@givolt/i3-composer-agent 2.3.3 → 2.3.4

package/skills/i3-ui-prototype/scripts/codebuddy-hook.cjs

@@ -2,30 +2,21 @@
 const fs=require('node:fs'),path=require('node:path'),crypto=require('node:crypto'),assert=require('node:assert/strict');
 const F=require('./native-files.cjs'),C=require('./codebuddy-context.cjs'),E=require('./execution-evidence.cjs'),P=require('./execution-policy.cjs'),G=require('./execution-gates.cjs');
 const X=require('./execution-runtime.cjs');
-function tokens(command) {
- if(typeof command!=='string'||/[\x00\r\n]|\$\(|`/.test(command))return null;
- const values=[];let value='',quote=null,started=false;
- for(let i=0;i<command.length;i++) {const c=command[i];if(quote){if(c===quote){quote=null;started=true;}else if(c==='\\'&&quote==='"'&&i+1<command.length)value+=command[++i];else value+=c;}
- else if(c==='"'||c==="'"){quote=c;started=true;}else if(c==='\\'&&i+1<command.length){value+=command[++i];started=true;}else if(/\s/.test(c)){if(started){values.push(value);value='';started=false;}}else if(/[;&|<>]/.test(c))return null;else {value+=c;started=true;}}
- if(quote)return null;if(started)values.push(value);return values;
-}
-function nativeCommand(tool,input,cwd) {
- if(!['Bash','execute_command','run_terminal_command'].includes(tool))return null;
- const argv=tokens(input?.command);if(!argv)return null;const index=argv.findIndex(arg=>path.basename(arg)==='native-pilot.cjs');if(index<1)return null;
- const operation=argv[index+1],root=argv[index+2]&&!argv[index+2].startsWith('--')?path.resolve(cwd,argv[index+2]):null;
- return {operation,root,argv};
-}
+const H=require('./buddy-host.cjs');
+const Recovery=require('./execution-recovery.cjs');
+const {tokens,nativeCommand,stageFor}=require('./native-command.cjs');
 function eventCall(payload,source) {
+ const callId=payload.tool_use_id||payload.call_id;
  const canonical=value=>Array.isArray(value)?value.map(canonical):value&&typeof value==='object'?Object.fromEntries(Object.keys(value).sort().map(k=>[k,canonical(value[k])])):value;
  const partial=(before,after)=>typeof before==='string'?typeof after==='string'&&after.startsWith(before):Array.isArray(before)?Array.isArray(after)&&before.length<=after.length&&before.every((value,i)=>partial(value,after[i])):before&&typeof before==='object'?after&&typeof after==='object'&&Object.keys(before).every(key=>Object.hasOwn(after,key)&&partial(before[key],after[key])):before===after;
  const matches=source.calls.filter(call=>{
-  if(call.name!==payload.tool_name||call.requestLine<source.prompts.at(-1).line||payload.tool_use_id&&call.toolCallId!==payload.tool_use_id)return false;
+  if(call.name!==payload.tool_name||call.requestLine<source.prompts.at(-1).line||callId&&call.toolCallId!==callId)return false;
   if(source.format==='codebuddy-ide-index-v1'&&payload.generation_id&&call.nativeRequestId!==payload.generation_id)return false;
   if(JSON.stringify(canonical(call.input))===JSON.stringify(canonical(payload.tool_input||{})))return true;
   // IDE 4.12 streams incomplete args to disk before PreToolUse. Correlate its
   // actual callback with one pending native call in the exact generation. The
   // pending call remains unsuccessful until a native result is persisted.
-  return source.format==='codebuddy-ide-index-v1'&&payload.client==='CodeBuddyIDE'&&typeof payload.generation_id==='string'&&call.nativeRequestId===payload.generation_id&&!call.resultLine&&partial(call.input,payload.tool_input||{});
+  return source.format==='codebuddy-ide-index-v1'&&H.isIDE(payload)&&typeof payload.generation_id==='string'&&call.nativeRequestId===payload.generation_id&&!call.resultLine&&partial(call.input,payload.tool_input||{});
  });
  const current=payload.hook_event_name==='PreToolUse'?matches.filter(call=>!call.resultLine):matches;
  assert.equal(current.length,1,'Native Hook event does not uniquely match the current transcript request');return current[0];
@@ -35,13 +26,13 @@ function eventSource(payload,record,project,{readSource=C.source,pause=milliseco
  // IDE can persist the current call only AFTER returning from both Hooks. Its
  // current native prompt/generation still binds the callback. Never synthesize
  // a successful call; A checks the persisted request/result at a later stage.
- const attempts=toolEvent&&record.product==='ide'&&payload.client==='CodeBuddyIDE'?8:1;
+ const attempts=toolEvent&&record.product==='ide'&&H.isIDE(payload)?8:1;
  for(let attempt=1;attempt<=attempts;attempt++) {
   try {
    const source=readSource(payload,record,project);
    let nativeRequestStatus='not-tool-event';
    if(toolEvent) {
-    if(source.format==='codebuddy-ide-index-v1'&&record.product==='ide'&&payload.client==='CodeBuddyIDE') {
+    if(source.format==='codebuddy-ide-index-v1'&&record.product==='ide'&&H.isIDE(payload)) {
      const latest=source.prompts.at(-1);
      assert.ok(typeof payload.generation_id==='string'&&latest?.nativeRequestId===payload.generation_id,'IDE callback differs from the current native task generation');
      const pending=source.calls.filter(call=>!call.resultLine&&call.requestLine>latest.line&&call.nativeRequestId===payload.generation_id&&call.name===payload.tool_name);
@@ -53,14 +44,18 @@ function eventSource(payload,record,project,{readSource=C.source,pause=milliseco
   }catch(error){if(attempt===attempts)throw error;pause(100);}
  }
 }
-function decision({event,source,binding,tool,input,directory,cwd,deliveryCurrent,stopHookActive=false}) {
+function decision({event,source,binding,tool,input,directory,cwd,deliveryCurrent,stopHookActive=false,policy}) {
  if(C.readOnly(source.prompts.at(-1)?.text||''))return {continue:true,reason:'latest-user-read-only'};
  if(event==='PreToolUse'&&G.uiWrite({name:tool,input:input||{},cwd},directory)) {
-  const front=E.loaded(source.calls,'frontend').filter(c=>c.sessionId===binding?.sessionId&&c.requestLine>source.contextLine&&(source.stableThroughLine===undefined||c.resultLine<=source.stableThroughLine));
-  if(!binding||binding.entryLine!==source.prompts.at(-1)?.line||binding.contextLine!==source.contextLine||!front.length)return {deny:true,reason:'Run execution-begin for the current task and load the frontend engineering Skill successfully in this session/context before writing prototype UI. Reading SKILL.md is insufficient.'};
+  const missing=Recovery.missing({source,binding,policy});
+  if(missing.length)return {deny:true,missing,reason:'原型 UI 写入已被阻止。'+Recovery.instruction(missing)};
  }
  const final=source.latestAssistant||'',claim=/(?:已完成|已经完成|全部通过|可以交付|\b(?:completed|ready for review|all checks passed)\b)/i.test(final)&&!/(?:未完成|尚未|待验证|阻塞|等待|进度|blocked|awaiting|not complete|in progress)/i.test(final);
- if(event==='Stop'&&binding&&!deliveryCurrent&&!stopHookActive&&claim)return {feedback:true,reason:'This prototype run has no current verified receipt. Run execution-check and resolve the missing evidence, or report blocked / awaiting-input / progress without claiming completion.'};
+ const blocked=/(?:\bblocked\b|无法继续|当前阻塞|等待用户|等待授权)/i.test(final);
+ if(event==='Stop'&&binding&&!deliveryCurrent&&!blocked&&(policy?.id===P.AUTO_ID||!stopHookActive)&&claim){
+  const missing=Recovery.missing({source,binding,policy,stage:'delivery'});if(!missing.length)missing.push('execution-evidence');
+  return {feedback:true,missing,reason:'当前原型没有有效交付回执。'+Recovery.instruction(missing)};
+ }
  return {continue:true};
 }
 function prototypeForWrite(project,tool,input) {
@@ -70,8 +65,9 @@ function prototypeForWrite(project,tool,input) {
  while(current.startsWith(prototypes+path.sep)){if(fs.existsSync(path.join(current,'prototype.json')))return fs.realpathSync(current);current=path.dirname(current);}return null;
 }
 function safeProject(payload,options={},env=process.env,real=file=>fs.realpathSync(file),callbackCwd=process.cwd(),workspace=E.ideWorkspace) {
- const ideRoot=options.product==='ide'&&payload.client==='CodeBuddyIDE'&&payload.cwd==='/';
- const root=options.scope==='project'?path.dirname(options.base):ideRoot?workspace(payload.transcript_path,payload.session_id):env.CODEBUDDY_PROJECT_DIR||env.CLAUDE_PROJECT_DIR||payload.cwd||(payload.hook_event_name==='SessionStart'?callbackCwd:null);assert.ok(root&&path.isAbsolute(root),'Native project directory required');
+ const ideRoot=options.product==='ide'&&H.isIDE(payload)&&payload.cwd==='/';
+ const hostProject=options.host==='workbuddy'?env.WORKBUDDY_PROJECT_DIR:env.CODEBUDDY_PROJECT_DIR;
+ const root=options.scope==='project'?path.dirname(options.base):ideRoot?workspace(payload.transcript_path,payload.session_id):hostProject||env.CLAUDE_PROJECT_DIR||payload.cwd||(payload.hook_event_name==='SessionStart'?callbackCwd:null);assert.ok(root&&path.isAbsolute(root),'Native project directory required');
  const project=real(root);
  // IDE 4.12.2 reports '/' for absolute-path tools. Use the project registration
  // or session-bound native workspace above; reject all other outside cwd.
@@ -82,15 +78,29 @@ function saveIndex(directory,index) {
  F.write(directory,'session.json',index);
 }
 function toolCwd(payload,record,project) {
- return record.product==='ide'&&payload.client==='CodeBuddyIDE'&&payload.cwd==='/'?project:payload.cwd||project;
+ return record.product==='ide'&&H.isIDE(payload)&&payload.cwd==='/'?project:payload.cwd||project;
 }
 function handle(payload,options) {
  assert.equal(payload.hook_event_name,options.event,'Hook event mismatch');
- const project=safeProject(payload,options),record=C.select({project,product:options.product});
+ if(options.event==='SessionStart')return {continue:true};
+ if(options.event==='UserPromptSubmit'){
+  const prompt=payload.prompt||'';
+  if(!C.readOnly(prompt)&&(/\/i3-prototype\b(?!\s+(?:analyze|inspect|confirm-baseline))/.test(prompt)||/(?:生成|实现|创建|修订|修改|继续).{0,16}原型|(?:create|revise|implement).{0,20}prototype/i.test(prompt)))return {continue:true,context:'原型实施：先 execution-begin，再实际调用 i3-frontend-ui-engineering；使用 antDv 时加载 antdv 并通过 prototype-deps query 或检测出的本地 Node 入口查询组件。专业模式还须实际调用 UIUX。成功返回后再实施；收到原型门禁拒绝时按明确缺项补调并重试，不能留到下次修订。'};
+  return {continue:true};
+ }
+ let identity,installed;
+ try{installed=options.product==='auto'?C.registration(options.base):null;identity=H.identify(payload,installed||{schemaVersion:1,product:options.product},options);}catch(error){
+  const project=options.scope==='project'?path.dirname(options.base):payload.cwd;
+  if(options.event==='PreToolUse'&&project&&path.isAbsolute(project)){
+   const native=nativeCommand(payload.tool_name,payload.tool_input,project),target=native?.root||prototypeForWrite(project,payload.tool_name,payload.tool_input);
+   if(target&&fs.existsSync(path.join(target,'prototype.json'))&&X.policy(target))return {deny:true,reason:'原型原生宿主身份尚未核验，禁止受管写入或阶段推进：'+error.message};
+  }
+  throw error;
+ }
+ options={...options,...identity};
+ const project=safeProject(payload,options,options.env),record=C.select({project,product:identity.product,host:identity.host,home:options.home,env:options.env});
  if(!record||record.base!==options.base)return {continue:true};
  const cwd=toolCwd(payload,record,project);
- // SessionStart and analysis do not create persistent per-project/session state.
- if(['SessionStart','UserPromptSubmit'].includes(options.event))return {continue:true};
  let source;
  try {
   source=eventSource(payload,record,project);
@@ -108,30 +118,60 @@ function handle(payload,options) {
  const stateDirectory=C.sessionDirectory(record,project,payload.session_id),file=path.join(stateDirectory,'session.json');
  const index=JSON.parse(C.read(file)||'{"schemaVersion":1,"bindings":{}}');assert.equal(index.schemaVersion,1,'Unsupported audit session state');
  const command=nativeCommand(payload.tool_name,payload.tool_input,cwd);
- if(options.event==='PreToolUse'&&command?.operation==='create'&&!command.argv.includes('--execution-policy')&&(E.loaded(source.calls,'prototype').some(c=>c.requestLine>source.contextLine)||/^\s*\/i3-prototype\b/.test(latest.text)))return {deny:true,reason:'New CodeBuddy prototypes require --host codebuddy --execution-policy codebuddy-ab-v1 and fixed --execution-assertions. Existing artifacts keep their original contracts.'};
+ if(options.event==='PreToolUse'&&command?.operation==='create'&&(installed?.schemaVersion===2||E.loaded(source.calls,'prototype').some(c=>c.requestLine>source.contextLine)||/^\s*\/i3-prototype\b/.test(latest.text))){
+  const at=command.argv.indexOf('--execution-policy'),expected=installed?.schemaVersion===2?P.AUTO_ID:P.ID;
+  const hostAt=command.argv.indexOf('--host');
+  if(at<0||command.argv[at+1]!==expected||installed?.schemaVersion===2&&(hostAt<0||command.argv[hostAt+1]!==identity.host))return {deny:true,reason:`New ${identity.host} prototypes require --host ${identity.host} --execution-policy ${expected} and fixed --execution-assertions. Existing artifacts keep their original contracts.`};
+ }
  const directory=command?.root||prototypeForWrite(project,payload.tool_name,payload.tool_input);
  const existing=directory?index.bindings[directory]:null;
+ const stage=options.event==='Stop'?'delivery':stageFor[command?.operation];
+ let callbackCall=null;if(['PreToolUse','PostToolUse'].includes(options.event))try{callbackCall=eventCall(payload,source);}catch{/* Deferred IDE requests cannot attest results. */}
+ const callId=payload.tool_use_id||payload.call_id||callbackCall?.toolCallId;
+ const eventKey=E.sha(JSON.stringify([options.event,payload.generation_id||latest.nativeRequestId||null,callId||null,payload.tool_name||null,payload.tool_input||null,callId?null:source.digest]));
+ const recoveryContext=target=>{
+  const stagePassed=stage&&options.event!=='Stop'&&X.check(target,stage,require('./native-pilot-lib.cjs')).status==='passed';
+  const retryCall=options.event==='PostToolUse'&&callbackCall?.success&&(stagePassed||G.uiWrite({...callbackCall,cwd:callbackCall.cwd||cwd},target))?callbackCall:null;
+  return {source,sessionId:payload.session_id,directory:target,event:options.event,eventKey,stage,policy:X.policy(target),resolved:[...(existing?['execution-begin']:[]),...(stagePassed?['execution-evidence']:[])],retrySucceeded:!!retryCall,
+   ...(retryCall?{retry:{toolCallId:retryCall.toolCallId,resultDigest:retryCall.resultDigest,requestLine:retryCall.requestLine,resultLine:retryCall.resultLine,...(stagePassed?{kind:'stage',stage,operation:command.operation}:{kind:'ui-write'})}}:{})};
+ };
+ const respond=answer=>{
+  const lock=path.join(stateDirectory,'.audit.lock');fs.mkdirSync(stateDirectory,{recursive:true});
+  try{fs.mkdirSync(lock);}catch{throw new Error('Concurrent audit callback; retry without bypassing the gate');}
+  try{const fresh=JSON.parse(C.read(file)||'{"schemaVersion":1,"bindings":{}}');const result=Recovery.record(fresh,recoveryContext(directory),answer);if(fresh.bindings[directory]&&result.recovery)fresh.bindings[directory].recovery=result.recovery;saveIndex(stateDirectory,fresh);return result;}
+  finally{fs.rmdirSync(lock);}
+ };
  if(options.event==='PreToolUse'&&command?.operation==='execution-begin') {
   assert.ok(directory&&directory.startsWith(path.join(project,'prototypes')+path.sep),'Prototype must be in this project');
   const fixed=X.policy(directory);assert.ok(fixed,'Existing prototype retains its original contract; do not rewrite it implicitly');
+  assert.equal(fixed.host,identity.host,'This prototype has a fixed contract for another host; inspect it or explicitly migrate and revalidate, do not inherit its invocation proof');
   const loaded=E.loaded(source.calls,'prototype').some(c=>c.requestLine>source.contextLine);
   assert.ok(loaded||/^\s*\/i3-prototype\b/.test(latest.text),'Native prototype Skill or actual shortcut entry required');
   const meta=F.json(path.join(directory,'prototype.json')),lib=require('./native-pilot-lib.cjs'),current=lib.manifest(directory);
   const runId=existing&&existing.entryLine===latest.line&&existing.inputDigest===current.inputDigest&&existing.contextLine===source.contextLine?existing.runId:crypto.randomUUID();
   index.bindings[directory]={schemaVersion:1,runId,sessionId:payload.session_id,project,projectKey:C.projectKey(project),directory,instanceId:meta.instanceId,policyDigest:fixed.digest,inputDigest:current.inputDigest,entryLine:latest.line,promptDigest:latest.digest,contextLine:source.contextLine,
-   operation:meta.revision==='r001'?'create':'revise',product:record.product,productVersion:record.productVersion,scope:record.scope,registrationDigest:record.registrationDigest,settingsDigest:record.settingsDigest,source:{path:source.path,bytes:source.bytes,digest:source.digest},lastHook:{event:options.event,at:new Date().toISOString(),nativeReadAttempts:source.nativeReadAttempts,nativeRequestStatus:source.nativeRequestStatus}};
+   operation:meta.revision==='r001'?'create':'revise',host:identity.host,identitySource:identity.identitySource,product:record.product,productVersion:identity.productVersion,scope:record.scope,registrationDigest:record.registrationDigest,settingsDigest:record.settingsDigest,source:{path:source.path,bytes:source.bytes,digest:source.digest},lastHook:{event:options.event,at:new Date().toISOString(),nativeReadAttempts:source.nativeReadAttempts,nativeRequestStatus:source.nativeRequestStatus}};
   const lock=path.join(stateDirectory,'.audit.lock');fs.mkdirSync(stateDirectory,{recursive:true});
   try{fs.mkdirSync(lock);}catch{throw new Error('Concurrent audit callback; retry execution-begin');}
   try {
    const fresh=JSON.parse(C.read(file)||'{"schemaVersion":1,"bindings":{}}');fresh.bindings[directory]=index.bindings[directory];
    saveIndex(stateDirectory,fresh);
-   F.write(directory,'qa/execution-context.json',{schemaVersion:1,runId,sessionId:payload.session_id,project,base:record.base,product:record.product});
+   F.write(directory,'qa/execution-context.json',{schemaVersion:1,runId,sessionId:payload.session_id,project,base:record.base,host:identity.host,product:record.product});
   }finally{fs.rmdirSync(lock);}
   return {continue:true};
  }
  if(directory&&fs.existsSync(path.join(directory,'prototype.json'))&&X.policy(directory)) {
-  const answer=decision({event:options.event,source,binding:existing,tool:payload.tool_name,input:payload.tool_input,directory,cwd});if(answer.deny)return answer;
-  if(options.event==='PreToolUse'&&command&&['build','record-run','record-devtools-review','finalize'].includes(command.operation)&&!existing)return {deny:true,reason:'Begin this strict prototype run with execution-begin before implementation or delivery.'};
+  const fixed=X.policy(directory),answer=decision({event:options.event,source,binding:existing,tool:payload.tool_name,input:payload.tool_input,directory,cwd,policy:fixed});
+  if(answer.deny)return respond(answer);
+  if(options.event==='PreToolUse'&&command&&['build','record-run','record-devtools-review','finalize'].includes(command.operation)){
+   if(!existing)return respond({deny:true,missing:['execution-begin'],reason:Recovery.instruction(['execution-begin'])});
+   const checked=X.check(directory,stage,require('./native-pilot-lib.cjs'));
+   if(checked.status==='failed'){
+    const missing=Recovery.missing({source,binding:existing,policy:fixed,stage});if(!missing.length)missing.push('execution-evidence');
+    return respond({deny:true,missing,reason:Recovery.instruction(missing)+' '+checked.errors.join('; ')});
+   }
+  }
+  if(G.uiWrite({name:payload.tool_name,input:payload.tool_input||{},cwd},directory)||stage&&['PreToolUse','PostToolUse'].includes(options.event))respond({continue:true});
  }
  if(!Object.keys(index.bindings).length)return {continue:true};
  const lock=path.join(stateDirectory,'.audit.lock');fs.mkdirSync(stateDirectory,{recursive:true});
@@ -140,14 +180,13 @@ function handle(payload,options) {
   const fresh=JSON.parse(C.read(file));let changed=false;
   for(const entry of Object.values(fresh.bindings)) {
    if(entry.entryLine!==latest.line)continue;
-   const eventKey=E.sha(JSON.stringify([options.event,payload.tool_use_id||null,payload.tool_name||null,payload.tool_input||null,source.digest]));
    if(entry.lastEventKey===eventKey)continue;
    entry.source={path:source.path,bytes:source.bytes,digest:source.digest};entry.lastEventKey=eventKey;entry.lastHook={event:options.event,at:new Date().toISOString(),nativeReadAttempts:source.nativeReadAttempts,nativeRequestStatus:source.nativeRequestStatus};changed=true;
    if(options.event==='Stop') {
     const lib=require('./native-pilot-lib.cjs'),state=lib.state(entry.directory);
     const complete=state.execution.status==='passed'&&state.delivery?.status==='current'&&state.delivery.result.runId===entry.runId;
-    const feedback=decision({event:'Stop',source,binding:entry,directory:entry.directory,deliveryCurrent:complete,stopHookActive:payload.stop_hook_active||entry.stopFeedbackPrompt===latest.digest});
-    if(feedback.feedback){entry.stopFeedbackPrompt=latest.digest;saveIndex(stateDirectory,fresh);return feedback;}
+    const fixed=X.policy(entry.directory),feedback=decision({event:'Stop',source,binding:entry,directory:entry.directory,deliveryCurrent:complete,policy:fixed,stopHookActive:payload.stop_hook_active||entry.stopFeedbackPrompt===latest.digest});
+    if(feedback.feedback){const result=Recovery.record(fresh,{...recoveryContext(entry.directory),policy:fixed},feedback);entry.recovery=result.recovery;if(fixed.id!==P.AUTO_ID)entry.stopFeedbackPrompt=latest.digest;saveIndex(stateDirectory,fresh);return result;}
    }
   }
   if(changed)saveIndex(stateDirectory,fresh);

package/skills/i3-ui-prototype/scripts/codebuddy-registration.cjs

@@ -24,18 +24,20 @@ function config(text) {
 }
 function ownedMarker(group) { return group.hooks.some(hook => typeof hook.command === 'string' && hook.command.includes(OWNER)); }
 function plan(options) {
-  const { action = 'keep', scope, product, base, project, nodePath, scriptPath, scriptDigest, currentText = null, record = null,
+  const { action = 'keep', scope, product = 'auto', base, project, nodePath, scriptPath, scriptDigest, currentText = null, record = null,
     transcriptRoots = record?.transcriptRoots || [], transcriptMode = record?.transcriptMode || (transcriptRoots.length ? 'manual' : 'auto'), productVersion = record?.productVersion || 'unreported' } = options;
   assert.ok(['keep', 'enable', 'disable'].includes(action), 'Invalid Hook action');
   assert.ok(['project', 'global'].includes(scope), 'Invalid installation scope');
-  assert.ok(['ide', 'cli'].includes(product), 'Specify CodeBuddy product ide or cli');
+  assert.ok(['auto', 'ide', 'cli'].includes(product), 'Use automatic product detection, or a legacy ide/cli profile');
+  const hosts=[...new Set(options.hosts || [...(record?.hosts || (record ? ['codebuddy'] : [])),...(options.agents?.filter(host=>['codebuddy','workbuddy'].includes(host)) || [options.host || 'codebuddy'])])].sort();
+  assert.ok((hosts.length||action==='disable')&&hosts.every(host=>['codebuddy','workbuddy'].includes(host)), 'Unsupported prototype Hook host');
   for (const item of [base, project, nodePath, scriptPath]) assert.ok(typeof item === 'string' && path.isAbsolute(item) && !/[\x00\r\n]/.test(item), 'Absolute safe registration paths required');
   if (process.platform === 'win32') throw new Error('CodeBuddy A+B Windows Hook quoting is not yet verified');
   const before = config(currentText), after = structuredClone(before), activeRecord = record && record.owner === OWNER ? record : null;
   if (record) {
-    assert.ok(activeRecord && activeRecord.schemaVersion === 1, 'Unknown registration ownership');
+    assert.ok(activeRecord && [1,2].includes(activeRecord.schemaVersion), 'Unknown registration ownership');
     assert.equal(activeRecord.scope, scope, 'Registration scope changed');
-    assert.equal(activeRecord.product, product, 'Disable the previous product profile before changing it');
+    if(product!=='auto')assert.equal(activeRecord.product, product, 'Disable the previous product profile before changing it');
     assert.equal(activeRecord.base, base, 'Registration base changed');
   }
   const found = {};
@@ -63,7 +65,7 @@ function plan(options) {
       assert.ok(Array.isArray(transcriptRoots)&&transcriptRoots.every(root=>typeof root==='string'&&path.isAbsolute(root)&&!/[\x00\r\n]/.test(root)),'Absolute native transcript roots required');
       assert.ok(['auto','manual'].includes(transcriptMode),'Invalid native transcript mode');
       assert.ok(transcriptMode==='manual'?transcriptRoots.length>0:transcriptRoots.length===0,'Manual transcript mode requires roots; auto uses only the native callback file');
-      recordAfter = { schemaVersion: 1, owner: OWNER, scope, product, base, scriptPath, scriptDigest, nodePath, groups, transcriptMode, transcriptRoots, productVersion };
+      recordAfter = { schemaVersion: product==='auto'?2:1, owner: OWNER, scope, product, ...(product==='auto'?{hosts}:{}), base, scriptPath, scriptDigest, nodePath, groups, transcriptMode, transcriptRoots, productVersion };
     }
   }
   const afterText = unchanged ? currentText : JSON.stringify(after, null, 2) + '\n';

package/skills/i3-ui-prototype/scripts/execution-evidence.cjs

@@ -18,7 +18,7 @@ function nativeEvent(event) {
   if (event.type === 'message' && ['assistant', 'user'].includes(event.role)) {
     const content = Array.isArray(event.content) ? event.content.map(block =>
       ['input_text', 'output_text'].includes(block?.type) ? { ...block, type: 'text' } : block) : event.content;
-    return { ...event, type: event.role, message: { content } };
+    return { ...event, type: event.role, isMeta:event.isMeta===true||event.providerData?.isMeta===true, message: { content } };
   }
   if (event.type === 'function_call') {
     let input;

package/skills/i3-ui-prototype/scripts/execution-gates.cjs

@@ -4,6 +4,7 @@
 const assert=require('node:assert/strict'),path=require('node:path');
 const P=require('./execution-policy.cjs'),E=require('./execution-evidence.cjs');
 const A=require('./execution-assertions.cjs');
+const command=require('./native-command.cjs');
 const same=(a,b,label)=>assert.deepEqual(a,b,label);
 const exact=(a,b,label)=>same([...new Set(a)].sort(),[...new Set(b)].sort(),label);
 function uiWrite(call,directory) {
@@ -37,9 +38,29 @@ function identity(d) {
  same(d.binding.policyDigest,d.policy.digest,'Execution policy differs');same(d.binding.inputDigest,d.current.inputDigest,'Inputs changed; begin a new execution run');
  for(const key of ['inputDigest','candidateDigest','revision'])same(d.proof[key],key==='candidateDigest'?d.current.digest:d.current[key],`Current ${key} differs`);
  assert.ok(d.source.prompts.some(p=>p.line===d.binding.entryLine),'Native user task source missing');
+ if(d.policy.id===P.AUTO_ID){same(d.binding.host,d.policy.host,'Actual native host differs from the fixed policy');assert.ok(d.binding.identitySource&&d.binding.identitySource!=='legacy-profile','Automatic policy requires actual native host identity');}
+ if(d.binding.recovery){
+  const recovery=d.binding.recovery;
+  for(const ref of recovery.invocations||[]){const call=nativeRef(d,ref);same(call.skill,ref.skill,'Recovery Skill differs');same(call.requestLine,ref.requestLine,'Recovery request cursor differs');same(call.resultLine,ref.resultLine,'Recovery result cursor differs');assert.ok(call.requestLine>ref.feedbackLine,'Recovery invocation must follow its feedback');}
+  if(recovery.status==='recovered'){
+   const retry=nativeRef(d,recovery.retry);
+   if(recovery.retry.kind!==undefined)assert.ok(Number.isFinite(recovery.retry.feedbackLine)&&recovery.retry.feedbackLine>=d.binding.entryLine&&retry.requestLine>recovery.retry.feedbackLine,'Recovery retry must follow its feedback');
+   if(recovery.retry.kind==='stage'){
+    const parsed=command.nativeCommand(retry.name,retry.input,retry.cwd||d.binding.project||d.binding.directory);
+    assert.ok(parsed&&command.stageFor[parsed.operation],'Recovery retry is not a supported native stage command');
+    same(parsed.root,d.binding.directory,'Recovery stage belongs to another prototype');
+    same(parsed.operation,recovery.retry.operation,'Recovery stage operation differs');
+    same(command.stageFor[parsed.operation],recovery.retry.stage,'Recovery stage differs');
+   }else {
+    assert.ok(recovery.retry.kind===undefined||recovery.retry.kind==='ui-write','Unknown recovery retry kind');
+    assert.ok(uiWrite({...retry,cwd:retry.cwd||d.binding.project},d.binding.directory),'Recovery retry is not a native UI write');
+   }
+   for(const ref of recovery.invocations||[])assert.ok(retry.requestLine>ref.resultLine,'Retry must follow successful Skill results');
+  }
+ }
 }
 function frontend(d,complete) {
- const writes=d.source.calls.filter(c=>c.success&&c.requestLine>=d.binding.entryLine&&uiWrite({...c,cwd:c.cwd||(d.source.format==='codebuddy-ide-index-v1'?d.binding.project:undefined)},d.binding.directory));
+ const writes=d.source.calls.filter(c=>c.success&&c.requestLine>=d.binding.entryLine&&c.requestLine>(d.binding.contextLine||0)&&uiWrite({...c,cwd:c.cwd||(d.source.format==='codebuddy-ide-index-v1'?d.binding.project:undefined)},d.binding.directory));
  skill(d,d.proof.frontend,'frontend',writes.length?Math.min(...writes.map(c=>c.requestLine)):Infinity);
  if(!complete)return;
  assert.ok(writes.length,'Actual implementation write missing; metadata is not implementation');
@@ -141,7 +162,7 @@ function evaluate(data,stage) {
   if(needs.includes('build'))build(data);
   if(needs.includes('browser'))skill(data,data.proof.browser?.skill||data.devtools?.skill,'browser');
   if(needs.includes('browser-results'))browser(data);
-  return {status:'passed',stage,policyDigest:data.policy.digest,runId:data.binding.runId,sessionId:data.binding.sessionId,projectKey:data.binding.projectKey,host:'codebuddy',productForm:data.binding.product||'unreported',productVersion:data.binding.productVersion||'unreported',installationScope:data.binding.scope||'unreported',operation:data.binding.operation||data.policy.operation,mode:data.policy.mode,inputDigest:data.current.inputDigest,candidateDigest:data.current.digest,revision:data.current.revision,source:data.source.path?{path:data.source.path,bytes:data.source.bytes,digest:data.source.digest}:undefined,invocationVerification:'native-source-correlated',tamperProof:false};
+  return {status:'passed',stage,policyDigest:data.policy.digest,runId:data.binding.runId,sessionId:data.binding.sessionId,projectKey:data.binding.projectKey,host:data.policy.host,productForm:data.binding.product||'unreported',productVersion:data.binding.productVersion||'unreported',installationScope:data.binding.scope||'unreported',operation:data.binding.operation||data.policy.operation,mode:data.policy.mode,inputDigest:data.current.inputDigest,candidateDigest:data.current.digest,revision:data.current.revision,source:data.source.path?{path:data.source.path,bytes:data.source.bytes,digest:data.source.digest}:undefined,...(data.binding.recovery?{recovery:data.binding.recovery}:{}),invocationVerification:'native-source-correlated',tamperProof:false};
  } catch(error){return {status:'failed',stage,errors:[error.message],invocationVerification:'unverified'};}
 }
 module.exports={evaluate,uiWrite};

package/skills/i3-ui-prototype/scripts/execution-policy.cjs

@@ -2,6 +2,7 @@
 const assert = require('node:assert/strict');
 const crypto = require('node:crypto');
 const ID = 'codebuddy-ab-v1';
+const AUTO_ID = 'buddy-ab-v2';
 const SKILLS = Object.freeze({
   frontend: [['frontend','ui','engineering'].join('-'), 'i3-frontend-ui-engineering'],
   browser: [['browser','testing','with','devtools'].join('-'), 'i3-browser-testing-with-devtools'],
@@ -12,16 +13,20 @@ const STAGES = ['design', 'implementation-entry', 'implementation', 'build', 'br
 function digest(value) { return crypto.createHash('sha256').update(JSON.stringify(value)).digest('hex'); }
 function create(options = {}) {
   const { host = 'codebuddy', operation = 'create', mode = 'professional', officialCallable = true } = options;
-  assert.equal(host, 'codebuddy', 'This execution policy supports CodeBuddy only');
+  const policyId=options.id||(host==='workbuddy'?AUTO_ID:ID);
+  assert.ok([ID,AUTO_ID].includes(policyId),'Unsupported execution policy');
+  assert.ok(['codebuddy','workbuddy'].includes(host),'This execution policy supports CodeBuddy and WorkBuddy only');
+  if(policyId===ID)assert.equal(host,'codebuddy','The legacy policy is CodeBuddy only');
   assert.ok(['analyze', 'create', 'revise', 'inspect', 'confirm-baseline'].includes(operation), 'Invalid execution operation');
   assert.ok(['professional', 'template'].includes(mode), 'Invalid execution mode');
   assert.equal(typeof officialCallable, 'boolean');
-  const value = { schemaVersion: 1, id: ID, host, operation, mode, officialCallable,
+  const value = { schemaVersion: policyId===AUTO_ID?2:1, id: policyId, host, operation, mode, officialCallable,
+    ...(policyId===AUTO_ID?{recovery:{perMissing:2,total:6}}:{}),
     readOnly: !['create', 'revise'].includes(operation), skills: SKILLS, stages: STAGES };
   return { ...value, digest: digest(value) };
 }
 function validate(policy) {
-  assert.ok(policy && policy.id === ID, 'Unsupported execution policy');
+  assert.ok(policy && [ID,AUTO_ID].includes(policy.id), 'Unsupported execution policy');
   const expected = create(policy);
   assert.deepEqual(policy, expected, 'Execution policy was changed or is invalid');
   return policy;
@@ -30,12 +35,28 @@ function requirements(policy, stage) {
   validate(policy); assert.ok(STAGES.includes(stage), 'Unknown execution stage');
   if (policy.readOnly) return [];
   const design = [policy.officialCallable ? 'antdv' : 'official-source', ...(policy.mode === 'professional' ? ['uiux'] : [])];
-  return ({ design, 'implementation-entry': ['frontend'], implementation: ['frontend', 'implementation'],
+  return ({ design, 'implementation-entry': ['frontend'], implementation: ['frontend', 'implementation',...(policy.id===AUTO_ID?design:[])],
     build: ['implementation', 'build'], 'browser-entry': ['browser', 'build'],
     browser: ['browser', 'build', 'browser-results'], delivery: [...design, 'frontend', 'implementation', 'build', 'browser', 'browser-results'] })[stage];
 }
-function skillKey(name) { return Object.keys(SKILLS).find(key => SKILLS[key].includes(name)) || null; }
+function skillKey(name) {
+ if(typeof name!=='string')return null;
+ const [namespace,leaf,...rest]=name.split(':');
+ if(leaf!==undefined){
+  if(rest.length)return null;
+  const allowed={'i3-composer-agent':['frontend','browser','prototype'],'i3-composer-agent':['frontend','browser'],'ui-ux-pro-max':['uiux'],'antdv':['antdv'],'antdv-next':['antdv']};
+  return (allowed[namespace]||[]).find(key=>SKILLS[key].includes(leaf))||null;
+ }
+ return Object.keys(SKILLS).find(key => SKILLS[key].includes(name)) || null;
+}
 function creationOptions(options,installed) {
-  return installed?.name==='i3-composer-agent'&&options.host==='codebuddy'?{...options,executionPolicy:options.executionPolicy||ID}:options;
+  if(installed?.name!=='i3-composer-agent')return options;
+  let host=options.host;
+  if(!host&&installed.agents?.length){
+    const hosts=installed.agents.filter(value=>['codebuddy','workbuddy'].includes(value));
+    assert.ok(hosts.length<2,'Shared Buddy installation requires the actual --host');
+    if(hosts.length===1)host=hosts[0];
+  }
+  return ['codebuddy','workbuddy'].includes(host)?{...options,host,executionPolicy:options.executionPolicy||AUTO_ID}:options;
 }
-module.exports = { ID, SKILLS, STAGES, digest, create, validate, requirements, skillKey, creationOptions };
+module.exports = { ID, AUTO_ID, SKILLS, STAGES, digest, create, validate, requirements, skillKey, creationOptions };

package/skills/i3-ui-prototype/scripts/execution-recovery.cjs

@@ -0,0 +1,52 @@
+'use strict';
+// Deterministic recovery state; only native source results can resolve a Skill.
+const E=require('./execution-evidence.cjs'),P=require('./execution-policy.cjs');
+const names={frontend:'i3-frontend-ui-engineering',antdv:'antdv',uiux:'ui-ux-pro-max',browser:'i3-browser-testing-with-devtools'};
+function missing({source,binding,policy,stage}){
+ const unbound=!binding||binding.entryLine!==source.prompts.at(-1)?.line||binding.contextLine!==source.contextLine;
+ const required=stage&&policy?P.requirements(policy,stage).filter(key=>Object.hasOwn(names,key)):['frontend',...(policy?.id===P.AUTO_ID?[...(policy.officialCallable?['antdv']:[]),...(policy.mode==='professional'?['uiux']:[])]:[])];
+ const sessionId=binding?.sessionId||source.calls.find(call=>call.sessionId)?.sessionId;
+ return [...(unbound?['execution-begin']:[]),...required.filter(key=>!E.loaded(source.calls,key).some(call=>call.sessionId===sessionId&&call.requestLine>source.contextLine&&(source.stableThroughLine===undefined||call.resultLine<=source.stableThroughLine)))];
+}
+function instruction(keys){
+ const skills=keys.filter(key=>names[key]).map(key=>names[key]);
+ return `${keys.includes('execution-begin')?'先为当前任务执行 execution-begin。':''}${skills.length?'请立即通过当前宿主的 Skill 工具调用 '+skills.join('、')+'（插件安装使用宿主显示的完整名称），等待成功返回后重试原操作。':''}${keys.includes('execution-evidence')?'执行 execution-check，按实际原生请求和结果补齐当前阶段证据后重试。':''}读取 SKILL.md、自动补全提示、手填调用记录不能代替实际调用。失败时报告具体原因，不得自动安装依赖或宣称完成。`;
+}
+function record(index,context,answer){
+ const {source,sessionId,directory,eventKey,event}=context,prompt=source.prompts.at(-1);
+ const taskKey=E.sha(JSON.stringify([sessionId,prompt.line,prompt.digest,directory]));
+ if(!answer.deny&&!answer.feedback&&!index.recoveries?.[taskKey])return answer;
+ index.recoveries||={};
+ const state=index.recoveries[taskKey]||={schemaVersion:1,total:0,counts:{},events:{},pending:{},invocations:[],status:'required'};
+ state.feedbackLine??=Math.max(prompt.line,...Object.values(state.pending).map(item=>item.line));
+ const summary=()=>({taskKey,status:state.status,total:state.total,counts:state.counts,invocations:state.invocations,...(state.retry?{retry:state.retry}:{})});
+ const remember=result=>{state.events[eventKey]=result;for(const key of Object.keys(state.events).slice(0,-128))delete state.events[key];return {...result,recovery:summary()};};
+ if(state.events[eventKey])return {...state.events[eventKey],recovery:summary()};
+ if(answer.deny||answer.feedback){
+  const keys=[...new Set(answer.missing?.length?answer.missing:['execution-evidence'])];
+  const limits=context.policy?.recovery||{perMissing:2,total:6};
+  if(state.total>=limits.total||keys.some(key=>(state.counts[key]||0)>=limits.perMissing)){
+   state.status='blocked';
+   const reason='原型补调已达到自动恢复上限，当前任务仍被阻塞。请如实报告缺项及失败原因；修复依赖、权限或宿主后由用户发起继续。不能取得合格交付回执。';
+   const result=answer.deny?{deny:true,reason,missing:keys}:{continue:true,context:reason};return remember(result);
+  }
+  state.total++;for(const key of keys)state.counts[key]=(state.counts[key]||0)+1;state.status='required';
+  const line=Math.max(prompt.line,...source.calls.map(call=>call.resultLine||call.requestLine));
+  state.feedbackLine=Math.max(state.feedbackLine,line);
+  for(const item of keys)state.pending[item]||={line,eventKey,...(item==='execution-evidence'&&context.stage?{stage:context.stage}:{})};
+ }else{
+  for(const [key,pending] of Object.entries(state.pending)){
+   if(names[key]){
+    const call=E.loaded(source.calls,key).find(call=>call.sessionId===sessionId&&call.requestLine>Math.max(pending.line,source.contextLine)&&(source.stableThroughLine===undefined||call.resultLine<=source.stableThroughLine));
+    if(!call)continue;
+    if(!state.invocations.some(item=>item.toolCallId===call.toolCallId))state.invocations.push({skill:key,toolCallId:call.toolCallId,resultDigest:call.resultDigest,requestLine:call.requestLine,resultLine:call.resultLine,feedbackLine:pending.line,afterFeedback:pending.eventKey});
+   }else if(!(context.resolved||[]).includes(key)||pending.stage&&pending.stage!==context.stage)continue;
+   delete state.pending[key];
+  }
+  if(!Object.keys(state.pending).length&&state.status!=='recovered'){
+   state.status=context.retrySucceeded&&event==='PostToolUse'&&context.retry?.requestLine>state.feedbackLine?'recovered':'ready-to-retry';if(state.status==='recovered')state.retry={...context.retry,feedbackLine:state.feedbackLine};
+  }
+ }
+ return remember({...answer});
+}
+module.exports={missing,instruction,record};

package/skills/i3-ui-prototype/scripts/execution-runtime.cjs

@@ -12,7 +12,7 @@ function policy(directory) {
 }
 function binding(directory) {
  const pointer=optional(directory,'qa/execution-context.json');assert.ok(pointer?.schemaVersion===1,'No native Hook task binding; run execution-begin inside enabled CodeBuddy');
- const project=fs.realpathSync(pointer.project),selected=C.select({project,product:pointer.product});assert.ok(selected,'Hooks are not enabled or are shadowed');
+ const project=fs.realpathSync(pointer.project),selected=C.select({project,product:pointer.product,host:pointer.host||'codebuddy'});assert.ok(selected,'Hooks are not enabled or are shadowed');
  assert.equal(selected.base,pointer.base,'Effective Hook scope changed');
  const stateDirectory=C.sessionDirectory(selected,project,pointer.sessionId),indexFile=path.join(stateDirectory,'session.json');
  const index=JSON.parse(C.read(indexFile)||'null'),entry=index?.bindings?.[directory];assert.ok(entry,'Native Hook run is missing');

package/skills/i3-ui-prototype/scripts/hosts/codebuddy.cjs

@@ -1,16 +1,20 @@
 #!/usr/bin/env node
 'use strict';
 const fs=require('node:fs'),path=require('node:path');
+function format(result,event){
+ if(result.deny)return {code:0,output:{hookSpecificOutput:{hookEventName:'PreToolUse',permissionDecision:'deny',permissionDecisionReason:result.reason}}};
+ if(result.feedback)return {code:0,output:{continue:false,reason:result.reason}};
+ if(result.context)return {code:0,output:{continue:true,...(result.recovery?.status==='blocked'?{systemMessage:result.context}:{}),...(['SessionStart','UserPromptSubmit','PostToolUse'].includes(event)?{hookSpecificOutput:{hookEventName:event,additionalContext:result.context}}:{})}};
+ return {code:0,output:{continue:true}};
+}
 function main(argv=process.argv.slice(2),raw=fs.readFileSync(0,'utf8')) {
  if(Buffer.byteLength(raw)>4*1024*1024)throw new Error('Hook input too large');
  const options={};while(argv.length){const key=argv.shift();if(!key.startsWith('--')||!argv.length)throw new Error('Invalid Hook arguments');options[key.slice(2)]=argv.shift();}
  const {OWNER,EVENTS}=require('../codebuddy-registration.cjs');
- if(options.registration!==OWNER||!path.isAbsolute(options.base||'')||!EVENTS.includes(options.event)||!['ide','cli'].includes(options.product))throw new Error('Invalid Hook registration');
+ if(options.registration!==OWNER||!path.isAbsolute(options.base||'')||!EVENTS.includes(options.event)||!['auto','ide','cli'].includes(options.product))throw new Error('Invalid Hook registration');
  const result=require('../codebuddy-hook.cjs').handle(JSON.parse(raw),options);
- if(result.deny)return {code:0,output:{hookSpecificOutput:{hookEventName:'PreToolUse',permissionDecision:'deny',permissionDecisionReason:result.reason}}};
- if(result.feedback)return {code:2,output:{decision:'block',reason:result.reason}};
- return {code:0,output:{continue:true}};
+ return format(result,options.event);
 }
 if(require.main===module)try{const result=main();process.stdout.write(JSON.stringify(result.output)+'\n');if(result.code===2)process.stderr.write(result.output.reason+'\n');process.exitCode=result.code;}
 catch(error){process.stderr.write(`i3 prototype audit unavailable: ${error.message}. Strict A gates remain unverified.\n`);process.exitCode=1;}
-module.exports={main};
+module.exports={main,format};

package/skills/i3-ui-prototype/scripts/native-command.cjs

@@ -0,0 +1,18 @@
+'use strict';
+// One non-executing parser shared by Hook dispatch and A receipt verification.
+const path=require('node:path');
+function tokens(command) {
+ if(typeof command!=='string'||/[\x00\r\n]|\$\(|`/.test(command))return null;
+ const values=[];let value='',quote=null,started=false;
+ for(let i=0;i<command.length;i++) {const c=command[i];if(quote){if(c===quote){quote=null;started=true;}else if(c==='\\'&&quote==='"'&&i+1<command.length)value+=command[++i];else value+=c;}
+ else if(c==='"'||c==="'"){quote=c;started=true;}else if(c==='\\'&&i+1<command.length){value+=command[++i];started=true;}else if(/\s/.test(c)){if(started){values.push(value);value='';started=false;}}else if(/[;&|<>]/.test(c))return null;else {value+=c;started=true;}}
+ if(quote)return null;if(started)values.push(value);return values;
+}
+function nativeCommand(tool,input,cwd) {
+ if(!['Bash','execute_command','run_terminal_command'].includes(tool))return null;
+ const argv=tokens(input?.command);if(!argv)return null;const index=argv.findIndex(arg=>path.basename(arg)==='native-pilot.cjs');if(index<1)return null;
+ const operation=argv[index+1],root=argv[index+2]&&!argv[index+2].startsWith('--')?path.resolve(cwd,argv[index+2]):null;
+ return {operation,root,argv};
+}
+const stageFor=Object.freeze({build:'implementation','record-run':'browser-entry','record-devtools-review':'browser-entry',finalize:'delivery'});
+module.exports={tokens,nativeCommand,stageFor};

package/skills/i3-ui-prototype/scripts/native-pilot-lib.cjs

@@ -33,9 +33,7 @@ function defaultScope() {
   ],exemptions:[],openQuestions:[]};
 }
 function createPrototype(options) {
-  const installedFile=path.resolve(__dirname,'../../../.i3-composer-agent.json');
-  if(fs.existsSync(installedFile))options=require('./execution-policy.cjs').creationOptions(options,json(installedFile));
-  if(options.executionPolicy!==undefined){assert.equal(options.executionPolicy,require('./execution-policy.cjs').ID,'Unsupported execution policy');assert.equal(options.host,'codebuddy','Explicit CodeBuddy host required for A+B');}
+  if(options.executionPolicy!==undefined){const policy=require('./execution-policy.cjs');assert.ok([policy.ID,policy.AUTO_ID].includes(options.executionPolicy),'Unsupported execution policy');assert.ok(['codebuddy','workbuddy'].includes(options.host),'Explicit Buddy host required for A+B');if(options.executionPolicy===policy.ID)assert.equal(options.host,'codebuddy','Legacy policy is CodeBuddy only');}
   assert.ok(options.framework===undefined||options.framework==='vue-antdv-next','Unsupported framework / 不支持的框架');
   assert.ok(options.title===undefined||(typeof options.title==='string'&&options.title.trim()),'Title must be a nonempty string');
   const project=path.resolve(options.project||'.'); assert.ok(fs.statSync(project).isDirectory(),'Project must exist'); id(options.id);
@@ -67,7 +65,7 @@ function createPrototype(options) {
     const instanceId=crypto.randomUUID();
     const data={schemaVersion:2,id:options.id,title:options.title||content.pageTitle||'设备清单原型',revision:'r001',artifactKind:'framework-prototype',runtime:{kind:'vue-antdv-next',version:'1',...(reference?{contentReference:true}:{})},...(reference?{business:{status:'needs-adaptation',source:'inputs/scope.json'}}:{}),template:{id:template.id,version:template.version,digest:template.digest},framework:{id:'vue-antdv-next',version:profile.version||'1',digest:hash(JSON.stringify(frameworkFiles))},expertMode:mode,expert:{status:provider?'pending':'skipped',provider},verification:{status:'not-run'},review:{status:'pending-review'},instanceId};
     if(generation)data.runtime.generationContract=1;
-    if(options.executionPolicy){data.runtime.executionPolicy=options.executionPolicy;write(stage,'inputs/execution-policy.json',require('./execution-policy.cjs').create({host:options.host,mode,officialCallable:!options.officialSourceFallback}));}
+    if(options.executionPolicy){data.runtime.executionPolicy=options.executionPolicy;write(stage,'inputs/execution-policy.json',require('./execution-policy.cjs').create({id:options.executionPolicy,host:options.host,mode,officialCallable:!options.officialSourceFallback}));}
     write(stage,'prototype.json',data);
     for(const file of template.files) {
       assert.equal(file.encoding,'base64');

package/skills/i3-ui-prototype/scripts/native-pilot.cjs

@@ -23,7 +23,11 @@ async function main(argv=process.argv.slice(2)) {
     case 'generation-plan': { const templates=require('./template-contract.cjs'),snapshot=root?templates.loadTemplate(root):templates.loadBundledTemplate(options.template);const contract=require('./generation-contract.cjs');return contract.view(contract.compile(snapshot,JSON.parse(fs.readFileSync(path.resolve(options.scope),'utf8'))),options); }
     case 'inventory': { const templates=require('./template-contract.cjs'),snapshot=root?templates.loadTemplate(root):templates.loadBundledTemplate(options.template),value=require('./template-inventory.cjs').verifySnapshot(snapshot);return options.details?value:{status:'passed',readOnly:true,template:snapshot.id,files:Object.keys(value.files).length,routes:value.routes.length,pages:value.pages.length,fragments:value.fragments.length,components:Object.keys(value.components).length,events:value.eventCount}; }
     case 'sync-generation-assets': return require('./generation-assets.cjs').refresh(path.resolve(__dirname,'..'),{check:!!options.check});
-    case 'create': return lib.createPrototype(options);
+    case 'create': {
+      const installedFile=path.resolve(__dirname,'../../../.i3-composer-agent.json');
+      const effective=fs.existsSync(installedFile)?require('./execution-policy.cjs').creationOptions(options,JSON.parse(fs.readFileSync(installedFile,'utf8'))):options;
+      return lib.createPrototype(effective);
+    }
     case 'execution-begin': return require('./execution-runtime.cjs').begin(root,lib);
     case 'execution-assertions-template': return require('./execution-assertions.cjs').template(options);
     case 'execution-template': return require('./execution-runtime.cjs').template(root,lib);

package/skills/i3-ui-prototype/scripts/prototype-dependencies.cjs

@@ -31,10 +31,32 @@ function antdvTool(project, options = {}) {
     if (result.status !== 0) throw new Error(result.error?.message || result.stderr || 'CLI query failed');
     const data = JSON.parse(result.stdout);
     if (!data || data.name !== 'Table' || !Array.isArray(data.props) || data.error) throw new Error('CLI returned no Table knowledge');
-    return { availability: 'available', root, source, entry, version: pkg.version, command: [process.execPath, ...args], knowledgeVersion: '1.5.2', componentVersion: '1.5.3', exactKnowledgeMatch: false,
+    return { availability: 'available', root, source, entry, nodePath:process.execPath, version: pkg.version, command: [process.execPath, ...args], invocationVerified:false, knowledgeProbe:'Table-only', knowledgeVersion: '1.5.2', componentVersion: '1.5.3', exactKnowledgeMatch: false,
       limitation: 'CLI knowledge 1.5.2 is reference only; verify target 1.5.3 package types/source.' };
   } catch (error) { return { availability: 'unusable', root, source, reason: error.message }; }
 }
+function query(options={}) {
+  const kinds=['info','demo','token','semantic','doc','list','design.md'];
+  assertQuery(kinds.includes(options.kind),'Choose a read-only antDv query: '+kinds.join(', '));
+  const locations=resolveLocations(options),tool=antdvTool(locations.project,{...options,host:locations.host,scope:locations.scope});
+  assertQuery(tool.availability==='available',`Local antDv CLI ${tool.availability}: ${tool.reason||'use prototype-deps check; installation requires separate authorization'}`);
+  const component=options.component,version=options.version||tool.knowledgeVersion;
+  assertQuery(/^\d+\.\d+\.\d+(?:-[A-Za-z0-9.-]+)?$/.test(version),'Explicit safe knowledge version required');
+  const args=[tool.entry,options.kind];
+  if(!['list','design.md'].includes(options.kind)){
+    assertQuery(typeof component==='string'&&/^[A-Za-z][A-Za-z0-9-]{0,99}$/.test(component),'Component name required');args.push(component);
+  }
+  if(options.demo!==undefined){assertQuery(options.kind==='demo'&&/^[A-Za-z0-9_-]{1,100}$/.test(options.demo),'Safe demo name required');args.push(options.demo);}
+  args.push('--ver',version,'--format','json');
+  const result=spawnSync(tool.nodePath,args,{cwd:locations.project,env:{...(options.env||process.env),ANTDV_NO_AUTO_REPORT:'1'},encoding:'utf8',timeout:15000,maxBuffer:5*1024*1024});
+  let data=null;try{data=JSON.parse(result.stdout);}catch{/* Some official doc/demo commands return text. */}
+  const stdout=result.stdout||'',stderr=result.stderr||'';
+  const invalid=result.status!==0||!stdout.trim()||/^\s*(?:Error\b|错误[:：])/i.test(stdout)||data?.error||data?.success===false||data?.status==='failed'||options.kind==='info'&&(!data||data.name!==component||!Array.isArray(data.props));
+  return {status:invalid?'failed':'queried',host:locations.host,scope:locations.scope,command:[tool.nodePath,...args],source:tool.source,cliVersion:tool.version,knowledgeVersion:version,componentVersion:tool.componentVersion,exactKnowledgeMatch:version===tool.componentVersion,
+    component:component||null,kind:options.kind,exitCode:result.status,stdout,stderr,...(data?{data}:{}),...(result.error?{error:result.error.message}:{}),skillInvocationVerified:false,
+    note:'This is a CLI query only. Load the official Skill through the host before business queries; native Hooks must correlate the actual request/result. Verify target package types/source when knowledge versions differ.'};
+}
+function assertQuery(condition,message){if(!condition)throw new Error(message);}
 function check(options = {}) {
   const locations = resolveLocations(options), { project, host, scope } = locations;
   const roots = scopeBases(locations).map(([base]) => path.join(base, 'skills/ui-ux-pro-max'));
@@ -62,8 +84,8 @@ function check(options = {}) {
 }
 function parse(argv) {
   const operation = argv.shift() || 'check', options = {};
-  if (!['check', 'install'].includes(operation)) throw new Error('Use check or install');
-  const flags = new Set(['project', 'host', 'scope', 'skills', 'provider', 'python', 'tool']);
+  if (!['check', 'install','query'].includes(operation)) throw new Error('Use check or install or query');
+  const flags = new Set(['project', 'host', 'scope', 'skills', 'provider', 'python', 'tool',...(operation==='query'?['kind','component','version','demo']:[])]);
   while (argv.length) {
     const key = argv.shift();
     if (key === '--migrate-tools' && operation === 'install') { options.migrateTools = true; continue; }
@@ -74,8 +96,8 @@ function parse(argv) {
 }
 async function main(argv = process.argv.slice(2)) {
   const { operation, options } = parse([...argv]);
-  return operation === 'check' ? check(options) : require('./optional-skill-install.cjs').install(options);
+  return operation === 'check' ? check(options) : operation==='query'?query(options):require('./optional-skill-install.cjs').install(options);
 }
-module.exports = { check, skillAt, antdvTool, parse, main };
-if (require.main === module) main().then(result => process.stdout.write(JSON.stringify(result, null, 2) + '\n'))
+module.exports = { check, skillAt, antdvTool, query, parse, main };
+if (require.main === module) main().then(result => {process.stdout.write(JSON.stringify(result, null, 2) + '\n');if(result.status==='failed')process.exitCode=1;})
   .catch(error => { process.stderr.write(JSON.stringify({ status: 'failed', errors: [error.message] }) + '\n'); process.exitCode = 1; });