@openprd/cli 0.1.18 → 0.1.21

package/.openprd/changes/openprd-generated-change/tasks.md

@@ -0,0 +1,357 @@
+# 任务
+
+- [x] T001.01 评审生成的 spec 覆盖
+  - type: governance
+  - done: 生成的 agent-requirements spec 符合 PRD 意图
+  - verify: openprd change . --validate --change openprd-generated-change
+  - test-layer: manual
+  - test-size: manual
+  - test-scope: governance
+  - evidence-plan: openprd change . --validate --change openprd-generated-change
+  - upgrade-reason: 治理任务以结构校验、评审确认和变更状态证据为主
+  - execution-mode: serial
+  - parallel-group: governance
+  - write-scope: .openprd/changes/**, .openprd/**
+  - owner-role: main-agent
+  - local-verify: openprd change . --validate --change openprd-generated-change
+  - integration-owner: main-agent
+
+- [x] T001.02 对齐共享契约与 Host API 调用边界
+  - type: implementation
+  - deps: T001.01
+  - done: 共享契约、Host API 和上下游调用边界已经对齐，后续功能可以直接接线。 涉及: 依赖 0.1.18 生图路由协议。
+  - verify: openprd tasks . --change openprd-generated-change --item T001.02 --evidence-required
+  - test-layer: integration, e2e
+  - test-size: large
+  - test-scope: visual-flow
+  - evidence-plan: 主流程自动化、截图或 visual-compare 证据 + 本任务 verify 命令；轻量 UI 可视优化也需要 before/after、verification-board 或 alignment-board 证据，同构卡片/列表要覆盖内部内容槽位
+  - upgrade-reason: 触达用户可见路径，需要端到端或视觉级证据；轻量 UI 可视优化不能只用构建或 dev-check 收口
+  - execution-mode: parallel-workers
+  - parallel-group: contracts
+  - write-scope: src/**, test/**, docs/basic/backend-structure.md
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-generated-change --item T001.02 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.03 接通界面入口、导航与页面挂载
+  - type: implementation
+  - deps: T001.02
+  - done: 用户可以从正确入口进入对应界面，页面挂载与状态收尾已经接通。 涉及: 依赖 0.1.18 生图路由协议。
+  - verify: openprd tasks . --change openprd-generated-change --item T001.03 --evidence-required
+  - test-layer: integration, e2e
+  - test-size: large
+  - test-scope: visual-flow
+  - evidence-plan: 主流程自动化、截图或 visual-compare 证据 + 本任务 verify 命令；轻量 UI 可视优化也需要 before/after、verification-board 或 alignment-board 证据，同构卡片/列表要覆盖内部内容槽位
+  - upgrade-reason: 触达用户可见路径，需要端到端或视觉级证据；轻量 UI 可视优化不能只用构建或 dev-check 收口
+  - execution-mode: parallel-workers
+  - parallel-group: contracts
+  - write-scope: src/**, test/**, docs/basic/backend-structure.md
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-generated-change --item T001.03 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.04 实现选区状态随画布保存并可查询
+  - type: implementation
+  - deps: T001.03
+  - done: 已完成：选区状态随画布保存并可查询
+  - verify: openprd tasks . --change openprd-generated-change --item T001.04 --evidence-required
+  - test-layer: integration, e2e
+  - test-size: large
+  - test-scope: visual-flow
+  - evidence-plan: 主流程自动化、截图或 visual-compare 证据 + 本任务 verify 命令；轻量 UI 可视优化也需要 before/after、verification-board 或 alignment-board 证据，同构卡片/列表要覆盖内部内容槽位
+  - upgrade-reason: 触达用户可见路径，需要端到端或视觉级证据；轻量 UI 可视优化不能只用构建或 dev-check 收口
+  - execution-mode: parallel-workers
+  - parallel-group: domain
+  - write-scope: src/**, test/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-generated-change --item T001.04 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.05 实现插图 API 支持 left/right/below 摆放与 holder 替换
+  - type: implementation
+  - deps: T001.04
+  - done: 已完成：插图 API 支持 left/right/below 摆放与 holder 替换
+  - verify: openprd tasks . --change openprd-generated-change --item T001.05 --evidence-required
+  - test-layer: unit, integration
+  - test-size: medium
+  - test-scope: api-contract
+  - evidence-plan: 单元测试锁定规则 + 集成或命令行契约验证
+  - upgrade-reason: 触达 CLI/API/Agent 契约或生成物，需要中间层验证
+  - execution-mode: parallel-workers
+  - parallel-group: contracts
+  - write-scope: src/**, test/**, docs/basic/backend-structure.md
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-generated-change --item T001.05 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.06 实现标注导出携带 annotationEdit 与源图形 ID 元数据
+  - type: implementation
+  - deps: T001.05
+  - done: 已完成：标注导出携带 annotationEdit 与源图形 ID 元数据
+  - verify: openprd tasks . --change openprd-generated-change --item T001.06 --evidence-required
+  - test-layer: unit, integration
+  - test-size: medium
+  - test-scope: cli-contract
+  - evidence-plan: 单元测试锁定规则 + 集成或命令行契约验证
+  - upgrade-reason: 触达 CLI/API/Agent 契约或生成物，需要中间层验证
+  - execution-mode: parallel-workers
+  - parallel-group: domain
+  - write-scope: src/**, test/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-generated-change --item T001.06 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.07 实现生图占位卡 handoff 记录携带宽高与比例契约
+  - type: implementation
+  - deps: T001.06
+  - done: 已完成：生图占位卡 handoff 记录携带宽高与比例契约
+  - verify: openprd tasks . --change openprd-generated-change --item T001.07 --evidence-required
+  - test-layer: unit, integration
+  - test-size: medium
+  - test-scope: cli-contract
+  - evidence-plan: 单元测试锁定规则 + 集成或命令行契约验证
+  - upgrade-reason: 触达 CLI/API/Agent 契约或生成物，需要中间层验证
+  - execution-mode: parallel-workers
+  - parallel-group: contracts
+  - write-scope: src/**, test/**, docs/basic/backend-structure.md
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-generated-change --item T001.07 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.08 实现hook 识别画布协同意图并注入闭环指引
+  - type: implementation
+  - deps: T001.07
+  - done: 已完成：hook 识别画布协同意图并注入闭环指引
+  - verify: openprd tasks . --change openprd-generated-change --item T001.08 --evidence-required
+  - test-layer: unit, integration
+  - test-size: medium
+  - test-scope: cli-contract
+  - evidence-plan: 单元测试锁定规则 + 集成或命令行契约验证
+  - upgrade-reason: 触达 CLI/API/Agent 契约或生成物，需要中间层验证
+  - execution-mode: serial
+  - parallel-group: integration
+  - write-scope: src/**, test/**, docs/basic/**
+  - owner-role: main-agent
+  - local-verify: openprd tasks . --change openprd-generated-change --item T001.08 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.09 打通主流程闭环：用户在画布圈选原图并批注，点“标注修改请求”，Agent 读标注生成修订图并放回原图右侧 等 4 项
+  - type: implementation
+  - deps: T001.08
+  - done: 主流程关键节点已经打通，用户可以按预期从入口走到结果收尾。 涉及: 用户在画布圈选原图并批注，点“标注修改请求”，Agent 读标注生成修订图并放回原图右侧 等 4 项。
+  - verify: openprd tasks . --change openprd-generated-change --item T001.09 --evidence-required
+  - test-layer: integration, e2e
+  - test-size: large
+  - test-scope: user-flow
+  - evidence-plan: 主流程自动化、截图或 visual-compare 证据 + 本任务 verify 命令；轻量 UI 可视优化也需要 before/after、verification-board 或 alignment-board 证据，同构卡片/列表要覆盖内部内容槽位
+  - upgrade-reason: 触达用户可见路径，需要端到端或视觉级证据；轻量 UI 可视优化不能只用构建或 dev-check 收口
+  - execution-mode: serial
+  - parallel-group: integration
+  - write-scope: src/**, test/**, docs/basic/**
+  - owner-role: main-agent
+  - local-verify: openprd tasks . --change openprd-generated-change --item T001.09 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.10 验证canvas 服务新增 GET /api/selection 与 POST /api/insert-image 且测试通过
+  - type: verification
+  - deps: T001.09
+  - done: 已验证：canvas 服务新增 GET /api/selection 与 POST /api/insert-image 且测试通过
+  - verify: openprd tasks . --change openprd-generated-change --item T001.10 --evidence-required
+  - test-layer: unit, integration
+  - test-size: medium
+  - test-scope: api-contract
+  - evidence-plan: 单元测试锁定规则 + 集成或命令行契约验证
+  - upgrade-reason: 触达 CLI/API/Agent 契约或生成物，需要中间层验证
+  - execution-mode: parallel-workers
+  - parallel-group: verification
+  - write-scope: test/**, .openprd/harness/test-reports/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-generated-change --item T001.10 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.11 验证标注导出带 annotationEdit 元数据并能被 hook 指引消费
+  - type: verification
+  - deps: T001.10
+  - done: 已验证：标注导出带 annotationEdit 元数据并能被 hook 指引消费
+  - verify: openprd tasks . --change openprd-generated-change --item T001.11 --evidence-required
+  - test-layer: unit, integration
+  - test-size: medium
+  - test-scope: cli-contract
+  - evidence-plan: 单元测试锁定规则 + 集成或命令行契约验证
+  - upgrade-reason: 触达 CLI/API/Agent 契约或生成物，需要中间层验证
+  - execution-mode: parallel-workers
+  - parallel-group: verification
+  - write-scope: test/**, .openprd/harness/test-reports/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-generated-change --item T001.11 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.12 验证hook 对画布协同意图注入引导语
+  - type: verification
+  - deps: T001.11
+  - done: 已验证：hook 对画布协同意图注入引导语
+  - verify: openprd tasks . --change openprd-generated-change --item T001.12 --evidence-required
+  - test-layer: unit, integration
+  - test-size: medium
+  - test-scope: cli-contract
+  - evidence-plan: 单元测试锁定规则 + 集成或命令行契约验证
+  - upgrade-reason: 触达 CLI/API/Agent 契约或生成物，需要中间层验证
+  - execution-mode: parallel-workers
+  - parallel-group: verification
+  - write-scope: test/**, .openprd/harness/test-reports/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-generated-change --item T001.12 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.13 回归非功能约束：界面文案面向普通用户 / API 只监听本地回环地址
+  - type: verification
+  - deps: T001.12
+  - done: 非功能约束已经回归确认。 涉及: 界面文案面向普通用户 / API 只监听本地回环地址。
+  - verify: openprd tasks . --change openprd-generated-change --item T001.13 --evidence-required
+  - test-layer: integration, e2e
+  - test-size: large
+  - test-scope: user-flow
+  - evidence-plan: 主流程自动化、截图或 visual-compare 证据 + 本任务 verify 命令；轻量 UI 可视优化也需要 before/after、verification-board 或 alignment-board 证据，同构卡片/列表要覆盖内部内容槽位
+  - upgrade-reason: 触达用户可见路径，需要端到端或视觉级证据；轻量 UI 可视优化不能只用构建或 dev-check 收口
+  - execution-mode: parallel-workers
+  - parallel-group: verification
+  - write-scope: test/**, .openprd/harness/test-reports/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-generated-change --item T001.13 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.14 回归非功能约束：新增代码有集成测试覆盖
+  - type: verification
+  - deps: T001.13
+  - done: 非功能约束已经回归确认。 涉及: 新增代码有集成测试覆盖。
+  - verify: openprd tasks . --change openprd-generated-change --item T001.14 --evidence-required
+  - test-layer: unit, integration
+  - test-size: medium
+  - test-scope: cli-contract
+  - evidence-plan: 单元测试锁定规则 + 集成或命令行契约验证
+  - upgrade-reason: 触达 CLI/API/Agent 契约或生成物，需要中间层验证
+  - execution-mode: parallel-workers
+  - parallel-group: verification
+  - write-scope: test/**, .openprd/harness/test-reports/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-generated-change --item T001.14 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.15 回归边界条件与失败处理：边界情况：无选区时 selection API 返回空且 Agent 收到明确提示 等 5 项
+  - type: verification
+  - deps: T001.14
+  - done: 边界条件与失败处理已经回归确认。 涉及: 边界情况：无选区时 selection API 返回空且 Agent 收到明确提示 等 5 项。
+  - verify: openprd tasks . --change openprd-generated-change --item T001.15 --evidence-required
+  - test-layer: unit, integration
+  - test-size: medium
+  - test-scope: api-contract
+  - evidence-plan: 单元测试锁定规则 + 集成或命令行契约验证
+  - upgrade-reason: 触达 CLI/API/Agent 契约或生成物，需要中间层验证
+  - execution-mode: parallel-workers
+  - parallel-group: verification
+  - write-scope: test/**, .openprd/harness/test-reports/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-generated-change --item T001.15 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.16 验证成本与额度护栏
+  - type: verification
+  - deps: T001.15
+  - done: 已验证免费、试用或低权限用户不能绕过额度、并发、频率或总量限制
+  - verify: openprd tasks . --change openprd-generated-change --item T001.16 --evidence-required
+  - test-layer: integration, security
+  - test-size: medium
+  - test-scope: security
+  - evidence-plan: 正向路径 + 越权、额度、并发或敏感信息负向验证
+  - upgrade-reason: 触达权限、安全、成本或滥用边界，需要至少集成级证据
+  - execution-mode: parallel-workers
+  - parallel-group: verification
+  - write-scope: test/**, .openprd/harness/test-reports/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-generated-change --item T001.16 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.17 验证滥用与越权路径
+  - type: verification
+  - deps: T001.16
+  - done: 已覆盖重复请求、并发请求、越权身份和异常恢复等负向场景
+  - verify: openprd tasks . --change openprd-generated-change --item T001.17 --evidence-required
+  - test-layer: integration, security
+  - test-size: medium
+  - test-scope: security
+  - evidence-plan: 正向路径 + 越权、额度、并发或敏感信息负向验证
+  - upgrade-reason: 触达权限、安全、成本或滥用边界，需要至少集成级证据
+  - execution-mode: parallel-workers
+  - parallel-group: verification
+  - write-scope: test/**, .openprd/harness/test-reports/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-generated-change --item T001.17 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.18 验证成本监控、报警和止损
+  - type: verification
+  - deps: T001.17
+  - done: 已确认用量或成本信号、报警阈值和人工/自动止损动作可执行
+  - verify: openprd tasks . --change openprd-generated-change --item T001.18 --evidence-required
+  - test-layer: integration, security
+  - test-size: medium
+  - test-scope: security
+  - evidence-plan: 正向路径 + 越权、额度、并发或敏感信息负向验证
+  - upgrade-reason: 触达权限、安全、成本或滥用边界，需要至少集成级证据
+  - execution-mode: parallel-workers
+  - parallel-group: verification
+  - write-scope: test/**, .openprd/harness/test-reports/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-generated-change --item T001.18 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.19 维护 docs/basic 项目基础文档
+  - type: documentation
+  - deps: T001.18
+  - done: 已检查 docs/basic 是否缺失或因本次需求、流程、结构、依赖、产品行为变化而过期；若涉及后端、脚本、Agent 或工具链变更，已同步评估 CLI 与 API 接入面，并在 backend-structure.md 中记录事实或不适用原因；需要更新的基础文档已同步
+  - verify: openprd standards . --verify
+  - test-layer: manual
+  - test-size: manual
+  - test-scope: docs
+  - evidence-plan: openprd standards . --verify
+  - upgrade-reason: 文档任务以标准校验和人工审查证据为主
+  - execution-mode: parallel-workers
+  - parallel-group: docs
+  - write-scope: docs/basic/**, README*.md
+  - owner-role: worker
+  - local-verify: openprd standards . --verify
+  - integration-owner: main-agent
+
+- [x] T001.20 更新文件说明书和文件夹 README
+  - type: documentation
+  - deps: T001.19
+  - done: 本次变更涉及的文件说明书和文件夹 README 已检查；缺失的已补齐，过期的已更新
+  - verify: openprd standards . --verify
+  - test-layer: manual
+  - test-size: manual
+  - test-scope: docs
+  - evidence-plan: openprd standards . --verify
+  - upgrade-reason: 文档任务以标准校验和人工审查证据为主
+  - execution-mode: parallel-workers
+  - parallel-group: docs
+  - write-scope: docs/basic/**, README*.md
+  - owner-role: worker
+  - local-verify: openprd standards . --verify
+  - integration-owner: main-agent
+
+- [x] T001.21 运行 OpenPrd spec 校验
+  - type: governance
+  - deps: T001.20
+  - done: 生成的 change 通过 OpenPrd 校验
+  - verify: openprd change . --validate --change openprd-generated-change
+  - test-layer: manual
+  - test-size: manual
+  - test-scope: governance
+  - evidence-plan: openprd change . --validate --change openprd-generated-change
+  - upgrade-reason: 治理任务以结构校验、评审确认和变更状态证据为主
+  - execution-mode: serial
+  - parallel-group: governance
+  - write-scope: .openprd/changes/**, .openprd/**
+  - owner-role: main-agent
+  - local-verify: openprd change . --validate --change openprd-generated-change
+  - integration-owner: main-agent

package/.openprd/changes/remove-session-tracking-humane-approval/.openprd.yaml

@@ -0,0 +1,2 @@
+schema: openprd.change.v1
+generatedFrom: v0017

package/.openprd/changes/remove-session-tracking-humane-approval/design.md

@@ -0,0 +1,52 @@
+# 设计
+
+## 背景
+
+对标 Cowart 已验证“标注改图闭环 + 画布双向结构化工具 + 生图尺寸契约 + 具名 skill 唤起”四件能力能显著降低人机视觉协同成本；OpenPrd 0.1.18 刚落地生图路由，正好把尺寸契约与路由串起来。
+
+## 目标
+
+- 用户在画布上标注后，一句话就能让 Agent 读懂标注并生成修订图放回原图旁
+- Agent 能结构化读取画布选区并把图片锚定回填
+- 生图请求自动携带占位卡尺寸契约
+- 用户能用自然语言稳定唤起画布协同
+
+## 范围
+
+- canvas-workspace.js 新增选区状态持久化与查询 API
+- canvas-workspace.js 新增锚定插图 API（anchorShapeId/placement/replaceHolder）
+- canvas-app.html.js 标注修改请求导出（带元数据）与选区上报
+- 生图占位卡尺寸契约写入 handoff 与生图指引
+- codex-hook-runner-template.mjs 画布协同意图识别与引导注入
+- agent-canonical-content.js 画布协同指引
+- docs/basic 与 README 同步
+
+## 约束
+
+- 沿用 Excalidraw embed 与现有 canvas-sessions 文件存储
+- Node 内置测试框架
+- 不新增外部依赖
+- hook 热路径（每次工具调用）禁止读取全局 sessions.jsonl 等 O(N) 追加文件；会话级状态一律 per-session 本地文件 O(1) 直读。
+- workspace 级单例状态文件（turn-state/run-state）里会话相关字段不得被并行窗口互相覆写；真相源收敛到 change 文件夹与任务台账。
+- 不写入敏感信息
+- 画布数据留在本地项目目录
+- 依赖 openprd canvas 本地服务
+- 依赖 0.1.18 生图路由协议
+
+## 业务护栏
+
+- 成本来源: 主要成本是生图调用次数与画布服务本地资源
+- 额度限制: 首版按单画布会话协同，不开放批量自动改图
+- 滥用防护: insert-image 校验锚点与文件存在性，避免脏写
+- 滥用防护: API 仅本地回环访问
+- 监控信号: ops.json handoff 记录数、回填成功率、API 错误率
+- 报警阈值: 回填连续失败时提示用户检查画布服务状态
+- 止损动作: 异常时停止自动回填，保留原画布快照并回退到手动流程
+
+## 风险与开放问题
+
+- 假设: 用户接受标注截图作为修改指令载体
+- 假设: Excalidraw selection 数据足以表达锚定需求
+- 风险: Excalidraw 与 tldraw 数据模型差异导致锚定语义需要适配
+- 风险: 标注文字识别依赖 Agent 视觉能力
+- 问题: 后续是否把画布协同扩展为独立 MCP server 另行评估

package/.openprd/changes/remove-session-tracking-humane-approval/proposal.md

@@ -0,0 +1,35 @@
+# 去会话追踪化：changes 为真相源 + 人话确认
+
+## 背景与原因
+
+OpenPrd 画布目前只有单向的“发送给 Codex”整体交接：Agent 不能结构化读取用户在画布上的选区与标注，不能把生成图片精准放回画布锚点旁，标注修改意图靠用户口述或手动截图传递，协同链路断在“人标注完之后”这一步。
+
+## 变更内容
+
+- canvas-workspace.js 新增选区状态持久化与查询 API
+- canvas-workspace.js 新增锚定插图 API（anchorShapeId/placement/replaceHolder）
+- canvas-app.html.js 标注修改请求导出（带元数据）与选区上报
+- 生图占位卡尺寸契约写入 handoff 与生图指引
+- codex-hook-runner-template.mjs 画布协同意图识别与引导注入
+- agent-canonical-content.js 画布协同指引
+- docs/basic 与 README 同步
+- [object Object]
+- [object Object]
+- [object Object]
+- canvas 服务新增 GET /api/selection 与 POST /api/insert-image 且测试通过
+- 标注导出带 annotationEdit 元数据并能被 hook 指引消费
+- hook 对画布协同意图注入引导语
+
+## 能力范围
+
+- `agent-requirements`: 去会话追踪化：changes 为真相源 + 人话确认 需求。
+
+## 影响范围
+
+- 主要用户: 使用 OpenPrd 画布做视觉协同的开发者与产品设计协作者
+- 成本来源: 主要成本是生图调用次数与画布服务本地资源
+- 额度限制: 首版按单画布会话协同，不开放批量自动改图
+- 依赖: 依赖 openprd canvas 本地服务
+- 依赖: 依赖 0.1.18 生图路由协议
+- 风险: Excalidraw 与 tldraw 数据模型差异导致锚定语义需要适配
+- 风险: 标注文字识别依赖 Agent 视觉能力

package/.openprd/changes/remove-session-tracking-humane-approval/specs/agent-requirements/spec.md

@@ -0,0 +1,16 @@
+## 新增需求
+
+### 需求：去会话追踪化：changes 为真相源 + 人话确认
+OpenPrd 画布目前只有单向的“发送给 Codex”整体交接：Agent 不能结构化读取用户在画布上的选区与标注，不能把生成图片精准放回画布锚点旁，标注修改意图靠用户口述或手动截图传递，协同链路断在“人标注完之后”这一步。
+
+#### 场景：主流程成功
+- **当** 用户在同一项目开第二个对话窗口，直接读活跃变更清单继续工作，两个窗口状态互不覆盖
+- **则** canvas 服务新增 GET /api/selection 与 POST /api/insert-image 且测试通过
+
+#### 场景：边界情况保持可见
+- **当** 旧全局 sessions.jsonl 存在时停止写入、保留只读兼容，读取入口平滑降级
+- **则** 产品应保持该情况明确可见，以支持实现和验证
+
+#### 场景：失败模式得到处理
+- **当** 画布服务未启动时 API 调用失败要提示先运行 openprd canvas
+- **则** 产品应提供有边界且可评审的结果

package/.openprd/changes/remove-session-tracking-humane-approval/task-events.jsonl

@@ -0,0 +1 @@
+{"version":1,"at":"2026-07-07 10:55:08","changeId":"remove-session-tracking-humane-approval","action":"advance","taskId":"T001.01","taskTitle":"评审生成的 spec 覆盖","ok":true,"verify":{"ok":true,"command":"openprd change . --validate --change remove-session-tracking-humane-approval","exitCode":0,"stdout":"OpenPrd change 验证: 通过\nChange: remove-session-tracking-humane-approval\n- OpenPrd change remove-session-tracking-humane-approval: 1 个 spec delta。\n- .openprd/changes/remove-session-tracking-humane-approval/specs/agent-requirements/spec.md: 1 个需求。\n- 结构化 OpenPrd 任务: 10 个任务，9 条依赖；测试策略显式 10 个、推导 0 个；执行策略显式 10 个、推导 0 个。\n- OpenPrd 任务文件: 1 个文件，10 个 checkbox 任务，每个文件最多 25 个。\n- Standards docs root: docs/basic\n- Required docs: 6/6.\n- Docs quality: 6 docs analyzed, 0 with mega-lines > 300 chars.\n- Manual templates: 2/2.\n- Development standards: code files ok <= 700 lines, attention <= 1500 lines.\n- Growth layer: enabled; code-extension candidates can auto-apply, remaining candidates stay in wrap-up review.\n","stderr":""},"evidence":null,"notes":null}

package/.openprd/changes/remove-session-tracking-humane-approval/tasks.md

@@ -0,0 +1,170 @@
+# 任务
+
+- [x] T001.01 评审生成的 spec 覆盖
+  - type: governance
+  - done: 生成的 agent-requirements spec 符合 PRD 意图
+  - verify: openprd change . --validate --change remove-session-tracking-humane-approval
+  - test-layer: manual
+  - test-size: manual
+  - test-scope: governance
+  - evidence-plan: openprd change . --validate --change remove-session-tracking-humane-approval
+  - upgrade-reason: 治理任务以结构校验、评审确认和变更状态证据为主
+  - execution-mode: serial
+  - parallel-group: governance
+  - write-scope: .openprd/changes/**, .openprd/**
+  - owner-role: main-agent
+  - local-verify: openprd change . --validate --change remove-session-tracking-humane-approval
+  - integration-owner: main-agent
+
+- [ ] T001.02 hook 热路径去全局扫描：automation lane 记忆改为 per-session 本地文件
+  - type: implementation
+  - deps: T001.01
+  - done: codex-hook-runner-template 里 latestSessionRegistryEntry 不再全量读取全局 sessions.jsonl；automation lane 记忆读写改为 .openprd/harness/session-bindings 下 per-session 小文件 O(1) 直读；rememberAutomationMode 不再向全局 registry 每事件追加流水
+  - verify: openprd tasks . --change remove-session-tracking-humane-approval --item T001.02 --evidence-required
+  - test-layer: unit, integration
+  - test-size: medium
+  - test-scope: cli-contract
+  - evidence-plan: 单元测试锁定 per-session 文件读写 + hook 集成回归
+  - upgrade-reason: 触达 hook 契约与生成物，需要中间层验证
+  - execution-mode: serial
+  - parallel-group: implementation
+  - write-scope: src/**, test/**
+  - owner-role: main-agent
+  - local-verify: openprd tasks . --change remove-session-tracking-humane-approval --item T001.02 --evidence-required
+  - integration-owner: main-agent
+
+- [ ] T001.03 CLI 侧去会话追踪：移除全局 session registry 写入与跨 workspace 扫描
+  - type: implementation
+  - deps: T001.02
+  - done: session-registry 停止向 ~/.openprd/registry/sessions.jsonl 写入（保留只读兼容）；resolveSessionTarget 不再做跨 workspace 候选扫描和 promptPreview 语义匹配兜底，找不到本地绑定时返回活跃 change 清单请用户指认
+  - verify: openprd tasks . --change remove-session-tracking-humane-approval --item T001.03 --evidence-required
+  - test-layer: unit, integration
+  - test-size: medium
+  - test-scope: cli-contract
+  - evidence-plan: 单元测试锁定降级行为 + run --message 会话续接集成验证
+  - upgrade-reason: 触达 CLI/Agent 契约，需要中间层验证
+  - execution-mode: serial
+  - parallel-group: implementation
+  - write-scope: src/**, test/**
+  - owner-role: main-agent
+  - local-verify: openprd tasks . --change remove-session-tracking-humane-approval --item T001.03 --evidence-required
+  - integration-owner: main-agent
+
+- [ ] T001.04 运行态状态按会话隔离：turn-state 分文件，消除多窗口覆写
+  - type: implementation
+  - deps: T001.03
+  - done: 会话相关运行态（turn-state 等）按 sessionId 分文件存放在 .openprd/harness/session-states/；无 sessionId 证据时退化为无状态读 change 清单；workspace 级只保留共享的变更台账与质量报告
+  - verify: openprd tasks . --change remove-session-tracking-humane-approval --item T001.04 --evidence-required
+  - test-layer: unit, integration
+  - test-size: medium
+  - test-scope: cli-contract
+  - evidence-plan: 双会话并发写入互不覆盖的单元/集成测试
+  - upgrade-reason: 触达状态模型与并发正确性，需要中间层验证
+  - execution-mode: serial
+  - parallel-group: implementation
+  - write-scope: src/**, test/**
+  - owner-role: main-agent
+  - local-verify: openprd tasks . --change remove-session-tracking-humane-approval --item T001.04 --evidence-required
+  - integration-owner: main-agent
+
+- [ ] T001.05 高风险门禁改为挂起审批加人话确认
+  - type: implementation
+  - deps: T001.04
+  - done: autonomy-risk 拦截时写入 pending approval 记录并要求 agent 用业务人话说明影响与回滚；用户回普通确认语（确认/同意/可以/继续）即放行最近一条挂起风险；不再要求粘贴字面技术授权句
+  - verify: openprd tasks . --change remove-session-tracking-humane-approval --item T001.05 --evidence-required
+  - test-layer: unit, integration
+  - test-size: medium
+  - test-scope: cli-contract
+  - evidence-plan: 拦截-挂起-普通确认放行链路的单元与集成测试，含多条挂起风险只放行最近一条的负向用例
+  - upgrade-reason: 触达安全门禁契约，需要中间层验证
+  - execution-mode: serial
+  - parallel-group: implementation
+  - write-scope: src/**, test/**
+  - owner-role: main-agent
+  - local-verify: openprd tasks . --change remove-session-tracking-humane-approval --item T001.05 --evidence-required
+  - integration-owner: main-agent
+
+- [ ] T001.06 打通主流程闭环：多窗口并行、automation 高频调用、人话确认放行
+  - type: implementation
+  - deps: T001.05
+  - done: 同项目两个会话并行工作状态互不覆盖；automation 会话数百次工具调用只读本会话小文件、全局账本不再增长；高风险拦截后一句人话确认即继续
+  - verify: openprd tasks . --change remove-session-tracking-humane-approval --item T001.06 --evidence-required
+  - test-layer: integration, e2e
+  - test-size: large
+  - test-scope: user-flow
+  - evidence-plan: 端到端集成测试 + 测试报告
+  - upgrade-reason: 触达用户可见主流程，需要端到端证据
+  - execution-mode: serial
+  - parallel-group: integration
+  - write-scope: src/**, test/**, docs/basic/**
+  - owner-role: main-agent
+  - local-verify: openprd tasks . --change remove-session-tracking-humane-approval --item T001.06 --evidence-required
+  - integration-owner: main-agent
+
+- [ ] T001.07 回归边界条件与失败处理：旧账本兼容、无绑定续接、多条挂起风险
+  - type: verification
+  - deps: T001.06
+  - done: 旧全局 sessions.jsonl 存在时停止写入且读取入口平滑降级；给出会话 ID 但本地无记录时列活跃变更请用户指认而不语义猜测；多条 pending approval 时确认只放行最近一条
+  - verify: openprd tasks . --change remove-session-tracking-humane-approval --item T001.07 --evidence-required
+  - test-layer: unit, integration
+  - test-size: medium
+  - test-scope: cli-contract
+  - evidence-plan: 边界用例单元与集成测试
+  - upgrade-reason: 触达降级兼容与安全边界，需要中间层验证
+  - execution-mode: serial
+  - parallel-group: verification
+  - write-scope: test/**, .openprd/harness/test-reports/**
+  - owner-role: main-agent
+  - local-verify: openprd tasks . --change remove-session-tracking-humane-approval --item T001.07 --evidence-required
+  - integration-owner: main-agent
+
+- [ ] T001.08 回归非功能约束：热路径 O(1) 与安全边界不放松
+  - type: verification
+  - deps: T001.07
+  - done: hook 热路径不再读取任何 O(N) 追加文件；高风险动作仍会先拦截，仅确认方式简化；新增代码有测试覆盖
+  - verify: openprd tasks . --change remove-session-tracking-humane-approval --item T001.08 --evidence-required
+  - test-layer: unit, integration
+  - test-size: medium
+  - test-scope: cli-contract
+  - evidence-plan: 性能形状断言 + 门禁负向用例 + 全量测试
+  - upgrade-reason: 触达性能与安全非功能约束，需要中间层验证
+  - execution-mode: serial
+  - parallel-group: verification
+  - write-scope: test/**, .openprd/harness/test-reports/**
+  - owner-role: main-agent
+  - local-verify: openprd tasks . --change remove-session-tracking-humane-approval --item T001.08 --evidence-required
+  - integration-owner: main-agent
+
+- [ ] T001.09 维护 docs/basic 项目基础文档
+  - type: documentation
+  - deps: T001.08
+  - done: 已检查 docs/basic 是否因本次状态模型、hook 行为、确认流程变化而过期；backend-structure.md 已同步会话状态与审批链路事实
+  - verify: openprd standards . --verify
+  - test-layer: manual
+  - test-size: manual
+  - test-scope: docs
+  - evidence-plan: openprd standards . --verify
+  - upgrade-reason: 文档任务以标准校验和人工审查证据为主
+  - execution-mode: serial
+  - parallel-group: docs
+  - write-scope: docs/basic/**, README*.md
+  - owner-role: main-agent
+  - local-verify: openprd standards . --verify
+  - integration-owner: main-agent
+
+- [ ] T001.10 运行 OpenPrd spec 校验
+  - type: governance
+  - deps: T001.09
+  - done: 生成的 change 通过 OpenPrd 校验
+  - verify: openprd change . --validate --change remove-session-tracking-humane-approval
+  - test-layer: manual
+  - test-size: manual
+  - test-scope: governance
+  - evidence-plan: openprd change . --validate --change remove-session-tracking-humane-approval
+  - upgrade-reason: 治理任务以结构校验、评审确认和变更状态证据为主
+  - execution-mode: serial
+  - parallel-group: governance
+  - write-scope: .openprd/changes/**, .openprd/**
+  - owner-role: main-agent
+  - local-verify: openprd change . --validate --change remove-session-tracking-humane-approval
+  - integration-owner: main-agent