@tea-agent/loop-agent 0.31.1 → 0.32.1

package/dist/worker/run-task/run-task.js

@@ -6,7 +6,7 @@ import { getTaskPaths } from "../../task/runtime.js";
 import { formatDuration, noopProgressReporter, } from "../progress-reporter.js";
 import { redactForPreview, truncatePreview } from "../observability/events.js";
 import { controllerIdentityExpectationFailure, resolveControllerIdentity, } from "../loop-agent/loop-agent-client.js";
-import { materializeTaskSpec, } from "../materialize/harness-task-materializer.js";
+import { materializeTaskSpecV2, } from "../materialize/harness-task-materializer.js";
 import { preflightTargetRepo } from "../preflight.js";
 import { getTaskPoolRoot } from "../pool/run-store.js";
 import { checkRequiredOutputs } from "../outcomes/gate.js";
@@ -26,7 +26,12 @@ export async function runTaskSpec(options) {
     const commands = [];
     const progress = options.progress ?? noopProgressReporter;
     const taskId = options.taskSpec.id;
-    const eventCtx = { progress, workerRunId, taskId };
+    const eventCtx = {
+        progress,
+        workerRunId,
+        taskId,
+        featureId: options.taskSpec.feature_id,
+    };
     const recordingClient = new RecordingRunTaskClient(options.client, commands);
     const client = new ObservedRunTaskClient(recordingClient, eventCtx);
     if (options.preflight !== false) {
@@ -57,9 +62,9 @@ export async function runTaskSpec(options) {
     }
     const materializeStep = "materialize";
     const materializeStartedAt = Date.now();
-    const materializeManifest = await runObservedStep(eventCtx, materializeStep, async () => {
+    const materializeResult = await runObservedStep(eventCtx, materializeStep, async () => {
         progress.step("materialize harness task");
-        return materializeTaskSpec({
+        return materializeTaskSpecV2({
             repoRoot: options.repoRoot,
             taskSpec: options.taskSpec,
             taskSpecPath: options.taskSpecPath,
@@ -67,6 +72,14 @@ export async function runTaskSpec(options) {
             now,
         });
     });
+    const materializeManifest = materializeResult.manifest;
+    const materializeOutcome = materializeResult.outcome;
+    if (materializeOutcome.type === "recovery-required") {
+        throw new Error(`materialize recovery required (${materializeOutcome.recovery.recommendedAction}): ${materializeOutcome.recovery.reason}`);
+    }
+    if (materializeOutcome.type === "resume-existing") {
+        progress.note(`materialize resume-existing: revision ${materializeOutcome.revisionId}, run ${materializeOutcome.runId}`);
+    }
     progress.step(`materialized ${materializeManifest.harnessTaskId} in ${formatDuration(Date.now() - materializeStartedAt)}`);
     const taskArtifactsDir = path.join(options.repoRoot, ".harness", "tasks", materializeManifest.harnessTaskId, "artifacts");
     await mkdir(taskArtifactsDir, { recursive: true });
@@ -230,6 +243,9 @@ export async function runTaskSpec(options) {
         dagPath,
         runRecordPath,
         materializeManifest,
+        materializeOutcome,
+        lineageId: materializeManifest.lineageId,
+        revisionId: materializeManifest.revisionId,
         reportDecision,
         commands,
         ...(declaredArtifacts ? { declaredArtifacts } : {}),
@@ -317,6 +333,9 @@ export async function runTaskSpec(options) {
         dagPath,
         runRecordPath,
         materializeManifest,
+        materializeOutcome,
+        lineageId: materializeManifest.lineageId,
+        revisionId: materializeManifest.revisionId,
         reportDecision,
         commands,
         ...(declaredArtifacts ? { declaredArtifacts } : {}),
@@ -329,6 +348,7 @@ export async function runTaskSpec(options) {
         source: "artifact",
         label: "worker-run-record",
         workerRunId,
+        featureId: options.taskSpec.feature_id,
         taskId,
         artifactRefs: {
             runRecordPath,
@@ -496,6 +516,7 @@ function emitStepStarted(ctx, stepName) {
         spanId: `step:${ctx.workerRunId}:${stepName}`,
         parentSpanId: ctx.workerRunId,
         workerRunId: ctx.workerRunId,
+        featureId: ctx.featureId,
         taskId: ctx.taskId,
         status: "running",
     });
@@ -508,6 +529,7 @@ function emitStepFinished(ctx, stepName, status, durationMs) {
         spanId: `step:${ctx.workerRunId}:${stepName}`,
         parentSpanId: ctx.workerRunId,
         workerRunId: ctx.workerRunId,
+        featureId: ctx.featureId,
         taskId: ctx.taskId,
         status,
         durationMs,
@@ -760,6 +782,7 @@ class ObservedRunTaskClient {
                     source: "loop-agent-command",
                     label: options.artifactName,
                     workerRunId: this.eventCtx.workerRunId,
+                    featureId: this.eventCtx.featureId,
                     taskId: this.eventCtx.taskId,
                     pid: info.pid,
                     timeoutMs: options.timeoutMs,
@@ -783,6 +806,7 @@ class ObservedRunTaskClient {
                     source: "loop-agent-command",
                     label: options.artifactName,
                     workerRunId: this.eventCtx.workerRunId,
+                    featureId: this.eventCtx.featureId,
                     taskId: this.eventCtx.taskId,
                     message: `elapsed ${info.elapsedMs}ms`,
                 });
@@ -795,6 +819,7 @@ class ObservedRunTaskClient {
                 source: "loop-agent-command",
                 label: options.artifactName,
                 workerRunId: this.eventCtx.workerRunId,
+                featureId: this.eventCtx.featureId,
                 taskId: this.eventCtx.taskId,
                 exitCode: result.exitCode,
                 timedOut: result.timedOut,
@@ -810,6 +835,7 @@ class ObservedRunTaskClient {
                 source: "loop-agent-command",
                 label: options.artifactName,
                 workerRunId: this.eventCtx.workerRunId,
+                featureId: this.eventCtx.featureId,
                 taskId: this.eventCtx.taskId,
                 status: "failed",
                 message: errorMessage(error),
@@ -823,6 +849,7 @@ class ObservedRunTaskClient {
             source: "loop-agent-command",
             label,
             workerRunId: this.eventCtx.workerRunId,
+            featureId: this.eventCtx.featureId,
             taskId: this.eventCtx.taskId,
             outputPreview: redactForPreview(truncatePreview(chunk)),
         });

package/dist/worker/runner/run-ready.js

@@ -2,9 +2,13 @@ import { createHash } from "node:crypto";
 import { readFile, writeFile, mkdir } from "node:fs/promises";
 import path from "node:path";
 import YAML from "yaml";
+import { controllerIdentityAnchor } from "../../shared/package-metadata.js";
 import { controllerIdentitiesMatch, controllerIdentityExpectationFailure, resolveControllerIdentity, } from "../loop-agent/loop-agent-client.js";
+import { buildPublishedControllerProtocolEnvelope } from "../loop-agent/controller-protocol.js";
 import { deriveFailureRoute, deriveFailureRouteFromError, } from "../pool/failure-routing.js";
 import { findRunByWorkerRunId, getTaskPoolRoot, readFeatureTaskPoolStates, recordTaskPoolRun, writeTaskPoolState, } from "../pool/run-store.js";
+import { releaseAttemptLease } from "../pool/attempt-lease.js";
+import { beginWorkerAttemptWithLease } from "../pool/begin-attempt-with-lease.js";
 import { readVerifiedOutcome } from "../outcomes/store.js";
 import { runTaskSpec, } from "../run-task/run-task.js";
 import { formatDuration, noopProgressReporter, } from "../progress-reporter.js";
@@ -100,6 +104,7 @@ export async function runReadyTasks(options) {
                     source: "worker",
                     label: `task ${taskId}: reuse existing run ${workerRunId}`,
                     batchRunId,
+                    featureId,
                     taskId,
                     workerRunId,
                     status: "reused",
@@ -116,32 +121,44 @@ export async function runReadyTasks(options) {
         }
         const taskStartedAt = Date.now();
         progress.task(`task ${index}/${total} ${taskId} "${taskSpec.title}" (${workerRunId})`);
-        emit(progress, {
-            type: "task.started",
-            source: "worker",
-            label: `task ${index}/${total} ${taskId}`,
-            batchRunId,
-            taskId,
-            workerRunId,
-            status: "running",
-        });
         progress.step(`materialize → task advance → report`);
         let result;
+        let leaseToken;
         try {
-            await writeTaskPoolState(options.repoRoot, {
-                schemaVersion: 2,
+            const begun = await beginWorkerAttemptWithLease({
+                repoRoot: options.repoRoot,
+                featureId,
+                taskId,
+                workerRunId,
+                batchRunId,
+                now,
+                ...(controllerIdentity
+                    ? {
+                        controllerAnchor: controllerIdentityAnchor(controllerIdentity),
+                        protocolEnvelope: buildPublishedControllerProtocolEnvelope(controllerIdentity.packageVersion),
+                    }
+                    : {}),
+                stateExtras: {
+                    ...(retryOfWorkerRunId ? { retryOfWorkerRunId } : {}),
+                },
+            });
+            leaseToken = begun.leaseRegistration.lease.token;
+            emit(progress, {
+                type: "task.started",
+                source: "worker",
+                label: `task ${index}/${total} ${taskId}`,
+                batchRunId,
                 featureId,
                 taskId,
-                status: "Running",
-                updatedAt: new Date().toISOString(),
                 workerRunId,
-                ...(retryOfWorkerRunId ? { retryOfWorkerRunId } : {}),
+                status: "running",
             });
             emit(progress, {
                 type: "state.updated",
                 source: "worker",
                 label: `task pool state: ${taskId} → Running`,
                 batchRunId,
+                featureId,
                 taskId,
                 workerRunId,
                 status: "running",
@@ -178,6 +195,7 @@ export async function runReadyTasks(options) {
                 source: "worker",
                 label: `task ${taskId} run-error`,
                 batchRunId,
+                featureId,
                 taskId,
                 workerRunId,
                 status: "failed",
@@ -215,6 +233,16 @@ export async function runReadyTasks(options) {
             }
             if (recorded)
                 await options.onTaskFinalized?.({ status: "run-error", taskSpec, workerRunId });
+            if (leaseToken) {
+                await releaseAttemptLease({
+                    repoRoot: options.repoRoot,
+                    featureId,
+                    taskId,
+                    token: leaseToken,
+                    workerRunId,
+                    now,
+                }).catch(() => { });
+            }
             tasks.push({
                 taskId,
                 workerRunId,
@@ -236,6 +264,7 @@ export async function runReadyTasks(options) {
             source: "worker",
             label: `task ${taskId} ${result.status}`,
             batchRunId,
+            featureId,
             taskId,
             workerRunId: result.workerRunId,
             status: result.status,
@@ -247,6 +276,7 @@ export async function runReadyTasks(options) {
                 source: "worker",
                 label: `failure routed: ${failure.category}`,
                 batchRunId,
+                featureId,
                 taskId,
                 workerRunId: result.workerRunId,
                 failureCategory: failure.category,
@@ -299,6 +329,16 @@ export async function runReadyTasks(options) {
                 status: result.status,
                 runRecordPath: result.runRecordPath,
             });
+            if (leaseToken) {
+                await releaseAttemptLease({
+                    repoRoot: options.repoRoot,
+                    featureId,
+                    taskId,
+                    token: leaseToken,
+                    workerRunId: result.workerRunId,
+                    now,
+                }).catch(() => { });
+            }
         }
         catch (error) {
             if (result.status !== "succeeded") {
@@ -344,6 +384,16 @@ export async function runReadyTasks(options) {
             catch {
                 // Best-effort; batch still reports record-error.
             }
+            if (leaseToken) {
+                await releaseAttemptLease({
+                    repoRoot: options.repoRoot,
+                    featureId,
+                    taskId,
+                    token: leaseToken,
+                    workerRunId: result.workerRunId,
+                    now,
+                }).catch(() => { });
+            }
             tasks.push({
                 taskId,
                 workerRunId: result.workerRunId,

package/dist/worker/runner/single-task-attempt.js

@@ -1,4 +1,8 @@
+import { controllerIdentityAnchor } from "../../shared/package-metadata.js";
+import { buildPublishedControllerProtocolEnvelope } from "../loop-agent/controller-protocol.js";
+import { releaseAttemptLease } from "../pool/attempt-lease.js";
 import { deriveFailureRoute, deriveFailureRouteFromError, } from "../pool/failure-routing.js";
+import { beginWorkerAttemptWithLease } from "../pool/begin-attempt-with-lease.js";
 import { recordTaskPoolRun, writeTaskPoolState } from "../pool/run-store.js";
 /**
  * Shared Worker attempt used by batch run-ready and Night Scheduler.
@@ -7,24 +11,33 @@ import { recordTaskPoolRun, writeTaskPoolState } from "../pool/run-store.js";
 export async function runSingleTaskAttempt(input) {
     const now = input.ctx.now ?? new Date();
     const { ctx } = input;
-    await writeTaskPoolState(ctx.controlRepoRoot, {
-        schemaVersion: 2,
+    const begun = await beginWorkerAttemptWithLease({
+        repoRoot: ctx.controlRepoRoot,
         featureId: ctx.featureId,
         taskId: ctx.taskId,
-        status: "Running",
-        updatedAt: now.toISOString(),
         workerRunId: ctx.workerRunId,
-        ...(ctx.night?.nightScheduleId
-            ? { nightScheduleId: ctx.night.nightScheduleId }
-            : {}),
-        ...(ctx.night?.admissionPath
-            ? { admissionPath: ctx.night.admissionPath }
-            : {}),
-        ...(ctx.night?.nightWorktreePath
-            ? { nightWorktreePath: ctx.night.nightWorktreePath }
+        batchRunId: ctx.batchRunId,
+        now,
+        ...(ctx.controllerIdentity
+            ? {
+                controllerAnchor: controllerIdentityAnchor(ctx.controllerIdentity),
+                protocolEnvelope: buildPublishedControllerProtocolEnvelope(ctx.controllerIdentity.packageVersion),
+            }
             : {}),
-        ...(ctx.night?.nightBranch ? { nightBranch: ctx.night.nightBranch } : {}),
+        stateExtras: {
+            ...(ctx.night?.nightScheduleId
+                ? { nightScheduleId: ctx.night.nightScheduleId }
+                : {}),
+            ...(ctx.night?.admissionPath
+                ? { admissionPath: ctx.night.admissionPath }
+                : {}),
+            ...(ctx.night?.nightWorktreePath
+                ? { nightWorktreePath: ctx.night.nightWorktreePath }
+                : {}),
+            ...(ctx.night?.nightBranch ? { nightBranch: ctx.night.nightBranch } : {}),
+        },
     });
+    const leaseToken = begun.leaseRegistration.lease.token;
     let result;
     try {
         result = await input.execute(ctx);
@@ -70,6 +83,14 @@ export async function runSingleTaskAttempt(input) {
                 : {}),
             ...(ctx.night?.nightBranch ? { nightBranch: ctx.night.nightBranch } : {}),
         });
+        await releaseAttemptLease({
+            repoRoot: ctx.controlRepoRoot,
+            featureId: ctx.featureId,
+            taskId: ctx.taskId,
+            token: leaseToken,
+            workerRunId: ctx.workerRunId,
+            now,
+        }).catch(() => { });
         return {
             status: "run-error",
             workerRunId: ctx.workerRunId,
@@ -137,6 +158,14 @@ export async function runSingleTaskAttempt(input) {
         ...(ctx.night?.nightBranch ? { nightBranch: ctx.night.nightBranch } : {}),
     };
     await writeTaskPoolState(ctx.controlRepoRoot, poolState);
+    await releaseAttemptLease({
+        repoRoot: ctx.controlRepoRoot,
+        featureId: ctx.featureId,
+        taskId: ctx.taskId,
+        token: leaseToken,
+        workerRunId: ctx.workerRunId,
+        now,
+    }).catch(() => { });
     return {
         status: result.status,
         workerRunId: result.workerRunId,

package/dist/worker/task-graph/acceptance-schema.js

@@ -21,6 +21,9 @@ export const acceptanceItemSchema = z
         implementation_task_refs: z.array(z.string().min(1)).optional(),
         verification_task_refs: z.array(z.string().min(1)).optional(),
         required_evidence: z.array(z.string().min(1)).optional(),
+        /** Phase 6: ADR 0007 authority / evidence kinds on required ACs. */
+        authority: z.string().min(1).optional(),
+        required_evidence_kinds: z.array(z.string().min(1)).optional(),
         integration: z
             .enum(["not-applicable", "mock-allowed", "real-required"])
             .optional(),

package/docs/README.md

@@ -29,7 +29,9 @@
 | 运行 DAG、查看报告或处理失败 | `runtime/agent-dag-runner.md`、`runtime/agent-dag-recovery-playbook.md` |
 | 按 TDD、验证和调试纪律推进修复 | `governance/harness-methodology-tdd.md`、`governance/harness-methodology-verification.md`、`governance/harness-methodology-debugging.md` |
 | 执行真实 backend-test provider 验证 | `runtime/backend-test-live-campaign.md` |
-| 判断 Production Readiness | `operations/production-readiness.md` |
+| 判断单任务 loop-agent Production Readiness | `operations/production-readiness.md` |
+| 判断 agent-worker Feature/Attempt Production Readiness v1 | `operations/agent-worker-production-readiness.md`、`templates/agent-worker-production-readiness-checklist.md` |
+| 分阶段推进 agent-worker Production Readiness v1 | `exec-plans/active/2026-08-09-agent-worker-production-readiness-v1-program.md`、`exec-plans/active/README.md` |
 | 合并分支并留下 source-SHA 报告 | `operations/branch-merge-guideline.md` |
 | 使用仓库内 GitHub 协作方式 | `operations/github-collaboration.md` |
 | 排查本机开发环境问题 | `operations/local-development-environment.md` |

package/docs/architecture/evolution.md

@@ -20,7 +20,7 @@
 | Backend-test | **Markdown-first 8 节点**；Markdown 映射限定 pytest 执行，生成 Markdown 与分层 HTML/脱敏请求响应详情 | completed `2026-07-24-backend-test-scoped-execution-report-ui.md`；`CHANGELOG.md [0.21.0]` / `[0.22.0]` |
 | Frontend-test | 默认 short-chain RAG；内容/evidence 质量进入 advisory findings，路径与安全边界仍 fail-closed | `CHANGELOG.md [0.21.0]` / `[0.22.0]` |
 | Frontend-implementation | Contract / trace / repair / Mock assess；`ai_workspace` + 知识库 + `openspec` 规范发现；lint 基线债务隔离 | `CHANGELOG.md [0.22.0]` |
-| Inspect（原 Observe） | 统一 Console 的 `/inspect/` 只读运营面与富时间线；兼容期仍保留独立 `observe serve` | `website/docs/guides/observe-ui.md`、`CHANGELOG.md [Unreleased]` |
+| Inspect（原 Observe） | 统一 Console 的 `/inspect/` 只读运营面与富时间线；独立 `observe serve` 已硬下线 | `website/docs/guides/observe-ui.md`、`CHANGELOG.md [Unreleased]` |
 | Local Operator Console | `agent-worker console serve\|doctor`（loopback）；Operate + Inspect、Happy Path / Interview / split view / recovery CTA；**0.23.x 起含 General Operator Chat**（Pi SDK services session、operator-only tool surface）；**非**远端多用户 Console | unify design；ADR 0005；completed `2026-07-25-console-phase-4-general-operator-chat.md` |
 | Task Contract / operator surface | journaled `task contract *`；machine envelope；**DagSpec v4 `taskContractBinding`**（exclusive writer 强制） | `CHANGELOG.md [0.17.0]`–`[0.17.2]`；ADR 0005 |
 | DagSpec / repair | v3 `runtimeContract` + 显式 `repairNodeId`；新 writer 生成默认 v4 binding | `dag-execution.md`、`CHANGELOG.md [0.11.0]` / `[0.17.0]` |

package/docs/operations/README.md

@@ -8,6 +8,7 @@
 - [`branch-merge-guideline.md`](branch-merge-guideline.md)：按风险选择合并模式并留下 source-SHA 证据。
 - [`github-collaboration.md`](github-collaboration.md)：仓库内 GitHub 协作约定及自动/人工发布通道。
 - [`production-readiness.md`](production-readiness.md)：交付前的生产就绪判断。
+- [`agent-worker-production-readiness.md`](agent-worker-production-readiness.md)：agent-worker Feature/Task Pool 外层编排的 Production Readiness v1 操作合同。
 - [`backend-test-jacoco-coverage.md`](backend-test-jacoco-coverage.md)：Java 被测服务挂载 JaCoCo tcpserver agent 的 Maven、`java -jar` 与 Docker 操作手册。
 
 验证命令仍以 [`../governance/verification-matrix.md`](../governance/verification-matrix.md) 为准。

package/docs/templates/README.md

@@ -14,6 +14,7 @@
 - `branch-merge-report.md` — source-SHA 分支合并报告。
 - `init-evolution-review.md` — 初始化能力演化审查。
 - `production-readiness-checklist.md` — Production Readiness 检查。
+- `agent-worker-production-readiness-checklist.md` — agent-worker Feature/Task Pool Production Readiness v1 campaign 检查清单。
 - `worker-dogfood-setup.md`、`worker-dogfood-evidence.md` — 已发布控制器下的 Worker dogfood 设置与证据。
 - `interactive-ui-round2-experiment.md` — 交互式 UI 对照实验。
 

package/docs/templates/agent-worker-production-readiness-checklist.md

@@ -0,0 +1,47 @@
+# Agent Worker Production Readiness v1 Checklist
+
+用于 Phase 8 campaign / 发布门禁。勾选前必须有新鲜命令输出或 report ref。
+
+正式 pin（2026-08-09）：`@tea-agent/loop-agent@0.32.0`（tag `v0.32.0` / `b4d9e500`）。scorecard 在 burn-in / live 门禁完成前保持 **NOT_READY**。证据：`docs/reports/feature/2026-08-09-agent-worker-production-readiness-v1.md`。
+
+## 包络与身份
+
+- [x] 支持包络已冻结（单机/单用户/单仓）
+- [x] controller packageVersion + fingerprint 已记录（`0.32.0`；npm shasum `8932749b1583523043a9889c84f9d316e57e451d`；canary fingerprint `sha256:b08404f5…`）
+- [x] published canary / 隔离 install **无** npm link / workspace bin（live burn-in 仍须每日复核）
+- [x] protocol/capabilities preflight（unit）通过；live preflight 仍待
+
+## Ownership / Attempt
+
+- [x] Running 投影不依赖 terminal ledger（unit / Phase 1）
+- [x] Task-scoped events 含 featureId（unit）
+- [x] dual Feature 同名 Task 隔离（unit C2）
+- [x] ownership warning 按根因聚合（≤1 finding/根因）（unit）
+
+## Lifecycle / Recovery
+
+- [x] safe run-error → Failed → `task retry` 无需 mark-failed（unit）
+- [x] Blocked 保留 contract/human 语义（unit）
+- [x] resume / retry / reconcile / revise / decide 决策一致（unit）
+
+## Lease
+
+- [x] `{featureId, taskId}` 单 active writer（unit C3）
+- [ ] begin/finalize crash injection 有 doctor finding（进程级仍缺）
+- [x] 不盲目偷取 live DAG lease（unit reclaim）
+
+## Acceptance / Delivery
+
+- [x] Task Done ≠ AC covered（unit）
+- [x] `feature verify-final` 唯一 writer（unit）
+- [ ] verify-final → delivery → closeout **live** 可收口
+- [x] dirty HEAD / tamper fail-closed（unit）
+
+## Campaign / SLO
+
+- [x] C0–C11 已执行或明确 blocked-external（partial：unit + published canary；live Pi blocked）
+- [ ] burn-in 窗口达标（7 日或 30 Attempt）— **OPEN day 0**
+- [ ] SLO 分子/分母已记录（正式样本不足）
+- [x] promote + rollback drill 完成（install-level vs `0.31.1`）
+- [ ] scorecard: READY 或合法 CONDITIONALLY_READY — 当前 **`NOT_READY`**
+- [x] open P0 = 0

package/docs/templates/evaluation/agents-map-slim-v1.md

@@ -37,7 +37,7 @@
 4. 涉及测试纪律/验证声明/调试时继续读：`docs/harness-methodology-*.md`。
 5. 查看最近提交、相关 plan/progress/report；`git status --short --branch`；跑最小基线验证。
 6. 后端/接口/pytest → `taskKind: "backend-test"`（不是 `--profile`）；知识回写 `knowledge-sync`；图谱开荒 `knowledge-graph-bootstrap`。`--profile` 仅 `auto|minimal|standard|reviewed|supervised`。
-7. 看板/observe → `agent-worker console`（默认 repo=当前目录、port=8790；兼容 `agent-worker console serve --repo . --port 8790`）（`/inspect/` 只读）；`observe serve` 仅为兼容入口。
+7. 看板/observe → `agent-worker console`（默认 repo=当前目录、port=8790；兼容 `agent-worker console serve --repo . --port 8790`）（`/inspect/` 只读）；`observe serve` 已下线（REMOVED / exit 2）；`observe snapshot` 仍可用。
 8. 分支合并 → 先读 `docs/operations/branch-merge-guideline.md`。
 
 ## 会话协议

package/docs/templates/evaluation/agents-map-verbose-v0.md

@@ -54,7 +54,7 @@
 10. 检查 `git status --short --branch`。
 11. 运行本次任务相关的最小基线验证。
 12. 如果用户提到"后端测试"、"接口测试"、"pytest"、"自动化测试"，在任务 `task.json` 中设置 `taskKind: "backend-test"` 再 `task advance`；不要用 `--profile backend-test`（CLI 不接受该值，专用模板只走 taskKind）。知识回写用 `taskKind: "knowledge-sync"`（须 `featureId`），图谱开荒用 `taskKind: "knowledge-graph-bootstrap"`。`--profile` 仅表示治理强度：`auto|minimal|standard|reviewed|supervised`。
-13. 如果用户提到"看板"、"observe"、"监控面板"、"启动看板"，使用 `agent-worker console` 启动统一 Operator Console（默认 repo=当前目录、port=8790；兼容入口 `agent-worker console serve --repo . --port 8790`）；`/inspect/` 提供只读检视。`agent-worker observe serve --repo . --port 8787` 仅为兼容入口。
+13. 如果用户提到"看板"、"observe"、"监控面板"、"启动看板"，使用 `agent-worker console` 启动统一 Operator Console（默认 repo=当前目录、port=8790；兼容入口 `agent-worker console serve --repo . --port 8790`）；`/inspect/` 提供只读检视。`agent-worker observe serve` 已下线（REMOVED / exit 2）。
 14. 如果用户要求“合并 `<source>` 到 `<target>`”或“合并 origin/main 到当前分支”，先阅读 `docs/operations/branch-merge-guideline.md`，按影响自动选择快速、标准或深度模式；始终冻结 source SHA、审查双方功能、运行 merge-tree、生成 source-SHA 合并报告，并在提交前再次 fetch 防止主干前进。
 
 ## 会话协议

package/docs/templates/init-managed-agents.md

@@ -131,7 +131,7 @@ agent-worker console                       # 默认 repo=当前目录，port=879
 agent-worker console serve --repo . --port 8790   # 兼容入口，等价于上面裸入口
 ```
 
-浏览器打开 `http://127.0.0.1:8790/`；检视面为 `http://127.0.0.1:8790/inspect/`。默认绑定本机 `127.0.0.1`；不要直接暴露到公开网络。端口被占用时不会自动更换，请用 `--port <port>` 显式指定。`agent-worker observe serve` 仅为兼容入口。
+浏览器打开 `http://127.0.0.1:8790/`；检视面为 `http://127.0.0.1:8790/inspect/`。默认绑定本机 `127.0.0.1`；不要直接暴露到公开网络。端口被占用时不会自动更换，请用 `--port <port>` 显式指定。`agent-worker observe serve` 已下线（REMOVED / exit 2）。
 
 ### DAG 诊断与收口
 

package/docs/templates/product-line/scaffold-samples/backend-only/acceptance.yaml

@@ -11,3 +11,6 @@ acceptance:
     verification:
       expected_task_refs:
         - BE-IMPL-001
+      authority: feature-verify-final
+      required_evidence_kinds:
+        - canonical-qa-evidence

package/docs/templates/product-line/scaffold-samples/backend-only/feature.yaml

@@ -1,3 +1,14 @@
 schema_version: 1
 feature_id: F-2099-901
 profile: generic
+acceptance_policy:
+  schema_version: 1
+  authority: feature-verify-final
+  independent_qa_required: true
+  coverage_writer: feature-verify-final
+  final_verification:
+    command: agent-worker feature verify-final
+  delivery_sequence:
+    - verify-final
+    - delivery
+    - closeout

package/docs/templates/product-line/scaffold-samples/fe-with-api/acceptance.yaml

@@ -13,3 +13,6 @@ acceptance:
         - CONTRACT-001
         - BE-IMPL-001
         - FE-IMPL-001
+      authority: feature-verify-final
+      required_evidence_kinds:
+        - canonical-qa-evidence

package/docs/templates/product-line/scaffold-samples/fe-with-api/feature.yaml

@@ -1,3 +1,14 @@
 schema_version: 1
 feature_id: F-2099-903
 profile: generic
+acceptance_policy:
+  schema_version: 1
+  authority: feature-verify-final
+  independent_qa_required: true
+  coverage_writer: feature-verify-final
+  final_verification:
+    command: agent-worker feature verify-final
+  delivery_sequence:
+    - verify-final
+    - delivery
+    - closeout

package/docs/templates/product-line/scaffold-samples/frontend-only/acceptance.yaml

@@ -11,3 +11,6 @@ acceptance:
     verification:
       expected_task_refs:
         - FE-IMPL-001
+      authority: feature-verify-final
+      required_evidence_kinds:
+        - canonical-qa-evidence

package/docs/templates/product-line/scaffold-samples/frontend-only/feature.yaml

@@ -1,3 +1,14 @@
 schema_version: 1
 feature_id: F-2099-902
 profile: generic
+acceptance_policy:
+  schema_version: 1
+  authority: feature-verify-final
+  independent_qa_required: true
+  coverage_writer: feature-verify-final
+  final_verification:
+    command: agent-worker feature verify-final
+  delivery_sequence:
+    - verify-final
+    - delivery
+    - closeout

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tea-agent/loop-agent",
-  "version": "0.31.1",
+  "version": "0.32.1",
   "type": "module",
   "bin": {
     "loop-agent": "bin/loop-agent.js",
@@ -46,11 +46,12 @@
     "clean": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\"",
     "brand:sync": "node scripts/sync-brand-assets.mjs",
     "build": "npm run brand:sync && npm run clean && tsc -p tsconfig.build.json && node -e \"const fs=require('node:fs');const p='dist/worker/observe/static';fs.mkdirSync(p,{recursive:true});fs.cpSync('src/worker/observe/static',p,{recursive:true});\" && npm run console:build",
-    "console:build": "vite build --config src/worker/console/vite.config.ts",
+    "console:typecheck": "tsc -p src/worker/console/tsconfig.json",
+    "console:build": "npm run console:typecheck && vite build --config src/worker/console/vite.config.ts",
     "prepack": "npm run build",
     "prepublishOnly": "node scripts/check-npm-publish-policy.mjs && npm run typecheck && npm test && npm run build",
-    "lint": "tsc --noEmit",
-    "typecheck": "tsc --noEmit",
+    "lint": "npm run typecheck",
+    "typecheck": "tsc --noEmit && npm run console:typecheck",
     "test": "node scripts/run-tests.mjs",
     "test:host": "vitest run test/init-upgrade.test.ts --maxWorkers=1 -t \"records and reuses|controller-authorized semantic merge|authority-sensitive\"",
     "test:fast": "vitest run --config vitest.fast.config.ts",

package/skills/agent-worker/SKILL.md

@@ -16,7 +16,7 @@ references:
 - **允许**：`agent-worker` / `loop-agent` CLI；只读 `pool doctor`、`observe`、status/report；冻结 controller identity；选择 Ready 工作与 recovery 命令。
 - **禁止**：绕过 CLI 直接 Edit 业务实现；Worker/DAG 失败后主会话「救火改文件」。
 - **失败时只允许**：保留 evidence → `task retry` / `task reconcile` / `pool mark-failed` / human gate → 再经 CLI 重跑；实现写入仍只经 published `loop-agent` DAG。
-- **Official vs Compatibility**：`agent-worker console` 是 Official 本地控制面（裸入口直接启动；默认 repo=当前目录、port=8790；兼容入口 `agent-worker console serve --repo . --port 8790` 等价）。同进程提供 Operate + Inspect，Inspect 路径 `/inspect/#/...`；openCode 等主会话仍是 Compatibility Assist，二者**不是**同等保证。原 `observe serve` 为兼容期只读入口（启动时输出 `OBSERVE_SERVE_DEPRECATED`，stdout 仍只输出 URL），功能等价于 Console 的 Inspect 面。
+- **Official vs Compatibility**：`agent-worker console` 是 Official 本地控制面（裸入口直接启动；默认 repo=当前目录、port=8790；兼容入口 `agent-worker console serve --repo . --port 8790` 等价）。同进程提供 Operate + Inspect，Inspect 路径 `/inspect/#/...`；openCode 等主会话仍是 Compatibility Assist，二者**不是**同等保证。`observe serve` 已硬下线（`OBSERVE_SERVE_REMOVED` + exit 2，不监听端口）；只读检视请用 Console `/inspect/`；`observe snapshot` 仍输出 GlobalSnapshot JSON。
 
 ## Route the Work
 

package/skills/agent-worker/references/agent-worker-operator.md

@@ -54,7 +54,7 @@ Leaf DAG nodes 不得递归启动 `agent-worker`。Worker 负责 DAG 之外的 s
    ```
 
    doctor 只读；migrate 默认零写入，apply 失败全回滚且不改 JSONL。
-8. Inspect（原 Observe）只读：推荐 `agent-worker console serve` 的 `/inspect/#/...`；兼容 `observe serve|snapshot`。canonical Task 路由为 `/api/features/:featureId/tasks/:taskId` 与 `#/feature/:featureId/task/:taskId`。8790 `/api/health` 为 `OperatorSurfaceHealthV1`；8787 仍为 `ObserveHealthV1`。
+8. Inspect（原 Observe）只读：仅推荐 `agent-worker console`（或 `console serve`）的 `/inspect/#/...`；`observe snapshot` 仍可用。`observe serve` 已下线（REMOVED / exit 2）。canonical Task 路由为 `/api/features/:featureId/tasks/:taskId` 与 `#/feature/:featureId/task/:taskId`。8790 `/api/health` 为 `OperatorSurfaceHealthV1`。
 9. Official Console：`agent-worker console serve|doctor`（默认 loopback；可 `--host 0.0.0.0` / `--debug`）。Recovery CTA 为 report/doctor/decision/resume/reconcile/regenerate/打开检视；无 Cancel、无主 CTA「直接改代码」。主会话 Compatibility Assist 不得替代 Console/CLI 执法。
 
 ## Feature Packet Scaffold

package/skills/loop-agent/references/command-reference.md

@@ -576,7 +576,7 @@ agent-worker scheduler transition <schedule-id> --repo <repo-root> --to <status>
 agent-worker console [--repo <repo-root>] [--port 8790] [--host 127.0.0.1]  # Official 裸入口；repo 默认当前目录
 agent-worker console serve --repo <repo-root> [--port 8790] [--host 127.0.0.1]  # 兼容入口，等价于裸入口
 agent-worker console doctor --repo <repo-root> [--json] [--console-url <url>]
-agent-worker observe serve --repo <repo-root> [--port 8787] [--host 127.0.0.1]  # 兼容入口；stderr 会提示 OBSERVE_SERVE_DEPRECATED
+agent-worker observe serve ...  # REMOVED：stderr OBSERVE_SERVE_REMOVED，exit 2，不监听端口；请用 console + /inspect/
 agent-worker observe snapshot --repo <repo-root>  # 输出 GlobalSnapshot JSON 到 stdout
 ```
 
@@ -600,7 +600,7 @@ agent-worker observe snapshot --repo <repo-root>  # 输出 GlobalSnapshot JSON
 - `report metrics` 按 UTC 月去重投影 Feature/Failure/Follow-up/Delivery/AC/decision/recovery/boundary 指标，同时写 JSON 与 Markdown；每项保留 numerator、denominator、sampleSize 和 missingData。
 - `task draft-followup` 会按全部 failure category 生成 TaskDraft 或人工行动卡：ProductBug/TestBug/FlakyTest/DependencyFailure 可批准；EnvFailure 连续两次后才生成 ENV-CHECK；Spec/Contract/Risk/Human/Unknown 只给行动卡。人工以 `feature approve-followup --dry-run` 预览，再带非空 `--owner` 批准 TaskDraft；行动卡不能批准。批准在 staging validation 后写 TaskSpec、graph、Ready/approval/event，原失败事实不改写，并有 rename/state/approval/index/event 回滚门禁。
 - `task retry` 是失败 Task 的唯一重试入口。它会保留原有运行记录和 failure handoff，并让下一次 `batch run-ready` 使用新的 `workerRunId`；不要删除运行态文件或手动修改状态来重试。
-- **推荐**裸入口 `agent-worker console`（repo 默认当前目录，默认 `127.0.0.1:8790`）提供 Operate + Inspect；`console serve` 是等价兼容入口。Inspect 路径为 `/inspect/#/...`，API 仍为根 `/api/**`。`observe serve` 为兼容入口（默认 `8787`，启动时 stderr 输出 `OBSERVE_SERVE_DEPRECATED`）；`observe snapshot` 保留。Inspect/Observe 本身不会启动、暂停或重试 Task / Worker / DAG。
+- **推荐**裸入口 `agent-worker console`（repo 默认当前目录，默认 `127.0.0.1:8790`）提供 Operate + Inspect；`console serve` 是等价兼容入口。Inspect 路径为 `/inspect/#/...`，API 仍为根 `/api/**`。`observe serve` 已硬下线（`OBSERVE_SERVE_REMOVED` + exit 2，不监听）；`observe snapshot` 保留。Inspect 本身不会启动、暂停或重试 Task / Worker / DAG。
 - Night Scheduler（本地夜间自治）：白天 `admission prepare` 冻结 worktree + DAG writeSet gate；`scheduler add` 消费 gate 并预约 Task Pool `Queued`（不立即执行）；`scheduler clock install` 安装本机 user-level OS timer（launchd / systemd --user / schtasks）周期调用 `scheduler tick`；tick 写统一 Clock receipt，doctor/morning/status 可解释 missing/stale/error/busy/drift；成功后 `pending-harvest`，早晨 `scheduler harvest`（exact-base FF）或 `scheduler discard`；`report morning --window night` 与 Inspect `#/night` / Operate 夜间面板读取同一套 facts。Clock install/status/uninstall 为 CLI-only。
 - 当前 Worker 仍是 v0（库 + CLI + dogfood）；日间批处理未强制定时/CI 驱动；`report morning` 默认可从 Task Pool runs 汇总，并支持 `--window night` 投影 Scheduler facts。