@tea-agent/loop-agent 0.28.2-beta.1 → 0.28.3

package/AGENTS.md

@@ -51,7 +51,7 @@
 
 DAG 执行期间主 agent 必须持续轮询监视直到 run 结束（FINISHED / FAILED / 需要 approve），不能轮询一次就停下等用户；轮询间隔应合理（避免频繁唤醒浪费 token，也不得住一个节点上赌一次就走）。判活必须用可靠方式：看 `state.json` 的 `runner.heartbeatAt` 是否持续刷新 + `session-events.jsonl` 是否在增长 + `dag doctor` 的 `liveness` 字段，不要只用 `tasklist /FI "PID eq X"` 这类过滤语法在 Git Bash 下会误报 DEAD，从而错判一个正常工作的 run 为 orphaned。遇到疑似 stall 先按 `docs/runtime/agent-dag-runner.md` 查 `lastMeaningfulProgressAt` / provider 活动，有真实进展就继续等，绝不盲目 supersede。
 
-DAG 执行期间，主 agent 不得修改 writeSet 外的任何工作区文件（包括 AGENTS.md、docs、根配置等）。bounded writer 节点的 write guard 用「节点运行期间的工作区 diff」作为越界证据，不区分改动来自 pi 还是主会话——主会话在 pi 节点跑的时候改了 writeSet 外文件，会让 write guard 把账算到 pi 头上、判节点 ERROR、下游 cascade skip。需要改文档/约束时，要么在 DAG 启动前改完，要么等 run 结束后改；务必与 DAG 写入节点在时间上互斥。排查任务路由问题时优先用 `resolveTaskDagTemplateSelection` / `classifyTaskDemand` 等纯函数探针或 `--output` 指定临时路径，不要反复 `dag execute --dry-run` / 无必要的 lifecycle 探测——每次可能在 `.harness/dag-runs/active/` 新建 run 目录，dry-run 不执行节点但目录残留，堆积成「一堆 active run」的假象。优先用纯函数探针或 `task status`。
+DAG 执行期间，主 agent 不得修改 writeSet 外的任何工作区文件（包括 AGENTS.md、docs、根配置等）。bounded writer 节点的 write guard 用「节点运行期间的工作区 diff」作为越界证据，不区分改动来自 pi 还是主会话——主会话在 pi 节点跑的时候改了 writeSet 外文件，会让 write guard 把账算到 pi 头上、判节点 ERROR、下游 cascade skip。需要改文档/约束时，要么在 DAG 启动前改完，要么等 run 结束后改；务必与 DAG 写入节点在时间上互斥。排查任务路由问题时优先用 `resolveTaskDagTemplateSelection` / `classifyTaskDemand` 等纯函数探针或 `--output` 指定临时路径，不要反复 `dag execute --dry-run` / 无必要的 lifecycle 探测。dry-run 不执行节点；若确需预演，检查命令返回的 `.harness/dag-runs/dry-run/<runId>/` `runDir`，它不进入 active overview，也不能作为 `dag resume` 目标。优先用纯函数探针或 `task status`。
 
 ## 项目地图
 

package/CHANGELOG.md

@@ -2,6 +2,43 @@
 
 ## [Unreleased]
 
+## [0.28.3] - 2026-08-05
+
+### 重点更新
+
+- 修复 Night Scheduler 准入控制因运行态文件自污染导致 clean-tree 校验总是误拒的问题
+
+### 修复
+
+- Night Scheduler 准入控制：freezeCleanBase 忽略 .harness/** 与 .worktrees/** 运行态事实，避免 lifecycle 运行事实自污染导致 clean-tree 误拒，同时保留失败 admission 的 submitted → rejected 审计链
+- 调整 freezeCleanBase 的执行顺序，将其提前至 submitSchedule 之前，确保 baseCommit 能在调度器写入控制文件前正确捕获 HEAD
+- freezeCleanBase 将 .harness 与 .worktrees 视为非源码脏污（与 harvest 逻辑共享），避免准入流程自写入的调度事实干扰基线冻结
+
+## [0.28.2] - 2026-08-05
+
+### 重点更新
+
+- Night Scheduler 实现了夜间任务的完整调度闭环，支持准入控制、执行调度、证据归档与结果回收
+- 控制台新增夜间任务只读视图与操作面板，支持通过 CLI 和人工审批执行准入与调度操作
+- 新增可恢复的项目初始化升级流程，支持状态复核与安全断点恢复
+
+### 新增
+
+- Night Scheduler 核心调度能力：支持一次性夜间计划准备、准入控制、队列预约、执行调度、证据归档及结果回收
+- Night Scheduler 异常恢复机制：支持过期租约恢复、环境失败与不稳定测试的有界自动重试
+- Night Scheduler 自动跟进功能（默认关闭），开启后仅生成任务草稿，永不自动审批
+- 控制台夜间任务只读视图与操作面板，支持通过 CLI 和人工审批执行准入与调度操作
+- 可恢复的项目初始化升级流程，支持断点恢复与状态报告查询
+
+### 改进
+
+- 统一并修正了 DAG 模拟运行（dry-run）的指导说明，明确了预览快照的保存位置与限制
+- 更新了项目路线图与计划索引，将已完成的可靠性计划归档并校准至最新基线
+
+### 修复
+
+- 对齐了各处 DAG 模拟运行的指导说明，消除了文档与实际行为不一致的问题
+
 ## [0.28.1] - 2026-08-05
 
 ### 改进

package/README.md

@@ -48,6 +48,16 @@ loop-agent init reconcile --repo-root .
 
 `init reconcile` 在 surface 缺失、存在 human decisions、存在活跃 DAG/Worker 或无法确认 Worker 状态时零写入，并返回 `needs-baseline`、`needs-human-decision` 或 `blocked-active-runtime`；其余情况复用 `init update --apply-safe` 的安全动作并复查返回 `clean`、`needs-model-merge` 或 `needs-safe-update`。
 
+写入型自然语言请求「`loop-agent初始化更新`」或「`loop-agent 初始化更新`」必须进入可恢复的统一闭环，而不是只做检查：
+
+```bash
+loop-agent init upgrade --repo-root . --json
+# controller 返回单文件 merge task 后：
+loop-agent init upgrade --repo-root . --run-id <run-id> --continue --json
+```
+
+它在 `.harness/init-upgrades/<run-id>/` 保存身份、扫描、动作收据、合并任务、验证与报告；`--status` / `--report` 只读。默认管理项目 `.opencode/plugins/`、`.pi/extensions/` 和 `.pi/settings.json`，不会默认写 `~/.pi/agent/settings.json`。旧项目首次执行后需 reload 宿主会话，以加载更新后的 AGENTS、skills 与 recovery 产物。明确「检查初始化更新」「只检查，不要修改」仍只运行 `init check-update`。
+
 完整说明见[初始化目标项目](website/docs/quick-start/init-target-project.md)。
 
 ### 运行第一个任务
@@ -102,7 +112,7 @@ agent-worker console doctor --repo .
 
 ## 核心边界
 
-- `.harness/` 保存任务、DAG run、one-shot run 和可选 Task Pool 运行事实。
+- `.harness/` 保存任务、DAG run、one-shot run、可选 Task Pool 与 `init-upgrades/` 可恢复升级运行事实。
 - `ai_workspace/loop-agent/` 保存目标项目的长期治理资料。
 - `.agents/skills/` 保存目标项目可审计的 repo-local skills。
 - `agent-worker` 通过已发布的 `loop-agent` 子进程执行 DAG，不维护第二套 runtime kernel。

package/dist/cli/command-definitions.js

@@ -77,6 +77,7 @@ const INIT_SUBCOMMANDS = [
     "check-update",
     "update",
     "reconcile",
+    "upgrade",
 ];
 const EXAMPLES_SUBCOMMANDS = ["list", "show", "copy"];
 const EVAL_SUBCOMMANDS = [
@@ -202,7 +203,7 @@ export const COMMAND_DEFINITIONS = [
         adapter: "none",
         tier: "primary",
         intent: "Initialize a target repository with loop-agent harness capabilities.",
-        usage: "init [instructions|doctor|check-update|update|reconcile] [--profile full|minimal] [--merge] [--json|--markdown] [--bootstrap-surface|--apply-safe] [--client-recovery=auto|project|user|off]",
+        usage: "init [instructions|doctor|check-update|update|reconcile|upgrade] [--profile full|minimal] [--merge] [--json|--markdown] [--bootstrap-surface|--apply-safe] [--client-recovery=auto|project|user|off] [--run-id <id> --status|--continue|--report]",
         subcommands: [...INIT_SUBCOMMANDS],
         handler: async ({ repoRoot, subcommand, rest }) => {
             await runInit(repoRoot, [subcommand, ...rest].filter(Boolean), { readRuntimeActivity: readInitRuntimeActivity });

package/dist/commands/client-recovery.js

@@ -10,6 +10,8 @@ export const CLIENT_RECOVERY_MODES = [
 export const OPENCODE_TRANSIENT_RETRY_PLUGIN_PATH = ".opencode/plugins/loop-agent-transient-retry.js";
 export const OPENCODE_CONTEXT_OVERFLOW_COMPACT_PLUGIN_PATH = ".opencode/plugins/loop-agent-context-overflow-compact.js";
 export const PI_CONTEXT_OVERFLOW_EXTENSION_PATH = ".pi/extensions/loop-agent-context-overflow.js";
+/** Pi project settings are part of the managed init surface; never default to home. */
+export const PI_PROJECT_SETTINGS_PATH = ".pi/settings.json";
 export const PERMANENT_ERROR_INTERACTION = "plugin-ignore-permanent-error";
 export const BACKOFF_MS = [2000, 4000, 8000, 16000, 30000];
 export const MAX_SESSION_RETRIES = 5;
@@ -24,6 +26,7 @@ export const PI_RECOMMENDED_RETRY = {
         maxRetryDelayMs: 60000,
     },
 };
+export const PI_RECOMMENDED_COMPACTION = { enabled: true };
 /**
  * Shared overflow phrase sources used by isContextOverflow and generated plugins.
  * Keep English + Chinese intranet gateway messages in one place to avoid drift.
@@ -418,7 +421,7 @@ export function planPiRetryMerge(existing) {
 export function piSettingsPath(homeDir) {
     return path.join(homeDir, ".pi", "agent", "settings.json");
 }
-async function writeJsonAtomicHome(filePath, value) {
+async function writeJsonAtomic(filePath, value) {
     await mkdir(path.dirname(filePath), { recursive: true });
     const tempPath = path.join(path.dirname(filePath), `.${path.basename(filePath)}.${process.pid}.${Date.now()}.tmp`);
     try {
@@ -449,7 +452,7 @@ export async function applyPiRetryMerge(input) {
     if (raw === undefined) {
         const plan = planPiRetryMerge(undefined);
         if (plan.action === "write" && plan.next) {
-            await writeJsonAtomicHome(settingsPath, plan.next);
+            await writeJsonAtomic(settingsPath, plan.next);
             return { ...plan, path: settingsPath, wrote: true };
         }
         return { ...plan, path: settingsPath, wrote: false };
@@ -478,7 +481,7 @@ export async function applyPiRetryMerge(input) {
     }
     const plan = planPiRetryMerge(parsed);
     if (plan.action === "write" && plan.next) {
-        await writeJsonAtomicHome(settingsPath, plan.next);
+        await writeJsonAtomic(settingsPath, plan.next);
         // Best-effort cleanup of any stray temp files from interrupted prior runs.
         try {
             const dir = path.dirname(settingsPath);
@@ -1147,6 +1150,104 @@ export async function installProjectPiContextOverflowExtension(input) {
         onlyIfMissing: input.onlyIfMissing,
     });
 }
+/**
+ * Nested merge plan for the project-owned Pi settings surface. Existing values
+ * (including explicit disabled flags) always win over recommendations.
+ */
+export function planProjectPiSettingsMerge(existing) {
+    if (existing === undefined) {
+        return {
+            action: "write",
+            reason: "missing-file",
+            path: PI_PROJECT_SETTINGS_PATH,
+            next: {
+                retry: { ...PI_RECOMMENDED_RETRY, provider: { ...PI_RECOMMENDED_RETRY.provider } },
+                compaction: { ...PI_RECOMMENDED_COMPACTION },
+            },
+        };
+    }
+    if (!isRecord(existing)) {
+        return {
+            action: "report",
+            reason: "invalid-json",
+            path: PI_PROJECT_SETTINGS_PATH,
+            message: "project .pi/settings.json root must be a JSON object",
+        };
+    }
+    const retryPlan = planPiRetryMerge(existing);
+    if (retryPlan.reason === "invalid-json") {
+        return { ...retryPlan, path: PI_PROJECT_SETTINGS_PATH };
+    }
+    const retryDisabled = retryPlan.reason === "enabled-false";
+    const next = retryPlan.next ? { ...retryPlan.next } : { ...existing };
+    const compaction = isRecord(next.compaction) ? { ...next.compaction } : {};
+    let changed = (!retryDisabled && retryPlan.action === "write") ||
+        !isRecord(next.compaction);
+    if (compaction.enabled === undefined) {
+        compaction.enabled = PI_RECOMMENDED_COMPACTION.enabled;
+        changed = true;
+    }
+    next.compaction = compaction;
+    if (changed) {
+        return {
+            action: "write",
+            reason: "missing-fields",
+            path: PI_PROJECT_SETTINGS_PATH,
+            next,
+        };
+    }
+    if (retryDisabled) {
+        return {
+            action: "report",
+            reason: "enabled-false",
+            path: PI_PROJECT_SETTINGS_PATH,
+            next,
+            message: "retry.enabled=false is preserved; compaction settings already require no migration",
+        };
+    }
+    return {
+        action: "noop",
+        reason: "matches",
+        path: PI_PROJECT_SETTINGS_PATH,
+        next,
+    };
+}
+async function readJsonMergeTarget(filePath) {
+    try {
+        return JSON.parse(await readFile(filePath, "utf-8"));
+    }
+    catch (error) {
+        if (isMissingFileError(error))
+            return undefined;
+        if (error instanceof SyntaxError)
+            return "__invalid_json__";
+        throw error;
+    }
+}
+export async function inspectProjectPiSettings(input) {
+    const settingsPath = path.join(input.repoRoot, PI_PROJECT_SETTINGS_PATH);
+    const parsed = await readJsonMergeTarget(settingsPath);
+    if (parsed === "__invalid_json__") {
+        return { action: "report", reason: "invalid-json", path: PI_PROJECT_SETTINGS_PATH, wrote: false };
+    }
+    return { ...planProjectPiSettingsMerge(parsed), wrote: false };
+}
+export async function applyProjectPiSettingsMerge(input) {
+    const settingsPath = path.join(input.repoRoot, PI_PROJECT_SETTINGS_PATH);
+    const parsed = await readJsonMergeTarget(settingsPath);
+    if (parsed === "__invalid_json__") {
+        return { action: "report", reason: "invalid-json", path: PI_PROJECT_SETTINGS_PATH, wrote: false, message: "project .pi/settings.json is not valid JSON; refusing to write" };
+    }
+    const plan = planProjectPiSettingsMerge(parsed);
+    if (plan.action === "write" && plan.next) {
+        await writeJsonAtomic(settingsPath, plan.next);
+        return { ...plan, wrote: true };
+    }
+    return { ...plan, wrote: false };
+}
+export function buildProjectPiSettingsSource() {
+    return `${JSON.stringify({ retry: PI_RECOMMENDED_RETRY, compaction: PI_RECOMMENDED_COMPACTION }, null, 2)}\n`;
+}
 export async function inspectPiRetryConfig(input) {
     const homeDir = input.homeDir ?? os.homedir();
     const settingsPath = piSettingsPath(homeDir);
@@ -1191,8 +1292,8 @@ function skippedInstall(relativePath) {
 }
 /**
  * Install project recovery artifacts and optionally merge Pi user settings.
- * - auto/project: transient plugin + overflow-compact plugin + Pi project extension (no home writes)
- * - user: the three project files + explicit Pi retry merge
+ * - auto/project: recovery plugins/extensions plus project `.pi/settings.json` (no home writes)
+ * - user: the same project files plus explicit legacy Pi home retry merge
  * - off: skip all
  */
 export async function runClientRecovery(input) {
@@ -1203,6 +1304,7 @@ export async function runClientRecovery(input) {
             plugin: skippedInstall(OPENCODE_TRANSIENT_RETRY_PLUGIN_PATH),
             overflowPlugin: skippedInstall(OPENCODE_CONTEXT_OVERFLOW_COMPACT_PLUGIN_PATH),
             piExtension: skippedInstall(PI_CONTEXT_OVERFLOW_EXTENSION_PATH),
+            pi: { action: "report", reason: "skipped-mode", path: PI_PROJECT_SETTINGS_PATH, wrote: false },
         };
     }
     const plugin = await installProjectOpenCodePlugin({
@@ -1214,10 +1316,11 @@ export async function runClientRecovery(input) {
     const piExtension = await installProjectPiContextOverflowExtension({
         repoRoot: input.repoRoot,
     });
+    const pi = await applyProjectPiSettingsMerge({ repoRoot: input.repoRoot });
     if (mode !== "user") {
-        return { mode, plugin, overflowPlugin, piExtension };
+        return { mode, plugin, overflowPlugin, piExtension, pi };
     }
     const homeDir = input.homeDir ?? os.homedir();
-    const pi = await applyPiRetryMerge({ homeDir });
-    return { mode, plugin, overflowPlugin, piExtension, pi };
+    const userPi = await applyPiRetryMerge({ homeDir });
+    return { mode, plugin, overflowPlugin, piExtension, pi, userPi };
 }

package/dist/commands/dag-init-hybrid.js

@@ -51,7 +51,7 @@ export async function runDagInitHybrid(repoRoot, rawArgs) {
         next: [
             `Review ${result.outputPath}`,
             `npm run dev -- dag validate --dag ${result.outputPath}`,
-            "Use dag execute --dry-run only when you intentionally need an active run snapshot.",
+            "This command's outputPath is a DAG draft; only a later dag execute --dry-run returned runDir is the preview snapshot, outside the active overview and not a dag resume target.",
         ],
     }, null, 2));
 }