@tea-agent/loop-agent 0.13.0-beta.0 → 0.13.0

package/docs/templates/qa-report.md

@@ -1,48 +1,48 @@
-# QA 报告模板
-
-## 日期 / 会话
-
-## 测试范围
-
-## 相关 Contract / Plan
-
-## 测试方法
-
-- 自动化测试：
-- 构建 / 类型检查：
-- Smoke / 手工路径：
-- 其他证据：
-
-## Smoke / 手工检查
-
-- CLI smoke：
-- DAG smoke：
-- Loop workflow smoke：
-- Executor smoke：
-- 结果：pass / blocked / fail
-
-## 通过标准
-
-## 发现项
-
-| ID | Severity | Finding | Evidence | Suggested Fix |
-|----|----------|---------|----------|---------------|
-
-## Failure Routing
-
-| Run / Scenario | Raw Failure | DAG Normalized Category | Product-line Category | Recommended Follow-up | Evidence |
-|---|---|---|---|---|---|
-|  |  |  |  |  |  |
-
-## 新发现的 Bug / 漂移
-
-- 新发现 bug：
-- 发现的契约漂移：
-- 发现的文档/测试不一致：
-
-## 最终结论
-
-- 结论：pass / partial / fail
-- 结论依据：
-
-## 后续项
+# QA 报告模板
+
+## 日期 / 会话
+
+## 测试范围
+
+## 相关 Contract / Plan
+
+## 测试方法
+
+- 自动化测试：
+- 构建 / 类型检查：
+- Smoke / 手工路径：
+- 其他证据：
+
+## Smoke / 手工检查
+
+- CLI smoke：
+- DAG smoke：
+- Loop workflow smoke：
+- Executor smoke：
+- 结果：pass / blocked / fail
+
+## 通过标准
+
+## 发现项
+
+| ID | Severity | Finding | Evidence | Suggested Fix |
+|----|----------|---------|----------|---------------|
+
+## Failure Routing
+
+| Run / Scenario | Raw Failure | DAG Normalized Category | Product-line Category | Recommended Follow-up | Evidence |
+|---|---|---|---|---|---|
+|  |  |  |  |  |  |
+
+## 新发现的 Bug / 漂移
+
+- 新发现 bug：
+- 发现的契约漂移：
+- 发现的文档/测试不一致：
+
+## 最终结论
+
+- 结论：pass / partial / fail
+- 结论依据：
+
+## 后续项

package/docs/templates/sprint-contract.md

@@ -1,29 +1,29 @@
-# Sprint Contract
-
-## 目标（Objective）
-
-描述有边界的工作块。
-
-## 交付物（Deliverables）
-
-- 
-
-## 非目标（Non-goals）
-
-- 
-
-## 验证（Verification）
-
-```bash
-bash scripts/check-repo.sh
-npm run typecheck
-npm test
-```
-
-Windows 上通过 Git Bash 或已配置的兼容 Bash 运行脚本。实际文件操作用平台原生路径。
-
-## 失败条件（Failure Conditions）
-
-- 必需验证无法运行或失败
-- 工作需要超出本 contract 的范围
-- 实现改动了无关文件
+# Sprint Contract
+
+## 目标（Objective）
+
+描述有边界的工作块。
+
+## 交付物（Deliverables）
+
+- 
+
+## 非目标（Non-goals）
+
+- 
+
+## 验证（Verification）
+
+```bash
+bash scripts/check-repo.sh
+npm run typecheck
+npm test
+```
+
+Windows 上通过 Git Bash 或已配置的兼容 Bash 运行脚本。实际文件操作用平台原生路径。
+
+## 失败条件（Failure Conditions）
+
+- 必需验证无法运行或失败
+- 工作需要超出本 contract 的范围
+- 实现改动了无关文件

package/docs/templates/worker-dogfood-evidence.md

@@ -1,80 +1,80 @@
-# Worker Dogfood Evidence
-
-## Sample identity
-
-| Field | Value |
-|---|---|
-| Date | |
-| Feature / Task | |
-| Target repo | disposable path or sanitized reference |
-| Controller package/version | |
-| Agent-worker package/version (same npm install) | |
-| Controller requested entry / real entry | sanitized reference; keep machine-local absolute value in runtime evidence |
-| Controller launch command / args prefix | sanitized reference |
-| Controller binary SHA-256 | |
-| Controller package fingerprint | `sha256:<hex>` |
-| Expected controller version / fingerprint | n/a / exact values |
-| Provider/model / override | |
-| Batch ID | |
-| Worker run ID | |
-| Retry of worker run ID | n/a / |
-| Candidate commit / tarball SHA-256 | n/a / |
-
-## Baseline
-
-- Baseline commit and `git status`:
-- Existing failing behavior or missing capability:
-- Preflight (`loop-agent --version`, `inspect`, `docs audit`, `check-repo`):
-
-## Run evidence
-
-| Artifact | Path / link | Result |
-|---|---|---|
-| TaskSpec / source-doc copies | | |
-| DAG spec | | |
-| DAG report JSON / Markdown | | |
-| DAG skill snapshot ref / SHA-256 / mode | | |
-| shell verification | | |
-| diff | | |
-| closeout or Failure Handoff | | |
-| morning report | | |
-| Observe snapshot / events | | |
-| Controller identity in Worker / Task Pool / batch / Feature evidence | | |
-
-## Candidate takeover evidence (if applicable)
-
-| Field | Value / result |
-|---|---|
-| Candidate isolated slot containment | |
-| `loop-agent` entry / binary SHA-256 / reported version | |
-| `agent-worker` entry / binary SHA-256 / reported version | |
-| Shared package fingerprint | |
-| Full init / doctor / inspect / docs audit / target check-repo | |
-| `agent-worker` skill and `.agents/skills` mirror hashes | |
-| Feature validation / `feature run --dry-run` | |
-| DAG executors | expected: `static`, `shell` only |
-| PATH trap invocations | expected: none |
-| Pi/model executor observed | expected: false; derive from actual DAG nodes |
-| Feature dry-run executed tasks | expected: empty |
-| Canary verdict / evidence path | |
-
-Do not use a deterministic canary result as proof that live Pi/model/provider execution succeeded. Record run-owned skill snapshot evidence and any explicitly authorized live run separately.
-
-## Acceptance and QA coverage
-
-| Acceptance | Test case(s) | Test file / verification | Result |
-|---|---|---|---|
-| | | | |
-
-## Failure / retry (if applicable)
-
-| Raw failure | Product-line category | Recommended follow-up | Root cause evidence | Retry result |
-|---|---|---|---|---|
-| | | | | |
-
-## Conclusion
-
-- Verdict: pass / fail / blocked
-- Review notes:
-- Follow-up task(s):
-- Evidence limitations (for example deterministic-only, no Pi executor/live takeover):
+# Worker Dogfood Evidence
+
+## Sample identity
+
+| Field | Value |
+|---|---|
+| Date | |
+| Feature / Task | |
+| Target repo | disposable path or sanitized reference |
+| Controller package/version | |
+| Agent-worker package/version (same npm install) | |
+| Controller requested entry / real entry | sanitized reference; keep machine-local absolute value in runtime evidence |
+| Controller launch command / args prefix | sanitized reference |
+| Controller binary SHA-256 | |
+| Controller package fingerprint | `sha256:<hex>` |
+| Expected controller version / fingerprint | n/a / exact values |
+| Provider/model / override | |
+| Batch ID | |
+| Worker run ID | |
+| Retry of worker run ID | n/a / |
+| Candidate commit / tarball SHA-256 | n/a / |
+
+## Baseline
+
+- Baseline commit and `git status`:
+- Existing failing behavior or missing capability:
+- Preflight (`loop-agent --version`, `inspect`, `docs audit`, `check-repo`):
+
+## Run evidence
+
+| Artifact | Path / link | Result |
+|---|---|---|
+| TaskSpec / source-doc copies | | |
+| DAG spec | | |
+| DAG report JSON / Markdown | | |
+| DAG skill snapshot ref / SHA-256 / mode | | |
+| shell verification | | |
+| diff | | |
+| closeout or Failure Handoff | | |
+| morning report | | |
+| Observe snapshot / events | | |
+| Controller identity in Worker / Task Pool / batch / Feature evidence | | |
+
+## Candidate takeover evidence (if applicable)
+
+| Field | Value / result |
+|---|---|
+| Candidate isolated slot containment | |
+| `loop-agent` entry / binary SHA-256 / reported version | |
+| `agent-worker` entry / binary SHA-256 / reported version | |
+| Shared package fingerprint | |
+| Full init / doctor / inspect / docs audit / target check-repo | |
+| `agent-worker` skill and `.agents/skills` mirror hashes | |
+| Feature validation / `feature run --dry-run` | |
+| DAG executors | expected: `static`, `shell` only |
+| PATH trap invocations | expected: none |
+| Pi/model executor observed | expected: false; derive from actual DAG nodes |
+| Feature dry-run executed tasks | expected: empty |
+| Canary verdict / evidence path | |
+
+Do not use a deterministic canary result as proof that live Pi/model/provider execution succeeded. Record run-owned skill snapshot evidence and any explicitly authorized live run separately.
+
+## Acceptance and QA coverage
+
+| Acceptance | Test case(s) | Test file / verification | Result |
+|---|---|---|---|
+| | | | |
+
+## Failure / retry (if applicable)
+
+| Raw failure | Product-line category | Recommended follow-up | Root cause evidence | Retry result |
+|---|---|---|---|---|
+| | | | | |
+
+## Conclusion
+
+- Verdict: pass / fail / blocked
+- Review notes:
+- Follow-up task(s):
+- Evidence limitations (for example deterministic-only, no Pi executor/live takeover):

package/docs/templates/worker-dogfood-setup.md

@@ -1,68 +1,68 @@
-# Worker Dogfood Setup Template
-
-Use this template to create a disposable target repository for a real `agent-worker` sample. It is deliberately a target-repo recipe, not a substitute for product requirements.
-
-## Preconditions
-
-- Install one published controller version and record it:
-
-  ```bash
-  npm install -g @tea-agent/loop-agent@<version>
-  npm list -g @tea-agent/loop-agent --depth=0
-  loop-agent --version
-  agent-worker --version
-  agent-worker --help
-  ```
-
-- Before any write-capable Worker command, resolve one controller identity for the batch. Record its package version, absolute launch entry, binary SHA-256, and portable package fingerprint. If the run is part of a release or self-hosting train, carry the expected version/fingerprint as explicit CLI gates.
-- Create a clean, disposable target repository. Do not use `npm link`, `npm run dev`, or a workspace controller for a real-evidence run.
-- Put requirement, acceptance, design, test plan, and QA case matrix next to the TaskSpec. `agent-worker` materializes immutable copies into the harness task source before DAG generation.
-
-## Setup checklist
-
-- [ ] Target has a committed baseline and a passing `loop-agent init --profile full --merge` preflight.
-- [ ] Existing test demonstrates the desired behavior is missing or unimplemented.
-- [ ] TaskSpec has narrow `allowed_paths` and explicit `forbidden_paths`.
-- [ ] Task Pool dependencies are either backed by real prior runs or intentionally recorded as pre-existing evidence.
-- [ ] The chosen model/provider and `--pi-model` smoke override, if any, are recorded.
-- [ ] `--loop-agent-bin` resolves to the intended published package, and expected controller version/fingerprint are recorded before target writes.
-- [ ] If this is a self-hosting run, published N remains fixed for the whole batch; candidate N+1 is installed and verified in a separate slot.
-
-## Execute
-
-```bash
-agent-worker batch run-ready \
-  --feature-dir <feature-dir> \
-  --repo <target-repo> \
-  --loop-agent-bin <published-loop-agent-entry> \
-  --expected-controller-version <version> \
-  --expected-controller-fingerprint <sha256:value> \
-  --limit 1 \
-  --check-repo \
-  [--pi-model <model>]
-
-agent-worker observe snapshot --repo <target-repo> > <evidence-dir>/observe-snapshot.json
-agent-worker report morning --repo <target-repo> --output <evidence-dir>/morning-report.md
-```
-
-For a failed task, do not delete state or alter JSONL evidence. Fix the external/root cause, then make the retry explicit:
-
-```bash
-agent-worker task retry <task-id> --repo <target-repo> --reason "<root cause corrected>"
-agent-worker batch run-ready --feature-dir <feature-dir> --repo <target-repo> --limit 1 --check-repo
-```
-
-The retry run must have a distinct `workerRunId` and retain `retryOfWorkerRunId` in its Task Pool evidence.
-
-## Versioned self-hosting takeover
-
-From a source checkout, use the repo-maintainer deterministic canary after building or packing candidate N+1:
-
-```bash
-npm run self-host:canary -- \
-  --deterministic \
-  --tarball <candidate.tgz> \
-  --output <candidate-canary-evidence.json>
-```
-
-The deterministic canary must prove isolated-slot containment, both candidate bin identities, package fingerprint, full init/governance checks, a zero-execution Feature dry-run, static/shell-only observed DAG executors, and no PATH controller fallback. It does not claim to trap every possible Pi SDK/absolute path and does not replace a separately authorized live Pi run or the DAG skill-snapshot tests.
+# Worker Dogfood Setup Template
+
+Use this template to create a disposable target repository for a real `agent-worker` sample. It is deliberately a target-repo recipe, not a substitute for product requirements.
+
+## Preconditions
+
+- Install one published controller version and record it:
+
+  ```bash
+  npm install -g @tea-agent/loop-agent@<version>
+  npm list -g @tea-agent/loop-agent --depth=0
+  loop-agent --version
+  agent-worker --version
+  agent-worker --help
+  ```
+
+- Before any write-capable Worker command, resolve one controller identity for the batch. Record its package version, absolute launch entry, binary SHA-256, and portable package fingerprint. If the run is part of a release or self-hosting train, carry the expected version/fingerprint as explicit CLI gates.
+- Create a clean, disposable target repository. Do not use `npm link`, `npm run dev`, or a workspace controller for a real-evidence run.
+- Put requirement, acceptance, design, test plan, and QA case matrix next to the TaskSpec. `agent-worker` materializes immutable copies into the harness task source before DAG generation.
+
+## Setup checklist
+
+- [ ] Target has a committed baseline and a passing `loop-agent init --profile full --merge` preflight.
+- [ ] Existing test demonstrates the desired behavior is missing or unimplemented.
+- [ ] TaskSpec has narrow `allowed_paths` and explicit `forbidden_paths`.
+- [ ] Task Pool dependencies are either backed by real prior runs or intentionally recorded as pre-existing evidence.
+- [ ] The chosen model/provider and `--pi-model` smoke override, if any, are recorded.
+- [ ] `--loop-agent-bin` resolves to the intended published package, and expected controller version/fingerprint are recorded before target writes.
+- [ ] If this is a self-hosting run, published N remains fixed for the whole batch; candidate N+1 is installed and verified in a separate slot.
+
+## Execute
+
+```bash
+agent-worker batch run-ready \
+  --feature-dir <feature-dir> \
+  --repo <target-repo> \
+  --loop-agent-bin <published-loop-agent-entry> \
+  --expected-controller-version <version> \
+  --expected-controller-fingerprint <sha256:value> \
+  --limit 1 \
+  --check-repo \
+  [--pi-model <model>]
+
+agent-worker observe snapshot --repo <target-repo> > <evidence-dir>/observe-snapshot.json
+agent-worker report morning --repo <target-repo> --output <evidence-dir>/morning-report.md
+```
+
+For a failed task, do not delete state or alter JSONL evidence. Fix the external/root cause, then make the retry explicit:
+
+```bash
+agent-worker task retry <task-id> --repo <target-repo> --reason "<root cause corrected>"
+agent-worker batch run-ready --feature-dir <feature-dir> --repo <target-repo> --limit 1 --check-repo
+```
+
+The retry run must have a distinct `workerRunId` and retain `retryOfWorkerRunId` in its Task Pool evidence.
+
+## Versioned self-hosting takeover
+
+From a source checkout, use the repo-maintainer deterministic canary after building or packing candidate N+1:
+
+```bash
+npm run self-host:canary -- \
+  --deterministic \
+  --tarball <candidate.tgz> \
+  --output <candidate-canary-evidence.json>
+```
+
+The deterministic canary must prove isolated-slot containment, both candidate bin identities, package fingerprint, full init/governance checks, a zero-execution Feature dry-run, static/shell-only observed DAG executors, and no PATH controller fallback. It does not claim to trap every possible Pi SDK/absolute path and does not replace a separately authorized live Pi run or the DAG skill-snapshot tests.

package/docs/verification-matrix.md

@@ -1,70 +1,70 @@
-# 验证矩阵
-
-用能证明声明的最窄命令。
-
-| 变更类型 | 最低验证 | 更强验证 |
-|---|---|---|
-| 仅文档或治理 | `bash scripts/check-repo.sh` | `bash scripts/ci.sh` |
-| TypeScript runtime | `npm run typecheck` | `npm test` |
-| CLI 行为 | `npm run typecheck` + 定向 Vitest | `npm test` + CLI smoke |
-| Feature reducer/review | `npx vitest run test/worker/feature test/worker/agent-worker-cli.test.ts` | `npm test` + `node bin/agent-worker.js feature review --help` |
-| Feature run orchestration | `npx vitest run test/worker/feature test/worker/runner/run-ready.test.ts test/worker/agent-worker-cli.test.ts` | `npm test` + `node bin/agent-worker.js feature run --help` |
-| Follow-up 分类与事务 | `npx vitest run test/worker/follow-up test/worker/feature test/worker/pool test/worker/report test/worker/agent-worker-cli.test.ts` | `npm test` + `node bin/agent-worker.js task draft-followup --help` + `node bin/agent-worker.js feature approve-followup --help` |
-| Feature Git transaction | `npx vitest run test/worker/delivery test/worker/feature test/worker/runner test/worker/agent-worker-cli.test.ts` | `npm test` + `node bin/agent-worker.js feature run --help` + temporary Git repo smoke |
-| Final verification / Delivery / Closeout | `npx vitest run test/worker/delivery test/worker/feature test/worker/agent-worker-cli.test.ts` | `npm test` + verify-final/Delivery/Closeout CLI help + temporary Git repo evidence/hash/tamper/apply rollback smoke。Closeout 覆盖在 `test/worker/delivery/**` 与 CLI，不存在独立 `test/worker/closeout/` 目录 |
-| Task Pool feature-scoped identity / migration | `npx vitest run test/worker/pool test/worker/runner/run-ready.test.ts test/worker/feature test/worker/follow-up test/worker/delivery test/worker/report test/worker/observability test/worker/observe test/worker/agent-worker-cli.test.ts` + `npm run typecheck` | 平台临时目录 dual-Feature smoke（同名 `QA-EXEC-001` 不串线）+ `pool doctor` / `pool migrate-state` dry-run + Observe canonical/legacy 409 |
-| Controller identity / pinning | `npx vitest run test/worker/package-metadata.test.ts test/worker/repo-preflight.test.ts test/worker/loop-agent-client.test.ts test/worker/run-task/run-task.test.ts test/worker/runner/run-ready.test.ts test/worker/feature/run.test.ts test/worker/delivery/final-verification.test.ts test/worker/delivery/package.test.ts test/worker/agent-worker-cli.test.ts` + `npm run typecheck` | `npm test` + build + 两个 CLI `--version` + 写入型命令 help |
-| DAG resolved skill snapshot / resume | `npx vitest run test/dag-skill-snapshot.test.ts test/dag-approve-resume.test.ts` + `npm run typecheck` | `npm test` + snapshot tamper/pause-resume/dynamic profile smoke |
-| Versioned self-hosting candidate canary | `npx vitest run test/self-host-canary.test.ts test/package-surface.test.ts` + `npm run build` | `npm run self-host:canary -- --deterministic --output <evidence.json>` + `npm pack --dry-run` |
-| Public skill / init mirror surface | `bash scripts/check-skill-entry.sh` + `npx vitest run test/init-command.test.ts test/package-surface.test.ts` | 临时目标项目 full init + skill/mirror hash 对照 + `bash scripts/check-repo.sh` |
-| DAG 工作流 | 定向 DAG 测试 | `npm test` |
-| Eval Replay MVP | `npx vitest run test/eval-replay.test.ts test/eval-cli.test.ts test/cli-contract.test.ts` + `npm run typecheck` | `bash scripts/check-command-registry-drift.sh` + `bash scripts/check-architecture-boundaries.sh` + `node bin/loop-agent.js eval --help` + `bash scripts/check-repo.sh` |
-| Eval Candidate Registry MVP | `npx vitest run test/eval-candidate-registry.test.ts test/eval-cli.test.ts test/cli-contract.test.ts` + `npm run typecheck` | `npm run build` + `bash scripts/check-command-registry-drift.sh` + `bash scripts/check-architecture-boundaries.sh` + `node bin/loop-agent.js eval --help` + `HARNESS_ALLOW_ACTIVE_DAG_RUNS=1 bash scripts/check-repo.sh` |
-| Eval run association W2.3 | `npx vitest run test/eval-run-association.test.ts test/eval-replay.test.ts test/dag-report.test.ts test/run-dag.test.ts` + `npm run typecheck` | `npm run build` + `bash scripts/check-architecture-boundaries.sh` + `bash scripts/check-command-registry-drift.sh` + `HARNESS_ALLOW_ACTIVE_DAG_RUNS=1 bash scripts/check-repo.sh` + `npm run docs:build` + `git diff --check` |
-| 前端 DAG 模板 / 前端节点生成 | `npm run typecheck` + 定向 DAG 测试 | `npm test` + `bash scripts/check-repo.sh` |
-| Production readiness hardening | `bash scripts/check-repo.sh` + 定向 DAG/CLI 测试 | `bash scripts/ci.sh` + docs build + package smoke |
-| 脚本或 CI | 运行变更的脚本 | `bash scripts/ci.sh` |
-| Package / publish 入口 | `npm run build` + `node bin/loop-agent.js --help` | `npm pack --dry-run` |
-| 完整交付 | `bash scripts/ci.sh` | CLI smoke + 相关手工检查 |
-
-常用命令：
-
-```bash
-npm run typecheck
-npm test
-npm run build
-bash scripts/check-repo.sh
-bash scripts/ci.sh
-node bin/loop-agent.js --help
-node bin/loop-agent.js --version
-node bin/agent-worker.js --version
-npm run dev -- --help
-npm pack --dry-run
-npm run self-host:canary -- --deterministic --output <evidence.json>
-```
-
-deterministic self-host canary 必须只执行 static/shell DAG，并在 evidence 中证明 `piExecutorObserved=false`、`modelExecutorObserved=false`、`featureExecutedTasks=[]`、PATH controller trap 未触发且候选入口位于隔离 slot。它不证明 candidate Pi/model/provider 路径，也不替代 `test/dag-skill-snapshot.test.ts` 对候选 skill resolution、snapshot hash 和 resume 的验证。
-
-测试资源策略：`npm test` 会先运行可并行的纯测试，再串行运行会启动 CLI、`tsx` 或 Git 子进程的集成测试。纯测试根据 `os.availableParallelism()` 自适应使用 1 至 4 个 Worker；可用 `LOOP_AGENT_FAST_TEST_WORKERS` 在 CI 或受限机器上显式覆盖。传入测试文件时，例如 `npm test -- test/worker/observe/server.test.ts`，仍按常规 Vitest 方式只运行该范围，不会启动两阶段完整测试。
-
-产品线 Feature/Task/QA 文档或 TaskSpec 约束变更还应运行：
-
-```bash
-bash scripts/check-product-line-docs.sh
-```
-
-该检查对仓库中的 feature packet 执行 `agent-worker task validate-feature`，覆盖 AC 唯一性、依赖/环、TaskSpec 路径与验证命令、QA verdict 与 success closeout 顺序。
-
-Windows 上通过 Git Bash 或已配置的兼容 Bash 运行 `scripts/*.sh`。跨平台 CLI 代码对真实文件操作用原生路径；`/` 仅用于稳定 repo 引用、JSON/Markdown 证据引用和 glob 约定。
-
-没有相关门禁的新鲜命令输出，不得声明完成。
-
-Production Readiness v0.1 工作以 `docs/production-readiness.md` 与 `docs/templates/production-readiness-checklist.md` 为验收契约。最终 hardening closeout 需要：
-
-```bash
-bash scripts/ci.sh
-npm run docs:build
-npm run build
-node bin/loop-agent.js --help
-npm pack --dry-run
-```
+# 验证矩阵
+
+用能证明声明的最窄命令。
+
+| 变更类型 | 最低验证 | 更强验证 |
+|---|---|---|
+| 仅文档或治理 | `bash scripts/check-repo.sh` | `bash scripts/ci.sh` |
+| TypeScript runtime | `npm run typecheck` | `npm test` |
+| CLI 行为 | `npm run typecheck` + 定向 Vitest | `npm test` + CLI smoke |
+| Feature reducer/review | `npx vitest run test/worker/feature test/worker/agent-worker-cli.test.ts` | `npm test` + `node bin/agent-worker.js feature review --help` |
+| Feature run orchestration | `npx vitest run test/worker/feature test/worker/runner/run-ready.test.ts test/worker/agent-worker-cli.test.ts` | `npm test` + `node bin/agent-worker.js feature run --help` |
+| Follow-up 分类与事务 | `npx vitest run test/worker/follow-up test/worker/feature test/worker/pool test/worker/report test/worker/agent-worker-cli.test.ts` | `npm test` + `node bin/agent-worker.js task draft-followup --help` + `node bin/agent-worker.js feature approve-followup --help` |
+| Feature Git transaction | `npx vitest run test/worker/delivery test/worker/feature test/worker/runner test/worker/agent-worker-cli.test.ts` | `npm test` + `node bin/agent-worker.js feature run --help` + temporary Git repo smoke |
+| Final verification / Delivery / Closeout | `npx vitest run test/worker/delivery test/worker/feature test/worker/agent-worker-cli.test.ts` | `npm test` + verify-final/Delivery/Closeout CLI help + temporary Git repo evidence/hash/tamper/apply rollback smoke。Closeout 覆盖在 `test/worker/delivery/**` 与 CLI，不存在独立 `test/worker/closeout/` 目录 |
+| Task Pool feature-scoped identity / migration | `npx vitest run test/worker/pool test/worker/runner/run-ready.test.ts test/worker/feature test/worker/follow-up test/worker/delivery test/worker/report test/worker/observability test/worker/observe test/worker/agent-worker-cli.test.ts` + `npm run typecheck` | 平台临时目录 dual-Feature smoke（同名 `QA-EXEC-001` 不串线）+ `pool doctor` / `pool migrate-state` dry-run + Observe canonical/legacy 409 |
+| Controller identity / pinning | `npx vitest run test/worker/package-metadata.test.ts test/worker/repo-preflight.test.ts test/worker/loop-agent-client.test.ts test/worker/run-task/run-task.test.ts test/worker/runner/run-ready.test.ts test/worker/feature/run.test.ts test/worker/delivery/final-verification.test.ts test/worker/delivery/package.test.ts test/worker/agent-worker-cli.test.ts` + `npm run typecheck` | `npm test` + build + 两个 CLI `--version` + 写入型命令 help |
+| DAG resolved skill snapshot / resume | `npx vitest run test/dag-skill-snapshot.test.ts test/dag-approve-resume.test.ts` + `npm run typecheck` | `npm test` + snapshot tamper/pause-resume/dynamic profile smoke |
+| Versioned self-hosting candidate canary | `npx vitest run test/self-host-canary.test.ts test/package-surface.test.ts` + `npm run build` | `npm run self-host:canary -- --deterministic --output <evidence.json>` + `npm pack --dry-run` |
+| Public skill / init mirror surface | `bash scripts/check-skill-entry.sh` + `npx vitest run test/init-command.test.ts test/package-surface.test.ts` | 临时目标项目 full init + skill/mirror hash 对照 + `bash scripts/check-repo.sh` |
+| DAG 工作流 | 定向 DAG 测试 | `npm test` |
+| Eval Replay MVP | `npx vitest run test/eval-replay.test.ts test/eval-cli.test.ts test/cli-contract.test.ts` + `npm run typecheck` | `bash scripts/check-command-registry-drift.sh` + `bash scripts/check-architecture-boundaries.sh` + `node bin/loop-agent.js eval --help` + `bash scripts/check-repo.sh` |
+| Eval Candidate Registry MVP | `npx vitest run test/eval-candidate-registry.test.ts test/eval-cli.test.ts test/cli-contract.test.ts` + `npm run typecheck` | `npm run build` + `bash scripts/check-command-registry-drift.sh` + `bash scripts/check-architecture-boundaries.sh` + `node bin/loop-agent.js eval --help` + `HARNESS_ALLOW_ACTIVE_DAG_RUNS=1 bash scripts/check-repo.sh` |
+| Eval run association W2.3 | `npx vitest run test/eval-run-association.test.ts test/eval-replay.test.ts test/dag-report.test.ts test/run-dag.test.ts` + `npm run typecheck` | `npm run build` + `bash scripts/check-architecture-boundaries.sh` + `bash scripts/check-command-registry-drift.sh` + `HARNESS_ALLOW_ACTIVE_DAG_RUNS=1 bash scripts/check-repo.sh` + `npm run docs:build` + `git diff --check` |
+| 前端 DAG 模板 / 前端节点生成 | `npm run typecheck` + 定向 DAG 测试 | `npm test` + `bash scripts/check-repo.sh` |
+| Production readiness hardening | `bash scripts/check-repo.sh` + 定向 DAG/CLI 测试 | `bash scripts/ci.sh` + docs build + package smoke |
+| 脚本或 CI | 运行变更的脚本 | `bash scripts/ci.sh` |
+| Package / publish 入口 | `npm run build` + `node bin/loop-agent.js --help` | `npm pack --dry-run` |
+| 完整交付 | `bash scripts/ci.sh` | CLI smoke + 相关手工检查 |
+
+常用命令：
+
+```bash
+npm run typecheck
+npm test
+npm run build
+bash scripts/check-repo.sh
+bash scripts/ci.sh
+node bin/loop-agent.js --help
+node bin/loop-agent.js --version
+node bin/agent-worker.js --version
+npm run dev -- --help
+npm pack --dry-run
+npm run self-host:canary -- --deterministic --output <evidence.json>
+```
+
+deterministic self-host canary 必须只执行 static/shell DAG，并在 evidence 中证明 `piExecutorObserved=false`、`modelExecutorObserved=false`、`featureExecutedTasks=[]`、PATH controller trap 未触发且候选入口位于隔离 slot。它不证明 candidate Pi/model/provider 路径，也不替代 `test/dag-skill-snapshot.test.ts` 对候选 skill resolution、snapshot hash 和 resume 的验证。
+
+测试资源策略：`npm test` 会先运行可并行的纯测试，再串行运行会启动 CLI、`tsx` 或 Git 子进程的集成测试。纯测试根据 `os.availableParallelism()` 自适应使用 1 至 4 个 Worker；可用 `LOOP_AGENT_FAST_TEST_WORKERS` 在 CI 或受限机器上显式覆盖。传入测试文件时，例如 `npm test -- test/worker/observe/server.test.ts`，仍按常规 Vitest 方式只运行该范围，不会启动两阶段完整测试。
+
+产品线 Feature/Task/QA 文档或 TaskSpec 约束变更还应运行：
+
+```bash
+bash scripts/check-product-line-docs.sh
+```
+
+该检查对仓库中的 feature packet 执行 `agent-worker task validate-feature`，覆盖 AC 唯一性、依赖/环、TaskSpec 路径与验证命令、QA verdict 与 success closeout 顺序。
+
+Windows 上通过 Git Bash 或已配置的兼容 Bash 运行 `scripts/*.sh`。跨平台 CLI 代码对真实文件操作用原生路径；`/` 仅用于稳定 repo 引用、JSON/Markdown 证据引用和 glob 约定。
+
+没有相关门禁的新鲜命令输出，不得声明完成。
+
+Production Readiness v0.1 工作以 `ai_workspace/loop-agent/production-readiness.md` 与 `ai_workspace/loop-agent/templates/production-readiness-checklist.md` 为验收契约。最终 hardening closeout 需要：
+
+```bash
+bash scripts/ci.sh
+npm run docs:build
+npm run build
+node bin/loop-agent.js --help
+npm pack --dry-run
+```