@12ui/design 0.2.71 → 0.2.73

package/README.md

@@ -18,8 +18,9 @@ curl -fsSL https://12ui.com/install.sh | sh
 
 Both paths pin the exact CLI version, install `12ui-design` into every detected
 Codex, Claude Code, Grok CLI, Cursor CLI, Antigravity, and GitHub Copilot CLI
-installation without requiring an API account. Run `12ui auth login` when
-you need hosted features. Explicit authentication setup creates a user-owned credential with
+installation without requiring an API account. Ordinary corpus search and downloads
+also work without an account. Run `12ui auth login` for authenticated hosted
+generation or explicit hedge search. Explicit authentication setup creates a user-owned credential with
 `design.convert` and `design.corpus.retrieve`, is verified before use, and is
 stored mode-0600 at `$XDG_CONFIG_HOME/12ui/credentials.json` or
 `~/.config/12ui/credentials.json`. When those private roots are unusable and
@@ -78,37 +79,130 @@ unless `--force` is explicit.
 ## One visual interface skill
 
 `12ui-design` is the single design entrypoint. Every client receives the same
-`skills/12ui-design` bytes. The CLI owns local and hosted engine selection.
-
-The shared skill uses the 12ui API for corpus references, draft candidates, and
-branch image generation, then uses the same CLI for execution:
+`skills/12ui-design` bytes. New work inside a capable coding session uses the
+persistent local workflow: prepare a request, claim its execution, use the
+session's native tools, register the actual result, then continue from those
+saved artifacts. The local CLI and MCP share the same operation service.
 
 ```sh
-12ui capabilities
-12ui convert approved.png --output html --engine codex --out-dir ./design-run
-12ui improve http://localhost:3000 --target approved.png --repo . --apply
-12ui export ./design-run --output react --out-dir ./react-page
-12ui next ./design-run
-12ui resume ./design-run
+12ui workflow import /absolute/path/reference.png --workspace ./design-work --role reference
+12ui workflow prepare ./request.json --workspace ./design-work --key homepage-direction-a
+12ui workflow execute <operation-id> --workspace ./design-work --providers session --session-capabilities image
+12ui workflow register <operation-id> --workspace ./design-work --attempt <handoff-attempt-number> --result ./result.json
+12ui workflow status <operation-id> --workspace ./design-work
 ```
 
-`convert --engine auto|codex|api` defaults to auto. Before a new local run, image
-execution defaults to external when `OPENAI_API_KEY` is available, otherwise native
-through Codex account access. Explicit `--image-backend` choices and saved runs
-keep their backend; external requires the separate key before inference starts.
-Native does not imply zero cost or a known image model.
-The CLI owns runtime setup; the skill contains workflow guidance.
-
-`improve --apply` captures the URL and edits the actual repository. Without a
-target it drafts candidates, stops for an explicit choice, then applies that
-choice locally. Without `--apply`, the existing hosted implementation-kit behavior
+The import source is absolute in this example. Relative imported file paths are
+resolved inside the workspace: `./reference.png` would mean
+`./design-work/reference.png`. Request/result JSON command arguments are read
+relative to the shell's current directory; file paths inside those results and
+recipe image paths are workspace-relative unless absolute.
+
+`request.json` names a capability, prompt, imported input artifacts and output
+contract. The execute result is a handoff when the session is selected; it is not
+a generated image. Run the native tool once and register its real files or JSON
+value. Preparation, imports and registration do not need a 12ui account. Read
+[the session reference](skills/12ui-design/session.md) for the complete contract,
+provider policy, MCP equivalents and interruption behavior.
+
+The skill's `scene.md` guide rebuilds a design image as a live Three.js scene
+with the local `12ui scene` tools (`12ui scene --help`): camera solve, placement,
+a starter harness with a bundled three.js, capture with the managed Chromium,
+and review sheets. It needs no account and makes no network request.
+
+The explicitly selected legacy `improve --apply` route captures the URL and
+edits the actual repository. Without a target it drafts candidates, stops for
+an explicit choice, then applies that choice locally. Without `--apply`, the existing hosted implementation-kit behavior
 remains. Inspect the real application after editing.
 
-Local HTML does not produce LayerDoc. Native design formats and complete hosted
-branch prototype assembly remain explicit API workflows. Local React export is
-whole-page JSX, not a functional application. A local failure never silently
-purchases a hosted conversion. These commands describe the unpublished candidate;
-check installed capabilities rather than assuming the public latest includes them.
+Provider routing considers the declared host session first, then eligible Codex
+and Claude subscription CLI capabilities, then explicitly authorized OpenAI API
+and 12ui providers. Codex text/code subprocess execution requires
+`--trust-codex-config`: explicit trust in the existing user's CLI configuration,
+including tools and hooks beyond the command sandbox. This does not authorize
+paid fallback and does not apply to the current session's tools. Claude requires
+supported safe mode, edits code with a fixed file-tool set without shell tests,
+and currently cannot attach images to text requests. Run checks in the parent
+session. Image capability is never inferred from a text CLI's presence.
+Session capabilities must be explicitly
+declared from available tools. Key presence alone does not authorize paid work;
+`--allow-paid` is required for a funded route. An ambiguous dispatched operation
+requires reconciliation and cannot silently replay on another provider.
+An accepted job with a failed download, or a completed response with malformed
+output, stays in reconciliation under the same operation and attempt. Recover
+and register the original output and dependencies; do not regenerate it.
+Refusals and permission denials remain terminal stops.
+
+OpenAI requires an explicit model through request `parameters.model`,
+`OPENAI_MODEL` for text/generated HTML, or `OPENAI_IMAGE_MODEL` for images.
+`OPENAI_API_KEY` and `TWELVE_UI_API_KEY` make separately funded routes discoverable;
+they never belong in request or result JSON. Native execution removes provider-key
+overrides from the child environment and uses the user's normal CLI configuration.
+
+The recipes `draft`, `branch`, `edit`, `redesign`, `labels`, `review`, `convert` and
+`implement` build requests for this shared ledger. They do not imply that every
+legacy hosted pipeline or native design export has a local implementation.
+After registering a recipe plan, `12ui workflow continue <operation-id> --workspace <directory>`
+prepares eligible child operations without inference; execute each
+returned ready ID explicitly, then continue the same plan to unlock dependencies.
+`workflow fail` records actual refusal, no-output or ambiguous-outcome evidence;
+it does not turn an uncertain dispatch into permission for another call.
+Both registration and failure must name the handoff's attempt number so delayed
+results cannot settle a later attempt.
+For project implementation, the service captures a baseline before execution.
+Register the normal report and any real additional receipts; registration derives
+verified changed-file artifacts and project evidence from the actual selected
+project. A provider receipt or claimed no-op cannot complete implementation:
+no changed files produces `project_no_changes`. File changes and caller-reported
+browser/test evidence remain separate facts.
+The ledger records returned artifacts; independent browser/image inspection
+still establishes fidelity, ownership and behavior. Local execution consumes
+user model allowance or authorized API budget and local hardware, rather than
+making model execution free.
+
+`workflow capture <http-or-https-url> --workspace <directory>` uses local Chromium
+and a fresh unauthenticated browser to retain screenshot, DOM and redirect evidence.
+Capture an authenticated screen with the session browser and import it instead.
+`workflow review <spec.json> --workspace <directory> --key <key>` prepares an
+image-grounded review; it does not validate runtime behavior or trigger repairs.
+`workflow export <operation-id> --workspace <directory> --destination <new-directory>`
+materializes completed outputs without inference or overwriting differing files.
+Register HTML plus all its assets with logical `relativePath` mappings, or use the
+SDK's `collectBundleFiles` on an isolated generated-output directory, so references
+survive custody and export. This does not package an existing project from receipts.
+
+`12ui workflow layerdoc <operation-id> --workspace <directory>` reads a completed
+native conversion without a hosted request. The SDK exposes
+`loadWorkflowLayerDoc({workspace, operationId})` and
+`loadLayerDocBundle({directory})` for a relocated export. Both return canonical
+`document`, absolute document/manifest paths and an `assets` map from artifact ID
+to verified local path, relative path, SHA-256 and media type; raster dimensions
+are checked against the document.
+
+Native registration requires `document.layerdoc.json`, `layerdoc-assets.json`
+and mapped raster files. The canonical document has role `layerdoc`; the sidecar
+has role `layerdoc-assets` and schema `12ui.layerdoc-assets.v1`, with
+`assets: {artifactId: {path, sha256, mediaType}}`. Every file needs its portable
+`relativePath`; referenced rasters use role `asset`. This local reader does not
+provide an offline editor. Standard hosted `12ui convert <layerdoc.json>` does
+not read the sidecar: it requires hydrated HTTP asset references. Uploading and
+hydrating local assets remains a separate API integration.
+
+### Existing conversion and hosted commands
+
+The following APIs and legacy CLI commands remain available when explicitly
+selected. They have their own saved-run formats; their automatic engine/backend
+rules are separate from the new workflow provider policy. `convert --engine auto`
+can select hosted API before dispatch when local Codex is unavailable. Existing
+local conversion selects external images when `OPENAI_API_KEY` is set and native
+Codex images otherwise. Use an explicit engine/backend when that legacy boundary
+is intended; a key is not authorization to choose it on the user's behalf.
+
+Local HTML does not produce LayerDoc. Native design formats and hosted branch
+assembly remain dedicated conversion workflows. React export is whole-page JSX,
+not a functional application. Preserve existing legacy run directories and their
+recorded engine for recovery; importing an output into a workflow workspace does
+not migrate an in-flight legacy dispatch.
 
 The four stage skills that used to carry these sections separately —
 `design-search`, `design-draft`, `design-branch`, and `design-convert` — were
@@ -116,7 +210,7 @@ retired on 2026-08-16 after a trial measured them buying no routing precision
 over the one broadened description. `skill install` removes any copy still
 present in an agent home.
 
-Corpus-conditioned image generation explores visual directions. The selected
+For an explicitly authorized legacy hosted run, corpus-conditioned image generation explores visual directions. The selected
 image then guides editable implementation, with browser inspection against the
 approved target and focused correction of observed mismatches.
 
@@ -165,9 +259,9 @@ failed slots are never posted again. `12ui next <run-dir> --wait` repairs only
 never-started slots, then polls and downloads. Successful PNGs are digest-checked and written atomically under
 `<run-dir>/candidates/`, with terminal evidence in `draft.complete.json`.
 
-The retired local `image` commands and provider preflight are not part of the
-CLI. Draft never inspects Codex authentication, `OPENAI_API_KEY`, project
-`.env` files, or any other caller-side image-provider credential.
+The legacy `draft` command never inspects Codex authentication, `OPENAI_API_KEY`,
+project `.env` files, or another caller-side image-provider credential. This
+boundary describes legacy hosted draft, not the new `workflow draft` recipe.
 
 `convert <conversion-id>` downloads one successful base LayerDoc once and
 dispatches the chosen formats concurrently. It creates the destination
@@ -180,16 +274,17 @@ journal/receipt contracts.
 
 ## Design Corpus inspiration
 
-`TwelveUiCorpusClient` uses an API key with the `design.corpus.retrieve` scope.
-The API-key scope name is retained for compatibility even though `/inspire` is
-the single SDK query surface.
+`TwelveUiCorpusClient` supports public status, inspiration and logo searches,
+reference metadata, and image downloads without a 12ui account or credits.
+Retrieval is free for authenticated callers too; abuse and service-budget limits
+still apply. Supplied credentials retain the `design.corpus.retrieve` scope and
+are never silently discarded after an authentication failure.
 
 ```ts
 import { TwelveUiCorpusClient } from '@12ui/design';
 
 const corpus = new TwelveUiCorpusClient({
   origin: process.env.TWELVE_UI_ORIGIN ?? 'https://12ui.com',
-  apiKey: process.env.TWELVE_UI_API_KEY!,
 });
 
 const status = await corpus.status();
@@ -206,12 +301,12 @@ const metadata = await corpus.reference(first.id);
 const image = await corpus.download(first.id, 'ref-hd');
 ```
 
-Every paid inspiration request requires a stable idempotency key. See
+Every inspiration request requires a stable idempotency key. See
 [`docs/corpus-v1.openapi.yaml`](https://github.com/just-every/12ui-plugin/blob/main/docs/corpus-v1.openapi.yaml).
 `download` accepts `thumb`, `thumb-hd`, `ref`, and `ref-hd`; the legacy
 `thumb`/`ref` sizes remain supported.
 
-For agent workflows that need four fresh, budget-metered inspiration images,
+For agent workflows that need four reference images,
 the CLI calls `/api/v1/corpus/inspire`, downloads the full reference images in
 parallel, verifies each WebP, and writes a content-hashed manifest:
 
@@ -223,12 +318,15 @@ node "$TWELVE_UI_REPO/packages/12ui/dist/cli.js" corpus inspire \
   --out-dir ./references
 ```
 
-`hedge` is the CLI default: it spreads the first references across distinct
-directions while holding the query, and its returned order is authoritative.
-`direct` stays close to the literal query, `balanced` weighs relevance,
+`balanced` is the standalone CLI, SDK and MCP default, with or without
+credentials. `direct` stays close to the literal query, `balanced` weighs relevance,
 quality, and variety evenly, and `adventurer` follows the query's most
 distinctive directions toward less expected references. The modes are locked
-server-side; callers cannot tune their internal ranking weights.
+server-side; callers cannot tune their internal ranking weights. Anonymous
+requests accept up to 24 references and an 8 KB query. Explicit hedge requires
+an account for hosted planning; it remains free to the customer but incurs
+service model costs. For account-free planning, develop directions locally and
+retrieve them through balanced, direct or adventurer.
 
 For a redesign, add `--reference-image <png|jpeg|webp>`. The CLI hashes the
 private source into stable idempotency and local evidence, while Design Corpus
@@ -242,7 +340,7 @@ successful run also contains `manifest.json`, `inspire-evidence.json` with the
 exact upstream response, four numbered reference files, and a durable digest
 receipt for each image under `.reference-receipts/`. If the HTTP result is
 ambiguous or one or more image downloads fail, finish the same allocation
-without a second paid embedding:
+while preserving its retrieval identity:
 
 ```bash
 node "$TWELVE_UI_REPO/packages/12ui/dist/cli.js" corpus resume \
@@ -256,9 +354,12 @@ dispatches a second embedding for that identity. Reusing a key with a different
 validated request returns `409 idempotency_conflict`. A reference already on
 disk is accepted only when its bytes match its exclusive digest receipt.
 
-The CLI and SDK deliberately expose only the three locked inspiration modes.
-Free-form ranking weights, random seeds, and corpus filters are not part of the
-public inspiration contract.
+The three account-free modes are direct, balanced and adventurer; hedge is an
+explicit account-only mode. Public requests do not accept random seeds, browse
+grouping IDs, free-form ranking weights or corpus filters. HTTP 429 responses
+include Retry-After guidance: wait, then resume the same attempt instead of
+starting sign-in or buying credits. `12ui corpus status` reads the release
+contract without starting retrieval.
 
 ## Multi-page packages
 
@@ -345,9 +446,30 @@ ways: pass `--prototype` to `branch execute`, or run `12ui prototype <run-dir>`
 afterward. The post-export stage splits application states, canonicalizes the
 shared shell, derives navigation from `branch.plan.json`, preserves real
 content, and creates holding pages when the plan names a route that was not
-exported. It makes one cheap product-provider call per exported screen using
-the strict `navigate | dropdown | modal | none` schema; deterministic links,
-forms, and plan edges take precedence. The output replaces
+exported. Standalone `12ui prototype <run-dir>` defaults to `--labels none`, using
+deterministic links, forms and plan edges without a 12ui account. Explicitly
+authorized `--labels 12ui` adds one hosted interaction-label call per exported
+screen using the strict `navigate | dropdown | modal | none` schema.
+
+`12ui prototype <run-dir> --labels workflow --workspace <directory>` inventories
+the local HTML and prepares stable per-screen label operations, returning
+`awaiting_labels` without inference or hosted authentication. Execute the returned
+prepared IDs through `workflow execute`, register real outputs with the exact
+attempt number, then repeat the same prototype command. Dispatched/reconciling
+IDs need recovery, not execution. Completed results are checked against the exact
+DOM candidates, known destinations and source HTML/plan/completion before build.
+Generic image `workflow labels` annotations cannot be substituted. Duplicate IDs,
+unknown destinations and contradictory action fields are rejected before immutable
+workflow success. Native local pages permit only navigation to real pages or none.
+Legacy branch resume refuses to replace this pause with hosted labeling.
+
+The manifest preserves source custody, operation IDs and actual provider/funding/
+usage facts. `labels.costMicros` counts new hosted prototype-label calls only;
+workflow model execution still consumes the chosen plan/API budget. Unchanged
+source/candidate content reuses operation IDs, including after branch/workspace
+relocation. Linked remote assets are not part of this source snapshot.
+
+The output replaces
 `<run-dir>/branch/prototype/` only after exported HTML, a complete or explicitly
 accepted partial plan, semantic viewport ids, and the hard runtime gates pass.
 Load/console failures, duplicate ids, broken targets or interactions, malformed
@@ -746,6 +868,11 @@ Progress and preview rules:
 
 The server exposes the same durable operations used by the CLI and SDK:
 
+- `design.workflow.prepare`, `execute`, `register`, `continue`, `fail`, `status`,
+  `import`, `capabilities`, `capture`, `export` and `layerdoc` use the persistent local service.
+  Preparation accepts either a generic request or a recipe/input pair. Local
+  operations do not trigger 12ui onboarding; paid execution needs explicit policy.
+  Session registration and failure include the returned `attemptNumber`.
 - `design.convert` creates a conversion, waits for it, and materializes the
   result and verified artifact manifest. Pass `imagePath` for PNG/JPEG/WebP or
   `layerdocPath` for public LayerDoc v2 JSON. Pass the exact `profile` for
@@ -753,17 +880,83 @@ The server exposes the same durable operations used by the CLI and SDK:
 - `design.convert.status` reads an existing conversion's durable progress,
   previews, terminal result, or error without creating or retrying work.
 - `design.corpus.status` reads corpus release/idempotency capability without
-  running retrieval.
-- `design.corpus.inspire` runs one metered corpus retrieval and materializes its
-  attempt evidence, manifest, and images in a new `outDir`. A caller must get
-  user authorization before invoking it. `design.corpus.resume` continues an
-  incomplete attempt with its recorded key instead of buying replacement work.
+  authentication or running retrieval.
+- `design.corpus.inspire` runs free corpus retrieval and materializes its attempt
+  evidence, manifest, and images in a new `outDir`. Balanced is the default;
+  anonymous requests accept up to 24 references. Explicit hedge requires an
+  account. `design.corpus.resume` continues an incomplete attempt with its
+  recorded key. These tools never trigger automatic onboarding.
 - `design.draft.status` and `design.branch.status` read durable workflow state.
   Branch status attempts a live refresh by default, then falls back to the
   local snapshot if the service is unavailable.
 
-`design.convert` and `design.corpus.inspire` are the only MCP tools above that
-create metered work. Set an `idempotencyKey` for any ambiguous conversion
+The server also starts without 12ui credentials: the local workflow tools, the corpus tools and
+the design workspace tools below that only read and record work need none, and the hosted tools
+ask to sign in when called.
+
+The Design workspace (`ui://12ui/slate.html`) grows from one finished draft run into rounds of
+options, edits with lineage, inspiration, and a selection of any version. Nothing in it costs
+money and nothing in it shows a price: it draws with your own Codex on this Mac (your ChatGPT
+plan, never an API key) and searches the free reference corpus. Twelve tools:
+
+- `design.slate.show` renders the workspace in hosts that render an interactive card, such as
+  Codex desktop, and returns the options, versions, file paths and the continuation command as
+  text elsewhere. `design.slate.data` returns the same facts without a card, so an agent can
+  confirm a selection or a hand-off (`pick.versionId`, `pick.sha256`, and the file at
+  `pick.imagePath`, a durable copy that survives the OS sweeping the temp folder; `pick.imagePath`
+  is null, with `pick.fileState` `missing` or `changed` and `pick.intact` false, when that copy is
+  gone or no longer matches, and no file that is not there is ever named); `design.slate.open` is
+  the sidebar entry for the most recent active workspace. These three are model-visible and never
+  start work. `show` and `open` are titled "Design workspace".
+- App-only tools, which the host hides from the model: `design.slate.image` and
+  `design.slate.reference` (pictures for the card, the second from the free corpus and cached in
+  the workspace), `design.slate.inspire` (a free balanced-mode reference search, at most 24
+  results, no account; an identical search is answered from the record) and
+  `design.slate.inspiration` (the selected references, at most eight, that condition the next
+  Design round), `design.slate.pick` (Select, with an optional reason, and a durable copy of the
+  image), `design.slate.handoff` (records a Branch or Convert request) and `design.slate.status`
+  (a free read of the workspace, its runners' liveness, and whether this Mac can draw images).
+- `design.slate.run` and `design.slate.resume` are the only tools that start work, and only from
+  a click in the screen. Design (new options, or more like the shown version) and Edit (an
+  instruction plus an optional scribble, sent as the version and an annotated copy of it) write
+  an approval record outside the run directory, spawn a detached `12ui slate-runner` process, and
+  return at once. The runner owns the work to a terminal state, so it does not depend on how long
+  the host keeps this server alive: it runs `codex exec`'s native image call, one call per option,
+  in an isolated Codex home that links only your `auth.json`. Every call has a stable id
+  (`slate-<opId>-<slot>`), so Resume replays the same work and never draws a finished option twice.
+  When Codex is not ready on this Mac (no CLI, no ChatGPT login, no image model) the dialogs say why
+  and stay disabled; the workspace never buys an alternative. Set `TWELVE_UI_CODEX_BIN` to choose
+  the Codex executable.
+
+A hand-off records the request durably (Branch: your words, verbatim; Convert: the format and its
+options) with a verified copy of the image, and sends the agent a short message. The agent reads
+the record with `design.slate.data`, carries it out through the free local routes, and asks you
+before anything that uses your 12ui credits (a conversion to LayerDoc, fixed HTML, SVG, PDF, PSD and
+the other service formats is always that). `12ui slate-runner` is an internal command and is not
+a public surface.
+
+**Without the MCP tools: the workspace as a web page.** Where the `design.slate.*` tools are not
+available (Claude Code without the plugin, Codex without the plugin, any agent with a shell),
+`12ui workspace open [<run-dir>] [--latest] [--wait] [--port <n>] [--no-open]` serves the same
+workspace (the same screen, built with target `browser`) on `127.0.0.1` only, behind a random
+token in the address it prints as one JSON line (`{"workspace":"ready","url":...}`), and opens the
+system browser unless `--no-open` (`BROWSER` names another program). A small host shim in the page stands in for the MCP Apps host:
+the screen's tool calls go to the same handlers `12ui mcp` uses, confined to that one run, and
+Design and Edit run on this Mac through the same detached runner and local Codex, with no agent
+needed to generate. With `--wait` the command blocks until the user Selects, or sends a Branch or
+Convert request, then prints one JSON line (`decision`, `runDir`, `pick`, `handoff`, `messages`,
+`text` and `view`, the facts `design.slate.data` returns) and exits 0; without it, it serves until
+interrupted and prints one such line per decision. The 12ui-design skill sends an agent here
+when `design.slate.*` is unavailable. Under `codex exec`'s sandbox, `read-only` and `workspace-write`
+refuse the server's port (`listen EPERM: operation not permitted 127.0.0.1`); `workspace-write` with
+network access (`-c sandbox_workspace_write.network_access=true`) and the 12ui state folder added
+(`--add-dir ~/.local/share/12ui`, which the workspace writes to) runs everything, Design and Edit
+included; full access needs none of it.
+
+Among these tools, only legacy `design.convert` creates metered work; corpus retrieval, including the
+workspace's own search, is free and subject to abuse limits.
+`design.workflow.execute` can use a funded provider only with its explicit authorization policy.
+Set an `idempotencyKey` for any ambiguous conversion
 create that may need to be repeated; otherwise the conversion client generates
 a new UUID. Corpus retrieval always persists its key before the request.
 

package/SKILL.md

@@ -7,36 +7,31 @@ description: "Runs the complete 12UI visual-interface workflow inside Open
 
 # 12UI for Open Design
 
-`skills/12ui-design/SKILL.md` is the whole contract: it covers reference search,
-hosted candidate generation, branching an approved direction across a page,
-site, or multi-state app, and converting a finished image into LayerDoc and
-production exports. The four stage skills it replaced were retired on
-2026-08-16.
-
-For a normal interface request, follow `skills/12ui-design/SKILL.md` end to end:
-create four corpus-conditioned candidates, present their actual images through
-Open Design's `twelve-ui-direction` choice surface, record the selected slot and
-rationale in the Open Design choice, then convert or branch exactly that image.
-Do not substitute Open Design's generic direction cards for the generated 12UI
-candidates.
-
-Before the first command that can consume 12UI quota, request the declared
-`twelve-ui-spend-approval` confirmation surface with a concise description of
-the work being authorized. An approval applies only to the current run. Do not
-dispatch paid work when it is absent, rejected, or times out.
-
-Use `12ui` when it is available on `PATH`. Otherwise invoke the pinned CLI that
-the plugin's `open-design.json` MCP entry uses:
-
-    npx -y @12ui/design@0.2.71 <command> ...
-
-Run `12ui auth status --json` (or its pinned `npx` equivalent) before the paid
-preflight. A desktop user can authenticate with `12ui auth login`; a headless
-run supplies `TWELVE_UI_API_KEY`. Never put a credential into project files,
-the plugin manifest, command output, or generated artifacts.
-
-Treat the generated HTML or project export as the implementation, materialize
-it in the Open Design project workspace, and publish it as a live artifact for
-preview and critique. Preserve the 12UI run directory, chosen-image rationale,
-conversion IDs, and export manifests with the project so reruns can resume
-settled work instead of buying it again.
+Follow `skills/12ui-design/SKILL.md` and its `session.md` reference. They carry the
+same persistent local workflow used by the other clients: prepare an operation,
+execute through an available session capability, register actual output, then
+continue from saved artifacts. Keep the workspace, operation IDs, selected-image
+rationale and result manifests with the project.
+
+Explore useful distinct directions and show their actual images through Open
+Design's `twelve-ui-direction` choice surface when the user needs to choose.
+Record the selected artifact and rationale, then implement or branch that image.
+Do not substitute generic direction cards for requested design imagery.
+
+Preparation and local registration do not require 12ui authentication or spend
+approval. Before dispatching a separately funded 12ui route, use Open Design's
+`twelve-ui-spend-approval` surface for the concrete work unless the current run
+already carries that authorization. Do not infer funding authorization from a
+configured key. An absent, rejected or timed-out approval does not authorize
+paid work. OpenAI API funding also requires the user's explicit authorization.
+
+Use `12ui` from PATH. Otherwise use the pinned CLI from `open-design.json`:
+
+    npx -y @12ui/design@0.2.73 <command> ...
+
+A session handoff is a claim awaiting the native tool result, not completion.
+Do not repeat an uncertain dispatch or switch providers to work around it.
+Register the actual output and inspect the saved status. Use the returned code
+and assets in the project, then verify the real browser before publishing a
+preview under the user's existing authorization. Never put credentials into
+project files, plugin manifests, tool output or generated artifacts.

package/dist/cli-arguments.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-arguments.d.ts","sourceRoot":"","sources":["../src/cli-arguments.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;AAKhE,eAAO,MAAM,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAsBhD,CAAC;AAEH,eAAO,MAAM,iBAAiB,GAC5B,MAAM,MAAM,EAAE,KACb;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAA;CA6BtC,CAAC;AAEF,eAAO,MAAM,UAAU,GAAI,OAAO,QAAQ,EAAE,MAAM,MAAM,KAAG,MAAM,GAAG,SAGnE,CAAC;AAEF,0EAA0E;AAC1E,eAAO,MAAM,WAAW,GAAI,OAAO,QAAQ,EAAE,MAAM,MAAM,KAAG,MAAM,EAGjE,CAAC;AAEF,eAAO,MAAM,WAAW,GAAI,OAAO,QAAQ,EAAE,MAAM,MAAM,KAAG,OAA+B,CAAC"}
+{"version":3,"file":"cli-arguments.d.ts","sourceRoot":"","sources":["../src/cli-arguments.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;AAKhE,eAAO,MAAM,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAyBhD,CAAC;AAEH,eAAO,MAAM,iBAAiB,GAC5B,MAAM,MAAM,EAAE,KACb;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAA;CA6BtC,CAAC;AAEF,eAAO,MAAM,UAAU,GAAI,OAAO,QAAQ,EAAE,MAAM,MAAM,KAAG,MAAM,GAAG,SAGnE,CAAC;AAEF,0EAA0E;AAC1E,eAAO,MAAM,WAAW,GAAI,OAAO,QAAQ,EAAE,MAAM,MAAM,KAAG,MAAM,EAGjE,CAAC;AAEF,eAAO,MAAM,WAAW,GAAI,OAAO,QAAQ,EAAE,MAAM,MAAM,KAAG,OAA+B,CAAC"}

package/dist/cli-arguments.js

@@ -12,6 +12,8 @@ export const CLI_BOOLEAN_FLAGS = new Set([
     'full-page',
     'help',
     'json',
+    'latest',
+    'no-open',
     'quiet',
     'prototype',
     'polish',
@@ -21,6 +23,7 @@ export const CLI_BOOLEAN_FLAGS = new Set([
     'resume',
     'skip-auth',
     'template',
+    'trust-codex-config',
     'version',
     'wait',
 ]);

package/dist/cli-arguments.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-arguments.js","sourceRoot":"","sources":["../src/cli-arguments.ts"],"names":[],"mappings":"AAEA,4EAA4E;AAC5E,+EAA+E;AAC/E,6EAA6E;AAC7E,MAAM,CAAC,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC;IAC5D,KAAK;IACL,OAAO;IACP,gBAAgB;IAChB,QAAQ;IACR,SAAS;IACT,OAAO;IACP,OAAO;IACP,WAAW;IACX,MAAM;IACN,MAAM;IACN,OAAO;IACP,WAAW;IACX,QAAQ;IACR,qBAAqB;IACrB,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,UAAU;IACV,SAAS;IACT,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,IAAc,EAC0B,EAAE;IAC1C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,IAAI,KAAK;gBAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACjD,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YACnB,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAAC;QAClF,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YAC3E,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,GAAG;gBACZ,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpF,IAAI;aACL,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAe,EAAE,IAAY,EAAsB,EAAE;IAC9E,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7F,CAAC,CAAC;AAEF,0EAA0E;AAC1E,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAe,EAAE,IAAY,EAAY,EAAE;IACrE,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtF,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAe,EAAE,IAAY,EAAW,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC"}
+{"version":3,"file":"cli-arguments.js","sourceRoot":"","sources":["../src/cli-arguments.ts"],"names":[],"mappings":"AAEA,4EAA4E;AAC5E,+EAA+E;AAC/E,6EAA6E;AAC7E,MAAM,CAAC,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC;IAC5D,KAAK;IACL,OAAO;IACP,gBAAgB;IAChB,QAAQ;IACR,SAAS;IACT,OAAO;IACP,OAAO;IACP,WAAW;IACX,MAAM;IACN,MAAM;IACN,QAAQ;IACR,SAAS;IACT,OAAO;IACP,WAAW;IACX,QAAQ;IACR,qBAAqB;IACrB,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,UAAU;IACV,oBAAoB;IACpB,SAAS;IACT,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,IAAc,EAC0B,EAAE;IAC1C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,IAAI,KAAK;gBAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACjD,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YACnB,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,KAAK,IAAI,mBAAmB,CAAC,CAAC;QAClF,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YAC3E,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,GAAG;gBACZ,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpF,IAAI;aACL,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAe,EAAE,IAAY,EAAsB,EAAE;IAC9E,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7F,CAAC,CAAC;AAEF,0EAA0E;AAC1E,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAe,EAAE,IAAY,EAAY,EAAE;IACrE,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtF,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAe,EAAE,IAAY,EAAW,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC"}

package/dist/cli-branch-command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-branch-command.d.ts","sourceRoot":"","sources":["../src/cli-branch-command.ts"],"names":[],"mappings":"AAIA,OAAO,EAA2B,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAK5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAqB,MAAM,oBAAoB,CAAC;AAK7E,OAAO,EAOL,KAAK,gBAAgB,EACtB,MAAM,wBAAwB,CAAC;AAahC,OAAO,EAAE,+BAA+B,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAM3E,OAAO,EAA8B,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAMzF,eAAO,MAAM,mCAAmC,yBAAyB,CAAC;AAE1E,eAAO,MAAM,4BAA4B,GAAI,WAAW,MAAM,KAAG,MAGhE,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,GAAI,QAAQ,MAAM,KAAG,MAAM,GAAG,IAOnE,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,GAAU,MAAM;IACjD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,KAAG,OAAO,CAAC,uBAAuB,CAuBlC,CAAC;AAoGF;uEACuE;AACvE,eAAO,MAAM,sBAAsB,GACjC,YAAY,IAAI,CAAC,gBAAgB,EAAE,OAAO,GAAG,OAAO,CAAC,KACpD,MAAM,EAaN,CAAC;AAEJ,eAAO,MAAM,gBAAgB,GAC3B,QAAQ,MAAM,GAAG,SAAS,EAC1B,OAAO,QAAQ,EACf,eAAc;IACZ,UAAU,CAAC,EAAE,OAAO,oBAAoB,CAAC;IACzC,kBAAkB,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,KAAK,oBAAoB,CAAC;IAC/F,mBAAmB,CAAC,EAAE,CACpB,MAAM,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,KAC5C,+BAA+B,CAAC;IACrC,0BAA0B,CAAC,EAAE,CAC3B,MAAM,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,KAC5C,4BAA4B,CAAC;IAClC,YAAY,CAAC,EAAE,OAAO,oBAAoB,CAAC;IAC3C,8CAA8C;IAC9C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iEAAiE;IACjE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1C,kDAAkD;IAClD,OAAO,CAAC,EAAE,eAAe,CAAC;CACtB,KACL,OAAO,CAAC,IAAI,CAscd,CAAC"}
+{"version":3,"file":"cli-branch-command.d.ts","sourceRoot":"","sources":["../src/cli-branch-command.ts"],"names":[],"mappings":"AAIA,OAAO,EAA2B,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAK5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAqB,MAAM,oBAAoB,CAAC;AAK7E,OAAO,EAOL,KAAK,gBAAgB,EACtB,MAAM,wBAAwB,CAAC;AAahC,OAAO,EAAE,+BAA+B,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAM3E,OAAO,EAA8B,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAOzF,eAAO,MAAM,mCAAmC,yBAAyB,CAAC;AAE1E,eAAO,MAAM,4BAA4B,GAAI,WAAW,MAAM,KAAG,MAGhE,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,GAAI,QAAQ,MAAM,KAAG,MAAM,GAAG,IAOnE,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,CAAC;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,GAAU,MAAM;IACjD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,KAAG,OAAO,CAAC,uBAAuB,CAuBlC,CAAC;AAoGF;uEACuE;AACvE,eAAO,MAAM,sBAAsB,GACjC,YAAY,IAAI,CAAC,gBAAgB,EAAE,OAAO,GAAG,OAAO,CAAC,KACpD,MAAM,EAaN,CAAC;AAEJ,eAAO,MAAM,gBAAgB,GAC3B,QAAQ,MAAM,GAAG,SAAS,EAC1B,OAAO,QAAQ,EACf,eAAc;IACZ,UAAU,CAAC,EAAE,OAAO,oBAAoB,CAAC;IACzC,kBAAkB,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,KAAK,oBAAoB,CAAC;IAC/F,mBAAmB,CAAC,EAAE,CACpB,MAAM,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,KAC5C,+BAA+B,CAAC;IACrC,0BAA0B,CAAC,EAAE,CAC3B,MAAM,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,KAC5C,4BAA4B,CAAC;IAClC,YAAY,CAAC,EAAE,OAAO,oBAAoB,CAAC;IAC3C,8CAA8C;IAC9C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iEAAiE;IACjE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qEAAqE;IACrE,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1C,kDAAkD;IAClD,OAAO,CAAC,EAAE,eAAe,CAAC;CACtB,KACL,OAAO,CAAC,IAAI,CAycd,CAAC"}

package/dist/cli-branch-command.js

@@ -22,6 +22,7 @@ import { TwelveUiConversionPackageClient } from './package-client.js';
 import { TwelveUiPrototypeLabelClient } from './prototype-label-client.js';
 import { isPrototypeSkippedResult, runPrototypePoststep, } from './prototype-poststep.js';
 import { prototypePolishJournalFact } from './prototype-runner.js';
+import { readPrototypeRunRecord } from './prototype-run-record.js';
 import { isResponsiveConversionQuality, } from './responsive-quality.js';
 export const BRANCH_CONVERSION_RECEIPT_DIRECTORY = '.conversion-receipts';
 export const branchConversionReceiptStore = (branchDir) => path.join(path.resolve(branchDir), BRANCH_CONVERSION_RECEIPT_DIRECTORY);
@@ -215,6 +216,9 @@ export const runBranchCommand = async (action, flags, dependencies = {}) => {
                 + ' --scope page|site --out-dir <directory>`.', 'branch_nothing_to_resume');
         }
         const prototypeRequested = Boolean(attempt.prototype || booleanFlag(flags, 'prototype'));
+        if (prototypeRequested && (await readPrototypeRunRecord(resumeOutDir))?.status === 'awaiting_labels') {
+            throw new CliRefusal('Prototype is awaiting local workflow labels. Execute/register its recorded operations and repeat `12ui prototype <run-dir> --labels workflow --workspace <directory>`; branch resume will not buy replacement labels.', 'prototype_workflow_pending');
+        }
         const polishRequested = Boolean(attempt.polish || booleanFlag(flags, 'polish'));
         if (polishRequested && !prototypeRequested) {
             throw new CliRefusal('--polish requires --prototype', 'branch_polish_requires_prototype');