@playcraft/cli 0.1.65 → 0.1.67

package/dist/workspace-runtime/workspaces/remix-reference-skill.js

@@ -42,7 +42,8 @@ export async function ensureWorkspaceRemixReferenceSkill(root, cache) {
             const archive = createCanonicalBundleArchive([{ path: 'SKILL.md', data: oldContent }]);
             if (createHash('sha256').update(oldContent).digest('hex') !== ORIGINAL_BUNDLED_GUIDE
                 || current.sourceTreeHash !== locked.sourceTreeHash
-                || createHash('sha256').update(archive).digest('hex') !== locked.revision.artifactHash)
+                || (previous.lock.lockVersion === 3 && createHash('sha256').update(archive).digest('hex') !== locked.revision.artifactHash)
+                || (previous.lock.lockVersion === 4 && current.sourceTreeHash !== locked.revision.contentHash))
                 return;
         }
         else {
@@ -66,7 +67,7 @@ export async function ensureWorkspaceRemixReferenceSkill(root, cache) {
         const addition = buildLocalProjectSkillsSnapshot({
             declaration: { schemaVersion: 1, entries: [existing ?? { entryKey, source: { kind: 'repository', root: source }, enabled: true, surface: 'sandbox-agent' }] },
             discovered: [], sources: [{ entryKey, root: source, files, sourceTreeHash: sourceTreeDigest(files) }], issues: [],
-        }, existing ? previous.lock : undefined);
+        }, existing ? previous.lock : undefined, { lockVersion: previous.lock.lockVersion });
         const next = structuredClone(previous);
         if (existing) {
             next.declaration.entries[next.declaration.entries.findIndex(entry => entry.entryKey === entryKey)] = addition.declaration.entries[0];
@@ -74,7 +75,7 @@ export async function ensureWorkspaceRemixReferenceSkill(root, cache) {
         }
         else {
             next.declaration.entries.push(...addition.declaration.entries);
-            next.lock.entries.push(...addition.lock.entries);
+            next.lock = { ...next.lock, entries: [...next.lock.entries, ...addition.lock.entries] };
         }
         next.lock.declarationHash = declarationDigest(next.declaration);
         validateProjectSkillsSnapshot(next.declaration, next.lock);

package/dist/workspace-runtime/workspaces/skill-artifact-loader.js

@@ -1,4 +1,5 @@
 import { createHash } from 'node:crypto';
+import { extractBundleArchive, sourceTreeDigest } from '@playcraft/common/project-skills';
 import { workspaceRoot } from './registry.js';
 import { PLATFORM_ROUTES, platformEndpoint } from '@playcraft/common/cloud-workspace/runtime';
 const MAX_ARTIFACT_BYTES = 80 * 1024 * 1024;
@@ -40,12 +41,18 @@ async function requestWorkspaceSkillArtifact(state, workspaceId, entry) {
         await reader.cancel().catch(() => undefined);
     }
     const result = JSON.parse(Buffer.concat(chunks).toString('utf8'));
-    if (typeof result.content !== 'string' || result.artifactHash !== entry.revision.artifactHash
+    if (typeof result.content !== 'string' || typeof result.artifactHash !== 'string' || !/^[a-f0-9]{64}$/.test(result.artifactHash)
+        || (!entry.revision.contentHash && result.artifactHash !== entry.revision.artifactHash)
         || result.content.length > Math.ceil(MAX_ARTIFACT_BYTES * 4 / 3) || result.content.length % 4 !== 0 || /[^A-Za-z0-9+/=]/.test(result.content))
         throw new Error('workspace_skills_digest_mismatch');
     const archive = Buffer.from(result.content, 'base64');
-    if (archive.byteLength > MAX_ARTIFACT_BYTES || archive.toString('base64') !== result.content || createHash('sha256').update(archive).digest('hex') !== entry.revision.artifactHash)
+    if (archive.byteLength > MAX_ARTIFACT_BYTES || archive.toString('base64') !== result.content || createHash('sha256').update(archive).digest('hex') !== result.artifactHash)
         throw new Error('workspace_skills_digest_mismatch');
+    if (entry.revision.contentHash) {
+        const extracted = extractBundleArchive(archive);
+        if (extracted.issues.length || sourceTreeDigest(extracted.files.map(file => ({ path: file.path, content: file.data }))) !== entry.revision.contentHash)
+            throw new Error('workspace_skills_digest_mismatch');
+    }
     if (state.journal.destroyed() || epoch !== state.runtimeEpoch)
         throw new Error('workspace_skills_unavailable');
     return archive;
@@ -53,16 +60,23 @@ async function requestWorkspaceSkillArtifact(state, workspaceId, entry) {
 /** The platform independently authorizes the trusted binding, including an unpublished checkout. */
 export function workspacePlatformSkillAccess(state, workspaceId) {
     return {
-        resolve: async (skillRefs) => {
+        resolve: async (skillRefs, lockVersion = 3, existingLockVersion) => {
             const epoch = state.runtimeEpoch;
             if (state.journal.destroyed())
                 throw new Error('workspace_skills_unavailable');
-            const response = await fetch(`${platformEndpoint(state.config.publicBaseUrl, PLATFORM_ROUTES.skillArtifacts)}/resolve`, {
+            const request = (includeVersion) => fetch(`${platformEndpoint(state.config.publicBaseUrl, PLATFORM_ROUTES.skillArtifacts)}/resolve`, {
                 method: 'POST', redirect: 'error', signal: AbortSignal.timeout(30_000),
                 headers: { authorization: `Bearer ${state.config.controlToken}`, 'content-type': 'application/json', 'playcraft-env': state.config.environment },
                 body: JSON.stringify({ runtimeId: state.config.runtimeId, generation: state.config.generation,
-                    runtimeEpoch: epoch, workspaceId, skillRefs }),
+                    runtimeEpoch: epoch, workspaceId, skillRefs, ...(includeVersion ? { lockVersion, ...(existingLockVersion ? { existingLockVersion } : {}) } : {}) }),
             });
+            let response = await request(lockVersion === 4);
+            // Older strict-schema servers report an unknown field as 401. Retry only to
+            // prove legacy capability with the same credentials; a second 401 remains fatal.
+            if (lockVersion === 4 && (response.status === 400 || response.status === 401)) {
+                await response.body?.cancel().catch(() => undefined);
+                response = await request(false);
+            }
             if (!response.ok) {
                 await response.body?.cancel().catch(() => undefined);
                 throw new Error(response.status === 401 || response.status === 403

package/dist/workspace-runtime/workspaces/skills.js

@@ -82,7 +82,11 @@ async function lockedFiles(root, cache, entry, view, loadArtifact) {
     const persistent = await safeDirectory(root, '.playcraft/skill-artifacts');
     const saved = join(persistent, `${entry.revision.artifactHash}.tar.gz`);
     const path = join(cache, `${entry.revision.artifactHash}.tar.gz`);
+    const contentHash = view.lock.lockVersion === 4 ? entry.revision.contentHash : undefined;
+    const contentSaved = contentHash ? join(persistent, `content-${contentHash}.tar.gz`) : undefined;
+    const contentPath = contentHash ? join(cache, `content-${contentHash}.tar.gz`) : undefined;
     let archive;
+    let contentAddressed = false;
     try {
         const stat = await lstat(saved);
         if (!stat.isFile() || stat.isSymbolicLink() || stat.nlink !== 1 || stat.size > 80 * 1024 * 1024)
@@ -93,33 +97,64 @@ async function lockedFiles(root, cache, entry, view, loadArtifact) {
         if (error.code !== 'ENOENT')
             throw error;
         try {
-            archive = await readFile(path);
+            if (!contentSaved)
+                throw error;
+            const stat = await lstat(contentSaved);
+            if (!stat.isFile() || stat.isSymbolicLink() || stat.nlink !== 1 || stat.size > 80 * 1024 * 1024)
+                throw new Error('workspace_skills_invalid_bundle');
+            archive = await readFile(contentSaved);
+            contentAddressed = true;
         }
         catch (cacheError) {
             if (cacheError.code !== 'ENOENT')
                 throw cacheError;
-            const declaration = view.declaration.entries.find(item => item.entryKey === entry.entryKey);
-            if (entry.revision.kind === 'source' && declaration.source.kind === 'repository') {
-                const source = await readProjectSkillSource(root, declaration);
-                if (source.sourceTreeHash !== entry.sourceTreeHash)
-                    throw new Error('workspace_skills_source_changed');
-                archive = createCanonicalBundleArchive(source.files.map(file => ({ path: file.path, data: Buffer.from(file.content) })));
+            try {
+                archive = await readFile(path);
             }
-            else {
-                if (!loadArtifact)
-                    throw new Error('workspace_skills_artifact_unavailable');
-                archive = await loadArtifact(entry);
+            catch (error) {
+                if (error.code !== 'ENOENT')
+                    throw error;
+                try {
+                    if (!contentPath)
+                        throw error;
+                    archive = await readFile(contentPath);
+                    contentAddressed = true;
+                }
+                catch (contentError) {
+                    if (contentError.code !== 'ENOENT')
+                        throw contentError;
+                    const declaration = view.declaration.entries.find(item => item.entryKey === entry.entryKey);
+                    if (entry.revision.kind === 'source' && declaration.source.kind === 'repository') {
+                        const source = await readProjectSkillSource(root, declaration);
+                        if (source.sourceTreeHash !== entry.sourceTreeHash)
+                            throw new Error('workspace_skills_source_changed');
+                        if (contentHash) {
+                            if (source.sourceTreeHash !== contentHash)
+                                throw new Error('workspace_skills_digest_mismatch');
+                            return source.files.map(file => ({ path: file.path, data: Buffer.from(file.content) }));
+                        }
+                        archive = createCanonicalBundleArchive(source.files.map(file => ({ path: file.path, data: Buffer.from(file.content) })));
+                    }
+                    else {
+                        if (!loadArtifact)
+                            throw new Error('workspace_skills_artifact_unavailable');
+                        archive = await loadArtifact(entry);
+                        contentAddressed = Boolean(contentHash);
+                    }
+                }
             }
         }
     }
-    if (createHash('sha256').update(archive).digest('hex') !== entry.revision.artifactHash)
+    if (!contentAddressed && createHash('sha256').update(archive).digest('hex') !== entry.revision.artifactHash)
         throw new Error('workspace_skills_digest_mismatch');
     const extracted = extractBundleArchive(archive);
     if (extracted.issues.length)
         throw new Error('workspace_skills_invalid_bundle');
+    if (contentHash && sourceTreeDigest(extracted.files.map(file => ({ path: file.path, content: file.data }))) !== contentHash)
+        throw new Error('workspace_skills_digest_mismatch');
     if (entry.revision.kind === 'source' && sourceTreeDigest(extracted.files.map(file => ({ path: file.path, content: file.data }))) !== entry.sourceTreeHash)
         throw new Error('workspace_skills_digest_mismatch');
-    await writeSharedFile(root, saved, archive);
+    await writeSharedFile(root, contentAddressed ? contentSaved : saved, archive);
     return extracted.files;
 }
 function metadata(entryKey, content) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@playcraft/cli",
-  "version": "0.1.65",
+  "version": "0.1.67",
   "private": false,
   "type": "module",
   "engines": {
@@ -23,7 +23,7 @@
   ],
   "scripts": {
     "dev": "tsc -w",
-    "build": "node scripts/generate-asset-skills.mjs && node scripts/generate-video-skills.mjs && node scripts/generate-parameter-skill.mjs && node scripts/generate-preview-runtime.mjs && tsc",
+    "build": "node scripts/generate-asset-skills.mjs && node scripts/generate-video-skills.mjs && node scripts/generate-parameter-skill.mjs && node scripts/generate-level-editor-skill.mjs && node scripts/generate-preview-runtime.mjs && tsc",
     "start": "node dist/index.js",
     "test": "pnpm build && vitest run",
     "test:agent": "node scripts/run-agent-tests.mjs --list",
@@ -42,6 +42,7 @@
     "generate:video-skills": "node scripts/generate-video-skills.mjs",
     "verify:video-skills": "node scripts/generate-video-skills.mjs --check && node --test scripts/generate-video-skills.test.mjs",
     "verify:parameter-skill": "node scripts/generate-parameter-skill.mjs --check && node --test scripts/generate-parameter-skill.test.mjs",
+    "verify:level-editor-skill": "node scripts/generate-level-editor-skill.mjs --check",
     "verify:asset-skills": "node scripts/generate-asset-skills.mjs --check && node --test scripts/generate-asset-skills.test.mjs",
     "verify:agent-stop": "node scripts/verify-agent-stop.mjs",
     "verify-sprite-overlay": "node scripts/verify-sprite-overlay.mjs",
@@ -53,8 +54,8 @@
     "@gltf-transform/core": "^4.3.0",
     "@gltf-transform/extensions": "^4.3.0",
     "@gltf-transform/functions": "^4.3.0",
-    "@playcraft/build": "0.1.65",
-    "@playcraft/common": "0.1.65",
+    "@playcraft/build": "0.1.67",
+    "@playcraft/common": "0.1.67",
     "better-sqlite3-pinned": "npm:better-sqlite3@13.0.3",
     "chokidar": "^4.0.3",
     "commander": "^13.1.0",
@@ -80,6 +81,7 @@
     "three": "0.183.2",
     "update-notifier": "^7.3.1",
     "ws": "^8.19.0",
+    "yaml": "2.8.3",
     "zod": "^3.25.76"
   },
   "devDependencies": {

package/project-template/.claude/skills/playcraft-audio-generation/SKILL.md

@@ -3,7 +3,7 @@ name: playcraft-audio-generation
 description: Use when generating or replacing playable audio, reusing library audio, managing durable audio tasks, or locally compressing, trimming, looping, normalizing, and mixing sound.
 triggers: 生成音效,生成bgm,生成背景音乐,generate sfx,generate bgm,generate audio,音频,音效,背景音乐,sfx,bgm,loop音频,音频压缩,音频处理,audio,compress audio,fade,normalize,音频后处理,音频管线
 compatibility: agent,opencode
-version: 1.1.1
+version: 1.3.0
 surfaces:
   - sandbox-agent
 ---
@@ -12,7 +12,77 @@ surfaces:
 
 ## 0. 开始前必读
 
-AI (Artificial Intelligence, 人工智能) 音频包含 SFX (Sound Effects, 音效) 与 BGM (Background Music, 背景音乐)。工作素材写入当前工程的 `assets/audio/` 或当前主题素材目录；最终交付导出到工程根目录 `dist/`。请求文件和工作记录保存在 `dist/` 外。
+AI (Artificial Intelligence, 人工智能) 音频包含 SFX (Sound Effects, 音效) 与 BGM (Background Music, 背景音乐)。文件音频工作素材写入当前工程的 `assets/audio/` 或当前主题素材目录；最终交付导出到工程根目录 `dist/`。可编辑短音效源见下节。请求文件和工作记录保存在 `dist/` 外。
+
+### 云工作区的可编辑短音效
+
+仅在当前锁定技能版本与工作区能力支持时使用本段流程。先运行 `playcraft audio source capabilities`，检查 `enabled`、`writable`、对应 `operations`；生成与渲染还须 `renderer.ready`。能力缺失或关闭时保留源及已有试听，报告不可用，不替换工程技能锁，不移除声音上下文后继续执行。`synth-sfx` 保持短音效流程；仅在 `audioScoreVersion:1` 与 `audioScoreContextVersion:1` 均声明时使用下述乐谱／多轨流程。外部采样和动态混合仍不支持。
+
+默认从描述、试听、采用开始，只展示适用的时长、音量、音高、明亮度简单控件；用户要求细节后再展开精确参数。工程源在 `source/audio/` 等 `dist/` 外目录，最终表示包位于 `dist/audio/`。未采用候选保持私有，不因续改而强制写入工程。
+
+```bash
+# short-sound-request.json: {"kind":"audio","representation":"synth-sfx","category":"sfx","description":"短促明亮的金币音","duration":0.2,"candidateCount":1}
+playcraft audio source create --request short-sound-request.json --request-id <stable-request-id>
+playcraft assets get <taskId>
+playcraft assets wait <taskId>
+playcraft audio source inspect --task <taskId> --candidate <candidateId>
+
+# duration 是秒；volume 是主增益；pitch 是半音；brightness 是滤波截止频率倍数。
+playcraft audio source edit --task <taskId> --candidate <candidateId> \
+  --revision <candidateRevision> --hash <sourceContentHash> --request-id <stable-edit-id> \
+  --macro duration --value 0.15
+playcraft audio source render --task <taskId> --candidate <candidateId> \
+  --revision <newRevision> --hash <newSourceContentHash> --request-id <stable-render-id>
+
+# 用户明确采用后才保存到工程；替换已有目标还须其真实修订和摘要。
+playcraft audio source adopt --task <taskId> --candidate <candidateId> \
+  --revision <candidateRevision> --hash <sourceContentHash> --request-id <stable-adopt-id> \
+  --output source/audio/coin.pcaudio.json --destination-revision 0
+playcraft audio source inspect --path source/audio/coin.pcaudio.json
+```
+
+这些命令使用同一工作区素材任务。候选身份是任务、候选、修订与源内容摘要；工程源身份是工作区、目录、路径、修订与摘要。保存完整源用 `edit/save --document <file>`，只改简单目标用 `--macro`。每次保存后重新渲染才获得对应试听。所有写命令都要求稳定 `--request-id`；响应不确定时使用原身份恢复，不重复生成。`assets download` 不会把参数候选伪装成音频文件，请走专用采用。
+
+接收 `composer.context.audio` 时先核对目录与精确版本，并保留 `selection`、`lockedVoiceIds`、`preserveTargets`。将保护项传给 `edit/save --locked-voices <逗号分隔声部> --preserve-targets <逗号分隔参数目标>`。锁定和曲线不可静默重置。`intent: propose` 只授权提出可比较方向；明确修改并保存才写入原目标；用于游戏需要接入授权。修订冲突表示用户已有新修改，保留结果供比较，不能刷新基准后覆盖。
+
+保存、试听就绪、实际引用、构建通过分别记录。`pending`、`failed`、`cancelled` 和 `render_peak_exceeded` 不能宣称完成；峰值超限时保留原源、说明需调整增益，不静默归一化。候选修改不会自动采用，收起精细视图也不能丢失源字段。
+
+用于游戏时读取采用回执的 `representation.modulePath`，其中 `sound.mjs` 与运行时、源和试听均是不可变包内相对引用。定位用户指定事件的实际调用点，或沿已有绑定替换；保存旧调用和绑定后，导入 `createSound`，在该交互中调用 `play()`，场景销毁调用 `dispose()`。共享播放器最多 8 个实例、32 个声部；播放需浏览器交互解锁，按工程既有方式处理失败。随后执行工程原有构建验证；没有明确调用点时保持待接入，不猜测事件映射。
+
+```javascript
+import { createSound } from '<representation.modulePath 相对当前模块的路径>';
+const coinSound = createSound();
+// 放入用户指定的金币事件处理器；按项目方式处理播放失败。
+await coinSound.play();
+// 场景销毁：coinSound.dispose();
+```
+
+`playcraft audio source bind --path <source> --revision <revision> --hash <hash> --event <event> --request-id <id>` 只创建固定版本的交接记录，返回 `integration_required`，不能证明代码已引用或构建成功。`rollback --path <source> --revision <current> --hash <hash> --version <historical> --request-id <id>` 追加历史源恢复修订，之后重新渲染。游戏回退还必须恢复旧模块调用及绑定，再次构建；不能只恢复源就宣称游戏回退。
+
+### 可编辑音乐与多轨协作
+
+音乐使用 `format: "playcraft.score"`、`content.kind: "score"` 的 `.pcscore.json`，引擎 `playcraft-webaudio-score@1.0.0`。先核对音乐能力、写权限与渲染就绪。默认让用户描述用途、试听候选，再调速度、整体强弱、乐器和循环；选轨、拍段或音符后才展开细节。符号音高采用 MIDI (Musical Instrument Digital Interface, 乐器数字接口) 音符号；时间是四分音符拍点，速度为 BPM (Beats Per Minute, 每分钟节拍数)，不能混用秒和拍。
+
+```bash
+# music-request.json: {"kind":"audio","representation":"score","category":"bgm","description":"轻快的两轨游戏循环音乐","duration":8,"bpm":120,"loop":true,"candidateCount":1}
+playcraft audio source create --request music-request.json --request-id <stable-create-id>
+playcraft assets wait <taskId>
+playcraft audio source inspect --task <taskId> --candidate <candidateId>
+playcraft audio source edit --task <taskId> --candidate <candidateId> \
+  --revision <revision> --hash <sourceContentHash> --request-id <stable-edit-id> --macro tempo --value 132
+playcraft audio source render --task <taskId> --candidate <candidateId> \
+  --revision <newRevision> --hash <newHash> --request-id <stable-render-id>
+playcraft audio source adopt --task <taskId> --candidate <candidateId> \
+  --revision <newRevision> --hash <newHash> --request-id <stable-adopt-id> --output source/audio/loop.pcscore.json
+```
+
+精细操作使用 `edit --adjustment <file>`：例如 `{"kind":"instrument","instrument":"bell","trackIds":["melody"]}`；或者在读取精确源后 `edit --document <file>` 保存完整源。内置音色限 `piano / bell / bass / pad / sine / drums`，不是外部采样乐器库。最多 8 轨、512 音符、32 并发音符、60 秒和 64 KiB 源；超限、无法表达的特性必须报告，不截断或改成另一种音频。
+
+`composer.context.audio.version:2` 明确 `timeUnit:"beats"`，冻结 `selection.trackIds / noteIds / rangeBeats`、`protection.lockedTrackIds / preserveMelody`。把该选区原样写入工程外临时文档，保存时传 `--selection <file> --locked-tracks <ids> --preserve-melody` 中实际适用的项。只调整鼓轨第 5—8 小节时，按拍号计算精确拍段，保护其余轨和拍段；改变整轨音色、增益、自动化或全局速度会影响范围之外，不能把它当作局部修改。服务器会与可信上下文再次核对，命令自行删掉保护条件不会解除限制。
+
+修订不匹配时保留双方，不自行刷新后覆盖。网页可由用户显式合并没有依赖冲突的轨道或音符；速度、循环、全局混音、同轨音色／自动化及同音符冲突需要比较后重做。候选仍须独立采用，回退仍追加新源修订，游戏引用仍单独恢复。
+
+音乐完整包成员为 `sound.pcscore.json / audition.wav / runtime.mjs / sound.mjs / manifest.json`，只使用回执中的固定模块。`createSound().prepare()` 不默认展开整段音乐采样；`play()` 按乐谱和循环段调度，返回的 `stop()` 或播放器 `stop()/dispose()` 会结束循环并释放资源。场景退出、页面隐藏或切换试听时应调用停止，禁止遗留循环。单次播放可传 `play({loop:false})`；指定段落或轨道试听通过受支持的 `selection` 参数。试听渲染文件本身是完整单次表示，循环起止需随乐谱一起使用。
 
 ### 复用素材与持久化音频任务
 
@@ -199,7 +269,7 @@ playcraft audio info --input assets/audio/bgm/main_theme_loop.mp3
 
 ## 3. 本地音频后处理
 
-所有 `playcraft audio` 子命令**完全本地运行**，无需网络。
+本节文件后处理子命令**完全本地运行**，无需网络；前述 `playcraft audio source` 使用云工作区服务。
 
 ### 3.1 常用处理命令
 
@@ -253,7 +323,7 @@ playcraft audio mix \
 
 ### 3.2 标准音频处理管线
 
-AI 生成后的**必做处理步骤**：
+文件音频生成后的处理步骤：
 
 ```
 SFX 管线：

package/project-template/.claude/skills/playcraft-level-editor/SKILL.md

@@ -0,0 +1,34 @@
+---
+name: playcraft-level-editor
+description: Create or evolve a project's declarative level editor by mapping its actual level files to platform editing components and connecting the same saved data to production and development playtests.
+compatibility: agent,opencode
+version: 1.1.0
+surfaces:
+  - sandbox-agent
+---
+
+# Project level editor
+
+Generate a project-owned editing declaration, data schema and real game integration. The platform composes its editor from the declaration; do not build a game-specific platform page or infer a writable scene from arbitrary engine objects.
+
+The runtime supplies an exact task identity, frozen component catalog and admission-report path. Read [the protocol](references/protocol-v1.md) and the installed component catalog before changing files. Use [preview integration](references/preview.md) when connecting the game.
+
+Inspect the current production entry, level loading, authoring data, resource registration and lifecycle. Prefer existing native files and identifiers. Choose controls that address the user's actual request; preserve unrelated data, comments, layouts and existing editor customization. Repeated initialization evolves the current declaration, rather than resetting the game to an example.
+
+Declare explicit collections, stable identities, selection, bindings, commands and view composition. Field names and panel layouts belong to the project. Expose only supported component and command versions; do not generate executable expressions inside declarations or game-specific platform frontend code. Use the installed extension contracts for project-owned dedicated views, validators and data providers. Ordinary edits use the declared commands without another Agent call.
+
+Give every declared data-schema node an explicit single `type`; annotations such as `readOnly` cannot replace it. Preserve unknown author fields with their actual types and readonly boundaries rather than changing their values to fit a schema. Follow the exact node scope and subset rules in [the protocol](references/protocol-v1.md).
+
+For paths, three-dimensional data, custom shapes, command compositions, dedicated views or nonstandard files, read [project extensions](references/extensions.md). Use only features reported by the current runtime; preserve existing frozen Skill locks.
+
+Production and development playtests must consume the same neutral data resolver. Connect actual consumers: a declaration, getter or hand-written success report is insufficient. Editing changes authored initial data; playtest scores, deaths, motion and generated objects must not be written back to it. Restart the current level when the change cannot honestly apply in place.
+
+Before changing a data contract, preserve the original files and account for existing user values and object identities. A layout-only change must not migrate level data. If a required migration cannot preserve meaning, leave the current data intact and report the missing work.
+
+Add executable `test:level-editor` checks for defaults and at least two meaningful edited outcomes in real game consumers. Preserve an existing `typecheck` and successful production `build`. Production output belongs in `dist/` and excludes development editor code. Keep reviewable partial changes and report concrete unsupported work on failure.
+
+These permanent checks must remain valid after ordinary legal author edits. Exercise controlled copies of current author data and actual consumers; do not pin the original level file hash, budget, coordinates, or object count as an immutable test expectation. Original-byte preservation belongs to the platform admission baseline and report, not a permanent restriction on the user's future levels.
+
+Use the admission report's `missing` only for actual incomplete or failed engineering capabilities, such as schema, real consumers, adapter wiring, required scripts or production isolation. Post-authoring platform verification, managed preview context, browser handshake and Portal operations belong to their later authoritative phases; not having run them does not itself describe a code gap. `missing: []` claims no identified engineering gap, not checked, verified or connected status. Preserve unverified facts in the final reply or project README; follow [the protocol's phase boundaries](references/protocol-v1.md) without inventing pending report fields or platform results.
+
+After editing, calculate the actual source-file hashes and write the exact admission report supplied by the runtime. End with the implemented scope and remaining work. The platform independently verifies sources and checks, then prepares the first development instance; only its real handshake establishes connected capability.