@openprd/cli 0.1.19 → 0.1.21

package/.openprd/changes/openprd-control-plane-v020/tasks.md

@@ -0,0 +1,427 @@
+# 任务
+
+- [x] T001.01 评审生成的 spec 覆盖
+  - type: governance
+  - done: 生成的 agent-requirements spec 符合 PRD 意图
+  - verify: openprd change . --validate --change openprd-control-plane-v020
+  - test-layer: manual
+  - test-size: manual
+  - test-scope: governance
+  - evidence-plan: openprd change . --validate --change openprd-control-plane-v020
+  - upgrade-reason: 治理任务以结构校验、评审确认和变更状态证据为主
+  - execution-mode: serial
+  - parallel-group: governance
+  - write-scope: .openprd/changes/**, .openprd/**
+  - owner-role: main-agent
+  - local-verify: openprd change . --validate --change openprd-control-plane-v020
+  - integration-owner: main-agent
+
+- [x] T001.02 对齐共享契约与 Host API 调用边界
+  - type: implementation
+  - deps: T001.01
+  - done: 共享契约、Host API 和上下游调用边界已经对齐，后续功能可以直接接线。 涉及: 现有 OpenPrd CLI、skills、hooks、workspace schema、review renderer、quality/sta 等 2 项。
+  - verify: openprd tasks . --change openprd-control-plane-v020 --item T001.02 --evidence-required
+  - test-layer: integration, e2e
+  - test-size: large
+  - test-scope: visual-flow
+  - evidence-plan: 主流程自动化、截图或 visual-compare 证据 + 本任务 verify 命令；轻量 UI 可视优化也需要 before/after、verification-board 或 alignment-board 证据，同构卡片/列表要覆盖内部内容槽位
+  - upgrade-reason: 触达用户可见路径，需要端到端或视觉级证据；轻量 UI 可视优化不能只用构建或 dev-check 收口
+  - execution-mode: parallel-workers
+  - parallel-group: contracts
+  - write-scope: src/**, test/**, docs/basic/backend-structure.md
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-control-plane-v020 --item T001.02 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.03 接通界面入口、导航与页面挂载
+  - type: implementation
+  - deps: T001.02
+  - done: 用户可以从正确入口进入对应界面，页面挂载与状态收尾已经接通。 涉及: Review Studio 改动必须复用现有视觉系统并提供前后、焦点、验证与对齐证据 等 2 项。
+  - verify: openprd tasks . --change openprd-control-plane-v020 --item T001.03 --evidence-required
+  - test-layer: integration, e2e
+  - test-size: large
+  - test-scope: visual-flow
+  - evidence-plan: 主流程自动化、截图或 visual-compare 证据 + 本任务 verify 命令；轻量 UI 可视优化也需要 before/after、verification-board 或 alignment-board 证据，同构卡片/列表要覆盖内部内容槽位
+  - upgrade-reason: 触达用户可见路径，需要端到端或视觉级证据；轻量 UI 可视优化不能只用构建或 dev-check 收口
+  - execution-mode: parallel-workers
+  - parallel-group: verification
+  - write-scope: test/**, .openprd/harness/test-reports/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-control-plane-v020 --item T001.03 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.04 提供 project manifest、ledger append/read/head/verify/rebuild、projection replay API
+  - type: implementation
+  - deps: T001.03
+  - done: 已完成：提供 project manifest、ledger append/read/head/verify/rebuild、projection replay API
+  - verify: openprd tasks . --change openprd-control-plane-v020 --item T001.04 --evidence-required
+  - test-layer: unit, integration
+  - test-size: medium
+  - test-scope: api-contract
+  - evidence-plan: 单元测试锁定规则 + 集成或命令行契约验证
+  - upgrade-reason: 触达 CLI/API/Agent 契约或生成物，需要中间层验证
+  - execution-mode: parallel-workers
+  - parallel-group: verification
+  - write-scope: test/**, .openprd/harness/test-reports/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-control-plane-v020 --item T001.04 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.05 提供 task claim/heartbeat/release、lease recovery、write-set conflict、lane binding API 与 CLI
+  - type: implementation
+  - deps: T001.04
+  - done: 已完成：提供 task claim/heartbeat/release、lease recovery、write-set conflict、lane binding API 与 CLI
+  - verify: openprd tasks . --change openprd-control-plane-v020 --item T001.05 --evidence-required
+  - test-layer: unit, integration
+  - test-size: medium
+  - test-scope: api-contract
+  - evidence-plan: 单元测试锁定规则 + 集成或命令行契约验证
+  - upgrade-reason: 触达 CLI/API/Agent 契约或生成物，需要中间层验证
+  - execution-mode: parallel-workers
+  - parallel-group: contracts
+  - write-scope: src/**, test/**, docs/basic/backend-structure.md
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-control-plane-v020 --item T001.05 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.06 提供 context compile/diff/cache/render/reference API，保持 run --context 兼容入口
+  - type: implementation
+  - deps: T001.05
+  - done: 已完成：提供 context compile/diff/cache/render/reference API，保持 run --context 兼容入口
+  - verify: openprd tasks . --change openprd-control-plane-v020 --item T001.06 --evidence-required
+  - test-layer: unit, integration
+  - test-size: medium
+  - test-scope: api-contract
+  - evidence-plan: 单元测试锁定规则 + 集成或命令行契约验证
+  - upgrade-reason: 触达 CLI/API/Agent 契约或生成物，需要中间层验证
+  - execution-mode: parallel-workers
+  - parallel-group: contracts
+  - write-scope: src/**, test/**, docs/basic/backend-structure.md
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-control-plane-v020 --item T001.06 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.07 提供 scoped gate/evidence evaluation 与明确 approval ID 绑定
+  - type: implementation
+  - deps: T001.06
+  - done: 已完成：提供 scoped gate/evidence evaluation 与明确 approval ID 绑定
+  - verify: openprd tasks . --change openprd-control-plane-v020 --item T001.07 --evidence-required
+  - test-layer: unit, integration
+  - test-size: medium
+  - test-scope: cli-contract
+  - evidence-plan: 单元测试锁定规则 + 集成或命令行契约验证
+  - upgrade-reason: 触达 CLI/API/Agent 契约或生成物，需要中间层验证
+  - execution-mode: parallel-workers
+  - parallel-group: implementation
+  - write-scope: src/**, test/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-control-plane-v020 --item T001.07 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.08 提供 ReviewModel 业务/工程投影与稳定确认合同
+  - type: implementation
+  - deps: T001.07
+  - done: 已完成：提供 ReviewModel 业务/工程投影与稳定确认合同
+  - verify: openprd tasks . --change openprd-control-plane-v020 --item T001.08 --evidence-required
+  - test-layer: unit, integration
+  - test-size: medium
+  - test-scope: cli-contract
+  - evidence-plan: 单元测试锁定规则 + 集成或命令行契约验证
+  - upgrade-reason: 触达 CLI/API/Agent 契约或生成物，需要中间层验证
+  - execution-mode: parallel-workers
+  - parallel-group: surface
+  - write-scope: src/cli/**, src/**, test/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-control-plane-v020 --item T001.08 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.09 提供 adapter detect/capabilities/install/normalize/render/handoff SPI
+  - type: implementation
+  - deps: T001.08
+  - done: 已完成：提供 adapter detect/capabilities/install/normalize/render/handoff SPI
+  - verify: openprd tasks . --change openprd-control-plane-v020 --item T001.09 --evidence-required
+  - test-layer: unit, integration
+  - test-size: medium
+  - test-scope: cli-contract
+  - evidence-plan: 单元测试锁定规则 + 集成或命令行契约验证
+  - upgrade-reason: 触达 CLI/API/Agent 契约或生成物，需要中间层验证
+  - execution-mode: parallel-workers
+  - parallel-group: contracts
+  - write-scope: src/**, test/**, docs/basic/backend-structure.md
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-control-plane-v020 --item T001.09 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.10 提供 Knowledge v3 validate/promote/deprecate/supersede/query 生命周期
+  - type: implementation
+  - deps: T001.09
+  - done: 已完成：提供 Knowledge v3 validate/promote/deprecate/supersede/query 生命周期
+  - verify: openprd tasks . --change openprd-control-plane-v020 --item T001.10 --evidence-required
+  - test-layer: unit, integration
+  - test-size: medium
+  - test-scope: cli-contract
+  - evidence-plan: 单元测试锁定规则 + 集成或命令行契约验证
+  - upgrade-reason: 触达 CLI/API/Agent 契约或生成物，需要中间层验证
+  - execution-mode: parallel-workers
+  - parallel-group: implementation
+  - write-scope: src/**, test/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-control-plane-v020 --item T001.10 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.11 提供 upgrade plan/dry-run/backup/atomic apply/restore 与 fleet 安全批处理
+  - type: implementation
+  - deps: T001.10
+  - done: 已完成：提供 upgrade plan/dry-run/backup/atomic apply/restore 与 fleet 安全批处理
+  - verify: openprd tasks . --change openprd-control-plane-v020 --item T001.11 --evidence-required
+  - test-layer: integration, security
+  - test-size: medium
+  - test-scope: security
+  - evidence-plan: 正向路径 + 越权、额度、并发或敏感信息负向验证
+  - upgrade-reason: 触达权限、安全、成本或滥用边界，需要至少集成级证据
+  - execution-mode: parallel-workers
+  - parallel-group: implementation
+  - write-scope: src/**, test/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-control-plane-v020 --item T001.11 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.12 提供 registry prune/compact 与测试环境 OPENPRD_HOME 隔离
+  - type: implementation
+  - deps: T001.11
+  - done: 已完成：提供 registry prune/compact 与测试环境 OPENPRD_HOME 隔离
+  - verify: openprd tasks . --change openprd-control-plane-v020 --item T001.12 --evidence-required
+  - test-layer: unit, integration
+  - test-size: medium
+  - test-scope: cli-contract
+  - evidence-plan: 单元测试锁定规则 + 集成或命令行契约验证
+  - upgrade-reason: 触达 CLI/API/Agent 契约或生成物，需要中间层验证
+  - execution-mode: parallel-workers
+  - parallel-group: verification
+  - write-scope: test/**, .openprd/harness/test-reports/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-control-plane-v020 --item T001.12 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.13 打通主流程闭环：Agent 进入已有项目，Adapter 识别运行环境，Context Compiler 基于 lane/tas 等 6 项
+  - type: implementation
+  - deps: T001.12
+  - done: 主流程关键节点已经打通，用户可以按预期从入口走到结果收尾。 涉及: Agent 进入已有项目，Adapter 识别运行环境，Context Compiler 基于 lane/task/revision 在预算内生 等 6 项。
+  - verify: openprd tasks . --change openprd-control-plane-v020 --item T001.13 --evidence-required
+  - test-layer: integration, e2e
+  - test-size: large
+  - test-scope: user-flow
+  - evidence-plan: 主流程自动化、截图或 visual-compare 证据 + 本任务 verify 命令；轻量 UI 可视优化也需要 before/after、verification-board 或 alignment-board 证据，同构卡片/列表要覆盖内部内容槽位
+  - upgrade-reason: 触达用户可见路径，需要端到端或视觉级证据；轻量 UI 可视优化不能只用构建或 dev-check 收口
+  - execution-mode: serial
+  - parallel-group: integration
+  - write-scope: src/**, test/**, docs/basic/**
+  - owner-role: main-agent
+  - local-verify: openprd tasks . --change openprd-control-plane-v020 --item T001.13 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.14 验证全量单元、集成、并发、迁移、回滚、性能和三平台契约测试通过
+  - type: verification
+  - deps: T001.13
+  - done: 已验证：全量单元、集成、并发、迁移、回滚、性能和三平台契约测试通过
+  - verify: openprd tasks . --change openprd-control-plane-v020 --item T001.14 --evidence-required
+  - test-layer: integration, performance
+  - test-size: large
+  - test-scope: performance
+  - evidence-plan: 性能基线、压力数据或 benchmark 报告 + 本任务 verify 命令
+  - upgrade-reason: 触达性能或容量边界，需要专项验证证据
+  - execution-mode: parallel-workers
+  - parallel-group: verification
+  - write-scope: test/**, .openprd/harness/test-reports/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-control-plane-v020 --item T001.14 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.15 验证最新 Markdown/HTML 测试报告、质量报告、架构与视觉证据可追溯
+  - type: verification
+  - deps: T001.14
+  - done: 已验证：最新 Markdown/HTML 测试报告、质量报告、架构与视觉证据可追溯
+  - verify: openprd tasks . --change openprd-control-plane-v020 --item T001.15 --evidence-required
+  - test-layer: integration, e2e
+  - test-size: large
+  - test-scope: visual-flow
+  - evidence-plan: 主流程自动化、截图或 visual-compare 证据 + 本任务 verify 命令；轻量 UI 可视优化也需要 before/after、verification-board 或 alignment-board 证据，同构卡片/列表要覆盖内部内容槽位
+  - upgrade-reason: 触达用户可见路径，需要端到端或视觉级证据；轻量 UI 可视优化不能只用构建或 dev-check 收口
+  - execution-mode: parallel-workers
+  - parallel-group: verification
+  - write-scope: test/**, .openprd/harness/test-reports/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-control-plane-v020 --item T001.15 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.16 验证standards、quality、run verify 与 doctor 在发布/刷新前全部健康
+  - type: verification
+  - deps: T001.15
+  - done: 已验证：standards、quality、run verify 与 doctor 在发布/刷新前全部健康
+  - verify: openprd tasks . --change openprd-control-plane-v020 --item T001.16 --evidence-required
+  - test-layer: unit, integration
+  - test-size: medium
+  - test-scope: cli-contract
+  - evidence-plan: 单元测试锁定规则 + 集成或命令行契约验证
+  - upgrade-reason: 触达 CLI/API/Agent 契约或生成物，需要中间层验证
+  - execution-mode: parallel-workers
+  - parallel-group: verification
+  - write-scope: test/**, .openprd/harness/test-reports/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-control-plane-v020 --item T001.16 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.17 验证所有真实项目刷新报告包含版本、checksum、备份、迁移结果和失败回滚状态
+  - type: verification
+  - deps: T001.16
+  - done: 已验证：所有真实项目刷新报告包含版本、checksum、备份、迁移结果和失败回滚状态
+  - verify: openprd tasks . --change openprd-control-plane-v020 --item T001.17 --evidence-required
+  - test-layer: integration, e2e
+  - test-size: large
+  - test-scope: visual-flow
+  - evidence-plan: 主流程自动化、截图或 visual-compare 证据 + 本任务 verify 命令；轻量 UI 可视优化也需要 before/after、verification-board 或 alignment-board 证据，同构卡片/列表要覆盖内部内容槽位
+  - upgrade-reason: 触达用户可见路径，需要端到端或视觉级证据；轻量 UI 可视优化不能只用构建或 dev-check 收口
+  - execution-mode: parallel-workers
+  - parallel-group: verification
+  - write-scope: test/**, .openprd/harness/test-reports/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-control-plane-v020 --item T001.17 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.18 回归非功能约束：Node.js 20.19+，优先零新增运行时依赖，复用现有 YAML 与 Sharp 等 2 项
+  - type: verification
+  - deps: T001.17
+  - done: 非功能约束已经回归确认。 涉及: Node.js 20.19+，优先零新增运行时依赖，复用现有 YAML 与 Sharp 等 2 项。
+  - verify: openprd tasks . --change openprd-control-plane-v020 --item T001.18 --evidence-required
+  - test-layer: unit, integration
+  - test-size: medium
+  - test-scope: cli-contract
+  - evidence-plan: 单元测试锁定规则 + 集成或命令行契约验证
+  - upgrade-reason: 触达 CLI/API/Agent 契约或生成物，需要中间层验证
+  - execution-mode: parallel-workers
+  - parallel-group: verification
+  - write-scope: test/**, .openprd/harness/test-reports/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-control-plane-v020 --item T001.18 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.19 回归非功能约束：读取路径默认无业务状态写入；telemetry 与事实真相分离 等 2 项
+  - type: verification
+  - deps: T001.18
+  - done: 非功能约束已经回归确认。 涉及: 读取路径默认无业务状态写入；telemetry 与事实真相分离 / 面向普通用户的默认文案使用简体中文、结果导向且不暴露内部实现术语。
+  - verify: openprd tasks . --change openprd-control-plane-v020 --item T001.19 --evidence-required
+  - test-layer: integration, e2e
+  - test-size: large
+  - test-scope: visual-flow
+  - evidence-plan: 主流程自动化、截图或 visual-compare 证据 + 本任务 verify 命令；轻量 UI 可视优化也需要 before/after、verification-board 或 alignment-board 证据，同构卡片/列表要覆盖内部内容槽位
+  - upgrade-reason: 触达用户可见路径，需要端到端或视觉级证据；轻量 UI 可视优化不能只用构建或 dev-check 收口
+  - execution-mode: parallel-workers
+  - parallel-group: verification
+  - write-scope: test/**, .openprd/harness/test-reports/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-control-plane-v020 --item T001.19 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.20 回归非功能约束：新旧 CLI 在一个兼容周期内保持字段与退出码兼容，并标注 deprecated 字段 等 2 项
+  - type: verification
+  - deps: T001.19
+  - done: 非功能约束已经回归确认。 涉及: 新旧 CLI 在一个兼容周期内保持字段与退出码兼容，并标注 deprecated 字段 / 每个迁移步骤可重复执行、可审计、可单项目回滚。
+  - verify: openprd tasks . --change openprd-control-plane-v020 --item T001.20 --evidence-required
+  - test-layer: unit, integration
+  - test-size: medium
+  - test-scope: cli-contract
+  - evidence-plan: 单元测试锁定规则 + 集成或命令行契约验证
+  - upgrade-reason: 触达 CLI/API/Agent 契约或生成物，需要中间层验证
+  - execution-mode: parallel-workers
+  - parallel-group: verification
+  - write-scope: test/**, .openprd/harness/test-reports/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-control-plane-v020 --item T001.20 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.21 回归边界条件与失败处理：边界情况：同一 session ID 在多个工作区有线索时不语义猜测，返回候选和安全阻断 等 12 项
+  - type: verification
+  - deps: T001.20
+  - done: 边界条件与失败处理已经回归确认。 涉及: 边界情况：同一 session ID 在多个工作区有线索时不语义猜测，返回候选和安全阻断 等 12 项。
+  - verify: openprd tasks . --change openprd-control-plane-v020 --item T001.21 --evidence-required
+  - test-layer: integration, security
+  - test-size: medium
+  - test-scope: security
+  - evidence-plan: 正向路径 + 越权、额度、并发或敏感信息负向验证
+  - upgrade-reason: 触达权限、安全、成本或滥用边界，需要至少集成级证据
+  - execution-mode: parallel-workers
+  - parallel-group: verification
+  - write-scope: test/**, .openprd/harness/test-reports/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-control-plane-v020 --item T001.21 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.22 验证成本与额度护栏
+  - type: verification
+  - deps: T001.21
+  - done: 已验证免费、试用或低权限用户不能绕过额度、并发、频率或总量限制
+  - verify: openprd tasks . --change openprd-control-plane-v020 --item T001.22 --evidence-required
+  - test-layer: integration, security
+  - test-size: medium
+  - test-scope: security
+  - evidence-plan: 正向路径 + 越权、额度、并发或敏感信息负向验证
+  - upgrade-reason: 触达权限、安全、成本或滥用边界，需要至少集成级证据
+  - execution-mode: parallel-workers
+  - parallel-group: verification
+  - write-scope: test/**, .openprd/harness/test-reports/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-control-plane-v020 --item T001.22 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.23 验证滥用与越权路径
+  - type: verification
+  - deps: T001.22
+  - done: 已覆盖重复请求、并发请求、越权身份和异常恢复等负向场景
+  - verify: openprd tasks . --change openprd-control-plane-v020 --item T001.23 --evidence-required
+  - test-layer: integration, security
+  - test-size: medium
+  - test-scope: security
+  - evidence-plan: 正向路径 + 越权、额度、并发或敏感信息负向验证
+  - upgrade-reason: 触达权限、安全、成本或滥用边界，需要至少集成级证据
+  - execution-mode: parallel-workers
+  - parallel-group: verification
+  - write-scope: test/**, .openprd/harness/test-reports/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-control-plane-v020 --item T001.23 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.24 验证成本监控、报警和止损
+  - type: verification
+  - deps: T001.23
+  - done: 已确认用量或成本信号、报警阈值和人工/自动止损动作可执行
+  - verify: openprd tasks . --change openprd-control-plane-v020 --item T001.24 --evidence-required
+  - test-layer: integration, security
+  - test-size: medium
+  - test-scope: security
+  - evidence-plan: 正向路径 + 越权、额度、并发或敏感信息负向验证
+  - upgrade-reason: 触达权限、安全、成本或滥用边界，需要至少集成级证据
+  - execution-mode: parallel-workers
+  - parallel-group: verification
+  - write-scope: test/**, .openprd/harness/test-reports/**
+  - owner-role: worker
+  - local-verify: openprd tasks . --change openprd-control-plane-v020 --item T001.24 --evidence-required
+  - integration-owner: main-agent
+
+- [x] T001.25 维护 docs/basic 项目基础文档
+  - type: documentation
+  - deps: T001.24
+  - done: 已检查 docs/basic 是否缺失或因本次需求、流程、结构、依赖、产品行为变化而过期；若涉及后端、脚本、Agent 或工具链变更，已同步评估 CLI 与 API 接入面，并在 backend-structure.md 中记录事实或不适用原因；需要更新的基础文档已同步
+  - verify: openprd standards . --verify
+  - test-layer: manual
+  - test-size: manual
+  - test-scope: docs
+  - evidence-plan: openprd standards . --verify
+  - upgrade-reason: 文档任务以标准校验和人工审查证据为主
+  - execution-mode: parallel-workers
+  - parallel-group: docs
+  - write-scope: docs/basic/**, README*.md
+  - owner-role: worker
+  - local-verify: openprd standards . --verify
+  - integration-owner: main-agent
+
+- [x] Continue with `tasks-002.md` after completing this file.

package/.openprd/changes/remove-session-tracking-humane-approval/.openprd.yaml

@@ -0,0 +1,2 @@
+schema: openprd.change.v1
+generatedFrom: v0017

package/.openprd/changes/remove-session-tracking-humane-approval/design.md

@@ -0,0 +1,52 @@
+# 设计
+
+## 背景
+
+对标 Cowart 已验证“标注改图闭环 + 画布双向结构化工具 + 生图尺寸契约 + 具名 skill 唤起”四件能力能显著降低人机视觉协同成本；OpenPrd 0.1.18 刚落地生图路由，正好把尺寸契约与路由串起来。
+
+## 目标
+
+- 用户在画布上标注后，一句话就能让 Agent 读懂标注并生成修订图放回原图旁
+- Agent 能结构化读取画布选区并把图片锚定回填
+- 生图请求自动携带占位卡尺寸契约
+- 用户能用自然语言稳定唤起画布协同
+
+## 范围
+
+- canvas-workspace.js 新增选区状态持久化与查询 API
+- canvas-workspace.js 新增锚定插图 API（anchorShapeId/placement/replaceHolder）
+- canvas-app.html.js 标注修改请求导出（带元数据）与选区上报
+- 生图占位卡尺寸契约写入 handoff 与生图指引
+- codex-hook-runner-template.mjs 画布协同意图识别与引导注入
+- agent-canonical-content.js 画布协同指引
+- docs/basic 与 README 同步
+
+## 约束
+
+- 沿用 Excalidraw embed 与现有 canvas-sessions 文件存储
+- Node 内置测试框架
+- 不新增外部依赖
+- hook 热路径（每次工具调用）禁止读取全局 sessions.jsonl 等 O(N) 追加文件；会话级状态一律 per-session 本地文件 O(1) 直读。
+- workspace 级单例状态文件（turn-state/run-state）里会话相关字段不得被并行窗口互相覆写；真相源收敛到 change 文件夹与任务台账。
+- 不写入敏感信息
+- 画布数据留在本地项目目录
+- 依赖 openprd canvas 本地服务
+- 依赖 0.1.18 生图路由协议
+
+## 业务护栏
+
+- 成本来源: 主要成本是生图调用次数与画布服务本地资源
+- 额度限制: 首版按单画布会话协同，不开放批量自动改图
+- 滥用防护: insert-image 校验锚点与文件存在性，避免脏写
+- 滥用防护: API 仅本地回环访问
+- 监控信号: ops.json handoff 记录数、回填成功率、API 错误率
+- 报警阈值: 回填连续失败时提示用户检查画布服务状态
+- 止损动作: 异常时停止自动回填，保留原画布快照并回退到手动流程
+
+## 风险与开放问题
+
+- 假设: 用户接受标注截图作为修改指令载体
+- 假设: Excalidraw selection 数据足以表达锚定需求
+- 风险: Excalidraw 与 tldraw 数据模型差异导致锚定语义需要适配
+- 风险: 标注文字识别依赖 Agent 视觉能力
+- 问题: 后续是否把画布协同扩展为独立 MCP server 另行评估

package/.openprd/changes/remove-session-tracking-humane-approval/proposal.md

@@ -0,0 +1,35 @@
+# 去会话追踪化：changes 为真相源 + 人话确认
+
+## 背景与原因
+
+OpenPrd 画布目前只有单向的“发送给 Codex”整体交接：Agent 不能结构化读取用户在画布上的选区与标注，不能把生成图片精准放回画布锚点旁，标注修改意图靠用户口述或手动截图传递，协同链路断在“人标注完之后”这一步。
+
+## 变更内容
+
+- canvas-workspace.js 新增选区状态持久化与查询 API
+- canvas-workspace.js 新增锚定插图 API（anchorShapeId/placement/replaceHolder）
+- canvas-app.html.js 标注修改请求导出（带元数据）与选区上报
+- 生图占位卡尺寸契约写入 handoff 与生图指引
+- codex-hook-runner-template.mjs 画布协同意图识别与引导注入
+- agent-canonical-content.js 画布协同指引
+- docs/basic 与 README 同步
+- [object Object]
+- [object Object]
+- [object Object]
+- canvas 服务新增 GET /api/selection 与 POST /api/insert-image 且测试通过
+- 标注导出带 annotationEdit 元数据并能被 hook 指引消费
+- hook 对画布协同意图注入引导语
+
+## 能力范围
+
+- `agent-requirements`: 去会话追踪化：changes 为真相源 + 人话确认 需求。
+
+## 影响范围
+
+- 主要用户: 使用 OpenPrd 画布做视觉协同的开发者与产品设计协作者
+- 成本来源: 主要成本是生图调用次数与画布服务本地资源
+- 额度限制: 首版按单画布会话协同，不开放批量自动改图
+- 依赖: 依赖 openprd canvas 本地服务
+- 依赖: 依赖 0.1.18 生图路由协议
+- 风险: Excalidraw 与 tldraw 数据模型差异导致锚定语义需要适配
+- 风险: 标注文字识别依赖 Agent 视觉能力

package/.openprd/changes/remove-session-tracking-humane-approval/specs/agent-requirements/spec.md

@@ -0,0 +1,16 @@
+## 新增需求
+
+### 需求：去会话追踪化：changes 为真相源 + 人话确认
+OpenPrd 画布目前只有单向的“发送给 Codex”整体交接：Agent 不能结构化读取用户在画布上的选区与标注，不能把生成图片精准放回画布锚点旁，标注修改意图靠用户口述或手动截图传递，协同链路断在“人标注完之后”这一步。
+
+#### 场景：主流程成功
+- **当** 用户在同一项目开第二个对话窗口，直接读活跃变更清单继续工作，两个窗口状态互不覆盖
+- **则** canvas 服务新增 GET /api/selection 与 POST /api/insert-image 且测试通过
+
+#### 场景：边界情况保持可见
+- **当** 旧全局 sessions.jsonl 存在时停止写入、保留只读兼容，读取入口平滑降级
+- **则** 产品应保持该情况明确可见，以支持实现和验证
+
+#### 场景：失败模式得到处理
+- **当** 画布服务未启动时 API 调用失败要提示先运行 openprd canvas
+- **则** 产品应提供有边界且可评审的结果

package/.openprd/changes/remove-session-tracking-humane-approval/task-events.jsonl

@@ -0,0 +1 @@
+{"version":1,"at":"2026-07-07 10:55:08","changeId":"remove-session-tracking-humane-approval","action":"advance","taskId":"T001.01","taskTitle":"评审生成的 spec 覆盖","ok":true,"verify":{"ok":true,"command":"openprd change . --validate --change remove-session-tracking-humane-approval","exitCode":0,"stdout":"OpenPrd change 验证: 通过\nChange: remove-session-tracking-humane-approval\n- OpenPrd change remove-session-tracking-humane-approval: 1 个 spec delta。\n- .openprd/changes/remove-session-tracking-humane-approval/specs/agent-requirements/spec.md: 1 个需求。\n- 结构化 OpenPrd 任务: 10 个任务，9 条依赖；测试策略显式 10 个、推导 0 个；执行策略显式 10 个、推导 0 个。\n- OpenPrd 任务文件: 1 个文件，10 个 checkbox 任务，每个文件最多 25 个。\n- Standards docs root: docs/basic\n- Required docs: 6/6.\n- Docs quality: 6 docs analyzed, 0 with mega-lines > 300 chars.\n- Manual templates: 2/2.\n- Development standards: code files ok <= 700 lines, attention <= 1500 lines.\n- Growth layer: enabled; code-extension candidates can auto-apply, remaining candidates stay in wrap-up review.\n","stderr":""},"evidence":null,"notes":null}