@tea-agent/loop-agent 0.21.0 → 0.22.0

package/dist/worker/observe/spec-evidence.js

@@ -2,6 +2,7 @@ import { existsSync } from "node:fs";
 import { readFile } from "node:fs/promises";
 import path from "node:path";
 import { isSafeObservabilityIdentifier } from "../observability/event-store.js";
+import { isOpenspecSpecFilePath, isOpenspecSpecPath, isOpenspecSpecSearchTarget, } from "../../shared/openspec-spec.js";
 const DAG_RUN_LIFECYCLE_DIRS = ["active", "completed", "paused"];
 /**
  * Known knowledge-base connector tool names.
@@ -18,7 +19,8 @@ const KB_CONNECTOR_TOOLS = new Set([
 ]);
 /**
  * Pattern for detecting spec-related files:
- * - openspec/** files
+ * - openspec files (generic evidence, including non-normative paths)
+ * - ai_workspace files
  * - *.spec.md / *.spec.ts / *.spec.tsx
  * - project-specs/**
  * - design-spec.md, code-standards.md, review-checklist.md, etc.
@@ -27,6 +29,7 @@ const KB_CONNECTOR_TOOLS = new Set([
  */
 const SPEC_FILE_PATTERNS = [
     /openspec\//i,
+    /ai_workspace\//i,
     /\/project-specs\//i,
     /\/spec\//i,
     /\.spec\.(md|tsx?|jsx?)$/i,
@@ -47,22 +50,16 @@ function isSpecFilePath(filePath) {
 function isKnowledgeBaseTool(toolName) {
     return KB_CONNECTOR_TOOLS.has(toolName);
 }
-/** A repo-relative path references <repoRoot>/openspec/**. */
+/** A repo-relative path references a canonical openspec spec directory. */
 function isOpenspecPath(filePath) {
-    const normalized = filePath.replaceAll(path.sep, "/");
-    return normalized === "openspec" || normalized.startsWith("openspec/");
+    return isOpenspecSpecFilePath(filePath.replaceAll(path.sep, "/"));
 }
-/** A search query targets the openspec/ directory. */
+/** A search query targets a canonical openspec spec directory. */
 function isOpenspecSearch(query, searchPath) {
-    const lower = query.toLowerCase();
-    const normalizedPath = searchPath?.replaceAll(path.sep, "/").toLowerCase();
-    return (normalizedPath === "openspec" ||
-        normalizedPath?.startsWith("openspec/") === true ||
-        lower === "openspec" ||
-        lower === "openspec/" ||
-        lower.startsWith("openspec/") ||
-        lower.includes("openspec/**") ||
-        lower.includes("openspec/*"));
+    const normalizedPath = searchPath?.replaceAll(path.sep, "/");
+    if (normalizedPath && isOpenspecSpecPath(normalizedPath))
+        return true;
+    return isOpenspecSpecSearchTarget(query);
 }
 function resolveSessionEventsPath(repoRoot, dagRunId, nodeId) {
     if (!isSafeObservabilityIdentifier(dagRunId) || !isSafeObservabilityIdentifier(nodeId)) {
@@ -362,7 +359,7 @@ export async function extractSpecEvidence(repoRoot, dagRunId, nodeId) {
     if (status === "no-evidence") {
         summaryLines.push("未观察到任何规范证据：无 skill 注入、无文件读取、无检索操作。");
     }
-    // Separate openspec/** reads and searches for Dashboard display.
+    // Separate openspec spec directory reads and searches for Dashboard display.
     // Knowledge base and openspec are parallel sources.
     const openspecReads = specReads.filter((r) => isOpenspecPath(r.path));
     const openspecSearches = searches.filter((s) => isOpenspecSearch(s.query, s.path));

package/dist/worker/observe/static/dag-helpers.js

@@ -46,6 +46,28 @@ export function getActiveNodes(dag) {
 	return (dag.nodes ?? []).filter((n) => isNodeActive(n.status));
 }
 
+export function frontendLintSummary(frontendLint) {
+	if (!frontendLint) return null;
+	const statusLabels = {
+		passed: "passed",
+		"baseline-debt": "baseline-debt",
+		failed: "failed",
+		unavailable: "unavailable",
+	};
+	const status = statusLabels[frontendLint.status] ?? "unavailable";
+	const changed = frontendLint.writerChangedFiles?.length ?? 0;
+	const tolerated = frontendLint.toleratedDiagnosticCount ?? 0;
+	const blocked = frontendLint.blockingDiagnosticCount ?? 0;
+	const reason = (frontendLint.blockingReasons ?? []).join("；");
+	return [
+		status,
+		`修改文件 ${changed}`,
+		`容忍存量诊断 ${tolerated}`,
+		`阻断诊断 ${blocked}`,
+		...(reason ? [`原因：${reason}`] : []),
+	].join(" · ");
+}
+
 	export function dagSortTime(dag) {
 		return dag.startedAt ?? dag.finishedAt ?? "";
 	}

package/dist/worker/observe/static/views/dag.js

@@ -79,6 +79,7 @@ import {
 } from "../shell-chrome.js";
 import {
 	dagProgress,
+	frontendLintSummary,
 	isNodeFailed,
 	isNodeFinished,
 	isNodeActive,
@@ -223,6 +224,10 @@ export async function renderDagDetail(dagRunId, initial = true) {
 		["成功/失败/跳过", `${succeededCount}/${failedCount}/${skippedCount}`],
 		["DAG 路径", dag.dagPath ?? "—"],
 	);
+	const lintSummary = frontendLintSummary(dag.frontendLint);
+	if (lintSummary) {
+		primaryEntries.push(["前端 lint 判定", lintSummary]);
+	}
 	const primaryGrid = metaGrid(primaryEntries);
 	const diagnosticGrid = metaGrid([
 		["当前判定", dagStatusBadge(dag.effectiveStatus ?? dag.status)],

package/dist/workflows/dag/backend-test-markdown-workflow.js

@@ -763,7 +763,44 @@ function advisoryBadge(status) {
     const className = status === "PASS" ? "passed" : status === "FAIL" ? "failure" : "skipped";
     return `<span class="status ${className}">${status === "Unavailable" ? "不可用" : status}</span>`;
 }
+function conclusionIcon(failed) {
+    return failed
+        ? `<svg class="conclusion-icon" viewBox="0 0 48 48" role="img" aria-label="测试未通过"><circle cx="24" cy="24" r="20"/><path d="M24 14v13"/><circle cx="24" cy="34" r="1.5" class="icon-dot"/></svg>`
+        : `<svg class="conclusion-icon" viewBox="0 0 48 48" role="img" aria-label="测试通过"><circle cx="24" cy="24" r="20"/><path d="m14 24 7 7 14-15"/></svg>`;
+}
+function reportDetailSection(title, content, open = false) {
+    return `<details class="report-detail"${open ? " open" : ""}><summary>${escapeHtml(title)}</summary><div class="report-detail-body">${content}</div></details>`;
+}
 export function renderBackendTestHtml(input) {
+    const failed = input.parsed.failed + input.parsed.errors > 0;
+    const passRate = input.parsed.tests > 0 ? input.parsed.passed / input.parsed.tests : 0;
+    const catalog = new Map((input.cases ?? []).map((item) => [item.id, item]));
+    const caseValidation = parseAdvisorySummary(input.caseValidationSummary);
+    const traceability = parseAdvisorySummary(input.traceabilitySummary);
+    const failures = input.parsed.cases.filter((result) => result.status !== "passed");
+    const rows = input.parsed.cases.map((result) => {
+        const caseId = junitCaseId(result.name) ?? "未关联";
+        const item = catalog.get(caseId);
+        const io = requestResponseSummary(result);
+        const failureDetails = result.status === "passed"
+            ? ""
+            : `<div class="failure-detail"><strong>${escapeHtml(result.message || humanStatus(result.status))}</strong>${result.details ? reportDetailSection("失败详情", `<pre>${escapeHtml(result.details)}</pre>`) : ""}</div>`;
+        return `<article class="case-card result-${result.status}"><div class="case-head"><div><span class="case-id">${escapeHtml(caseId)}</span><h3>${escapeHtml(item?.title ?? result.name)}</h3><p>${escapeHtml(item?.scenario ?? "未从 Markdown 用例提取场景说明。")}</p></div><div class="case-outcome"><span class="status ${result.status}">${humanStatus(result.status)}</span><span class="duration">${formatDuration(result.durationMs)}</span></div></div><div class="case-meta"><span>自动化用例</span><code>${escapeHtml(result.name)}</code></div><div class="io-grid">${reportDetails("接口请求参数", io.requests, "本次 JUnit 未捕获请求日志。")}${reportDetails("接口响应结果", io.responses, "本次 JUnit 未捕获响应日志。")}</div>${failureDetails}</article>`;
+    }).join("");
+    const failureOverview = failures.length > 0
+        ? `<div class="failure-list">${failures.map((result) => {
+            const caseId = junitCaseId(result.name) ?? "未关联";
+            return `<article><div>${advisoryBadge(result.status === "skipped" ? "Unavailable" : "FAIL")}<strong>${escapeHtml(caseId)} · ${escapeHtml(catalog.get(caseId)?.title ?? result.name)}</strong></div><p>${escapeHtml(result.message || humanStatus(result.status))}</p></article>`;
+        }).join("")}</div>`
+        : '<div class="empty-state">本轮没有失败、错误或跳过用例。</div>';
+    const conclusion = failed
+        ? `本轮测试未通过：${input.parsed.failed + input.parsed.errors} 条用例失败或错误。`
+        : `本轮测试通过：${input.parsed.passed} 条用例执行成功。`;
+    const executionOverview = `<div class="metric-grid"><div><span>用例总数</span><strong>${input.parsed.tests}</strong></div><div><span>通过</span><strong>${input.parsed.passed}</strong></div><div><span>失败 / 错误</span><strong>${input.parsed.failed} / ${input.parsed.errors}</strong></div><div><span>跳过</span><strong>${input.parsed.skipped}</strong></div><div><span>通过率</span><strong>${(passRate * 100).toFixed(2)}%</strong></div><div><span>总耗时</span><strong>${formatDuration(input.parsed.durationMs)}</strong></div></div>`;
+    const qualityDetails = `<div class="quality-grid"><div class="quality-card"><header><strong>Markdown 用例校验</strong>${advisoryBadge(caseValidation.status)}</header><p>Findings：${caseValidation.findings ?? "不可用"}</p><p>${escapeHtml(caseValidation.firstFinding)}</p></div><div class="quality-card"><header><strong>Markdown → pytest 追溯</strong>${advisoryBadge(traceability.status)}</header><p>Findings：${traceability.findings ?? "不可用"}</p><p>${escapeHtml(traceability.firstFinding)}</p></div></div><div class="evidence-line"><span>执行环境</span>${escapeHtml(input.environmentSummary || "不可用")}</div>`;
+    return `<!doctype html><html lang="zh-CN"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>${escapeHtml(input.title)}</title><style>:root{color-scheme:light;--ink:#182230;--muted:#667085;--line:#dce3ec;--panel:#f6f8fb;--brand:#163a63;--accent:#2e6da4;--pass:#067647;--pass-bg:#ecfdf3;--fail:#b42318;--fail-bg:#fef3f2;--skip:#9a6700;--skip-bg:#fffaeb;--shadow:0 18px 45px rgba(28,55,90,.09)}*{box-sizing:border-box}body{margin:0;background:radial-gradient(circle at top left,#dcecff 0,transparent 32rem),linear-gradient(180deg,#edf3fa 0,#f8fafc 34rem);color:var(--ink);font-family:Inter,system-ui,"Microsoft YaHei","PingFang SC",sans-serif;line-height:1.65}header,main{max-width:1280px;margin:auto}header{padding:3.5rem 2rem 1.75rem}main{padding:0 2rem 4rem}h1{margin:.3rem 0;color:var(--brand);font-size:clamp(2rem,4vw,3rem);letter-spacing:-.03em}h2{margin:0 0 1rem;color:var(--brand)}h3{margin:.35rem 0 .15rem;font-size:1.12rem}.eyebrow{color:var(--accent);font-weight:850;letter-spacing:.12em}.subtitle,.muted,.case-head p{color:var(--muted)}section,.report-detail{background:rgba(255,255,255,.94);border:1px solid rgba(220,227,236,.95);border-radius:1.15rem;padding:1.5rem;margin-top:1rem;box-shadow:var(--shadow)}.conclusion{display:flex;align-items:center;gap:1rem;padding:1rem 1.25rem;border-left:5px solid ${failed ? "var(--fail)" : "var(--pass)"};border-radius:.8rem;background:${failed ? "var(--fail-bg)" : "var(--pass-bg)"};color:${failed ? "var(--fail)" : "var(--pass)"}}.conclusion-icon{width:4rem;height:4rem;flex:0 0 4rem;display:block;overflow:visible}.conclusion-icon circle:first-child{fill:currentColor;fill-opacity:.12;stroke:currentColor;stroke-width:2}.conclusion-icon path{fill:none;stroke:currentColor;stroke-width:3.2;stroke-linecap:round;stroke-linejoin:round}.conclusion-icon .icon-dot{fill:currentColor;stroke:none}.conclusion-copy{min-width:0}.conclusion-copy strong{display:block;font-size:1.05rem}.conclusion-copy span{display:block;font-size:.9rem;font-weight:400}.metric-grid{display:grid;grid-template-columns:repeat(6,minmax(7rem,1fr));gap:.75rem;margin-top:1rem}.metric-grid>div{padding:1rem;border:1px solid var(--line);border-radius:.85rem;background:white}.metric-grid span,.metric-grid small{display:block;color:var(--muted);font-size:.88rem}.metric-grid strong{display:block;font-size:1.45rem;font-weight:700}.quality-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:1rem}.quality-card{padding:1rem;border:1px solid var(--line);border-radius:.85rem;background:white}.quality-card header{display:flex;align-items:center;justify-content:space-between;padding:0;margin:0 0 .5rem}.quality-card p{margin:.25rem 0;color:var(--muted)}.status{display:inline-flex;align-items:center;padding:.18rem .62rem;border-radius:999px;font-weight:800;font-size:.86rem}.status.passed{color:var(--pass);background:var(--pass-bg)}.status.failure,.status.error{color:var(--fail);background:var(--fail-bg)}.status.skipped{color:var(--skip);background:var(--skip-bg)}.failure-list{display:grid;gap:.75rem}.failure-list article{border-left:4px solid var(--fail);background:var(--fail-bg);padding:.85rem 1rem;border-radius:.65rem}.empty-state{padding:1rem;border:1px dashed var(--line);border-radius:.75rem;color:var(--muted);background:var(--panel)}.case-list{display:grid;gap:1rem}.case-card{border:1px solid var(--line);border-radius:1rem;padding:1.15rem;background:linear-gradient(145deg,#fff,#fbfcfe);box-shadow:0 8px 24px rgba(28,55,90,.06)}.case-card.result-failure,.case-card.result-error{border-left:5px solid var(--fail)}.case-card.result-passed{border-left:5px solid var(--pass)}.case-head{display:flex;justify-content:space-between;gap:1rem;align-items:flex-start}.case-head p{margin:.2rem 0}.case-id{display:inline-block;color:var(--accent);font-weight:850;letter-spacing:.04em}.case-outcome{display:flex;align-items:center;gap:.75rem;white-space:nowrap}.duration{color:var(--muted);font-variant-numeric:tabular-nums}.case-meta{display:flex;gap:.75rem;align-items:center;margin:.85rem 0;padding:.65rem .8rem;border-radius:.7rem;background:var(--panel);color:var(--muted)}code{color:var(--brand);font-weight:700}.io-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:.8rem}.io-details{border:1px solid var(--line);border-radius:.75rem;padding:.7rem;background:white}.io-details summary,.report-detail summary{cursor:pointer;color:var(--brand);font-weight:800}.io-details summary span{float:right;color:var(--muted)}pre{white-space:pre-wrap;overflow-wrap:anywhere;max-height:18rem;overflow:auto;background:#101828;color:#eef4ff;padding:.85rem;border-radius:.6rem;font-size:.82rem}.failure-detail{margin-top:.8rem;padding:.8rem;border-radius:.7rem;background:var(--fail-bg);color:var(--fail)}.report-detail{padding:0;overflow:hidden}.report-detail summary{list-style:none;padding:1rem 1.25rem}.report-detail summary::-webkit-details-marker{display:none}.report-detail summary::after{content:"+";float:right;font-size:1.2rem;font-weight:400;color:var(--muted)}.report-detail[open] summary::after{content:"−"}.report-detail-body{border-top:1px solid var(--line);padding:1.25rem}.evidence-line{display:flex;gap:.75rem;align-items:baseline;padding:.7rem .8rem;background:var(--panel);border-radius:.65rem;font-size:.9rem}.evidence-line span{color:var(--muted);min-width:8rem}.subtitle{margin:.2rem 0 0}@media(max-width:900px){.metric-grid{grid-template-columns:repeat(2,1fr)}.quality-grid,.io-grid{grid-template-columns:1fr}.case-head{display:block}.case-outcome{margin-top:.65rem}header,main{padding-left:1rem;padding-right:1rem}}@media(max-width:420px){.conclusion{align-items:flex-start}.conclusion-icon{width:3rem;height:3rem;flex-basis:3rem}.metric-grid{grid-template-columns:1fr 1fr}}</style></head><body><header><div class="eyebrow">后端自动化测试报告</div><h1>${escapeHtml(input.title)}</h1><p class="subtitle">测试结论、质量状态与每条接口用例的请求/响应事实均来自同一次 pytest 执行。</p></header><main><section><h2>当前结论</h2><div class="conclusion">${conclusionIcon(failed)}<div class="conclusion-copy"><strong>${escapeHtml(failed ? "测试未通过" : "测试通过")}</strong><span>${escapeHtml(conclusion)}</span></div></div>${executionOverview}</section>${reportDetailSection("质量校验", qualityDetails, true)}${reportDetailSection("失败概览", failureOverview, failures.length > 0)}${reportDetailSection("用例执行结果", `<div class="case-list">${rows || '<div class="empty-state">未发现可展示的 JUnit testcase。</div>'}</div>`, true)}</main></body></html>`;
+}
+function renderBackendTestHtmlLegacy(input) {
     const passRate = input.parsed.tests > 0 ? input.parsed.passed / input.parsed.tests : 0;
     const catalog = new Map((input.cases ?? []).map((item) => [item.id, item]));
     const rows = input.parsed.cases.map((result) => {

package/dist/workflows/dag/frontend-implementation-contract.js

@@ -1,11 +1,12 @@
 import { createHash } from "node:crypto";
 import { readFileSync } from "node:fs";
-import { readFile } from "node:fs/promises";
+import { readFile, stat } from "node:fs/promises";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { z } from "zod";
 import { writeDagRunJsonArtifact } from "../../infrastructure/harness/artifact-store.js";
 import { findPackageRoot } from "../../shared/package-metadata.js";
+import { pathMatchesPattern } from "../../shared/git-progress.js";
 export const FRONTEND_IMPLEMENTATION_CONTRACT_SCHEMA_ID = "frontend-implementation-contract-v1";
 /**
  * Load the canonical frontend-implementation-contract-v1 JSON Schema from the
@@ -122,7 +123,7 @@ export const frontendImplementationContractSchema = z
         verificationTargetIds: z.array(z.string().min(1)),
         evidenceGap: gap.optional(),
     })
-        .strict()),
+        .strict()).min(1),
     uiStates: z.array(z
         .object({
         name: z.string().min(1),
@@ -132,7 +133,7 @@ export const frontendImplementationContractSchema = z
         verificationTargetIds: z.array(z.string().min(1)).optional(),
         notApplicableReason: z.string().min(1).optional(),
     })
-        .strict()),
+        .strict()).min(1),
     interactions: z.array(z
         .object({
         name: z.string().min(1),
@@ -185,7 +186,7 @@ export const frontendImplementationContractSchema = z
         requirementIds: z.array(id),
         uiStates: z.array(z.string().min(1)),
     })
-        .strict()),
+        .strict()).min(1),
     evidenceGaps: z.array(gap),
 })
     .strict()
@@ -198,6 +199,30 @@ export const frontendImplementationContractSchema = z
             path: ["verificationTargets"],
         });
     const known = new Set(value.sourceBinding.requirementIds);
+    const stateNames = new Set(value.uiStates.map((state) => state.name));
+    for (const target of value.verificationTargets) {
+        // Verification evidence may point to read-only project files such as
+        // tsconfig.json or a test entrypoint; implementation targets remain
+        // governed by targets.files and the writer writeSet.
+        for (const requirementId of target.requirementIds) {
+            if (!known.has(requirementId)) {
+                ctx.addIssue({
+                    code: "custom",
+                    message: `verification target references unknown requirement ${requirementId}`,
+                    path: ["verificationTargets"],
+                });
+            }
+        }
+        for (const stateName of target.uiStates) {
+            if (!stateNames.has(stateName)) {
+                ctx.addIssue({
+                    code: "custom",
+                    message: `verification target references unknown UI state ${stateName}`,
+                    path: ["verificationTargets"],
+                });
+            }
+        }
+    }
     for (const requirement of value.requirements) {
         if (!known.has(requirement.id))
             ctx.addIssue({
@@ -238,7 +263,70 @@ export const frontendImplementationContractSchema = z
                 path: ["uiStates"],
             });
     }
+    if (value.mockApi.strategy !== "not-needed") {
+        if (value.mockApi.endpoints.length === 0) {
+            ctx.addIssue({
+                code: "custom",
+                message: "Mock strategy requires at least one endpoint",
+                path: ["mockApi", "endpoints"],
+            });
+        }
+        value.mockApi.endpoints.forEach((endpoint, index) => {
+            if (!endpoint.fixture) {
+                ctx.addIssue({
+                    code: "custom",
+                    message: "Mock endpoint requires a fixture path",
+                    path: ["mockApi", "endpoints", index, "fixture"],
+                });
+            }
+            if (!endpoint.consumer) {
+                ctx.addIssue({
+                    code: "custom",
+                    message: "Mock endpoint requires a consumer path",
+                    path: ["mockApi", "endpoints", index, "consumer"],
+                });
+            }
+            for (const [field, file] of [["fixture", endpoint.fixture], ["consumer", endpoint.consumer]]) {
+                if (file && !value.targets.files.some((pattern) => pathMatchesPattern(file, pattern))) {
+                    ctx.addIssue({
+                        code: "custom",
+                        message: `Mock ${field} is outside contract targets: ${file}`,
+                        path: ["mockApi", "endpoints", index, field],
+                    });
+                }
+            }
+        });
+    }
 });
+export async function assertFrontendSourceBindingFresh(input) {
+    for (const source of input.binding.sources) {
+        // DAG source bindings are task-relative (for example source/需求.md),
+        // while older bindings may already contain the repository-relative
+        // .harness/tasks/<taskId>/ prefix. Resolve both forms before hashing.
+        const taskDir = path.resolve(input.workspaceRoot, ".harness", "tasks", input.binding.taskId);
+        const absolute = source.path.startsWith(".harness/")
+            ? path.resolve(input.workspaceRoot, source.path)
+            : path.resolve(taskDir, source.path);
+        const relative = path.relative(input.workspaceRoot, absolute);
+        if (relative.startsWith("..") || path.isAbsolute(relative)) {
+            throw new Error(`frontend source binding escapes workspace: ${source.path}`);
+        }
+        let content;
+        try {
+            content = await readFile(absolute);
+            const info = await stat(absolute);
+            if (!info.isFile())
+                throw new Error("not a regular file");
+        }
+        catch (error) {
+            throw new Error(`frontend source binding file unavailable: ${source.path}: ${error instanceof Error ? error.message : String(error)}`);
+        }
+        const actual = createHash("sha256").update(content).digest("hex");
+        if (actual !== source.sha256) {
+            throw new Error(`frontend source binding is stale: ${source.path}`);
+        }
+    }
+}
 const SECRET_KEY = /(?:password|passwd|secret|token|api[_-]?key|private[_-]?key|credential|authorization)/i;
 const SECRET_VALUE = /(?:-----BEGIN [A-Z ]*PRIVATE KEY-----|\b(?:sk|ghp|github_pat|xox[baprs]|AKIA)[-_A-Za-z0-9]{12,}\b)/;
 function secretIssues(value, at = "$", issues = []) {
@@ -314,9 +402,42 @@ function looksLikeStrictFrontendContract(value) {
  * Near-schema payloads are left untouched so unknown-key fail-closed still holds.
  */
 export function coerceFrontendImplementationContractInput(value, canonicalBinding) {
-    if (looksLikeStrictFrontendContract(value))
-        return value;
-    const record = asRecord(value);
+    const rawRecord = asRecord(value);
+    const verificationTargetIds = rawRecord && Array.isArray(rawRecord.verificationTargets)
+        ? new Set(rawRecord.verificationTargets
+            .map((item) => asString(asRecord(item)?.id))
+            .filter(Boolean))
+        : undefined;
+    const normalizedValue = rawRecord
+        ? {
+            ...rawRecord,
+            requirements: verificationTargetIds && Array.isArray(rawRecord.requirements)
+                ? rawRecord.requirements.map((item) => {
+                    const requirement = asRecord(item);
+                    if (!requirement || !Array.isArray(requirement.verificationTargetIds))
+                        return item;
+                    return {
+                        ...requirement,
+                        verificationTargetIds: requirement.verificationTargetIds.filter((id) => typeof id === "string" && verificationTargetIds.has(id)),
+                    };
+                })
+                : rawRecord.requirements,
+            uiStates: Array.isArray(rawRecord.uiStates)
+                ? rawRecord.uiStates.map((item) => {
+                    const state = asRecord(item);
+                    if (!state ||
+                        state.applicable === false ||
+                        (state.notApplicableReason !== "" && state.notApplicableReason !== null))
+                        return item;
+                    const { notApplicableReason: _emptyReason, ...withoutEmptyReason } = state;
+                    return withoutEmptyReason;
+                })
+                : rawRecord.uiStates,
+        }
+        : value;
+    if (looksLikeStrictFrontendContract(normalizedValue))
+        return normalizedValue;
+    const record = asRecord(normalizedValue);
     if (!record)
         return value;
     const implementation = asRecord(record.implementation);
@@ -333,7 +454,7 @@ export function coerceFrontendImplementationContractInput(value, canonicalBindin
         ...asStringArray(asRecord(component?.paths)?.domHelper ? [asRecord(component?.paths)?.domHelper] : []),
     ].filter((item, index, arr) => arr.indexOf(item) === index);
     if (targetFiles.length === 0) {
-        targetFiles.push("apps/web/src/welcome/WelcomeBanner.js");
+        throw new Error("frontend contract compatibility input must declare target files");
     }
     const riskRaw = asString(record.riskLevel) ||
         asString(record.risk) ||
@@ -383,21 +504,7 @@ export function coerceFrontendImplementationContractInput(value, canonicalBindin
         });
     }
     if (verificationTargets.length === 0) {
-        verificationTargets.push({
-            id: "VT-STATIC",
-            type: "static",
-            commandLabel: "npm run typecheck",
-            file: targetFiles[0],
-            requirementIds: [...canonicalBinding.requirementIds],
-            uiStates: ["success"],
-        }, {
-            id: "VT-UNIT",
-            type: "unit",
-            commandLabel: "npm run test:unit:fe",
-            file: targetFiles.find((p) => p.includes("__tests__")) || targetFiles[0],
-            requirementIds: [...canonicalBinding.requirementIds],
-            uiStates: ["success", "error"],
-        });
+        throw new Error("frontend contract compatibility input must declare verification targets");
     }
     const defaultVerificationIds = verificationTargets.map((item) => String(item.id));
     const requirements = [];
@@ -440,11 +547,7 @@ export function coerceFrontendImplementationContractInput(value, canonicalBindin
     }
     for (const id of canonicalBinding.requirementIds) {
         if (!requirements.some((item) => item.id === id)) {
-            requirements.push({
-                id,
-                implementationTargets: targetFiles,
-                verificationTargetIds: defaultVerificationIds,
-            });
+            throw new Error(`frontend contract compatibility input does not cover ${id}`);
         }
     }
     const uiStates = [];
@@ -511,14 +614,20 @@ export function coerceFrontendImplementationContractInput(value, canonicalBindin
         });
     }
     const strategyRaw = asString(mockApiIn.strategy) || "not-needed";
-    const strategy = [
+    const allowedStrategies = [
         "native",
         "browser-intercept",
         "request-adapter",
         "not-needed",
-    ].includes(strategyRaw)
-        ? strategyRaw
-        : "not-needed";
+    ];
+    if (!allowedStrategies.includes(strategyRaw)) {
+        throw new Error(`frontend contract compatibility input has unsupported Mock strategy: ${strategyRaw}`);
+    }
+    const strategy = strategyRaw;
+    const productionDefaultOff = mockApiIn.productionDefaultOff === true || mockApiIn.productionMockOff === true;
+    if (!productionDefaultOff) {
+        throw new Error("frontend contract compatibility input must prove production Mock is off");
+    }
     const activation = asString(mockApiIn.activation) ||
         (strategy === "not-needed"
             ? "production remains real fetch; unit tests may inject fetchImpl only"