@givolt/i3-composer-agent 2.3.4 → 2.3.6

package/skills/i3-ui-prototype/scripts/execution-gates.cjs

@@ -30,7 +30,7 @@ function skill(data,ref,key,before=Infinity) {
 }
 function quote(data,ref) {
  const call=nativeRef(data,ref);assert.ok(typeof ref.quote==='string'&&ref.quote.trim(),'Actual native result quote required');
- assert.ok(E.contentText(call.result).includes(ref.quote),'Quoted finding absent from native result');return call;
+ assert.ok(E.resultText(call.result).includes(ref.quote),'Quoted finding absent from native result');return call;
 }
 function identity(d) {
  P.validate(d.policy);assert.equal(d.binding?.schemaVersion,1,'Hook task binding required');assert.equal(d.proof?.schemaVersion,1,'Execution evidence required');
@@ -38,12 +38,19 @@ function identity(d) {
  same(d.binding.policyDigest,d.policy.digest,'Execution policy differs');same(d.binding.inputDigest,d.current.inputDigest,'Inputs changed; begin a new execution run');
  for(const key of ['inputDigest','candidateDigest','revision'])same(d.proof[key],key==='candidateDigest'?d.current.digest:d.current[key],`Current ${key} differs`);
  assert.ok(d.source.prompts.some(p=>p.line===d.binding.entryLine),'Native user task source missing');
+ if(d.binding.association==='automatic'){
+  const prompt=d.source.prompts.find(p=>p.line===d.binding.entryLine);
+  same(prompt?.digest,d.binding.promptDigest,'Automatic execution context belongs to a different native task');
+  same(d.binding.contextLine,d.source.contextLine,'Automatic execution context changed');
+ }else assert.ok(command.completedBegin(d.source,d.binding),'Successful execution-begin for the current native task/context is required');
  if(d.policy.id===P.AUTO_ID){same(d.binding.host,d.policy.host,'Actual native host differs from the fixed policy');assert.ok(d.binding.identitySource&&d.binding.identitySource!=='legacy-profile','Automatic policy requires actual native host identity');}
  if(d.binding.recovery){
   const recovery=d.binding.recovery;
+  assert.notEqual(recovery.status,'blocked','Recovery budget exhausted; a new human task is required');
   for(const ref of recovery.invocations||[]){const call=nativeRef(d,ref);same(call.skill,ref.skill,'Recovery Skill differs');same(call.requestLine,ref.requestLine,'Recovery request cursor differs');same(call.resultLine,ref.resultLine,'Recovery result cursor differs');assert.ok(call.requestLine>ref.feedbackLine,'Recovery invocation must follow its feedback');}
   if(recovery.status==='recovered'){
    const retry=nativeRef(d,recovery.retry);
+   if(recovery.expectedRetry)for(const [key,value] of Object.entries(recovery.expectedRetry))same(recovery.retry[key],value,'Recovery retry differs from the denied operation');
    if(recovery.retry.kind!==undefined)assert.ok(Number.isFinite(recovery.retry.feedbackLine)&&recovery.retry.feedbackLine>=d.binding.entryLine&&retry.requestLine>recovery.retry.feedbackLine,'Recovery retry must follow its feedback');
    if(recovery.retry.kind==='stage'){
     const parsed=command.nativeCommand(retry.name,retry.input,retry.cwd||d.binding.project||d.binding.directory);
@@ -54,6 +61,7 @@ function identity(d) {
    }else {
     assert.ok(recovery.retry.kind===undefined||recovery.retry.kind==='ui-write','Unknown recovery retry kind');
     assert.ok(uiWrite({...retry,cwd:retry.cwd||d.binding.project},d.binding.directory),'Recovery retry is not a native UI write');
+    if(recovery.expectedRetry?.file){const input=retry.input,file=input.file_path||input.filePath||input.path||input.TargetFile;same(path.resolve(retry.cwd||d.binding.project,file),recovery.expectedRetry.file,'Recovery wrote a different UI file');}
    }
    for(const ref of recovery.invocations||[])assert.ok(retry.requestLine>ref.resultLine,'Retry must follow successful Skill results');
   }
@@ -106,7 +114,7 @@ function design(d) {
   assert.ok(query.decisions?.length,'UIUX result decisions required');
   for(const decision of query.decisions) {
    assert.ok(['adopted','adjusted','rejected','no-match'].includes(decision.decision)&&decision.rationale&&decision.identity,'UIUX decision identity and rationale required');
-   assert.ok(E.contentText(call.result).includes(decision.identity),'UIUX identity absent from actual result');
+   assert.ok(E.resultText(call.result).includes(decision.identity),'UIUX identity absent from actual result');
    if(['adopted','adjusted'].includes(decision.decision))assert.ok(Object.hasOwn(d.files||{},decision.implementation)&&decision.scenarioId,'Adopted UIUX result needs source and verification scenario');
   }
  }
@@ -115,7 +123,7 @@ function design(d) {
 }
 function build(d) {
  assert.ok(d.build?.buildId&&d.build?.buildDigest,'Current checked build required');
- const call=nativeRef(d,d.proof.build),input=JSON.stringify(call.input),output=E.contentText(call.result);
+ const call=nativeRef(d,d.proof.build),input=JSON.stringify(call.input),output=E.resultText(call.result);
  assert.ok(['Bash','execute_command','run_terminal_command'].includes(call.name)&&input.includes('native-pilot.cjs')&&/\bbuild\b/.test(input)&&input.includes(d.binding.directory),'Actual current build command required');
  assert.ok(output.includes(d.build.buildId)&&output.includes(d.build.buildDigest),'Native build result differs from current build');
  same(d.build.candidateDigest,d.current.digest,'Build candidate is stale');return call;
@@ -154,8 +162,49 @@ function browser(d) {
   A.compare(A.extract(A.resultData(call.result),check.pointer),check);
  }
 }
+function automatic(d,stage){
+ P.validate(d.policy);
+ const prompt=d.source.prompts.at(-1);same(d.binding.entryLine,prompt?.line,'Current prototype task differs');same(d.binding.promptDigest,prompt?.digest,'Current prototype task changed');
+ same(d.binding.inputDigest,d.current.inputDigest,'Prototype inputs changed');same(d.binding.contextLine,d.source.contextLine,'Native context changed');
+ assert.notEqual(d.binding.recovery?.status,'blocked','Skill recovery budget exhausted');
+ const needs=P.requirements(d.policy,stage),calls=d.source.calls.filter(c=>c.sessionId===d.binding.sessionId&&c.success&&c.resultLine&&c.requestLine>d.source.contextLine);
+ const refs={},required=needs.filter(k=>['frontend','antdv','uiux','browser'].includes(k));
+ if(needs.includes('implementation'))required.push('frontend',...(d.policy.officialCallable?['antdv']:[]),...(d.policy.mode==='professional'?['uiux']:[]));
+ const writes=calls.filter(c=>c.requestLine>=d.binding.entryLine&&uiWrite({...c,cwd:c.cwd||d.binding.project},d.binding.directory));
+ for(const key of [...new Set(required)]){
+  const loaded=calls.filter(c=>c.skill===key),firstWrite=writes.length?Math.min(...writes.map(c=>c.requestLine)):Infinity;
+  const call=['frontend','antdv','uiux'].includes(key)?loaded.find(c=>c.resultLine<firstWrite):loaded.at(-1);
+  assert.ok(call,`Actual ${key} Skill invocation required before UI implementation; invoke it and retry this operation`);
+  if(['frontend','antdv','uiux'].includes(key)&&writes.length)assert.ok(call.resultLine<Math.min(...writes.map(c=>c.requestLine)),`${key} Skill must precede business UI writes`);
+  refs[key]={toolCallId:call.toolCallId,resultDigest:call.resultDigest};
+ }
+ if(needs.includes('implementation'))assert.ok(writes.length,'Actual business UI implementation write required');
+ if(needs.includes('build')){
+  assert.ok(d.build&&d.build.candidateDigest===d.current.digest,'Current prototype build required');
+  const built=calls.find(c=>{const commandInfo=command.nativeCommand(c.name,c.input,c.cwd||d.binding.project);const result=E.resultValue(c.result);return commandInfo?.operation==='build'&&commandInfo.root===d.binding.directory&&result?.buildId===d.build.buildId&&result?.buildDigest===d.build.buildDigest;});
+  assert.ok(built,'Actual current build result required');refs.build={toolCallId:built.toolCallId,resultDigest:built.resultDigest};
+ }
+ if(needs.includes('browser-results')){
+  const loaded=calls.filter(c=>c.skill==='browser').at(-1),built=calls.find(c=>c.toolCallId===refs.build?.toolCallId);
+  const observed=calls.filter(c=>/^mcp__.*chrome.*devtools.*__/.test(c.name)&&c.requestLine>Math.max(loaded.resultLine,built.resultLine));
+  assert.ok(observed.some(c=>/__(?:new_page|navigate_page)$/.test(c.name)),'Actual browser navigation required');
+  assert.ok(observed.some(c=>c.name.endsWith('__evaluate_script')&&E.resultText(c.result).includes(d.current.digest)),'Actual browser candidate identity required');
+  for(const method of ['take_screenshot','list_console_messages','list_network_requests','take_snapshot','performance_stop_trace'])assert.ok(observed.some(c=>c.name.endsWith('__'+method)),`Actual browser ${method} required`);
+  assert.ok(d.business&&d.business.candidateDigest===d.current.digest&&d.business.buildId===d.build.buildId,'Current business browser report required');
+  const fixed=A.validate(d.assertions,d.business.journeys.map(j=>j.id));
+  for(const scenario of fixed.scenarios)for(const check of scenario.checks){
+   const observation=d.business.generationObservations?.find(o=>o.scenarioId===scenario.scenarioId);
+   const results=observed.filter(c=>c.name.endsWith('__'+check.method)&&(!observation||observation.toolCallIds.includes(c.toolCallId)));
+   assert.ok(results.some(c=>{try{A.compare(A.extract(A.resultData(c.result),check.pointer),check);return true;}catch{return false;}}),`Actual browser assertion missing: ${scenario.scenarioId} ${check.pointer}`);
+  }
+ }
+ return {status:'passed',stage,policyDigest:d.policy.digest,runId:d.binding.runId,sessionId:d.binding.sessionId,projectKey:d.binding.projectKey,host:d.policy.host,productForm:d.binding.product,productVersion:d.binding.productVersion,installationScope:d.binding.scope,
+  operation:d.binding.operation,mode:d.policy.mode,inputDigest:d.current.inputDigest,candidateDigest:d.current.digest,revision:d.current.revision,association:'automatic',skills:refs,source:{path:d.source.path,bytes:d.source.bytes,digest:d.source.digest},
+  ...(d.source.callbackJournal?{callbackJournal:d.source.callbackJournal}:{}),...(d.binding.recovery?{recovery:d.binding.recovery}:{}),invocationVerification:'native-source-correlated',tamperProof:false};
+}
 function evaluate(data,stage) {
  try {
+  if(data.binding?.association==='automatic')return automatic(data,stage);
   identity(data);const needs=P.requirements(data.policy,stage);
   if(needs.includes('frontend')||needs.includes('implementation'))frontend(data,needs.includes('implementation'));
   if(needs.some(n=>['antdv','official-source','uiux'].includes(n)))design(data);

package/skills/i3-ui-prototype/scripts/execution-recovery.cjs

@@ -1,16 +1,19 @@
 'use strict';
 // Deterministic recovery state; only native source results can resolve a Skill.
 const E=require('./execution-evidence.cjs'),P=require('./execution-policy.cjs');
+const N=require('./native-command.cjs');
 const names={frontend:'i3-frontend-ui-engineering',antdv:'antdv',uiux:'ui-ux-pro-max',browser:'i3-browser-testing-with-devtools'};
+const blockedReason='原型补调已达到自动恢复上限，当前任务仍被阻塞。请如实报告缺项及失败原因；修复依赖、权限或宿主后由用户发起继续。不能取得合格交付回执。';
 function missing({source,binding,policy,stage}){
- const unbound=!binding||binding.entryLine!==source.prompts.at(-1)?.line||binding.contextLine!==source.contextLine;
+ const unbound=binding?.association!=='automatic'&&!N.completedBegin(source,binding);
  const required=stage&&policy?P.requirements(policy,stage).filter(key=>Object.hasOwn(names,key)):['frontend',...(policy?.id===P.AUTO_ID?[...(policy.officialCallable?['antdv']:[]),...(policy.mode==='professional'?['uiux']:[])]:[])];
  const sessionId=binding?.sessionId||source.calls.find(call=>call.sessionId)?.sessionId;
  return [...(unbound?['execution-begin']:[]),...required.filter(key=>!E.loaded(source.calls,key).some(call=>call.sessionId===sessionId&&call.requestLine>source.contextLine&&(source.stableThroughLine===undefined||call.resultLine<=source.stableThroughLine)))];
 }
-function instruction(keys){
+function instruction(keys,{directory,automatic=false}={}){
  const skills=keys.filter(key=>names[key]).map(key=>names[key]);
- return `${keys.includes('execution-begin')?'先为当前任务执行 execution-begin。':''}${skills.length?'请立即通过当前宿主的 Skill 工具调用 '+skills.join('、')+'（插件安装使用宿主显示的完整名称），等待成功返回后重试原操作。':''}${keys.includes('execution-evidence')?'执行 execution-check，按实际原生请求和结果补齐当前阶段证据后重试。':''}读取 SKILL.md、自动补全提示、手填调用记录不能代替实际调用。失败时报告具体原因，不得自动安装依赖或宣称完成。`;
+ const begin=keys.includes('execution-begin')?`先为当前任务独立执行 execution-begin${directory?'：\n'+N.beginCommand(directory)+'\n':'。'}不得拼接 cd &&、管道、重定向或 head；等待 status=bound 且退出码为 0，再重试原操作。`:'';
+ return `${begin}${skills.length?'请立即通过当前宿主的 Skill 工具调用 '+skills.join('、')+'（插件安装使用宿主显示的完整名称），等待成功返回后重试原操作。':''}${keys.includes('execution-evidence')?(automatic?'按本次构建或交互验收返回的具体缺项修正原型后重试；调用记录由 Hooks 自动采集，不检查或修复 Hooks。':'执行 execution-check，按实际原生请求和结果补齐当前阶段证据后重试。'):''}读取 SKILL.md、自动补全提示、手填调用记录不能代替实际调用。外层工具 success 不代表原型阶段成功；内层 status=failed 或非零退出必须保持阻塞。失败时报告具体原因，不得自动安装依赖或宣称完成。`;
 }
 function record(index,context,answer){
  const {source,sessionId,directory,eventKey,event}=context,prompt=source.prompts.at(-1);
@@ -19,16 +22,17 @@ function record(index,context,answer){
  index.recoveries||={};
  const state=index.recoveries[taskKey]||={schemaVersion:1,total:0,counts:{},events:{},pending:{},invocations:[],status:'required'};
  state.feedbackLine??=Math.max(prompt.line,...Object.values(state.pending).map(item=>item.line));
- const summary=()=>({taskKey,status:state.status,total:state.total,counts:state.counts,invocations:state.invocations,...(state.retry?{retry:state.retry}:{})});
+ const summary=()=>({taskKey,status:state.status,total:state.total,counts:state.counts,invocations:state.invocations,...(state.expectedRetry?{expectedRetry:state.expectedRetry}:{}),...(state.retry?{retry:state.retry}:{})});
  const remember=result=>{state.events[eventKey]=result;for(const key of Object.keys(state.events).slice(0,-128))delete state.events[key];return {...result,recovery:summary()};};
  if(state.events[eventKey])return {...state.events[eventKey],recovery:summary()};
+ if(state.status==='blocked'&&!answer.deny&&!answer.feedback)return remember(event==='PreToolUse'&&context.expectedRetry?{deny:true,reason:blockedReason}:{...answer,context:blockedReason});
  if(answer.deny||answer.feedback){
+  if(context.expectedRetry&&(!state.expectedRetry||state.status==='recovered'))state.expectedRetry=context.expectedRetry;
   const keys=[...new Set(answer.missing?.length?answer.missing:['execution-evidence'])];
   const limits=context.policy?.recovery||{perMissing:2,total:6};
   if(state.total>=limits.total||keys.some(key=>(state.counts[key]||0)>=limits.perMissing)){
    state.status='blocked';
-   const reason='原型补调已达到自动恢复上限，当前任务仍被阻塞。请如实报告缺项及失败原因；修复依赖、权限或宿主后由用户发起继续。不能取得合格交付回执。';
-   const result=answer.deny?{deny:true,reason,missing:keys}:{continue:true,context:reason};return remember(result);
+   const result=answer.deny?{deny:true,reason:blockedReason,missing:keys}:{continue:true,context:blockedReason};return remember(result);
   }
   state.total++;for(const key of keys)state.counts[key]=(state.counts[key]||0)+1;state.status='required';
   const line=Math.max(prompt.line,...source.calls.map(call=>call.resultLine||call.requestLine));
@@ -44,7 +48,9 @@ function record(index,context,answer){
    delete state.pending[key];
   }
   if(!Object.keys(state.pending).length&&state.status!=='recovered'){
-   state.status=context.retrySucceeded&&event==='PostToolUse'&&context.retry?.requestLine>state.feedbackLine?'recovered':'ready-to-retry';if(state.status==='recovered')state.retry={...context.retry,feedbackLine:state.feedbackLine};
+   const matchingRetry=!state.expectedRetry||Object.entries(state.expectedRetry).every(([key,value])=>context.retry?.[key]===value);
+   const afterSkills=state.invocations.every(call=>context.retry?.requestLine>call.resultLine);
+   state.status=context.retrySucceeded&&matchingRetry&&afterSkills&&event==='PostToolUse'&&context.retry?.requestLine>state.feedbackLine?'recovered':'ready-to-retry';if(state.status==='recovered')state.retry={...context.retry,feedbackLine:state.feedbackLine};
   }
  }
  return remember({...answer});

package/skills/i3-ui-prototype/scripts/execution-runtime.cjs

@@ -1,6 +1,7 @@
 'use strict';
 const F=require('./native-files.cjs'),{fs,path,assert,json,inside}=F;
 const P=require('./execution-policy.cjs'),E=require('./execution-evidence.cjs'),G=require('./execution-gates.cjs'),C=require('./codebuddy-context.cjs');
+const Recovery=require('./execution-recovery.cjs');
 const optional=(root,file)=>fs.existsSync(inside(root,file))?json(inside(root,file)):null;
 function policy(directory) {
  const value=optional(directory,'inputs/execution-policy.json'),metaFile=inside(directory,'prototype.json');
@@ -11,7 +12,10 @@ function policy(directory) {
  const acceptance=json(inside(directory,'inputs/acceptance.json'));require('./execution-assertions.cjs').validate(json(inside(directory,'inputs/execution-assertions.json')),[...acceptance.requiredScenarios,...acceptance.frameworkScenarios]);return value;
 }
 function binding(directory) {
- const pointer=optional(directory,'qa/execution-context.json');assert.ok(pointer?.schemaVersion===1,'No native Hook task binding; run execution-begin inside enabled CodeBuddy');
+ const metadata=inside(directory,'prototype.json');
+ const automaticExpected=fs.existsSync(metadata)&&json(metadata).runtime?.executionPolicy===P.AUTO_ID;
+ const recover=automaticExpected?'Installed Hooks collect this automatically on the next prototype UI operation. Load the required Skills and continue the UI task; report an infrastructure fault through maintenance if collection fails.':Recovery.instruction(['execution-begin'],{directory});
+ const pointer=optional(directory,'qa/execution-context.json');assert.ok(pointer?.schemaVersion===1,'No native Hook task binding; '+recover);
  const project=fs.realpathSync(pointer.project),selected=C.select({project,product:pointer.product,host:pointer.host||'codebuddy'});assert.ok(selected,'Hooks are not enabled or are shadowed');
  assert.equal(selected.base,pointer.base,'Effective Hook scope changed');
  const stateDirectory=C.sessionDirectory(selected,project,pointer.sessionId),indexFile=path.join(stateDirectory,'session.json');
@@ -23,6 +27,8 @@ function binding(directory) {
  const source=C.source({session_id:entry.sessionId,transcript_path:entry.source.path},selected,project);
  const prompt=source.prompts.find(p=>p.line===entry.entryLine);assert.equal(prompt?.digest,entry.promptDigest,'Original user task changed');
  assert.ok(!C.readOnly(source.prompts.at(-1).text),'Latest user request is read-only or stopped');
+ assert.equal(entry.entryLine,source.prompts.at(-1).line,'Native task changed; '+recover);
+ assert.equal(entry.contextLine,source.contextLine,'Native context changed; '+recover);
  return {entry,source,selected};
 }
 function data(directory,lib,options={}) {
@@ -33,7 +39,7 @@ function data(directory,lib,options={}) {
  const pointer=optional(directory,'last-build.json');let build=null;
  if(pointer)try{build=lib.verifyBuild(directory,pointer.buildId);}catch{/* A changed candidate must be allowed to rebuild; build/browser gates reject null. */}
  const latest=optional(directory,'qa/latest.json');
- const business=options.businessReport||(latest?json(inside(directory,latest.report)):proof?.browser?.report?json(inside(directory,proof.browser.report)):null);
+ const business=options.businessReport||(latest?json(inside(directory,latest.report)):proof?.browser?.report?optional(directory,proof.browser.report):null);
  const framework=json(inside(directory,'inputs/framework.json'));
  return {policy:fixed,current,binding:entry,source,proof,assertions:json(inside(directory,'inputs/execution-assertions.json')),designReview:optional(directory,'qa/design-advice.json'),scope:json(inside(directory,'inputs/scope.json')),implementation:optional(directory,'design-system/implementation.json'),files,frameworkVersion:framework.profile?.versions?.['antdv-next']||json(inside(directory,'app/package.json')).dependencies['antdv-next'].replace(/^[~^]/,''),build,business,devtools:options.devtoolsReport||optional(directory,'qa/devtools-review.json'),selected};
 }
@@ -54,6 +60,7 @@ function template(directory,lib) {
 }
 function begin(directory,lib) {
  directory=fs.realpathSync(directory);const {entry}=binding(directory);
+ assert.equal(entry.inputDigest,lib.manifest(directory).inputDigest,'Inputs changed; '+Recovery.instruction(['execution-begin'],{directory}));
  return {status:'bound',operation:'execution-begin',directory,runId:entry.runId,sessionId:entry.sessionId,policyDigest:entry.policyDigest,evidenceTemplate:template(directory,lib),
   next:'Load applicable Skills through CodeBuddy, implement the current scope, and bind actual native result IDs in qa/execution-evidence.json. Binding is not completion.'};
 }

package/skills/i3-ui-prototype/scripts/hosts/codebuddy.cjs

@@ -3,7 +3,7 @@
 const fs=require('node:fs'),path=require('node:path');
 function format(result,event){
  if(result.deny)return {code:0,output:{hookSpecificOutput:{hookEventName:'PreToolUse',permissionDecision:'deny',permissionDecisionReason:result.reason}}};
- if(result.feedback)return {code:0,output:{continue:false,reason:result.reason}};
+ if(result.feedback)return {code:0,output:event==='Stop'?{continue:false,reason:result.reason}:{continue:true,hookSpecificOutput:{hookEventName:event,additionalContext:result.reason}}};
  if(result.context)return {code:0,output:{continue:true,...(result.recovery?.status==='blocked'?{systemMessage:result.context}:{}),...(['SessionStart','UserPromptSubmit','PostToolUse'].includes(event)?{hookSpecificOutput:{hookEventName:event,additionalContext:result.context}}:{})}};
  return {code:0,output:{continue:true}};
 }

package/skills/i3-ui-prototype/scripts/native-command.cjs

@@ -1,6 +1,8 @@
 'use strict';
 // One non-executing parser shared by Hook dispatch and A receipt verification.
-const path=require('node:path');
+const path=require('node:path'),assert=require('node:assert/strict');
+const {quote}=require('./codebuddy-registration.cjs');
+const E=require('./execution-evidence.cjs');
 function tokens(command) {
  if(typeof command!=='string'||/[\x00\r\n]|\$\(|`/.test(command))return null;
  const values=[];let value='',quote=null,started=false;
@@ -15,4 +17,19 @@ function nativeCommand(tool,input,cwd) {
  return {operation,root,argv};
 }
 const stageFor=Object.freeze({build:'implementation','record-run':'browser-entry','record-devtools-review':'browser-entry',finalize:'delivery'});
-module.exports={tokens,nativeCommand,stageFor};
+function beginCommand(directory){
+ assert.ok(typeof directory==='string'&&path.isAbsolute(directory),'Absolute prototype directory required');
+ return [process.execPath,path.join(__dirname,'native-pilot.cjs'),'execution-begin',directory].map(quote).join(' ');
+}
+function completedBegin(source,binding){
+ if(!binding||binding.entryLine!==source.prompts.at(-1)?.line||(binding.contextLine||0)!==source.contextLine)return null;
+ const calls=source.calls.filter(call=>call.sessionId===binding.sessionId&&call.requestLine>=binding.entryLine&&call.requestLine>source.contextLine&&(()=>{
+  const command=nativeCommand(call.name,call.input,call.cwd||binding.project||binding.directory);
+  return command?.operation==='execution-begin'&&command.root===binding.directory;
+ })());
+ const latest=calls.at(-1);
+ if(!latest?.success||!latest.resultLine||source.stableThroughLine!==undefined&&latest.resultLine>source.stableThroughLine)return null;
+ const result=E.resultValue(latest.result);
+ return result?.status==='bound'&&result.runId===binding.runId&&result.sessionId===binding.sessionId&&result.directory===binding.directory?latest:null;
+}
+module.exports={tokens,nativeCommand,stageFor,beginCommand,completedBegin};

package/skills/i3-ui-prototype/scripts/native-delivery.cjs

@@ -56,14 +56,15 @@ function state(directory,options,lib) {
   }
   if(build.status==='current')commands.preview=command('preview',['--build-id',build.buildId]);
   if(devtoolsReview.required)commands.recordDevtoolsReview=command('record-devtools-review',['--report',path.join(directory,'qa/devtools-review-input.json')]);
-  if(meta.runtime.executionPolicy){commands.executionBegin=command('execution-begin');commands.executionTemplate=command('execution-template');commands.executionCheck=command('execution-check');}
+  const executionContext=read(directory,'qa/execution-context.json');
+  if(meta.runtime.executionPolicy&&executionContext){commands.executionTemplate=command('execution-template');commands.executionCheck=command('execution-check');}
   let generation=null;
   if(meta.runtime.generationContract===1)try{const fixed=json(inside(directory,'inputs/generation.json'));const plan=require('./generation-contract.cjs').view(fixed);generation={presentation:fixed.presentation,pendingDecisions:fixed.pendingDecisions,pendingReferenceElements:fixed.pendingReferenceElements.length,referenceReview:plan.referenceReview,implementation:require('./generation-evidence.cjs').validateImplementation(directory,fixed,json(inside(directory,'design-system/implementation.json')),{frameworkMap:json(inside(directory,'inputs/framework.json')).componentMap})};}catch(error){generation={status:'failed',errors:[error.message]};}
   const nextAction=ownership?'wait-for-owner':structure.status!=='passed'?'repair-structure':generation&&(generation.pendingDecisions.length||generation.pendingReferenceElements)?'resolve-generation-decisions':generation?.implementation.status==='pending'?'implement-business':meta.runtime.contentReference&&meta.business?.status!=='adapted'?'implement-business':!['reviewed','no-match','skipped'].includes(design.status)?'review-design':build.status!=='current'?'build':browser.status!=='current'?(meta.runtime.contentReference?'business-browser-review':'browser'):devtoolsReview.required&&devtoolsReview.status!=='current'?'devtools-review':deliveryCurrent?'return-result':'finalize';
   if(generation)commands.replan=command('replan',['--scope',path.join(directory,'inputs/scope.json'),'--revision',nextRevision,...expected]);
   const fixedScope=json(inside(directory,'inputs/scope.json'));
   const scopes=meta.runtime.generationContract===1?{sourceFile:'inputs/scope.json',schemaVersion:fixedScope.schemaVersion,title:fixedScope.title,moduleIds:fixedScope.moduleIds,pages:fixedScope.pages.map(page=>({id:page.id,title:page.title,referencePage:page.referencePage,regions:page.regions.map(region=>({id:region.id,pattern:region.pattern||region.mode,fields:region.fields?.length||0,actions:region.actions?.length||0}))})),requirements:fixedScope.requirements.map(item=>({id:item.id,pages:item.pages,source:{type:item.source.type,reference:item.source.reference}}))}:fixedScope;
-  return {status:structure.status==='passed'?'ready':'failed',operation:'state',readOnly:true,directory,id:meta.id,revision:current.revision,candidateDigest:current.digest,inputDigest:current.inputDigest,identity:current.identity,instanceId:meta.instanceId,scopes,structure,...(generation?{generation}:{}),design,build,browser,devtoolsReview,execution,delivery,browserRuntime:runtime,ownership,verification:meta.verification,review,nextAction:meta.runtime.executionPolicy&&execution.status==='failed'?'resolve-execution-evidence':nextAction,commands,notes:['Design decisions and real provider queries remain the executing role responsibility.','Use the printed commands; no source-code inspection is required to recover flags or digests.','A missing browser provider requires an existing Playwright module path; no automatic install or global changes.','Legacy invocation fields retain their original meaning. New policy checks are reported separately in execution; native-source correlation is not tamper-proof attestation.']};
+  return {status:structure.status==='passed'?'ready':'failed',operation:'state',readOnly:true,directory,id:meta.id,revision:current.revision,candidateDigest:current.digest,inputDigest:current.inputDigest,identity:current.identity,instanceId:meta.instanceId,scopes,structure,...(generation?{generation}:{}),design,build,browser,devtoolsReview,execution,delivery,browserRuntime:runtime,ownership,verification:meta.verification,review,nextAction,commands,notes:['Design decisions and real provider queries remain the executing role responsibility.','Use the printed prototype commands; installed Hooks execute automatically.','A missing browser provider requires an existing Playwright module path; no automatic install or global changes.','Legacy execution commands remain available for compatibility; prototype work does not require manual binding or Hook diagnosis.']};
 }
 
 function finalize(directory,options,lib) {
@@ -85,7 +86,7 @@ function finalize(directory,options,lib) {
     const delivery={schemaVersion:1,status:'complete',operation:'finalize',id:meta.id,revision:before.revision,candidateDigest:before.digest,inputDigest:before.inputDigest,framework:meta.framework,template:meta.template,expertMode:meta.expertMode,expert:meta.expert.status,verification:'passed',review:review.status,checks:{structure:'passed',acceptance:'passed',build:'current',browser:'current'},buildId:report.buildId,buildDigest:report.buildDigest,report:latest.report,executor:report.executor,tool:report.tool,handoff:path.join(directory,'HANDOFF.md'),receipt:'qa/delivery.json',openQuestions:scope.openQuestions||[],humanConfirmationRequired:review.status!=='approved'};
     const execution=require('./execution-runtime.cjs').requireStage(directory,'delivery',lib);
     delivery.invocationVerification=execution.invocationVerification;delivery.tamperProof=false;
-    if(execution.status==='passed'){delivery.execution=execution;delivery.runId=execution.runId;delivery.policyDigest=execution.policyDigest;delivery.checks.execution='passed';delivery.executionEvidenceDigest=F.hash(fs.readFileSync(inside(directory,'qa/execution-evidence.json')));}
+    if(execution.status==='passed'){delivery.execution=execution;delivery.runId=execution.runId;delivery.policyDigest=execution.policyDigest;delivery.checks.execution='passed';delivery.executionEvidenceDigest=execution.association==='automatic'?F.hash(JSON.stringify(execution)):F.hash(fs.readFileSync(inside(directory,'qa/execution-evidence.json')));delivery.executionEvidenceSource=execution.association==='automatic'?'automatic-native-observation':'legacy-execution-evidence';}
     delivery.browserReportDigest=F.hash(fs.readFileSync(inside(directory,latest.report)));
     if(devtoolsReview.required){delivery.devtoolsReview=devtoolsReview.report;delivery.devtoolsReviewDigest=devtoolsReview.reportDigest;delivery.checks.devtoolsReview='current';delivery.invocationEvidence=execution.status==='passed'?'Native response IDs correlated with the configured host transcript; not tamper-proof.':'Verify actual Skill/MCP calls independently in the host transcript';}
     const start='<!-- native-delivery:start -->',end='<!-- native-delivery:end -->';

package/skills/i3-ui-prototype/scripts/native-files.cjs

@@ -28,8 +28,17 @@ function write(root,relative,value) {
   try { fs.writeFileSync(tmp,typeof value==='string'?value:JSON.stringify(value,null,2)+'\n',{flag:'wx'}); fs.renameSync(tmp,file); }
   finally { if(fs.existsSync(tmp)) fs.unlinkSync(tmp); }
 }
+function withLock(root,name,work) {
+  fs.mkdirSync(root,{recursive:true,mode:0o700});const lock=inside(root,name);let acquired=false;
+  for(let attempt=0;attempt<100;attempt++) {
+    try{fs.mkdirSync(lock);acquired=true;break;}
+    catch(error){if(error.code!=='EEXIST')throw error;Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,10);}
+  }
+  assert.ok(acquired,'Concurrent native audit update; no success recorded');
+  try{return work();}finally{fs.rmdirSync(lock);}
+}
 function entries(root,files) { return Object.fromEntries([...new Set(files)].sort().map(file=>[file,hash(fs.readFileSync(inside(root,file)))])); }
 const cacheRoots = new Set(['node_modules','dist','.vite','.git','coverage',...['app','starter'].flatMap(root=>['node_modules','dist','.vite','.git','coverage'].map(name=>`${root}/${name}`))]);
 // A source/public subdirectory named "dist", or an imported .log file, is still source.
 const excluded = (relative,name) => cacheRoots.has(relative) || name==='.DS_Store' || ['app/tsconfig.tsbuildinfo','starter/tsconfig.tsbuildinfo'].includes(relative);
-module.exports={fs,path,crypto,assert,hash,json,id,inside,walk,write,entries,excluded};
+module.exports={fs,path,crypto,assert,hash,json,id,inside,walk,write,withLock,entries,excluded};

package/skills/i3-ui-prototype/scripts/native-pilot.cjs

@@ -50,5 +50,10 @@ async function main(argv=process.argv.slice(2)) {
     default: throw new Error(`Unknown operation: ${operation}`);
   }
 }
-if(require.main===module) main().then(result=>{if(result!==null){process.stdout.write(JSON.stringify(result,null,2)+'\n');if(result.status==='failed')process.exitCode=1;}}).catch(error=>{process.stderr.write(JSON.stringify({status:'failed',operation:process.argv[2]||'analyze',errors:[error.message]})+'\n');process.exitCode=1;});
+function capture(result,exitCode){
+ const args=process.argv.slice(2),at=args.indexOf('--project');let project=at>=0&&args[at+1]?path.resolve(args[at+1]):process.cwd();
+ const target=args[1];if(target&&path.isAbsolute(target)&&target.includes(path.sep+'prototypes'+path.sep))project=target.slice(0,target.indexOf(path.sep+'prototypes'+path.sep));
+ require('./ptc-callbacks.cjs').captureResult({script:__filename,argv:args,project,result,exitCode});
+}
+if(require.main===module) main().then(result=>{if(result!==null){const code=result.status==='failed'?1:0;capture(result,code);process.stdout.write(JSON.stringify(result,null,2)+'\n');process.exitCode=code;}}).catch(error=>{const result={status:'failed',operation:process.argv[2]||'analyze',errors:[error.message]};try{capture(result,1);}catch{/* The primary failure remains authoritative. */}process.stderr.write(JSON.stringify(result)+'\n');process.exitCode=1;});
 module.exports={main};

package/skills/i3-ui-prototype/scripts/native-tool-name.cjs

@@ -0,0 +1,5 @@
+'use strict';
+// Observed Buddy tool aliases only. Preserve original blocks for digest checks.
+const aliases=Object.freeze({use_skill:'Skill',skill:'Skill',execute_command:'Bash',write_to_file:'Write',read_file:'Read',replace_in_file:'Edit'});
+const toolName=name=>Object.hasOwn(aliases,name)?aliases[name]:name;
+module.exports={toolName};

package/skills/i3-ui-prototype/scripts/native-tool-result.cjs

@@ -0,0 +1,14 @@
+#!/usr/bin/env node
+'use strict';
+// Capture a real read-only query result when the host's Bash callback omits stdout.
+const fs=require('node:fs'),path=require('node:path'),assert=require('node:assert/strict'),{spawnSync}=require('node:child_process');
+const J=require('./ptc-callbacks.cjs');
+function main(argv=process.argv.slice(2)){
+ const args=[...argv];assert.equal(args.shift(),'--project','Explicit query project required');const project=fs.realpathSync(args.shift());assert.equal(args.shift(),'--','Separate the executable and its arguments');
+ const executable=args.shift();assert.ok(path.isAbsolute(executable)&&fs.statSync(executable).isFile(),'Use the detected absolute local executable; this command does not install tools');
+ const run=spawnSync(executable,args,{cwd:project,encoding:'utf8',timeout:30000,maxBuffer:8*1024*1024});
+ const result={type:'execute_command_result',exitCode:run.status??1,stdout:run.stdout||'',stderr:run.stderr||'',...(run.error?{error:run.error.message}:{})};
+ J.captureResult({script:__filename,argv,project,result,exitCode:result.exitCode});return result;
+}
+module.exports={main};
+if(require.main===module)try{const result=main();process.stdout.write(JSON.stringify(result)+'\n');process.exitCode=result.exitCode;}catch(error){process.stderr.write(JSON.stringify({status:'failed',errors:[error.message]})+'\n');process.exitCode=1;}

package/skills/i3-ui-prototype/scripts/prototype-dependencies.cjs

@@ -99,5 +99,5 @@ async function main(argv = process.argv.slice(2)) {
   return operation === 'check' ? check(options) : operation==='query'?query(options):require('./optional-skill-install.cjs').install(options);
 }
 module.exports = { check, skillAt, antdvTool, query, parse, main };
-if (require.main === module) main().then(result => {process.stdout.write(JSON.stringify(result, null, 2) + '\n');if(result.status==='failed')process.exitCode=1;})
+if (require.main === module) main().then(result => {const {options}=parse(process.argv.slice(2));require('./ptc-callbacks.cjs').captureResult({script:__filename,argv:process.argv.slice(2),project:path.resolve(options.project||process.cwd()),result,exitCode:result.status==='failed'?1:0});process.stdout.write(JSON.stringify(result, null, 2) + '\n');if(result.status==='failed')process.exitCode=1;})
   .catch(error => { process.stderr.write(JSON.stringify({ status: 'failed', errors: [error.message] }) + '\n'); process.exitCode = 1; });

package/skills/i3-ui-prototype/scripts/prototype-hooks.cjs

@@ -56,8 +56,9 @@ function check(options,runtime={}) {
   const entries=runtime.entries||[];
   if(!runtime.entries&&fs.existsSync(parent))for(const name of fs.readdirSync(parent)) {
    if(!/^[a-f0-9]{24}$/.test(name))continue;
-   const raw=R.fileIO.read(path.join(parent,name,'session.json'));if(!raw)continue;
-   entries.push(...Object.values(JSON.parse(raw).bindings||{}));
+   const raw=R.fileIO.read(path.join(parent,name,'session.json'));
+   if(raw)entries.push(...Object.values(JSON.parse(raw).bindings||{}));
+   const observed=R.fileIO.read(path.join(parent,name,'observation.json'));if(observed)entries.push(JSON.parse(observed));
   }
   for(const entry of entries)if((entry.host||'codebuddy')===host&&entry.project===current.project&&entry.registrationDigest===record.registrationDigest&&entry.settingsDigest===record.settingsDigest&&(!observation||entry.lastHook.at>observation.lastHook.at))observation=entry;
   if(observation) {
@@ -68,9 +69,12 @@ function check(options,runtime={}) {
    result.observation={sessionId:observation.sessionId,projectKey:observation.projectKey,runId:observation.runId,event:observation.lastHook.event,at:observation.lastHook.at};
    const observedProduct=observation.product||(record.product!=='auto'?record.product:null);
    assert.ok(['ide','cli'].includes(observedProduct),'Observed native product identity missing');
-   Object.assign(result,{product:observedProduct,productVersion:observation.productVersion||'unreported',effective:effectiveByProduct[observedProduct]===true,identitySource:observation.identitySource||'legacy-profile',recovery:observation.recovery||null});
+   Object.assign(result,{product:observedProduct,productVersion:observation.productVersion||'unreported',effective:effectiveByProduct[observedProduct]===true,identitySource:observation.identitySource||'legacy-profile',recovery:observation.recovery||null,...(observation.callMode?{callMode:observation.callMode,skills:observation.skills}:{})});
   }
   const recent=observation&&Date.now()-Date.parse(observation.lastHook.at)>=0&&Date.now()-Date.parse(observation.lastHook.at)<30*60*1000;
+  const failure=require('./execution-diagnostics.cjs').latest({base:current.base,project:current.project,host,record});
+  if(failure&&(!observation||failure.at>=observation.lastHook.at))return {...result,status:'failed',failure,errors:[failure.reason],transcript:{...result.transcript,status:'failed',invocationVerified:false},
+   next:failure.status==='blocked'?'修复宿主或适配后，由用户发起新的继续任务；只读诊断不消耗恢复次数。':'按 failure.reason 检查当前宿主协议；最多两次补调，不能将注册状态当作执行成功。'};
   return {...result,status:result.effective&&recent?'active':record.product==='cli'?'pending-host-review':'registered',
    activationScope:'Only the displayed project/session/configuration and adapter bytes; not all projects or business acceptance',
    next:'CLI: review /hooks; desktop: reload. Verify an actual Skill invocation and missing-Skill recovery in the chosen host.'};

package/skills/i3-ui-prototype/scripts/ptc-callbacks.cjs

@@ -0,0 +1,131 @@
+'use strict';
+// Native Pre/Post callbacks are the evidence. REPL source and claimed returns are never interpreted.
+const fs=require('node:fs'),path=require('node:path'),assert=require('node:assert/strict');
+const F=require('./native-files.cjs'),E=require('./execution-evidence.cjs'),C=require('./codebuddy-context.cjs'),P=require('./execution-policy.cjs');
+const {toolName}=require('./native-tool-name.cjs');
+const canonical=x=>Array.isArray(x)?x.map(canonical):x&&typeof x==='object'?Object.fromEntries(Object.keys(x).sort().map(k=>[k,canonical(x[k])])):x;
+const digest=x=>E.sha(JSON.stringify(canonical(x)));
+const fileFor=(record,project,sessionId)=>path.join(C.sessionDirectory(record,project,sessionId),'ptc-callbacks.json');
+function load(file){
+ if(!fs.existsSync(file))return null;
+ assert.ok(!fs.lstatSync(file).isSymbolicLink()&&fs.statSync(file).size<=64*1024*1024,'Invalid PTC callback journal');return JSON.parse(fs.readFileSync(file,'utf8'));
+}
+function locked(file,work){
+ const folder=path.dirname(file);fs.mkdirSync(folder,{recursive:true,mode:0o700});const lock=file+'.lock';let acquired=false;
+ for(let n=0;n<40;n++){try{fs.mkdirSync(lock);acquired=true;break;}catch(error){if(error.code!=='EEXIST')throw error;Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,10);}}
+ assert.ok(acquired,'Concurrent native PTC callback; retry without inventing evidence');
+ try{return work();}finally{fs.rmdirSync(lock);}
+}
+function validate(store,source,{record,project,sessionId}){
+ assert.equal(store.schemaVersion,1,'Unsupported PTC callback schema');assert.equal(store.sessionId,sessionId,'PTC callback session differs');assert.equal(store.project,project,'PTC callback project differs');
+ assert.equal(store.registrationDigest,record.registrationDigest,'PTC callback registration digest changed');assert.equal(store.settingsDigest,record.settingsDigest,'PTC callback settings digest changed');
+ assert.equal(store.sourcePath,source.path,'PTC native transcript path changed');
+ assert.ok(Number.isSafeInteger(store.sequence)&&store.sequence>=0&&store.sequence<900000,'Invalid native callback sequence');
+ const sequences=new Set();
+ const sequence=value=>{assert.ok(Number.isSafeInteger(value)&&value>0&&value<=store.sequence&&!sequences.has(value),'Invalid or duplicate native callback sequence');sequences.add(value);};
+ for(const [id,item] of Object.entries(store.calls)) {
+  assert.equal(item.id,id,'Native callback call ID changed');assert.equal(item.sessionId,sessionId,'Native callback call session changed');
+  assert.equal(digest(item.pre),digest({id:item.id,name:item.name,input:item.input,sessionId:item.sessionId,parentId:item.parentId,cwd:item.cwd}),'Native callback request changed');
+  sequence(item.preSequence);
+  if(item.post){sequence(item.postSequence);assert.ok(item.postSequence>item.preSequence,'Native callback Post must follow Pre');}
+  else assert.equal(item.postSequence,undefined,'Native callback result sequence without a result');
+ }
+ for(const parent of Object.values(store.parents)){
+  const call=source.calls.find(c=>c.toolCallId===parent.toolCallId);
+  assert.ok(call?.name==='REPL'&&call.sessionId===sessionId,'Native parent REPL request missing or session differs');
+  assert.equal(call.requestDigest,parent.requestDigest,'Native parent request digest changed');assert.equal(call.requestLine,parent.requestLine,'Native parent request cursor changed');
+  assert.ok(source.prompts.some(p=>p.line===parent.promptLine&&p.digest===parent.promptDigest),'Native parent task source changed');
+ }
+}
+function read(source,{record,project,sessionId}){
+ source={...source,calls:source.calls.filter(c=>c.evidenceSource!=='native-hook-callback')};
+ const store=load(fileFor(record,project,sessionId));if(!store)return source;
+ validate(store,source,{record,project,sessionId});
+ const inner=[];
+ for(const item of Object.values(store.calls)){
+  const parent=store.parents[item.parentId];assert.ok(parent,'PTC parent callback anchor missing');
+  const name=toolName(item.name),input=item.input,skillName=name==='Skill'?input?.skill||input?.name||input?.command:null;
+  assert.ok(!source.calls.some(c=>c.toolCallId===item.id),'Duplicate native inner tool call ID');
+  const call={toolCallId:item.id,name,input,skillName:skillName||null,skill:P.skillKey(skillName),sessionId,cwd:item.cwd,contextLine:parent.contextLine,promptLine:parent.promptLine,
+   requestLine:parent.requestLine+item.preSequence/1e6,requestDigest:digest(item.pre),success:false,parentToolCallId:item.parentId,evidenceSource:'native-hook-callback'};
+  if(item.post){
+   let result=item.post.response;
+   if(item.cliResult){
+    const value=item.cliResult;assert.equal(E.sha(fs.readFileSync(value.script)),value.scriptDigest,'Captured CLI script bytes changed');
+    assert.equal(value.inputDigest,digest(item.input),'Captured CLI input differs');
+    assert.equal(item.post.response?.exitCode,value.exitCode,'Native Bash exit differs from captured CLI result');
+    result={type:'execute_command_result',stdout:typeof value.result==='string'?value.result:JSON.stringify(value.result),exitCode:value.exitCode};
+   }
+   call.result=result;call.resultLine=parent.requestLine+item.postSequence/1e6;call.resultDigest=digest({post:item.post,cliResult:item.cliResult||null});
+   call.success=!item.denied&&!result?.interrupted&&!result?.sandboxDenied&&!result?.signal&&E.successful({content:result});
+  }
+  inner.push(call);
+ }
+ return {...source,calls:[...source.calls,...inner].sort((a,b)=>a.requestLine-b.requestLine),callMode:'ptc-repl',callbackJournal:{path:fileFor(record,project,sessionId),digest:digest(store),tamperProof:false}};
+}
+function observe({payload,record,project,source}){
+ const sessionId=payload.session_id,name=toolName(payload.tool_name),id=payload.tool_use_id||payload.call_id;
+ assert.ok(sessionId&&id,'Native PTC session and tool call ID required');
+ assert.ok(!payload.agent_id&&!payload.parent_agent_id,'PTC main task cannot inherit subagent callbacks');
+ assert.ok(source.calls.every(c=>c.sessionId===sessionId),'Native PTC callback session differs');
+ const task=source.prompts.at(-1);assert.ok(task,'Native PTC user task missing');
+ const candidates=source.calls.filter(c=>c.name==='REPL'&&!c.resultLine&&c.requestLine>task.line&&c.contextLine===source.contextLine);
+ const direct=source.calls.find(c=>c.toolCallId===id);
+ if(direct&&!direct.evidenceSource&&direct.name!=='REPL')return source;
+ if(name==='REPL'&&payload.hook_event_name==='PostToolUse'&&direct?.name==='REPL')return read(source,{record,project,sessionId});
+ assert.equal(candidates.length,1,'Native PTC callback requires a unique pending parent REPL');
+ const parent=candidates[0],file=fileFor(record,project,sessionId);
+ locked(file,()=>{
+  const store=load(file)||{schemaVersion:1,sessionId,project,sourcePath:source.path,registrationDigest:record.registrationDigest,settingsDigest:record.settingsDigest,sequence:0,parents:{},calls:{}};
+  validate(store,source,{record,project,sessionId});
+  const next=()=>{assert.ok(++store.sequence<900000,'Native PTC callback journal limit reached');return store.sequence;};
+  if(name==='REPL'){
+   assert.equal(id,parent.toolCallId,'Native outer REPL call differs');assert.equal(digest(payload.tool_input||{}),digest(parent.input),'Native outer REPL input differs');
+   if(payload.hook_event_name==='PreToolUse')store.parents[id]||={toolCallId:id,requestDigest:parent.requestDigest,requestLine:parent.requestLine,promptLine:task.line,promptDigest:task.digest,contextLine:source.contextLine};
+  }else{
+   assert.ok(store.parents[parent.toolCallId],'Native parent PreToolUse callback missing');
+   const input=payload.tool_input||{},pre={id,name,input,sessionId,parentId:parent.toolCallId,cwd:payload.cwd};
+   if(payload.hook_event_name==='PreToolUse'){
+    if(store.calls[id])assert.equal(digest(store.calls[id].pre),digest(pre),'Conflicting native PTC call input or parent changed');
+    else store.calls[id]={...pre,pre,preSequence:next()};
+   }else if(payload.hook_event_name==='PostToolUse'){
+    const item=store.calls[id];assert.ok(item,'Paired native PTC PreToolUse request missing');assert.equal(digest(item.pre),digest(pre),'Native PTC Post input differs');
+    assert.ok(Object.hasOwn(payload,'tool_response'),'Native PTC Post response missing');const post={response:payload.tool_response};
+    if(item.post)assert.equal(digest(item.post),digest(post),'Conflicting native PTC Post result changed');
+    else {item.post=post;item.postSequence=next();}
+   }
+  }
+  F.write(path.dirname(file),path.basename(file),store);fs.chmodSync(file,0o600);
+ });
+ return read(source,{record,project,sessionId});
+}
+function captureResult({script,argv,project=process.cwd(),result,exitCode}){
+ // Only an actually running first-party entry may capture stdout. Match its exact pending native command.
+ const candidates=[path.join(project,'.codebuddy')];let folder=path.dirname(script);
+ for(let n=0;n<5;n++,folder=path.dirname(folder))candidates.push(folder);
+ const global=C.globalBase();candidates.push(global);
+ const matches=[];
+ for(const base of [...new Set(candidates)]){
+  if(!fs.existsSync(path.join(base,'state/i3-prototype/installation.json')))continue;
+  const record=C.registration(base),parent=path.join(base,'state/i3-prototype',C.projectKey(project));if(!fs.existsSync(parent))continue;
+  for(const session of fs.readdirSync(parent)){
+   if(!/^[a-f0-9]{24}$/.test(session))continue;const file=path.join(parent,session,'ptc-callbacks.json'),store=load(file);if(!store)continue;
+   if(store.registrationDigest!==record.registrationDigest||store.project!==project)continue;
+   for(const item of Object.values(store.calls)){
+    if(item.name!=='Bash'||item.post||item.cliResult)continue;
+    const tokens=require('./native-command.cjs').tokens(item.input?.command);
+    if(!tokens||tokens.length!==argv.length+2||digest(tokens.slice(2))!==digest(argv))continue;
+    const cwd=item.cwd||project,real=file=>{try{return fs.realpathSync(file);}catch{return null;}};
+    const executable=tokens[0].includes(path.sep)?path.resolve(cwd,tokens[0]):(process.env.PATH||'').split(path.delimiter).map(dir=>path.resolve(cwd,dir,tokens[0])).find(file=>{try{fs.accessSync(file,fs.constants.X_OK);return fs.statSync(file).isFile();}catch{return false;}});
+    if(executable&&real(executable)===real(process.execPath)&&real(path.resolve(cwd,tokens[1]))===real(script))matches.push({file,item});
+   }
+  }
+ }
+ if(!matches.length)return false;assert.equal(matches.length,1,'Captured CLI result has multiple pending native requests');
+ const {file,item}=matches[0];locked(file,()=>{
+  const store=load(file),current=store.calls[item.id];assert.ok(current&&!current.post&&!current.cliResult,'Captured CLI callback changed');
+  current.cliResult={script,scriptDigest:E.sha(fs.readFileSync(script)),argv,inputDigest:digest(current.input),result,exitCode,at:new Date().toISOString()};
+  F.write(path.dirname(file),path.basename(file),store);
+ });return true;
+}
+module.exports={observe,read,captureResult};