@tea-agent/loop-agent 0.39.0-next.20 → 0.39.0-next.22

package/CHANGELOG.md

@@ -28,6 +28,10 @@
 
 ### 改进
 
+- Operator Chat 的乐观停止现在把“视觉已停止”和 Turn ownership 分开：Abort 获得可靠终态前明确显示“正在停止”，此时可为原会话保存一条服务端持久化的“停止后发送”消息；后一次覆盖前一次，切换会话、刷新页面或 Console 重启不会丢失，旧 Turn 结束后复用正常 Turn 准入路径自动发送，并以固定 `clientRequestId` 防止重复执行。
+- Operator Chat 修复快速终止时“停止后发送”与普通发送之间的准入空洞：发送路径改读实时 ownership；若 deferred 请求恰好撞上旧 Turn 终态，会先按服务端状态对账，再使用同一 `clientRequestId` 自动转为普通发送，不再要求用户刷新重试或丢失本次提交。
+- `dag rerun-task` 现在会把父 run 最后一轮仍未解决的 `verify-pi` / review 反馈、证据引用和修订轮次带入新完整 DAG；planner、implementer 与 verifier/reviewer 必须修复或举证说明不再适用，不能仅因文件已存在就返回 `already-satisfied`。Console 同步区分「自动修订」「从失败节点恢复」「带反馈重新执行任务」。
+- DAG 恢复与治理收敛收窄为两条最小路径：标准治理 `request-revision` 仅在 `maxFixLoops > 0` 时同 run 回到 `implement-pi`；writer 遇到 `unavailable` / `network` / `rate-limit` / `timeout` 时，`dag rerun --from-node` 重跑 writer 本身及安全下游，不再把 parent `ERROR` 改写成 `FINISHED`，任意自定义 shell 也不能仅凭 `verifyEvidence` 获得续跑资格。
 - `frontend-plan-pi` 改为 runtime skeleton + editable RFC 7386 patch：`schemaVersion`、source binding、risk、writer target files 与生产 Mock 安全位由 DAG 冻结且不可被 plan/revision 覆盖；节点 validator 将补丁编译为 canonical 完整契约后再交给 review/prewrite，并在 `contracts/candidates/<nodeId>/` 保存每次 raw/extracted/normalized/validation 证据。任务提示与三类结构化重试（invalid-output / provider length 截断 / output-too-large）同步收敛为单一 patch + 唯一 `openspec-citations`；无法在声明文件中解析的可选 verification symbol 会被确定性移除并留下 normalization action，避免格式冲突、完整契约重复输出和说明性 symbol 延迟到 trace 才失败。
 - Operator Chat 恢复工具对齐真实能力：系统提示改用 `dagReport` / `dagRerunPlan` / `dagRerun` / `standaloneTaskRerun` / `workerTaskRetry` 真名，不再写 `operator_*` 或把 `dagResume` 当成模型可执行项；`dagDoctor` / `dagStatus` / `workerPoolDoctor` 改为 typed `runId`/`taskId`，不再让模型猜 CLI `args[]`。ADR 0013 自定义 base prompt 上限由 1900 统一调整为 2500（2026-08-18，废止 0.8×2498 比例），预算用于写清节点续跑 / 整单重生 / Worker 重排队分流，以及多轮迭代恢复纪律（先一句话总结上一轮错误、修根因不修症状、禁止原样重交、同错两轮后停下报告）。
 - Operator Chat 模型工具面收敛：`advanced` 分类的命令（workflow/loop/benchmark/knowledge-graph 等 8 个只读低频入口）不再进入模型工具白名单，模型注意力集中到高频工具；保留的 27 个 model-callable 官方 CLI 动作全部换上「做什么 + 何时用」语义描述，不再是无信息的 `Official CLI action coverage for ...` 模板；dispatcher 对官方尾部动作的识别从描述前缀匹配改为结构化 `OFFICIAL_TAIL_ACTION_IDS` 集合判断。审查收口：`knowledgeCurate` 纠正为 `mutation`/`advanced`（条件写盘，移出模型面，防经 read 通道传 `--output` 写盘）；`promoteRun`/`closeoutTask` 描述去掉 dispatch 不保证的生命周期断言，如实标注为 task-advance 别名并提示先核 run/任务状态。工具清单渲染修复：promptSnippet 去掉重复工具名前缀（SDK 渲染自带 `- name:`，原实现名字出现两遍）；`inspect`/`status`/`spineCheck`/`sourceInstructions` 四条占位描述换成语义描述；task-advance 家族（`newTask`/`dagRunTask`）标注与标准流 `taskAdvance` 的关系，避免模型在 5 个相似入口间选错。可调用性修复：`observeLink` 补上 4 个可选参数 schema（dagRunId/taskId/featureId/workerRunId，原空 schema + additionalProperties:false 导致模型传参必被拒、工具名存实亡）；Pi 工具参数 schema 现在携带注册表里的参数描述（Type.String/Boolean/Number/Array 注入 `description`，原实现丢弃参数描述、模型只能看到参数名）。

package/dist/application/dag/generate-task-dag.js

@@ -279,6 +279,7 @@ export async function generateTaskDagUseCase(input) {
     const candidateResult = await initHybridDagFromTask(repoRoot, parsed.taskId, {
         outputPath: parsed.outputPath,
         template: "standard-dag",
+        rerunFeedback: parsed.rerunFeedback,
     });
     const candidateValidateSummary = await validateDagUseCase(buildValidateInput(repoRoot, candidateResult.outputPath, parsed));
     const profileRouting = await resolveProfileRouting(repoRoot, parsed, candidateValidateSummary.governanceProfile ?? {
@@ -324,8 +325,16 @@ export async function generateTaskDagUseCase(input) {
         : await initHybridDagFromTask(repoRoot, parsed.taskId, {
             outputPath: parsed.outputPath,
             template: profileRouting.selectedTemplate,
+            rerunFeedback: parsed.rerunFeedback,
         });
     const outputPath = initResult.outputPath;
+    if (parsed.expectedRerunFeedbackDigest) {
+        const generatedSpec = parseDagSpec(JSON.parse(await readFile(outputPath, "utf8")));
+        if (generatedSpec.rerunFeedback?.digest !==
+            parsed.expectedRerunFeedbackDigest) {
+            throw new Error(`rerun feedback drift: expected ${parsed.expectedRerunFeedbackDigest}, got ${generatedSpec.rerunFeedback?.digest ?? "missing"}`);
+        }
+    }
     const validateSummary = profileRouting.selectedTemplate === candidateResult.template
         ? candidateValidateSummary
         : await validateDagUseCase(buildValidateInput(repoRoot, outputPath, parsed));

package/dist/build-stamp.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
   "version": "0.37.0",
-  "gitSha": "a2ca9f2fc2fa0e3eee17e28fd1ad187819d922b7",
-  "builtAt": "2026-08-19T15:13:16.805Z"
+  "gitSha": "d9988c6066bf4bee704758d6c98aaf7990b32972",
+  "builtAt": "2026-08-20T02:47:19.956Z"
 }

package/dist/shared/operator/capabilities.js

@@ -1163,7 +1163,7 @@ export function buildOperatorCapabilitiesDocument() {
             resultSchemaVersion: 1,
             envelopeSchemaVersion: 1,
             requiredErrorCodes: ["INVALID_INPUT", "NOT_FOUND"],
-            description: "Read-only check: can this failed run continue from fromNode? Call after dagReport; pass primaryFailure.nodeId. Does not execute. eligible=true returns planHash for dagRerun. eligible=false: Worker/Task Pool Failed → workerTaskRetry; standalone Console run → standaloneTaskRerun after any required contract adopt. Do not call dagRerun or invent a new task.",
+            description: "Read-only check for failed-node recovery; it does not execute. Call after dagReport with primaryFailure.nodeId. eligible=true returns the exact planHash required by dagRerun. eligible=false covers writer/decision/fingerprint, unsafe shell, Worker ownership, or workspace/controller drift: use workerTaskRetry for Worker/Task Pool failures, or standaloneTaskRerun after any required contract adopt for standalone runs. Do not force dagRerun or invent a new task.",
             inputParams: [
                 {
                     name: "runId",
@@ -1193,7 +1193,7 @@ export function buildOperatorCapabilitiesDocument() {
                 "BINDING_DRIFT",
                 "INVALID_INPUT",
             ],
-            description: "Continue the same DAG from fromNode. Requires a fresh dagRerunPlan with eligible=true and that exact planHash. Prefer this for provider flake / safe downstream failures. Not a full task regenerate (that is standaloneTaskRerun). Server rejects stale planHash or binding drift.",
+            description: "Continue the same DAG from the effective failed node by creating a continuation run. Requires a fresh eligible dagRerunPlan and its exact planHash. Prefer this for provider, network, rate-limit, timeout, and other safe downstream failures. Not a full task regenerate: use standaloneTaskRerun for that. Server rejects stale planHash, binding, or fingerprint drift.",
             inputParams: [
                 {
                     name: "runId",
@@ -1559,7 +1559,7 @@ export function buildOperatorCapabilitiesDocument() {
                 "INVALID_INPUT",
                 "HUMAN_CONFIRMATION_REQUIRED",
             ],
-            description: "Regenerate the whole standalone DAG from the CURRENT contract, then validate and execute a new run (parent lineage kept). This is NOT continue-from-failed-node — that is dagRerun. Server rejects the call when dagRerunPlan is eligible, when primaryRecovery.humanRequired=true, or when run facts do not recommend rerun-task. Adopt contract changes before calling or the new DAG repeats the same failure.",
+            description: "Regenerate the whole standalone DAG from the CURRENT contract, then validate and execute a new run with parent lineage and the latest unresolved verify/review feedback when available. This is NOT continue-from-failed-node (use dagRerun for that). Server rejects the call when dagRerunPlan is eligible, primaryRecovery.humanRequired=true, or run facts do not recommend rerun-task. Feedback is recovery context, not a contract rewrite; adopt required contract changes before calling or the new DAG repeats the same failure.",
             inputParams: [
                 {
                     name: "runId",

package/dist/worker/console/chat/deferred-turn.js

@@ -0,0 +1,91 @@
+import { createHash } from "node:crypto";
+const IMAGE_MIME_TYPES = new Set([
+    "image/png",
+    "image/jpeg",
+    "image/gif",
+    "image/webp",
+]);
+export function hashDeferredTurnPayload(input) {
+    return createHash("sha256")
+        .update(JSON.stringify({
+        text: input.text,
+        images: input.images.map(({ type, mimeType, data }) => ({
+            type,
+            mimeType,
+            data,
+        })),
+    }))
+        .digest("hex");
+}
+export function parseDeferredTurn(value) {
+    if (!value || typeof value !== "object")
+        return undefined;
+    const item = value;
+    if (item.schemaVersion !== 1 ||
+        !Number.isSafeInteger(item.revision) ||
+        (item.revision ?? 0) < 1 ||
+        typeof item.clientRequestId !== "string" ||
+        !item.clientRequestId.trim() ||
+        typeof item.payloadHash !== "string" ||
+        !/^[a-f0-9]{64}$/.test(item.payloadHash) ||
+        typeof item.blockedByTurnId !== "string" ||
+        !item.blockedByTurnId.trim() ||
+        typeof item.text !== "string" ||
+        !Array.isArray(item.images) ||
+        !["queued", "dispatching", "accepted", "failed"].includes(item.state) ||
+        typeof item.createdAt !== "string" ||
+        typeof item.updatedAt !== "string") {
+        return undefined;
+    }
+    const images = [];
+    for (const image of item.images) {
+        if (!image || typeof image !== "object")
+            return undefined;
+        const candidate = image;
+        if (typeof candidate.name !== "string" ||
+            candidate.type !== "image" ||
+            typeof candidate.mimeType !== "string" ||
+            !IMAGE_MIME_TYPES.has(candidate.mimeType) ||
+            typeof candidate.data !== "string") {
+            return undefined;
+        }
+        images.push(candidate);
+    }
+    return {
+        schemaVersion: 1,
+        revision: item.revision,
+        clientRequestId: item.clientRequestId.trim(),
+        payloadHash: item.payloadHash,
+        blockedByTurnId: item.blockedByTurnId.trim(),
+        text: item.text,
+        images,
+        state: item.state,
+        createdAt: item.createdAt,
+        updatedAt: item.updatedAt,
+        ...(typeof item.acceptedTurnId === "string" && item.acceptedTurnId
+            ? { acceptedTurnId: item.acceptedTurnId }
+            : {}),
+        ...(item.lastError &&
+            typeof item.lastError.code === "string" &&
+            typeof item.lastError.message === "string"
+            ? { lastError: { code: item.lastError.code, message: item.lastError.message } }
+            : {}),
+    };
+}
+export function projectDeferredTurnSummary(deferredTurn) {
+    if (!deferredTurn)
+        return null;
+    return {
+        revision: deferredTurn.revision,
+        clientRequestId: deferredTurn.clientRequestId,
+        blockedByTurnId: deferredTurn.blockedByTurnId,
+        state: deferredTurn.state,
+        updatedAt: deferredTurn.updatedAt,
+        textPreview: deferredTurn.text.replace(/\s+/g, " ").trim().slice(0, 120),
+        imageCount: deferredTurn.images.length,
+        ...(deferredTurn.acceptedTurnId
+            ? { acceptedTurnId: deferredTurn.acceptedTurnId }
+            : {}),
+        ...(deferredTurn.lastError ? { lastError: deferredTurn.lastError } : {}),
+    };
+}