@givolt/i3-composer-agent 2.3.7 → 3.1.0

package/evals/cases/i3-ui-demo.json

@@ -0,0 +1,98 @@
+{
+  "skill_name": "i3-ui-demo",
+  "trigger": {
+    "positive": [
+      {
+        "prompt": "Use i3-ui-demo to create a template-based UI demo from this business document with required UI/UX Pro Max and antdv-next 1.6.0",
+        "top_k": 1
+      },
+      {
+        "prompt": "Add a details page to our existing i3-ui-demo, preserving manual edits and the template-based UI demo design",
+        "top_k": 1
+      },
+      {
+        "prompt": "Analyze a i3-ui-demo template-based UI demo plan without writing files or installing dependencies",
+        "top_k": 1
+      }
+    ],
+    "negative": [
+      {
+        "prompt": "Maintain the approved baseline of an existing i3-ui-prototype candidate",
+        "owner": "i3-ui-prototype"
+      },
+      {
+        "prompt": "Implement the approved production design as an accessible reusable Vue form component",
+        "owner": "i3-frontend-ui-engineering"
+      },
+      {
+        "prompt": "Optimize slow database indexes",
+        "owner": "i3-performance-optimization"
+      }
+    ]
+  },
+  "evals": [
+    {
+      "id": 1,
+      "prompt": "Use i3-ui-demo to create the asset-management UI demo from the supplied document in a separate prototype directory. The document includes my template and design choices; preserve them. Use required fixed dependencies and explicit professional Skill loading, implement the representative edit failure/retry journey before extending the remaining pages, and verify the current build where the browser tools are available. Leave it for human review.",
+      "expected_output": "A runnable business-specific Vue and antdv-next 1.6.0 prototype with traceability, explicit Skill execution and truthful current-code verification",
+      "files": [
+        "i3-ui-demo"
+      ],
+      "expectations": [
+        "Reads the actual supplied document and preserves its template and design choices instead of inventing generic requirements or asking again",
+        "Explicitly loads the specialist Skills named in the workflow through the actual supported host mechanism and reports that mechanism honestly",
+        "Verifies the fixed versions and real knowledge data rather than treating a successful version argument or package presence as proof",
+        "Uses the pinned query entry for actual component queries so running at a business root with a nested app cannot silently select another knowledge version",
+        "Reads back the persisted Master and page rules and reconciles them with confirmed template and design choices instead of promoting a rejected search result",
+        "Requires a successful concrete browser tool call for connectivity; an empty ready server list is insufficient",
+        "Implements and checks validation failure, preserved input, simulated save failure, retry, list/detail synchronization and incremental scope coverage",
+        "Preserves other prototypes and manual edits, records current build/browser evidence or an explicit verification gap, and leaves human review pending",
+        "Loads the owned capability definition, selected reference HTML, behavior modules and preset, without reading another prototype Skill",
+        "Builds one template contract with native capability bindings, actual business fields/actions and explicit reference-node decisions; unresolved items remain pending",
+        "Preserves the original template palette and dimensions by default, constrains UI/UX Pro Max to confirmed template choices, and compares current runtime against owned references"
+      ]
+    },
+    {
+      "id": 2,
+      "kind": "dialogue",
+      "prompt": "Use i3-ui-demo for read-only analysis of the supplied prototype request. Do not write files, install dependencies, persist design output, change MCP settings or start a browser. The required official tool is missing. Explain the next steps only.",
+      "expected_output": "Read-only analysis with a truthful missing dependency and a future preparation plan",
+      "expectations": [
+        "No skill-managed file, callback, cache, design persistence, service, browser or MCP configuration mutation occurs",
+        "Missing creation dependencies are reported without blocking delivery of the read-only analysis",
+        "No tool installation, native Skill invocation or browser execution is falsely claimed"
+      ]
+    },
+    {
+      "id": 3,
+      "kind": "dialogue",
+      "prompt": "Create a i3-ui-demo. ui-ux-pro-max is available but the official antdv Skill and fixed CLI data are missing. I decline installing the required official tools. Do not install them or substitute another mode.",
+      "expected_output": "The current i3-ui-demo creation flow ends without project generation or silent fallback",
+      "expectations": [
+        "Ends the current creation flow after the explicit refusal without generating the prototype or installing tools",
+        "Does not substitute template-only mode or claim the required official dependency is available"
+      ]
+    },
+    {
+      "id": 4,
+      "kind": "dialogue",
+      "prompt": "Review this i3-ui-demo verification claim without writing: CLI was requested with version 1.6.0 but returned 1.5 data, the MCP config exists but no browser call succeeded, and a screenshot was taken before the last edit. Can it be marked verified?",
+      "expected_output": "A rejection of the unsupported claim with concrete version and current-browser revalidation requirements",
+      "expectations": [
+        "Separates requested version, actual data, config existence, tool connectivity and actual current-build observations",
+        "Does not report verification or human approval as passed and does not change files during the review"
+      ]
+    },
+    {
+      "id": 5,
+      "kind": "dialogue",
+      "prompt": "Use i3-ui-demo in a project where no other prototype Skill exists. Its own enterprise-admin reference, capability definition and starter are present. Explain how to create a business list matching the original palette, preserve column settings and test pagination and editing. Do not install or write anything yet.",
+      "expected_output": "An independent read-only plan using only the owned template contract and the explicitly named required specialist Skills",
+      "expectations": [
+        "Uses ui-demo-owned capability-definition.json, preset.json, inventory and relevant reference HTML/behavior/styles; does not require or fall back to a different prototype Skill",
+        "Distinguishes required native implementation, source reference material and actual browser evidence; plan output is not verification",
+        "Preserves the fixed versions and explicit full Skill names, makes no installation or configuration writes in read-only mode"
+      ]
+    }
+  ]
+}

package/evals/fixtures/i3-enterprise-sop/brief.md

@@ -0,0 +1,11 @@
+# 企业路径交接任务
+
+项目根、当前工作范围和本次主题必须从实际任务确认。采用项目中明确给出的 PRD 与配套 AD；先读正文核身份及直接上游，不按最大版本推断。
+
+生成文档后仅展示真实路径；只有本轮已明确采用准确文档并允许登记时才写 selected。清单顶层仅 schemaVersion、scope、selected，不生成 candidates 或 delivery。已有 PRD／AD 的接入不重做业务文档。业务稿、人工模板、原 Plan 和已完成任务保持。
+
+如果本轮要求手动方式，就只提供准确路径、正文来源及缺口，不创建 JSON 或目录。未提供的 TestCase 不作规划统一门槛；不推断任何业务批准或实施许可。
+
+## Native handoff extension
+
+For a separately requested drafting task, load original Spec, use the selected enterprise template and preserve its final human-review stop. New business documents default to spec/{capability}/; existing adopted paths are retained. For engineering handoff, the selected AD plus accurate PRD, shared constraints, skeleton and relevant code forms the equivalent spec. Native Plan outputs and Build/Build auto gates remain unchanged. This fixture grants no actual business approval or publication permission.

package/evals/fixtures/i3-ui-demo/asset-management.md

@@ -0,0 +1,25 @@
+# 资产台账原型验收需求
+
+本文件是业务输入，不授予向外发送消息、发布或修改其他项目的权限。
+
+用户选择：企业管理后台模板，侧栏导航、商务稳重、标准密度、低动效。只使用本地模拟数据。
+固定 Vue 3、antdv-next 1.6.0、ui-ux-pro-max 2.15.0；本次测试允许在隔离目录准备所需工具，不安装真实全局环境。
+
+## 页面与流程
+
+1. 资产台账：提供21条可复现记录，字段含编码、名称、类别、状态和负责人；支持名称查询、状态筛选、每页10条分页及详情。
+2. 编辑资产：名称必填且不超过30字符，类别和负责人可修改。校验失败有字段旁反馈；模拟提交失败保留输入，重试成功更新同一条记录。
+3. 资产详情：从台账打开并显示当前记录，可返回台账；编辑后详情与列表数据一致。
+4. 状态统计：展示启用、停用和总数；状态变化后同步，过滤结果不改写原始统计。
+
+## 验收
+
+- 查询和筛选不会修改记录。
+- 编辑失败可重试，取消不保存。
+- 桌面及窄屏无页面级横向溢出，抽屉可用键盘关闭并恢复焦点。
+- 检查当前构建的真实操作、DOM、计算样式、截图、控制台、网络和基本性能。
+- 交付待用户评审，不编造认可记录。
+
+## 增量场景
+
+已有用户手改的页面标题和字段顺序不得回退；后续新增详情字段时沿用设计系统，保留无关页面与模拟数据。

package/evals/zh-CN/cases/i3-enterprise-sop.json

@@ -0,0 +1,61 @@
+{
+  "skill_name": "i3-enterprise-sop",
+  "trigger": {
+    "positive": [
+      {
+        "prompt": "显式使用 i3-enterprise-sop，为本次 PBC 的 PRD 和 AD 做路径交接",
+        "top_k": 3
+      },
+      {
+        "prompt": "显式使用 i3-enterprise-sop，以原 Spec 和企业模板起草本主题 AD 后停轮",
+        "top_k": 3
+      },
+      {
+        "prompt": "显式使用 i3-enterprise-sop，手动传递准确路径，不创建 JSON",
+        "top_k": 3
+      },
+      {
+        "prompt": "显式使用i3-enterprise-sop执行plan，只规划本项目选定的任务编排主题，完成后交我审阅",
+        "top_k": 3
+      }
+    ],
+    "negative": [
+      {
+        "prompt": "标准流程：编写 SPEC.md，包含目标、命令、工程结构和边界",
+        "owner": "i3-spec-driven-development"
+      },
+      {
+        "prompt": "把已选规格拆成依赖有序、带验收和验证的实施任务",
+        "owner": "i3-planning-and-task-breakdown"
+      }
+    ]
+  },
+  "evals": [
+    {
+      "id": 1001,
+      "prompt": "读取 brief.md，显式使用 i3-enterprise-sop，只做本次准确路径交接。",
+      "files": [
+        "i3-enterprise-sop"
+      ],
+      "expected_output": "仅登记明确选用路径的三字段清单，或零项目写入的手动输入摘要",
+      "expectations": [
+        "Paths resolve against the confirmed project root and actual documents are read",
+        "A newly generated draft is only reported by path; selected changes only for an explicit user choice and business text is unchanged",
+        "Manual handoff does not create a JSON file or project directories",
+        "Original skills, commands, plans and task state are unchanged",
+        "No business approval, next-stage execution or publication is inferred",
+        "Drafting BRD, PRD, AD or TestCase loads original Spec successfully and preserves its save-and-stop gate",
+        "New business documents default to spec/ per capability; existing adopted paths are retained",
+        "Only the selected topic and necessary shared dependencies become original Plan inputs; original Build auto gates are retained",
+        "Short brd, prd, ad, testcase and plan actions ask only missing facts and do not write while awaiting an answer",
+        "Explicit plan successfully loads original planning Skill and preserves original command obligations and outputs, without JSON writes or Build",
+        "Manual and JSON Plan complete the same indexed shared reads and original command before native planning; scripts do not count as model reads; actual relevant dependency/build configuration is read rather than inferred from AD commands",
+        "AD capability/topic identity or direct-upstream path/PRD-version conflicts stop before native planning and any plan/todo or candidate-plan writes; suspected header typos are not self-resolved",
+        "PRD and AD independent version numbers may differ when the AD references the exact selected PRD version; optional TestCase/prototype do not become universal blockers",
+        "SOP preparation uses Read/Glob/Grep for file discovery instead of probing shell permission with ls/find/mkdir",
+        "The native plan retains full actual source paths and document versions for PRD, AD, adopted norms, contracts and engineering adoption; aliases in the plan or paths only in the conversation report are insufficient",
+        "用简体中文说明实际结果、缺口和未执行事项；保留上述全部工程要求，不推定业务批准、计划批准或发布。"
+      ]
+    }
+  ]
+}

package/evals/zh-CN/cases/i3-ui-demo.json

@@ -0,0 +1,103 @@
+{
+  "skill_name": "i3-ui-demo",
+  "trigger": {
+    "positive": [
+      {
+        "prompt": "使用 i3-ui-demo，根据业务文档和内置模板制作 antdv-next 1.6.0 交互原型，必须使用 ui-ux-pro-max。",
+        "top_k": 1
+      },
+      {
+        "prompt": "为已有 i3-ui-demo 新增详情页，沿用模板设计并保留人工修改。",
+        "top_k": 1
+      },
+      {
+        "prompt": "只读分析 i3-ui-demo 模板原型方案，不写文件或安装依赖。",
+        "top_k": 1
+      }
+    ],
+    "negative": [
+      {
+        "prompt": "选择 UI 原型模板，制作一个可操作的申请审批交互原型供评审。",
+        "owner": "i3-ui-prototype"
+      },
+      {
+        "prompt": "开发一个响应式前端页面，做好组件布局和无障碍交互。",
+        "owner": "i3-frontend-ui-engineering"
+      },
+      {
+        "prompt": "产品页面有一千条数据渲染很慢，请定位性能瓶颈并优化。",
+        "owner": "i3-performance-optimization"
+      }
+    ]
+  },
+  "evals": [
+    {
+      "id": 1001,
+      "prompt": "使用 i3-ui-demo 根据所附资产台账文档制作原型，保留文档中已明确的模板和设计选择，在独立目录显式加载所需技能并使用固定版本。先实现编辑校验、提交失败及重试的代表流程，再扩展其他页面；有浏览器能力时验证当前构建，交付待用户评审。",
+      "expected_output": "A runnable business-specific Vue and antdv-next 1.6.0 prototype with traceability, explicit Skill execution and truthful current-code verification",
+      "files": [
+        "i3-ui-demo"
+      ],
+      "expectations": [
+        "Reads the actual supplied document and preserves its template and design choices instead of inventing generic requirements or asking again",
+        "Explicitly loads the specialist Skills named in the workflow through the actual supported host mechanism and reports that mechanism honestly",
+        "Verifies the fixed versions and real knowledge data rather than treating a successful version argument or package presence as proof",
+        "Uses the pinned query entry for actual component queries so running at a business root with a nested app cannot silently select another knowledge version",
+        "Reads back the persisted Master and page rules and reconciles them with confirmed template and design choices instead of promoting a rejected search result",
+        "Requires a successful concrete browser tool call for connectivity; an empty ready server list is insufficient",
+        "Implements and checks validation failure, preserved input, simulated save failure, retry, list/detail synchronization and incremental scope coverage",
+        "Preserves other prototypes and manual edits, records current build/browser evidence or an explicit verification gap, and leaves human review pending",
+        "Loads the owned capability definition, selected reference HTML, behavior modules and preset, without reading another prototype Skill",
+        "Builds one template contract with native capability bindings, actual business fields/actions and explicit reference-node decisions; unresolved items remain pending",
+        "Preserves the original template palette and dimensions by default, constrains UI/UX Pro Max to confirmed template choices, and compares current runtime against owned references",
+        "人类可读的追问、说明、进度、报告与生成文档使用简体中文；保留代码、路径、工具参数、JSON 协议及机器状态的原始格式。"
+      ]
+    },
+    {
+      "id": 1002,
+      "kind": "dialogue",
+      "prompt": "使用 i3-ui-demo 只读分析原型请求：不写文件、不安装依赖、不持久化设计、不修改 MCP、不启动浏览器。所需官方工具缺失，只说明缺项和后续步骤。",
+      "expected_output": "Read-only analysis with a truthful missing dependency and a future preparation plan",
+      "expectations": [
+        "No skill-managed file, callback, cache, design persistence, service, browser or MCP configuration mutation occurs",
+        "Missing creation dependencies are reported without blocking delivery of the read-only analysis",
+        "No tool installation, native Skill invocation or browser execution is falsely claimed",
+        "人类可读的追问、说明、进度、报告与生成文档使用简体中文；保留代码、路径、工具参数、JSON 协议及机器状态的原始格式。"
+      ]
+    },
+    {
+      "id": 1003,
+      "kind": "dialogue",
+      "prompt": "用 i3-ui-demo 创建原型。ui-ux-pro-max 可用，但官方 antdv 技能和固定 CLI 数据缺失。我拒绝安装这些必备工具，请不要安装或改用其他模式。",
+      "expected_output": "The current i3-ui-demo creation flow ends without project generation or silent fallback",
+      "expectations": [
+        "Ends the current creation flow after the explicit refusal without generating the prototype or installing tools",
+        "Does not substitute template-only mode or claim the required official dependency is available",
+        "人类可读的追问、说明、进度、报告与生成文档使用简体中文；保留代码、路径、工具参数、JSON 协议及机器状态的原始格式。"
+      ]
+    },
+    {
+      "id": 1004,
+      "kind": "dialogue",
+      "prompt": "只读审查 i3-ui-demo 验证声明：CLI 请求1.6.0却返回1.5数据，MCP配置已存在但实际浏览器调用失败，截图来自最后一次修改之前。是否可以标记验证通过？不要写文件。",
+      "expected_output": "A rejection of the unsupported claim with concrete version and current-browser revalidation requirements",
+      "expectations": [
+        "Separates requested version, actual data, config existence, tool connectivity and actual current-build observations",
+        "Does not report verification or human approval as passed and does not change files during the review",
+        "人类可读的追问、说明、进度、报告与生成文档使用简体中文；保留代码、路径、工具参数、JSON 协议及机器状态的原始格式。"
+      ]
+    },
+    {
+      "id": 1005,
+      "kind": "dialogue",
+      "prompt": "项目没有安装其他原型 Skill，i3-ui-demo 自有企业后台模板、能力定义和 starter 均在。使用 i3-ui-demo 只读说明如何按原模板配色创建业务列表、保留列设置并检查分页与编辑。暂不安装或写文件。",
+      "expected_output": "An independent read-only plan using only the owned template contract and the explicitly named required specialist Skills",
+      "expectations": [
+        "Uses ui-demo-owned capability-definition.json, preset.json, inventory and relevant reference HTML/behavior/styles; does not require or fall back to a different prototype Skill",
+        "Distinguishes required native implementation, source reference material and actual browser evidence; plan output is not verification",
+        "Preserves the fixed versions and explicit full Skill names, makes no installation or configuration writes in read-only mode",
+        "人类可读的追问、说明、进度、报告与生成文档使用简体中文；保留代码、路径、工具参数、JSON 协议及机器状态的原始格式。"
+      ]
+    }
+  ]
+}

package/hooks/PROTOTYPE.md

@@ -1,4 +1,4 @@
-# 原型 Hooks 安装与维护
+# 原型审计 Hooks 退役与旧注册清理
 
 <!-- i3:zh-guide:start -->
 ## 中文使用说明
@@ -8,16 +8,24 @@
 默认使用简体中文解释、追问及生成报告；用户明确要求其他语言时可切换。原方法正文、引用、阈值和审批条件完整保留。代码标识、路径、命令、工具参数、JSON 键/枚举与原文引用保持原样。
 <!-- i3:zh-guide:end -->
 
-本文件面向安装器和维护人员。i3-ui-prototype 的正常职责是制作、修订和验收原型，不承担宿主或 Hook 排障。
+原型审计 Hook 已移除。CodeBuddy／WorkBuddy 的新安装不注册 prototype 组，旧回调入口只返回空结果，不再采集调用、拦截写入、发起补调或阻止 Stop。原型 Skill 继续负责制作、修订和验收 UI。
 
-安装器在 CodeBuddy/WorkBuddy 项目或全局范围注册 prototype 组。宿主自动触发；不要求原型使用者额外执行 execution-begin 或确认任务绑定。必要 Skill 的真实调用由原生 Pre/Post 回调记录，PTC/REPL 的内部工具分别记录；REPL 脚本文本不能代替调用成功。Bash 不提供 stdout 时由本包第一方入口捕获实际结果；其他只读查询可使用 native-tool-result.cjs 的本地绝对入口，不安装依赖。
+安装或升级时，统一管理器精确清理本包拥有的旧 prototype 注册。清理同时覆盖该范围内共享的 Buddy 注册，保留权限、用户 Hook、原版三组、已有原型和审计历史。被手改的注册、缺归属记录或无效配置会停止清理并报告原因，不能强行覆盖。清理后的旧 installation.json 存入 `state/i3-prototype/history/retired-<digest>.json`，不删除原会话记录。
 
-漏调检查由当前操作和固定原型策略决定，不根据最新一句话是否包含“原型”启停采集。缺少 Skill 时拦截并提示通过宿主工具补调，真实成功后重试原操作；普通追问保持同一会话/有效上下文内的调用记录和原型运行。新会话或上下文压缩后重核 Skill，输入、实例或构建变化按原有合同重核业务证据。明确只读、暂停或取消独立限制受管变更，收到 UserPromptSubmit 即生效，不等待日志写盘；普通追问不解除，明确继续实施后解除。这个授权限制不控制回调采集，也不生成新的任务身份。
+只读检查：
 
-Stop 只对本轮实际操作过的原型检查完成声明；无关文件任务不会被历史原型的验收接管。finalize 仍核验当前原型的真实调用、构建和浏览器证据。
+```sh
+npx --yes @givolt/i3-composer-agent hooks check --host codebuddy --scope project --project .
+```
 
-检查命令：`npx --yes @givolt/i3-composer-agent hooks check --host codebuddy --scope project --project .`；全局将 scope 改为 global。检查只读，不启用/修复设置。registered 表示已注册；active 表示观察到当前注册的有效运行；failure 显示当前无法核验的操作、会话和原因。次数只限制重复催调/提示，不构成永久操作锁；新的真实成功结果可恢复。普通追问不清零计数，原型会话不承担 Hook 排障。
+已安装入口可显式清理旧注册：
 
-诊断、补调审计与 PTC 机器回调位于宿主基址的 state/i3-prototype/；项目/全局、宿主/会话/有效上下文和原型实例分别隔离。required、ready-to-retry、recovered、blocked 为兼容的审计显示，放行始终重新核对当前真实结果，不把状态名当额外前置。记录请求、失败或只读 SKILL.md 均不能代替成功调用；recovered 只表示观察到补调及重试，不代表业务验收。保留上游 Hooks、用户注册、旧 HTML 和已有原型；旧 execution-* 命令仅供兼容，不是新流程的前置。
+```sh
+node .codebuddy/i3-composer-agent/hooks/manage.cjs disable --host codebuddy --scope project --project . --groups prototype
+```
 
-CodeBuddy 项目/全局 × IDE/CLI（CLI direct/PTC）真实注册、触发、必要 Skill 调用、缺失补调和失败展示必须分别验收。自动化回放不能冒充真实宿主；正式发布门禁在仓库维护工具中执行，不放到业务原型 Skill 内。
+全局改用对应全局入口和 `--scope global`；WorkBuddy 使用 `--host workbuddy`。旧 `--prototype-hooks` 和 `prototype-hooks.cjs` 只保留检查／清理兼容，不能重新 enable。只读 check 不清理设置、不扫描会话日志；输出中的 retired／cleanupRequired 描述旧配置，不代表调用或业务验收通过。清理后重载受影响宿主。
+
+原版 `session-start`、`sdd-cache`、`simplify-ignore` 按需显式启用，原脚本和条件不变。启用必须明确指定组，不再默认指向 prototype。
+
+正常原型流程保留实际 Skill 加载、固定业务断言、构建、业务场景和浏览器证据校验；移除对审计 Hook 会话绑定的专属前置。自动调用审计标为未验证，不伪报通过。旧 execution-* 数据与显式回放入口仅供历史兼容；合成回放不能冒充真实宿主调用或人工验收。详见 [调用记录兼容说明](../skills/i3-ui-prototype/references/execution-evidence.md)。

package/hooks/i3-prototype.cjs

@@ -1,13 +1,7 @@
 #!/usr/bin/env node
 'use strict';
-// Stable host Hook entry. Shared legacy helpers are an implementation detail;
-// installation, automatic dispatch and diagnostics belong to Hooks, not UI tasks.
-const fs=require('node:fs'),path=require('node:path');
-function main(argv=process.argv.slice(2),raw=fs.readFileSync(0,'utf8'),load=()=>require(path.join(require('./manage.cjs').modules().scripts,'hosts/codebuddy.cjs'))) {
- return load().main(argv,raw);
-}
+// Retired callback kept inert for settings that have not yet been upgraded.
+// Do not read transcripts, write audit state, deny tools or block Stop.
+function main() { return {code:0,output:{}}; }
 module.exports={main};
-if(require.main===module)try {
- const result=main();process.stdout.write(JSON.stringify(result.output)+'\n');
- if(result.code===2)process.stderr.write(result.output.reason+'\n');process.exitCode=result.code;
-}catch(error){process.stderr.write(`i3 prototype audit unavailable: ${error.message}. Strict A gates remain unverified.\n`);process.exitCode=1;}
+if(require.main===module)process.stdout.write('{}\n');

package/hooks/manage.cjs

@@ -8,14 +8,15 @@ const catalog=[
  {id:'session-start',name:'Skill 发现与路由',origin:'upstream',files:['session-start.sh'],events:['SessionStart'],dependencies:['bash','jq'],condition:'明确 skill-routing=hook；原生路由使用 native，避免重复注入'},
  {id:'sdd-cache',name:'官方文档请求缓存',origin:'upstream',files:['sdd-cache-pre.sh','sdd-cache-post.sh'],events:['PreToolUse','PostToolUse'],dependencies:['bash','jq','curl','sha256'],condition:'实际 WebFetch；仅源站 304 复用'},
  {id:'simplify-ignore',name:'代码块简化保护',origin:'upstream',files:['simplify-ignore.sh'],events:['PreToolUse','PostToolUse','Stop'],dependencies:['bash','jq','sha1'],condition:'使用 simplify-ignore 标记；会在运行期间替换标记块并在 Stop 恢复'},
- {id:'prototype',name:'原型执行审计',origin:'i3',events:['SessionStart','UserPromptSubmit','PreToolUse','PostToolUse','Stop'],dependencies:['node'],condition:'CodeBuddy IDE/CLI 与 WorkBuddy；原生回调识别身份和日志，有限补调；真实宿主验收另记'},
 ];
 const digest=value=>crypto.createHash('sha256').update(JSON.stringify(value)).digest('hex');
 const sha=bytes=>crypto.createHash('sha256').update(bytes).digest('hex');
 const json=value=>JSON.stringify(value,null,2)+'\n';
 function selection(value,action='check') {
- const ids=value===undefined?(['check','list'].includes(action)?catalog.map(x=>x.id):['prototype']):value==='all'?catalog.map(x=>x.id):value.split(',');
- assert.ok(ids.length&&ids.every(id=>catalog.some(item=>item.id===id)),'Unknown Hook group; choose session-start,sdd-cache,simplify-ignore,prototype or all');
+ if(action==='enable')assert.ok(value!==undefined,'Choose explicit Hook groups before enabling; no groups are enabled by default');
+ const ids=value===undefined?(['check','list'].includes(action)?catalog.map(x=>x.id):action==='disable'?['prototype']:[]):value==='all'?catalog.map(x=>x.id):value.split(',');
+ assert.ok(ids.every(id=>id==='prototype'||catalog.some(item=>item.id===id)),'Unknown Hook group; choose session-start,sdd-cache,simplify-ignore or all');
+ assert.ok(action!=='enable'||!ids.includes('prototype'),'Prototype audit Hooks are retired and cannot be enabled');
  return [...new Set(ids)];
 }
 function quote(value){assert.ok(typeof value==='string'&&!/[\x00\r\n]/.test(value),'Unsafe Hook argument');return "'"+value.replaceAll("'","'\\''")+"'";}
@@ -82,7 +83,7 @@ function executable(name,env=process.env) {
 }
 function dependencies(){return Object.fromEntries(['bash','jq','curl','shasum','sha256sum','sha1sum'].map(name=>[name,executable(name)]));}
 function location(options) {
- assert.ok(['codebuddy','workbuddy'].includes(options.host||'codebuddy'),'Unified prototype Hooks support CodeBuddy and WorkBuddy');assert.ok(['project','global'].includes(options.scope),'Specify project or global scope');
+ assert.ok(['codebuddy','workbuddy'].includes(options.host||'codebuddy'),'Hook management supports CodeBuddy and WorkBuddy');assert.ok(['project','global'].includes(options.scope),'Specify project or global scope');
  const project=fs.realpathSync(path.resolve(options.project||'.'));assert.ok(fs.statSync(project).isDirectory(),'Project must be a directory');
  return {project,base:options.scope==='project'?path.join(project,'.codebuddy'):modules().P.globalBase(options)};
 }
@@ -103,44 +104,41 @@ function pendingSimplify(base) {
 }
 function prepare(options,runtime={}) {
  const {P,R}=runtime.modules||modules(),{project,base}=runtime.location||location(options),io=R.fileIO,requested=options.action||'keep',ids=selection(options.groups,requested),host=options.host||'codebuddy';
+ const action=requested==='default'?'keep':requested;
  const settingsPath=path.join(base,'settings.json'),recordPath=path.join(base,'state/i3-composer-agent/hooks.json'),prototypePath=path.join(base,'state/i3-prototype/installation.json');
- const before=io.read(settingsPath),recordText=io.read(recordPath),record=recordText?JSON.parse(recordText):null,prototypeText=io.read(prototypePath),prototype=prototypeText?JSON.parse(prototypeText):null;
- const requestedHosts=[...new Set(options.scope==='project'?(options.agents||[host]).filter(h=>['codebuddy','workbuddy'].includes(h)):[host])];
- const disabled=new Set(record?.prototypeDisabledHosts||[]);
- if(requested==='enable'&&ids.includes('prototype'))for(const h of requestedHosts)disabled.delete(h);
- if(requested==='disable'&&ids.includes('prototype'))for(const h of requestedHosts)disabled.add(h);
- const selectedHosts=requested==='default'?requestedHosts.filter(h=>!disabled.has(h)):requestedHosts;
- const action=requested==='default'?(selectedHosts.length&&process.platform!=='win32'?'enable':'keep'):requested;
- const activeHosts=prototype?.hosts||(prototype?['codebuddy']:[]);
- const hosts=action==='disable'?activeHosts.filter(h=>!requestedHosts.includes(h)):[...new Set([...activeHosts,...selectedHosts])].sort();
- if(action!=='disable'&&(action!=='keep'||record||prototype))assert.ok(process.platform!=='win32','Buddy Hook quoting on Windows has not been validated; explicit keep remains available');
- const product='auto',settings=config(before);
- if(action!=='disable'&&(action!=='keep'||record||prototype)) {
+ const before=io.read(settingsPath),recordText=io.read(recordPath),record=recordText?JSON.parse(recordText):null,prototypeText=io.read(prototypePath);
+ const settings=config(before);
+ if(action==='enable') {
+  assert.ok(process.platform!=='win32','Buddy Hook quoting on Windows has not been validated');
   assert.ok(!settings.disableAllHooks&&!settings.allowManagedHooksOnly,'Host policy prevents automatic Hooks; preserve the policy');
+  assert.equal(host,'codebuddy','WorkBuddy upstream Hook adapters are not supported');
+  for(const id of ids)assert.ok(!unmanaged(settings).some(item=>item.id===id),`Unmanaged ${id} Hook already exists; preserve it and resolve the duplicate before enabling`);
  }
- if(host==='workbuddy')assert.ok(ids.every(id=>id==='prototype')||['check','list','keep'].includes(action),'WorkBuddy currently registers the prototype group only; upstream adapters remain CodeBuddy-specific');
- if(action==='enable')for(const id of ids)assert.ok(!unmanaged(settings).some(item=>item.id===id),`Unmanaged ${id} Hook already exists; preserve it and resolve the duplicate before enabling`);
  if(ids.includes('simplify-ignore')&&['enable','disable'].includes(action)) {
   for(const candidate of [...new Set([base,path.join(project,'.codebuddy'),P.globalBase?P.globalBase(options):path.join(options.home||os.homedir(),'.codebuddy')])])assert.equal((runtime.pendingSimplify||pendingSimplify)(candidate).length,0,'Simplify protection is still active; finish the session and restore blocks before changing Hooks');
  }
- const prototypeAction=ids.includes('prototype')?(action==='disable'&&hosts.length?'keep':action):'keep';
- const prototypeChange=action==='disable'&&!ids.includes('prototype')?{unchanged:true}:P.prepare({...options,project,product,hosts,action:prototypeAction,entryPath:path.join(base,'i3-composer-agent/hooks/i3-prototype.cjs'),entrySource:path.join(__dirname,'i3-prototype.cjs')});
+ // Retire the entire prototype group, including shared Buddy registrations.
+ // The legacy planner validates exact ownership; unknown/user-modified entries stop here.
+ const prototypeChange=P.prepare({...options,project,action:'disable',hosts:[],entryPath:path.join(base,'i3-composer-agent/hooks/i3-prototype.cjs')});
  const upstream=planUpstream({...options,base,product:record?.product||options.product,action,record,settingsText:prototypeChange.unchanged?before:prototypeChange.afterText,nodePath:process.execPath,
   hookDirectory:path.join(base,'i3-composer-agent/hooks'),scriptDigest:runtime.scriptDigest||require('./codebuddy-upstream.cjs').bundle(),dependencies:runtime.dependencies||dependencies()});
- if(disabled.size)upstream.recordAfter={...(upstream.recordAfter||{schemaVersion:1,owner:OWNER,base,scope:options.scope,product:record?.product||'auto',groups:{}}),prototypeDisabledHosts:[...disabled].sort()};
- const changes=[{file:settingsPath,before,after:upstream.afterText},{file:recordPath,before:recordText,after:upstream.recordAfter?json(upstream.recordAfter):null},
-  {file:prototypePath,before:prototypeText,after:prototypeChange.unchanged?prototypeText:prototypeChange.recordAfter?json(prototypeChange.recordAfter):null}];
- return {changes,summary:{host,scope:options.scope,base,product,action,requestedAction:requested,groups:ids,enabledHosts:prototypeChange.unchanged?activeHosts:prototypeChange.recordAfter?.hosts||[],disabledHosts:[...disabled].sort(),changed:changes.some(item=>item.before!==item.after),
-  enabledGroups:[...Object.keys(upstream.recordAfter?.groups||{}),...((prototypeChange.unchanged?prototype:prototypeChange.recordAfter)?['prototype']:[])],
-  ...(prototypeChange.summary?.transcript?{transcript:prototypeChange.summary.transcript}:{}),
-  next:'Desktop: reload; CodeBuddy CLI: review /hooks. Host identity, actual Skill invocation and recovery require native validation.'}};
+ const changes=[{file:settingsPath,before,after:upstream.afterText},{file:recordPath,before:recordText,after:upstream.recordAfter?json(upstream.recordAfter):null}];
+ if(prototypeText&&!prototypeChange.unchanged) {
+  const archive=path.join(base,'state/i3-prototype/history','retired-'+sha(prototypeText)+'.json'),previous=io.read(archive);
+  assert.ok(previous===null||previous===prototypeText,'Retired registration history differs; preserve it for review');
+  changes.push({file:archive,before:previous,after:prototypeText});
+ }
+ changes.push({file:prototypePath,before:prototypeText,after:prototypeChange.unchanged?prototypeText:null});
+ return {changes,summary:{host,scope:options.scope,base,product:record?.product||options.product||'auto',action,requestedAction:requested,groups:ids.filter(id=>id!=='prototype'),enabledHosts:[],
+  changed:changes.some(item=>item.before!==item.after),enabledGroups:Object.keys(upstream.recordAfter?.groups||{}),retiredGroups:['prototype'],prototypeRegistrationRemoved:!!prototypeText&&!prototypeChange.unchanged,
+  next:'Prototype audit Hooks are retired. Existing owned callbacks are removed; other Hook groups and user settings are preserved. Reload an affected host after cleanup.'}};
 }
 function check(options) {
  const {P,R}=modules(),{project,base}=location(options),io=R.fileIO,ids=selection(options.groups,options.action||'check'),settingsText=io.read(path.join(base,'settings.json')),settings=config(settingsText),deps=dependencies(),items=[];
  let record=null,error=null;try{record=require('./codebuddy-upstream.cjs').registration(base);}catch(e){error=e.message;}
  for(const id of ids) {
-  const item=catalog.find(x=>x.id===id),entry=path.join(base,'i3-composer-agent/hooks',id==='prototype'?'i3-prototype.cjs':'codebuddy-upstream.cjs');
-  if(id==='prototype'){try{const result=P.check({...options,project});items.push({...item,...result,...(result.effective===false&&result.status!=='failed'?{status:'shadowed'}:{}),entryPath:entry});}catch(e){items.push({...item,status:'failed',reason:e.message,entryPath:entry});}continue;}
+  if(id==='prototype')continue;
+  const item=catalog.find(x=>x.id===id),entry=path.join(base,'i3-composer-agent/hooks','codebuddy-upstream.cjs');
   const missingFiles=[entry,...item.files.map(file=>path.join(base,'i3-composer-agent/hooks',file))].filter(file=>!fs.existsSync(file));
   const row={...item,entryPath:entry,filesPresent:missingFiles.length===0,missingFiles,status:missingFiles.length?'not-installed':'files-present',invocationVerified:false,nativeValidation:'pending-user'};
   try{requirements(id,deps);}catch(e){row.dependencyIssue=e.message;}
@@ -154,12 +152,13 @@ function check(options) {
   }catch(e){row.status='failed';row.reason=e.message;}
   items.push(row);
  }
- return {host:options.host||'codebuddy',scope:options.scope,base,readOnly:true,changed:false,status:items.some(item=>item.status==='failed')?'failed':'checked',hooks:items,unmanagedHooks:unmanaged(settings),
+ const retired=P.check({...options,project});
+ return {host:options.host||'codebuddy',scope:options.scope,base,readOnly:true,changed:false,status:items.some(item=>item.status==='failed')||retired.status==='failed'?'failed':'checked',hooks:items,retiredHooks:[{id:'prototype',...retired}],unmanagedHooks:unmanaged(settings),
   next:'files-present is not enabled; registered is not triggered; triggered is not business acceptance. CLI: review /hooks; IDE: reload.'};
 }
 function configure(options){const change=prepare(options);return options.preview?change.summary:apply(change);}
 function main(argv=process.argv.slice(2)) {
- if(argv.includes('--help'))return {usage:'node manage.cjs list|check|enable|disable --host codebuddy|workbuddy --scope project|global --project <directory> [--groups <ids>|all] [--product auto|ide|cli] [--skill-routing hook] [--transcript-root <native-directory>|auto]',hooks:catalog,default:'Installer defaults prototype, preserving explicit disable; management enable/disable default prototype; list/check default all; identity/transcripts auto for new registrations',nativeValidation:'pending-user'};
+ if(argv.includes('--help'))return {usage:'node manage.cjs list|check|enable|disable --host codebuddy|workbuddy --scope project|global --project <directory> [--groups <ids>|all] [--product auto|ide|cli] [--skill-routing hook] [--transcript-root <native-directory>|auto]',hooks:catalog,default:'No automatic Hook registration. Enable requires explicit upstream groups; prototype audit is retired and its old registrations are cleaned during upgrades',nativeValidation:'pending-user'};
  const options={action:argv.shift()||'list',host:'codebuddy',project:process.cwd()};
  assert.ok(['list','check','enable','disable','keep'].includes(options.action),'Choose list, check, enable or disable');
  while(argv.length){const arg=argv.shift();assert.ok(arg.startsWith('--')&&argv[0]&&!argv[0].startsWith('--'),'Hook option needs a value');const key=arg.slice(2).replace(/-([a-z])/g,(_,c)=>c.toUpperCase());assert.ok(['host','scope','project','product','productVersion','transcriptRoot','groups','skillRouting'].includes(key),'Unknown Hook option');options[key]=argv.shift();}