opendevbrowser 0.0.33 → 0.0.35

package/skills/opendevbrowser-best-practices/artifacts/command-channel-reference.md

@@ -8,9 +8,10 @@ Compact operational map of the current OpenDevBrowser surfaces, with the `/canva
 
 - CLI commands: `77`
 - Plugin tools: `70`
+- CLI-tool pairs: `67`
 - `/ops` command names: `59`
 - `/canvas` command names: `35`
-- Legacy `/cdp` relay: generic CDP forwarding (method-level)
+- Legacy `/cdp` relay: generic CDP forwarding (method-level), active-legacy-session-only
 
 Canonical exhaustive reference: `docs/SURFACE_REFERENCE.md`.
 CLI help mirror: `npx opendevbrowser --help` and `npx opendevbrowser help` (identical inventories).
@@ -236,13 +237,16 @@ Operational rule:
 - Direct CDP: `connect --ws-endpoint ...` or `connect --host ... --cdp-port ...`
 - Direct release harnesses (`live-regression-direct`, `provider-direct-runs`) are the shipping evidence path; broad matrix wrappers are debug-only and should not replace fresh direct-run artifacts.
 
-Required readiness/status checks:
-- `extensionConnected`
-- `extensionHandshakeComplete`
-- `opsConnected`
-- `canvasConnected`
-- `cdpConnected`
-- `pairingRequired`
+Required extension readiness checks:
+- `data.fingerprintCurrent === true`
+- `data.relay.extensionConnected === true`
+- `data.relay.extensionHandshakeComplete === true`
+
+Diagnostic and lane-specific presence fields:
+- `data.relay.opsConnected`: active `/ops` client presence only. It is not required for normal extension readiness.
+- `data.relay.canvasConnected`: active `/canvas` client presence only.
+- `data.relay.cdpConnected`: active-legacy-session-only. Expected `false` unless a legacy `/cdp` session is connected.
+- `data.relay.pairingRequired`: relay token requirement status.
 
 ## Fast verification commands
 

package/skills/opendevbrowser-best-practices/artifacts/parity-gates.md

@@ -35,6 +35,7 @@ npm run test -- tests/providers-performance-gate.test.ts
 
 - `tests/parity-matrix.test.ts` is contract coverage for CLI/tool/runtime surface parity.
 - `node scripts/provider-direct-runs.mjs --release-gate --out artifacts/release/vX.Y.Z/provider-direct-runs.json` and `node scripts/live-regression-direct.mjs --release-gate --out artifacts/release/vX.Y.Z/live-regression-direct.json` are the live release-proof lane.
+- Treat `artifacts/release/vX.Y.Z/...` paths as local-only release proof outputs unless release policy explicitly requests publication.
 - Treat grouped contract checks and direct-run release proof as complementary, not interchangeable.
 
 ## Release Requirement

package/skills/opendevbrowser-best-practices/artifacts/provider-workflows.md

@@ -84,10 +84,29 @@ Expected output:
 - `workerStats[]` with `{ sessionId, processed, failures }`
 - `frontierStats` and checkpoint state
 
+## Agent Pattern F: Pinterest Multi-Pin Design Harvest
+
+This is guidance for agents using `inspiredesign harvest`; it is not a new product workflow, CLI command, or daemon method.
+
+1. Run query discovery with `--query ... --provider social/pinterest`.
+2. Read `meta.discovery.acceptedUrls` from the JSON output or artifact metadata.
+3. Keep only canonical `https://www.pinterest.com/pin/<id>/` URLs.
+4. Run the canonical harvest command once per selected pin with `--provider social/pinterest --url "https://www.pinterest.com/pin/<id>/"`.
+5. In extension mode, the canonical harvest opens the exact pin in the extension before extracting pin-media bytes, which stabilizes live GIF and video pins.
+6. Trust only outputs with `nextStepGuidance.readiness=ready`, non-empty `ranked-references.json`, and manifest-backed authority from `pin-media-index.json`, `screenshot-index.json`, or `motion-evidence.json`.
+7. Use `media-analysis.json` as the deterministic design-fact surface for trusted saved pin media only; it can guide palette, tone, layout, OCR-free typography structure, text-region layout, and sampled motion decisions, but it never replaces `pin-media-index.json` readiness authority.
+8. Do not claim readable text extraction, exact copy, font families, OCR, model vision, Tesseract, OpenCV, Sharp, browser canvas analysis, new dependencies, or raw `mediaAnalysis` in `canvas-plan.request.json`.
+
+Expected output:
+- one artifact bundle per selected canonical pin
+- selected design directions backed by persisted first-party pin media, screenshot, or motion authority
+- `media-analysis.json` may explain media-derived design facts, while `pin-media-index.json` remains the only pin-media readiness authority
+
 ## Release evidence lane
 
 - Use `node scripts/provider-direct-runs.mjs --release-gate --out artifacts/release/vX.Y.Z/provider-direct-runs.json` for provider live release proof.
 - Use `node scripts/live-regression-direct.mjs --release-gate --out artifacts/release/vX.Y.Z/live-regression-direct.json` for cross-surface live release proof.
+- Treat `artifacts/release/vX.Y.Z/...` paths as local-only release proof outputs unless release policy explicitly requests publication.
 - Treat parity matrix tests as contract coverage, not live release proof.
 - Read `data.guidanceReason` and `data.recommendedNextCommand` in the provider-direct report before escalating a provider failure to manual follow-up.
 

package/skills/opendevbrowser-best-practices/assets/templates/mode-flag-matrix.json

@@ -4,59 +4,69 @@
     "command": "npx opendevbrowser status --daemon --output-format json",
     "required": true,
     "statusExpectations": {
-      "fingerprintCurrent": true
+      "data.fingerprintCurrent": true
     }
   },
   "modes": [
     {
       "name": "managed",
       "launch": "npx opendevbrowser launch --no-extension",
-      "statusProbe": "npx opendevbrowser status --session-id <session-id>",
+      "statusProbe": "npx opendevbrowser status --session-id <session-id> --output-format json",
       "requiredFlags": [
         "--no-extension"
       ],
       "statusExpectations": {
-        "mode": "managed"
+        "data.mode": "managed"
       }
     },
     {
       "name": "extension",
       "launch": "npx opendevbrowser launch --extension-only --wait-for-extension",
-      "statusProbe": "npx opendevbrowser status --daemon",
+      "statusProbe": "npx opendevbrowser status --daemon --output-format json",
       "requiredFlags": [
         "--extension-only",
         "--wait-for-extension"
       ],
       "statusExpectations": {
-        "extensionConnected": true,
-        "extensionHandshakeComplete": true,
-        "opsConnected": true
+        "data.fingerprintCurrent": true,
+        "data.relay.extensionConnected": true,
+        "data.relay.extensionHandshakeComplete": true
+      },
+      "diagnosticPresenceFields": {
+        "data.relay.opsConnected": "presence-only; true only when an /ops client is active",
+        "data.relay.canvasConnected": "lane-specific; true only when a /canvas client is active",
+        "data.relay.cdpConnected": "active-legacy-session-only; false is normal outside legacy /cdp sessions"
       }
     },
     {
       "name": "extension-legacy",
       "launch": "npx opendevbrowser launch --extension-only --extension-legacy --wait-for-extension",
-      "statusProbe": "npx opendevbrowser status --daemon",
+      "statusProbe": "npx opendevbrowser status --daemon --output-format json",
       "requiredFlags": [
         "--extension-only",
         "--extension-legacy",
         "--wait-for-extension"
       ],
       "statusExpectations": {
-        "extensionConnected": true,
-        "extensionHandshakeComplete": true,
-        "cdpConnected": true
+        "data.fingerprintCurrent": true,
+        "data.relay.extensionConnected": true,
+        "data.relay.extensionHandshakeComplete": true
+      },
+      "diagnosticPresenceFields": {
+        "data.relay.cdpConnected": "active-legacy-session-only; true only while the legacy /cdp client is connected",
+        "data.relay.opsConnected": "presence-only; true only when an /ops client is active",
+        "data.relay.canvasConnected": "lane-specific; true only when a /canvas client is active"
       }
     },
     {
       "name": "cdpConnect",
       "connect": "npx opendevbrowser connect --ws-endpoint ws://127.0.0.1:9222/devtools/browser/<id>",
-      "statusProbe": "npx opendevbrowser status --session-id <session-id>",
+      "statusProbe": "npx opendevbrowser status --session-id <session-id> --output-format json",
       "requiredFlags": [
         "--ws-endpoint"
       ],
       "statusExpectations": {
-        "mode": "cdpConnect"
+        "data.mode": "cdpConnect"
       }
     }
   ]

package/skills/opendevbrowser-best-practices/assets/templates/surface-audit-checklist.json

@@ -3,6 +3,7 @@
   "expectedCounts": {
     "cliCommands": 77,
     "tools": 70,
+    "cliToolPairs": 67,
     "opsCommands": 59,
     "canvasCommands": 35
   },
@@ -34,7 +35,8 @@
     "Mode semantics documented",
     "Generated help first-contact owners documented",
     "Onboarding metadata owner documented",
-    "First-run onboarding proof owner documented"
+    "First-run onboarding proof owner documented",
+    "Hardcoded public-surface counts documented and validator-covered"
   ],
   "firstContactOwners": [
     "src/cli/help.ts",

package/skills/opendevbrowser-best-practices/scripts/odb-workflow.sh

@@ -26,6 +26,30 @@ $CLI_PREFIX status --daemon --output-format json
 EOF
 }
 
+print_extension_readiness() {
+  cat <<EOF
+# Extension readiness preflight:
+$CLI_PREFIX status --daemon --output-format json
+# Continue only when data.fingerprintCurrent === true, data.relay.extensionConnected === true, and data.relay.extensionHandshakeComplete === true.
+# Treat data.relay.opsConnected, data.relay.canvasConnected, and data.relay.cdpConnected as diagnostic or lane-specific presence fields.
+EOF
+}
+
+print_pinterest_multi_pin_harvest_guidance() {
+  cat <<EOF
+# Multi-pin Pinterest harvest agent pattern. This is guidance over inspiredesign harvest, not a standalone product workflow.
+# 1. Run the query discovery command above with --query and --provider social/pinterest.
+# 2. Read meta.discovery.acceptedUrls from the JSON output or artifact metadata.
+# 3. Keep only canonical https://www.pinterest.com/pin/<id>/ URLs.
+# 4. Run one canonical harvest per selected pin:
+$CLI_PREFIX inspiredesign harvest --brief "Premium digital photography studio landing page" --provider social/pinterest --url "https://www.pinterest.com/pin/<pin-id>/" --max-references 1 --visual-evidence required --browser-mode extension --use-cookies --cookie-policy required --challenge-automation-mode browser_with_helper --mode json --output-format json --output-dir "artifacts/pinterest-harvest/<pin-id>"
+# 5. Extension-mode canonical harvest opens the exact canonical pin in the extension before byte-backed pin-media extraction.
+# 6. Trust only outputs with nextStepGuidance.readiness=ready, non-empty ranked-references.json, and pin-media-index.json, screenshot-index.json, or motion-evidence.json authority.
+# 7. Use media-analysis.json for deterministic design facts from trusted saved pin media only. It is not readiness authority, and pin-media-index.json remains the only pin-media readiness authority.
+# 8. Do not claim readable text extraction, exact copy, font families, OCR, model vision, Tesseract, OpenCV, Sharp, browser canvas analysis, new dependencies, or raw mediaAnalysis in canvas-plan.request.json.
+EOF
+}
+
 print_help() {
   cat <<'EOF'
 OpenDevBrowser workflow router
@@ -84,11 +108,17 @@ EOF
     print_daemon_preflight
     cat <<EOF
 # Pair with opendevbrowser-design-agent when the contract will flow into implementation or /canvas work.
-$CLI_PREFIX inspiredesign run --brief "Design a premium docs workspace" --url "https://example.com/reference-a" --url "https://example.com/reference-b" --capture-mode off --include-prototype-guidance --mode json --output-format json
+# When --output-dir is omitted, inspect .opendevbrowser/inspiredesign/<runId> for workflow artifacts.
+# URL-backed inspiredesign run forces deep capture for DOM/layout diagnostics; do not disable capture for URL-backed runs.
+$CLI_PREFIX inspiredesign run --brief "Design a premium docs workspace" --url "https://example.com/reference-a" --url "https://example.com/reference-b" --include-prototype-guidance --mode json --output-format json
+EOF
+    print_extension_readiness
+    cat <<EOF
 $CLI_PREFIX inspiredesign harvest --brief "Premium digital photography studio landing page" --query "Pinterest premium digital photography studio landing page cinematic parallax portfolio" --provider social/pinterest --max-references 5 --visual-evidence required --browser-mode extension --use-cookies --cookie-policy required --challenge-automation-mode browser_with_helper --mode json --output-format json
 # Inspect nextStepGuidance.readiness and doNotProceedIf before Canvas continuation. For non-ready evidence, follow recovery-first guidance.
-# Review visual-evidence.json, screenshot-index.json, ranked-references.json, and meta-prompt.md before design or Canvas work.
+# Review visual-evidence.json, screenshot-index.json, motion-evidence.json, pin-media-evidence.json, pin-media-index.json, media-analysis.json, ranked-references.json, and meta-prompt.md before design or Canvas work.
 EOF
+    print_pinterest_multi_pin_harvest_guidance
     ;;
   parallel-multipage-safe)
     cat <<'EOF'
@@ -134,14 +164,14 @@ EOF
     cat <<EOF
 cat skills/opendevbrowser-best-practices/assets/templates/canvas-handshake-example.json
 cat skills/opendevbrowser-best-practices/assets/templates/canvas-generation-plan.v1.json
-$CLI_PREFIX canvas --command canvas.session.open --params '{"requestId":"req_open_01","browserSessionId":"<browser-session-id>","documentId":null,"repoPath":null,"mode":"dual-track"}'
+$CLI_PREFIX canvas --command canvas.session.open --params '{"requestId":"req_open_01","browserSessionId":"<browser-session-id>","documentId":null,"repoPath":null,"mode":"dual-track"}' --output-format json
 # Read handshake before any mutation. Inspect planStatus, preflightState, generationPlanRequirements.allowedValues, generationPlanIssues, and guidance.recommendedNextCommands.
-$CLI_PREFIX canvas --command canvas.plan.set --params-file skills/opendevbrowser-best-practices/assets/templates/canvas-generation-plan.v1.json
+$CLI_PREFIX canvas --command canvas.plan.set --params-file skills/opendevbrowser-best-practices/assets/templates/canvas-generation-plan.v1.json --output-format json
 # Replace placeholders in the plan file with canvasSessionId, leaseId, and documentId from the open response.
 # If canvas.plan.set succeeds with planStatus=accepted or preflightState=plan_accepted, follow the returned guidance into canvas.document.patch.
 # If canvas.plan.set returns generation_plan_invalid, read guidance.nextStepGuidance, guidance.paramsExamples, guidance.fieldExamples, guidance.validationChecks, and guidance.doNotProceedIf, then repair the params file and retry.
 # Optional diagnostics after generation_plan_invalid:
-# $CLI_PREFIX canvas --command canvas.plan.get --params '{"requestId":"req_plan_get_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","documentId":"<document-id>"}'
+# $CLI_PREFIX canvas --command canvas.plan.get --params '{"requestId":"req_plan_get_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","documentId":"<document-id>"}' --output-format json
 # or re-read with canvas.capabilities.get to inspect generationPlanIssues before resubmitting canvas.plan.set.
 EOF
     ;;
@@ -151,10 +181,10 @@ EOF
 cat skills/opendevbrowser-best-practices/artifacts/canvas-governance-playbook.md
 cat skills/opendevbrowser-best-practices/assets/templates/canvas-feedback-eval.json
 cat skills/opendevbrowser-best-practices/assets/templates/canvas-blocker-checklist.json
-$CLI_PREFIX canvas --command canvas.feedback.poll --params '{"requestId":"req_feedback_01","canvasSessionId":"<canvas-session-id>","documentId":"<document-id>","targetId":"<target-id>","afterCursor":null}'
+$CLI_PREFIX canvas --command canvas.feedback.poll --params '{"requestId":"req_feedback_01","canvasSessionId":"<canvas-session-id>","documentId":"<document-id>","targetId":"<target-id>","afterCursor":null}' --output-format json
 # Verify every feedback item is target-attributed and uses approved categories. If feedback returns preflight-blocker, return to canvas.plan.set first.
-$CLI_PREFIX canvas --command canvas.preview.refresh --params '{"requestId":"req_refresh_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","targetId":"<target-id>","refreshMode":"full"}'
-$CLI_PREFIX canvas --command canvas.document.save --params '{"requestId":"req_save_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","documentId":"<document-id>","repoPath":null}'
+$CLI_PREFIX canvas --command canvas.preview.refresh --params '{"requestId":"req_refresh_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","targetId":"<target-id>","refreshMode":"full"}' --output-format json
+$CLI_PREFIX canvas --command canvas.document.save --params '{"requestId":"req_save_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","documentId":"<document-id>","repoPath":null}' --output-format json
 # Save should fail or warn when requiredBeforeSave governance blocks remain unresolved.
 EOF
     ;;
@@ -168,6 +198,8 @@ EOF
   release-direct-gates)
     print_daemon_preflight
     cat <<'EOF'
+# artifacts/release/vX.Y.Z paths are local-only release proof outputs.
+# Normal omitted workflow outputs persist under .opendevbrowser/<workflow>/<runId>.
 mkdir -p artifacts/release/vX.Y.Z
 node scripts/provider-direct-runs.mjs --release-gate --out artifacts/release/vX.Y.Z/provider-direct-runs.json
 node scripts/live-regression-direct.mjs --release-gate --out artifacts/release/vX.Y.Z/live-regression-direct.json
@@ -197,6 +229,8 @@ OPENCODE_CONFIG_DIR="$WORKDIR/config" CODEX_HOME="$WORKDIR/codex-home" CLAUDECOD
 ./skills/opendevbrowser-product-presentation-asset/scripts/validate-skill-assets.sh
 ./skills/opendevbrowser-research/scripts/validate-skill-assets.sh
 ./skills/opendevbrowser-shopping/scripts/validate-skill-assets.sh
+# Explicit artifacts/skill-runtime-audit outputs are local-only audit proof.
+# Omitted provider workflow outputs persist under .opendevbrowser/<workflow>/<runId>.
 node scripts/skill-runtime-audit.mjs --smoke --out artifacts/skill-runtime-audit/smoke.json
 node scripts/skill-runtime-audit.mjs --out artifacts/skill-runtime-audit/full.json
 EOF
@@ -207,22 +241,29 @@ EOF
 # Public-first YouTube transcript probe
 node $TRANSCRIPT_PROBE_PATH --url "https://www.youtube.com/watch?v=aircAruvnKk" --youtube-mode auto --out artifacts/capability-fix/youtube-transcript-auto.json
 
+# When --output-dir or --out is omitted, inspect .opendevbrowser/<workflow>/<runId> for workflow artifacts.
+
 # Evidence-gated research primitive with explicit public source families
 # Load opendevbrowser-research first, then inspect records.json, context.json, meta.json, and report.md before publishing claims.
 $CLI_PREFIX research run --topic "Chrome extension debugging workflows" --days 30 --sources web,community --mode json --output-format json
 
 # Deterministic shopping reruns with explicit providers
-$CLI_PREFIX shopping run --query "wireless ergonomic mouse" --providers shopping/bestbuy,shopping/ebay --budget 150 --browser-mode managed --mode json --output-format json
-$CLI_PREFIX shopping run --query "27 inch 4k monitor" --providers shopping/bestbuy,shopping/ebay --budget 350 --sort lowest_price --browser-mode managed --mode json --output-format json
+$CLI_PREFIX shopping run --query "wireless ergonomic mouse" --providers shopping/bestbuy,shopping/ebay --budget 150 --browser-mode managed --use-cookies --challenge-automation-mode browser_with_helper --mode json --output-format json
+$CLI_PREFIX shopping run --query "27 inch 4k monitor" --providers shopping/bestbuy,shopping/ebay --budget 350 --sort lowest_price --browser-mode managed --use-cookies --challenge-automation-mode browser_with_helper --mode json --output-format json
 
 # Public-reference inspiredesign contract synthesis
-$CLI_PREFIX inspiredesign run --brief "Design a premium docs workspace" --url "https://example.com/reference-a" --url "https://example.com/reference-b" --capture-mode off --include-prototype-guidance --mode json --output-format json
-
+$CLI_PREFIX inspiredesign run --brief "Design a premium docs workspace" --url "https://example.com/reference-a" --url "https://example.com/reference-b" --include-prototype-guidance --mode json --output-format json
+EOF
+    print_extension_readiness
+    cat <<EOF
 # Browser-native Pinterest recipe. Continue only when nextStepGuidance.readiness is ready.
 $CLI_PREFIX inspiredesign harvest --brief "Premium digital photography studio landing page" --query "Pinterest premium digital photography studio landing page cinematic parallax portfolio" --provider social/pinterest --max-references 5 --visual-evidence required --browser-mode extension --use-cookies --cookie-policy required --challenge-automation-mode browser_with_helper --mode json --output-format json
+EOF
+    print_pinterest_multi_pin_harvest_guidance
+    cat <<EOF
 
 # Region note: advisory unless output reports meta.selection.region_authoritative=true
-$CLI_PREFIX shopping run --query "wireless earbuds" --providers shopping/amazon --region us --browser-mode managed --mode json --output-format json
+$CLI_PREFIX shopping run --query "wireless earbuds" --providers shopping/amazon --region us --browser-mode managed --use-cookies --challenge-automation-mode browser_with_helper --mode json --output-format json
 EOF
     ;;
   surface-audit)
@@ -236,24 +277,24 @@ EOF
   ops-channel-check)
     cat <<EOF
 $CLI_PREFIX serve
-# Daemon preflight for daemon-backed workflows:
-$CLI_PREFIX status --daemon --output-format json
-# Continue only when data.fingerprintCurrent === true.
+EOF
+    print_daemon_preflight
+    cat <<EOF
 $CLI_PREFIX launch --extension-only --wait-for-extension --output-format json
 $CLI_PREFIX status --daemon --output-format json
-# Verify fingerprintCurrent=true, opsConnected=true, and extensionHandshakeComplete=true
+# Verify data.fingerprintCurrent=true, data.relay.extensionConnected=true, and data.relay.extensionHandshakeComplete=true after launch. Treat data.relay.opsConnected as diagnostic presence only.
 cat skills/opendevbrowser-best-practices/assets/templates/ops-request-envelope.json
 EOF
     ;;
   cdp-channel-check)
     cat <<EOF
 $CLI_PREFIX serve
-# Daemon preflight for daemon-backed workflows:
-$CLI_PREFIX status --daemon --output-format json
-# Continue only when data.fingerprintCurrent === true.
+EOF
+    print_daemon_preflight
+    cat <<EOF
 $CLI_PREFIX launch --extension-only --extension-legacy --wait-for-extension --output-format json
 $CLI_PREFIX status --daemon --output-format json
-# Verify fingerprintCurrent=true and cdpConnected=true while legacy session is active
+# Verify data.fingerprintCurrent=true, data.relay.extensionConnected=true, and data.relay.extensionHandshakeComplete=true after launch. data.relay.cdpConnected is active-legacy-session-only and true only while the legacy /cdp session is active.
 cat skills/opendevbrowser-best-practices/assets/templates/cdp-forward-envelope.json
 EOF
     ;;

package/skills/opendevbrowser-best-practices/scripts/resolve-odb-cli.sh

@@ -98,3 +98,31 @@ resolve_odb_cli() {
 }
 
 resolve_odb_cli
+
+require_odb_daemon_current() {
+  local status_json
+
+  if ! status_json="$("${ODB_CLI[@]}" status --daemon --output-format json)"; then
+    echo "OpenDevBrowser daemon preflight failed. Run: ${ODB_CLI[*]} status --daemon --output-format json" >&2
+    return 1
+  fi
+
+  if ! printf '%s\n' "$status_json" | node -e '
+const fs = require("node:fs");
+const input = fs.readFileSync(0, "utf8");
+let payload;
+try {
+  payload = JSON.parse(input);
+} catch {
+  process.exit(1);
+}
+if (payload?.data?.fingerprintCurrent !== true) {
+  process.exit(1);
+}
+'; then
+    echo "OpenDevBrowser daemon is not current. Expected data.fingerprintCurrent === true from:" >&2
+    echo "${ODB_CLI[*]} status --daemon --output-format json" >&2
+    printf '%s\n' "$status_json" >&2
+    return 1
+  fi
+}

package/skills/opendevbrowser-best-practices/scripts/validate-skill-assets.sh

@@ -68,8 +68,16 @@ const workflowMarkers = [
   "inspiredesign run",
   "inspiredesign harvest",
   "social/pinterest",
+  "meta.discovery.acceptedUrls",
+  "Multi-pin Pinterest harvest agent pattern",
+  "one canonical harvest per selected pin",
+  "opens the exact canonical pin in the extension",
   "nextStepGuidance.readiness",
   "visual-evidence.json",
+  "pin-media-index.json",
+  "media-analysis.json",
+  "deterministic design facts from trusted saved pin media",
+  "raw mediaAnalysis in canvas-plan.request.json",
   "--include-prototype-guidance",
   "canvas-preflight",
   "canvas-feedback-eval",
@@ -98,6 +106,13 @@ const parityGateMarkers = [
 
 const providerWorkflowPath = "artifacts/provider-workflows.md";
 const providerWorkflowMarkers = [
+  "Agent Pattern F: Pinterest Multi-Pin Design Harvest",
+  "meta.discovery.acceptedUrls",
+  "not a new product workflow",
+  "opens the exact pin in the extension",
+  "media-analysis.json",
+  "`pin-media-index.json` remains the only pin-media readiness authority",
+  "raw `mediaAnalysis` in `canvas-plan.request.json`",
   "## Release evidence lane",
   "node scripts/provider-direct-runs.mjs --release-gate --out artifacts/release/vX.Y.Z/provider-direct-runs.json",
   "node scripts/live-regression-direct.mjs --release-gate --out artifacts/release/vX.Y.Z/live-regression-direct.json",

package/skills/opendevbrowser-best-practices/scripts/validator-fixture-cli.sh

@@ -88,6 +88,19 @@ if (!domain || !command) {
 
 const flags = parseFlags(rest);
 
+if (domain === "status") {
+  emitJson({
+    data: {
+      fingerprintCurrent: true,
+      relay: {
+        extensionConnected: true,
+        extensionHandshakeComplete: true
+      }
+    }
+  });
+  process.exit(0);
+}
+
 if (domain === "research" && command === "run") {
   const topic = String(flags.topic || "fixture topic");
   const days = String(flags.days || "30");

package/skills/opendevbrowser-design-agent/SKILL.md

@@ -169,6 +169,7 @@ Use when a redesign needs external references or when the brief explicitly asks
 - Start with `artifacts/research-harvest-workflow.md`.
 - Capture `3` to `5` live references with OpenDevBrowser.
 - For Pinterest, use the browser-native `social/pinterest` recipe with extension mode and cookies instead of treating Pinterest as a default full provider.
+- Before extension-mode Pinterest harvests, preflight `npx opendevbrowser status --daemon --output-format json` and continue only when `data.fingerprintCurrent === true`, `data.relay.extensionConnected === true`, and `data.relay.extensionHandshakeComplete === true`.
 - Inspect `nextStepGuidance.readiness`, `doNotProceedIf`, and recovery commands before using the bundle.
 - Record ready evidence in `assets/templates/reference-pattern-board.v1.json`.
 - Turn the synthesis into contract deltas before implementation.
@@ -188,6 +189,7 @@ Use when starting from screenshots, mocks, or an existing page.
 Use when the task should run through the design canvas.
 
 - Start with `canvas.session.open`; use `canvas.capabilities.get` only after you have a `canvasSessionId`.
+- Use `--output-format json` for Canvas CLI commands whenever you read returned IDs, statuses, guidance, or follow-up fields.
 - Read the handshake and inspect `planStatus`, `preflightState`, `generationPlanRequirements.allowedValues`, `generationPlanIssues`, `guidance.recommendedNextCommands`, `guidance.nextStepGuidance`, params examples, field examples, validation checks, and do-not-proceed blockers before choosing the next command.
 - Treat `preflightState="handshake_read"` as the normal first-step checkpoint before `canvas.plan.set`; if the handshake already reports `plan_invalid`, repair the plan instead of mutating.
 - Fill the full design contract and extract the `generationPlan`.

package/skills/opendevbrowser-design-agent/artifacts/design-workflows.md

@@ -2,7 +2,7 @@
 
 This file turns the design-agent skill into repeatable execution paths.
 
-## Workflow A — Contract-First Frontend Delivery
+## Workflow A - Contract-First Frontend Delivery
 
 Use when the task starts from a PRD, issue, or user request.
 
@@ -37,7 +37,7 @@ Use when the task starts from a PRD, issue, or user request.
 16. Implement the smallest coherent slice that satisfies the contract.
 17. Validate in an isolated fixture first, then in a real browser before declaring the work complete.
 
-## Workflow B — Screenshot Or Existing-Page Audit
+## Workflow B - Screenshot Or Existing-Page Audit
 
 Use when a screenshot, mock, or live page is the starting point.
 
@@ -71,7 +71,7 @@ Use when a screenshot, mock, or live page is the starting point.
 8. Record the audit in `assets/templates/design-audit-report.v1.md`.
 9. Implement changes only after the contract reflects the intended end state.
 
-## Workflow C — `/canvas` Contract-Governed Iteration
+## Workflow C - `/canvas` Contract-Governed Iteration
 
 Use when the work should flow through the OpenDevBrowser design canvas.
 
@@ -88,22 +88,24 @@ Use when the work should flow through the OpenDevBrowser design canvas.
 
 Canonical command order:
 
+Use `--output-format json` whenever returned IDs, statuses, guidance, or follow-up fields are read from Canvas command output.
+
 ```bash
-npx opendevbrowser canvas --command canvas.session.open --params '{"requestId":"req_open_01","browserSessionId":"<browser-session-id>","documentId":null,"repoPath":null,"mode":"dual-track"}'
+npx opendevbrowser canvas --command canvas.session.open --params '{"requestId":"req_open_01","browserSessionId":"<browser-session-id>","documentId":null,"repoPath":null,"mode":"dual-track"}' --output-format json
 # Inspect planStatus, preflightState, generationPlanRequirements.allowedValues, generationPlanIssues, guidance.recommendedNextCommands, guidance.nextStepGuidance, guidance.paramsExamples, guidance.fieldExamples, guidance.validationChecks, and guidance.doNotProceedIf before continuing.
-npx opendevbrowser canvas --command canvas.plan.set --params-file ./tmp/canvas-plan.json
+npx opendevbrowser canvas --command canvas.plan.set --params-file ./tmp/canvas-plan.json --output-format json
 # If canvas.plan.set succeeds with planStatus=accepted or preflightState=plan_accepted, follow the returned guidance into canvas.document.patch.
 # If canvas.plan.set returns generation_plan_invalid, repair ./tmp/canvas-plan.json from guidance.paramsExamples before retrying.
 # Optional diagnostics after generation_plan_invalid:
-# npx opendevbrowser canvas --command canvas.plan.get --params '{"requestId":"req_plan_get_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","documentId":"<document-id>"}'
+# npx opendevbrowser canvas --command canvas.plan.get --params '{"requestId":"req_plan_get_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","documentId":"<document-id>"}' --output-format json
 # or re-read with canvas.capabilities.get to inspect generationPlanIssues before resubmitting canvas.plan.set.
-npx opendevbrowser canvas --command canvas.document.patch --params-file ./tmp/canvas-patch.json
-npx opendevbrowser canvas --command canvas.preview.render --params '{"requestId":"req_preview_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","targetId":"<target-id>","projection":"canvas_html"}'
-npx opendevbrowser canvas --command canvas.feedback.poll --params '{"requestId":"req_feedback_01","canvasSessionId":"<canvas-session-id>","documentId":"<document-id>","targetId":"<target-id>","afterCursor":null}'
-npx opendevbrowser canvas --command canvas.document.save --params '{"requestId":"req_save_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","documentId":"<document-id>","repoPath":null}'
+npx opendevbrowser canvas --command canvas.document.patch --params-file ./tmp/canvas-patch.json --output-format json
+npx opendevbrowser canvas --command canvas.preview.render --params '{"requestId":"req_preview_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","targetId":"<target-id>","projection":"canvas_html"}' --output-format json
+npx opendevbrowser canvas --command canvas.feedback.poll --params '{"requestId":"req_feedback_01","canvasSessionId":"<canvas-session-id>","documentId":"<document-id>","targetId":"<target-id>","afterCursor":null}' --output-format json
+npx opendevbrowser canvas --command canvas.document.save --params '{"requestId":"req_save_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","documentId":"<document-id>","repoPath":null}' --output-format json
 ```
 
-## Workflow D — Real-Surface Validation
+## Workflow D - Real-Surface Validation
 
 Use when design quality must be demonstrated, not inferred.
 
@@ -123,7 +125,7 @@ Use when design quality must be demonstrated, not inferred.
    - no console or network regressions caused by the UI change
 7. If parity matters, repeat across supported surfaces before sign-off.
 
-## Workflow E — Performance Audit
+## Workflow E - Performance Audit
 
 Use when the screen is visually correct but interaction quality is poor.
 
@@ -143,7 +145,7 @@ npx opendevbrowser screenshot --session-id <session-id>
 npx opendevbrowser debug-trace-snapshot --session-id <session-id>
 ```
 
-## Workflow F — Ship Audit
+## Workflow F - Ship Audit
 
 Use after implementation and before final sign-off.
 

package/skills/opendevbrowser-design-agent/artifacts/isolated-preview-validation.md

@@ -62,7 +62,7 @@ npx opendevbrowser launch --no-extension --start-url http://127.0.0.1:3000/previ
 npx opendevbrowser snapshot --session-id <session-id>
 npx opendevbrowser screenshot --session-id <session-id>
 npx opendevbrowser debug-trace-snapshot --session-id <session-id>
-npx opendevbrowser canvas --command canvas.preview.render --params '{"canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","targetId":"<target-id>","projection":"canvas_html"}'
+npx opendevbrowser canvas --command canvas.preview.render --params '{"canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","targetId":"<target-id>","projection":"canvas_html"}' --output-format json
 ```
 
 Use the same fixture states as the contract when comparing preview and integrated behavior.

package/skills/opendevbrowser-design-agent/artifacts/research-harvest-workflow.md

@@ -29,12 +29,16 @@ npx opendevbrowser inspiredesign harvest \
   --max-references 5 \
   --visual-evidence required \
   --browser-mode managed \
-  --mode json
+  --mode json \
+  --output-format json
 ```
 
-Use the browser-native Pinterest site recipe when the brief specifically needs logged-in Pinterest search. Pinterest is not a default full social provider, and the workflow should not widen to unrelated sources without user confirmation:
+Use the browser-native Pinterest site recipe when the brief specifically needs logged-in Pinterest search. Pinterest is not a default full social provider, and the workflow should not widen to unrelated sources without user confirmation.
+
+Before the extension-mode Pinterest harvest, preflight the daemon with JSON status output and continue only when `data.fingerprintCurrent === true`, `data.relay.extensionConnected === true`, and `data.relay.extensionHandshakeComplete === true`:
 
 ```bash
+npx opendevbrowser status --daemon --output-format json
 npx opendevbrowser inspiredesign harvest \
   --brief "Premium digital photography studio landing page" \
   --query "Pinterest premium digital photography studio landing page cinematic parallax portfolio" \
@@ -57,7 +61,8 @@ npx opendevbrowser inspiredesign harvest \
   --url https://example.com/reference-a \
   --url https://example.com/reference-b \
   --visual-evidence required \
-  --mode json
+  --mode json \
+  --output-format json
 ```
 
 Harvest defaults:
@@ -82,11 +87,13 @@ Then inspect these files before `/canvas` or code changes:
 1. `advanced-brief.md` for the reference-first creative brief.
 2. `ranked-references.json` for rank, score, confidence, visual strengths, visual risks, rejected references, and selection reasons.
 3. `visual-evidence.json` and `screenshot-index.json` for artifact-relative PNG paths, hashes, byte counts, viewport metadata when available, provenance, and warnings.
-4. PNG files under `visual-evidence/<referenceId>/viewport.png` for actual visual review.
-5. `meta-prompt.md` for borrow guidance, reject guidance, motion posture, accessibility constraints, no-copy warning, and validation gates.
-6. `canvas-plan.request.json` and `design-agent-handoff.json` only after the visual synthesis is accepted and `nextStepGuidance.readiness` is `ready`.
+4. `motion-evidence.json` for screencast replay and preview paths when motion evidence is captured.
+5. `pin-media-evidence.json` and `pin-media-index.json` for persisted first-party Pinterest pin media proof. Remote media URLs alone are not proof.
+6. PNG files under `visual-evidence/<referenceId>/viewport.png` and pin-media files under `pin-media-evidence/<referenceId>/` for actual visual review.
+7. `meta-prompt.md` for borrow guidance, reject guidance, motion posture, accessibility constraints, no-copy warning, and validation gates.
+8. `canvas-plan.request.json` and `design-agent-handoff.json` only after the visual synthesis is accepted and `nextStepGuidance.readiness` is `ready`.
 
-JSON files are metadata-only. They must not contain base64 screenshots, absolute temp paths, full DOM, or full snapshot text.
+JSON files are metadata-only. They must not contain base64 screenshots, absolute temp paths, full DOM, full snapshot text, or remote media as product-ready proof.
 
 ## Manual Evidence Fallback
 

package/skills/opendevbrowser-design-agent/assets/templates/reference-pattern-board.v1.json

@@ -17,6 +17,7 @@
         "dom",
         "visual"
       ],
+      "evidenceAuthority": "ranked_reference",
       "intentMatched": true,
       "layoutRecipe": "",
       "contentHierarchy": [],