opendevbrowser 0.0.34 → 0.0.35

package/skills/opendevbrowser-best-practices/assets/templates/surface-audit-checklist.json

@@ -3,6 +3,7 @@
   "expectedCounts": {
     "cliCommands": 77,
     "tools": 70,
+    "cliToolPairs": 67,
     "opsCommands": 59,
     "canvasCommands": 35
   },
@@ -34,7 +35,8 @@
     "Mode semantics documented",
     "Generated help first-contact owners documented",
     "Onboarding metadata owner documented",
-    "First-run onboarding proof owner documented"
+    "First-run onboarding proof owner documented",
+    "Hardcoded public-surface counts documented and validator-covered"
   ],
   "firstContactOwners": [
     "src/cli/help.ts",

package/skills/opendevbrowser-best-practices/scripts/odb-workflow.sh

@@ -26,6 +26,30 @@ $CLI_PREFIX status --daemon --output-format json
 EOF
 }
 
+print_extension_readiness() {
+  cat <<EOF
+# Extension readiness preflight:
+$CLI_PREFIX status --daemon --output-format json
+# Continue only when data.fingerprintCurrent === true, data.relay.extensionConnected === true, and data.relay.extensionHandshakeComplete === true.
+# Treat data.relay.opsConnected, data.relay.canvasConnected, and data.relay.cdpConnected as diagnostic or lane-specific presence fields.
+EOF
+}
+
+print_pinterest_multi_pin_harvest_guidance() {
+  cat <<EOF
+# Multi-pin Pinterest harvest agent pattern. This is guidance over inspiredesign harvest, not a standalone product workflow.
+# 1. Run the query discovery command above with --query and --provider social/pinterest.
+# 2. Read meta.discovery.acceptedUrls from the JSON output or artifact metadata.
+# 3. Keep only canonical https://www.pinterest.com/pin/<id>/ URLs.
+# 4. Run one canonical harvest per selected pin:
+$CLI_PREFIX inspiredesign harvest --brief "Premium digital photography studio landing page" --provider social/pinterest --url "https://www.pinterest.com/pin/<pin-id>/" --max-references 1 --visual-evidence required --browser-mode extension --use-cookies --cookie-policy required --challenge-automation-mode browser_with_helper --mode json --output-format json --output-dir "artifacts/pinterest-harvest/<pin-id>"
+# 5. Extension-mode canonical harvest opens the exact canonical pin in the extension before byte-backed pin-media extraction.
+# 6. Trust only outputs with nextStepGuidance.readiness=ready, non-empty ranked-references.json, and pin-media-index.json, screenshot-index.json, or motion-evidence.json authority.
+# 7. Use media-analysis.json for deterministic design facts from trusted saved pin media only. It is not readiness authority, and pin-media-index.json remains the only pin-media readiness authority.
+# 8. Do not claim readable text extraction, exact copy, font families, OCR, model vision, Tesseract, OpenCV, Sharp, browser canvas analysis, new dependencies, or raw mediaAnalysis in canvas-plan.request.json.
+EOF
+}
+
 print_help() {
   cat <<'EOF'
 OpenDevBrowser workflow router
@@ -84,11 +108,17 @@ EOF
     print_daemon_preflight
     cat <<EOF
 # Pair with opendevbrowser-design-agent when the contract will flow into implementation or /canvas work.
-$CLI_PREFIX inspiredesign run --brief "Design a premium docs workspace" --url "https://example.com/reference-a" --url "https://example.com/reference-b" --capture-mode off --include-prototype-guidance --mode json --output-format json
+# When --output-dir is omitted, inspect .opendevbrowser/inspiredesign/<runId> for workflow artifacts.
+# URL-backed inspiredesign run forces deep capture for DOM/layout diagnostics; do not disable capture for URL-backed runs.
+$CLI_PREFIX inspiredesign run --brief "Design a premium docs workspace" --url "https://example.com/reference-a" --url "https://example.com/reference-b" --include-prototype-guidance --mode json --output-format json
+EOF
+    print_extension_readiness
+    cat <<EOF
 $CLI_PREFIX inspiredesign harvest --brief "Premium digital photography studio landing page" --query "Pinterest premium digital photography studio landing page cinematic parallax portfolio" --provider social/pinterest --max-references 5 --visual-evidence required --browser-mode extension --use-cookies --cookie-policy required --challenge-automation-mode browser_with_helper --mode json --output-format json
 # Inspect nextStepGuidance.readiness and doNotProceedIf before Canvas continuation. For non-ready evidence, follow recovery-first guidance.
-# Review visual-evidence.json, screenshot-index.json, ranked-references.json, and meta-prompt.md before design or Canvas work.
+# Review visual-evidence.json, screenshot-index.json, motion-evidence.json, pin-media-evidence.json, pin-media-index.json, media-analysis.json, ranked-references.json, and meta-prompt.md before design or Canvas work.
 EOF
+    print_pinterest_multi_pin_harvest_guidance
     ;;
   parallel-multipage-safe)
     cat <<'EOF'
@@ -134,14 +164,14 @@ EOF
     cat <<EOF
 cat skills/opendevbrowser-best-practices/assets/templates/canvas-handshake-example.json
 cat skills/opendevbrowser-best-practices/assets/templates/canvas-generation-plan.v1.json
-$CLI_PREFIX canvas --command canvas.session.open --params '{"requestId":"req_open_01","browserSessionId":"<browser-session-id>","documentId":null,"repoPath":null,"mode":"dual-track"}'
+$CLI_PREFIX canvas --command canvas.session.open --params '{"requestId":"req_open_01","browserSessionId":"<browser-session-id>","documentId":null,"repoPath":null,"mode":"dual-track"}' --output-format json
 # Read handshake before any mutation. Inspect planStatus, preflightState, generationPlanRequirements.allowedValues, generationPlanIssues, and guidance.recommendedNextCommands.
-$CLI_PREFIX canvas --command canvas.plan.set --params-file skills/opendevbrowser-best-practices/assets/templates/canvas-generation-plan.v1.json
+$CLI_PREFIX canvas --command canvas.plan.set --params-file skills/opendevbrowser-best-practices/assets/templates/canvas-generation-plan.v1.json --output-format json
 # Replace placeholders in the plan file with canvasSessionId, leaseId, and documentId from the open response.
 # If canvas.plan.set succeeds with planStatus=accepted or preflightState=plan_accepted, follow the returned guidance into canvas.document.patch.
 # If canvas.plan.set returns generation_plan_invalid, read guidance.nextStepGuidance, guidance.paramsExamples, guidance.fieldExamples, guidance.validationChecks, and guidance.doNotProceedIf, then repair the params file and retry.
 # Optional diagnostics after generation_plan_invalid:
-# $CLI_PREFIX canvas --command canvas.plan.get --params '{"requestId":"req_plan_get_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","documentId":"<document-id>"}'
+# $CLI_PREFIX canvas --command canvas.plan.get --params '{"requestId":"req_plan_get_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","documentId":"<document-id>"}' --output-format json
 # or re-read with canvas.capabilities.get to inspect generationPlanIssues before resubmitting canvas.plan.set.
 EOF
     ;;
@@ -151,10 +181,10 @@ EOF
 cat skills/opendevbrowser-best-practices/artifacts/canvas-governance-playbook.md
 cat skills/opendevbrowser-best-practices/assets/templates/canvas-feedback-eval.json
 cat skills/opendevbrowser-best-practices/assets/templates/canvas-blocker-checklist.json
-$CLI_PREFIX canvas --command canvas.feedback.poll --params '{"requestId":"req_feedback_01","canvasSessionId":"<canvas-session-id>","documentId":"<document-id>","targetId":"<target-id>","afterCursor":null}'
+$CLI_PREFIX canvas --command canvas.feedback.poll --params '{"requestId":"req_feedback_01","canvasSessionId":"<canvas-session-id>","documentId":"<document-id>","targetId":"<target-id>","afterCursor":null}' --output-format json
 # Verify every feedback item is target-attributed and uses approved categories. If feedback returns preflight-blocker, return to canvas.plan.set first.
-$CLI_PREFIX canvas --command canvas.preview.refresh --params '{"requestId":"req_refresh_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","targetId":"<target-id>","refreshMode":"full"}'
-$CLI_PREFIX canvas --command canvas.document.save --params '{"requestId":"req_save_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","documentId":"<document-id>","repoPath":null}'
+$CLI_PREFIX canvas --command canvas.preview.refresh --params '{"requestId":"req_refresh_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","targetId":"<target-id>","refreshMode":"full"}' --output-format json
+$CLI_PREFIX canvas --command canvas.document.save --params '{"requestId":"req_save_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","documentId":"<document-id>","repoPath":null}' --output-format json
 # Save should fail or warn when requiredBeforeSave governance blocks remain unresolved.
 EOF
     ;;
@@ -168,6 +198,8 @@ EOF
   release-direct-gates)
     print_daemon_preflight
     cat <<'EOF'
+# artifacts/release/vX.Y.Z paths are local-only release proof outputs.
+# Normal omitted workflow outputs persist under .opendevbrowser/<workflow>/<runId>.
 mkdir -p artifacts/release/vX.Y.Z
 node scripts/provider-direct-runs.mjs --release-gate --out artifacts/release/vX.Y.Z/provider-direct-runs.json
 node scripts/live-regression-direct.mjs --release-gate --out artifacts/release/vX.Y.Z/live-regression-direct.json
@@ -197,6 +229,8 @@ OPENCODE_CONFIG_DIR="$WORKDIR/config" CODEX_HOME="$WORKDIR/codex-home" CLAUDECOD
 ./skills/opendevbrowser-product-presentation-asset/scripts/validate-skill-assets.sh
 ./skills/opendevbrowser-research/scripts/validate-skill-assets.sh
 ./skills/opendevbrowser-shopping/scripts/validate-skill-assets.sh
+# Explicit artifacts/skill-runtime-audit outputs are local-only audit proof.
+# Omitted provider workflow outputs persist under .opendevbrowser/<workflow>/<runId>.
 node scripts/skill-runtime-audit.mjs --smoke --out artifacts/skill-runtime-audit/smoke.json
 node scripts/skill-runtime-audit.mjs --out artifacts/skill-runtime-audit/full.json
 EOF
@@ -207,22 +241,29 @@ EOF
 # Public-first YouTube transcript probe
 node $TRANSCRIPT_PROBE_PATH --url "https://www.youtube.com/watch?v=aircAruvnKk" --youtube-mode auto --out artifacts/capability-fix/youtube-transcript-auto.json
 
+# When --output-dir or --out is omitted, inspect .opendevbrowser/<workflow>/<runId> for workflow artifacts.
+
 # Evidence-gated research primitive with explicit public source families
 # Load opendevbrowser-research first, then inspect records.json, context.json, meta.json, and report.md before publishing claims.
 $CLI_PREFIX research run --topic "Chrome extension debugging workflows" --days 30 --sources web,community --mode json --output-format json
 
 # Deterministic shopping reruns with explicit providers
-$CLI_PREFIX shopping run --query "wireless ergonomic mouse" --providers shopping/bestbuy,shopping/ebay --budget 150 --browser-mode managed --mode json --output-format json
-$CLI_PREFIX shopping run --query "27 inch 4k monitor" --providers shopping/bestbuy,shopping/ebay --budget 350 --sort lowest_price --browser-mode managed --mode json --output-format json
+$CLI_PREFIX shopping run --query "wireless ergonomic mouse" --providers shopping/bestbuy,shopping/ebay --budget 150 --browser-mode managed --use-cookies --challenge-automation-mode browser_with_helper --mode json --output-format json
+$CLI_PREFIX shopping run --query "27 inch 4k monitor" --providers shopping/bestbuy,shopping/ebay --budget 350 --sort lowest_price --browser-mode managed --use-cookies --challenge-automation-mode browser_with_helper --mode json --output-format json
 
 # Public-reference inspiredesign contract synthesis
-$CLI_PREFIX inspiredesign run --brief "Design a premium docs workspace" --url "https://example.com/reference-a" --url "https://example.com/reference-b" --capture-mode off --include-prototype-guidance --mode json --output-format json
-
+$CLI_PREFIX inspiredesign run --brief "Design a premium docs workspace" --url "https://example.com/reference-a" --url "https://example.com/reference-b" --include-prototype-guidance --mode json --output-format json
+EOF
+    print_extension_readiness
+    cat <<EOF
 # Browser-native Pinterest recipe. Continue only when nextStepGuidance.readiness is ready.
 $CLI_PREFIX inspiredesign harvest --brief "Premium digital photography studio landing page" --query "Pinterest premium digital photography studio landing page cinematic parallax portfolio" --provider social/pinterest --max-references 5 --visual-evidence required --browser-mode extension --use-cookies --cookie-policy required --challenge-automation-mode browser_with_helper --mode json --output-format json
+EOF
+    print_pinterest_multi_pin_harvest_guidance
+    cat <<EOF
 
 # Region note: advisory unless output reports meta.selection.region_authoritative=true
-$CLI_PREFIX shopping run --query "wireless earbuds" --providers shopping/amazon --region us --browser-mode managed --mode json --output-format json
+$CLI_PREFIX shopping run --query "wireless earbuds" --providers shopping/amazon --region us --browser-mode managed --use-cookies --challenge-automation-mode browser_with_helper --mode json --output-format json
 EOF
     ;;
   surface-audit)
@@ -236,24 +277,24 @@ EOF
   ops-channel-check)
     cat <<EOF
 $CLI_PREFIX serve
-# Daemon preflight for daemon-backed workflows:
-$CLI_PREFIX status --daemon --output-format json
-# Continue only when data.fingerprintCurrent === true.
+EOF
+    print_daemon_preflight
+    cat <<EOF
 $CLI_PREFIX launch --extension-only --wait-for-extension --output-format json
 $CLI_PREFIX status --daemon --output-format json
-# Verify fingerprintCurrent=true, opsConnected=true, and extensionHandshakeComplete=true
+# Verify data.fingerprintCurrent=true, data.relay.extensionConnected=true, and data.relay.extensionHandshakeComplete=true after launch. Treat data.relay.opsConnected as diagnostic presence only.
 cat skills/opendevbrowser-best-practices/assets/templates/ops-request-envelope.json
 EOF
     ;;
   cdp-channel-check)
     cat <<EOF
 $CLI_PREFIX serve
-# Daemon preflight for daemon-backed workflows:
-$CLI_PREFIX status --daemon --output-format json
-# Continue only when data.fingerprintCurrent === true.
+EOF
+    print_daemon_preflight
+    cat <<EOF
 $CLI_PREFIX launch --extension-only --extension-legacy --wait-for-extension --output-format json
 $CLI_PREFIX status --daemon --output-format json
-# Verify fingerprintCurrent=true and cdpConnected=true while legacy session is active
+# Verify data.fingerprintCurrent=true, data.relay.extensionConnected=true, and data.relay.extensionHandshakeComplete=true after launch. data.relay.cdpConnected is active-legacy-session-only and true only while the legacy /cdp session is active.
 cat skills/opendevbrowser-best-practices/assets/templates/cdp-forward-envelope.json
 EOF
     ;;

package/skills/opendevbrowser-best-practices/scripts/resolve-odb-cli.sh

@@ -98,3 +98,31 @@ resolve_odb_cli() {
 }
 
 resolve_odb_cli
+
+require_odb_daemon_current() {
+  local status_json
+
+  if ! status_json="$("${ODB_CLI[@]}" status --daemon --output-format json)"; then
+    echo "OpenDevBrowser daemon preflight failed. Run: ${ODB_CLI[*]} status --daemon --output-format json" >&2
+    return 1
+  fi
+
+  if ! printf '%s\n' "$status_json" | node -e '
+const fs = require("node:fs");
+const input = fs.readFileSync(0, "utf8");
+let payload;
+try {
+  payload = JSON.parse(input);
+} catch {
+  process.exit(1);
+}
+if (payload?.data?.fingerprintCurrent !== true) {
+  process.exit(1);
+}
+'; then
+    echo "OpenDevBrowser daemon is not current. Expected data.fingerprintCurrent === true from:" >&2
+    echo "${ODB_CLI[*]} status --daemon --output-format json" >&2
+    printf '%s\n' "$status_json" >&2
+    return 1
+  fi
+}

package/skills/opendevbrowser-best-practices/scripts/validate-skill-assets.sh

@@ -68,8 +68,16 @@ const workflowMarkers = [
   "inspiredesign run",
   "inspiredesign harvest",
   "social/pinterest",
+  "meta.discovery.acceptedUrls",
+  "Multi-pin Pinterest harvest agent pattern",
+  "one canonical harvest per selected pin",
+  "opens the exact canonical pin in the extension",
   "nextStepGuidance.readiness",
   "visual-evidence.json",
+  "pin-media-index.json",
+  "media-analysis.json",
+  "deterministic design facts from trusted saved pin media",
+  "raw mediaAnalysis in canvas-plan.request.json",
   "--include-prototype-guidance",
   "canvas-preflight",
   "canvas-feedback-eval",
@@ -98,6 +106,13 @@ const parityGateMarkers = [
 
 const providerWorkflowPath = "artifacts/provider-workflows.md";
 const providerWorkflowMarkers = [
+  "Agent Pattern F: Pinterest Multi-Pin Design Harvest",
+  "meta.discovery.acceptedUrls",
+  "not a new product workflow",
+  "opens the exact pin in the extension",
+  "media-analysis.json",
+  "`pin-media-index.json` remains the only pin-media readiness authority",
+  "raw `mediaAnalysis` in `canvas-plan.request.json`",
   "## Release evidence lane",
   "node scripts/provider-direct-runs.mjs --release-gate --out artifacts/release/vX.Y.Z/provider-direct-runs.json",
   "node scripts/live-regression-direct.mjs --release-gate --out artifacts/release/vX.Y.Z/live-regression-direct.json",

package/skills/opendevbrowser-best-practices/scripts/validator-fixture-cli.sh

@@ -88,6 +88,19 @@ if (!domain || !command) {
 
 const flags = parseFlags(rest);
 
+if (domain === "status") {
+  emitJson({
+    data: {
+      fingerprintCurrent: true,
+      relay: {
+        extensionConnected: true,
+        extensionHandshakeComplete: true
+      }
+    }
+  });
+  process.exit(0);
+}
+
 if (domain === "research" && command === "run") {
   const topic = String(flags.topic || "fixture topic");
   const days = String(flags.days || "30");

package/skills/opendevbrowser-design-agent/SKILL.md

@@ -169,6 +169,7 @@ Use when a redesign needs external references or when the brief explicitly asks
 - Start with `artifacts/research-harvest-workflow.md`.
 - Capture `3` to `5` live references with OpenDevBrowser.
 - For Pinterest, use the browser-native `social/pinterest` recipe with extension mode and cookies instead of treating Pinterest as a default full provider.
+- Before extension-mode Pinterest harvests, preflight `npx opendevbrowser status --daemon --output-format json` and continue only when `data.fingerprintCurrent === true`, `data.relay.extensionConnected === true`, and `data.relay.extensionHandshakeComplete === true`.
 - Inspect `nextStepGuidance.readiness`, `doNotProceedIf`, and recovery commands before using the bundle.
 - Record ready evidence in `assets/templates/reference-pattern-board.v1.json`.
 - Turn the synthesis into contract deltas before implementation.
@@ -188,6 +189,7 @@ Use when starting from screenshots, mocks, or an existing page.
 Use when the task should run through the design canvas.
 
 - Start with `canvas.session.open`; use `canvas.capabilities.get` only after you have a `canvasSessionId`.
+- Use `--output-format json` for Canvas CLI commands whenever you read returned IDs, statuses, guidance, or follow-up fields.
 - Read the handshake and inspect `planStatus`, `preflightState`, `generationPlanRequirements.allowedValues`, `generationPlanIssues`, `guidance.recommendedNextCommands`, `guidance.nextStepGuidance`, params examples, field examples, validation checks, and do-not-proceed blockers before choosing the next command.
 - Treat `preflightState="handshake_read"` as the normal first-step checkpoint before `canvas.plan.set`; if the handshake already reports `plan_invalid`, repair the plan instead of mutating.
 - Fill the full design contract and extract the `generationPlan`.

package/skills/opendevbrowser-design-agent/artifacts/design-workflows.md

@@ -2,7 +2,7 @@
 
 This file turns the design-agent skill into repeatable execution paths.
 
-## Workflow A — Contract-First Frontend Delivery
+## Workflow A - Contract-First Frontend Delivery
 
 Use when the task starts from a PRD, issue, or user request.
 
@@ -37,7 +37,7 @@ Use when the task starts from a PRD, issue, or user request.
 16. Implement the smallest coherent slice that satisfies the contract.
 17. Validate in an isolated fixture first, then in a real browser before declaring the work complete.
 
-## Workflow B — Screenshot Or Existing-Page Audit
+## Workflow B - Screenshot Or Existing-Page Audit
 
 Use when a screenshot, mock, or live page is the starting point.
 
@@ -71,7 +71,7 @@ Use when a screenshot, mock, or live page is the starting point.
 8. Record the audit in `assets/templates/design-audit-report.v1.md`.
 9. Implement changes only after the contract reflects the intended end state.
 
-## Workflow C — `/canvas` Contract-Governed Iteration
+## Workflow C - `/canvas` Contract-Governed Iteration
 
 Use when the work should flow through the OpenDevBrowser design canvas.
 
@@ -88,22 +88,24 @@ Use when the work should flow through the OpenDevBrowser design canvas.
 
 Canonical command order:
 
+Use `--output-format json` whenever returned IDs, statuses, guidance, or follow-up fields are read from Canvas command output.
+
 ```bash
-npx opendevbrowser canvas --command canvas.session.open --params '{"requestId":"req_open_01","browserSessionId":"<browser-session-id>","documentId":null,"repoPath":null,"mode":"dual-track"}'
+npx opendevbrowser canvas --command canvas.session.open --params '{"requestId":"req_open_01","browserSessionId":"<browser-session-id>","documentId":null,"repoPath":null,"mode":"dual-track"}' --output-format json
 # Inspect planStatus, preflightState, generationPlanRequirements.allowedValues, generationPlanIssues, guidance.recommendedNextCommands, guidance.nextStepGuidance, guidance.paramsExamples, guidance.fieldExamples, guidance.validationChecks, and guidance.doNotProceedIf before continuing.
-npx opendevbrowser canvas --command canvas.plan.set --params-file ./tmp/canvas-plan.json
+npx opendevbrowser canvas --command canvas.plan.set --params-file ./tmp/canvas-plan.json --output-format json
 # If canvas.plan.set succeeds with planStatus=accepted or preflightState=plan_accepted, follow the returned guidance into canvas.document.patch.
 # If canvas.plan.set returns generation_plan_invalid, repair ./tmp/canvas-plan.json from guidance.paramsExamples before retrying.
 # Optional diagnostics after generation_plan_invalid:
-# npx opendevbrowser canvas --command canvas.plan.get --params '{"requestId":"req_plan_get_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","documentId":"<document-id>"}'
+# npx opendevbrowser canvas --command canvas.plan.get --params '{"requestId":"req_plan_get_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","documentId":"<document-id>"}' --output-format json
 # or re-read with canvas.capabilities.get to inspect generationPlanIssues before resubmitting canvas.plan.set.
-npx opendevbrowser canvas --command canvas.document.patch --params-file ./tmp/canvas-patch.json
-npx opendevbrowser canvas --command canvas.preview.render --params '{"requestId":"req_preview_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","targetId":"<target-id>","projection":"canvas_html"}'
-npx opendevbrowser canvas --command canvas.feedback.poll --params '{"requestId":"req_feedback_01","canvasSessionId":"<canvas-session-id>","documentId":"<document-id>","targetId":"<target-id>","afterCursor":null}'
-npx opendevbrowser canvas --command canvas.document.save --params '{"requestId":"req_save_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","documentId":"<document-id>","repoPath":null}'
+npx opendevbrowser canvas --command canvas.document.patch --params-file ./tmp/canvas-patch.json --output-format json
+npx opendevbrowser canvas --command canvas.preview.render --params '{"requestId":"req_preview_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","targetId":"<target-id>","projection":"canvas_html"}' --output-format json
+npx opendevbrowser canvas --command canvas.feedback.poll --params '{"requestId":"req_feedback_01","canvasSessionId":"<canvas-session-id>","documentId":"<document-id>","targetId":"<target-id>","afterCursor":null}' --output-format json
+npx opendevbrowser canvas --command canvas.document.save --params '{"requestId":"req_save_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","documentId":"<document-id>","repoPath":null}' --output-format json
 ```
 
-## Workflow D — Real-Surface Validation
+## Workflow D - Real-Surface Validation
 
 Use when design quality must be demonstrated, not inferred.
 
@@ -123,7 +125,7 @@ Use when design quality must be demonstrated, not inferred.
    - no console or network regressions caused by the UI change
 7. If parity matters, repeat across supported surfaces before sign-off.
 
-## Workflow E — Performance Audit
+## Workflow E - Performance Audit
 
 Use when the screen is visually correct but interaction quality is poor.
 
@@ -143,7 +145,7 @@ npx opendevbrowser screenshot --session-id <session-id>
 npx opendevbrowser debug-trace-snapshot --session-id <session-id>
 ```
 
-## Workflow F — Ship Audit
+## Workflow F - Ship Audit
 
 Use after implementation and before final sign-off.
 

package/skills/opendevbrowser-design-agent/artifacts/isolated-preview-validation.md

@@ -62,7 +62,7 @@ npx opendevbrowser launch --no-extension --start-url http://127.0.0.1:3000/previ
 npx opendevbrowser snapshot --session-id <session-id>
 npx opendevbrowser screenshot --session-id <session-id>
 npx opendevbrowser debug-trace-snapshot --session-id <session-id>
-npx opendevbrowser canvas --command canvas.preview.render --params '{"canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","targetId":"<target-id>","projection":"canvas_html"}'
+npx opendevbrowser canvas --command canvas.preview.render --params '{"canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","targetId":"<target-id>","projection":"canvas_html"}' --output-format json
 ```
 
 Use the same fixture states as the contract when comparing preview and integrated behavior.

package/skills/opendevbrowser-design-agent/artifacts/research-harvest-workflow.md

@@ -29,12 +29,16 @@ npx opendevbrowser inspiredesign harvest \
   --max-references 5 \
   --visual-evidence required \
   --browser-mode managed \
-  --mode json
+  --mode json \
+  --output-format json
 ```
 
-Use the browser-native Pinterest site recipe when the brief specifically needs logged-in Pinterest search. Pinterest is not a default full social provider, and the workflow should not widen to unrelated sources without user confirmation:
+Use the browser-native Pinterest site recipe when the brief specifically needs logged-in Pinterest search. Pinterest is not a default full social provider, and the workflow should not widen to unrelated sources without user confirmation.
+
+Before the extension-mode Pinterest harvest, preflight the daemon with JSON status output and continue only when `data.fingerprintCurrent === true`, `data.relay.extensionConnected === true`, and `data.relay.extensionHandshakeComplete === true`:
 
 ```bash
+npx opendevbrowser status --daemon --output-format json
 npx opendevbrowser inspiredesign harvest \
   --brief "Premium digital photography studio landing page" \
   --query "Pinterest premium digital photography studio landing page cinematic parallax portfolio" \
@@ -57,7 +61,8 @@ npx opendevbrowser inspiredesign harvest \
   --url https://example.com/reference-a \
   --url https://example.com/reference-b \
   --visual-evidence required \
-  --mode json
+  --mode json \
+  --output-format json
 ```
 
 Harvest defaults:
@@ -82,11 +87,13 @@ Then inspect these files before `/canvas` or code changes:
 1. `advanced-brief.md` for the reference-first creative brief.
 2. `ranked-references.json` for rank, score, confidence, visual strengths, visual risks, rejected references, and selection reasons.
 3. `visual-evidence.json` and `screenshot-index.json` for artifact-relative PNG paths, hashes, byte counts, viewport metadata when available, provenance, and warnings.
-4. PNG files under `visual-evidence/<referenceId>/viewport.png` for actual visual review.
-5. `meta-prompt.md` for borrow guidance, reject guidance, motion posture, accessibility constraints, no-copy warning, and validation gates.
-6. `canvas-plan.request.json` and `design-agent-handoff.json` only after the visual synthesis is accepted and `nextStepGuidance.readiness` is `ready`.
+4. `motion-evidence.json` for screencast replay and preview paths when motion evidence is captured.
+5. `pin-media-evidence.json` and `pin-media-index.json` for persisted first-party Pinterest pin media proof. Remote media URLs alone are not proof.
+6. PNG files under `visual-evidence/<referenceId>/viewport.png` and pin-media files under `pin-media-evidence/<referenceId>/` for actual visual review.
+7. `meta-prompt.md` for borrow guidance, reject guidance, motion posture, accessibility constraints, no-copy warning, and validation gates.
+8. `canvas-plan.request.json` and `design-agent-handoff.json` only after the visual synthesis is accepted and `nextStepGuidance.readiness` is `ready`.
 
-JSON files are metadata-only. They must not contain base64 screenshots, absolute temp paths, full DOM, or full snapshot text.
+JSON files are metadata-only. They must not contain base64 screenshots, absolute temp paths, full DOM, full snapshot text, or remote media as product-ready proof.
 
 ## Manual Evidence Fallback
 

package/skills/opendevbrowser-design-agent/assets/templates/reference-pattern-board.v1.json

@@ -17,6 +17,7 @@
         "dom",
         "visual"
       ],
+      "evidenceAuthority": "ranked_reference",
       "intentMatched": true,
       "layoutRecipe": "",
       "contentHierarchy": [],

package/skills/opendevbrowser-design-agent/scripts/design-workflow.sh

@@ -67,6 +67,9 @@ cat skills/opendevbrowser-design-agent/assets/templates/reference-pattern-board.
 cat skills/opendevbrowser-design-agent/artifacts/external-pattern-synthesis.md
 cat skills/opendevbrowser-design-agent/artifacts/component-pattern-index.md
 cat skills/opendevbrowser-design-agent/artifacts/existing-surface-adaptation.md
+# Daemon preflight for extension-mode Pinterest harvest:
+$CLI_PREFIX status --daemon --output-format json
+# Continue only when data.fingerprintCurrent === true, data.relay.extensionConnected === true, and data.relay.extensionHandshakeComplete === true.
 $CLI_PREFIX inspiredesign harvest --brief "Premium digital photography studio landing page" --query "Pinterest premium digital photography studio landing page cinematic parallax portfolio" --provider social/pinterest --max-references 5 --visual-evidence required --browser-mode extension --use-cookies --cookie-policy required --challenge-automation-mode browser_with_helper --mode json --output-format json
 # Inspect nextStepGuidance.readiness and doNotProceedIf first. Use recovery-first guidance unless readiness is ready.
 $CLI_PREFIX launch --no-extension --start-url https://example.com
@@ -102,19 +105,19 @@ cat skills/opendevbrowser-design-agent/artifacts/design-contract-playbook.md
 cat skills/opendevbrowser-best-practices/artifacts/canvas-governance-playbook.md
 cat skills/opendevbrowser-best-practices/assets/templates/canvas-handshake-example.json
 ./skills/opendevbrowser-design-agent/scripts/extract-canvas-plan.sh ./tmp/design-contract.json > ./tmp/canvas-plan.json
-$CLI_PREFIX canvas --command canvas.session.open --params '{"requestId":"req_open_01","browserSessionId":"<browser-session-id>","documentId":null,"repoPath":null,"mode":"dual-track"}'
+$CLI_PREFIX canvas --command canvas.session.open --params '{"requestId":"req_open_01","browserSessionId":"<browser-session-id>","documentId":null,"repoPath":null,"mode":"dual-track"}' --output-format json
 # Inspect planStatus, preflightState, generationPlanRequirements.allowedValues, generationPlanIssues, guidance.recommendedNextCommands, guidance.nextStepGuidance, guidance.paramsExamples, guidance.fieldExamples, guidance.validationChecks, and guidance.doNotProceedIf before continuing.
 # Treat preflightState=handshake_read as the normal first-step checkpoint before canvas.plan.set.
-$CLI_PREFIX canvas --command canvas.plan.set --params-file ./tmp/canvas-plan.json
+$CLI_PREFIX canvas --command canvas.plan.set --params-file ./tmp/canvas-plan.json --output-format json
 # If canvas.plan.set succeeds with planStatus=accepted or preflightState=plan_accepted, follow the returned guidance into canvas.document.patch.
 # If canvas.plan.set returns generation_plan_invalid, repair ./tmp/canvas-plan.json from guidance.paramsExamples before retrying.
 # Optional diagnostics after generation_plan_invalid:
-# $CLI_PREFIX canvas --command canvas.plan.get --params '{"requestId":"req_plan_get_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","documentId":"<document-id>"}'
+# $CLI_PREFIX canvas --command canvas.plan.get --params '{"requestId":"req_plan_get_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","documentId":"<document-id>"}' --output-format json
 # or re-read with canvas.capabilities.get to inspect generationPlanIssues before resubmitting canvas.plan.set.
-$CLI_PREFIX canvas --command canvas.document.patch --params-file ./tmp/canvas-patch.json
-$CLI_PREFIX canvas --command canvas.preview.render --params '{"requestId":"req_preview_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","targetId":"<target-id>","prototypeId":"<prototype-id>"}'
-$CLI_PREFIX canvas --command canvas.feedback.poll --params '{"requestId":"req_feedback_01","canvasSessionId":"<canvas-session-id>","documentId":"<document-id>","targetId":"<target-id>","afterCursor":null}'
-$CLI_PREFIX canvas --command canvas.document.save --params '{"requestId":"req_save_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","documentId":"<document-id>","repoPath":null}'
+$CLI_PREFIX canvas --command canvas.document.patch --params-file ./tmp/canvas-patch.json --output-format json
+$CLI_PREFIX canvas --command canvas.preview.render --params '{"requestId":"req_preview_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","targetId":"<target-id>","prototypeId":"<prototype-id>"}' --output-format json
+$CLI_PREFIX canvas --command canvas.feedback.poll --params '{"requestId":"req_feedback_01","canvasSessionId":"<canvas-session-id>","documentId":"<document-id>","targetId":"<target-id>","afterCursor":null}' --output-format json
+$CLI_PREFIX canvas --command canvas.document.save --params '{"requestId":"req_save_01","canvasSessionId":"<canvas-session-id>","leaseId":"<lease-id>","documentId":"<document-id>","repoPath":null}' --output-format json
 EOF
     ;;
   real-surface-validation)

package/skills/opendevbrowser-motion-design/SKILL.md

@@ -41,7 +41,7 @@ Use this skill when a task asks for animation, motion language, transition syste
 
 ## InspireDesign Harvest Inputs
 
-When an InspireDesign harvest bundle is available, inspect `nextStepGuidance.readiness` and `doNotProceedIf` before selecting motion patterns. Read `meta-prompt.md`, `ranked-references.json`, `visual-evidence.json`, `screenshot-index.json`, and the referenced PNG files only after the bundle is ready or while following recovery guidance. Treat harvested motion posture as evidence-backed design intent, not permission to add dependencies or copy source-brand choreography. Carry accepted cues into the motion contract with explicit reduced-motion behavior, device posture, frame budget, and temporal proof requirements.
+When an InspireDesign harvest bundle is available, inspect `nextStepGuidance.readiness` and `doNotProceedIf` before selecting motion patterns. Read `meta-prompt.md`, `ranked-references.json`, `visual-evidence.json`, `screenshot-index.json`, `motion-evidence.json`, `pin-media-evidence.json`, `pin-media-index.json`, and the referenced PNG or pin-media files only after the bundle is ready or while following recovery guidance. Treat harvested motion posture as evidence-backed design intent, not permission to add dependencies or copy source-brand choreography. Pinterest video posters can support still-image cues through pin-media evidence, but motion timing still requires screencast authority. Carry accepted cues into the motion contract with explicit reduced-motion behavior, device posture, frame budget, and temporal proof requirements.
 
 ## Motion Contract
 

package/skills/opendevbrowser-product-presentation-asset/SKILL.md

@@ -65,11 +65,12 @@ The `render-video-brief.sh` helper adds:
 ## What the User Should Do
 
 1. Pick product URL or product name.
-2. Run collection workflow and confirm output pack path.
-3. Review generated manifest/copy/features for accuracy and check whether the pack is visual-ready or metadata-first.
-4. Run `./skills/opendevbrowser-product-presentation-asset/scripts/render-video-brief.sh` to generate production instructions and visual sourcing notes.
+2. Before daemon-backed `product-video run` workflows, run `opendevbrowser status --daemon --output-format json` and continue only when `data.fingerprintCurrent === true`.
+3. Run collection workflow and confirm output pack path.
+4. Review generated manifest/copy/features for accuracy and check whether the pack is visual-ready or metadata-first.
+5. Run `./skills/opendevbrowser-product-presentation-asset/scripts/render-video-brief.sh` to generate production instructions and visual sourcing notes.
 	Canonical helper path: `./skills/opendevbrowser-product-presentation-asset/scripts/render-video-brief.sh`.
-5. If no visuals were captured, source or capture visuals before handing the brief to the editor/creator pipeline.
+6. If no visuals were captured, source or capture visuals before handing the brief to the editor/creator pipeline.
 
 ## Parallel Multitab Alignment
 

package/skills/opendevbrowser-product-presentation-asset/scripts/capture-screenshots.sh

@@ -9,5 +9,6 @@ fi
 script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 # shellcheck source=../../opendevbrowser-best-practices/scripts/resolve-odb-cli.sh
 source "$script_dir/../../opendevbrowser-best-practices/scripts/resolve-odb-cli.sh"
+require_odb_daemon_current
 
 "${ODB_CLI[@]}" product-video run --product-url "$1" --include-screenshots --include-all-images=false

package/skills/opendevbrowser-product-presentation-asset/scripts/collect-product.sh

@@ -10,6 +10,7 @@ VALUE="$1"
 script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 # shellcheck source=../../opendevbrowser-best-practices/scripts/resolve-odb-cli.sh
 source "$script_dir/../../opendevbrowser-best-practices/scripts/resolve-odb-cli.sh"
+require_odb_daemon_current
 
 if [[ "$VALUE" == http* ]]; then
   "${ODB_CLI[@]}" product-video run --product-url "$VALUE"

package/skills/opendevbrowser-product-presentation-asset/scripts/download-images.sh

@@ -9,5 +9,6 @@ fi
 script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 # shellcheck source=../../opendevbrowser-best-practices/scripts/resolve-odb-cli.sh
 source "$script_dir/../../opendevbrowser-best-practices/scripts/resolve-odb-cli.sh"
+require_odb_daemon_current
 
 "${ODB_CLI[@]}" product-video run --product-url "$1" --include-all-images --include-screenshots=false

package/skills/opendevbrowser-product-presentation-asset/scripts/validate-skill-assets.sh

@@ -62,6 +62,10 @@ for rel in scripts/collect-product.sh scripts/capture-screenshots.sh scripts/dow
       echo "Workflow wrapper missing ODB_CLI invocation: $rel" >&2
       status=1
     fi
+    if [[ "$rel" == "scripts/collect-product.sh" || "$rel" == "scripts/capture-screenshots.sh" || "$rel" == "scripts/download-images.sh" || "$rel" == "scripts/write-manifest.sh" ]] && ! grep -Fq "require_odb_daemon_current" "$root/$rel"; then
+      echo "Workflow wrapper missing daemon fingerprint preflight: $rel" >&2
+      status=1
+    fi
   fi
 done
 

package/skills/opendevbrowser-product-presentation-asset/scripts/write-manifest.sh

@@ -13,6 +13,7 @@ mkdir -p "$OUTDIR"
 script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 # shellcheck source=../../opendevbrowser-best-practices/scripts/resolve-odb-cli.sh
 source "$script_dir/../../opendevbrowser-best-practices/scripts/resolve-odb-cli.sh"
+require_odb_daemon_current
 
 cmd=("${ODB_CLI[@]}" product-video run --output-dir "$OUTDIR" --output-format json)
 if [[ "$VALUE" == http* ]]; then

package/skills/opendevbrowser-research/SKILL.md

@@ -38,6 +38,7 @@ Load this skill before research tasks. Use it to plan source families, gather pr
 
 ## Core Rules
 
+- Before daemon-backed `research run` workflows, run `opendevbrowser status --daemon --output-format json` and continue only when `data.fingerprintCurrent === true`.
 - Define timebox first (`--days` or `--from/--to`).
 - Choose explicit source families before invoking the CLI primitive: `web`, `community`, `social`, `shopping`, or a deliberate combination such as `web,community`.
 - Treat `auto` as a source-family selector, not a reliability guarantee.

package/skills/opendevbrowser-research/scripts/render-output.sh

@@ -12,5 +12,6 @@ MODE="$2"
 script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 # shellcheck source=../../opendevbrowser-best-practices/scripts/resolve-odb-cli.sh
 source "$script_dir/../../opendevbrowser-best-practices/scripts/resolve-odb-cli.sh"
+require_odb_daemon_current
 
 "${ODB_CLI[@]}" research run --topic "$TOPIC" --mode "$MODE"

package/skills/opendevbrowser-research/scripts/run-research.sh

@@ -14,6 +14,7 @@ SOURCES="${4:-}"
 script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 # shellcheck source=../../opendevbrowser-best-practices/scripts/resolve-odb-cli.sh
 source "$script_dir/../../opendevbrowser-best-practices/scripts/resolve-odb-cli.sh"
+require_odb_daemon_current
 
 cmd=("${ODB_CLI[@]}" research run --topic "$TOPIC" --days "$DAYS" --mode "$MODE")
 if [[ -n "$SOURCES" ]]; then

package/skills/opendevbrowser-research/scripts/validate-skill-assets.sh

@@ -153,6 +153,10 @@ for rel in scripts/run-research.sh scripts/render-output.sh scripts/write-artifa
       echo "Workflow wrapper missing ODB_CLI invocation: $rel" >&2
       status=1
     fi
+    if ! grep -Fq "require_odb_daemon_current" "$root/$rel"; then
+      echo "Workflow wrapper missing daemon fingerprint preflight: $rel" >&2
+      status=1
+    fi
   fi
 done
 

package/skills/opendevbrowser-research/scripts/write-artifacts.sh

@@ -12,6 +12,7 @@ OUTDIR="$2"
 script_dir="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 # shellcheck source=../../opendevbrowser-best-practices/scripts/resolve-odb-cli.sh
 source "$script_dir/../../opendevbrowser-best-practices/scripts/resolve-odb-cli.sh"
+require_odb_daemon_current
 
 json_output="$("${ODB_CLI[@]}" research run --topic "$TOPIC" --mode path --output-dir "$OUTDIR" --output-format json)"
 printf '%s\n' "$json_output"