@tea-agent/loop-agent 0.39.0-beta.1 → 0.39.0-beta.10

package/dist/workflows/dag/types.js

@@ -1,8 +1,8 @@
 import { z } from "zod";
-import { isOpenspecSpecFilePath } from "../../shared/openspec-spec.js";
+import { DEFAULT_FRONTEND_SPEC_ROOTS, isFrontendSpecFilePath, isValidFrontendSpecRoot, OPENSPEC_SPEC_EXT_RE, } from "../../shared/openspec-spec.js";
 import { campaignBudgetSchema, } from "../../application/evaluation/budget.js";
 import { assertDagPromptSourceRule } from "./prompt-source.js";
-import { dagRetryPolicySchema } from "./retry-policy.js";
+import { dagRetryPolicySchema, TARGET_TEMPLATE_TRANSIENT_RETRY_PROFILE, } from "./retry-policy.js";
 import { dagLivenessPolicySchema, } from "./liveness-policy.js";
 import { dagOutputProtocolSchema } from "./output-protocol.js";
 export const dagComplexitySchema = z.enum(["HIGH", "MED", "LOW"]);
@@ -10,6 +10,18 @@ export const dagNodeExecutorSchema = z.enum(["pi", "shell", "static"]);
 export const CURSOR_DAG_EXECUTOR_REMOVED_ERROR = 'executor "cursor" is no longer supported; regenerate the DAG with Pi-only writers (implement-pi / repair-pi)';
 export const CURSOR_EXECUTOR_MODELS_REMOVED_ERROR = "executorModels.cursor is no longer supported; use executorModels.pi only";
 export const dagToolProfileSchema = z.enum(["read-only", "write"]);
+/**
+ * Frozen Pi extension short ids for backend implementation DAGs (plan
+ * 2026-08-21 D2): the DAG carries only these ids; the executor resolves them
+ * against the Pi settings package inventory at run time. Adding a package
+ * requires changing this enum and the plan.
+ */
+export const dagPiExtensionIdSchema = z.enum(["pi-codegraph", "pi-lens"]);
+/** Node-level explicit Pi extension allowlist (omitted = all off, R8.1). */
+export const dagPiExtensionsSchema = z
+    .array(dagPiExtensionIdSchema)
+    .min(1)
+    .transform((ids) => Array.from(new Set(ids)));
 /** Static command capabilities only; tasks cannot inject executables or shell prefixes. */
 export const dagCommandCapabilitySchema = z.enum(["playwright-cli"]);
 export const dagCommandPolicySchema = z.discriminatedUnion("mode", [
@@ -173,7 +185,16 @@ const dagFrontendNodeIdSchema = z
     .regex(/^[a-z][a-z0-9-]*$/, "frontend node id must be kebab-case");
 const openspecCandidatePathSchema = z
     .string()
-    .refine((candidate) => !candidate.includes("\\") && isOpenspecSpecFilePath(candidate), "openspec candidate must be a repo-relative supported file under openspec/schemas/, openspec/project-specs/, or ai_workspace/");
+    .refine((candidate) => !candidate.includes("\\") &&
+    !candidate.startsWith("/") &&
+    !candidate.split("/").includes("..") &&
+    OPENSPEC_SPEC_EXT_RE.test(candidate), "openspec candidate must be a repo-relative supported specification file");
+const openspecCandidateSnapshotSchema = z
+    .object({
+    path: openspecCandidatePathSchema,
+    sha256: z.string().regex(/^[a-f0-9]{64}$/),
+})
+    .strict();
 export const dagFrontendPrewriteGateSchema = z.object({
     schemaVersion: z.literal(1),
     planFromNodeId: dagFrontendNodeIdSchema,
@@ -192,7 +213,24 @@ export const dagFrontendPrewriteGateSchema = z.object({
     outputDir: z.string().regex(/^[a-z0-9][a-z0-9._-]*$/),
     requireSourceFreshness: z.literal(true),
     implementationWriteSet: z.array(z.string().min(1)).min(1).optional(),
+    /**
+     * Generation-frozen roots that bound custom normative directories. Omitted
+     * legacy DAGs retain the canonical OpenSpec + ai_workspace roots.
+     */
+    openspecSpecRoots: z
+        .array(z.string().refine((root) => isValidFrontendSpecRoot(root), "openspec spec root must be a normalized repo-relative directory"))
+        .optional(),
     openspecCandidatePaths: z.array(openspecCandidatePathSchema).default([]),
+    /** Read-only selector output; omitted for scan-strict and legacy DAGs. */
+    openspecSelectionNodeId: dagFrontendNodeIdSchema.optional(),
+    /** Contract-declared and source-explicit paths that cannot be downgraded. */
+    openspecMandatoryPaths: z.array(openspecCandidatePathSchema).optional(),
+    /**
+     * Content fingerprints frozen with the generation-time OpenSpec scope. New
+     * DAGs use these to reject a plan whose cited specification changed after it
+     * was read; legacy DAGs without the field retain existence-only drift checks.
+     */
+    openspecCandidateSnapshots: z.array(openspecCandidateSnapshotSchema).optional(),
     /**
      * Generation-frozen component/theme specification bucket. Derived from
      * `designEvidence.classified.component ∪ theme ∪ rule.components` at DAG
@@ -237,14 +275,28 @@ export const dagFrontendPrewriteGateSchema = z.object({
         scanStrict: z.array(openspecCandidatePathSchema).default([]),
     })
         .optional(),
+}).superRefine((gate, context) => {
+    const roots = gate.openspecSpecRoots ?? DEFAULT_FRONTEND_SPEC_ROOTS;
+    const candidateGroups = [
+        ["openspecCandidatePaths", gate.openspecCandidatePaths],
+        ["openspecMandatoryPaths", gate.openspecMandatoryPaths],
+        ["componentSpecCandidatePaths", gate.componentSpecCandidatePaths],
+        ["openspecCandidateSources.declared", gate.openspecCandidateSources?.declared],
+        ["openspecCandidateSources.taskSourceCited", gate.openspecCandidateSources?.taskSourceCited],
+        ["openspecCandidateSources.scanStrict", gate.openspecCandidateSources?.scanStrict],
+    ];
+    for (const [field, paths] of candidateGroups) {
+        for (const [index, candidate] of (paths ?? []).entries()) {
+            if (!isFrontendSpecFilePath(candidate, roots)) {
+                context.addIssue({
+                    code: z.ZodIssueCode.custom,
+                    path: [...field.split("."), index],
+                    message: "openspec candidate must be a supported file under the generation-frozen openspec spec roots",
+                });
+            }
+        }
+    }
 });
-export const dagFrontendLintBaselineSchema = z
-    .object({
-    schemaVersion: z.literal(1),
-    lintCommands: z.array(z.string().min(1)).min(1),
-    lintEvidence: dagShellVerifyEvidenceSchema,
-})
-    .strict();
 export const dagFrontendVerificationBundleSchema = z
     .object({
     schemaVersion: z.literal(1),
@@ -258,7 +310,9 @@ export const dagFrontendVerificationBundleSchema = z
     behaviorEvidence: dagShellVerifyEvidenceSchema,
     lintBaselineNodeId: dagFrontendNodeIdSchema.optional(),
     writerNodeIds: z.array(dagFrontendNodeIdSchema).optional(),
-    mode: z.enum(["initial", "repair"]),
+    /** M8: verify-shell only ever runs in initial mode; a failure is terminal
+     * (routes to recovery) and never selects a same-run repair branch. */
+    mode: z.literal("initial"),
 })
     .superRefine((bundle, context) => {
     const groups = [
@@ -333,6 +387,135 @@ export const dagFrontendReviewContextSchema = z.object({
     schemaVersion: z.literal(1),
     requireBaseline: z.literal(true),
 });
+/**
+ * Deterministic frontend contract-import shell (micro topology). Re-validates
+ * the generation-frozen managed Contract's source/binding/schema freshness and
+ * emits a digest. It never invokes a model and never rewrites requirements —
+ * micro requires a pre-validated managed Contract, not natural-language intake.
+ */
+export const dagFrontendContractImportSchema = z.object({
+    schemaVersion: z.literal(1),
+    artifactName: z.string().regex(/^[a-z0-9][a-z0-9._-]*\.json$/),
+    outputDir: z.string().regex(/^[a-z0-9][a-z0-9._-]*$/),
+    requireSourceFreshness: z.literal(true),
+});
+/**
+ * Deterministic frontend design-policy shell (M8). Materializes the canonical
+ * implementation contract from the plan node and evaluates the design policy
+ * (Mock strategy, source freshness, component spec candidates, writeSet
+ * patterns, allowed dependencies). Runs BEFORE frontend-design-review-pi, so it
+ * never consumes a design verdict; the verdict is enforced by the writer
+ * admission shell instead. Replaces the prewrite-gate authorization path.
+ */
+export const dagFrontendDesignPolicySchema = z
+    .object({
+    schemaVersion: z.literal(1),
+    planFromNodeId: dagFrontendNodeIdSchema,
+    requiredRequirementIds: z
+        .array(z.string().regex(/^(?:REQ|BR|AC)-[A-Z0-9]+(?:-[A-Z0-9]+)*$/))
+        .default([]),
+    allowedMockStrategies: z
+        .array(z.enum(["native", "browser-intercept", "request-adapter", "not-needed"]))
+        .min(1),
+    /** Frozen Mock verification command labels the DAG will actually execute. */
+    mockCommandLabels: z.array(z.string()).default([]),
+    artifactName: z.string().regex(/^[a-z0-9][a-z0-9._-]*\.json$/),
+    outputDir: z.string().regex(/^[a-z0-9][a-z0-9._-]*$/),
+    requireSourceFreshness: z.literal(true),
+    implementationWriteSet: z.array(z.string().min(1)).min(1).optional(),
+    /** Generation-frozen roots that bound custom normative directories. */
+    openspecSpecRoots: z
+        .array(z.string().refine((root) => isValidFrontendSpecRoot(root), "openspec spec root must be a normalized repo-relative directory"))
+        .optional(),
+    openspecCandidatePaths: z.array(openspecCandidatePathSchema).default([]),
+    /** Read-only selector output; omitted for scan-strict and legacy DAGs. */
+    openspecSelectionNodeId: dagFrontendNodeIdSchema.optional(),
+    /** Contract-declared and source-explicit paths that cannot be downgraded. */
+    openspecMandatoryPaths: z.array(openspecCandidatePathSchema).optional(),
+    openspecCandidateSnapshots: z
+        .array(openspecCandidateSnapshotSchema)
+        .optional(),
+    /**
+     * Generation-frozen component/theme specification bucket. Derived from
+     * `designEvidence.classified.component ∪ theme ∪ rule.components` at DAG
+     * generation. When non-empty and the canonical contract has UI-visible
+     * work, the design policy requires a non-empty `uiComponentChoices` and
+     * cross-checks each `specReference.path` against this set + the effective
+     * plan openspec-citations block.
+     */
+    componentSpecCandidatePaths: z.array(openspecCandidatePathSchema).optional(),
+    /** OpenSpec gate policy (cited | scan-strict); generation always writes it. */
+    openspecPolicy: z.enum(["cited", "scan-strict"]).optional(),
+    /** Generation-frozen candidate source metadata (diagnostic). */
+    openspecCandidateSources: z
+        .object({
+        declared: z.array(openspecCandidatePathSchema).default([]),
+        taskSourceCited: z.array(openspecCandidatePathSchema).default([]),
+        scanStrict: z.array(openspecCandidatePathSchema).default([]),
+    })
+        .optional(),
+    /** Dependency identifiers authorized at generation time (empty = none). */
+    allowedDependencies: z.array(z.string()).default([]),
+})
+    .superRefine((gate, context) => {
+    const roots = gate.openspecSpecRoots ?? DEFAULT_FRONTEND_SPEC_ROOTS;
+    const candidateGroups = [
+        ["openspecCandidatePaths", gate.openspecCandidatePaths],
+        ["openspecMandatoryPaths", gate.openspecMandatoryPaths],
+        ["componentSpecCandidatePaths", gate.componentSpecCandidatePaths],
+        ["openspecCandidateSources.declared", gate.openspecCandidateSources?.declared],
+        ["openspecCandidateSources.taskSourceCited", gate.openspecCandidateSources?.taskSourceCited],
+        ["openspecCandidateSources.scanStrict", gate.openspecCandidateSources?.scanStrict],
+    ];
+    for (const [field, paths] of candidateGroups) {
+        for (const [index, candidate] of (paths ?? []).entries()) {
+            if (!isFrontendSpecFilePath(candidate, roots)) {
+                context.addIssue({
+                    code: z.ZodIssueCode.custom,
+                    path: [...field.split("."), index],
+                    message: "openspec candidate must be a supported file under the generation-frozen openspec spec roots",
+                });
+            }
+        }
+    }
+});
+/**
+ * Deterministic frontend writer-admission shell (M8). Runs after
+ * frontend-design-review-pi: freezes the writer baseline, derives the concrete
+ * writeSet, folds the design-policy result + design verdict into admission,
+ * and writes contracts/frontend-writer-admission-result.json
+ * (schemaId frontend-writer-admission-shell-v1).
+ */
+export const dagFrontendWriterAdmissionShellSchema = z
+    .object({
+    schemaVersion: z.literal(1),
+    /** Design verdict source (frontend-design-review-pi); pass is enforced.
+     * Omitted in small topology, which has no design review node. */
+    designReviewFromNodeId: dagFrontendNodeIdSchema.optional(),
+    /** Frozen command labels the verification bundle will execute. */
+    frozenCommandLabels: z.array(z.string()).default([]),
+    allowedMockStrategies: z
+        .array(z.enum(["native", "browser-intercept", "request-adapter", "not-needed"]))
+        .min(1),
+    /** Writer-preceding lint commands; baseline is materialized here (R5). */
+    lintCommands: z.array(z.string().min(1)).optional(),
+    lintEvidence: dagShellVerifyEvidenceSchema.optional(),
+})
+    .superRefine((admission, context) => {
+    if ((admission.lintCommands?.length ?? 0) > 0 && !admission.lintEvidence) {
+        context.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["lintEvidence"],
+            message: "lintEvidence is required when lintCommands are present",
+        });
+    }
+});
+/** Deterministic frontend closeout shell (M8). Renders the closeout from
+ * committed facts only (review context + typed review terminal + trace). */
+export const dagFrontendCloseoutSchema = z.object({
+    schemaVersion: z.literal(1),
+    reviewFromNodeId: dagFrontendNodeIdSchema,
+});
 export const ENV_VAR_NAME_PATTERN = /^[A-Z_][A-Z0-9_]*$/;
 export const dagVersionSchema = z
     .union([z.literal(1), z.literal(2), z.literal(3), z.literal(4)])
@@ -370,7 +553,7 @@ export const dagWritePolicySchema = z.enum([
     "none",
 ]);
 /** Git/post-diff write guard intensity for exclusive Pi writers. */
-export const dagWriteGuardPolicySchema = z.enum(["full", "tools-only"]);
+export const dagWriteGuardPolicySchema = z.enum(["full", "tools-only", "filesystem-only"]);
 /**
  * Fail-closed outcome/diff consistency contract for bounded Pi writers.
  * The writer must begin with IMPLEMENTATION_OUTCOME: changed,
@@ -380,7 +563,14 @@ export const dagWriteGuardPolicySchema = z.enum(["full", "tools-only"]);
  */
 export const dagWriterOutcomePolicySchema = z
     .object({
-    type: z.literal("implementation-outcome-v1"),
+    /**
+     * Protocol face: `implementation-outcome-v1` keeps the legacy
+     * IMPLEMENTATION_OUTCOME first-line protocol (backend/README/module
+     * writers + frontend-repair-pi); `frontend-facts-v1` derives the status
+     * from mechanical facts (write-tool events / run delta / write guard /
+     * requirement coverage / focused-check) and never reads the first line.
+     */
+    type: z.enum(["implementation-outcome-v1", "frontend-facts-v1"]),
     /** Generation writers may forbid already-satisfied/no-diff completion. */
     requireChangedFiles: z.boolean().optional(),
 })
@@ -427,6 +617,8 @@ export const dagBackendTestPipelineSchema = z.enum([
     "ingest-backend-test-gap",
 ]);
 export const dagFrontendBrowserToolPreflightSchema = z.object({}).strict();
+export const dagFrontendTestStandardScenariosSchema = z.object({}).strict();
+export const dagFrontendTestEnvironmentProbeSchema = z.object({}).strict();
 export const dagFrontendTestEvidenceValidationSchema = z.object({}).strict();
 export const dagFrontendTestCaseChecklistSchema = z.object({}).strict();
 export const dagFrontendTestHtmlReportSchema = z.object({}).strict();
@@ -511,12 +703,17 @@ export const dagShellConfigSchema = z.object({
         .optional(),
     requirementCoverageGate: dagRequirementCoverageGateSchema.optional(),
     jsonArtifactGate: dagJsonArtifactGateSchema.optional(),
+    frontendDesignPolicy: dagFrontendDesignPolicySchema.optional(),
+    frontendWriterAdmission: dagFrontendWriterAdmissionShellSchema.optional(),
     frontendPrewriteGate: dagFrontendPrewriteGateSchema.optional(),
-    frontendLintBaseline: dagFrontendLintBaselineSchema.optional(),
     frontendVerificationBundle: dagFrontendVerificationBundleSchema.optional(),
     frontendReviewContext: dagFrontendReviewContextSchema.optional(),
+    frontendContractImport: dagFrontendContractImportSchema.optional(),
+    frontendCloseout: dagFrontendCloseoutSchema.optional(),
     frontendTestCaseChecklist: dagFrontendTestCaseChecklistSchema.optional(),
     frontendBrowserToolPreflight: dagFrontendBrowserToolPreflightSchema.optional(),
+    frontendTestStandardScenarios: dagFrontendTestStandardScenariosSchema.optional(),
+    frontendTestEnvironmentProbe: dagFrontendTestEnvironmentProbeSchema.optional(),
     frontendTestEvidenceValidation: dagFrontendTestEvidenceValidationSchema.optional(),
     finalWriteSetApprovalGate: dagFinalWriteSetApprovalGateSchema.optional(),
     frontendTestL5Report: z.object({}).strict().optional(),
@@ -749,6 +946,26 @@ export const dagTaskSchema = z.object({ id: z.string().regex(/^[a-z][a-z0-9-]*$/
     role: dagRoleSchema.optional(),
     skills: z.array(z.string()).optional(),
     toolProfile: dagToolProfileSchema.optional(),
+    /** Bounded read-only discovery budget for nodes that inspect a repository. */
+    readBudget: z
+        .object({
+        maxFiles: z.number().int().positive(),
+        maxBytes: z.number().int().positive(),
+        maxMs: z.number().int().positive().optional(),
+        /** Maximum read/grep/find/ls calls. */
+        maxOperations: z.number().int().positive().optional(),
+        /** On any read budget exhaustion, return concise completion guidance instead of failing the node. */
+        onExhaustion: z.enum(["return-guidance"]).optional(),
+    })
+        .strict()
+        .optional(),
+    /**
+     * Explicit Pi extension allowlist (backend implementation DAGs only):
+     * frozen short ids resolved at run time against the Pi settings package
+     * inventory. Omitted = extension discovery stays fully closed (R8.1).
+     * Only `executor: "pi"` nodes may declare it (validated fail-closed).
+     */
+    piExtensions: dagPiExtensionsSchema.optional(),
     /** Default deny: file write (toolProfile=write) does not grant command execution. */
     commandPolicy: dagCommandPolicySchema.optional(),
     writePolicy: dagWritePolicySchema.optional(),
@@ -796,12 +1013,6 @@ export const dagTaskSchema = z.object({ id: z.string().regex(/^[a-z][a-z0-9-]*$/
         }
     })
         .optional(),
-    /**
-     * Opt-in upstream context mode for nodes that must consume a validated,
-     * hash-bound artifact rather than a potentially truncated text preview.
-     * The default remains preview mode for every existing DAG.
-     */
-    artifactFirstUpstreamNodeIds: z.array(z.string()).optional(),
     /**
      * Fail-closed outcome/diff consistency contract for bounded Pi writers.
      * The writer must begin with IMPLEMENTATION_OUTCOME: changed,
@@ -832,6 +1043,14 @@ export const dagTaskSchema = z.object({ id: z.string().regex(/^[a-z][a-z0-9-]*$/
     forbiddenPaths: z.array(z.string()).optional().default([]),
     decisionGate: dagDecisionGateSchema.optional(),
     retryPolicy: dagRetryPolicySchema.optional(),
+    /**
+     * Generation-path stamp for implicit same-run transient retry. Only the
+     * three target templates stamp canonical final verify shells and
+     * exclusive `implement-pi`. Zod-declared so parseDagSpec does not strip it.
+     */
+    transientRetryProfile: z
+        .literal(TARGET_TEMPLATE_TRANSIENT_RETRY_PROFILE)
+        .optional(),
     /** Optional per-node adaptive liveness override (merged over defaults). */
     livenessPolicy: dagLivenessPolicySchema,
     dynamicExpansion: dagDynamicExpansionSchema.optional(),
@@ -865,20 +1084,51 @@ export const dagEvaluationBindingSchema = z
     .strict();
 /** Eval Lab Campaign Budget (W3.4); enforced by runner ledger when mode=hard. */
 export const dagBudgetSchema = campaignBudgetSchema;
-export const dagSourceBindingSchema = z.object({
+export const dagSourceBindingSourceSchema = z.object({
+    kind: z.enum(["requirement", "constraint", "reference"]),
+    path: z.string().min(1),
+    sha256: z
+        .string()
+        .regex(/^[a-f0-9]{64}$/, "sha256 must be lowercase hex"),
+});
+/**
+ * DagSourceBinding v1：无 ledger 字段（schemaVersion=1，.strict() 拒绝 ledger
+ * 字段混入，不得以 v1+optional 冒充 v2）。非 frontend task / 无可解析引用时使用。
+ */
+export const dagSourceBindingV1Schema = z
+    .object({
     schemaVersion: z.literal(1),
     taskId: z.string().min(1),
-    sources: z
-        .array(z.object({
-        kind: z.enum(["requirement", "constraint", "reference"]),
-        path: z.string().min(1),
-        sha256: z
-            .string()
-            .regex(/^[a-f0-9]{64}$/, "sha256 must be lowercase hex"),
-    }))
-        .min(1),
+    sources: z.array(dagSourceBindingSourceSchema).min(1),
     requirementIds: z.array(z.string().regex(/^(?:REQ|BR|AC)-[A-Z0-9]+(?:-[A-Z0-9]+)*$/)),
-});
+})
+    .strict();
+/**
+ * DagSourceBinding v2（20260824-frontend-source-fidelity-ledger-v1）：仅
+ * frontend-implementation 且存在可解析 requirement/acceptance 引用时产出；
+ * ledgerPath/ledgerSha256/inputDigest/requirementToFragments 全部必填且完整，
+ * 伪造或缺失任一字段被 schema/prewrite 拒绝（AC-002 / AC-FIDELITY-REPAIR-002）。
+ */
+export const dagSourceBindingV2Schema = z
+    .object({
+    schemaVersion: z.literal(2),
+    taskId: z.string().min(1),
+    sources: z.array(dagSourceBindingSourceSchema).min(1),
+    requirementIds: z.array(z.string().regex(/^(?:REQ|BR|AC)-[A-Z0-9]+(?:-[A-Z0-9]+)*$/)),
+    /** 受管 requirement-ledger.json 的 DAG 可解析路径（.harness/tasks/…/source/…）。 */
+    ledgerPath: z.string().min(1),
+    ledgerSha256: z.string().regex(/^[a-f0-9]{64}$/),
+    inputDigest: z.string().regex(/^[a-f0-9]{64}$/),
+    requirementToFragments: z.record(z.string(), z.array(z.string())),
+})
+    .strict();
+export const dagSourceBindingSchema = z.discriminatedUnion("schemaVersion", [
+    dagSourceBindingV1Schema,
+    dagSourceBindingV2Schema,
+]);
+export function isDagSourceBindingV2(binding) {
+    return binding.schemaVersion === 2;
+}
 const dagRerunFeedbackEvidencePathSchema = z
     .string()
     .min(1)
@@ -941,6 +1191,24 @@ export const dagSpecSchema = z
     taskContractBinding: dagTaskContractBindingSchema.optional(),
     /** Optional unresolved parent-run feedback for a full task rerun. */
     rerunFeedback: dagRerunFeedbackSchema.optional(),
+    /** Frontend recovery continuation quota (frozen at generation time from
+     * task.json frontendRecovery.maxContinuations). Bounds how many times a
+     * failed frontend run may auto-recover via M6 recovery operations before
+     * the run stays failed and needs human intervention. */
+    frontendRecovery: z
+        .object({
+        maxContinuations: z
+            .number()
+            .int()
+            .min(1)
+            .max(5)
+            .optional()
+            .default(1),
+    })
+        .strict()
+        .optional(),
+    /** Backend-test-only workspace mutation control; absent means Git. */
+    backendTestWorkspaceControl: z.enum(["git", "filesystem-only"]).optional(),
     /** Frozen backend-test artifact layout (plan A); absent = historical default testcase/ layout. */
     backendTestLayout: z
         .object({
@@ -953,6 +1221,18 @@ export const dagSpecSchema = z
         isDefault: z.boolean(),
     })
         .optional(),
+    /** Frozen frontend-test artifact layout; absent = historical testcase/frontend/ layout. */
+    frontendTestLayout: z
+        .object({
+        testRoot: z.string(),
+        ragDir: z.string(),
+        casesDir: z.string(),
+        evidenceDir: z.string(),
+        reportsDir: z.string(),
+        fixturesDir: z.string(),
+        isDefault: z.boolean(),
+    })
+        .optional(),
     /** Bound user shared-setup document (plan B); absent = no shared setup references expected. */
     backendTestSharedSetup: z
         .object({
@@ -1052,6 +1332,9 @@ export const FRONTEND_RECOVERY_RESULT_SCHEMA_VERSION = 1;
  * Phase 3a parents converge first, so `rollback-pending` is not produced and
  * was removed by AC-1; the phase starts at `child-staging` and ends at
  * `settled`.
+ *
+ * @deprecated Read-only compatibility only; the M6 operation controller no
+ * longer uses this phase as the authoritative recovery entry point.
  */
 export const frontendRecoveryPhaseSchema = z.enum([
     "child-staging",
@@ -1071,6 +1354,9 @@ export const frontendRecoveryPhaseSchema = z.enum([
  * runner's `(existing?.revision ?? 0) + 1` CAS write (the schema only bounds it
  * non-negative). `childRunId` may be absent through `child-activating` and must
  * be non-empty from `child-running` onward.
+ *
+ * @deprecated Read-only compatibility only; the runner no longer writes this
+ * intent (the M6 operation controller supervises recovery instead).
  */
 export const frontendRecoveryStateSchema = z
     .object({
@@ -1142,6 +1428,10 @@ export const frontendRecoveryEvidenceRefSchema = z
  * stays permissive (failureClass optional, evidenceRefs may be empty) so it
  * accepts the runner's actual phase-3a products, which do not always carry a
  * failure class or evidence reference.
+ *
+ * @deprecated Read-only compatibility only; the M6 operation controller writes
+ * `recovered`/`auto-recovery-blocked` results directly and never uses this
+ * schema as the authoritative recovery settlement.
  */
 export const frontendRecoveryResultSchema = z
     .object({

package/dist/workflows/dag/upstream-artifacts.js

@@ -38,10 +38,6 @@ export function relocateNodeArtifactPaths(node, oldRunDir, newRunDir) {
     node.stdoutArtifactPath = rewrite(node.stdoutArtifactPath);
     node.assistantArtifactPath = rewrite(node.assistantArtifactPath);
     node.structuredArtifactPath = rewrite(node.structuredArtifactPath);
-    if (node.frontendPlanOutput) {
-        node.frontendPlanOutput.citationsArtifactPath = rewrite(node.frontendPlanOutput.citationsArtifactPath);
-        node.frontendPlanOutput.rawCandidatePath = rewrite(node.frontendPlanOutput.rawCandidatePath);
-    }
     node.nodeRecordPath = rewrite(node.nodeRecordPath);
 }
 export function relocateConvergenceArtifactPaths(convergence, oldRunDir, newRunDir) {