@givolt/i3-composer-agent 2.3.1 → 2.3.3

package/evals/zh-CN/cases/i3-using-agent-skills.json

@@ -23,6 +23,10 @@
       {
         "prompt": "为项目配置 CI/CD 流水线，自动运行构建和测试。",
         "owner": "i3-ci-cd-and-automation"
+      },
+      {
+        "prompt": "选择 UI 原型模板，制作一个可操作的申请审批交互原型供评审。",
+        "owner": "i3-ui-prototype"
       }
     ]
   },
@@ -40,6 +44,32 @@
         "Core operating behaviors (assumptions surfaced) are respected",
         "人类可读的追问、说明、进度、报告与生成文档使用简体中文；保留代码、路径、工具参数、JSON 协议及机器状态的原始格式。"
       ]
+    },
+    {
+      "id": 1002,
+      "kind": "dialogue",
+      "prompt": "用户希望根据可编辑 HTML 参考和简短业务说明制作设备管理评审原型。请在当前会话选择适用技能并说明下一步；不创建文件，不启动独立任务。",
+      "expected_output": "Ordinary routing to i3-ui-prototype in the main session, with operation and scope decided by the working skill",
+      "expectations": [
+        "The meta-skill selects the prototype workflow for reviewable prototype work",
+        "The main session uses the working skill without requiring a dedicated persona, persistent routing rule or parent-child result protocol",
+        "Detailed operation, framework and acceptance decisions remain in the prototype workflow rather than being copied into the meta-skill",
+        "The requested read-only routing explanation does not initialize a prototype or claim implementation",
+        "人类可读的追问、说明、进度、报告与生成文档使用简体中文；保留代码、路径、工具参数、JSON 协议及机器状态的原始格式。"
+      ]
+    },
+    {
+      "id": 1003,
+      "kind": "dialogue",
+      "prompt": "分别收到两个任务：实现已认可的生产 Vue 表单组件并支持键盘操作；对照已认可基线检查评审原型。请分别路由并说明原工程工作流如何继续适用，不执行这两个任务。",
+      "expected_output": "Separate routing for production engineering and prototype review without changing the general lifecycle",
+      "expectations": [
+        "Production UI implementation follows the engineering workflow with the frontend implementation method",
+        "Prototype fidelity inspection selects the prototype workflow",
+        "The prototype route does not replace generic planning, implementation or review methods or impose prototype-specific delegation on them",
+        "The response does not invent runtime verification or human approval",
+        "人类可读的追问、说明、进度、报告与生成文档使用简体中文；保留代码、路径、工具参数、JSON 协议及机器状态的原始格式。"
+      ]
     }
   ]
 }

package/hooks/codebuddy-upstream.cjs

@@ -0,0 +1,93 @@
+#!/usr/bin/env node
+'use strict';
+// Original scripts stay unchanged; this adapter only maps host paths and input fields.
+const fs=require('node:fs'),path=require('node:path'),os=require('node:os'),assert=require('node:assert/strict');
+const M=require('./manage.cjs');
+function projectKey(project){return (path.basename(project).replace(/[^a-zA-Z0-9_-]/g,'-').slice(0,32)||'project')+'-'+M.sha(project).slice(0,16);}
+function effective({project,product,group,home=os.homedir(),env=process.env,read=file=>M.modules().R.fileIO.read(file),load=base=>registration(base)}) {
+ const projectBase=path.join(project,'.codebuddy'),globalBase=M.modules().P.globalBase({home,env});
+ const projectText=read(path.join(projectBase,'settings.json')),local=read(path.join(projectBase,'settings.local.json'));
+ if(local){const settings=M.config(local);assert.ok(!settings.hooks&&!settings.disableAllHooks&&!settings.allowManagedHooksOnly,'Local Hook override requires review');}
+ for(const base of [projectBase,globalBase]){const settings=M.config(read(path.join(base,'settings.json')));assert.ok(!settings.disableAllHooks&&!settings.allowManagedHooksOnly,'Host policy prevents Hooks');}
+ const bases=product==='ide'&&projectText!==null?[projectBase]:[projectBase,globalBase];
+ for(const base of [...new Set(bases)]){const record=load(base);if(record?.groups[group]){assert.equal(record.product,product,'Conflicting CodeBuddy products');return record;}}
+ return null;
+}
+function projectFor(options,payload,env=process.env,real=file=>fs.realpathSync(file),callbackCwd=process.cwd(),workspace=(file,session)=>require(path.join(M.modules().scripts,'execution-evidence.cjs')).ideWorkspace(file,session)) {
+ // CLI 2.169 omits cwd on SessionStart. Use the actual startup Hook process
+ // directory only for that event; other events still require native cwd.
+ const cwd=payload.cwd||(payload.hook_event_name==='SessionStart'?callbackCwd:null);
+ assert.ok(path.isAbsolute(cwd||''),'Native Hook cwd required');
+ const ideRoot=options.product==='ide'&&payload.client==='CodeBuddyIDE'&&cwd==='/';
+ const project=real(options.scope==='project'?path.dirname(options.base):ideRoot?workspace(payload.transcript_path,payload.session_id):env.CODEBUDDY_PROJECT_DIR||env.CLAUDE_PROJECT_DIR||cwd);
+ const relative=path.relative(project,real(ideRoot?project:cwd));assert.ok(relative!=='..'&&!relative.startsWith('..'+path.sep)&&!path.isAbsolute(relative),'Hook working directory is outside the registered project');return project;
+}
+function invocation({group,event,project,cwd=project,base,payload},source) {
+ const value=structuredClone(payload),cache=path.join(base,'cache/i3-composer-agent/hooks',projectKey(project));
+ if(group==='sdd-cache') {
+  if(value.tool_name!=='WebFetch'||!['PreToolUse','PostToolUse'].includes(event))return null;
+  const before='${CLAUDE_PROJECT_DIR:-$PWD}/.claude/sdd-cache';assert.equal(source.split(before).length,3,'Upstream cache path changed; review the adapter');
+  source=source.replaceAll(before,'${I3_HOOK_CACHE}/sdd-cache');
+ } else if(group==='simplify-ignore') {
+  if(event==='Stop')value.tool_name='';
+  if(event!=='Stop') {
+   if(event==='PreToolUse'?value.tool_name!=='Read':!['Edit','Write'].includes(value.tool_name))return null;
+   const file=value.tool_input?.file_path||value.tool_input?.filePath;if(typeof file!=='string')return null;
+   const resolved=path.resolve(cwd,file),relative=path.relative(project,resolved);
+   if(relative==='..'||relative.startsWith('..'+path.sep)||path.isAbsolute(relative))return null;
+   value.tool_input.file_path=resolved;
+  }
+  const before='${CLAUDE_PROJECT_DIR:-.}/.claude/.simplify-ignore-cache';assert.equal(source.split(before).length,2,'Upstream simplify cache path changed; review the adapter');
+  source=source.replace(before,'${I3_HOOK_CACHE}/simplify-ignore');
+ }else assert.ok(group==='session-start'&&event==='SessionStart','Unknown upstream Hook event');
+ return {source,payload:value,cache,env:{CLAUDE_PROJECT_DIR:project,CODEBUDDY_PROJECT_DIR:project,I3_HOOK_CACHE:cache}};
+}
+function bundle(directory=__dirname) {
+ const files=['manage.cjs','codebuddy-upstream.cjs','session-start.sh','sdd-cache-pre.sh','sdd-cache-post.sh','simplify-ignore.sh'];
+ return M.sha(JSON.stringify(files.map(file=>{let text=fs.readFileSync(path.join(directory,file),'utf8');if(file==='session-start.sh')text=text.replace(/^SKILLS_DIR=.*$/m,'SKILLS_DIR=<native-layout>');return [file,M.sha(text)];})));
+}
+function registration(base) {
+ const io=M.modules().R.fileIO,raw=io.read(path.join(base,'state/i3-composer-agent/hooks.json'));if(raw===null)return null;
+ const record=JSON.parse(raw),settingsText=io.read(path.join(base,'settings.json'));
+ M.validateOwned(M.config(settingsText),record,base,record.scope);
+ for(const item of Object.values(record.groups))assert.equal(item.scriptDigest,bundle(),'Upstream Hook adapter changed; refresh registration');
+ return {...record,settingsDigest:M.sha(settingsText)};
+}
+function observe(base,project,group,payload,record,result) {
+ const io=M.modules().R.fileIO,file=path.join(base,'state/i3-composer-agent/hook-observations',projectKey(project),group+'.json'),unlock=io.lock(file);
+ try {
+  const before=io.read(file),old=before?JSON.parse(before):null;
+  const same=old?.settingsDigest===record.settingsDigest&&old?.scriptDigest===record.groups[group].scriptDigest;
+  const value={schemaVersion:1,group,base,project,sessionId:payload.session_id||null,event:payload.hook_event_name,at:new Date().toISOString(),
+   events:[...new Set([...(same?old.events:[]),payload.hook_event_name])],exitCode:result.status,settingsDigest:record.settingsDigest,scriptDigest:record.groups[group].scriptDigest,invocationVerified:false};
+  io.write(file,M.json(value),M.digest(before));
+ }finally{unlock();}
+}
+function main(argv=process.argv.slice(2),raw=fs.readFileSync(0,'utf8')) {
+ assert.ok(Buffer.byteLength(raw)<=4*1024*1024,'Hook input too large');const options={};
+ while(argv.length){const flag=argv.shift();assert.ok(flag.startsWith('--')&&argv.length,'Invalid Hook argument');assert.ok(['registration','group','base','scope','product','event'].includes(flag.slice(2)),'Unknown Hook argument');options[flag.slice(2)]=argv.shift();}
+ assert.equal(options.registration,M.OWNER,'Invalid Hook registration');assert.ok(path.isAbsolute(options.base||''),'Absolute Hook base required');assert.ok(['project','global'].includes(options.scope),'Invalid Hook scope');
+ const item=M.catalog.find(x=>x.id===options.group&&x.origin==='upstream');assert.ok(item?.events.includes(options.event),'Invalid Hook group/event');
+ const payload=JSON.parse(raw);assert.equal(payload.hook_event_name,options.event,'Hook payload event differs');const project=projectFor(options,payload);
+ const expected=options.scope==='project'?path.join(project,'.codebuddy'):M.modules().P.globalBase();assert.equal(options.base,expected,'Hook installation scope differs');
+ const record=registration(options.base);
+ if(!record?.groups[options.group])return {status:0,stdout:'{"continue":true}\n',stderr:''};
+ assert.equal(record.product,options.product,'Hook product differs');
+ if(effective({project,product:options.product,group:options.group})?.base!==options.base)return {status:0,stdout:'{"continue":true}\n',stderr:''};
+ const filename=options.group==='session-start'?'session-start.sh':options.group==='simplify-ignore'?'simplify-ignore.sh':options.event==='PreToolUse'?'sdd-cache-pre.sh':'sdd-cache-post.sh';
+ const cwd=options.product==='ide'&&payload.client==='CodeBuddyIDE'&&payload.cwd==='/'?project:payload.cwd||project;
+ const script=path.join(__dirname,filename),prepared=invocation({...options,project,cwd,payload},fs.readFileSync(script,'utf8'));
+ if(!prepared)return {status:0,stdout:'{"continue":true}\n',stderr:''};
+ if(options.group==='simplify-ignore'&&options.event!=='Stop'&&fs.existsSync(prepared.payload.tool_input.file_path)) {
+  const real=fs.realpathSync(prepared.payload.tool_input.file_path),relative=path.relative(project,real);assert.ok(relative!=='..'&&!relative.startsWith('..'+path.sep)&&!path.isAbsolute(relative),'Protected file symlink escapes the project');
+ }
+ const unlock=M.modules().R.fileIO.lock(path.join(prepared.cache,'.'+options.group+'.event'));
+ let result;try {
+  result=require('node:child_process').spawnSync(record.groups[options.group].bashPath,['-c',prepared.source,script],{cwd:project,env:{...process.env,...prepared.env},input:JSON.stringify(prepared.payload),encoding:'utf8',timeout:15000,maxBuffer:8*1024*1024});
+  if(result.error||result.status===null)throw new Error(result.error?.message||'Upstream Hook did not complete');
+ }finally{unlock();}
+ try{observe(options.base,project,options.group,payload,record,result);}catch(error){result.stderr=(result.stderr||'')+`\ni3 Hook observation unavailable: ${error.message}\n`;}
+ return result;
+}
+module.exports={projectKey,projectFor,effective,invocation,bundle,registration,observe,main};
+if(require.main===module)try{const result=main();process.stdout.write(result.stdout||'');process.stderr.write(result.stderr||'');process.exitCode=result.status;}catch(error){process.stderr.write(`i3 CodeBuddy Hook unavailable: ${error.message}\n`);process.exitCode=1;}

package/hooks/i3-prototype.cjs

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+'use strict';
+// Stable host Hook entry; the workflow and A+B implementation remain in the Skill.
+const fs=require('node:fs'),path=require('node:path');
+function main(argv=process.argv.slice(2),raw=fs.readFileSync(0,'utf8'),load=()=>require(path.join(require('./manage.cjs').modules().scripts,'hosts/codebuddy.cjs'))) {
+ return load().main(argv,raw);
+}
+module.exports={main};
+if(require.main===module)try {
+ const result=main();process.stdout.write(JSON.stringify(result.output)+'\n');
+ if(result.code===2)process.stderr.write(result.output.reason+'\n');process.exitCode=result.code;
+}catch(error){process.stderr.write(`i3 prototype audit unavailable: ${error.message}. Strict A gates remain unverified.\n`);process.exitCode=1;}

package/hooks/manage.cjs

@@ -0,0 +1,162 @@
+#!/usr/bin/env node
+'use strict';
+// CodeBuddy settings protocol: https://www.codebuddy.cn/docs/cli/hooks
+// IDE override semantics: https://www.codebuddy.cn/docs/ide/Features/Hooks
+const fs=require('node:fs'),path=require('node:path'),os=require('node:os'),crypto=require('node:crypto'),assert=require('node:assert/strict');
+const OWNER='i3-composer-agent-codebuddy-v1';
+const catalog=[
+ {id:'session-start',name:'Skill 发现与路由',origin:'upstream',files:['session-start.sh'],events:['SessionStart'],dependencies:['bash','jq'],condition:'明确 skill-routing=hook；原生路由使用 native，避免重复注入'},
+ {id:'sdd-cache',name:'官方文档请求缓存',origin:'upstream',files:['sdd-cache-pre.sh','sdd-cache-post.sh'],events:['PreToolUse','PostToolUse'],dependencies:['bash','jq','curl','sha256'],condition:'实际 WebFetch；仅源站 304 复用'},
+ {id:'simplify-ignore',name:'代码块简化保护',origin:'upstream',files:['simplify-ignore.sh'],events:['PreToolUse','PostToolUse','Stop'],dependencies:['bash','jq','sha1'],condition:'使用 simplify-ignore 标记；会在运行期间替换标记块并在 Stop 恢复'},
+ {id:'prototype',name:'原型执行审计',origin:'i3',events:['SessionStart','UserPromptSubmit','PreToolUse','PostToolUse','Stop'],dependencies:['node'],condition:'真实 CodeBuddy IDE/CLI；默认从原生 Hook 自动识别日志，支持手动目录限制'},
+];
+const digest=value=>crypto.createHash('sha256').update(JSON.stringify(value)).digest('hex');
+const sha=bytes=>crypto.createHash('sha256').update(bytes).digest('hex');
+const json=value=>JSON.stringify(value,null,2)+'\n';
+function selection(value,action='check') {
+ const ids=value===undefined?(['check','list'].includes(action)?catalog.map(x=>x.id):['prototype']):value==='all'?catalog.map(x=>x.id):value.split(',');
+ assert.ok(ids.length&&ids.every(id=>catalog.some(item=>item.id===id)),'Unknown Hook group; choose session-start,sdd-cache,simplify-ignore,prototype or all');
+ return [...new Set(ids)];
+}
+function quote(value){assert.ok(typeof value==='string'&&!/[\x00\r\n]/.test(value),'Unsafe Hook argument');return "'"+value.replaceAll("'","'\\''")+"'";}
+function config(raw){const value=raw===null?{}:JSON.parse(raw);assert.ok(value&&typeof value==='object'&&!Array.isArray(value),'Settings must be an object');assert.ok(value.hooks===undefined||value.hooks&&typeof value.hooks==='object'&&!Array.isArray(value.hooks),'Invalid hooks configuration');for(const groups of Object.values(value.hooks||{})){assert.ok(Array.isArray(groups),'Invalid Hook groups');for(const group of groups)assert.ok(group&&Array.isArray(group.hooks),'Invalid Hook group');}return value;}
+function modules() {
+ const roots=[path.resolve(__dirname,'..'),path.resolve(__dirname,'../..')];
+ const candidates=roots.flatMap(root=>['i3-ui-prototype',['ui','prototype'].join('-')].map(id=>path.join(root,'skills',id,'scripts')));
+ const scripts=candidates.find(dir=>fs.existsSync(path.join(dir,'prototype-hooks.cjs')));assert.ok(scripts,'Prototype audit implementation is missing; install the complete package');
+ return {scripts,R:require(path.join(scripts,'codebuddy-registration.cjs')),P:require(path.join(scripts,'prototype-hooks.cjs'))};
+}
+function owned(group){return group.hooks.some(h=>typeof h.command==='string'&&h.command.includes(OWNER));}
+function validateOwned(settings,record,base,scope) {
+ if(record){assert.equal(record.owner,OWNER,'Unknown Hook ownership');assert.equal(record.schemaVersion,1,'Unsupported Hook ownership');assert.equal(record.base,base,'Hook base differs');assert.equal(record.scope,scope,'Hook scope differs');assert.ok(record.groups&&typeof record.groups==='object'&&!Array.isArray(record.groups),'Invalid owned Hook groups');
+  for(const [id,item] of Object.entries(record.groups)){const known=catalog.find(x=>x.id===id&&x.origin==='upstream');assert.ok(known&&item&&item.groups,'Unknown owned Hook group');assert.deepEqual(Object.keys(item.groups).sort(),[...known.events].sort(),'Owned Hook events changed');}
+ }
+ const found=new Set();
+ for(const [event,groups] of Object.entries(settings.hooks||{}))for(const group of groups.filter(owned)) {
+  const ids=Object.keys(record?.groups||{}).filter(id=>record.groups[id].groups[event]&&group.hooks.some(h=>h.command?.includes(`--group' '${id}'`)));
+  assert.equal(ids.length,1,'Hook ownership is missing; preserve the unknown command');const key=ids[0]+':'+event;
+  assert.ok(!found.has(key),'Duplicate owned Hook');assert.deepEqual(group,record.groups[ids[0]].groups[event],'Owned Hook was modified; preserve user changes');found.add(key);
+ }
+ for(const [id,item] of Object.entries(record?.groups||{}))for(const event of Object.keys(item.groups))assert.ok(found.has(id+':'+event),'Owned Hook registration is missing');
+}
+function requirements(id,deps) {
+ for(const name of catalog.find(x=>x.id===id).dependencies){if(name==='sha256')assert.ok(deps.shasum||deps.sha256sum,'Missing shasum or sha256sum');else if(name==='sha1')assert.ok(deps.shasum||deps.sha1sum,'Missing shasum or sha1sum');else assert.ok(deps[name],`Missing ${name}; install it separately before enabling ${id}`);}
+}
+function planUpstream(options) {
+ const {base,scope,product,action,record=null,settingsText=null,nodePath,hookDirectory,scriptDigest,dependencies={},skillRouting}=options;
+ assert.ok(['keep','enable','disable'].includes(action),'Invalid Hook action');assert.ok(['project','global'].includes(scope),'Specify project or global scope');
+ const settings=config(settingsText);validateOwned(settings,record,base,scope);
+ const chosen=selection(options.groups,action).filter(id=>id!=='prototype'),enabled=new Set(Object.keys(record?.groups||{}));
+ if(action==='enable')for(const id of chosen){if(id==='session-start')assert.equal(skillRouting,'hook','session-start requires explicit skill-routing=hook; native routing must not be duplicated');requirements(id,dependencies);enabled.add(id);}
+ if(action==='disable')for(const id of chosen)enabled.delete(id);
+ if(enabled.size){assert.ok(['ide','cli'].includes(product),'Specify CodeBuddy product ide or cli');if(record)assert.equal(product,record.product,'Disable the previous product profile before changing it');assert.match(scriptDigest,/^[a-f0-9]{64}$/);for(const p of [base,nodePath,hookDirectory])assert.ok(path.isAbsolute(p),'Absolute registration paths required');}
+ // Remove only exact owned groups after validation. All user Hook groups survive.
+ for(const event of Object.keys(settings.hooks||{}))settings.hooks[event]=settings.hooks[event].filter(g=>!owned(g));
+ const groups={};
+ for(const item of catalog.filter(x=>enabled.has(x.id))) {
+  const entry={product,scriptDigest,nodePath,bashPath:dependencies.bash||record?.groups[item.id]?.bashPath,skillRouting:item.id==='session-start'?'hook':null,groups:{}};
+  for(const event of item.events) {
+   const matcher=item.id==='sdd-cache'?'^WebFetch$':event==='PreToolUse'?'^Read$':'^(Edit|Write)$';
+   const argv=[nodePath,path.join(hookDirectory,'codebuddy-upstream.cjs'),'--registration',OWNER,'--group',item.id,'--base',base,'--scope',scope,'--product',product,'--event',event];
+   const group={...(event.endsWith('ToolUse')?{matcher}:{}),hooks:[{type:'command',command:argv.map(quote).join(' '),timeout:item.id==='sdd-cache'?15:20}]};
+   entry.groups[event]=group;settings.hooks||={};(settings.hooks[event]||=[]).push(group);
+  }
+  groups[item.id]=entry;
+ }
+ const recordAfter=enabled.size?{schemaVersion:1,owner:OWNER,base,scope,product,productVersion:options.productVersion||record?.productVersion||'unreported',groups}:null;
+ const afterText=!record&&!chosen.length||!record&&action!=='enable'?settingsText:json(settings);
+ return {afterText,recordAfter};
+}
+function apply(change,io=modules().R.fileIO) {
+ const unlock=io.lock?io.lock(change.changes[0].file):()=>{},written=[];
+ try {
+  for(const entry of change.changes)assert.equal(digest(io.read(entry.file)),digest(entry.before),'Hook configuration changed after planning');
+  try {for(const entry of change.changes)if(entry.before!==entry.after){io.write(entry.file,entry.after,digest(entry.before));written.push(entry);}}
+  catch(error){for(const entry of written.reverse())if(io.read(entry.file)===entry.after)io.write(entry.file,entry.before,digest(entry.after));throw error;}
+  return change.summary;
+ }finally{unlock();}
+}
+function executable(name,env=process.env) {
+ for(const folder of (env.PATH||'').split(path.delimiter)){const file=path.resolve(folder,name);try{if(fs.statSync(file).isFile()){fs.accessSync(file,fs.constants.X_OK);return file;}}catch{}}
+ return null;
+}
+function dependencies(){return Object.fromEntries(['bash','jq','curl','shasum','sha256sum','sha1sum'].map(name=>[name,executable(name)]));}
+function location(options) {
+ assert.equal(options.host||'codebuddy','codebuddy','Unified Hooks currently support CodeBuddy only');assert.ok(['project','global'].includes(options.scope),'Specify project or global scope');
+ const project=fs.realpathSync(path.resolve(options.project||'.'));assert.ok(fs.statSync(project).isDirectory(),'Project must be a directory');
+ return {project,base:options.scope==='project'?path.join(project,'.codebuddy'):modules().P.globalBase(options)};
+}
+function unmanaged(settings) {
+ const files={ 'session-start':['session-start.sh'],'sdd-cache':['sdd-cache-pre.sh','sdd-cache-post.sh'],'simplify-ignore':['simplify-ignore.sh'] },result=[];
+ for(const [event,groups] of Object.entries(settings.hooks||{}))for(const group of groups)for(const hook of group.hooks) {
+  if(typeof hook.command!=='string'||hook.command.includes(OWNER))continue;
+  for(const [id,names] of Object.entries(files))if(names.some(name=>hook.command.includes(name)))result.push({id,event,command:hook.command});
+ }
+ return result;
+}
+function pendingSimplify(base) {
+ const parent=path.join(base,'cache/i3-composer-agent/hooks');if(!fs.existsSync(parent))return [];
+ return fs.readdirSync(parent,{withFileTypes:true}).filter(entry=>entry.isDirectory()&&!entry.isSymbolicLink()).flatMap(entry=>{
+  const dir=path.join(parent,entry.name,'simplify-ignore');if(!fs.existsSync(dir))return [];
+  assert.ok(!fs.lstatSync(dir).isSymbolicLink(),'Simplify cache symlink requires review');return fs.readdirSync(dir).filter(file=>file.endsWith('.bak')).map(file=>path.join(dir,file));
+ });
+}
+function prepare(options,runtime={}) {
+ const {P,R}=runtime.modules||modules(),{project,base}=runtime.location||location(options),io=R.fileIO,action=options.action||'keep',ids=selection(options.groups,action);
+ const settingsPath=path.join(base,'settings.json'),recordPath=path.join(base,'state/i3-composer-agent/hooks.json'),prototypePath=path.join(base,'state/i3-prototype/installation.json');
+ const before=io.read(settingsPath),recordText=io.read(recordPath),record=recordText?JSON.parse(recordText):null,prototypeText=io.read(prototypePath),prototype=prototypeText?JSON.parse(prototypeText):null;
+ if(action!=='disable'&&(action!=='keep'||record||prototype))assert.ok(process.platform!=='win32','CodeBuddy Hook quoting on Windows has not been validated; default installation without Hooks remains available');
+ const product=options.product||record?.product||prototype?.product,settings=config(before);
+ if(action!=='disable'&&(action!=='keep'||record||prototype)) {
+  assert.ok(!settings.disableAllHooks&&!settings.allowManagedHooksOnly,'Host policy prevents automatic Hooks; preserve the policy');
+  const manifest=io.read(path.join(base,'.i3-composer-agent.json'));if(manifest)assert.ok(!JSON.parse(manifest).agents?.includes('workbuddy'),'Shared WorkBuddy scope cannot identify CodeBuddy safely');
+  assert.ok(!options.agents?.includes('workbuddy'),'Use an exclusive CodeBuddy scope for Hooks');
+ }
+ if(action==='enable')for(const id of ids)assert.ok(!unmanaged(settings).some(item=>item.id===id),`Unmanaged ${id} Hook already exists; preserve it and resolve the duplicate before enabling`);
+ if(ids.includes('simplify-ignore')&&['enable','disable'].includes(action)) {
+  for(const candidate of [...new Set([base,path.join(project,'.codebuddy'),P.globalBase?P.globalBase(options):path.join(options.home||os.homedir(),'.codebuddy')])])assert.equal((runtime.pendingSimplify||pendingSimplify)(candidate).length,0,'Simplify protection is still active; finish the session and restore blocks before changing Hooks');
+ }
+ const prototypeAction=ids.includes('prototype')?action:'keep';
+ const prototypeChange=action==='disable'&&!ids.includes('prototype')?{unchanged:true}:P.prepare({...options,project,product,action:prototypeAction,entryPath:path.join(base,'i3-composer-agent/hooks/i3-prototype.cjs'),entrySource:path.join(__dirname,'i3-prototype.cjs')});
+ const upstream=planUpstream({...options,base,product,action,record,settingsText:prototypeChange.unchanged?before:prototypeChange.afterText,nodePath:process.execPath,
+  hookDirectory:path.join(base,'i3-composer-agent/hooks'),scriptDigest:runtime.scriptDigest||require('./codebuddy-upstream.cjs').bundle(),dependencies:runtime.dependencies||dependencies()});
+ const changes=[{file:settingsPath,before,after:upstream.afterText},{file:recordPath,before:recordText,after:upstream.recordAfter?json(upstream.recordAfter):null},
+  {file:prototypePath,before:prototypeText,after:prototypeChange.unchanged?prototypeText:prototypeChange.recordAfter?json(prototypeChange.recordAfter):null}];
+ return {changes,summary:{host:'codebuddy',scope:options.scope,base,product:product||null,action,groups:ids,changed:changes.some(item=>item.before!==item.after),
+  enabledGroups:[...Object.keys(upstream.recordAfter?.groups||{}),...((prototypeChange.unchanged?prototype:prototypeChange.recordAfter)?['prototype']:[])],
+  ...(prototypeChange.summary?.transcript?{transcript:prototypeChange.summary.transcript}:{}),
+  next:product==='cli'?'Review /hooks in CodeBuddy Code and start a new session.':'Reload CodeBuddy and verify actual Hook events. Registration is not activation.'}};
+}
+function check(options) {
+ const {P,R}=modules(),{project,base}=location(options),io=R.fileIO,ids=selection(options.groups,options.action||'check'),settingsText=io.read(path.join(base,'settings.json')),settings=config(settingsText),deps=dependencies(),items=[];
+ let record=null,error=null;try{record=require('./codebuddy-upstream.cjs').registration(base);}catch(e){error=e.message;}
+ for(const id of ids) {
+  const item=catalog.find(x=>x.id===id),entry=path.join(base,'i3-composer-agent/hooks',id==='prototype'?'i3-prototype.cjs':'codebuddy-upstream.cjs');
+  if(id==='prototype'){try{const result=P.check({...options,project});items.push({...item,...result,...(result.effective===false&&result.status!=='failed'?{status:'shadowed'}:{}),entryPath:entry});}catch(e){items.push({...item,status:'failed',reason:e.message,entryPath:entry});}continue;}
+  const missingFiles=[entry,...item.files.map(file=>path.join(base,'i3-composer-agent/hooks',file))].filter(file=>!fs.existsSync(file));
+  const row={...item,entryPath:entry,filesPresent:missingFiles.length===0,missingFiles,status:missingFiles.length?'not-installed':'files-present',invocationVerified:false,nativeValidation:'pending-user'};
+  try{requirements(id,deps);}catch(e){row.dependencyIssue=e.message;}
+  if(error){row.status='failed';row.reason=error;}
+  else if(record?.groups[id])try {
+   const U=require('./codebuddy-upstream.cjs'),selected=U.effective({project,product:record.product,group:id,home:options.home,env:options.env});row.effective=selected?.base===base;
+   row.status=!row.effective?'shadowed':record.product==='cli'?'pending-host-review':'registered';
+   const raw=io.read(path.join(base,'state/i3-composer-agent/hook-observations',U.projectKey(project),id+'.json'));
+   if(raw){const observation=JSON.parse(raw);if(observation.settingsDigest===record.settingsDigest&&observation.scriptDigest===record.groups[id].scriptDigest){row.observation=observation;row.status=row.effective?'triggered':row.status;}}
+   row.product=record.product;row.productVersion=record.productVersion;
+  }catch(e){row.status='failed';row.reason=e.message;}
+  items.push(row);
+ }
+ return {host:'codebuddy',scope:options.scope,base,readOnly:true,changed:false,status:items.some(item=>item.status==='failed')?'failed':'checked',hooks:items,unmanagedHooks:unmanaged(settings),
+  next:'files-present is not enabled; registered is not triggered; triggered is not business acceptance. CLI: review /hooks; IDE: reload.'};
+}
+function configure(options){const change=prepare(options);return options.preview?change.summary:apply(change);}
+function main(argv=process.argv.slice(2)) {
+ if(argv.includes('--help'))return {usage:'node manage.cjs list|check|enable|disable --host codebuddy --scope project|global --project <directory> [--groups <ids>|all] [--product ide|cli] [--skill-routing hook] [--transcript-root <native-directory>|auto]',hooks:catalog,default:'keep; enable/disable default prototype; list/check default all; transcripts auto for new registrations',nativeValidation:'pending-user'};
+ const options={action:argv.shift()||'list',host:'codebuddy',project:process.cwd()};
+ assert.ok(['list','check','enable','disable','keep'].includes(options.action),'Choose list, check, enable or disable');
+ while(argv.length){const arg=argv.shift();assert.ok(arg.startsWith('--')&&argv[0]&&!argv[0].startsWith('--'),'Hook option needs a value');const key=arg.slice(2).replace(/-([a-z])/g,(_,c)=>c.toUpperCase());assert.ok(['host','scope','project','product','productVersion','transcriptRoot','groups','skillRouting'].includes(key),'Unknown Hook option');options[key]=argv.shift();}
+ if(options.skillRouting!==undefined)assert.ok(['native','hook'].includes(options.skillRouting),'skill-routing must be native or hook');
+ return ['list','check'].includes(options.action)?check(options):configure(options);
+}
+module.exports={OWNER,catalog,digest,sha,json,quote,config,selection,modules,validateOwned,requirements,planUpstream,apply,dependencies,location,unmanaged,pendingSimplify,prepare,check,configure,main};
+if(require.main===module)try{const result=main();process.stdout.write(json(result));if(result.status==='failed')process.exitCode=1;}catch(error){process.stderr.write(error.message+'\n');process.exitCode=1;}

package/package.json

@@ -100,6 +100,12 @@
     "evals/fixtures/i3-test-driven-development/package.json",
     "evals/fixtures/i3-test-driven-development/src/split.js",
     "evals/fixtures/i3-test-driven-development/test/split.test.js",
+    "evals/fixtures/i3-ui-prototype/admin-list/assets/reference.css",
+    "evals/fixtures/i3-ui-prototype/admin-list/assets/reference.js",
+    "evals/fixtures/i3-ui-prototype/admin-list/capability-definition.json",
+    "evals/fixtures/i3-ui-prototype/admin-list/index.html",
+    "evals/fixtures/i3-ui-prototype/admin-list/readme.md",
+    "evals/fixtures/i3-ui-prototype/admin-list/template.json",
     "evals/fixtures/i3-ui-prototype/business-brief.md",
     "evals/fixtures/i3-using-agent-skills/incident.md",
     "evals/fixtures/incremental-implementation-pressure/draft-export.js",
@@ -163,6 +169,8 @@
     "docs/getting-started.md",
     "docs/opencode-setup.md",
     "docs/other-hosts.md",
+    "docs/ui-prototype-native/MAIN-SESSION-REPORT.md",
+    "docs/ui-prototype-native/USAGE.md",
     "docs/windsurf-setup.md",
     "docs/workbuddy-setup.md",
     "plugin.json",
@@ -172,13 +180,35 @@
     "scripts/design-provider-test.js",
     "scripts/enterprise-template-test.js",
     "scripts/floor-guard-reference-test.js",
+    "scripts/lib/prototype-fixture.cjs",
     "scripts/lib/skill-lint-test.js",
     "scripts/lib/skill-lint.js",
+    "scripts/prototype-cache-test.js",
+    "scripts/prototype-generation-entry-test.js",
+    "scripts/prototype-generation-evidence-test.js",
+    "scripts/prototype-generation-native-test.js",
+    "scripts/prototype-generation-test.js",
+    "scripts/prototype-inventory-test.js",
+    "scripts/prototype-locations-test.js",
+    "scripts/prototype-project-test.js",
     "scripts/run-evals-test.js",
     "scripts/run-evals.js",
     "scripts/run-regressions.js",
     "scripts/template-adapter-test.js",
+    "scripts/ui-prototype-codebuddy-hook-test.js",
+    "scripts/ui-prototype-content-test.js",
+    "scripts/ui-prototype-dependencies-test.js",
+    "scripts/ui-prototype-devtools-test.js",
+    "scripts/ui-prototype-execution-evidence-test.js",
+    "scripts/ui-prototype-execution-gates-test.js",
+    "scripts/ui-prototype-execution-policy-test.js",
+    "scripts/ui-prototype-execution-runtime-test.js",
+    "scripts/ui-prototype-ide-source-test.js",
+    "scripts/ui-prototype-native-test.js",
+    "scripts/ui-prototype-registration-test.js",
+    "scripts/ui-prototype-template-test.js",
     "scripts/ui-prototype-test.js",
+    "scripts/ui-prototype-transcript-auto-test.js",
     "scripts/validate-artifact-paths-test.js",
     "scripts/validate-artifact-paths.js",
     "scripts/validate-commands-test.js",
@@ -287,6 +317,12 @@
       "evals/fixtures/i3-test-driven-development/package.json",
       "evals/fixtures/i3-test-driven-development/src/split.js",
       "evals/fixtures/i3-test-driven-development/test/split.test.js",
+      "evals/fixtures/i3-ui-prototype/admin-list/assets/reference.css",
+      "evals/fixtures/i3-ui-prototype/admin-list/assets/reference.js",
+      "evals/fixtures/i3-ui-prototype/admin-list/capability-definition.json",
+      "evals/fixtures/i3-ui-prototype/admin-list/index.html",
+      "evals/fixtures/i3-ui-prototype/admin-list/readme.md",
+      "evals/fixtures/i3-ui-prototype/admin-list/template.json",
       "evals/fixtures/i3-ui-prototype/business-brief.md",
       "evals/fixtures/i3-using-agent-skills/incident.md",
       "evals/fixtures/incremental-implementation-pressure/draft-export.js",
@@ -350,6 +386,8 @@
       "docs/getting-started.md",
       "docs/opencode-setup.md",
       "docs/other-hosts.md",
+      "docs/ui-prototype-native/MAIN-SESSION-REPORT.md",
+      "docs/ui-prototype-native/USAGE.md",
       "docs/windsurf-setup.md",
       "docs/workbuddy-setup.md",
       "plugin.json",
@@ -360,13 +398,35 @@
       "scripts/design-provider-test.js",
       "scripts/enterprise-template-test.js",
       "scripts/floor-guard-reference-test.js",
+      "scripts/lib/prototype-fixture.cjs",
       "scripts/lib/skill-lint-test.js",
       "scripts/lib/skill-lint.js",
+      "scripts/prototype-cache-test.js",
+      "scripts/prototype-generation-entry-test.js",
+      "scripts/prototype-generation-evidence-test.js",
+      "scripts/prototype-generation-native-test.js",
+      "scripts/prototype-generation-test.js",
+      "scripts/prototype-inventory-test.js",
+      "scripts/prototype-locations-test.js",
+      "scripts/prototype-project-test.js",
       "scripts/run-evals-test.js",
       "scripts/run-evals.js",
       "scripts/run-regressions.js",
       "scripts/template-adapter-test.js",
+      "scripts/ui-prototype-codebuddy-hook-test.js",
+      "scripts/ui-prototype-content-test.js",
+      "scripts/ui-prototype-dependencies-test.js",
+      "scripts/ui-prototype-devtools-test.js",
+      "scripts/ui-prototype-execution-evidence-test.js",
+      "scripts/ui-prototype-execution-gates-test.js",
+      "scripts/ui-prototype-execution-policy-test.js",
+      "scripts/ui-prototype-execution-runtime-test.js",
+      "scripts/ui-prototype-ide-source-test.js",
+      "scripts/ui-prototype-native-test.js",
+      "scripts/ui-prototype-registration-test.js",
+      "scripts/ui-prototype-template-test.js",
       "scripts/ui-prototype-test.js",
+      "scripts/ui-prototype-transcript-auto-test.js",
       "scripts/validate-artifact-paths-test.js",
       "scripts/validate-artifact-paths.js",
       "scripts/validate-commands-test.js",
@@ -378,7 +438,7 @@
       "scripts/validate-versions.js"
     ]
   },
-  "version": "2.3.1",
+  "version": "2.3.3",
   "repository": {
     "type": "git",
     "url": "https://github.com/49780522/i3-composer-agent.git"

package/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "i3-composer-agent",
-  "version": "2.3.1",
+  "version": "2.3.3",
   "description": "覆盖需求、计划、开发、测试、审查与发布的软件工程技能，默认使用简体中文。",
   "homepage": "https://github.com/49780522/i3-composer-agent",
   "repository": "https://github.com/49780522/i3-composer-agent"

package/scripts/design-provider-test.js

@@ -66,3 +66,10 @@ test('all unusable providers preserve their individual failure reasons without a
   assert.ok(!result.choices.some(choice => choice.id === 'install'));
   assert.equal(fs.existsSync(path.join(home, 'prototypes')), false);
 });
+test('a business package version cannot masquerade as the later installed UIUX version', t => {
+  const home = fixture(t), root = provider(home, 'manual-provider');
+  fs.writeFileSync(path.join(home, 'package.json'), JSON.stringify({ name: 'human-business-project', version: '99.88.77' }));
+  assert.equal(lib.checkDesignProvider({ provider: root }).version, 'unversioned');
+  fs.writeFileSync(path.join(root, 'UPSTREAM-ORIGIN.json'), JSON.stringify({ packageName: 'ui-ux-pro-max-cli', version: '2.15.0' }));
+  assert.equal(lib.checkDesignProvider({ provider: root }).version, '2.15.0');
+});

package/scripts/enterprise-template-test.js

@@ -104,11 +104,37 @@ test('generated enterprise instances isolate their local demo storage and retain
   const source = fs.readFileSync(path.join(dir, 'app/src/shared/session.js'), 'utf8');
   assert.match(source, /i3-enterprise-enterprise-demo-/);
   assert.doesNotMatch(source, /i3-prototype-antdv-/);
-  assert.match(fs.readFileSync(path.join(dir, 'app/index.html'), 'utf8'), /enterprise-bootstrap\.mjs/);
+  assert.match(fs.readFileSync(path.join(dir, 'app/index.html'), 'utf8'), /src="offline\.js"/);
+  assert.ok(fs.existsSync(path.join(dir, 'app/enterprise-bootstrap.mjs')), 'Retain the historical module bootstrap for compatibility');
   assert.match(fs.readFileSync(path.join(dir, 'app/index.html'), 'utf8'), /tokens\.css/);
   const other = initialize(t);
   assert.notEqual(read(dir, 'prototype.json').runtime.storagePrefix, read(other, 'prototype.json').runtime.storagePrefix);
 });
+test('offline entry carries every editable HTML fragment and routes without changing the reference', t => {
+  const root = path.join(skill, 'assets/templates/enterprise-admin');
+  const build = read(root, 'offline-build.json');
+  for (const [file, expected] of Object.entries(build.files)) {
+    assert.equal(crypto.createHash('sha256').update(fs.readFileSync(path.join(root, file))).digest('hex'), expected, file);
+  }
+  const html = fs.readFileSync(path.join(root, 'index.html'), 'utf8');
+  assert.equal([...html.matchAll(/<template data-source=/g)].length, build.htmlFragmentCount);
+  const routes = JSON.parse(html.match(/id="prototype-offline-routes">([\s\S]*?)<\/script>/)[1]);
+  assert.deepEqual(routes, read(root, 'reference/routes.json'));
+  for (const component of new Set(routes.map(route => route.component).filter(Boolean))) {
+    const source = fs.readFileSync(path.resolve(root, 'reference', component), 'utf8');
+    const fragment = source.match(/template: new URL\('\.\/([^']+\.html)'/)[1];
+    assert.ok(html.includes(`data-source="reference/${path.posix.dirname(component).replace(/^\.\//, '')}/${fragment}"`), component);
+  }
+  assert.doesNotMatch(html, /type="module"/);
+  assert.doesNotMatch(fs.readFileSync(path.join(root, 'offline.js'), 'utf8'), /\bfetch\s*\(|\bimport\s*\(|import\.meta/);
+  const dir = initialize(t, { title: '离线配置 <安全标题>' });
+  const instance = fs.readFileSync(path.join(dir, 'app/index.html'), 'utf8');
+  assert.equal(JSON.parse(instance.match(/id="prototype-offline-config">([\s\S]*?)<\/script>/)[1]).title, '离线配置 <安全标题>');
+  assert.equal(read(dir, 'prototype.json').runtime.offlineVersion, 1);
+  assert.equal(lib.checkPrototype(dir).status, 'passed');
+  fs.unlinkSync(path.join(dir, 'app/offline.js'));
+  assert.equal(lib.checkPrototype(dir).status, 'failed', 'A new offline instance must require its runtime');
+});
 test('missing enterprise runtime imports are rejected while declarative data-bind attributes remain valid', t => {
   const dir = initialize(t);
   assert.equal(lib.checkPrototype(dir).status, 'passed');

package/scripts/lib/prototype-fixture.cjs

@@ -0,0 +1,17 @@
+'use strict';
+// Historical admin-list input for regression tests only; no public template entry.
+const fs = require('node:fs');
+const path = require('node:path');
+function prepareTemplate(contract, { project, id = 'admin-list' }) {
+  if (!/^[a-z][a-z0-9-]{0,63}$/.test(id)) throw new Error('Invalid identifier');
+  const directory = path.resolve(project, 'ui-templates', id);
+  if (fs.existsSync(path.join(project, 'ui-templates')) && fs.lstatSync(path.join(project, 'ui-templates')).isSymbolicLink()) throw new Error('Refusing symlink');
+  if (fs.existsSync(directory)) return { directory, created: false, index: contract.loadTemplate(directory).index };
+  fs.cpSync(path.resolve(__dirname, '../../evals/fixtures/i3-ui-prototype/admin-list'), directory, { recursive: true });
+  const file = path.join(directory, 'template.json');
+  const manifest = JSON.parse(fs.readFileSync(file));
+  manifest.id = id;
+  fs.writeFileSync(file, JSON.stringify(manifest, null, 2) + '\n');
+  return { directory, created: true, index: contract.syncTemplate(directory) };
+}
+module.exports = { prepareTemplate };

package/scripts/prototype-cache-test.js

@@ -0,0 +1,55 @@
+'use strict';
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const installation = path.join(__dirname, 'lib/installation.js');
+const skills = fs.existsSync(installation) ? require(installation).loadInstallation().skillsDirectory : path.resolve(__dirname, '../skills');
+const scripts = path.join(skills, 'i3-ui-prototype/scripts'), cache = require(path.join(scripts, 'browser-workspace.cjs'));
+function fixture(t, scope = 'project') {
+  const root = fs.realpathSync(fs.mkdtempSync(path.join(os.tmpdir(), 'i3-browser-output-'))), project = path.join(root, '中文 项目'), home = path.join(root, 'isolated-home');
+  fs.mkdirSync(project); fs.mkdirSync(home); t.after(() => fs.rmSync(root, { recursive: true, force: true }));
+  return { root, project, home, host: 'codebuddy', scope, runId: 'output-test', env: {} };
+}
+for (const scope of ['project', 'global']) test(`${scope} browser output is prepared only under its host cache and can be reused without overwriting files`, t => {
+  const options = fixture(t, scope), result = cache.prepare(options);
+  assert.equal(result.status, 'prepared');
+  assert.ok(result.directory.startsWith(scope === 'global' ? options.home : path.join(options.project, '.codebuddy')));
+  assert.equal(fs.existsSync(path.join(options.project, '.playwright-cli')), false);
+  assert.equal(fs.existsSync(path.join(options.project, 'prototypes')), false);
+  const config = JSON.parse(fs.readFileSync(result.configFile));
+  assert.equal(config.outputDir, result.directory); assert.equal(config.outputMode, 'file');
+  fs.writeFileSync(path.join(result.directory, 'keep.txt'), 'keep');
+  assert.equal(cache.prepare(options).directory, result.directory);
+  assert.equal(fs.readFileSync(path.join(result.directory, 'keep.txt'), 'utf8'), 'keep');
+  if (scope === 'global') assert.deepEqual(fs.readdirSync(options.project), []);
+});
+test('CLI wrapper uses an existing explicit Node entry, cache cwd and configured output without installing anything', t => {
+  const options = fixture(t), entry = path.join(options.root, 'fixture-cli.cjs');
+  fs.writeFileSync(entry, 'const f=require("node:fs"),p=require("node:path");const c=JSON.parse(f.readFileSync(process.argv[process.argv.indexOf("--config")+1]));if(c.outputDir!==process.cwd())process.exit(5);f.writeFileSync(p.join(c.outputDir,"snapshot.yml"),"fixture snapshot");console.log("fixture command executed");');
+  const result = cache.runCli({ ...options, cli: entry, command: ['snapshot'] });
+  assert.equal(result.status, 'executed'); assert.equal(result.exitCode, 0);
+  assert.ok(fs.existsSync(path.join(result.directory, 'snapshot.yml')));
+  assert.equal(fs.existsSync(path.join(options.project, '.playwright-cli')), false);
+  assert.throws(() => cache.runCli({ ...options, cli: entry, command: ['--config=other.json', 'snapshot'] }), /config/i);
+});
+test('explicit evidence archiving preserves candidate identity and survives cache removal', t => {
+  const options = fixture(t), output = cache.prepare(options), native = require(path.join(scripts, 'native-pilot-lib.cjs'));
+  const scope = { schemaVersion: 2, moduleIds: ['assets'], title: '资产', pages: [{ id: 'assets', title: '资产台账', referencePage: 'models-page', regions: [{ id: 'list', mode: 'management-list' }] }], requirements: [{ id: 'A-01', text: '资产操作', pages: ['assets'], source: { type: 'prd', reference: 'fixture/A-01', statement: 'Synthetic fixture, not real acceptance.' } }], exemptions: [] };
+  const file = path.join(options.root, 'scope.json'); fs.writeFileSync(file, JSON.stringify(scope));
+  const prototype = native.createPrototype({ project: options.project, id: 'assets', scope: file, expertMode: 'template' }).directory, before = native.manifest(prototype);
+  fs.writeFileSync(path.join(output.directory, 'page.yml'), 'synthetic snapshot, not acceptance');
+  const archived = cache.archive({ ...options, id: 'assets', files: ['page.yml'] });
+  assert.equal(archived.status, 'archived'); assert.equal(archived.verification, 'not-assessed');
+  assert.deepEqual(native.manifest(prototype), before);
+  fs.rmSync(output.directory, { recursive: true });
+  assert.equal(fs.readFileSync(path.join(archived.directory, 'page.yml'), 'utf8'), 'synthetic snapshot, not acceptance');
+  assert.throws(() => cache.archive({ ...options, id: 'assets', files: ['../scope.json'] }), /path|cache|exist/i);
+});
+test('unsafe run identifiers and absent CLI entries fail before cache creation', t => {
+  const options = fixture(t);
+  assert.throws(() => cache.prepare({ ...options, runId: '../outside' }), /identifier|path/i);
+  assert.throws(() => cache.runCli({ ...options, cli: path.join(options.root, 'missing.cjs'), command: ['snapshot'] }));
+  assert.deepEqual(fs.readdirSync(options.project), []);
+});

package/scripts/prototype-generation-entry-test.js

@@ -0,0 +1,6 @@
+'use strict';
+const test=require('node:test'),assert=require('node:assert/strict'),fs=require('node:fs'),path=require('node:path'),vm=require('node:vm');
+const install=path.join(__dirname,'lib/installation.js'),skills=fs.existsSync(install)?require(install).loadInstallation().skillsDirectory:path.resolve(__dirname,'../skills');const root=path.join(skills,'i3-ui-prototype'),lib=require(path.join(root,'scripts/native-pilot.cjs'));
+const hash=()=>require('node:crypto').createHash('sha256').update(fs.readFileSync(path.join(root,'assets/templates/enterprise-admin/template-inventory.json'))).digest('hex');
+test('template discovery and inventory commands remain read-only and expose real supported choices',async()=>{const before=hash();const options=await lib.main(['generation-options','--template','enterprise-admin']);assert.equal(options.readOnly,true);assert.equal(Object.keys(options.choices.layout).length,4);assert.equal(Object.keys(options.choices.style).length,3);assert.ok(options.patterns['tree-table']);const inventory=await lib.main(['inventory']);assert.equal(inventory.events,595);assert.equal(inventory.components,116);assert.equal(hash(),before);await assert.rejects(()=>lib.main(['generation-options','--template','../bad']));});
+test('offline preview uses metadata-derived local classic scripts and has valid JavaScript',()=>{const templates=path.join(root,'assets/templates'),context={};vm.runInNewContext(fs.readFileSync(path.join(templates,'generation-options.js'),'utf8'),context);assert.equal(context.I3_GENERATION_OPTIONS[0].id,'enterprise-admin');const html=fs.readFileSync(path.join(templates,'presentation.html'),'utf8');assert.ok(!/type="module"|https?:\/\/|fetch\(/.test(html));for(const block of html.matchAll(/<script(?:\s[^>]*)?>([\s\S]*?)<\/script>/g))new vm.Script(block[1]);assert.equal(require(path.join(root,'scripts/generation-assets.cjs')).refresh(root,{check:true}).status,'passed');});