@tea-agent/loop-agent 0.39.0-beta.13 → 0.39.0-beta.15

package/CHANGELOG.md

@@ -1,6 +1,8 @@
 # 更新日志
 
 ## [Unreleased]
+- 0.39.0-beta.15（frontend-node dogfood）：修复自动前端路由修改 task.json 后未同步 Task Contract，导致批准阶段反复出现 externally-modified、contract binding drift 和 DAG 启动失败的问题；同时修复 adopt/import refresh 丢失 source fidelity ledger hash 的问题。
+- 0.39.0-beta.14（frontend-node dogfood）：plan-pi 三段分段会话 + coverage 需求批次切片（4/批、零进度减半）、finalize 收据修复环（聚合诊断+修复 JSON）、record_* 边界校验左移（VT 重复/writeSet/交互 VT 引用/规范需求 id/可疑 symbol）、编译装配 last-wins（组件按 purpose 去重修正）、review-context 授权面扩展至 VT 测试文件、设计评审修订降级为 admission advisory。
 - 前端 DAG 极端环境加固（16KB 输出 / 120KB 上下文真实冒烟，r2-r5 验证）：`frontend-contract-pi` 改为消费编译后的 ledger 输入块（`<frontend_contract_input>`，12KB 上限、cap ladder、requirement id 永不丢）并移除 read 工具，以增量 `record_*` 提交为唯一输出模式（OUTPUT BUDGET DISCIPLINE），修复极端小输出窗口下模型反复 read 源文件空转 1h54m 超时的问题（r3 起 contract 3m54s 正常完成、37 次 record_* / 0 次 read）；plan/contract 的 `record_*` 工具支持每 message 最多 5 条批量提交并加 1s 调用间隔，rate-limit 退避上限提高到 60s，缓解密集小调用触发第三方网关限流；修复 fragment-inventory 对 V4 标题式 AC（`#### AC-NNN`）的双重 emit 缺陷（同一标题行被 section 入口与正文 heading 分支各切一次，30 个 AC 结构性产生 30 个 duplicate）。
 
 - 修复连续 `dag rerun-task` 丢失前代评审意见的问题：直接父 run 未走到 review/design review 时，`deriveDagRerunFeedback` 沿 run-owned lineage 有界追溯最近 5 层并继承最近的 committed typed findings；较近的 `approve_review` / `approve_design` 作为对应 resolution barrier，防止已解决 finding 被复活。lineage run ID、生命周期目录与 `state.json.runId` 必须一致，损坏、越界、循环或超深链路 fail closed。

package/dist/application/dag/generate-task-dag.js

@@ -280,12 +280,12 @@ export async function generateTaskDagUseCase(input) {
             requestPayloadSha256: randomUUID().replaceAll("-", "").padEnd(64, "0"),
         });
     }
-    const candidateResult = await initHybridDagFromTask(repoRoot, parsed.taskId, {
+    let candidateResult = await initHybridDagFromTask(repoRoot, parsed.taskId, {
         outputPath: parsed.outputPath,
         template: "standard-dag",
         rerunFeedback: parsed.rerunFeedback,
     });
-    const candidateValidateSummary = await validateDagUseCase(buildValidateInput(repoRoot, candidateResult.outputPath, parsed));
+    let candidateValidateSummary = await validateDagUseCase(buildValidateInput(repoRoot, candidateResult.outputPath, parsed));
     const profileRouting = await resolveProfileRouting(repoRoot, parsed, candidateValidateSummary.governanceProfile ?? {
         profile: "standard",
         process: [],
@@ -322,6 +322,30 @@ export async function generateTaskDagUseCase(input) {
                 taskKind: "frontend-implementation",
                 dagFallbackReason: "Automatically classified as a high-confidence frontend implementation task.",
             });
+            // taskKind participates in task.json's canonical hash. Adopt the
+            // automatic route before exposing this DAG, then regenerate it so its
+            // frozen taskContractBinding points at the adopted revision.
+            const state = await observeTaskContract({
+                repoRoot,
+                taskId: parsed.taskId,
+            });
+            if (!state.ref || !state.observedCanonicalHash) {
+                throw new Error("automatic frontend routing could not reconcile the managed Task Contract");
+            }
+            await adoptTaskContract({
+                repoRoot,
+                taskId: parsed.taskId,
+                expectedRevision: state.ref.revision,
+                expectedObservedHash: state.observedCanonicalHash,
+                requestId: `automatic-frontend-route-${parsed.taskId}-${randomUUID()}`,
+                requestPayloadSha256: randomUUID().replaceAll("-", "").padEnd(64, "0"),
+            });
+            candidateResult = await initHybridDagFromTask(repoRoot, parsed.taskId, {
+                outputPath: parsed.outputPath,
+                template: "standard-dag",
+                rerunFeedback: parsed.rerunFeedback,
+            });
+            candidateValidateSummary = await validateDagUseCase(buildValidateInput(repoRoot, candidateResult.outputPath, parsed));
         }
     }
     const initResult = profileRouting.selectedTemplate === candidateResult.template

package/dist/application/task-lifecycle/advance.js

@@ -260,6 +260,10 @@ async function monitorRun(input) {
         failureCategory: "monitor-timeout",
     });
 }
+function isStartupGateEligible(snapshot) {
+    const status = snapshot.source?.sourceFidelityStartup?.status;
+    return status === undefined || status === "complete" || status === "not-applicable";
+}
 function nextMutationAction(actions) {
     for (const action of actions) {
         if (action.type !== "stop")
@@ -379,7 +383,10 @@ export async function advanceTaskLifecycle(input) {
             };
         }
         const token = parseGateToken(input.rejectGateToken);
-        const currentGate = snapshot.gate ?? (await buildCurrentGate(input.repoRoot, input.taskId));
+        const currentGate = snapshot.gate ??
+            (isStartupGateEligible(snapshot)
+                ? await buildCurrentGate(input.repoRoot, input.taskId)
+                : null);
         if (!currentGate || !gateMatches(currentGate, token)) {
             return {
                 taskId: input.taskId,
@@ -443,11 +450,12 @@ export async function advanceTaskLifecycle(input) {
         dryRun,
         skipFinalize: Boolean(input.skipFinalize),
         forcePrepareContract: Boolean(input.fromDraftPath) && !preparedContractThisCall,
+        startupRepairAttempted: preparedContractThisCall,
     });
     if (dryRun) {
         const plan = planOnce(snapshot);
         const plannedGate = snapshot.gate ??
-            (snapshot.dagDraft?.exists
+            (isStartupGateEligible(snapshot) && snapshot.dagDraft?.exists
                 ? await buildCurrentGate(input.repoRoot, input.taskId)
                 : null);
         return {
@@ -586,6 +594,10 @@ export async function advanceTaskLifecycle(input) {
             continue;
         }
         if (action.type === "prepare-contract") {
+            const startupStatus = snapshot.source?.sourceFidelityStartup?.status;
+            const startupRepairAction = startupStatus === "missing" ||
+                startupStatus === "invalid" ||
+                startupStatus === "coverage-incomplete";
             // 生产 source fidelity Pi 接线（AC-PROD-001/005）：仅 frontend-implementation
             // 任务注入 reconcile executor + 独立 reviewer；ineligible 返回 undefined 不接线。
             // 主路径与 semantic-intake retry 路径共用同一接线，保证任意一条生产路径都实际
@@ -731,7 +743,9 @@ export async function advanceTaskLifecycle(input) {
                                     message: "structured requirement draft via semantic intake; projected managed source",
                                 });
                                 preparedContractThisCall = true;
-                                if (refreshManagedContractThisCall || input.fromDraftPath) {
+                                if (startupRepairAction ||
+                                    refreshManagedContractThisCall ||
+                                    input.fromDraftPath) {
                                     refreshManagedContractThisCall = false;
                                     regenerateDagThisCall = true;
                                 }
@@ -825,7 +839,9 @@ export async function advanceTaskLifecycle(input) {
                 break;
             }
             preparedContractThisCall = true;
-            if (refreshManagedContractThisCall || input.fromDraftPath) {
+            if (startupRepairAction ||
+                refreshManagedContractThisCall ||
+                input.fromDraftPath) {
                 // The old DAG and gate were bound to the pre-mutation contract.
                 refreshManagedContractThisCall = false;
                 regenerateDagThisCall = true;

package/dist/application/task-lifecycle/observe.js

@@ -1,9 +1,11 @@
-import { access, readFile } from "node:fs/promises";
+import { access, readFile, readdir } from "node:fs/promises";
 import path from "node:path";
 import { getTaskDir, getTaskPaths, getTaskStatus, loadTaskConfig, } from "../../task/runtime.js";
 import { logicalRevisionForState, observeTaskContractState, } from "../../task/contract/index.js";
 import { assessDagRunLiveness, listAllDagRunEntries, readDagRunSpec, readDagRunState, } from "../../workflows/dag/lifecycle.js";
 import { resolveRunningControllerIdentity } from "../../shared/package-metadata.js";
+import { parseLedgerJson, validateRequirementLedger, } from "../../task/source-prepare/ledger.js";
+import { REQUIREMENT_LEDGER_FILE_NAME } from "../../task/source-prepare/types.js";
 import { loadLifecycleRecord } from "./record.js";
 import { buildGateBinding, buildWriteSetGate, buildWriteSetGateDelta, controllerIdentityAnchor, hashCanonicalPayload, normalizeWriteSet, sha256Hex, } from "./gates.js";
 async function exists(filePath) {
@@ -47,6 +49,140 @@ async function taskExists(repoRoot, taskId) {
     const paths = getTaskPaths(repoRoot, taskId);
     return exists(paths.taskConfigPath);
 }
+async function assessReferenceEvidence(referencesDir) {
+    try {
+        const entries = await readdir(referencesDir);
+        const importedPrdCount = entries.filter((name) => name.endsWith(".md")).length;
+        return importedPrdCount > 0
+            ? { status: "present", importedPrdCount }
+            : { status: "absent-or-empty", importedPrdCount: 0 };
+    }
+    catch (error) {
+        if (error &&
+            typeof error === "object" &&
+            "code" in error &&
+            error.code === "ENOENT") {
+            return { status: "absent-or-empty", importedPrdCount: 0 };
+        }
+        return {
+            status: "unknown",
+            importedPrdCount: 0,
+            error: error instanceof Error ? error.message : String(error),
+        };
+    }
+}
+function hasLedgerStructure(value) {
+    if (!value || typeof value !== "object")
+        return false;
+    const ledger = value;
+    return (typeof ledger.taskId === "string" &&
+        typeof ledger.inputDigest === "string" &&
+        typeof ledger.requirementSha256 === "string" &&
+        Array.isArray(ledger.sourcePaths) &&
+        Array.isArray(ledger.fragments) &&
+        Array.isArray(ledger.canonicalRequirements) &&
+        Boolean(ledger.stats && typeof ledger.stats === "object") &&
+        Array.isArray(ledger.unresolved) &&
+        Array.isArray(ledger.conflicts) &&
+        Array.isArray(ledger.sourceResolutions) &&
+        typeof ledger.schemaReconcilerVersion === "string" &&
+        typeof ledger.builtAt === "string");
+}
+async function assessSourceFidelityStartup(input) {
+    if (!input.applicable) {
+        return {
+            status: "not-applicable",
+            ledgerPath: input.ledgerPath,
+            diagnostics: [],
+        };
+    }
+    if (input.referenceEvidenceError) {
+        return {
+            status: "invalid",
+            ledgerPath: input.ledgerPath,
+            diagnostics: [
+                {
+                    code: "SOURCE_FIDELITY_LEDGER_STALE",
+                    message: `imported PRD reference evidence is unreadable: ${input.referenceEvidenceError}`,
+                },
+            ],
+        };
+    }
+    let raw;
+    try {
+        raw = await readFile(input.ledgerPath, "utf-8");
+    }
+    catch (error) {
+        const missing = !(await exists(input.ledgerPath));
+        return {
+            status: missing ? "missing" : "invalid",
+            ledgerPath: input.ledgerPath,
+            diagnostics: [
+                {
+                    code: missing
+                        ? "SOURCE_FIDELITY_LEDGER_MISSING"
+                        : "SOURCE_FIDELITY_LEDGER_STALE",
+                    message: missing
+                        ? "managed frontend task has no requirement-ledger.json"
+                        : `requirement ledger is unreadable: ${error instanceof Error ? error.message : String(error)}`,
+                },
+            ],
+        };
+    }
+    try {
+        const ledger = parseLedgerJson(raw);
+        if (!hasLedgerStructure(ledger)) {
+            return {
+                status: "invalid",
+                ledgerPath: input.ledgerPath,
+                diagnostics: [
+                    {
+                        code: "SOURCE_FIDELITY_LEDGER_STALE",
+                        message: "requirement ledger is missing required structural fields",
+                    },
+                ],
+            };
+        }
+        const nonDecisionErrors = validateRequirementLedger(ledger, {
+            allowedUnresolved: true,
+            allowedConflicts: true,
+        });
+        if (nonDecisionErrors.length > 0) {
+            const coverageCodes = new Set([
+                "SOURCE_FIDELITY_HIGH_RISK_UNCOVERED",
+                "SOURCE_FIDELITY_REQUIREMENT_NOT_COVERED",
+            ]);
+            return {
+                status: nonDecisionErrors.every((error) => coverageCodes.has(error.code))
+                    ? "coverage-incomplete"
+                    : "invalid",
+                ledgerPath: input.ledgerPath,
+                diagnostics: nonDecisionErrors,
+            };
+        }
+        const decisionErrors = validateRequirementLedger(ledger);
+        if (decisionErrors.length > 0) {
+            return {
+                status: "human-decision-blocked",
+                ledgerPath: input.ledgerPath,
+                diagnostics: decisionErrors,
+            };
+        }
+        return { status: "complete", ledgerPath: input.ledgerPath, diagnostics: [] };
+    }
+    catch (error) {
+        return {
+            status: "invalid",
+            ledgerPath: input.ledgerPath,
+            diagnostics: [
+                {
+                    code: "SOURCE_FIDELITY_LEDGER_STALE",
+                    message: error instanceof Error ? error.message : String(error),
+                },
+            ],
+        };
+    }
+}
 /**
  * Explicit Task↔DAG association only:
  * - lifecycle.json recorded runAssociations
@@ -182,10 +318,12 @@ export async function observeTaskLifecycle(repoRoot, taskId) {
     const record = await loadLifecycleRecord(repoRoot, taskId);
     const contractState = await observeTaskContractState(repoRoot, taskId);
     let title;
+    let taskKind;
     let taskConfigAllowed = [];
     try {
         const config = await loadTaskConfig(repoRoot, taskId);
         title = config.title;
+        taskKind = config.taskKind;
         taskConfigAllowed = config.allowedPaths ?? [];
     }
     catch {
@@ -199,19 +337,22 @@ export async function observeTaskLifecycle(repoRoot, taskId) {
         ...(requirementReady ? [] : [requirementPath]),
         ...(constraintsReady ? [] : [constraintsPath]),
     ];
-    let importedPrdCount = 0;
+    const contractManaged = contractState.effectiveStatus === "managed" || Boolean(contractState.ref);
     const referencesDir = path.join(paths.sourceDir, "references");
-    if (await exists(referencesDir)) {
-        // Count is best-effort; absence is fine.
-        try {
-            const { readdir } = await import("node:fs/promises");
-            const entries = await readdir(referencesDir);
-            importedPrdCount = entries.filter((name) => name.endsWith(".md")).length;
-        }
-        catch {
-            importedPrdCount = 0;
-        }
-    }
+    const referenceEvidence = await assessReferenceEvidence(referencesDir);
+    const importedPrdCount = referenceEvidence.importedPrdCount;
+    const ledgerPath = path.join(paths.sourceDir, REQUIREMENT_LEDGER_FILE_NAME);
+    const sourceFidelityStartup = await assessSourceFidelityStartup({
+        ledgerPath,
+        applicable: contractManaged &&
+            taskKind === "frontend-implementation" &&
+            referenceEvidence.status !== "absent-or-empty",
+        referenceEvidenceError: referenceEvidence.status === "unknown"
+            ? referenceEvidence.error
+            : undefined,
+    });
+    const sourceFidelityReady = sourceFidelityStartup.status === "complete" ||
+        sourceFidelityStartup.status === "not-applicable";
     const dagDraftPath = paths.dagDraftPath;
     const dagDraftExists = await exists(dagDraftPath);
     let specHash = null;
@@ -285,7 +426,11 @@ export async function observeTaskLifecycle(repoRoot, taskId) {
     // Open gate only when draft is strict-validated and the current binding is
     // not already approved/rejected. Rejected same-digest gates stay closed
     // until contract/source/DAG/writeSet/controller binding changes.
-    const gate = gateBound && strictValidated && !approvedCurrent && !rejectedCurrent
+    const gate = gateBound &&
+        strictValidated &&
+        sourceFidelityReady &&
+        !approvedCurrent &&
+        !rejectedCurrent
         ? buildWriteSetGate({ taskId, bound: gateBound, delta: gateDelta })
         : null;
     const gateOpen = Boolean(gate);
@@ -310,11 +455,10 @@ export async function observeTaskLifecycle(repoRoot, taskId) {
                 activeRun.failureCategory === "needs-attention" ||
                 activeRun.failureCategory === "suspected-stall" ||
                 activeRun.failureCategory === "monitor-timeout"));
-    const contractManaged = contractState.effectiveStatus === "managed" || Boolean(contractState.ref);
     const lifecycleState = deriveLifecycleState({
         exists: true,
         contractManaged,
-        sourceReady: requirementReady,
+        sourceReady: requirementReady && sourceFidelityReady,
         dagValidated: strictValidated,
         gateOpen: Boolean(gate),
         activeRun,
@@ -352,6 +496,7 @@ export async function observeTaskLifecycle(repoRoot, taskId) {
             constraintsReady,
             importedPrdCount,
             missing,
+            sourceFidelityStartup,
         },
         dagDraft: {
             path: dagDraftPath,
@@ -375,7 +520,16 @@ export async function observeTaskLifecycle(repoRoot, taskId) {
             exists: closeoutExists || Boolean(record?.closeout),
         },
         completedTransitions: record?.completedTransitions ?? [],
-        blockers: [],
+        blockers: sourceFidelityReady
+            ? []
+            : sourceFidelityStartup.diagnostics.map((diagnostic) => ({
+                code: diagnostic.code,
+                message: diagnostic.message,
+                details: {
+                    startupStatus: sourceFidelityStartup.status,
+                    ledgerPath: sourceFidelityStartup.ledgerPath,
+                },
+            })),
         warnings: [],
         next,
     };

package/dist/application/task-lifecycle/plan-transitions.js

@@ -46,6 +46,37 @@ export function planTransitions(input) {
         actions.push({ type: "recover-contract" });
         expectedTransitions.push("contract-recovered");
     }
+    const startupStatus = snapshot.source?.sourceFidelityStartup?.status;
+    const startupRepairDetected = startupStatus === "missing" ||
+        startupStatus === "invalid" ||
+        startupStatus === "coverage-incomplete";
+    if (startupRepairDetected && input.startupRepairAttempted) {
+        actions.push({ type: "stop", reason: "blocker" });
+        return {
+            actions,
+            gate: null,
+            blockers,
+            next: {
+                kind: "advance",
+                command: `loop-agent task advance ${snapshot.taskId} --json`,
+            },
+            expectedTransitions,
+        };
+    }
+    const startupRepairRequired = startupRepairDetected;
+    if (startupStatus === "human-decision-blocked") {
+        actions.push({ type: "stop", reason: "blocker" });
+        return {
+            actions,
+            gate: null,
+            blockers,
+            next: {
+                kind: "external-action",
+                description: "Requirement ledger requires an existing human source decision; preserve sourceResolutions, resolve the blocker, then advance again.",
+            },
+            expectedTransitions,
+        };
+    }
     const sourceReady = snapshot.source?.requirementReady === true;
     const contractManaged = snapshot.contract?.effectiveStatus === "managed" ||
         Boolean(snapshot.contract?.revision && snapshot.contract.revision > 0);
@@ -53,7 +84,9 @@ export function planTransitions(input) {
     // Prefer prepare once PRDs are on disk; re-import only when caller still
     // signals hasPrdInput (advance.ts latches this after one import per call).
     const shouldImportPrd = input.hasPrdInput;
-    if (input.forcePrepareContract || input.refreshManagedContract) {
+    if (input.forcePrepareContract ||
+        input.refreshManagedContract ||
+        startupRepairRequired) {
         if (shouldImportPrd) {
             actions.push({ type: "import-prd" });
             expectedTransitions.push("prd-imported");
@@ -124,7 +157,8 @@ export function planTransitions(input) {
     const strictValidated = snapshot.dagDraft?.strictValidated === true;
     const dagRefreshRequired = Boolean(input.forceDagRefresh ||
         input.refreshManagedContract ||
-        input.forcePrepareContract);
+        input.forcePrepareContract ||
+        startupRepairRequired);
     if (!dagExists || dagRefreshRequired) {
         actions.push({ type: "generate-dag" });
         expectedTransitions.push("dag-generated");
@@ -145,10 +179,11 @@ export function planTransitions(input) {
         snapshot.lifecycleState === "evidence-closed" ||
         snapshot.lifecycleState === "needs-attention" ||
         snapshot.lifecycleState === "awaiting-decision";
-    const approvedForCurrent = postRunState || (input.approveGate && gate !== null);
+    const approveCurrentGate = input.approveGate && !dagRefreshRequired;
+    const approvedForCurrent = postRunState || (approveCurrentGate && gate !== null);
     if (!approvedForCurrent && (strictValidated || !dagExists || dagRefreshRequired)) {
         // Gate opens after generate+validate in the advance loop; plan includes open.
-        if (!input.approveGate) {
+        if (!approveCurrentGate) {
             actions.push({ type: "open-write-set-gate" });
             expectedTransitions.push("write-set-gate-opened");
             if (input.dryRun) {
@@ -177,14 +212,14 @@ export function planTransitions(input) {
         (snapshot.lifecycleState === "run-failed" && !failedRecoverable) ||
         snapshot.lifecycleState === "evidence-closed";
     if (!alreadyTerminalRun) {
-        if (input.approveGate && !postRunState) {
+        if (approveCurrentGate && !postRunState) {
             expectedTransitions.push("write-set-approved");
             actions.push({ type: "start-or-monitor-run" });
             expectedTransitions.push("dag-run-started", "dag-run-monitored");
         }
         else if (snapshot.lifecycleState === "running" ||
             snapshot.activeRun ||
-            (input.approveGate && Boolean(snapshot.activeRun))) {
+            (approveCurrentGate && Boolean(snapshot.activeRun))) {
             actions.push({ type: "start-or-monitor-run" });
             expectedTransitions.push("dag-run-monitored");
         }
@@ -218,7 +253,7 @@ export function planTransitions(input) {
         actions,
         gate,
         blockers,
-        next: deriveNext(snapshot, gate, input.approveGate),
+        next: deriveNext(snapshot, gate, approveCurrentGate),
         expectedTransitions,
     };
 }

package/dist/build-stamp.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "version": "0.39.0-beta.13",
-  "gitSha": "5d72ad152e1f52f7001782af509a53f11c330aa4",
-  "builtAt": "2026-08-29T13:28:15.172Z"
+  "version": "0.39.0-beta.15",
+  "gitSha": "188a3e304d6301cac9e02e309e47fae29bb05be2",
+  "builtAt": "2026-08-30T12:30:20.874Z"
 }