npm - @tea-agent/loop-agent - Versions diffs - 0.34.0 → 0.34.1 - Mend

@tea-agent/loop-agent 0.34.0 → 0.34.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (28) hide show

package/CHANGELOG.md +30 -0
package/dist/application/task-lifecycle/advance.js +57 -7
package/dist/application/task-lifecycle/plan-transitions.js +13 -21
package/dist/executors/dag-pi-executor.js +18 -3
package/dist/shared/operator/capabilities.js +26 -2
package/dist/task/source-prepare/prepare.js +49 -2
package/dist/worker/console/interview/grill-me.js +7 -6
package/dist/worker/console/operator-actions.js +231 -22
package/dist/worker/console/prd-intake-bridge.js +393 -0
package/dist/worker/console/recovery-cta.js +35 -6
package/dist/worker/console/static/assets/index-BpuHmlSP.js +29 -0
package/dist/worker/console/static/index.html +1 -1
package/dist/worker/console/static-src/app/console-types.js +1 -0
package/dist/worker/console/static-src/app/usePrdImport.js +2 -1
package/dist/worker/console/static-src/app/useRecoveryActions.js +24 -1
package/dist/worker/console/static-src/app/useRecoveryConsole.js +19 -1
package/dist/worker/console/static-src/app/useTaskWizard.js +57 -2
package/dist/worker/observability/read-model.js +3 -0
package/dist/workflows/dag/failure-category.js +3 -0
package/dist/workflows/dag/init-hybrid.js +15 -9
package/dist/workflows/dag/node-execution.js +3 -2
package/dist/workflows/dag/retry-policy.js +44 -11
package/dist/workflows/dag/runner.js +6 -0
package/dist/workflows/dag/scheduler.js +49 -1
package/dist/workflows/dag/validate.js +16 -2
package/docs/templates/agent-dag.schema.json +4 -4
package/package.json +1 -1
package/dist/worker/console/static/assets/index-CMHovlqG.js +0 -32

package/dist/worker/console/static/index.html CHANGED Viewed

@@ -6,7 +6,7 @@
     <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
     <link rel="stylesheet" href="/inspect/operator-chrome.css" />
     <title>Loop 操作台 · Operator Console</title>
-    <script type="module" crossorigin src="/assets/index-CMHovlqG.js"></script>
+    <script type="module" crossorigin src="/assets/index-BpuHmlSP.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-BQkhJpV8.css">
   </head>
   <body>

package/dist/worker/console/static-src/app/console-types.js CHANGED Viewed

@@ -107,6 +107,7 @@ export async function postOperator(action, actionParams = {}, clientRequestId) {
 export const LONG_RUNNING_ACTIONS = new Set([
     "runDag",
     "dagRerun",
+    "dagReconcileRun",
     "standaloneTaskRerun",
 ]);
 export function formatDagRerunIneligible(plan) {

package/dist/worker/console/static-src/app/usePrdImport.js CHANGED Viewed

@@ -3,7 +3,8 @@ import { composePrdDocuments, importPrdFiles, validatePrdFileList, } from "../pr
 /** PRD multi-file import: drag/drop + selection, primary-volume selection,
  *  reorder/remove and composed-text regeneration with dirty tracking. */
 export function usePrdImport() {
-    const [prdText, setPrdText] = useState("# 需求\n\n实现 Loop Operator Console Happy Path：Interview → 契约落地 → DAG confirm → run。\n");
+    // Empty placeholder — do not prefill Console Happy Path sample text (design 2026-08-11).
+    const [prdText, setPrdText] = useState("");
     const [prdDocuments, setPrdDocuments] = useState([]);
     const [prdPrimaryIndex, setPrdPrimaryIndex] = useState(0);
     const [prdComposedDirty, setPrdComposedDirty] = useState(false);

package/dist/worker/console/static-src/app/useRecoveryActions.js CHANGED Viewed

@@ -234,7 +234,30 @@ export function useRecoveryActions(params) {
                 setOpError("对账恢复需要 DAG 运行 ID");
                 return;
             }
-            setOpMessage(`${cta.label}：请经 CLI — ${cta.commandHint ?? ""}`);
+            // Default supersede: orphan/interrupted runs should not be resumed.
+            // The browser Human Gate binds the destructive action + reason; the CLI
+            // still fail-closes when runner is not proven dead/stopped.
+            const actionParams = {
+                runId,
+                reason,
+                reconcileAction: "supersede",
+            };
+            const prep = await runAction("prepareMutationGate", {
+                action: "dagReconcileRun",
+                actionParams,
+            });
+            if (!isActionSuccess(prep))
+                return;
+            const receipt = (prep?.result ?? prep);
+            if (!receipt.receiptId || !receipt.humanGateToken) {
+                setOpError("prepareMutationGate 未返回可消费的 Human Gate receipt");
+                return;
+            }
+            await runAction("dagReconcileRun", {
+                ...actionParams,
+                confirmationId: receipt.receiptId,
+                humanGateToken: receipt.humanGateToken,
+            }, { clientRequestId });
             return;
         }
         setOpMessage(`${cta.label}：请经 CLI — ${cta.commandHint ?? ""}`);

package/dist/worker/console/static-src/app/useRecoveryConsole.js CHANGED Viewed

@@ -21,6 +21,7 @@ export function useRecoveryConsole(params) {
     const [recoveryRunsLoading, setRecoveryRunsLoading] = useState(false);
     const [recoveryNodesLoading, setRecoveryNodesLoading] = useState(false);
     const [recoveryRunStatus, setRecoveryRunStatus] = useState(null);
+    const [recoveryFailureCategory, setRecoveryFailureCategory] = useState(null);
     const [manualRunId, setManualRunId] = useState(false);
     const [manualNodeId, setManualNodeId] = useState(false);
     const [recoveryReport, setRecoveryReport] = useState(null);
@@ -122,6 +123,7 @@ export function useRecoveryConsole(params) {
         if (!id) {
             setRecoveryNodes([]);
             setRecoveryRunStatus(null);
+            setRecoveryFailureCategory(null);
             return;
         }
         setRecoveryNodesLoading(true);
@@ -132,10 +134,16 @@ export function useRecoveryConsole(params) {
             if (!res.ok) {
                 setRecoveryNodes([]);
                 setRecoveryRunStatus(null);
+                setRecoveryFailureCategory(null);
                 return;
             }
             const body = (await res.json());
-            setRecoveryRunStatus(typeof body.status === "string" ? body.status : null);
+            // Prefer adaptive effectiveStatus (running-suspected-stall / interrupted)
+            // over raw state.status so Recovery CTAs match doctor/liveness facts.
+            const status = (typeof body.effectiveStatus === "string" && body.effectiveStatus) ||
+                (typeof body.status === "string" && body.status) ||
+                null;
+            setRecoveryRunStatus(status);
             const rawNodes = Array.isArray(body.nodes) ? body.nodes : [];
             const nodes = sortRecoveryNodeCandidates(rawNodes
                 .map((n) => {
@@ -151,10 +159,19 @@ export function useRecoveryConsole(params) {
             })
                 .filter((n) => n !== null));
             setRecoveryNodes(nodes);
+            // Surface controller-interrupted (or other) from node records when run-level
+            // failureCategory is absent — needed for S6 interrupt CTA classification.
+            const runFailure = (typeof body.failureCategory === "string" && body.failureCategory) ||
+                undefined;
+            const nodeFailure = rawNodes.find((n) => typeof n.failureCategory === "string" &&
+                n.failureCategory &&
+                n.failureCategory !== "success")?.failureCategory;
+            setRecoveryFailureCategory(runFailure ?? nodeFailure ?? null);
         }
         catch {
             setRecoveryNodes([]);
             setRecoveryRunStatus(null);
+            setRecoveryFailureCategory(null);
         }
         finally {
             setRecoveryNodesLoading(false);
@@ -210,6 +227,7 @@ export function useRecoveryConsole(params) {
         operationState: recoveryRunStatus ? null : lastOpState,
         errorCode: recoveryRunStatus ? null : opErrorCode,
         dagStatus: recoveryRunStatus,
+        failureCategory: recoveryFailureCategory,
     });
     const recoveryCtas = useMemo(() => consoleRecoveryCtas(recoveryFact), [recoveryFact]);
     const recoveryLanes = useMemo(() => partitionRecoveryCtas(recoveryCtas), [recoveryCtas]);

package/dist/worker/console/static-src/app/useTaskWizard.js CHANGED Viewed

@@ -10,6 +10,9 @@ export function useTaskWizard(params) {
     const [taskId, setTaskId] = useState("");
     const [taskTitle, setTaskTitle] = useState("");
     const [taskKind, setTaskKind] = useState("standard");
+    const [allowedPathsText, setAllowedPathsText] = useState("");
+    const [forbiddenPathsText, setForbiddenPathsText] = useState("");
+    const [verifyCommandsText, setVerifyCommandsText] = useState("");
     const workflowMeta = WORKFLOW_OPTIONS.find((w) => w.kind === taskKind) ?? WORKFLOW_OPTIONS[0];
     const [sessionId, setSessionId] = useState(null);
     const [question, setQuestion] = useState(null);
@@ -166,14 +169,26 @@ export function useTaskWizard(params) {
             return;
         void runContractPreflight(false);
     }, [step, taskId, assessmentId, runContractPreflight]);
+    const splitBoundaryList = useCallback((text) => {
+        return text
+            .split(/[\n,;，；]+/)
+            .map((s) => s.trim())
+            .filter(Boolean);
+    }, []);
     const importPrdAndCreate = useCallback(async () => {
         const docsPayload = prd.prdDocuments.length > 0
             ? ensureUniqueDocumentNames(prd.prdDocuments)
             : undefined;
+        const allowedPaths = splitBoundaryList(allowedPathsText);
+        const forbiddenPaths = splitBoundaryList(forbiddenPathsText);
+        const verifyCommands = splitBoundaryList(verifyCommandsText);
         const actionParams = {
             content: prd.prdText,
             taskKind,
             ...(docsPayload ? { documents: docsPayload } : {}),
+            ...(allowedPaths.length > 0 ? { allowedPaths } : {}),
+            ...(forbiddenPaths.length > 0 ? { forbiddenPaths } : {}),
+            ...(verifyCommands.length > 0 ? { verifyCommands } : {}),
         };
         if (!operatorRequestFits("bootstrapFromPrd", actionParams)) {
             prd.setPrdFileError(operatorRequestTooLargeMessage());
@@ -187,9 +202,33 @@ export function useTaskWizard(params) {
             setTaskId(result.taskId);
         if (result.title)
             setTaskTitle(result.title);
-        setOpMessage(`已创建任务「${result.title ?? ""}」（${result.taskId ?? ""}），来源：${result.identitySource ?? "prd"}`);
+        const parseLabel = result.parseStatus ?? "pending";
+        const objectiveHint = result.draftPreview?.objective?.trim();
+        const gapCount = Array.isArray(result.gaps) ? result.gaps.length : 0;
+        const semanticNote = result.semanticIntake?.applied
+            ? "semantic"
+            : (result.semanticIntake?.code ?? "no-semantic");
+        setOpMessage([
+            `已创建任务「${result.title ?? ""}」（${result.taskId ?? ""}）`,
+            `来源：${result.identitySource ?? "prd"}`,
+            `解析：${parseLabel}（${semanticNote}）`,
+            objectiveHint ? `目标：${objectiveHint.slice(0, 120)}` : null,
+            gapCount > 0 ? `缺口 ${gapCount} 项待确认` : null,
+        ]
+            .filter(Boolean)
+            .join(" · "));
         setStep("interview");
-    }, [prd, runAction, setOpMessage, setStep, taskKind]);
+    }, [
+        allowedPathsText,
+        forbiddenPathsText,
+        prd,
+        runAction,
+        setOpMessage,
+        setStep,
+        splitBoundaryList,
+        taskKind,
+        verifyCommandsText,
+    ]);
     const wizardSteps = [
         { id: "setup", label: "就绪检查" },
         { id: "import-prd", label: "导入需求" },
@@ -205,6 +244,22 @@ export function useTaskWizard(params) {
         taskTitle,
         taskKind,
         setTaskKind,
+        engineering: {
+            allowedPathsText,
+            forbiddenPathsText,
+            verifyCommandsText,
+        },
+        setEngineering: (patch) => {
+            if (patch.allowedPathsText !== undefined) {
+                setAllowedPathsText(patch.allowedPathsText);
+            }
+            if (patch.forbiddenPathsText !== undefined) {
+                setForbiddenPathsText(patch.forbiddenPathsText);
+            }
+            if (patch.verifyCommandsText !== undefined) {
+                setVerifyCommandsText(patch.verifyCommandsText);
+            }
+        },
         workflowMeta,
         sessionId,
         question,

package/dist/worker/observability/read-model.js CHANGED Viewed

@@ -1488,6 +1488,7 @@ function mergeDagRun(existing, incoming) {
         executionMode: incoming.executionMode ?? existing.executionMode,
         liveness: incoming.liveness ?? existing.liveness,
         effectiveStatus: incoming.effectiveStatus ?? existing.effectiveStatus,
+        failureCategory: incoming.failureCategory ?? existing.failureCategory,
         stateConsistent: incoming.stateConsistent ?? existing.stateConsistent,
         recoveryEligibility: incoming.recoveryEligibility ?? existing.recoveryEligibility,
         title: incoming.title ?? existing.title,
@@ -1893,6 +1894,7 @@ async function parseDagStateFile(statePath, now) {
                     : {}),
             }
             : undefined;
+        const failureCategory = readString(parsed, "failureCategory");
         return {
             dagRunId,
             status,
@@ -1900,6 +1902,7 @@ async function parseDagStateFile(statePath, now) {
             ...(executionMode ? { executionMode } : {}),
             liveness: liveness.status,
             effectiveStatus,
+            ...(failureCategory ? { failureCategory } : {}),
             stateConsistent,
             ...(recoveryEligibility ? { recoveryEligibility } : {}),
             ...(title ? { title } : {}),

package/dist/workflows/dag/failure-category.js CHANGED Viewed

@@ -19,6 +19,9 @@ const RAW_TO_NORMALIZED = {
     success: "success",
     "write-guard": "write-guard",
     timeout: "timeout",
+    // Clean implementer stall with zero writes — still a timeout class for report,
+    // but retryable under WRITER_TRANSPORT_RETRY_POLICY.
+    "writer-clean-timeout": "timeout",
     "missing-api-key": "auth",
     auth: "auth",
     "human-rejected": "human-rejected",

package/dist/workflows/dag/init-hybrid.js CHANGED Viewed

@@ -9,7 +9,7 @@ import { planMavenVerification, } from "../../verification/maven/index.js";
 import { pathMatchesPattern } from "../../shared/git-progress.js";
 import { BASELINE_FORBIDDEN_PATHS } from "./governance-constants.js";
 import { buildDecisionEnvelopePromptContract } from "./decision-envelope.js";
-import { DEFAULT_READ_ONLY_PI_RETRY_POLICY, PROTOCOL_AWARE_PI_RETRY_POLICY, STRUCTURED_REQUIRED_PI_RETRY_POLICY, BACKEND_TEST_WRITER_COMPLETENESS_RETRY_POLICY, isSafeReadOnlyPiRetryCandidate, } from "./retry-policy.js";
+import { DEFAULT_READ_ONLY_PI_RETRY_POLICY, PROTOCOL_AWARE_PI_RETRY_POLICY, STRUCTURED_REQUIRED_PI_RETRY_POLICY, BACKEND_TEST_WRITER_COMPLETENESS_RETRY_POLICY, WRITER_TRANSPORT_RETRY_POLICY, isSafeReadOnlyPiRetryCandidate, isWriterTransportRetryCandidate, } from "./retry-policy.js";
 import { REVIEW_JSON_VERDICT_OUTPUT_PROTOCOL, REVIEW_VERDICT_OUTPUT_PROTOCOL, } from "./output-protocol.js";
 import { resolveAdapter } from "../../adapters/index.js";
 import { loadHarnessManifest } from "../../governance/harness.js";
@@ -4174,7 +4174,7 @@ function buildFrontendTestHybridDag(sources) {
                 commands: [
                     [
                         "node -e",
-                        JSON.stringify(`const fs=require('fs');const {spawnSync}=require('child_process');const p='testcase/frontend/rag/context.md';const probePath='testcase/frontend/rag/environment-probe.json';function writeProbe(obj){try{fs.mkdirSync('testcase/frontend/rag',{recursive:true});fs.writeFileSync(probePath,JSON.stringify(obj,null,2)+'\\n');let ctx=fs.existsSync(p)?fs.readFileSync(p,'utf8'):'';const line='environmentProbe: '+obj.status+(obj.blockedReason?(' ('+obj.blockedReason+')'):'');if(/environmentProbe\\s*[:=]/i.test(ctx)){ctx=ctx.replace(/environmentProbe\\s*[:=]\\s*.*/i,line);}else{ctx=ctx.trimEnd()+'\\n\\n'+line+'\\n';}fs.writeFileSync(p,ctx);}catch(e){console.error('probe-write-failed',e&&e.message||e);}}function redactUrl(u){try{const x=new URL(u);x.username='';x.password='';if(x.search){x.search='';}return x.toString();}catch(_){return String(u).replace(/\\/\\/[^@\\s]+@/g,'//');}}function failBlocked(reason,extra){const payload=Object.assign({status:'unreachable',blockedReason:reason,baseUrlRedacted:extra&&extra.baseUrlRedacted||null,httpStatus:extra&&extra.httpStatus||null,method:extra&&extra.method||null,curlExit:extra&&extra.curlExit||null,errorClass:extra&&extra.errorClass||null},extra||{});writeProbe(payload);console.error('frontend-test preflight blocked: '+JSON.stringify({blockedReason:reason,baseUrl:payload.baseUrlRedacted,httpStatus:payload.httpStatus,errorClass:payload.errorClass}));throw new Error('frontend-test preflight blocked: '+reason);}if(!fs.existsSync(p))throw new Error('missing '+p);const s=fs.readFileSync(p,'utf8');const patterns=[/baseUrl\\s*[:=]\\s*[\"'\\x60]?((?:https?):\\/\\/[^\\s\"'\\x60<>]+)/i,/base[-_ ]url\\s*[:=]\\s*[\"'\\x60]?((?:https?):\\/\\/[^\\s\"'\\x60<>]+)/i,/playwright-cli open --browser=chrome\\s+((?:https?):\\/\\/[^\\s\"'\\x60<>]+)/i,/(https?:\\/\\/(?:localhost|127\\.0\\.0\\.1)[^\\s)\\}\\],\"']*)/i];let baseUrl=null;for(const re of patterns){const m=s.match(re);if(m){baseUrl=m[1];break;}}if(!baseUrl)throw new Error('frontend-test preflight missing absolute baseUrl from context.md');baseUrl=baseUrl.replace(/[)\\}\\],.\"'\\x60]+$/,'');const sourceMatch=s.match(/baseUrlSource\\s*[:=]\\s*([^\\r\\n]+)/i);const baseUrlSource=sourceMatch?sourceMatch[1].trim():'context.md';let parsed;try{parsed=new URL(baseUrl);}catch(_){throw new Error('baseUrl must be absolute http(s): '+baseUrl);}if((parsed.protocol!=='http:'&&parsed.protocol!=='https:')||parsed.username||parsed.password||parsed.search||parsed.hash)throw new Error('unsafe baseUrl from context.md: '+redactUrl(baseUrl));if(/(?:^|\\.)(?:www\\.)?[^.]*(?:prod|production)/i.test(parsed.hostname))throw new Error('production URL forbidden: '+redactUrl(baseUrl));baseUrl=parsed.toString();const safe=redactUrl(baseUrl);const curlCheck=spawnSync('curl',['--version'],{encoding:'utf8'});if(curlCheck.error||curlCheck.status!==0){failBlocked('curl-unavailable',{baseUrlRedacted:safe,errorClass:'curl-missing'});}function probe(method){const args=['-sS','-o','/dev/null','-w','%{http_code}','--connect-timeout','3','--max-time','8','-X',method,'-L','--max-redirs','3','--http1.1','--proto-redir','=http,https',safe];const r=spawnSync('curl',args,{encoding:'utf8'});return r;}let used='HEAD';let r=probe('HEAD');let code=String(r.stdout||'').trim();let statusNum=parseInt(code,10);const headRejected=r.status!==0||!statusNum||statusNum===405||statusNum===501;if(headRejected){used='GET';r=probe('GET');code=String(r.stdout||'').trim();statusNum=parseInt(code,10);}const ok=statusNum>=200&&statusNum<400;if(!ok){const errClass=r.error?'spawn-error':(r.status!==0?'curl-exit-'+r.status:('http-'+statusNum));failBlocked('frontend-base-url-unreachable',{baseUrlRedacted:safe,httpStatus:statusNum||null,method:used,curlExit:r.status,errorClass:errClass});}writeProbe({status:'reachable',blockedReason:null,baseUrl:safe,baseUrlRedacted:safe,baseUrlSource,httpStatus:statusNum,method:used,curlExit:r.status});console.log('frontend-test-execution-v1 validated contextBaseUrl='+safe+' source='+baseUrlSource+' probe=reachable method='+used+' httpStatus='+statusNum);`),
+                        JSON.stringify(`const fs=require('fs');const {spawnSync}=require('child_process');const p='testcase/frontend/rag/context.md';const probePath='testcase/frontend/rag/environment-probe.json';function writeProbe(obj){try{fs.mkdirSync('testcase/frontend/rag',{recursive:true});fs.writeFileSync(probePath,JSON.stringify(obj,null,2)+'\\n');let ctx=fs.existsSync(p)?fs.readFileSync(p,'utf8'):'';const line='environmentProbe: '+obj.status+(obj.blockedReason?(' ('+obj.blockedReason+')'):'');if(/environmentProbe\\s*[:=]/i.test(ctx)){ctx=ctx.replace(/environmentProbe\\s*[:=]\\s*.*/i,line);}else{ctx=ctx.trimEnd()+'\\n\\n'+line+'\\n';}fs.writeFileSync(p,ctx);}catch(e){console.error('probe-write-failed',e&&e.message||e);}}function redactUrl(u){try{const x=new URL(u);x.username='';x.password='';if(x.search){x.search='';}return x.toString();}catch(_){return String(u).replace(/\\/\\/[^@\\s]+@/g,'//');}}function failBlocked(reason,extra){const payload=Object.assign({status:'unreachable',blockedReason:reason,baseUrlRedacted:extra&&extra.baseUrlRedacted||null,httpStatus:extra&&extra.httpStatus||null,method:extra&&extra.method||null,curlExit:extra&&extra.curlExit||null,errorClass:extra&&extra.errorClass||null},extra||{});writeProbe(payload);console.error('frontend-test preflight blocked: '+JSON.stringify({blockedReason:reason,baseUrl:payload.baseUrlRedacted,httpStatus:payload.httpStatus,errorClass:payload.errorClass}));throw new Error('frontend-test preflight blocked: '+reason);}if(!fs.existsSync(p))throw new Error('missing '+p);const s=fs.readFileSync(p,'utf8');const patterns=[/baseUrl\\s*[:=]\\s*["'\\x60]?((?:https?):\\/\\/[^\\s"'\\x60<>]+)/i,/base[-_ ]url\\s*[:=]\\s*["'\\x60]?((?:https?):\\/\\/[^\\s"'\\x60<>]+)/i,/playwright-cli open --browser=chrome\\s+((?:https?):\\/\\/[^\\s"'\\x60<>]+)/i,/(https?:\\/\\/(?:localhost|127\\.0\\.0\\.1)[^\\s)\\}\\],"']*)/i];let baseUrl=null;for(const re of patterns){const m=s.match(re);if(m){baseUrl=m[1];break;}}if(!baseUrl)throw new Error('frontend-test preflight missing absolute baseUrl from context.md');baseUrl=baseUrl.replace(/[)\\}\\],."'\\x60]+$/,'');const sourceMatch=s.match(/baseUrlSource\\s*[:=]\\s*([^\\r\\n]+)/i);const baseUrlSource=sourceMatch?sourceMatch[1].trim():'context.md';let parsed;try{parsed=new URL(baseUrl);}catch(_){throw new Error('baseUrl must be absolute http(s): '+baseUrl);}if((parsed.protocol!=='http:'&&parsed.protocol!=='https:')||parsed.username||parsed.password||parsed.search||parsed.hash)throw new Error('unsafe baseUrl from context.md: '+redactUrl(baseUrl));if(/(?:^|\\.)(?:www\\.)?[^.]*(?:prod|production)/i.test(parsed.hostname))throw new Error('production URL forbidden: '+redactUrl(baseUrl));baseUrl=parsed.toString();const safe=redactUrl(baseUrl);const curlCheck=spawnSync('curl',['--version'],{encoding:'utf8'});if(curlCheck.error||curlCheck.status!==0){failBlocked('curl-unavailable',{baseUrlRedacted:safe,errorClass:'curl-missing'});}function probe(method){const args=['-sS','-o','/dev/null','-w','%{http_code}','--connect-timeout','3','--max-time','8','-X',method,'-L','--max-redirs','3','--http1.1','--proto-redir','=http,https',safe];const r=spawnSync('curl',args,{encoding:'utf8'});return r;}let used='HEAD';let r=probe('HEAD');let code=String(r.stdout||'').trim();let statusNum=parseInt(code,10);const headRejected=r.status!==0||!statusNum||statusNum===405||statusNum===501;if(headRejected){used='GET';r=probe('GET');code=String(r.stdout||'').trim();statusNum=parseInt(code,10);}const ok=statusNum>=200&&statusNum<400;if(!ok){const errClass=r.error?'spawn-error':(r.status!==0?'curl-exit-'+r.status:('http-'+statusNum));failBlocked('frontend-base-url-unreachable',{baseUrlRedacted:safe,httpStatus:statusNum||null,method:used,curlExit:r.status,errorClass:errClass});}writeProbe({status:'reachable',blockedReason:null,baseUrl:safe,baseUrlRedacted:safe,baseUrlSource,httpStatus:statusNum,method:used,curlExit:r.status});console.log('frontend-test-execution-v1 validated contextBaseUrl='+safe+' source='+baseUrlSource+' probe=reachable method='+used+' httpStatus='+statusNum);`),
                     ].join(" "),
                 ],
                 cwd: ".",
@@ -5654,20 +5654,26 @@ function cloneTask(task, patch = {}) {
     return { ...task, ...patch };
 }
 /**
- * Apply the default read-only Pi retry policy to safe planner/scout/reviewer/
- * verifier/supervisor/closeout Pi nodes in the generated DAG. Writers,
- * dynamic, shell, static, and decision-gate nodes are skipped. Idempotent:
+ * Apply default Pi retry policies to generated DAG nodes:
+ * - safe read-only planner/scout/reviewer/verifier/supervisor/closeout
+ * - exclusive implementers get a single clean-timeout transport retry
+ *   (provider stall with zero attributed writes only)
+ * Dynamic, shell, static, and decision-gate nodes are skipped. Idempotent:
  * never overwrites an explicit retryPolicy a task already declares.
  */
 function applyDefaultReadOnlyRetryPolicy(spec) {
     for (const task of spec.tasks) {
         if (task.retryPolicy !== undefined)
             continue;
-        if (!isSafeReadOnlyPiRetryCandidate(task))
+        if (isSafeReadOnlyPiRetryCandidate(task)) {
+            task.retryPolicy = task.outputProtocol
+                ? PROTOCOL_AWARE_PI_RETRY_POLICY
+                : DEFAULT_READ_ONLY_PI_RETRY_POLICY;
             continue;
-        task.retryPolicy = task.outputProtocol
-            ? PROTOCOL_AWARE_PI_RETRY_POLICY
-            : DEFAULT_READ_ONLY_PI_RETRY_POLICY;
+        }
+        if (isWriterTransportRetryCandidate(task)) {
+            task.retryPolicy = WRITER_TRANSPORT_RETRY_POLICY;
+        }
     }
 }
 function getTaskOrThrow(spec, id) {

package/dist/workflows/dag/node-execution.js CHANGED Viewed

@@ -9,7 +9,7 @@ import { resolveContextPolicy } from "./context-policy.js";
 import { buildDagNodePromptEnvelope, formatConvergenceFeedbackBlock, } from "./prompt.js";
 import { persistLongNodeOutputArtifacts } from "./upstream-artifacts.js";
 import { buildOutputLimitRecoverySection, loadBackendTestWriterProgressForRetry, } from "./backend-test-writer-completeness.js";
-import { computeBackoffDelayMs, isRetryablePiFailureCategory, isSafeReadOnlyPiRetryCandidate, isWriterEmptyDiffRetryCandidate, } from "./retry-policy.js";
+import { computeBackoffDelayMs, isRetryablePiFailureCategory, isSafeReadOnlyPiRetryCandidate, isWriterEmptyDiffRetryCandidate, isWriterTransportRetryCandidate, } from "./retry-policy.js";
 import { applyNodeActivity, evaluateNodeLiveness, resolveLivenessPolicy, } from "./liveness-policy.js";
 import { buildProtocolRetryInstruction, normalizeReviewVerdictAfterRetries, parseJsonReviewVerdict, validateOutputProtocol, } from "./output-protocol.js";
 import { writeDagNodeJsonArtifact } from "../../infrastructure/harness/artifact-store.js";
@@ -577,7 +577,8 @@ export async function executeDagNode(input) {
     }
     const retryPolicy = task.retryPolicy &&
         (isSafeReadOnlyPiRetryCandidate(task) ||
-            isWriterEmptyDiffRetryCandidate(task))
+            isWriterEmptyDiffRetryCandidate(task) ||
+            isWriterTransportRetryCandidate(task))
         ? task.retryPolicy
         : undefined;
     const maxAttempts = retryPolicy?.maxAttempts ?? 1;

package/dist/workflows/dag/retry-policy.js CHANGED Viewed

@@ -25,6 +25,13 @@ export const STRUCTURED_ARTIFACT_INVALID_RETRY_CATEGORY = "invalid-output";
 export const WRITER_EMPTY_DIFF_RETRY_CATEGORY = "writer-empty-diff";
 /** Retry when a backend-test writer finished but Completeness Gate found missing/broken targets. */
 export const INCOMPLETE_WRITE_SET_RETRY_CATEGORY = "incomplete-write-set";
+/**
+ * Provider/transport stall or absolute timeout on a Pi exclusive writer that
+ * left zero attributed workspace writes and zero write-tool calls. Safe to
+ * retry once because the attempt was a pure provider flake (no side effects).
+ * Partial writes keep the original `timeout` category and do NOT retry.
+ */
+export const WRITER_CLEAN_TIMEOUT_RETRY_CATEGORY = "writer-clean-timeout";
 export const STRUCTURED_REQUIRED_DAG_RETRY_CATEGORIES = [
     ...DEFAULT_DAG_RETRY_CATEGORIES,
     STRUCTURED_OUTPUT_RETRY_CATEGORY,
@@ -43,6 +50,7 @@ export const ALL_DAG_RETRY_CATEGORIES = [
     STRUCTURED_ARTIFACT_INVALID_RETRY_CATEGORY,
     WRITER_EMPTY_DIFF_RETRY_CATEGORY,
     INCOMPLETE_WRITE_SET_RETRY_CATEGORY,
+    WRITER_CLEAN_TIMEOUT_RETRY_CATEGORY,
 ];
 const RETRY_SAFE_PI_ROLES = new Set([
     "planner",
@@ -119,9 +127,9 @@ export const PROTOCOL_AWARE_PI_RETRY_POLICY = {
     retryCategories: [...PROTOCOL_AWARE_DAG_RETRY_CATEGORIES],
 };
 /**
- * The sole writer retry policy. It is intentionally not included in any
- * read-only default: a writer may retry only after its executor proves an
- * otherwise successful attempt changed no files.
+ * The sole writer retry policy for requireChangedFiles writers. It is
+ * intentionally not included in any read-only default: a writer may retry only
+ * after its executor proves an otherwise successful attempt changed no files.
  */
 export const WRITER_EMPTY_DIFF_RETRY_POLICY = {
     maxAttempts: 2,
@@ -130,6 +138,18 @@ export const WRITER_EMPTY_DIFF_RETRY_POLICY = {
     maxDelayMs: 30000,
     retryCategories: [WRITER_EMPTY_DIFF_RETRY_CATEGORY],
 };
+/**
+ * Bounded transport retry for standard exclusive implementers when a provider
+ * stall/timeout left no workspace writes. maxAttempts=2 (one retry). Never
+ * retries timeout with partial writes (those stay non-retryable `timeout`).
+ */
+export const WRITER_TRANSPORT_RETRY_POLICY = {
+    maxAttempts: 2,
+    backoff: "exponential",
+    initialDelayMs: 5000,
+    maxDelayMs: 30000,
+    retryCategories: [WRITER_CLEAN_TIMEOUT_RETRY_CATEGORY],
+};
 /**
  * Backend-test generation writers: empty-diff once, plus bounded incomplete-write-set
  * recovery attempts driven by Completeness Gate (missing/broken target files).
@@ -154,24 +174,37 @@ export function isRetryablePiFailureCategory(rawFailureCategory, options = {}) {
     const categories = options.retryCategories ?? DEFAULT_DAG_RETRY_CATEGORIES;
     return categories.includes(rawFailureCategory);
 }
-/**
- * Static eligibility for the sole retryable writer class. This deliberately
- * does not infer a no-op: the Pi executor assigns writer-empty-diff only after
- * post-write-guard attribution proves an empty changedFiles list.
- */
-export function isWriterEmptyDiffRetryCandidate(task) {
+function isExclusivePiImplementer(task) {
     return (task.executor === "pi" &&
         task.role === "implementer" &&
         task.toolProfile === "write" &&
         task.writePolicy === "exclusive" &&
         (task.writeSet?.length ?? 0) > 0 &&
-        task.writerOutcomePolicy?.requireChangedFiles === true &&
         !task.decisionGate?.enabled &&
         !task.dynamicExpansion &&
         !task.dynamicReduction &&
         !task.dynamicCondition &&
         !task.dynamicLoopUntil);
 }
+/**
+ * Static eligibility for the requireChangedFiles writer-empty-diff class.
+ * The Pi executor assigns writer-empty-diff only after post-write-guard
+ * attribution proves an empty changedFiles list.
+ */
+export function isWriterEmptyDiffRetryCandidate(task) {
+    return (isExclusivePiImplementer(task) &&
+        task.writerOutcomePolicy?.requireChangedFiles === true);
+}
+/**
+ * Standard exclusive implementers (implementation-outcome writers) may take a
+ * single clean-timeout transport retry. Backend completeness writers already
+ * have their own policy and are excluded here.
+ */
+export function isWriterTransportRetryCandidate(task) {
+    return (isExclusivePiImplementer(task) &&
+        task.writerOutcomePolicy?.type === "implementation-outcome-v1" &&
+        task.writerOutcomePolicy.requireChangedFiles !== true);
+}
 export function isSafeReadOnlyPiRetryCandidate(task) {
     if (task.executor !== "pi")
         return false;
@@ -210,6 +243,6 @@ export function computeBackoffDelayMs(attemptNumber, policy) {
         return Math.min(policy.initialDelayMs, policy.maxDelayMs);
     }
     const exponent = attemptNumber - 2;
-    const raw = policy.initialDelayMs * Math.pow(2, exponent);
+    const raw = policy.initialDelayMs * 2 ** exponent;
     return Math.min(raw, policy.maxDelayMs);
 }

package/dist/workflows/dag/runner.js CHANGED Viewed

@@ -278,6 +278,7 @@ export async function runDag(spec, opts) {
             maxConcurrent,
             executeNode: opts.executeNode,
             observer: opts.observer,
+            abortSignal: opts.abortSignal,
             activeRunDir,
             completedRunDir,
             pausedRunDir,
@@ -309,6 +310,7 @@ export async function runDagContinuation(opts) {
         maxConcurrent,
         executeNode: opts.executeNode,
         observer: opts.observer,
+        abortSignal: opts.abortSignal,
         activeRunDir,
         completedRunDir,
         pausedRunDir,
@@ -403,6 +405,7 @@ export async function resumeDagRun(opts) {
             maxConcurrent,
             executeNode: opts.executeNode,
             observer: opts.observer,
+            // Resume path intentionally has no abortSignal field on ResumeDagRunOptions yet.
             activeRunDir,
             completedRunDir,
             pausedRunDir,
@@ -501,6 +504,7 @@ async function executeDagCheckpoint(input) {
             tasksById,
             maxConcurrent,
             persistState,
+            abortSignal: input.abortSignal,
             createExecuteNodeForRank: (rankWriterNodeIds) => buildRankAwareExecuteNode({
                 baseExecuteNode,
                 customExecuteNode: input.executeNode,
@@ -509,6 +513,8 @@ async function executeDagCheckpoint(input) {
                 meta: { runDir, runId: state.runId, spec },
             }),
             executeScheduledNode: async (nodeId, executeNode, onPause) => {
+                if (input.abortSignal?.aborted)
+                    return;
                 if (isHardBudgetBreached(state.budgetLedger))
                     return;
                 const preBreach = preflightBudgetOrBreach(state);

package/dist/workflows/dag/scheduler.js CHANGED Viewed

@@ -104,9 +104,35 @@ async function mapConcurrent(items, limit, fn) {
     }
     await Promise.all(executing);
 }
+/** Fail-closed: leave no PENDING nodes that look "still scheduled" after abort. */
+export function markPendingNodesControllerInterrupted(state, reason = "run aborted by controller (abortSignal)") {
+    const affected = [];
+    const finishedAt = new Date().toISOString();
+    for (const [nodeId, node] of Object.entries(state.nodes)) {
+        if (node.status !== "PENDING")
+            continue;
+        node.status = "ERROR";
+        node.failureCategory = "controller-interrupted";
+        node.stderr = reason;
+        node.finishedAt = finishedAt;
+        affected.push(nodeId);
+    }
+    if (affected.length > 0 && !state.failureCategory) {
+        state.failureCategory = "controller-interrupted";
+    }
+    return affected;
+}
 export async function executeDagRanksOnce(input) {
     let pausedByNodeId;
     for (const rank of input.ranks) {
+        if (input.abortSignal?.aborted) {
+            const marked = markPendingNodesControllerInterrupted(input.state, input.abortSignal.reason
+                ? `run aborted by controller: ${String(input.abortSignal.reason)}`
+                : undefined);
+            if (marked.length > 0)
+                await input.persistState();
+            break;
+        }
         const pending = rank.filter((id) => {
             const node = input.state.nodes[id];
             return node?.status === "PENDING";
@@ -169,6 +195,12 @@ export async function executeDagRanksOnce(input) {
         });
         const executeNode = input.createExecuteNodeForRank(rankWriterNodeIds);
         for (const nodeId of pauseGateRunnable) {
+            if (input.abortSignal?.aborted) {
+                const marked = markPendingNodesControllerInterrupted(input.state);
+                if (marked.length > 0)
+                    await input.persistState();
+                break;
+            }
             await input.executeScheduledNode(nodeId, executeNode, (id, pausedAt, pauseReason) => {
                 pausedByNodeId = id;
                 input.state.pausedAt = pausedAt;
@@ -178,9 +210,19 @@ export async function executeDagRanksOnce(input) {
             if (pausedByNodeId)
                 break;
         }
-        if (pausedByNodeId)
+        if (pausedByNodeId || input.abortSignal?.aborted) {
+            if (input.abortSignal?.aborted && !pausedByNodeId) {
+                const marked = markPendingNodesControllerInterrupted(input.state);
+                if (marked.length > 0)
+                    await input.persistState();
+            }
             break;
+        }
         await mapConcurrent(regularRunnable, input.maxConcurrent, async (nodeId) => {
+            if (input.abortSignal?.aborted) {
+                // Sibling may still be PENDING; outer loop finalizes remaining.
+                return;
+            }
             await input.executeScheduledNode(nodeId, executeNode, (id, pausedAt, pauseReason) => {
                 pausedByNodeId = id;
                 input.state.pausedAt = pausedAt;
@@ -190,6 +232,12 @@ export async function executeDagRanksOnce(input) {
         });
         if (pausedByNodeId)
             break;
+        if (input.abortSignal?.aborted) {
+            const marked = markPendingNodesControllerInterrupted(input.state);
+            if (marked.length > 0)
+                await input.persistState();
+            break;
+        }
     }
     return pausedByNodeId;
 }

package/dist/workflows/dag/validate.js CHANGED Viewed

@@ -3,7 +3,7 @@ import { resolveShellCommands } from "../../executors/shell-executor.js";
 import { pathMatchesPattern } from "../../shared/git-progress.js";
 import { resolveRepairTaskForGate } from "./repair-artifact.js";
 import { topoSortToRanks } from "./topo.js";
-import { isSafeReadOnlyPiRetryCandidate, isWriterEmptyDiffRetryCandidate, INCOMPLETE_WRITE_SET_RETRY_CATEGORY, WRITER_EMPTY_DIFF_RETRY_CATEGORY, } from "./retry-policy.js";
+import { isSafeReadOnlyPiRetryCandidate, isWriterEmptyDiffRetryCandidate, isWriterTransportRetryCandidate, INCOMPLETE_WRITE_SET_RETRY_CATEGORY, WRITER_CLEAN_TIMEOUT_RETRY_CATEGORY, WRITER_EMPTY_DIFF_RETRY_CATEGORY, } from "./retry-policy.js";
 import { isBackendTestCompletenessRetryCandidate } from "./backend-test-writer-completeness.js";
 const GOVERNANCE_WARNING_TYPES = new Set([
     "read-only-missing-artifacts-forbidden",
@@ -598,13 +598,15 @@ function validateRetryPolicyTaskConfig(task, issues) {
         return;
     const isReadOnlyCandidate = isSafeReadOnlyPiRetryCandidate(task);
     const isWriterEmptyDiffCandidate = isWriterEmptyDiffRetryCandidate(task);
+    const isWriterTransportCandidate = isWriterTransportRetryCandidate(task);
     const isBackendCompletenessCandidate = isBackendTestCompletenessRetryCandidate(task);
     if (!isReadOnlyCandidate &&
         !isWriterEmptyDiffCandidate &&
+        !isWriterTransportCandidate &&
         !isBackendCompletenessCandidate) {
         issues.push({
             type: "invalid-retry-policy",
-            message: `task ${task.id} declares retryPolicy but is neither a safe read-only non-dynamic Pi node nor an exclusive bounded Pi implementer with writerOutcomePolicy.requireChangedFiles=true`,
+            message: `task ${task.id} declares retryPolicy but is neither a safe read-only non-dynamic Pi node, an exclusive bounded Pi implementer with writerOutcomePolicy.requireChangedFiles=true, nor a standard exclusive implementer transport-retry candidate`,
         });
         return;
     }
@@ -635,6 +637,18 @@ function validateRetryPolicyTaskConfig(task, issues) {
             type: "invalid-retry-policy",
             message: `task ${task.id} writer retryPolicy must use exactly two total attempts and only ${WRITER_EMPTY_DIFF_RETRY_CATEGORY}`,
         });
+        return;
+    }
+    if (isWriterTransportCandidate) {
+        const categories = new Set(task.retryPolicy.retryCategories);
+        if (task.retryPolicy.maxAttempts !== 2 ||
+            categories.size !== 1 ||
+            !categories.has(WRITER_CLEAN_TIMEOUT_RETRY_CATEGORY)) {
+            issues.push({
+                type: "invalid-retry-policy",
+                message: `task ${task.id} writer transport retryPolicy must use exactly two total attempts and only ${WRITER_CLEAN_TIMEOUT_RETRY_CATEGORY}`,
+            });
+        }
     }
 }
 function validateOutputProtocolTaskConfig(task, issues) {