prizmkit 1.1.110 → 1.1.112

package/bundled/VERSION.json

@@ -1,5 +1,5 @@
 {
-  "frameworkVersion": "1.1.110",
-  "bundledAt": "2026-07-08T05:42:13.015Z",
-  "bundledFrom": "84797b8"
+  "frameworkVersion": "1.1.112",
+  "bundledAt": "2026-07-08T16:44:52.355Z",
+  "bundledFrom": "544bc17"
 }

package/bundled/agents/prizm-dev-team-reviewer.md

@@ -25,6 +25,19 @@ You are the team's "senior engineer doing code review" — you diagnose problems
 2. If no `context-snapshot.md`: read `spec.md`, `plan.md` from the artifact directory, then `.prizmkit/prizm-docs/root.prizm` and relevant L1/L2 docs
 3. Identify changed files from `## Implementation Log` or completed tasks in plan.md
 
+**Active Checkout Requirement**: You must review only the active checkout provided by the orchestrator. `/prizmkit-code-review` does not support worktree review.
+
+The orchestrator must provide the expected active checkout git top-level in the workspace context. Before reviewing, verify that your current git top-level matches that expected active checkout.
+
+If you detect that you are running inside a temporary worktree, `.claude/worktrees/...`, `.prizmkit/state/worktrees/...`, a remote workspace, a copied checkout, or any checkout whose git top-level does not match the orchestrator-provided active checkout root:
+- Stop immediately.
+- Do not read or review files.
+- Do not produce normal review findings.
+- Report `WRONG_CHECKOUT`.
+- State that `/prizmkit-code-review` cannot continue because the reviewer subagent was not started in the active checkout/no-worktree mode required by this skill.
+
+Do NOT request or create `.claude/worktrees/...` tool worktrees. Do NOT re-discover or re-index the whole repository; use the orchestrator-provided context as your review scope and request only targeted file reads.
+
 **File Reading Rule**: Read ONLY files listed in the Implementation Log for diagnosis — do not explore unrelated files. Exception: during Fix Strategy Formulation, you MAY read additional files to trace impact (callers, dependents, shared patterns).
 
 ### Review Workflow
@@ -74,6 +87,8 @@ When Dev has applied fixes and returns for re-review:
 - Do not modify source files to fix issues — produce Fix Instructions for Dev instead
 - **Do NOT run test suites** — the Orchestrator handles testing. You review code, not execute tests.
 - Do NOT re-read source files already listed in context-snapshot.md Section 4 File Manifest unless you need a specific code detail for a finding
+- **Do NOT request or create worktrees** (`.claude/worktrees/...` or similar) — you review the active checkout's changes using the orchestrator-provided workspace context
+- **Do NOT re-discover or broadly re-index the repository** — the orchestrator has already captured the diff scope; request only targeted file reads for lines you need
 
 ### Behavioral Rules
 

package/bundled/dev-pipeline/prizmkit_runtime/interoperability.py

@@ -33,6 +33,7 @@ UTILITY_ENTRYPOINTS = {
 
 UTILITY_LIBRARY_ONLY = {
     "continuation.py": "shared continuation helpers imported by prompt generators",
+    "prompt_framework.py": "shared prompt rendering and checkpoint helpers imported by prompt generators",
     "utils.py": "shared utility helpers imported by runtime scripts",
 }
 

package/bundled/dev-pipeline/scripts/generate-bootstrap-prompt.py

@@ -29,6 +29,7 @@ import sys
 
 from utils import enrich_global_context, helper_replacements, load_json_file, resolve_prompt_platform, setup_logging
 from continuation import add_continuation_args, append_continuation_handoff, is_continuation
+from prompt_framework import browser_enabled_from_item, detect_dev_server_port
 
 
 DEFAULT_MAX_RETRIES = 3
@@ -190,9 +191,42 @@ def detect_test_commands(project_root):
     """
     test_commands = []
 
-    # Check for npm/package.json
-    if os.path.exists(os.path.join(project_root, "package.json")):
-        test_commands.append("npm test")
+    # Check for npm/package.json — use content-aware detection
+    pkg_json_path = os.path.join(project_root, "package.json")
+    if os.path.exists(pkg_json_path):
+        try:
+            with open(pkg_json_path, "r", encoding="utf-8") as f:
+                pkg_data = json.load(f)
+            scripts = pkg_data.get("scripts", {}) if isinstance(pkg_data, dict) else {}
+
+            # Detect package manager from lockfiles
+            if os.path.exists(os.path.join(project_root, "pnpm-lock.yaml")):
+                pm_cmd = "pnpm"
+            elif os.path.exists(os.path.join(project_root, "yarn.lock")):
+                pm_cmd = "yarn"
+            else:
+                pm_cmd = "npm"
+
+            # Find best test script: prefer "test", then "test:unit",
+            # then first script matching test-related patterns
+            if "test" in scripts:
+                test_commands.append("{} test".format(pm_cmd))
+            elif "test:unit" in scripts:
+                test_commands.append("{} run test:unit".format(pm_cmd))
+            else:
+                # Search for any test-like script name
+                test_like = None
+                for script_name in sorted(scripts.keys()):
+                    if "test" in script_name.lower():
+                        test_like = script_name
+                        break
+                if test_like:
+                    test_commands.append(
+                        "{} run {}".format(pm_cmd, test_like)
+                    )
+        except Exception:
+            # Corrupt/unreadable package.json → skip JS detection
+            pass
 
     # Check for Go
     if os.path.exists(os.path.join(project_root, "go.mod")):
@@ -660,10 +694,13 @@ SECTION_TO_SKILL = {
     "phase-commit": None,  # special: split into retrospective + committer
 }
 
-# phase-commit is split into two steps
+# phase-commit is split into durable checkpoint steps. CLI flags are not
+# artifacts; only real files/globs belong in required_artifacts.
 _COMMIT_STEPS = [
     ("prizmkit-retrospective", "Retrospective", []),
-    ("prizmkit-committer", "Commit", ["--headless"]),
+    ("prizmkit-committer", "Commit", []),
+    ("completion-summary", "Completion Summary",
+     [".prizmkit/specs/{slug}/completion-summary.json"]),
 ]
 
 
@@ -1262,7 +1299,6 @@ def load_section(sections_dir, name):
 
 ACTIVE_AGENT_PROMPTS = {
     "critic-plan-challenge.md": "{{AGENT_PROMPT_CRITIC_PLAN_CHALLENGE}}",
-    "reviewer-review.md": "{{AGENT_PROMPT_REVIEWER_REVIEW}}",
 }
 
 
@@ -1801,48 +1837,16 @@ def build_replacements(args, feature, features, global_context, script_dir):
         )
         critic_enabled = False
 
-    # Browser interaction - extract from feature if present
-    browser_interaction = feature.get("browser_interaction")
-    browser_enabled = False
-    browser_verify_steps = ""
-    browser_tool = "auto"  # default: AI chooses at runtime
-
-    browser_verify_env = os.environ.get("BROWSER_VERIFY", "").lower()
-    if browser_verify_env == "false":
-        browser_interaction = None
+    # Browser verification defaults to a mandatory attempt. It is disabled only
+    # by BROWSER_VERIFY=false or browser_interaction.enabled=false.
+    browser_enabled, browser_tool, browser_verify_steps, browser_blocking = browser_enabled_from_item(feature)
 
-    if browser_interaction and isinstance(browser_interaction, bool):
-        # Simple boolean: browser verification enabled, no specific goals
-        browser_enabled = True
+    if browser_tool not in ("playwright-cli", "opencli", "auto"):
+        LOGGER.warning(
+            "Unknown browser_interaction.tool '%s', defaulting to 'auto'",
+            browser_tool,
+        )
         browser_tool = "auto"
-        browser_verify_steps = (
-            "   # (no specific verify goals — explore the app and "
-            "verify the feature works as expected)")
-    elif browser_interaction and isinstance(browser_interaction, dict):
-        # Extract tool preference (playwright-cli / opencli / auto)
-        browser_tool = browser_interaction.get("tool", "auto")
-        if browser_tool not in ("playwright-cli", "opencli", "auto"):
-            LOGGER.warning(
-                "Unknown browser_interaction.tool '%s', defaulting to 'auto'",
-                browser_tool,
-            )
-            browser_tool = "auto"
-
-        # browser_interaction only needs verify_steps — AI auto-detects
-        # dev server command, URL, and port from project config
-        steps = browser_interaction.get("verify_steps", [])
-        if steps:
-            browser_enabled = True
-            browser_verify_steps = "\n".join(
-                "   # Goal {}: {}".format(i + 1, step)
-                for i, step in enumerate(steps)
-            )
-        elif browser_interaction.get("url") or browser_interaction.get("enabled", True):
-            # Backward compat: old format had url/setup_command fields
-            browser_enabled = True
-            browser_verify_steps = (
-                "   # (no specific verify goals — explore the app and "
-                "verify the feature works as expected)")
 
     # Auto-detect test commands from project structure
     test_cmd = detect_test_commands(project_root)
@@ -1860,36 +1864,10 @@ def build_replacements(args, feature, features, global_context, script_dir):
     if isinstance(testing_config, dict):
         coverage_target = str(testing_config.get("coverage_target", 80))
 
-    # Detect dev server port from package.json
-    dev_port = "3000"  # Default fallback
-    try:
-        pkg_path = os.path.join(project_root, "package.json")
-        if os.path.isfile(pkg_path):
-            with open(pkg_path, "r", encoding="utf-8") as f:
-                pkg = json.load(f)
-            dev_script = pkg.get("scripts", {}).get("dev", "")
-            # Extract -p <port> from dev script
-            port_match = re.search(r"-p\s+(\d+)", dev_script)
-            if port_match:
-                dev_port = port_match.group(1)
-            else:
-                # Fallback: try NEXT_PUBLIC_SITE_URL from .env files
-                for env_file in [".env.local", ".env"]:
-                    env_path = os.path.join(project_root, env_file)
-                    if os.path.isfile(env_path):
-                        with open(env_path, "r", encoding="utf-8") as ef:
-                            for line in ef:
-                                m = re.match(
-                                    r"NEXT_PUBLIC_SITE_URL\s*=\s*.*?:([0-9]+)", line.strip()
-                                )
-                                if m:
-                                    dev_port = m.group(1)
-                                    break
-                        if dev_port != "3000":
-                            break
-    except Exception:
-        pass  # Keep default 3000 on any error
-    dev_url = f"http://localhost:{dev_port}"
+    # Detect dev server port from project config. Do not guess a default port;
+    # browser prompt sections require the agent to discover it when unknown.
+    dev_port = detect_dev_server_port(project_root)
+    dev_url = "http://localhost:{}".format(dev_port) if dev_port.isdigit() else "<UNKNOWN_DETECT_FROM_PROJECT_CONFIG>"
 
     replacements = {
         "{{RUN_ID}}": args.run_id,
@@ -1915,6 +1893,7 @@ def build_replacements(args, feature, features, global_context, script_dir):
         "{{SESSION_STATUS_PATH}}": session_status_abs,
         "{{PROJECT_ROOT}}": project_root,
         "{{FEATURE_SLUG}}": feature_slug,
+        "{{ARTIFACT_DIR}}": os.path.join(".prizmkit", "specs", feature_slug),
         "{{CHECKPOINT_PATH}}": os.path.join(
             ".prizmkit", "specs", feature_slug, "workflow-checkpoint.json",
         ),