@tea-agent/loop-agent 0.10.0 → 0.12.0

package/docs/progress/README.md

@@ -2,4 +2,53 @@
 
 本目录存放应超越聊天上下文的简洁 handoff 日志。
 
-- [`2026-07-11-m2-feature-delivery-loop.md`](2026-07-11-m2-feature-delivery-loop.md) — 第二月 Feature 交付闭环分阶段进度与剩余硬验收
+**索引职责**：本文件维护本目录**全量文件列表**。`docs/README.md` 只链到本 README。
+
+## 近期要点（导读）
+
+- [`2026-07-15-init-update-surface-coverage.md`](2026-07-15-init-update-surface-coverage.md) — 修复初始化 surface 升级漏检（自动发现 copied 文件、blockedTargetPaths fail-safe、drift gate）实施交接（已验证）
+- [`2026-07-15-readonly-node-retry.md`](2026-07-15-readonly-node-retry.md) — 只读 Pi DAG 节点安全重试（默认策略、attempt 证据、validation 门禁）实施交接（已验证）
+- [`2026-07-15-repair-artifact-gate-runtime-contract-implementation.md`](2026-07-15-repair-artifact-gate-runtime-contract-implementation.md) — 显式 repairNodeId、runtime contract preflight 与 run-owned controller identity 实施交接（已验证）
+- [`2026-07-14-observe-ui-r5-boundary-final.md`](2026-07-14-observe-ui-r5-boundary-final.md) — R5 轻量入口与显式模块边界 DAG closeout
+- [`2026-07-14-observe-ui-r5-remediation.md`](2026-07-14-observe-ui-r5-remediation.md) — R5 浏览器状态所有权修复 DAG closeout
+- [`2026-07-14-observe-ui-r5.md`](2026-07-14-observe-ui-r5.md) — Observe 前端模块化与体验收敛（已验证）
+- [`2026-07-14-observe-ui-r4.md`](2026-07-14-observe-ui-r4.md) — Observe 事件时间线、有界 JSONL 与投影健康（已验证）
+- [`2026-07-14-observe-ui-r3.md`](2026-07-14-observe-ui-r3.md) — Observe Feature 决策详情与对象关联导航（已验证）
+- [`2026-07-14-observe-ui-r2.md`](2026-07-14-observe-ui-r2.md) — Observe Batch / Worker Run 证据化详情收口
+- [`2026-07-14-init-canonical-layout-handoff.md`](2026-07-14-init-canonical-layout-handoff.md) — 目标项目初始化布局迁移到 `ai_workspace/loop-agent/` 与 `.agents/skills/` 的跨会话交接
+- [`2026-07-14-self-update-notifier-implementation.md`](2026-07-14-self-update-notifier-implementation.md) — loop-agent CLI 自更新提醒实现、TDD 验证和 bounded DAG fallback 交接
+- [`2026-07-14-docs-living-docs-calibration.md`](2026-07-14-docs-living-docs-calibration.md) — 活文档校准（Dynamic Workflow / 六个月 / ADR）
+- [`2026-07-14-docs-governance-hygiene.md`](2026-07-14-docs-governance-hygiene.md) — 文档治理与双树/索引收敛
+- [`2026-07-14-website-docs-ia-and-converge.md`](2026-07-14-website-docs-ia-and-converge.md) — Website 文档 IA 交接
+- [`2026-07-13-sdd-embedded-skills.md`](2026-07-13-sdd-embedded-skills.md) — 目标项目 repo-local SDD skills 的可选 DAG 节点嵌入、验证与基线风险交接
+- [`2026-07-13-dev-controller-001-implementation.md`](2026-07-13-dev-controller-001-implementation.md) — controller identity 实施
+- [`2026-07-13-dev-snapshot-001-implementation.md`](2026-07-13-dev-snapshot-001-implementation.md) — skill snapshot 实施
+- [`2026-07-13-dev-canary-001-implementation.md`](2026-07-13-dev-canary-001-implementation.md) — candidate canary 实施
+
+## 全量列表（新→旧）
+
+- [`2026-07-15-init-update-surface-coverage.md`](2026-07-15-init-update-surface-coverage.md)
+- [`2026-07-15-readonly-node-retry.md`](2026-07-15-readonly-node-retry.md)
+- [`2026-07-15-repair-artifact-gate-runtime-contract-implementation.md`](2026-07-15-repair-artifact-gate-runtime-contract-implementation.md)
+- [`2026-07-14-observe-ui-r5-boundary-final.md`](2026-07-14-observe-ui-r5-boundary-final.md)
+- [`2026-07-14-observe-ui-r5-remediation.md`](2026-07-14-observe-ui-r5-remediation.md)
+- [`2026-07-14-observe-ui-r5.md`](2026-07-14-observe-ui-r5.md)
+- [`2026-07-14-observe-ui-r4.md`](2026-07-14-observe-ui-r4.md)
+- [`2026-07-14-observe-ui-r3.md`](2026-07-14-observe-ui-r3.md)
+- [`2026-07-14-observe-ui-r2.md`](2026-07-14-observe-ui-r2.md)
+- [`2026-07-14-init-canonical-layout-handoff.md`](2026-07-14-init-canonical-layout-handoff.md)
+- [`2026-07-14-self-update-notifier-implementation.md`](2026-07-14-self-update-notifier-implementation.md)
+- [`2026-07-14-website-docs-ia-and-converge.md`](2026-07-14-website-docs-ia-and-converge.md)
+- [`2026-07-14-docs-living-docs-calibration.md`](2026-07-14-docs-living-docs-calibration.md)
+- [`2026-07-14-docs-governance-hygiene.md`](2026-07-14-docs-governance-hygiene.md)
+- [`2026-07-13-sdd-embedded-skills.md`](2026-07-13-sdd-embedded-skills.md)
+- [`2026-07-13-dev-snapshot-001-implementation.md`](2026-07-13-dev-snapshot-001-implementation.md)
+- [`2026-07-13-dev-controller-001-implementation.md`](2026-07-13-dev-controller-001-implementation.md)
+- [`2026-07-13-dev-canary-001-implementation.md`](2026-07-13-dev-canary-001-implementation.md)
+- [`2026-07-12-pi-only-agent-runtime.md`](2026-07-12-pi-only-agent-runtime.md)
+- [`2026-07-11-observe-dag-visualization.md`](2026-07-11-observe-dag-visualization.md)
+- [`2026-07-11-m2-feature-delivery-loop.md`](2026-07-11-m2-feature-delivery-loop.md)
+- [`2026-07-10-observe-ui-optimization.md`](2026-07-10-observe-ui-optimization.md)
+- [`2026-07-04-dynamic-workflow-dag-engine.md`](2026-07-04-dynamic-workflow-dag-engine.md)
+- [`2026-07-04-commander-cli-migration.md`](2026-07-04-commander-cli-migration.md)
+- [`2026-07-02-loop-agent-subject-restructure.md`](2026-07-02-loop-agent-subject-restructure.md)

package/docs/reports/README.md

@@ -1,22 +1,94 @@
 # 报告
 
-本目录存放验证、审计、benchmark 与 closeout 报告。
+本目录存放验证、审计、benchmark、init evolution 与 closeout 报告。
 
-- [`2026-07-12-m2-completion-audit.md`](2026-07-12-m2-completion-audit.md) — 对第二月规划完成定义、P0、硬指标、非目标与最终门禁的逐项审计
-- [`2026-07-12-m2-08-dogfood-release-evidence.md`](2026-07-12-m2-08-dogfood-release-evidence.md) — 第二个真实 Feature Closeout、真实 Follow-up 恢复、metrics、package/init 与 Observe 浏览器证据
-- [`2026-07-12-m2-08-init-evolution-review.md`](2026-07-12-m2-08-init-evolution-review.md) — M2-08 命令/包能力与空 Feature init 脚本修复的初始化影响审查
+**索引职责**：本文件维护本目录**全量文件列表**。`docs/README.md` 只链到本 README，不再精选单篇 report。
+
+查找约定：
+
+- 按日期前缀浏览下方列表（新→旧）
+- init surface 审查：文件名含 `init-evolution-review`
+- 能力基线滚动分析：[`2026-07-02-repository-analysis.md`](2026-07-02-repository-analysis.md)（**已冻结**；2026-07-15 最终再采样关闭 0.11.0；非第二 CHANGELOG）
+
+## 近期要点（导读，非权威全集）
+
+- [`current-capability-summary.md`](current-capability-summary.md) — **活**能力摘要（新进展写这里 / CHANGELOG / 新 report）
+- [`2026-07-15-init-update-surface-coverage-init-evolution-review.md`](2026-07-15-init-update-surface-coverage-init-evolution-review.md) — 初始化 surface 升级漏检修复的 init surface 审查（init update required）
+- [`2026-07-15-readonly-node-retry-init-evolution-review.md`](2026-07-15-readonly-node-retry-init-evolution-review.md) — 只读 Pi DAG 节点安全重试的 init surface 审查（surface check only，无需 init evolution）
+- [`2026-07-15-backend-test-dag-init-evolution-review.md`](2026-07-15-backend-test-dag-init-evolution-review.md) — 后端测试专用 DAG 的 package/init surface 审查
+- [`2026-07-15-init-canonical-layout-init-evolution-review.md`](2026-07-15-init-canonical-layout-init-evolution-review.md) — init canonical layout、旧布局安全迁移和废弃 harness 字段清理审查
+- [`2026-07-14-self-update-notifier-implementation.md`](2026-07-14-self-update-notifier-implementation.md) — loop-agent CLI 自更新提醒实现、DAG 边界、TDD 与 init surface 非影响证据
+- [`2026-07-14-docs-living-docs-calibration.md`](2026-07-14-docs-living-docs-calibration.md) — 活文档校准（Dynamic Workflow / 六个月 / analysis 冻结 / ADR）
+- [`2026-07-14-docs-governance-hygiene.md`](2026-07-14-docs-governance-hygiene.md) — 文档治理扫描与索引/双树收敛
+- [`2026-07-14-website-docs-ia-and-converge.md`](2026-07-14-website-docs-ia-and-converge.md) — Website IA 与 docs-converge 收口
+- [`2026-07-13-sdd-embedded-skills.md`](2026-07-13-sdd-embedded-skills.md) — repo-local SDD skill 嵌入增强的 DAG、TDD、独立审查、验证和基线风险证据
+- [`2026-07-13-versioned-self-hosting-bootstrap.md`](2026-07-13-versioned-self-hosting-bootstrap.md) — 版本化自举证据
+- [`2026-07-12-m2-completion-audit.md`](2026-07-12-m2-completion-audit.md) — 第二月完成审计
+- [`2026-07-02-repository-analysis.md`](2026-07-02-repository-analysis.md) — **已冻结**仓库能力基线快照（2026-07-15 最终再采样至 0.11.0；勿再当 CHANGELOG）
+
+## 全量列表（新→旧）
+
+- [`2026-07-15-init-update-surface-coverage-init-evolution-review.md`](2026-07-15-init-update-surface-coverage-init-evolution-review.md)
+- [`2026-07-15-readonly-node-retry-init-evolution-review.md`](2026-07-15-readonly-node-retry-init-evolution-review.md)
+- [`2026-07-15-backend-test-dag-init-evolution-review.md`](2026-07-15-backend-test-dag-init-evolution-review.md)
+- [`2026-07-15-init-canonical-layout-init-evolution-review.md`](2026-07-15-init-canonical-layout-init-evolution-review.md)
+- [`dogfood-preflight-static-20260709090443.md`](dogfood-preflight-static-20260709090443.md)
+- [`current-capability-summary.md`](current-capability-summary.md)
+- [`2026-07-14-website-docs-ia-init-evolution-review.md`](2026-07-14-website-docs-ia-init-evolution-review.md)
+- [`2026-07-14-website-docs-ia-and-converge.md`](2026-07-14-website-docs-ia-and-converge.md)
+- [`2026-07-14-self-update-notifier-implementation.md`](2026-07-14-self-update-notifier-implementation.md)
+- [`2026-07-14-docs-living-docs-calibration.md`](2026-07-14-docs-living-docs-calibration.md)
+- [`2026-07-14-docs-governance-hygiene.md`](2026-07-14-docs-governance-hygiene.md)
+- [`2026-07-13-versioned-self-hosting-init-evolution-review.md`](2026-07-13-versioned-self-hosting-init-evolution-review.md)
+- [`2026-07-13-versioned-self-hosting-bootstrap.md`](2026-07-13-versioned-self-hosting-bootstrap.md)
+- [`2026-07-13-test-environment-stability.md`](2026-07-13-test-environment-stability.md)
+- [`2026-07-13-sdd-embedded-skills-init-evolution-review.md`](2026-07-13-sdd-embedded-skills-init-evolution-review.md)
+- [`2026-07-13-sdd-embedded-skills.md`](2026-07-13-sdd-embedded-skills.md)
+- [`2026-07-13-frontend-verification-command-safety-init-evolution-review.md`](2026-07-13-frontend-verification-command-safety-init-evolution-review.md)
+- [`2026-07-13-frontend-skill-contracts-init-evolution-review.md`](2026-07-13-frontend-skill-contracts-init-evolution-review.md)
+- [`2026-07-13-exec-plan-lifecycle-init-evolution-review.md`](2026-07-13-exec-plan-lifecycle-init-evolution-review.md)
+- [`2026-07-13-exec-plan-lifecycle.md`](2026-07-13-exec-plan-lifecycle.md)
 - [`2026-07-12-production-readiness-hardening.md`](2026-07-12-production-readiness-hardening.md)
-- [`2026-07-11-m2-01-init-evolution-review.md`](2026-07-11-m2-01-init-evolution-review.md) — Feature review 命令对 init/package surface 的影响审查
-- [`2026-07-12-m2-02-init-evolution-review.md`](2026-07-12-m2-02-init-evolution-review.md) — Feature run 命令对 init/package surface 的影响审查
-- [`2026-07-12-m2-03-init-evolution-review.md`](2026-07-12-m2-03-init-evolution-review.md) — ProductBug Follow-up 命令对 init/package surface 的影响审查
-- [`2026-07-12-m2-04-init-evolution-review.md`](2026-07-12-m2-04-init-evolution-review.md) — Follow-up 全分类与事务 hardening 对 init/package surface 的影响审查
-- [`2026-07-12-m2-05-init-evolution-review.md`](2026-07-12-m2-05-init-evolution-review.md) — Feature Git checkpoint runtime 对 init/package surface 的影响审查
-- [`2026-07-12-m2-06-init-evolution-review.md`](2026-07-12-m2-06-init-evolution-review.md) — Delivery / Acceptance Coverage / Closeout preview 对 init/package surface 的影响审查
-- [`2026-07-12-m2-07-init-evolution-review.md`](2026-07-12-m2-07-init-evolution-review.md) — Feature Decision Summary、Observe 与 metrics 对 init/package surface 的影响审查
-- [`2026-07-10-next-stage-dogfood-runs.md`](2026-07-10-next-stage-dogfood-runs.md) — 发布控制器下的 BE/FE/QA Worker 样本、retry 与 Observe 证据
-- [`2026-07-10-init-evolution-review.md`](2026-07-10-init-evolution-review.md) — Worker 初始化投影演进审查
-- [`2026-07-10-session-events-dogfood.md`](2026-07-10-session-events-dogfood.md) — Pi SDK DAG 新 run 产生非空 `session-events.jsonl` 与 Observe 过程时间线 API 证据
-- [`2026-07-11-command-performance-followups.md`](2026-07-11-command-performance-followups.md) — Observe 快照复用、输出缓冲和 reference index 遍历优化的验证记录
-- [`2026-07-11-observe-terminal-dag-kpi.md`](2026-07-11-observe-terminal-dag-kpi.md) — 终态 DAG 被误计为活跃数的修复记录
-- [`2026-07-12-observe-warm-console-redesign.md`](2026-07-12-observe-warm-console-redesign.md) — 暖白运行控制台视觉重构与桌面验证记录
-- [`2026-07-02-repository-analysis.md`](2026-07-02-repository-analysis.md) — 仓库能力基线分析（2026-07-10 再采样：0.5.0 + Observe UI 优化 UI-1～UI-9 / Unreleased）
+- [`2026-07-12-pi-only-agent-runtime-init-evolution-review.md`](2026-07-12-pi-only-agent-runtime-init-evolution-review.md)
+- [`2026-07-12-observe-warm-console-redesign.md`](2026-07-12-observe-warm-console-redesign.md)
+- [`2026-07-12-observe-dag-node-model.md`](2026-07-12-observe-dag-node-model.md)
+- [`2026-07-12-observe-dag-node-model-init-evolution-review.md`](2026-07-12-observe-dag-node-model-init-evolution-review.md)
+- [`2026-07-12-m2-completion-audit.md`](2026-07-12-m2-completion-audit.md)
+- [`2026-07-12-m2-08-init-evolution-review.md`](2026-07-12-m2-08-init-evolution-review.md)
+- [`2026-07-12-m2-08-dogfood-release-evidence.md`](2026-07-12-m2-08-dogfood-release-evidence.md)
+- [`2026-07-12-m2-07-init-evolution-review.md`](2026-07-12-m2-07-init-evolution-review.md)
+- [`2026-07-12-m2-06-init-evolution-review.md`](2026-07-12-m2-06-init-evolution-review.md)
+- [`2026-07-12-m2-05-init-evolution-review.md`](2026-07-12-m2-05-init-evolution-review.md)
+- [`2026-07-12-m2-04-init-evolution-review.md`](2026-07-12-m2-04-init-evolution-review.md)
+- [`2026-07-12-m2-03-init-evolution-review.md`](2026-07-12-m2-03-init-evolution-review.md)
+- [`2026-07-12-m2-02-init-evolution-review.md`](2026-07-12-m2-02-init-evolution-review.md)
+- [`2026-07-12-init-evolution-strict-report-range.md`](2026-07-12-init-evolution-strict-report-range.md)
+- [`2026-07-12-dag-state-reconciliation.md`](2026-07-12-dag-state-reconciliation.md)
+- [`2026-07-12-dag-state-reconciliation-init-evolution-review.md`](2026-07-12-dag-state-reconciliation-init-evolution-review.md)
+- [`2026-07-12-dag-output-language.md`](2026-07-12-dag-output-language.md)
+- [`2026-07-12-dag-output-language-init-evolution-review.md`](2026-07-12-dag-output-language-init-evolution-review.md)
+- [`2026-07-12-dag-liveness-recovery.md`](2026-07-12-dag-liveness-recovery.md)
+- [`2026-07-12-dag-liveness-init-evolution-review.md`](2026-07-12-dag-liveness-init-evolution-review.md)
+- [`2026-07-12-0.10.0-init-evolution-review.md`](2026-07-12-0.10.0-init-evolution-review.md)
+- [`2026-07-11-task-pool-hard-cutover-init-evolution-review.md`](2026-07-11-task-pool-hard-cutover-init-evolution-review.md)
+- [`2026-07-11-round3-worker-expansion.md`](2026-07-11-round3-worker-expansion.md)
+- [`2026-07-11-round2-interactive-ui-experiment.md`](2026-07-11-round2-interactive-ui-experiment.md)
+- [`2026-07-11-round2-init-evolution-review.md`](2026-07-11-round2-init-evolution-review.md)
+- [`2026-07-11-observe-terminal-dag-kpi.md`](2026-07-11-observe-terminal-dag-kpi.md)
+- [`2026-07-11-observe-dag-visualization.md`](2026-07-11-observe-dag-visualization.md)
+- [`2026-07-11-m2-01-init-evolution-review.md`](2026-07-11-m2-01-init-evolution-review.md)
+- [`2026-07-11-init-evolution-review.md`](2026-07-11-init-evolution-review.md)
+- [`2026-07-11-commit-1d0f3b7-review.md`](2026-07-11-commit-1d0f3b7-review.md)
+- [`2026-07-11-command-performance-followups.md`](2026-07-11-command-performance-followups.md)
+- [`2026-07-11-command-performance-audit.md`](2026-07-11-command-performance-audit.md)
+- [`2026-07-11-0.7.5-init-evolution-review.md`](2026-07-11-0.7.5-init-evolution-review.md)
+- [`2026-07-10-session-events-dogfood.md`](2026-07-10-session-events-dogfood.md)
+- [`2026-07-10-nightly-drill-round-1.md`](2026-07-10-nightly-drill-round-1.md)
+- [`2026-07-10-nightly-drill-round-1-evidence.md`](2026-07-10-nightly-drill-round-1-evidence.md)
+- [`2026-07-10-next-stage-dogfood-runs.md`](2026-07-10-next-stage-dogfood-runs.md)
+- [`2026-07-10-init-evolution-review.md`](2026-07-10-init-evolution-review.md)
+- [`2026-07-09-be-001-pi-real-run.md`](2026-07-09-be-001-pi-real-run.md)
+- [`2026-07-05-website-docs-governance-multi-executor-dogfood.md`](2026-07-05-website-docs-governance-multi-executor-dogfood.md)
+- [`2026-07-04-website-docs-dynamic-workflow-dogfood.md`](2026-07-04-website-docs-dynamic-workflow-dogfood.md)
+- [`2026-07-02-repository-analysis.md`](2026-07-02-repository-analysis.md)
+- [`2026-06-06-pi-sdk-runtime-reuse-benchmark.md`](2026-06-06-pi-sdk-runtime-reuse-benchmark.md)

package/docs/skills/README.md

@@ -3,4 +3,5 @@
 This directory records repo-local skill wrappers and vetting notes used by Agent DAG role mapping.
 
 - `vetted-skill-registry.md` — supported roles, source inspiration, risk notes, and default/optional usage.
-
+- `../../skills/agent-worker/SKILL.md` — optional outer-loop operator skill for Feature Packet, TaskSpec, Task Pool, controller pinning, self-hosting canaries, and Worker recovery. Single DAG implementation or runtime repair stays with `loop-agent`; this skill is not a default DAG role skill.
+- `../../scripts/check-skill-entry.sh` — validates both public skill entries, their required references, line budgets, and the `agent-worker` trigger vocabulary.

package/docs/skills/vetted-skill-registry.md

@@ -8,6 +8,7 @@ The entries below are local wrappers or existing local skills. They are not whol
 |---|---|---|---|---|---|
 | `ai-engineering-context` | local existing | `skills/ai-engineering-context/SKILL.md` | scout, default context | default/scout | Read-only engineering context; not a private platform memory skill. |
 | `loop-agent` | local existing | `skills/loop-agent/SKILL.md` | planner, supervisor, closeout | planner/closeout | Long references may be resolved by strict audit with expanded budget; executor behavior unchanged. |
+| `agent-worker` | local operator skill | `skills/agent-worker/SKILL.md` | outer-loop operator only | never a default DAG role | Routes Feature Packet, TaskSpec, Task Pool, controller pinning, self-hosting canary, and failure recovery. Must not launch recursively from DAG leaves or duplicate executor/kernel behavior. |
 | `verification-before-completion` | local wrapper inspired by verification discipline | `skills/verification-before-completion/SKILL.md` | implementer, verifier, closeout | implementer/verifier/closeout | Requires shell evidence before completion claims. |
 | `systematic-debugging` | local wrapper inspired by systematic debugging discipline | `skills/systematic-debugging/SKILL.md` | implementer, verifier | verifier | Advisory prompt guidance only; does not run tools by itself. |
 | `requesting-code-review` | local existing | `skills/requesting-code-review/SKILL.md` | reviewer | reviewer | Review prompt guidance only. |
@@ -20,7 +21,7 @@ The entries below are local wrappers or existing local skills. They are not whol
 ## Vetting Rules
 
 - Default role mappings may reference only repo-local skills that resolve cleanly under `dag validate --strict-skills`.
+- `agent-worker` is explicitly outside default role mappings. Its trigger description must cover `agent-worker`, Feature Packet, TaskSpec, Task Pool, self-host/candidate and the `loop-agent` routing boundary; `scripts/check-skill-entry.sh` enforces this public entry contract.
 - Optional/security/web skills remain task- or profile-specific until their tool, network, credential, and write behavior is reviewed.
 - This registry records source inspiration, not license clearance for vendored third-party content. Vendoring requires a separate license/security review.
 - `SKILL.md` is the entry point. References must be declared in frontmatter and stay within the skill directory.
-

package/docs/templates/agent-dag-report.schema.json

@@ -328,7 +328,7 @@
         "order": { "type": "integer", "minimum": 0 },
         "executor": {
           "type": "string",
-          "enum": ["cursor", "pi", "shell", "static"]
+          "enum": ["pi", "shell", "static"]
         },
         "model": { "type": "string" },
         "status": {
@@ -400,11 +400,11 @@
             "pending",
             "running",
             "finished",
-            "partial_failed",
-            "failed",
-            "paused",
-            "superseded",
-            "abandoned"
+            "partial_failed",
+            "failed",
+            "paused",
+            "superseded",
+            "abandoned"
           ]
         },
         "runDir": { "type": "string", "minLength": 1 },
@@ -444,6 +444,23 @@
         },
         "pausedByNodeId": { "type": "string" },
         "pauseReason": { "type": "string" },
+        "controllerIdentity": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["status", "capturedAt", "runtimeContractCompatibility"],
+          "properties": {
+            "status": { "enum": ["pinned", "legacy-unpinned"] },
+            "capturedAt": { "type": "string" },
+            "packageName": { "type": "string" },
+            "packageVersion": { "type": "string" },
+            "packageFingerprint": { "type": "string" },
+            "binarySha256": { "type": "string" },
+            "runtimeContractCompatibility": {
+              "enum": ["compatible", "incompatible", "legacy-unspecified"]
+            },
+            "runtimeContractReason": { "type": "string" }
+          }
+        },
         "executorJsonl": { "$ref": "#/$defs/dagArtifactRef" },
         "convergence": { "$ref": "#/$defs/dagConvergence" },
         "nodes": {

package/docs/templates/agent-dag.base.json

@@ -57,11 +57,6 @@
     ]
   },
   "executorModels": {
-    "cursor": {
-      "LOW": "composer-2.5",
-      "MED": "composer-2.5",
-      "HIGH": "gpt-5.5"
-    },
     "pi": {
       "LOW": "gpt-5.3-codex-spark",
       "MED": "glm-5.2",

package/docs/templates/agent-dag.final-verification.json

@@ -25,11 +25,6 @@
     ]
   },
   "executorModels": {
-    "cursor": {
-      "LOW": "composer-2.5",
-      "MED": "composer-2.5",
-      "HIGH": "gpt-5.5"
-    },
     "pi": {
       "LOW": "gpt-5.3-codex-spark",
       "MED": "glm-5.2",

package/docs/templates/agent-dag.schema.json

@@ -5,18 +5,29 @@
   "type": "object",
   "additionalProperties": false,
   "required": ["version", "title", "tasks"],
+  "allOf": [
+    {
+      "if": { "properties": { "version": { "const": 3 } }, "required": ["version"] },
+      "then": { "required": ["runtimeContract"] }
+    },
+    {
+      "if": { "required": ["runtimeContract"] },
+      "then": { "properties": { "version": { "const": 3 } } }
+    }
+  ],
   "properties": {
     "$schema": {
       "type": "string"
     },
     "version": {
-      "enum": [1, 2],
+      "enum": [1, 2, 3],
       "default": 1
     },
     "title": {
       "type": "string",
       "minLength": 1
     },
+    "runtimeContract": { "$ref": "#/$defs/runtimeContract" },
     "objective": {
       "type": "string"
     },
@@ -59,7 +70,6 @@
       "description": "Executor-owned model routing template keyed by executor then complexity. Do not use legacy top-level models or defaults.model.",
       "additionalProperties": false,
       "properties": {
-        "cursor": { "$ref": "#/$defs/complexityModelMap" },
         "pi": { "$ref": "#/$defs/complexityModelMap" }
       }
     },
@@ -73,11 +83,26 @@
     "required": ["models"]
   },
   "$defs": {
+    "runtimeContract": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["schemaVersion", "agentRuntime", "repairWriterProtocol"],
+      "description": "DagSpec v3 controller capability handshake. Compatibility is decided by capability fields first; minimumControllerVersion is enforced when present. Legacy v1/v2 DAGs may omit this block.",
+      "properties": {
+        "schemaVersion": { "const": 1 },
+        "agentRuntime": { "const": "pi-only" },
+        "repairWriterProtocol": { "const": "explicit-node-v1" },
+        "minimumControllerVersion": {
+          "type": "string",
+          "pattern": "^\\d+\\.\\d+\\.\\d+([-+].+)?$"
+        }
+      }
+    },
     "complexity": {
       "enum": ["LOW", "MED", "HIGH"]
     },
     "executor": {
-      "enum": ["cursor", "pi", "shell", "static"]
+      "enum": ["pi", "shell", "static"]
     },
     "toolProfile": {
       "enum": ["read-only", "write"]
@@ -141,6 +166,11 @@
         "fromNodeId": {
           "type": "string",
           "pattern": "^[a-z][a-z0-9-]*$"
+        },
+        "repairNodeId": {
+          "type": "string",
+          "pattern": "^[a-z][a-z0-9-]*$",
+          "description": "Explicit governed Pi repair writer this gate feeds (executor=pi, toolProfile=write, writePolicy=exclusive, non-empty allowedPaths+writeSet, depends_on the gate). New DAGs must set this; legacy DAGs are only accepted when a unique safe downstream Pi writer can be derived."
         }
       }
     },
@@ -212,6 +242,39 @@
         "status": { "enum": ["success", "error"] }
       }
     },
+    "retryPolicy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["maxAttempts"],
+      "description": "Retry policy for safe read-only planner/scout/reviewer/verifier/closeout Pi nodes. Total attempts include the first try and are capped at five. Supervisors, implementers, and side-effecting nodes are ineligible. Only the categories listed in retryCategories are retried; quota/auth/invalid-output/write-guard are never retried.",
+      "properties": {
+        "maxAttempts": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 5,
+          "description": "Total attempts including the first try. 1 disables retry."
+        },
+        "backoff": { "const": "exponential", "default": "exponential" },
+        "initialDelayMs": {
+          "type": "integer",
+          "minimum": 0,
+          "default": 2000
+        },
+        "maxDelayMs": {
+          "type": "integer",
+          "minimum": 0,
+          "default": 30000
+        },
+        "retryCategories": {
+          "type": "array",
+          "items": {
+            "enum": ["timeout", "network", "rate-limit", "unavailable"]
+          },
+          "default": ["timeout", "network", "rate-limit", "unavailable"],
+          "description": "Failure categories eligible for retry. quota is never eligible."
+        }
+      }
+    },
     "promptSource": {
       "type": "object",
       "additionalProperties": false,
@@ -297,6 +360,10 @@
               "default": "record-only"
             }
           }
+        },
+        "retryPolicy": {
+          "$ref": "#/$defs/retryPolicy",
+          "description": "Opt-in retry policy. Allowed only on safe read-only planner/scout/reviewer/verifier/closeout non-dynamic Pi nodes; validation rejects it on supervisors, implementers, writers, dynamic, shell, static, docs-only, and decision-gate nodes. Generated DAGs declare the default policy on eligible nodes automatically."
         }
       },
       "oneOf": [

package/docs/templates/agent-dag.supervised-implementation.json

@@ -1,7 +1,12 @@
 {
   "$schema": "./agent-dag.schema.json",
-  "version": 2,
+  "version": 3,
   "title": "Agent DAG supervised implementation template",
+  "runtimeContract": {
+    "schemaVersion": 1,
+    "agentRuntime": "pi-only",
+    "repairWriterProtocol": "explicit-node-v1"
+  },
   "objective": "Demonstrate a reusable supervised implementation DAG: contract → parallel scouts → plan → write-set audit → write-set gate → implement → soft verify → process supervisor → repair → hard verify → review verdict → review gate → decision gate → closeout. Write-set, process, and review verdict nodes emit first-line VERDICT for deterministic gates, reducing main-session intervention.",
   "successCriteria": [
     "contract-pi returns a read-only implementation contract with narrow write boundaries",
@@ -22,7 +27,7 @@
   "globalConstraints": [
     "Replace every REPLACE/WITH/... placeholder with concrete repo paths before execution; do not leave template placeholders in production DAG JSON.",
     "Do not commit from DAG nodes; main session inspects and commits after Decision Gate approval.",
-    "Use only existing executors: pi, shell, static; cursor is optional when explicitly enabled. Pi writer nodes must set toolProfile=write.",
+    "Use only existing executors: pi, shell, static. Cursor is available only through the explicit cursor-prompt sidecar, never as a DAG executor. Pi writer nodes must set toolProfile=write.",
     "Read-only nodes must not write repository files, including root artifacts/**.",
     "Exclusive writer nodes must stay within declared writeSet.",
     "Do not implement automatic retry/resume or mutate historical completed facts.",
@@ -73,11 +78,6 @@
     ]
   },
   "executorModels": {
-    "cursor": {
-      "LOW": "composer-2.5",
-      "MED": "composer-2.5",
-      "HIGH": "gpt-5.5"
-    },
     "pi": {
       "LOW": "gpt-5.3-codex-spark",
       "MED": "glm-5.2",
@@ -323,7 +323,8 @@
           "lineMode": "first-verdict-line"
         },
         "repairArtifactGate": {
-          "fromNodeId": "process-supervisor-pi"
+          "fromNodeId": "process-supervisor-pi",
+          "repairNodeId": "repair-pi"
         },
         "cwd": ".",
         "timeoutMs": 60000

package/docs/templates/backend-test-dag.generate-pytest.prompt.md

@@ -0,0 +1,139 @@
+# Backend Test DAG Generate Pytest Prompt Template
+
+## Purpose
+
+Use this prompt for a **pytest code generation** node: `executor: "pi"`, `role: "implementer"`, `toolProfile: "write"`, `writePolicy: "exclusive"`. The implementer converts reviewed backend functional test cases into pytest automation code with 1:1 traceability.
+
+Do **not** create a new executor type. This is a standard `executor: pi` writer node.
+
+## Recommended DAG Node Shape
+
+```json
+{
+  "id": "generate-backend-pytest-pi",
+  "depends_on": ["review-backend-cases-gate-shell"],
+  "complexity": "HIGH",
+  "executor": "pi",
+  "role": "implementer",
+  "toolProfile": "write",
+  "writePolicy": "exclusive",
+  "writeSet": ["testcase/**/test_*.py"],
+  "allowedPaths": ["testcase/**/test_*.py"],
+  "forbiddenPaths": [".harness/**", "artifacts/**"],
+  "outputContract": "Pytest test files under tests/backend/ with 1:1 mapping to functional test case IDs. Summary lists generated files, test function count, and any skipped cases with reasons.",
+  "subtask_prompt_markdown": "./backend-test-dag.generate-pytest.prompt.md"
+}
+```
+
+## Prompt Body
+
+You are the Backend Test DAG **pytest code generator**.
+
+Your job is to convert reviewed test cases under `testcase/md/` into pytest automation code. Write test files under `testcase/` only. Stay within `writeSet`. Do not write root `artifacts/**`.
+
+### Output Steps (do in order)
+
+1. First, output a brief summary: how many files, how many test functions planned
+2. Then write each test file under `testcase/`
+
+### Inputs
+
+1. **Reviewed test cases** — files under `testcase/md/` (approved by `review-backend-cases-pi`).
+2. **Target project conventions** — read `conftest.py`, `pytest.ini` / `pyproject.toml` to understand conventions, but do NOT modify them.
+
+Do NOT re-read source documents. Use the reviewed cases only.
+
+### Conversion Rules
+
+#### File Naming
+
+- Every test file must start with `test_` prefix (e.g. `test_order.py`, `test_user_api.py`)
+- pytest collects tests from files matching `test_*.py` or `*_test.py` — use `test_` prefix exclusively
+- Never create test files without the `test_` prefix
+
+#### Write Boundary
+
+- Only **create new** test script files under `testcase/`
+- Do NOT modify existing files: `conftest.py`, `pytest.ini`, `pyproject.toml`, `setup.cfg`, `__init__.py`, or any other framework/config file
+- Reuse existing fixtures; if required fixtures do not exist, report the gap instead of creating or modifying framework files
+- Read existing framework files to understand conventions, but treat them as immutable
+
+#### Naming Conflict Resolution
+
+- If a file with the target name already exists under `testcase/`, add a numeric suffix: `test_order.py` → `test_order_01.py` → `test_order_02.py`
+- Never overwrite or append to existing files — each test script must be a standalone file
+- Check for existing files before writing; if `test_<module>.py` exists, use `test_<module>_01.py`
+
+#### 1:1 Traceability
+
+Every functional test case ID (`BE-<MODULE>-<NNN>`) must map to exactly one pytest function:
+
+```python
+# testcase/md/BE-ORDER-001 → testcase/test_order.py
+def test_BE_ORDER_001_create_order_with_valid_data():
+    """BE-ORDER-001: Create order with valid request body."""
+    ...
+```
+
+- Function name: `test_<CASE_ID_with_underscores>` (e.g. `test_BE_ORDER_001_...`)
+- Docstring first line: `<CASE_ID>: <Case Title>`
+
+#### File Organization
+
+- All test files go under `testcase/` directory in the host project root
+- Group test files by MODULE segment: `BE-ORDER-*` → `testcase/test_order.py`, `BE-USER-*` → `testcase/test_user.py`
+- Follow existing project conventions for import style, fixture scope
+
+#### Fixture Strategy
+
+- Reuse existing project fixtures from `conftest.py` when available
+- Do not create or modify fixture/configuration files in this node
+- Prefer `@pytest.fixture(scope="function")` for test isolation
+- Use `@pytest.mark.parametrize` for boundary condition cases with multiple inputs
+
+#### Test Integrity
+
+- Tests verify implementation correctness — if a test fails, the implementation likely has a bug, not the test
+- Do NOT weaken assertions, remove test cases, or modify test logic to make tests pass
+- Do NOT add workarounds, skips, or try/except blocks to hide failures without explicit justification
+- Report all failures honestly in the output; the downstream `execute-backend-pytest-shell` node captures exit codes and stdout/stderr as-is
+
+#### Assertions
+
+- Use `assert` statements, not `unittest` assertions
+- Assert specific values, not just "no exception"
+- For API tests: assert status code, response body keys, and specific field values
+- For database tests: assert record state after operation
+
+#### Conditional Test Implementation (include ONLY if test cases exist)
+
+- **Authentication tests**: implement ONLY if `testcase/md/` contains auth-related cases
+  - Use `@pytest.mark.auth` marker
+  - Test no token, expired token, invalid token, insufficient permissions, cross-user access
+- **Timeout tests**: implement ONLY if `testcase/md/` contains timeout-related cases
+  - Use `@pytest.mark.timeout` marker
+  - Use `unittest.mock.patch` or `pytest-mock` to simulate slow responses
+- If no such cases exist in the reviewed test cases, do NOT add these tests
+
+#### Markers
+
+- `@pytest.mark.positive` — happy path cases
+- `@pytest.mark.negative` — error/exception cases
+- `@pytest.mark.boundary` — edge cases
+- `@pytest.mark.<MODULE>` — module-specific marker (e.g. `@pytest.mark.order`)
+
+#### Skip Policy
+
+If a test case cannot be automated (requires external service not mockable, requires manual verification), add it with `@pytest.mark.skip(reason="...")` and document the reason. Do not omit the function — traceability requires it exists.
+
+### Output Shape (after summary line)
+
+After the mandatory summary line, provide:
+
+1. **Generated Files** — list of files written under `tests/backend/`.
+2. **Function Mapping Table** — `| Test Case ID | Pytest Function | File | Marker |`.
+3. **Skipped Cases** — if any, list with reason.
+4. **Conventions Observed** — note project fixtures/config discovered and followed.
+5. **Residual Risks** — cases that may need manual verification or environment setup.
+
+Do not include chain-of-thought. Do not write root `artifacts/**`.