@tea-agent/loop-agent 0.21.0 → 0.22.0

package/dist/workflows/dag/types.js

@@ -1,4 +1,5 @@
 import { z } from "zod";
+import { isOpenspecSpecFilePath } from "../../shared/openspec-spec.js";
 import { campaignBudgetSchema, } from "../../application/evaluation/budget.js";
 import { assertDagPromptSourceRule } from "./prompt-source.js";
 import { dagRetryPolicySchema } from "./retry-policy.js";
@@ -25,6 +26,7 @@ export const dagShellVerifyEvidenceSchema = z.object({
     commandSource: z.enum(["adapter", "inline"]),
     commandCount: z.number().int().nonnegative(),
     commandLabels: z.array(z.string()).default([]),
+    commandTexts: z.array(z.string()).default([]),
     finalFullRequired: z.boolean().optional(),
 });
 export const dagRepairArtifactGateSchema = z.object({
@@ -128,22 +130,80 @@ export const dagFrontendPrewriteGateSchema = z.object({
     allowedMockStrategies: z.array(z.enum(["native", "browser-intercept", "request-adapter", "not-needed"])).min(1),
     artifactName: z.string().regex(/^[a-z0-9][a-z0-9._-]*\.json$/),
     outputDir: z.string().regex(/^[a-z0-9][a-z0-9._-]*$/),
+    requireSourceFreshness: z.literal(true),
+    implementationWriteSet: z.array(z.string().min(1)).min(1).optional(),
     openspecCandidatePaths: z
-        .array(z.string().regex(/^openspec\/.+/, "openspec candidate must be repo-relative"))
+        .array(z.string().refine((candidate) => !candidate.includes("\\") &&
+        isOpenspecSpecFilePath(candidate), "openspec candidate must be a repo-relative supported file under openspec/schemas/ or openspec/project-specs/"))
         .default([]),
 });
+export const dagFrontendLintBaselineSchema = z
+    .object({
+    schemaVersion: z.literal(1),
+    lintCommands: z.array(z.string().min(1)).min(1),
+    lintEvidence: dagShellVerifyEvidenceSchema,
+})
+    .strict();
 export const dagFrontendVerificationBundleSchema = z.object({
     schemaVersion: z.literal(1),
     mockCommands: z.array(z.string()).default([]),
+    lintCommands: z.array(z.string().min(1)).optional(),
     staticCommands: z.array(z.string()).min(1),
     behaviorCommands: z.array(z.string()).min(1),
     mockEvidence: dagShellVerifyEvidenceSchema.optional(),
+    lintEvidence: dagShellVerifyEvidenceSchema.optional(),
     staticEvidence: dagShellVerifyEvidenceSchema,
     behaviorEvidence: dagShellVerifyEvidenceSchema,
+    lintBaselineNodeId: dagFrontendNodeIdSchema.optional(),
+    writerNodeIds: z.array(dagFrontendNodeIdSchema).optional(),
     mode: z.enum(["initial", "repair"]),
+}).superRefine((bundle, context) => {
+    const groups = [
+        ["mock", bundle.mockCommands, bundle.mockEvidence],
+        ["lint", bundle.lintCommands ?? [], bundle.lintEvidence],
+        ["static", bundle.staticCommands, bundle.staticEvidence],
+        ["behavior", bundle.behaviorCommands, bundle.behaviorEvidence],
+    ];
+    for (const [name, commands, evidence] of groups) {
+        if ((name === "mock" || name === "lint") && commands.length === 0 && !evidence)
+            continue;
+        if (!evidence) {
+            context.addIssue({ code: z.ZodIssueCode.custom, path: [`${name}Evidence`], message: `${name} evidence is required when commands are configured` });
+            continue;
+        }
+        if (evidence.commandCount !== commands.length) {
+            context.addIssue({ code: z.ZodIssueCode.custom, path: [`${name}Evidence`, "commandCount"], message: `${name} commandCount must match commands` });
+        }
+        if (evidence.commandLabels.length !== commands.length) {
+            context.addIssue({ code: z.ZodIssueCode.custom, path: [`${name}Evidence`, "commandLabels"], message: `${name} commandLabels must match commands` });
+        }
+        if (evidence.commandTexts.length !== commands.length || evidence.commandTexts.some((command, index) => command !== commands[index])) {
+            context.addIssue({ code: z.ZodIssueCode.custom, path: [`${name}Evidence`, "commandTexts"], message: `${name} commandTexts must exactly match commands` });
+        }
+        if (new Set(evidence.commandLabels).size !== evidence.commandLabels.length || evidence.commandLabels.some((label) => !label.trim())) {
+            context.addIssue({ code: z.ZodIssueCode.custom, path: [`${name}Evidence`, "commandLabels"], message: `${name} commandLabels must be non-empty and unique` });
+        }
+    }
+    if ((bundle.lintCommands?.length ?? 0) > 0) {
+        if (!bundle.lintBaselineNodeId) {
+            context.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ["lintBaselineNodeId"],
+                message: "lintBaselineNodeId is required when lintCommands are present",
+            });
+        }
+        if (!bundle.writerNodeIds || bundle.writerNodeIds.length === 0) {
+            context.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ["writerNodeIds"],
+                message: "writerNodeIds are required when lintCommands are present",
+            });
+        }
+    }
 });
 export const dagFrontendReviewContextSchema = z.object({
     schemaVersion: z.literal(1),
+    requireBaseline: z.literal(true),
 });
 export const ENV_VAR_NAME_PATTERN = /^[A-Z_][A-Z0-9_]*$/;
 export const dagVersionSchema = z
@@ -226,6 +286,7 @@ export const dagShellConfigSchema = z.object({
     requirementCoverageGate: dagRequirementCoverageGateSchema.optional(),
     jsonArtifactGate: dagJsonArtifactGateSchema.optional(),
     frontendPrewriteGate: dagFrontendPrewriteGateSchema.optional(),
+    frontendLintBaseline: dagFrontendLintBaselineSchema.optional(),
     frontendVerificationBundle: dagFrontendVerificationBundleSchema.optional(),
     frontendReviewContext: dagFrontendReviewContextSchema.optional(),
     backendTestPipeline: dagBackendTestPipelineSchema.optional(),

package/docs/templates/agent-dag.schema.json

@@ -173,6 +173,11 @@
           "items": { "type": "string" },
           "default": []
         },
+        "commandTexts": {
+          "type": "array",
+          "items": { "type": "string" },
+          "default": []
+        },
         "finalFullRequired": { "type": "boolean" }
       }
     },
@@ -306,7 +311,7 @@
         "frontendPrewriteGate": {
           "type": "object",
           "additionalProperties": false,
-          "required": ["schemaVersion", "planFromNodeId", "reviewFromNodeId", "allowedMockStrategies", "artifactName", "outputDir"],
+          "required": ["schemaVersion", "planFromNodeId", "reviewFromNodeId", "allowedMockStrategies", "artifactName", "outputDir", "requireSourceFreshness"],
           "properties": {
             "schemaVersion": { "const": 1 },
             "planFromNodeId": { "type": "string", "pattern": "^[a-z][a-z0-9-]*$" },
@@ -316,7 +321,9 @@
             "requiredRequirementIds": { "type": "array", "items": { "type": "string", "pattern": "^(?:REQ|BR|AC)-[A-Z0-9]+(?:-[A-Z0-9]+)*$" } },
             "allowedMockStrategies": { "type": "array", "minItems": 1, "items": { "enum": ["native", "browser-intercept", "request-adapter", "not-needed"] } },
             "artifactName": { "type": "string", "pattern": "^[a-z0-9][a-z0-9._-]*\\.json$" },
-            "outputDir": { "type": "string", "pattern": "^[a-z0-9][a-z0-9._-]*$" }
+            "outputDir": { "type": "string", "pattern": "^[a-z0-9][a-z0-9._-]*$" },
+            "requireSourceFreshness": { "const": true },
+            "implementationWriteSet": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1 } }
           }
         },
         "frontendVerificationBundle": {
@@ -332,13 +339,16 @@
             "staticEvidence": { "$ref": "#/$defs/shellVerifyEvidence" },
             "behaviorEvidence": { "$ref": "#/$defs/shellVerifyEvidence" },
             "mode": { "enum": ["initial", "repair"] }
-          }
+          },
+          "allOf": [
+            { "properties": { "staticEvidence": { "required": ["commandTexts"], "properties": { "commandTexts": { "minItems": 1 } } }, "behaviorEvidence": { "required": ["commandTexts"], "properties": { "commandTexts": { "minItems": 1 } } } } }
+          ]
         },
         "frontendReviewContext": {
           "type": "object",
           "additionalProperties": false,
-          "required": ["schemaVersion"],
-          "properties": { "schemaVersion": { "const": 1 } }
+          "required": ["schemaVersion", "requireBaseline"],
+          "properties": { "schemaVersion": { "const": 1 }, "requireBaseline": { "const": true } }
         },
         "backendTestPipeline": {
           "enum": ["contracts", "semantic-initial", "execute-parse-initial", "classification-result-context"]

package/docs/templates/backend-test-dag.json

@@ -250,7 +250,7 @@
         ".harness/dag-runs/**",
         "artifacts/**"
       ],
-      "outputContract": "One scoped pytest execution over Markdown-mapped scripts producing valid JUnit with per-case captured output, self-contained HTML and reports/backend-test-facts.md; exit 0/1 with valid evidence continues.",
+      "outputContract": "One scoped pytest execution over Markdown-mapped scripts producing valid JUnit with per-case captured output, self-contained HTML, reports/backend-test.md and reports/backend-test-facts.md; exit 0/1 with valid evidence continues.",
       "subtask_prompt": "Resolve the final Markdown Automation Notes/自动化映射 to a unique, safe set of testcase/**/test_*.py targets and execute only those scripts exactly once. Validate JUnit, then render the primary self-contained Chinese HTML report from the same JUnit plus final Markdown case metadata without rerun. Keep 测试结论, quality status, failure overview, and a polished per-case result card with concise scenario, automation test name, result, duration, and redacted bounded HTTP request parameters/response results for both passed and failed cases. Do not render a technical/execution evidence section in HTML; retain auditable paths and hashes in facts.",
       "shell": {
         "commands": [

package/docs/templates/frontend-implementation-contract.schema.json

@@ -10,14 +10,15 @@
     "sourceBinding": { "$ref": "#/$defs/sourceBinding" },
     "riskLevel": { "enum": ["small", "standard", "high-risk"] },
     "targets": { "type": "object", "additionalProperties": false, "required": ["files"], "properties": { "files": { "type": "array", "minItems": 1, "items": { "$ref": "#/$defs/path" } }, "routes": { "type": "array", "items": { "type": "string", "pattern": "^/" } }, "publicApiChanges": { "type": "array", "items": { "type": "string", "minLength": 1 } } } },
-    "requirements": { "type": "array", "items": { "type": "object", "additionalProperties": false, "required": ["id", "implementationTargets", "verificationTargetIds"], "properties": { "id": { "$ref": "#/$defs/requirementId" }, "implementationTargets": { "type": "array", "items": { "$ref": "#/$defs/path" } }, "verificationTargetIds": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "evidenceGap": { "$ref": "#/$defs/gap" } } } },
-    "uiStates": { "type": "array", "items": { "type": "object", "additionalProperties": false, "required": ["name", "applicable"], "properties": { "name": { "type": "string", "minLength": 1 }, "applicable": { "type": "boolean" }, "expectedBehavior": { "type": "string", "minLength": 1 }, "implementationTargets": { "type": "array", "items": { "$ref": "#/$defs/path" } }, "verificationTargetIds": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "notApplicableReason": { "type": "string", "minLength": 1 } } } },
+    "requirements": { "type": "array", "minItems": 1, "items": { "type": "object", "additionalProperties": false, "required": ["id", "implementationTargets", "verificationTargetIds"], "properties": { "id": { "$ref": "#/$defs/requirementId" }, "implementationTargets": { "type": "array", "items": { "$ref": "#/$defs/path" } }, "verificationTargetIds": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "evidenceGap": { "$ref": "#/$defs/gap" } } } },
+    "uiStates": { "type": "array", "minItems": 1, "items": { "type": "object", "additionalProperties": false, "required": ["name", "applicable"], "properties": { "name": { "type": "string", "minLength": 1 }, "applicable": { "type": "boolean" }, "expectedBehavior": { "type": "string", "minLength": 1 }, "implementationTargets": { "type": "array", "items": { "$ref": "#/$defs/path" } }, "verificationTargetIds": { "type": "array", "items": { "type": "string", "minLength": 1 } }, "notApplicableReason": { "type": "string", "minLength": 1 } } } },
     "interactions": { "type": "array", "items": { "type": "object", "additionalProperties": false, "required": ["name", "implementationTargets", "verificationTargetIds"], "properties": { "name": { "type": "string", "minLength": 1 }, "implementationTargets": { "type": "array", "items": { "$ref": "#/$defs/path" } }, "verificationTargetIds": { "type": "array", "items": { "type": "string" } } } } },
     "mockApi": { "type": "object", "additionalProperties": false, "required": ["strategy", "productionDefaultOff", "activation", "endpoints"], "properties": { "strategy": { "enum": ["native", "browser-intercept", "request-adapter", "not-needed"] }, "productionDefaultOff": { "const": true }, "activation": { "type": "string", "minLength": 1 }, "endpoints": { "type": "array", "items": { "type": "object", "additionalProperties": false, "required": ["method", "path"], "properties": { "method": { "enum": ["GET", "POST", "PUT", "PATCH", "DELETE", "HEAD", "OPTIONS"] }, "path": { "type": "string", "pattern": "^/" }, "fixture": { "$ref": "#/$defs/path" }, "consumer": { "$ref": "#/$defs/path" } } } } } },
     "designEvidence": { "type": "object", "additionalProperties": false, "required": ["source", "paths", "conflicts"], "properties": { "source": { "type": "string", "minLength": 1 }, "paths": { "type": "array", "items": { "$ref": "#/$defs/path" } }, "conflicts": { "type": "array", "items": { "type": "string", "minLength": 1 } } } },
-    "verificationTargets": { "type": "array", "items": { "type": "object", "additionalProperties": false, "required": ["id", "type", "commandLabel", "file", "requirementIds", "uiStates"], "properties": { "id": { "type": "string", "minLength": 1 }, "type": { "enum": ["static", "unit", "component", "integration", "mock"] }, "commandLabel": { "type": "string", "minLength": 1 }, "file": { "$ref": "#/$defs/path" }, "symbol": { "type": "string", "minLength": 1 }, "requirementIds": { "type": "array", "items": { "$ref": "#/$defs/requirementId" } }, "uiStates": { "type": "array", "items": { "type": "string", "minLength": 1 } } } } },
+    "verificationTargets": { "type": "array", "minItems": 1, "items": { "type": "object", "additionalProperties": false, "required": ["id", "type", "commandLabel", "file", "requirementIds", "uiStates"], "properties": { "id": { "type": "string", "minLength": 1 }, "type": { "enum": ["static", "unit", "component", "integration", "mock"] }, "commandLabel": { "type": "string", "minLength": 1 }, "file": { "$ref": "#/$defs/path" }, "symbol": { "type": "string", "minLength": 1 }, "requirementIds": { "type": "array", "items": { "$ref": "#/$defs/requirementId" } }, "uiStates": { "type": "array", "items": { "type": "string", "minLength": 1 } } } } },
     "evidenceGaps": { "type": "array", "items": { "$ref": "#/$defs/gap" } }
   },
+  "allOf": [{ "if": { "properties": { "mockApi": { "properties": { "strategy": { "enum": ["native", "browser-intercept", "request-adapter"] } } } } }, "then": { "properties": { "mockApi": { "properties": { "endpoints": { "minItems": 1, "items": { "required": ["method", "path", "fixture", "consumer"] } } } } } } }],
   "$defs": {
     "path": { "type": "string", "minLength": 1, "pattern": "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))(?!.*\\\\).+$" },
     "requirementId": { "type": "string", "pattern": "^(?:REQ|BR|AC)-[A-Z0-9]+(?:-[A-Z0-9]+)*$" },

package/docs/templates/frontend-test-case-checklist.md

@@ -17,8 +17,12 @@ LLM review (when `frontendTest.reviewMode=blocking`) must not invent blocking ru
 | `case-id-is-ac` | Do not use acceptance id as `caseId` / filename |
 | `case-path-mismatch` | `casePath === testcase/frontend/cases/{caseId}.md` |
 | `case-file-missing` | `casePath` exists |
-| `no-test-source` | Case text must not introduce pytest / Playwright test source (`pytest`, `playwright.test`, `@playwright/test`) |
-| `playwright-cli-only` | Case steps may only use repo skill `playwright-cli` declared commands; bare `playwright` / `npx playwright` / `playwright test` / `@playwright/test` / Node Playwright API are forbidden |
+
+## Tool guidance (non-blocking)
+
+- Browser execution should **strongly prefer `playwright-cli`** and the standard start command documented above.
+- The fourth node does not scan for or block executable commands from other tools, including `pytest`, bare/native Playwright, `npx playwright`, `playwright test`, `@playwright/test`, or Node Playwright APIs.
+- Tool-choice findings belong in later advisory/reporting stages rather than this structural hard gate.
 
 ### ID 对照（避免混用）
 

package/docs/templates/frontend-test-dag.json

@@ -93,7 +93,7 @@
         ".harness/**",
         "artifacts/**"
       ],
-      "outputContract": "Markdown cases, index.md and manifest.json schemaVersion 1; no test source code.",
+      "outputContract": "Markdown cases, index.md and manifest.draft.json schemaVersion 1; materialize promotes the validated draft to manifest.json; no test source code.",
       "subtask_prompt_markdown": "./frontend-test-dag.generate-cases.prompt.md"
     },
     {
@@ -250,7 +250,7 @@
         ".harness/**",
         "artifacts/**"
       ],
-      "outputContract": "Mechanical checklist: open-prefix, non-prod absolute URL, acIds, playwright-cli-only, no pytest/playwright test source; emit structured ruleId issues on failure.",
+      "outputContract": "Mechanical checklist: manifest/case paths, Case ID, non-production playwright-cli open prefix, and AC mapping; strongly recommend playwright-cli without blocking alternative executable tool commands.",
       "subtask_prompt": "Scan generated cases/manifest against the shared blocking checklist. Runtime hybrid embeds the authoritative script.",
       "shell": {
         "commands": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tea-agent/loop-agent",
-  "version": "0.21.0",
+  "version": "0.22.0",
   "type": "module",
   "bin": {
     "loop-agent": "bin/loop-agent.js",

package/skills/frontend-design-review/SKILL.md

@@ -11,10 +11,10 @@ references:
 
 For frontend design review nodes. Read the checklist; audit contract, scout, Mock
 strategy, effective plan, task bounds, and traceable design evidence.
-Knowledge base and `openspec/` are parallel specification sources. Query the
-knowledge-base connector when available; regardless of result, also search and
-read `<repoRoot>/openspec/**` before accepting repository conventions. The
-connector format is TODO: never invent results.
+Knowledge base, OpenSpec, and `ai_workspace/` are parallel sources. Query the
+knowledge-base connector when available; always search/read `openspec/schemas/**`,
+`openspec/project-specs/**`, and `ai_workspace/**` before accepting conventions.
+Connector format is TODO: never invent results.
 
 ## Verdict Contract
 
@@ -39,16 +39,17 @@ output fails closed.
 
 - Any criterion lacks implementation/verification; UI states lack reasons; a
   dependency lacks permission; confirmed primitives/rules are ignored; design claims
-  lack knowledge-base or required `openspec/` evidence; paths cross write bounds;
-  commands are missing/non-deterministic; or interaction, responsive, accessibility,
-  data, or failure behavior requires guessing.
+  lack knowledge-base or required openspec specification evidence; paths cross
+  write bounds; commands are missing/non-deterministic; or
+  interaction, responsive, accessibility, data, or failure behavior requires guessing.
 - `MOCK_STRATEGY: blocked`; missing permitted target paths, endpoint/schema-to-fixture
   mapping, fixed verification, or dev/test-only activation; a second Mock framework;
   inline fake data; commented real requests; Mock-on production defaults; test-only
   production imports; or Mock evidence reported as real integration.
 
-Knowledge-base absence is advisory if relevant `openspec/` rules were read and
-applied. Block skipped fallback, unresolved conflict, or unresolved UI decisions.
+Knowledge-base absence is advisory if relevant rules from either openspec
+specification directory were read and applied. Block skipped fallback, unresolved
+conflict, or unresolved UI decisions.
 
 ## Method And Output
 
@@ -59,7 +60,8 @@ or Advisory, and never edit files.
 
 Run `grep`/`find`, then explicit `read` calls for applicable specs/checklist. Only
 successful paired reads count as “已读取规范文件”; summaries do not. List each path/
-section in `Checked Items`; search/read `openspec/` before accepting conventions.
+section in `Checked Items`; search/read both openspec specification directories
+before accepting conventions.
 
 ```markdown
 VERDICT: pass

package/skills/frontend-design-review/references/review-checklist.md

@@ -9,8 +9,8 @@
 ## Project Fit
 
 - Reuse components, hooks, API helpers, mocks, schemas, router patterns, tokens, and theme rules.
-- Cite knowledge base and `openspec/` as parallel sources; failed or empty
-  knowledge queries must still search `<repoRoot>/openspec/**`.
+- Cite knowledge base, `openspec/schemas/`, `openspec/project-specs/`, and `ai_workspace/` as parallel sources; failed or empty
+  knowledge queries must still search `<repoRoot>/openspec/schemas/`, `<repoRoot>/openspec/project-specs/`, and `<repoRoot>/ai_workspace/`.
 - Record source status, query terms, paths/headings, conflicts, authorized deps, and allowed paths for both.
 
 ## Interaction / Quality
@@ -36,6 +36,6 @@
 
 ## Verdict Matrix
 
-- Request revision for coverage gaps, unsafe scope, unauthorized deps, unresolved required interaction, missing required verification, skipped `openspec/` fallback, unsafe/missing Mock strategy, or Mock evidence presented as real integration.
-- Knowledge-base unavailable but relevant `openspec/` rules applied is advisory only.
+- Request revision for coverage gaps, unsafe scope, unauthorized deps, unresolved required interaction, missing required verification, skipped local specification fallback (`openspec/schemas/`, `openspec/project-specs/`, or `ai_workspace/`), unsafe/missing Mock strategy, or Mock evidence presented as real integration.
+- Knowledge-base unavailable but relevant OpenSpec or `ai_workspace/` rules applied is advisory only.
 - Optional cleanup that cannot affect acceptance is advisory.

package/skills/frontend-implementation/SKILL.md

@@ -23,8 +23,8 @@ Read all required references before running any listed frontend node.
 ## Source And Evidence Rules
 
 Use task sources/references, constraints, then `task.json`. Follow `design-spec.md`:
-knowledge base; `<repoRoot>/openspec/**` after unavailable/failed/empty; then repo
-evidence. Cite tight paths/symbols, label gaps/conflicts, and never invent APIs,
+query the knowledge base when available and always inspect `openspec/schemas/`,
+`openspec/project-specs/`, and `ai_workspace/`; then use repo evidence. Cite tight paths/symbols, and never invent APIs,
 rules, commands, or retrievals. Scout/planners locate and explicitly read applicable
 specs; only successful paired reads count. Lockfile-only, fixture-only, or unread
 search hits do not prove a reusable Mock service.

package/skills/frontend-implementation/references/code-standards.md

@@ -1,9 +1,10 @@
 # Frontend Code Standards
 
 Discover rules from task constraints, `design-spec.md` source order, config, code,
-tests, manifests, and generated types. After knowledge-base failure, applicable
-`<repoRoot>/openspec/**` rules are normative. Preferences are not rules, and docs do
-not override installed APIs without an explicit compatibility decision.
+tests, manifests, and generated types. Regardless of knowledge-base results,
+applicable `openspec/schemas/`, `openspec/project-specs/`, and `ai_workspace/` rules are normative.
+Preferences are not rules, and docs do not override installed APIs without an
+explicit compatibility decision.
 
 ## Discover And Cite
 

package/skills/frontend-implementation/references/design-spec.md

@@ -2,22 +2,22 @@
 
 ## Required Source Sequence
 
-Knowledge base and `openspec/` are parallel specification sources:
+Knowledge base, OpenSpec, and `ai_workspace/` are parallel specification sources:
 
 1. Attempt the configured component/design knowledge-base query first when a
    connector is available in the execution environment.
 2. Regardless of knowledge-base success, failure, timeout, no match, or no
-   configuration, also recursively search the project root's exact `openspec/`
-   directory for index files and task-relevant specification content.
+   configuration, also recursively search `openspec/schemas/`,
+   `openspec/project-specs/`, and `ai_workspace/` for index files and relevant content.
 3. Treat relevant matches from both sources as the current project's
    specification for this run.
 4. Only then use component source, tokens, stories, tests, and pages as
    non-normative repository fallback.
 
-Never skip `openspec/` directly to neighboring-code conventions, even when a
-knowledge-base query returned results. Report source conflicts instead of
-combining them. Explicit task requirements remain the contract; flag conflicts
-with knowledge-base or `openspec/` rules.
+Never skip local OpenSpec or `ai_workspace/` sources for neighboring-code
+conventions, even when a knowledge-base query returned results. Report source
+conflicts instead of combining them. Explicit task requirements remain the
+contract; flag conflicts with knowledge-base or openspec specification rules.
 
 ## Knowledge Base Connection — TODO
 
@@ -25,15 +25,19 @@ Request format is undecided. TODO: define connector/owner, namespaces, secret-fr
 auth, query fields, result identity/version/time, and failure behavior.
 
 Attempt only a connector actually available in the execution environment. Otherwise
-record `not-configured` and run the `openspec/` fallback; never invent a connection.
+record `not-configured` and run the openspec fallback; never invent a connection.
 
-## `openspec/` Fallback Procedure
+## openspec Fallback Procedure
 
-- Confirm whether `<repoRoot>/openspec/` exists and enumerate its files recursively.
-- Read indexes first, then search names/content using task, route, component, interaction, theme, token, and state terms.
+- Inspect `<repoRoot>/openspec/schemas/`, `<repoRoot>/openspec/project-specs/`,
+  and `<repoRoot>/ai_workspace/` when present; enumerate supported files recursively.
+- Read indexes first, then search names/content using task, route, component,
+  interaction, theme, token, and state terms.
 - Read relevant matches in context; do not treat a filename-only hit as a rule.
-- Record search terms, inspected/matched paths, headings or tight line ranges, applied rules, and conflicts.
-- If the directory or relevant rules are absent, record that fact before using repository fallback.
+- Record search terms, inspected/matched paths, headings or tight line ranges,
+  applied rules, and conflicts.
+- If both directories or relevant rules are absent, record that fact before using
+  repository fallback.
 
 ## Retrieval Evidence
 
@@ -50,5 +54,6 @@ and conflicts. `openspec fallback` includes terms, paths/headings/lines, rules,
 
 - Reuse confirmed primitives unless a new pattern is authorized.
 - Define applicable states and responsive behavior before implementation.
-- Cite knowledge-base or `openspec/` evidence for component/token choices; label weaker repository fallback.
+- Cite knowledge-base or openspec specification evidence for component/token
+  choices; label weaker repository fallback.
 - Make deviations and unresolved gaps explicit.

package/skills/frontend-implementation/references/node-contracts.md

@@ -5,7 +5,7 @@ Pre-write nodes are read-only. Preserve IDs, labels, commands, language, require
 ## Core nodes
 
 - **`frontend-contract-pi`**: `Scope`, `Non-goals`, `Acceptance Criteria`, `UI States`, `Target Runtime Environment`, `Risks`, `Verification Expectations`. No guessed requirements.
-- **`frontend-scout-pi`**: routes, components, tokens, data/API/Mock, scripts, tests, assets. Fact vs inference vs gap. Knowledge base first; else search+read `<repoRoot>/openspec/**` before repo fallback. Output stack, routes, components, styling, conventions, state/data, test entry points, reuse, risks.
+- **`frontend-scout-pi`**: routes, components, tokens, data/API/Mock, scripts, tests, assets. Fact vs inference vs gap. Query the knowledge base when available and always search+read `openspec/schemas/`, `openspec/project-specs/`, and `ai_workspace/` before repo fallback. Output stack, routes, components, styling, conventions, state/data, test entry points, reuse, risks.
 - **`frontend-plan-pi` + conditional design loop**: AC → steps, in-bound files, UI states, reuse, deps, Mock/API strategy, activation/rollback, frozen verify entrypoints, real-integration gap, and exactly one `frontend-implementation-contract-v1` JSON object. Prefer native Mock; browser intercept only with existing e2e; request-adapter only for a reversible seam. `auto` may select `not-needed` when no project Mock capability exists, while keeping real requests default and recording the gap; `required` cannot. Initial design pass uses the original plan; only exact `request-revision` runs read-only revision plus final review. Small-risk runs one design review only.
 - **`frontend-prewrite-gate-shell`**: the sole write authorization. Resolve effective plan/review, require exact pass, retain every REQ/BR/AC id, enforce Mock policy, validate schema/source binding, and materialize `contracts/frontend-implementation-contract.json`. Fallback is allowed only when a conditional primary is absent; an existing malformed primary fails closed. Generation-time blocked Mock produces one deterministic blocking shell node and no writer.
 - **`frontend-implement-pi`**: sole exclusive writer. Stay in `writeSet`; real requests default-on; Mock reversible, dev/test-only, production-off. Atomic handler/intercept/adapter with consumer+tests. Stop on forbidden paths or guesses. Output changed files, behavior, UI states, styling notes, verification attempted, residual risks. Optional mock-verify when frozen; static+behavior always; behavior must prove page consumption. Skipped-Mock `not-needed` keeps real integration pending unless the real backend path has fresh evidence.
@@ -22,4 +22,4 @@ Only `eligible=true` runs `frontend-repair-pi` (same writeSet as implement; no r
 
 ## Risk & capability (M4–M6)
 
-Deterministic risk (no model); high-risk beats small; supervised never small. Standard/high-risk contain 15 top-level nodes; small contains 13 by omitting revision and final review. Capability seed injects adapters; openspec/task sources outrank. A11y: static/component tools only when present; Browser a11y always not-run.
+Deterministic risk (no model); high-risk beats small; supervised never small. Standard/high-risk contain 15 top-level nodes; small contains 13 by omitting revision and final review. Capability seed injects adapters; openspec specs and task sources outrank adapter guidance. A11y: static/component tools only when present; Browser a11y always not-run.

package/skills/frontend-review/SKILL.md

@@ -12,9 +12,8 @@ references:
 Use for `frontend-review-pi`; read the findings guide first. Required inputs are
 original task/reference material, effective plan/design branch, implementation summary,
 and `contracts/frontend-review-context.json`. That canonical context binds the validated
-implementation contract, effective initial-or-post-repair verification trace, repair
-assessment, and run-owned actual diff. Treat its diff as authoritative; never invent a
-diff from an implementation summary alone.
+implementation contract, effective verification trace, repair assessment, optional
+`frontend-lint-assessment-v1`, and run-owned diff. The diff is authoritative.
 
 ## Verdict Contract
 
@@ -27,42 +26,30 @@ required check, forbidden write, or unmet acceptance criterion forces revision.
 - Compare intent, contract, plan, diff, and evidence; report altered requirements.
 - Inspect every changed file against allowed, forbidden, and approved write scope.
 - Map criteria to behavior, applicable UI states, tests, and shell evidence.
-- Review state/data flow, validation, async/error behavior, components/design, responsive behavior, accessibility, dependencies, maintenance, and regression risk when applicable.
+- Review state/data flow, validation, async/error behavior, design, responsive/a11y,
+  dependencies, maintenance, and regression risk when applicable.
 - Inspect static, behavior, and available Mock-specific artifacts directly. For Mock
   strategies, compare the endpoint matrix, handler/fixture/adapter and consumer diff;
   require the real request as default, contract-aligned fixtures, production isolation,
   and no false real-integration claim. `not-needed` needs applicable real/no-remote
   evidence, or an explicit default-auto skipped-Mock rationale with the Real
   Integration Gap preserved when no project Mock capability is confirmed.
-- Component/design claims require traceable evidence from two parallel sources:
-  knowledge base and `<repoRoot>/openspec/**`. Query the knowledge-base connector
-  when available; regardless of result, also read `<repoRoot>/openspec/**`.
-  The connector format is TODO; never claim a query or fallback search without
-  evidence. Execute explicit `grep`/`find` to locate spec files and `read` to
-  load them before referencing their rules. Only successful `read` tool calls are
-  observable as "已读取规范文件" in the spec-evidence inspector.
+- Inspect lint assessment directly. `baseline-debt` requires intact evidence, only
+  baseline-matched diagnostics on unchanged files, and none on writer-changed files.
+  Report debt, never `lint passed`; `failed`/`unavailable` blocks. Typecheck, build,
+  and test still require successful final exits.
+- Component/design claims need both knowledge-base and local openspec evidence. Query
+  the connector when available and always read task-relevant files under
+  `<repoRoot>/openspec/schemas/`, `<repoRoot>/openspec/project-specs/`, and `<repoRoot>/ai_workspace/`.
+  Connector format is TODO; never invent evidence. Only successful `read` calls are
+  observable as "已读取规范文件".
 - Treat shell exit status as authoritative. Do not edit files.
 
 ## Evidence And Output
 
 Findings cite a tight file location, exact command/result, or named DAG artifact.
-Separate confirmed defects, missing evidence, and residual risks.
-
-```markdown
-VERDICT: request-revision
-
-## Findings
-- [Important] `path:line` — issue, impact, and required correction.
-
-## Verification Assessment
-- ...
-
-## UX Assessment
-- ...
-
-## Residual Risks
-- ...
-```
+Separate confirmed defects, missing evidence, and residual risks using Findings,
+Verification Assessment, UX Assessment, and Residual Risks headings.
 
 A pass requires no Critical/Important findings and all required shell checks passed.
 Still report knowledge-source status and optional browser/manual gaps.

package/skills/frontend-review/references/review-findings.md

@@ -2,7 +2,7 @@
 
 ## Severity
 
-- **Critical**: blocks primary flow, corrupts data, violates security/privacy, writes forbidden paths, or bypasses required verification.
+- **Critical**: blocks primary flow, corrupts data, violates security/privacy, writes forbidden paths, bypasses required verification.
 - **Important**: acceptance/state/validation gap, material convention drift, missing behavior tests, unauthorized dependency, unsafe mock activation/import, mock-contract drift, misleading real-integration claim, or failed/missing required verification.
 - **Minor**: non-blocking maintainability, copy, layout, or cleanup issue.
 
@@ -10,43 +10,41 @@
 
 - Cite tight file locations, exact commands/results, or named DAG artifacts.
 - Never invent evidence; name the missing check. An implementation summary is not the actual diff.
-- Failed required static/behavior verification is at least Important unless proven unrelated.
-- Treat the knowledge base and `openspec/` as parallel sources. Record
-  connector/query, source ID/version, and retrieval time for knowledge-base
-  claims. Regardless of that result, evidence must show
-  `<repoRoot>/openspec/**` search terms and matched paths/headings; label
-  `openspec`, `repository fallback`, or `unavailable` accurately.
+- Failed required static/behavior verification is at least Important. Lint may be
+  `baseline-debt` only with a valid `frontend-lint-assessment-v1`; this is not a
+  passed lint result. A changed-file lint diagnostic, new unmatched diagnostic,
+  command drift, missing baseline, timeout, or unparseable output is Important.
+- Treat knowledge base, `openspec/schemas/`, `openspec/project-specs/`, and `ai_workspace/` as
+  parallel sources. Record connector/query/source/time plus openspec search terms and
+  matched paths/headings; label fallback or unavailable accurately.
 
 ## Review Sequence
 
 1. Establish changed-file inventory and write boundaries.
 2. Compare original requirement with derived contract/constraints.
 3. Map each criterion to code, states, tests, and evidence.
-4. Inspect interactions, state/data/API behavior, failure paths, and regression risk.
+4. Inspect interactions, state/data/API behavior, failure paths, and regressions.
 5. Check mock selection, contract-to-fixture mapping, activation/default path,
-   handler/fixture/adapter and consumer diff, optional Mock-specific verification,
-   production imports, evidence scope, and the documented real-integration gap.
-6. Check component/design evidence, responsive/accessibility behavior, dependencies, and maintenance fit when applicable.
+   handler/fixture/adapter and consumer diff, verification, production imports, and
+   the real-integration gap.
+6. Check design evidence, responsive/a11y behavior, dependencies, and maintenance.
 7. Classify findings and derive the verdict mechanically.
 
-Skipping the required `openspec/` search after knowledge-base failure is Important
-when component/design compliance affects acceptance or implementation choices.
-
-Use one issue per finding:
+Skipping either directory is Important when design compliance affects acceptance.
 
 ```text
 - [Critical|Important|Minor] path:line — Problem; impact; required correction; evidence.
 ```
 
-Avoid vague advice. When no source location exists, cite the command or artifact.
-
 ## Pass Rules
 
 - No Critical or Important findings remain.
 - Required static and behavior nodes ran and passed.
+- Lint is `passed` or evidence-backed `baseline-debt`; typecheck, build, and test are
+  passed. Any debt count and affected unchanged files remain disclosed.
 - Changed files are authorized.
 - Criteria and applicable states have implementation and evidence.
 - Required Mock-backed behavior passed; any generated Mock-specific verification also
   passed; Mock is not enabled by default in production. For default-auto skipped
   Mock, the real request remains default and the Real Integration Gap is preserved.
-- Optional unavailable knowledge-base, browser, visual, or manual checks remain explicit risks.
+- Optional unavailable knowledge/browser/visual/manual checks remain explicit risks.