@tea-agent/loop-agent 0.39.0-beta.0 → 0.39.0-beta.10

package/dist/{cli → shared}/update/npm-client.js

@@ -3,43 +3,77 @@ import { lstat, readFile, realpath } from "node:fs/promises";
 import path from "node:path";
 import semver from "semver";
 const PACKAGE_NAME = "@tea-agent/loop-agent";
+export const DEFAULT_NPM_QUERY_TIMEOUT_MS = 15_000;
 export function createNpmUpdateClient(options) {
     const npmCommand = options.npmCommand ?? "npm";
     const loopAgentCommand = options.loopAgentCommand ?? "loop-agent";
     const runner = options.runner ?? runCommand;
-    const timeoutMs = options.timeoutMs ?? 1500;
+    const timeoutMs = options.timeoutMs ?? DEFAULT_NPM_QUERY_TIMEOUT_MS;
+    const cwd = options.cwd;
     const env = options.env;
+    const distTagVersionCheck = async (channel) => {
+        let result;
+        try {
+            result = await runner(npmCommand, ["view", PACKAGE_NAME, `dist-tags.${channel}`, "--json"], { timeoutMs, cwd, env });
+        }
+        catch {
+            return { ok: false, reason: "spawn-failure" };
+        }
+        if (result.timedOut)
+            return { ok: false, reason: "timeout" };
+        if (result.exitCode === null) {
+            return { ok: false, reason: "spawn-failure" };
+        }
+        if (result.exitCode !== 0) {
+            return { ok: false, reason: "command-failed" };
+        }
+        const version = parseNpmViewDistTag(result.stdout, channel);
+        return version
+            ? { ok: true, version }
+            : { ok: false, reason: "invalid-response" };
+    };
+    const latestVersionCheck = () => distTagVersionCheck("latest");
     return {
         async latestVersion() {
-            const result = await runner(npmCommand, ["view", PACKAGE_NAME, "dist-tags.latest", "--json"], { timeoutMs, env });
-            if (result.exitCode !== 0 || result.timedOut)
-                return undefined;
-            return parseNpmViewLatest(result.stdout);
+            const result = await latestVersionCheck();
+            return result.ok ? result.version : undefined;
         },
+        latestVersionCheck,
+        distTagVersionCheck,
         async canAutoInstall() {
             return proveGlobalNpmInstall({
                 currentVersion: options.currentVersion,
                 packageRoot: options.packageRoot,
                 npmCommand,
                 runner,
+                cwd,
                 env,
                 timeoutMs,
             });
         },
-        async installExact(version) {
-            if (!isStrictRelease(version))
+        async installExact(version, channel = "latest") {
+            if (!isAllowedChannelVersion(version, channel)) {
                 return { ok: false, reason: "invalid-version" };
-            const result = await runner(npmCommand, buildExactInstallArgs(version), { timeoutMs: Math.max(timeoutMs, 120000), env });
+            }
+            const result = await runner(npmCommand, buildExactInstallArgs(version, channel), {
+                timeoutMs: Math.max(timeoutMs, 120000),
+                cwd,
+                env,
+            });
             if (result.exitCode !== 0 || result.timedOut)
                 return { ok: false, reason: "install-failed" };
             return { ok: true };
         },
         async verifyInstalled(version) {
-            const list = await runner(npmCommand, ["list", "-g", PACKAGE_NAME, "--depth=0", "--json"], { timeoutMs, env });
+            const list = await runner(npmCommand, ["list", "-g", PACKAGE_NAME, "--depth=0", "--json"], { timeoutMs, cwd, env });
             if (list.exitCode !== 0 || !verifyNpmListVersion(list.stdout, version)) {
                 return { ok: false, reason: "npm-list-version-mismatch" };
             }
-            const pathVersion = await runner(loopAgentCommand, ["--version"], { timeoutMs, env });
+            const pathVersion = await runner(loopAgentCommand, ["--version"], {
+                timeoutMs,
+                cwd,
+                env,
+            });
             if (pathVersion.exitCode !== 0 || !verifyPathVersion(pathVersion.stdout, version)) {
                 return { ok: false, reason: "path-version-mismatch" };
             }
@@ -48,6 +82,13 @@ export function createNpmUpdateClient(options) {
     };
 }
 export function parseNpmViewLatest(stdout) {
+    return parseNpmViewDistTag(stdout, "latest");
+}
+/**
+ * `latest` stays stable-only. `next` is explicitly selected by a human and
+ * may legitimately be a SemVer prerelease, but remains an exact version.
+ */
+export function parseNpmViewDistTag(stdout, channel) {
     const trimmed = stdout.trim();
     let value = trimmed;
     try {
@@ -58,11 +99,12 @@ export function parseNpmViewLatest(stdout) {
     }
     if (typeof value !== "string")
         return undefined;
-    return isStrictRelease(value) ? value : undefined;
+    return isAllowedChannelVersion(value, channel) ? value : undefined;
 }
-export function buildExactInstallArgs(version) {
-    if (!isStrictRelease(version))
-        throw new Error(`invalid release version: ${version}`);
+export function buildExactInstallArgs(version, channel = "latest") {
+    if (!isAllowedChannelVersion(version, channel)) {
+        throw new Error(`invalid ${channel} version: ${version}`);
+    }
     return ["install", "-g", `${PACKAGE_NAME}@${version}`, "--no-fund", "--no-audit"];
 }
 export function verifyNpmListVersion(stdout, expectedVersion) {
@@ -75,11 +117,18 @@ export function verifyNpmListVersion(stdout, expectedVersion) {
     }
 }
 export function verifyPathVersion(stdout, expectedVersion) {
-    return stdout.trim() === expectedVersion;
+    // `loop-agent --version` may append a build provenance marker. The release
+    // version itself must still match exactly; accepting no other trailing form
+    // keeps PATH verification bound to the requested stable package.
+    return new RegExp(`^${escapeRegExp(expectedVersion)}(?: \\(build [^)]+\\))?$`).test(stdout.trim());
+}
+function escapeRegExp(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 async function proveGlobalNpmInstall(options) {
     const root = await options.runner(options.npmCommand, ["root", "-g"], {
         timeoutMs: options.timeoutMs,
+        cwd: options.cwd,
         env: options.env,
     });
     if (root.exitCode !== 0 || root.timedOut)
@@ -110,9 +159,15 @@ function isStrictRelease(version) {
     const parsed = semver.parse(version);
     return Boolean(parsed && parsed.prerelease.length === 0);
 }
+function isAllowedChannelVersion(version, channel) {
+    if (channel === "latest")
+        return isStrictRelease(version);
+    return Boolean(semver.valid(version));
+}
 async function runCommand(command, args, options) {
     return new Promise((resolve) => {
         const child = spawn(command, [...args], {
+            cwd: options.cwd,
             env: options.env ? { ...process.env, ...options.env } : process.env,
             stdio: ["ignore", "pipe", "pipe"],
             shell: false,

package/dist/{cli → shared}/update/state.js

@@ -1,4 +1,4 @@
-import { mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { mkdir, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
 import path from "node:path";
 export function updateStatePath(homeDir) {
     return path.join(homeDir, ".loop-agent", "update-state.json");
@@ -18,6 +18,7 @@ export async function readUpdateState(statePath) {
             latestVersion: stringOrUndefined(parsed.latestVersion),
             dismissedVersion: stringOrUndefined(parsed.dismissedVersion),
             retryAfter: stringOrUndefined(parsed.retryAfter),
+            lastPromptedLocalDate: stringOrUndefined(parsed.lastPromptedLocalDate),
         };
     }
     catch {
@@ -36,28 +37,55 @@ export async function acquireUpdateLock(lockPath, options = {}) {
     await mkdir(path.dirname(lockPath), { recursive: true });
     try {
         await mkdir(lockPath);
+        return await claimLock(lockPath, now);
+    }
+    catch {
+        if (await isFreshLock(lockPath, now, staleMs))
+            return undefined;
+        try {
+            await rm(lockPath, { recursive: true, force: true });
+            await mkdir(lockPath);
+            return await claimLock(lockPath, now);
+        }
+        catch {
+            return undefined;
+        }
+    }
+}
+async function claimLock(lockPath, now) {
+    try {
         await writeFile(path.join(lockPath, "owner.json"), JSON.stringify({ pid: process.pid, at: now().toISOString() }), "utf-8");
         return async () => {
             await rm(lockPath, { recursive: true, force: true });
         };
     }
+    catch {
+        await rm(lockPath, { recursive: true, force: true }).catch(() => undefined);
+        return undefined;
+    }
+}
+async function isFreshLock(lockPath, now, staleMs) {
+    try {
+        const ownerRaw = await readFile(path.join(lockPath, "owner.json"), "utf-8");
+        const owner = JSON.parse(ownerRaw);
+        if (typeof owner.at !== "string")
+            return false;
+        const at = Date.parse(owner.at);
+        if (!Number.isFinite(at))
+            return false;
+        return now().getTime() - at <= staleMs;
+    }
     catch {
         try {
-            const ownerRaw = await readFile(path.join(lockPath, "owner.json"), "utf-8");
-            const owner = JSON.parse(ownerRaw);
-            if (owner.at && now().getTime() - Date.parse(owner.at) > staleMs) {
-                await rm(lockPath, { recursive: true, force: true });
-                await mkdir(lockPath);
-                await writeFile(path.join(lockPath, "owner.json"), JSON.stringify({ pid: process.pid, at: now().toISOString() }), "utf-8");
-                return async () => {
-                    await rm(lockPath, { recursive: true, force: true });
-                };
-            }
+            const info = await stat(lockPath);
+            const mtime = Number.isFinite(info.mtimeMs)
+                ? info.mtimeMs
+                : info.mtime.getTime();
+            return now().getTime() - mtime <= staleMs;
         }
         catch {
-            return undefined;
+            return false;
         }
-        return undefined;
     }
 }
 function emptyState() {

package/dist/task/config-types.js

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import { isOpenspecSpecFilePath } from "../shared/openspec-spec.js";
+import { DEFAULT_FRONTEND_SPEC_ROOTS, isFrontendSpecFilePath, isValidFrontendSpecRoot, } from "../shared/openspec-spec.js";
 export const taskFlowSchema = z.enum([
     "auto",
     "micro",
@@ -76,17 +76,37 @@ export const frontendOpenspecPolicySchema = z.enum(["cited", "scan-strict"]);
  */
 export const frontendOpenspecConfigSchema = z.object({
     policy: frontendOpenspecPolicySchema.optional().default("cited"),
+    /**
+     * Repo-relative directories containing frontend normative files. These are
+     * frozen in task.json during contract preparation, before DAG generation.
+     */
+    specRoots: z
+        .array(z.string().refine((candidate) => isValidFrontendSpecRoot(candidate), "frontendOpenspec.specRoots entries must be normalized repo-relative directories"))
+        .optional(),
     requiredReadPaths: z
-        .array(z
-        .string()
-        .refine((candidate) => !candidate.includes("\\") &&
-        isOpenspecSpecFilePath(candidate), "frontendOpenspec.requiredReadPaths entries must be repo-relative supported files under openspec/schemas/, openspec/project-specs/, or ai_workspace/"))
+        .array(z.string())
         .optional()
         .default([]),
+}).superRefine((value, ctx) => {
+    const roots = value.specRoots ?? DEFAULT_FRONTEND_SPEC_ROOTS;
+    if (new Set(roots).size !== roots.length) {
+        ctx.addIssue({ code: z.ZodIssueCode.custom, message: "frontendOpenspec.specRoots must not contain duplicates", path: ["specRoots"] });
+    }
+    for (const required of value.requiredReadPaths) {
+        if (!isFrontendSpecFilePath(required, roots)) {
+            ctx.addIssue({ code: z.ZodIssueCode.custom, message: "frontendOpenspec.requiredReadPaths entries must be repo-relative supported files under frontendOpenspec.specRoots", path: ["requiredReadPaths"] });
+        }
+    }
 });
 /** Batch limits and gate profile for the browser-driven frontend test DAG.
  * Token fields are post-case stop thresholds, not model-provider hard caps. */
 export const frontendTestConfigSchema = z.object({
+    /**
+     * Repository-relative frontend-test artifact root.
+     * Default "testcase/frontend". Semantic validation lives in
+     * resolveFrontendTestLayout (fail-closed), not in this schema.
+     */
+    testRoot: z.string().min(1).optional(),
     maxCasesPerBatch: z.number().int().min(1).max(50).optional(),
     maxTokensPerCase: z.number().int().positive().optional(),
     maxTotalTokens: z.number().int().positive().optional(),
@@ -141,6 +161,8 @@ export const backendTestConfigSchema = z
     gapDoc: z.string().min(1).optional(),
     /** gap-fill pytest execution scope: only affected items (default) or all eligible. */
     executeScope: z.enum(["affected", "all"]).optional(),
+    /** Backend-test-only workspace mutation control; omitted means Git guard. */
+    workspaceControl: z.enum(["git", "filesystem-only"]).optional(),
 })
     .strict()
     .optional();
@@ -199,6 +221,21 @@ const taskConfigObjectSchema = z.object({
     maxFixLoops: z.number().int().min(0).optional().default(2),
     /** Supervised DAG convergence is opt-in until runtime smoke evidence is stronger. */
     convergence: convergenceConfigSchema.optional().default({ enabled: false }),
+    /** Frontend recovery continuation quota. Bounds how many times a failed
+     * frontend run may auto-recover via M6 recovery operations (1 = current
+     * default; raise to 2-3 for more tolerance of transient verify failures). */
+    frontendRecovery: z
+        .object({
+        maxContinuations: z
+            .number()
+            .int()
+            .min(1)
+            .max(5)
+            .optional()
+            .default(1),
+    })
+        .strict()
+        .optional(),
     /** Outer loop auto mode never writes by default; DAG execute requires this policy plus path/writeSet gates. */
     loopAutoExecutionPolicy: loopAutoExecutionPolicySchema
         .optional()
@@ -231,5 +268,13 @@ export const taskConfigSchema = z.preprocess((raw) => {
     if ("executor" in obj || "cursorModel" in obj) {
         throw new Error(CURSOR_TASK_FIELD_REMOVED_ERROR);
     }
+    const backendTest = obj.backendTest;
+    if (backendTest &&
+        typeof backendTest === "object" &&
+        !Array.isArray(backendTest) &&
+        "workspaceControl" in backendTest &&
+        obj.taskKind !== "backend-test") {
+        throw new Error("backendTest.workspaceControl is only valid when taskKind is backend-test");
+    }
     return raw;
 }, taskConfigObjectSchema);

package/dist/task/contract/apply.js

@@ -232,8 +232,11 @@ export async function applyTaskContract(input) {
         // Re-parse through schema to ensure full TaskConfig shape for hash stability
         const fullConfig = parseTaskConfigForRuntime(mergedConfig);
         const taskConfigContent = serializeTaskConfigForDisk(fullConfig);
-        const requirementContent = projectRequirementMarkdown(input.draft);
+        const requirementContent = projectRequirementMarkdown(input.draft, input.requirementLedger);
         const constraintsContent = projectConstraintsMarkdown(input.draft);
+        const requirementLedgerContent = input.requirementLedger !== undefined
+            ? `${JSON.stringify(input.requirementLedger, null, 2)}\n`
+            : undefined;
         // Validate references manifest hash if present (do not modify)
         const paths = getTaskPaths(input.repoRoot, input.taskId);
         const manifestText = await readFile(getSourceManifestPath(paths.sourceDir), "utf-8").catch(() => null);
@@ -241,6 +244,7 @@ export async function applyTaskContract(input) {
             requirementBytes: requirementContent,
             constraintsBytes: constraintsContent,
             referenceManifestBytes: manifestText,
+            requirementLedgerBytes: requirementLedgerContent,
         });
         const taskConfigSha256 = computeTaskConfigSha256(fullConfig);
         const canonicalHash = computeCanonicalHash({
@@ -277,6 +281,9 @@ export async function applyTaskContract(input) {
                 constraintsContent,
                 taskConfigContent,
                 contractRef: nextRef,
+                ...(requirementLedgerContent !== undefined
+                    ? { requirementLedgerContent }
+                    : {}),
             },
         });
         await appendRequestLedgerEntry({
@@ -312,6 +319,9 @@ export async function applyTaskContract(input) {
             changedFiles: [
                 "source/需求.md",
                 "source/执行约束.md",
+                ...(requirementLedgerContent !== undefined
+                    ? ["source/requirement-ledger.json"]
+                    : []),
                 "task.json",
                 "contract.json",
             ],

package/dist/task/contract/constants.js

@@ -29,3 +29,5 @@ export const TRANSACTIONS_DIRNAME = TRANSACTIONS_DIR_NAME;
 export const REQUEST_LEDGER_BASENAME = REQUEST_LEDGER_FILE_NAME;
 export const REQUIREMENT_FILE_NAME = "需求.md";
 export const CONSTRAINTS_FILE_NAME = "执行约束.md";
+/** Source fidelity ledger (20260824-frontend-source-fidelity-ledger-v1). */
+export const REQUIREMENT_LEDGER_FILE_NAME = "requirement-ledger.json";

package/dist/task/contract/hash.js

@@ -35,6 +35,9 @@ export function computeSourceHashes(input) {
     if (input.referenceManifestBytes) {
         sourceHashes.referenceManifestSha256 = sha256Utf8(input.referenceManifestBytes);
     }
+    if (input.requirementLedgerBytes) {
+        sourceHashes.requirementLedgerSha256 = sha256Utf8(input.requirementLedgerBytes);
+    }
     return sourceHashes;
 }
 export function refMatchesObserved(ref, observedCanonicalHash) {

package/dist/task/contract/observe.js

@@ -1,6 +1,6 @@
 import { access, readdir, readFile } from "node:fs/promises";
 import path from "node:path";
-import { CONSTRAINTS_FILE_NAME, CONTRACT_FILE_NAME, REQUIREMENT_FILE_NAME, TRANSACTIONS_DIR_NAME, } from "./constants.js";
+import { CONSTRAINTS_FILE_NAME, CONTRACT_FILE_NAME, REQUIREMENT_FILE_NAME, REQUIREMENT_LEDGER_FILE_NAME, TRANSACTIONS_DIR_NAME, } from "./constants.js";
 import { computeCanonicalHash, computeSourceHashes, computeTaskConfigSha256, } from "./hash.js";
 import { parseTaskContractRef } from "./schema.js";
 import { getTaskPaths } from "../runtime.js";
@@ -33,11 +33,13 @@ export async function loadObservedTaskBytes(repoRoot, taskId) {
     const paths = getTaskPaths(repoRoot, taskId);
     const requirementPath = path.join(paths.sourceDir, REQUIREMENT_FILE_NAME);
     const constraintsPath = path.join(paths.sourceDir, CONSTRAINTS_FILE_NAME);
-    const [requirementBytes, constraintsBytes, taskConfigText, manifestText] = await Promise.all([
+    const requirementLedgerPath = path.join(paths.sourceDir, REQUIREMENT_LEDGER_FILE_NAME);
+    const [requirementBytes, constraintsBytes, taskConfigText, manifestText, requirementLedgerBytes] = await Promise.all([
         readTextIfExists(requirementPath),
         readTextIfExists(constraintsPath),
         readTextIfExists(paths.taskConfigPath),
         readTextIfExists(getSourceManifestPath(paths.sourceDir)),
+        readTextIfExists(requirementLedgerPath),
     ]);
     let taskConfigRaw = null;
     let taskConfigSha256 = null;
@@ -52,6 +54,7 @@ export async function loadObservedTaskBytes(repoRoot, taskId) {
         taskConfigRaw,
         taskConfigSha256,
         referenceManifestBytes: manifestText,
+        requirementLedgerBytes,
         requirementPath,
         constraintsPath,
         taskConfigPath: paths.taskConfigPath,
@@ -164,7 +167,9 @@ export async function observeTaskContractState(repoRoot, taskId) {
             message: error instanceof Error ? error.message : String(error),
         });
     }
-    const observed = await computeObservedCanonicalHashSafe(repoRoot, taskId);
+    const observed = await computeObservedCanonicalHashSafe(repoRoot, taskId, {
+        ref: ref ?? undefined,
+    });
     errors.push(...(observed.errors ?? []));
     if (!ref) {
         return {
@@ -226,7 +231,7 @@ export async function observeTaskContractState(repoRoot, taskId) {
         observationErrors: errors,
     };
 }
-async function computeObservedCanonicalHashSafe(repoRoot, taskId) {
+async function computeObservedCanonicalHashSafe(repoRoot, taskId, options) {
     const errors = [];
     try {
         const bytes = await loadObservedTaskBytes(repoRoot, taskId);
@@ -256,10 +261,26 @@ async function computeObservedCanonicalHashSafe(repoRoot, taskId) {
             }
             return { hash: null, errors };
         }
+        // Legacy compatibility (AC-FIDELITY-004): only include the ledger bytes
+        // when the stored ref actually declares requirementLedgerSha256. A ref
+        // without the ledger field keeps the existing semantics and never
+        // misreports drift for tasks that predate the ledger.
+        const refLedgerHash = options?.ref?.sourceHashes.requirementLedgerSha256 ?? null;
+        if (refLedgerHash && bytes.requirementLedgerBytes === null) {
+            errors.push({
+                code: "MISSING_REQUIREMENT_LEDGER",
+                path: "source/requirement-ledger.json",
+                message: `contract records requirementLedgerSha256 but ${REQUIREMENT_LEDGER_FILE_NAME} is missing`,
+            });
+            return { hash: null, errors };
+        }
         const sourceHashes = computeSourceHashes({
             requirementBytes: bytes.requirementBytes,
             constraintsBytes: bytes.constraintsBytes,
             referenceManifestBytes: bytes.referenceManifestBytes,
+            ...(refLedgerHash
+                ? { requirementLedgerBytes: bytes.requirementLedgerBytes }
+                : {}),
         });
         const hash = computeCanonicalHash({
             sourceHashes,

package/dist/task/contract/paths.js

@@ -1,6 +1,6 @@
 import path from "node:path";
 import { getTaskPaths } from "../runtime.js";
-import { CONTRACT_JSON_BASENAME, REQUEST_LEDGER_BASENAME, TRANSACTIONS_DIRNAME, } from "./constants.js";
+import { CONTRACT_JSON_BASENAME, REQUIREMENT_LEDGER_FILE_NAME, REQUEST_LEDGER_BASENAME, TRANSACTIONS_DIRNAME, } from "./constants.js";
 export function getTaskContractPaths(repoRoot, taskId) {
     const base = getTaskPaths(repoRoot, taskId);
     return {
@@ -15,5 +15,6 @@ export function getTaskContractPaths(repoRoot, taskId) {
         transactionsDir: path.join(base.taskDir, TRANSACTIONS_DIRNAME),
         requestLedgerPath: path.join(base.taskDir, REQUEST_LEDGER_BASENAME),
         lockPath: path.join(base.taskDir, ".contract.lock"),
+        requirementLedgerPath: path.join(base.sourceDir, REQUIREMENT_LEDGER_FILE_NAME),
     };
 }

package/dist/task/contract/project.js

@@ -1,8 +1,10 @@
 import { canonicalizePathArray, canonicalizeTextProjection, } from "./canonicalize.js";
 /**
  * Project Draft → source/需求.md (deterministic template, projectionVersion=1).
+ * 当携带 ledger 时追加 `## Source ledger` 区块：明确 需求.md 是派生导航视图，
+ * 语义权威为原始 requirement/acceptance 文档与受管 requirement-ledger.json。
  */
-export function projectRequirementMarkdown(draft) {
+export function projectRequirementMarkdown(draft, ledger) {
     const lines = [
         `# 需求：${draft.title}`,
         "",
@@ -62,6 +64,18 @@ export function projectRequirementMarkdown(draft) {
             lines.push(`- [${ref.role}] ${ref.ref}`);
         }
     }
+    if (ledger) {
+        const gateStatus = ledger.stats.unresolvedCount > 0 ||
+            ledger.stats.conflictCount > 0 ||
+            ledger.stats.highRiskUncoveredCount > 0
+            ? "blocked"
+            : "pass";
+        const ledgerLine = ledger.sourcePaths.length > 0
+            ? `source/requirement-ledger.json (${ledger.sourcePaths.length} source document(s))`
+            : "source/requirement-ledger.json";
+        lines.push("", "## Source ledger", "", "> 本文件是派生导航视图，不替代原始 requirement/acceptance 文档。" +
+            " 语义权威为原始文档与 `source/requirement-ledger.json`（确定性切分账本）。", "", `- ledger: ${ledgerLine.length > 160 ? `${ledgerLine.slice(0, 160)}…` : ledgerLine}`, `- inputDigest: ${ledger.inputDigest}`, `- fragments: ${ledger.stats.fragmentCount}`, `- canonical requirements: ${ledger.stats.canonicalRequirementCount}`, `- status: ${gateStatus}`);
+    }
     lines.push("");
     return canonicalizeTextProjection(lines.join("\n"));
 }
@@ -170,6 +184,9 @@ export function mergeManagedTaskConfigFields(existing, draft) {
             command: cmd.command,
             ...(cmd.timeoutMs !== undefined ? { timeoutMs: cmd.timeoutMs } : {}),
         })),
+        ...(draft.frontendOpenspec !== undefined
+            ? { frontendOpenspec: draft.frontendOpenspec }
+            : {}),
     };
     if (draft.featureId !== undefined) {
         next.featureId = draft.featureId;

package/dist/task/contract/schema.js

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import { backendTestConfigSchema, taskKindSchema, taskVerifyCommandSchema, } from "../config-types.js";
+import { backendTestConfigSchema, frontendOpenspecConfigSchema, taskKindSchema, taskVerifyCommandSchema, } from "../config-types.js";
 import { TASK_CONFIG_SCHEMA_VERSION, TASK_CONTRACT_CANONICALIZER_VERSION, TASK_CONTRACT_DRAFT_SCHEMA_VERSION, TASK_CONTRACT_PROJECTION_VERSION, TASK_CONTRACT_REF_SCHEMA_VERSION, } from "./constants.js";
 const sha256Schema = z
     .string()
@@ -74,6 +74,7 @@ export const taskContractDraftSchema = z
     openQuestions: z.array(z.string()).optional(),
     assumptions: z.array(z.string()).optional(),
     hardConstraints: z.array(z.string()).optional(),
+    frontendOpenspec: frontendOpenspecConfigSchema.optional(),
     interviewAssessmentRef: z
         .object({
         draftSha256: z.string().min(1),
@@ -107,6 +108,8 @@ export const taskContractSourceHashesSchema = z
     requirementSha256: sha256Schema,
     constraintsSha256: sha256Schema,
     referenceManifestSha256: sha256Schema.optional(),
+    /** Source fidelity ledger hash; present only when the task binds a ledger. */
+    requirementLedgerSha256: sha256Schema.optional(),
 })
     .strict();
 export const taskContractRefSchema = z

package/dist/task/contract/transaction.js

@@ -21,6 +21,7 @@ export async function runJournaledContractCommit(input) {
     const constraintsRel = `source/${CONSTRAINTS_FILE_NAME}`;
     const taskConfigRel = "task.json";
     const contractRel = CONTRACT_FILE_NAME;
+    const requirementLedgerRel = `source/requirement-ledger.json`;
     const targetSpecs = [
         {
             kind: "requirement",
@@ -46,6 +47,17 @@ export async function runJournaledContractCommit(input) {
             content: input.targets.contractRef,
             isJson: true,
         },
+        ...(input.targets.requirementLedgerContent !== undefined
+            ? [
+                {
+                    kind: "requirement-ledger",
+                    relativePath: requirementLedgerRel,
+                    // Content is already serialized JSON text; stageText avoids double-encoding.
+                    content: input.targets.requirementLedgerContent,
+                    isJson: false,
+                },
+            ]
+            : []),
     ];
     const targetRecords = [];
     for (const spec of targetSpecs) {