[codex] Upgrade Agent Studio workbench

.github/pull_request_template.md

@@ -12,6 +12,11 @@
 - weakest pack delta:
 - cross-pack pass-rate delta:
 - issue category delta (Q03/Q04/Q05/Q09 if relevant):
+- Agent Studio layout CSS touched: [ ] yes / [ ] no
+- Agent Studio visual review:
+  - If yes, this PR changes Agent Studio layout-facing CSS, especially `src/narrativeos/web/styles.css` selectors for `.agent-studio-*`.
+  - Paste the two `manual_review` rows from `artifacts/agent_studio_smoke_visual_review.md` into a PR comment, then mark each row `accepted` or `needs follow-up`.
+  - Expected rows: `desktop / Three-column workbench review / manual_review` and `mobile / Stacked workbench review / manual_review`.
 - rollback point:
 - next suggested task:
 

.github/workflows/author-live-api-smoke.yml

@@ -0,0 +1,44 @@
+name: author-live-api-smoke
+
+on:
+  push:
+  pull_request:
+
+jobs:
+  smoke:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+      - name: Install deps
+        run: |
+          python -m venv .venv
+          . .venv/bin/activate
+          pip install -r requirements.txt
+      - name: Run author live API smoke
+        run: |
+          CI_HEADLESS=1 CHROME_BIN="${CHROME_BIN:-google-chrome}" bash scripts/run_author_live_api_smoke.sh
+      - name: Publish author live API smoke summary
+        if: always()
+        run: |
+          python scripts/write_author_live_api_smoke_step_summary.py artifacts/author_live_api_smoke_result.json >> "$GITHUB_STEP_SUMMARY"
+          test -f artifacts/author_live_api_smoke_failure_snapshot.json || true
+          test -f /tmp/author_live_api_smoke_author_chrome.log || true
+          test -f /tmp/author_live_api_smoke_reviewer_chrome.log || true
+      - name: Upload author live API smoke artifacts
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: author-live-api-smoke-artifacts
+          path: |
+            artifacts/author_live_api_smoke_result.json
+            artifacts/author_live_api_smoke_failure_snapshot.json
+            artifacts/author_live_api_smoke_failure.png
+            /tmp/author_live_api_smoke_server.log
+            /tmp/author_live_api_smoke_author_chrome.log
+            /tmp/author_live_api_smoke_reviewer_chrome.log

.github/workflows/cross-pack-quality.yml

@@ -2,6 +2,8 @@ name: cross-pack-quality
 
 on:
   push:
+    branches:
+      - main
   pull_request:
 
 jobs:
@@ -20,7 +22,11 @@ jobs:
       - name: Run tests
         run: |
           . .venv/bin/activate
-          python -m pytest -q
+          python -m pytest -q \
+            tests/test_cross_pack_benchmark.py \
+            tests/test_cross_pack_merge_gate.py \
+            tests/test_cross_pack_workflow_ci.py \
+            tests/test_phase0_guardrails.py
       - name: Run cross-pack benchmark
         run: |
           . .venv/bin/activate

.github/workflows/frontend-shell-smoke.yml

@@ -0,0 +1,107 @@
+name: frontend-shell-smoke
+
+on:
+  push:
+  pull_request:
+
+jobs:
+  smoke:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+      - uses: browser-actions/setup-chrome@v1
+        id: setup-chrome
+      - name: Install deps
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y fonts-noto-cjk
+          python -m venv .venv
+          . .venv/bin/activate
+          pip install -r requirements.txt
+      - name: Run frontend shell smoke
+        run: |
+          CI_HEADLESS=1 \
+          CHROME_BIN="${{ steps.setup-chrome.outputs.chrome-path }}" \
+          bash scripts/run_frontend_shell_smoke.sh
+      - name: Publish frontend shell smoke summary
+        if: always()
+        run: |
+          . .venv/bin/activate
+          python scripts/write_frontend_shell_smoke_step_summary.py \
+            --result-file artifacts/frontend_shell_smoke_result.json \
+            --server-log /tmp/frontend_shell_smoke_server.log \
+            --chrome-log /tmp/frontend_shell_smoke_chrome.log \
+            --failure-artifact artifacts/frontend_shell_smoke_failure_snapshot.json \
+            >> "$GITHUB_STEP_SUMMARY"
+          cp /tmp/frontend_shell_smoke_server.log artifacts/frontend_shell_smoke_server.log 2>/dev/null || true
+          cp /tmp/frontend_shell_smoke_chrome.log artifacts/frontend_shell_smoke_chrome.log 2>/dev/null || true
+      - name: Upload frontend shell smoke artifacts
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: frontend-shell-smoke-artifacts
+          if-no-files-found: warn
+          path: |
+            artifacts/frontend_shell_smoke_result.json
+            artifacts/frontend_shell_smoke_failure_snapshot.json
+            artifacts/frontend_shell_smoke_failure.png
+            artifacts/frontend_shell_smoke_server.log
+            artifacts/frontend_shell_smoke_chrome.log
+
+  agent-studio-smoke:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+      - uses: browser-actions/setup-chrome@v1
+        id: setup-chrome
+      - name: Install deps
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y fonts-noto-cjk
+          python -m venv .venv
+          . .venv/bin/activate
+          pip install -r requirements.txt
+      - name: Run Agent Studio smoke
+        run: |
+          CI_HEADLESS=1 \
+          CHROME_BIN="${{ steps.setup-chrome.outputs.chrome-path }}" \
+          bash scripts/run_agent_studio_smoke.sh
+      - name: Publish Agent Studio smoke summary
+        if: always()
+        run: |
+          . .venv/bin/activate
+          python scripts/write_agent_studio_smoke_step_summary.py \
+            --result-file artifacts/agent_studio_smoke_result.json \
+            --server-log /tmp/agent_studio_smoke_server.log \
+            --chrome-log /tmp/agent_studio_smoke_chrome.log \
+            --failure-artifact artifacts/agent_studio_smoke_failure_snapshot.json \
+            >> "$GITHUB_STEP_SUMMARY"
+          cp /tmp/agent_studio_smoke_server.log artifacts/agent_studio_smoke_server.log 2>/dev/null || true
+          cp /tmp/agent_studio_smoke_chrome.log artifacts/agent_studio_smoke_chrome.log 2>/dev/null || true
+      - name: Upload Agent Studio smoke artifacts
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: agent-studio-smoke-artifacts
+          if-no-files-found: warn
+          path: |
+            artifacts/agent_studio_smoke_result.json
+            artifacts/agent_studio_smoke_failure_snapshot.json
+            artifacts/agent_studio_smoke_failure.png
+            artifacts/agent_studio_smoke_desktop.png
+            artifacts/agent_studio_smoke_mobile.png
+            artifacts/agent_studio_smoke_visual_review.md
+            artifacts/agent_studio_smoke_server.log
+            artifacts/agent_studio_smoke_chrome.log

.github/workflows/ops-internal-browser-guards.yml

@@ -0,0 +1,30 @@
+name: ops-internal-browser-guards
+
+on:
+  push:
+  pull_request:
+
+jobs:
+  guards:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "22"
+      - name: Run internal Ops browser guards
+        run: |
+          CI_HEADLESS=1 CHROME_BIN="${CHROME_BIN:-google-chrome}" bash scripts/run_ops_internal_browser_guards.sh
+      - name: Publish internal Ops browser guard summary
+        if: always()
+        run: |
+          python scripts/write_ops_internal_browser_guard_summary.py --artifacts-dir artifacts >> "$GITHUB_STEP_SUMMARY"
+      - name: Upload internal Ops browser guard artifacts
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: ops-internal-browser-guard-artifacts
+          path: |
+            artifacts/ops_internal_*_result.json
+            artifacts/ops_internal_*_failure_snapshot.json
+            artifacts/ops_internal_*.png

.github/workflows/ops-navigation-stale-ref-smoke.yml

@@ -19,6 +19,8 @@ jobs:
         id: setup-chrome
       - name: Install deps
         run: |
+          sudo apt-get update
+          sudo apt-get install -y fonts-noto-cjk
           python -m venv .venv
           . .venv/bin/activate
           pip install -r requirements.txt
@@ -37,6 +39,8 @@ jobs:
             --chrome-log /tmp/ops_navigation_stale_ref_smoke_chrome.log \
             --failure-artifact artifacts/ops_navigation_stale_ref_smoke_failure_snapshot.json \
             >> "$GITHUB_STEP_SUMMARY"
+          cp /tmp/ops_navigation_stale_ref_smoke_server.log artifacts/ops_navigation_stale_ref_smoke_server.log 2>/dev/null || true
+          cp /tmp/ops_navigation_stale_ref_smoke_chrome.log artifacts/ops_navigation_stale_ref_smoke_chrome.log 2>/dev/null || true
       - name: Upload stale-ref smoke artifacts
         if: always()
         uses: actions/upload-artifact@v4
@@ -48,5 +52,5 @@ jobs:
             artifacts/ops_navigation_stale_ref_smoke_result.json
             artifacts/ops_navigation_stale_ref_smoke_failure_snapshot.json
             artifacts/ops_navigation_stale_ref_smoke_failure.png
-            /tmp/ops_navigation_stale_ref_smoke_server.log
-            /tmp/ops_navigation_stale_ref_smoke_chrome.log
+            artifacts/ops_navigation_stale_ref_smoke_server.log
+            artifacts/ops_navigation_stale_ref_smoke_chrome.log

Kimi_Agent_设计系统加载/app/README.md

@@ -0,0 +1,8 @@
+# Local URL Contract
+
+Manual local browser verification uses fixed ports:
+
+- Frontend: `http://127.0.0.1:3000`
+- Backend: `http://127.0.0.1:8000`
+
+This README documents manual local browser verification. CI/headless smoke scripts are the exception because they use isolated ports to avoid job collisions.

Kimi_Agent_设计系统加载/app/src/api/client.ts

@@ -0,0 +1,6 @@
+export function shouldUseDemoFallback(path: string): boolean {
+  if (path.startsWith('/story/') || path.startsWith('/ops/')) {
+    return false;
+  }
+  return path.startsWith('/demo/');
+}