@tea-agent/loop-agent 0.39.0-beta.0 → 0.39.0-beta.10

package/dist/workflows/dag/validate.js

@@ -1,10 +1,11 @@
-import { DEFAULT_DAG_EXECUTOR_MODELS, ENV_VAR_NAME_PATTERN, dagCommandPolicyAllows, resolveDagCommandPolicy, } from "./types.js";
+import { DEFAULT_DAG_EXECUTOR_MODELS, ENV_VAR_NAME_PATTERN, dagCommandPolicyAllows, dagPiExtensionIdSchema, resolveDagCommandPolicy, } from "./types.js";
 import { resolveShellCommands } from "../../executors/shell-executor.js";
 import { pathMatchesPattern } from "../../shared/git-progress.js";
 import { resolveRepairTaskForGate } from "./repair-artifact.js";
 import { topoSortToRanks } from "./topo.js";
-import { isSafeReadOnlyPiRetryCandidate, isWriterEmptyDiffRetryCandidate, isWriterTransportRetryCandidate, INCOMPLETE_WRITE_SET_RETRY_CATEGORY, WRITER_CLEAN_TIMEOUT_RETRY_CATEGORY, WRITER_EMPTY_DIFF_RETRY_CATEGORY, } from "./retry-policy.js";
+import { isSafeReadOnlyPiRetryCandidate, isWriterEmptyDiffRetryCandidate, isWriterTransportRetryCandidate, INCOMPLETE_WRITE_SET_RETRY_CATEGORY, WRITER_CLEAN_TIMEOUT_RETRY_CATEGORY, WRITER_EMPTY_DIFF_RETRY_CATEGORY, CONTEXT_OVERFLOW_RETRY_CATEGORY, } from "./retry-policy.js";
 import { isBackendTestCompletenessRetryCandidate } from "./backend-test-writer-completeness.js";
+import { defaultFrontendTestLayout, frontendTestLayoutFromSpec, } from "./frontend-test-layout.js";
 const GOVERNANCE_WARNING_TYPES = new Set([
     "read-only-missing-artifacts-forbidden",
     "read-only-prompt-mentions-artifact-writes",
@@ -463,8 +464,12 @@ function validateShellTaskConfig(task, spec, issues) {
     if (commands.length === 0 &&
         !shell.jsonArtifactGate &&
         !shell.backendTestPipeline &&
-        !shell.frontendPrewriteGate &&
+        !shell.frontendDesignPolicy &&
+        !shell.frontendWriterAdmission &&
+        !shell.frontendCloseout &&
         !shell.frontendBrowserToolPreflight &&
+        !shell.frontendTestStandardScenarios &&
+        !shell.frontendTestEnvironmentProbe &&
         !shell.frontendVerificationBundle &&
         !shell.frontendReviewContext &&
         !shell.frontendTestCaseChecklist &&
@@ -534,18 +539,26 @@ function validateShellTaskConfig(task, spec, issues) {
             }
         }
     }
-    if (shell.frontendPrewriteGate) {
-        const sourceNodeIds = [
-            shell.frontendPrewriteGate.planFromNodeId,
-            ...shell.frontendPrewriteGate.planFallbackFromNodeIds,
-            shell.frontendPrewriteGate.reviewFromNodeId,
-            ...shell.frontendPrewriteGate.reviewFallbackFromNodeIds,
-        ];
+    if (shell.frontendDesignPolicy) {
+        const sourceNodeIds = [shell.frontendDesignPolicy.planFromNodeId];
+        for (const sourceNodeId of new Set(sourceNodeIds)) {
+            if (!task.depends_on.includes(sourceNodeId)) {
+                issues.push({
+                    type: "missing-dependency",
+                    message: `shell task ${task.id} frontendDesignPolicy source ${sourceNodeId} must be a direct dependency`,
+                });
+            }
+        }
+    }
+    if (shell.frontendWriterAdmission) {
+        const sourceNodeIds = shell.frontendWriterAdmission.designReviewFromNodeId
+            ? [shell.frontendWriterAdmission.designReviewFromNodeId]
+            : [];
         for (const sourceNodeId of new Set(sourceNodeIds)) {
             if (!task.depends_on.includes(sourceNodeId)) {
                 issues.push({
                     type: "missing-dependency",
-                    message: `shell task ${task.id} frontendPrewriteGate source ${sourceNodeId} must be a direct dependency`,
+                    message: `shell task ${task.id} frontendWriterAdmission source ${sourceNodeId} must be a direct dependency`,
                 });
             }
         }
@@ -643,12 +656,18 @@ function validateRetryPolicyTaskConfig(task, issues) {
     }
     if (isWriterTransportCandidate) {
         const categories = new Set(task.retryPolicy.retryCategories);
+        const allowedWriterTransportCategories = new Set([
+            WRITER_CLEAN_TIMEOUT_RETRY_CATEGORY,
+            CONTEXT_OVERFLOW_RETRY_CATEGORY,
+        ]);
+        const allAllowed = [...categories].every((category) => allowedWriterTransportCategories.has(category));
         if (task.retryPolicy.maxAttempts !== 2 ||
-            categories.size !== 1 ||
+            categories.size === 0 ||
+            !allAllowed ||
             !categories.has(WRITER_CLEAN_TIMEOUT_RETRY_CATEGORY)) {
             issues.push({
                 type: "invalid-retry-policy",
-                message: `task ${task.id} writer transport retryPolicy must use exactly two total attempts and only ${WRITER_CLEAN_TIMEOUT_RETRY_CATEGORY}`,
+                message: `task ${task.id} writer transport retryPolicy must use exactly two total attempts and only writer-clean-timeout (plus optional context-overflow)`,
             });
         }
     }
@@ -678,22 +697,23 @@ function validateWriterOutcomePolicyTaskConfig(task, issues) {
         });
     }
 }
-function isFrontendEvidenceWriteSet(writeSet) {
+function isFrontendEvidenceWriteSet(writeSet, layout = defaultFrontendTestLayout()) {
     const entries = writeSet ?? [];
     if (entries.length === 0)
         return false;
+    const prefix = `${layout.evidenceDir}/`;
+    const glob = `${layout.evidenceDir}/**`;
     return entries.every((entry) => {
         const normalized = entry.trim().replace(/\\/g, "/").replace(/^\.\//, "");
-        return (normalized === "testcase/frontend/evidence/**" ||
-            normalized.startsWith("testcase/frontend/evidence/"));
+        return normalized === glob || normalized.startsWith(prefix);
     });
 }
-function isFrontendBrowserExecutorTask(task) {
+function isFrontendBrowserExecutorTask(task, layout = defaultFrontendTestLayout()) {
     const skills = task.skills ?? [];
     return (task.executor === "pi" &&
         task.toolProfile === "write" &&
         skills.includes("playwright-cli") &&
-        isFrontendEvidenceWriteSet(task.writeSet));
+        isFrontendEvidenceWriteSet(task.writeSet, layout));
 }
 function taskMentionsPlaywrightCliContract(task) {
     const prompt = `${task.subtask_prompt}\n${task.outputContract ?? ""}`;
@@ -705,10 +725,11 @@ function taskMentionsPlaywrightCliContract(task) {
  * - capability is granted without skill/prompt contract or outside evidence writeSet
  * - non-browser nodes receive command capability
  */
-function validateCommandPolicyTaskConfig(task, issues) {
+function validateCommandPolicyTaskConfig(task, issues, spec) {
+    const layout = frontendTestLayoutFromSpec(spec);
     const policy = resolveDagCommandPolicy(task.commandPolicy);
     const allowsPlaywright = dagCommandPolicyAllows(task.commandPolicy, "playwright-cli");
-    const isBrowserExecutor = isFrontendBrowserExecutorTask(task);
+    const isBrowserExecutor = isFrontendBrowserExecutorTask(task, layout);
     if (isBrowserExecutor && !allowsPlaywright) {
         issues.push({
             type: "invalid-command-policy",
@@ -739,10 +760,10 @@ function validateCommandPolicyTaskConfig(task, issues) {
                 message: `task ${task.id} playwright-cli command capability requires prompt/outputContract to reference playwright_cli`,
             });
         }
-        if (!isFrontendEvidenceWriteSet(task.writeSet)) {
+        if (!isFrontendEvidenceWriteSet(task.writeSet, layout)) {
             issues.push({
                 type: "invalid-command-policy",
-                message: `task ${task.id} playwright-cli command capability requires frontend evidence writeSet under testcase/frontend/evidence/`,
+                message: `task ${task.id} playwright-cli command capability requires frontend evidence writeSet under ${layout.evidenceDir}/`,
             });
         }
         if (task.toolProfile !== "write") {
@@ -753,7 +774,7 @@ function validateCommandPolicyTaskConfig(task, issues) {
         }
     }
 }
-function validateDynamicChildCommandPolicy(task, issues) {
+function validateDynamicChildCommandPolicy(task, issues, spec) {
     const expansion = task.dynamicExpansion;
     if (!expansion)
         return;
@@ -774,7 +795,7 @@ function validateDynamicChildCommandPolicy(task, issues) {
         writeSet: child.writeSet,
         outputContract: child.outputContract,
     };
-    validateCommandPolicyTaskConfig(synthetic, issues);
+    validateCommandPolicyTaskConfig(synthetic, issues, spec);
 }
 function validateDecisionGateTaskConfig(task, issues) {
     if (!task.decisionGate?.enabled) {
@@ -881,12 +902,13 @@ export function collectForbiddenExecutorIssues(spec, forbiddenExecutors) {
     }));
 }
 /** Revalidate a rendered dynamic child before it enters state or executes. */
-export function assertValidMaterializedDagTask(task) {
+export function assertValidMaterializedDagTask(task, parentSpec) {
     const issues = [];
-    // A minimal v2 carrier makes write-policy validation strict while avoiding
-    // unrelated parent graph/rank checks.  Dynamic templates are validated at
-    // init; this guards values introduced by {{item}} rendering.
-    const spec = { version: 2, tasks: [task] };
+    const spec = {
+        version: 2,
+        tasks: [task],
+        frontendTestLayout: parentSpec?.frontendTestLayout,
+    };
     validateTaskWritePolicy(task, spec, issues);
     validateShellTaskConfig(task, spec, issues);
     validateStaticTaskConfig(task, issues);
@@ -894,7 +916,7 @@ export function assertValidMaterializedDagTask(task) {
     validateRetryPolicyTaskConfig(task, issues);
     validateOutputProtocolTaskConfig(task, issues);
     validateWriterOutcomePolicyTaskConfig(task, issues);
-    validateCommandPolicyTaskConfig(task, issues);
+    validateCommandPolicyTaskConfig(task, issues, spec);
     if (issues.length > 0) {
         throw new Error(`invalid materialized dynamic child ${task.id}: ${issues.map((issue) => issue.message).join("; ")}`);
     }
@@ -950,9 +972,10 @@ export function validateDagSpec(spec) {
         validateRetryPolicyTaskConfig(task, issues);
         validateOutputProtocolTaskConfig(task, issues);
         validateWriterOutcomePolicyTaskConfig(task, issues);
-        validateCommandPolicyTaskConfig(task, issues);
-        validateDynamicChildCommandPolicy(task, issues);
+        validateCommandPolicyTaskConfig(task, issues, spec);
+        validateDynamicChildCommandPolicy(task, issues, spec);
         validateProjectGovernanceTaskConfig(task, spec, issues);
+        validatePiExtensionsTaskConfig(task, issues);
         validateFailureAwareDependsOn(task, spec, issues);
     }
     validateSameRankWriteSetConflicts(spec, ranks, issues);
@@ -963,6 +986,43 @@ export function validateDagSpec(spec) {
     }
     return issues;
 }
+/**
+ * Fail-closed `piExtensions` validation (plan 2026-08-21 D1/D2):
+ * - only `executor: "pi"` nodes may declare it (shell/static reject);
+ * - unknown ids outside the frozen enum are rejected at parse time by zod,
+ *   and here for task objects that bypass schema parsing;
+ * - closeout nodes must stay fully closed (extension-free) — the two-bucket
+ *   generator never assigns it there, so any appearance is contract drift.
+ */
+function validatePiExtensionsTaskConfig(task, issues) {
+    const ids = task.piExtensions;
+    if (ids === undefined)
+        return;
+    if (task.executor !== "pi") {
+        issues.push({
+            type: "invalid-pi-extensions-config",
+            message: `task ${task.id} piExtensions requires executor "pi" (found ${task.executor})`,
+        });
+        return;
+    }
+    const allowed = new Set(dagPiExtensionIdSchema.options);
+    for (const id of ids) {
+        if (!allowed.has(id)) {
+            issues.push({
+                type: "invalid-pi-extensions-config",
+                message: `task ${task.id} piExtensions has unknown id "${id}"; allowed: ${[
+                    ...allowed,
+                ].join(", ")}`,
+            });
+        }
+    }
+    if (task.id === "closeout-pi" && ids.length > 0) {
+        issues.push({
+            type: "invalid-pi-extensions-config",
+            message: "closeout-pi must stay extension-free (read buckets exclude closeout)",
+        });
+    }
+}
 function validateProjectGovernanceTaskConfig(task, spec, issues) {
     if (task.governanceStandardReview) {
         if (task.executor !== "pi" ||

package/docs/README.md

@@ -27,6 +27,7 @@
 | 选择快速、标准或完整验证命令 | `governance/verification-matrix.md` |
 | 理解 CLI、runtime 和初始化能力边界 | `runtime/loop-agent-harness.md` |
 | 运行 DAG、查看报告或处理失败 | `runtime/agent-dag-runner.md`、`runtime/agent-dag-recovery-playbook.md`；Operator Chat P0 closeout 见 `reports/feature/2026-08-14-operator-chat-dag-recovery-p0.md` |
+| 理解前端实现 DAG 与需求保真账本 | `runtime/frontend-implementation-workflow.md`（含 source fidelity ledger v2 绑定、顺序 reconciliation、独立 reviewer、human resolution 与 prewrite fail-closed）；init-evolution 审查见 `reports/init-evolution/2026-08-24-frontend-source-fidelity-ledger-init-evolution-review.md` |
 | 按 TDD、验证和调试纪律推进修复 | `governance/harness-methodology-tdd.md`、`governance/harness-methodology-verification.md`、`governance/harness-methodology-debugging.md` |
 | 执行真实 backend-test provider 验证 | `runtime/backend-test-live-campaign.md` |
 | 判断单任务 loop-agent Production Readiness | `operations/production-readiness.md` |
@@ -72,6 +73,7 @@
 | `design/active/` | 仍会影响后续决策的设计输入、路线与契约 |
 | `design/visual-references/` | 长期视觉参考，不表达实现状态 |
 | `design/archive/` | 历史设计和已被实现/替代的阶段性设计 |
+| `superpowers/specs/` | Superpowers 工作流产出的阶段性实现设计输入 |
 | `exec-plans/active/` | 仍需推进或明确保持 open 的任务合同 |
 | `exec-plans/completed/` | 已完成任务合同归档 |
 | `progress/` | 仍需下一次会话接手的当前 handoff 入口 |

package/docs/architecture/evolution.md

@@ -33,6 +33,7 @@ loop-agent CLI
 | Worker readiness baseline | Attempt identity、immutable owner、lineage/revision、task-scoped lease、controller protocol、acceptance、reconcile | Agent Worker PR v1 Phase 1–7 / `0.32.0` |
 | Operator Surface | 裸 `agent-worker console`；Operate、`/inspect/`、Operator Chat、recovery CTA、intake bridge | ADR 0005、0011–0013 |
 | 自举与验证 | controller identity、skill snapshot、deterministic/live canary、verified tarball、`verify:tree` receipt | `runtime-boundaries.md`、verification matrix |
+| Source fidelity ledger | 原始 requirement/acceptance 文档保持语义权威，派生 `source/需求.md` 仅作导航视图；确定性 fragment inventory、受管 `requirement-ledger.json`（进入 Task Contract transaction 与 canonical hash）、source binding v2（仅 frontend taskKind，schemaVersion=2 必填字段）、prewrite fail-closed 门禁（`SOURCE_FIDELITY_*`/`source-*` 稳定错误码）、顺序 reconciliation 与独立 reviewer、human resolution 生效、有界提示词与最终 reviewer 核对清单 | `20260824-frontend-source-fidelity-ledger-v1` + `2026-08-24-frontend-source-fidelity-repair-v2`（本页面下方 init-evolution 审查）、`CHANGELOG.md [Unreleased]` |
 
 ### 当前不变量
 
@@ -106,3 +107,47 @@ Evidence & Trust Plane
 2. 证明成立后更新 current capability summary 和本页“当前架构”。
 3. 未证明部分只保留在 active design/exec-plan，不能通过修改措辞升级状态。
 4. 使用者短索引同步到 `website/docs/overview/roadmap.md`，避免复制长版本流水账。
+
+## Init Evolution Review — 2026-08-24 frontend source fidelity ledger
+
+Base/Head：见 `docs/reports/init-evolution/` 中对应 `*-init-evolution-review.md`（若已提交则含 Base/Head 字段；未提交工作区由 CI 非严格模式放行）。
+
+### Changed Surface
+
+- `src/task/source-prepare/**`：新增 `fragment-inventory.ts`、`ledger.ts`；扩展 `types.ts`、`prepare.ts`、`completeness.ts`、`parse-intent.ts`（无外部 API 变化）。
+- `src/task/contract/**`：`requirement-ledger.json` 进入受管 transaction 与 canonical hash；`TaskContractSourceHashesV1` 新增可选 `requirementLedgerSha256`（legacy ref 向后兼容）。
+- `src/workflows/dag/**`：`dagSourceBindingSchema` 拆为 v1/v2 discriminated union（v2 schemaVersion=2，四个 ledger 字段全部必填；v1 strict 拒绝 ledger 字段）；`init-hybrid` 改读已持久化 ledger（缺失/漂移 fail closed）；prewrite 门禁新增 ledger 检查与失败码。
+- `src/task/source-prepare/**`：新增 `ledger-reconciliation.ts`（顺序 reconciliation）、`ledger-review.ts`（独立 reviewer）；fragment inventory 表格行切分、跨文档稳定 REQ-SRC ID、V4 显式 AC 标题；human resolution 生效。
+- `src/worker/observe/**`：新增只读 `GET /api/tasks/:id/ledger` 与展示（安全摘要，不泄漏原文）。
+- `src/worker/console/**`：Draft/ContractPanel/InspectSplitPanel 安全摘要展示。
+- `docs/templates/frontend-implementation-contract.schema.json`：requirements 增加可选 `sourceFragmentIds`/`sourceRefs`，sourceBinding 增加可选 ledger 字段（all-or-none）。
+
+### Decision
+
+**No init impact / Surface check only**。
+
+Rationale：
+
+- 新增均为模块内部实现；不新增 CLI 命令、不改 init 入口、不改变 target-project 初始化行为。
+- `docs/templates/frontend-implementation-contract.schema.json` 已随 `docs/templates/` 目录 glob 打包（`package.json files`），无需新增 manifest 条目。
+- 运行时加载 schema 的 `loadFrontendImplementationContractJsonSchema` 仅做结构性校验（$id/required/properties/const），新增可选字段不破坏既有契约。
+- 不新增任何运行时或开发依赖（node:crypto、既有 zod/Vitest/Vite/React 19）。
+
+### Updates Made
+
+- `docs/architecture/evolution.md`：本条目。
+- `CHANGELOG.md [Unreleased]`、`CONTEXT.md`：glossary 术语。
+- `docs/templates/frontend-implementation-contract.schema.json`：可选字段同步。
+
+### Verification
+
+```bash
+npm run typecheck && npm run console:typecheck
+npx vitest run test/task-source-prepare.test.ts test/task-contract-canonicalize.test.ts test/task-contract-observe.test.ts test/dag-init-hybrid.test.ts test/frontend-implementation-contract.test.ts test/frontend-prewrite-gate.test.ts test/frontend-writer-admission.test.ts test/worker/observe/dag-inspector-node-input.test.ts test/worker/console/inspect-split-panel.test.ts
+```
+
+### Residual Risk
+
+- 长尾 24K 截断遗漏回归：以确定性分片 inventory + ledger 覆盖统计断言固定（AC-FIDELITY-001/007）。
+- 账本漂移/篡改：inputDigest 复用失效 + prewrite fail closed（AC-FIDELITY-003/006）。
+- 既有带引用 frontend task 重建路径变化：ledger 纳入 canonical hash 改变 `observeTaskContractState` 判定，legacy ref 向后兼容覆盖（AC-FIDELITY-004）。

package/docs/init-surface.manifest.json

@@ -30,9 +30,11 @@
     "docs/templates/frontend-task-requirement.md",
     "docs/templates/frontend-task-constraints.md",
     "docs/templates/frontend-design-contract.md",
+    "docs/templates/frontend-implementation-contract.schema.json",
     "docs/templates/worker-dogfood-setup.md",
     "docs/templates/worker-dogfood-evidence.md",
     "docs/templates/harness.schema.json",
+    "docs/templates/spec-registry.schema.json",
     "docs/templates/interactive-ui-round2-experiment.md",
     "docs/templates/product-line/README.md",
     "docs/templates/product-line/AGENTS.md",
@@ -50,6 +52,9 @@
     "scripts/kb-graph-materialize.mjs",
     "scripts/kb-graph-promote.mjs",
     "scripts/kb-graph-incremental-prepare.mjs",
+    "scripts/next-info.mjs",
+    "scripts/next-publish-gate.mjs",
+    "scripts/release-source-binding.mjs",
     "docs/templates/agent-dag.schema.json",
     "examples/example-dag.json",
     "skills/agent-worker/SKILL.md",
@@ -99,6 +104,7 @@
     "docs/feature-workflow.md",
     "docs/verification-matrix.md",
     "docs/loop-agent-harness.md",
+    "docs/spec-registry.json",
     "docs/harness-methodology-tdd.md",
     "docs/harness-methodology-verification.md",
     "docs/harness-methodology-debugging.md",
@@ -174,6 +180,7 @@
     ".pi/settings.json"
   ],
   "initSurface": {
+    "docs/spec-registry.json": "generated",
     "README.md": "managed-block",
     "AGENTS.md": "managed-block",
     ".gitignore": "managed-block",
@@ -277,6 +284,7 @@
     "harness.json",
     "package.json",
     "src/commands/init.ts",
+    "src/commands/init-model-catalog.ts",
     "src/commands/client-recovery.ts",
     "src/commands/init-upgrade.ts",
     "src/cli.ts",
@@ -302,6 +310,7 @@
         "description": "Changes that may alter target-project initialization behavior, default DAG role skills, skill resolution, or package/init contracts.",
         "patterns": [
           "src/commands/init.ts",
+          "src/commands/init-model-catalog.ts",
           "src/commands/client-recovery.ts",
           "src/commands/init-upgrade.ts",
           "src/cli.ts",

package/docs/operations/README.md

@@ -7,7 +7,7 @@
 - [`local-development-environment.md`](local-development-environment.md)：本地环境、Windows 差异和常见排障。
 - [`branch-merge-guideline.md`](branch-merge-guideline.md)：按风险选择合并模式并留下 source-SHA 证据。
 - [`github-collaboration.md`](github-collaboration.md)：仓库内 GitHub 协作约定及发布通道。
-- [`version-and-release-management.md`](version-and-release-management.md)：版本发布管理——next / release-x.y / latest 渠道、workflow 与 promote 手册。
+- [`version-and-release-management.md`](version-and-release-management.md)：版本发布管理——next / release-x.y / latest 渠道、移动式 `npm-next` ref、`inspect next` 查询入口、workflow 与 promote 手册。
 - [`production-readiness.md`](production-readiness.md)：交付前的生产就绪判断。
 - [`agent-worker-production-readiness.md`](agent-worker-production-readiness.md)：agent-worker Feature/Task Pool 外层编排的 Production Readiness v1 操作合同。
 - [`backend-test-jacoco-coverage.md`](backend-test-jacoco-coverage.md)：Java 被测服务挂载 JaCoCo tcpserver agent 的 Maven、`java -jar` 与 Docker 操作手册。

package/docs/operations/local-development-environment.md

@@ -2,6 +2,27 @@
 
 本文记录仅与特定开发环境有关、但可能反复影响验证结果的问题。它不是通用工程规则；标准验证命令仍以 [`verification-matrix.md`](../governance/verification-matrix.md) 为准。
 
+## Operator Console 前端快速迭代
+
+对 `src/worker/console/static-src/` 内的对话样式和前端交互做高频调整时，使用固定 8790 的开发入口：
+
+```bash
+npm run console:dev
+```
+
+它从当前源码启动真实 Console 后端，并在内部 `8791` 常驻 Vite dev server。浏览器始终访问 `http://127.0.0.1:8790/`：API、HttpOnly Cookie、确认令牌和 Origin 校验仍由真实 Console 处理，前端 HTML/模块请求才由 8790 转发给 Vite。CSS 保存后原地热替换，TSX 保存后自动整页刷新；不生成 `static-dev` bundle，也不重复运行生产 build。
+
+常用参数：
+
+```bash
+npm run console:dev -- --no-open
+npm run console:dev -- --port 8792 --reload-port 8793 --no-open
+```
+
+默认端口是 Console `8790`、内部 Vite/HMR `8791`；两者都只允许 loopback。端口已占用时命令会失败并报告端口，不会停止或接管已有进程。前端类型检查在后台持续输出诊断，但不阻塞 HMR；后端源码变化时只重启 Console 子进程，Vite 保持常驻。
+
+该命令只优化编辑反馈，不构成验收。独立交互修复完成后仍需运行定向 Vitest；交付前按验证矩阵运行 typecheck、正式 `npm run console:build` / `npm run build`。正式构建继续写入 `dist/worker/console/static/`，不会包含 `/@vite/client`、8791 或开发代理代码。
+
 ## Git hooks（本仓库）
 
 每个 clone 安装一次：

package/docs/templates/README.md

@@ -37,7 +37,7 @@
 ## Frontend
 
 - `frontend-task-requirement.md`、`frontend-task-constraints.md`、`frontend-design-contract.md` — 前端任务输入与设计合同。
-- `frontend-implementation-contract.schema.json` — 前端实现合同 schema。
+- `frontend-implementation-contract.schema.json` — 前端实现合同 schema（sourceBinding v2 ledger 字段 all-or-none：任一出现则四项齐全，禁止 v1+optional 冒充 v2）。`requirements[].sourceRefs[].items` 使用合法 `$ref: #/$defs/path`（相对路径、无 `..` 逃逸、无反斜杠），模板 JSON 无非法键，运行时加载器可直接编译（AC-003）。
 - `frontend-test-dag.json` — frontend-test DAG 模板；其 deterministic checklist 会拒绝 alternative executable instructions，仅允许 allowlisted `playwright-cli` command。Pi generator/reviser 的 runtime writeSet 仅授权下列目标项目生成路径（不是本仓库文档索引目标）：
 
   ~~~text
@@ -56,6 +56,7 @@
 - `knowledge-sync-dag.json`、`knowledge-graph-bootstrap-dag.json` — 知识同步与图谱初始化 DAG。
 - `knowledge-sync-draft.schema.json` — 知识同步草稿 schema。
 - `harness.schema.json` — `harness.json` 的 IDE JSON Schema。
+- `spec-registry.schema.json` — 项目级 `ai_workspace/loop-agent/spec-registry.json` 的机器校验 schema。
 
 ## 子目录
 

package/docs/templates/agent-dag-report.schema.json

@@ -176,7 +176,8 @@
         "humanEscalationJson",
         "humanEscalationMd",
         "humanApproval",
-        "humanRejection"
+        "humanRejection",
+        "changeManifest"
       ],
       "properties": {
         "resultSummary": { "$ref": "#/$defs/dagArtifactRef" },
@@ -188,7 +189,12 @@
         "humanEscalationJson": { "$ref": "#/$defs/dagArtifactRef" },
         "humanEscalationMd": { "$ref": "#/$defs/dagArtifactRef" },
         "humanApproval": { "$ref": "#/$defs/dagArtifactRef" },
-        "humanRejection": { "$ref": "#/$defs/dagArtifactRef" }
+        "humanRejection": { "$ref": "#/$defs/dagArtifactRef" },
+        "changeManifest": { "$ref": "#/$defs/dagArtifactRef" },
+        "changeManifestChangedFiles": {
+          "type": "array",
+          "items": { "type": "string" }
+        }
       }
     },
     "repairArtifact": {

package/docs/templates/agent-dag.schema.json

@@ -130,6 +130,18 @@
     "toolProfile": {
       "enum": ["read-only", "write"]
     },
+    "piExtensionId": {
+      "type": "string",
+      "enum": ["pi-codegraph", "pi-lens"],
+      "description": "Frozen Pi extension short id resolved at run time against the Pi settings package inventory. Adding a package requires changing the plan and this enum."
+    },
+    "piExtensions": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": { "$ref": "#/$defs/piExtensionId" },
+      "description": "Node-level explicit Pi extension allowlist (backend implementation DAGs only). Omitted = extension discovery stays fully closed (R8.1). Only executor 'pi' nodes may declare it."
+    },
     "role": {
       "enum": ["planner", "scout", "implementer", "reviewer", "supervisor", "verifier", "closeout"]
     },
@@ -356,6 +368,31 @@
           "properties": { "schemaVersion": { "const": 1 }, "requireBaseline": { "const": true } }
         },
         "frontendTestCaseChecklist": { "type": "object", "additionalProperties": false },
+        "frontendBrowserToolPreflight": { "type": "object", "additionalProperties": false },
+        "frontendTestStandardScenarios": { "type": "object", "additionalProperties": false },
+        "frontendTestEnvironmentProbe": { "type": "object", "additionalProperties": false },
+        "frontendTestCaseManifest": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "maxCases": { "type": "integer", "minimum": 1 },
+            "declaredAcIds": { "type": "array", "items": { "type": "string" } }
+          }
+        },
+        "frontendTestResultFinalize": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "declaredAcIds": { "type": "array", "items": { "type": "string" } }
+          }
+        },
+        "frontendTestReports": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "l5": { "type": "boolean" }
+          }
+        },
         "frontendTestEvidenceValidation": { "type": "object", "additionalProperties": false },
         "frontendTestHtmlReport": { "type": "object", "additionalProperties": false },
         "backendTestPipeline": {
@@ -383,6 +420,12 @@
         { "required": ["frontendVerificationBundle"] },
         { "required": ["frontendReviewContext"] },
         { "required": ["frontendTestCaseChecklist"] },
+        { "required": ["frontendBrowserToolPreflight"] },
+        { "required": ["frontendTestStandardScenarios"] },
+        { "required": ["frontendTestEnvironmentProbe"] },
+        { "required": ["frontendTestCaseManifest"] },
+        { "required": ["frontendTestResultFinalize"] },
+        { "required": ["frontendTestReports"] },
         { "required": ["frontendTestEvidenceValidation"] },
         { "required": ["frontendTestHtmlReport"] },
         { "required": ["backendTestPipeline"] }
@@ -423,7 +466,7 @@
         "retryCategories": {
           "type": "array",
           "items": {
-            "enum": ["timeout", "network", "rate-limit", "unavailable", "empty-output", "output-too-large", "protocol-invalid", "invalid-output", "writer-empty-diff", "incomplete-write-set", "writer-clean-timeout"]
+            "enum": ["timeout", "network", "rate-limit", "unavailable", "empty-output", "output-too-large", "protocol-invalid", "invalid-output", "writer-empty-diff", "incomplete-write-set", "writer-clean-timeout", "read-burst", "context-overflow"]
           },
           "default": ["timeout", "network", "rate-limit", "unavailable", "empty-output"],
           "description": "Failure categories eligible for retry. quota/auth/write-guard are never eligible. invalid-output is allowed only on explicit structured/protocol policies; writer-empty-diff and incomplete-write-set are reserved for requireChangedFiles generation/completeness writers; writer-clean-timeout is reserved for standard bounded writers after explicit zero-write-tool-call and empty-diff evidence."
@@ -485,6 +528,7 @@
           "items": { "type": "string", "minLength": 1 }
         },
         "toolProfile": { "$ref": "#/$defs/toolProfile" },
+        "piExtensions": { "$ref": "#/$defs/piExtensions" },
         "governanceStandardReview": {
           "type": "boolean",
           "description": "Explicitly opts this node into writer-change-scoped AGENTS.md and repository-local code-standard review. Never inferred from node id or role."