@tea-agent/loop-agent 0.39.0-beta.7 → 0.39.0-beta.9

package/dist/workflows/dag/runner.js

@@ -26,11 +26,12 @@ import { runConvergencePassController, } from "./convergence/controller.js";
 import { executeDagRanksOnce, FRONTEND_PREWRITE_RESULT_SOURCE_ARTIFACT, FRONTEND_WRITER_NODE_IDS, isConditionSkippedReason, readFrontendPrewriteResult, } from "./scheduler.js";
 import { topoSortToRanks } from "./topo.js";
 import { isFrontendWriterTransientPartialWrite } from "./frontend-writer-recovery.js";
-import { classifyReviewIssueCategoryFailureOwner, readCommittedReviewRequestFact, writeFrontendReviewFindingsPrd, } from "./frontend-review-findings.js";
+import { classifyReviewIssueCategoryFailureOwner, readCommittedDesignRequestFact, readCommittedReviewRequestFact, writeFrontendReviewFindingsPrd, } from "./frontend-review-findings.js";
 import { bindFrontendShapeStateToRunTopology, commitFrontendShapeTransitionCas, commitRuntimeFrontendShapeFact, isCanonicalFrontendShapeDag, } from "./frontend-shape-facts.js";
 import { assertFrontendTopologyBinding, buildFrontendTopologyBinding, computeFrontendShapeSourceDigest, } from "./frontend-shape.js";
 import { ensureFrontendShapeCapsuleRecord } from "./frontend-shape-capsule-store.js";
 import { parseDagSpec, resolveModelForTask, } from "./types.js";
+import { acquireDagRecoveryLease, bindDagRecoveryLeaseExecution, } from "./recovery-lease.js";
 import { executeDynamicCondition } from "./dynamic-runtime/condition.js";
 import { executeDynamicLoopUntil } from "./dynamic-runtime/loop-until.js";
 import { executeDynamicMapExpansion } from "./dynamic-runtime/map.js";
@@ -794,7 +795,7 @@ async function executeDagCheckpoint(input) {
             runDir = await moveToPausedRunDir(runDir, pausedRunDir);
         }
         else {
-            const { recoveryPending, recovery: recoveryTrigger } = await finalizeTerminalRunStatus(state, spec.tasks.length, runDir, cwd);
+            const { recoveryPending, recovery: recoveryTrigger } = await finalizeTerminalRunStatus(state, spec.tasks.length, runDir, cwd, spec.frontendRecovery?.maxContinuations ?? 1);
             await finalizeRunOwnedInterrupt({
                 runDir,
                 state,
@@ -822,6 +823,15 @@ async function executeDagCheckpoint(input) {
                         "frontend recovery request-id reuse conflict";
                     state.frontendRecoveryResult = buildRecoveryResultForTrigger(state, recoveryTrigger, "auto-recovery-blocked");
                 }
+                else if (created.kind === "lease-held") {
+                    // A different recovery entrance has already durably claimed this
+                    // parent. Do not "help" by running its operation: that would reopen
+                    // the exact two-child-DAG race the lease prevents.
+                    state.status = "failed";
+                    state.terminalReason =
+                        "frontend recovery parent lease already held";
+                    state.frontendRecoveryResult = buildRecoveryResultForTrigger(state, recoveryTrigger, "auto-recovery-blocked");
+                }
                 else {
                     const { runRecoveryOperationController } = await import("./frontend-recovery-controller.js");
                     const result = await runRecoveryOperationController({
@@ -1042,7 +1052,7 @@ function buildRecoveryResultForTrigger(state, trigger, outcome) {
         evidenceRefs: [],
     };
 }
-export async function finalizeTerminalRunStatus(state, taskCount, runDir, cwd) {
+export async function finalizeTerminalRunStatus(state, taskCount, runDir, cwd, frontendRecoveryQuota = 1) {
     const repoRoot = cwd ?? path.resolve(runDir, "..", "..", "..", "..");
     if (state.frontendShapeState?.terminalOutcome &&
         state.frontendShapeState.transitionCapsule) {
@@ -1064,16 +1074,53 @@ export async function finalizeTerminalRunStatus(state, taskCount, runDir, cwd) {
             // every other blocked admission is terminal.
             const planContractInvalid = admission.result.classification === "blocked" &&
                 admission.result.failureSource === "frontend-plan-pi";
+            // A blocked admission caused by the design review committing
+            // `request_design_changes` is a definite finding (not a protocol or
+            // environment error): the design was reviewed and rejected. It is the
+            // design-review analog of review-request-changes — not terminal, but
+            // re-enters the next plan round with the committed design findings.
+            // The failureSource may be frontend-writer-admission-shell or
+            // frontend-design-policy-shell; the committed design fact is the
+            // authoritative signal.
+            const designRequestFact = await readCommittedDesignRequestFact({
+                runDir,
+            });
+            const designRejected = admission.result.classification === "blocked" &&
+                designRequestFact !== undefined;
             const terminalAdmissionDenial = (admission.result.classification === "blocked" ||
                 admission.result.classification === "stale") &&
-                !planContractInvalid;
+                !planContractInvalid &&
+                !designRejected;
             if (terminalAdmissionDenial) {
                 state.status = "failed";
                 return { recoveryPending: false };
             }
+            if (designRejected && designRequestFact) {
+                state.terminalReason = "design-request-changes";
+                try {
+                    await writeFrontendReviewFindingsPrd({
+                        runDir,
+                        parentRunId: state.runId,
+                        fact: designRequestFact,
+                    });
+                }
+                catch (error) {
+                    console.warn(`[run-dag] warning: failed to write frontend design findings PRD: ${error instanceof Error ? error.message : String(error)}`);
+                }
+                const continuationCount = state.frontendRecoveryState?.continuationCount ?? 0;
+                if (continuationCount < frontendRecoveryQuota) {
+                    recoveryTrigger = {
+                        requestId: state.runId,
+                        failureSource: "frontend-design-review-pi",
+                        failureOwner: classifyReviewIssueCategoryFailureOwner(designRequestFact.issueCategory),
+                        protocolFailureReason: `frontend design review request_design_changes (issueCategory=${designRequestFact.issueCategory})`,
+                        recoveryMode: "new-dag",
+                    };
+                }
+            }
             if (planContractInvalid) {
                 const continuationCount = state.frontendRecoveryState?.continuationCount ?? 0;
-                if (continuationCount >= 1) {
+                if (continuationCount >= frontendRecoveryQuota) {
                     // Continuation quota exhausted: a second contract-invalid candidate
                     // is authoritative candidate-contract-invalid → forced failed.
                     state.frontendRecoveryResult = buildCandidateContractInvalidResult(state, admission.result, admission.artifactHash);
@@ -1109,7 +1156,7 @@ export async function finalizeTerminalRunStatus(state, taskCount, runDir, cwd) {
         });
         if (writerNodeId) {
             const continuationCount = state.frontendRecoveryState?.continuationCount ?? 0;
-            if (continuationCount < 1) {
+            if (continuationCount < frontendRecoveryQuota) {
                 const { rollbackFrontendWriter } = await import("./frontend-writer-recovery.js");
                 const rollback = await rollbackFrontendWriter({
                     cwd: repoRoot,
@@ -1141,7 +1188,7 @@ export async function finalizeTerminalRunStatus(state, taskCount, runDir, cwd) {
         const verifyFailed = state.nodes["frontend-verify-shell"]?.status === "ERROR";
         if (verifyFailed) {
             const continuationCount = state.frontendRecoveryState?.continuationCount ?? 0;
-            if (continuationCount < 1) {
+            if (continuationCount < frontendRecoveryQuota) {
                 recoveryTrigger = {
                     requestId: state.runId,
                     failureSource: "frontend-verify-shell",
@@ -1179,7 +1226,7 @@ export async function finalizeTerminalRunStatus(state, taskCount, runDir, cwd) {
         }
         if (!recoveryTrigger && !skipFrontendRecovery) {
             const continuationCount = state.frontendRecoveryState?.continuationCount ?? 0;
-            if (continuationCount < 1) {
+            if (continuationCount < frontendRecoveryQuota) {
                 recoveryTrigger = {
                     requestId: state.runId,
                     failureSource: "frontend-review-pi",
@@ -1226,16 +1273,25 @@ export async function finalizeTerminalRunStatus(state, taskCount, runDir, cwd) {
 /**
  * Construct (or reuse) the recovery operation for a failed frontend run.
  *
- * The operation is keyed by a deterministic `clientRequestId`
- * (`dag-recovery-<parentRunId>`), so repeated wakeups of the same parent hit
- * `OperationStore.create`'s idempotent short-circuit instead of creating a
- * second recovery run (AC-004). The continuation DagSpec/reset partition is
- * frozen via `computeFrontendRecoveryPlanForSource` and serialized under the
- * run dir's bounded `.runtime/` namespace — never the repo root or `.harness`
- * siblings. `planHash` is the second idempotency dimension of `actionParams`.
+ * A parent-run atomic lease is acquired before `OperationStore.create`, then
+ * its operation id is persisted into that lease before the controller may run.
+ * `clientRequestId` remains a useful store-level replay key, but is not a
+ * cross-process recovery admission boundary. The continuation DagSpec/reset
+ * partition is frozen via `computeFrontendRecoveryPlanForSource` and
+ * serialized under the run dir's bounded `.runtime/` namespace. `planHash` is
+ * the second idempotency dimension of `actionParams`.
  */
 async function createRecoveryOperation(input) {
     const { cwd, runDir, spec, state, trigger } = input;
+    const recoveryLease = await acquireDagRecoveryLease({
+        cwd,
+        parentRunId: state.runId,
+        requestId: trigger.requestId,
+        kind: "auto-frontend-recovery",
+    });
+    if (recoveryLease.kind === "held") {
+        return { kind: "lease-held", lease: recoveryLease.lease };
+    }
     const { computeFrontendRecoveryPlanForSource } = await import("./frontend-recovery-plan.js");
     const plan = computeFrontendRecoveryPlanForSource({
         spec,
@@ -1255,7 +1311,7 @@ async function createRecoveryOperation(input) {
         recoveryMode: trigger.recoveryMode,
         plan,
     });
-    return input.deps.store.create({
+    const created = await input.deps.store.create({
         clientRequestId: `dag-recovery-${state.runId}`,
         action: "dagRunTask",
         actionParams: {
@@ -1277,6 +1333,17 @@ async function createRecoveryOperation(input) {
             "--json",
         ],
     });
+    if (created.kind !== "conflict") {
+        // The durable lease must name the operation before controller execution.
+        // A crash in this narrow window leaves a safely blocked reservation rather
+        // than a second process that can launch another recovery DAG.
+        await bindDagRecoveryLeaseExecution({
+            leasePath: recoveryLease.leasePath,
+            lease: recoveryLease.lease,
+            executionRef: created.operation.operationId,
+        });
+    }
+    return created;
 }
 function concurrentSiblingWriteSetsForNode(rankWriterNodeIds, nodeId, tasksById) {
     if (rankWriterNodeIds.length <= 1)

package/dist/workflows/dag/types.js

@@ -946,6 +946,15 @@ export const dagTaskSchema = z.object({ id: z.string().regex(/^[a-z][a-z0-9-]*$/
     role: dagRoleSchema.optional(),
     skills: z.array(z.string()).optional(),
     toolProfile: dagToolProfileSchema.optional(),
+    /** Bounded read-only discovery budget for nodes that inspect a repository. */
+    readBudget: z
+        .object({
+        maxFiles: z.number().int().positive(),
+        maxBytes: z.number().int().positive(),
+        maxMs: z.number().int().positive().optional(),
+    })
+        .strict()
+        .optional(),
     /**
      * Explicit Pi extension allowlist (backend implementation DAGs only):
      * frozen short ids resolved at run time against the Pi settings package
@@ -1071,20 +1080,51 @@ export const dagEvaluationBindingSchema = z
     .strict();
 /** Eval Lab Campaign Budget (W3.4); enforced by runner ledger when mode=hard. */
 export const dagBudgetSchema = campaignBudgetSchema;
-export const dagSourceBindingSchema = z.object({
+export const dagSourceBindingSourceSchema = z.object({
+    kind: z.enum(["requirement", "constraint", "reference"]),
+    path: z.string().min(1),
+    sha256: z
+        .string()
+        .regex(/^[a-f0-9]{64}$/, "sha256 must be lowercase hex"),
+});
+/**
+ * DagSourceBinding v1：无 ledger 字段（schemaVersion=1，.strict() 拒绝 ledger
+ * 字段混入，不得以 v1+optional 冒充 v2）。非 frontend task / 无可解析引用时使用。
+ */
+export const dagSourceBindingV1Schema = z
+    .object({
     schemaVersion: z.literal(1),
     taskId: z.string().min(1),
-    sources: z
-        .array(z.object({
-        kind: z.enum(["requirement", "constraint", "reference"]),
-        path: z.string().min(1),
-        sha256: z
-            .string()
-            .regex(/^[a-f0-9]{64}$/, "sha256 must be lowercase hex"),
-    }))
-        .min(1),
+    sources: z.array(dagSourceBindingSourceSchema).min(1),
     requirementIds: z.array(z.string().regex(/^(?:REQ|BR|AC)-[A-Z0-9]+(?:-[A-Z0-9]+)*$/)),
-});
+})
+    .strict();
+/**
+ * DagSourceBinding v2（20260824-frontend-source-fidelity-ledger-v1）：仅
+ * frontend-implementation 且存在可解析 requirement/acceptance 引用时产出；
+ * ledgerPath/ledgerSha256/inputDigest/requirementToFragments 全部必填且完整，
+ * 伪造或缺失任一字段被 schema/prewrite 拒绝（AC-002 / AC-FIDELITY-REPAIR-002）。
+ */
+export const dagSourceBindingV2Schema = z
+    .object({
+    schemaVersion: z.literal(2),
+    taskId: z.string().min(1),
+    sources: z.array(dagSourceBindingSourceSchema).min(1),
+    requirementIds: z.array(z.string().regex(/^(?:REQ|BR|AC)-[A-Z0-9]+(?:-[A-Z0-9]+)*$/)),
+    /** 受管 requirement-ledger.json 的 DAG 可解析路径（.harness/tasks/…/source/…）。 */
+    ledgerPath: z.string().min(1),
+    ledgerSha256: z.string().regex(/^[a-f0-9]{64}$/),
+    inputDigest: z.string().regex(/^[a-f0-9]{64}$/),
+    requirementToFragments: z.record(z.string(), z.array(z.string())),
+})
+    .strict();
+export const dagSourceBindingSchema = z.discriminatedUnion("schemaVersion", [
+    dagSourceBindingV1Schema,
+    dagSourceBindingV2Schema,
+]);
+export function isDagSourceBindingV2(binding) {
+    return binding.schemaVersion === 2;
+}
 const dagRerunFeedbackEvidencePathSchema = z
     .string()
     .min(1)
@@ -1147,6 +1187,22 @@ export const dagSpecSchema = z
     taskContractBinding: dagTaskContractBindingSchema.optional(),
     /** Optional unresolved parent-run feedback for a full task rerun. */
     rerunFeedback: dagRerunFeedbackSchema.optional(),
+    /** Frontend recovery continuation quota (frozen at generation time from
+     * task.json frontendRecovery.maxContinuations). Bounds how many times a
+     * failed frontend run may auto-recover via M6 recovery operations before
+     * the run stays failed and needs human intervention. */
+    frontendRecovery: z
+        .object({
+        maxContinuations: z
+            .number()
+            .int()
+            .min(1)
+            .max(5)
+            .optional()
+            .default(1),
+    })
+        .strict()
+        .optional(),
     /** Frozen backend-test artifact layout (plan A); absent = historical default testcase/ layout. */
     backendTestLayout: z
         .object({

package/docs/README.md

@@ -27,6 +27,7 @@
 | 选择快速、标准或完整验证命令 | `governance/verification-matrix.md` |
 | 理解 CLI、runtime 和初始化能力边界 | `runtime/loop-agent-harness.md` |
 | 运行 DAG、查看报告或处理失败 | `runtime/agent-dag-runner.md`、`runtime/agent-dag-recovery-playbook.md`；Operator Chat P0 closeout 见 `reports/feature/2026-08-14-operator-chat-dag-recovery-p0.md` |
+| 理解前端实现 DAG 与需求保真账本 | `runtime/frontend-implementation-workflow.md`（含 source fidelity ledger v2 绑定、顺序 reconciliation、独立 reviewer、human resolution 与 prewrite fail-closed）；init-evolution 审查见 `reports/init-evolution/2026-08-24-frontend-source-fidelity-ledger-init-evolution-review.md` |
 | 按 TDD、验证和调试纪律推进修复 | `governance/harness-methodology-tdd.md`、`governance/harness-methodology-verification.md`、`governance/harness-methodology-debugging.md` |
 | 执行真实 backend-test provider 验证 | `runtime/backend-test-live-campaign.md` |
 | 判断单任务 loop-agent Production Readiness | `operations/production-readiness.md` |

package/docs/architecture/evolution.md

@@ -33,6 +33,7 @@ loop-agent CLI
 | Worker readiness baseline | Attempt identity、immutable owner、lineage/revision、task-scoped lease、controller protocol、acceptance、reconcile | Agent Worker PR v1 Phase 1–7 / `0.32.0` |
 | Operator Surface | 裸 `agent-worker console`；Operate、`/inspect/`、Operator Chat、recovery CTA、intake bridge | ADR 0005、0011–0013 |
 | 自举与验证 | controller identity、skill snapshot、deterministic/live canary、verified tarball、`verify:tree` receipt | `runtime-boundaries.md`、verification matrix |
+| Source fidelity ledger | 原始 requirement/acceptance 文档保持语义权威，派生 `source/需求.md` 仅作导航视图；确定性 fragment inventory、受管 `requirement-ledger.json`（进入 Task Contract transaction 与 canonical hash）、source binding v2（仅 frontend taskKind，schemaVersion=2 必填字段）、prewrite fail-closed 门禁（`SOURCE_FIDELITY_*`/`source-*` 稳定错误码）、顺序 reconciliation 与独立 reviewer、human resolution 生效、有界提示词与最终 reviewer 核对清单 | `20260824-frontend-source-fidelity-ledger-v1` + `2026-08-24-frontend-source-fidelity-repair-v2`（本页面下方 init-evolution 审查）、`CHANGELOG.md [Unreleased]` |
 
 ### 当前不变量
 
@@ -106,3 +107,47 @@ Evidence & Trust Plane
 2. 证明成立后更新 current capability summary 和本页“当前架构”。
 3. 未证明部分只保留在 active design/exec-plan，不能通过修改措辞升级状态。
 4. 使用者短索引同步到 `website/docs/overview/roadmap.md`，避免复制长版本流水账。
+
+## Init Evolution Review — 2026-08-24 frontend source fidelity ledger
+
+Base/Head：见 `docs/reports/init-evolution/` 中对应 `*-init-evolution-review.md`（若已提交则含 Base/Head 字段；未提交工作区由 CI 非严格模式放行）。
+
+### Changed Surface
+
+- `src/task/source-prepare/**`：新增 `fragment-inventory.ts`、`ledger.ts`；扩展 `types.ts`、`prepare.ts`、`completeness.ts`、`parse-intent.ts`（无外部 API 变化）。
+- `src/task/contract/**`：`requirement-ledger.json` 进入受管 transaction 与 canonical hash；`TaskContractSourceHashesV1` 新增可选 `requirementLedgerSha256`（legacy ref 向后兼容）。
+- `src/workflows/dag/**`：`dagSourceBindingSchema` 拆为 v1/v2 discriminated union（v2 schemaVersion=2，四个 ledger 字段全部必填；v1 strict 拒绝 ledger 字段）；`init-hybrid` 改读已持久化 ledger（缺失/漂移 fail closed）；prewrite 门禁新增 ledger 检查与失败码。
+- `src/task/source-prepare/**`：新增 `ledger-reconciliation.ts`（顺序 reconciliation）、`ledger-review.ts`（独立 reviewer）；fragment inventory 表格行切分、跨文档稳定 REQ-SRC ID、V4 显式 AC 标题；human resolution 生效。
+- `src/worker/observe/**`：新增只读 `GET /api/tasks/:id/ledger` 与展示（安全摘要，不泄漏原文）。
+- `src/worker/console/**`：Draft/ContractPanel/InspectSplitPanel 安全摘要展示。
+- `docs/templates/frontend-implementation-contract.schema.json`：requirements 增加可选 `sourceFragmentIds`/`sourceRefs`，sourceBinding 增加可选 ledger 字段（all-or-none）。
+
+### Decision
+
+**No init impact / Surface check only**。
+
+Rationale：
+
+- 新增均为模块内部实现；不新增 CLI 命令、不改 init 入口、不改变 target-project 初始化行为。
+- `docs/templates/frontend-implementation-contract.schema.json` 已随 `docs/templates/` 目录 glob 打包（`package.json files`），无需新增 manifest 条目。
+- 运行时加载 schema 的 `loadFrontendImplementationContractJsonSchema` 仅做结构性校验（$id/required/properties/const），新增可选字段不破坏既有契约。
+- 不新增任何运行时或开发依赖（node:crypto、既有 zod/Vitest/Vite/React 19）。
+
+### Updates Made
+
+- `docs/architecture/evolution.md`：本条目。
+- `CHANGELOG.md [Unreleased]`、`CONTEXT.md`：glossary 术语。
+- `docs/templates/frontend-implementation-contract.schema.json`：可选字段同步。
+
+### Verification
+
+```bash
+npm run typecheck && npm run console:typecheck
+npx vitest run test/task-source-prepare.test.ts test/task-contract-canonicalize.test.ts test/task-contract-observe.test.ts test/dag-init-hybrid.test.ts test/frontend-implementation-contract.test.ts test/frontend-prewrite-gate.test.ts test/frontend-writer-admission.test.ts test/worker/observe/dag-inspector-node-input.test.ts test/worker/console/inspect-split-panel.test.ts
+```
+
+### Residual Risk
+
+- 长尾 24K 截断遗漏回归：以确定性分片 inventory + ledger 覆盖统计断言固定（AC-FIDELITY-001/007）。
+- 账本漂移/篡改：inputDigest 复用失效 + prewrite fail closed（AC-FIDELITY-003/006）。
+- 既有带引用 frontend task 重建路径变化：ledger 纳入 canonical hash 改变 `observeTaskContractState` 判定，legacy ref 向后兼容覆盖（AC-FIDELITY-004）。

package/docs/init-surface.manifest.json

@@ -30,9 +30,11 @@
     "docs/templates/frontend-task-requirement.md",
     "docs/templates/frontend-task-constraints.md",
     "docs/templates/frontend-design-contract.md",
+    "docs/templates/frontend-implementation-contract.schema.json",
     "docs/templates/worker-dogfood-setup.md",
     "docs/templates/worker-dogfood-evidence.md",
     "docs/templates/harness.schema.json",
+    "docs/templates/spec-registry.schema.json",
     "docs/templates/interactive-ui-round2-experiment.md",
     "docs/templates/product-line/README.md",
     "docs/templates/product-line/AGENTS.md",
@@ -102,6 +104,7 @@
     "docs/feature-workflow.md",
     "docs/verification-matrix.md",
     "docs/loop-agent-harness.md",
+    "docs/spec-registry.json",
     "docs/harness-methodology-tdd.md",
     "docs/harness-methodology-verification.md",
     "docs/harness-methodology-debugging.md",
@@ -177,6 +180,7 @@
     ".pi/settings.json"
   ],
   "initSurface": {
+    "docs/spec-registry.json": "generated",
     "README.md": "managed-block",
     "AGENTS.md": "managed-block",
     ".gitignore": "managed-block",

package/docs/templates/README.md

@@ -37,7 +37,7 @@
 ## Frontend
 
 - `frontend-task-requirement.md`、`frontend-task-constraints.md`、`frontend-design-contract.md` — 前端任务输入与设计合同。
-- `frontend-implementation-contract.schema.json` — 前端实现合同 schema。
+- `frontend-implementation-contract.schema.json` — 前端实现合同 schema（sourceBinding v2 ledger 字段 all-or-none：任一出现则四项齐全，禁止 v1+optional 冒充 v2）。`requirements[].sourceRefs[].items` 使用合法 `$ref: #/$defs/path`（相对路径、无 `..` 逃逸、无反斜杠），模板 JSON 无非法键，运行时加载器可直接编译（AC-003）。
 - `frontend-test-dag.json` — frontend-test DAG 模板；其 deterministic checklist 会拒绝 alternative executable instructions，仅允许 allowlisted `playwright-cli` command。Pi generator/reviser 的 runtime writeSet 仅授权下列目标项目生成路径（不是本仓库文档索引目标）：
 
   ~~~text
@@ -56,6 +56,7 @@
 - `knowledge-sync-dag.json`、`knowledge-graph-bootstrap-dag.json` — 知识同步与图谱初始化 DAG。
 - `knowledge-sync-draft.schema.json` — 知识同步草稿 schema。
 - `harness.schema.json` — `harness.json` 的 IDE JSON Schema。
+- `spec-registry.schema.json` — 项目级 `ai_workspace/loop-agent/spec-registry.json` 的机器校验 schema。
 
 ## 子目录