@givolt/i3-composer-agent 2.3.5 → 2.3.7

package/skills/i3-ui-prototype/scripts/codebuddy-hook.cjs

@@ -19,7 +19,11 @@ function eventCall(payload,source) {
   // pending call remains unsuccessful until a native result is persisted.
   return source.format==='codebuddy-ide-index-v1'&&H.isIDE(payload)&&typeof payload.generation_id==='string'&&call.nativeRequestId===payload.generation_id&&!call.resultLine&&partial(call.input,payload.tool_input||{});
  });
- const current=payload.hook_event_name==='PreToolUse'?matches.filter(call=>!call.resultLine):matches;
+ // IDE can omit the call ID and invoke Post before persisting the result.
+ // A failed earlier attempt can have identical args; only the still-pending
+ // request in this exact generation can be the current callback.
+ const pending=matches.filter(call=>!call.resultLine);
+ const current=payload.hook_event_name==='PreToolUse'||source.format==='codebuddy-ide-index-v1'&&pending.length?pending:matches;
  assert.equal(current.length,1,'Native Hook event does not uniquely match the current transcript request');return current[0];
 }
 function eventSource(payload,record,project,{readSource=C.source,pause=milliseconds=>Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,milliseconds)}={}) {
@@ -27,10 +31,13 @@ function eventSource(payload,record,project,{readSource=C.source,pause=milliseco
  // IDE can persist the current call only AFTER returning from both Hooks. Its
  // current native prompt/generation still binds the callback. Never synthesize
  // a successful call; A checks the persisted request/result at a later stage.
- const attempts=toolEvent&&record.product==='ide'&&H.isIDE(payload)?8:1;
+ const attempts=toolEvent?8:1;
  for(let attempt=1;attempt<=attempts;attempt++) {
   try {
-   const source=readSource(payload,record,project);
+   let source=readSource(payload,record,project);
+   if(toolEvent&&record.product==='cli'&&(payload.agent_type==='ptc'||source.calls.some(c=>c.name==='REPL'&&!c.resultLine))){
+    source=require('./ptc-callbacks.cjs').observe({payload,record,project,source});
+   }
    let nativeRequestStatus='not-tool-event';
    if(toolEvent) {
     if(source.format==='codebuddy-ide-index-v1'&&record.product==='ide'&&H.isIDE(payload)) {
@@ -45,30 +52,30 @@ function eventSource(payload,record,project,{readSource=C.source,pause=milliseco
   }catch(error){if(attempt===attempts)throw error;pause(100);}
  }
 }
-function decision({event,source,binding,tool,input,directory,cwd,deliveryCurrent,stopHookActive=false,policy}) {
- if(C.readOnly(source.prompts.at(-1)?.text||''))return {continue:true,reason:'latest-user-read-only'};
+function decision({event,source,binding,tool,input,directory,cwd,deliveryCurrent,stopHookActive=false,policy,restricted}) {
+ if(restricted??C.restriction(source.prompts).blocked)return {continue:true,reason:'user-read-only-or-stopped'};
  if(event==='PreToolUse'&&G.uiWrite({name:tool,input:input||{},cwd},directory)) {
   const missing=Recovery.missing({source,binding,policy});
-  if(missing.length)return {deny:true,missing,reason:'原型 UI 写入已被阻止。'+Recovery.instruction(missing,{directory})};
+  if(missing.length)return {deny:true,missing,reason:'原型 UI 写入已被阻止。'+Recovery.instruction(missing,{directory,automatic:binding?.association==='automatic'})};
  }
  const final=source.latestAssistant||'',claim=/(?:已完成|已经完成|全部通过|可以交付|\b(?:completed|ready for review|all checks passed)\b)/i.test(final)&&!/(?:未完成|尚未|待验证|阻塞|等待|进度|blocked|awaiting|not complete|in progress)/i.test(final);
  const blocked=/(?:\bblocked\b|无法继续|当前阻塞|等待用户|等待授权)/i.test(final);
  if(event==='Stop'&&binding&&!deliveryCurrent&&!blocked&&(policy?.id===P.AUTO_ID||!stopHookActive)&&claim){
   const missing=Recovery.missing({source,binding,policy,stage:'delivery'});if(!missing.length)missing.push('execution-evidence');
-  return {feedback:true,missing,reason:'当前原型没有有效交付回执。'+Recovery.instruction(missing,{directory})};
+  return {feedback:true,missing,reason:'当前原型没有有效交付回执。'+Recovery.instruction(missing,{directory,automatic:binding?.association==='automatic'})};
  }
  return {continue:true};
 }
-function prototypeForWrite(project,tool,input) {
+function prototypeForWrite(project,tool,input,cwd=project) {
  if(!['Write','Edit','MultiEdit','write_to_file','replace_in_file'].includes(tool))return null;
  const file=input?.file_path||input?.filePath||input?.path||input?.TargetFile;if(typeof file!=='string')return null;
- let current=path.dirname(path.resolve(project,file));const prototypes=path.join(project,'prototypes');
+ let current=path.dirname(path.resolve(cwd,file));const prototypes=path.join(project,'prototypes');
  while(current.startsWith(prototypes+path.sep)){if(fs.existsSync(path.join(current,'prototype.json')))return fs.realpathSync(current);current=path.dirname(current);}return null;
 }
 function safeProject(payload,options={},env=process.env,real=file=>fs.realpathSync(file),callbackCwd=process.cwd(),workspace=E.ideWorkspace) {
  const ideRoot=options.product==='ide'&&H.isIDE(payload)&&payload.cwd==='/';
  const hostProject=options.host==='workbuddy'?env.WORKBUDDY_PROJECT_DIR:env.CODEBUDDY_PROJECT_DIR;
- const root=options.scope==='project'?path.dirname(options.base):ideRoot?workspace(payload.transcript_path,payload.session_id):hostProject||env.CLAUDE_PROJECT_DIR||payload.cwd||(payload.hook_event_name==='SessionStart'?callbackCwd:null);assert.ok(root&&path.isAbsolute(root),'Native project directory required');
+ const root=options.scope==='project'?path.dirname(options.base):options.nativeProject|| (ideRoot?workspace(payload.transcript_path,payload.session_id):hostProject||env.CLAUDE_PROJECT_DIR||payload.cwd||(payload.hook_event_name==='SessionStart'?callbackCwd:null));assert.ok(root&&path.isAbsolute(root),'Native project directory required');
  const project=real(root);
  // IDE 4.12.2 reports '/' for absolute-path tools. Use the project registration
  // or session-bound native workspace above; reject all other outside cwd.
@@ -81,20 +88,41 @@ function saveIndex(directory,index) {
 function toolCwd(payload,record,project) {
  return record.product==='ide'&&H.isIDE(payload)&&payload.cwd==='/'?project:payload.cwd||project;
 }
-function handle(payload,options) {
+function settleNativeRetries(index,source,{project,sessionId}) {
+ let changed=false;
+ for(const entry of Object.values(index.bindings)) {
+  const repair=entry.recovery,expected=repair?.expectedRetry;
+  if(!expected||!['required','ready-to-retry'].includes(repair.status)||entry.contextLine!==source.contextLine)continue;
+  const matches=source.calls.filter(call=>{
+   if(!call.success||!call.resultLine||call.sessionId!==sessionId||call.requestLine<=entry.entryLine||source.stableThroughLine!==undefined&&call.resultLine>source.stableThroughLine)return false;
+   if(expected.kind==='ui-write') {
+    const input=call.input||{},file=input.file_path||input.filePath||input.path||input.TargetFile;
+    return typeof file==='string'&&path.resolve(call.cwd||project,file)===expected.file&&G.uiWrite({...call,cwd:call.cwd||project},entry.directory);
+   }
+   const parsed=nativeCommand(call.name,call.input,call.cwd||project);
+   return expected.kind==='stage'&&parsed?.root===entry.directory&&parsed.operation===expected.operation;
+  });
+  for(const call of matches) {
+   const stage=expected.kind==='stage'?expected.stage:null;
+   if(stage&&X.check(entry.directory,stage,require('./native-pilot-lib.cjs')).status!=='passed')continue;
+   const retry={...expected,toolCallId:call.toolCallId,resultDigest:call.resultDigest,requestLine:call.requestLine,resultLine:call.resultLine};
+   const answer=Recovery.record(index,{source,sessionId,directory:entry.directory,event:'PostToolUse',eventKey:E.sha(JSON.stringify(['persisted-native-result',call.toolCallId,call.resultDigest])),stage,policy:X.policy(entry.directory),resolved:stage?['execution-evidence']:[],retrySucceeded:true,retry},{continue:true});
+   if(answer.recovery&&JSON.stringify(answer.recovery)!==JSON.stringify(entry.recovery)){entry.recovery=answer.recovery;changed=true;}
+   if(entry.recovery?.status==='recovered')break;
+  }
+ }
+ return changed;
+}
+function dispatch(payload,options) {
  payload={...payload,tool_name:toolName(payload.tool_name)};
  assert.equal(payload.hook_event_name,options.event,'Hook event mismatch');
  if(options.event==='SessionStart')return {continue:true};
- if(options.event==='UserPromptSubmit'){
-  const prompt=payload.prompt||'';
-  if(!C.readOnly(prompt)&&(/\/i3-prototype\b(?!\s+(?:analyze|inspect|confirm-baseline))/.test(prompt)||/(?:生成|实现|创建|修订|修改|继续).{0,16}原型|(?:create|revise|implement).{0,20}prototype/i.test(prompt)))return {continue:true,context:'原型实施：先 execution-begin，再实际调用 i3-frontend-ui-engineering；使用 antDv 时加载 antdv 并通过 prototype-deps query 或检测出的本地 Node 入口查询组件。专业模式还须实际调用 UIUX。成功返回后再实施；收到原型门禁拒绝时按明确缺项补调并重试，不能留到下次修订。'};
-  return {continue:true};
- }
+ if(options.event==='UserPromptSubmit')return {continue:true};
  let identity,installed;
  try{installed=options.product==='auto'?C.registration(options.base):null;identity=H.identify(payload,installed||{schemaVersion:1,product:options.product},options);}catch(error){
   const project=options.scope==='project'?path.dirname(options.base):payload.cwd;
   if(options.event==='PreToolUse'&&project&&path.isAbsolute(project)){
-   const native=nativeCommand(payload.tool_name,payload.tool_input,project),target=native?.root||prototypeForWrite(project,payload.tool_name,payload.tool_input);
+   const native=nativeCommand(payload.tool_name,payload.tool_input,payload.cwd||project),target=native?.root||prototypeForWrite(project,payload.tool_name,payload.tool_input,payload.cwd==='/'?project:payload.cwd||project);
    if(target&&fs.existsSync(path.join(target,'prototype.json'))&&X.policy(target))return {deny:true,reason:'原型原生宿主身份尚未核验，禁止受管写入或阶段推进：'+error.message};
   }
   throw error;
@@ -107,26 +135,32 @@ function handle(payload,options) {
  try {
   source=eventSource(payload,record,project);
  }catch(error){
-  const target=options.event==='PreToolUse'?prototypeForWrite(project,payload.tool_name,payload.tool_input):null;
-  if(target&&X.policy(target)&&G.uiWrite({name:payload.tool_name,input:payload.tool_input,cwd},target))return {deny:true,reason:`Native evidence unavailable for strict prototype UI write: ${error.message}`};
+  // The outer diagnostic handler must persist and bound this failure as well;
+  // returning an uncounted denial here used to create an endless repair loop.
   throw error;
  }
  const latest=source.prompts.at(-1);
- if(C.readOnly(latest.text)) {
-  const native=nativeCommand(payload.tool_name,payload.tool_input,cwd),root=native?.root||prototypeForWrite(project,payload.tool_name,payload.tool_input);
+ if(options.restricted??C.restriction(source.prompts).blocked) {
+  const native=nativeCommand(payload.tool_name,payload.tool_input,cwd),root=native?.root||prototypeForWrite(project,payload.tool_name,payload.tool_input,cwd);
   if(options.event==='PreToolUse'&&(native&&['create','execution-begin','build','revise','replan','record-run','record-devtools-review','finalize'].includes(native.operation)||root&&X.policy(root)&&G.uiWrite({name:payload.tool_name,input:payload.tool_input,cwd},root)))return {deny:true,reason:'The latest user request is read-only or stopped; no prototype mutation is authorized.'};
   return {continue:true};
  }
  const stateDirectory=C.sessionDirectory(record,project,payload.session_id),file=path.join(stateDirectory,'session.json');
- const index=JSON.parse(C.read(file)||'{"schemaVersion":1,"bindings":{}}');assert.equal(index.schemaVersion,1,'Unsupported audit session state');
+ let index=JSON.parse(C.read(file)||'{"schemaVersion":1,"bindings":{}}');assert.equal(index.schemaVersion,1,'Unsupported audit session state');
+ if(Object.values(index.bindings).some(entry=>['required','ready-to-retry'].includes(entry.recovery?.status))) {
+  const lock=path.join(stateDirectory,'.audit.lock');fs.mkdirSync(stateDirectory,{recursive:true});
+  try{fs.mkdirSync(lock);}catch{throw new Error('Concurrent audit callback; retry the original operation');}
+  try{index=JSON.parse(C.read(file));if(settleNativeRetries(index,source,{project,sessionId:payload.session_id}))saveIndex(stateDirectory,index);}
+  finally{fs.rmdirSync(lock);}
+ }
  const command=nativeCommand(payload.tool_name,payload.tool_input,cwd);
  if(options.event==='PreToolUse'&&command?.operation==='create'&&(installed?.schemaVersion===2||E.loaded(source.calls,'prototype').some(c=>c.requestLine>source.contextLine)||/^\s*\/i3-prototype\b/.test(latest.text))){
   const at=command.argv.indexOf('--execution-policy'),expected=installed?.schemaVersion===2?P.AUTO_ID:P.ID;
   const hostAt=command.argv.indexOf('--host');
   if(at<0||command.argv[at+1]!==expected||installed?.schemaVersion===2&&(hostAt<0||command.argv[hostAt+1]!==identity.host))return {deny:true,reason:`New ${identity.host} prototypes require --host ${identity.host} --execution-policy ${expected} and fixed --execution-assertions. Existing artifacts keep their original contracts.`};
  }
- const directory=command?.root||prototypeForWrite(project,payload.tool_name,payload.tool_input);
- const existing=directory?index.bindings[directory]:null;
+ const directory=command?.root||prototypeForWrite(project,payload.tool_name,payload.tool_input,cwd);
+ let existing=directory?index.bindings[directory]:null;
  const stage=options.event==='Stop'?'delivery':stageFor[command?.operation];
  let callbackCall=null;if(['PreToolUse','PostToolUse'].includes(options.event))try{callbackCall=eventCall(payload,source);}catch{/* Deferred IDE requests cannot attest results. */}
  const callId=payload.tool_use_id||payload.call_id||callbackCall?.toolCallId;
@@ -145,43 +179,48 @@ function handle(payload,options) {
   try{const fresh=JSON.parse(C.read(file)||'{"schemaVersion":1,"bindings":{}}');const result=Recovery.record(fresh,recoveryContext(directory),answer);if(fresh.bindings[directory]&&result.recovery)fresh.bindings[directory].recovery=result.recovery;saveIndex(stateDirectory,fresh);return result;}
   finally{fs.rmdirSync(lock);}
  };
- if(options.event==='PreToolUse'&&command?.operation==='execution-begin') {
+ const automatic=options.event==='PreToolUse'&&directory&&fs.existsSync(path.join(directory,'prototype.json'))&&X.policy(directory)&&
+  (command||G.uiWrite({name:payload.tool_name,input:payload.tool_input||{},cwd},directory))&&command?.operation!=='execution-begin'&&
+  (!existing||existing.contextLine!==source.contextLine||existing.registrationDigest!==record.registrationDigest||existing.settingsDigest!==record.settingsDigest||existing.inputDigest!==require('./native-pilot-lib.cjs').manifest(directory).inputDigest);
+ if(options.event==='PreToolUse'&&command?.operation==='execution-begin'||automatic) {
   assert.ok(directory&&directory.startsWith(path.join(project,'prototypes')+path.sep),'Prototype must be in this project');
   const fixed=X.policy(directory);assert.ok(fixed,'Existing prototype retains its original contract; do not rewrite it implicitly');
   assert.equal(fixed.host,identity.host,'This prototype has a fixed contract for another host; inspect it or explicitly migrate and revalidate, do not inherit its invocation proof');
   const loaded=E.loaded(source.calls,'prototype').some(c=>c.requestLine>source.contextLine);
-  assert.ok(loaded||/^\s*\/i3-prototype\b/.test(latest.text),'Native prototype Skill or actual shortcut entry required');
+  assert.ok(automatic||loaded||/^\s*\/i3-prototype\b/.test(latest.text),'Native prototype Skill or actual shortcut entry required');
   const meta=F.json(path.join(directory,'prototype.json')),lib=require('./native-pilot-lib.cjs'),current=lib.manifest(directory);
-  const runId=existing&&existing.entryLine===latest.line&&existing.inputDigest===current.inputDigest&&existing.contextLine===source.contextLine?existing.runId:crypto.randomUUID();
-  index.bindings[directory]={schemaVersion:1,runId,sessionId:payload.session_id,project,projectKey:C.projectKey(project),directory,instanceId:meta.instanceId,policyDigest:fixed.digest,inputDigest:current.inputDigest,entryLine:latest.line,promptDigest:latest.digest,contextLine:source.contextLine,
+  const reuse=existing&&existing.inputDigest===current.inputDigest&&existing.contextLine===source.contextLine&&existing.registrationDigest===record.registrationDigest&&existing.settingsDigest===record.settingsDigest;
+  const runId=reuse?existing.runId:crypto.randomUUID();
+  index.bindings[directory]={schemaVersion:1,...(automatic?{association:'automatic'}:{}),runId,sessionId:payload.session_id,project,projectKey:C.projectKey(project),directory,instanceId:meta.instanceId,policyDigest:fixed.digest,inputDigest:current.inputDigest,entryLine:reuse?existing.entryLine:latest.line,promptDigest:reuse?existing.promptDigest:latest.digest,contextLine:source.contextLine,
    operation:meta.revision==='r001'?'create':'revise',host:identity.host,identitySource:identity.identitySource,product:record.product,productVersion:identity.productVersion,scope:record.scope,registrationDigest:record.registrationDigest,settingsDigest:record.settingsDigest,source:{path:source.path,bytes:source.bytes,digest:source.digest},lastHook:{event:options.event,at:new Date().toISOString(),nativeReadAttempts:source.nativeReadAttempts,nativeRequestStatus:source.nativeRequestStatus}};
   const lock=path.join(stateDirectory,'.audit.lock');fs.mkdirSync(stateDirectory,{recursive:true});
-  try{fs.mkdirSync(lock);}catch{throw new Error('Concurrent audit callback; retry execution-begin');}
+  try{fs.mkdirSync(lock);}catch{throw new Error('Concurrent audit callback; retry the original operation');}
   try {
    const fresh=JSON.parse(C.read(file)||'{"schemaVersion":1,"bindings":{}}');fresh.bindings[directory]=index.bindings[directory];
    saveIndex(stateDirectory,fresh);
    F.write(directory,'qa/execution-context.json',{schemaVersion:1,runId,sessionId:payload.session_id,project,base:record.base,host:identity.host,product:record.product});
   }finally{fs.rmdirSync(lock);}
-  return {continue:true};
+  existing=index.bindings[directory];
+  if(!automatic)return {continue:true};
  }
  if(directory&&fs.existsSync(path.join(directory,'prototype.json'))&&X.policy(directory)) {
-  const fixed=X.policy(directory),answer=decision({event:options.event,source,binding:existing,tool:payload.tool_name,input:payload.tool_input,directory,cwd,policy:fixed});
+  const fixed=X.policy(directory),answer=decision({event:options.event,source,binding:existing,tool:payload.tool_name,input:payload.tool_input,directory,cwd,policy:fixed,restricted:options.restricted});
   if(answer.deny)return respond(answer);
   if(options.event==='PostToolUse'&&command&&(command.operation==='execution-begin'||stage)){
    // IDE may not have persisted a callback's result yet. Only observed native
    // failures produce recovery feedback; outer tool success is insufficient.
    if(callbackCall?.resultLine&&!callbackCall.success){
     const missing=command.operation==='execution-begin'?['execution-begin']:['execution-evidence'];
-    return respond({feedback:true,missing,reason:`原型 ${command.operation} 实际返回失败，阶段尚未通过。`+Recovery.instruction(missing,{directory})});
+    return respond({feedback:true,missing,reason:`原型 ${command.operation} 实际返回失败，阶段尚未通过。`+Recovery.instruction(missing,{directory,automatic:existing?.association==='automatic'})});
    }
    if(command.operation==='execution-begin')return respond({continue:true});
   }
   if(options.event==='PreToolUse'&&command&&['build','record-run','record-devtools-review','finalize'].includes(command.operation)){
-   if(!completedBegin(source,existing))return respond({deny:true,missing:['execution-begin'],reason:Recovery.instruction(['execution-begin'],{directory})});
+   if(existing?.association!=='automatic'&&!completedBegin(source,existing))return respond({deny:true,missing:['execution-begin'],reason:Recovery.instruction(['execution-begin'],{directory})});
    const checked=X.check(directory,stage,require('./native-pilot-lib.cjs'));
    if(checked.status==='failed'){
     const missing=Recovery.missing({source,binding:existing,policy:fixed,stage});if(!missing.length)missing.push('execution-evidence');
-    return respond({deny:true,missing,reason:Recovery.instruction(missing,{directory})+' '+checked.errors.join('; ')});
+    return respond({deny:true,missing,reason:Recovery.instruction(missing,{directory,automatic:existing?.association==='automatic'})+' '+checked.errors.join('; ')});
    }
   }
   if(G.uiWrite({name:payload.tool_name,input:payload.tool_input||{},cwd},directory)||stage&&['PreToolUse','PostToolUse'].includes(options.event)){
@@ -194,13 +233,23 @@ function handle(payload,options) {
  try {
   const fresh=JSON.parse(C.read(file));let changed=false;
   for(const entry of Object.values(fresh.bindings)) {
-   if(entry.entryLine!==latest.line)continue;
+   if(entry.contextLine!==source.contextLine)continue;
    if(entry.lastEventKey===eventKey)continue;
    entry.source={path:source.path,bytes:source.bytes,digest:source.digest};entry.lastEventKey=eventKey;entry.lastHook={event:options.event,at:new Date().toISOString(),nativeReadAttempts:source.nativeReadAttempts,nativeRequestStatus:source.nativeRequestStatus};changed=true;
    if(options.event==='Stop') {
+    // Completion of an unrelated task must not trigger delivery of every
+    // prototype previously visited in the session. Inspect actual operations
+    // in this response, without another task lifecycle or activation flag.
+    const workedOn=source.calls.some(call=>{
+     if(call.requestLine<=latest.line)return false;
+     if(G.uiWrite({...call,cwd:call.cwd||project},entry.directory))return true;
+     const native=nativeCommand(call.name,call.input,call.cwd||project);
+     return native?.root===entry.directory&&Object.hasOwn(stageFor,native.operation);
+    });
+    if(!workedOn)continue;
     const lib=require('./native-pilot-lib.cjs'),state=lib.state(entry.directory);
     const complete=state.execution.status==='passed'&&state.delivery?.status==='current'&&state.delivery.result.runId===entry.runId;
-    const fixed=X.policy(entry.directory),feedback=decision({event:'Stop',source,binding:entry,directory:entry.directory,deliveryCurrent:complete,policy:fixed,stopHookActive:payload.stop_hook_active||entry.stopFeedbackPrompt===latest.digest});
+    const fixed=X.policy(entry.directory),feedback=decision({event:'Stop',source,binding:entry,directory:entry.directory,deliveryCurrent:complete,policy:fixed,restricted:options.restricted,stopHookActive:payload.stop_hook_active||entry.stopFeedbackPrompt===latest.digest});
     if(feedback.feedback){const result=Recovery.record(fresh,{...recoveryContext(entry.directory),policy:fixed},feedback);entry.recovery=result.recovery;if(fixed.id!==P.AUTO_ID)entry.stopFeedbackPrompt=latest.digest;saveIndex(stateDirectory,fresh);return result;}
    }
   }
@@ -208,4 +257,42 @@ function handle(payload,options) {
  }finally{fs.rmdirSync(lock);}
  return {continue:true};
 }
+function handle(payload,options){
+ const D=require('./execution-diagnostics.cjs');
+ payload={...payload,tool_name:toolName(payload.tool_name)};
+ let diagnostic;
+ try{
+  if(options.event==='UserPromptSubmit')D.remember(payload,options);
+  diagnostic=D.context(payload,options);
+ }catch{/* The authoritative dispatcher still checks registration and identity. */}
+ const toolEvent=['PreToolUse','PostToolUse'].includes(options.event);
+ const cwd=diagnostic&&toolCwd(payload,diagnostic.record,diagnostic.project);
+ const command=diagnostic&&nativeCommand(payload.tool_name,payload.tool_input,cwd);
+ const root=diagnostic&&(command?.root||prototypeForWrite(diagnostic.project,payload.tool_name,payload.tool_input,cwd));
+ const mutation=command&&['create','execution-begin','build','revise','replan','record-run','record-devtools-review','finalize'].includes(command.operation)||root&&G.uiWrite({name:payload.tool_name,input:payload.tool_input||{},cwd},root);
+ if(diagnostic&&toolEvent&&['Write','Edit','MultiEdit'].includes(payload.tool_name)&&!mutation)return {continue:true};
+ if(diagnostic?.task.restriction.blocked&&toolEvent&&mutation)return options.event==='PreToolUse'?{deny:true,reason:'The user explicitly requested read-only work or stopped implementation; no prototype mutation is authorized.'}:{continue:true};
+ try{
+  const answer=dispatch(payload,diagnostic?{...options,nativeProject:diagnostic.project,restricted:diagnostic.task.restriction.blocked}:options);
+  if(toolEvent&&!answer.deny&&!answer.feedback){if(mutation)D.recover(diagnostic);D.observed(diagnostic,payload);}
+  return answer;
+ }catch(error){
+  if(diagnostic)return mutation?D.failure(diagnostic,payload,error):{continue:true};
+  if(options.event==='PreToolUse') {
+   // A damaged/absent task source must not turn a protected write into exit 1
+   // (which CodeBuddy treats as non-blocking). This is a failure-only fallback,
+   // not a successful task association or invocation receipt.
+   const cwd=payload.cwd==='/'&&options.scope==='project'?path.dirname(options.base):payload.cwd;
+   if(cwd&&path.isAbsolute(cwd)) {
+    const parsed=nativeCommand(payload.tool_name,payload.tool_input,cwd),input=payload.tool_input||{},file=input.file_path||input.filePath||input.path||input.TargetFile;
+    let target=typeof file==='string'?path.dirname(path.resolve(cwd,file)):parsed?.root;
+    while(target&&target!==path.dirname(target)) {
+     if(fs.existsSync(path.join(target,'prototype.json'))&&X.policy(target)&&(parsed||G.uiWrite({name:payload.tool_name,input,cwd},target)))return {deny:true,reason:'原型 Hook 运行异常，当前操作未放行：'+error.message+'。请停止自动重试并交由维护入口处理；原型会话不排查 Hook。'};
+     target=path.dirname(target);
+    }
+   }
+  }
+  throw error;
+ }
+}
 module.exports={tokens,nativeCommand,eventCall,eventSource,decision,safeProject,toolCwd,handle};

package/skills/i3-ui-prototype/scripts/execution-diagnostics.cjs

@@ -0,0 +1,91 @@
+'use strict';
+// Protocol failures exist before a run binding. Never turn them into invocation proof.
+const fs=require('node:fs'),path=require('node:path');
+const F=require('./native-files.cjs'),C=require('./codebuddy-context.cjs'),E=require('./execution-evidence.cjs'),H=require('./buddy-host.cjs');
+const read=file=>fs.existsSync(file)?JSON.parse(C.read(file)):null;
+function location(payload,options){
+ if(!payload.session_id||!path.isAbsolute(options.base||''))return null;
+ const installation=read(path.join(options.base,'state/i3-prototype/installation.json'));if(!installation)return null;
+ const identity=H.identify(payload,installation,options),pointer=`state/i3-prototype/tasks/${E.sha(identity.host+':'+identity.product+':'+payload.session_id).slice(0,24)}.json`;
+ const previous=read(F.inside(options.base,pointer));
+ let project=options.scope==='project'?path.dirname(options.base):previous?.project;
+ if(!project)project=H.isIDE(payload)&&payload.cwd==='/'?E.ideWorkspace(payload.transcript_path,payload.session_id):payload.cwd;
+ if(!project||!path.isAbsolute(project))return null;project=fs.realpathSync(project);
+ if(payload.cwd&&payload.cwd!=='/'){
+  const relative=path.relative(project,fs.realpathSync(payload.cwd));if(relative==='..'||relative.startsWith('..'+path.sep)||path.isAbsolute(relative))return null;
+ }
+ const record={...installation,...identity,base:options.base,registrationDigest:E.sha(JSON.stringify(installation)),settingsDigest:E.sha(C.read(path.join(options.base,'settings.json')))};
+ return {project,record,identity,pointer,previous,directory:C.sessionDirectory(record,project,payload.session_id)};
+}
+function context(payload,options,{source}={}){
+ const where=location(payload,options);if(!where)return null;
+ let native=source;if(!native)try{native=C.source(payload,where.record,where.project);}catch{/* Failure diagnostics must survive unreadable native history. */}
+ // Diagnostics identify a session/context, never the wording of the last user
+ // message. UserPromptSubmit can precede persistence: do not combine its text
+ // with the preceding native prompt's cursor or digest.
+ const contextLine=native?.contextLine??where.previous?.contextLine??0;
+ const taskKey=E.sha(JSON.stringify([where.project,where.identity.host,where.identity.product,payload.session_id,contextLine]));
+ const task={schemaVersion:2,taskKey,sessionId:payload.session_id,project:where.project,host:where.identity.host,product:where.identity.product,contextLine,
+  restriction:C.restriction(native?.prompts,where.previous?.restriction)};
+ return {...where,source:native,task};
+}
+function remember(payload,options){
+ const value=context(payload,options);if(!value)return;
+ const id=payload.prompt_id||payload.generation_id;
+ const submission=id?E.sha(JSON.stringify([id,payload.prompt||''])):null;
+ const previous=value.previous?.submissions||[];
+ if(submission&&previous.includes(submission))return;
+ const control=C.userRestriction(payload.prompt||'');
+ // Restrict immediately. Releasing permission waits for the corresponding
+ // native user message, so a stale or unpersisted resume cannot grant writes.
+ if(control===true)value.task.restriction.blocked=true;
+ value.task.submissions=submission?[...previous.slice(-63),submission]:previous;
+ F.write(options.base,value.pointer,value.task);
+}
+function state(value){return read(path.join(value.directory,'diagnostics.json'))||{schemaVersion:1,tasks:{}};}
+function message(failure){return `原型 Hook 无法核验当前操作${failure.status==='blocked'?'，已停止重复提示':''}：${failure.reason}。请简要报告未验收项，由维护入口处理；不要在原型任务中修复 Hook 或重复绑定，也不能宣称已验证。`;}
+function failure(value,payload,error){
+ if(!value)return {continue:true};
+ return F.withLock(value.directory,'.diagnostics.lock',()=>{
+ const store=state(value),key=value.task.taskKey;
+ const phase=/JSON|transcript|source|history|日志/i.test(error.message)?'native-source':'native-request';
+ const eventKey=E.sha(JSON.stringify([key,payload.tool_use_id||payload.call_id||payload.hook_event_name,payload.tool_name||null,payload.tool_input||null,phase]));
+ const item=store.tasks[key]||{schemaVersion:1,taskKey:key,total:0,counts:{},events:{},status:'required'};
+ if(!item.events[eventKey]&&item.status!=='blocked'){
+  if(item.total>=6||(item.counts[phase]||0)>=2)item.status='blocked';
+  else {item.total++;item.counts[phase]=(item.counts[phase]||0)+1;item.status='required';}
+  Object.assign(item,{eventKey,reason:String(error.message).slice(0,2000),phase,at:new Date().toISOString(),host:value.identity.host,product:value.identity.product,productVersion:value.identity.productVersion,
+   callMode:payload.agent_type==='ptc'||value.source?.calls.some(c=>c.name==='REPL')?'ptc-repl':value.identity.product==='ide'?'native-ide':'direct',sessionId:payload.session_id,project:value.project,
+   registrationDigest:value.record.registrationDigest,settingsDigest:value.record.settingsDigest,transcriptPath:payload.transcript_path});
+  item.events[eventKey]=true;store.tasks[key]=item;F.write(value.directory,'diagnostics.json',store);
+ }
+ const result={reason:message(item),failure:item};
+ return payload.hook_event_name==='PreToolUse'?{...result,deny:true}:{continue:true,failure:item,...(item.status!=='blocked'?{context:result.reason}:{})};
+ });
+}
+function recover(value){
+ if(!value)return;
+ return F.withLock(value.directory,'.diagnostics.lock',()=>{const store=state(value),item=store.tasks[value.task.taskKey];
+  if(item&&item.status!=='recovered'){item.status='recovered';item.recoveredAt=new Date().toISOString();F.write(value.directory,'diagnostics.json',store);}
+ });
+}
+function observed(value,payload){
+ if(!value)return;
+ const source=C.source(payload,value.record,value.project),at=new Date().toISOString();
+ const entry={schemaVersion:1,sessionId:payload.session_id,taskKey:value.task.taskKey,project:value.project,projectKey:C.projectKey(value.project),host:value.identity.host,product:value.identity.product,
+  productVersion:value.identity.productVersion,identitySource:value.identity.identitySource,registrationDigest:value.record.registrationDigest,settingsDigest:value.record.settingsDigest,
+  source:{path:source.path,bytes:source.bytes,digest:source.digest},callMode:source.callMode||'direct',skills:Object.fromEntries(['prototype','frontend','antdv','uiux','browser'].map(key=>[key,E.loaded(source.calls,key).length])),
+  lastHook:{event:payload.hook_event_name,at}};
+ F.write(value.directory,'observation.json',entry);
+}
+function latest({base,project,host,record}){
+ const parent=path.join(base,'state/i3-prototype',C.projectKey(project));let found=null;
+ if(!fs.existsSync(parent))return null;
+ for(const name of fs.readdirSync(parent)){
+  if(!/^[a-f0-9]{24}$/.test(name))continue;
+  const data=read(path.join(parent,name,'diagnostics.json'));if(!data)continue;
+  for(const item of Object.values(data.tasks||{}))if(item.host===host&&item.project===project&&item.registrationDigest===record.registrationDigest&&item.settingsDigest===record.settingsDigest&&item.status!=='recovered'&&(!found||item.at>found.at))found=item;
+ }
+ if(!found)return null;const {events,...summary}=found;return summary;
+}
+module.exports={context,remember,failure,recover,observed,latest};

package/skills/i3-ui-prototype/scripts/execution-gates.cjs

@@ -38,11 +38,14 @@ function identity(d) {
  same(d.binding.policyDigest,d.policy.digest,'Execution policy differs');same(d.binding.inputDigest,d.current.inputDigest,'Inputs changed; begin a new execution run');
  for(const key of ['inputDigest','candidateDigest','revision'])same(d.proof[key],key==='candidateDigest'?d.current.digest:d.current[key],`Current ${key} differs`);
  assert.ok(d.source.prompts.some(p=>p.line===d.binding.entryLine),'Native user task source missing');
- assert.ok(command.completedBegin(d.source,d.binding),'Successful execution-begin for the current native task/context is required');
+ if(d.binding.association==='automatic'){
+  const prompt=d.source.prompts.find(p=>p.line===d.binding.entryLine);
+  same(prompt?.digest,d.binding.promptDigest,'Automatic execution context belongs to a different native task');
+  same(d.binding.contextLine,d.source.contextLine,'Automatic execution context changed');
+ }else assert.ok(command.completedBegin(d.source,d.binding),'Successful execution-begin for the current native task/context is required');
  if(d.policy.id===P.AUTO_ID){same(d.binding.host,d.policy.host,'Actual native host differs from the fixed policy');assert.ok(d.binding.identitySource&&d.binding.identitySource!=='legacy-profile','Automatic policy requires actual native host identity');}
  if(d.binding.recovery){
   const recovery=d.binding.recovery;
-  assert.notEqual(recovery.status,'blocked','Recovery budget exhausted; a new human task is required');
   for(const ref of recovery.invocations||[]){const call=nativeRef(d,ref);same(call.skill,ref.skill,'Recovery Skill differs');same(call.requestLine,ref.requestLine,'Recovery request cursor differs');same(call.resultLine,ref.resultLine,'Recovery result cursor differs');assert.ok(call.requestLine>ref.feedbackLine,'Recovery invocation must follow its feedback');}
   if(recovery.status==='recovered'){
    const retry=nativeRef(d,recovery.retry);
@@ -158,8 +161,49 @@ function browser(d) {
   A.compare(A.extract(A.resultData(call.result),check.pointer),check);
  }
 }
+function automatic(d,stage){
+ P.validate(d.policy);
+ const prompt=d.source.prompts.find(item=>item.line===d.binding.entryLine);
+ assert.ok(prompt,'Original prototype request is missing');same(d.binding.promptDigest,prompt.digest,'Original prototype request changed');
+ same(d.binding.inputDigest,d.current.inputDigest,'Prototype inputs changed');same(d.binding.contextLine,d.source.contextLine,'Native context changed');
+ const needs=P.requirements(d.policy,stage),calls=d.source.calls.filter(c=>c.sessionId===d.binding.sessionId&&c.success&&c.resultLine&&c.requestLine>d.source.contextLine);
+ const refs={},required=needs.filter(k=>['frontend','antdv','uiux','browser'].includes(k));
+ if(needs.includes('implementation'))required.push('frontend',...(d.policy.officialCallable?['antdv']:[]),...(d.policy.mode==='professional'?['uiux']:[]));
+ const writes=calls.filter(c=>c.requestLine>=d.binding.entryLine&&uiWrite({...c,cwd:c.cwd||d.binding.project},d.binding.directory));
+ for(const key of [...new Set(required)]){
+  const loaded=calls.filter(c=>c.skill===key),firstWrite=writes.length?Math.min(...writes.map(c=>c.requestLine)):Infinity;
+  const call=['frontend','antdv','uiux'].includes(key)?loaded.find(c=>c.resultLine<firstWrite):loaded.at(-1);
+  assert.ok(call,`Actual ${key} Skill invocation required before UI implementation; invoke it and retry this operation`);
+  if(['frontend','antdv','uiux'].includes(key)&&writes.length)assert.ok(call.resultLine<Math.min(...writes.map(c=>c.requestLine)),`${key} Skill must precede business UI writes`);
+  refs[key]={toolCallId:call.toolCallId,resultDigest:call.resultDigest};
+ }
+ if(needs.includes('implementation'))assert.ok(writes.length,'Actual business UI implementation write required');
+ if(needs.includes('build')){
+  assert.ok(d.build&&d.build.candidateDigest===d.current.digest,'Current prototype build required');
+  const built=calls.find(c=>{const commandInfo=command.nativeCommand(c.name,c.input,c.cwd||d.binding.project);const result=E.resultValue(c.result);return commandInfo?.operation==='build'&&commandInfo.root===d.binding.directory&&result?.buildId===d.build.buildId&&result?.buildDigest===d.build.buildDigest;});
+  assert.ok(built,'Actual current build result required');refs.build={toolCallId:built.toolCallId,resultDigest:built.resultDigest};
+ }
+ if(needs.includes('browser-results')){
+  const loaded=calls.filter(c=>c.skill==='browser').at(-1),built=calls.find(c=>c.toolCallId===refs.build?.toolCallId);
+  const observed=calls.filter(c=>/^mcp__.*chrome.*devtools.*__/.test(c.name)&&c.requestLine>Math.max(loaded.resultLine,built.resultLine));
+  assert.ok(observed.some(c=>/__(?:new_page|navigate_page)$/.test(c.name)),'Actual browser navigation required');
+  assert.ok(observed.some(c=>c.name.endsWith('__evaluate_script')&&E.resultText(c.result).includes(d.current.digest)),'Actual browser candidate identity required');
+  for(const method of ['take_screenshot','list_console_messages','list_network_requests','take_snapshot','performance_stop_trace'])assert.ok(observed.some(c=>c.name.endsWith('__'+method)),`Actual browser ${method} required`);
+  assert.ok(d.business&&d.business.candidateDigest===d.current.digest&&d.business.buildId===d.build.buildId,'Current business browser report required');
+  const fixed=A.validate(d.assertions,d.business.journeys.map(j=>j.id));
+  for(const scenario of fixed.scenarios)for(const check of scenario.checks){
+   const observation=d.business.generationObservations?.find(o=>o.scenarioId===scenario.scenarioId);
+   const results=observed.filter(c=>c.name.endsWith('__'+check.method)&&(!observation||observation.toolCallIds.includes(c.toolCallId)));
+   assert.ok(results.some(c=>{try{A.compare(A.extract(A.resultData(c.result),check.pointer),check);return true;}catch{return false;}}),`Actual browser assertion missing: ${scenario.scenarioId} ${check.pointer}`);
+  }
+ }
+ return {status:'passed',stage,policyDigest:d.policy.digest,runId:d.binding.runId,sessionId:d.binding.sessionId,projectKey:d.binding.projectKey,host:d.policy.host,productForm:d.binding.product,productVersion:d.binding.productVersion,installationScope:d.binding.scope,
+  operation:d.binding.operation,mode:d.policy.mode,inputDigest:d.current.inputDigest,candidateDigest:d.current.digest,revision:d.current.revision,association:'automatic',skills:refs,source:{path:d.source.path,bytes:d.source.bytes,digest:d.source.digest},
+  ...(d.source.callbackJournal?{callbackJournal:d.source.callbackJournal}:{}),...(d.binding.recovery?{recovery:d.binding.recovery}:{}),invocationVerification:'native-source-correlated',tamperProof:false};
+}
 function evaluate(data,stage) {
  try {
+  if(data.binding?.association==='automatic')return automatic(data,stage);
   identity(data);const needs=P.requirements(data.policy,stage);
   if(needs.includes('frontend')||needs.includes('implementation'))frontend(data,needs.includes('implementation'));
   if(needs.some(n=>['antdv','official-source','uiux'].includes(n)))design(data);

package/skills/i3-ui-prototype/scripts/execution-recovery.cjs

@@ -1,31 +1,31 @@
 'use strict';
-// Deterministic recovery state; only native source results can resolve a Skill.
+// Reminder/audit records do not authorize operations. The current native Skill
+// results and stage predicates decide whether an operation can proceed.
 const E=require('./execution-evidence.cjs'),P=require('./execution-policy.cjs');
 const N=require('./native-command.cjs');
 const names={frontend:'i3-frontend-ui-engineering',antdv:'antdv',uiux:'ui-ux-pro-max',browser:'i3-browser-testing-with-devtools'};
-const blockedReason='原型补调已达到自动恢复上限，当前任务仍被阻塞。请如实报告缺项及失败原因；修复依赖、权限或宿主后由用户发起继续。不能取得合格交付回执。';
+const blockedReason='必要调用或验收仍缺失，已停止重复催调。请报告具体缺项；取得真实成功结果后可重试原操作，不能宣称原型已通过验收。';
 function missing({source,binding,policy,stage}){
- const unbound=!N.completedBegin(source,binding);
+ const unbound=binding?.association!=='automatic'&&!N.completedBegin(source,binding);
  const required=stage&&policy?P.requirements(policy,stage).filter(key=>Object.hasOwn(names,key)):['frontend',...(policy?.id===P.AUTO_ID?[...(policy.officialCallable?['antdv']:[]),...(policy.mode==='professional'?['uiux']:[])]:[])];
  const sessionId=binding?.sessionId||source.calls.find(call=>call.sessionId)?.sessionId;
  return [...(unbound?['execution-begin']:[]),...required.filter(key=>!E.loaded(source.calls,key).some(call=>call.sessionId===sessionId&&call.requestLine>source.contextLine&&(source.stableThroughLine===undefined||call.resultLine<=source.stableThroughLine)))];
 }
-function instruction(keys,{directory}={}){
+function instruction(keys,{directory,automatic=false}={}){
  const skills=keys.filter(key=>names[key]).map(key=>names[key]);
  const begin=keys.includes('execution-begin')?`先为当前任务独立执行 execution-begin${directory?'：\n'+N.beginCommand(directory)+'\n':'。'}不得拼接 cd &&、管道、重定向或 head；等待 status=bound 且退出码为 0，再重试原操作。`:'';
- return `${begin}${skills.length?'请立即通过当前宿主的 Skill 工具调用 '+skills.join('、')+'（插件安装使用宿主显示的完整名称），等待成功返回后重试原操作。':''}${keys.includes('execution-evidence')?'执行 execution-check，按实际原生请求和结果补齐当前阶段证据后重试。':''}读取 SKILL.md、自动补全提示、手填调用记录不能代替实际调用。外层工具 success 不代表原型阶段成功；内层 status=failed 或非零退出必须保持阻塞。失败时报告具体原因，不得自动安装依赖或宣称完成。`;
+ return `${begin}${skills.length?'请立即通过当前宿主的 Skill 工具调用 '+skills.join('、')+'（插件安装使用宿主显示的完整名称），等待成功返回后重试原操作。':''}${keys.includes('execution-evidence')?(automatic?'按本次构建或交互验收返回的具体缺项修正原型后重试；调用记录由 Hooks 自动采集，不检查或修复 Hooks。':'执行 execution-check，按实际原生请求和结果补齐当前阶段证据后重试。'):''}读取 SKILL.md、自动补全提示、手填调用记录不能代替实际调用。外层工具 success 不代表原型阶段成功；内层 status=failed 或非零退出必须保持阻塞。失败时报告具体原因，不得自动安装依赖或宣称完成。`;
 }
 function record(index,context,answer){
  const {source,sessionId,directory,eventKey,event}=context,prompt=source.prompts.at(-1);
- const taskKey=E.sha(JSON.stringify([sessionId,prompt.line,prompt.digest,directory]));
+ const taskKey=E.sha(JSON.stringify([sessionId,source.contextLine,directory,index.bindings?.[directory]?.runId||null]));
  if(!answer.deny&&!answer.feedback&&!index.recoveries?.[taskKey])return answer;
  index.recoveries||={};
  const state=index.recoveries[taskKey]||={schemaVersion:1,total:0,counts:{},events:{},pending:{},invocations:[],status:'required'};
  state.feedbackLine??=Math.max(prompt.line,...Object.values(state.pending).map(item=>item.line));
  const summary=()=>({taskKey,status:state.status,total:state.total,counts:state.counts,invocations:state.invocations,...(state.expectedRetry?{expectedRetry:state.expectedRetry}:{}),...(state.retry?{retry:state.retry}:{})});
  const remember=result=>{state.events[eventKey]=result;for(const key of Object.keys(state.events).slice(0,-128))delete state.events[key];return {...result,recovery:summary()};};
- if(state.events[eventKey])return {...state.events[eventKey],recovery:summary()};
- if(state.status==='blocked'&&!answer.deny&&!answer.feedback)return remember(event==='PreToolUse'&&context.expectedRetry?{deny:true,reason:blockedReason}:{...answer,context:blockedReason});
+ if(state.events[eventKey]&&(answer.deny||answer.feedback))return remember({...answer});
  if(answer.deny||answer.feedback){
   if(context.expectedRetry&&(!state.expectedRetry||state.status==='recovered'))state.expectedRetry=context.expectedRetry;
   const keys=[...new Set(answer.missing?.length?answer.missing:['execution-evidence'])];
@@ -49,7 +49,8 @@ function record(index,context,answer){
   }
   if(!Object.keys(state.pending).length&&state.status!=='recovered'){
    const matchingRetry=!state.expectedRetry||Object.entries(state.expectedRetry).every(([key,value])=>context.retry?.[key]===value);
-   state.status=context.retrySucceeded&&matchingRetry&&event==='PostToolUse'&&context.retry?.requestLine>state.feedbackLine?'recovered':'ready-to-retry';if(state.status==='recovered')state.retry={...context.retry,feedbackLine:state.feedbackLine};
+   const afterSkills=state.invocations.every(call=>context.retry?.requestLine>call.resultLine);
+   state.status=context.retrySucceeded&&matchingRetry&&afterSkills&&event==='PostToolUse'&&context.retry?.requestLine>state.feedbackLine?'recovered':'ready-to-retry';if(state.status==='recovered')state.retry={...context.retry,feedbackLine:state.feedbackLine};
   }
  }
  return remember({...answer});

package/skills/i3-ui-prototype/scripts/execution-runtime.cjs

@@ -12,7 +12,9 @@ function policy(directory) {
  const acceptance=json(inside(directory,'inputs/acceptance.json'));require('./execution-assertions.cjs').validate(json(inside(directory,'inputs/execution-assertions.json')),[...acceptance.requiredScenarios,...acceptance.frameworkScenarios]);return value;
 }
 function binding(directory) {
- const recover=Recovery.instruction(['execution-begin'],{directory});
+ const metadata=inside(directory,'prototype.json');
+ const automaticExpected=fs.existsSync(metadata)&&json(metadata).runtime?.executionPolicy===P.AUTO_ID;
+ const recover=automaticExpected?'Installed Hooks collect this automatically on the next prototype UI operation. Load the required Skills and continue the UI task; report an infrastructure fault through maintenance if collection fails.':Recovery.instruction(['execution-begin'],{directory});
  const pointer=optional(directory,'qa/execution-context.json');assert.ok(pointer?.schemaVersion===1,'No native Hook task binding; '+recover);
  const project=fs.realpathSync(pointer.project),selected=C.select({project,product:pointer.product,host:pointer.host||'codebuddy'});assert.ok(selected,'Hooks are not enabled or are shadowed');
  assert.equal(selected.base,pointer.base,'Effective Hook scope changed');
@@ -24,8 +26,7 @@ function binding(directory) {
  C.prefix(entry.source.path,entry.source.bytes,entry.source.digest);
  const source=C.source({session_id:entry.sessionId,transcript_path:entry.source.path},selected,project);
  const prompt=source.prompts.find(p=>p.line===entry.entryLine);assert.equal(prompt?.digest,entry.promptDigest,'Original user task changed');
- assert.ok(!C.readOnly(source.prompts.at(-1).text),'Latest user request is read-only or stopped');
- assert.equal(entry.entryLine,source.prompts.at(-1).line,'Native task changed; '+recover);
+ assert.ok(!C.restriction(source.prompts).blocked,'The user requested read-only work or stopped implementation');
  assert.equal(entry.contextLine,source.contextLine,'Native context changed; '+recover);
  return {entry,source,selected};
 }

package/skills/i3-ui-prototype/scripts/native-command.cjs

@@ -22,7 +22,7 @@ function beginCommand(directory){
  return [process.execPath,path.join(__dirname,'native-pilot.cjs'),'execution-begin',directory].map(quote).join(' ');
 }
 function completedBegin(source,binding){
- if(!binding||binding.entryLine!==source.prompts.at(-1)?.line||(binding.contextLine||0)!==source.contextLine)return null;
+ if(!binding||!source.prompts.some(prompt=>prompt.line===binding.entryLine)||(binding.contextLine||0)!==source.contextLine)return null;
  const calls=source.calls.filter(call=>call.sessionId===binding.sessionId&&call.requestLine>=binding.entryLine&&call.requestLine>source.contextLine&&(()=>{
   const command=nativeCommand(call.name,call.input,call.cwd||binding.project||binding.directory);
   return command?.operation==='execution-begin'&&command.root===binding.directory;

package/skills/i3-ui-prototype/scripts/native-delivery.cjs

@@ -56,14 +56,15 @@ function state(directory,options,lib) {
   }
   if(build.status==='current')commands.preview=command('preview',['--build-id',build.buildId]);
   if(devtoolsReview.required)commands.recordDevtoolsReview=command('record-devtools-review',['--report',path.join(directory,'qa/devtools-review-input.json')]);
-  if(meta.runtime.executionPolicy){commands.executionBegin=command('execution-begin');commands.executionTemplate=command('execution-template');commands.executionCheck=command('execution-check');}
+  const executionContext=read(directory,'qa/execution-context.json');
+  if(meta.runtime.executionPolicy&&executionContext){commands.executionTemplate=command('execution-template');commands.executionCheck=command('execution-check');}
   let generation=null;
   if(meta.runtime.generationContract===1)try{const fixed=json(inside(directory,'inputs/generation.json'));const plan=require('./generation-contract.cjs').view(fixed);generation={presentation:fixed.presentation,pendingDecisions:fixed.pendingDecisions,pendingReferenceElements:fixed.pendingReferenceElements.length,referenceReview:plan.referenceReview,implementation:require('./generation-evidence.cjs').validateImplementation(directory,fixed,json(inside(directory,'design-system/implementation.json')),{frameworkMap:json(inside(directory,'inputs/framework.json')).componentMap})};}catch(error){generation={status:'failed',errors:[error.message]};}
   const nextAction=ownership?'wait-for-owner':structure.status!=='passed'?'repair-structure':generation&&(generation.pendingDecisions.length||generation.pendingReferenceElements)?'resolve-generation-decisions':generation?.implementation.status==='pending'?'implement-business':meta.runtime.contentReference&&meta.business?.status!=='adapted'?'implement-business':!['reviewed','no-match','skipped'].includes(design.status)?'review-design':build.status!=='current'?'build':browser.status!=='current'?(meta.runtime.contentReference?'business-browser-review':'browser'):devtoolsReview.required&&devtoolsReview.status!=='current'?'devtools-review':deliveryCurrent?'return-result':'finalize';
   if(generation)commands.replan=command('replan',['--scope',path.join(directory,'inputs/scope.json'),'--revision',nextRevision,...expected]);
   const fixedScope=json(inside(directory,'inputs/scope.json'));
   const scopes=meta.runtime.generationContract===1?{sourceFile:'inputs/scope.json',schemaVersion:fixedScope.schemaVersion,title:fixedScope.title,moduleIds:fixedScope.moduleIds,pages:fixedScope.pages.map(page=>({id:page.id,title:page.title,referencePage:page.referencePage,regions:page.regions.map(region=>({id:region.id,pattern:region.pattern||region.mode,fields:region.fields?.length||0,actions:region.actions?.length||0}))})),requirements:fixedScope.requirements.map(item=>({id:item.id,pages:item.pages,source:{type:item.source.type,reference:item.source.reference}}))}:fixedScope;
-  return {status:structure.status==='passed'?'ready':'failed',operation:'state',readOnly:true,directory,id:meta.id,revision:current.revision,candidateDigest:current.digest,inputDigest:current.inputDigest,identity:current.identity,instanceId:meta.instanceId,scopes,structure,...(generation?{generation}:{}),design,build,browser,devtoolsReview,execution,delivery,browserRuntime:runtime,ownership,verification:meta.verification,review,nextAction:meta.runtime.executionPolicy&&execution.status==='failed'?'resolve-execution-evidence':nextAction,commands,notes:['Design decisions and real provider queries remain the executing role responsibility.','Use the printed commands; no source-code inspection is required to recover flags or digests.','A missing browser provider requires an existing Playwright module path; no automatic install or global changes.','Legacy invocation fields retain their original meaning. New policy checks are reported separately in execution; native-source correlation is not tamper-proof attestation.']};
+  return {status:structure.status==='passed'?'ready':'failed',operation:'state',readOnly:true,directory,id:meta.id,revision:current.revision,candidateDigest:current.digest,inputDigest:current.inputDigest,identity:current.identity,instanceId:meta.instanceId,scopes,structure,...(generation?{generation}:{}),design,build,browser,devtoolsReview,execution,delivery,browserRuntime:runtime,ownership,verification:meta.verification,review,nextAction,commands,notes:['Design decisions and real provider queries remain the executing role responsibility.','Use the printed prototype commands; installed Hooks execute automatically.','A missing browser provider requires an existing Playwright module path; no automatic install or global changes.','Legacy execution commands remain available for compatibility; prototype work does not require manual binding or Hook diagnosis.']};
 }
 
 function finalize(directory,options,lib) {
@@ -85,7 +86,7 @@ function finalize(directory,options,lib) {
     const delivery={schemaVersion:1,status:'complete',operation:'finalize',id:meta.id,revision:before.revision,candidateDigest:before.digest,inputDigest:before.inputDigest,framework:meta.framework,template:meta.template,expertMode:meta.expertMode,expert:meta.expert.status,verification:'passed',review:review.status,checks:{structure:'passed',acceptance:'passed',build:'current',browser:'current'},buildId:report.buildId,buildDigest:report.buildDigest,report:latest.report,executor:report.executor,tool:report.tool,handoff:path.join(directory,'HANDOFF.md'),receipt:'qa/delivery.json',openQuestions:scope.openQuestions||[],humanConfirmationRequired:review.status!=='approved'};
     const execution=require('./execution-runtime.cjs').requireStage(directory,'delivery',lib);
     delivery.invocationVerification=execution.invocationVerification;delivery.tamperProof=false;
-    if(execution.status==='passed'){delivery.execution=execution;delivery.runId=execution.runId;delivery.policyDigest=execution.policyDigest;delivery.checks.execution='passed';delivery.executionEvidenceDigest=F.hash(fs.readFileSync(inside(directory,'qa/execution-evidence.json')));}
+    if(execution.status==='passed'){delivery.execution=execution;delivery.runId=execution.runId;delivery.policyDigest=execution.policyDigest;delivery.checks.execution='passed';delivery.executionEvidenceDigest=execution.association==='automatic'?F.hash(JSON.stringify(execution)):F.hash(fs.readFileSync(inside(directory,'qa/execution-evidence.json')));delivery.executionEvidenceSource=execution.association==='automatic'?'automatic-native-observation':'legacy-execution-evidence';}
     delivery.browserReportDigest=F.hash(fs.readFileSync(inside(directory,latest.report)));
     if(devtoolsReview.required){delivery.devtoolsReview=devtoolsReview.report;delivery.devtoolsReviewDigest=devtoolsReview.reportDigest;delivery.checks.devtoolsReview='current';delivery.invocationEvidence=execution.status==='passed'?'Native response IDs correlated with the configured host transcript; not tamper-proof.':'Verify actual Skill/MCP calls independently in the host transcript';}
     const start='<!-- native-delivery:start -->',end='<!-- native-delivery:end -->';