merge: integrate marketplace and design v2 client

.project-docs/10-decisions/adr-001-ai-design-conversation-ownership.md

@@ -2,7 +2,7 @@
 
 ## Status
 
-Accepted
+Superseded by ADR-007
 
 ## Date
 

.project-docs/10-decisions/adr-007-ai-design-living-form-v2.md

@@ -0,0 +1,63 @@
+# ADR-007: AI Design Living Form V2 authority
+
+## Status
+
+Accepted / implemented
+
+## Date
+
+2026-08-30
+
+## Context
+
+ADR-001 modeled a Workspace as multiple independently selected Conversations, each
+with its own Brief, mutable Quote, and persistent Session. That split made chat,
+form edits, Quote options, and provider prompts competing representations of the
+same design. The coordinated Works Square and MakeLore V2 cutover now provides one
+versioned Design Specification and a persistent form throughout the design flow.
+
+## Decision
+
+- One Workspace exposes one current Direction, one persistent Agent Session, one
+  Current Design Specification, one Living Form projection, one conversation
+  timeline, immutable Quotes, Tasks, and Assets.
+- Chat, direct field edits, decision responses, accepted proposals, lock changes,
+  Asset binding, and restore actions enter the same server-owned reducer. Renderer
+  drafts are temporary buffers and never semantic authority.
+- Every mutation carries stable command and semantic operation identities. An
+  unknown transport result keeps the same command for replay; revision conflicts
+  refresh canonical state without discarding local drafts.
+- Generation is a compile-and-confirm boundary. The server returns an immutable
+  Quote for one exact Specification revision; the client displays the public output
+  plan, warnings, expiry, and Token Point amount and confirms only the Quote ID.
+  Provider prompts, models, routing, storage, safety evidence, and billing atoms stay
+  server-private.
+- Electron Main is the only Canvas network authority. Development and packaged
+  builds use the Works Square V2 contract; there is no V1 DTO adapter, local semantic
+  adapter, mutable Quote PATCH, editable provider Prompt, or cloud-failure fallback.
+
+## Rationale
+
+The Living Form makes the current Specification the sole rebuild and generation
+authority while keeping conversational continuity visible. One reducer removes
+client/server drift, and immutable Quotes plus stable operation IDs make confirmation
+and uncertain retries auditable without exposing provider internals.
+
+## Consequences
+
+- Client and server V2 must move together after the stopped deployment passes the
+  server cutover dry-run/apply/validate gate.
+- Existing V1 data remains historical evidence and frozen execution recovery input;
+  old clients and V1 semantic writers receive no compatibility window.
+- Production database cutover, paid Provider activation, and real-account installed
+  client smoke remain separate operator gates.
+
+## Supersedes
+
+- ADR-001: AI 绘画 Workspace / Conversation 状态归属.
+
+## Related
+
+- Client source `b0b5a602b501308a23eb27e2f51a5169b9e46b1e`
+- Server source `b5351d54f595ce8eb873593e462e4a556bea0b05`
+- Server ADR `ADR-2026-08-28-001`

.project-docs/10-decisions/decision-index.md

@@ -4,7 +4,7 @@
 
 | ID | Decision | Status | Date | Applies To | Detail |
 |---|---|---|---|---|---|
-| ADR-001 | AI 绘画采用 Workspace / Conversation / Task 分层状态与服务端持久 Conversation Session | Accepted | 2026-08-11 | AI 绘画客户端、Main 适配器、Works Square API | `adr-001-ai-design-conversation-ownership.md` |
+| ADR-007 | AI Design 采用单一 Current Specification、Living Form 与不可变 Quote 的 V2 权威 | Accepted / implemented | 2026-08-30 | AI Design Renderer、Electron Main、Works Square V2 API | `adr-007-ai-design-living-form-v2.md` |
 | ADR-002 | Robot V1 采用 Main 门控的引导式热点配网并衔接现有六位 Binding | Accepted / implemented, default on | 2026-08-16 | Robot Renderer、Host API、Electron Main、现有固件热点入口 | `adr-002-robot-guided-hotspot-binding-v1.md` |
 | ADR-003 | Robot 配网页内扫描并连接 Windows/macOS 热点 | Accepted / implemented with physical release gates pending | 2026-08-16 | Robot Renderer、Host API、Electron Main、Windows WLAN、macOS CoreWLAN/CoreLocation | `adr-003-robot-in-app-hotspot-connection.md` |
 | ADR-004 | Works Square 统一拥有桌面认证生命周期边界 | Accepted / implemented | 2026-08-19 | Renderer、Host API、Electron Main、Works Square auth facade | `adr-004-square-auth-lifecycle-boundary.md` |
@@ -15,6 +15,7 @@
 
 | ID | Decision | Superseded By | Date |
 |---|---|---|---|
+| ADR-001 | AI 绘画 Workspace / Conversation 状态归属 | ADR-007 | 2026-08-30 |
 
 ## Decision Criteria