@tea-agent/loop-agent 0.1.0-fe-test.0

package/dist/workflows/dag/frontend-repair.js

@@ -0,0 +1,541 @@
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { z } from "zod";
+import { pathMatchesPattern } from "../../shared/git-progress.js";
+import { FRONTEND_IMPLEMENTATION_CONTRACT_SCHEMA_ID, frontendImplementationContractSchema, } from "./frontend-implementation-contract.js";
+export const FRONTEND_REPAIR_ASSESSMENT_SCHEMA_ID = "frontend-repair-assessment-v1";
+export const frontendRepairFailureClassSchema = z.enum([
+    "typecheck",
+    "build",
+    "lint",
+    "component-test",
+    "unit-test",
+    "trace",
+    "review",
+    "contract",
+    "path",
+    "dependency",
+    "credential",
+    "deploy",
+    "spec-unclear",
+    "unknown",
+]);
+export const frontendCommandCategorySchema = z.enum([
+    "typecheck",
+    "build",
+    "lint",
+    "component-test",
+    "unit-test",
+    "trace",
+]);
+const REPAIRABLE = new Set([
+    "typecheck",
+    "build",
+    "lint",
+    "component-test",
+    "unit-test",
+    "trace",
+]);
+export function isFrontendRepairable(failureClass) {
+    return REPAIRABLE.has(failureClass);
+}
+/**
+ * Deterministic commandLabel → commandCategory mapping (AC-3).
+ * `targetType` comes from the contract verificationTargets[].type
+ * (static | unit | component | integration | mock); the literal commandLabel
+ * wins over type so a `static` typecheck target is never misread as a test.
+ */
+export function mapCommandLabelToCategory(commandLabel, targetType) {
+    const label = commandLabel.toLowerCase();
+    if (/(?:typecheck|check-types|type-check|\btsc\b)/.test(label))
+        return "typecheck";
+    if (/(?:vite\s+build|next\s+build|webpack|rollup|\bbuild\b)/.test(label))
+        return "build";
+    if (/(?:eslint|\blint\b)/.test(label))
+        return "lint";
+    if (targetType === "component")
+        return "component-test";
+    if (targetType === "unit")
+        return "unit-test";
+    if (/(?:component|testing-library|render\()/.test(label))
+        return "component-test";
+    return "unit-test";
+}
+export function isReviewRepairable(finding, implementWriteSet) {
+    const hasFile = Boolean(finding.file && finding.file.trim().length > 0);
+    const hasLocation = Boolean((finding.line !== undefined && finding.line > 0) ||
+        (finding.symbol && finding.symbol.trim().length > 0));
+    const hasRequirement = Boolean((finding.requirementId && finding.requirementId.trim().length > 0) ||
+        (finding.acceptanceCriteriaId &&
+            finding.acceptanceCriteriaId.trim().length > 0));
+    const fixScope = finding.fixScope ?? (hasFile ? [finding.file] : []);
+    const fixScopeSubset = fixScope.length > 0 &&
+        fixScope.every((entry) => isPathWithinWriteSet(entry, implementWriteSet));
+    return (hasFile &&
+        hasLocation &&
+        hasRequirement &&
+        fixScopeSubset &&
+        finding.requiresContractReplan !== true);
+}
+export function classifyFrontendFailure(input) {
+    // AC-2: structured evidence takes priority over string-blob heuristics.
+    if (input.failureCategory === "write-guard") {
+        return "path";
+    }
+    if (input.traceTarget || input.commandCategory === "trace") {
+        return "trace";
+    }
+    if (input.commandCategory) {
+        switch (input.commandCategory) {
+            case "typecheck":
+                return "typecheck";
+            case "build":
+                return "build";
+            case "lint":
+                return "lint";
+            case "component-test":
+                return "component-test";
+            case "unit-test":
+                return "unit-test";
+        }
+    }
+    // Fallback: string-blob heuristic, preserved in its original branch order so
+    // legacy assertions (error TS2304 → typecheck, write-guard → path, etc.) stay green.
+    const blob = `${input.nodeId}\n${input.failureCategory ?? ""}\n${input.stdout ?? ""}\n${input.stderr ?? ""}`.toLowerCase();
+    if (input.nodeId.includes("contract") ||
+        blob.includes("contract mismatch") ||
+        blob.includes("source binding")) {
+        return "contract";
+    }
+    // Shell verification may contain test-runner logs from unrelated tests. Only
+    // the shell executor's structured category proves a write-boundary failure.
+    if (input.failureCategory === "write-guard") {
+        return "path";
+    }
+    if (input.nodeId.includes("trace") || blob.includes("trace:")) {
+        return "trace";
+    }
+    if (input.nodeId.includes("review")) {
+        return "review";
+    }
+    // Classify the failed verification command before inspecting its output.
+    // Full test output includes unrelated passing-test titles such as
+    // "secret-shaped" and "write-guard failure".
+    if (blob.includes("vitest") ||
+        blob.includes("jest") ||
+        blob.includes("npm test") ||
+        input.nodeId.includes("behavior")) {
+        return "unit-test";
+    }
+    if (blob.includes("typecheck") ||
+        blob.includes("tsc") ||
+        /error ts\d+/i.test(blob)) {
+        return "typecheck";
+    }
+    if (blob.includes("eslint") || blob.includes("lint")) {
+        return "lint";
+    }
+    if (blob.includes("build") ||
+        blob.includes("vite build") ||
+        blob.includes("next build")) {
+        return "build";
+    }
+    if (blob.includes("testing-library") ||
+        blob.includes("component") ||
+        blob.includes("render(")) {
+        return "component-test";
+    }
+    if (blob.includes("package.json") ||
+        blob.includes("unapproved dependency") ||
+        blob.includes("npm install")) {
+        return "dependency";
+    }
+    if (blob.includes("credential") ||
+        blob.includes("api key") ||
+        blob.includes("secret")) {
+        return "credential";
+    }
+    if (blob.includes("deploy") || blob.includes("production release")) {
+        return "deploy";
+    }
+    if (blob.includes("spec unclear") ||
+        blob.includes("requirement ambiguous") ||
+        blob.includes("needs human")) {
+        return "spec-unclear";
+    }
+    if (input.failureCategory === "invalid-output")
+        return "contract";
+    if (input.failureCategory === "write-guard")
+        return "path";
+    return "unknown";
+}
+export const frontendRepairAssessmentSchema = z
+    .object({
+    schemaVersion: z.literal(1),
+    schemaId: z.literal(FRONTEND_REPAIR_ASSESSMENT_SCHEMA_ID),
+    contract: z
+        .object({
+        relativePath: z.string().min(1),
+        schemaId: z.string().min(1),
+    })
+        .strict(),
+    failedNodeIds: z.array(z.string().min(1)),
+    failureClass: frontendRepairFailureClassSchema,
+    eligible: z.boolean(),
+    reason: z.string().min(1),
+    attempt: z.number().int().min(1).max(2),
+    maxAttempts: z.literal(1),
+    allowedRepairWriteSet: z.array(z.string().min(1)),
+    evidenceRefs: z.array(z.string().min(1)),
+    browserStatus: z.literal("not-run"),
+    // AC-5 structured evidence fields (all optional so existing minimal
+    // fixtures and frontend-review-context safeParse stay compatible).
+    verificationTargetId: z.string().min(1).optional(),
+    commandLabel: z.string().min(1).optional(),
+    exitCode: z.number().int().optional(),
+    commandCategory: frontendCommandCategorySchema.optional(),
+    requirementIds: z.array(z.string().min(1)).optional(),
+    acceptanceCriteriaIds: z.array(z.string().min(1)).optional(),
+    fixScope: z.array(z.string().min(1)).optional(),
+    changedPaths: z.array(z.string().min(1)).optional(),
+    traceRef: z
+        .object({
+        relativePath: z.string().min(1),
+        schemaId: z.string().min(1),
+    })
+        .strict()
+        .optional(),
+})
+    .strict();
+function nodeHadFailure(record) {
+    if (record.status === "ERROR")
+        return true;
+    if (recordIndicatesCommandFailure(record))
+        return true;
+    const results = record.commandResults ?? [];
+    if (results.some((item) => item.ok === false))
+        return true;
+    return false;
+}
+function normalize(value) {
+    return value.replace(/\\/g, "/").replace(/^\.\//, "");
+}
+/**
+ * Whether a concrete path or glob entry is contained by the implement writeSet.
+ * Exact glob equality is the norm (repair writeSet === implement writeSet);
+ * concrete (non-glob) paths may also be covered by an implement glob.
+ */
+export function isPathWithinWriteSet(entry, implementWriteSet) {
+    const normalizedEntry = normalize(entry);
+    const normalizedImplement = implementWriteSet.map(normalize);
+    if (normalizedImplement.includes(normalizedEntry))
+        return true;
+    if (!normalizedEntry.includes("*")) {
+        return implementWriteSet.some((pattern) => pathMatchesPattern(normalizedEntry, pattern));
+    }
+    return false;
+}
+export function assertWriteSetSubset(repairWriteSet, implementWriteSet) {
+    for (const entry of repairWriteSet) {
+        if (!isPathWithinWriteSet(entry, implementWriteSet)) {
+            throw new Error(`repair writeSet entry "${entry}" is not ⊆ implement writeSet`);
+        }
+    }
+}
+async function loadImplementWriteSet(runDir, fallback) {
+    if (fallback.length > 0)
+        return fallback;
+    const candidates = ["run.json", "dag.json", "spec.json"];
+    for (const name of candidates) {
+        try {
+            const raw = JSON.parse(await readFile(path.join(runDir, name), "utf8"));
+            const tasks = raw.spec?.tasks ?? raw.tasks ?? [];
+            const implement = tasks.find((task) => task.id === "frontend-implement-pi");
+            if (implement?.writeSet?.length)
+                return implement.writeSet;
+        }
+        catch {
+            // continue
+        }
+    }
+    return fallback;
+}
+function matchVerificationTarget(contract, commandLabel, command) {
+    for (const target of contract.verificationTargets) {
+        if (commandLabel && target.commandLabel === commandLabel)
+            return target;
+        if (command &&
+            (command.includes(target.commandLabel) ||
+                target.commandLabel.includes(command))) {
+            return target;
+        }
+    }
+    return undefined;
+}
+function deriveFailureEvidence(input) {
+    const evidence = {};
+    for (const { record } of input.failed) {
+        const results = record.commandResults ?? [];
+        const failedResult = results.find((item) => item.ok === false) ?? results[0];
+        if (failedResult &&
+            evidence.exitCode === undefined &&
+            typeof failedResult.exitCode === "number") {
+            evidence.exitCode = failedResult.exitCode;
+        }
+        if (failedResult?.commandLabel && !evidence.commandLabel) {
+            evidence.commandLabel = failedResult.commandLabel;
+        }
+        // Structured trace facts passed by the verification bundle / trace gate.
+        const failedTraceTarget = (record.traceTargets ?? []).find((target) => target.status === "failed");
+        if (failedTraceTarget && !evidence.verificationTargetId) {
+            evidence.verificationTargetId = failedTraceTarget.id;
+            if (!evidence.commandLabel)
+                evidence.commandLabel = failedTraceTarget.commandLabel;
+            evidence.traceTarget = failedTraceTarget;
+            evidence.traceRef = {
+                relativePath: "contracts/frontend-verification-trace.json",
+                schemaId: "frontend-verification-trace-v1",
+            };
+        }
+        if (record.changedPaths?.length && !evidence.changedPaths) {
+            evidence.changedPaths = [...record.changedPaths];
+        }
+    }
+    // Resolve commandLabel → contract verification target → category + scope.
+    const target = matchVerificationTarget(input.contract, evidence.commandLabel);
+    if (target) {
+        if (!evidence.verificationTargetId)
+            evidence.verificationTargetId = target.id;
+        if (!evidence.commandLabel)
+            evidence.commandLabel = target.commandLabel;
+        evidence.requirementIds ??= [...target.requirementIds];
+        evidence.acceptanceCriteriaIds ??= [...target.requirementIds];
+        evidence.fixScope ??= [target.file];
+    }
+    if (evidence.commandLabel) {
+        evidence.commandCategory ??= mapCommandLabelToCategory(evidence.commandLabel, target?.type);
+    }
+    return evidence;
+}
+export async function runFrontendFailureAssessGate(input) {
+    const attempt = input.attempt ?? 1;
+    const implementWriteSet = await loadImplementWriteSet(input.runDir, input.implementWriteSet ?? []);
+    if (implementWriteSet.length === 0) {
+        throw new Error("assess: implement writeSet unavailable");
+    }
+    const contractRel = "contracts/frontend-implementation-contract.json";
+    const contractPath = path.join(input.runDir, contractRel);
+    let contractSchemaId = FRONTEND_IMPLEMENTATION_CONTRACT_SCHEMA_ID;
+    let contract;
+    try {
+        const raw = JSON.parse(await readFile(contractPath, "utf8"));
+        const parsed = frontendImplementationContractSchema.safeParse(raw);
+        if (!parsed.success) {
+            throw new Error("invalid frontend implementation contract");
+        }
+        contract = parsed.data;
+        contractSchemaId = FRONTEND_IMPLEMENTATION_CONTRACT_SCHEMA_ID;
+    }
+    catch {
+        // still allow assessment of failures without contract? fail-closed to contract
+        throw new Error("assess: missing or invalid contracts/frontend-implementation-contract.json");
+    }
+    const candidateNodeIds = [
+        "frontend-verify-assess-shell",
+        "frontend-reverify-shell",
+        "frontend-static-verify-shell",
+        "frontend-behavior-verify-shell",
+        "frontend-verification-trace-shell",
+        "frontend-static-reverify-shell",
+        "frontend-behavior-reverify-shell",
+        "frontend-verification-retrace-shell",
+    ];
+    const failed = [
+        ...(input.failureFacts ?? []).filter(({ record }) => nodeHadFailure(record) || recordIndicatesCommandFailure(record)),
+    ];
+    for (const nodeId of candidateNodeIds) {
+        if (failed.some((item) => item.nodeId === nodeId))
+            continue;
+        const nodePath = path.join(input.runDir, `${nodeId}.json`);
+        try {
+            const record = JSON.parse(await readFile(nodePath, "utf8"));
+            if (nodeHadFailure(record) || recordIndicatesCommandFailure(record)) {
+                failed.push({ nodeId, record });
+            }
+        }
+        catch {
+            // missing optional nodes ok
+        }
+    }
+    if (failed.length === 0) {
+        const assessment = {
+            schemaVersion: 1,
+            schemaId: FRONTEND_REPAIR_ASSESSMENT_SCHEMA_ID,
+            contract: {
+                relativePath: contractRel,
+                schemaId: contractSchemaId,
+            },
+            failedNodeIds: [],
+            failureClass: "unknown",
+            eligible: false,
+            reason: "no failed frontend verify/trace nodes in current run",
+            attempt,
+            maxAttempts: 1,
+            allowedRepairWriteSet: [...implementWriteSet],
+            evidenceRefs: [contractRel],
+            browserStatus: "not-run",
+        };
+        await writeAssessment(input.runDir, assessment);
+        return assessment;
+    }
+    const primary = failed[0];
+    const evidence = deriveFailureEvidence({ contract, failed });
+    const failureClass = classifyFrontendFailure({
+        nodeId: primary.nodeId,
+        failureCategory: primary.record.failureCategory,
+        stdout: primary.record.stdout,
+        stderr: primary.record.stderr,
+        commandLabel: evidence.commandLabel,
+        commandCategory: evidence.commandCategory,
+        exitCode: evidence.exitCode,
+        traceTarget: evidence.traceTarget ?? null,
+        changedPaths: evidence.changedPaths,
+    });
+    // AC-5: repairable=true requires structured evidence (a resolved exitCode,
+    // commandCategory, or trace-bound verification target). review has its own
+    // stricter gate (AC-4) and is never unconditionally repairable.
+    const baseEligible = isFrontendRepairable(failureClass) && attempt <= 1;
+    let eligible;
+    let reason;
+    if (failureClass === "review") {
+        const finding = primary.record.reviewFinding ?? {};
+        eligible = attempt <= 1 && isReviewRepairable(finding, implementWriteSet);
+        reason = eligible
+            ? `repairable review finding on ${primary.nodeId}`
+            : `review finding lacks file/line-symbol/requirement evidence or is outside writeSet on ${primary.nodeId}`;
+    }
+    else {
+        const hasStructuredEvidence = evidence.exitCode !== undefined ||
+            evidence.commandCategory !== undefined ||
+            Boolean(evidence.verificationTargetId);
+        eligible = baseEligible && hasStructuredEvidence;
+        reason = eligible
+            ? `repairable failureClass=${failureClass} on ${primary.nodeId}`
+            : !baseEligible
+                ? `non-repairable or ineligible: failureClass=${failureClass} attempt=${attempt}`
+                : `missing structured evidence for failureClass=${failureClass} on ${primary.nodeId}`;
+    }
+    // fixScope and changedPaths must stay inside the implement writeSet.
+    if (evidence.fixScope?.length) {
+        assertWriteSetSubset(evidence.fixScope, implementWriteSet);
+    }
+    if (evidence.changedPaths?.length) {
+        assertWriteSetSubset(evidence.changedPaths, implementWriteSet);
+    }
+    const assessment = {
+        schemaVersion: 1,
+        schemaId: FRONTEND_REPAIR_ASSESSMENT_SCHEMA_ID,
+        contract: {
+            relativePath: contractRel,
+            schemaId: contractSchemaId,
+        },
+        failedNodeIds: failed.map((item) => item.nodeId),
+        failureClass,
+        eligible,
+        reason,
+        attempt,
+        maxAttempts: 1,
+        allowedRepairWriteSet: [...implementWriteSet],
+        evidenceRefs: [contractRel, ...failed.map((item) => `${item.nodeId}.json`)],
+        browserStatus: "not-run",
+        ...(evidence.verificationTargetId
+            ? { verificationTargetId: evidence.verificationTargetId }
+            : {}),
+        ...(evidence.commandLabel ? { commandLabel: evidence.commandLabel } : {}),
+        ...(evidence.exitCode !== undefined ? { exitCode: evidence.exitCode } : {}),
+        ...(evidence.commandCategory
+            ? { commandCategory: evidence.commandCategory }
+            : {}),
+        ...(evidence.requirementIds?.length
+            ? { requirementIds: evidence.requirementIds }
+            : {}),
+        ...(evidence.acceptanceCriteriaIds?.length
+            ? { acceptanceCriteriaIds: evidence.acceptanceCriteriaIds }
+            : {}),
+        ...(evidence.fixScope?.length ? { fixScope: evidence.fixScope } : {}),
+        ...(evidence.changedPaths?.length
+            ? { changedPaths: evidence.changedPaths }
+            : {}),
+        ...(evidence.traceRef ? { traceRef: evidence.traceRef } : {}),
+    };
+    await writeAssessment(input.runDir, assessment);
+    return assessment;
+}
+function recordIndicatesCommandFailure(record) {
+    // Prefer explicit commandResults when present
+    if (record.commandResults?.some((item) => item.ok === false))
+        return true;
+    // Node may be FINISHED with nonZeroExitPolicy=record; look for harness markers
+    const stdout = record.stdout ?? "";
+    if (/nonZeroExitPolicy=record/.test(stdout) &&
+        /exitCode=[1-9]/.test(stdout)) {
+        return true;
+    }
+    if (record.failureCategory && record.failureCategory !== "success") {
+        // recorded failures may still be FINISHED
+        if (record.status === "FINISHED") {
+            return (record.failureCategory === "nonzero-exit" ||
+                record.failureCategory === "invalid-output" ||
+                record.failureCategory === "timeout");
+        }
+    }
+    return false;
+}
+async function writeAssessment(runDir, assessment) {
+    const relative = "contracts/frontend-repair-assessment.json";
+    const absolute = path.join(runDir, relative);
+    await mkdir(path.dirname(absolute), { recursive: true });
+    await writeFile(absolute, `${JSON.stringify(assessment, null, 2)}\n`, "utf8");
+    return absolute;
+}
+export async function runFrontendRepairContractGate(input) {
+    const relative = "contracts/frontend-repair-assessment.json";
+    const absolute = path.join(input.runDir, relative);
+    const raw = JSON.parse(await readFile(absolute, "utf8"));
+    const parsed = frontendRepairAssessmentSchema.safeParse(raw);
+    if (!parsed.success) {
+        throw new Error(`repair-contract: invalid assessment: ${parsed.error.issues
+            .map((i) => i.message)
+            .join("; ")}`);
+    }
+    const assessment = parsed.data;
+    const implementWriteSet = await loadImplementWriteSet(input.runDir, input.implementWriteSet ?? []);
+    assertWriteSetSubset(assessment.allowedRepairWriteSet, implementWriteSet.length
+        ? implementWriteSet
+        : assessment.allowedRepairWriteSet);
+    if (assessment.attempt > assessment.maxAttempts) {
+        throw new Error("repair-contract: attempt exceeds maxAttempts");
+    }
+    if (assessment.failedNodeIds.length === 0) {
+        return { ok: true, assessment };
+    }
+    if (!assessment.eligible) {
+        throw new Error(`repair-contract: non-repairable failure (${assessment.failureClass}): ${assessment.reason}`);
+    }
+    if (!isFrontendRepairable(assessment.failureClass) &&
+        assessment.failureClass !== "review") {
+        throw new Error(`repair-contract: failureClass ${assessment.failureClass} is not repairable`);
+    }
+    return { ok: true, assessment };
+}
+export function formatFrontendFailureAssessStdout(assessment) {
+    return JSON.stringify(assessment);
+}
+export function formatFrontendRepairContractStdout(assessment) {
+    return [
+        "Frontend repair contract: pass",
+        `eligible=${assessment.eligible}`,
+        `failureClass=${assessment.failureClass}`,
+        `writeSetSize=${assessment.allowedRepairWriteSet.length}`,
+    ].join("\n");
+}

package/dist/workflows/dag/frontend-review-context.js

@@ -0,0 +1,116 @@
+import { readFile } from "node:fs/promises";
+import path from "node:path";
+import { writeDagRunJsonArtifact } from "../../infrastructure/harness/artifact-store.js";
+import { formatFrontendWorktreeDiffStdout, runFrontendWorktreeDiffGate, } from "./frontend-worktree-diff.js";
+import { frontendLintAssessmentArtifactSchema } from "./frontend-lint-baseline.js";
+import { frontendImplementationContractSchema } from "./frontend-implementation-contract.js";
+import { frontendRepairAssessmentSchema } from "./frontend-repair.js";
+export const FRONTEND_REVIEW_CONTEXT_SCHEMA_ID = "frontend-review-context-v1";
+async function readRequiredJson(runDir, relativePath) {
+    try {
+        return JSON.parse(await readFile(path.join(runDir, relativePath), "utf8"));
+    }
+    catch {
+        throw new Error(`frontend review context missing or invalid ${relativePath}`);
+    }
+}
+async function readOptionalLintAssessment(runDir) {
+    const relativePath = "contracts/frontend-lint-assessment.json";
+    try {
+        const decoded = JSON.parse(await readFile(path.join(runDir, relativePath), "utf8"));
+        return frontendLintAssessmentArtifactSchema.parse(decoded);
+    }
+    catch (error) {
+        if (error &&
+            typeof error === "object" &&
+            "code" in error &&
+            error.code === "ENOENT") {
+            return undefined;
+        }
+        throw new Error(`frontend review context invalid ${relativePath}`);
+    }
+}
+function assertReviewEvidence(input) {
+    const contract = frontendImplementationContractSchema.safeParse(input.contract);
+    if (!contract.success)
+        throw new Error("frontend review context invalid implementation contract");
+    const trace = input.verificationTrace;
+    const expectedTargets = new Map(contract.data.verificationTargets.map((target) => [target.id, target]));
+    const actualTargets = Array.isArray(trace?.targets) ? trace.targets : [];
+    const mockEvidenceBound = contract.data.mockApi.strategy === "not-needed" ||
+        (typeof trace?.mockCommandNodeId === "string" && trace.mockCommandNodeId.length > 0 &&
+            Array.isArray(trace?.mockCommandLabels) && trace.mockCommandLabels.length > 0 &&
+            Array.isArray(trace?.mockCommandTexts) && trace.mockCommandTexts.length === trace.mockCommandLabels.length &&
+            trace.mockCommandTexts.every((command) => typeof command === "string" && command.length > 0));
+    const actualIds = new Set();
+    const targetsMatch = actualTargets.every((rawTarget) => {
+        if (!rawTarget || typeof rawTarget !== "object")
+            return false;
+        const target = rawTarget;
+        const id = typeof target.id === "string" ? target.id : "";
+        const expected = expectedTargets.get(id);
+        if (!expected || actualIds.has(id))
+            return false;
+        actualIds.add(id);
+        return target.commandLabel === expected.commandLabel &&
+            target.file === expected.file &&
+            target.symbol === expected.symbol &&
+            Array.isArray(target.matchedNodeIds) && target.matchedNodeIds.length > 0;
+    });
+    if (!trace ||
+        trace.schemaId !== "frontend-verification-trace-v1" ||
+        trace.contractSchemaId !== "frontend-implementation-contract-v1" ||
+        trace.browserStatus !== "not-run" ||
+        trace.visualStatus !== "not-run" ||
+        !Array.isArray(trace.targets) ||
+        trace.targets.length === 0 ||
+        trace.targets.some((target) => target?.status !== "ok") ||
+        !targetsMatch ||
+        actualIds.size !== expectedTargets.size ||
+        !mockEvidenceBound ||
+        trace.mockStrategy !== contract.data.mockApi.strategy) {
+        throw new Error("frontend review context verification trace is not bound to a passing contract");
+    }
+    const assessment = frontendRepairAssessmentSchema.safeParse(input.repairAssessment);
+    if (!assessment.success)
+        throw new Error("frontend review context invalid repair assessment");
+}
+export async function runFrontendReviewContextGate(input) {
+    const contract = await readRequiredJson(input.runDir, "contracts/frontend-implementation-contract.json");
+    const parsedContract = frontendImplementationContractSchema.safeParse(contract);
+    if (!parsedContract.success)
+        throw new Error("frontend review context invalid implementation contract");
+    const diff = await runFrontendWorktreeDiffGate({
+        ...input,
+        authorizedChangedPaths: parsedContract.data.targets.files,
+    });
+    const verificationTrace = await readRequiredJson(input.runDir, "contracts/frontend-verification-trace.json");
+    const repairAssessment = await readRequiredJson(input.runDir, "contracts/frontend-repair-assessment.json");
+    const lintAssessment = await readOptionalLintAssessment(input.runDir);
+    assertReviewEvidence({ contract, verificationTrace, repairAssessment });
+    const payload = {
+        schemaVersion: 1,
+        schemaId: FRONTEND_REVIEW_CONTEXT_SCHEMA_ID,
+        contract,
+        verificationTrace,
+        repairAssessment,
+        ...(lintAssessment ? { lintAssessment } : {}),
+        diff: {
+            schemaId: diff.schemaId,
+            patchPath: diff.patchPath,
+            patchSha256: diff.patchSha256,
+            changedFiles: diff.changedFiles,
+            untrackedFiles: diff.untrackedFiles,
+            empty: diff.empty,
+        },
+    };
+    const artifactPath = await writeDagRunJsonArtifact(input.runDir, "contracts/frontend-review-context.json", payload);
+    return { ok: true, artifactPath, diff };
+}
+export function formatFrontendReviewContextStdout(result) {
+    return [
+        "Frontend review context: pass",
+        `Artifact: ${result.artifactPath}`,
+        formatFrontendWorktreeDiffStdout(result.diff),
+    ].join("\n");
+}