oh-my-llmwikimode 1.3.0 → 1.4.0

package/docs/design/EOS_CHAT_HOME_IA.md

@@ -1,14 +1,14 @@
 # Eos Chat Home Information Architecture
 
-**Status:** Active implementation contract for Eos Chat Command Center MVP  
+**Status:** Active implementation contract for EOS Workspace and Eos Chat Command Center MVP
 **Date:** 2026-05-29  
 **Depends on:** `EOS_DESIGN.md`, `EOS_UI_CONTRACT.md`, `EOS_SIDE_REVIEW_IA.md`
 
 ## 1. Purpose
 
-`Eos Chat` is the first screen and local command center for Eos.
+`EOS Workspace` at `/workspace/` is the browser-first Home for Eos. `Eos Chat` remains the direct chat capture surface and compatibility route.
 
-The user starts by saying what they want. Eos must capture that intent as a local review-required artifact, then make it visible in `Side Review`. Chat does not execute shell commands, providers, agents, wiki promotion, git actions, or background work by itself.
+The user starts with Chat-first capture: saying what they want so Eos captures that intent as a local review-required artifact, then makes it visible in `Side Review`. Chat does not execute shell commands, providers, agents, wiki promotion, git actions, or background work by itself.
 
 ## 2. Primary promise
 
@@ -20,7 +20,7 @@ Tell Eos what you want to prepare. Eos captures it for local review before anyth
 
 ## 3. Required regions
 
-1. **Header rail** - `Eos Chat`, short local workspace status, and link to `Side Review`.
+1. **Header rail** - `EOS Workspace`, short local workspace status, and links to `Eos Chat` and `Side Review`.
 2. **Safety strip** - always-visible copy: `Local review workspace. Nothing is applied automatically.`
 3. **Welcome state** - explains chat-first workflow without starter chips.
 4. **Status cards** - wiki status, review queue count, and harness readiness in compact cards.
@@ -46,6 +46,7 @@ Do not add starter chips in this slice. Shortcuts may return later only after re
 - Button label: `Capture for Review`
 - Success acknowledgement: `Captured for review.`
 - Follow-up link/action: `Open Side Review`
+- Compatibility link/action: `Open Chat`
 
 The composer must not use copy such as `Run`, `Execute`, `Complete`, `Apply`, or `Push`.
 
@@ -82,9 +83,15 @@ Do not use these labels in the Eos Chat MVP:
 
 - `GET /chat/` serves the Eos Chat local UI.
 - `GET /chat` redirects to `/chat/`.
+- `GET /workspace/` serves the canonical EOS Workspace Home.
+- `GET /workspace` redirects to `/workspace/`.
 - `GET /api/home` remains a read-only home data snapshot.
 - `POST /api/chat/requests` creates a review-required local artifact only.
 
+## 12. Browser-first Workspace Slice
+
+`/workspace/` centers the first safe user action: Chat-first capture. It shows local Home pressure from `GET /api/home`, posts review-required requests to `POST /api/chat/requests`, and links to `Open Side Review` for inspection. `/chat/` stays available as the compatibility chat surface.
+
 ## 9. Safety contract
 
 - Local-first.

package/docs/design/EOS_CHAT_OPERATING_LOOP.md

@@ -6,14 +6,14 @@
 
 ## 1. Simple metaphor
 
-Chat is the inbox. Side Review is the review desk.
+EOS Workspace is the browser-first Home. Chat is the inbox. Side Review is the review desk.
 
-The user writes a request in `Eos Chat`. Eos files it as a local review item, adds a deterministic intent hint, and places it on the `Side Review` desk. Nothing is executed or applied just because the request was captured.
+The user writes a request through Chat-first capture on `/workspace/` or the compatibility `/chat/` surface. Eos files it as a local review item, adds a deterministic intent hint, and places it on the `Side Review` desk. Nothing is executed or applied just because the request was captured.
 
 ## 2. Operating loop
 
 ```text
-User request in Eos Chat
+User request in EOS Workspace Chat-first capture
   -> local capture endpoint
   -> chat request artifact
   -> intent hint metadata
@@ -51,6 +51,9 @@ POST /api/chat/requests
   writes .system/eos/chat/requests/{id}.json
   appends .system/eos/chat/audit.jsonl
 
+GET /workspace/
+  serves the canonical browser Home with Chat-first capture and Open Side Review navigation
+
 GET /api/home
   exposes waiting count, intent counts, and recent request summaries
 
@@ -99,3 +102,7 @@ This slice must not add:
 `Home` is the mission-control layer between Chat and Side Review. It should tell the user what is waiting, what was recently captured, and whether any local artifact needs attention before the user opens raw files.
 
 `Side Review` adds intent filters so chat-derived requests can be inspected by review hint category: knowledge, search, planning, issue, release log, or unknown. These intent filters are visibility controls, not approval controls. Filtering must not apply, promote, merge, delete, push, publish, or mutate source wiki entries.
+
+## 9. Workspace Home coordination
+
+`/workspace/` is the canonical browser Home for this slice. It exposes `EOS Workspace`, `Chat-first capture`, `Capture for Review`, `Open Chat`, and `Open Side Review` while keeping every output local-only, review-required, and Not Applied.

package/docs/design/EOS_SIDE_REVIEW_IA.md

@@ -6,7 +6,7 @@
 
 ## 1. Purpose
 
-`Side Review` is the companion window for looking at structured material while `Eos Chat` remains the command center.
+`Side Review` is the companion window for looking at structured material while `EOS Workspace` at `/workspace/` remains the browser-first Home and `Eos Chat` remains the compatibility capture surface.
 
 It answers five questions:
 
@@ -291,6 +291,7 @@ Implementation files:
 User guidance:
 
 1. Open `/side-review/` from the local Eos server.
+1. Use `/workspace/` as the primary Home when returning to Chat-first capture.
 2. Use group tabs to inspect Review Required, Decision Artifacts, Drafts, Completion Reports, Issues, and Harness Status.
 3. Read source, artifact, and evidence paths before taking a decision action.
 4. Use `Prepare Approval Request`, `Prepare Rejection Note`, or `Defer Review` to create a local review artifact only.

package/docs/design/EOS_VISUAL_SCREENSHOT_HARNESS.md

@@ -1,7 +1,7 @@
 # Eos Visual Screenshot Harness MVP
 
 **Status:** MVP harness for local visual evidence
-**Scope:** Eos Chat, Mission Control, and Side Review
+**Scope:** EOS Workspace, Eos Chat, Mission Control, and Side Review
 **Boundary:** local-only screenshot capture; no cloud browser, no hosted sync, no source wiki mutation, no publish, no push
 
 ## Purpose
@@ -14,7 +14,7 @@ It is intentionally a release-readiness aid, not a new runtime feature:
 - seeds a temporary wiki fixture with safe review-required data,
 - captures PNG screenshots for local surfaces,
 - can capture desktop, tablet, and mobile viewport presets,
-- records a static accessibility snapshot for Eos Chat and Side Review,
+- records a static accessibility snapshot for EOS Workspace, Eos Chat, and Side Review,
 - writes ignored local artifacts under `.system/eos/visual-qa/screenshots/`,
 - shuts down and removes temporary wiki/profile data.
 
@@ -46,6 +46,7 @@ npm run eos:visual-screenshots
 
 | Target | URL | Desktop output |
 | --- | --- | --- |
+| EOS Workspace Home | `/workspace/` | `eos-workspace-home.png` |
 | Eos Chat + Mission Control | `/chat/` | `eos-chat-command-center.png` |
 | Eos Side Review | `/side-review/` | `eos-side-review.png` |
 
@@ -65,7 +66,7 @@ Viewport-specific files append the viewport id, for example `eos-chat-command-ce
 npm run eos:a11y-snapshot
 ```
 
-The accessibility snapshot is static and local. It checks Eos Chat and Side Review markup/CSS/scripts for baseline review affordances such as language metadata, viewport metadata, skip links, landmarks, ARIA labels, live status regions, focus-visible styling, reduced-motion support, forced-colors support, no broad `transition: all`, no inline event handlers, and no `innerHTML` assignment.
+The accessibility snapshot is static and local. It checks EOS Workspace, Eos Chat, and Side Review markup/CSS/scripts for baseline review affordances such as language metadata, viewport metadata, skip links, landmarks, ARIA labels, live status regions, focus-visible styling, reduced-motion support, forced-colors support, no broad `transition: all`, no inline event handlers, and no `innerHTML` assignment.
 
 ## Review contract
 

package/docs/eos-workspace-boundary-mvp.md

@@ -58,17 +58,48 @@ The following remain intentionally out of scope for this boundary MVP:
 
 Run from the repo root:
 
+```powershell
+npm run verify:eos-workspace-product
+npm run test:eos
+npm run verify:eos-boundary
+npm run verify:eos-boundary-policy
+```
+
+Expected verifier sentinels include:
+
+```text
+EOS_WORKSPACE_BOUNDARY_VERIFY_OK
+EOS_BOUNDARY_POLICY_VERIFY_OK
+```
+
+For the historical integrated plugin path, run:
+
 ```powershell
 npm run verify:eos-boundary --prefix plugins/oh-my-llmwikimode
 node --test plugins/oh-my-llmwikimode/test/eos/workspace-boundary-*.test.js
 ```
 
-Expected verifier sentinel:
+## Browser Workspace product slice
+
+Start the local daemon from the repo root with an explicit local wiki root:
+
+```powershell
+$env:EOS_WIKI_ROOT = "$HOME\Documents\llm-wiki"
+node src\daemon.js
+```
+
+The default daemon address is `http://127.0.0.1:4825`. Open the browser-first Workspace Home at:
 
 ```text
-EOS_WORKSPACE_BOUNDARY_VERIFY_OK
+http://127.0.0.1:4825/workspace/
 ```
 
+The Workspace Home posts chat-first capture requests to `POST /api/chat/requests`. A successful capture writes a local review-required artifact under `.system/eos/chat/requests/` and does not execute, apply, promote, merge, delete, push, or mutate source wiki entries.
+
+Inspect the review queue with `GET /api/side-review` or by opening `http://127.0.0.1:4825/side-review/`. Preparing a Side Review decision writes a local artifact under `.system/eos/side-review/decisions/`; prepared decision artifacts are still `review_required` and not applied.
+
+Product-slice evidence for this implementation is captured under `.omo/ulw-loop/evidence/eos-workspace-product-20260601`. The evidence root is local review material only and is safe to clean after review if no longer needed.
+
 ## Static boundary policy
 
 Run `npm run verify:eos-boundary-policy` to prevent new unregistered private imports across the Eos/LLM Wiki boundary. The verifier is local-only and does not publish, push, sync, or call external services.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "oh-my-llmwikimode",
-  "version": "1.3.0",
+  "version": "1.4.0",
   "description": "LLM Wiki plugin for OpenCode ??auto-memory, retrieval, and knowledge promotion",
   "type": "module",
   "main": "./src/server.js",
@@ -28,6 +28,7 @@
     "test:storage": "node --test test/storage.test.js",
     "test:security": "node --test test/security.test.js",
     "test:eos": "node --test test/eos/**/*.test.js",
+    "verify:eos-workspace-product": "npm run test:eos && npm run verify:eos-boundary-policy && npm run verify:eos-boundary && npm run eos:a11y-snapshot -- --json",
     "verify:package": "node test/verify-package.test.js",
     "verify:docs": "node test/verify-docs.test.js",
     "verify:side-effects": "node scripts/side-effect-audit.js",

package/src/eos/home.js

@@ -144,6 +144,46 @@ function buildCommandCenter(reviewQueue, librarian, actions) {
   };
 }
 
+function buildWorkspaceHome() {
+  return {
+    title: "EOS Workspace",
+    route: "/workspace/",
+    primary_surface: "chat_capture",
+    companion_surface: "side_review",
+    capture_endpoint: "/api/chat/requests",
+    home_endpoint: "/api/home",
+    side_review_endpoint: "/api/side-review",
+    safe_copy: {
+      primary: "Chat-first capture",
+      safety: "Local Only / Review Required / Not Applied",
+      capture: "Capture for Review",
+      review: "Open Side Review",
+    },
+    nav: [
+      {
+        id: "chat",
+        label: "Open Chat",
+        href: "/chat/",
+        target: "compatibility_chat",
+      },
+      {
+        id: "side-review",
+        label: "Open Side Review",
+        href: "/side-review/",
+        target: "side_review",
+      },
+    ],
+    forbidden_capabilities: [
+      "hidden_execution",
+      "hosted_sync",
+      "auto_promote",
+      "auto_merge",
+      "auto_delete",
+      "auto_push",
+    ],
+  };
+}
+
 function summarizeChatRequestsForHome(wikiRoot) {
   const counts = {
     knowledge_request: 0,
@@ -296,6 +336,7 @@ export function buildEosHomeData(wikiRoot, config = {}, options = {}) {
       recent_entries: Array.isArray(stats.recent_entries) ? stats.recent_entries.slice(0, 8) : [],
     },
     review_queue: reviewQueue,
+    workspace_home: buildWorkspaceHome(),
     librarian,
     command_center: buildCommandCenter(reviewQueue, librarian, nextSafeActions),
     search: {

package/src/eos/http/app.js

@@ -74,7 +74,8 @@ function getPathname(url) {
 function isLocalStaticUiRoute(url) {
   const pathname = getPathname(url);
   return pathname === "/side-review" || pathname.startsWith("/side-review/") ||
-    pathname === "/chat" || pathname.startsWith("/chat/");
+    pathname === "/chat" || pathname.startsWith("/chat/") ||
+    pathname === "/workspace" || pathname.startsWith("/workspace/");
 }
 
 function isGuardedLocalMutationRoute(url) {
@@ -246,6 +247,15 @@ export async function buildApp(config, logger) {
     });
   }
 
+  const workspaceStaticDir = path.resolve(__dirname, "../workspace/static");
+  if (fs.existsSync(workspaceStaticDir)) {
+    await app.register(fastifyStatic, {
+      root: workspaceStaticDir,
+      prefix: "/workspace/",
+      decorateReply: false,
+    });
+  }
+
   // -----------------------------------------------------------------------
   // Body parser
   // -----------------------------------------------------------------------
@@ -257,8 +267,9 @@ export async function buildApp(config, logger) {
   // -----------------------------------------------------------------------
 
   app.setErrorHandler((error, _request, reply) => {
-    const statusCode = error.statusCode || 500;
-    const code = error.code || "INTERNAL_ERROR";
+    const invalidJson = error instanceof SyntaxError && /^Invalid JSON:/.test(error.message || "");
+    const statusCode = invalidJson ? 400 : error.statusCode || 500;
+    const code = invalidJson ? "BAD_REQUEST" : error.code || "INTERNAL_ERROR";
     const message =
       statusCode >= 500 ? "Internal server error" : error.message;
 
@@ -300,6 +311,8 @@ export async function buildApp(config, logger) {
   await registerAgentRoutes(app, config);
   await registerSideReviewRoutes(app, config);
 
+  app.get("/workspace", async (_request, reply) => reply.redirect("/workspace/"));
+
   // -----------------------------------------------------------------------
   // 404 handler (must be registered after all routes)
   // -----------------------------------------------------------------------

package/src/eos/visual-qa/accessibility.js

@@ -2,6 +2,13 @@ import fs from "node:fs";
 import path from "node:path";
 
 const SURFACES = Object.freeze([
+  Object.freeze({
+    id: "workspace-home",
+    label: "EOS Workspace Home",
+    html: "src/eos/workspace/static/index.html",
+    css: "src/eos/workspace/static/styles.css",
+    script: "src/eos/workspace/static/app.js",
+  }),
   Object.freeze({
     id: "chat-command-center",
     label: "Eos Chat + Mission Control",

package/src/eos/visual-qa/screenshot-harness.js

@@ -24,6 +24,13 @@ const VIEWPORTS = Object.freeze([
 ]);
 
 const DEFAULT_TARGETS = [
+  {
+    id: "workspace-home",
+    label: "EOS Workspace Home",
+    path: "/workspace/",
+    fileName: "eos-workspace-home.png",
+    captures: ["workspace_home", "chat_first_capture"],
+  },
   {
     id: "chat-command-center",
     label: "Eos Chat + Mission Control",

package/src/eos/workspace/static/app.js

@@ -0,0 +1,148 @@
+const state = {
+  loadingHome: false,
+  capturing: false,
+};
+
+const elements = {
+  form: document.querySelector("#capture-form"),
+  input: document.querySelector("#request-input"),
+  resultEmpty: document.querySelector("#result-empty"),
+  resultList: document.querySelector("#result-list"),
+  statusGrid: document.querySelector("#status-grid"),
+  wikiCount: document.querySelector("#wiki-count"),
+  reviewCount: document.querySelector("#review-count"),
+  intentSummary: document.querySelector("#intent-summary"),
+  healthSummary: document.querySelector("#health-summary"),
+};
+
+function setText(node, value) {
+  if (node) node.textContent = value;
+}
+
+function syncBusyState() {
+  const button = elements.form?.querySelector("button");
+  if (button) button.disabled = state.capturing;
+  if (elements.statusGrid) {
+    const busy = state.loadingHome || state.capturing;
+    elements.statusGrid.setAttribute("aria-busy", busy ? "true" : "false");
+  }
+}
+
+function setLoadingHome(value) {
+  state.loadingHome = value;
+  syncBusyState();
+}
+
+function setCapturing(value) {
+  state.capturing = value;
+  syncBusyState();
+}
+
+function formatIntentSummary(counts = {}) {
+  const labels = [
+    ["issue_report", "Issues"],
+    ["planning_request", "Plans"],
+    ["knowledge_request", "Knowledge"],
+    ["search_request", "Search"],
+    ["release_log", "Release"],
+  ];
+  const visible = labels
+    .map(([key, label]) => [label, Number(counts[key] || 0)])
+    .filter(([, count]) => count > 0)
+    .slice(0, 3);
+  if (visible.length === 0) return "No captured requests";
+  return visible.map(([label, count]) => `${label} ${count}`).join(" / ");
+}
+
+function appendCaptureResult(result) {
+  if (!elements.resultList) return;
+  if (elements.resultEmpty) elements.resultEmpty.hidden = true;
+
+  const item = document.createElement("li");
+  item.className = "result-item";
+
+  const title = document.createElement("strong");
+  title.textContent = "Captured for review.";
+  item.append(title);
+
+  const intent = document.createElement("p");
+  intent.textContent = `Intent hint: ${result.intent_hint?.label || "Unknown Intent"}. Nothing was applied.`;
+  item.append(intent);
+
+  const artifactPath = result.artifactPath || result.request?.artifact_path || "artifact path unavailable";
+  const pathLine = document.createElement("p");
+  pathLine.className = "artifact-path";
+  pathLine.textContent = `Artifact path: ${artifactPath}`;
+  item.append(pathLine);
+
+  const link = document.createElement("a");
+  link.href = "/side-review/";
+  link.textContent = "Open Side Review";
+  item.append(link);
+
+  elements.resultList.prepend(item);
+}
+
+async function loadHome() {
+  setLoadingHome(true);
+  try {
+    const response = await fetch("/api/home", { headers: { accept: "application/json" } });
+    if (!response.ok) throw new Error(`Home API failed: ${response.status}`);
+    const payload = await response.json();
+    const home = payload.eos_home || {};
+    const queue = home.review_queue || {};
+    const health = home.command_center?.health?.description || "Local status available.";
+    setText(elements.wikiCount, `${home.wiki?.total_entries ?? 0} entries`);
+    setText(elements.reviewCount, `${queue.total_review_required ?? 0} waiting`);
+    setText(elements.intentSummary, formatIntentSummary(queue.chat_request_intent_counts));
+    setText(elements.healthSummary, health);
+  } catch {
+    setText(elements.wikiCount, "Unavailable");
+    setText(elements.reviewCount, "Check local server");
+    setText(elements.intentSummary, "Unavailable");
+    setText(elements.healthSummary, "Home data is unavailable. Nothing was applied.");
+  } finally {
+    setLoadingHome(false);
+  }
+}
+
+async function capture(message) {
+  const response = await fetch("/api/chat/requests", {
+    method: "POST",
+    headers: { "content-type": "application/json", accept: "application/json" },
+    body: JSON.stringify({ message, source: "eos_chat" }),
+  });
+  const payload = await response.json();
+  if (!response.ok || payload.success === false) {
+    throw new Error(payload.error?.message || payload.error || "Capture request failed.");
+  }
+  return payload;
+}
+
+async function onSubmit(event) {
+  event.preventDefault();
+  if (state.capturing) return;
+  const message = elements.input?.value.trim() || "";
+  if (!message) return;
+
+  setCapturing(true);
+  try {
+    const result = await capture(message);
+    appendCaptureResult(result);
+    elements.input.value = "";
+    await loadHome();
+  } catch (error) {
+    appendCaptureResult({
+      intent_hint: { label: "Capture needs attention" },
+      artifactPath: error instanceof Error ? error.message : String(error),
+    });
+  } finally {
+    setCapturing(false);
+  }
+}
+
+if (elements.form) {
+  elements.form.addEventListener("submit", onSubmit);
+}
+
+loadHome();

package/src/eos/workspace/static/index.html

@@ -0,0 +1,64 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>EOS Workspace</title>
+  <link rel="stylesheet" href="/workspace/styles.css">
+</head>
+<body>
+  <a class="skip-link" href="#workspace-content">Skip to EOS Workspace content</a>
+  <main id="workspace-content" class="workspace-shell" aria-labelledby="workspace-title">
+    <header class="top-row">
+      <div>
+        <p class="eyebrow">Chat-first capture</p>
+        <h1 id="workspace-title">EOS Workspace</h1>
+        <p class="subtitle">Capture requests to local review artifacts before any source updates.</p>
+      </div>
+      <nav aria-label="Workspace navigation">
+        <a class="nav-link" href="/chat/">Open Chat</a>
+        <a class="nav-link" href="/side-review/">Open Side Review</a>
+      </nav>
+    </header>
+
+    <section class="safety-strip" aria-label="Safety contract">
+      <span>Local Only</span>
+      <span>Review Required</span>
+      <span>Not Applied</span>
+      <strong>Local artifact capture only. Nothing was applied.</strong>
+    </section>
+
+    <section class="status-grid" id="status-grid" aria-busy="true" aria-label="Workspace status">
+      <article>
+        <p class="label">Wiki Entries</p>
+        <strong id="wiki-count">Loading...</strong>
+      </article>
+      <article>
+        <p class="label">Review Queue</p>
+        <strong id="review-count">Loading...</strong>
+      </article>
+      <article>
+        <p class="label">Intent Summary</p>
+        <strong id="intent-summary">Loading...</strong>
+      </article>
+      <article>
+        <p class="label">Local Health</p>
+        <strong id="health-summary">Loading...</strong>
+      </article>
+    </section>
+
+    <form id="capture-form" class="capture-form" aria-label="Capture request for local review">
+      <label for="request-input">Request</label>
+      <textarea id="request-input" name="message" rows="4" maxlength="8000" required placeholder="Tell EOS what to prepare for review."></textarea>
+      <button type="submit">Capture for Review</button>
+      <p class="help-text">Captured requests remain review-required until you inspect them in Side Review.</p>
+    </form>
+
+    <section class="result-panel" aria-live="polite" aria-label="Capture results">
+      <p id="result-empty" class="muted">No captured requests in this browser session.</p>
+      <ol id="result-list" class="result-list"></ol>
+    </section>
+  </main>
+  <script src="/workspace/app.js" defer></script>
+</body>
+</html>

package/src/eos/workspace/static/styles.css

@@ -0,0 +1,262 @@
+:root {
+  color-scheme: dark light;
+  --bg: var(--vscode-editor-background, #0f172a);
+  --surface: var(--vscode-editorWidget-background, #15243a);
+  --surface-soft: var(--vscode-sideBar-background, #112033);
+  --text: var(--vscode-foreground, #e2e8f0);
+  --muted: var(--vscode-descriptionForeground, #9fb0c3);
+  --border: var(--vscode-panel-border, rgba(148, 163, 184, 0.28));
+  --accent: var(--vscode-textLink-foreground, #7dd3fc);
+  --focus: var(--vscode-focusBorder, #38bdf8);
+  --warning: var(--vscode-editorWarning-foreground, #f59e0b);
+  font-family: var(--vscode-font-family, ui-sans-serif, system-ui, -apple-system, "Segoe UI", sans-serif);
+}
+
+* {
+  box-sizing: border-box;
+}
+
+body {
+  margin: 0;
+  min-height: 100vh;
+  color: var(--text);
+  background: linear-gradient(180deg, color-mix(in srgb, var(--surface-soft) 90%, transparent), var(--bg));
+}
+
+.skip-link {
+  position: absolute;
+  top: 12px;
+  left: 12px;
+  z-index: 100;
+  transform: translateY(-180%);
+  padding: 8px 12px;
+  border-radius: 8px;
+  color: var(--bg);
+  background: var(--accent);
+  font-weight: 700;
+}
+
+.skip-link:focus-visible {
+  transform: translateY(0);
+}
+
+.workspace-shell {
+  width: min(980px, calc(100vw - 28px));
+  margin: 0 auto;
+  min-height: 100vh;
+  padding: 24px 0 32px;
+  display: grid;
+  gap: 14px;
+}
+
+.workspace-shell > * {
+  min-width: 0;
+}
+
+.top-row,
+.status-grid article,
+.capture-form,
+.result-panel {
+  border: 1px solid var(--border);
+  border-radius: 8px;
+  background: color-mix(in srgb, var(--surface) 92%, transparent);
+}
+
+.top-row {
+  display: flex;
+  justify-content: space-between;
+  gap: 16px;
+  align-items: flex-start;
+  padding: 16px;
+}
+
+.eyebrow,
+.label {
+  margin: 0 0 6px;
+  color: var(--accent);
+  text-transform: uppercase;
+  font-size: 0.76rem;
+  font-weight: 700;
+  letter-spacing: 0.06em;
+}
+
+h1,
+p {
+  margin-top: 0;
+  overflow-wrap: anywhere;
+}
+
+h1 {
+  margin-bottom: 8px;
+  font-size: 2rem;
+  line-height: 1.06;
+}
+
+.subtitle {
+  margin-bottom: 0;
+  color: var(--muted);
+}
+
+.nav-link,
+button {
+  display: inline-flex;
+  justify-content: center;
+  align-items: center;
+  border: 1px solid color-mix(in srgb, var(--accent) 52%, var(--border));
+  border-radius: 8px;
+  padding: 9px 12px;
+  color: var(--text);
+  background: color-mix(in srgb, var(--accent) 12%, var(--surface));
+  font: inherit;
+  font-weight: 700;
+  text-decoration: none;
+  cursor: pointer;
+}
+
+.nav-link:focus-visible,
+button:focus-visible,
+textarea:focus-visible {
+  outline: 2px solid var(--focus);
+  outline-offset: 2px;
+}
+
+.safety-strip {
+  display: flex;
+  flex-wrap: wrap;
+  align-items: center;
+  gap: 8px;
+  padding: 10px 12px;
+  border: 1px solid color-mix(in srgb, var(--warning) 45%, var(--border));
+  border-radius: 8px;
+  background: color-mix(in srgb, var(--warning) 10%, var(--surface-soft));
+}
+
+.safety-strip span {
+  border: 1px solid var(--border);
+  border-radius: 999px;
+  padding: 4px 8px;
+  color: var(--warning);
+  font-size: 0.78rem;
+  font-weight: 700;
+}
+
+.status-grid {
+  display: grid;
+  grid-template-columns: repeat(4, minmax(0, 1fr));
+  gap: 10px;
+}
+
+.status-grid article {
+  padding: 12px;
+}
+
+.status-grid strong {
+  display: block;
+  font-size: 1.2rem;
+}
+
+.capture-form,
+.result-panel {
+  padding: 14px;
+}
+
+.capture-form label {
+  display: block;
+  margin-bottom: 8px;
+  font-weight: 700;
+}
+
+textarea {
+  width: 100%;
+  min-height: 96px;
+  resize: vertical;
+  margin-bottom: 10px;
+  padding: 10px;
+  border: 1px solid var(--border);
+  border-radius: 8px;
+  color: var(--text);
+  background: var(--surface-soft);
+  font: inherit;
+}
+
+.help-text,
+.muted,
+.artifact-path {
+  color: var(--muted);
+}
+
+.result-list {
+  margin: 0;
+  padding: 0;
+  list-style: none;
+  display: grid;
+  gap: 10px;
+}
+
+.result-item {
+  border: 1px solid var(--border);
+  border-radius: 8px;
+  padding: 10px;
+  background: var(--surface-soft);
+  display: grid;
+  gap: 6px;
+}
+
+.result-item p {
+  margin-bottom: 0;
+}
+
+.artifact-path {
+  font-family: var(--vscode-editor-font-family, ui-monospace, monospace);
+  font-size: 0.85rem;
+}
+
+button:disabled {
+  opacity: 0.6;
+  cursor: wait;
+}
+
+@media (max-width: 820px) {
+  .top-row {
+    display: grid;
+  }
+
+  .status-grid {
+    grid-template-columns: repeat(2, minmax(0, 1fr));
+  }
+}
+
+@media (max-width: 560px) {
+  .workspace-shell {
+    width: min(100% - 16px, 980px);
+    padding: 18px 0 24px;
+  }
+
+  .status-grid {
+    grid-template-columns: 1fr;
+  }
+}
+
+@media (prefers-reduced-motion: reduce) {
+  *,
+  *::before,
+  *::after {
+    animation-duration: 0.01ms !important;
+    animation-iteration-count: 1 !important;
+    scroll-behavior: auto !important;
+  }
+}
+
+@media (forced-colors: active) {
+  .top-row,
+  .status-grid article,
+  .capture-form,
+  .result-panel,
+  .result-item,
+  .safety-strip,
+  textarea,
+  button,
+  .nav-link {
+    border-color: CanvasText;
+  }
+}

package/src/eos/workspace-boundary/side-review-workflow.js

@@ -180,6 +180,9 @@ export function validateSideReviewDecisionRequest(input = {}) {
   const errors = [];
   if (!cardId) errors.push("card_id is required");
   if (!definition) errors.push(`Unsupported side review decision: ${decision || ""}`);
+  if (definition && (definition.side_effect !== "review_artifact_only" || definition.creates_decision_artifact !== true)) {
+    errors.push(`Side Review decision endpoint only accepts review artifact actions: ${decision}`);
+  }
   if (definition?.side_effect === "review_artifact_only" && !firstString(input.reason, input.note, input.reviewer_note)) {
     errors.push("reason is required for review artifact decisions");
   }