@tea-agent/loop-agent 0.33.6-beta.0 → 0.33.6

package/dist/worker/delivery/package.js

@@ -1,8 +1,7 @@
 import { createHash, randomUUID } from "node:crypto";
-import { execFile } from "node:child_process";
 import { mkdir, readFile, realpath, rename, rm, writeFile } from "node:fs/promises";
 import path from "node:path";
-import { promisify } from "node:util";
+import { isResilientGitCommandError, runResilientGitCommand } from "../../shared/resilient-git.js";
 import YAML from "yaml";
 import { z } from "zod";
 import { controllerIdentitiesMatch, LOOP_AGENT_PACKAGE_NAME, } from "../loop-agent/loop-agent-client.js";
@@ -13,7 +12,6 @@ import { validateFeatureTaskGraph } from "../task-graph/validate.js";
 import { taskSpecSchema } from "../task-spec/schema.js";
 import { gitTransactionRecordSchema, transactionRecordPath } from "./git-transaction.js";
 import { readVerifiedBundle, verifyBundleCurrentStateBindings, verifyBundleOutcomes, verifyBundleTaskSpecBindings } from "./verification-bundle.js";
-const execFileAsync = promisify(execFile);
 const hashedRefSchema = z.object({ path: z.string().min(1), sha256: z.string().regex(/^[a-f0-9]{64}$/) }).strict();
 export const acceptanceCoverageArtifactSchema = z.object({
     schemaVersion: z.literal(1),
@@ -91,9 +89,9 @@ export async function prepareFeatureDelivery(input) {
     const now = input.now ?? new Date();
     const record = await readTransaction(repoRoot, featureId, blockers);
     if (record) {
-        const branch = await git(repoRoot, ["branch", "--show-current"]).catch(() => "");
-        const head = await git(repoRoot, ["rev-parse", "HEAD"]).catch(() => "");
-        const status = await gitRaw(repoRoot, ["status", "--porcelain=v1", "--untracked-files=all"]).catch(() => "git-error");
+        const branch = await git(repoRoot, ["branch", "--show-current"]).catch(rethrowInfrastructureOr(""));
+        const head = await git(repoRoot, ["rev-parse", "HEAD"]).catch(rethrowInfrastructureOr(""));
+        const status = await gitRaw(repoRoot, ["status", "--porcelain=v1", "--untracked-files=all"]).catch(rethrowInfrastructureOr("git-error"));
         if (branch !== record.branch)
             blockers.push(`current branch must be ${record.branch}`);
         if (head !== record.lastCheckpoint)
@@ -202,11 +200,11 @@ export async function validateDeliveryPackage(input) {
         blockers.push("Delivery Feature ownership mismatch");
     if (manifest.branch !== record.branch || manifest.baseBranch !== record.baseBranch || manifest.baseSha !== record.baseCommit || manifest.headSha !== record.lastCheckpoint)
         blockers.push("Delivery manifest does not match the Git transaction");
-    const branch = await git(repoRoot, ["branch", "--show-current"]).catch(() => "");
-    const head = await git(repoRoot, ["rev-parse", "HEAD"]).catch(() => "");
+    const branch = await git(repoRoot, ["branch", "--show-current"]).catch(rethrowInfrastructureOr(""));
+    const head = await git(repoRoot, ["rev-parse", "HEAD"]).catch(rethrowInfrastructureOr(""));
     if (branch !== record.branch || head !== record.lastCheckpoint)
         blockers.push("current Git position does not match Delivery");
-    const rawCloseoutStatus = await gitRaw(repoRoot, ["status", "--porcelain=v1", "--untracked-files=all"]).catch(() => "git-error");
+    const rawCloseoutStatus = await gitRaw(repoRoot, ["status", "--porcelain=v1", "--untracked-files=all"]).catch(rethrowInfrastructureOr("git-error"));
     const allowedDirtyPaths = new Set((input.allowedDirtyPaths ?? []).map((item) => item.replace(/\\/g, "/")));
     const closeoutStatus = rawCloseoutStatus.split("\n").filter(Boolean).filter((line) => !allowedDirtyPaths.has(line.slice(3).replace(/\\/g, "/"))).join("\n").trim();
     if (closeoutStatus)
@@ -495,23 +493,37 @@ async function writeDeliveryArtifacts(artifacts, coverage, manifest) {
     }
 }
 function renderPr(manifest) { return `# Summary\n\nFeature ${manifest.featureId} local Delivery Package.\n\n## Feature/base/head\n\n- Branch: ${manifest.branch}\n- Base: ${manifest.baseBranch} @ ${manifest.baseSha}\n- Head: ${manifest.headSha}\n\n## Completed Tasks\n\n${manifest.tasks.map((task) => `- ${task.taskId}: ${task.commit} (${task.changedFiles.join(", ")})`).join("\n")}\n\n## Acceptance Coverage\n\n- Required: ${manifest.acceptanceCoverage.requiredTotal}\n- Covered: ${manifest.acceptanceCoverage.covered}\n- Waived: ${manifest.acceptanceCoverage.waived}\n- Blocked: ${manifest.acceptanceCoverage.blocked}\n\n## Verification\n\n- QA: ${manifest.qa.evidence.path}\n- Final: ${manifest.finalVerification.path}\n\n## Changed Files\n\n${[...new Set(manifest.tasks.flatMap((task) => task.changedFiles))].map((file) => `- ${file}`).join("\n")}\n\n## Risks\n\n- high=${manifest.riskSummary.high}, medium=${manifest.riskSummary.medium}, low=${manifest.riskSummary.low}\n\n## Human Review Checklist\n\n- [ ] Review diff and commits\n- [ ] Confirm required AC coverage and waivers\n- [ ] Confirm QA and final verification evidence\n- [ ] Review risks\n- [ ] Decide whether to push or create a remote PR manually\n`; }
-async function git(repoRoot, args) { const result = await execFileAsync("git", args, { cwd: repoRoot, encoding: "utf8" }); return result.stdout.trim(); }
-async function gitRaw(repoRoot, args) { const result = await execFileAsync("git", args, { cwd: repoRoot, encoding: "utf8" }); return result.stdout; }
-async function gitOk(repoRoot, args) { try {
-    await git(repoRoot, args);
-    return true;
+async function git(repoRoot, args) {
+    const result = await runResilientGitCommand({ cwd: repoRoot, args, readOnly: true });
+    if (result.code !== 0)
+        throw new Error(`git ${args.join(" ")} failed: ${result.stderr.trim() || result.stdout.trim() || `exit ${result.code}`}`);
+    return result.stdout.trim();
+}
+async function gitRaw(repoRoot, args) {
+    const result = await runResilientGitCommand({ cwd: repoRoot, args, readOnly: true });
+    if (result.code !== 0)
+        throw new Error(`git ${args.join(" ")} failed: ${result.stderr.trim() || result.stdout.trim() || `exit ${result.code}`}`);
+    return result.stdout;
+}
+async function gitOk(repoRoot, args) {
+    const result = await runResilientGitCommand({ cwd: repoRoot, args, readOnly: true });
+    return result.code === 0;
+}
+function rethrowInfrastructureOr(fallback) {
+    return (error) => {
+        if (isResilientGitCommandError(error))
+            throw error;
+        return fallback;
+    };
 }
-catch {
-    return false;
-} }
 async function checkpointMatches(repoRoot, head, checkpoint, spec) {
     if (!await gitOk(repoRoot, ["merge-base", "--is-ancestor", checkpoint.commit, head]))
         return false;
-    const messageText = await gitRaw(repoRoot, ["show", "-s", "--format=%B", checkpoint.commit]).catch(() => "");
+    const messageText = await gitRaw(repoRoot, ["show", "-s", "--format=%B", checkpoint.commit]).catch(rethrowInfrastructureOr(""));
     for (const trailer of [`Feature: ${spec.feature_id}`, `Task: ${spec.id}`, `Acceptance: ${spec.acceptance_refs.join(", ")}`, `Worker-Run: ${checkpoint.workerRunId}`])
         if (!messageText.split(/\r?\n/).includes(trailer))
             return false;
-    const actual = (await gitRaw(repoRoot, ["diff-tree", "--no-commit-id", "--name-only", "-r", checkpoint.commit]).catch(() => "")).split(/\r?\n/).filter(Boolean).sort();
+    const actual = (await gitRaw(repoRoot, ["diff-tree", "--no-commit-id", "--name-only", "-r", checkpoint.commit]).catch(rethrowInfrastructureOr(""))).split(/\r?\n/).filter(Boolean).sort();
     return JSON.stringify(actual) === JSON.stringify([...checkpoint.changedFiles].sort());
 }
 async function hashedRefValid(repoRoot, ref) { try {

package/dist/worker/delivery/verification-bundle.js

@@ -7,6 +7,7 @@ import { artifactMatchesEvidenceToken, isShellVerificationToken, } from "../outc
 import { readVerifiedOutcome } from "../outcomes/store.js";
 import { getTaskPoolRoot, readFeatureTaskPoolStates } from "../pool/run-store.js";
 import { workflowSchema } from "../task-spec/workflow-routing.js";
+import { runResilientGitCommand } from "../../shared/resilient-git.js";
 import { gitTransactionRecordSchema, transactionRecordPath } from "./git-transaction.js";
 /**
  * Feature Verification Bundle v1 — a hash-bound aggregate of completed typed
@@ -533,10 +534,11 @@ async function readGitRecord(repoRoot, featureId) {
     }
 }
 async function defaultGit(repoRoot, args) {
-    const { execFile } = await import("node:child_process");
-    const { promisify } = await import("node:util");
-    const execFileAsync = promisify(execFile);
-    return (await execFileAsync("git", args, { cwd: repoRoot, encoding: "utf8" })).stdout.trim();
+    const result = await runResilientGitCommand({ cwd: repoRoot, args, readOnly: true });
+    if (result.code !== 0) {
+        throw new Error(`git ${args.join(" ")} failed: ${result.stderr.trim() || result.stdout.trim() || `exit ${result.code}`}`);
+    }
+    return result.stdout.trim();
 }
 // Re-export the workflow schema so consumers can validate typed workflows.
 export { workflowSchema };

package/dist/worker/observe/static/operator-chrome.css

@@ -71,8 +71,11 @@
 	text-decoration: none;
 	white-space: nowrap;
 }
-.och-brand svg {
-	color: var(--och-orange);
+.och-brand-mark {
+	display: block;
+	width: 32px;
+	height: 32px;
+	object-fit: contain;
 	flex-shrink: 0;
 }
 .och-brand:hover {

package/dist/worker/observe/static/operator-chrome.js

@@ -353,7 +353,12 @@ export function mountOperatorChrome(root, config = {}) {
 
 		const brand = el("a", "och-brand");
 		brand.href = model.homeHref;
-		icon(brand, "radar");
+		brand.setAttribute("aria-label", `${model.brand} 首页`);
+		const brandMark = el("img", "och-brand-mark");
+		brandMark.src = "/inspect/favicon.svg";
+		brandMark.alt = "";
+		brandMark.setAttribute("aria-hidden", "true");
+		brand.appendChild(brandMark);
 		brand.appendChild(el("span", null, model.brand));
 		global.appendChild(brand);
 

package/dist/worker/observe/static/styles.css

@@ -1617,7 +1617,11 @@ body.is-resizing-dag-graph {
 /* 历史失败已恢复/已覆盖：独立中性样式（不占用当前终态失败红色，不洗白事实）。 */
 .dag-trajectory-occurrence.is-recovered {
 	border-color: color-mix(in srgb, var(--amber, #b58900) 55%, var(--hairline));
-	background: color-mix(in srgb, var(--amber-soft, #fff7d6) 55%, var(--surface));
+	background: color-mix(
+		in srgb,
+		var(--amber-soft, #fff7d6) 55%,
+		var(--surface)
+	);
 }
 .dag-trajectory-recovered {
 	font-size: 11px;
@@ -1647,9 +1651,14 @@ body.is-resizing-dag-graph {
 }
 .dag-trajectory-banner {
 	padding: 8px 12px;
-	border: 1px solid color-mix(in srgb, var(--amber, #b58900) 50%, var(--hairline));
+	border: 1px solid
+		color-mix(in srgb, var(--amber, #b58900) 50%, var(--hairline));
 	border-radius: var(--radius-lg);
-	background: color-mix(in srgb, var(--amber-soft, #fff7d6) 60%, var(--surface));
+	background: color-mix(
+		in srgb,
+		var(--amber-soft, #fff7d6) 60%,
+		var(--surface)
+	);
 	color: var(--body);
 	font-size: 12px;
 }
@@ -3050,7 +3059,11 @@ button.copy-command:focus-visible {
 }
 .dags-copy-btn:active {
 	border-color: var(--hairline-strong, #cfcdc4);
-	background: color-mix(in srgb, var(--surface-muted, #f0efe9) 80%, var(--hairline, #e6e5e0));
+	background: color-mix(
+		in srgb,
+		var(--surface-muted, #f0efe9) 80%,
+		var(--hairline, #e6e5e0)
+	);
 }
 /* Mouse focus must not leave residual orange chrome; orange is :focus-visible only. */
 .dags-copy-btn:focus:not(:focus-visible) {
@@ -3201,12 +3214,20 @@ button.copy-command:focus-visible {
 }
 .dags-page-num:hover:not(:disabled),
 .dags-page-nav:hover:not(:disabled) {
-	background: color-mix(in srgb, var(--orange-soft, #fff1ea) 70%, var(--surface-muted, #f0efe9));
+	background: color-mix(
+		in srgb,
+		var(--orange-soft, #fff1ea) 70%,
+		var(--surface-muted, #f0efe9)
+	);
 	color: var(--ink, #26251e);
 }
 .dags-page-num:active:not(:disabled),
 .dags-page-nav:active:not(:disabled) {
-	background: color-mix(in srgb, var(--orange, #f54e00) 14%, var(--surface-muted, #f0efe9));
+	background: color-mix(
+		in srgb,
+		var(--orange, #f54e00) 14%,
+		var(--surface-muted, #f0efe9)
+	);
 }
 .dags-page-num:focus-visible,
 .dags-page-nav:focus-visible,
@@ -3224,7 +3245,8 @@ button.copy-command:focus-visible {
 	border-color: var(--orange, #f54e00);
 	color: #fff;
 	opacity: 1;
-	box-shadow: 0 2px 8px color-mix(in srgb, var(--orange, #f54e00) 35%, transparent);
+	box-shadow: 0 2px 8px
+		color-mix(in srgb, var(--orange, #f54e00) 35%, transparent);
 	cursor: default;
 }
 .dags-page-nav:disabled,
@@ -3320,7 +3342,11 @@ button.copy-command:focus-visible {
 	background: var(--surface-muted, #f0efe9);
 }
 .dags-refresh-btn:active:not(:disabled) {
-	background: color-mix(in srgb, var(--surface-muted, #f0efe9) 80%, var(--hairline, #e6e5e0));
+	background: color-mix(
+		in srgb,
+		var(--surface-muted, #f0efe9) 80%,
+		var(--hairline, #e6e5e0)
+	);
 }
 .dags-pagination.is-busy {
 	opacity: 0.92;
@@ -3516,7 +3542,11 @@ button.copy-command:focus-visible {
 }
 .custom-select-option.is-selected.is-active,
 .custom-select-option.is-selected:hover {
-	background: color-mix(in srgb, var(--orange-soft, #fff1ea) 70%, var(--surface-muted, #f0efe9));
+	background: color-mix(
+		in srgb,
+		var(--orange-soft, #fff1ea) 70%,
+		var(--surface-muted, #f0efe9)
+	);
 }
 .custom-select-option-label {
 	flex: 1 1 auto;

package/dist/workflows/dag/backend-test-case-coverage-analysis.js

@@ -909,10 +909,6 @@ function symbolCaseId(symbol) {
     const match = symbol.match(/^test_(BE(?:_[A-Z0-9]+)+?_\d{2,3})(?:_|$)/i);
     return match ? canonicalCaseId(match[1].replaceAll("_", "-")) : undefined;
 }
-function metadataCaseIds(region) {
-    return orderedUnique([...region.matchAll(/^\s*Case-ID\s*:\s*(BE-[A-Z0-9]+(?:-[A-Z0-9]+)*)\s*$/gmi)]
-        .map((match) => canonicalCaseId(match[1])));
-}
 function metadataTestPoints(region, label) {
     const escaped = label.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
     const match = new RegExp(`^\\s*${escaped}\\s*:\\s*(.*)$`, "mi").exec(region);
@@ -932,27 +928,6 @@ function pytestFunctionRegionStart(source, functionIndex) {
     }
     return regionStart;
 }
-function pytestFunctionBodyEnd(source, signatureEnd, functionIndent) {
-    let cursor = source.indexOf("\n", signatureEnd);
-    if (cursor < 0)
-        return source.length;
-    cursor += 1;
-    const baseIndent = functionIndent.replaceAll("\t", "    ").length;
-    while (cursor < source.length) {
-        const nextLine = source.indexOf("\n", cursor);
-        const lineEnd = nextLine < 0 ? source.length : nextLine;
-        const line = source.slice(cursor, lineEnd).replace(/\r$/, "");
-        if (line.trim()) {
-            const indentation = line.match(/^[ \t]*/)?.[0]?.replaceAll("\t", "    ").length ?? 0;
-            if (indentation <= baseIndent)
-                return cursor;
-        }
-        if (nextLine < 0)
-            return source.length;
-        cursor = nextLine + 1;
-    }
-    return source.length;
-}
 function pytestParameterCollections(source) {
     const collections = new Map();
     for (const match of source.matchAll(/^([A-Z][A-Z0-9_]*)\s*=\s*\[([\s\S]*?)^\]/gm)) {
@@ -966,10 +941,10 @@ function pytestSymbols(script, source) {
     const parameterCollections = pytestParameterCollections(source);
     return matches.map((match, index) => {
         const regionStart = regionStarts[index];
-        const regionEnd = pytestFunctionBodyEnd(source, match.index + match[0].length, match[1]);
+        const regionEnd = regionStarts[index + 1] ?? source.length;
         const region = source.slice(match.index, regionEnd);
         const decorators = source.slice(regionStart, match.index);
-        const ids = metadataCaseIds(region);
+        const ids = caseIds(region);
         const fromSymbol = symbolCaseId(match[2]);
         if (fromSymbol)
             ids.unshift(fromSymbol);

package/dist/workflows/dag/backend-test-module-stem.js

@@ -1,7 +1,5 @@
 import path from "node:path";
 const PRIORITY_ONLY_MODULE_STEMS = new Set(["p0", "p1", "p2"]);
-const OPAQUE_HASH_MODULE_STEM = /^[a-f][a-f0-9]{6,63}$/;
-export const BACKEND_TEST_MAX_MODULE_COUNT = 8;
 export function normalizeBackendTestModuleStemCandidate(raw) {
     return path.basename(raw)
         .replace(/\.(?:md|py)$/i, "")
@@ -13,9 +11,6 @@ export function normalizeBackendTestModuleStemCandidate(raw) {
 export function isPriorityOnlyBackendTestModuleStem(raw) {
     return PRIORITY_ONLY_MODULE_STEMS.has(normalizeBackendTestModuleStemCandidate(raw));
 }
-export function isOpaqueHashBackendTestModuleStem(raw) {
-    return OPAQUE_HASH_MODULE_STEM.test(normalizeBackendTestModuleStemCandidate(raw));
-}
 export function isPriorityOnlyBackendPytestScript(script) {
     const basename = path.posix.basename(script.replaceAll("\\", "/"));
     const match = /^test_(.+)\.py$/i.exec(basename);

package/dist/workflows/dag/backend-test-writer-completeness.js

@@ -2,7 +2,7 @@ import { createHash } from "node:crypto";
 import { access, mkdir, readFile, readdir, writeFile } from "node:fs/promises";
 import path from "node:path";
 import { z } from "zod";
-import { BACKEND_TEST_MAX_MODULE_COUNT, isOpaqueHashBackendTestModuleStem, isPriorityOnlyBackendTestModuleStem, } from "./backend-test-module-stem.js";
+import { isPriorityOnlyBackendTestModuleStem } from "./backend-test-module-stem.js";
 /**
  * Maps a backend-test generation writer task id to its writer-progress role.
  * Returns undefined for nodes that are not completeness-gated generators.
@@ -103,8 +103,6 @@ function moduleStemInvalidReason(raw) {
     const stem = normalizeBackendTestModuleStem(raw);
     if (isPriorityOnlyBackendTestModuleStem(stem))
         return "priority-only-module-stem";
-    if (isOpaqueHashBackendTestModuleStem(stem))
-        return "opaque-hash-module-stem";
     if (stem.toLowerCase() === "readme")
         return "reserved-module-stem";
     if (!/^[a-z][a-z0-9_]*$/.test(stem))
@@ -116,40 +114,28 @@ function moduleStemInvalidReason(raw) {
 function looksLikeValidModuleStem(raw) {
     return moduleStemInvalidReason(raw) === undefined;
 }
-function extractCanonicalModuleIndexSection(readme) {
-    const lines = readme
-        .replaceAll("\r\n", "\n")
-        .replaceAll("\r", "\n")
-        .split("\n");
-    const headings = lines.flatMap((line, index) => line.trim() === "## Module Index" ? [index] : []);
-    if (headings.length === 0) {
-        return { section: "", structureIssues: ["missing-module-index"] };
-    }
-    if (headings.length > 1) {
-        return { section: "", structureIssues: ["duplicate-module-index"] };
-    }
-    const start = headings[0] + 1;
-    const relativeEnd = lines.slice(start).findIndex((line) => /^##\s+\S/.test(line.trim()));
-    const end = relativeEnd < 0 ? lines.length : start + relativeEnd;
-    return { section: lines.slice(start, end).join("\n"), structureIssues: [] };
-}
-/** Inspect only candidates inside the unique exact `## Module Index` section. */
+/** Inspect only authoritative README module-index candidates. */
 export function inspectModuleStemsFromReadme(readme) {
-    const extracted = extractCanonicalModuleIndexSection(readme);
     const candidates = [];
-    const tableRowLines = extracted.section.split("\n").filter((line) => line.includes("|"));
+    const tableRowLines = readme
+        .replaceAll("\r\n", "\n")
+        .replaceAll("\r", "\n")
+        .split("\n")
+        .filter((line) => line.includes("|"));
     for (const line of tableRowLines) {
         for (const match of line.matchAll(/`?testcase\/md\/([A-Za-z0-9_.-]+)\.md`?/g)) {
             candidates.push(match[1]);
         }
         for (const match of line.matchAll(/\|\s*`?([A-Za-z0-9_.-]+)`?\s*\|\s*`?testcase\/test_/g)) {
-            const raw = match[1];
-            if (looksLikeValidModuleStem(raw) || moduleStemInvalidReason(raw) !== "invalid-syntax") {
-                candidates.push(raw);
+            // This compatibility shape can also capture a numeric count column.
+            // Keep valid stems and the priority-only defect we diagnose, while
+            // ignoring non-stem incidental cells such as `1`.
+            if (looksLikeValidModuleStem(match[1]) || isPriorityOnlyBackendTestModuleStem(match[1])) {
+                candidates.push(match[1]);
             }
         }
     }
-    for (const match of extracted.section.matchAll(/\[[^\]]+\]\(\.\/([A-Za-z0-9_.-]+)\.md\)/g)) {
+    for (const match of readme.matchAll(/\[[^\]]+\]\(\.\/([A-Za-z0-9_.-]+)\.md\)/g)) {
         candidates.push(match[1]);
     }
     const uniqueCandidates = orderedUnique(candidates);
@@ -159,18 +145,12 @@ export function inspectModuleStemsFromReadme(readme) {
             ? [{ raw, normalized: normalizeBackendTestModuleStem(raw), reasonCode }]
             : [];
     });
-    const validStems = orderedUnique(uniqueCandidates
-        .filter(looksLikeValidModuleStem)
-        .map((stem) => normalizeBackendTestModuleStem(stem)));
-    const structureIssues = [...extracted.structureIssues];
-    if (validStems.length > BACKEND_TEST_MAX_MODULE_COUNT) {
-        structureIssues.push(`excessive-module-count: ${validStems.length} > ${BACKEND_TEST_MAX_MODULE_COUNT}`);
-    }
     return {
         candidates: uniqueCandidates,
-        validStems,
+        validStems: orderedUnique(uniqueCandidates
+            .filter(looksLikeValidModuleStem)
+            .map((stem) => normalizeBackendTestModuleStem(stem))),
         invalid,
-        structureIssues,
     };
 }
 /**
@@ -937,17 +917,6 @@ export async function assessBackendTestMdPlanCompleteness(workspaceRoot) {
         // are produced by map_agent children and are NOT required here.
         const stemInspection = inspectModuleStemsFromReadme(readme);
         const indexedStems = stemInspection.validStems;
-        for (const structureIssue of stemInspection.structureIssues) {
-            if (!brokenPaths.includes("testcase/md/README.md")) {
-                brokenPaths.push("testcase/md/README.md");
-            }
-            issues.push({
-                code: "T5",
-                path: "testcase/md/README.md",
-                detail: structureIssue,
-                recoverable: true,
-            });
-        }
         for (const invalid of stemInspection.invalid) {
             if (!brokenPaths.includes("testcase/md/README.md")) {
                 brokenPaths.push("testcase/md/README.md");

package/dist/workflows/dag/dynamic-runtime/map.js

@@ -367,26 +367,19 @@ export async function executeDynamicMapExpansion(input) {
         }
     }
     const budgetBlockedIds = new Set(blockedChildren.map((entry) => entry.nodeId));
-    const failOnTokenBudgetExhaustion = input.expansion.failOnTokenBudgetExhaustion === true;
     const failedChildren = tolerateChildFailures
         ? []
         : childNodeIds.filter((nodeId) => {
             const record = input.state.nodes[nodeId];
             if (!record || record.status === "FINISHED")
                 return false;
-            if (budgetBlockedIds.has(nodeId) || isBudgetBlockedRecord(record)) {
-                return failOnTokenBudgetExhaustion;
-            }
+            if (budgetBlockedIds.has(nodeId) || isBudgetBlockedRecord(record))
+                return false;
             return true;
         });
-    const finishedItemCount = childNodeIds.filter((nodeId) => input.state.nodes[nodeId]?.status === "FINISHED").length;
-    const blockedItemCount = budgetBlockedIds.size;
     const aggregate = {
         workflowNodeId: input.expansion.workflowNodeId,
         itemCount: items.length,
-        expectedItemCount: items.length,
-        finishedItemCount,
-        blockedItemCount,
         children: childNodeIds.map((nodeId, index) => ({
             nodeId,
             item: items[index],
@@ -406,30 +399,21 @@ export async function executeDynamicMapExpansion(input) {
                 ?.reason,
         })),
         tokensUsed: totalTokensUsed,
-        maxTotalTokens: tokenBudget?.maxTotalTokens,
         caseOutcomeNotes: caseOutcomeNotes.length > 0 ? caseOutcomeNotes : undefined,
     };
-    const tokenBudgetFailure = failOnTokenBudgetExhaustion && blockedItemCount > 0;
     return {
-        // With tolerateChildFailures: barrier succeeds and product outcomes live in
-        // case evidence. Backend-test opts into token-budget fail-closed because a
-        // partial generated module set is never a valid downstream input.
-        ok: failedChildren.length === 0 && !tokenBudgetFailure,
+        // With tolerateChildFailures: barrier always succeeds; product outcomes live in
+        // case evidence + result materialization. Without it: real child failures fail-close.
+        ok: failedChildren.length === 0,
         stdout: JSON.stringify(aggregate),
         stderr: caseOutcomeNotes.length > 0
             ? `map children recorded as case outcomes: ${caseOutcomeNotes
                 .map((entry) => `${entry.nodeId}=${entry.status}:${entry.reason}`)
                 .join(", ")}`
-            : tokenBudgetFailure
-                ? `dynamic map token budget exhausted: expected=${items.length} finished=${finishedItemCount} blocked=${blockedItemCount} tokensUsed=${totalTokensUsed} maxTotalTokens=${tokenBudget?.maxTotalTokens ?? "unbounded"}`
-                : failedChildren.length > 0
-                    ? `dynamic map children failed: ${failedChildren.join(", ")}`
-                    : "",
-        failureCategory: tokenBudgetFailure
-            ? "dynamic-expansion-token-budget-exhausted"
             : failedChildren.length > 0
-                ? "dynamic-expansion-child-failed"
-                : "success",
+                ? `dynamic map children failed: ${failedChildren.join(", ")}`
+                : "",
+        failureCategory: failedChildren.length > 0 ? "dynamic-expansion-child-failed" : "success",
         durationMs: Date.now() - started,
     };
 }

package/dist/workflows/dag/frontend-worktree-diff.js

@@ -1,31 +1,14 @@
 import { createHash } from "node:crypto";
-import { spawn } from "node:child_process";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import path from "node:path";
+import { runResilientGitCommand } from "../../shared/resilient-git.js";
 import { writeDagRunJsonArtifact } from "../../infrastructure/harness/artifact-store.js";
 import { pathMatchesPattern } from "../../shared/git-progress.js";
 export const FRONTEND_WORKTREE_DIFF_SCHEMA_ID = "frontend-worktree-diff-v1";
 export const FRONTEND_WORKTREE_BASELINE_SCHEMA_ID = "frontend-worktree-baseline-v1";
-function runGit(cwd, args) {
-    return new Promise((resolve, reject) => {
-        const child = spawn("git", args, {
-            cwd,
-            env: process.env,
-            stdio: ["ignore", "pipe", "pipe"],
-        });
-        let stdout = "";
-        let stderr = "";
-        child.stdout.on("data", (chunk) => {
-            stdout += String(chunk);
-        });
-        child.stderr.on("data", (chunk) => {
-            stderr += String(chunk);
-        });
-        child.on("error", reject);
-        child.on("close", (code) => {
-            resolve({ code: code ?? 1, stdout, stderr });
-        });
-    });
+async function runGit(cwd, args) {
+    const result = await runResilientGitCommand({ cwd, args, readOnly: true });
+    return { code: result.code, stdout: result.stdout, stderr: result.stderr };
 }
 function splitLines(text) {
     return text
@@ -52,8 +35,9 @@ async function sha256File(filePath) {
     }
 }
 export async function captureFrontendWorktreeBaseline(input) {
+    const run = input.dependencies?.runGit ?? runGit;
     const root = path.resolve(input.workspaceRoot);
-    const status = await runGit(root, [
+    const status = await run(root, [
         "status",
         "--porcelain=v1",
         "--untracked-files=all",
@@ -84,6 +68,7 @@ export async function captureFrontendWorktreeBaseline(input) {
  * patch + inventory under the current run directory before review runs.
  */
 export async function runFrontendWorktreeDiffGate(input) {
+    const run = input.dependencies?.runGit ?? runGit;
     const root = path.resolve(input.workspaceRoot);
     let baseline;
     try {
@@ -101,16 +86,16 @@ export async function runFrontendWorktreeDiffGate(input) {
     if (input.requireBaseline && !baseline) {
         throw new Error("frontend worktree baseline is required for this review context");
     }
-    const revParse = await runGit(root, ["rev-parse", "--is-inside-work-tree"]);
+    const revParse = await run(root, ["rev-parse", "--is-inside-work-tree"]);
     if (revParse.code !== 0 || revParse.stdout.trim() !== "true") {
         throw new Error(`frontend worktree diff gate requires a git worktree: ${revParse.stderr.trim() || revParse.stdout.trim() || "not a git repository"}`);
     }
     // Match failure capture semantics: binary-capable tracked diff vs HEAD.
-    const diff = await runGit(root, ["diff", "--binary", "HEAD"]);
+    const diff = await run(root, ["diff", "--binary", "HEAD"]);
     if (diff.code !== 0) {
         throw new Error(`frontend worktree diff gate git diff failed: ${diff.stderr.trim() || diff.stdout.trim()}`);
     }
-    const nameOnly = await runGit(root, [
+    const nameOnly = await run(root, [
         "diff",
         "--name-only",
         "--diff-filter=ACDMRTUXB",
@@ -119,7 +104,7 @@ export async function runFrontendWorktreeDiffGate(input) {
     if (nameOnly.code !== 0) {
         throw new Error(`frontend worktree diff gate git name-only failed: ${nameOnly.stderr.trim() || nameOnly.stdout.trim()}`);
     }
-    const untracked = await runGit(root, [
+    const untracked = await run(root, [
         "ls-files",
         "--others",
         "--exclude-standard",
@@ -152,7 +137,7 @@ export async function runFrontendWorktreeDiffGate(input) {
     });
     const patchSource = baseline
         ? changedFiles.length > 0
-            ? await runGit(root, ["diff", "--binary", "HEAD", "--", ...changedFiles])
+            ? await run(root, ["diff", "--binary", "HEAD", "--", ...changedFiles])
             : { code: 0, stdout: "", stderr: "" }
         : diff;
     if (patchSource.code !== 0) {