@tea-agent/loop-agent 0.39.0-beta.2 → 0.39.0-beta.4

package/dist/workflows/dag/types.js

@@ -1,8 +1,8 @@
 import { z } from "zod";
-import { isOpenspecSpecFilePath } from "../../shared/openspec-spec.js";
+import { DEFAULT_FRONTEND_SPEC_ROOTS, isFrontendSpecFilePath, isValidFrontendSpecRoot, OPENSPEC_SPEC_EXT_RE, } from "../../shared/openspec-spec.js";
 import { campaignBudgetSchema, } from "../../application/evaluation/budget.js";
 import { assertDagPromptSourceRule } from "./prompt-source.js";
-import { dagRetryPolicySchema } from "./retry-policy.js";
+import { dagRetryPolicySchema, TARGET_TEMPLATE_TRANSIENT_RETRY_PROFILE, } from "./retry-policy.js";
 import { dagLivenessPolicySchema, } from "./liveness-policy.js";
 import { dagOutputProtocolSchema } from "./output-protocol.js";
 export const dagComplexitySchema = z.enum(["HIGH", "MED", "LOW"]);
@@ -10,6 +10,18 @@ export const dagNodeExecutorSchema = z.enum(["pi", "shell", "static"]);
 export const CURSOR_DAG_EXECUTOR_REMOVED_ERROR = 'executor "cursor" is no longer supported; regenerate the DAG with Pi-only writers (implement-pi / repair-pi)';
 export const CURSOR_EXECUTOR_MODELS_REMOVED_ERROR = "executorModels.cursor is no longer supported; use executorModels.pi only";
 export const dagToolProfileSchema = z.enum(["read-only", "write"]);
+/**
+ * Frozen Pi extension short ids for backend implementation DAGs (plan
+ * 2026-08-21 D2): the DAG carries only these ids; the executor resolves them
+ * against the Pi settings package inventory at run time. Adding a package
+ * requires changing this enum and the plan.
+ */
+export const dagPiExtensionIdSchema = z.enum(["pi-codegraph", "pi-lens"]);
+/** Node-level explicit Pi extension allowlist (omitted = all off, R8.1). */
+export const dagPiExtensionsSchema = z
+    .array(dagPiExtensionIdSchema)
+    .min(1)
+    .transform((ids) => Array.from(new Set(ids)));
 /** Static command capabilities only; tasks cannot inject executables or shell prefixes. */
 export const dagCommandCapabilitySchema = z.enum(["playwright-cli"]);
 export const dagCommandPolicySchema = z.discriminatedUnion("mode", [
@@ -173,7 +185,16 @@ const dagFrontendNodeIdSchema = z
     .regex(/^[a-z][a-z0-9-]*$/, "frontend node id must be kebab-case");
 const openspecCandidatePathSchema = z
     .string()
-    .refine((candidate) => !candidate.includes("\\") && isOpenspecSpecFilePath(candidate), "openspec candidate must be a repo-relative supported file under openspec/schemas/, openspec/project-specs/, or ai_workspace/");
+    .refine((candidate) => !candidate.includes("\\") &&
+    !candidate.startsWith("/") &&
+    !candidate.split("/").includes("..") &&
+    OPENSPEC_SPEC_EXT_RE.test(candidate), "openspec candidate must be a repo-relative supported specification file");
+const openspecCandidateSnapshotSchema = z
+    .object({
+    path: openspecCandidatePathSchema,
+    sha256: z.string().regex(/^[a-f0-9]{64}$/),
+})
+    .strict();
 export const dagFrontendPrewriteGateSchema = z.object({
     schemaVersion: z.literal(1),
     planFromNodeId: dagFrontendNodeIdSchema,
@@ -192,7 +213,24 @@ export const dagFrontendPrewriteGateSchema = z.object({
     outputDir: z.string().regex(/^[a-z0-9][a-z0-9._-]*$/),
     requireSourceFreshness: z.literal(true),
     implementationWriteSet: z.array(z.string().min(1)).min(1).optional(),
+    /**
+     * Generation-frozen roots that bound custom normative directories. Omitted
+     * legacy DAGs retain the canonical OpenSpec + ai_workspace roots.
+     */
+    openspecSpecRoots: z
+        .array(z.string().refine((root) => isValidFrontendSpecRoot(root), "openspec spec root must be a normalized repo-relative directory"))
+        .optional(),
     openspecCandidatePaths: z.array(openspecCandidatePathSchema).default([]),
+    /** Read-only selector output; omitted for scan-strict and legacy DAGs. */
+    openspecSelectionNodeId: dagFrontendNodeIdSchema.optional(),
+    /** Contract-declared and source-explicit paths that cannot be downgraded. */
+    openspecMandatoryPaths: z.array(openspecCandidatePathSchema).optional(),
+    /**
+     * Content fingerprints frozen with the generation-time OpenSpec scope. New
+     * DAGs use these to reject a plan whose cited specification changed after it
+     * was read; legacy DAGs without the field retain existence-only drift checks.
+     */
+    openspecCandidateSnapshots: z.array(openspecCandidateSnapshotSchema).optional(),
     /**
      * Generation-frozen component/theme specification bucket. Derived from
      * `designEvidence.classified.component ∪ theme ∪ rule.components` at DAG
@@ -237,14 +275,28 @@ export const dagFrontendPrewriteGateSchema = z.object({
         scanStrict: z.array(openspecCandidatePathSchema).default([]),
     })
         .optional(),
+}).superRefine((gate, context) => {
+    const roots = gate.openspecSpecRoots ?? DEFAULT_FRONTEND_SPEC_ROOTS;
+    const candidateGroups = [
+        ["openspecCandidatePaths", gate.openspecCandidatePaths],
+        ["openspecMandatoryPaths", gate.openspecMandatoryPaths],
+        ["componentSpecCandidatePaths", gate.componentSpecCandidatePaths],
+        ["openspecCandidateSources.declared", gate.openspecCandidateSources?.declared],
+        ["openspecCandidateSources.taskSourceCited", gate.openspecCandidateSources?.taskSourceCited],
+        ["openspecCandidateSources.scanStrict", gate.openspecCandidateSources?.scanStrict],
+    ];
+    for (const [field, paths] of candidateGroups) {
+        for (const [index, candidate] of (paths ?? []).entries()) {
+            if (!isFrontendSpecFilePath(candidate, roots)) {
+                context.addIssue({
+                    code: z.ZodIssueCode.custom,
+                    path: [...field.split("."), index],
+                    message: "openspec candidate must be a supported file under the generation-frozen openspec spec roots",
+                });
+            }
+        }
+    }
 });
-export const dagFrontendLintBaselineSchema = z
-    .object({
-    schemaVersion: z.literal(1),
-    lintCommands: z.array(z.string().min(1)).min(1),
-    lintEvidence: dagShellVerifyEvidenceSchema,
-})
-    .strict();
 export const dagFrontendVerificationBundleSchema = z
     .object({
     schemaVersion: z.literal(1),
@@ -258,7 +310,9 @@ export const dagFrontendVerificationBundleSchema = z
     behaviorEvidence: dagShellVerifyEvidenceSchema,
     lintBaselineNodeId: dagFrontendNodeIdSchema.optional(),
     writerNodeIds: z.array(dagFrontendNodeIdSchema).optional(),
-    mode: z.enum(["initial", "repair"]),
+    /** M8: verify-shell only ever runs in initial mode; a failure is terminal
+     * (routes to recovery) and never selects a same-run repair branch. */
+    mode: z.literal("initial"),
 })
     .superRefine((bundle, context) => {
     const groups = [
@@ -333,6 +387,135 @@ export const dagFrontendReviewContextSchema = z.object({
     schemaVersion: z.literal(1),
     requireBaseline: z.literal(true),
 });
+/**
+ * Deterministic frontend contract-import shell (micro topology). Re-validates
+ * the generation-frozen managed Contract's source/binding/schema freshness and
+ * emits a digest. It never invokes a model and never rewrites requirements —
+ * micro requires a pre-validated managed Contract, not natural-language intake.
+ */
+export const dagFrontendContractImportSchema = z.object({
+    schemaVersion: z.literal(1),
+    artifactName: z.string().regex(/^[a-z0-9][a-z0-9._-]*\.json$/),
+    outputDir: z.string().regex(/^[a-z0-9][a-z0-9._-]*$/),
+    requireSourceFreshness: z.literal(true),
+});
+/**
+ * Deterministic frontend design-policy shell (M8). Materializes the canonical
+ * implementation contract from the plan node and evaluates the design policy
+ * (Mock strategy, source freshness, component spec candidates, writeSet
+ * patterns, allowed dependencies). Runs BEFORE frontend-design-review-pi, so it
+ * never consumes a design verdict; the verdict is enforced by the writer
+ * admission shell instead. Replaces the prewrite-gate authorization path.
+ */
+export const dagFrontendDesignPolicySchema = z
+    .object({
+    schemaVersion: z.literal(1),
+    planFromNodeId: dagFrontendNodeIdSchema,
+    requiredRequirementIds: z
+        .array(z.string().regex(/^(?:REQ|BR|AC)-[A-Z0-9]+(?:-[A-Z0-9]+)*$/))
+        .default([]),
+    allowedMockStrategies: z
+        .array(z.enum(["native", "browser-intercept", "request-adapter", "not-needed"]))
+        .min(1),
+    /** Frozen Mock verification command labels the DAG will actually execute. */
+    mockCommandLabels: z.array(z.string()).default([]),
+    artifactName: z.string().regex(/^[a-z0-9][a-z0-9._-]*\.json$/),
+    outputDir: z.string().regex(/^[a-z0-9][a-z0-9._-]*$/),
+    requireSourceFreshness: z.literal(true),
+    implementationWriteSet: z.array(z.string().min(1)).min(1).optional(),
+    /** Generation-frozen roots that bound custom normative directories. */
+    openspecSpecRoots: z
+        .array(z.string().refine((root) => isValidFrontendSpecRoot(root), "openspec spec root must be a normalized repo-relative directory"))
+        .optional(),
+    openspecCandidatePaths: z.array(openspecCandidatePathSchema).default([]),
+    /** Read-only selector output; omitted for scan-strict and legacy DAGs. */
+    openspecSelectionNodeId: dagFrontendNodeIdSchema.optional(),
+    /** Contract-declared and source-explicit paths that cannot be downgraded. */
+    openspecMandatoryPaths: z.array(openspecCandidatePathSchema).optional(),
+    openspecCandidateSnapshots: z
+        .array(openspecCandidateSnapshotSchema)
+        .optional(),
+    /**
+     * Generation-frozen component/theme specification bucket. Derived from
+     * `designEvidence.classified.component ∪ theme ∪ rule.components` at DAG
+     * generation. When non-empty and the canonical contract has UI-visible
+     * work, the design policy requires a non-empty `uiComponentChoices` and
+     * cross-checks each `specReference.path` against this set + the effective
+     * plan openspec-citations block.
+     */
+    componentSpecCandidatePaths: z.array(openspecCandidatePathSchema).optional(),
+    /** OpenSpec gate policy (cited | scan-strict); generation always writes it. */
+    openspecPolicy: z.enum(["cited", "scan-strict"]).optional(),
+    /** Generation-frozen candidate source metadata (diagnostic). */
+    openspecCandidateSources: z
+        .object({
+        declared: z.array(openspecCandidatePathSchema).default([]),
+        taskSourceCited: z.array(openspecCandidatePathSchema).default([]),
+        scanStrict: z.array(openspecCandidatePathSchema).default([]),
+    })
+        .optional(),
+    /** Dependency identifiers authorized at generation time (empty = none). */
+    allowedDependencies: z.array(z.string()).default([]),
+})
+    .superRefine((gate, context) => {
+    const roots = gate.openspecSpecRoots ?? DEFAULT_FRONTEND_SPEC_ROOTS;
+    const candidateGroups = [
+        ["openspecCandidatePaths", gate.openspecCandidatePaths],
+        ["openspecMandatoryPaths", gate.openspecMandatoryPaths],
+        ["componentSpecCandidatePaths", gate.componentSpecCandidatePaths],
+        ["openspecCandidateSources.declared", gate.openspecCandidateSources?.declared],
+        ["openspecCandidateSources.taskSourceCited", gate.openspecCandidateSources?.taskSourceCited],
+        ["openspecCandidateSources.scanStrict", gate.openspecCandidateSources?.scanStrict],
+    ];
+    for (const [field, paths] of candidateGroups) {
+        for (const [index, candidate] of (paths ?? []).entries()) {
+            if (!isFrontendSpecFilePath(candidate, roots)) {
+                context.addIssue({
+                    code: z.ZodIssueCode.custom,
+                    path: [...field.split("."), index],
+                    message: "openspec candidate must be a supported file under the generation-frozen openspec spec roots",
+                });
+            }
+        }
+    }
+});
+/**
+ * Deterministic frontend writer-admission shell (M8). Runs after
+ * frontend-design-review-pi: freezes the writer baseline, derives the concrete
+ * writeSet, folds the design-policy result + design verdict into admission,
+ * and writes contracts/frontend-writer-admission-result.json
+ * (schemaId frontend-writer-admission-shell-v1).
+ */
+export const dagFrontendWriterAdmissionShellSchema = z
+    .object({
+    schemaVersion: z.literal(1),
+    /** Design verdict source (frontend-design-review-pi); pass is enforced.
+     * Omitted in small topology, which has no design review node. */
+    designReviewFromNodeId: dagFrontendNodeIdSchema.optional(),
+    /** Frozen command labels the verification bundle will execute. */
+    frozenCommandLabels: z.array(z.string()).default([]),
+    allowedMockStrategies: z
+        .array(z.enum(["native", "browser-intercept", "request-adapter", "not-needed"]))
+        .min(1),
+    /** Writer-preceding lint commands; baseline is materialized here (R5). */
+    lintCommands: z.array(z.string().min(1)).optional(),
+    lintEvidence: dagShellVerifyEvidenceSchema.optional(),
+})
+    .superRefine((admission, context) => {
+    if ((admission.lintCommands?.length ?? 0) > 0 && !admission.lintEvidence) {
+        context.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["lintEvidence"],
+            message: "lintEvidence is required when lintCommands are present",
+        });
+    }
+});
+/** Deterministic frontend closeout shell (M8). Renders the closeout from
+ * committed facts only (review context + typed review terminal + trace). */
+export const dagFrontendCloseoutSchema = z.object({
+    schemaVersion: z.literal(1),
+    reviewFromNodeId: dagFrontendNodeIdSchema,
+});
 export const ENV_VAR_NAME_PATTERN = /^[A-Z_][A-Z0-9_]*$/;
 export const dagVersionSchema = z
     .union([z.literal(1), z.literal(2), z.literal(3), z.literal(4)])
@@ -380,7 +563,14 @@ export const dagWriteGuardPolicySchema = z.enum(["full", "tools-only"]);
  */
 export const dagWriterOutcomePolicySchema = z
     .object({
-    type: z.literal("implementation-outcome-v1"),
+    /**
+     * Protocol face: `implementation-outcome-v1` keeps the legacy
+     * IMPLEMENTATION_OUTCOME first-line protocol (backend/README/module
+     * writers + frontend-repair-pi); `frontend-facts-v1` derives the status
+     * from mechanical facts (write-tool events / run delta / write guard /
+     * requirement coverage / focused-check) and never reads the first line.
+     */
+    type: z.enum(["implementation-outcome-v1", "frontend-facts-v1"]),
     /** Generation writers may forbid already-satisfied/no-diff completion. */
     requireChangedFiles: z.boolean().optional(),
 })
@@ -427,6 +617,8 @@ export const dagBackendTestPipelineSchema = z.enum([
     "ingest-backend-test-gap",
 ]);
 export const dagFrontendBrowserToolPreflightSchema = z.object({}).strict();
+export const dagFrontendTestStandardScenariosSchema = z.object({}).strict();
+export const dagFrontendTestEnvironmentProbeSchema = z.object({}).strict();
 export const dagFrontendTestEvidenceValidationSchema = z.object({}).strict();
 export const dagFrontendTestCaseChecklistSchema = z.object({}).strict();
 export const dagFrontendTestHtmlReportSchema = z.object({}).strict();
@@ -511,12 +703,17 @@ export const dagShellConfigSchema = z.object({
         .optional(),
     requirementCoverageGate: dagRequirementCoverageGateSchema.optional(),
     jsonArtifactGate: dagJsonArtifactGateSchema.optional(),
+    frontendDesignPolicy: dagFrontendDesignPolicySchema.optional(),
+    frontendWriterAdmission: dagFrontendWriterAdmissionShellSchema.optional(),
     frontendPrewriteGate: dagFrontendPrewriteGateSchema.optional(),
-    frontendLintBaseline: dagFrontendLintBaselineSchema.optional(),
     frontendVerificationBundle: dagFrontendVerificationBundleSchema.optional(),
     frontendReviewContext: dagFrontendReviewContextSchema.optional(),
+    frontendContractImport: dagFrontendContractImportSchema.optional(),
+    frontendCloseout: dagFrontendCloseoutSchema.optional(),
     frontendTestCaseChecklist: dagFrontendTestCaseChecklistSchema.optional(),
     frontendBrowserToolPreflight: dagFrontendBrowserToolPreflightSchema.optional(),
+    frontendTestStandardScenarios: dagFrontendTestStandardScenariosSchema.optional(),
+    frontendTestEnvironmentProbe: dagFrontendTestEnvironmentProbeSchema.optional(),
     frontendTestEvidenceValidation: dagFrontendTestEvidenceValidationSchema.optional(),
     finalWriteSetApprovalGate: dagFinalWriteSetApprovalGateSchema.optional(),
     frontendTestL5Report: z.object({}).strict().optional(),
@@ -749,6 +946,13 @@ export const dagTaskSchema = z.object({ id: z.string().regex(/^[a-z][a-z0-9-]*$/
     role: dagRoleSchema.optional(),
     skills: z.array(z.string()).optional(),
     toolProfile: dagToolProfileSchema.optional(),
+    /**
+     * Explicit Pi extension allowlist (backend implementation DAGs only):
+     * frozen short ids resolved at run time against the Pi settings package
+     * inventory. Omitted = extension discovery stays fully closed (R8.1).
+     * Only `executor: "pi"` nodes may declare it (validated fail-closed).
+     */
+    piExtensions: dagPiExtensionsSchema.optional(),
     /** Default deny: file write (toolProfile=write) does not grant command execution. */
     commandPolicy: dagCommandPolicySchema.optional(),
     writePolicy: dagWritePolicySchema.optional(),
@@ -782,10 +986,6 @@ export const dagTaskSchema = z.object({ id: z.string().regex(/^[a-z][a-z0-9-]*$/
          * this run-owned skeleton before strict contract validation.
          */
         skeleton: z.record(z.string(), z.unknown()).optional(),
-        /** Frontend plan/revision citation fence is only needed for a
-         * generation-frozen OpenSpec candidate set. Undefined preserves the
-         * historical required-fence protocol. */
-        citationsRequired: z.boolean().optional(),
     })
         .strict()
         .superRefine((value, ctx) => {
@@ -800,12 +1000,6 @@ export const dagTaskSchema = z.object({ id: z.string().regex(/^[a-z][a-z0-9-]*$/
         }
     })
         .optional(),
-    /**
-     * Opt-in upstream context mode for nodes that must consume a validated,
-     * hash-bound artifact rather than a potentially truncated text preview.
-     * The default remains preview mode for every existing DAG.
-     */
-    artifactFirstUpstreamNodeIds: z.array(z.string()).optional(),
     /**
      * Fail-closed outcome/diff consistency contract for bounded Pi writers.
      * The writer must begin with IMPLEMENTATION_OUTCOME: changed,
@@ -836,6 +1030,14 @@ export const dagTaskSchema = z.object({ id: z.string().regex(/^[a-z][a-z0-9-]*$/
     forbiddenPaths: z.array(z.string()).optional().default([]),
     decisionGate: dagDecisionGateSchema.optional(),
     retryPolicy: dagRetryPolicySchema.optional(),
+    /**
+     * Generation-path stamp for implicit same-run transient retry. Only the
+     * three target templates stamp canonical final verify shells and
+     * exclusive `implement-pi`. Zod-declared so parseDagSpec does not strip it.
+     */
+    transientRetryProfile: z
+        .literal(TARGET_TEMPLATE_TRANSIENT_RETRY_PROFILE)
+        .optional(),
     /** Optional per-node adaptive liveness override (merged over defaults). */
     livenessPolicy: dagLivenessPolicySchema,
     dynamicExpansion: dagDynamicExpansionSchema.optional(),
@@ -1056,6 +1258,9 @@ export const FRONTEND_RECOVERY_RESULT_SCHEMA_VERSION = 1;
  * Phase 3a parents converge first, so `rollback-pending` is not produced and
  * was removed by AC-1; the phase starts at `child-staging` and ends at
  * `settled`.
+ *
+ * @deprecated Read-only compatibility only; the M6 operation controller no
+ * longer uses this phase as the authoritative recovery entry point.
  */
 export const frontendRecoveryPhaseSchema = z.enum([
     "child-staging",
@@ -1075,6 +1280,9 @@ export const frontendRecoveryPhaseSchema = z.enum([
  * runner's `(existing?.revision ?? 0) + 1` CAS write (the schema only bounds it
  * non-negative). `childRunId` may be absent through `child-activating` and must
  * be non-empty from `child-running` onward.
+ *
+ * @deprecated Read-only compatibility only; the runner no longer writes this
+ * intent (the M6 operation controller supervises recovery instead).
  */
 export const frontendRecoveryStateSchema = z
     .object({
@@ -1146,6 +1354,10 @@ export const frontendRecoveryEvidenceRefSchema = z
  * stays permissive (failureClass optional, evidenceRefs may be empty) so it
  * accepts the runner's actual phase-3a products, which do not always carry a
  * failure class or evidence reference.
+ *
+ * @deprecated Read-only compatibility only; the M6 operation controller writes
+ * `recovered`/`auto-recovery-blocked` results directly and never uses this
+ * schema as the authoritative recovery settlement.
  */
 export const frontendRecoveryResultSchema = z
     .object({

package/dist/workflows/dag/upstream-artifacts.js

@@ -38,10 +38,6 @@ export function relocateNodeArtifactPaths(node, oldRunDir, newRunDir) {
     node.stdoutArtifactPath = rewrite(node.stdoutArtifactPath);
     node.assistantArtifactPath = rewrite(node.assistantArtifactPath);
     node.structuredArtifactPath = rewrite(node.structuredArtifactPath);
-    if (node.frontendPlanOutput) {
-        node.frontendPlanOutput.citationsArtifactPath = rewrite(node.frontendPlanOutput.citationsArtifactPath);
-        node.frontendPlanOutput.rawCandidatePath = rewrite(node.frontendPlanOutput.rawCandidatePath);
-    }
     node.nodeRecordPath = rewrite(node.nodeRecordPath);
 }
 export function relocateConvergenceArtifactPaths(convergence, oldRunDir, newRunDir) {

package/dist/workflows/dag/validate.js

@@ -1,4 +1,4 @@
-import { DEFAULT_DAG_EXECUTOR_MODELS, ENV_VAR_NAME_PATTERN, dagCommandPolicyAllows, resolveDagCommandPolicy, } from "./types.js";
+import { DEFAULT_DAG_EXECUTOR_MODELS, ENV_VAR_NAME_PATTERN, dagCommandPolicyAllows, dagPiExtensionIdSchema, resolveDagCommandPolicy, } from "./types.js";
 import { resolveShellCommands } from "../../executors/shell-executor.js";
 import { pathMatchesPattern } from "../../shared/git-progress.js";
 import { resolveRepairTaskForGate } from "./repair-artifact.js";
@@ -463,8 +463,12 @@ function validateShellTaskConfig(task, spec, issues) {
     if (commands.length === 0 &&
         !shell.jsonArtifactGate &&
         !shell.backendTestPipeline &&
-        !shell.frontendPrewriteGate &&
+        !shell.frontendDesignPolicy &&
+        !shell.frontendWriterAdmission &&
+        !shell.frontendCloseout &&
         !shell.frontendBrowserToolPreflight &&
+        !shell.frontendTestStandardScenarios &&
+        !shell.frontendTestEnvironmentProbe &&
         !shell.frontendVerificationBundle &&
         !shell.frontendReviewContext &&
         !shell.frontendTestCaseChecklist &&
@@ -534,18 +538,26 @@ function validateShellTaskConfig(task, spec, issues) {
             }
         }
     }
-    if (shell.frontendPrewriteGate) {
-        const sourceNodeIds = [
-            shell.frontendPrewriteGate.planFromNodeId,
-            ...shell.frontendPrewriteGate.planFallbackFromNodeIds,
-            shell.frontendPrewriteGate.reviewFromNodeId,
-            ...shell.frontendPrewriteGate.reviewFallbackFromNodeIds,
-        ];
+    if (shell.frontendDesignPolicy) {
+        const sourceNodeIds = [shell.frontendDesignPolicy.planFromNodeId];
         for (const sourceNodeId of new Set(sourceNodeIds)) {
             if (!task.depends_on.includes(sourceNodeId)) {
                 issues.push({
                     type: "missing-dependency",
-                    message: `shell task ${task.id} frontendPrewriteGate source ${sourceNodeId} must be a direct dependency`,
+                    message: `shell task ${task.id} frontendDesignPolicy source ${sourceNodeId} must be a direct dependency`,
+                });
+            }
+        }
+    }
+    if (shell.frontendWriterAdmission) {
+        const sourceNodeIds = shell.frontendWriterAdmission.designReviewFromNodeId
+            ? [shell.frontendWriterAdmission.designReviewFromNodeId]
+            : [];
+        for (const sourceNodeId of new Set(sourceNodeIds)) {
+            if (!task.depends_on.includes(sourceNodeId)) {
+                issues.push({
+                    type: "missing-dependency",
+                    message: `shell task ${task.id} frontendWriterAdmission source ${sourceNodeId} must be a direct dependency`,
                 });
             }
         }
@@ -953,6 +965,7 @@ export function validateDagSpec(spec) {
         validateCommandPolicyTaskConfig(task, issues);
         validateDynamicChildCommandPolicy(task, issues);
         validateProjectGovernanceTaskConfig(task, spec, issues);
+        validatePiExtensionsTaskConfig(task, issues);
         validateFailureAwareDependsOn(task, spec, issues);
     }
     validateSameRankWriteSetConflicts(spec, ranks, issues);
@@ -963,6 +976,43 @@ export function validateDagSpec(spec) {
     }
     return issues;
 }
+/**
+ * Fail-closed `piExtensions` validation (plan 2026-08-21 D1/D2):
+ * - only `executor: "pi"` nodes may declare it (shell/static reject);
+ * - unknown ids outside the frozen enum are rejected at parse time by zod,
+ *   and here for task objects that bypass schema parsing;
+ * - closeout nodes must stay fully closed (extension-free) — the two-bucket
+ *   generator never assigns it there, so any appearance is contract drift.
+ */
+function validatePiExtensionsTaskConfig(task, issues) {
+    const ids = task.piExtensions;
+    if (ids === undefined)
+        return;
+    if (task.executor !== "pi") {
+        issues.push({
+            type: "invalid-pi-extensions-config",
+            message: `task ${task.id} piExtensions requires executor "pi" (found ${task.executor})`,
+        });
+        return;
+    }
+    const allowed = new Set(dagPiExtensionIdSchema.options);
+    for (const id of ids) {
+        if (!allowed.has(id)) {
+            issues.push({
+                type: "invalid-pi-extensions-config",
+                message: `task ${task.id} piExtensions has unknown id "${id}"; allowed: ${[
+                    ...allowed,
+                ].join(", ")}`,
+            });
+        }
+    }
+    if (task.id === "closeout-pi" && ids.length > 0) {
+        issues.push({
+            type: "invalid-pi-extensions-config",
+            message: "closeout-pi must stay extension-free (read buckets exclude closeout)",
+        });
+    }
+}
 function validateProjectGovernanceTaskConfig(task, spec, issues) {
     if (task.governanceStandardReview) {
         if (task.executor !== "pi" ||

package/docs/init-surface.manifest.json

@@ -50,6 +50,9 @@
     "scripts/kb-graph-materialize.mjs",
     "scripts/kb-graph-promote.mjs",
     "scripts/kb-graph-incremental-prepare.mjs",
+    "scripts/next-info.mjs",
+    "scripts/next-publish-gate.mjs",
+    "scripts/release-source-binding.mjs",
     "docs/templates/agent-dag.schema.json",
     "examples/example-dag.json",
     "skills/agent-worker/SKILL.md",
@@ -277,6 +280,7 @@
     "harness.json",
     "package.json",
     "src/commands/init.ts",
+    "src/commands/init-model-catalog.ts",
     "src/commands/client-recovery.ts",
     "src/commands/init-upgrade.ts",
     "src/cli.ts",
@@ -302,6 +306,7 @@
         "description": "Changes that may alter target-project initialization behavior, default DAG role skills, skill resolution, or package/init contracts.",
         "patterns": [
           "src/commands/init.ts",
+          "src/commands/init-model-catalog.ts",
           "src/commands/client-recovery.ts",
           "src/commands/init-upgrade.ts",
           "src/cli.ts",

package/docs/operations/README.md

@@ -7,7 +7,7 @@
 - [`local-development-environment.md`](local-development-environment.md)：本地环境、Windows 差异和常见排障。
 - [`branch-merge-guideline.md`](branch-merge-guideline.md)：按风险选择合并模式并留下 source-SHA 证据。
 - [`github-collaboration.md`](github-collaboration.md)：仓库内 GitHub 协作约定及发布通道。
-- [`version-and-release-management.md`](version-and-release-management.md)：版本发布管理——next / release-x.y / latest 渠道、workflow 与 promote 手册。
+- [`version-and-release-management.md`](version-and-release-management.md)：版本发布管理——next / release-x.y / latest 渠道、移动式 `npm-next` ref、`inspect next` 查询入口、workflow 与 promote 手册。
 - [`production-readiness.md`](production-readiness.md)：交付前的生产就绪判断。
 - [`agent-worker-production-readiness.md`](agent-worker-production-readiness.md)：agent-worker Feature/Task Pool 外层编排的 Production Readiness v1 操作合同。
 - [`backend-test-jacoco-coverage.md`](backend-test-jacoco-coverage.md)：Java 被测服务挂载 JaCoCo tcpserver agent 的 Maven、`java -jar` 与 Docker 操作手册。

package/docs/templates/agent-dag.schema.json

@@ -130,6 +130,18 @@
     "toolProfile": {
       "enum": ["read-only", "write"]
     },
+    "piExtensionId": {
+      "type": "string",
+      "enum": ["pi-codegraph", "pi-lens"],
+      "description": "Frozen Pi extension short id resolved at run time against the Pi settings package inventory. Adding a package requires changing the plan and this enum."
+    },
+    "piExtensions": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": { "$ref": "#/$defs/piExtensionId" },
+      "description": "Node-level explicit Pi extension allowlist (backend implementation DAGs only). Omitted = extension discovery stays fully closed (R8.1). Only executor 'pi' nodes may declare it."
+    },
     "role": {
       "enum": ["planner", "scout", "implementer", "reviewer", "supervisor", "verifier", "closeout"]
     },
@@ -356,6 +368,31 @@
           "properties": { "schemaVersion": { "const": 1 }, "requireBaseline": { "const": true } }
         },
         "frontendTestCaseChecklist": { "type": "object", "additionalProperties": false },
+        "frontendBrowserToolPreflight": { "type": "object", "additionalProperties": false },
+        "frontendTestStandardScenarios": { "type": "object", "additionalProperties": false },
+        "frontendTestEnvironmentProbe": { "type": "object", "additionalProperties": false },
+        "frontendTestCaseManifest": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "maxCases": { "type": "integer", "minimum": 1 },
+            "declaredAcIds": { "type": "array", "items": { "type": "string" } }
+          }
+        },
+        "frontendTestResultFinalize": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "declaredAcIds": { "type": "array", "items": { "type": "string" } }
+          }
+        },
+        "frontendTestReports": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "l5": { "type": "boolean" }
+          }
+        },
         "frontendTestEvidenceValidation": { "type": "object", "additionalProperties": false },
         "frontendTestHtmlReport": { "type": "object", "additionalProperties": false },
         "backendTestPipeline": {
@@ -383,6 +420,12 @@
         { "required": ["frontendVerificationBundle"] },
         { "required": ["frontendReviewContext"] },
         { "required": ["frontendTestCaseChecklist"] },
+        { "required": ["frontendBrowserToolPreflight"] },
+        { "required": ["frontendTestStandardScenarios"] },
+        { "required": ["frontendTestEnvironmentProbe"] },
+        { "required": ["frontendTestCaseManifest"] },
+        { "required": ["frontendTestResultFinalize"] },
+        { "required": ["frontendTestReports"] },
         { "required": ["frontendTestEvidenceValidation"] },
         { "required": ["frontendTestHtmlReport"] },
         { "required": ["backendTestPipeline"] }
@@ -485,6 +528,7 @@
           "items": { "type": "string", "minLength": 1 }
         },
         "toolProfile": { "$ref": "#/$defs/toolProfile" },
+        "piExtensions": { "$ref": "#/$defs/piExtensions" },
         "governanceStandardReview": {
           "type": "boolean",
           "description": "Explicitly opts this node into writer-change-scoped AGENTS.md and repository-local code-standard review. Never inferred from node id or role."

package/docs/templates/frontend-test-dag.json

@@ -66,12 +66,11 @@
         ".harness/**",
         "artifacts/**"
       ],
-      "outputContract": "Write testcase/frontend/rag/standard-scenarios.v1.json for generate-time standard scenario coverage.",
-      "subtask_prompt": "Materialize frontend-test standard scenarios v1 into the RAG package.",
+      "outputContract": "Write testcase/frontend/rag/standard-scenarios.v1.json for generate-time standard scenario coverage. Copy docs/templates or harness.json governanceRoot templates (including ai_workspace/loop-agent/templates) when present; otherwise write the minimal STD-FE-SMOKE-ENTRY fallback.",
+      "subtask_prompt": "Prepare frontend-test package: materialize standard-scenarios.v1.json into the RAG package from docs/templates, governanceRoot/templates, or the init-projected ai_workspace/loop-agent/templates path.",
       "shell": {
-        "commands": [
-          "node -e \"const fs=require('fs'),path=require('path');const dest='testcase/frontend/rag/standard-scenarios.v1.json';const candidates=[path.join('docs','templates','frontend-test-standard-scenarios.v1.json')];let src=null;for(const c of candidates){if(fs.existsSync(c)){src=c;break;}}fs.mkdirSync(path.dirname(dest),{recursive:true});if(src){fs.copyFileSync(src,dest);process.stdout.write(JSON.stringify({status:'copied',from:src,to:dest}));}else{const minimal={schemaVersion:1,id:'frontend-test-standard-scenarios-v1',scenarios:[{id:'STD-FE-SMOKE-ENTRY',title:'入口可打开',category:'smoke',priority:'must',testPoints:['open'],minCases:1}]};fs.writeFileSync(dest,JSON.stringify(minimal,null,2)+'\\n');process.stdout.write(JSON.stringify({status:'fallback',to:dest}));}"
-        ],
+        "commands": [],
+        "frontendTestStandardScenarios": {},
         "cwd": ".",
         "timeoutMs": 60000
       }
@@ -120,12 +119,11 @@
         ".harness/**",
         "artifacts/**"
       ],
-      "outputContract": "Fail-closed environment preflight: absolute non-production baseUrl + curl HTTP reachability; writes environmentProbe facts; unreachable => blockedReason frontend-base-url-unreachable (node ERROR so generate/map do not run).",
-      "subtask_prompt": "Parse the concrete baseUrl selected by retrieve-frontend-test-context-pi from testcase/frontend/rag/context.md. Reject production, non-http(s), credentials, query and fragment. Probe with curl (HEAD then GET fallback; connect/max-time; no auth/cookie). 2xx/3xx => reachable and continue. 4xx/5xx/DNS/timeout/connection refused/TLS => blockedReason frontend-base-url-unreachable. Missing curl => blockedReason curl-unavailable. Do not start the app. Runtime hybrid generator embeds the authoritative probe script.",
+      "outputContract": "Fail-closed environment preflight: absolute non-production baseUrl + curl HTTP reachability; writes environmentProbe facts; unreachable => blockedReason frontend-base-url-unreachable with errorClass (connection-refused / dns-unresolved / connect-timeout / http-N). Node ERROR so generate/map do not run. Does not start the app.",
+      "subtask_prompt": "Parse the concrete baseUrl selected by retrieve-frontend-test-context-pi from testcase/frontend/rag/context.md. Reject production, non-http(s), credentials, query and fragment. Probe with curl (HEAD then GET fallback; connect/max-time; no auth/cookie). 2xx/3xx => reachable and continue. Connection refused records errorClass=connection-refused and tells the operator to start the local app then rerun from this node. 4xx/5xx/DNS/timeout/TLS => blockedReason frontend-base-url-unreachable. Missing curl => blockedReason curl-unavailable. Do not start the app.",
       "shell": {
-        "commands": [
-          "node -e \"console.log('template placeholder: runtime hybrid DAG embeds curl preflight; do not use this static command as source of truth')\""
-        ],
+        "commands": [],
+        "frontendTestEnvironmentProbe": {},
         "cwd": ".",
         "timeoutMs": 60000
       }

package/docs/templates/frontend-test-dag.retrieve-context.prompt.md

@@ -17,5 +17,5 @@ Do not claim the environment is reachable until preflight completes. Preflight d
 
 ## Standard scenario coverage
 
-- Copy or reference `docs/templates/frontend-test-standard-scenarios.v1.json` into `testcase/frontend/rag/standard-scenarios.v1.json` when available.
+- Copy or reference `docs/templates/frontend-test-standard-scenarios.v1.json`, `harness.json` `governanceRoot`/templates, or the init-projected `ai_workspace/loop-agent/templates/frontend-test-standard-scenarios.v1.json` into `testcase/frontend/rag/standard-scenarios.v1.json` when available.
 - Add `## Standard scenario coverage` to coverage-map.md with planned/n/a for each must scenario.