@givolt/i3-composer-agent 2.3.2 → 2.3.3

package/skills/i3-ui-prototype/scripts/codebuddy-context.cjs

@@ -0,0 +1,75 @@
+'use strict';
+const fs=require('node:fs'),path=require('node:path'),os=require('node:os'),assert=require('node:assert/strict');
+const R=require('./codebuddy-registration.cjs'),E=require('./execution-evidence.cjs');
+const FILES=['execution-policy.cjs','execution-evidence.cjs','codebuddy-ide-source.cjs','execution-gates.cjs','execution-assertions.cjs','execution-runtime.cjs','codebuddy-context.cjs','codebuddy-registration.cjs','codebuddy-hook.cjs','prototype-hooks.cjs','hosts/codebuddy.cjs','native-pilot.cjs','native-pilot-lib.cjs','native-delivery.cjs','native-devtools.cjs','native-files.cjs','native-build.cjs'];
+const read=file=>R.fileIO.read(file);
+function scriptsForEntry(scriptPath) {
+ if(path.basename(scriptPath)!=='i3-prototype.cjs')return path.dirname(path.dirname(scriptPath));
+ const root=path.resolve(path.dirname(scriptPath),'..');
+ const candidates=[root,path.dirname(root)].flatMap(directory=>['i3-ui-prototype',['ui','prototype'].join('-')].map(id=>path.join(directory,'skills',id,'scripts')));
+ const scripts=candidates.find(dir=>fs.existsSync(path.join(dir,'hosts/codebuddy.cjs')));assert.ok(scripts,'Unified Hook entry has no prototype Skill');return path.resolve(scripts);
+}
+function bundle(scriptPath) {
+ const scripts=scriptsForEntry(scriptPath);
+ const files=FILES.map(file=>[file,E.sha(fs.readFileSync(path.join(scripts,file)))]);
+ files.push(['profile',E.sha(fs.readFileSync(path.join(scripts,'../assets/hosts/codebuddy/profile.json')))]);
+ if(path.basename(scriptPath)==='i3-prototype.cjs') {
+  files.push(['unified-entry',E.sha(fs.readFileSync(scriptPath))]);
+  files.push(['unified-manager',E.sha(fs.readFileSync(path.join(path.dirname(scriptPath),'manage.cjs')))]);
+ }
+ return E.sha(JSON.stringify(files));
+}
+function registration(base) {
+ const raw=read(path.join(base,'state/i3-prototype/installation.json'));if(!raw)return null;
+ const record=JSON.parse(raw);assert.equal(record.owner,R.OWNER,'Unknown Hook ownership');assert.equal(record.schemaVersion,1,'Unsupported Hook ownership');assert.equal(record.base,base,'Hook base differs');
+ const settingsText=read(path.join(base,'settings.json')),settings=R.config(settingsText);
+ for(const event of R.EVENTS)assert.equal((settings.hooks?.[event]||[]).filter(group=>JSON.stringify(group)===JSON.stringify(record.groups[event])).length,1,'Registered Hook was removed, duplicated, or edited');
+ assert.equal(bundle(record.scriptPath),record.scriptDigest,'Audit adapter bytes changed; refresh owned registration');
+ assert.ok(fs.existsSync(record.nodePath),'Registered Node executable is missing');
+ return {...record,settingsDigest:E.sha(settingsText),registrationDigest:E.sha(JSON.stringify(record))};
+}
+function globalBase({home=os.homedir(),env=process.env}={}) {
+ const configured=env.CODEBUDDY_CONFIG_DIR?.trim();
+ if(!configured)return path.join(home,'.codebuddy');
+ assert.ok(path.isAbsolute(configured)&&!/[\x00\r\n]/.test(configured),'CODEBUDDY_CONFIG_DIR must be an absolute safe directory');
+ return path.normalize(configured);
+}
+function select({project,product,home=os.homedir(),env=process.env,readText=read,loadRegistration=registration}) {
+ const projectBase=path.join(project,'.codebuddy'),userBase=globalBase({home,env});
+ const projectText=readText(path.join(projectBase,'settings.json')),localText=readText(path.join(projectBase,'settings.local.json'));
+ if(localText){const local=R.config(localText);assert.ok(!local.hooks&&!local.disableAllHooks&&!local.allowManagedHooksOnly,'Local Hook overrides are not supported by this profile');}
+ const projectSettings=R.config(projectText);assert.ok(!projectSettings.disableAllHooks&&!projectSettings.allowManagedHooksOnly,'Project Hook policy prevents automatic auditing');
+ const globalText=readText(path.join(userBase,'settings.json')),globalSettings=R.config(globalText);assert.ok(!globalSettings.disableAllHooks&&!globalSettings.allowManagedHooksOnly,'Global Hook policy prevents automatic auditing');
+ // IDE documents project settings as an override. Do not silently fall back through a shadowing file.
+ const bases=product==='ide'&&projectText!==null?[projectBase]:[projectBase,userBase];
+ for(const base of [...new Set(bases)]) {
+  const record=loadRegistration(base);if(!record)continue;
+  assert.equal(record.product,product,'Conflicting CodeBuddy product profiles');return record;
+ }
+ return null;
+}
+function projectKey(project){return `${path.basename(project).replace(/[^a-zA-Z0-9_-]/g,'-').slice(0,32)||'project'}-${E.sha(project).slice(0,16)}`;}
+function sessionDirectory(record,project,sessionId) {
+ assert.ok(typeof sessionId==='string'&&sessionId,'Native session ID required');
+ return path.join(record.base,'state/i3-prototype',projectKey(project),E.sha(sessionId).slice(0,24));
+}
+function source(payload,record,project) {
+ assert.ok(typeof payload.transcript_path==='string'&&typeof payload.session_id==='string','Native transcript and session fields required');
+ const roots=record.transcriptRoots||[],mode=record.transcriptMode||(roots.length?'manual':'auto');
+ const value=E.readSource(payload.transcript_path,roots,{mode,project});
+ assert.ok(value.prompts.length,'Original user task is absent from native transcript');
+ assert.ok(value.calls.every(call=>call.sessionId===payload.session_id),'Native session identity missing or mismatched');
+ assert.ok(value.prompts.every(prompt=>!prompt.sessionId||prompt.sessionId===payload.session_id),'Native prompt session differs');
+ return value;
+}
+function readOnly(prompt) {
+ if(/不(?:要)?(?:改代码|修改(?:任何)?代码|实施|生成原型)|\b(?:analysis only|do not (?:edit|modify|implement))\b/i.test(prompt))return true;
+ if(/(?:只|仅).{0,6}(?:分析|讨论|梳理|检查|解释)/.test(prompt))return true;
+ if(/先.{0,4}(?:分析|讨论|梳理|检查|解释)/.test(prompt)&&!/(?:然后|再|后).{0,8}(?:实现|实施|修改|继续)/.test(prompt))return true;
+ return /^\s*(?:请|先)?(?:暂停|停止|取消)(?:[，。！\s]|(?:这|当前|实施|工作|修改|生成))|^\s*(?:stop|cancel|pause)\b/i.test(prompt);
+}
+function prefix(file,bytes,digest) {
+ assert.ok(Number.isSafeInteger(bytes)&&bytes>0&&bytes<=64*1024*1024,'Invalid source cursor');
+ const raw=E.cursorBytes(file);assert.ok(raw.length>=bytes,'Native transcript was truncated');assert.equal(E.sha(raw.subarray(0,bytes)),digest,'Native transcript prefix changed');
+}
+module.exports={read,scriptsForEntry,bundle,registration,globalBase,select,projectKey,sessionDirectory,source,readOnly,prefix};

package/skills/i3-ui-prototype/scripts/codebuddy-hook.cjs

@@ -0,0 +1,157 @@
+'use strict';
+const fs=require('node:fs'),path=require('node:path'),crypto=require('node:crypto'),assert=require('node:assert/strict');
+const F=require('./native-files.cjs'),C=require('./codebuddy-context.cjs'),E=require('./execution-evidence.cjs'),P=require('./execution-policy.cjs'),G=require('./execution-gates.cjs');
+const X=require('./execution-runtime.cjs');
+function tokens(command) {
+ if(typeof command!=='string'||/[\x00\r\n]|\$\(|`/.test(command))return null;
+ const values=[];let value='',quote=null,started=false;
+ for(let i=0;i<command.length;i++) {const c=command[i];if(quote){if(c===quote){quote=null;started=true;}else if(c==='\\'&&quote==='"'&&i+1<command.length)value+=command[++i];else value+=c;}
+ else if(c==='"'||c==="'"){quote=c;started=true;}else if(c==='\\'&&i+1<command.length){value+=command[++i];started=true;}else if(/\s/.test(c)){if(started){values.push(value);value='';started=false;}}else if(/[;&|<>]/.test(c))return null;else {value+=c;started=true;}}
+ if(quote)return null;if(started)values.push(value);return values;
+}
+function nativeCommand(tool,input,cwd) {
+ if(!['Bash','execute_command','run_terminal_command'].includes(tool))return null;
+ const argv=tokens(input?.command);if(!argv)return null;const index=argv.findIndex(arg=>path.basename(arg)==='native-pilot.cjs');if(index<1)return null;
+ const operation=argv[index+1],root=argv[index+2]&&!argv[index+2].startsWith('--')?path.resolve(cwd,argv[index+2]):null;
+ return {operation,root,argv};
+}
+function eventCall(payload,source) {
+ const canonical=value=>Array.isArray(value)?value.map(canonical):value&&typeof value==='object'?Object.fromEntries(Object.keys(value).sort().map(k=>[k,canonical(value[k])])):value;
+ const partial=(before,after)=>typeof before==='string'?typeof after==='string'&&after.startsWith(before):Array.isArray(before)?Array.isArray(after)&&before.length<=after.length&&before.every((value,i)=>partial(value,after[i])):before&&typeof before==='object'?after&&typeof after==='object'&&Object.keys(before).every(key=>Object.hasOwn(after,key)&&partial(before[key],after[key])):before===after;
+ const matches=source.calls.filter(call=>{
+  if(call.name!==payload.tool_name||call.requestLine<source.prompts.at(-1).line||payload.tool_use_id&&call.toolCallId!==payload.tool_use_id)return false;
+  if(source.format==='codebuddy-ide-index-v1'&&payload.generation_id&&call.nativeRequestId!==payload.generation_id)return false;
+  if(JSON.stringify(canonical(call.input))===JSON.stringify(canonical(payload.tool_input||{})))return true;
+  // IDE 4.12 streams incomplete args to disk before PreToolUse. Correlate its
+  // actual callback with one pending native call in the exact generation. The
+  // pending call remains unsuccessful until a native result is persisted.
+  return source.format==='codebuddy-ide-index-v1'&&payload.client==='CodeBuddyIDE'&&typeof payload.generation_id==='string'&&call.nativeRequestId===payload.generation_id&&!call.resultLine&&partial(call.input,payload.tool_input||{});
+ });
+ const current=payload.hook_event_name==='PreToolUse'?matches.filter(call=>!call.resultLine):matches;
+ assert.equal(current.length,1,'Native Hook event does not uniquely match the current transcript request');return current[0];
+}
+function eventSource(payload,record,project,{readSource=C.source,pause=milliseconds=>Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,milliseconds)}={}) {
+ const toolEvent=['PreToolUse','PostToolUse'].includes(payload.hook_event_name);
+ // IDE can persist the current call only AFTER returning from both Hooks. Its
+ // current native prompt/generation still binds the callback. Never synthesize
+ // a successful call; A checks the persisted request/result at a later stage.
+ const attempts=toolEvent&&record.product==='ide'&&payload.client==='CodeBuddyIDE'?8:1;
+ for(let attempt=1;attempt<=attempts;attempt++) {
+  try {
+   const source=readSource(payload,record,project);
+   let nativeRequestStatus='not-tool-event';
+   if(toolEvent) {
+    if(source.format==='codebuddy-ide-index-v1'&&record.product==='ide'&&payload.client==='CodeBuddyIDE') {
+     const latest=source.prompts.at(-1);
+     assert.ok(typeof payload.generation_id==='string'&&latest?.nativeRequestId===payload.generation_id,'IDE callback differs from the current native task generation');
+     const pending=source.calls.filter(call=>!call.resultLine&&call.requestLine>latest.line&&call.nativeRequestId===payload.generation_id&&call.name===payload.tool_name);
+     if(pending.length) {eventCall(payload,source);nativeRequestStatus='pending-native-request';}
+     else nativeRequestStatus='deferred-until-native-persistence';
+    }else {eventCall(payload,source);nativeRequestStatus='matched-native-request';}
+   }
+   return {...source,nativeReadAttempts:attempt,nativeRequestStatus};
+  }catch(error){if(attempt===attempts)throw error;pause(100);}
+ }
+}
+function decision({event,source,binding,tool,input,directory,cwd,deliveryCurrent,stopHookActive=false}) {
+ if(C.readOnly(source.prompts.at(-1)?.text||''))return {continue:true,reason:'latest-user-read-only'};
+ if(event==='PreToolUse'&&G.uiWrite({name:tool,input:input||{},cwd},directory)) {
+  const front=E.loaded(source.calls,'frontend').filter(c=>c.sessionId===binding?.sessionId&&c.requestLine>source.contextLine&&(source.stableThroughLine===undefined||c.resultLine<=source.stableThroughLine));
+  if(!binding||binding.entryLine!==source.prompts.at(-1)?.line||binding.contextLine!==source.contextLine||!front.length)return {deny:true,reason:'Run execution-begin for the current task and load the frontend engineering Skill successfully in this session/context before writing prototype UI. Reading SKILL.md is insufficient.'};
+ }
+ const final=source.latestAssistant||'',claim=/(?:已完成|已经完成|全部通过|可以交付|\b(?:completed|ready for review|all checks passed)\b)/i.test(final)&&!/(?:未完成|尚未|待验证|阻塞|等待|进度|blocked|awaiting|not complete|in progress)/i.test(final);
+ if(event==='Stop'&&binding&&!deliveryCurrent&&!stopHookActive&&claim)return {feedback:true,reason:'This prototype run has no current verified receipt. Run execution-check and resolve the missing evidence, or report blocked / awaiting-input / progress without claiming completion.'};
+ return {continue:true};
+}
+function prototypeForWrite(project,tool,input) {
+ if(!['Write','Edit','MultiEdit','write_to_file','replace_in_file'].includes(tool))return null;
+ const file=input?.file_path||input?.filePath||input?.path||input?.TargetFile;if(typeof file!=='string')return null;
+ let current=path.dirname(path.resolve(project,file));const prototypes=path.join(project,'prototypes');
+ while(current.startsWith(prototypes+path.sep)){if(fs.existsSync(path.join(current,'prototype.json')))return fs.realpathSync(current);current=path.dirname(current);}return null;
+}
+function safeProject(payload,options={},env=process.env,real=file=>fs.realpathSync(file),callbackCwd=process.cwd(),workspace=E.ideWorkspace) {
+ const ideRoot=options.product==='ide'&&payload.client==='CodeBuddyIDE'&&payload.cwd==='/';
+ const root=options.scope==='project'?path.dirname(options.base):ideRoot?workspace(payload.transcript_path,payload.session_id):env.CODEBUDDY_PROJECT_DIR||env.CLAUDE_PROJECT_DIR||payload.cwd||(payload.hook_event_name==='SessionStart'?callbackCwd:null);assert.ok(root&&path.isAbsolute(root),'Native project directory required');
+ const project=real(root);
+ // IDE 4.12.2 reports '/' for absolute-path tools. Use the project registration
+ // or session-bound native workspace above; reject all other outside cwd.
+ if(payload.cwd&&!ideRoot){const relative=path.relative(project,real(payload.cwd));assert.ok(relative!=='..'&&!relative.startsWith('..'+path.sep)&&!path.isAbsolute(relative),'Hook cwd is outside project');}return project;
+}
+function saveIndex(directory,index) {
+ for(const entry of Object.values(index.bindings))F.write(path.dirname(directory),`runs/${entry.runId}/binding.json`,entry);
+ F.write(directory,'session.json',index);
+}
+function toolCwd(payload,record,project) {
+ return record.product==='ide'&&payload.client==='CodeBuddyIDE'&&payload.cwd==='/'?project:payload.cwd||project;
+}
+function handle(payload,options) {
+ assert.equal(payload.hook_event_name,options.event,'Hook event mismatch');
+ const project=safeProject(payload,options),record=C.select({project,product:options.product});
+ if(!record||record.base!==options.base)return {continue:true};
+ const cwd=toolCwd(payload,record,project);
+ // SessionStart and analysis do not create persistent per-project/session state.
+ if(['SessionStart','UserPromptSubmit'].includes(options.event))return {continue:true};
+ let source;
+ try {
+  source=eventSource(payload,record,project);
+ }catch(error){
+  const target=options.event==='PreToolUse'?prototypeForWrite(project,payload.tool_name,payload.tool_input):null;
+  if(target&&X.policy(target)&&G.uiWrite({name:payload.tool_name,input:payload.tool_input,cwd},target))return {deny:true,reason:`Native evidence unavailable for strict prototype UI write: ${error.message}`};
+  throw error;
+ }
+ const latest=source.prompts.at(-1);
+ if(C.readOnly(latest.text)) {
+  const native=nativeCommand(payload.tool_name,payload.tool_input,cwd),root=native?.root||prototypeForWrite(project,payload.tool_name,payload.tool_input);
+  if(options.event==='PreToolUse'&&(native&&['create','execution-begin','build','revise','replan','record-run','record-devtools-review','finalize'].includes(native.operation)||root&&X.policy(root)&&G.uiWrite({name:payload.tool_name,input:payload.tool_input,cwd},root)))return {deny:true,reason:'The latest user request is read-only or stopped; no prototype mutation is authorized.'};
+  return {continue:true};
+ }
+ const stateDirectory=C.sessionDirectory(record,project,payload.session_id),file=path.join(stateDirectory,'session.json');
+ const index=JSON.parse(C.read(file)||'{"schemaVersion":1,"bindings":{}}');assert.equal(index.schemaVersion,1,'Unsupported audit session state');
+ const command=nativeCommand(payload.tool_name,payload.tool_input,cwd);
+ if(options.event==='PreToolUse'&&command?.operation==='create'&&!command.argv.includes('--execution-policy')&&(E.loaded(source.calls,'prototype').some(c=>c.requestLine>source.contextLine)||/^\s*\/i3-prototype\b/.test(latest.text)))return {deny:true,reason:'New CodeBuddy prototypes require --host codebuddy --execution-policy codebuddy-ab-v1 and fixed --execution-assertions. Existing artifacts keep their original contracts.'};
+ const directory=command?.root||prototypeForWrite(project,payload.tool_name,payload.tool_input);
+ const existing=directory?index.bindings[directory]:null;
+ if(options.event==='PreToolUse'&&command?.operation==='execution-begin') {
+  assert.ok(directory&&directory.startsWith(path.join(project,'prototypes')+path.sep),'Prototype must be in this project');
+  const fixed=X.policy(directory);assert.ok(fixed,'Existing prototype retains its original contract; do not rewrite it implicitly');
+  const loaded=E.loaded(source.calls,'prototype').some(c=>c.requestLine>source.contextLine);
+  assert.ok(loaded||/^\s*\/i3-prototype\b/.test(latest.text),'Native prototype Skill or actual shortcut entry required');
+  const meta=F.json(path.join(directory,'prototype.json')),lib=require('./native-pilot-lib.cjs'),current=lib.manifest(directory);
+  const runId=existing&&existing.entryLine===latest.line&&existing.inputDigest===current.inputDigest&&existing.contextLine===source.contextLine?existing.runId:crypto.randomUUID();
+  index.bindings[directory]={schemaVersion:1,runId,sessionId:payload.session_id,project,projectKey:C.projectKey(project),directory,instanceId:meta.instanceId,policyDigest:fixed.digest,inputDigest:current.inputDigest,entryLine:latest.line,promptDigest:latest.digest,contextLine:source.contextLine,
+   operation:meta.revision==='r001'?'create':'revise',product:record.product,productVersion:record.productVersion,scope:record.scope,registrationDigest:record.registrationDigest,settingsDigest:record.settingsDigest,source:{path:source.path,bytes:source.bytes,digest:source.digest},lastHook:{event:options.event,at:new Date().toISOString(),nativeReadAttempts:source.nativeReadAttempts,nativeRequestStatus:source.nativeRequestStatus}};
+  const lock=path.join(stateDirectory,'.audit.lock');fs.mkdirSync(stateDirectory,{recursive:true});
+  try{fs.mkdirSync(lock);}catch{throw new Error('Concurrent audit callback; retry execution-begin');}
+  try {
+   const fresh=JSON.parse(C.read(file)||'{"schemaVersion":1,"bindings":{}}');fresh.bindings[directory]=index.bindings[directory];
+   saveIndex(stateDirectory,fresh);
+   F.write(directory,'qa/execution-context.json',{schemaVersion:1,runId,sessionId:payload.session_id,project,base:record.base,product:record.product});
+  }finally{fs.rmdirSync(lock);}
+  return {continue:true};
+ }
+ if(directory&&fs.existsSync(path.join(directory,'prototype.json'))&&X.policy(directory)) {
+  const answer=decision({event:options.event,source,binding:existing,tool:payload.tool_name,input:payload.tool_input,directory,cwd});if(answer.deny)return answer;
+  if(options.event==='PreToolUse'&&command&&['build','record-run','record-devtools-review','finalize'].includes(command.operation)&&!existing)return {deny:true,reason:'Begin this strict prototype run with execution-begin before implementation or delivery.'};
+ }
+ if(!Object.keys(index.bindings).length)return {continue:true};
+ const lock=path.join(stateDirectory,'.audit.lock');fs.mkdirSync(stateDirectory,{recursive:true});
+ try{fs.mkdirSync(lock);}catch(error){if(error.code==='EEXIST')throw new Error('Concurrent audit callback; no success evidence recorded. Retry the stage.');throw error;}
+ try {
+  const fresh=JSON.parse(C.read(file));let changed=false;
+  for(const entry of Object.values(fresh.bindings)) {
+   if(entry.entryLine!==latest.line)continue;
+   const eventKey=E.sha(JSON.stringify([options.event,payload.tool_use_id||null,payload.tool_name||null,payload.tool_input||null,source.digest]));
+   if(entry.lastEventKey===eventKey)continue;
+   entry.source={path:source.path,bytes:source.bytes,digest:source.digest};entry.lastEventKey=eventKey;entry.lastHook={event:options.event,at:new Date().toISOString(),nativeReadAttempts:source.nativeReadAttempts,nativeRequestStatus:source.nativeRequestStatus};changed=true;
+   if(options.event==='Stop') {
+    const lib=require('./native-pilot-lib.cjs'),state=lib.state(entry.directory);
+    const complete=state.execution.status==='passed'&&state.delivery?.status==='current'&&state.delivery.result.runId===entry.runId;
+    const feedback=decision({event:'Stop',source,binding:entry,directory:entry.directory,deliveryCurrent:complete,stopHookActive:payload.stop_hook_active||entry.stopFeedbackPrompt===latest.digest});
+    if(feedback.feedback){entry.stopFeedbackPrompt=latest.digest;saveIndex(stateDirectory,fresh);return feedback;}
+   }
+  }
+  if(changed)saveIndex(stateDirectory,fresh);
+ }finally{fs.rmdirSync(lock);}
+ return {continue:true};
+}
+module.exports={tokens,nativeCommand,eventCall,eventSource,decision,safeProject,toolCwd,handle};

package/skills/i3-ui-prototype/scripts/codebuddy-ide-source.cjs

@@ -0,0 +1,69 @@
+'use strict';
+// Observed CodeBuddy IDE history format: Hook-provided index.json and only the
+// UUID message files explicitly referenced by that index. No directory scan.
+const fs=require('node:fs'),path=require('node:path'),assert=require('node:assert/strict');
+const ID=/^[a-f0-9]{32}$/;
+const aliases={use_skill:'Skill',execute_command:'Bash',write_to_file:'Write',read_file:'Read',replace_in_file:'Edit'};
+function read(file) {
+ assert.equal(path.basename(file),'index.json','Expected native IDE index');
+ const directory=path.dirname(file),sessionId=path.basename(directory);
+ assert.match(sessionId,ID,'Invalid IDE session directory');
+ let total=0;
+ const load=target=>{
+  const stat=fs.lstatSync(target);assert.ok(stat.isFile()&&!stat.isSymbolicLink(),'Invalid IDE history file');
+  total+=stat.size;assert.ok(total<=64*1024*1024,'IDE history exceeds size limit');
+  return JSON.parse(fs.readFileSync(target,'utf8'));
+ };
+ const index=load(file);assert.ok(Array.isArray(index.messages)&&Array.isArray(index.requests),'Unsupported IDE index');
+ assert.ok(index.messages.length<=10000&&index.requests.length<=10000,'IDE history index exceeds limit');
+ const folder=path.join(directory,'messages');assert.ok(fs.lstatSync(folder).isDirectory()&&!fs.lstatSync(folder).isSymbolicLink(),'Invalid IDE message directory');
+ const requestIds=new Map(),seen=new Set(),events=[];let latestAssistant='',workspace;
+ for(const request of index.requests){
+  assert.match(request.id,ID,'Invalid IDE request ID');assert.ok(Array.isArray(request.messages),'Invalid IDE request messages');
+  for(const id of request.messages){assert.match(id,ID,'Invalid IDE message reference');assert.ok(!requestIds.has(id),'Duplicate IDE message request');requestIds.set(id,request.id);}
+ }
+ for(const item of index.messages){
+  assert.match(item.id,ID,'Invalid IDE message ID');assert.ok(!seen.has(item.id),'Duplicate IDE message ID');seen.add(item.id);
+  const row=load(path.join(folder,item.id+'.json'));
+  assert.equal(row.id,item.id,'IDE message identity differs');assert.equal(row.role,item.role,'IDE message role differs');
+  const message=JSON.parse(row.message),extra=JSON.parse(row.extra||'{}');
+  assert.equal(message.role,row.role,'IDE serialized message role differs');
+  assert.ok(requestIds.has(item.id),'Unbound IDE message');
+  // The index is the primary request membership. During execution the SDK can
+  // write message content before its duplicate extra.requestId metadata.
+  const requestId=requestIds.get(item.id);
+  if(extra.requestId!==undefined)assert.equal(extra.requestId,requestId,'IDE request identity differs');
+  assert.ok(Array.isArray(message.content),'Invalid IDE message content');
+  const base={sessionId,nativeMessageId:item.id,nativeRequestId:requestId};
+  if(row.role==='user'&&!extra.isHelperMessage){
+   const hostText=message.content[0]?.type==='text'?message.content[0].text:'';
+   const context=typeof hostText==='string'?hostText.match(/^<user_info>\s*([\s\S]*?)<\/user_info>/):null;
+   const nativeFolder=context?.[1].match(/^Workspace Folder:\s*(\/[^\r\n]+)$/m)?.[1]?.trim();
+   if(nativeFolder){
+    assert.ok(path.isAbsolute(nativeFolder)&&!/[\x00\r\n]/.test(nativeFolder),'Invalid native IDE workspace');
+    if(workspace)assert.equal(workspace,nativeFolder,'Native IDE workspace changed within one session');
+    workspace=nativeFolder;
+   }
+   assert.ok(Array.isArray(extra.sourceContentBlocks),'Original IDE user task is missing');
+   const text=extra.sourceContentBlocks.filter(b=>b.type==='text'&&typeof b.text==='string').map(b=>b.text).join('\n');
+   if(text.trim())events.push({...base,type:'user',message:{content:[{type:'text',text}]}});
+  }else if(row.role==='assistant'){
+   const text=message.content.filter(b=>b.type==='text').map(b=>b.text||'').join('\n');
+   if(text)latestAssistant=text;
+   for(const block of message.content.filter(b=>b.type==='tool-call')){
+    assert.ok(block.args&&typeof block.args==='object'&&!Array.isArray(block.args),'Invalid IDE tool arguments');
+    events.push({...base,type:'assistant',message:{content:[{type:'tool_use',id:block.toolCallId,name:aliases[block.toolName]||block.toolName,input:block.args}]}});
+   }
+  }else if(row.role==='tool'){
+   for(const block of message.content.filter(b=>b.type==='tool-result')){
+    const result=block.result,success=!block.isError&&result?.success===true&&result.status==='success';
+    events.push({...base,type:'user',message:{content:[{type:'tool_result',tool_use_id:block.toolCallId,
+     tool_name:aliases[block.toolName]||block.toolName,content:result,is_error:!success}]}});
+   }
+  }
+ }
+ // Only stable prompt/call/result facts form the prefix cursor. Streaming text,
+ // reasoning, request state and mutable toolStatus do not invalidate old facts.
+ return {text:events.map(row=>JSON.stringify(row)).join('\n')+'\n',latestAssistant,workspace,format:'codebuddy-ide-index-v1'};
+}
+module.exports={read};

package/skills/i3-ui-prototype/scripts/codebuddy-registration.cjs

@@ -0,0 +1,123 @@
+'use strict';
+// Pure configuration planning. This module does not install or activate a host.
+const assert = require('node:assert/strict');
+const path = require('node:path');
+const fs = require('node:fs');
+const crypto = require('node:crypto');
+const { digest } = require('./execution-policy.cjs');
+const OWNER = 'i3-prototype-codebuddy-v1';
+const EVENTS = ['SessionStart', 'UserPromptSubmit', 'PreToolUse', 'PostToolUse', 'Stop'];
+function quote(value) {
+  assert.ok(typeof value === 'string' && !/[\x00\r\n]/.test(value), 'Unsafe Hook argument');
+  return "'" + value.replaceAll("'", "'\\''") + "'";
+}
+function config(text) {
+  if (text === null) return {};
+  let value; try { value = JSON.parse(text); } catch { throw new Error('Settings must be valid JSON; preserve the original file'); }
+  assert.ok(value && !Array.isArray(value) && typeof value === 'object', 'Settings must be a JSON object');
+  assert.ok(!value.hooks || (typeof value.hooks === 'object' && !Array.isArray(value.hooks)), 'Invalid hooks configuration');
+  for (const groups of Object.values(value.hooks || {})) {
+    assert.ok(Array.isArray(groups), 'Hook groups must be arrays');
+    for (const group of groups) assert.ok(group && Array.isArray(group.hooks), 'Invalid Hook group');
+  }
+  return value;
+}
+function ownedMarker(group) { return group.hooks.some(hook => typeof hook.command === 'string' && hook.command.includes(OWNER)); }
+function plan(options) {
+  const { action = 'keep', scope, product, base, project, nodePath, scriptPath, scriptDigest, currentText = null, record = null,
+    transcriptRoots = record?.transcriptRoots || [], transcriptMode = record?.transcriptMode || (transcriptRoots.length ? 'manual' : 'auto'), productVersion = record?.productVersion || 'unreported' } = options;
+  assert.ok(['keep', 'enable', 'disable'].includes(action), 'Invalid Hook action');
+  assert.ok(['project', 'global'].includes(scope), 'Invalid installation scope');
+  assert.ok(['ide', 'cli'].includes(product), 'Specify CodeBuddy product ide or cli');
+  for (const item of [base, project, nodePath, scriptPath]) assert.ok(typeof item === 'string' && path.isAbsolute(item) && !/[\x00\r\n]/.test(item), 'Absolute safe registration paths required');
+  if (process.platform === 'win32') throw new Error('CodeBuddy A+B Windows Hook quoting is not yet verified');
+  const before = config(currentText), after = structuredClone(before), activeRecord = record && record.owner === OWNER ? record : null;
+  if (record) {
+    assert.ok(activeRecord && activeRecord.schemaVersion === 1, 'Unknown registration ownership');
+    assert.equal(activeRecord.scope, scope, 'Registration scope changed');
+    assert.equal(activeRecord.product, product, 'Disable the previous product profile before changing it');
+    assert.equal(activeRecord.base, base, 'Registration base changed');
+  }
+  const found = {};
+  for (const [event, groups] of Object.entries(after.hooks || {})) {
+    for (const group of groups.filter(ownedMarker)) {
+      assert.ok(activeRecord?.groups[event], 'Hook ownership is missing; do not adopt an unknown command');
+      assert.deepEqual(group, activeRecord.groups[event], 'Owned Hook was modified; preserve the user changes');
+      assert.ok(!found[event], 'Duplicate owned Hook registration'); found[event] = group;
+    }
+  }
+  if (activeRecord) for (const event of Object.keys(activeRecord.groups)) assert.ok(found[event], 'Owned Hook registration changed or is missing');
+  const unchanged = action === 'keep' && !activeRecord;
+  let recordAfter = null;
+  if (!unchanged) {
+    after.hooks ||= {};
+    for (const event of Object.keys(found)) after.hooks[event] = after.hooks[event].filter(group => group !== found[event]);
+    if (action !== 'disable') {
+      assert.match(scriptDigest || '', /^[a-f0-9]{64}$/, 'Hook script digest required');
+      const groups = {};
+      for (const event of EVENTS) {
+        const argv = [nodePath, scriptPath, '--registration', OWNER, '--base', base, '--scope', scope, '--product', product, '--event', event];
+        const group = { ...(event.endsWith('ToolUse') ? { matcher: '' } : {}), hooks: [{ type: 'command', command: argv.map(quote).join(' '), timeout: 10 }] };
+        groups[event] = group; (after.hooks[event] ||= []).push(group);
+      }
+      assert.ok(Array.isArray(transcriptRoots)&&transcriptRoots.every(root=>typeof root==='string'&&path.isAbsolute(root)&&!/[\x00\r\n]/.test(root)),'Absolute native transcript roots required');
+      assert.ok(['auto','manual'].includes(transcriptMode),'Invalid native transcript mode');
+      assert.ok(transcriptMode==='manual'?transcriptRoots.length>0:transcriptRoots.length===0,'Manual transcript mode requires roots; auto uses only the native callback file');
+      recordAfter = { schemaVersion: 1, owner: OWNER, scope, product, base, scriptPath, scriptDigest, nodePath, groups, transcriptMode, transcriptRoots, productVersion };
+    }
+  }
+  const afterText = unchanged ? currentText : JSON.stringify(after, null, 2) + '\n';
+  return { action, scope, product, base, project, settingsPath: path.join(base, 'settings.json'),
+    recordPath: path.join(base, 'state/i3-prototype/installation.json'), beforeDigest: digest(currentText), beforeRecordDigest: digest(record), afterText, recordAfter,
+    summary: { status: unchanged || action === 'disable' ? 'not-enabled' : product === 'cli' ? 'pending-host-review' : 'registered',
+      ...(recordAfter?{transcript:{mode:transcriptMode,status:'awaiting-native-event',invocationVerified:false}}:{}),
+      scope, product, settingsPath: path.join(base, 'settings.json'), events: recordAfter ? EVENTS : [], changed: afterText !== currentText || digest(recordAfter)!==digest(record),
+      next: product === 'cli' && recordAfter ? 'Review the external settings change in CodeBuddy /hooks; then start a new session.' : 'Actual Hook invocation must be checked in the host; registration is not activation.' } };
+}
+function safePath(file) {
+  let current = path.parse(path.resolve(file)).root;
+  for (const part of path.resolve(file).slice(current.length).split(path.sep)) {
+    current = path.join(current, part);
+    if (fs.existsSync(current)) assert.ok(!fs.lstatSync(current).isSymbolicLink(), 'Hook settings symlink refused');
+  }
+}
+const fileIO = {
+  lock(file) {safePath(file);fs.mkdirSync(path.dirname(file),{recursive:true});const lock=file+'.i3-prototype.lock';try{fs.mkdirSync(lock);}catch{throw new Error('Hook configuration is being updated; retry without overwriting the other change');}return ()=>fs.rmdirSync(lock);},
+  read(file) {
+    safePath(file); if (!fs.existsSync(file)) return null;
+    assert.ok(fs.statSync(file).isFile() && fs.statSync(file).size <= 4 * 1024 * 1024, 'Invalid or oversized Hook configuration');
+    return fs.readFileSync(file, 'utf8');
+  },
+  write(file, text, expected) {
+    assert.equal(digest(this.read(file)), expected, 'Hook configuration changed concurrently');
+    if (text === null) { if (fs.existsSync(file)) fs.unlinkSync(file); return; }
+    fs.mkdirSync(path.dirname(file), { recursive: true }); safePath(file);
+    const staging = file + '.' + crypto.randomUUID() + '.new';
+    try {
+      fs.writeFileSync(staging, text, { flag: 'wx', mode: fs.existsSync(file) ? fs.statSync(file).mode & 0o777 : 0o600 });
+      assert.equal(digest(this.read(file)), expected, 'Hook configuration changed before publication');
+      fs.renameSync(staging, file);
+    } finally { if (fs.existsSync(staging)) fs.unlinkSync(staging); }
+  },
+};
+function apply(change, io = fileIO) {
+  const unlock=io.lock?io.lock(change.settingsPath):()=>{};
+  try {return applyLocked(change,io);}finally{unlock();}
+}
+function applyLocked(change, io) {
+  const before = io.read(change.settingsPath), recordBefore = io.read(change.recordPath);
+  assert.equal(digest(before), change.beforeDigest, 'Hook configuration changed after preview');
+  assert.equal(digest(recordBefore === null ? null : JSON.parse(recordBefore)), change.beforeRecordDigest, 'Hook ownership changed after preview');
+  const recordAfter = change.recordAfter ? JSON.stringify(change.recordAfter, null, 2) + '\n' : null;
+  if (change.afterText === before && recordAfter === recordBefore) return change.summary;
+  let settingsWritten = false;
+  try {
+    if (change.afterText !== before) { io.write(change.settingsPath, change.afterText, digest(before)); settingsWritten = true; }
+    if (recordAfter !== recordBefore) io.write(change.recordPath, recordAfter, digest(recordBefore));
+  } catch (error) {
+    if (settingsWritten && io.read(change.settingsPath) === change.afterText) io.write(change.settingsPath, before, digest(change.afterText));
+    throw error;
+  }
+  return change.summary;
+}
+module.exports = { OWNER, EVENTS, quote, config, plan, apply, fileIO };

package/skills/i3-ui-prototype/scripts/content-template.cjs

@@ -56,8 +56,8 @@ function scopeInputs(snapshot, scope, contract) {
     assert.ok(page.regions?.length, `Declare the actual region modes: ${page.id}`);
     for (const region of page.regions) {
       assert.match(region.id || '', /^[a-z][a-z0-9-]{0,63}$/);
-      assert.ok(['management-list', 'edit-form', 'content'].includes(region.mode), `Unknown business region mode: ${region.mode}`);
-      regions.push({ pageId: page.id, id: region.id, mode: region.mode });
+      assert.ok(['management-list', 'edit-form', 'content'].includes(region.mode) || (scope.schemaVersion === 3 && require('./generation-contract.cjs').resource(snapshot, 'generation.json').patterns.includes(region.pattern || region.mode)), `Unknown business region mode: ${region.mode}`);
+      regions.push({ pageId: page.id, id: region.id, mode: scope.schemaVersion === 3 ? 'content' : region.mode });
     }
   }
   for (const region of regions) for (const capability of snapshot.definition.capabilities) {

package/skills/i3-ui-prototype/scripts/execution-assertions.cjs

@@ -0,0 +1,43 @@
+'use strict';
+const assert=require('node:assert/strict'),E=require('./execution-evidence.cjs');
+const METHODS=['evaluate_script','take_snapshot','list_console_messages','list_network_requests','performance_stop_trace'];
+function validate(value,scenarioIds) {
+ assert.equal(value?.schemaVersion,1,'Fixed native assertions schema required');assert.ok(Array.isArray(value.scenarios),'Fixed native assertion scenarios required');
+ assert.deepEqual(value.scenarios.map(s=>s.scenarioId).sort(),[...scenarioIds].sort(),'Fixed native assertion scenario coverage differs');
+ for(const scenario of value.scenarios) {
+  assert.ok(scenario.checks?.length,'Each fixed scenario needs actual result assertions before implementation');
+  for(const check of scenario.checks) {
+   assert.ok(METHODS.includes(check.method),'Unsupported native assertion method');
+   assert.ok(typeof check.pointer==='string'&&/^\/(?:[^~]|~[01])*$/.test(check.pointer)&&!/(?:__proto__|constructor|prototype)/.test(check.pointer),'Safe JSON pointer required');
+   assert.ok(['equals','includes','gte','lte'].includes(check.operator),'Unsupported native assertion operator');
+   assert.ok(Object.hasOwn(check,'expected')&&check.expected!==null,'Explicit fixed expected fact required');
+   if(['gte','lte'].includes(check.operator))assert.equal(typeof check.expected,'number','Numeric fixed expectation required');
+  }
+ }
+ return value;
+}
+function resultData(result) {
+ const text=E.contentText(result).trim();let value;
+ try{value=JSON.parse(text);}catch{const blocks=[...text.matchAll(/```(?:json)?\s*\n([\s\S]*?)\n```/g)];assert.equal(blocks.length,1,'One actual JSON result or JSON code block required');value=JSON.parse(blocks[0][1]);}
+ assert.ok(value&&typeof value==='object','Native JSON fact result required');return value;
+}
+function extract(value,pointer) {
+ for(const part of pointer.slice(1).split('/').map(p=>p.replaceAll('~1','/').replaceAll('~0','~'))) {assert.ok(value&&Object.hasOwn(value,part),'Native expected fact is absent');value=value[part];}return value;
+}
+function compare(actual,check) {
+ if(check.operator==='equals')assert.deepEqual(actual,check.expected,'Native fact differs from fixed expectation');
+ else if(check.operator==='includes')assert.ok((typeof actual==='string'||Array.isArray(actual))&&actual.includes(check.expected),'Native fact does not include fixed expectation');
+ else {assert.equal(typeof actual,'number','Native numeric fact required');assert.ok(check.operator==='gte'?actual>=check.expected:actual<=check.expected,'Native numeric fact differs from fixed expectation');}
+}
+function template(options) {
+ const fs=require('node:fs'),path=require('node:path'),T=require('./template-contract.cjs');
+ assert.ok(options.scope,'Sourced scope file required');const scope=JSON.parse(fs.readFileSync(path.resolve(options.scope),'utf8'));
+ const snapshot=options.templateRoot?T.loadTemplate(path.resolve(options.templateRoot)):T.loadBundledTemplate(options.template);
+ const selection=snapshot.kind==='content-reference'?require('./content-template.cjs').scopeInputs(snapshot,scope,T):null;
+ const generation=scope.schemaVersion===3?require('./generation-contract.cjs').compile(snapshot,scope):null;
+ const scenarios=[...(selection?.result.requiredScenarios||snapshot.index.requiredScenarios),...(generation?.scenarios||[])];
+ const drawer=selection&&(selection.fixed.regions.some(r=>r.mode==='edit-form')||generation?.bindings.some(b=>b.capabilityId==='dialog'&&b.parameters.presentation==='drawer'));
+ const framework=selection?['framework-responsive','framework-instance-isolation','template-content-projection',...(drawer?['framework-drawer-motion','framework-mask-blur','framework-focus-scroll']:[])]:['framework-drawer-motion','framework-mask-blur','framework-focus-scroll','framework-states','framework-responsive','framework-instance-isolation','template-content-projection'];
+ return {schemaVersion:1,scopeDigest:E.sha(JSON.stringify(scope)),templateDigest:snapshot.digest,scenarios:[...scenarios.map(s=>({scenarioId:typeof s==='string'?s:s.id,expectedSummary:s.expected||null,checks:[]})),...framework.map(scenarioId=>({scenarioId,checks:[]}))]};
+}
+module.exports={validate,resultData,extract,compare,template};