opendevbrowser 0.0.34 → 0.0.35

package/dist/{type-LR3F3SQY.js → type-UMPSDACC.js}

@@ -4,22 +4,22 @@ import {
 } from "./chunk-TI5I6UWY.js";
 import {
   callDaemon
-} from "./chunk-NX2XYJP5.js";
-import "./chunk-QXJDJDSZ.js";
-import "./chunk-XRDCSHKZ.js";
+} from "./chunk-XSSPNVMS.js";
+import "./chunk-Z3ADLR7I.js";
+import "./chunk-AHQC4A6P.js";
 import "./chunk-MX3NFLCE.js";
 import "./chunk-ASMHEEKY.js";
+import "./chunk-QMHKAFYX.js";
 import {
   createUsageError
 } from "./chunk-7BNU6DFI.js";
-import "./chunk-QMHKAFYX.js";
 import "./chunk-BUVYTJZR.js";
 import "./chunk-TBUCZX4A.js";
 import "./chunk-Y2KL55OG.js";
 import "./chunk-5SWZDVOW.js";
-import "./chunk-5FDXH4CS.js";
+import "./chunk-WTWSBEBW.js";
 import "./chunk-S5KZQJJI.js";
-import "./chunk-IBIHDGTZ.js";
+import "./chunk-B5XIJQXO.js";
 import "./chunk-3WLCWHIV.js";
 import "./chunk-FUSXMW3G.js";
 
@@ -91,4 +91,4 @@ async function runType(args) {
 export {
   runType
 };
-//# sourceMappingURL=type-LR3F3SQY.js.map
+//# sourceMappingURL=type-UMPSDACC.js.map

package/dist/{uncheck-5PJEHR7J.js → uncheck-2OZ56D42.js}

@@ -4,22 +4,22 @@ import {
 } from "./chunk-TI5I6UWY.js";
 import {
   callDaemon
-} from "./chunk-NX2XYJP5.js";
-import "./chunk-QXJDJDSZ.js";
-import "./chunk-XRDCSHKZ.js";
+} from "./chunk-XSSPNVMS.js";
+import "./chunk-Z3ADLR7I.js";
+import "./chunk-AHQC4A6P.js";
 import "./chunk-MX3NFLCE.js";
 import "./chunk-ASMHEEKY.js";
+import "./chunk-QMHKAFYX.js";
 import {
   createUsageError
 } from "./chunk-7BNU6DFI.js";
-import "./chunk-QMHKAFYX.js";
 import "./chunk-BUVYTJZR.js";
 import "./chunk-TBUCZX4A.js";
 import "./chunk-Y2KL55OG.js";
 import "./chunk-5SWZDVOW.js";
-import "./chunk-5FDXH4CS.js";
+import "./chunk-WTWSBEBW.js";
 import "./chunk-S5KZQJJI.js";
-import "./chunk-IBIHDGTZ.js";
+import "./chunk-B5XIJQXO.js";
 import "./chunk-3WLCWHIV.js";
 import "./chunk-FUSXMW3G.js";
 
@@ -68,4 +68,4 @@ async function runUncheck(args) {
 export {
   runUncheck
 };
-//# sourceMappingURL=uncheck-5PJEHR7J.js.map
+//# sourceMappingURL=uncheck-2OZ56D42.js.map

package/dist/{upload-HQ3QN2OW.js → upload-CD7PRH54.js}

@@ -5,22 +5,22 @@ import {
 } from "./chunk-TI5I6UWY.js";
 import {
   callDaemon
-} from "./chunk-NX2XYJP5.js";
-import "./chunk-QXJDJDSZ.js";
-import "./chunk-XRDCSHKZ.js";
+} from "./chunk-XSSPNVMS.js";
+import "./chunk-Z3ADLR7I.js";
+import "./chunk-AHQC4A6P.js";
 import "./chunk-MX3NFLCE.js";
 import "./chunk-ASMHEEKY.js";
+import "./chunk-QMHKAFYX.js";
 import {
   createUsageError
 } from "./chunk-7BNU6DFI.js";
-import "./chunk-QMHKAFYX.js";
 import "./chunk-BUVYTJZR.js";
 import "./chunk-TBUCZX4A.js";
 import "./chunk-Y2KL55OG.js";
 import "./chunk-5SWZDVOW.js";
-import "./chunk-5FDXH4CS.js";
+import "./chunk-WTWSBEBW.js";
 import "./chunk-S5KZQJJI.js";
-import "./chunk-IBIHDGTZ.js";
+import "./chunk-B5XIJQXO.js";
 import "./chunk-3WLCWHIV.js";
 import "./chunk-FUSXMW3G.js";
 
@@ -53,4 +53,4 @@ export {
   __test__,
   runUpload
 };
-//# sourceMappingURL=upload-HQ3QN2OW.js.map
+//# sourceMappingURL=upload-CD7PRH54.js.map

package/dist/{use-KFZLMRUH.js → use-MO67AGG7.js}

@@ -1,22 +1,22 @@
 import "./chunk-RJNI3BHT.js";
 import {
   callDaemon
-} from "./chunk-NX2XYJP5.js";
-import "./chunk-QXJDJDSZ.js";
-import "./chunk-XRDCSHKZ.js";
+} from "./chunk-XSSPNVMS.js";
+import "./chunk-Z3ADLR7I.js";
+import "./chunk-AHQC4A6P.js";
 import "./chunk-MX3NFLCE.js";
 import "./chunk-ASMHEEKY.js";
+import "./chunk-QMHKAFYX.js";
 import {
   createUsageError
 } from "./chunk-7BNU6DFI.js";
-import "./chunk-QMHKAFYX.js";
 import "./chunk-BUVYTJZR.js";
 import "./chunk-TBUCZX4A.js";
 import "./chunk-Y2KL55OG.js";
 import "./chunk-5SWZDVOW.js";
-import "./chunk-5FDXH4CS.js";
+import "./chunk-WTWSBEBW.js";
 import "./chunk-S5KZQJJI.js";
-import "./chunk-IBIHDGTZ.js";
+import "./chunk-B5XIJQXO.js";
 import "./chunk-3WLCWHIV.js";
 import "./chunk-FUSXMW3G.js";
 
@@ -60,4 +60,4 @@ async function runTargetUse(args) {
 export {
   runTargetUse
 };
-//# sourceMappingURL=use-KFZLMRUH.js.map
+//# sourceMappingURL=use-MO67AGG7.js.map

package/dist/{value-TKUFUK5I.js → value-4GI2LRUY.js}

@@ -4,22 +4,22 @@ import {
 } from "./chunk-TI5I6UWY.js";
 import {
   callDaemon
-} from "./chunk-NX2XYJP5.js";
-import "./chunk-QXJDJDSZ.js";
-import "./chunk-XRDCSHKZ.js";
+} from "./chunk-XSSPNVMS.js";
+import "./chunk-Z3ADLR7I.js";
+import "./chunk-AHQC4A6P.js";
 import "./chunk-MX3NFLCE.js";
 import "./chunk-ASMHEEKY.js";
+import "./chunk-QMHKAFYX.js";
 import {
   createUsageError
 } from "./chunk-7BNU6DFI.js";
-import "./chunk-QMHKAFYX.js";
 import "./chunk-BUVYTJZR.js";
 import "./chunk-TBUCZX4A.js";
 import "./chunk-Y2KL55OG.js";
 import "./chunk-5SWZDVOW.js";
-import "./chunk-5FDXH4CS.js";
+import "./chunk-WTWSBEBW.js";
 import "./chunk-S5KZQJJI.js";
-import "./chunk-IBIHDGTZ.js";
+import "./chunk-B5XIJQXO.js";
 import "./chunk-3WLCWHIV.js";
 import "./chunk-FUSXMW3G.js";
 
@@ -68,4 +68,4 @@ async function runDomValue(args) {
 export {
   runDomValue
 };
-//# sourceMappingURL=value-TKUFUK5I.js.map
+//# sourceMappingURL=value-4GI2LRUY.js.map

package/dist/{visible-P5Z2N2QR.js → visible-VSUFGRFZ.js}

@@ -4,22 +4,22 @@ import {
 } from "./chunk-TI5I6UWY.js";
 import {
   callDaemon
-} from "./chunk-NX2XYJP5.js";
-import "./chunk-QXJDJDSZ.js";
-import "./chunk-XRDCSHKZ.js";
+} from "./chunk-XSSPNVMS.js";
+import "./chunk-Z3ADLR7I.js";
+import "./chunk-AHQC4A6P.js";
 import "./chunk-MX3NFLCE.js";
 import "./chunk-ASMHEEKY.js";
+import "./chunk-QMHKAFYX.js";
 import {
   createUsageError
 } from "./chunk-7BNU6DFI.js";
-import "./chunk-QMHKAFYX.js";
 import "./chunk-BUVYTJZR.js";
 import "./chunk-TBUCZX4A.js";
 import "./chunk-Y2KL55OG.js";
 import "./chunk-5SWZDVOW.js";
-import "./chunk-5FDXH4CS.js";
+import "./chunk-WTWSBEBW.js";
 import "./chunk-S5KZQJJI.js";
-import "./chunk-IBIHDGTZ.js";
+import "./chunk-B5XIJQXO.js";
 import "./chunk-3WLCWHIV.js";
 import "./chunk-FUSXMW3G.js";
 
@@ -68,4 +68,4 @@ async function runDomVisible(args) {
 export {
   runDomVisible
 };
-//# sourceMappingURL=visible-P5Z2N2QR.js.map
+//# sourceMappingURL=visible-VSUFGRFZ.js.map

package/dist/{wait-BYSHJPSC.js → wait-OQYMFENT.js}

@@ -5,22 +5,22 @@ import {
 } from "./chunk-TI5I6UWY.js";
 import {
   callDaemon
-} from "./chunk-NX2XYJP5.js";
-import "./chunk-QXJDJDSZ.js";
-import "./chunk-XRDCSHKZ.js";
+} from "./chunk-XSSPNVMS.js";
+import "./chunk-Z3ADLR7I.js";
+import "./chunk-AHQC4A6P.js";
 import "./chunk-MX3NFLCE.js";
 import "./chunk-ASMHEEKY.js";
+import "./chunk-QMHKAFYX.js";
 import {
   createUsageError
 } from "./chunk-7BNU6DFI.js";
-import "./chunk-QMHKAFYX.js";
 import "./chunk-BUVYTJZR.js";
 import "./chunk-TBUCZX4A.js";
 import "./chunk-Y2KL55OG.js";
 import "./chunk-5SWZDVOW.js";
-import "./chunk-5FDXH4CS.js";
+import "./chunk-WTWSBEBW.js";
 import "./chunk-S5KZQJJI.js";
-import "./chunk-IBIHDGTZ.js";
+import "./chunk-B5XIJQXO.js";
 import "./chunk-3WLCWHIV.js";
 import "./chunk-FUSXMW3G.js";
 
@@ -106,4 +106,4 @@ async function runWait(args) {
 export {
   runWait
 };
-//# sourceMappingURL=wait-BYSHJPSC.js.map
+//# sourceMappingURL=wait-OQYMFENT.js.map

package/dist/{windows-6GTD25EU.js → windows-75W2JCW7.js}

@@ -2,24 +2,24 @@ import {
   callDesktopCommand,
   desktopCommandResult,
   parseDesktopReasonArgs
-} from "./chunk-VY47VKXU.js";
+} from "./chunk-FJZY3Z3X.js";
 import "./chunk-RJNI3BHT.js";
 import "./chunk-TI5I6UWY.js";
 import "./chunk-OW5HMYMI.js";
-import "./chunk-NX2XYJP5.js";
-import "./chunk-QXJDJDSZ.js";
-import "./chunk-XRDCSHKZ.js";
+import "./chunk-XSSPNVMS.js";
+import "./chunk-Z3ADLR7I.js";
+import "./chunk-AHQC4A6P.js";
 import "./chunk-MX3NFLCE.js";
 import "./chunk-ASMHEEKY.js";
-import "./chunk-7BNU6DFI.js";
 import "./chunk-QMHKAFYX.js";
+import "./chunk-7BNU6DFI.js";
 import "./chunk-BUVYTJZR.js";
 import "./chunk-TBUCZX4A.js";
 import "./chunk-Y2KL55OG.js";
 import "./chunk-5SWZDVOW.js";
-import "./chunk-5FDXH4CS.js";
+import "./chunk-WTWSBEBW.js";
 import "./chunk-S5KZQJJI.js";
-import "./chunk-IBIHDGTZ.js";
+import "./chunk-B5XIJQXO.js";
 import "./chunk-3WLCWHIV.js";
 import "./chunk-FUSXMW3G.js";
 
@@ -34,4 +34,4 @@ async function runDesktopWindows(args) {
 export {
   runDesktopWindows
 };
-//# sourceMappingURL=windows-6GTD25EU.js.map
+//# sourceMappingURL=windows-75W2JCW7.js.map

package/extension/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "OpenDevBrowser Relay",
-  "version": "0.0.34",
+  "version": "0.0.35",
   "description": "Optional bridge to reuse existing Chrome tabs with OpenDevBrowser.",
   "permissions": [
     "debugger",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opendevbrowser",
-  "version": "0.0.34",
+  "version": "0.0.35",
   "description": "Browser automation runtime with snapshot-refs-actions, browser replay screencasts, public read-only desktop observation, and browser-scoped computer-use orchestration",
   "type": "module",
   "main": "dist/index.js",

package/skills/opendevbrowser-best-practices/SKILL.md

@@ -19,28 +19,28 @@ For frontend, design-system, screenshot-to-code, or `/canvas` composition tasks,
 
 ## Pack Contents
 
-- `artifacts/provider-workflows.md` — canonical provider execution flows.
-- `artifacts/parity-gates.md` — mode/surface parity matrix and acceptance gates.
-- `artifacts/debug-trace-playbook.md` — diagnostics workflow and trace bundle model.
-- `artifacts/fingerprint-tiers.md` — hardening tiers and when to use each.
-- `artifacts/macro-workflows.md` — macro design and expansion standards.
-- `artifacts/browser-agent-known-issues-matrix.md` — known browser-agent failure modes mapped to required controls.
-- `artifacts/command-channel-reference.md` — CLI/tool/`/ops`/`/canvas`/`/cdp` surface map plus cross-agent skill-sync targets.
-- `artifacts/canvas-governance-playbook.md` — `/canvas` preflight, blocker, and feedback-evaluation guidance.
-- `artifacts/skill-runtime-surface-matrix.md` — canonical skill-pack and runtime-family inventory for real-task audits.
-- `assets/templates/mode-flag-matrix.json` — mode + flag verification template.
-- `assets/templates/ops-request-envelope.json` — `/ops` request envelope template.
-- `assets/templates/cdp-forward-envelope.json` — `/cdp` relay envelope template.
-- `assets/templates/robustness-checklist.json` — shared issue-status checklist for workflow robustness audits.
-- `assets/templates/surface-audit-checklist.json` — docs/surface audit checklist template.
-- `assets/templates/skill-runtime-pack-matrix.json` — machine-readable canonical skill/runtime matrix for the audit runner.
-- `assets/templates/canvas-handshake-example.json` — canonical `/canvas` handshake example.
-- `assets/templates/canvas-generation-plan.v1.json` — required `canvas.plan.set` request skeleton.
-- `assets/templates/canvas-feedback-eval.json` — target-attributed feedback evaluation checklist.
-- `assets/templates/canvas-blocker-checklist.json` — machine-readable blocker and warning audit map.
-- `scripts/odb-workflow.sh` — prints codified command sequences by workflow.
-- `scripts/run-robustness-audit.sh` — validates workflow skill coverage against known issue IDs.
-- `scripts/validate-skill-assets.sh` — validates required artifacts/templates.
+- `artifacts/provider-workflows.md` - canonical provider execution flows.
+- `artifacts/parity-gates.md` - mode/surface parity matrix and acceptance gates.
+- `artifacts/debug-trace-playbook.md` - diagnostics workflow and trace bundle model.
+- `artifacts/fingerprint-tiers.md` - hardening tiers and when to use each.
+- `artifacts/macro-workflows.md` - macro design and expansion standards.
+- `artifacts/browser-agent-known-issues-matrix.md` - known browser-agent failure modes mapped to required controls.
+- `artifacts/command-channel-reference.md` - CLI/tool/`/ops`/`/canvas`/`/cdp` surface map plus cross-agent skill-sync targets.
+- `artifacts/canvas-governance-playbook.md` - `/canvas` preflight, blocker, and feedback-evaluation guidance.
+- `artifacts/skill-runtime-surface-matrix.md` - canonical skill-pack and runtime-family inventory for real-task audits.
+- `assets/templates/mode-flag-matrix.json` - mode + flag verification template.
+- `assets/templates/ops-request-envelope.json` - `/ops` request envelope template.
+- `assets/templates/cdp-forward-envelope.json` - `/cdp` relay envelope template.
+- `assets/templates/robustness-checklist.json` - shared issue-status checklist for workflow robustness audits.
+- `assets/templates/surface-audit-checklist.json` - docs/surface audit checklist template.
+- `assets/templates/skill-runtime-pack-matrix.json` - machine-readable canonical skill/runtime matrix for the audit runner.
+- `assets/templates/canvas-handshake-example.json` - canonical `/canvas` handshake example.
+- `assets/templates/canvas-generation-plan.v1.json` - required `canvas.plan.set` request skeleton.
+- `assets/templates/canvas-feedback-eval.json` - target-attributed feedback evaluation checklist.
+- `assets/templates/canvas-blocker-checklist.json` - machine-readable blocker and warning audit map.
+- `scripts/odb-workflow.sh` - prints codified command sequences by workflow.
+- `scripts/run-robustness-audit.sh` - validates workflow skill coverage against known issue IDs.
+- `scripts/validate-skill-assets.sh` - validates required artifacts/templates.
 
 ## Quick Start
 
@@ -102,6 +102,8 @@ opendevbrowser_skill_load opendevbrowser-best-practices "validated capability la
 
 Current validated lanes:
 
+When `--output-dir` or `--out` is omitted, inspect `.opendevbrowser/<workflow>/<runId>` for workflow artifacts before publishing claims.
+
 1. Public-first YouTube transcript retrieval.
 
 ```bash
@@ -147,18 +149,24 @@ Rules:
 npx opendevbrowser inspiredesign run --brief "Design a premium docs workspace" --url "https://example.com/reference-a" --url "https://example.com/reference-b" --browser-mode managed --use-cookies --challenge-automation-mode browser_with_helper --include-prototype-guidance --mode json --output-format json
 npx opendevbrowser inspiredesign harvest --brief "Design a premium docs workspace" --query "best docs product landing pages" --provider web/default --max-references 5 --visual-evidence required --browser-mode managed --mode path --output-format json
 npx opendevbrowser inspiredesign harvest --brief "Premium digital photography studio landing page" --query "Pinterest premium digital photography studio landing page cinematic parallax portfolio" --provider social/pinterest --max-references 5 --visual-evidence required --browser-mode extension --use-cookies --cookie-policy required --challenge-automation-mode browser_with_helper --mode json --output-format json
+npx opendevbrowser inspiredesign harvest --brief "Premium digital photography studio landing page" --provider social/pinterest --url "https://www.pinterest.com/pin/<pin-id>/" --max-references 1 --visual-evidence required --browser-mode extension --use-cookies --cookie-policy required --challenge-automation-mode browser_with_helper --mode json --output-format json --output-dir "artifacts/pinterest-harvest/<pin-id>"
 ```
 
 Rules:
-- keep inspiredesign references public-first; any supplied `--url` now forces deep capture so the workflow can collect DOM/layout evidence
+- keep inspiredesign references public-first; explicit-url `inspiredesign run --url ...` uses deep capture for DOM/layout evidence, while Pinterest harvest/recovery commands keep `captureMode=off` for byte-backed pin-media extraction; `--visual-evidence required` controls screenshot evidence when the selected strategy explicitly calls for screenshots and does not enable deep capture for canonical pin-media harvest
 - use repeated `--url` flags instead of packed URL strings
 - provide `--query` or at least one `--url` for `inspiredesign harvest`; use `--query` when provider discovery is part of the task
-- use `inspiredesign harvest` when visual reference discovery, screenshot PNG artifacts, ranked references, metadata-only visual JSON, `meta-prompt.md`, or motion-design follow-through is required
+- use `inspiredesign harvest` when visual reference discovery, screenshot PNG artifacts, ranked references, metadata-only visual JSON, deterministic `media-analysis.json`, `meta-prompt.md`, or motion-design follow-through is required
 - treat `social/pinterest` as a browser-native site recipe, not a default full social provider; use extension mode, cookies, and `--cookie-policy required` for logged-in Pinterest search
+- for multi-pin Pinterest design harvests, treat search-to-canonical-pin capture as an agent pattern over `inspiredesign harvest`, not as a separate workflow: run query discovery with `--query ... --provider social/pinterest`, read `meta.discovery.acceptedUrls` from the JSON output or artifact metadata, keep only canonical `https://www.pinterest.com/pin/<id>/` URLs, then run one canonical harvest command per selected pin
+- canonical Pinterest pin harvests and recovery paths in extension mode use `captureMode=off` and open the exact canonical pin in the extension before byte-backed pin-media extraction, which is required for reliable GIF and video pin capture in live sessions
+- trust multi-pin Pinterest harvest outputs only when `nextStepGuidance.readiness=ready`, `ranked-references.json` is non-empty, and `pin-media-index.json`, `screenshot-index.json`, or `motion-evidence.json` proves manifest-backed authority for the selected pin
+- treat `media-analysis.json` as a deterministic design-fact surface from trusted saved pin media, not as readiness authority; `pin-media-index.json` remains the only pin-media readiness and provenance authority
+- use `media-analysis.json` for palette, tone, layout, OCR-free typography structure, text-region layout, sampled motion facts, limitations, and non-goals; do not claim readable text extraction, exact copy, font families, OCR, model vision, Tesseract, OpenCV, Sharp, browser canvas analysis, new dependencies, or raw `mediaAnalysis` in `canvas-plan.request.json`
 - inspect `nextStepGuidance.readiness`, `reasonCode`, `primaryAction`, `paramsExamples`, `validationChecks`, and `doNotProceedIf` before continuing from any harvest
 - visual harvest must not bypass `policy_blocked`, unresolved `auth_required`, `challenge_detected`, or `rate_limited`; inspect diagnostics instead of forcing screenshots through blocked references
 - if readiness is `needs_recovery`, `blocked`, or `diagnostic_only`, follow the recovery-first command examples and do not continue to Canvas
-- after a ready run or harvest, read `advanced-brief.md` first, inspect `ranked-references.json`, `visual-evidence.json`, `screenshot-index.json`, and `meta-prompt.md` when present, load `opendevbrowser_skill_load opendevbrowser-best-practices "quick start"`, `opendevbrowser_skill_load opendevbrowser-design-agent "canvas-contract"`, and `opendevbrowser_skill_load opendevbrowser-motion-design "quick start"`, open a Canvas session, fill the ids in `canvas-plan.request.json`, run `opendevbrowser canvas --command canvas.plan.set --params-file ./canvas-plan.request.json`, confirm `planStatus=accepted`, then patch only the governance blocks listed in `design-agent-handoff.json`
+- after a ready run or harvest, read `advanced-brief.md` first, inspect `ranked-references.json`, `media-analysis.json`, `visual-evidence.json`, `screenshot-index.json`, `motion-evidence.json`, `pin-media-evidence.json`, `pin-media-index.json`, and `meta-prompt.md` when present, load `opendevbrowser_skill_load opendevbrowser-best-practices "quick start"`, `opendevbrowser_skill_load opendevbrowser-design-agent "canvas-contract"`, and `opendevbrowser_skill_load opendevbrowser-motion-design "quick start"`, open a Canvas session, fill the ids in `canvas-plan.request.json`, run `opendevbrowser canvas --command canvas.plan.set --params-file ./canvas-plan.request.json --output-format json`, confirm `planStatus=accepted`, then patch only the governance blocks listed in `design-agent-handoff.json`. Treat Pinterest pin-media as design-ready only when `pin-media-index.json` proves persisted first-party bytes; remote media URLs and `media-analysis.json` alone are not proof
 - pair this lane with `opendevbrowser-design-agent` when the brief moves from contract synthesis into implementation or `/canvas`
 
 ## Agent Sync Targets
@@ -177,6 +185,8 @@ Install and update refresh managed copies of these canonical packs; uninstall re
 - Use one action per decision loop: snapshot -> action -> snapshot.
 - Keep a single correlation context (`requestId`, `sessionId`) across a run.
 - Before daemon-backed workflows, run `opendevbrowser status --daemon --output-format json` and require `data.fingerprintCurrent === true`.
+- For extension readiness, require `data.fingerprintCurrent === true`, `data.relay.extensionConnected === true`, and `data.relay.extensionHandshakeComplete === true`.
+- Treat `data.relay.opsConnected`, `data.relay.canvasConnected`, and `data.relay.cdpConnected` as diagnostic or lane-specific presence fields; `data.relay.cdpConnected` is active-legacy-session-only.
 - Treat missing or false `data.fingerprintCurrent` as not current; use the matching binary, restart from the current install, or isolate shared runs with `OPENCODE_CONFIG_DIR`, `OPENCODE_CACHE_DIR`, and unique daemon or relay ports.
 - Do not conflate `daemon_fingerprint_mismatch` with native messaging host drift.
 - Run the same workflow shape across all three modes before claiming parity.
@@ -192,7 +202,7 @@ Install and update refresh managed copies of these canonical packs; uninstall re
 - Use default extension `/ops` for relay-backed concurrency; use `/cdp` only for legacy compatibility paths.
 - For managed parallel runs with persisted profiles, use unique profile paths per session (or disable persistence) to avoid profile lock collisions.
 - Treat extension headless attempts (`--extension-only --headless`) as expected `unsupported_mode`; route headless workloads through managed/cdpConnect instead.
-- Before extension-mode runs, preflight `npx opendevbrowser status --daemon --output-format json` and require `data.fingerprintCurrent === true`, `data.relay.extensionConnected === true`, and `data.relay.extensionHandshakeComplete === true`.
+- Before extension-mode runs, preflight `npx opendevbrowser status --daemon --output-format json` and require `data.fingerprintCurrent === true`, `data.relay.extensionConnected === true`, and `data.relay.extensionHandshakeComplete === true`; do not require `data.relay.opsConnected`, `data.relay.canvasConnected`, or `data.relay.cdpConnected` unless that lane is actively in use.
 
 Operational references:
 - `artifacts/provider-workflows.md` (see Workflow E)
@@ -261,7 +271,7 @@ opendevbrowser_screencast_stop sessionId="<session-id>" screencastId="<screencas
 
 Goal: validate authenticated read/search capability without posting.
 
-1. Connect and verify extension readiness (`extensionConnected` + handshake).
+1. Connect and verify extension readiness with JSON status: `data.fingerprintCurrent === true`, `data.relay.extensionConnected === true`, and `data.relay.extensionHandshakeComplete === true`.
 2. Navigate/search target social surface.
 3. Capture `debug-trace-snapshot` and `network-poll` evidence.
 4. Record blocker/auth status only (no write action).
@@ -315,13 +325,14 @@ node scripts/live-regression-direct.mjs --out artifacts/live-regression-direct.j
 ```
 
 Surface inventory source of truth:
-- `docs/SURFACE_REFERENCE.md` (77 CLI commands, 70 tools, 59 `/ops` commands, 35 `/canvas` commands, `/cdp` envelope contracts; mirrored by `npx opendevbrowser --help` and `npx opendevbrowser help`)
+- `docs/SURFACE_REFERENCE.md` (77 CLI commands, 70 tools, 59 `/ops` commands, 35 `/canvas` commands, 67 CLI-tool pairs, `/cdp` envelope contracts; mirrored by `npx opendevbrowser --help` and `npx opendevbrowser help`). These hardcoded counts are validator-covered and must be refreshed from generated public-surface truth whenever counts change.
 - `artifacts/command-channel-reference.md` (skill-pack operational digest)
 - `artifacts/skill-runtime-surface-matrix.md` and `assets/templates/skill-runtime-pack-matrix.json` (canonical pack/runtime audit inventory)
 
 Direct-run release note:
 - `scripts/live-regression-direct.mjs` is the preferred release harness for `/canvas`, annotate, and CLI smoke. It uses temporary managed profiles for managed probes, waits for `/ops` drain before the legacy `/cdp` step, and keeps manual annotation timeouts as explicit `skipped` boundaries in `--release-gate` mode.
 - `scripts/provider-direct-runs.mjs --include-high-friction --include-auth-gated` is the preferred provider release harness. Treat `provider-live-matrix` and `live-regression-matrix` as debug-only helpers, not refreshed release evidence.
+- Explicit `artifacts/release/vX.Y.Z/...` paths are local-only release proof outputs. Normal omitted workflow outputs persist under `.opendevbrowser/<workflow>/<runId>`.
 
 ## Skill Runtime Audit and Realignment
 
@@ -343,7 +354,7 @@ Realignment rule:
 Use the design-canvas surface when the workflow needs persisted design documents, explicit governance state, preview tabs, or overlay selection.
 
 Recommended command order:
-1. `opendevbrowser_canvas` or `opendevbrowser canvas --command canvas.session.open` to get `canvasSessionId`, `leaseId`, `preflightState`, `planStatus`, governance block states, generation-plan requirements, and `guidance.recommendedNextCommands`.
+1. `opendevbrowser_canvas` or `opendevbrowser canvas --command canvas.session.open --output-format json` to get `canvasSessionId`, `leaseId`, `preflightState`, `planStatus`, governance block states, generation-plan requirements, and `guidance.recommendedNextCommands`.
 2. Read the handshake before mutating. The handshake is the source of truth for:
    - `planStatus`
    - `preflightState`
@@ -362,7 +373,7 @@ Recommended command order:
      `icons` are approved icon families,
      `styling` is for utility/theme adapters such as `tailwindcss`
 3. Require `preflightState="handshake_read"` or inspect the returned invalid-plan state before moving on. If the response already carries `guidance.recommendedNextCommands`, follow that list instead of guessing.
-4. Submit `canvas.plan.set` with all required non-empty objects:
+4. Submit `canvas.plan.set --output-format json` with all required non-empty objects:
    - `targetOutcome`
    - `visualDirection`
    - `layoutStrategy`

package/skills/opendevbrowser-best-practices/artifacts/command-channel-reference.md

@@ -8,9 +8,10 @@ Compact operational map of the current OpenDevBrowser surfaces, with the `/canva
 
 - CLI commands: `77`
 - Plugin tools: `70`
+- CLI-tool pairs: `67`
 - `/ops` command names: `59`
 - `/canvas` command names: `35`
-- Legacy `/cdp` relay: generic CDP forwarding (method-level)
+- Legacy `/cdp` relay: generic CDP forwarding (method-level), active-legacy-session-only
 
 Canonical exhaustive reference: `docs/SURFACE_REFERENCE.md`.
 CLI help mirror: `npx opendevbrowser --help` and `npx opendevbrowser help` (identical inventories).
@@ -236,13 +237,16 @@ Operational rule:
 - Direct CDP: `connect --ws-endpoint ...` or `connect --host ... --cdp-port ...`
 - Direct release harnesses (`live-regression-direct`, `provider-direct-runs`) are the shipping evidence path; broad matrix wrappers are debug-only and should not replace fresh direct-run artifacts.
 
-Required readiness/status checks:
-- `extensionConnected`
-- `extensionHandshakeComplete`
-- `opsConnected`
-- `canvasConnected`
-- `cdpConnected`
-- `pairingRequired`
+Required extension readiness checks:
+- `data.fingerprintCurrent === true`
+- `data.relay.extensionConnected === true`
+- `data.relay.extensionHandshakeComplete === true`
+
+Diagnostic and lane-specific presence fields:
+- `data.relay.opsConnected`: active `/ops` client presence only. It is not required for normal extension readiness.
+- `data.relay.canvasConnected`: active `/canvas` client presence only.
+- `data.relay.cdpConnected`: active-legacy-session-only. Expected `false` unless a legacy `/cdp` session is connected.
+- `data.relay.pairingRequired`: relay token requirement status.
 
 ## Fast verification commands
 

package/skills/opendevbrowser-best-practices/artifacts/parity-gates.md

@@ -35,6 +35,7 @@ npm run test -- tests/providers-performance-gate.test.ts
 
 - `tests/parity-matrix.test.ts` is contract coverage for CLI/tool/runtime surface parity.
 - `node scripts/provider-direct-runs.mjs --release-gate --out artifacts/release/vX.Y.Z/provider-direct-runs.json` and `node scripts/live-regression-direct.mjs --release-gate --out artifacts/release/vX.Y.Z/live-regression-direct.json` are the live release-proof lane.
+- Treat `artifacts/release/vX.Y.Z/...` paths as local-only release proof outputs unless release policy explicitly requests publication.
 - Treat grouped contract checks and direct-run release proof as complementary, not interchangeable.
 
 ## Release Requirement

package/skills/opendevbrowser-best-practices/artifacts/provider-workflows.md

@@ -84,10 +84,29 @@ Expected output:
 - `workerStats[]` with `{ sessionId, processed, failures }`
 - `frontierStats` and checkpoint state
 
+## Agent Pattern F: Pinterest Multi-Pin Design Harvest
+
+This is guidance for agents using `inspiredesign harvest`; it is not a new product workflow, CLI command, or daemon method.
+
+1. Run query discovery with `--query ... --provider social/pinterest`.
+2. Read `meta.discovery.acceptedUrls` from the JSON output or artifact metadata.
+3. Keep only canonical `https://www.pinterest.com/pin/<id>/` URLs.
+4. Run the canonical harvest command once per selected pin with `--provider social/pinterest --url "https://www.pinterest.com/pin/<id>/"`.
+5. In extension mode, the canonical harvest opens the exact pin in the extension before extracting pin-media bytes, which stabilizes live GIF and video pins.
+6. Trust only outputs with `nextStepGuidance.readiness=ready`, non-empty `ranked-references.json`, and manifest-backed authority from `pin-media-index.json`, `screenshot-index.json`, or `motion-evidence.json`.
+7. Use `media-analysis.json` as the deterministic design-fact surface for trusted saved pin media only; it can guide palette, tone, layout, OCR-free typography structure, text-region layout, and sampled motion decisions, but it never replaces `pin-media-index.json` readiness authority.
+8. Do not claim readable text extraction, exact copy, font families, OCR, model vision, Tesseract, OpenCV, Sharp, browser canvas analysis, new dependencies, or raw `mediaAnalysis` in `canvas-plan.request.json`.
+
+Expected output:
+- one artifact bundle per selected canonical pin
+- selected design directions backed by persisted first-party pin media, screenshot, or motion authority
+- `media-analysis.json` may explain media-derived design facts, while `pin-media-index.json` remains the only pin-media readiness authority
+
 ## Release evidence lane
 
 - Use `node scripts/provider-direct-runs.mjs --release-gate --out artifacts/release/vX.Y.Z/provider-direct-runs.json` for provider live release proof.
 - Use `node scripts/live-regression-direct.mjs --release-gate --out artifacts/release/vX.Y.Z/live-regression-direct.json` for cross-surface live release proof.
+- Treat `artifacts/release/vX.Y.Z/...` paths as local-only release proof outputs unless release policy explicitly requests publication.
 - Treat parity matrix tests as contract coverage, not live release proof.
 - Read `data.guidanceReason` and `data.recommendedNextCommand` in the provider-direct report before escalating a provider failure to manual follow-up.
 

package/skills/opendevbrowser-best-practices/assets/templates/mode-flag-matrix.json

@@ -4,59 +4,69 @@
     "command": "npx opendevbrowser status --daemon --output-format json",
     "required": true,
     "statusExpectations": {
-      "fingerprintCurrent": true
+      "data.fingerprintCurrent": true
     }
   },
   "modes": [
     {
       "name": "managed",
       "launch": "npx opendevbrowser launch --no-extension",
-      "statusProbe": "npx opendevbrowser status --session-id <session-id>",
+      "statusProbe": "npx opendevbrowser status --session-id <session-id> --output-format json",
       "requiredFlags": [
         "--no-extension"
       ],
       "statusExpectations": {
-        "mode": "managed"
+        "data.mode": "managed"
       }
     },
     {
       "name": "extension",
       "launch": "npx opendevbrowser launch --extension-only --wait-for-extension",
-      "statusProbe": "npx opendevbrowser status --daemon",
+      "statusProbe": "npx opendevbrowser status --daemon --output-format json",
       "requiredFlags": [
         "--extension-only",
         "--wait-for-extension"
       ],
       "statusExpectations": {
-        "extensionConnected": true,
-        "extensionHandshakeComplete": true,
-        "opsConnected": true
+        "data.fingerprintCurrent": true,
+        "data.relay.extensionConnected": true,
+        "data.relay.extensionHandshakeComplete": true
+      },
+      "diagnosticPresenceFields": {
+        "data.relay.opsConnected": "presence-only; true only when an /ops client is active",
+        "data.relay.canvasConnected": "lane-specific; true only when a /canvas client is active",
+        "data.relay.cdpConnected": "active-legacy-session-only; false is normal outside legacy /cdp sessions"
       }
     },
     {
       "name": "extension-legacy",
       "launch": "npx opendevbrowser launch --extension-only --extension-legacy --wait-for-extension",
-      "statusProbe": "npx opendevbrowser status --daemon",
+      "statusProbe": "npx opendevbrowser status --daemon --output-format json",
       "requiredFlags": [
         "--extension-only",
         "--extension-legacy",
         "--wait-for-extension"
       ],
       "statusExpectations": {
-        "extensionConnected": true,
-        "extensionHandshakeComplete": true,
-        "cdpConnected": true
+        "data.fingerprintCurrent": true,
+        "data.relay.extensionConnected": true,
+        "data.relay.extensionHandshakeComplete": true
+      },
+      "diagnosticPresenceFields": {
+        "data.relay.cdpConnected": "active-legacy-session-only; true only while the legacy /cdp client is connected",
+        "data.relay.opsConnected": "presence-only; true only when an /ops client is active",
+        "data.relay.canvasConnected": "lane-specific; true only when a /canvas client is active"
       }
     },
     {
       "name": "cdpConnect",
       "connect": "npx opendevbrowser connect --ws-endpoint ws://127.0.0.1:9222/devtools/browser/<id>",
-      "statusProbe": "npx opendevbrowser status --session-id <session-id>",
+      "statusProbe": "npx opendevbrowser status --session-id <session-id> --output-format json",
       "requiredFlags": [
         "--ws-endpoint"
       ],
       "statusExpectations": {
-        "mode": "cdpConnect"
+        "data.mode": "cdpConnect"
       }
     }
   ]