@tea-agent/loop-agent 0.2.0 → 0.2.1

package/dist/commands/init.js

@@ -88,474 +88,474 @@ const COMPAT_PROMPTS = {
     ].join("\n"),
 };
 const GOVERNANCE_ROOT_TOKEN = "__LOOP_AGENT_GOVERNANCE_ROOT__";
-const INIT_CHECK_ENGINEERING_STRUCTURE_SH = `#!/usr/bin/env bash
-set -euo pipefail
-
-ROOT_DIR="$(cd "$(dirname "\${BASH_SOURCE[0]}")/.." && pwd)"
-cd "\${ROOT_DIR}"
-
-required_paths=(
-  "README.md"
-  "harness.json"
-  "AGENTS.md"
-  "${GOVERNANCE_ROOT_TOKEN}/README.md"
-  "${GOVERNANCE_ROOT_TOKEN}/development-principles.md"
-  "${GOVERNANCE_ROOT_TOKEN}/feature-workflow.md"
-  "${GOVERNANCE_ROOT_TOKEN}/verification-matrix.md"
-  "${GOVERNANCE_ROOT_TOKEN}/architecture/runtime-boundaries.md"
-  "${GOVERNANCE_ROOT_TOKEN}/templates"
-  "skills/loop-agent/SKILL.md"
-  ".harness/prompts/analyze.md"
-  ".harness/prompts/plan.md"
-  ".harness/tasks"
-  ".harness/dag-runs/active"
-  ".harness/dag-runs/completed"
-  ".harness/dag-runs/paused"
-  ".harness/runs/active"
-  ".harness/runs/completed"
-  ".harness/runs/failed"
-  "scripts/check-engineering-structure.sh"
-  "scripts/check-doc-index.sh"
-  "scripts/check-doc-links.sh"
-  "scripts/check-active-plan-status.sh"
-  "scripts/check-exec-plan-index-sync.sh"
-  "scripts/check-harness-runtime-clean.sh"
-  "scripts/check-architecture-boundaries.sh"
-  "scripts/check-skill-entry.sh"
-  "scripts/check-repo.sh"
-  "scripts/ci-governance.sh"
-  "scripts/ci-tests.sh"
-  "scripts/ci.sh"
-)
-
-missing=()
-for item in "\${required_paths[@]}"; do
-  if [[ ! -e "\${item}" ]]; then
-    missing+=("\${item}")
-  fi
-done
-
-if (( \${#missing[@]} > 0 )); then
-  echo "loop-agent 初始化检查失败，缺少必要路径："
-  for item in "\${missing[@]}"; do
-    echo "  - \${item}"
-  done
-  exit 1
-fi
-
-echo "loop-agent 工程结构检查通过"
+const INIT_CHECK_ENGINEERING_STRUCTURE_SH = `#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "\${BASH_SOURCE[0]}")/.." && pwd)"
+cd "\${ROOT_DIR}"
+
+required_paths=(
+  "README.md"
+  "harness.json"
+  "AGENTS.md"
+  "${GOVERNANCE_ROOT_TOKEN}/README.md"
+  "${GOVERNANCE_ROOT_TOKEN}/development-principles.md"
+  "${GOVERNANCE_ROOT_TOKEN}/feature-workflow.md"
+  "${GOVERNANCE_ROOT_TOKEN}/verification-matrix.md"
+  "${GOVERNANCE_ROOT_TOKEN}/architecture/runtime-boundaries.md"
+  "${GOVERNANCE_ROOT_TOKEN}/templates"
+  "skills/loop-agent/SKILL.md"
+  ".harness/prompts/analyze.md"
+  ".harness/prompts/plan.md"
+  ".harness/tasks"
+  ".harness/dag-runs/active"
+  ".harness/dag-runs/completed"
+  ".harness/dag-runs/paused"
+  ".harness/runs/active"
+  ".harness/runs/completed"
+  ".harness/runs/failed"
+  "scripts/check-engineering-structure.sh"
+  "scripts/check-doc-index.sh"
+  "scripts/check-doc-links.sh"
+  "scripts/check-active-plan-status.sh"
+  "scripts/check-exec-plan-index-sync.sh"
+  "scripts/check-harness-runtime-clean.sh"
+  "scripts/check-architecture-boundaries.sh"
+  "scripts/check-skill-entry.sh"
+  "scripts/check-repo.sh"
+  "scripts/ci-governance.sh"
+  "scripts/ci-tests.sh"
+  "scripts/ci.sh"
+)
+
+missing=()
+for item in "\${required_paths[@]}"; do
+  if [[ ! -e "\${item}" ]]; then
+    missing+=("\${item}")
+  fi
+done
+
+if (( \${#missing[@]} > 0 )); then
+  echo "loop-agent 初始化检查失败，缺少必要路径："
+  for item in "\${missing[@]}"; do
+    echo "  - \${item}"
+  done
+  exit 1
+fi
+
+echo "loop-agent 工程结构检查通过"
 `;
-const INIT_CHECK_DOC_INDEX_SH = `#!/usr/bin/env bash
-set -euo pipefail
-
-ROOT_DIR="$(cd "$(dirname "\${BASH_SOURCE[0]}")/.." && pwd)"
-cd "\${ROOT_DIR}"
-
-required_docs=(
-  "${GOVERNANCE_ROOT_TOKEN}/README.md"
-  "${GOVERNANCE_ROOT_TOKEN}/development-principles.md"
-  "${GOVERNANCE_ROOT_TOKEN}/feature-workflow.md"
-  "${GOVERNANCE_ROOT_TOKEN}/verification-matrix.md"
-  "${GOVERNANCE_ROOT_TOKEN}/architecture/runtime-boundaries.md"
-  "${GOVERNANCE_ROOT_TOKEN}/loop-agent-harness.md"
-  "${GOVERNANCE_ROOT_TOKEN}/harness-methodology-tdd.md"
-  "${GOVERNANCE_ROOT_TOKEN}/harness-methodology-verification.md"
-  "${GOVERNANCE_ROOT_TOKEN}/harness-methodology-debugging.md"
-  "${GOVERNANCE_ROOT_TOKEN}/templates"
-  "${GOVERNANCE_ROOT_TOKEN}/exec-plans/active/README.md"
-  "${GOVERNANCE_ROOT_TOKEN}/exec-plans/completed/README.md"
-  "${GOVERNANCE_ROOT_TOKEN}/progress/README.md"
-  "${GOVERNANCE_ROOT_TOKEN}/reports/README.md"
-  "${GOVERNANCE_ROOT_TOKEN}/decisions/README.md"
-)
-
-missing=()
-for item in "\${required_docs[@]}"; do
-  if [[ ! -e "\${item}" ]]; then
-    missing+=("\${item}")
-  fi
-done
-
-if (( \${#missing[@]} > 0 )); then
-  echo "docs 索引检查失败，缺少必要文档或目录：" >&2
-  for item in "\${missing[@]}"; do
-    echo "  - \${item}" >&2
-  done
-  exit 1
-fi
-
-echo "docs 索引检查通过"
+const INIT_CHECK_DOC_INDEX_SH = `#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "\${BASH_SOURCE[0]}")/.." && pwd)"
+cd "\${ROOT_DIR}"
+
+required_docs=(
+  "${GOVERNANCE_ROOT_TOKEN}/README.md"
+  "${GOVERNANCE_ROOT_TOKEN}/development-principles.md"
+  "${GOVERNANCE_ROOT_TOKEN}/feature-workflow.md"
+  "${GOVERNANCE_ROOT_TOKEN}/verification-matrix.md"
+  "${GOVERNANCE_ROOT_TOKEN}/architecture/runtime-boundaries.md"
+  "${GOVERNANCE_ROOT_TOKEN}/loop-agent-harness.md"
+  "${GOVERNANCE_ROOT_TOKEN}/harness-methodology-tdd.md"
+  "${GOVERNANCE_ROOT_TOKEN}/harness-methodology-verification.md"
+  "${GOVERNANCE_ROOT_TOKEN}/harness-methodology-debugging.md"
+  "${GOVERNANCE_ROOT_TOKEN}/templates"
+  "${GOVERNANCE_ROOT_TOKEN}/exec-plans/active/README.md"
+  "${GOVERNANCE_ROOT_TOKEN}/exec-plans/completed/README.md"
+  "${GOVERNANCE_ROOT_TOKEN}/progress/README.md"
+  "${GOVERNANCE_ROOT_TOKEN}/reports/README.md"
+  "${GOVERNANCE_ROOT_TOKEN}/decisions/README.md"
+)
+
+missing=()
+for item in "\${required_docs[@]}"; do
+  if [[ ! -e "\${item}" ]]; then
+    missing+=("\${item}")
+  fi
+done
+
+if (( \${#missing[@]} > 0 )); then
+  echo "docs 索引检查失败，缺少必要文档或目录：" >&2
+  for item in "\${missing[@]}"; do
+    echo "  - \${item}" >&2
+  done
+  exit 1
+fi
+
+echo "docs 索引检查通过"
 `;
-const INIT_CHECK_DOC_LINKS_SH = `#!/usr/bin/env bash
-set -euo pipefail
-
-ROOT_DIR="$(cd "$(dirname "\${BASH_SOURCE[0]}")/.." && pwd)"
-cd "\${ROOT_DIR}"
-
-if [[ ! -d "${GOVERNANCE_ROOT_TOKEN}" ]]; then
-  echo "docs 链接检查失败：缺少 ${GOVERNANCE_ROOT_TOKEN}/" >&2
-  exit 1
-fi
-
-missing=()
-while IFS= read -r -d '' file; do
-  while IFS= read -r link; do
-    [[ -z "\${link}" ]] && continue
-    [[ "\${link}" == http://* || "\${link}" == https://* || "\${link}" == mailto:* || "\${link}" == "#"* ]] && continue
-    [[ "\${link}" == *"://"* ]] && continue
-    target="\${link%%#*}"
-    [[ -z "\${target}" ]] && continue
-    [[ "\${target}" == /* ]] && continue
-    base="$(dirname "\${file}")"
-    if [[ ! -e "\${base}/\${target}" ]]; then
-      missing+=("\${file}: \${link}")
-    fi
-  done < <(grep -Eo '\\[[^]]+\\]\\([^)]+\\)' "\${file}" | sed -E 's/^.*\\(([^)]+)\\)$/\\1/' || true)
-done < <(find "${GOVERNANCE_ROOT_TOKEN}" -type f -name '*.md' -print0)
-
-if (( \${#missing[@]} > 0 )); then
-  echo "docs 链接检查失败：" >&2
-  for item in "\${missing[@]}"; do
-    echo "  - \${item}" >&2
-  done
-  exit 1
-fi
-
-echo "docs 链接检查通过"
+const INIT_CHECK_DOC_LINKS_SH = `#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "\${BASH_SOURCE[0]}")/.." && pwd)"
+cd "\${ROOT_DIR}"
+
+if [[ ! -d "${GOVERNANCE_ROOT_TOKEN}" ]]; then
+  echo "docs 链接检查失败：缺少 ${GOVERNANCE_ROOT_TOKEN}/" >&2
+  exit 1
+fi
+
+missing=()
+while IFS= read -r -d '' file; do
+  while IFS= read -r link; do
+    [[ -z "\${link}" ]] && continue
+    [[ "\${link}" == http://* || "\${link}" == https://* || "\${link}" == mailto:* || "\${link}" == "#"* ]] && continue
+    [[ "\${link}" == *"://"* ]] && continue
+    target="\${link%%#*}"
+    [[ -z "\${target}" ]] && continue
+    [[ "\${target}" == /* ]] && continue
+    base="$(dirname "\${file}")"
+    if [[ ! -e "\${base}/\${target}" ]]; then
+      missing+=("\${file}: \${link}")
+    fi
+  done < <(grep -Eo '\\[[^]]+\\]\\([^)]+\\)' "\${file}" | sed -E 's/^.*\\(([^)]+)\\)$/\\1/' || true)
+done < <(find "${GOVERNANCE_ROOT_TOKEN}" -type f -name '*.md' -print0)
+
+if (( \${#missing[@]} > 0 )); then
+  echo "docs 链接检查失败：" >&2
+  for item in "\${missing[@]}"; do
+    echo "  - \${item}" >&2
+  done
+  exit 1
+fi
+
+echo "docs 链接检查通过"
 `;
-const INIT_CHECK_ACTIVE_PLAN_STATUS_SH = `#!/usr/bin/env bash
-set -euo pipefail
-
-ROOT_DIR="$(cd "$(dirname "\${BASH_SOURCE[0]}")/.." && pwd)"
-cd "\${ROOT_DIR}"
-
-active_dir="${GOVERNANCE_ROOT_TOKEN}/exec-plans/active"
-[[ -d "\${active_dir}" ]] || { echo "active plan 检查失败：缺少 \${active_dir}" >&2; exit 1; }
-
-bad=()
-while IFS= read -r -d '' file; do
-  name="$(basename "\${file}")"
-  [[ "\${name}" == "README.md" ]] && continue
-  if grep -Eiq 'status:[[:space:]]*(completed|done|closed)|状态[:：][[:space:]]*(已完成|完成|关闭)' "\${file}"; then
-    bad+=("\${file}")
-  fi
-done < <(find "\${active_dir}" -maxdepth 1 -type f -name '*.md' -print0)
-
-if (( \${#bad[@]} > 0 )); then
-  echo "active plan 状态检查失败：已完成计划不应留在 active 目录：" >&2
-  for item in "\${bad[@]}"; do
-    echo "  - \${item}" >&2
-  done
-  exit 1
-fi
-
-echo "active plan 状态检查通过"
+const INIT_CHECK_ACTIVE_PLAN_STATUS_SH = `#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "\${BASH_SOURCE[0]}")/.." && pwd)"
+cd "\${ROOT_DIR}"
+
+active_dir="${GOVERNANCE_ROOT_TOKEN}/exec-plans/active"
+[[ -d "\${active_dir}" ]] || { echo "active plan 检查失败：缺少 \${active_dir}" >&2; exit 1; }
+
+bad=()
+while IFS= read -r -d '' file; do
+  name="$(basename "\${file}")"
+  [[ "\${name}" == "README.md" ]] && continue
+  if grep -Eiq 'status:[[:space:]]*(completed|done|closed)|状态[:：][[:space:]]*(已完成|完成|关闭)' "\${file}"; then
+    bad+=("\${file}")
+  fi
+done < <(find "\${active_dir}" -maxdepth 1 -type f -name '*.md' -print0)
+
+if (( \${#bad[@]} > 0 )); then
+  echo "active plan 状态检查失败：已完成计划不应留在 active 目录：" >&2
+  for item in "\${bad[@]}"; do
+    echo "  - \${item}" >&2
+  done
+  exit 1
+fi
+
+echo "active plan 状态检查通过"
 `;
-const INIT_CHECK_EXEC_PLAN_INDEX_SYNC_SH = `#!/usr/bin/env bash
-set -euo pipefail
-
-ROOT_DIR="$(cd "$(dirname "\${BASH_SOURCE[0]}")/.." && pwd)"
-cd "\${ROOT_DIR}"
-
-required=(
-  "${GOVERNANCE_ROOT_TOKEN}/exec-plans/README.md"
-  "${GOVERNANCE_ROOT_TOKEN}/exec-plans/active/README.md"
-  "${GOVERNANCE_ROOT_TOKEN}/exec-plans/completed/README.md"
-)
-
-for item in "\${required[@]}"; do
-  if [[ ! -f "\${item}" ]]; then
-    echo "exec-plan 索引同步检查失败：缺少 \${item}" >&2
-    exit 1
-  fi
-done
-
-echo "exec-plan 索引同步检查通过"
+const INIT_CHECK_EXEC_PLAN_INDEX_SYNC_SH = `#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "\${BASH_SOURCE[0]}")/.." && pwd)"
+cd "\${ROOT_DIR}"
+
+required=(
+  "${GOVERNANCE_ROOT_TOKEN}/exec-plans/README.md"
+  "${GOVERNANCE_ROOT_TOKEN}/exec-plans/active/README.md"
+  "${GOVERNANCE_ROOT_TOKEN}/exec-plans/completed/README.md"
+)
+
+for item in "\${required[@]}"; do
+  if [[ ! -f "\${item}" ]]; then
+    echo "exec-plan 索引同步检查失败：缺少 \${item}" >&2
+    exit 1
+  fi
+done
+
+echo "exec-plan 索引同步检查通过"
 `;
-const INIT_CHECK_HARNESS_RUNTIME_CLEAN_SH = `#!/usr/bin/env bash
-set -euo pipefail
-
-ROOT_DIR="$(cd "$(dirname "\${BASH_SOURCE[0]}")/.." && pwd)"
-cd "\${ROOT_DIR}"
-
-failures=()
-
-count_entries() {
-  local dir="$1"
-  if [[ ! -d "\${dir}" ]]; then
-    echo 0
-    return
-  fi
-  find "\${dir}" -mindepth 1 -maxdepth 1 ! -name .gitkeep | wc -l | tr -d ' '
-}
-
-if [[ "\${HARNESS_ALLOW_ACTIVE_DAG_RUNS:-}" != "1" ]]; then
-  active_dag_count="$(count_entries ".harness/dag-runs/active")"
-  [[ "\${active_dag_count}" == "0" ]] || failures+=(".harness/dag-runs/active contains \${active_dag_count} entries")
-fi
-
-if [[ "\${HARNESS_ALLOW_ACTIVE_TOOL_RUNS:-\${HARNESS_ALLOW_ACTIVE_ONE_SHOT_RUNS:-}}" != "1" ]]; then
-  active_run_count="$(count_entries ".harness/runs/active")"
-  [[ "\${active_run_count}" == "0" ]] || failures+=(".harness/runs/active contains \${active_run_count} entries")
-fi
-
-if [[ -d artifacts ]]; then
-  artifact_count="$(find artifacts -mindepth 1 -maxdepth 1 ! -name .gitkeep | wc -l | tr -d ' ')"
-  [[ "\${artifact_count}" == "0" ]] || failures+=("root artifacts/ contains \${artifact_count} entries; use docs/reports or .harness run artifacts")
-fi
-
-if (( \${#failures[@]} > 0 )); then
-  echo "[HARNESS RUNTIME DIRTY]" >&2
-  for item in "\${failures[@]}"; do
-    echo "  - \${item}" >&2
-  done
-  exit 1
-fi
-
-echo "harness runtime clean check passed"
+const INIT_CHECK_HARNESS_RUNTIME_CLEAN_SH = `#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "\${BASH_SOURCE[0]}")/.." && pwd)"
+cd "\${ROOT_DIR}"
+
+failures=()
+
+count_entries() {
+  local dir="$1"
+  if [[ ! -d "\${dir}" ]]; then
+    echo 0
+    return
+  fi
+  find "\${dir}" -mindepth 1 -maxdepth 1 ! -name .gitkeep | wc -l | tr -d ' '
+}
+
+if [[ "\${HARNESS_ALLOW_ACTIVE_DAG_RUNS:-}" != "1" ]]; then
+  active_dag_count="$(count_entries ".harness/dag-runs/active")"
+  [[ "\${active_dag_count}" == "0" ]] || failures+=(".harness/dag-runs/active contains \${active_dag_count} entries")
+fi
+
+if [[ "\${HARNESS_ALLOW_ACTIVE_TOOL_RUNS:-\${HARNESS_ALLOW_ACTIVE_ONE_SHOT_RUNS:-}}" != "1" ]]; then
+  active_run_count="$(count_entries ".harness/runs/active")"
+  [[ "\${active_run_count}" == "0" ]] || failures+=(".harness/runs/active contains \${active_run_count} entries")
+fi
+
+if [[ -d artifacts ]]; then
+  artifact_count="$(find artifacts -mindepth 1 -maxdepth 1 ! -name .gitkeep | wc -l | tr -d ' ')"
+  [[ "\${artifact_count}" == "0" ]] || failures+=("root artifacts/ contains \${artifact_count} entries; use docs/reports or .harness run artifacts")
+fi
+
+if (( \${#failures[@]} > 0 )); then
+  echo "[HARNESS RUNTIME DIRTY]" >&2
+  for item in "\${failures[@]}"; do
+    echo "  - \${item}" >&2
+  done
+  exit 1
+fi
+
+echo "harness runtime clean check passed"
 `;
-const INIT_CHECK_ARCHITECTURE_BOUNDARIES_SH = `#!/usr/bin/env bash
-set -euo pipefail
-
-ROOT_DIR="$(cd "$(dirname "\${BASH_SOURCE[0]}")/.." && pwd)"
-cd "\${ROOT_DIR}"
-
-boundary_doc="${GOVERNANCE_ROOT_TOKEN}/architecture/runtime-boundaries.md"
-if [[ ! -f "\${boundary_doc}" ]]; then
-  echo "architecture boundary 检查失败：缺少 \${boundary_doc}" >&2
-  exit 1
-fi
-
-violations=()
-
-check_ts_import_boundary() {
-  local from_dir="$1"
-  local forbidden_dir="$2"
-  local label="$3"
-  [[ -d "\${from_dir}" && -d "\${forbidden_dir}" ]] || return 0
-  while IFS= read -r -d '' file; do
-    if grep -Eq "from ['\\\"][^'\\\"]*\${forbidden_dir}/|import\\(['\\\"][^'\\\"]*\${forbidden_dir}/|require\\(['\\\"][^'\\\"]*\${forbidden_dir}/" "\${file}"; then
-      violations+=("\${label}: \${file} imports \${forbidden_dir}")
-    fi
-  done < <(find "\${from_dir}" -type f \\( -name '*.ts' -o -name '*.tsx' -o -name '*.js' -o -name '*.jsx' -o -name '*.mjs' -o -name '*.cjs' \\) -print0)
-}
-
-# These checks are intentionally optional and stack-agnostic. They activate only
-# when a target repository has recognizable source directories.
-check_ts_import_boundary "src/workflows" "src/commands" "workflow-runtime"
-check_ts_import_boundary "src/executors" "src/commands" "executors"
-check_ts_import_boundary "src/domain" "src/infrastructure" "domain"
-
-if (( \${#violations[@]} > 0 )); then
-  echo "architecture boundary 检查失败：" >&2
-  for item in "\${violations[@]}"; do
-    echo "  - \${item}" >&2
-  done
-  echo "请更新 \${boundary_doc} 中的层边界，或修正反向依赖。" >&2
-  exit 1
-fi
-
-echo "architecture boundary 检查通过"
+const INIT_CHECK_ARCHITECTURE_BOUNDARIES_SH = `#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "\${BASH_SOURCE[0]}")/.." && pwd)"
+cd "\${ROOT_DIR}"
+
+boundary_doc="${GOVERNANCE_ROOT_TOKEN}/architecture/runtime-boundaries.md"
+if [[ ! -f "\${boundary_doc}" ]]; then
+  echo "architecture boundary 检查失败：缺少 \${boundary_doc}" >&2
+  exit 1
+fi
+
+violations=()
+
+check_ts_import_boundary() {
+  local from_dir="$1"
+  local forbidden_dir="$2"
+  local label="$3"
+  [[ -d "\${from_dir}" && -d "\${forbidden_dir}" ]] || return 0
+  while IFS= read -r -d '' file; do
+    if grep -Eq "from ['\\\"][^'\\\"]*\${forbidden_dir}/|import\\(['\\\"][^'\\\"]*\${forbidden_dir}/|require\\(['\\\"][^'\\\"]*\${forbidden_dir}/" "\${file}"; then
+      violations+=("\${label}: \${file} imports \${forbidden_dir}")
+    fi
+  done < <(find "\${from_dir}" -type f \\( -name '*.ts' -o -name '*.tsx' -o -name '*.js' -o -name '*.jsx' -o -name '*.mjs' -o -name '*.cjs' \\) -print0)
+}
+
+# These checks are intentionally optional and stack-agnostic. They activate only
+# when a target repository has recognizable source directories.
+check_ts_import_boundary "src/workflows" "src/commands" "workflow-runtime"
+check_ts_import_boundary "src/executors" "src/commands" "executors"
+check_ts_import_boundary "src/domain" "src/infrastructure" "domain"
+
+if (( \${#violations[@]} > 0 )); then
+  echo "architecture boundary 检查失败：" >&2
+  for item in "\${violations[@]}"; do
+    echo "  - \${item}" >&2
+  done
+  echo "请更新 \${boundary_doc} 中的层边界，或修正反向依赖。" >&2
+  exit 1
+fi
+
+echo "architecture boundary 检查通过"
 `;
-const INIT_CHECK_SKILL_ENTRY_SH = `#!/usr/bin/env bash
-set -euo pipefail
-
-ROOT_DIR="$(cd "$(dirname "\${BASH_SOURCE[0]}")/.." && pwd)"
-cd "\${ROOT_DIR}"
-
-skill_md="skills/loop-agent/SKILL.md"
-if [[ ! -f "\${skill_md}" ]]; then
-  echo "skill entry 检查失败：缺少 \${skill_md}" >&2
-  exit 1
-fi
-
-required_refs=(
-  "references/harness-policy.md"
-  "references/hybrid-dag.md"
-  "references/verification-and-failure-handling.md"
-  "references/command-reference.md"
-)
-
-missing=()
-for ref in "\${required_refs[@]}"; do
-  [[ -f "skills/loop-agent/\${ref}" ]] || missing+=("\${ref}")
-done
-
-while IFS= read -r ref; do
-  [[ -z "\${ref}" ]] && continue
-  [[ -f "skills/loop-agent/\${ref}" ]] || missing+=("\${ref}")
-done < <(grep -Eo 'references/[A-Za-z0-9._/-]+\\.md' "\${skill_md}" | sort -u || true)
-
-if (( \${#missing[@]} > 0 )); then
-  echo "skill entry 检查失败：引用的 reference 文件不存在：" >&2
-  printf '  - %s\\n' "\${missing[@]}" >&2
-  exit 1
-fi
-
-line_count="$(wc -l < "\${skill_md}" | tr -d ' ')"
-if [[ "\${line_count}" =~ ^[0-9]+$ && "\${line_count}" -gt 220 ]]; then
-  echo "skill entry 检查警告：\${skill_md} 行数为 \${line_count}，建议保持入口精简并把细节放入 references/" >&2
-fi
-
-echo "skill entry 检查通过：references ok, lines=\${line_count}"
+const INIT_CHECK_SKILL_ENTRY_SH = `#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "\${BASH_SOURCE[0]}")/.." && pwd)"
+cd "\${ROOT_DIR}"
+
+skill_md="skills/loop-agent/SKILL.md"
+if [[ ! -f "\${skill_md}" ]]; then
+  echo "skill entry 检查失败：缺少 \${skill_md}" >&2
+  exit 1
+fi
+
+required_refs=(
+  "references/harness-policy.md"
+  "references/hybrid-dag.md"
+  "references/verification-and-failure-handling.md"
+  "references/command-reference.md"
+)
+
+missing=()
+for ref in "\${required_refs[@]}"; do
+  [[ -f "skills/loop-agent/\${ref}" ]] || missing+=("\${ref}")
+done
+
+while IFS= read -r ref; do
+  [[ -z "\${ref}" ]] && continue
+  [[ -f "skills/loop-agent/\${ref}" ]] || missing+=("\${ref}")
+done < <(grep -Eo 'references/[A-Za-z0-9._/-]+\\.md' "\${skill_md}" | sort -u || true)
+
+if (( \${#missing[@]} > 0 )); then
+  echo "skill entry 检查失败：引用的 reference 文件不存在：" >&2
+  printf '  - %s\\n' "\${missing[@]}" >&2
+  exit 1
+fi
+
+line_count="$(wc -l < "\${skill_md}" | tr -d ' ')"
+if [[ "\${line_count}" =~ ^[0-9]+$ && "\${line_count}" -gt 220 ]]; then
+  echo "skill entry 检查警告：\${skill_md} 行数为 \${line_count}，建议保持入口精简并把细节放入 references/" >&2
+fi
+
+echo "skill entry 检查通过：references ok, lines=\${line_count}"
 `;
-const INIT_CHECK_REPO_SH = `#!/usr/bin/env bash
-set -euo pipefail
-
-ROOT_DIR="$(cd "$(dirname "\${BASH_SOURCE[0]}")/.." && pwd)"
-cd "\${ROOT_DIR}"
-
-checks=(
-  "scripts/check-engineering-structure.sh"
-  "scripts/check-doc-index.sh"
-  "scripts/check-doc-links.sh"
-  "scripts/check-active-plan-status.sh"
-  "scripts/check-exec-plan-index-sync.sh"
-  "scripts/check-harness-runtime-clean.sh"
-  "scripts/check-architecture-boundaries.sh"
-  "scripts/check-skill-entry.sh"
-)
-
-for check in "\${checks[@]}"; do
-  echo "==> bash \${check}"
-  bash "\${check}"
-  echo
-done
-
-echo "仓库治理检查全部通过"
+const INIT_CHECK_REPO_SH = `#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "\${BASH_SOURCE[0]}")/.." && pwd)"
+cd "\${ROOT_DIR}"
+
+checks=(
+  "scripts/check-engineering-structure.sh"
+  "scripts/check-doc-index.sh"
+  "scripts/check-doc-links.sh"
+  "scripts/check-active-plan-status.sh"
+  "scripts/check-exec-plan-index-sync.sh"
+  "scripts/check-harness-runtime-clean.sh"
+  "scripts/check-architecture-boundaries.sh"
+  "scripts/check-skill-entry.sh"
+)
+
+for check in "\${checks[@]}"; do
+  echo "==> bash \${check}"
+  bash "\${check}"
+  echo
+done
+
+echo "仓库治理检查全部通过"
 `;
-const INIT_CI_GOVERNANCE_SH = `#!/usr/bin/env bash
-set -euo pipefail
-
-ROOT_DIR="$(cd "$(dirname "\${BASH_SOURCE[0]}")/.." && pwd)"
-cd "\${ROOT_DIR}"
-
-bash scripts/check-repo.sh
+const INIT_CI_GOVERNANCE_SH = `#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "\${BASH_SOURCE[0]}")/.." && pwd)"
+cd "\${ROOT_DIR}"
+
+bash scripts/check-repo.sh
 `;
-const INIT_CI_TESTS_SH = `#!/usr/bin/env bash
-set -euo pipefail
-
-ROOT_DIR="$(cd "$(dirname "\${BASH_SOURCE[0]}")/.." && pwd)"
-cd "\${ROOT_DIR}"
-
-ran=0
-notes=()
-
-run_cmd() {
-  echo "==> $*"
-  "$@"
-  ran=1
-}
-
-run_bash() {
-  echo "==> $*"
-  bash -lc "$*"
-  ran=1
-}
-
-has_make_target() {
-  local target="$1"
-  [[ -f Makefile || -f makefile ]] || return 1
-  grep -Eq "^[[:alnum:]_.-]*\${target}[[:alnum:]_.-]*:" Makefile makefile 2>/dev/null
-}
-
-has_npm_script() {
-  local script="$1"
-  [[ -f package.json ]] || return 1
-  command -v node >/dev/null 2>&1 || return 1
-  node -e "const fs=require('fs'); const p=JSON.parse(fs.readFileSync('package.json','utf8')); process.exit(p.scripts && p.scripts[process.argv[1]] ? 0 : 1)" "\${script}" >/dev/null 2>&1
-}
-
-if [[ -f package.json ]]; then
-  if command -v npm >/dev/null 2>&1; then
-    for script in lint typecheck test build; do
-      if has_npm_script "\${script}"; then
-        run_cmd npm run "\${script}"
-      fi
-    done
-  else
-    notes+=("package.json exists but npm is not available")
-  fi
-fi
-
-if has_make_target verify; then
-  run_cmd make verify
-elif has_make_target test; then
-  run_cmd make test
-fi
-
-if [[ -f go.mod ]]; then
-  if command -v go >/dev/null 2>&1; then
-    run_cmd go test ./...
-  else
-    notes+=("go.mod exists but go is not available")
-  fi
-fi
-
-if [[ -f Cargo.toml ]]; then
-  if command -v cargo >/dev/null 2>&1; then
-    run_cmd cargo test
-  else
-    notes+=("Cargo.toml exists but cargo is not available")
-  fi
-fi
-
-if [[ -f pyproject.toml || -f pytest.ini || -f tox.ini ]]; then
-  if command -v pytest >/dev/null 2>&1; then
-    run_cmd pytest
-  elif command -v tox >/dev/null 2>&1 && [[ -f tox.ini ]]; then
-    run_cmd tox
-  else
-    notes+=("Python project metadata found but pytest/tox is not available")
-  fi
-fi
-
-if [[ -f pom.xml ]]; then
-  if command -v mvn >/dev/null 2>&1; then
-    run_cmd mvn test
-  else
-    notes+=("pom.xml exists but mvn is not available")
-  fi
-fi
-
-if [[ -f build.gradle || -f build.gradle.kts || -f settings.gradle || -f settings.gradle.kts ]]; then
-  if [[ -x ./gradlew ]]; then
-    run_cmd ./gradlew test
-  elif command -v gradle >/dev/null 2>&1; then
-    run_cmd gradle test
-  else
-    notes+=("Gradle project metadata found but gradle/gradlew is not available")
-  fi
-fi
-
-if compgen -G "*.sln" >/dev/null || compgen -G "*.csproj" >/dev/null; then
-  if command -v dotnet >/dev/null 2>&1; then
-    run_cmd dotnet test
-  else
-    notes+=(".NET project metadata found but dotnet is not available")
-  fi
-fi
-
-if (( ran == 0 )); then
-  echo "未检测到可安全自动运行的项目测试入口。"
-  echo "loop-agent 治理检查仍可运行；请让初始化模型根据目标项目技术栈补充 scripts/ci-tests.sh 与 docs/verification-matrix.md。"
-fi
-
-if (( \${#notes[@]} > 0 )); then
-  echo "项目验证探测备注："
-  for note in "\${notes[@]}"; do
-    echo "  - \${note}"
-  done
-fi
+const INIT_CI_TESTS_SH = `#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "\${BASH_SOURCE[0]}")/.." && pwd)"
+cd "\${ROOT_DIR}"
+
+ran=0
+notes=()
+
+run_cmd() {
+  echo "==> $*"
+  "$@"
+  ran=1
+}
+
+run_bash() {
+  echo "==> $*"
+  bash -lc "$*"
+  ran=1
+}
+
+has_make_target() {
+  local target="$1"
+  [[ -f Makefile || -f makefile ]] || return 1
+  grep -Eq "^[[:alnum:]_.-]*\${target}[[:alnum:]_.-]*:" Makefile makefile 2>/dev/null
+}
+
+has_npm_script() {
+  local script="$1"
+  [[ -f package.json ]] || return 1
+  command -v node >/dev/null 2>&1 || return 1
+  node -e "const fs=require('fs'); const p=JSON.parse(fs.readFileSync('package.json','utf8')); process.exit(p.scripts && p.scripts[process.argv[1]] ? 0 : 1)" "\${script}" >/dev/null 2>&1
+}
+
+if [[ -f package.json ]]; then
+  if command -v npm >/dev/null 2>&1; then
+    for script in lint typecheck test build; do
+      if has_npm_script "\${script}"; then
+        run_cmd npm run "\${script}"
+      fi
+    done
+  else
+    notes+=("package.json exists but npm is not available")
+  fi
+fi
+
+if has_make_target verify; then
+  run_cmd make verify
+elif has_make_target test; then
+  run_cmd make test
+fi
+
+if [[ -f go.mod ]]; then
+  if command -v go >/dev/null 2>&1; then
+    run_cmd go test ./...
+  else
+    notes+=("go.mod exists but go is not available")
+  fi
+fi
+
+if [[ -f Cargo.toml ]]; then
+  if command -v cargo >/dev/null 2>&1; then
+    run_cmd cargo test
+  else
+    notes+=("Cargo.toml exists but cargo is not available")
+  fi
+fi
+
+if [[ -f pyproject.toml || -f pytest.ini || -f tox.ini ]]; then
+  if command -v pytest >/dev/null 2>&1; then
+    run_cmd pytest
+  elif command -v tox >/dev/null 2>&1 && [[ -f tox.ini ]]; then
+    run_cmd tox
+  else
+    notes+=("Python project metadata found but pytest/tox is not available")
+  fi
+fi
+
+if [[ -f pom.xml ]]; then
+  if command -v mvn >/dev/null 2>&1; then
+    run_cmd mvn test
+  else
+    notes+=("pom.xml exists but mvn is not available")
+  fi
+fi
+
+if [[ -f build.gradle || -f build.gradle.kts || -f settings.gradle || -f settings.gradle.kts ]]; then
+  if [[ -x ./gradlew ]]; then
+    run_cmd ./gradlew test
+  elif command -v gradle >/dev/null 2>&1; then
+    run_cmd gradle test
+  else
+    notes+=("Gradle project metadata found but gradle/gradlew is not available")
+  fi
+fi
+
+if compgen -G "*.sln" >/dev/null || compgen -G "*.csproj" >/dev/null; then
+  if command -v dotnet >/dev/null 2>&1; then
+    run_cmd dotnet test
+  else
+    notes+=(".NET project metadata found but dotnet is not available")
+  fi
+fi
+
+if (( ran == 0 )); then
+  echo "未检测到可安全自动运行的项目测试入口。"
+  echo "loop-agent 治理检查仍可运行；请让初始化模型根据目标项目技术栈补充 scripts/ci-tests.sh 与 docs/verification-matrix.md。"
+fi
+
+if (( \${#notes[@]} > 0 )); then
+  echo "项目验证探测备注："
+  for note in "\${notes[@]}"; do
+    echo "  - \${note}"
+  done
+fi
 `;
-const INIT_CI_SH = `#!/usr/bin/env bash
-set -euo pipefail
-
-ROOT_DIR="$(cd "$(dirname "\${BASH_SOURCE[0]}")/.." && pwd)"
-cd "\${ROOT_DIR}"
-
-bash scripts/ci-governance.sh
-bash scripts/ci-tests.sh
+const INIT_CI_SH = `#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "\${BASH_SOURCE[0]}")/.." && pwd)"
+cd "\${ROOT_DIR}"
+
+bash scripts/ci-governance.sh
+bash scripts/ci-tests.sh
 `;
 const INIT_SCRIPT_FILES = {
     "scripts/check-engineering-structure.sh": INIT_CHECK_ENGINEERING_STRUCTURE_SH,
@@ -621,6 +621,7 @@ function buildManagedAgentsBlock(input) {
         "- 实现前先搜索现有代码、文档、脚本和测试，避免重复造轮子。",
         "- Shell 验证是完成依据；模型建议不能替代命令证据。",
         "- 保留无关的用户改动，不要回退自己没有做的修改。",
+        "- 委托模型写入前，必须把写入边界写成结构化 `task.json.allowedPaths` / `task.json.forbiddenPaths`，再审查生成 DAG 的 writer `writeSet`；不要只依赖 `source/执行约束.md` 的自然语言约束。",
         "",
         "### 初始化闭环",
         "",
@@ -636,6 +637,10 @@ function buildManagedAgentsBlock(input) {
         "",
         "如果仓库信息不足，写明“尚未从仓库文件中识别到 ...”以及下一步需要的事实；不要留下泛化占位符，也不要只提示用户稍后手填。",
         "",
+        "### 文档收敛",
+        "",
+        "完成实现和验证后，必须检查 `README.md`、`AGENTS.md`、`CHANGELOG.md`（如果目标项目维护）、治理文档、skills references、初始化模板和脚本说明是否仍与实际行为一致。只更新与本次变更相关的内容；如果决定不更新，应在交接里写明理由。",
+        "",
         "### 开始顺序",
         "",
         "改文件前先完成：",
@@ -664,10 +669,16 @@ function buildManagedAgentsBlock(input) {
         "",
         "任务 source 是必需项。`source/需求.md` 写目标、范围、非目标、验收标准和相关链接；`source/执行约束.md` 写允许路径、禁止路径、受保护变更、不变量、预期验证和失败条件。",
         "",
+        "委托写入前，还要把允许/禁止路径同步到 `.harness/tasks/<task-id>/task.json` 的 `allowedPaths` / `forbiddenPaths` 字段，并在执行前审查生成 DAG 的 writer `writeSet` 是否窄且准确。",
+        "",
         "凡是影响项目公共契约、执行入口、交付流水线、自动化/治理、数据模型、安全或权限模型、跨模块行为、用户可见工作流的改动，都必须在编辑实现文件前先创建任务、写好两个 source 文件、生成 DAG，并审查 DAG/writeSet。",
         "",
         "执行 DAG 前必须审查 profile routing、governance profile、writer 的 `writeSet`、`allowedPaths`、`forbiddenPaths`、shell verification 和 decision gate mode。不要执行占位或过宽的写入范围。",
         "",
+        "### DAG 诊断与收口",
+        "",
+        "执行后优先使用 `loop-agent dag report --run-id <run-id> --markdown` 读取 run facts；失败或 paused run 使用 `loop-agent dag doctor --run-id <run-id> --markdown` 诊断。失败 DAG run 不应写成成功 closeout，应使用 `loop-agent dag closeout-draft --run-id <run-id>` 生成 failure handoff，保留 what failed、evidence、classification、recommended follow-up、safe retry conditions 和 human decision needed。",
+        "",
         "### 运行态与 Skills",
         "",
         "- `.harness/tasks/` 保存任务状态和 source 材料。",
@@ -880,6 +891,8 @@ function buildManagedReadmeBlock(input) {
         "",
         `详细工作流见 \`${input.governanceRoot}/feature-workflow.md\`；验证矩阵见 \`${input.governanceRoot}/verification-matrix.md\`。任务 source 是必需项：\`source/需求.md\` 写目标、范围、非目标、验收标准和相关链接，\`source/执行约束.md\` 写允许路径、禁止路径、受保护变更、不变量、预期验证和失败条件。`,
         "",
+        "执行后使用 `loop-agent dag report --run-id <run-id> --markdown` 和 `loop-agent dag doctor --run-id <run-id> --markdown` 读取事实与诊断失败。失败 run 不做成功式 closeout；使用 `loop-agent dag closeout-draft --run-id <run-id>` 生成 failure handoff。",
+        "",
         "### 文档导航",
         "",
         `- \`${input.governanceRoot}/README.md\` - 治理文档索引（含原则、工作流、验证矩阵与方法论）`,
@@ -948,6 +961,7 @@ function buildTargetDocsReadme(input) {
         "- `reports/README.md` - 验证与审计报告 / verification and audit reports",
         "- `decisions/README.md` - 架构决策 / architecture decisions",
         "- `templates/` - 可复用的计划、报告与 DAG 模板 / reusable planning, reporting, and DAG templates",
+        "- `templates/production-readiness-checklist.md` - 低/中风险单仓库 DAG 任务的 production readiness 检查清单 / production readiness checklist for low/medium-risk single-repo DAG work",
         "",
         "## 验证 / Verification",
         "",
@@ -1143,6 +1157,12 @@ function buildTargetLoopAgentHarness(input) {
         "",
         "Use `loop-agent new-task`, `loop-agent dag run-task`, `loop-agent dag validate`, and `loop-agent run-dag` for non-trivial implementation work.",
         "",
+        "## Operator Recovery",
+        "",
+        "After a run, use `loop-agent dag report --run-id <run-id> --markdown` to read canonical run facts and `loop-agent dag doctor --run-id <run-id> --markdown` to diagnose failed or paused runs. Failed DAG runs should produce a failure handoff via `loop-agent dag closeout-draft --run-id <run-id>` instead of a successful closeout.",
+        "",
+        "Use `docs/templates/production-readiness-checklist.md` when claiming Production Readiness v0.1 for low/medium-risk single-repo DAG work.",
+        "",
         "## Script Matrix",
         "",
         "`scripts/check-repo.sh` verifies loop-agent governance. `scripts/ci-tests.sh` handles target project verification through conservative language/toolchain detection and should be adapted after reading the project.",
@@ -1213,6 +1233,8 @@ export function buildInitInstructions(input) {
         "- Copy repo-local skills by default so the target repo has auditable skill instructions.",
         "- Do not copy examples by default; examples stay bundled in the tool and are available through `loop-agent examples`.",
         "- Add or update a loop-agent managed block in AGENTS.md.",
+        "- The generated AGENTS.md must include documentation convergence and structured DAG write-boundary rules so target projects keep the same working discipline as this repository.",
+        "- The generated target docs must surface the production readiness checklist and the operator recovery path: `dag report`, `dag doctor --run-id --markdown`, and failed-run `dag closeout-draft` failure handoff.",
         "- Create `.harness/` runtime directories but do not create historical run facts.",
         "",
         "## Automatic Workflow For Model-Executed Init",
@@ -1235,8 +1257,9 @@ export function buildInitInstructions(input) {
         "1. Read the target project's existing README, manifest/build/config files, and top-level source/module directories.",
         "2. Replace the root README's `初始化模型补充` comments when the information can be inferred from files. At minimum, fill project overview, technology stack/directory structure, and development/verification commands.",
         "3. Update `docs/verification-matrix.md` with the target project's actual quick, standard, and full verification commands.",
-        "4. Update `scripts/ci-tests.sh` only when the conservative generated detector is insufficient for the target project.",
-        "5. Run `loop-agent init doctor`, `loop-agent inspect`, `loop-agent docs audit`, and the quick verification command.",
+        "4. Confirm the generated docs expose `docs/templates/production-readiness-checklist.md` plus the operator recovery path: `dag report`, `dag doctor --run-id --markdown`, and failed-run `dag closeout-draft` failure handoff.",
+        "5. Update `scripts/ci-tests.sh` only when the conservative generated detector is insufficient for the target project.",
+        "6. Run `loop-agent init doctor`, `loop-agent inspect`, `loop-agent docs audit`, and the quick verification command.",
         "",
         "Completion rule: if target files provide enough evidence, the final README should not leave generic `初始化模型补充` comments in the sections that can be filled. If a section truly cannot be inferred, write a short explicit note such as `尚未从仓库文件中识别到 ...` instead of asking the user to fill it later.",
         "",