@tea-agent/loop-agent 0.39.0-next.25 → 0.39.0-next.27

package/dist/workflows/dag/types.js

@@ -10,6 +10,18 @@ export const dagNodeExecutorSchema = z.enum(["pi", "shell", "static"]);
 export const CURSOR_DAG_EXECUTOR_REMOVED_ERROR = 'executor "cursor" is no longer supported; regenerate the DAG with Pi-only writers (implement-pi / repair-pi)';
 export const CURSOR_EXECUTOR_MODELS_REMOVED_ERROR = "executorModels.cursor is no longer supported; use executorModels.pi only";
 export const dagToolProfileSchema = z.enum(["read-only", "write"]);
+/**
+ * Frozen Pi extension short ids for backend implementation DAGs (plan
+ * 2026-08-21 D2): the DAG carries only these ids; the executor resolves them
+ * against the Pi settings package inventory at run time. Adding a package
+ * requires changing this enum and the plan.
+ */
+export const dagPiExtensionIdSchema = z.enum(["pi-codegraph", "pi-lens"]);
+/** Node-level explicit Pi extension allowlist (omitted = all off, R8.1). */
+export const dagPiExtensionsSchema = z
+    .array(dagPiExtensionIdSchema)
+    .min(1)
+    .transform((ids) => Array.from(new Set(ids)));
 /** Static command capabilities only; tasks cannot inject executables or shell prefixes. */
 export const dagCommandCapabilitySchema = z.enum(["playwright-cli"]);
 export const dagCommandPolicySchema = z.discriminatedUnion("mode", [
@@ -427,6 +439,8 @@ export const dagBackendTestPipelineSchema = z.enum([
     "ingest-backend-test-gap",
 ]);
 export const dagFrontendBrowserToolPreflightSchema = z.object({}).strict();
+export const dagFrontendTestStandardScenariosSchema = z.object({}).strict();
+export const dagFrontendTestEnvironmentProbeSchema = z.object({}).strict();
 export const dagFrontendTestEvidenceValidationSchema = z.object({}).strict();
 export const dagFrontendTestCaseChecklistSchema = z.object({}).strict();
 export const dagFrontendTestHtmlReportSchema = z.object({}).strict();
@@ -517,6 +531,8 @@ export const dagShellConfigSchema = z.object({
     frontendReviewContext: dagFrontendReviewContextSchema.optional(),
     frontendTestCaseChecklist: dagFrontendTestCaseChecklistSchema.optional(),
     frontendBrowserToolPreflight: dagFrontendBrowserToolPreflightSchema.optional(),
+    frontendTestStandardScenarios: dagFrontendTestStandardScenariosSchema.optional(),
+    frontendTestEnvironmentProbe: dagFrontendTestEnvironmentProbeSchema.optional(),
     frontendTestEvidenceValidation: dagFrontendTestEvidenceValidationSchema.optional(),
     finalWriteSetApprovalGate: dagFinalWriteSetApprovalGateSchema.optional(),
     frontendTestL5Report: z.object({}).strict().optional(),
@@ -749,6 +765,13 @@ export const dagTaskSchema = z.object({ id: z.string().regex(/^[a-z][a-z0-9-]*$/
     role: dagRoleSchema.optional(),
     skills: z.array(z.string()).optional(),
     toolProfile: dagToolProfileSchema.optional(),
+    /**
+     * Explicit Pi extension allowlist (backend implementation DAGs only):
+     * frozen short ids resolved at run time against the Pi settings package
+     * inventory. Omitted = extension discovery stays fully closed (R8.1).
+     * Only `executor: "pi"` nodes may declare it (validated fail-closed).
+     */
+    piExtensions: dagPiExtensionsSchema.optional(),
     /** Default deny: file write (toolProfile=write) does not grant command execution. */
     commandPolicy: dagCommandPolicySchema.optional(),
     writePolicy: dagWritePolicySchema.optional(),

package/dist/workflows/dag/validate.js

@@ -1,4 +1,4 @@
-import { DEFAULT_DAG_EXECUTOR_MODELS, ENV_VAR_NAME_PATTERN, dagCommandPolicyAllows, resolveDagCommandPolicy, } from "./types.js";
+import { DEFAULT_DAG_EXECUTOR_MODELS, ENV_VAR_NAME_PATTERN, dagCommandPolicyAllows, dagPiExtensionIdSchema, resolveDagCommandPolicy, } from "./types.js";
 import { resolveShellCommands } from "../../executors/shell-executor.js";
 import { pathMatchesPattern } from "../../shared/git-progress.js";
 import { resolveRepairTaskForGate } from "./repair-artifact.js";
@@ -465,6 +465,8 @@ function validateShellTaskConfig(task, spec, issues) {
         !shell.backendTestPipeline &&
         !shell.frontendPrewriteGate &&
         !shell.frontendBrowserToolPreflight &&
+        !shell.frontendTestStandardScenarios &&
+        !shell.frontendTestEnvironmentProbe &&
         !shell.frontendVerificationBundle &&
         !shell.frontendReviewContext &&
         !shell.frontendTestCaseChecklist &&
@@ -953,6 +955,7 @@ export function validateDagSpec(spec) {
         validateCommandPolicyTaskConfig(task, issues);
         validateDynamicChildCommandPolicy(task, issues);
         validateProjectGovernanceTaskConfig(task, spec, issues);
+        validatePiExtensionsTaskConfig(task, issues);
         validateFailureAwareDependsOn(task, spec, issues);
     }
     validateSameRankWriteSetConflicts(spec, ranks, issues);
@@ -963,6 +966,43 @@ export function validateDagSpec(spec) {
     }
     return issues;
 }
+/**
+ * Fail-closed `piExtensions` validation (plan 2026-08-21 D1/D2):
+ * - only `executor: "pi"` nodes may declare it (shell/static reject);
+ * - unknown ids outside the frozen enum are rejected at parse time by zod,
+ *   and here for task objects that bypass schema parsing;
+ * - closeout nodes must stay fully closed (extension-free) — the two-bucket
+ *   generator never assigns it there, so any appearance is contract drift.
+ */
+function validatePiExtensionsTaskConfig(task, issues) {
+    const ids = task.piExtensions;
+    if (ids === undefined)
+        return;
+    if (task.executor !== "pi") {
+        issues.push({
+            type: "invalid-pi-extensions-config",
+            message: `task ${task.id} piExtensions requires executor "pi" (found ${task.executor})`,
+        });
+        return;
+    }
+    const allowed = new Set(dagPiExtensionIdSchema.options);
+    for (const id of ids) {
+        if (!allowed.has(id)) {
+            issues.push({
+                type: "invalid-pi-extensions-config",
+                message: `task ${task.id} piExtensions has unknown id "${id}"; allowed: ${[
+                    ...allowed,
+                ].join(", ")}`,
+            });
+        }
+    }
+    if (task.id === "closeout-pi" && ids.length > 0) {
+        issues.push({
+            type: "invalid-pi-extensions-config",
+            message: "closeout-pi must stay extension-free (read buckets exclude closeout)",
+        });
+    }
+}
 function validateProjectGovernanceTaskConfig(task, spec, issues) {
     if (task.governanceStandardReview) {
         if (task.executor !== "pi" ||

package/docs/templates/agent-dag.schema.json

@@ -130,6 +130,18 @@
     "toolProfile": {
       "enum": ["read-only", "write"]
     },
+    "piExtensionId": {
+      "type": "string",
+      "enum": ["pi-codegraph", "pi-lens"],
+      "description": "Frozen Pi extension short id resolved at run time against the Pi settings package inventory. Adding a package requires changing the plan and this enum."
+    },
+    "piExtensions": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": { "$ref": "#/$defs/piExtensionId" },
+      "description": "Node-level explicit Pi extension allowlist (backend implementation DAGs only). Omitted = extension discovery stays fully closed (R8.1). Only executor 'pi' nodes may declare it."
+    },
     "role": {
       "enum": ["planner", "scout", "implementer", "reviewer", "supervisor", "verifier", "closeout"]
     },
@@ -356,6 +368,31 @@
           "properties": { "schemaVersion": { "const": 1 }, "requireBaseline": { "const": true } }
         },
         "frontendTestCaseChecklist": { "type": "object", "additionalProperties": false },
+        "frontendBrowserToolPreflight": { "type": "object", "additionalProperties": false },
+        "frontendTestStandardScenarios": { "type": "object", "additionalProperties": false },
+        "frontendTestEnvironmentProbe": { "type": "object", "additionalProperties": false },
+        "frontendTestCaseManifest": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "maxCases": { "type": "integer", "minimum": 1 },
+            "declaredAcIds": { "type": "array", "items": { "type": "string" } }
+          }
+        },
+        "frontendTestResultFinalize": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "declaredAcIds": { "type": "array", "items": { "type": "string" } }
+          }
+        },
+        "frontendTestReports": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "l5": { "type": "boolean" }
+          }
+        },
         "frontendTestEvidenceValidation": { "type": "object", "additionalProperties": false },
         "frontendTestHtmlReport": { "type": "object", "additionalProperties": false },
         "backendTestPipeline": {
@@ -383,6 +420,12 @@
         { "required": ["frontendVerificationBundle"] },
         { "required": ["frontendReviewContext"] },
         { "required": ["frontendTestCaseChecklist"] },
+        { "required": ["frontendBrowserToolPreflight"] },
+        { "required": ["frontendTestStandardScenarios"] },
+        { "required": ["frontendTestEnvironmentProbe"] },
+        { "required": ["frontendTestCaseManifest"] },
+        { "required": ["frontendTestResultFinalize"] },
+        { "required": ["frontendTestReports"] },
         { "required": ["frontendTestEvidenceValidation"] },
         { "required": ["frontendTestHtmlReport"] },
         { "required": ["backendTestPipeline"] }
@@ -485,6 +528,7 @@
           "items": { "type": "string", "minLength": 1 }
         },
         "toolProfile": { "$ref": "#/$defs/toolProfile" },
+        "piExtensions": { "$ref": "#/$defs/piExtensions" },
         "governanceStandardReview": {
           "type": "boolean",
           "description": "Explicitly opts this node into writer-change-scoped AGENTS.md and repository-local code-standard review. Never inferred from node id or role."

package/docs/templates/frontend-test-dag.json

@@ -66,12 +66,11 @@
         ".harness/**",
         "artifacts/**"
       ],
-      "outputContract": "Write testcase/frontend/rag/standard-scenarios.v1.json for generate-time standard scenario coverage.",
-      "subtask_prompt": "Materialize frontend-test standard scenarios v1 into the RAG package.",
+      "outputContract": "Write testcase/frontend/rag/standard-scenarios.v1.json for generate-time standard scenario coverage. Copy docs/templates or harness.json governanceRoot templates (including ai_workspace/loop-agent/templates) when present; otherwise write the minimal STD-FE-SMOKE-ENTRY fallback.",
+      "subtask_prompt": "Prepare frontend-test package: materialize standard-scenarios.v1.json into the RAG package from docs/templates, governanceRoot/templates, or the init-projected ai_workspace/loop-agent/templates path.",
       "shell": {
-        "commands": [
-          "node -e \"const fs=require('fs'),path=require('path');const dest='testcase/frontend/rag/standard-scenarios.v1.json';const candidates=[path.join('docs','templates','frontend-test-standard-scenarios.v1.json')];let src=null;for(const c of candidates){if(fs.existsSync(c)){src=c;break;}}fs.mkdirSync(path.dirname(dest),{recursive:true});if(src){fs.copyFileSync(src,dest);process.stdout.write(JSON.stringify({status:'copied',from:src,to:dest}));}else{const minimal={schemaVersion:1,id:'frontend-test-standard-scenarios-v1',scenarios:[{id:'STD-FE-SMOKE-ENTRY',title:'入口可打开',category:'smoke',priority:'must',testPoints:['open'],minCases:1}]};fs.writeFileSync(dest,JSON.stringify(minimal,null,2)+'\\n');process.stdout.write(JSON.stringify({status:'fallback',to:dest}));}"
-        ],
+        "commands": [],
+        "frontendTestStandardScenarios": {},
         "cwd": ".",
         "timeoutMs": 60000
       }
@@ -120,12 +119,11 @@
         ".harness/**",
         "artifacts/**"
       ],
-      "outputContract": "Fail-closed environment preflight: absolute non-production baseUrl + curl HTTP reachability; writes environmentProbe facts; unreachable => blockedReason frontend-base-url-unreachable (node ERROR so generate/map do not run).",
-      "subtask_prompt": "Parse the concrete baseUrl selected by retrieve-frontend-test-context-pi from testcase/frontend/rag/context.md. Reject production, non-http(s), credentials, query and fragment. Probe with curl (HEAD then GET fallback; connect/max-time; no auth/cookie). 2xx/3xx => reachable and continue. 4xx/5xx/DNS/timeout/connection refused/TLS => blockedReason frontend-base-url-unreachable. Missing curl => blockedReason curl-unavailable. Do not start the app. Runtime hybrid generator embeds the authoritative probe script.",
+      "outputContract": "Fail-closed environment preflight: absolute non-production baseUrl + curl HTTP reachability; writes environmentProbe facts; unreachable => blockedReason frontend-base-url-unreachable with errorClass (connection-refused / dns-unresolved / connect-timeout / http-N). Node ERROR so generate/map do not run. Does not start the app.",
+      "subtask_prompt": "Parse the concrete baseUrl selected by retrieve-frontend-test-context-pi from testcase/frontend/rag/context.md. Reject production, non-http(s), credentials, query and fragment. Probe with curl (HEAD then GET fallback; connect/max-time; no auth/cookie). 2xx/3xx => reachable and continue. Connection refused records errorClass=connection-refused and tells the operator to start the local app then rerun from this node. 4xx/5xx/DNS/timeout/TLS => blockedReason frontend-base-url-unreachable. Missing curl => blockedReason curl-unavailable. Do not start the app.",
       "shell": {
-        "commands": [
-          "node -e \"console.log('template placeholder: runtime hybrid DAG embeds curl preflight; do not use this static command as source of truth')\""
-        ],
+        "commands": [],
+        "frontendTestEnvironmentProbe": {},
         "cwd": ".",
         "timeoutMs": 60000
       }

package/docs/templates/frontend-test-dag.retrieve-context.prompt.md

@@ -17,5 +17,5 @@ Do not claim the environment is reachable until preflight completes. Preflight d
 
 ## Standard scenario coverage
 
-- Copy or reference `docs/templates/frontend-test-standard-scenarios.v1.json` into `testcase/frontend/rag/standard-scenarios.v1.json` when available.
+- Copy or reference `docs/templates/frontend-test-standard-scenarios.v1.json`, `harness.json` `governanceRoot`/templates, or the init-projected `ai_workspace/loop-agent/templates/frontend-test-standard-scenarios.v1.json` into `testcase/frontend/rag/standard-scenarios.v1.json` when available.
 - Add `## Standard scenario coverage` to coverage-map.md with planned/n/a for each must scenario.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tea-agent/loop-agent",
-  "version": "0.39.0-next.25",
+  "version": "0.39.0-next.27",
   "type": "module",
   "bin": {
     "loop-agent": "bin/loop-agent.js",

package/skills/codebase-scout/SKILL.md

@@ -10,7 +10,7 @@ description: 用于只读 scout 节点，在实现前定位现有代码、测试
 ## 规则
 
 - 从 repo 指令、task source 与邻近测试入手。
-- 可用时优先 CodeGraph；否则用 `rg` 与聚焦文件阅读。
+- 可用时优先 CodeGraph；否则 Shell 搜索优先 `rg`，按名找文件优先 `fd`，再聚焦阅读文件。
 - 在提议新抽象前，识别现有 helper 与 ownership 边界。
 - 只返回事实，不做编辑。