@givolt/i3-composer-agent 2.2.3 → 2.3.0

package/skills/i3-ui-prototype/assets/templates/enterprise-admin/reference/tests/runtime-state.test.js

@@ -0,0 +1,42 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { ref, computed, reactive, watch, defineStore, nextTick } from '../runtime/state.js';
+
+test('deep edits and computed permissions remain observable', async () => {
+  const role = ref({ actions: ['view', 'edit'] });
+  const canEdit = computed(() => role.value.actions.includes('edit'));
+  const seen = [];
+  const stop = watch(canEdit, value => seen.push(value), { immediate: true });
+  role.value.actions.splice(1, 1);
+  await nextTick();
+  assert.equal(canEdit.value, false);
+  assert.deepEqual(seen, [true, false]);
+  stop();
+  role.value.actions.push('edit');
+  await nextTick();
+  assert.deepEqual(seen, [true, false]);
+});
+
+test('store fields unwrap state and retain one shared instance', async () => {
+  const useDemo = defineStore('native-state-test', () => {
+    const scope = ref('heating');
+    const rows = reactive({ count: 1 });
+    return { scope, rows, allowed: computed(() => scope.value === 'heating') };
+  });
+  const a = useDemo(), b = useDemo();
+  assert.equal(a, b);
+  assert.equal(a.allowed, true);
+  a.scope = 'north';
+  a.rows.count = 2;
+  await nextTick();
+  assert.equal(b.scope, 'north');
+  assert.equal(b.allowed, false);
+  assert.equal(b.rows.count, 2);
+});
+
+test('derived form fields support explicit setters', () => {
+  const value = ref('old');
+  const field = computed({ get: () => value.value, set: v => { value.value = v.trim(); } });
+  field.value = ' new ';
+  assert.equal(value.value, 'new');
+});

package/skills/i3-ui-prototype/assets/templates/enterprise-admin/reference/tests/runtime-stores.test.js

@@ -0,0 +1,16 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+const storage=new Map();
+globalThis.localStorage={getItem:key=>storage.get(key)??null,setItem:(key,value)=>storage.set(key,String(value)),removeItem:key=>storage.delete(key)};
+
+test('committed observations update both the runtime store and the persisted task',async()=>{
+  const {useOperations}=await import('../src/operations/store.js');
+  const store=useOperations();store.addExamples();
+  const id='run-ops-release-2',before=store.find(id);
+  assert.equal(before.run.observations.length,0);
+  store.apply(id,{id:'html-observation-test',action:'observe',expected:before.run.recordVersion,note:'HTML 原生状态层观测提交测试',checked:true,outcome:'pass'});
+  assert.equal(store.find(id).run.observations.length,1);
+  assert.equal(store.find(id).run.recordVersion,2);
+  const saved=JSON.parse(storage.get('i3-prototype-antdv-tasks-v010'));
+  assert.equal(saved.find(t=>t.id==='operation-example-2').operations[0].observations.length,1);
+});

package/skills/i3-ui-prototype/assets/templates/enterprise-admin/reference/tests/spec-state.test.js

@@ -0,0 +1,11 @@
+import test from "node:test";
+import assert from "node:assert/strict";
+import { actors, can } from "../src/shared/policy.js";
+import { newIntent, publishVersion, confirmVersion } from "../src/intents/domain.js";
+import { newSpec, appendVersion, sourceOf, beginSpecConfirmation, completeSpecConfirmation, sections, assertSpec } from "../src/specs/domain.js";
+const actor = actors.at(-1), at = '2026-09-10T10:00:00Z';
+function fixture() { let i = newIntent({ title: '供热报修', request: '分诊建议', outcome: '确认后派单', context: '意图池' }, 'i1', 'INT-001', at, actor); i.answers = { audience: '居民', process: '确认后派单', boundary: '不控制设备', acceptance: '不重复派单' }; i = confirmVersion(publishVersion(i, at), 1, at, actor); const content = Object.fromEntries(sections.map(s => [s.key, s.label])); return { i, s: appendVersion(newSpec(i, actor, at), sourceOf(i), content, [], '示例', actor, at) }; }
+test('spec confirmation binds source, version and authorized human', () => { const { i, s } = fixture(); const pending = beginSpecConfirmation(s, i, actor, 1, 1, 'q1', at); const confirmed = completeSpecConfirmation({ ...pending, pending: { ...pending.pending, acceptedAt: at } }); assert.equal(confirmed.versions[0]?.confirmedBy, actor.name); assert.equal(s.versions[0]?.confirmedAt, undefined); assert.throws(() => beginSpecConfirmation(s, i, actor, 2, 1, 'q2', at), /版本/); assert.throws(() => beginSpecConfirmation(s, { ...i, status: 'clarifying' }, actor, 1, 1, 'q3', at), /意图/); });
+test('spec unresolved decisions and missing reasons block confirmation', () => { const { i, s } = fixture(); s.versions[0].decisions = [{ id: 'd', question: '选哪种', options: ['A'], answer: 'A', reason: '', owner: '有权用户' }]; assert.throws(() => beginSpecConfirmation(s, i, actor, 1, 1, 'q', at), /决策/); });
+test('pending or unknown operations cannot be resubmitted and need a receipt', () => { const { i, s } = fixture(); const pending = beginSpecConfirmation(s, i, actor, 1, 1, 'q', at); assert.throws(() => beginSpecConfirmation(pending, i, actor, 1, 1, 'r', at), /处理中/); assert.throws(() => completeSpecConfirmation(pending), /核实/); assert.throws(() => assertSpec({ ...pending, confirmation: 'unknown' }, actor, 'spec:edit'), /核实/); });
+test('grant revocation and cross-scope assignment deny the exact action', () => { const { i, s } = fixture(); const limited = { ...actor, grants: [{ id: 'north', name: '确认', actions: ['spec:confirm'], tenantIds: ['north'] }] }; assert.equal(can(limited, 'spec:confirm'), true); assert.throws(() => beginSpecConfirmation(s, i, limited, 1, 1, 'q', at), /权限/); });

package/skills/i3-ui-prototype/assets/templates/enterprise-admin/reference/tests/tasks.test.js

@@ -0,0 +1,27 @@
+import test from "node:test";
+import assert from "node:assert/strict";
+import { actors } from "../src/shared/policy.js";
+import { standardBody } from "../src/workflows/data.js";
+import { newTask, startTask, advanceTask, approveTask, retryTask, controlTask, assertTaskRemovable, latestArtifact, clone } from "../src/tasks/domain.js";
+const actor = actors[0];
+function binding() { return { intentId: 'intent', spec: { number: 1, source: { intentId: 'intent', code: 'INT-1', title: '测试需求', version: 1, confirmedAt: '2026-09-11' }, content: { overview: '需求', stories: '故事', requirements: '需求条款', acceptance: 'AC', success: '标准', entities: '实体', pages: '页面', assumptions: '假设' }, decisions: [], reason: '确认样例', createdBy: '演示', createdAt: '2026-09-11', confirmedBy: '演示', confirmedAt: '2026-09-11' }, specRecordVersion: 1, pbcId: 'pbc-0', project: '供热工单', tenantId: 'heating', flowId: 'flow-0', flowRecordVersion: 1, flow: { number: 1, body: standardBody(), note: '标准', by: '演示', at: '2026-09-11', submittedBy: '演示' }, agents: [] }; }
+function task() { return newTask(binding(), actor, '交付测试'); }
+function build() { const t = task(); startTask(t, '陈敏'); advanceTask(t); approveTask(t, '核对人', 1, '已核对原型与规格'); return t; }
+function verify() { const t = build(); advanceTask(t); advanceTask(t); return t; }
+test('草稿要求有效名称；基础字段与独立快照完整', () => { const b = binding(), t = newTask(b, actor, '交付'); b.flow.body.nodes[0].name = '后续改变'; assert.equal(t.binding.flow.body.nodes[0].name, '交付开始'); assert.equal(t.tenantId, 'heating'); assert.equal(t.recordVersion, 1); assert.ok(t.createdBy && t.createdAt && t.createdDept); assert.throws(() => newTask(b, actor, ' '), /名称/); assert.throws(() => newTask(b, actor, 'a', 'x'.repeat(1001)), /1000/); assert.doesNotThrow(() => assertTaskRemovable(t)); });
+test('启动固定输入；重复启动与已启动删除被拒绝', () => { const t = task(); startTask(t, '陈敏'); assert.equal(t.artifacts.length, 2); assert.equal(t.artifacts[0].versions[0].taskId, t.id); assert.throws(() => startTask(t, '陈敏'), /已经启动/); assert.throws(() => assertTaskRemovable(t), /仅草稿/); assert.equal(t.currentId, 'start'); });
+test('原型确认阻断推进；缺少说明和过期产物版本不接受', () => { const t = task(); startTask(t, '陈敏'); advanceTask(t); assert.equal(t.status, 'waiting'); assert.throws(() => advanceTask(t), /可推进/); assert.throws(() => approveTask(t, '确认人', 1, ''), /核对说明/); assert.throws(() => approveTask(t, '确认人', 2, '已核对'), /已变化/); approveTask(t, '确认人', 1, '已核对'); assert.equal(t.currentId, 'build'); assert.ok(t.prototypeApproved); });
+test('标准流程至待后续确认，没有实际发布或归档', () => { const t = verify(); advanceTask(t); assert.equal(t.status, 'ready'); assert.equal(t.currentId, 'approval'); assert.equal(t.stages.find(s => s.nodeId === 'release').state, 'pending'); assert.equal(t.stages.find(s => s.nodeId === 'archive').state, 'pending'); assert.throws(() => advanceTask(t), /可推进/); assert.throws(() => approveTask(t, '确认人', 1, '发布'), /不接受/); assert.ok(latestArtifact(t, 'verify').inputs.some(x => x.id === 'code' && x.version === 1)); });
+test('独立验证不接受同一实现 Agent，也不接受未通过的质量检查', () => { const t = verify(); t.checksPassed = false; assert.throws(() => advanceTask(t), /质量检查/); const x = verify(); x.binding.flow.body.nodes.find(n => n.id === 'verify').agentId = 'agent-1'; assert.throws(() => advanceTask(x), /不能同时实现/); assert.equal(x.status, 'running'); });
+test('验证失败返工重跑实现与质量检查，旧版本和失败证据不覆盖', () => { const t = verify(); advanceTask(t, 'fail'); const old = clone(t.artifacts); retryTask(t, '处理人', '修复幂等性'); assert.equal(t.currentId, 'build'); assert.equal(t.reworks, 1); assert.equal(t.checksPassed, false); advanceTask(t); assert.equal(t.stages.find(s => s.nodeId === 'verify').state, 'pending'); advanceTask(t); advanceTask(t); assert.equal(t.status, 'ready'); assert.equal(latestArtifact(t, 'code').number, 2); for (const a of old)
+    assert.deepEqual(t.artifacts.find(x => x.id === a.id).versions[0], a.versions[0]); assert.equal(t.artifacts.find(a => a.kind === 'verify').versions[0].result, 'fail'); });
+test('阶段失败重试仅继续当前阶段，不重复已完成实现', () => { const t = build(); advanceTask(t); advanceTask(t, 'fail'); assert.equal(t.status, 'failed'); assert.equal(t.currentId, 'ci'); retryTask(t, '处理人', '检查服务已恢复'); advanceTask(t); assert.equal(latestArtifact(t, 'code').number, 1); assert.equal(t.stages.find(s => s.nodeId === 'build').attempts, 1); assert.equal(t.stages.find(s => s.nodeId === 'ci').attempts, 2); });
+test('处理次数有界；接管不会清零预算、判定通过或修改产物', () => { const t = build(); for (let i = 0; i < 3; i++) {
+    advanceTask(t, 'fail');
+    if (i < 2)
+        retryTask(t, '处理人', '重试');
+} assert.equal(t.reworks, 2); assert.throws(() => retryTask(t, '处理人', '继续'), /达到/); const versions = clone(t.artifacts); controlTask(t, 'takeover', '接管人', '人工检查'); assert.equal(t.status, 'manual'); assert.equal(t.owner, '接管人'); controlTask(t, 'resume', '接管人', '继续原任务'); assert.equal(t.status, 'failed'); assert.equal(t.reworks, 2); assert.deepEqual(t.artifacts, versions); });
+test('暂停和刷新后恢复保留当前阶段；等待确认也能恢复到等待', () => { const t = build(); advanceTask(t); controlTask(t, 'pause', '陈敏', '等待窗口'); const restored = JSON.parse(JSON.stringify(t)); controlTask(restored, 'resume', '陈敏', '窗口已到'); assert.equal(restored.status, 'running'); assert.equal(restored.currentId, 'ci'); assert.deepEqual(restored.artifacts, t.artifacts); const w = task(); startTask(w, '陈敏'); advanceTask(w); controlTask(w, 'pause', '陈敏', '稍后核对'); controlTask(w, 'resume', '陈敏', '继续核对'); assert.equal(w.status, 'waiting'); assert.throws(() => advanceTask(w), /可推进/); });
+test('不允许伪造跳到发布确认：缺少本轮验证结论会被拦住', () => { const t = build(); t.binding.flow.body.edges.find(e => e.from === 'build').to = 'approval'; assert.throws(() => advanceTask(t), /有效独立验证/); assert.notEqual(t.status, 'ready'); });
+test('真实采用绑定流程的分支，未选路径标记跳过', () => { const t = build(), b = t.binding.flow.body; b.nodes.push({ id: 'decision', kind: 'branch', name: '质量判断', condition: 'checks.passed', x: 0, y: 0 }, { id: 'fix', kind: 'loop', name: '有限修复', agentId: 'agent-1', limit: 2, x: 0, y: 0 }); b.edges.find(e => e.from === 'ci').to = 'decision'; b.edges.push({ id: 'yes', from: 'decision', to: 'verify', label: '满足' }, { id: 'no', from: 'decision', to: 'fix', label: '不满足' }, { id: 'fixed', from: 'fix', to: 'verify', label: '' }); t.stages.push({ nodeId: 'decision', state: 'pending', attempts: 0, detail: '' }, { nodeId: 'fix', state: 'pending', attempts: 0, detail: '' }); advanceTask(t); advanceTask(t); assert.equal(t.currentId, 'decision'); advanceTask(t); assert.equal(t.currentId, 'verify'); assert.equal(t.stages.find(s => s.nodeId === 'fix').state, 'skipped'); advanceTask(t); assert.equal(t.status, 'ready'); });
+test('检查不通过时走已定义的有限修复分支，再独立验证', () => { const t = build(), b = t.binding.flow.body; b.nodes.push({ id: 'decision', kind: 'branch', name: '质量判断', condition: 'checks.passed', x: 0, y: 0 }, { id: 'fix', kind: 'loop', name: '有限修复', agentId: 'agent-1', limit: 1, x: 0, y: 0 }); b.edges.find(e => e.from === 'ci').to = 'decision'; b.edges.push({ id: 'yes', from: 'decision', to: 'verify', label: '满足' }, { id: 'no', from: 'decision', to: 'fix', label: '不满足' }, { id: 'fixed', from: 'fix', to: 'verify', label: '' }); t.stages.push({ nodeId: 'decision', state: 'pending', attempts: 0, detail: '' }, { nodeId: 'fix', state: 'pending', attempts: 0, detail: '' }); advanceTask(t); advanceTask(t, 'fail'); assert.equal(t.currentId, 'decision'); advanceTask(t); assert.equal(t.currentId, 'fix'); advanceTask(t, 'fail'); retryTask(t, '处理人', '修复'); advanceTask(t); assert.equal(t.currentId, 'verify'); advanceTask(t); assert.equal(t.status, 'ready'); assert.equal(latestArtifact(t, 'code').number, 3); });

package/skills/i3-ui-prototype/assets/templates/enterprise-admin/reference/tests/workbench.test.js

@@ -0,0 +1,34 @@
+import test from "node:test";
+import assert from "node:assert/strict";
+import { actors, metadata } from "../src/shared/policy.js";
+import { newIntent, publishVersion, confirmVersion } from "../src/intents/domain.js";
+import { newSpec, appendVersion, sourceOf, sections } from "../src/specs/domain.js";
+import { makeJob } from "../src/pbc/domain.js";
+import { affiliation, deliveryGuide, actorAccess } from "../src/shared/deliveryGuide.js";
+import { buildWorkbench, relatedTo } from "../src/workbench/model.js";
+const actor = actors.find(a => a.id === 'complete'), at = '2026-09-11T00:00:00Z';
+function fixture() {
+    let i = newIntent({ title: '测试归属', request: '报修分诊', outcome: '人工确认', context: '集团意图池 · 尚未立项' }, 'i1', 'INT-001', at, actor);
+    i.answers = { audience: '居民', process: '确认', boundary: '演示', acceptance: '可追溯' };
+    i = confirmVersion(publishVersion(i, at), 1, at, actor);
+    const content = Object.fromEntries(sections.map(s => [s.key, s.label])), s = appendVersion(newSpec(i, actor, at), sourceOf(i), content, [], '示例', actor, at);
+    s.versions[0].confirmedAt = at;
+    const p = { ...metadata(actor, at), id: 'p1', name: '供热智能分诊01', slug: 'heating', ebc: '服务', domain: 'example.test', owner: actor.name, services: [] }, j = makeJob(i, s, actor, p);
+    j.status = 'done';
+    return { i, s, p, j };
+}
+test('实际归属读取当前目录名称，保留原始意图与请求快照', () => { const { i, j, p } = fixture(); const result = affiliation(i, [j], [{ ...p, name: '改名后的系统' }], actorAccess(actor)); assert.equal(result.label, '已归属：改名后的系统'); assert.equal(result.key, 'pbc:p1'); assert.equal(i.context, '集团意图池 · 尚未立项'); assert.equal(j.pbc.name, '供热智能分诊01'); });
+test('已有归属目标不可见时不暴露名称或导航，也不退回未归属', () => { const { i, j, p } = fixture(); const r = affiliation(i, [j], [p], () => false); assert.equal(r.state, 'restricted'); assert.equal(r.path, ''); assert.ok(!r.label.includes(p.name)); });
+test('未知、失败与进行中归属均指向原请求，禁止创建重复请求', () => { const { i, j, s } = fixture(); for (const status of ['unknown', 'failed', 'running', 'paused']) {
+    const r = deliveryGuide(i, s, [{ ...j, status }], actorAccess(actor));
+    assert.equal(r.create, false);
+    assert.equal(r.path, '/intents/i1/pbc');
+    assert.notEqual(r.stage, 'done');
+} });
+test('来源重新澄清时安全解释，不能因sourceOf抛错导致来源列表消失', () => { const { i, s } = fixture(); const r = deliveryGuide({ ...i, status: 'clarifying' }, s, [], actorAccess(actor)); assert.equal(r.stage, 'intent'); assert.equal(r.create, false); assert.equal(r.path, '/intents/i1/workspace'); });
+test('未生成、未确认和旧版规格分别解释；最新已确认才允许创建', () => { const { i, s } = fixture(), access = actorAccess(actor); assert.equal(deliveryGuide(i, undefined, [], access).label, '尚未生成规格'); assert.equal(deliveryGuide(i, { ...s, versions: [{ ...s.versions[0], confirmedAt: undefined }] }, [], access).label, '规格待确认'); assert.equal(deliveryGuide(i, { ...s, versions: [{ ...s.versions[0], source: { ...s.versions[0].source, version: 0 } }] }, [], access).label, '规格来源已变化'); assert.equal(deliveryGuide(i, s, [], access).create, true); });
+test('零未决项不等于拥有规格确认或创建权限', () => { const { i, s } = fixture(); const limited = { ...actor, grants: [{ id: 'r', name: 'read', actions: ['intent:view', 'spec:view', 'pbc:view'], tenantIds: ['heating'] }] }; const r = deliveryGuide(i, { ...s, versions: [{ ...s.versions[0], confirmedAt: undefined }] }, [], actorAccess(limited)); assert.equal(r.allowed, false); assert.match(r.reason, /确认权限/); assert.equal(deliveryGuide(i, s, [], actorAccess(limited)).create, false); });
+test('我的范围先按授权过滤；他人的可见记录不能冒充我的', () => { const { i, s, p } = fixture(); const other = { ...i, id: 'other', createdById: 'zhou', owner: '周晨' }, input = { actor, active: true, intents: [i, other], specs: [s], jobs: [], pbcs: [p], tasks: [] }; assert.equal(buildWorkbench(input, 'mine').todos.length, 1); assert.equal(buildWorkbench(input, 'all').todos.length, 2); assert.equal(buildWorkbench({ ...input, actor: { ...actor, grants: [] } }, 'all').todos.length, 0); assert.equal(buildWorkbench({ ...input, active: false }, 'all').pbcs.length, 0); });
+test('归属完成后从待办移除，相关PBC进入首页且重新命名同步', () => { const { i, s, p, j } = fixture(); const input = { actor, active: true, intents: [i], specs: [s], jobs: [], pbcs: [{ ...p, createdById: 'zhou', owner: '周晨' }], tasks: [] }; assert.equal(buildWorkbench(input, 'mine').todos.length, 1); assert.equal(buildWorkbench(input, 'mine').pbcs.length, 0); const done = buildWorkbench({ ...input, jobs: [j] }, 'mine'); assert.equal(done.todos.length, 0); assert.equal(done.pbcs.length, 1); });
+test('个人身份适配不合并权限，不按岗位或任意重名判定关系', () => { assert.equal(relatedTo(actor, { createdById: 'lin' }), true); assert.equal(relatedTo({ ...actor, id: 'zhou' }, { createdById: 'lin', owner: '林晓' }), false); assert.equal(relatedTo(actor, { createdById: 'unknown', owner: '同名用户' }), false); assert.equal(actorAccess({ ...actor, grants: [] })('intent:view'), false); });
+test('隐藏租户与删除记录不影响可见计数或关系', () => { const { i, s, p, j } = fixture(); const out = buildWorkbench({ actor, active: true, intents: [{ ...i, tenantId: 'north' }], specs: [s], jobs: [j], pbcs: [{ ...p, tenantId: 'north' }], tasks: [] }, 'all'); assert.equal(out.todos.length, 0); assert.equal(out.pbcs.length, 0); assert.equal(buildWorkbench({ actor, active: true, intents: [{ ...i, isDeleted: true }], specs: [s], jobs: [], pbcs: [{ ...p, isDeleted: true }], tasks: [] }, 'mine').todos.length, 0); });

package/skills/i3-ui-prototype/assets/templates/enterprise-admin/reference/tests/workflows.test.js

@@ -0,0 +1,16 @@
+import test from "node:test";
+import assert from "node:assert/strict";
+import { validateFlow, clone, diffBodies, assertRemovable, protectedNode } from "../src/workflows/domain.js";
+import { standardBody, seedFlows } from "../src/workflows/data.js";
+const agents = ['agent-1', 'agent-2'].map(id => ({ id, name: id, available: true, reason: '', recordVersion: 1 }));
+const failed = (b = standardBody()) => validateFlow(b, agents).filter(c => !c.ok);
+test('标准交付路径通过；必要治理节点受保护', () => { assert.deepEqual(failed(), []); for (const id of ['prototype', 'verify', 'approval'])
+    assert.equal(protectedNode(standardBody().nodes.find(n => n.id === id)), true); });
+test('删除治理节点和直接连线绕过批准都被检查拒绝', () => { const b = standardBody(); b.edges.push({ id: 'bypass', from: 'build', to: 'release', label: '' }); assert.ok(failed(b).some(c => c.id === 'release')); const d = standardBody(); d.nodes = d.nodes.filter(n => n.id !== 'prototype'); assert.ok(failed(d).some(c => c.id === 'gates')); });
+test('无法借条件分支让一条发布路径绕过独立验证', () => { const b = standardBody(); b.nodes.find(n => n.id === 'ci').kind = 'branch'; b.nodes.find(n => n.id === 'ci').condition = 'checks.passed'; b.edges.find(e => e.from === 'ci').label = '满足'; b.edges.push({ id: 'branch-bypass', from: 'ci', to: 'approval', label: '不满足' }); assert.ok(failed(b).some(c => c.id === 'release')); });
+test('同一 Agent 自验证、验证后修改及未登记人工权限均阻断', () => { const b = standardBody(); b.nodes.find(n => n.id === 'verify').agentId = 'agent-1'; assert.ok(failed(b).some(c => c.id === 'independent')); const d = standardBody(); d.edges.push({ id: 'rewrite', from: 'verify', to: 'build', label: '' }); assert.ok(failed(d).some(c => c.id === 'after-verify')); const e = standardBody(); e.nodes.find(n => n.id === 'approval').permission = 'unknown'; assert.ok(failed(e).some(c => c.id === 'human-approval')); });
+test('有限修复必须有上限；普通循环与断开的节点被拒绝', () => { const b = standardBody(); Object.assign(b.nodes.find(n => n.id === 'build'), { kind: 'loop', limit: 0 }); assert.ok(failed(b).some(c => c.id === 'limit-build')); b.nodes.find(n => n.id === 'build').limit = 2; assert.deepEqual(failed(b), []); b.edges.push({ id: 'loop', from: 'ci', to: 'build', label: '' }); assert.ok(failed(b).some(c => c.id === 'cycle')); const d = standardBody(); d.edges = d.edges.filter(e => e.to !== 'ci'); assert.ok(failed(d).some(c => c.id === 'connectivity')); });
+test('缺失或停用的 Agent 及无输入输出不能发布', () => { const b = standardBody(); assert.ok(validateFlow(b, agents.map(a => ({ ...a, available: false, reason: '已停用' }))).some(c => c.id === 'agent-build' && !c.ok)); b.nodes.find(n => n.id === 'build').input = ''; assert.ok(failed(b).some(c => c.id === 'io-build')); });
+test('差异覆盖节点属性/连线和元数据，旧版本快照不变', () => { const before = standardBody(), after = clone(before); after.description = '新描述'; after.nodes.find(n => n.id === 'build').name = '实现工单助手'; after.edges.pop(); const diff = diffBodies(before, after); assert.ok(diff.some(x => x.includes('更新用途'))); assert.ok(diff.some(x => x.includes('实现工单助手'))); assert.ok(diff.some(x => x.includes('移除连线'))); assert.equal(before.nodes.find(n => n.id === 'build').name, '实现应用'); });
+test('模板启用、待审核及已有选择引用均保护删除', () => { const r = seedFlows()[0]; assert.throws(() => assertRemovable(r, false), /停用/); assert.throws(() => assertRemovable({ ...r, enabled: false, state: 'review' }, false), /撤回/); assert.throws(() => assertRemovable({ ...r, enabled: false }, true), /引用/); assert.doesNotThrow(() => assertRemovable({ ...r, enabled: false }, false)); });
+test('合规双分支与有限修复均汇入独立验证；移除属性计入差异', () => { const b = standardBody(); b.nodes.push({ id: 'judge', kind: 'branch', name: '质量结果', condition: 'checks.passed', x: 1100, y: 60 }, { id: 'fix', kind: 'loop', name: '修复产物', agentId: 'agent-1', input: '检查报告', output: '修订产物', limit: 2, x: 1100, y: 260 }); b.edges.find(e => e.from === 'ci').to = 'judge'; b.edges.push({ id: 'ok', from: 'judge', to: 'verify', label: '满足' }, { id: 'bad', from: 'judge', to: 'fix', label: '不满足' }, { id: 'fixed', from: 'fix', to: 'verify', label: '' }); assert.deepEqual(failed(b), []); const c = clone(b); delete c.nodes.find(n => n.id === 'fix').agentId; assert.ok(diffBodies(b, c).some(x => x.includes('Agent：agent-1 → 未设置'))); });

package/skills/i3-ui-prototype/assets/templates/enterprise-admin/reference/tools/convert.mjs

@@ -0,0 +1,168 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import crypto from 'node:crypto';
+import { createRequire } from 'node:module';
+import { fileURLToPath } from 'node:url';
+
+const output = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const source = path.resolve(output, '../../交互原型/console-operations-v0.14');
+const require = createRequire(path.join(source, 'package.json'));
+const ts = require('typescript');
+const { parse: parseSfc } = require('@vue/compiler-sfc');
+const { parse: parseTemplate } = require('@vue/compiler-dom');
+const hashes = {};
+const iconNames = new Set(['DownOutlined', 'UpOutlined', 'LeftOutlined', 'RightOutlined', 'CloseOutlined', 'CloseCircleOutlined', 'SearchOutlined', 'LoadingOutlined', 'CheckOutlined', 'CheckCircleOutlined', 'InfoCircleOutlined', 'ExclamationCircleOutlined','CheckCircleFilled','InfoCircleFilled','CloseCircleFilled','ExclamationCircleFilled']);
+const esc = value => String(value).replaceAll('&', '&amp;').replaceAll('"', '&quot;').replaceAll('<', '&lt;').replaceAll('>', '&gt;');
+const transpile = input => ts.transpileModule(input, { compilerOptions: { target: ts.ScriptTarget.ES2022, module: ts.ModuleKind.ESNext, verbatimModuleSyntax: false } }).outputText;
+
+function expression(input) {
+  if (!input) return '';
+  const js = transpile(`const __expression = (${input});`);
+  return js.replace(/^const __expression =\s*/, '').replace(/;\s*$/, '').trim();
+}
+function eventExpression(input) {
+  const parsed = ts.createSourceFile('event.ts', `const __event = (${input});`, ts.ScriptTarget.Latest, true, ts.ScriptKind.TS);
+  return parsed.parseDiagnostics.length ? transpile(input).trim() : expression(input);
+}
+function relativeRuntime(file, module) {
+  return path.relative(path.dirname(file), 'runtime/' + module + '.js').replaceAll(path.sep, '/').replace(/^(?!\.)/, './');
+}
+function rewriteImports(input, file) {
+  const sf = ts.createSourceFile(file, input, ts.ScriptTarget.Latest, true, ts.ScriptKind.TS);
+  const changes = [];
+  for (const node of sf.statements) {
+    if (!ts.isImportDeclaration(node)) continue;
+    const from = node.moduleSpecifier.text;
+    if (from === 'vue') {
+      const specs = node.importClause?.namedBindings?.elements || [];
+      const state = specs.filter(s => !s.isTypeOnly && !['h', 'defineComponent'].includes(s.propertyName?.text || s.name.text)).map(s => s.getText(sf));
+      const dom = specs.filter(s => !s.isTypeOnly && ['h', 'defineComponent'].includes(s.propertyName?.text || s.name.text)).map(s => s.getText(sf));
+      changes.push([node.getStart(sf), node.end, [state.length ? `import { ${state.join(', ')} } from '${relativeRuntime(file, 'state')}';` : '', dom.length ? `import { ${dom.join(', ')} } from '${relativeRuntime(file, 'dom')}';` : ''].filter(Boolean).join('\n')]);
+    } else {
+      let target = from;
+      if (from === 'pinia') target = relativeRuntime(file, 'state');
+      else if (from === 'vue-router') target = relativeRuntime(file, 'router');
+      else if (from === 'antdv-next' || from === '@qin-ui/antdv-next-pro') target = relativeRuntime(file, 'widgets');
+      else if (from === '@ant-design/icons-vue') target = relativeRuntime(file, 'icons');
+      else if (from.startsWith('.')) target = from.replace(/\.(vue|ts)$/, '.js') + (/\.[a-z]+$/.test(from) ? '' : '.js');
+      changes.push([node.moduleSpecifier.getStart(sf), node.moduleSpecifier.end, JSON.stringify(target)]);
+    }
+  }
+  for (const [start, end, replacement] of changes.sort((a, b) => b[0] - a[0])) input = input.slice(0, start) + replacement + input.slice(end);
+  return input.replace(/(['"`])easel(?=[-:])/g, '$1i3-prototype-antdv').replace(/(['"`])(ops-(?:draft|link):)/g,'$1i3-prototype-antdv-$2').replaceAll('当前 4187 地址','当前 HTML 原型地址');
+}
+function bindings(sf) {
+  const names = [];
+  const add = node => { if (ts.isIdentifier(node)) names.push(node.text); else if (ts.isObjectBindingPattern(node) || ts.isArrayBindingPattern(node)) for (const element of node.elements) if (ts.isBindingElement(element)) add(element.name); };
+  for (const s of sf.statements) {
+    if (ts.isVariableStatement(s)) for (const d of s.declarationList.declarations) add(d.name);
+    else if ((ts.isFunctionDeclaration(s) || ts.isClassDeclaration(s)) && s.name) names.push(s.name.text);
+    else if (ts.isImportDeclaration(s) && s.importClause && !s.importClause.isTypeOnly) {
+      if (s.importClause.name) names.push(s.importClause.name.text);
+      const n = s.importClause.namedBindings;
+      if (n && ts.isNamedImports(n)) for (const e of n.elements) if (!e.isTypeOnly) names.push(e.name.text);
+    }
+  }
+  return [...new Set(names)];
+}
+function templateNode(node) {
+  if (node.type === 2) return esc(node.content);
+  if (node.type === 5) return '{{ ' + esc(expression(node.content.content)) + ' }}';
+  if (node.type === 3) return '';
+  if (node.type === 0) return node.children.map(templateNode).join('');
+  if (node.type !== 1) throw Error('Unsupported template node ' + node.type);
+  const attrs = [];
+  const original = node.tag;
+  const component = node.tagType === 1 || original === 'component';
+  let tag = component ? 'template' : original;
+  if (component) attrs.push(['data-component', original === 'component' ? '$dynamic' : original]);
+  for (const p of node.props) {
+    if (p.type === 6) attrs.push([p.name, p.value?.content ?? '']);
+    else if (p.type === 7) {
+      const value = p.exp?.content || '';
+      const arg = p.arg?.content || '';
+      if (p.name === 'bind') attrs.push([arg ? 'data-bind-' + arg : 'data-bind', expression(value || arg)]);
+      else if (p.name === 'on') attrs.push(['data-on-' + arg + (p.modifiers.length ? '.' + p.modifiers.map(m => m.content || m).join('.') : ''), eventExpression(value)]);
+      else if (p.name === 'model') attrs.push(['data-model-' + (arg || 'model-value'), expression(value)]);
+      else if (p.name === 'slot') { attrs.push(['data-slot', arg || 'default']); if (value) attrs.push(['data-slot-args', value]); }
+      else if (p.name === 'for') {
+        const loop=value.match(/^(.*?)\s+(in|of)\s+([\s\S]+)$/);
+        if(!loop)throw Error('Invalid source iteration: '+value);
+        attrs.push(['data-each',loop[1]+' '+loop[2]+' '+expression(loop[3])]);
+      }
+      else if (['if', 'else-if', 'else', 'show'].includes(p.name)) attrs.push(['data-' + p.name,expression(value)]);
+      else if (p.name === 'html' || p.name === 'text') attrs.push(['data-' + p.name, expression(value)]);
+      else throw Error('Unsupported directive ' + p.name);
+    }
+  }
+  const attributes = attrs.map(([key, value]) => ` ${key}="${esc(value)}"`).join('');
+  const children = node.children.map(templateNode).join('');
+  if (['input', 'img', 'br', 'hr', 'meta', 'link', 'source'].includes(tag)) return `<${tag}${attributes}>`;
+  return `<${tag}${attributes}>${children}</${tag}>`;
+}
+async function write(file, body) { await fs.mkdir(path.dirname(path.join(output, file)), { recursive: true }); await fs.writeFile(path.join(output, file), body); }
+async function walk(base) { const out = []; for (const e of await fs.readdir(base, { withFileTypes: true })) { const f = path.join(base, e.name); if (e.isDirectory()) out.push(...await walk(f)); else if (e.isFile()) out.push(f); } return out; }
+
+for (const full of await walk(path.join(source, 'src'))) {
+  const file = path.relative(source, full).replaceAll(path.sep, '/');
+  const input = await fs.readFile(full, 'utf8');
+  for (const match of input.matchAll(/import\s*\{([^}]+)\}\s*from\s*['"]@ant-design\/icons-vue['"]/g)) for (const name of match[1].split(',').map(s => s.trim())) iconNames.add(name);
+  hashes[file] = crypto.createHash('sha256').update(input).digest('hex');
+  if (file === 'src/main.ts' || file === 'src/App.vue' || file === 'src/styles/theme.ts') continue;
+  if (file.endsWith('.css')) { await write(file.replace('src/styles/', 'styles/'), input); continue; }
+  if (file.endsWith('.ts')) { await write(file.replace(/\.ts$/, '.js'), transpile(rewriteImports(input, file))); continue; }
+  if (!file.endsWith('.vue')) continue;
+  const { descriptor, errors } = parseSfc(input);
+  if (errors.length) throw errors[0];
+  let code = rewriteImports(descriptor.scriptSetup?.content || '', file);
+  const sf = ts.createSourceFile(file, code, ts.ScriptTarget.Latest, true, ts.ScriptKind.TS);
+  const exposed = bindings(sf);
+  const propKeys = [];
+  const visitProps = node => {
+    if (ts.isCallExpression(node) && node.expression.getText(sf) === 'defineProps' && ts.isTypeLiteralNode(node.typeArguments?.[0])) {
+      for (const member of node.typeArguments[0].members) if (member.name) propKeys.push(member.name.getText(sf).replace(/^['"]|['"]$/g, ''));
+    }
+    ts.forEachChild(node, visitProps);
+  };
+  visitProps(sf);
+  const imports = sf.statements.filter(ts.isImportDeclaration).map(s => s.getText(sf)).join('\n');
+  let body = sf.statements.filter(s => !ts.isImportDeclaration(s)).map(s => s.getText(sf)).join('\n');
+  body = body.replace(/defineProps\s*<[^]*?>\s*\(\s*\)/g, '__props').replace(/defineEmits\s*<[^]*?>\s*\(\s*\)/g, '__emit');
+  const compiled = transpile(`${imports}\nimport { createComponent } from '${relativeRuntime(file, 'dom')}';\nimport { withDefaults } from '${relativeRuntime(file, 'state')}';\nexport default createComponent({ name: '${path.basename(file, '.vue')}', propKeys: ${JSON.stringify(propKeys)}, template: new URL('./${path.basename(file, '.vue')}.html', import.meta.url).href, setup(__props, __emit) { ${body}\n return { ${exposed.join(', ')} }; } });`);
+  await write(file.replace(/\.vue$/, '.js'), compiled);
+  const html = templateNode(parseTemplate(descriptor.template?.content || '', { expressionPlugins: ['typescript'], whitespace: 'condense' }));
+  await write(file.replace(/\.vue$/, '.html'), `<!-- 来源：${file}；HTML / 原生 DOM 绑定，不含 Vue 运行时。 -->\n${html}\n`);
+}
+for (const full of await walk(path.join(source, 'tests'))) {
+  if (!full.endsWith('.ts')) continue;
+  const file = path.relative(source, full).replaceAll(path.sep, '/');
+  await write(file.replace(/\.ts$/, '.js'), transpile(rewriteImports(await fs.readFile(full, 'utf8'), file)));
+}
+const main = await fs.readFile(path.join(source, 'src/main.ts'), 'utf8');
+const routes = main.split('\n').flatMap(line => {
+  const route = line.match(/path:\s*['"]([^'"]+)['"]/); if (!route) return [];
+  let component = line.match(/import\(['"]\.\/([^'"]+)\.vue['"]\)/)?.[1];
+  if (line.includes('component: ModelsPage')) component = 'models/ModelsPage';
+  if (line.includes('component: ScopePage')) component = 'shell/ScopePage';
+  return [{ path: route[1], ...(component ? { component: './src/' + component + '.js' } : {}), ...(line.match(/redirect:\s*['"]([^'"]+)['"]/) ? { redirect: line.match(/redirect:\s*['"]([^'"]+)['"]/)[1] } : {}) }];
+});
+await write('routes.json', JSON.stringify(routes, null, 2) + '\n');
+await write('baseline.json', JSON.stringify({ source: path.relative(path.resolve(output, '../..'), source), version: 'v0.14', package: 'PT-06b', convertedAt: '2026-10-13', files: hashes, businessRouteCount: 37, userApproval: 'pending-review' }, null, 2) + '\n');
+const iconCode = ["import { h, defineWidget } from './dom.js';", "const svg = node => h(node.tag, node.attrs || {}, (node.children || []).map(svg));", "const icon = (name, data) => defineWidget(name, props => h('span', { class: ['anticon', 'anticon-' + data.name, props.class], role: 'img', 'aria-label': data.name, style: props.style }, svg({ ...data.icon, attrs: { ...data.icon.attrs, width: '1em', height: '1em', fill: 'currentColor', 'aria-hidden': 'true' } })));" ];
+for (const name of iconNames) {
+  const loaded = require('@ant-design/icons-svg/lib/asn/' + name + '.js');
+  iconCode.push(`export const ${name} = icon('${name}', ${JSON.stringify(loaded.default || loaded)});`);
+}
+await write('runtime/icons.js', iconCode.join('\n') + '\n');
+await fs.copyFile(require.resolve('antdv-next/dist/reset.css'), path.join(output, 'styles/reset.css'));
+for(const name of await fs.readdir(path.join(source,'dist/assets')))if(name.endsWith('.css')){
+  const css=await fs.readFile(path.join(source,'dist/assets',name),'utf8'),split=css.indexOf(':root{--easel-primary');
+  if(split>=0)await write('styles/pro.css',css.slice(0,split).replace(/\[data-v-[a-f0-9]+\]/g,'')+'\n');
+}
+for (const packageName of ['antdv-next', '@ant-design/icons-svg','@ant-design/icons-vue', '@qin-ui/antdv-next-pro']) {
+  const packageDirectory = await fs.realpath(path.join(source, 'node_modules', packageName));
+  for (const name of (await fs.readdir(packageDirectory)).filter(name=>/^licen[cs]e(?:\..*)?$/i.test(name))) {
+    try { const text = await fs.readFile(path.join(packageDirectory, name), 'utf8'); await write('licenses/' + packageName.replaceAll('/', '-') + '.txt', text); break; } catch {}
+  }
+}
+console.log(`Converted ${Object.keys(hashes).length} source files; ${routes.length} route rules.`);

package/skills/i3-ui-prototype/assets/templates/enterprise-admin/reference/tools/serve.mjs

@@ -0,0 +1,7 @@
+import http from 'node:http';
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+const root=path.resolve(path.dirname(fileURLToPath(import.meta.url)),'..'),port=Number(process.env.PROTOTYPE_PORT||process.argv[2]||4194);
+const types={'.html':'text/html; charset=utf-8','.js':'text/javascript; charset=utf-8','.json':'application/json; charset=utf-8','.css':'text/css; charset=utf-8','.svg':'image/svg+xml','.png':'image/png','.md':'text/plain; charset=utf-8'};
+http.createServer(async(req,res)=>{try{let pathname=decodeURIComponent(new URL(req.url,'http://localhost').pathname),file=path.resolve(root,'.'+pathname);if(file!==root&&!file.startsWith(root+path.sep)){res.writeHead(403);res.end();return;}if(pathname.endsWith('/'))file=path.join(file,'index.html');const body=await fs.readFile(file);res.writeHead(200,{'Content-Type':types[path.extname(file)]||'application/octet-stream','Cache-Control':'no-store'});res.end(body);}catch(error){res.writeHead(error.code==='ENOENT'?404:500,{'Content-Type':'text/plain; charset=utf-8'});res.end('文件不可用');}}).listen(port,'127.0.0.1',()=>console.log(`HTML 原型：http://127.0.0.1:${port}/#/workbench`));

package/skills/i3-ui-prototype/assets/templates/enterprise-admin/reference/tools/styles.mjs

@@ -0,0 +1,11 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const sheets = JSON.parse(await fs.readFile(path.join(root, 'assets/reference-styles.json'), 'utf8'));
+const variables = {};
+for (const sheet of sheets) for (const match of sheet.matchAll(/(--[\w-]+)\s*:\s*([^;{}]+);/g)) variables[match[1]] = match[2].trim();
+const css = sheets.map(sheet => sheet.replace(/:where\(\.css-(?!var-)[^)]*\)/g, '').replace(/\.css-var-[a-zA-Z0-9_-]+/g, '.native-theme')).join('\n');
+await fs.writeFile(path.join(root, 'styles/antdv.css'), css + '\n:root{' + Object.entries(variables).map(([key, value]) => key + ':' + value).join(';') + '}\n');
+await fs.writeFile(path.join(root, 'design-tokens.json'), JSON.stringify({ origin: 'v0.14 rendered Antdv Next theme', cssVariables: variables }, null, 2) + '\n');
+console.log(`${sheets.length} rendered style blocks; ${Object.keys(variables).length} CSS variables.`);

package/skills/i3-ui-prototype/assets/templates/enterprise-admin/reference/tools/verify.mjs

@@ -0,0 +1,24 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import crypto from 'node:crypto';
+import { execFileSync } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+const root=path.resolve(path.dirname(fileURLToPath(import.meta.url)),'..'),source=path.resolve(root,'../../交互原型/console-operations-v0.14');
+const hash=bytes=>crypto.createHash('sha256').update(bytes).digest('hex');
+async function walk(directory){const result=[];for(const entry of await fs.readdir(directory,{withFileTypes:true})){const file=path.join(directory,entry.name);if(entry.isDirectory())result.push(...await walk(file));else if(entry.isFile())result.push(file);}return result;}
+const files=await walk(root),errors=[];let externalImports=0;
+for(const file of files.filter(file=>file.endsWith('.js')||file.endsWith('.mjs')))try{execFileSync(process.execPath,['--check',file],{stdio:'pipe'});}catch(error){errors.push(path.relative(root,file)+': '+error.stderr?.toString());}
+const runtimeFiles=files.filter(file=>file===path.join(root,'app.js')||file.startsWith(path.join(root,'runtime')+path.sep)||file.startsWith(path.join(root,'src')+path.sep));
+for(const file of runtimeFiles.filter(file=>file.endsWith('.js'))){const code=await fs.readFile(file,'utf8');for(const match of code.matchAll(/\bfrom\s*['"]([^'"]+)['"]/g)){const spec=match[1];if(!spec.startsWith('.')){externalImports++;errors.push('外部运行时导入：'+spec);}else try{await fs.access(path.resolve(path.dirname(file),spec));}catch{errors.push('导入缺失：'+spec+' in '+file);}}}
+if(files.some(file=>file.endsWith('.vue')))errors.push('HTML 交付中出现 .vue 文件');
+const routes=JSON.parse(await fs.readFile(path.join(root,'routes.json'),'utf8')),business=routes.filter(route=>route.component&&!route.path.startsWith('/module/'));
+if(business.length!==37)errors.push('业务路由数量应为 37');
+for(const route of routes.filter(route=>route.component))try{await fs.access(path.join(root,route.component));await fs.access(path.join(root,route.component.replace(/\.js$/,'.html')));}catch{errors.push('路由文件缺失：'+route.path);}
+const baseline=JSON.parse(await fs.readFile(path.join(root,'baseline.json'),'utf8'));
+let sourceFilesChecked=0,sourceManifestFilesChecked=0,sourceStatus='not-present';
+try{await fs.access(source);sourceStatus='checked';for(const [name,expected] of Object.entries(baseline.files)){if(hash(await fs.readFile(path.join(source,name)))!==expected)errors.push('来源变更：'+name);sourceFilesChecked++;}
+const manifest=JSON.parse(await fs.readFile(path.join(source,'交付校验.json'),'utf8'));for(const [name,expected] of Object.entries(manifest.files)){if(hash(await fs.readFile(path.join(source,name)))!==expected)errors.push('原版清单不符：'+name);sourceManifestFilesChecked++;}
+}catch(error){if(sourceStatus==='checked')errors.push('来源校验失败：'+error.message);}
+const report={checkedAt:new Date().toISOString(),syntaxFilesChecked:files.filter(f=>f.endsWith('.js')||f.endsWith('.mjs')).length,runtimeExternalImports:externalImports,businessRoutes:business.length,uniqueBusinessPages:new Set(business.map(r=>r.component)).size,htmlTemplates:files.filter(f=>f.startsWith(path.join(root,'src')+path.sep)&&f.endsWith('.html')).length,sourceStatus,sourceFilesChecked,sourceManifestFilesChecked,errors,status:errors.length?'FAIL':'PASS'};
+await fs.mkdir(path.join(root,'qa'),{recursive:true});await fs.writeFile(path.join(root,'qa/integrity.json'),JSON.stringify(report,null,2)+'\n');
+console.log(JSON.stringify(report,null,2));if(errors.length)process.exitCode=1;

package/skills/i3-ui-prototype/assets/templates/enterprise-admin/serve.cjs

@@ -0,0 +1,16 @@
+'use strict';
+const http = require('node:http');
+const fs = require('node:fs');
+const path = require('node:path');
+const root = path.resolve(__dirname, '..');
+const types = { '.html': 'text/html', '.mjs': 'text/javascript', '.js': 'text/javascript', '.svg': 'image/svg+xml', '.png': 'image/png', '.jpg': 'image/jpeg', '.webp': 'image/webp', '.css': 'text/css', '.json': 'application/json' };
+const server = http.createServer((req, res) => {
+  let relative;
+  try { relative = decodeURIComponent(new URL(req.url, 'http://localhost').pathname); } catch { res.writeHead(400).end(); return; }
+  if (relative === '/') { res.writeHead(302, { Location: '/app/index.html' }).end(); return; }
+  const file = path.resolve(root, '.' + relative);
+  if (!file.startsWith(root + path.sep) || !fs.existsSync(file) || !fs.statSync(file).isFile() || !fs.realpathSync(file).startsWith(fs.realpathSync(root) + path.sep)) { res.writeHead(404).end(); return; }
+  res.writeHead(200, { 'Content-Type': (types[path.extname(file)] || 'application/octet-stream') + '; charset=utf-8', 'Cache-Control': 'no-store' });
+  fs.createReadStream(file).pipe(res);
+});
+server.listen(Number(process.argv[2] || 0), '127.0.0.1', () => process.stdout.write(`原型预览：http://127.0.0.1:${server.address().port}/\n`));

package/skills/i3-ui-prototype/assets/templates/enterprise-admin/usability.css

@@ -0,0 +1,44 @@
+/* Instance-level usability fixes. The complete EASEL reference stays unchanged. */
+:root {
+  --prototype-scroll-track: #f0f0f0;
+  --prototype-scroll-thumb: #8c8c8c;
+}
+
+/* The captured Ant stylesheet contains temporary document scroll-lock rules.
+   Restore the full body and native document scrolling. Live dialogs still
+   apply their own inline overflow:hidden while they are open. */
+html body {
+  width: 100%;
+  overflow-y: visible;
+}
+
+/* Explicit sizing keeps scrollbars visible on hosts with overlay scrollbars. */
+*::-webkit-scrollbar {
+  width: 12px;
+  height: 12px;
+}
+*::-webkit-scrollbar-track,
+*::-webkit-scrollbar-corner {
+  background: var(--prototype-scroll-track);
+}
+*::-webkit-scrollbar-thumb {
+  background: var(--prototype-scroll-thumb);
+  border: 2px solid var(--prototype-scroll-track);
+  border-radius: 6px;
+}
+*::-webkit-scrollbar-thumb:hover {
+  background: #595959;
+}
+
+/* Ant's exported CSS expects overflow navigation controls. The native runtime
+   uses real tab buttons, so expose native scrolling rather than clipping them. */
+.ant-tabs > .ant-tabs-nav .ant-tabs-nav-wrap,
+.ant-tabs > div > .ant-tabs-nav .ant-tabs-nav-wrap {
+  overflow-x: auto;
+  overflow-y: hidden;
+}
+
+.ant-table-content,
+.ant-tabs-nav-wrap {
+  scrollbar-color: var(--prototype-scroll-thumb) var(--prototype-scroll-track);
+}

package/skills/i3-ui-prototype/assets/templates/gallery/index.html

@@ -0,0 +1,40 @@
+<!doctype html>
+<html lang="zh-CN">
+<head>
+<meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
+<title>选择原型类型 · i3 Composer</title><link rel="icon" href="data:,">
+<style>
+*{box-sizing:border-box}html{height:100%}body{height:100vh;height:100dvh;display:flex;flex-direction:column;margin:0;background:#f5f5f5;color:#262626;font:14px/1.5 -apple-system,BlinkMacSystemFont,"PingFang SC","Microsoft YaHei",sans-serif}header{flex:none;padding:20px 24px 16px;background:#fff;border-bottom:1px solid #e8e8e8}h1{font-size:22px;margin:0 0 4px}p{margin:0;color:#595959}.options{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:12px;margin:16px 0}.option{text-align:left;border:1px solid #d9d9d9;border-radius:8px;padding:12px 14px;background:#fff;color:inherit;font:inherit;cursor:pointer}.option strong{display:block;font-size:16px;margin-bottom:4px}.option span{display:block;font-size:13px;color:#595959}.option[aria-pressed=true]{border-color:#1677ff;background:#f0f7ff}.option:disabled{cursor:default;background:#fafafa;color:#8c8c8c}.option:disabled span{color:#8c8c8c}.option:focus-visible,a:focus-visible{outline:3px solid #1677ff;outline-offset:3px}.summary{display:flex;align-items:center;justify-content:space-between;gap:16px;flex-wrap:wrap}.summary a{color:#0958d9;text-decoration:none;white-space:nowrap}.summary a:hover{text-decoration:underline}iframe{display:block;flex:1 0 240px;width:100%;min-height:240px;border:0;background:#fff}.error{color:#cf1322}
+@media(max-width:900px){header{padding:16px}.options{grid-template-columns:repeat(2,minmax(0,1fr));gap:8px}.option{padding:10px}.option strong{font-size:14px}.summary{gap:8px}}
+@media(prefers-reduced-motion:reduce){*{scroll-behavior:auto}}
+</style>
+</head>
+<body>
+<header><h1>选择原型类型</h1><p>先确定界面结构，再结合业务需求生成原型。已有项目优先沿用已确认的设计。</p>
+<div class="options" aria-label="原型类型"></div>
+<div class="summary"><p id="summary" role="status">正在读取模板…</p><a id="open" target="_blank" rel="noopener">打开完整演示 ↗</a></div>
+</header>
+<iframe title="企业管理后台完整交互演示"></iframe>
+<script type="module">
+const assetRoot=new URL('../',location.href),frame=document.querySelector('iframe'),summary=document.querySelector('#summary');
+try{
+ const response=await fetch(new URL('catalog.json',assetRoot));if(!response.ok)throw new Error('无法读取模板目录');
+ const catalog=await response.json();let selected=false;
+ for(const entry of catalog.templates){
+  const button=document.createElement('button');button.className='option';button.type='button';
+  const title=document.createElement('strong');title.textContent=entry.name;button.append(title);
+  const hint=document.createElement('span');hint.textContent=entry.availability==='available'?'可操作演示 · 等待人工评审':'待建设';button.append(hint);
+  button.disabled=entry.availability!=='available';button.setAttribute('aria-pressed','false');
+  button.addEventListener('click',()=>{
+   const url=new URL(entry.preview,assetRoot);if(url.origin!==location.origin)throw new Error('模板入口必须来自本地资源');
+   document.querySelectorAll('.option').forEach(item=>item.setAttribute('aria-pressed',String(item===button)));
+   frame.src=url.href;frame.title=entry.name+'完整交互演示';document.querySelector('#open').href=url.href;
+   summary.textContent=entry.name+' · '+entry.version+' · 来源：'+entry.source+'。保留完整示例，当前等待人工评审。';
+  });
+  document.querySelector('.options').append(button);
+  if(!selected&&!button.disabled){button.click();selected=true}
+ }
+ if(!selected)throw new Error('当前没有可用模板');
+}catch(error){summary.textContent=error.message;summary.classList.add('error')}
+</script>
+</body></html>

package/skills/i3-ui-prototype/assets/templates/modern-workspace/manifest.json

@@ -0,0 +1,9 @@
+{
+  "schemaVersion": 1,
+  "adapter": "legacy-html",
+  "preset": "modern-workspace/preset.json",
+  "resources": {
+    "common": "common"
+  },
+  "defaultTitle": "立项申请"
+}

package/skills/i3-ui-prototype/assets/templates/modern-workspace/preset.json

@@ -0,0 +1,6 @@
+{
+  "layout": "workspace",
+  "primitive": { "teal": "#0f766e", "slate": "#1d3331", "spacing": [4, 8, 12, 16, 24, 32] },
+  "semantic": { "color-primary": "#0f766e", "color-text": "#1d3331", "color-muted": "#566b67", "color-background": "#f5f8f7", "color-surface": "#ffffff", "color-border": "#d9e5e1", "color-sidebar": "#ffffff", "color-sidebar-text": "#1d3331", "color-success": "#166534", "color-warning": "#92400e", "color-danger": "#b91c1c", "space-page": "32px", "font-body": "system-ui, -apple-system, 'PingFang SC', 'Microsoft YaHei', sans-serif" },
+  "component": { "radius-panel": "12px", "control-height": "44px", "table-cell-space": "20px", "sidebar-width": "220px" }
+}

package/skills/i3-ui-prototype/assets/templates/serve-gallery.cjs

@@ -0,0 +1,16 @@
+'use strict';
+const http = require('node:http');
+const fs = require('node:fs');
+const path = require('node:path');
+const root = path.resolve(__dirname);
+const types = { '.html': 'text/html', '.mjs': 'text/javascript', '.js': 'text/javascript', '.css': 'text/css', '.json': 'application/json', '.svg': 'image/svg+xml', '.png': 'image/png', '.jpg': 'image/jpeg', '.webp': 'image/webp' };
+const server = http.createServer((req, res) => {
+  let relative;
+  try { relative = decodeURIComponent(new URL(req.url, 'http://localhost').pathname); } catch { res.writeHead(400).end(); return; }
+  if (relative === '/') { res.writeHead(302, { Location: '/gallery/index.html' }).end(); return; }
+  const file = path.resolve(root, '.' + relative);
+  if (!file.startsWith(root + path.sep) || !fs.existsSync(file) || !fs.statSync(file).isFile() || !fs.realpathSync(file).startsWith(root + path.sep)) { res.writeHead(404).end(); return; }
+  res.writeHead(200, { 'Content-Type': (types[path.extname(file)] || 'application/octet-stream') + '; charset=utf-8', 'Cache-Control': 'no-store' });
+  fs.createReadStream(file).pipe(res);
+});
+server.listen(Number(process.argv[2] || 0), '127.0.0.1', () => process.stdout.write(`模板预览：http://127.0.0.1:${server.address().port}/\n`));

package/skills/i3-ui-prototype/references/artifact-contract.md

@@ -0,0 +1,41 @@
+# 产物与验收
+
+<!-- i3:zh-guide:start -->
+## 中文使用说明
+
+按下文完整工程步骤、检查项与验证条件执行。根据任务选择适用步骤，保留证据、风险和退出条件；正文示例中的英文标签在面向用户输出时译为中文。
+
+默认使用简体中文解释、追问及生成报告；用户明确要求其他语言时可切换。原方法正文、引用、阈值和审批条件完整保留。代码标识、路径、命令、工具参数、JSON 键/枚举与原文引用保持原样。
+<!-- i3:zh-guide:end -->
+
+项目 `.i3-ui-prototypes.json` 的 prototypes 列出 id、相对目录和 appliesTo。初始 appliesTo 为空，按实际业务补充模块范围；工程任务选择适用原型，不能把所有基线强加到无关模块。
+
+原型目录含 prototype.json、requirements-map.json、design-system/MASTER.md 与 tokens.json、app、mocks、qa、reviews、baselines、baseline.json、HANDOFF.md。企业后台生成 EASEL 完整参考示例，兼容旧模板生成通用演示；用于新业务时代理必须适配实际业务。企业后台还保留 design-system/source.json、runtime 与 purpose，记录来源、实例数据隔离及用途。模板来源与许可在技能资源中保留。生成实例 app/qa 是来源历史记录；本轮验收证据必须写入根目录 qa，不能复用历史通过状态。
+
+新增实例的 template.adapter 记录清单选定的运行层；模板指纹覆盖 manifest、preset、声明资源及 adapter 实现。旧实例不补写缺失字段或改写已有模板摘要，其原 contentManifest 身份与摘要保持兼容。运行身份、必需资源和保护路径由明确的运行层合同决定，未知运行层拒绝，不回退兼容演示；详见 [template-adapters.md](template-adapters.md)。
+
+需求映射 schemaVersion=1，每个 requirement 具有唯一 id、pages、fields、actions、roles、states、scenarios 和 confirmation。scenarios 是浏览器检查的场景 ID；涉及权限与状态变化的需求应补充可见范围、转移条件及校验。未确认规则写入 openQuestions。
+
+浏览器记录 qa/browser.json：
+
+```json
+{
+  "schemaVersion": 1,
+  "revision": "r001",
+  "digest": "当前 manifest 命令返回的 SHA-256",
+  "status": "passed",
+  "source": "实际浏览器工具与运行记录位置",
+  "screenshots": ["qa/screenshots/desktop.png", "qa/screenshots/narrow.png"],
+  "journeys": [{"id": "需求映射中的场景ID", "status": "passed"}],
+  "consoleErrors": [],
+  "viewports": [1440, 768]
+}
+```
+
+每个必要场景都必须实际执行。记录无法执行或失败的项，不以填写 JSON 替代运行。结构验收检查记录一致性与引用存在；其结果不能独立证明浏览器发生过执行。截图固定数据与视口，键盘和焦点采用实际交互验证。
+
+确认文件含当前 revision 和 digest，以及 reviewer、statement、source 三个非空字段。source 指向可信的人类确认记录；statement 保留用户认可意思。测试夹具的模拟确认仅用于验证保护逻辑。
+
+快照保存运行文件、需求、设计契约和专业建议记录，manifest.json 记录摘要，review.json 记录确认。baseline.json 引用当前已确认快照。新候选不覆盖旧快照；快照损坏或失去匹配时报告 corrupt-baseline。
+
+check-prototype --enforce-baseline 对设计契约、token、需求映射或模板/模式改变返回失败，供项目选择接入门禁。它不会自动分析不同框架的生产组件；真实工程仍需组件映射、受影响页面的浏览器与业务回归。