FlowLock Logo
FlowLock
Unit tests for UX AI-native CI-enforced

Ship UI that can't break.

FlowLock turns your PRD into a living contract. If a screen shows data nobody captured, or a flow dead-ends, the build fails. Agents & devs only ship UI that actually works.

Install (CLI) Shell
npx uxcg init my-app

If copy is blocked by your browser, a flowlock-install.txt download will start instead.

Guardrails Generate UI
Checks
    Form ↔ Card field traceability
    Three-click reachability
    Valid state transitions
    Details page for creatables
Outputs
    Mermaid ER & flow maps
    Screen inventory CSV
    Gherkin acceptance tests
    Gap Report & auto-fixes
Built for Everyone

Perfect for Every Team

Whether you're a product owner, developer, or AI builder, FlowLock adapts to your workflow

No Code

Non-technical

One click: Watch & Stream. See a plain-English todo list in Cloud.

Visual monitoring
Plain English
Zero setup
Dev Ready

Engineers

CI gates + exact patches. Guardrails that prevent rework.

CI/CD gates
Exact patches
Type safety
AI First

AI builders

Agents scaffold only when green. Less hallucination, more shipping.

Smart scaffolding
Validation first
Agent ready

Join thousands of teams building better products with FlowLock

PolyForge
Northwind
Nova
Atlas
Fathom
Surfaces

Use FlowLock wherever you work

CLI for power, IDE for guidance, Cloud for collaboration.

Spec-first CLI

Initialize guardrails, generate diagrams, and block bad commits. Works in any repo in minutes.

IDE Co-pilot

Cursor/Claude/VS Code integrate slash-commands so agents scaffold UI only once the contract is green.

Cloud Dashboard

Review Gap Reports, flows, and traceability with your team. Enforce policies via GitHub Actions.

Install (CLI) Shell
npx uxcg init my-app

If copy is blocked by your browser, a flowlock-install.txt download will start instead.

Why FlowLock

From pretty-but-useless to usable-by-default

Hard guardrails

Blocks merges if flows or fields don't line up. It's CI for UX.

Single source of truth

One compact spec ties role → JTBD → flow → screen → field. If it's not in the spec, it doesn't exist.

Agent-native

Your AI can't improvise; it reads the spec, passes validation, then generates UI that matches.

-60%
rework on frontends
faster usable MVPs
>95%
spec ↔ UI traceability
0
dead-end flows shipped
CORE GUARANTEES

Non-negotiable invariants

If they fail, the build (or the agent) is blocked. These guarantees ensure your UI works exactly as specified.

Honest Read

UI only uses fields that are captured, derived (with provenance), or from an approved source.

01

Reachability

Primary jobs are reachable from entry in ≤3 steps. No dead-ends/orphans.

02

Creatable ⇒ Viewable

Every creatable entity has a details view and a discoverable path.

03

State Machine Validity

CTAs respect allowed transitions and guards.

04

Empty / Loading / Error

Lists, forms, cards declare states with copy.

05

Role Boundaries

Screens & CTAs visible only to declared roles.

06

Spec Coverage

Every component maps back to the contract.

07
All guarantees enforced in CI/CD pipeline
AI

Let AI do the heavy lifting

From idea → PRD → contract → UI, with audits and simulations.

AI Generation

Transform ideas into working UI

Idea → PRD

Describe your idea in plain language. FlowLock asks smart follow‑ups and drafts a complete PRD with roles, JTBD, entities, and success metrics.

PRD → Contract

AI synthesizes a traceable UX contract (uxspec) with flows, screens, fields, and policies. No UI yet—just the truth.

Scaffold UI

Once green, orchestrates your AI agent to generate components that exactly match the contract.

Agent Integration Rules

How FlowLock ensures AI agents generate correct UI

Spec-first gates

Scaffold only when the contract is green.

Constrained context

Agents read the contract + fixtures, not your whole repo.

Schema-validated plans

Non-conforming output is rejected and re-asked.

Deterministic runs

Pinned model/prompt/seed; cached by spec digest.

LIVE LOCAL SYNC

See red/green as you type

Stream audits, artifacts, and todos to the Cloud from your laptop. No commits needed.

Terminal
Ready
$npx uxcg cloud login
$npx uxcg link
$npx uxcg watch --cloud
Stream Payload
JSON
{
  "run": {
    "origin": "local",
    "specDigest": "sha256:7f3b9c2a...",
    "timestamp": "2025-08-14T19:26:59.606Z",
    "status": "running",
    "checks": [
      {
        "id": "honest_reads",
        "status": "pass",
        "message": "All reads are honest",
        "ref": {
          "screen": "workout_detail",
          "entity": "Workout",
          "field": "intensity"
        }
      },
      {
        "id": "reachability",
        "status": "pass",
        "message": "3-click rule satisfied"
      },
      {
        "id": "state_validity",
        "status": "pass",
        "message": "All state transitions valid"
      }
    ],
    "artifacts": [
      {"type": "svg", "name": "er.svg"},
      {"type": "csv", "name": "screens.csv"}
    ],
    "metrics": {
      "coverage": 100%,
      "reachability": "3-click",
      "deadEnds": 0,
      "tests": {
        "passed": 0,
        "failed": 0,
        "total": 0
      }
    }
  }
}
100%
Coverage
0
Pass
0
Dead Ends
OPEN CORE

Free gets you the open schema and baseline checks locally. Pro unlocks Cloud live runs, IDE quick-fixes, autofix, and advanced checks. Enterprise adds SSO/SAML, private prompts/models, custom checks, on-prem relay, audit logs, and SLAs.

Pricing

Start free. Scale with your team.

Starter

$0/month
    CLI + validation
    Mermaid & CSV outputs
    Husky pre-commit
    Community support
POPULAR

Pro

$19/month
    Cloud dashboard
    Gap Report auto-fix
    IDE extension
    Policies & templates

Enterprise

Custom/month
    SSO/SAML, SOC2
    Custom checks
    Private model prompts
    Premium support
FAQ

Quick answers

What exactly is the "contract"?

A tiny JSON spec that declares roles, jobs-to-be-done, flows, screens, fields and state rules. The UI must match it, or validation fails.

Will it work with any stack?

Yes. FlowLock is stack-agnostic. It generates docs and tests; your UI stack (Next.js, RN, desktop) consumes the spec.

How do AI agents use it?

IDE slash-commands tell agents to fill the spec from your PRD, fix validation errors, then scaffold UI. No spec, no code.

Can it auto-fix things?

Yes—safe auto-fixes remove dishonest reads and suggest exact edits. The Cloud dashboard lets you apply or revert with one click.