
+## Sources of truth (priority order)
+
+1. `.specify/memory/constitution.md` — binding principles
+2. `README.md` — public API and props
+3. `CONTRIBUTING.md` — PR flow and changelog rules
+4. `manifest.json` — published version and VTEX IO dependencies

.agents/rules/.gitkeep

@@ -0,0 +1,43 @@
+---
+name: pickup-points-modal-react
+description: Rules scoped to the React source in react/ — component conventions, testing, i18n, and public API gate.
+applyTo: "react/**/*"
+---
+
+# React Source Rules — pickup-points-modal
+
+## Component conventions
+
+- **Class components** are legacy — prefer functional components with hooks for new code.
+- **PropTypes** are required on all new components alongside TypeScript types (dual-declaration pattern already used in the codebase).
+- Container components live in `react/containers/`; pure UI in `react/components/`.
+- Side effects and I/O belong in `react/fetchers/` or `react/containers/`, never inside utility functions in `react/utils/`.
+- Utility functions must be pure (no I/O, no singletons). Name I/O functions explicitly: `fetchX`, `saveY`, or suffix with `Event` for telemetry (see `react/utils/metrics.js`).
+
+## Testing expectations
+
+- Test files live in `react/**/__tests__/` or next to source as `*.test.{js,ts,tsx}`.
+- Every behavioral change must be accompanied by at least one Jest test covering the new behavior.
+- Use `react/__mocks__/` fixtures for `orderForm` and VTEX IO module mocks — do not create new inline mocks for these.
+- Snapshot tests (`.snap`) are in `react/components/__tests__/__snapshots__/` — update them intentionally, never blindly.
+
+## Internationalization (non-negotiable)
+
+- Every user-facing string must use `react-intl` (`<FormattedMessage>` or `intl.formatMessage`).
+- New i18n keys must be added to **all** locale files in `messages/` in the same PR.
+- `messages/context.json` is the English master — new keys go here first.
+- Run `yarn lint:locales` before opening any PR that touches `messages/`.
+
+## Public API gate
+
+`react/PickupPointsModal.js` is the public contract consumed by production VTEX stores.
+
+- Any prop addition, removal, or shape change is **breaking** and requires a major version bump in `manifest.json`.
+- Changes to this file require human approval and an explicit `CHANGELOG.md` entry.
+- The Google Maps gated load in `react/containers/withGoogleMaps.js` must not be bypassed.
+
+## Performance rules
+
+- No unconditional network requests on initial render without cache or debounce.
+- No heavy library imports in the main bundle without justification in the PR description.
+- PRs that increase bundle size must explain the cost and loading strategy.

.agents/rules/00-baseline.md

@@ -31,6 +31,10 @@ yarn-error.log*
 package-lock.json
 src/
 
-# SpecKit feature directories (local development)
-/specs
+# SpecKit — commit spec.md; ignore ephemeral plan/tasks/analysis and local cache
+specs/**/plan.md
+specs/**/tasks.md
+specs/**/analysis.md
+.specify/cache/
+.specify/.tmp/
 .specify/feature.json