draftgo-cli 3.0.51 → 3.0.53

package/src/commands/help.js

@@ -17,8 +17,7 @@ DraftGo Next frontend baseline: React + Vite.
 Database pages may use native web technologies or bundled component libraries.
 MCP handles live discovery and structured resources; complete page, navigation,
 document, and custom-service bodies use checkout/commit outside MCP context.
-The context command combines exact local Reference sections with live MCP data;
-it is a CLI orchestration command, not an MCP tool.
+The installed Skill routes agents to task-specific References and MCP tools.
 
 Usage:
   draftgo init [<target>...]       Install the DraftGo Skill. No target = detect.
@@ -37,9 +36,6 @@ Usage:
   draftgo mcp test                 Test project, resource, and API MCP calls.
   draftgo mcp serve                Bridge local stdio to the remote /mcp endpoint.
 
-  draftgo context --task <task>    Read exact task Reference sections, then reuse
-                                    one MCP session to query project, resources,
-                                    APIs, and data structures in parallel.
   draftgo map                      Read remote overview/resources through MCP and
                                     overlay local checkout state.
   draftgo checkout <type> <id...>  Download pages/nav/docs body + verified base.
@@ -47,6 +43,8 @@ Usage:
   draftgo check [custom-services <id...>]
                                     Validate all checkouts or selected custom services.
                                     --remote also compares remote hash/version.
+  draftgo verify [<type> <id...>]   Run unified static verification; --remote adds
+                                    remote comparison and --url enables UI checks.
   draftgo diff <type> <id>         Show checkout base versus local body.
   draftgo commit <type> <id...>    Validate and upload complete checked-out bodies.
   draftgo refresh <type> <id...>   Safely refresh a clean checkout from the cloud.
@@ -63,9 +61,8 @@ Usage:
   draftgo conflict resolve <type> <id>
                                     Mark a merged worktree file ready against the
                                     preserved remote base; then check/diff/commit.
-  draftgo verify-ui <url>          Run a deterministic browser smoke check.
-                                    Screenshots default to never.
-  draftgo clean [--dry-run|--yes]  Plan or remove registered tmp/artifacts only.
+  draftgo verify-ui <url>          Deprecated alias for verify --url <url> --ui always.
+  draftgo clean [--dry-run|--yes]  Plan or remove all tmp and registered artifacts.
   draftgo task <operation> [...]   Track sustained work in one authoritative Task.md.
                                     Operations: create, list, show, add, claim,
                                     start, complete, block, reopen, accept, finish,
@@ -109,7 +106,7 @@ Important flags:
   --mcp-url <url>          (connect) Explicit endpoint; standard /mcp derives the
                            base URL; custom paths also need --server.
   --token <sat>            (connect) SAT for non-interactive use.
-  --timeout <ms>           (connect/mcp test/context) Network timeout.
+  --timeout <ms>           (connect/mcp test) Network timeout.
   --allow-offline          (connect) Save only after explicitly accepting a
                            failed MCP validation.
   --no-mcp-setup           (connect) Do not write host MCP configuration.
@@ -120,8 +117,6 @@ Important flags:
   --local-dev              (init) Continue into local Docker setup.
   --no-setup               (init) Install the Skill without either setup flow.
   --output json            Print machine-readable output where supported.
-  --task <task>            (context) frontend | data | custom-service | aihub |
-                           content | project.
   --type <type>            (map) pages | nav/navigations | docs/articles.
   --strict                 Treat check warnings as failures.
   --remote                 (check) Compare checkout hashes/versions with remote.
@@ -137,16 +132,20 @@ Important flags:
                            (custom-service test) deny | mock | live; default deny.
   --delivery <mode>        (deploy) local | preview | deploy.
   --dry-run                (push) Show diffs without committing.
-  --mobile-check <mode>    (verify-ui) auto | always | never.
-  --token <mode>           (verify-ui) auto | never; auto appends the configured
+  --ui <mode>              (verify) auto | always | never; auto runs with --url.
+  --remote                 (check/verify) Compare checkout hashes with remote.
+  --viewport <mode>        (verify) mobile | desktop | both.
+  --frame <mode>           (verify) auto | top | all | <iframe-selector>.
+  --mobile-check <mode>    (verify-ui compatibility) auto | always | never.
+  --token <mode>           (verify) auto | never; auto appends the configured
                            SAT to same-origin URLs as the token query parameter.
-  --screenshot <mode>      (verify-ui) on-failure | always | never; default never.
-  --browser <name>         (verify-ui) chromium | chrome | msedge.
-  --browser-path <file>    (verify-ui) Explicit browser executable; environment
+  --screenshot <mode>      (verify) on-failure | always | never; default never.
+  --browser <name>         (verify) chromium | chrome | msedge.
+  --browser-path <file>    (verify) Explicit browser executable; environment
                            fallback: DRAFTGO_BROWSER_PATH.
-  --resource <type:id>     (verify-ui) Compare local and remote content first.
-  --selector <css>         (verify-ui) Require a visible key element.
-  --width/--height <px>    (verify-ui) Override the default 390x844 viewport.
+  --resource <type:id>     (verify compatibility) Assert one remote UI resource.
+  --selector <css>         (verify) Require a visible element in top or iframe DOM.
+  --width/--height <px>    (verify) Override the default 390x844 viewport.
 
 Security:
   .draftgo/config.json stores the server and SAT and is gitignored. Host MCP
@@ -162,10 +161,10 @@ Examples:
   draftgo init codex
   draftgo connect codex --server https://draftgo.example --token <sat>
   draftgo mcp test
-  draftgo context --task frontend --output json
   draftgo map --output json
   draftgo checkout pages 42
   draftgo check --strict
+  draftgo verify pages 42 --remote --url http://localhost:5173/example
   draftgo diff pages 42
   draftgo commit pages 42
   draftgo changelog add "Complete document management and role permissions"

package/src/commands/init.js

@@ -4,7 +4,7 @@ const path = require('path');
 const log = require('../logger');
 const { detectTargets } = require('../detect');
 const { resolveTargets, all } = require('../installers');
-const { ensureRuntime, writeInstalledVersion, getPackageVersion } = require('../skill');
+const { ensureRuntime, getPackageVersion } = require('../skill');
 const { exists } = require('../fsx');
 const { ask } = require('../prompt');
 
@@ -65,8 +65,7 @@ async function init(projectDir, positional, flags) {
     log.err(`安装未完成，失败目标：${failures.join(', ')}`);
     return 1;
   }
-  if (installedCount > 0 && skippedCount === 0) writeInstalledVersion(projectDir);
-  if (skippedCount > 0) log.dim('  存在未覆盖目标，未更新全局 skill 版本标记；运行 draftgo update 可统一刷新。');
+  if (skippedCount > 0) log.dim('  存在未覆盖目标；运行 draftgo update 可统一刷新。');
   log.dim(`  CLI 版本：${getPackageVersion()}`);
 
   // 3) Environment check (advisory).

package/src/commands/task.js

@@ -75,7 +75,7 @@ function lines(value, fallback = '- 暂无。') {
 
 function template(task) {
   return `# ${task.title}\n\n`+
-    `- 状态：active\n- 创建时间：${task.created_at}\n- 更新时间：${task.updated_at}\n- 任务负责人：${task.owner}\n\n`+
+    `- 状态：active\n- 创建时间：${task.created_at}\n- 更新时间：${task.updated_at}\n\n`+
     `## 用户原始需求\n\n${task.original_requirement}\n\n`+
     `## 明确后的需求\n\n${task.clarified_requirement}\n\n`+
     `## 预计效果\n\n${lines(task.expected_effect)}\n\n`+
@@ -134,7 +134,7 @@ function parseMarkdown(file, id) {
   const acceptance = parseChecklist(section(body, '最终验收'), true);
   return {
     schema_version: 2, format: 'markdown', id, title, status: metadata(body, '状态') || 'active',
-    created_at: metadata(body, '创建时间'), updated_at: metadata(body, '更新时间'), owner: metadata(body, '任务负责人'),
+    created_at: metadata(body, '创建时间'), updated_at: metadata(body, '更新时间'),
     original_requirement: section(body, '用户原始需求'), clarified_requirement: section(body, '明确后的需求'),
     expected_effect: section(body, '预计效果'), scope: section(body, '本次范围'), out_of_scope: section(body, '不在本次范围'),
     decisions: section(body, '关键决策'), blockers: section(body, '阻塞问题'), items, acceptance,
@@ -191,12 +191,6 @@ function print(flags, value) {
   if (flags.output === 'json') console.log(JSON.stringify(Array.isArray(value) ? value.map(publicTask) : publicTask(value), null, 2));
 }
 function taskActor(flags) { return String(flags.owner || flags.assignee || process.env.DRAFTGO_AGENT_ID || '').trim(); }
-function requireOwner(task, flags, operation) {
-  if (!task.owner) return;
-  const actor = taskActor(flags);
-  if (!actor) throw new Error(`Task ${task.id} ${operation} requires owner identity ${task.owner}.`);
-  if (actor !== task.owner) throw new Error(`Task ${task.id} ${operation} can only be performed by owner ${task.owner}.`);
-}
 function assertModern(task, operation) {
   if (task.format === 'legacy') throw new Error(`Legacy Task ${task.id} is read-only; run task migrate ${task.id} before ${operation}.`);
 }
@@ -245,7 +239,7 @@ function create(projectDir, positional, flags) {
   if (!clarified) throw new Error('task create requires --clarified with the executable requirement.');
   if (!expected) throw new Error('task create requires --expected-effect.');
   const id = uniqueTaskId(projectDir, title, flags); const now = new Date().toISOString();
-  const task = { id, title, created_at: now, updated_at: now, owner: taskActor(flags), original_requirement: original, clarified_requirement: clarified,
+  const task = { id, title, created_at: now, updated_at: now, original_requirement: original, clarified_requirement: clarified,
     expected_effect: expected, scope: field(flags, ['scope']), out_of_scope: field(flags, ['out-of-scope']) };
   fs.mkdirSync(taskDir(projectDir, id), { recursive: true }); atomicWrite(markdownFile(projectDir, id), template(task));
   const loaded = loadTask(projectDir, id); print(flags, loaded); if (flags.output !== 'json') log.ok(`Created task ${id}`); return 0;
@@ -279,7 +273,7 @@ function nextItemId(items) {
 function add(projectDir, taskId, positional, flags) {
   const resolved = resolveTaskId(projectDir, taskId);
   return withLock(projectDir, resolved, (before) => {
-    const task = loadTask(projectDir, resolved); assertModern(task, 'add'); requireOwner(task, flags, 'planning');
+    const task = loadTask(projectDir, resolved); assertModern(task, 'add');
     const title = field(flags, ['title'], positional.join(' ')); const content = field(flags, ['content']); const acceptance = field(flags, ['acceptance']);
     const owner = field(flags, ['assignee'], taskActor(flags));
     if (!title) throw new Error('task add requires a title or --title.');
@@ -343,7 +337,7 @@ function accept(projectDir, taskId, positional, flags) {
   const resolved = resolveTaskId(projectDir, taskId); const title = field(flags, ['item'], positional.join(' '));
   if (!title) throw new Error('task accept requires a final acceptance item title.');
   return withLock(projectDir, resolved, (before) => {
-    const task = loadTask(projectDir, resolved); assertModern(task, 'accept'); requireOwner(task, flags, 'acceptance');
+    const task = loadTask(projectDir, resolved); assertModern(task, 'accept');
     const evidence = field(flags, ['evidence']); if (!evidence) throw new Error('task accept requires --evidence.');
     const body = touch(task, updateAcceptanceBody(task.body, title, true, evidence), 'active'); saveBody(task, body, before);
     const updated = loadTask(projectDir, resolved); print(flags, updated.acceptance.find((entry) => entry.title === title));
@@ -354,7 +348,7 @@ function accept(projectDir, taskId, positional, flags) {
 function finish(projectDir, taskId, flags) {
   const resolved = resolveTaskId(projectDir, taskId);
   return withLock(projectDir, resolved, (before) => {
-    const task = loadTask(projectDir, resolved); assertModern(task, 'finish'); requireOwner(task, flags, 'finish');
+    const task = loadTask(projectDir, resolved); assertModern(task, 'finish');
     if (task.items.some((item) => !item.completed)) throw new Error(`Cannot finish ${task.id}; development items remain incomplete.`);
     const pending = task.acceptance.filter((item) => !item.completed);
     if (pending.length) throw new Error(`Cannot finish ${task.id}; final acceptance remains incomplete: ${pending.map((item) => item.title).join(', ')}.`);
@@ -379,11 +373,12 @@ function migrate(projectDir, taskId, flags) {
     const items = legacyItemDetails(projectDir, task); const now = new Date().toISOString();
     const original = field(flags, ['original'], task.title || resolved); const clarified = field(flags, ['clarified'], original);
     const expected = field(flags, ['expected-effect'], '保留历史任务的目标、进度和验收证据，并使用单文件继续维护。');
-    const modern = { title: task.title || resolved, created_at: task.created_at || now, updated_at: now, owner: task.owner || taskActor(flags), original_requirement: original,
+    const defaultOwner = task.owner || taskActor(flags);
+    const modern = { title: task.title || resolved, created_at: task.created_at || now, updated_at: now, original_requirement: original,
       clarified_requirement: clarified, expected_effect: expected, scope: '', out_of_scope: '' };
     let body = template(modern); const blocks = items.map((item, index) => {
       const id = /^DG-\d{3}$/.test(item.id) ? item.id : `DG-${String(index + 1).padStart(3, '0')}`;
-      const owner = item.owner || modern.owner || 'unassigned'; const evidence = item.evidence.join('; ') || 'Legacy task state migrated.';
+      const owner = item.owner || defaultOwner || 'unassigned'; const evidence = item.evidence.join('; ') || 'Legacy task state migrated.';
       return `- [${item.status === 'completed' ? 'x' : ' '}] ${id} ${item.title}\n  - 内容：从历史 Task 迁移。\n  - 负责人：${owner}\n  - 验收：保留历史工作项状态与证据。\n  - 状态：${item.status || 'pending'}${item.status === 'completed' ? `\n  - 完成结果：${evidence}` : ''}`;
     });
     body = replaceSection(body, '开发清单', blocks.length ? blocks.join('\n\n') : '暂无。');

package/src/commands/verify.js

@@ -0,0 +1,90 @@
+'use strict';
+
+const log = require('../logger');
+const check = require('./check');
+const verifyUi = require('./verifyUi');
+const { canonicalResourceType } = require('../worktree/types');
+
+function mode(value, fallback, flag) {
+  const normalized = String(value == null ? fallback : value).toLowerCase();
+  if (!['auto', 'always', 'never'].includes(normalized)) throw new Error(`${flag} must be auto, always, or never.`);
+  return normalized;
+}
+
+function resources(positional) {
+  if (!positional.length) return [];
+  const [rawType, ...ids] = positional;
+  if (!ids.length) throw new Error('Usage: draftgo verify [<pages|nav|docs> <id...>] [--url <url>]');
+  const resourceType = canonicalResourceType(rawType);
+  return ids.map((resourceId) => ({ resourceType, resourceId: String(resourceId) }));
+}
+
+function viewports(flags) {
+  const value = String(flags.viewport || '').toLowerCase();
+  if (!value) return [{ name: 'custom', width: flags.width, height: flags.height }];
+  if (value === 'mobile') return [{ name: 'mobile', width: 390, height: 844 }];
+  if (value === 'desktop') return [{ name: 'desktop', width: 1440, height: 900 }];
+  if (value === 'both') return [
+    { name: 'mobile', width: 390, height: 844 },
+    { name: 'desktop', width: 1440, height: 900 },
+  ];
+  throw new Error('--viewport must be mobile, desktop, or both.');
+}
+
+async function verify(projectDir, positional = [], flags = {}) {
+  let selected;
+  let uiMode;
+  let remoteMode;
+  try {
+    selected = resources(positional);
+    uiMode = mode(flags.ui, 'auto', '--ui');
+    remoteMode = flags.remote ? 'always' : 'never';
+  } catch (error) {
+    log.err(error.message);
+    return 1;
+  }
+
+  log.title('draftgo verify');
+  const checkCode = await check(projectDir, [], {
+    strict: flags.strict,
+    remote: remoteMode === 'always',
+    resourceKeys: selected.length
+      ? selected.map((entry) => `${entry.resourceType}:${entry.resourceId}`)
+      : null,
+  });
+  if (checkCode !== 0) return checkCode;
+
+  const url = String(flags.url || '').trim();
+  const runUi = uiMode === 'always' || (uiMode === 'auto' && Boolean(url));
+  if (!runUi) {
+    if (uiMode === 'always' && !url) {
+      log.err('--ui always requires --url <http://localhost:port/path>.');
+      return 1;
+    }
+    log.ok('Unified verification passed (UI skipped).');
+    return 0;
+  }
+  if (selected.length > 1) {
+    log.err('One --url can assert at most one resource. Run verify once per route for UI validation.');
+    return 1;
+  }
+
+  let targets;
+  try { targets = viewports(flags); }
+  catch (error) { log.err(error.message); return 1; }
+  for (const viewport of targets) {
+    const uiFlags = { ...flags, url, width: viewport.width, height: viewport.height, 'mobile-check': 'always' };
+    if (remoteMode === 'always' && selected.length === 1 && !uiFlags.resource) {
+      uiFlags.resource = `${selected[0].resourceType}:${selected[0].resourceId}`;
+    }
+    const code = await verifyUi(projectDir, [url], uiFlags);
+    if (code !== 0) return code;
+  }
+  log.ok(`Unified verification passed (${targets.map((item) => item.name).join(', ')}).`);
+  return 0;
+}
+
+module.exports = verify;
+module.exports.mode = mode;
+module.exports.resources = resources;
+module.exports.viewports = viewports;

package/src/commands/verifyUi.js

@@ -163,6 +163,51 @@ function parseResourceSpec(value) {
   return { resourceType: canonicalResourceType(raw.slice(0, separator)), resourceId: raw.slice(separator + 1) };
 }
 
+async function selectFrames(page, mode = 'auto') {
+  const top = page.mainFrame ? page.mainFrame() : page;
+  const selected = [{ frame: top, label: 'top' }];
+  if (mode === 'top') return selected;
+  if (!['auto', 'all'].includes(mode)) {
+    const handle = await page.locator(mode).first().elementHandle().catch(() => null);
+    const frame = handle && await handle.contentFrame().catch(() => null);
+    if (!frame) throw new Error(`Frame not found: ${mode}`);
+    return [{ frame, label: `selector:${mode}` }];
+  }
+  const frames = page.frames ? page.frames() : [];
+  for (let index = 0; index < frames.length; index += 1) {
+    const frame = frames[index];
+    if (frame === top) continue;
+    let visible = true;
+    if (mode === 'auto') {
+      const element = await frame.frameElement().catch(() => null);
+      visible = Boolean(element && await element.isVisible().catch(() => false));
+    }
+    if (visible) selected.push({
+      frame,
+      label: `frame:${frame.name && frame.name() ? frame.name() : index}`,
+    });
+  }
+  return selected;
+}
+
+async function inspectFrame(frame) {
+  return frame.evaluate(() => {
+    const body = document.body;
+    const root = document.documentElement;
+    return {
+      bodyTextLength: body ? (body.innerText || '').trim().length : 0,
+      bodyHeight: body ? body.getBoundingClientRect().height : 0,
+      hasVisibleMedia: body ? Array.from(body.querySelectorAll('img,svg,canvas,video,iframe,input,button')).some((element) => {
+        const rect = element.getBoundingClientRect();
+        return rect.width > 1 && rect.height > 1;
+      }) : false,
+      horizontalOverflow: root.scrollWidth > window.innerWidth + 1,
+      scrollWidth: root.scrollWidth,
+      viewportWidth: window.innerWidth,
+    };
+  });
+}
+
 async function verifyRemoteResource(projectDir, spec) {
   const { resourceType, resourceId } = parseResourceSpec(spec);
   const entry = getEntry(loadManifest(projectDir), resourceType, resourceId);
@@ -257,32 +302,28 @@ async function verifyUi(projectDir, positional, flags = {}) {
 
     const response = await page.goto(url, { waitUntil: 'domcontentloaded', timeout: 30000 });
     if (waitMs) await page.waitForTimeout(waitMs);
-    const state = await page.evaluate(() => {
-      const body = document.body;
-      const root = document.documentElement;
-      return {
-        title: document.title,
-        bodyTextLength: body ? (body.innerText || '').trim().length : 0,
-        bodyHeight: body ? body.getBoundingClientRect().height : 0,
-        hasVisibleMedia: body ? Array.from(body.querySelectorAll('img,svg,canvas,video,iframe,input,button')).some((element) => {
-          const rect = element.getBoundingClientRect();
-          return rect.width > 1 && rect.height > 1;
-        }) : false,
-        horizontalOverflow: root.scrollWidth > window.innerWidth + 1,
-        scrollWidth: root.scrollWidth,
-        viewportWidth: window.innerWidth,
-      };
-    });
+    const frames = await selectFrames(page, String(flags.frame || 'auto'));
+    const states = [];
+    for (const item of frames) states.push({ ...item, state: await inspectFrame(item.frame) });
 
     const issues = [];
     if (response && response.status() >= 400) issues.push(`页面返回 HTTP ${response.status()}`);
-    if (!state.bodyHeight || (!state.bodyTextLength && !state.hasVisibleMedia)) issues.push('页面疑似空白');
-    if (state.horizontalOverflow) issues.push(`页面横向溢出：scrollWidth=${state.scrollWidth}, viewport=${state.viewportWidth}`);
+    if (!states.some(({ state }) => state.bodyHeight && (state.bodyTextLength || state.hasVisibleMedia))) issues.push('页面疑似空白');
+    for (const { label, state } of states) {
+      if (state.horizontalOverflow) issues.push(`${label} 横向溢出：scrollWidth=${state.scrollWidth}, viewport=${state.viewportWidth}`);
+    }
     if (consoleErrors.length) issues.push(`console error ${consoleErrors.length} 条`);
     if (pageErrors.length) issues.push(`page error ${pageErrors.length} 条`);
     if (flags.selector) {
-      const visible = await page.locator(String(flags.selector)).first().isVisible().catch(() => false);
-      if (!visible) issues.push(`关键元素不可见：${flags.selector}`);
+      let match = null;
+      for (const item of frames) {
+        if (await item.frame.locator(String(flags.selector)).first().isVisible().catch(() => false)) {
+          match = item.label;
+          break;
+        }
+      }
+      if (!match) issues.push(`关键元素在已检查 frame 中不可见：${flags.selector}`);
+      else log.info(`Selector ${flags.selector}: visible in ${match}`);
     }
 
     const shouldScreenshot = screenshotMode === 'always' || (screenshotMode === 'on-failure' && issues.length > 0);
@@ -303,7 +344,7 @@ async function verifyUi(projectDir, positional, flags = {}) {
       return 1;
     }
 
-    log.ok(`UI smoke check 通过：${width}x${height}，${decision.reason}`);
+    log.ok(`UI smoke check 通过：${width}x${height}，${frames.length} frame(s)，${decision.reason}`);
     if (screenshotPath) log.info(`截图：${screenshotPath}`);
     return 0;
   } catch (err) {
@@ -324,3 +365,5 @@ module.exports.executableCandidates = executableCandidates;
 module.exports.playwrightCacheCandidates = playwrightCacheCandidates;
 module.exports.parseResourceSpec = parseResourceSpec;
 module.exports.verifyRemoteResource = verifyRemoteResource;
+module.exports.selectFrames = selectFrames;
+module.exports.inspectFrame = inspectFrame;

package/src/commands/verifyUiCompat.js

@@ -0,0 +1,16 @@
+'use strict';
+
+const log = require('../logger');
+const verify = require('./verify');
+
+async function verifyUiCompat(projectDir, positional = [], flags = {}) {
+  const url = String(flags.url || positional[0] || '').trim();
+  log.warn('`draftgo verify-ui` is deprecated; use `draftgo verify --url <url> --ui always`.');
+  return verify(projectDir, [], {
+    ...flags,
+    url,
+    ui: 'always',
+  });
+}
+
+module.exports = verifyUiCompat;

package/src/projectMap.js

@@ -6,6 +6,7 @@ const path = require('path');
 const parse5 = require('parse5');
 const { loadManifest, absolutePath } = require('./worktree/manifest');
 const { mediaType } = require('./worktree/types');
+const { validateInlineScripts } = require('./worktree/inlineScripts');
 
 function normalizeRoute(route) {
   if (!route || typeof route !== 'string') return '';
@@ -121,7 +122,7 @@ function worktreeFiles(projectDir, directory) {
     .map((entry) => path.join(root, entry.name));
 }
 
-function analyzeProject(projectDir) {
+function analyzeProject(projectDir, options = {}) {
   const map = buildProjectMap(projectDir);
   const errors = [];
   const warnings = [];
@@ -132,7 +133,12 @@ function analyzeProject(projectDir) {
   };
   const registered = new Set();
 
-  for (const entry of map.checkouts) {
+  const resourceKeys = options.resourceKeys ? new Set(options.resourceKeys) : null;
+  const selectedCheckouts = resourceKeys
+    ? map.checkouts.filter((entry) => resourceKeys.has(`${entry.resource_type}:${entry.resource_id}`))
+    : map.checkouts;
+
+  for (const entry of selectedCheckouts) {
     let local;
     let base;
     try {
@@ -176,18 +182,24 @@ function analyzeProject(projectDir) {
         const position = issue.line ? ` at ${issue.line}:${issue.column || 1}` : '';
         addWarning('DG-HTML-001', 'high', `${entry.resource_type} ${entry.resource_id}: ${issue.code}${position}.`);
       }
+      for (const issue of validateInlineScripts(source).slice(0, 20)) {
+        errors.push(`${entry.resource_type} ${entry.resource_id}: inline script #${issue.script} `
+          + `(${issue.script_type}) ${issue.message} at ${entry.local_path}:${issue.line}:${issue.column}.`);
+      }
     }
   }
 
-  for (const directory of ['pages', 'navigations', 'docs']) {
-    for (const file of worktreeFiles(projectDir, directory)) {
-      if (!registered.has(path.resolve(file).toLowerCase())) {
-        const relative = path.relative(projectDir, file).replace(/\\/g, '/');
-        addWarning('DG-WORKTREE-ORPHAN', 'high', `Unregistered worktree file: ${relative}.`);
+  if (!resourceKeys) {
+    for (const directory of ['pages', 'navigations', 'docs']) {
+      for (const file of worktreeFiles(projectDir, directory)) {
+        if (!registered.has(path.resolve(file).toLowerCase())) {
+          const relative = path.relative(projectDir, file).replace(/\\/g, '/');
+          addWarning('DG-WORKTREE-ORPHAN', 'high', `Unregistered worktree file: ${relative}.`);
+        }
       }
     }
   }
-  for (const page of map.pages) {
+  for (const page of map.pages.filter((entry) => !resourceKeys || resourceKeys.has(`pages:${entry.resource_id}`))) {
     if (!page.route || page.route === '/' || page.area === 'system') continue;
     const sources = map.routeRefs[normalizeRoute(page.route)] || [];
     if (!sources.some((source) => source.startsWith('navigations:'))) {

package/src/skill.js

@@ -187,15 +187,6 @@ function validateRenderedSkill(assetDir) {
 }
 
 function ensureRuntime(projectDir) {
-  const dg = paths.dgDir(projectDir);
-  ensureDir(dg);
-  for (const sub of ['Task', 'lessons']) {
-    ensureDir(path.join(dg, sub));
-  }
-  const changelog = path.join(dg, 'changelog.md');
-  if (!exists(changelog)) {
-    writeText(changelog, '');
-  }
   appendGitignoreLine(projectDir, '.draftgo/config.json');
   appendGitignoreLine(projectDir, '.draftgo/token');
   appendGitignoreLine(projectDir, '.draftgo/worktree/');

package/src/workspaceHealth.js

@@ -4,7 +4,7 @@ const fs = require('fs');
 const path = require('path');
 const runtime = require('./runtimeFiles');
 
-const PROTECTED_PREFIXES = ['worktree/', 'conflicts/', 'Task/', 'lessons/', 'config.json', 'changelog.md', 'story.yaml', '.version', 'runtime-manifest.json'];
+const PROTECTED_PREFIXES = ['worktree/', 'conflicts/', 'Task/', 'lessons/', 'tmp/', 'config.json', 'changelog.md', 'story.yaml', '.version', 'runtime-manifest.json'];
 function workspaceHealth(projectDir) {
   const root = runtime.draftgoRoot(projectDir); const registered = new Set(runtime.load(projectDir).entries.map((entry) => String(entry.path).replace(/\\/g, '/')));
   const summary = { managed_files: 0, unknown_files: 0, temporary_files: 0, artifact_files: 0, total_bytes: 0, reclaimable_bytes: 0, warnings: [] };
@@ -22,7 +22,7 @@ function workspaceHealth(projectDir) {
       if (managed) summary.managed_files += 1; else summary.unknown_files += 1;
       if (relative.startsWith('tmp/')) summary.temporary_files += 1;
       if (relative.startsWith('artifacts/')) summary.artifact_files += 1;
-      if (registered.has(relative)) summary.reclaimable_bytes += size;
+      if (registered.has(relative) || relative.startsWith('tmp/')) summary.reclaimable_bytes += size;
       if (!managed && (/\.exe$/i.test(relative) || (/^[^/]+\.(go|json)$/i.test(relative) && !['config.json', 'runtime-manifest.json'].includes(relative)))) summary.warnings.push({ code: 'DG-WORKSPACE-UNKNOWN-FILE', path: relative, size });
       if (relative.startsWith('artifacts/') && !registered.has(relative)) summary.warnings.push({ code: 'DG-WORKSPACE-UNREGISTERED-ARTIFACT', path: relative, size });
     }

package/src/worktree/inlineScripts.js

@@ -0,0 +1,99 @@
+'use strict';
+
+const vm = require('vm');
+const { spawnSync } = require('child_process');
+const parse5 = require('parse5');
+
+const DATA_SCRIPT_TYPES = new Set([
+  'application/json',
+  'application/ld+json',
+  'importmap',
+  'speculationrules',
+]);
+
+function attribute(node, name) {
+  const item = (node.attrs || []).find((candidate) => candidate.name.toLowerCase() === name);
+  return item ? item.value : '';
+}
+
+function scriptSource(node) {
+  return (node.childNodes || [])
+    .filter((child) => child.nodeName === '#text')
+    .map((child) => child.value || '')
+    .join('');
+}
+
+function collectInlineScripts(html) {
+  const document = parse5.parse(String(html || ''), { sourceCodeLocationInfo: true });
+  const scripts = [];
+  const visit = (node) => {
+    if (node.tagName === 'script' && !attribute(node, 'src')) {
+      const type = attribute(node, 'type').trim().toLowerCase();
+      if (!DATA_SCRIPT_TYPES.has(type) && (!type || type === 'module' || /(?:java|ecma)script/.test(type))) {
+        const location = node.sourceCodeLocation || {};
+        const startTag = location.startTag || {};
+        scripts.push({
+          index: scripts.length + 1,
+          type: type === 'module' ? 'module' : 'classic',
+          source: scriptSource(node),
+          startLine: startTag.endLine || location.startLine || 1,
+          startColumn: startTag.endCol || 1,
+        });
+      }
+    }
+    for (const child of node.childNodes || []) visit(child);
+    if (node.content) visit(node.content);
+  };
+  visit(document);
+  return scripts;
+}
+
+function syntaxPosition(message) {
+  const line = String(message || '').match(/(?:\[stdin\]|inline-script):(\d+)(?::(\d+))?/);
+  if (line) return { line: Number(line[1]), column: Number(line[2] || 1) };
+  const caretLines = String(message || '').split(/\r?\n/);
+  const caretIndex = caretLines.findIndex((value) => /^\s*\^/.test(value));
+  return { line: null, column: caretIndex > 0 ? caretLines[caretIndex].indexOf('^') + 1 : null };
+}
+
+function conciseMessage(error) {
+  const lines = String(error && (error.stderr || error.message) || error || '').split(/\r?\n/);
+  return lines.find((line) => /^SyntaxError:/.test(line))
+    || lines.find((line) => line.trim() && !/^\s*at\s/.test(line))
+    || 'Invalid JavaScript syntax';
+}
+
+function validateInlineScripts(html) {
+  const issues = [];
+  for (const script of collectInlineScripts(html)) {
+    if (!script.source.trim()) continue;
+    let failure = null;
+    if (script.type === 'module') {
+      const result = spawnSync(process.execPath, ['--check', '--input-type=module'], {
+        input: script.source,
+        encoding: 'utf8',
+        windowsHide: true,
+      });
+      if (result.error || result.status !== 0) failure = { message: result.stderr || result.stdout || result.error.message };
+    } else {
+      try { new vm.Script(script.source, { filename: 'inline-script' }); }
+      catch (error) { failure = error; }
+    }
+    if (!failure) continue;
+    const diagnostic = failure.stack || failure.message;
+    const position = syntaxPosition(diagnostic);
+    issues.push({
+      code: 'DG-JS-001',
+      script: script.index,
+      script_type: script.type,
+      line: position.line ? script.startLine + position.line - 1 : script.startLine,
+      column: position.column
+        ? position.column + (position.line === 1 ? script.startColumn - 1 : 0)
+        : script.startColumn,
+      message: conciseMessage(failure),
+    });
+  }
+  return issues;
+}
+
+module.exports = { DATA_SCRIPT_TYPES, collectInlineScripts, validateInlineScripts };

package/src/worktree/status.js

@@ -101,7 +101,7 @@ async function inspectRemoteCheckouts(projectDir, options = {}) {
   const session = options.backend && typeof options.backend.resolveMetadata === 'function'
     ? { client: options.client || {}, tools: options.tools || [] }
     : await openMetadataSession(config, options);
-  const entries = Object.values(manifest.entries);
+  const entries = options.entries || Object.values(manifest.entries);
   return Promise.all(entries.map(async (entry) => {
     const remote = await backend.resolveMetadata(config, entry.resource_type, entry.resource_id, {
       ...options,