@tea-agent/loop-agent 0.26.0 → 0.26.1

package/docs/templates/production-readiness-checklist.md

@@ -1,57 +1,57 @@
-# Production Readiness 检查清单
-
-声称 Production Readiness v0.1 的低/中风险单仓库 DAG 任务使用本清单。
-
-## 范围
-
-- [ ] 单仓库
-- [ ] 单任务或小范围有边界任务
-- [ ] 低或中风险
-- [ ] 无生产 secret 或生产数据库访问
-- [ ] 无自动 merge 或 release
-- [ ] 无 DAG runtime 之外的第二套 runner
-- [ ] 无可写 Dynamic Workflow sharded migration
-
-## Task Contract
-
-- [ ] Task source 存在于 `.harness/tasks/<task-id>/source/`
-- [ ] `allowedPaths` 显式
-- [ ] `forbiddenPaths` 显式
-- [ ] `writeSet` 或预期写 scope 显式
-- [ ] Shell 验证命令显式
-- [ ] 非目标显式
-
-## DAG 主路径
-
-- [ ] 已运行 `loop-agent new-task <task-id> "Task title"` 或 task 已存在
-- [ ] `loop-agent dag run-task <task-id> --profile auto --strict-models --output <dag-path>` 产出 DAG spec
-- [ ] `loop-agent dag validate --dag <dag-path> --strict-models --strict-governance` 通过
-- [ ] `loop-agent run-dag --dag <dag-path> --cwd .` 产出 run id
-- [ ] `loop-agent dag report --run-id <run-id> --markdown` 可读
-- [ ] `loop-agent dag doctor --run-id <run-id>` 能解释失败或 paused run
-
-## 证据
-
-- [ ] 记录 DAG spec path
-- [ ] 记录 DAG validation 输出
-- [ ] 记录 run id
-- [ ] Shell 验证输出是新鲜的
-- [ ] 成功路径有 promotion 与 closeout 证据
-- [ ] 失败路径有 failure handoff 证据
-
-## Failure Routing
-
-- [ ] 存在时保留 raw failure category
-- [ ] 失败 run 有 DAG normalized failure category
-- [ ] 失败 run 有 product-line failure category
-- [ ] 失败 run 有 recommended follow-up
-- [ ] 派生 category 未覆盖已完成 DAG facts
-- [ ] `Unknown` 已说明或为 fixture 有意接受
-
-## 最终门禁
-
-- [ ] `npm run typecheck`
-- [ ] 相关定向 Vitest 文件
-- [ ] `bash scripts/check-repo.sh`
-- [ ] website/docs 变更时 `npm run docs:build`
-- [ ] 最终 sprint closeout 前 `bash scripts/ci.sh`
+# Production Readiness 检查清单
+
+声称 Production Readiness v0.1 的低/中风险单仓库 DAG 任务使用本清单。
+
+## 范围
+
+- [ ] 单仓库
+- [ ] 单任务或小范围有边界任务
+- [ ] 低或中风险
+- [ ] 无生产 secret 或生产数据库访问
+- [ ] 无自动 merge 或 release
+- [ ] 无 DAG runtime 之外的第二套 runner
+- [ ] 无可写 Dynamic Workflow sharded migration
+
+## Task Contract
+
+- [ ] Task source 存在于 `.harness/tasks/<task-id>/source/`
+- [ ] `allowedPaths` 显式
+- [ ] `forbiddenPaths` 显式
+- [ ] `writeSet` 或预期写 scope 显式
+- [ ] Shell 验证命令显式
+- [ ] 非目标显式
+
+## DAG 主路径
+
+- [ ] 已运行 `loop-agent new-task <task-id> "Task title"` 或 task 已存在
+- [ ] `loop-agent dag run-task <task-id> --profile auto --strict-models --output <dag-path>` 产出 DAG spec
+- [ ] `loop-agent dag validate --dag <dag-path> --strict-models --strict-governance` 通过
+- [ ] `loop-agent run-dag --dag <dag-path> --cwd .` 产出 run id
+- [ ] `loop-agent dag report --run-id <run-id> --markdown` 可读
+- [ ] `loop-agent dag doctor --run-id <run-id>` 能解释失败或 paused run
+
+## 证据
+
+- [ ] 记录 DAG spec path
+- [ ] 记录 DAG validation 输出
+- [ ] 记录 run id
+- [ ] Shell 验证输出是新鲜的
+- [ ] 成功路径有 promotion 与 closeout 证据
+- [ ] 失败路径有 failure handoff 证据
+
+## Failure Routing
+
+- [ ] 存在时保留 raw failure category
+- [ ] 失败 run 有 DAG normalized failure category
+- [ ] 失败 run 有 product-line failure category
+- [ ] 失败 run 有 recommended follow-up
+- [ ] 派生 category 未覆盖已完成 DAG facts
+- [ ] `Unknown` 已说明或为 fixture 有意接受
+
+## 最终门禁
+
+- [ ] `npm run typecheck`
+- [ ] 相关定向 Vitest 文件
+- [ ] `bash scripts/check-repo.sh`
+- [ ] website/docs 变更时 `npm run docs:build`
+- [ ] 最终 sprint closeout 前 `bash scripts/ci.sh`

package/docs/templates/project-start-checklist.md

@@ -1,9 +1,9 @@
-# 项目开工检查清单
-
-- [ ] 确认 `pwd`
-- [ ] 阅读 `README.md`、`harness.json`，以及 `harness.json.governanceRoot` 指向的 `README.md`
-- [ ] 检查 `git status --short --branch`
-- [ ] 确定单一工作块
-- [ ] 从治理根目录下的 `verification-matrix.md` 选择验证命令
-- [ ] 保留无关用户变更
-- [ ] 非平凡工作时记录 handoff 证据
+# 项目开工检查清单
+
+- [ ] 确认 `pwd`
+- [ ] 阅读 `README.md`、`harness.json`，以及 `harness.json.governanceRoot` 指向的 `README.md`
+- [ ] 检查 `git status --short --branch`
+- [ ] 确定单一工作块
+- [ ] 从治理根目录下的 `verification-matrix.md` 选择验证命令
+- [ ] 保留无关用户变更
+- [ ] 非平凡工作时记录 handoff 证据

package/docs/templates/qa-report.md

@@ -1,48 +1,48 @@
-# QA 报告模板
-
-## 日期 / 会话
-
-## 测试范围
-
-## 相关 Contract / Plan
-
-## 测试方法
-
-- 自动化测试：
-- 构建 / 类型检查：
-- Smoke / 手工路径：
-- 其他证据：
-
-## Smoke / 手工检查
-
-- CLI smoke：
-- DAG smoke：
-- Loop workflow smoke：
-- Executor smoke：
-- 结果：pass / blocked / fail
-
-## 通过标准
-
-## 发现项
-
-| ID | Severity | Finding | Evidence | Suggested Fix |
-|----|----------|---------|----------|---------------|
-
-## Failure Routing
-
-| Run / Scenario | Raw Failure | DAG Normalized Category | Product-line Category | Recommended Follow-up | Evidence |
-|---|---|---|---|---|---|
-|  |  |  |  |  |  |
-
-## 新发现的 Bug / 漂移
-
-- 新发现 bug：
-- 发现的契约漂移：
-- 发现的文档/测试不一致：
-
-## 最终结论
-
-- 结论：pass / partial / fail
-- 结论依据：
-
-## 后续项
+# QA 报告模板
+
+## 日期 / 会话
+
+## 测试范围
+
+## 相关 Contract / Plan
+
+## 测试方法
+
+- 自动化测试：
+- 构建 / 类型检查：
+- Smoke / 手工路径：
+- 其他证据：
+
+## Smoke / 手工检查
+
+- CLI smoke：
+- DAG smoke：
+- Loop workflow smoke：
+- Executor smoke：
+- 结果：pass / blocked / fail
+
+## 通过标准
+
+## 发现项
+
+| ID | Severity | Finding | Evidence | Suggested Fix |
+|----|----------|---------|----------|---------------|
+
+## Failure Routing
+
+| Run / Scenario | Raw Failure | DAG Normalized Category | Product-line Category | Recommended Follow-up | Evidence |
+|---|---|---|---|---|---|
+|  |  |  |  |  |  |
+
+## 新发现的 Bug / 漂移
+
+- 新发现 bug：
+- 发现的契约漂移：
+- 发现的文档/测试不一致：
+
+## 最终结论
+
+- 结论：pass / partial / fail
+- 结论依据：
+
+## 后续项

package/docs/templates/sprint-contract.md

@@ -1,29 +1,29 @@
-# Sprint Contract
-
-## 目标（Objective）
-
-描述有边界的工作块。
-
-## 交付物（Deliverables）
-
-- 
-
-## 非目标（Non-goals）
-
-- 
-
-## 验证（Verification）
-
-```bash
-bash scripts/check-repo.sh
-npm run typecheck
-npm test
-```
-
-Windows 上通过 Git Bash 或已配置的兼容 Bash 运行脚本。实际文件操作用平台原生路径。
-
-## 失败条件（Failure Conditions）
-
-- 必需验证无法运行或失败
-- 工作需要超出本 contract 的范围
-- 实现改动了无关文件
+# Sprint Contract
+
+## 目标（Objective）
+
+描述有边界的工作块。
+
+## 交付物（Deliverables）
+
+- 
+
+## 非目标（Non-goals）
+
+- 
+
+## 验证（Verification）
+
+```bash
+bash scripts/check-repo.sh
+npm run typecheck
+npm test
+```
+
+Windows 上通过 Git Bash 或已配置的兼容 Bash 运行脚本。实际文件操作用平台原生路径。
+
+## 失败条件（Failure Conditions）
+
+- 必需验证无法运行或失败
+- 工作需要超出本 contract 的范围
+- 实现改动了无关文件

package/docs/templates/worker-dogfood-evidence.md

@@ -1,80 +1,80 @@
-# Worker Dogfood Evidence
-
-## Sample identity
-
-| Field | Value |
-|---|---|
-| Date | |
-| Feature / Task | |
-| Target repo | disposable path or sanitized reference |
-| Controller package/version | |
-| Agent-worker package/version (same npm install) | |
-| Controller requested entry / real entry | sanitized reference; keep machine-local absolute value in runtime evidence |
-| Controller launch command / args prefix | sanitized reference |
-| Controller binary SHA-256 | |
-| Controller package fingerprint | `sha256:<hex>` |
-| Expected controller version / fingerprint | n/a / exact values |
-| Provider/model / override | |
-| Batch ID | |
-| Worker run ID | |
-| Retry of worker run ID | n/a / |
-| Candidate commit / tarball SHA-256 | n/a / |
-
-## Baseline
-
-- Baseline commit and `git status`:
-- Existing failing behavior or missing capability:
-- Preflight (`loop-agent --version`, `inspect`, `docs audit`, `check-repo`):
-
-## Run evidence
-
-| Artifact | Path / link | Result |
-|---|---|---|
-| TaskSpec / source-doc copies | | |
-| DAG spec | | |
-| DAG report JSON / Markdown | | |
-| DAG skill snapshot ref / SHA-256 / mode | | |
-| shell verification | | |
-| diff | | |
-| closeout or Failure Handoff | | |
-| morning report | | |
-| Observe snapshot / events | | |
-| Controller identity in Worker / Task Pool / batch / Feature evidence | | |
-
-## Candidate takeover evidence (if applicable)
-
-| Field | Value / result |
-|---|---|
-| Candidate isolated slot containment | |
-| `loop-agent` entry / binary SHA-256 / reported version | |
-| `agent-worker` entry / binary SHA-256 / reported version | |
-| Shared package fingerprint | |
-| Full init / doctor / inspect / docs audit / target check-repo | |
-| `agent-worker` skill and `.agents/skills` mirror hashes | |
-| Feature validation / `feature run --dry-run` | |
-| DAG executors | expected: `static`, `shell` only |
-| PATH trap invocations | expected: none |
-| Pi/model executor observed | expected: false; derive from actual DAG nodes |
-| Feature dry-run executed tasks | expected: empty |
-| Canary verdict / evidence path | |
-
-Do not use a deterministic canary result as proof that live Pi/model/provider execution succeeded. Record run-owned skill snapshot evidence and any explicitly authorized live run separately.
-
-## Acceptance and QA coverage
-
-| Acceptance | Test case(s) | Test file / verification | Result |
-|---|---|---|---|
-| | | | |
-
-## Failure / retry (if applicable)
-
-| Raw failure | Product-line category | Recommended follow-up | Root cause evidence | Retry result |
-|---|---|---|---|---|
-| | | | | |
-
-## Conclusion
-
-- Verdict: pass / fail / blocked
-- Review notes:
-- Follow-up task(s):
-- Evidence limitations (for example deterministic-only, no Pi executor/live takeover):
+# Worker Dogfood Evidence
+
+## Sample identity
+
+| Field | Value |
+|---|---|
+| Date | |
+| Feature / Task | |
+| Target repo | disposable path or sanitized reference |
+| Controller package/version | |
+| Agent-worker package/version (same npm install) | |
+| Controller requested entry / real entry | sanitized reference; keep machine-local absolute value in runtime evidence |
+| Controller launch command / args prefix | sanitized reference |
+| Controller binary SHA-256 | |
+| Controller package fingerprint | `sha256:<hex>` |
+| Expected controller version / fingerprint | n/a / exact values |
+| Provider/model / override | |
+| Batch ID | |
+| Worker run ID | |
+| Retry of worker run ID | n/a / |
+| Candidate commit / tarball SHA-256 | n/a / |
+
+## Baseline
+
+- Baseline commit and `git status`:
+- Existing failing behavior or missing capability:
+- Preflight (`loop-agent --version`, `inspect`, `docs audit`, `check-repo`):
+
+## Run evidence
+
+| Artifact | Path / link | Result |
+|---|---|---|
+| TaskSpec / source-doc copies | | |
+| DAG spec | | |
+| DAG report JSON / Markdown | | |
+| DAG skill snapshot ref / SHA-256 / mode | | |
+| shell verification | | |
+| diff | | |
+| closeout or Failure Handoff | | |
+| morning report | | |
+| Observe snapshot / events | | |
+| Controller identity in Worker / Task Pool / batch / Feature evidence | | |
+
+## Candidate takeover evidence (if applicable)
+
+| Field | Value / result |
+|---|---|
+| Candidate isolated slot containment | |
+| `loop-agent` entry / binary SHA-256 / reported version | |
+| `agent-worker` entry / binary SHA-256 / reported version | |
+| Shared package fingerprint | |
+| Full init / doctor / inspect / docs audit / target check-repo | |
+| `agent-worker` skill and `.agents/skills` mirror hashes | |
+| Feature validation / `feature run --dry-run` | |
+| DAG executors | expected: `static`, `shell` only |
+| PATH trap invocations | expected: none |
+| Pi/model executor observed | expected: false; derive from actual DAG nodes |
+| Feature dry-run executed tasks | expected: empty |
+| Canary verdict / evidence path | |
+
+Do not use a deterministic canary result as proof that live Pi/model/provider execution succeeded. Record run-owned skill snapshot evidence and any explicitly authorized live run separately.
+
+## Acceptance and QA coverage
+
+| Acceptance | Test case(s) | Test file / verification | Result |
+|---|---|---|---|
+| | | | |
+
+## Failure / retry (if applicable)
+
+| Raw failure | Product-line category | Recommended follow-up | Root cause evidence | Retry result |
+|---|---|---|---|---|
+| | | | | |
+
+## Conclusion
+
+- Verdict: pass / fail / blocked
+- Review notes:
+- Follow-up task(s):
+- Evidence limitations (for example deterministic-only, no Pi executor/live takeover):

package/docs/templates/worker-dogfood-setup.md

@@ -1,68 +1,68 @@
-# Worker Dogfood Setup Template
-
-Use this template to create a disposable target repository for a real `agent-worker` sample. It is deliberately a target-repo recipe, not a substitute for product requirements.
-
-## Preconditions
-
-- Install one published controller version and record it:
-
-  ```bash
-  npm install -g @tea-agent/loop-agent@<version>
-  npm list -g @tea-agent/loop-agent --depth=0
-  loop-agent --version
-  agent-worker --version
-  agent-worker --help
-  ```
-
-- Before any write-capable Worker command, resolve one controller identity for the batch. Record its package version, absolute launch entry, binary SHA-256, and portable package fingerprint. If the run is part of a release or self-hosting train, carry the expected version/fingerprint as explicit CLI gates.
-- Create a clean, disposable target repository. Do not use `npm link`, `npm run dev`, or a workspace controller for a real-evidence run.
-- Put requirement, acceptance, design, test plan, and QA case matrix next to the TaskSpec. `agent-worker` materializes immutable copies into the harness task source before DAG generation.
-
-## Setup checklist
-
-- [ ] Target has a committed baseline and a passing `loop-agent init --profile full --merge` preflight.
-- [ ] Existing test demonstrates the desired behavior is missing or unimplemented.
-- [ ] TaskSpec has narrow `allowed_paths` and explicit `forbidden_paths`.
-- [ ] Task Pool dependencies are either backed by real prior runs or intentionally recorded as pre-existing evidence.
-- [ ] The chosen model/provider and `--pi-model` smoke override, if any, are recorded.
-- [ ] `--loop-agent-bin` resolves to the intended published package, and expected controller version/fingerprint are recorded before target writes.
-- [ ] If this is a self-hosting run, published N remains fixed for the whole batch; candidate N+1 is installed and verified in a separate slot.
-
-## Execute
-
-```bash
-agent-worker batch run-ready \
-  --feature-dir <feature-dir> \
-  --repo <target-repo> \
-  --loop-agent-bin <published-loop-agent-entry> \
-  --expected-controller-version <version> \
-  --expected-controller-fingerprint <sha256:value> \
-  --limit 1 \
-  --check-repo \
-  [--pi-model <model>]
-
-agent-worker observe snapshot --repo <target-repo> > <evidence-dir>/observe-snapshot.json
-agent-worker report morning --repo <target-repo> --output <evidence-dir>/morning-report.md
-```
-
-For a failed task, do not delete state or alter JSONL evidence. Fix the external/root cause, then make the retry explicit:
-
-```bash
-agent-worker task retry <task-id> --repo <target-repo> --reason "<root cause corrected>"
-agent-worker batch run-ready --feature-dir <feature-dir> --repo <target-repo> --limit 1 --check-repo
-```
-
-The retry run must have a distinct `workerRunId` and retain `retryOfWorkerRunId` in its Task Pool evidence.
-
-## Versioned self-hosting takeover
-
-From a source checkout, use the repo-maintainer deterministic canary after building or packing candidate N+1:
-
-```bash
-npm run self-host:canary -- \
-  --deterministic \
-  --tarball <candidate.tgz> \
-  --output <candidate-canary-evidence.json>
-```
-
-The deterministic canary must prove isolated-slot containment, both candidate bin identities, package fingerprint, full init/governance checks, a zero-execution Feature dry-run, static/shell-only observed DAG executors, and no PATH controller fallback. It does not claim to trap every possible Pi SDK/absolute path and does not replace a separately authorized live Pi run or the DAG skill-snapshot tests.
+# Worker Dogfood Setup Template
+
+Use this template to create a disposable target repository for a real `agent-worker` sample. It is deliberately a target-repo recipe, not a substitute for product requirements.
+
+## Preconditions
+
+- Install one published controller version and record it:
+
+  ```bash
+  npm install -g @tea-agent/loop-agent@<version>
+  npm list -g @tea-agent/loop-agent --depth=0
+  loop-agent --version
+  agent-worker --version
+  agent-worker --help
+  ```
+
+- Before any write-capable Worker command, resolve one controller identity for the batch. Record its package version, absolute launch entry, binary SHA-256, and portable package fingerprint. If the run is part of a release or self-hosting train, carry the expected version/fingerprint as explicit CLI gates.
+- Create a clean, disposable target repository. Do not use `npm link`, `npm run dev`, or a workspace controller for a real-evidence run.
+- Put requirement, acceptance, design, test plan, and QA case matrix next to the TaskSpec. `agent-worker` materializes immutable copies into the harness task source before DAG generation.
+
+## Setup checklist
+
+- [ ] Target has a committed baseline and a passing `loop-agent init --profile full --merge` preflight.
+- [ ] Existing test demonstrates the desired behavior is missing or unimplemented.
+- [ ] TaskSpec has narrow `allowed_paths` and explicit `forbidden_paths`.
+- [ ] Task Pool dependencies are either backed by real prior runs or intentionally recorded as pre-existing evidence.
+- [ ] The chosen model/provider and `--pi-model` smoke override, if any, are recorded.
+- [ ] `--loop-agent-bin` resolves to the intended published package, and expected controller version/fingerprint are recorded before target writes.
+- [ ] If this is a self-hosting run, published N remains fixed for the whole batch; candidate N+1 is installed and verified in a separate slot.
+
+## Execute
+
+```bash
+agent-worker batch run-ready \
+  --feature-dir <feature-dir> \
+  --repo <target-repo> \
+  --loop-agent-bin <published-loop-agent-entry> \
+  --expected-controller-version <version> \
+  --expected-controller-fingerprint <sha256:value> \
+  --limit 1 \
+  --check-repo \
+  [--pi-model <model>]
+
+agent-worker observe snapshot --repo <target-repo> > <evidence-dir>/observe-snapshot.json
+agent-worker report morning --repo <target-repo> --output <evidence-dir>/morning-report.md
+```
+
+For a failed task, do not delete state or alter JSONL evidence. Fix the external/root cause, then make the retry explicit:
+
+```bash
+agent-worker task retry <task-id> --repo <target-repo> --reason "<root cause corrected>"
+agent-worker batch run-ready --feature-dir <feature-dir> --repo <target-repo> --limit 1 --check-repo
+```
+
+The retry run must have a distinct `workerRunId` and retain `retryOfWorkerRunId` in its Task Pool evidence.
+
+## Versioned self-hosting takeover
+
+From a source checkout, use the repo-maintainer deterministic canary after building or packing candidate N+1:
+
+```bash
+npm run self-host:canary -- \
+  --deterministic \
+  --tarball <candidate.tgz> \
+  --output <candidate-canary-evidence.json>
+```
+
+The deterministic canary must prove isolated-slot containment, both candidate bin identities, package fingerprint, full init/governance checks, a zero-execution Feature dry-run, static/shell-only observed DAG executors, and no PATH controller fallback. It does not claim to trap every possible Pi SDK/absolute path and does not replace a separately authorized live Pi run or the DAG skill-snapshot tests.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tea-agent/loop-agent",
-  "version": "0.26.0",
+  "version": "0.26.1",
   "type": "module",
   "bin": {
     "loop-agent": "bin/loop-agent.js",