@zq-silk/yui 2.7.1 → 2.8.1

package/docs/release-workflow.md

@@ -51,6 +51,58 @@ merely to avoid a version decision. Package versions remain distinct from protoc
 and persistent-storage contracts: their compatibility checks and required migrations
 are unchanged, and the storage rules below do not authorize a package release.
 
+### 2.8.1 compatibility and migration notes
+
+This patch fixes maintenance startup for an existing Operator conversation
+that supplies only its native identity, including Codex Desktop. `doctor`,
+`upgrade` and `update` authenticate against the supported Home before requiring
+current storage, so an older Home can reach the updater's read-only preflight.
+Structured preflight failures retain their original diagnosis and recovery
+guidance. Ordinary commands still require current storage and current authority.
+
+Storage remains **1.8**. The existing contiguous **1.0 through 1.8** migration
+chain, backup, maintenance lock and exact Controller handover are unchanged.
+Use `yui update --version 2.8.1`; no manual intermediate upgrade or replacement
+native Session is required for supported Homes. Pre-1.0 / 0.x Home formats are
+outside this release's supported migration contract; no historical authorization
+exception or legacy conversion is introduced.
+
+Verification includes an isolated published 2.7.1 CLI with storage 1.7 and a
+live Controller/Host: one native-only update preserves the original Host and
+native conversation, migrates storage and processes new input afterward.
+Only the external Provider is simulated. Publishing does not update a user's
+global CLI, Home or production Controller.
+
+### 2.8.0 compatibility and migration notes
+
+This minor adds native metabridge model management: provider configuration,
+cached model catalogs, and manual subscription-quota observations through the
+supported CPA extensions. Models and Settings share navigation, canonical
+section URLs, browser history, locale and theme handling. Content-versioned
+static assets improve repeat navigation; HTML and account APIs remain uncached.
+The release also includes the chat-style Conversation dock, bounded runtime
+diagnostics, native caller/inbox corrections, and review-context improvements
+merged since 2.7.1.
+
+Storage advances from **1.7 to 1.8** through the centralized additive transition
+for optional, non-secret model connection references. Existing Homes remain
+unconfigured. A separately authorized upgrade can use
+`yui update --version 2.8.0`; the updater owns preflight, backup, migration and
+Controller replacement. Do not open an upgraded Home with an older binary or
+edit its storage manually.
+
+metabridge and CPA remain separately operated services; installing Yui does not
+start, reload or adopt them. Configure their connection references explicitly.
+Saving provider configuration does not prove it is applied or validate inference.
+CPA still owns its upstream OAuth/account pool. Quota refresh may query billing
+services but does not renew credentials, reset quota or run inference. Unknown,
+partial and stale observations remain distinct.
+
+Release evidence is deterministic core CI and isolated, fresh-install package
+smoke on supported Linux/macOS and Node versions, not real-model validation.
+Publishing this package alone does not authorize a global CLI update, a Home
+migration, or any production-service restart.
+
 ### 2.7.1 compatibility and migration notes
 
 This release delivers the intended 2.7 feature line. The `v2.7.0` attempt stopped
@@ -351,13 +403,27 @@ Home database, including for process custody, native account locations, or
 execution-environment checks. Only the Controller owns storage and resolves
 durable facts; malformed current input fails at its normal protocol boundary.
 
-Breaking upgrades do not inherit historical Hosts or processes. Runtime startup,
-`upgrade`, `update`, and release activation no longer scan old Host sockets or
-processes, infer their capabilities, or negotiate a compatibility handoff. Use a
-clean runtime environment; this is not permission to discard pending work or
-kill resources of uncertain ownership. Current Controller restart, exact
-process-generation checks, handover locks, Session authority and event replay
-protection remain enforced.
+Compatible upgrades retain logical Sessions and live Hosts. A build generation
+is diagnostic provenance, not a native-resume gate: after a safe authorized Host
+release, the current built-in adapter may resume the same native identity.
+Model, account, permissions, workspace and current authority are not relaxed.
+No module hot-replacement or old-code installation is used.
+
+The supported interoperability range is the existing control/event v1 and RPC
+version 1, not arbitrary historical processes. Host status now advertises
+`controlCapabilities` and `hostImplementation` captured at process load, separate
+from the Endpoint build. Controllers request `reconcile-turn` only when
+advertised. Pre-advertisement v1 Hosts still support status and raw Inbox
+consumption; exact terminal republication is unavailable, not guessed from a
+package version. Unknown protocols remain refused.
+
+`update` reports program/storage completion separately from retained Host state.
+It neither interrupts compatible busy Hosts nor automatically replaces an
+unsupported one. A required refresh uses the existing explicit lifecycle, with
+exact Turn, background execution and writer-release evidence before reattachment.
+Idle status alone is insufficient; uncertain state blocks refresh rather than
+authorizing force-kill, input replay or a new native identity. Controller
+handover locks, process-generation fences and Session authority remain enforced.
 
 Storage upgrades are limited to the current major's explicit minor steps.
 Cross-major conversion is independently authorized and is not a runtime fallback.
@@ -375,6 +441,13 @@ reporting alongside durable Run state. Pending native results or known reporting
 failures require attention; they do not mean the Provider failed, the Run ended,
 or the work was accepted. The Host's live diagnostics inspect only its own event
 file identities and never parse or quarantine another producer's newer payload.
+Missing event delivery is unreported, not healthy. `unpersisted` counts original
+facts still held in the Host after an Inbox write failure. Reconciliation first
+retries those exact bytes in observation order, then republishes retained exact
+terminal evidence; it does not execute input. Keep this Host alive until its
+bytes are durable. A filesystem fault followed by process loss cannot be
+repaired by inventing a result. Task and Global full reconciliation use the
+same capability-gated operation, including a final input with no queued successor.
 
 ## CLI and Controller release boundary
 

package/docs/release-workflow.zh-CN.md

@@ -36,6 +36,43 @@ Agent 选择一个预先声明的计划，设施从持久状态驱动该计划
 不能将不兼容冒称为兼容，也不为回避版本选择新增历史兼容机制。包版本与协议、
 持久存储契约仍然独立：兼容性检查和必要迁移要求不变，下文存储规则不授予发版权限。
 
+### 2.8.1 兼容性及迁移说明
+
+本 patch 修复已有 Operator 会话仅携带 native 身份（包括 Codex Desktop）时的
+维护启动循环。`doctor`、`upgrade`、`update` 先在受支持的旧 Home 上验证调用者，
+不再要求存储已经升级才能进入只读预检。结构化预检失败保留原始诊断与恢复指引；
+普通业务命令仍要求当前存储格式和有效权限。
+
+存储仍为 **1.8**，已有 **1.0 至 1.8** 连续迁移链、备份、维护锁和精确 Controller
+交接保持不变。可使用 `yui update --version 2.8.1`；受支持的 Home 不需要手工先做
+中间升级或更换 native 会话。1.0 之前／0.x Home 格式不在本次迁移支持范围内，
+本版本不引入旧格式转换或历史授权例外。
+
+隔离验证使用真实已发布的 2.7.1 CLI、1.7 Home 和运行中的 Controller/Host：
+一次 native-only update 保留原 Host 与 native 会话，完成存储迁移并继续处理新输入。
+仅外部 Provider 使用确定性模拟。发布不会更新用户真实全局 CLI、Home 或生产 Controller。
+
+### 2.8.0 兼容性及迁移说明
+
+本 minor 新增原生 metabridge 模型管理：提供商配置、模型目录缓存，以及经受支持
+CPA 扩展手动查询的订阅额度。模型和设置共用导航、规范分区 URL、浏览器前后退、
+语言和主题处理；带内容版本的静态资源改善重复访问，HTML 与账号 API 仍不缓存。
+同时包含 2.7.1 之后合入的聊天式 Conversation 面板、有界运行诊断、原生调用者／
+收件箱修正，以及评审上下文改进。
+
+存储通过集中式增量迁移从 **1.7 升至 1.8**，新增可选、非密钥的模型连接引用；
+已有 Home 保持未配置。另行授权升级时可使用 `yui update --version 2.8.0`，
+由更新器负责预检、备份、迁移与 Controller 替换。不要使用旧程序打开升级后的
+Home，也不要手工修改存储。
+
+metabridge 与 CPA 仍为单独运维的服务，安装 Yui 不会启动、重载或自动接管它们，
+需显式配置连接引用。保存提供商配置不代表已生效，也不验证推理；CPA 继续负责其
+上游 OAuth／账号池。额度刷新可能查询计费服务，但不续期凭据、不重置额度、
+不执行推理；未知、部分成功和过期观测保持区分。
+
+发布证据为确定性核心 CI 与受支持 Linux／macOS、Node 版本上的隔离全新安装冒烟，
+不代表真实模型验证。仅发布本包不授予全局 CLI 更新、实际 Home 迁移或生产服务重启权限。
+
 ### 2.7.1 兼容性及迁移说明
 
 本版交付原定的 2.7 功能。`v2.7.0` 的运行包冒烟将 macOS 临时路径与其物理别名
@@ -265,10 +302,20 @@ Controller RPC 版本 1。Host 不打开 Home 数据库，包括进程归属、
 执行环境校验。只有 Controller 拥有存储并解析持久事实；非法当前输入在正常协议
 边界得到明确错误。
 
-破坏性升级不承接历史 Host 或进程。启动、`upgrade`、`update` 和 release activation
-不再扫描旧 Host socket／进程、推断旧能力或协商兼容交接。使用干净的运行时环境；
-这不授权丢弃未决工作或终止归属不确定的资源。当前 Controller 正常重启、准确进程
-代际校验、交接锁、Session 权限与事件防重放继续生效。
+兼容升级保留逻辑 Session 和存活 Host。构建 generation 仅作历史诊断，不再作为
+原生恢复门槛；通过已有获授权生命周期安全释放旧 Host 后，当前内置 adapter 可恢复
+同一原生身份，不改变模型、账号、权限或工作区，也不热替换模块或安装旧实现。
+
+支持范围明确为现有 control/event v1 与 RPC 版本 1，不承诺任意历史进程兼容。
+Host status 用 `controlCapabilities` 声明控制能力，并用进程加载时捕获的
+`hostImplementation` 区别于 Endpoint 构建。Controller 仅在明确声明时发送
+`reconcile-turn`。没有能力字段的 v1 Host 仍可读取 status、消费原始 Inbox；
+精确终态重发能力不可用，不根据包版本猜测。未知协议仍拒绝。
+
+`update` 区分程序／存储完成与保留 Host 的状态，不打断兼容的忙碌 Host，也不自动
+替换不支持的 Host。必要刷新沿用显式生命周期：先证明精确 Turn、后台执行与写入者
+已释放，再重新附着。仅 idle 不足以证明安全；状态未知时保留现场，不能强杀、
+重放输入或静默新建原生身份。Controller 交接锁、进程身份围栏与 Session 权限继续有效。
 
 存储升级仅包含同主版本内明确的小版本步骤。跨主版本转换独立授权，
 不构成运行时回退。
@@ -282,6 +329,10 @@ Global Context 命令保持自足，供远端 TUI/Desktop 使用。必须正确
 显示 Host 上报观测。原生结果待落库或已知上报故障需要关注，但不代表 Provider 失败、
 Run 已结束或业务已验收。Host 诊断只检查自己已投递文件的身份是否存在，不解析或隔离
 其他生产者的新格式事件。
+缺少 eventDelivery 表示未报告而非健康。`unpersisted` 是 Inbox 写入失败后仍保留在
+原 Host 内的原始事实数；协调先按观察顺序重试这些字节，再补发保留的精确终态，
+不重新执行输入。必须保留该 Host 直至落盘，不能在文件系统故障又进程丢失后编造结果。
+Task 与 Global 的完整协调都使用同一能力检查，包括没有后续排队输入的最后一个 Turn。
 
 ## CLI 与 Controller 发布边界
 

package/docs/storage-baseline.md

@@ -2,7 +2,12 @@
 
 # Storage baseline 1.0
 
-Current storage is 1.7. The declared 1.6 → 1.7 transition adds optional Agent
+Current storage is 1.8. The declared 1.7 → 1.8 transition permits an optional
+Model management connection in Yui configuration. Only service addresses and
+file references are stored; no credentials are imported. Existing Homes remain
+unconfigured, and the SQL layout is unchanged.
+
+The declared 1.6 → 1.7 transition adds optional Agent
 inbox claim and acknowledgement receipts to canonical Messages and Leader
 wakes, including the exact pending-window identity. Historical records and
 frozen Context digests remain unchanged; missing handling evidence is never

package/docs/storage-baseline.zh-CN.md

@@ -2,7 +2,10 @@
 
 # 存储基线 1.0
 
-当前存储为 1.7。1.6 → 1.7 为规范 Message 和 Leader wake 增加可选的 Agent
+当前存储为 1.8。1.7 → 1.8 允许在 Yui 配置中保存可选的 Model 管理连接，
+仅保存服务地址及文件引用，不导入凭据；已有 Home 保持未配置，SQL 布局不变。
+
+1.6 → 1.7 为规范 Message 和 Leader wake 增加可选的 Agent
 信箱领取、确认消费回执及精确待处理窗口身份；不改写历史原文或冻结 Context 摘要，
 不将缺失的处理证据补写成投递或消费。物理 SQL 结构不变。
 

package/docs/testing/review-evaluation.md

@@ -0,0 +1,148 @@
+<p align="right"><strong>English</strong> | <a href="./review-evaluation.zh-CN.md">简体中文</a></p>
+
+# First-round review: materials and offline evaluation
+
+The default is one Reviewer using risk-appropriate perspectives, not a fixed
+number of Agents or findings. Leader judgment still owns acceptance. Generic
+methods live in `skills/yui-reviewer` and `skills/yui-leader`; project commands
+and architecture rules remain in Project Skills/Policy.
+
+## Material handoff
+
+Use existing requirements, decisions and verification results. A complex change
+may benefit from a short Task artifact index:
+
+- Goal/non-goals and effective decision references.
+- Observable scenarios, expected behavior and independent contract sources.
+- Contract entry points, callers and key risks.
+- Candidate identity and actual check results (commit, environment, command,
+  result), distinguishing unexecuted scenarios and uncovered boundaries.
+- For full re-review: repair delta, previous findings' dispositions and still
+  applicable evidence. The complete current frozen candidate remains in scope.
+
+Save the index with `task artifact save`, then place its returned
+`git:<commit>:<relativePath>` in Brief. New Review snapshots include the Brief
+and active decisions. Read relevant bodies using the exact `store/refId` from
+the Context inventory, following content pagination. A same-Task artifact is
+read at its pinned commit with `task artifact read <task> <path> <commit>`.
+Later Brief/decision edits do not change an existing Review snapshot. This is
+not a document-completeness gate, prose parser or Skill-version freeze.
+Ordinary full review and the existing equivalence Delta Recheck remain distinct.
+
+## Small development corpus
+
+`scripts/review-eval/` is an offline file tool, not a scheduler, model adapter or
+new Core store. It never calls a provider. No historical Task cases or results
+are inputs. All eight examples are newly constructed from explicit contracts.
+
+| Cases | Capability | Shape |
+| --- | --- | --- |
+| E01 | Half-open interval behavior | Introductory single root |
+| E02 | Persistence failure and repeat identity | Two independent roots in one complete candidate |
+| E03 | Producer/consumer opaque-cursor contract | Two modules |
+| E04–E06 | Lifecycle, partial-result correspondence, authorization effects | Intermediate state/contract cases |
+| E07–E08 | Distinguishing permitted behavior from defects | LRU and progressive-display controls |
+
+Every package supplies a complete candidate, not a historical patch; there is no
+required repository baseline. Requirements define inputs, non-goals and effects.
+The scorer catalogue holds root/trigger/violation/impact and repair controls.
+`verify.mjs` probes observable behavior against independent literal expectations,
+checks seven target roots, passing repairs and normal controls. It does not
+prove exhaustive correctness, independent authorship verification or Agent
+effectiveness. Additional valid findings require adjudication.
+
+```sh
+node scripts/review-eval/evaluate.mjs verify
+node scripts/review-eval/evaluate.mjs export E03 basic /absolute/new-participant-directory
+```
+
+Export uses an explicit projection of candidate source and requirements; indexed
+materials add only a navigation index. Both have identical necessary contracts
+and source. Exports contain no gold, repair, scorer code, family labels or Git
+history. Existing destinations are refused. A failed export may leave a partial
+directory: inspect it, do not use it as a complete participant package.
+
+Export is NOT a filesystem sandbox. A participant with access to this repository,
+the scorer directory, prior sessions or the network can obtain answers.
+Only claim blind evaluation after a separately provisioned isolated environment
+denies those paths/tools, with access probes and exact evidence. Never use a
+“do not read answers” instruction as isolation.
+
+These are public development cases. Unknown holdouts must be separately authored
+after the method/protocol is fixed, with independent contract checking and a
+family-level overlap audit. Renamed, repaired or near-variant development cases
+cannot become holdouts. Keep holdout source, labels and adjudication outside
+participant access and method-tuning conversations. This tool deliberately
+does not fabricate a holdout or claim one has been evaluated.
+
+## Freeze a comparison before running it
+
+```sh
+node scripts/review-eval/evaluate.mjs plan protocol.json
+node scripts/review-eval/evaluate.mjs score plan.json records.json
+```
+
+Capture stdout as separate files using your normal artifact workflow. The
+protocol is a JSON object with nonempty `model`, `effort`, `tools`, `environment`,
+`budget`, `seed`; positive `repeats`; and `baseline`/`improved` maps of relative
+Skill paths to exact UTF-8 contents, including their VERSION and required
+references. Load these only in isolated evaluation configuration, not global
+installation. This file is scorer-side; it contains both methods.
+
+The plan assigns A=baseline/basic, B=improved/basic, C=baseline/indexed,
+D=improved/indexed. It fixes corpus/config/source/material/Skill digests and run
+IDs, seed-orders case/repeat blocks and balances group position by Latin rotation.
+Three repeats over eight development cases means 96 runs, not an authorization
+or statistical-power claim. Do not change models, budgets or tools between groups.
+An extra independent-Reviewer comparison is a separate experiment with all
+producer and synthesis costs, optionally with matched total budgets.
+
+There is no live execution or automatic retry command. Actual runs require
+explicit resource/effect authorization, fresh participant sessions and verified
+isolation. Preserve exact inputs, actually loaded Skills/configuration, raw
+outputs and execution/tool evidence. Do not infer a successful run from dispatch.
+Predeclare any retry protocol separately, retain original failures and every
+attempt's costs; do not replace a failed planned record with a successful retry
+in the primary analysis. This minimal tool reports one attempt per planned run.
+
+## Adjudicate before aggregation
+
+`records.json` is an array. Each supplied record contains its planned `id`,
+`planDigest`, observed `candidateDigest`, `materialDigest`, `skillDigest`, `configDigest`, and
+`status` (`completed`, `timeout`, `infra-failed`, `not-run`). Executed records
+also contain `evidenceRef` and `rawOutput`; incomplete records require `reason`.
+Identity digests are evidence supplied by the execution recorder, not attestation
+by this offline tool. Preserve the actual model/tool/environment configuration
+in that evidence and exclude protocol deviations rather than relabeling them.
+`configDigest` hashes the JSON object containing `model`, `effort`, `tools`,
+`environment`, `budget` in that order. Other digests use the exported `digest`
+helper (SHA-256 of `JSON.stringify(value)`). Reports bind the complete supplied
+record array with `recordsDigest`; retain that file alongside the plan/report.
+
+Completed records require `findings` (empty is valid). Each finding contains
+`id`, original `claim`, and `verdict`: `valid`, `invalid`, `pending`, `gap` or
+`suggestion`. Valid/invalid adjudications also require `root`, `reason` and
+`evidence`. Match meaning, triggers, violated constraints and impact, not wording
+or line numbers. Use the catalogue root ID only after checking evidence.
+Unlisted valid roots use `novel:<stable-key>` after separate verification;
+never automatically label them false positives. Keep disputes pending.
+Use a scorer who does not see group labels when practical; disclose if author,
+checker and scorer are the same person/Agent.
+
+Optional `coverage` entries contain `perspective`, `scenario`, `expected` and
+`evidence`, using the case's applicable perspectives. These remain claims to
+inspect, not automatic proof. Optional `metrics` contains nonnegative `wallMs`,
+`agentCalls`, `toolCalls`, `inputTokens`, `outputTokens`, `contextBytes`, `cost`
+(one predeclared currency). Missing values remain missing, never estimated.
+
+The report includes per-case repeated recalls, macro/micro known-root recall,
+adjudicated unique-root precision, false positives and control false-positive
+rate, duplicate/novel/pending counts, planned completion and discovery yield,
+cost availability and Skill/material/interaction contrasts. Zero denominators
+are null. Partial outputs are retained in originals but excluded from completed
+first-round metrics. Missing planned runs remain `not-run`; they are not clean
+reviews. Failed-run costs still count. Completed-only contrasts can be biased:
+inspect failures, denominators and per-case variation before interpretation.
+If gold changes, preserve the old plan and rescore every group under the same
+new adjudication version, reporting both results. No automatic acceptance
+threshold or generalization claim follows from this small synthetic corpus.

package/docs/testing/review-evaluation.zh-CN.md

@@ -0,0 +1,117 @@
+<p align="right"><a href="./review-evaluation.md">English</a> | <strong>简体中文</strong></p>
+
+# 首轮审查：材料与离线评测
+
+默认单 Reviewer 按风险使用互补视角，不固定 Agent 或 Findings 数量。
+验收仍由 Leader 判断。通用方法位于 `skills/yui-reviewer` 和
+`skills/yui-leader`；项目命令与架构规则保留在 Project Skill/Policy。
+
+## 材料交接
+
+复用有效要求、决定和验证结果。复杂变更可以保存简短的 Task 工件索引：
+
+- 目标/非目标及有效决定入口。
+- 可观察场景、预期行为和独立契约依据。
+- 契约入口、调用方及关键风险。
+- 候选身份和实际检查结果（提交、环境、命令、结果），区分未执行场景与未覆盖边界。
+- 完整复审追加修复 delta、历史 Findings 处置及仍适用证据；当前完整冻结候选仍在范围内。
+
+通过 `task artifact save` 保存索引，将返回的
+`git:<commit>:<relativePath>` 放入 Brief。新的 Review Snapshot 包含 Brief
+及 active 决定。按 Context inventory 的精确 `store/refId` 读取相关正文并跟完内容分页。
+同 Task 工件通过 `task artifact read <task> <path> <commit>` 读取固定提交。
+后续 Brief/决定修改不改变既有 Review Snapshot。这不是文档齐全门禁、
+自然语言解析器或 Skill 版本冻结机制。普通完整复审与已有等价性 Delta Recheck 保持不同语义。
+
+## 小型开发集
+
+`scripts/review-eval/` 是离线文件工具，不是调度器、模型适配器或新增 Core 存储。
+它不调用 Provider，不以任何历史 Task 案例或结果为输入。八个题目均由明确契约新构造。
+
+| 案例 | 能力 | 形态 |
+| --- | --- | --- |
+| E01 | 半开区间行为 | 入门单根因 |
+| E02 | 持久化失败与重试身份 | 一个完整候选内的两个独立根因 |
+| E03 | 生产者/消费者不透明游标契约 | 两个模块 |
+| E04–E06 | 生命周期、部分结果对应、授权副作用 | 中等状态/契约题 |
+| E07–E08 | 区分合法行为与缺陷 | LRU 与渐进展示正确对照 |
+
+每包提供完整候选，不是历史补丁，也不要求仓库基线。要求明确输入、非目标和副作用。
+评分侧目录保存根因、触发、违反约束、影响及修复对照。
+`verify.mjs` 用独立的字面预期检查可观察行为，验证七个目标根因、通过的修复及正常对照。
+这不证明穷尽正确性、独立出题核实或 Agent 效果。额外有效发现需要裁定。
+
+```sh
+node scripts/review-eval/evaluate.mjs verify
+node scripts/review-eval/evaluate.mjs export E03 basic /absolute/new-participant-directory
+```
+
+导出仅投影候选源码与要求；indexed 材料只增加导航索引。两组的必要契约与源码完全相同。
+导出不含 gold、修复、评分器、家族标签或 Git 历史，拒绝已有目标目录。
+导出失败可能留下部分目录，应检查并避免当作完整受测包使用。
+
+导出不是文件系统沙箱。若受测者能读本仓库、评分目录、先前会话或网络，仍可能获得答案。
+只有另行配置的隔离环境确实拒绝这些路径/工具访问，并留存探针证据，才能声称盲测。
+“禁止看答案”的提示词不能代替隔离。
+
+这些是公开开发题。未知保留题必须在方法与协议确定后单独编写，独立核实契约并做家族重叠审计。
+开发题的改名、修复和近似变体不能变成保留题。保留源码、标签和裁定材料不得进入受测权限或
+方法调优会话。本工具明确不伪造保留集，也不声称已评测保留集。
+
+## 运行前固定比较协议
+
+```sh
+node scripts/review-eval/evaluate.mjs plan protocol.json
+node scripts/review-eval/evaluate.mjs score plan.json records.json
+```
+
+按正常工件流程将 stdout 保存为单独文件。协议 JSON 包括非空
+`model`、`effort`、`tools`、`environment`、`budget`、`seed`，正整数 `repeats`，
+以及 `baseline`/`improved` 两个“Skill 相对路径 → 精确 UTF-8 内容”映射，
+包含 VERSION 和必要引用。只在隔离评测配置加载，不修改全局安装。
+协议文件属于评分侧，含两种方法，不能整体交给受测者。
+
+计划固定 A=baseline/basic、B=improved/basic、C=baseline/indexed、
+D=improved/indexed，记录题库、配置、源码、材料、Skill 摘要与 run ID。
+按 seed 排列案例/重复块，并以拉丁轮换平衡组别位置。八题各重复三次是 96 次运行，
+不是资源授权或统计效力承诺。各组不得更换模型、预算或工具。
+额外独立 Reviewer 属于另一项试验，计入全部生产者与汇总成本，可补同总预算比较。
+
+没有真实执行或自动重试命令。实际运行需要明确资源/副作用授权、全新受测会话和已验证隔离。
+保留精确输入、实际加载的 Skill/配置、原始输出与执行/工具证据，不能把投递当成功执行。
+重试规则须另行预先规定，保留原失败及全部尝试成本；主分析不得以成功重试覆盖失败的计划记录。
+此最小工具每个计划 run 只统计一次尝试。
+
+## 先裁定，再汇总
+
+`records.json` 是数组。每条记录包含计划 `id`、`planDigest`、
+实际观察到的 `candidateDigest`、`materialDigest`、`skillDigest`、`configDigest` 及 `status`
+（`completed`、`timeout`、`infra-failed`、`not-run`）。
+已执行记录还包含 `evidenceRef`、`rawOutput`；未完成记录需要 `reason`。
+身份摘要来自执行记录者，本离线工具不为其真实性背书。
+实际模型/工具/环境配置保留在证据中；协议偏离应单列排除，不能重标为合规运行。
+`configDigest` 对依次包含 `model`、`effort`、`tools`、`environment`、`budget`
+的 JSON 对象取摘要。其他摘要使用导出的 `digest` helper
+（`JSON.stringify(value)` 的 SHA-256）。报告通过 `recordsDigest` 绑定完整输入记录数组；
+该文件应与计划、报告一同保留。
+
+完成记录必须有 `findings`（允许空数组）。每条含 `id`、原始 `claim` 和
+`verdict`：`valid`、`invalid`、`pending`、`gap` 或 `suggestion`。
+valid/invalid 还必须有 `root`、`reason`、`evidence`。
+按语义、触发、违反约束及影响匹配，不按标题或行号匹配；核实证据后才使用题库根因 ID。
+gold 外有效根因经单独核实后用 `novel:<stable-key>`，不自动判误报；争议保留 pending。
+可行时让评分者不见组别；编题、核实和评分由同一人/Agent 完成时必须披露独立性限制。
+
+可选 `coverage` 条目含 `perspective`、`scenario`、`expected`、`evidence`，
+使用案例适用视角。它仍是待检查的覆盖声明，不是自动证明。
+可选 `metrics` 包含非负 `wallMs`、`agentCalls`、`toolCalls`、`inputTokens`、
+`outputTokens`、`contextBytes`、`cost`（预先约定同一币种）。
+缺失值保持缺失，不估造。
+
+报告包含逐题重复召回、已知根因宏/微召回、已裁定去重有效比例、误报及正确对照误报率、
+重复/新增/待裁定数、计划完成率与发现产出、成本可得性、Skill/材料/交互差异。
+零分母为 null；部分输出保留在原记录，但不混入完整首轮指标。
+缺失计划 run 保持 not-run，不算“审查无问题”；失败运行成本仍计入。
+完成子集的比较可能有选择偏差，须结合失败、分母及逐题波动解释。
+gold 修改后保留旧计划，在统一新裁定版本下重算所有组并同时报告新旧结果。
+此小型构造集不产生自动验收阈值或真实项目泛化结论。

package/docs/testing/verification-levels.md

@@ -50,12 +50,12 @@ is required.
 ## Permanent core smoke
 
 `npm test` and `npm run test:core` build the checkout and run the maintained suite.
-The stable suite owns current storage 1.7 and its declared 1.0/1.1/1.2/1.3/1.4/1.5/1.6 minor
+The stable suite owns current storage 1.8 and its declared 1.0/1.1/1.2/1.3/1.4/1.5/1.6/1.7 minor
 transition. It contains no undeclared historical format compatibility path.
 
 Current coverage includes:
 
-1. Fresh storage 1.7, exact schema/record validation, no initialization over
+1. Fresh storage 1.8, exact schema/record validation, no initialization over
    unknown data, and rejection of old integer formats without mutation.
 2. Exact-version staging, mismatched-target refusal, same-major contiguous
    minor preflight, explicit maintenance-owner identity across handover, and
@@ -102,6 +102,10 @@ including cross-Role links. Entry points and their referenced Markdown must
 ship together. File/format checks establish availability, not Agent behavior;
 do not add prose-matching tests or claim model validation from static checks.
 
+For review-material handoff and the small original development corpus, see
+[review evaluation](review-evaluation.md). Its offline contract probes and
+adjudication aggregation are deterministic; they do not run or measure a model.
+
 ## CI and release
 
 `ci.yml` runs core plus one assembled-package normal-path smoke per supported

package/docs/testing/verification-levels.zh-CN.md

@@ -70,6 +70,9 @@ package-start 检查跟随已安装树中的本地 Skill 引用，包括跨 Role
 的 Markdown 必须一起发布。文件/格式检查确立可用性，而不是 Agent 行为；不要添加基于
 散文匹配的测试，也不要从静态检查中宣称模型验证。
 
+审查材料交接与小型原创开发集见[审查评测](review-evaluation.zh-CN.md)。
+其中离线契约探针和裁定汇总属于确定性检查，不运行或测量模型。
+
 ## CI 与发布
 
 `ci.yml` 在每个 PR 上构建一次，运行 core 及一个组装包正常链路检查，不重复 lint，

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zq-silk/yui",
-  "version": "2.7.1",
+  "version": "2.8.1",
   "description": "Local control plane for long-running native agent CLI sessions backed by tmux.",
   "license": "MIT",
   "private": false,

package/skills/yui-leader/VERSION

@@ -1 +1 @@
-2
+3

package/skills/yui-leader/references/execution.md

@@ -303,6 +303,24 @@ authority. Never invent authorization, impersonate Operator, or modify the core
 
 ## Validate and make the review judgment
 
+Prepare useful evidence, not a documentation gate. Supply or reference the
+effective goals/non-goals and decisions, independently grounded expected
+behavior, key user paths/constraints, contract entry points and relevant callers.
+Keep three things distinct: a behavioral scenario and its expectation, an
+executable test reference, and an actual result with candidate/environment/
+command. Disclose real gaps rather than deriving acceptance from current code.
+
+Small tasks can reference existing materials directly. For complex tasks, put a
+short review index in Task artifacts and its commit-pinned reference in Brief.
+Keep Brief an up-to-date summary, not a copy of documents or accumulated history.
+Review Context carries the frozen Brief and active decisions; inspect the
+actual pointer inventory when a material's delivery is uncertain. Read referenced
+same-Task artifacts at their fixed commits, not HEAD. Do not assume a path in
+`--input`, a WorkItem-only `--context-ref` option, or a summary grants Review
+access. Recover a missing authorized reference through existing mechanisms;
+do not ask the Reviewer to bypass scope. Materials guide independent inspection,
+not its upper bound.
+
 Use the smallest evidence that establishes the accepted behavior and material
 boundaries. Do not repeat a successful unchanged check. Run the Project's
 complete local delivery validation once on the final candidate when its Policy
@@ -328,6 +346,10 @@ Use one direct main Reviewer by default. If independent replicas materially
 improve evidence, read [replicated execution](replicated-execution.md)
 before dispatch or synthesis. Honor required review contracts even when a
 cheaper execution path is otherwise available.
+One Reviewer should use the applicable complementary perspectives in one round.
+Consider independent replication for genuinely complementary cross-system risks,
+not a fixed headcount or file/frontend/backend partition. Keep the same candidate
+and common requirements; risk emphasis must not hide cross-layer contracts.
 
 When several WorkItems contribute to one outcome, prefer one independent
 Task-final Review after their accepted results are integrated over repeating a
@@ -358,6 +380,13 @@ main synthesis through its exact AgentRun, preserving its selected source snapsh
 A Worker or Reviewer AgentRun result is evidence, not acceptance. Inspect the
 result, diff, checks, and current Candidate before deciding.
 
+Group confirmed findings by root cause and repair other reachable instances
+within scope together. For ordinary full re-review, preserve the current complete
+candidate and requirements; add repair delta, prior finding dispositions and
+still-valid evidence. Delta is an attention aid, not the full-review boundary.
+Do not conflate this with an explicitly authorized equivalence Delta Recheck.
+Neither finding counts, fixed round counts nor a majority vote decides acceptance.
+
 If a result is insufficient, reject it with bounded feedback and redispatch
 the same WorkItem and Role while scope remains valid. Before accepting isolated
 Git changes, read [Integration](integration.md) to capture and

package/skills/yui-leader/references/replicated-execution.md

@@ -31,6 +31,9 @@ Retry main synthesis through its exact AgentRun, preserving the source snapshot.
 
 A Producer independently inspects or implements its exact frozen Assignment
 in the supplied Lane workspace and returns one complete original result.
+For Review, give Producers common requirements/contracts and the same candidate.
+Different risk emphases are not file ownership or permission to omit cross-layer
+interactions. Form independent initial results before reading sibling conclusions.
 Its evidence does not authorize a Candidate, ChangeSet, Integration or
 acceptance decision outside the assigned protocol.
 
@@ -40,3 +43,7 @@ judgment, and returns one authoritative report. Do not mutate source results,
 omit selected evidence, rerun Producers, or substitute a winning Lane for
 synthesis. A Review report remains evidence for Task acceptance, not acceptance
 itself.
+Deduplicate by root cause while retaining distinct triggers, coverage and
+unexamined risks. Explain disagreements and unresolved evidence; do not discard
+a valid minority finding or substitute voting for checking its contract and
+reachability.

package/skills/yui-operator/SKILL.md

@@ -239,12 +239,16 @@ do not wait for another wake or copy pending notices into new input. Read every
 relevant original and finish the authorized routing/disposition before ack.
 
 Use JSON reads and their top-level `data` field.
-Use Global Context's `pending`/`recent` pages to find Messages, then
+Use Global Context's bounded `pending` page to find Messages, then
 `role message show operator <id>` for the original. A successful send receipt
 contains saved identity and delivery/control facts, not another copy of the
 submitted body. Follow Runtime's bounded-read contract for list continuations
 and long `contentPage` details; do not decode `output` as nested JSON or print
 an entire Context again merely to extract one already-returned reference.
+History and diagnostic aggregates are explicit `role message list` reads.
+Use `--diagnostics` for classified occurrence counts and `--diagnostic <key>`
+for evidence discovery within the caller's authorized Role scope. Do not
+automatically traverse all history or ask a failing Operator to wake itself.
 
 Report the facts needed to understand the outcome:
 

package/skills/yui-operator/VERSION

@@ -1 +1 @@
-2
+3