chore(coding): record ML-07 integration

.project-docs/30-worklog/tasks/20260826-makelore-data-service-client-b72e4c19.md

@@ -143,6 +143,18 @@
   coordinator after cherry-pick; the source record remains in
   `D:\Datas\OthersProjects\makelore-ml06-agent-browser-injection-2c7e91a4`.
   The ML-07 frontier is `38d63a9` plus this coordinator cleanup/record commit.
+- Integrated ML-07 from source commit
+  `d22ceef104b4f95e7a35888875dcb1c18245c190` at the exact ML-06 frontier
+  `552c6162a57894b713ea1f47d356fa48c0fc0cf1` as coordinator commit `549069d`
+  (`feat(coding): add generated Data Service SDK skill`), with no cherry-pick
+  conflict. The delivered scope is limited to the bundled Data Service Skill,
+  canonical TypeScript/JavaScript SDK assets, existing skill registry/display
+  registration, and focused SDK/install/workflow tests. The source commit and
+  coordinator range contain no root `task_plan.md`, `findings.md`, or
+  `progress.md` scratch files. The foreign ML-07 task record was removed from
+  this coordinator after cherry-pick; the source record remains in
+  `D:\Datas\OthersProjects\makelore-ml07-data-service-sdk-skill-6b4e91c2`.
+  The ML-08 frontier is `549069d` plus this coordinator cleanup/record commit.
 
 ## Verification
 
@@ -297,17 +309,57 @@
   path list contains only Agent Browser/session wiring, route/Pi propagation,
   focused tests, and the task record.
 - ML-06 `git diff --check`: passed after foreign task-record cleanup.
+- ML-07 focused SDK/Skill assets:
+  `pnpm exec vitest run tests/unit/data-service-sdk-assets.test.ts
+  --maxWorkers=1` — after normalizing coordinator checkout line endings to the
+  source's canonical LF bytes, 1 file / 14 tests passed. The initial checkout
+  run had 13 passed and 1 frontmatter assertion failure caused solely by
+  CRLF; the normalized working files hash exactly to their committed blobs.
+- ML-07 adjacent registry/display/resource/Pi suite:
+  `pnpm exec vitest run tests/unit/data-service-sdk-assets.test.ts
+  tests/unit/skill-display.test.ts tests/unit/pi-resource-loader.test.ts
+  tests/unit/pi-product-tools.test.ts --maxWorkers=1` — 4 files / 34 tests
+  passed. Packaged resource listing includes `SKILL.md`, `assets/`,
+  `assets/makelore-data.ts`, and `assets/makelore-data.js`.
+- ML-07 full unit verification: the normal parallel runner had 1 Vitest fork
+  worker exit unexpectedly after 187/188 files and 1606 passed tests (2
+  skipped), with no assertion failure. The serial rerun
+  `pnpm exec vitest run --exclude tests/unit/coding-chat-pressure.test.tsx
+  --maxWorkers=1` passed 188 files / 1610 tests with 2 skipped, followed by
+  `pnpm exec vitest run tests/unit/coding-chat-pressure.test.tsx
+  --maxWorkers=1` — 1 test passed.
+- ML-07 `pnpm typecheck`: passed.
+- ML-07 `pnpm lint:check`: passed with 0 errors and the same 5 pre-existing
+  warnings in `src/pages/Home/index.tsx` and `src/pages/Makelore/index.tsx`.
+- ML-07 `pnpm build`: passed Vite, Electron, Pi runtime, and Windows NSIS
+  packaging; existing dynamic-import/chunk, optional dependency, and absent
+  optional packaged-resource warnings remained visible.
+- ML-07 `pnpm test:electron:windows`: 2 files / 4 tests passed.
+- ML-07 affected E2E:
+  `pnpm exec playwright test tests/e2e/project-configuration-skills.spec.ts
+  --config=playwright.config.ts` — 1 test passed.
+- ML-07 SDK static boundary checks found no cloud credential, external URL,
+  retry call, cache/offline storage, Firebase, or Works Square behavior; the
+  only Authorization/Bearer use is the injected local preview token required
+  by the contract. Skill checks confirmed inspect → explicit
+  `data_service_configure` → `agent_browser` → read-back → report ordering and
+  the exact-copy/no-op/conflict policy.
+- ML-07 root-scratch and boundary scans passed; changed paths are limited to
+  the Data Service skill assets, registry/display registration, focused tests,
+  and the task record. `git diff --check` passed after foreign task-record
+  cleanup.
 
 ## Follow-ups
 
 - ML-02 identity choice and legacy/independent-copy UX, ML-03 Main Data
-  Service, ML-04 Pi Data Service tools, ML-05 preview data sessions, and ML-06
+  Service, ML-04 Pi Data Service tools, ML-05 preview data sessions, ML-06
-  Agent Browser pre-document injection are integrated. ML-04 consumed the
+  Agent Browser pre-document injection, and ML-07 generated SDK/Skill assets
-  `DataServiceOperations` seam from the recorded ML-03 frontier and preserves
+  are integrated. ML-04 consumed the `DataServiceOperations` seam from the
-  its active-project identity and trusted project-path constraints. ML-05 and
+  recorded ML-03 frontier and preserves its active-project identity and
-  ML-06 preserve the Main-owned credential boundary; ML-06 adds the narrow
+  trusted project-path constraints. ML-05 and ML-06 preserve the Main-owned
-  exact-Origin injection seam for ML-07 while keeping ordinary arbitrary URL
+  credential boundary; ML-06 supplies the narrow exact-Origin injection seam
-  opens data-free.
+  and ML-07 consumes only that local capability while keeping ordinary
+  arbitrary URL opens data-free.
 - The broader ML-00 through ML-09 coordinator task remains in progress; this
   record does not claim full client-suite, build, review, or release proof.
 

.project-docs/30-worklog/tasks/20260826-ml07-data-service-sdk-skill-6b4e91c2.md

@@ -1,133 +0,0 @@
-# Task: Implement ML-07 generated Data Service SDK and bundled skill
-
-## Identity
-
-- Task ID: 20260826-ml07-data-service-sdk-skill-6b4e91c2
-- Mode: Feature
-- Branch: codex/20260826-ml07-data-service-sdk-skill-6b4e91c2-ml07-data-service-sdk-skill
-- Worktree: D:\Datas\OthersProjects\makelore-ml07-data-service-sdk-skill-6b4e91c2
-- Base commit: 552c6162a57894b713ea1f47d356fa48c0fc0cf1
-- Owner: ml07-sdk-skill
-- Status: Ready for integration
-
-## Scope
-
-- Implement ML-07 from Data Service P0 spec sections 11–13 at exact base
-  `552c6162a57894b713ea1f47d356fa48c0fc0cf1`.
-- Add the canonical TypeScript/JavaScript ESM SDK templates and bundled
-  `data-service` Skill, register/package them through the existing coding-skill
-  loader, and add focused SDK/install/registry/workflow tests.
-- Preserve the Main-owned ephemeral runtime boundary and leave ML-08 merge
-  integration and ML-09 review to the repository coordinator.
-
-## Intent And Constraints
-
-- The generated SDK reads and validates `globalThis.__MAKELORE_DATA__` on each
-  call, uses only local injected endpoint/token capability, and exposes the
-  frozen get/list/put/delete surface plus optional local `add`.
-- SDK requests encode collection/document path segments, send exactly one
-  strong `If-Match` for `ifRevision`, strictly parse DTO/error responses, avoid
-  retries/cache/offline/subscription/schema/policy behavior, and return stable
-  `runtime_unavailable` without network access for absent or invalid injection.
-- Skill workflow is inspect → explain/propose → explicit intent → one
-  `data_service_configure` → layout-aware verbatim template install → minimal
-  source edit → data-enabled preview write/read-back → report configured
-  collections and observed quota only after matching read-back. Configuration
-  failure or `project_identity_required` causes zero source edits.
-- Follow the existing bundled skill frontmatter/registry convention and use
-  directly packaged assets/references; no npm package, seed endpoint, manifest,
-  hash, migration, cloud URL, Works credential, retry/cache, or ML-08 changes.
-
-## Planning Gate
-
-- Result: Passed on 2026-08-26 in the isolated worktree after `check_project_docs.py`
-  and `task_context.py start/status --json` confirmed this task owns the exact
-  branch, worktree, and base.
-- Loaded repository `AGENTS.md`, `maintain-project-docs`, `writing-for-agents`
-  and `SKILL-MECHANICS`, project-memory entry/current/decision/architecture/
-  domain/evidence/reflection/commitment/stale documents, the parent client task
-  record, and server canonical spec sections 11–13, ML-07 ticket, integration
-  contract, and accepted ADR.
-- The parent client coordinator is a separate owner at its recorded frontier;
-  its ML-01 through ML-06 integration is the stated exact base. No active peer
-  declared a conflicting SDK/Skill ownership; historical planning records with
-  placeholder scopes remain unknown but are outside these paths. Canonical
-  project-positioning and success-criteria files retain placeholders/stale
-  language, so the server spec/contract/ADR and parent task record are the
-  authoritative task pointers.
-
-## Implementation Plan
-
-1. Inspect current SDK/runtime seams, bundled skill registry/resource packaging,
-   and existing test conventions; record the exact interfaces before writing
-   red tests.
-2. Add failing tests for the SDK contract, layout-aware install/repeat/conflict,
-   Skill registration/package contents, and ordered workflow guards.
-3. Implement the smallest canonical TS/JS assets, direct SDK helper behavior,
-   registry/resource exposure, and Skill instructions/fixtures required by the
-   tests.
-4. Run focused tests, packaged-resource listing, typecheck/lint/build and
-   deterministic regression checks; then complete this task record and drift
-   gate with actual results.
-
-## Outcome
-
-- Implemented ML-07 as a bundled, auditable Data Service Skill and paired
-  TypeScript/JavaScript ESM SDK templates. The registry now advertises the
-  opt-in `data-service` skill while the existing default skill selection stays
-  unchanged. The Skill documents inspect/propose/explicit-intent/configure-once,
-  layout-aware verbatim installation, conflict/no-op behavior, data-enabled
-  preview put/get read-back, and post-verification reporting boundaries.
-- The SDK reads and validates the injected loopback capability at every public
-  operation, enforces contract version 1, encodes path segments, maps one
-  strong `If-Match`, parses direct DTOs/errors strictly, freezes safe error
-  projections, avoids retries and cloud fallbacks, and returns stable
-  `runtime_unavailable` without network access when the capability is absent or
-  invalid. Optional `add` only creates a local UUID before delegating to PUT.
-- No ML-08 changes, npm package, seed endpoint, manifest/hash/migration layer,
-  cloud URL/Works credential, or forbidden runtime feature was added. Skill
-  installation remains agent-driven by the canonical markdown workflow; tests
-  cover the documented direct-text policy with src TypeScript, src JavaScript,
-  and root TypeScript fixtures.
-
-## Verification
-
-- Initial red focused run before implementation: the new SDK/Skill test file
-  failed because the canonical asset directory and workflow did not yet exist.
-- Focused SDK/Skill suite after implementation:
-  `pnpm exec vitest run tests/unit/data-service-sdk-assets.test.ts
-  --maxWorkers=1` — 1 file / 14 tests passed, covering both assets, runtime
-  injection/no-network behavior, path/ETag/body/delete semantics, strict
-  DTO/error projection, no retry, registry/package listing, workflow ordering,
-  and first/repeat/conflict fixture policy.
-- Adjacent focused suite:
-  `pnpm exec vitest run tests/unit/data-service-sdk-assets.test.ts
-  tests/unit/skill-display.test.ts tests/unit/pi-resource-loader.test.ts
-  tests/unit/pi-product-tools.test.ts --maxWorkers=1` — 4 files / 29 tests
-  passed.
-- `pnpm test` — 188 files / 1610 tests passed, 2 skipped.
-- `pnpm typecheck` — passed, including direct TypeScript asset compilation.
-- `pnpm lint:check` — 0 errors and 5 pre-existing warnings in
-  `src/pages/Home/index.tsx` and `src/pages/Makelore/index.tsx`.
-- `pnpm run build:vite` — renderer, Main, preload, and utility builds passed;
-  existing dynamic-import and large-chunk warnings remain.
-- `pnpm test:electron:windows` — 2 files / 4 tests passed.
-- `pnpm exec playwright test tests/e2e/project-configuration-skills.spec.ts
-  --config=playwright.config.ts` — 1 test passed.
-- `git diff --check` — passed. Task-aware drift check passed and
-  `task_context.py complete` returned `READY_FOR_INTEGRATION` for this task.
-- The parent coordinator's inherited full E2E evidence records one unrelated,
-  pre-existing timeout at `tests/e2e/pi-coding-first-chat.spec.ts:575` while
-  the current-model combobox remained disabled; this ML-07 task did not rerun
-  or mask that failure.
-
-## Follow-ups
-
-- Parent coordinator must cherry-pick the single ML-07 commit into its client
-  integration branch, run code review/remediation, and perform the required
-  real PostgreSQL plus signed-in data-enabled preview acceptance. Repository
-  tests and the focused E2E above do not claim live-service success.
-
-## Promotion Candidates
-
-- None recorded.