@givolt/i3-composer-agent 3.2.1 → 4.0.1

package/evals/zh-CN/cases/i3-enterprise-sop.json

@@ -7,7 +7,7 @@
         "top_k": 1
       },
       {
-        "prompt": "使用 i3-enterprise-sop spec，从登记的本主题BRD、PRD和AD形成工程SPEC。",
+        "prompt": "使用 i3-enterprise-sop spec，从登记的本PBCBRD、PRD和AD形成工程SPEC。",
         "top_k": 1
       },
       {

package/evals/zh-CN/cases/i3-frontend-ui-engineering.json

@@ -25,8 +25,8 @@
         "owner": "i3-incremental-implementation"
       },
       {
-        "prompt": "选择 UI 原型模板，制作一个可操作的申请审批交互原型供评审。",
-        "owner": "i3-ui-prototype"
+        "prompt": "使用 i3-ui-demo，根据业务文档和内置模板制作 antdv-next 1.6.0 交互原型，必须使用 ui-ux-pro-max。",
+        "owner": "i3-ui-demo"
       }
     ]
   },

package/evals/zh-CN/cases/i3-security-and-hardening.json

@@ -13,6 +13,10 @@
       {
         "prompt": "依赖有 CVE，需要供应链安全审计和加固建议。",
         "top_k": 1
+      },
+      {
+        "prompt": "请补充 auth 认证并轮换会话 Cookie。",
+        "top_k": 1
       }
     ],
     "negative": [

package/evals/zh-CN/cases/i3-ui-demo.json

@@ -17,8 +17,8 @@
     ],
     "negative": [
       {
-        "prompt": "选择 UI 原型模板，制作一个可操作的申请审批交互原型供评审。",
-        "owner": "i3-ui-prototype"
+        "prompt": "按照现有任务计划增量实现 CSV 导出，每个切片都验证。",
+        "owner": "i3-incremental-implementation"
       },
       {
         "prompt": "开发一个响应式前端页面，做好组件布局和无障碍交互。",

package/evals/zh-CN/cases/i3-using-agent-skills.json

@@ -25,8 +25,8 @@
         "owner": "i3-ci-cd-and-automation"
       },
       {
-        "prompt": "选择 UI 原型模板，制作一个可操作的申请审批交互原型供评审。",
-        "owner": "i3-ui-prototype"
+        "prompt": "使用 i3-ui-demo，根据业务文档和内置模板制作 antdv-next 1.6.0 交互原型，必须使用 ui-ux-pro-max。",
+        "owner": "i3-ui-demo"
       }
     ]
   },
@@ -49,7 +49,7 @@
       "id": 1002,
       "kind": "dialogue",
       "prompt": "用户希望根据可编辑 HTML 参考和简短业务说明制作设备管理评审原型。请在当前会话选择适用技能并说明下一步；不创建文件，不启动独立任务。",
-      "expected_output": "Ordinary routing to i3-ui-prototype in the main session, with operation and scope decided by the working skill",
+      "expected_output": "Ordinary routing to i3-ui-demo in the main session, with operation and scope decided by the working skill",
       "expectations": [
         "The meta-skill selects the prototype workflow for reviewable prototype work",
         "The main session uses the working skill without requiring a dedicated persona, persistent routing rule or parent-child result protocol",
@@ -61,11 +61,11 @@
     {
       "id": 1003,
       "kind": "dialogue",
-      "prompt": "分别收到两个任务：实现已认可的生产 Vue 表单组件并支持键盘操作；对照已认可基线检查评审原型。请分别路由并说明原工程工作流如何继续适用，不执行这两个任务。",
-      "expected_output": "Separate routing for production engineering and prototype review without changing the general lifecycle",
+      "prompt": "分别收到两个任务：实现已认可的生产 Vue 表单组件并支持键盘操作；沿用已评审设计修改已有 UI demo。请分别路由并说明原工程工作流如何继续适用，不执行这两个任务。",
+      "expected_output": "Separate routing for production engineering and UI demo updates without changing the general lifecycle",
       "expectations": [
         "Production UI implementation follows the engineering workflow with the frontend implementation method",
-        "Prototype fidelity inspection selects the prototype workflow",
+        "Incremental UI demo work selects i3-ui-demo and preserves the reviewed design",
         "The prototype route does not replace generic planning, implementation or review methods or impose prototype-specific delegation on them",
         "The response does not invent runtime verification or human approval",
         "人类可读的追问、说明、进度、报告与生成文档使用简体中文；保留代码、路径、工具参数、JSON 协议及机器状态的原始格式。"

package/hooks/SDD-CACHE.md

@@ -77,7 +77,7 @@ One cache entry per URL, stored as JSON in `.claude/sdd-cache/<sha>.json`:
 
 - Entry is served only if the origin confirms `304 Not Modified`.
 - Entries without an `ETag` or `Last-Modified` header are never cached — without a validator, the hook cannot verify freshness later, and caching would mean trusting memory.
-- Cache key is `sha256(url)`. The same URL asked with a different prompt hits the same entry; the cached body reflects the prompt used on the first fetch, and that prompt is shown alongside the hit so the agent can decide whether to re-use or re-fetch manually.
+- Cache key is `sha256(url)`. The same URL asked with a different prompt hits the same entry; the cached body reflects the prompt used on the first fetch, and that prompt is shown alongside the hit so the agent can decide whether to reuse or re-fetch manually.
 
 **What the agent sees:**
 

package/package.json

@@ -57,7 +57,6 @@
     "evals/cases/i3-spec-driven-development.json",
     "evals/cases/i3-test-driven-development.json",
     "evals/cases/i3-ui-demo.json",
-    "evals/cases/i3-ui-prototype.json",
     "evals/cases/i3-using-agent-skills.json",
     "evals/fixtures/i3-api-and-interface-design/service-brief.md",
     "evals/fixtures/i3-browser-testing-with-devtools/README.md",
@@ -104,13 +103,6 @@
     "evals/fixtures/i3-test-driven-development/src/split.js",
     "evals/fixtures/i3-test-driven-development/test/split.test.js",
     "evals/fixtures/i3-ui-demo/asset-management.md",
-    "evals/fixtures/i3-ui-prototype/admin-list/assets/reference.css",
-    "evals/fixtures/i3-ui-prototype/admin-list/assets/reference.js",
-    "evals/fixtures/i3-ui-prototype/admin-list/capability-definition.json",
-    "evals/fixtures/i3-ui-prototype/admin-list/index.html",
-    "evals/fixtures/i3-ui-prototype/admin-list/readme.md",
-    "evals/fixtures/i3-ui-prototype/admin-list/template.json",
-    "evals/fixtures/i3-ui-prototype/business-brief.md",
     "evals/fixtures/i3-using-agent-skills/incident.md",
     "evals/fixtures/incremental-implementation-pressure/draft-export.js",
     "evals/fixtures/incremental-implementation-pressure/scenario.md",
@@ -127,6 +119,11 @@
     "evals/plugin/code-review-stays-quiet/graders/not-fired.md",
     "evals/plugin/code-review-stays-quiet/graders/tdd-fired.md",
     "evals/plugin/code-review-stays-quiet/prompt.md",
+    "evals/plugin/simplify-fires-on-pasted-function/graders/behavior-kept-and-explained.md",
+    "evals/plugin/simplify-fires-on-pasted-function/graders/skill-fired.md",
+    "evals/plugin/simplify-fires-on-pasted-function/prompt.md",
+    "evals/plugin/simplify-stays-quiet-on-make-it-fast/graders/not-fired.md",
+    "evals/plugin/simplify-stays-quiet-on-make-it-fast/prompt.md",
     "evals/plugin/tdd-fires-on-pasted-bug/graders/failing-test-first.md",
     "evals/plugin/tdd-fires-on-pasted-bug/graders/skill-fired.md",
     "evals/plugin/tdd-fires-on-pasted-bug/prompt.md",
@@ -159,7 +156,6 @@
     "evals/zh-CN/cases/i3-spec-driven-development.json",
     "evals/zh-CN/cases/i3-test-driven-development.json",
     "evals/zh-CN/cases/i3-ui-demo.json",
-    "evals/zh-CN/cases/i3-ui-prototype.json",
     "evals/zh-CN/cases/i3-using-agent-skills.json",
     "docs/adoption-guide.md",
     "docs/advanced-per-agent-configuration.md",
@@ -183,45 +179,16 @@
     "plugin.json",
     "README.md",
     "LICENSE",
-    "scripts/design-provider-discovery-test.js",
-    "scripts/design-provider-test.js",
-    "scripts/enterprise-template-test.js",
     "scripts/floor-guard-reference-test.js",
-    "scripts/lib/prototype-fixture.cjs",
+    "scripts/lib/execution-status.js",
     "scripts/lib/skill-lint-test.js",
     "scripts/lib/skill-lint.js",
-    "scripts/prototype-cache-test.js",
-    "scripts/prototype-generation-entry-test.js",
-    "scripts/prototype-generation-evidence-test.js",
-    "scripts/prototype-generation-native-test.js",
-    "scripts/prototype-generation-test.js",
-    "scripts/prototype-inventory-test.js",
-    "scripts/prototype-locations-test.js",
-    "scripts/prototype-project-test.js",
     "scripts/run-evals-test.js",
     "scripts/run-evals.js",
     "scripts/run-regressions.js",
-    "scripts/template-adapter-test.js",
     "scripts/ui-demo-dependencies-test.js",
     "scripts/ui-demo-mcp-test.js",
     "scripts/ui-demo-test.js",
-    "scripts/ui-prototype-binding-recovery-test.js",
-    "scripts/ui-prototype-buddy-lifecycle-test.js",
-    "scripts/ui-prototype-codebuddy-hook-test.js",
-    "scripts/ui-prototype-content-test.js",
-    "scripts/ui-prototype-dependencies-test.js",
-    "scripts/ui-prototype-devtools-test.js",
-    "scripts/ui-prototype-execution-evidence-test.js",
-    "scripts/ui-prototype-execution-gates-test.js",
-    "scripts/ui-prototype-execution-policy-test.js",
-    "scripts/ui-prototype-execution-runtime-test.js",
-    "scripts/ui-prototype-ide-source-test.js",
-    "scripts/ui-prototype-native-test.js",
-    "scripts/ui-prototype-recovery-test.js",
-    "scripts/ui-prototype-registration-test.js",
-    "scripts/ui-prototype-template-test.js",
-    "scripts/ui-prototype-test.js",
-    "scripts/ui-prototype-transcript-auto-test.js",
     "scripts/validate-artifact-paths-test.js",
     "scripts/validate-artifact-paths.js",
     "scripts/validate-commands-test.js",
@@ -248,7 +215,6 @@
     "claude-code"
   ],
   "i3ComposerAgent": {
-    "prototypeAuditHooks": "retired",
     "pluginFiles": [
       "bin",
       "skills",
@@ -288,7 +254,6 @@
       "evals/cases/i3-spec-driven-development.json",
       "evals/cases/i3-test-driven-development.json",
       "evals/cases/i3-ui-demo.json",
-      "evals/cases/i3-ui-prototype.json",
       "evals/cases/i3-using-agent-skills.json",
       "evals/fixtures/i3-api-and-interface-design/service-brief.md",
       "evals/fixtures/i3-browser-testing-with-devtools/README.md",
@@ -335,13 +300,6 @@
       "evals/fixtures/i3-test-driven-development/src/split.js",
       "evals/fixtures/i3-test-driven-development/test/split.test.js",
       "evals/fixtures/i3-ui-demo/asset-management.md",
-      "evals/fixtures/i3-ui-prototype/admin-list/assets/reference.css",
-      "evals/fixtures/i3-ui-prototype/admin-list/assets/reference.js",
-      "evals/fixtures/i3-ui-prototype/admin-list/capability-definition.json",
-      "evals/fixtures/i3-ui-prototype/admin-list/index.html",
-      "evals/fixtures/i3-ui-prototype/admin-list/readme.md",
-      "evals/fixtures/i3-ui-prototype/admin-list/template.json",
-      "evals/fixtures/i3-ui-prototype/business-brief.md",
       "evals/fixtures/i3-using-agent-skills/incident.md",
       "evals/fixtures/incremental-implementation-pressure/draft-export.js",
       "evals/fixtures/incremental-implementation-pressure/scenario.md",
@@ -358,6 +316,11 @@
       "evals/plugin/code-review-stays-quiet/graders/not-fired.md",
       "evals/plugin/code-review-stays-quiet/graders/tdd-fired.md",
       "evals/plugin/code-review-stays-quiet/prompt.md",
+      "evals/plugin/simplify-fires-on-pasted-function/graders/behavior-kept-and-explained.md",
+      "evals/plugin/simplify-fires-on-pasted-function/graders/skill-fired.md",
+      "evals/plugin/simplify-fires-on-pasted-function/prompt.md",
+      "evals/plugin/simplify-stays-quiet-on-make-it-fast/graders/not-fired.md",
+      "evals/plugin/simplify-stays-quiet-on-make-it-fast/prompt.md",
       "evals/plugin/tdd-fires-on-pasted-bug/graders/failing-test-first.md",
       "evals/plugin/tdd-fires-on-pasted-bug/graders/skill-fired.md",
       "evals/plugin/tdd-fires-on-pasted-bug/prompt.md",
@@ -390,7 +353,6 @@
       "evals/zh-CN/cases/i3-spec-driven-development.json",
       "evals/zh-CN/cases/i3-test-driven-development.json",
       "evals/zh-CN/cases/i3-ui-demo.json",
-      "evals/zh-CN/cases/i3-ui-prototype.json",
       "evals/zh-CN/cases/i3-using-agent-skills.json",
       "docs/adoption-guide.md",
       "docs/advanced-per-agent-configuration.md",
@@ -415,45 +377,16 @@
       "package.json",
       "README.md",
       "LICENSE",
-      "scripts/design-provider-discovery-test.js",
-      "scripts/design-provider-test.js",
-      "scripts/enterprise-template-test.js",
       "scripts/floor-guard-reference-test.js",
-      "scripts/lib/prototype-fixture.cjs",
+      "scripts/lib/execution-status.js",
       "scripts/lib/skill-lint-test.js",
       "scripts/lib/skill-lint.js",
-      "scripts/prototype-cache-test.js",
-      "scripts/prototype-generation-entry-test.js",
-      "scripts/prototype-generation-evidence-test.js",
-      "scripts/prototype-generation-native-test.js",
-      "scripts/prototype-generation-test.js",
-      "scripts/prototype-inventory-test.js",
-      "scripts/prototype-locations-test.js",
-      "scripts/prototype-project-test.js",
       "scripts/run-evals-test.js",
       "scripts/run-evals.js",
       "scripts/run-regressions.js",
-      "scripts/template-adapter-test.js",
       "scripts/ui-demo-dependencies-test.js",
       "scripts/ui-demo-mcp-test.js",
       "scripts/ui-demo-test.js",
-      "scripts/ui-prototype-binding-recovery-test.js",
-      "scripts/ui-prototype-buddy-lifecycle-test.js",
-      "scripts/ui-prototype-codebuddy-hook-test.js",
-      "scripts/ui-prototype-content-test.js",
-      "scripts/ui-prototype-dependencies-test.js",
-      "scripts/ui-prototype-devtools-test.js",
-      "scripts/ui-prototype-execution-evidence-test.js",
-      "scripts/ui-prototype-execution-gates-test.js",
-      "scripts/ui-prototype-execution-policy-test.js",
-      "scripts/ui-prototype-execution-runtime-test.js",
-      "scripts/ui-prototype-ide-source-test.js",
-      "scripts/ui-prototype-native-test.js",
-      "scripts/ui-prototype-recovery-test.js",
-      "scripts/ui-prototype-registration-test.js",
-      "scripts/ui-prototype-template-test.js",
-      "scripts/ui-prototype-test.js",
-      "scripts/ui-prototype-transcript-auto-test.js",
       "scripts/validate-artifact-paths-test.js",
       "scripts/validate-artifact-paths.js",
       "scripts/validate-commands-test.js",
@@ -465,7 +398,7 @@
       "scripts/validate-versions.js"
     ]
   },
-  "version": "3.2.1",
+  "version": "4.0.1",
   "repository": {
     "type": "git",
     "url": "https://github.com/49780522/i3-composer-agent.git"

package/plugin.json

@@ -1,7 +1,20 @@
 {
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "i3-composer-agent",
-  "version": "3.2.1",
+  "version": "4.0.1",
   "description": "覆盖需求、计划、开发、测试、审查与发布的软件工程技能，默认使用简体中文。",
+  "author": {
+    "name": "Givolt"
+  },
   "homepage": "https://github.com/49780522/i3-composer-agent",
-  "repository": "https://github.com/49780522/i3-composer-agent"
+  "repository": "https://github.com/49780522/i3-composer-agent",
+  "license": "MIT",
+  "keywords": [
+    "skills",
+    "engineering",
+    "spec",
+    "tdd",
+    "review",
+    "ship"
+  ]
 }

package/references/accessibility-checklist.md

@@ -79,7 +79,7 @@ Quick reference for WCAG 2.1 AA compliance. Use alongside the `i3-frontend-ui-en
 
 ```html
 <!-- Explicit label association -->
-<label htmlFor="email">Email address</label>
+<label for="email">Email address</label>
 <input id="email" type="email" required />
 
 <!-- Implicit wrapping -->
@@ -112,7 +112,7 @@ Quick reference for WCAG 2.1 AA compliance. Use alongside the `i3-frontend-ui-en
 </dialog>
 
 <!-- Loading states -->
-<div aria-busy="true" aria-label="Loading tasks">
+<div role="status" aria-busy="true" aria-label="Loading tasks">
   <Spinner />
 </div>
 ```
@@ -123,7 +123,7 @@ Quick reference for WCAG 2.1 AA compliance. Use alongside the `i3-frontend-ui-en
 <ul role="list" aria-label="Tasks">
   <li>
     <input type="checkbox" id="task-1" aria-label="Complete: Buy groceries" />
-    <label htmlFor="task-1">Buy groceries</label>
+    <label for="task-1">Buy groceries</label>
   </li>
 </ul>
 ```
@@ -132,7 +132,7 @@ Quick reference for WCAG 2.1 AA compliance. Use alongside the `i3-frontend-ui-en
 
 ```bash
 # Automated audit
-npx axe-core          # Programmatic accessibility testing
+npx --package=@axe-core/cli axe http://localhost:3000
 npx pa11y             # CLI accessibility checker
 
 # In browser

package/references/performance-checklist.md

@@ -200,7 +200,7 @@ For a shared cache, the same idea needs a distributed lock, or `stale-while-reva
 
 ```bash
 # Lighthouse CLI
-npx lighthouse https://localhost:3000 --output json --output-path ./report.json
+npx lighthouse http://localhost:3000 --output json --output-path ./report.json
 
 # Bundle analysis
 npx webpack-bundle-analyzer stats.json
@@ -218,9 +218,10 @@ onLCP(console.log);
 onINP(console.log);
 onCLS(console.log);
 
-// INP with interaction-level detail (attribution build)
-import { onINP } from 'web-vitals/attribution';
-onINP(({ value, attribution }) => {
+// INP with interaction-level detail (attribution build). The attribution build
+// exports the same names, so alias it when both builds share a module.
+import { onINP as onINPWithAttribution } from 'web-vitals/attribution';
+onINPWithAttribution(({ value, attribution }) => {
   const { interactionTarget, inputDelay, processingDuration, presentationDelay } = attribution;
   console.log({ value, interactionTarget, inputDelay, processingDuration, presentationDelay });
 });

package/references/testing-patterns.md

@@ -220,7 +220,8 @@ test('user can create and complete a task', async ({ page }) => {
   await page.getByRole('button', { name: /create/i }).click();
 
   // Verify task appears
-  const task = page.getByRole('listitem', { name: /buy groceries/i });
+  // listitem has no accessible name from its content, so filter by text
+  const task = page.getByRole('listitem').filter({ hasText: /buy groceries/i });
   await expect(task).toBeVisible();
 
   // Complete the task

package/scripts/floor-guard-reference-test.js

@@ -289,3 +289,35 @@ test('floor guard: outside a git work tree exits 2, never 0', () => {
   const result = runGuard(dir);
   assert.equal(result.status, 2, result.stderr);
 });
+
+// The skill's CONSTRAINTS.md template keeps a ratchet's direction in its own column:
+// `| Project coverage | 62.4% | must not fall |`. The direction words sit after a `|`.
+const MEASURED = [
+  '',
+  '## Measured, not yet enforced',
+  '',
+  '| Metric | Today | Direction |',
+  '|--------|-------|-----------|',
+  '| Project coverage | 62.4% | must not fall |',
+  '| Bundle size (main) | 184 kB | must not grow |',
+  '',
+].join('\n');
+
+for (const [name, expectedExit, from, to] of [
+  ['raising a must-not-fall ratchet in its own column is silent', 0, '| 62.4% |', '| 65.0% |'],
+  ['lowering a must-not-fall ratchet in its own column is a violation', 1, '| 62.4% |', '| 55.0% |'],
+  ['lowering a must-not-grow ratchet in its own column is silent', 0, '| 184 kB |', '| 170 kB |'],
+  ['raising a must-not-grow ratchet in its own column is a violation', 1, '| 184 kB |', '| 250 kB |'],
+]) {
+  test(`floor guard: ${name}`, () => {
+    const root = makeRepo();
+    commitFile(root, 'CONSTRAINTS.md', CONSTRAINTS + MEASURED);
+    editConstraints(root, from, to);
+    const result = runGuard(root);
+    assert.equal(
+      result.status, expectedExit,
+      `expected exit ${expectedExit}, got ${result.status}\nstdout: ${result.stdout}\nstderr: ${result.stderr}`,
+    );
+    if (expectedExit === 1) assert.match(result.stderr, /\[threshold-loosened\]/);
+  });
+}

package/scripts/lib/execution-status.js

@@ -0,0 +1,44 @@
+'use strict';
+
+// Process exit zero alone does not establish that a stream-json run finished.
+function executionFailure(trace) {
+  let events;
+  try {
+    events = trace.split('\n').filter((line) => line.trim()).map((line) => JSON.parse(line));
+  } catch { return 'invalid execution JSON'; }
+  if (events.some((event) => !event || typeof event !== 'object' || Array.isArray(event))) {
+    return 'invalid execution event';
+  }
+  const turns = events.filter((event) => ['assistant', 'user', 'result'].includes(event.type));
+  const final = turns.at(-1);
+  if (final?.type !== 'result' || final.subtype !== 'success' || final.is_error !== false) {
+    return 'missing successful terminal result';
+  }
+  if (final.permission_denials !== undefined && !Array.isArray(final.permission_denials)) return 'invalid permission denials';
+  if (final.permission_denials?.length) return 'permission denied';
+  const pending = new Set();
+  const seen = new Set();
+  for (const event of turns) {
+    if (event.type === 'result') continue;
+    const message = event.message;
+    if (!message || typeof message !== 'object' || Array.isArray(message)) return 'invalid message';
+    const content = message.content;
+    if (event.type === 'user' && typeof content === 'string') continue;
+    if (!Array.isArray(content)) return 'invalid message content';
+    for (const block of content) {
+      if (!block || typeof block !== 'object' || Array.isArray(block)) return 'invalid message content';
+      if (event.type === 'assistant' && block.type === 'tool_use') {
+        if (typeof block.id !== 'string' || !block.id || seen.has(block.id)) return 'invalid tool call id';
+        seen.add(block.id);
+        pending.add(block.id);
+      }
+      if (event.type === 'user' && block.type === 'tool_result' && !pending.delete(block.tool_use_id)) {
+        return 'unmatched tool result';
+      }
+    }
+  }
+  // A returned error may be an intentional RED probe; the grader judges recovery.
+  return pending.size ? 'missing tool result' : null;
+}
+
+module.exports = { executionFailure };