@givolt/i3-composer-agent 2.3.4 → 2.3.6

package/.agents/plugins/marketplace.json

@@ -6,7 +6,7 @@
   "plugins": [
     {
       "name": "i3-composer-agent",
-      "version": "2.3.4",
+      "version": "2.3.6",
       "description": "覆盖需求、计划、开发、测试、审查与发布的软件工程技能，默认使用简体中文。",
       "source": {
         "source": "local",

package/.claude/commands/i3-prototype.md

@@ -19,3 +19,5 @@ Use the i3-ui-prototype skill in the main session for the user's request below.
 $ARGUMENTS
 
 With no arguments use create; explicit analysis or read-only limits take precedence. Preserve the user's scope, manual edits, fixed inputs and approved baselines. Use supporting engineering, framework, design and browser skills as the working skill requires; keep its workflow and evidence requirements there.
+
+Create the prototype in the current session. Load the required frontend/framework/design Skills before implementation and use the browser Skill for interaction acceptance. Installed Hooks run automatically; do not inspect Hook internals, search host logs, or run a manual binding step. When a required Skill is missing, invoke it and retry; report an infrastructure failure briefly through the separate maintenance entry.

package/.claude-plugin/marketplace.json

@@ -8,7 +8,7 @@
   "plugins": [
     {
       "name": "i3-composer-agent",
-      "version": "2.3.4",
+      "version": "2.3.6",
       "source": "./",
       "description": "覆盖需求、计划、开发、测试、审查与发布的软件工程技能，默认使用简体中文。",
       "homepage": "https://github.com/49780522/i3-composer-agent",

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "i3-composer-agent",
-  "version": "2.3.4",
+  "version": "2.3.6",
   "description": "覆盖需求、计划、开发、测试、审查与发布的软件工程技能，默认使用简体中文。",
   "author": {
     "name": "Givolt"

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "i3-composer-agent",
-  "version": "2.3.4",
+  "version": "2.3.6",
   "description": "覆盖需求、计划、开发、测试、审查与发布的软件工程技能，默认使用简体中文。",
   "author": {
     "name": "Givolt"

package/.gemini/commands/i3-prototype.toml

@@ -18,4 +18,6 @@ Use the i3-ui-prototype skill in the main session for the user's request below.
 $ARGUMENTS
 
 With no arguments use create; explicit analysis or read-only limits take precedence. Preserve the user's scope, manual edits, fixed inputs and approved baselines. Use supporting engineering, framework, design and browser skills as the working skill requires; keep its workflow and evidence requirements there.
+
+Create the prototype in the current session. Load the required frontend/framework/design Skills before implementation and use the browser Skill for interaction acceptance. Installed Hooks run automatically; do not inspect Hook internals, search host logs, or run a manual binding step. When a required Skill is missing, invoke it and retry; report an infrastructure failure briefly through the separate maintenance entry.
 """

package/README.md

@@ -1,4 +1,4 @@
-# i3 Composer Agent v2.3.4
+# i3 Composer Agent v2.3.6
 
 **Intelligence. Integration. Innovation.**
 

package/commands/i3-prototype.toml

@@ -18,4 +18,6 @@ Use the i3-ui-prototype skill in the main session for the user's request below.
 $ARGUMENTS
 
 With no arguments use create; explicit analysis or read-only limits take precedence. Preserve the user's scope, manual edits, fixed inputs and approved baselines. Use supporting engineering, framework, design and browser skills as the working skill requires; keep its workflow and evidence requirements there.
+
+Create the prototype in the current session. Load the required frontend/framework/design Skills before implementation and use the browser Skill for interaction acceptance. Installed Hooks run automatically; do not inspect Hook internals, search host logs, or run a manual binding step. When a required Skill is missing, invoke it and retry; report an infrastructure failure briefly through the separate maintenance entry.
 """

package/docs/codebuddy-setup.md

@@ -48,7 +48,7 @@ CodeBuddy 与 WorkBuddy 项目共用 `.codebuddy/`；同版本追加客户端会
 npx @givolt/i3-composer-agent --codebuddy --scope project --yes --prototype-skills uiux,antdv
 ```
 
-值为 none、uiux、antdv 或 uiux,antdv；默认 none。可选工具跟随宿主和项目／全局范围，位于基址下 `tools/i3-prototype/`；旧项目 `.prototype-tools` 保持读取兼容。需要固定本次版本时使用 `npx @givolt/i3-composer-agent@2.3.4`。已安装后可随时单独检测／补装，无需重装 i3：
+值为 none、uiux、antdv 或 uiux,antdv；默认 none。可选工具跟随宿主和项目／全局范围，位于基址下 `tools/i3-prototype/`；旧项目 `.prototype-tools` 保持读取兼容。需要固定本次版本时使用 `npx @givolt/i3-composer-agent@2.3.6`。已安装后可随时单独检测／补装，无需重装 i3：
 
 ```bash
 node .codebuddy/skills/i3-ui-prototype/scripts/prototype-dependencies.cjs check --host codebuddy --scope project --project .

package/docs/codex-setup.md

@@ -37,6 +37,6 @@ Codex 已有原生技能路由，勿把元技能全文预加载为常驻上下
 
 ## 可选原型工具
 
-原型辅助工具位于本宿主基址的 `tools/i3-prototype/`，支持项目和全局范围；旧项目 `.prototype-tools` 继续读取兼容。项目安装可使用 `npx @givolt/i3-composer-agent@2.3.4 --codex --scope project --yes --prototype-skills uiux,antdv`；全局安装将 scope 改为 global。可选依赖默认 none，后续也可使用已安装 Skill 的 prototype-dependencies.cjs 单独检测／补装。完整用法见原型 Skill 的 references/optional-skills.md。
+原型辅助工具位于本宿主基址的 `tools/i3-prototype/`，支持项目和全局范围；旧项目 `.prototype-tools` 继续读取兼容。项目安装可使用 `npx @givolt/i3-composer-agent@2.3.6 --codex --scope project --yes --prototype-skills uiux,antdv`；全局安装将 scope 改为 global。可选依赖默认 none，后续也可使用已安装 Skill 的 prototype-dependencies.cjs 单独检测／补装。完整用法见原型 Skill 的 references/optional-skills.md。
 
 原型共享资料统一在项目 prototypes/：新索引 prototypes/index.json，准备范围 prototypes/.preparation/<id>/scope.json。新原生 scope.moduleIds 自动生成 appliesTo；旧索引、输入和实例保持兼容，安装升级不自动迁移。工具及运行缓存使用所选宿主基址；全局浏览器缓存按业务项目身份隔离。详细规则和只读查询／显式迁移命令见 i3-ui-prototype/references/project-layout.md。

package/docs/other-hosts.md

@@ -6,7 +6,7 @@
 
 ## 使用本地分发目录
 
-以下命令使用完整分发包解压目录里的 CLI，适用于本地测试和离线接入。`/absolute/path/to/package` 均替换为实际解压目录；已发布版本也可使用 `npx @givolt/i3-composer-agent@2.3.4` 的对应入口。
+以下命令使用完整分发包解压目录里的 CLI，适用于本地测试和离线接入。`/absolute/path/to/package` 均替换为实际解压目录；已发布版本也可使用 `npx @givolt/i3-composer-agent@2.3.6` 的对应入口。
 
 ### fx
 

package/docs/workbuddy-setup.md

@@ -85,7 +85,7 @@ npx @givolt/i3-composer-agent --workbuddy --scope global --yes --force
 
 ## 可选原型工具
 
-原型辅助工具位于本宿主基址的 `tools/i3-prototype/`，支持项目和全局范围；旧项目 `.prototype-tools` 继续读取兼容。推荐使用 `npx @givolt/i3-composer-agent@2.3.4 --workbuddy --scope global --yes --prototype-skills uiux,antdv`；项目安装将 scope 改为 project。可选依赖默认 none，后续也可使用已安装 Skill 的 prototype-dependencies.cjs 单独检测／补装。完整用法见原型 Skill 的 references/optional-skills.md。
+原型辅助工具位于本宿主基址的 `tools/i3-prototype/`，支持项目和全局范围；旧项目 `.prototype-tools` 继续读取兼容。推荐使用 `npx @givolt/i3-composer-agent@2.3.6 --workbuddy --scope global --yes --prototype-skills uiux,antdv`；项目安装将 scope 改为 project。可选依赖默认 none，后续也可使用已安装 Skill 的 prototype-dependencies.cjs 单独检测／补装。完整用法见原型 Skill 的 references/optional-skills.md。
 
 原型共享资料统一在项目 prototypes/：新索引 prototypes/index.json，准备范围 prototypes/.preparation/<id>/scope.json。新原生 scope.moduleIds 自动生成 appliesTo；旧索引、输入和实例保持兼容，安装升级不自动迁移。工具及运行缓存使用所选宿主基址；全局浏览器缓存按业务项目身份隔离。详细规则和只读查询／显式迁移命令见 i3-ui-prototype/references/project-layout.md。
 

package/hooks/PROTOTYPE.md

@@ -0,0 +1,19 @@
+# 原型 Hooks 安装与维护
+
+<!-- i3:zh-guide:start -->
+## 中文使用说明
+
+按下文完整工程步骤、检查项与验证条件执行。根据任务选择适用步骤，保留证据、风险和退出条件；正文示例中的英文标签在面向用户输出时译为中文。
+
+默认使用简体中文解释、追问及生成报告；用户明确要求其他语言时可切换。原方法正文、引用、阈值和审批条件完整保留。代码标识、路径、命令、工具参数、JSON 键/枚举与原文引用保持原样。
+<!-- i3:zh-guide:end -->
+
+本文件面向安装器和维护人员。i3-ui-prototype 的正常职责是制作、修订和验收原型，不承担宿主或 Hook 排障。
+
+安装器在 CodeBuddy/WorkBuddy 项目或全局范围注册 prototype 组。宿主自动触发；不要求原型使用者额外执行 execution-begin 或确认任务绑定。必要 Skill 的真实调用由原生 Pre/Post 回调记录，PTC/REPL 的内部工具分别记录；REPL 脚本文本不能代替调用成功。Bash 不提供 stdout 时由本包第一方入口捕获实际结果；其他只读查询可使用 native-tool-result.cjs 的本地绝对入口，不安装依赖。
+
+检查命令：`npx --yes @givolt/i3-composer-agent hooks check --host codebuddy --scope project --project .`；全局将 scope 改为 global。检查只读，不启用/修复设置。registered 表示已注册；active 表示观察到当前注册的有效运行；failure 显示已触发但处理失败的原因、会话、模式、次数和恢复状态。两次同类恢复未成功后转 blocked，不会因重试旧 begin 清零。只读维护不消耗恢复次数。
+
+状态与 PTC 机器回调位于宿主基址的 state/i3-prototype/；它们是诊断/证据记录，不是业务项目的原型目录。项目/全局、宿主/会话和当前用户任务分别隔离。保留上游 Hooks、用户注册、旧 HTML 和已有原型；旧 execution-* 命令仅供兼容，不是新流程的前置。
+
+CodeBuddy 项目/全局 × IDE/CLI（CLI direct/PTC）真实注册、触发、必要 Skill 调用、缺失补调和失败展示必须分别验收。自动化回放不能冒充真实宿主；正式发布门禁在仓库维护工具中执行，不放到业务原型 Skill 内。

package/hooks/i3-prototype.cjs

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 'use strict';
-// Stable host Hook entry; the workflow and A+B implementation remain in the Skill.
+// Stable host Hook entry. Shared legacy helpers are an implementation detail;
+// installation, automatic dispatch and diagnostics belong to Hooks, not UI tasks.
 const fs=require('node:fs'),path=require('node:path');
 function main(argv=process.argv.slice(2),raw=fs.readFileSync(0,'utf8'),load=()=>require(path.join(require('./manage.cjs').modules().scripts,'hosts/codebuddy.cjs'))) {
  return load().main(argv,raw);

package/package.json

@@ -195,6 +195,7 @@
     "scripts/run-evals.js",
     "scripts/run-regressions.js",
     "scripts/template-adapter-test.js",
+    "scripts/ui-prototype-binding-recovery-test.js",
     "scripts/ui-prototype-buddy-lifecycle-test.js",
     "scripts/ui-prototype-codebuddy-hook-test.js",
     "scripts/ui-prototype-content-test.js",
@@ -415,6 +416,7 @@
       "scripts/run-evals.js",
       "scripts/run-regressions.js",
       "scripts/template-adapter-test.js",
+      "scripts/ui-prototype-binding-recovery-test.js",
       "scripts/ui-prototype-buddy-lifecycle-test.js",
       "scripts/ui-prototype-codebuddy-hook-test.js",
       "scripts/ui-prototype-content-test.js",
@@ -442,7 +444,7 @@
       "scripts/validate-versions.js"
     ]
   },
-  "version": "2.3.4",
+  "version": "2.3.6",
   "repository": {
     "type": "git",
     "url": "https://github.com/49780522/i3-composer-agent.git"

package/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "i3-composer-agent",
-  "version": "2.3.4",
+  "version": "2.3.6",
   "description": "覆盖需求、计划、开发、测试、审查与发布的软件工程技能，默认使用简体中文。",
   "homepage": "https://github.com/49780522/i3-composer-agent",
   "repository": "https://github.com/49780522/i3-composer-agent"

package/scripts/ui-prototype-binding-recovery-test.js

@@ -0,0 +1,84 @@
+'use strict';
+// Regression cases reduced from a real IDE failure; no native host is installed.
+const test=require('node:test'),assert=require('node:assert/strict'),fs=require('node:fs'),path=require('node:path'),os=require('node:os'),cp=require('node:child_process');
+const installed=path.join(__dirname,'lib/installation.js');
+const scripts=path.join(fs.existsSync(installed)?require(installed).loadInstallation().skillsDirectory:path.resolve(__dirname,'../skills'),'i3-ui-prototype/scripts');
+const E=require(path.join(scripts,'execution-evidence.cjs')),H=require(path.join(scripts,'codebuddy-hook.cjs')),N=require(path.join(scripts,'native-command.cjs')),R=require(path.join(scripts,'execution-recovery.cjs'));
+const raw=rows=>rows.map(row=>JSON.stringify(row)).join('\n')+'\n';
+for(const flat of [false,true])test(`raw ${flat?'flat':'paired'} use_skill is a real Skill without accepting Read or forged names`,()=>{
+ const rows=flat?[
+  {type:'function_call',callId:'front',name:'use_skill',arguments:'{"command":"i3-frontend-ui-engineering"}',sessionId:'s1'},
+  {type:'function_call_result',callId:'front',name:'Skill',status:'completed',output:'Frontend instructions',sessionId:'s1'}
+ ]:[
+  {type:'assistant',sessionId:'s1',message:{content:[{type:'tool_use',id:'front',name:'use_skill',input:{command:'i3-frontend-ui-engineering'}}]}},
+  {type:'user',sessionId:'s1',message:{content:[{type:'tool_result',tool_use_id:'front',tool_name:'Skill',content:'Frontend instructions'}]}}
+ ];
+ const calls=E.parse(raw(rows));assert.equal(E.loaded(calls,'frontend').length,1);assert.equal(calls[0].name,'Skill');assert.equal(calls[0].rawName,'use_skill');
+ assert.equal(H.eventCall({hook_event_name:'PostToolUse',tool_name:'use_skill',tool_use_id:'front',tool_input:calls[0].input},{prompts:[{line:0}],calls}).toolCallId,'front');
+ for(const name of ['Read','use_skill_fake']){
+  const changed=JSON.parse(JSON.stringify(rows));if(flat){changed[0].name=changed[1].name=name;}else{changed[0].message.content[0].name=changed[1].message.content[0].tool_name=name;}
+  assert.equal(E.loaded(E.parse(raw(changed)),'frontend').length,0);
+ }
+ const wrong=JSON.parse(JSON.stringify(rows));if(flat)wrong[1].sessionId='s2';else wrong[1].sessionId='s2';assert.throws(()=>E.parse(raw(wrong)),/session/);
+});
+test('native execute_command success cannot hide a failed stage inside result or stdout',()=>{
+ for(const result of [
+  {type:'execute_command_result',exitCode:1,stdout:'failed'},
+  {type:'execute_command_result',exitCode:0,stdout:'{"status":"failed","errors":["No native Hook task binding"]}\r\n\r\n'},
+  {type:'execute_command_result',exitCode:0,stdout:'Error: unavailable'},
+  {status:'failed',errors:['native stage failed']}
+ ])assert.equal(E.successful({content:{status:'success',success:true,result}}),false);
+ assert.equal(E.successful({content:{status:'success',success:true,result:{type:'execute_command_result',exitCode:0,stdout:'{"status":"bound","runId":"r1"}'}}}),true);
+ assert.equal(E.successful({content:{result:{status:'failed'},observedApplicationState:true}}),true,'A browser observation of an error is not a failed tool');
+});
+test('frontend already loaded leaves only execution-begin missing until the native begin actually succeeds',()=>{
+ const directory='/work/prototypes/a',binding={entryLine:1,contextLine:0,sessionId:'s1',runId:'r1',directory,project:'/work'};
+ const source={prompts:[{line:1,text:'实现原型'}],contextLine:0,calls:[{skill:'frontend',success:true,sessionId:'s1',requestLine:2,resultLine:3}]};
+ const input={event:'PreToolUse',source,binding,tool:'Write',input:{file_path:directory+'/app/src/A.vue'},directory,cwd:'/work'};
+ let answer=H.decision(input);assert.equal(answer.deny,true);assert.deepEqual(answer.missing,['execution-begin']);assert.doesNotMatch(answer.reason,/调用 i3-frontend/);
+ const command=`node /skills/native-pilot.cjs execution-begin '${directory}'`;
+ const begin={toolCallId:'begin',name:'Bash',input:{command},cwd:'/work',success:false,sessionId:'s1',result:{status:'bound',runId:'r1',sessionId:'s1',directory},requestLine:4,resultLine:5};source.calls.push(begin);
+ assert.equal(H.decision(input).deny,true);begin.success=true;assert.equal(H.decision(input).continue,true);
+ begin.result={...begin.result,runId:'another-run'};assert.equal(H.decision(input).deny,true);begin.result.runId='r1';
+ begin.result.status='success';assert.equal(H.decision(input).deny,true);begin.result.status='bound';
+ source.stableThroughLine=4;assert.equal(H.decision(input).deny,true);delete source.stableThroughLine;
+ source.calls.push({...begin,toolCallId:'failed-rebind',requestLine:6,resultLine:7,success:false});assert.equal(H.decision(input).deny,true,'A failed rebind must not inherit old success');
+});
+test('binding recovery emits one absolute quoted command that the strict parser recognizes',()=>{
+ const directory="/work with spaces/prototypes/customer's demo";
+ const command=N.beginCommand(directory);const parsed=N.nativeCommand('Bash',{command},'/unrelated');
+ assert.equal(parsed.operation,'execution-begin');assert.equal(parsed.root,directory);assert.ok(path.isAbsolute(parsed.argv[0]));assert.ok(path.isAbsolute(parsed.argv[1]));
+ assert.match(R.instruction(['execution-begin'],{directory}),new RegExp('execution-begin'));assert.ok(R.instruction(['execution-begin'],{directory}).includes(command));
+ assert.match(R.instruction(['execution-begin'],{directory}),/管道|pipeline/);
+ assert.equal(N.nativeCommand('Bash',{command:`cd /work && ${command} 2>&1 | head -80`},'/work'),null);
+});
+test('unbound CLI execution-begin exits nonzero with an actionable standalone command and creates no proof',t=>{
+ const root=fs.realpathSync(fs.mkdtempSync(path.join(os.tmpdir(),'i3-unbound-regression-')));t.after(()=>fs.rmSync(root,{recursive:true,force:true}));
+ const result=cp.spawnSync(process.execPath,[path.join(scripts,'native-pilot.cjs'),'execution-begin',root],{encoding:'utf8'});
+ assert.equal(result.status,1);const failure=JSON.parse(result.stderr);assert.equal(failure.status,'failed');assert.match(failure.errors.join(),/No native Hook task binding/);
+ assert.ok(failure.errors.join().includes(N.beginCommand(root)));assert.deepEqual(fs.readdirSync(root),[]);
+});
+test('PostToolUse failures use additionalContext and keep the tool return intact',()=>{
+ const value=require(path.join(scripts,'hosts/codebuddy.cjs')).format({feedback:true,reason:'实际返回失败，请补调'},'PostToolUse');
+ assert.equal(value.output.continue,true);assert.deepEqual(value.output.hookSpecificOutput,{hookEventName:'PostToolUse',additionalContext:'实际返回失败，请补调'});
+ const bound={status:'bound',runId:'r1'};assert.deepEqual(E.resultValue([{type:'text',text:JSON.stringify(bound)}]),bound);
+});
+test('native wrappers preserve actual JSON facts and quoted findings without matching escaped wrapper bytes',()=>{
+ const facts={form:{errors:1},observed:true},wrapped={status:'success',success:true,result:JSON.stringify(facts)};
+ const A=require(path.join(scripts,'execution-assertions.cjs'));
+ assert.equal(A.extract(A.resultData(wrapped),'/form/errors'),1);assert.ok(E.resultText(wrapped).includes('"observed":true'));
+ assert.deepEqual(A.resultData({result:{status:'failed'},observedApplicationState:true}),{result:{status:'failed'},observedApplicationState:true});
+ assert.equal(E.successful({content:{type:'text',text:'{"status":"failed","operation":"execution-begin"}'}}),false);
+});
+test('loading a missing browser Skill cannot let another stage stand in for the denied finalize retry',()=>{
+ const source={prompts:[{line:1,digest:'task',text:'实现原型'}],contextLine:0,calls:[]},index={};
+ const context={source,sessionId:'s1',directory:'/work/prototypes/a',stage:'delivery',event:'PreToolUse',eventKey:'deny-finalize',expectedRetry:{kind:'stage',stage:'delivery',operation:'finalize'}};
+ R.record(index,context,{deny:true,missing:['browser']});
+ source.calls.push({skill:'browser',toolCallId:'actual-browser-load',sessionId:'s1',requestLine:2,resultLine:3,success:true});
+ const failedPrerequisite=R.record(index,{...context,stage:'browser-entry',event:'PostToolUse',eventKey:'failed-review',expectedRetry:{kind:'stage',stage:'browser-entry',operation:'record-devtools-review'}},{feedback:true,missing:['execution-evidence']});
+ assert.equal(failedPrerequisite.recovery.expectedRetry.operation,'finalize');
+ const other=R.record(index,{...context,stage:'browser-entry',resolved:['execution-evidence'],event:'PostToolUse',eventKey:'other-stage-result',retrySucceeded:true,retry:{kind:'stage',stage:'browser-entry',operation:'record-devtools-review',requestLine:4,resultLine:5}},{continue:true});
+ assert.equal(other.recovery.status,'ready-to-retry');
+ const correct=R.record(index,{...context,event:'PostToolUse',eventKey:'finalize-result',retrySucceeded:true,retry:{kind:'stage',stage:'delivery',operation:'finalize',requestLine:6,resultLine:7}},{continue:true});
+ assert.equal(correct.recovery.status,'recovered');
+});

package/scripts/ui-prototype-buddy-lifecycle-test.js

@@ -32,11 +32,11 @@ function fixture(t,host,scope,client){
  function tool(name,input,content='success',action=()=>{}){
   const id=request(name,input),decision=hook('PreToolUse',name,input,id);
   if(decision.deny){result(id,decision.reason,true);return {id,decision};}
-  action();result(id,content);return {id,decision,post:hook('PostToolUse',name,input,id)};
+  action();result(id,typeof content==='function'?content():content);return {id,decision,post:hook('PostToolUse',name,input,id)};
  }
  append({type:'user',message:{content:'实现原型，使用模板模式。Synthetic fixture only.'}});
  tool('Skill',{skill:'i3-ui-prototype'},'Prototype Skill loaded');
- const begin=()=>tool('Bash',{command:`node '${path.join(scripts,'native-pilot.cjs')}' execution-begin '${created.directory}'`},'bound');begin();
+ const begin=()=>tool('Bash',{command:`node '${path.join(scripts,'native-pilot.cjs')}' execution-begin '${created.directory}'`},()=>{const pointer=JSON.parse(fs.readFileSync(path.join(created.directory,'qa/execution-context.json')));return JSON.stringify({status:'bound',runId:pointer.runId,sessionId,directory:created.directory});});begin();
  return {root,project,base,directory:created.directory,append,hook,tool,begin,result,request,read(){const pointer=JSON.parse(fs.readFileSync(path.join(created.directory,'qa/execution-context.json')));const selected=C.select({project,product:client==='CodeBuddyCLI'||!client&&host==='codebuddy'?'cli':'ide',host,home,env:{}});return JSON.parse(fs.readFileSync(path.join(C.sessionDirectory(selected,project,pointer.sessionId),'session.json')));}};
 }
 for(const [host,client] of [['codebuddy','CodeBuddyCLI'],['codebuddy','CodeBuddyIDE'],['workbuddy','WorkBuddy'],['codebuddy',null],['workbuddy',null]])for(const scope of ['project','global'])test(`${host} ${client||'native-flat-log'} ${scope}: deny, correlate successful Skills, retry and retain budget`,t=>{
@@ -62,6 +62,14 @@ test('Stop asks for missing Skills twice, then reports blocked without an endles
  f.append({type:'user',message:{content:'先分析，不改代码'}});
  const answer=f.tool('Write',{file_path:path.join(f.directory,'app/src/NoWrite.vue'),content:'no'});assert.equal(answer.decision.deny,true);assert.match(answer.decision.reason,/read-only/);
 });
+test('exhausted recovery cannot silently reopen writes after late Skill loads in the same human task',t=>{
+ const f=fixture(t,'codebuddy','project','CodeBuddyCLI');
+ for(let n=0;n<3;n++){f.append({type:'assistant',message:{content:'已完成，可以交付 '+n}});f.hook('Stop');}
+ f.tool('Skill',{skill:'i3-frontend-ui-engineering'});f.tool('Skill',{skill:'antdv'});
+ const file=path.join(f.directory,'app/src/AfterBudget.vue');
+ const answer=f.tool('Write',{file_path:file,content:'no'},'written',()=>fs.writeFileSync(file,'no'));
+ assert.equal(answer.decision.deny,true);assert.equal(fs.existsSync(file),false);assert.equal(f.read().bindings[f.directory].recovery.status,'blocked');
+});
 test('a duplicated native callback does not spend recovery budget when the transcript grows',t=>{
  const f=fixture(t,'workbuddy','project',null),input={file_path:path.join(f.directory,'app/src/Duplicate.vue'),content:'fixture'};
  const id=f.request('Write',input);assert.equal(f.hook('PreToolUse','Write',input,id).deny,true);

package/scripts/ui-prototype-codebuddy-hook-test.js

@@ -8,10 +8,10 @@ test('native command parsing handles quoted paths without evaluating shell subst
  for(const command of ['node x; node native-pilot.cjs finalize /x','$(steal) native-pilot.cjs build /x','node x | node native-pilot.cjs finalize /x'])assert.equal(H.nativeCommand('Bash',{command},'/work'),null);
 });
 test('before UI write requires a successful frontend Skill in the same live context and task',()=>{
- const source={prompts:[{line:1,text:'create prototype'}],calls:[],contextLine:0},binding={entryLine:1,contextLine:0,sessionId:'s1'};
+ const source={prompts:[{line:1,text:'create prototype'}],calls:[],contextLine:0},binding={entryLine:1,contextLine:0,sessionId:'s1',runId:'r1',directory:'/work/prototypes/p',project:'/work'};
  const input={event:'PreToolUse',source,binding,tool:'Write',input:{file_path:'/work/prototypes/p/app/src/A.vue'},directory:'/work/prototypes/p'};
  assert.equal(H.decision(input).deny,true);
- source.calls=[{skill:'frontend',sessionId:'s1',requestLine:2,resultLine:3,success:true}];assert.equal(H.decision(input).continue,true);
+ source.calls=[{skill:'frontend',sessionId:'s1',requestLine:2,resultLine:3,success:true},{name:'Bash',input:{command:'node /skills/native-pilot.cjs execution-begin /work/prototypes/p'},sessionId:'s1',result:{status:'bound',runId:'r1',sessionId:'s1',directory:binding.directory},requestLine:4,resultLine:5,success:true}];assert.equal(H.decision(input).continue,true);
  source.contextLine=4;assert.equal(H.decision(input).deny,true);
 });
 test('analysis overrides old tasks and Stop feedback is bounded without granting tool permissions',()=>{
@@ -75,7 +75,7 @@ test('IDE streaming requests correlate only within the exact native generation a
  assert.throws(()=>H.eventCall({...payload,tool_input:{content:'unrelated'}},source),/uniquely/);
  source.calls.push({...source.calls[0],toolCallId:'second-call'});assert.throws(()=>H.eventCall(payload,source),/uniquely/);
 });
-test('IDE transient reads retry while wrong generations and mismatched pending requests stay rejected',()=>{
+test('IDE and CLI transient reads retry within a fixed limit; wrong generations and requests remain rejected',()=>{
  const payload={hook_event_name:'PreToolUse',client:'CodeBuddyIDE',generation_id:'g1',tool_name:'Write',tool_input:{content:'ui'}};
  const pending={format:'codebuddy-ide-index-v1',prompts:[{line:1,nativeRequestId:'g1'}],calls:[{name:'Write',toolCallId:'w1',nativeRequestId:'g1',input:{content:'ui'},requestLine:2}]};
  let reads=0,waits=0;
@@ -84,7 +84,7 @@ test('IDE transient reads retry while wrong generations and mismatched pending r
  assert.equal(result.calls[0].toolCallId,'w1');assert.equal(result.nativeReadAttempts,3);assert.equal(waits,2);
  reads=0;assert.throws(()=>H.eventSource({...payload,generation_id:'g2'},{product:'ide'},'/work',{readSource:()=>{reads++;return pending;},pause:()=>{}}),/generation/);assert.equal(reads,8);
  assert.throws(()=>H.eventSource({...payload,tool_input:{content:'different'}},{product:'ide'},'/work',{readSource:()=>pending,pause:()=>{}}),/uniquely/);
- reads=0;assert.throws(()=>H.eventSource({...payload,client:'cli'},{product:'cli'},'/work',{readSource:()=>{reads++;return {...pending,calls:[]};},pause:()=>assert.fail('CLI must not retry')}),/uniquely/);assert.equal(reads,1);
+ reads=0;assert.throws(()=>H.eventSource({...payload,client:'cli'},{product:'cli'},'/work',{readSource:()=>{reads++;return {...pending,calls:[]};},pause:()=>{}}),/uniquely/);assert.equal(reads,8);
 });
 test('IDE defers current callback evidence until the host persists it and never invents Skill success',()=>{
  const source={format:'codebuddy-ide-index-v1',prompts:[{line:1,nativeRequestId:'g1',text:'implement prototype'}],calls:[],contextLine:0};

package/scripts/ui-prototype-execution-gates-test.js

@@ -12,17 +12,18 @@ test('native UI writes resolve relative paths from the actual tool cwd',()=>{
 });
 function fixture() {
  const file='/work/prototypes/orders/app/src/Orders.vue',bytes='<Table />';
- const call=(toolCallId,name,input,result,line,skill)=>({toolCallId,name,input,result,requestLine:line,resultLine:line+1,success:true,resultDigest:E.sha(result),sessionId:'s1',contextLine:0,skill});
+ const call=(toolCallId,name,input,result,line,skill)=>({toolCallId,name,input,result,requestLine:line+2,resultLine:line+3,success:true,resultDigest:E.sha(result),sessionId:'s1',contextLine:0,skill});
  const calls=[call('front','Skill',{},'frontend instructions',3,'frontend'),call('ant','Skill',{},'antdv instructions',5,'antdv'),call('query','Bash',{command:'antdv info Table'},'Table API: rowSelection',7),call('version','Read',{file_path:'/work/app/node_modules/antdv-next/package.json'},'{"version":"1.5.3"}',9),call('write','Write',{file_path:file},'saved',11)];
  const policy=P.create({mode:'template'}),current={digest:'candidate',inputDigest:'input',revision:'r001'};
  const binding={schemaVersion:1,runId:'r1',sessionId:'s1',projectKey:'p1',directory:'/work/prototypes/orders',instanceId:'instance',policyDigest:policy.digest,inputDigest:'input',entryLine:1};
+ calls.push(call('begin','Bash',{command:'node /skills/native-pilot.cjs execution-begin /work/prototypes/orders'},JSON.stringify({status:'bound',runId:'r1',sessionId:'s1',directory:binding.directory}),0));
  const proof={schemaVersion:1,runId:'r1',sessionId:'s1',projectKey:'p1',policyDigest:policy.digest,candidateDigest:'candidate',inputDigest:'input',revision:'r001',frontend:{toolCallId:'front',files:[{path:'app/src/Orders.vue',sha256:E.sha(bytes)}],requirementIds:['R1']},official:{skill:{toolCallId:'ant'},version:{toolCallId:'version',quote:'"version":"1.5.3"'},queries:[{component:'Table',toolCallId:'query',quote:'Table API: rowSelection'}]},templateChoice:{quote:'template mode'}};
  return {policy,current,binding,proof,source:{calls,contextLine:0,prompts:[{line:1,text:'generate prototype in template mode',digest:'prompt'}]},scope:{requirements:[{id:'R1'}]},files:{'app/src/Orders.vue':bytes},implementation:{bindings:[{status:'implemented',components:['Table'],files:[{path:'app/src/Orders.vue'}]}]},frameworkVersion:'1.5.3'};
 }
 test('a native frontend load is required before the first actual UI write in both modes',()=>{
  const f=fixture();assert.equal(G.evaluate(f,'implementation').status,'passed');
  f.source.calls[0].success=false;assert.equal(G.evaluate(f,'implementation').status,'failed');
- f.source.calls[0].success=true;f.source.calls[0].resultLine=12;assert.match(G.evaluate(f,'implementation').errors.join(),/before/);
+ f.source.calls[0].success=true;f.source.calls[0].resultLine=14;assert.match(G.evaluate(f,'implementation').errors.join(),/before/);
 });
 test('IDE relative write evidence uses its bound workspace while legacy evidence keeps its contract',()=>{
  const f=fixture();f.source.format='codebuddy-ide-index-v1';f.binding.project='/work';f.source.calls.find(c=>c.name==='Write').input.file_path='prototypes/orders/app/src/Orders.vue';
@@ -40,7 +41,7 @@ test('new WorkBuddy implementation uses the shared design gate and rechecks reco
  const f=fixture();f.policy=P.create({id:P.AUTO_ID,host:'workbuddy',mode:'template'});
  Object.assign(f.binding,{host:'workbuddy',identitySource:'native-client',policyDigest:f.policy.digest});f.proof.policyDigest=f.policy.digest;
  assert.equal(G.evaluate(f,'implementation').status,'passed');
- f.binding.recovery={status:'recovered',invocations:[{skill:'frontend',toolCallId:'front',resultDigest:f.source.calls[0].resultDigest,requestLine:3,resultLine:4,feedbackLine:1}],retry:{toolCallId:'write'}};
+ f.binding.recovery={status:'recovered',invocations:[{skill:'frontend',toolCallId:'front',resultDigest:f.source.calls[0].resultDigest,requestLine:5,resultLine:6,feedbackLine:1}],retry:{toolCallId:'write'}};
  assert.equal(G.evaluate(f,'implementation').status,'passed');
  f.binding.recovery.retry.toolCallId='invented';assert.equal(G.evaluate(f,'implementation').status,'failed');
  delete f.binding.recovery;f.source.calls.find(call=>call.skill==='antdv').success=false;

package/skills/i3-ui-prototype/SKILL.md

@@ -57,13 +57,9 @@ analyze 的交付是需求／能力覆盖、模板与框架选型、交互验收
 
 已有 v2 实例先运行一次 `node <skill-root>/scripts/native-pilot.cjs state <prototype-root>`，从聚合结果恢复身份、固定需求、设计／构建／实际QA、负责人和下一步的精确命令。不要为寻找参数反复遍历全仓库、node_modules或阅读控制器内部实现。这里只读检查，不安装、启动浏览器或更新状态。
 
-CodeBuddy 新建原型采用 A＋B 执行合同，实际接口见 [execution-evidence.md](references/execution-evidence.md)。先只读检查该安装范围的 `prototype-hooks.cjs check`；未启用或来源协议未核实则报告缺项，不能自行改宿主配置或声称严格完成。analyze 和纯读取不进入制作门禁。已有实例没有 `runtime.executionPolicy` 时保留原合同，不隐式追加输入或重建原型。
+制作前实际调用所需的前端／框架／设计 Skill，真实浏览器验收使用浏览器 Skill；不能以读取 SKILL.md 代替调用。安装器注册的 Hooks 自动运行。收到缺少 Skill 的反馈时，补调该 Skill、等待成功后重试原操作；基础设施异常只简要报告未验收项，由独立维护入口处理，不在原型任务中排查。
 
-项目／全局 IDE／CLI 新启用默认从真实 Hook 的 `transcript_path` 自动取得当前会话文件；不让模型搜索／填写日志、不选择最近文件。`transcript.status=awaiting-native-event` 表示尚未观察，不阻止启动已授权任务及 `execution-begin`；进入制作和交付仍必须有可解析的原生证据。已有手动目录限制保持，可由用户显式切回 auto；缺字段、不可读、格式不支持或会话不符时报告未核验，不能用手写记录补齐。
-
-CodeBuddy／WorkBuddy 新 create 前，用 `native-pilot.cjs execution-assertions-template --scope <scope-file>` 取得完整场景，按本次 PRD 与能力参数填充每项预期 JSON 事实，存于该原型 `.preparation` 目录。create 增加 `--host <codebuddy|workbuddy> --execution-policy buddy-ab-v2 --execution-assertions <assertions-file>`；官方 Skill 真实不可用时才显式 `--official-source-fallback`，保留其失败调用定位。随后在实际所选宿主主会话执行 `execution-begin <prototype-root>`，以原生 Skill 工具加载当前上下文需要的前端 Skill 后再写业务界面。旧 codebuddy-ab-v1 及未采用 executionPolicy 的实例保留原合同。其他宿主尚未适配此 Hook 合同，按原流程披露调用核验边界。
-
-`execution-template <prototype-root>` 返回当前身份与已观察到的真实加载引用；以实际查询、实现复核及浏览器结果补齐 `qa/execution-evidence.json`，不能补造调用 ID。构建、record-run、record-devtools-review、finalize 与 `execution-check --stage <stage>` 共用 A；B 在可识别的写入前检查，反馈明确 Skill 名与下一动作，成功补调后重试；Stop 按同缺项两次、当前原生任务总计六次的预算继续纠正，到上限如实报告阻塞，反复 begin 不清零。只读分析、进度、阻塞及用户停止可正常结束。未通过门禁时交付候选和缺项；新收据的 `native-source-correlated` 不代表不可篡改认证或用户认可。
+新 create 使用实际 `--host <codebuddy|workbuddy>`。按 PRD 和固定能力制定交互验收场景，使用 `native-pilot.cjs execution-assertions-template --scope <scope-file>` 取得场景骨架，填充预期 JSON 事实并传 `--execution-assertions <assertions-file>`。这是原型交互验收，不要求手动绑定会话或填写 Hook 调用记录。旧 HTML 和既有 execution-* 入口保持兼容。
 
 ### 2. 完整内容模板与需求能力
 

package/skills/i3-ui-prototype/references/execution-evidence.md

@@ -1,4 +1,4 @@
-# Buddy A＋B 执行与补调合同
+# 原型调用记录：兼容合同
 
 <!-- i3:zh-guide:start -->
 ## 中文使用说明
@@ -8,6 +8,12 @@
 默认使用简体中文解释、追问及生成报告；用户明确要求其他语言时可切换。原方法正文、引用、阈值和审批条件完整保留。代码标识、路径、命令、工具参数、JSON 键/枚举与原文引用保持原样。
 <!-- i3:zh-guide:end -->
 
+当前正常流程由安装器注册的 Hooks 自动采集真实 Skill 和工具调用。原型会话直接制作、修订和验收 UI；没有手动 execution-begin、检查 Hook 或填写内部调用记录的前置。缺少必要 Skill 时只补调该 Skill 并重试原操作。安装、原生协议和失败诊断统一见随包 [Hooks 维护说明](../../../hooks/PROTOTYPE.md)，不属于原型工作步骤。
+
+以下为已有显式 execution-* 使用者保留的兼容格式与旧手动流程，不作为新任务指导；已有原型不会自动改写。
+
+## 旧 Buddy A＋B 执行与补调合同
+
 本合同适配 CodeBuddy IDE／CLI 和 WorkBuddy 桌面 command Hooks；各宿主项目／全局的真实调用、补调及业务效果仍须逐项手测，profile 保持 pending-user。不是新增专责 Agent，不改 using 的发现／路由、上游前端／浏览器方法或上游 Hooks。A 是确定性门禁，B 采集与绑定原生来源；没有 C 提示词对照表方案。
 
 ## 安装范围与原生生效
@@ -44,6 +50,10 @@ node <skill-root>/scripts/native-pilot.cjs execution-assertions-template --scope
 
 通过自然语言／using 选到工作 Skill，或实际 `/i3-prototype` 快捷入口后，新实例执行 `execution-begin <prototype-root>`。B 回查原生用户请求和工作 Skill／快捷命令，绑定规范化 projectKey、sessionId、runId、实例、输入、模式、策略与注册。只读或停止请求不能启动写任务。新会话／新请求／压缩后的上下文在恢复实施前重新 begin 并加载适用 Skill；用户手改保留。初建骨架不等于实际实施。
 
+使用 `state` 中的 `commands.executionBegin.shell` 或拒绝反馈中的绝对路径命令，作为一次独立 Shell 调用；不加 `cd &&`、管道、重定向或 `head`。严格解析器不解释组合 Shell。成功须同时满足进程退出 0 和内层 `status=bound`；外层 `status=success`／`success:true` 不足以证明阶段成功。缺绑定、任务切换、上下文变化或输入变化时重新执行，不能由 CLI 自行写入原生绑定；A 和写入门禁回查当前任务最新一次 begin 的成功结果，失败／待返回不可复用旧成功。
+
+原始工具名 `use_skill`／`skill` 与 `Skill` 通过同一有限别名表识别；IDE 历史转换和原始 JSONL 采用相同规则。保留原始请求／结果摘要、调用 ID、会话与时序校验，普通 Read、未知近似名称仍不算 Skill。原生 execute_command 的内层非零退出、错误结果或 stdout 中完整 JSON `status=failed` 都按失败处理；不会把浏览器返回的任意业务 `result.status` 当成工具错误。
+
 `execution-template <prototype-root>` 只读返回当前证据骨架和已经成功返回的 Skill 引用；保存并填入 `qa/execution-evidence.json`。字段语义：
 
 - 固定身份：schemaVersion=1、runId、sessionId、projectKey、policyDigest、inputDigest、candidateDigest、revision，须与当前绑定一致。
@@ -74,6 +84,8 @@ B 的 PreToolUse 只拒绝可识别的缺前置 UI 写入或明确阶段命令
 
 B 拒绝后主会话立即补调，等待成功返回，再重试被拒操作；普通 Read 或另开会话不算本主会话 Skill 调用。缺项、反馈事件、后续成功 toolCallId/resultDigest 及重试结果在宿主会话状态落盘。required → ready-to-retry → recovered 分别表示缺项、已可重试、观察到成功重试；recovered 不表示业务验收通过。A 再回查补调及重试的原生引用和时序。
 
+PostToolUse 观察到已落盘的 begin／阶段失败时，通过该事件的 additionalContext 返回补调指令并保留 required；Stop 才使用停止反馈协议。IDE 尚未持久化当前结果时继续等待后续原生来源核验，不制造成功。实际 Skill 已成功但缺绑定时只提示 execution-begin；补调成功不直接记 recovered，仍须观察原操作的成功重试。
+
 重试按 kind 区分 ui-write 和 stage；阶段重试绑定实际 operation、stage 与同一原型目录。两类新记录都以 feedbackLine 核对请求发生在反馈之后，旧成功回调不能恢复后续拒绝；旧无 kind 的记录继续仅按页面写入合同核验。
 
 默认同一缺项两次、单原生任务总计六次，重复回调不增加预算，反复 begin 和内部 providerData.isMeta 的 Hook 消息不重置任务。达到上限时保持受管操作拒绝，允许真实 blocked 报告正常结束；不无限驱动 Stop。用户只读／暂停优先。入口、Skill 发现、加载成功、CLI 查询、重试成功、交付和用户认可分开记录。

package/skills/i3-ui-prototype/scripts/codebuddy-context.cjs

@@ -1,7 +1,7 @@
 'use strict';
 const fs=require('node:fs'),path=require('node:path'),os=require('node:os'),assert=require('node:assert/strict');
 const R=require('./codebuddy-registration.cjs'),E=require('./execution-evidence.cjs'),H=require('./buddy-host.cjs');
-const FILES=['native-command.cjs','buddy-host.cjs','execution-recovery.cjs','execution-policy.cjs','execution-evidence.cjs','codebuddy-ide-source.cjs','execution-gates.cjs','execution-assertions.cjs','execution-runtime.cjs','codebuddy-context.cjs','codebuddy-registration.cjs','codebuddy-hook.cjs','prototype-hooks.cjs','hosts/codebuddy.cjs','native-pilot.cjs','native-pilot-lib.cjs','native-delivery.cjs','native-devtools.cjs','native-files.cjs','native-build.cjs'];
+const FILES=['native-tool-name.cjs','native-command.cjs','buddy-host.cjs','execution-recovery.cjs','execution-diagnostics.cjs','ptc-callbacks.cjs','native-tool-result.cjs','prototype-dependencies.cjs','execution-policy.cjs','execution-evidence.cjs','codebuddy-ide-source.cjs','execution-gates.cjs','execution-assertions.cjs','execution-runtime.cjs','codebuddy-context.cjs','codebuddy-registration.cjs','codebuddy-hook.cjs','prototype-hooks.cjs','hosts/codebuddy.cjs','native-pilot.cjs','native-pilot-lib.cjs','native-delivery.cjs','native-devtools.cjs','native-files.cjs','native-build.cjs'];
 const read=file=>R.fileIO.read(file);
 function scriptsForEntry(scriptPath) {
  if(path.basename(scriptPath)!=='i3-prototype.cjs')return path.dirname(path.dirname(scriptPath));
@@ -60,7 +60,7 @@ function source(payload,record,project) {
  assert.ok(value.prompts.length,'Original user task is absent from native transcript');
  assert.ok(value.calls.every(call=>call.sessionId===payload.session_id),'Native session identity missing or mismatched');
  assert.ok(value.prompts.every(prompt=>!prompt.sessionId||prompt.sessionId===payload.session_id),'Native prompt session differs');
- return value;
+ return record.product==='cli'?require('./ptc-callbacks.cjs').read(value,{record,project,sessionId:payload.session_id}):value;
 }
 function readOnly(prompt) {
  if(/不(?:要)?(?:改代码|修改(?:任何)?代码|实施|生成原型)|\b(?:analysis only|do not (?:edit|modify|implement))\b/i.test(prompt))return true;
@@ -72,4 +72,4 @@ function prefix(file,bytes,digest) {
  assert.ok(Number.isSafeInteger(bytes)&&bytes>0&&bytes<=64*1024*1024,'Invalid source cursor');
  const raw=E.cursorBytes(file);assert.ok(raw.length>=bytes,'Native transcript was truncated');assert.equal(E.sha(raw.subarray(0,bytes)),digest,'Native transcript prefix changed');
 }
-module.exports={read,scriptsForEntry,bundle,registration,globalBase,select,projectKey,sessionDirectory,source,readOnly,prefix};
+module.exports={FILES:Object.freeze(FILES),read,scriptsForEntry,bundle,registration,globalBase,select,projectKey,sessionDirectory,source,readOnly,prefix};