@tea-agent/loop-agent 0.39.0-next.3 → 0.39.0-next.30

package/dist/workflows/dag/types.js

@@ -2,7 +2,7 @@ import { z } from "zod";
 import { isOpenspecSpecFilePath } from "../../shared/openspec-spec.js";
 import { campaignBudgetSchema, } from "../../application/evaluation/budget.js";
 import { assertDagPromptSourceRule } from "./prompt-source.js";
-import { dagRetryPolicySchema } from "./retry-policy.js";
+import { dagRetryPolicySchema, TARGET_TEMPLATE_TRANSIENT_RETRY_PROFILE, } from "./retry-policy.js";
 import { dagLivenessPolicySchema, } from "./liveness-policy.js";
 import { dagOutputProtocolSchema } from "./output-protocol.js";
 export const dagComplexitySchema = z.enum(["HIGH", "MED", "LOW"]);
@@ -10,6 +10,18 @@ export const dagNodeExecutorSchema = z.enum(["pi", "shell", "static"]);
 export const CURSOR_DAG_EXECUTOR_REMOVED_ERROR = 'executor "cursor" is no longer supported; regenerate the DAG with Pi-only writers (implement-pi / repair-pi)';
 export const CURSOR_EXECUTOR_MODELS_REMOVED_ERROR = "executorModels.cursor is no longer supported; use executorModels.pi only";
 export const dagToolProfileSchema = z.enum(["read-only", "write"]);
+/**
+ * Frozen Pi extension short ids for backend implementation DAGs (plan
+ * 2026-08-21 D2): the DAG carries only these ids; the executor resolves them
+ * against the Pi settings package inventory at run time. Adding a package
+ * requires changing this enum and the plan.
+ */
+export const dagPiExtensionIdSchema = z.enum(["pi-codegraph", "pi-lens"]);
+/** Node-level explicit Pi extension allowlist (omitted = all off, R8.1). */
+export const dagPiExtensionsSchema = z
+    .array(dagPiExtensionIdSchema)
+    .min(1)
+    .transform((ids) => Array.from(new Set(ids)));
 /** Static command capabilities only; tasks cannot inject executables or shell prefixes. */
 export const dagCommandCapabilitySchema = z.enum(["playwright-cli"]);
 export const dagCommandPolicySchema = z.discriminatedUnion("mode", [
@@ -193,12 +205,38 @@ export const dagFrontendPrewriteGateSchema = z.object({
     requireSourceFreshness: z.literal(true),
     implementationWriteSet: z.array(z.string().min(1)).min(1).optional(),
     openspecCandidatePaths: z.array(openspecCandidatePathSchema).default([]),
+    /**
+     * Generation-frozen component/theme specification bucket. Derived from
+     * `designEvidence.classified.component ∪ theme ∪ rule.components` at DAG
+     * generation. When non-empty and the canonical contract has UI-visible
+     * work, the prewrite gate requires a non-empty `uiComponentChoices` and
+     * cross-checks each `specReference.path` against this set + the effective
+     * plan openspec-citations block. Legacy DAGs without this field keep the
+     * field-absent semantics (component-choices-missing is not enforced).
+     */
+    componentSpecCandidatePaths: z.array(openspecCandidatePathSchema).optional(),
     /**
      * OpenSpec gate policy. Omitted on legacy DAGs: the runtime treats
      * undefined as scan-strict so pre-existing full-read semantics are
      * preserved. Generation always writes it explicitly for new DAGs.
      */
     openspecPolicy: z.enum(["cited", "scan-strict"]).optional(),
+    /**
+     * When true, the effective plan node (planFromNodeId when it is selected
+     * over the fallback) emits an RFC 7386 merge-patch delta instead of a full
+     * contract. The gate applies it on the original contract node
+     * (planFallbackFromNodeIds[0]) before analysis/materialization. Legacy DAGs
+     * without this field keep full-contract semantics.
+     */
+    revisionPatch: z.boolean().optional(),
+    /**
+     * Deterministically rendered plan.md artifact name (same outputDir as the
+     * contract). Defaults to frontend-plan.md at runtime.
+     */
+    planMdArtifactName: z
+        .string()
+        .regex(/^[a-z0-9][a-z0-9._-]*\.md$/)
+        .optional(),
     /**
      * Generation-frozen candidate source metadata (diagnostic). cited mode
      * candidates are declared ∪ taskSourceCited; scan-strict candidates are
@@ -397,8 +435,12 @@ export const dagBackendTestPipelineSchema = z.enum([
     "markdown-scenario-param",
     "markdown-execute-html",
     "markdown-manifest",
+    "markdown-report",
+    "ingest-backend-test-gap",
 ]);
 export const dagFrontendBrowserToolPreflightSchema = z.object({}).strict();
+export const dagFrontendTestStandardScenariosSchema = z.object({}).strict();
+export const dagFrontendTestEnvironmentProbeSchema = z.object({}).strict();
 export const dagFrontendTestEvidenceValidationSchema = z.object({}).strict();
 export const dagFrontendTestCaseChecklistSchema = z.object({}).strict();
 export const dagFrontendTestHtmlReportSchema = z.object({}).strict();
@@ -489,6 +531,8 @@ export const dagShellConfigSchema = z.object({
     frontendReviewContext: dagFrontendReviewContextSchema.optional(),
     frontendTestCaseChecklist: dagFrontendTestCaseChecklistSchema.optional(),
     frontendBrowserToolPreflight: dagFrontendBrowserToolPreflightSchema.optional(),
+    frontendTestStandardScenarios: dagFrontendTestStandardScenariosSchema.optional(),
+    frontendTestEnvironmentProbe: dagFrontendTestEnvironmentProbeSchema.optional(),
     frontendTestEvidenceValidation: dagFrontendTestEvidenceValidationSchema.optional(),
     finalWriteSetApprovalGate: dagFinalWriteSetApprovalGateSchema.optional(),
     frontendTestL5Report: z.object({}).strict().optional(),
@@ -574,6 +618,13 @@ export const dagDynamicExpansionSchema = z.object({
         maxTotalTokens: z.number().int().positive().optional(),
     })
         .optional(),
+    /**
+     * When true, any child blocked by the aggregate token budget fails the map
+     * barrier instead of being retained as a case-level blocked outcome.
+     * Backend-test enables this because partial Markdown/pytest module sets are
+     * invalid generation assets; frontend-test keeps the default false.
+     */
+    failOnTokenBudgetExhaustion: z.boolean().optional(),
     /**
      * When true, map child ERROR/auth/timeout is recorded as case-level
      * failed/blocked evidence and the map barrier still succeeds (frontend-test).
@@ -678,6 +729,8 @@ export const dagConvergenceSpecSchema = z
  */
 export const structuredContractOutputSchemaIds = [
     "frontend-implementation-contract-v1",
+    "frontend-implementation-contract-plan-patch-v1",
+    "frontend-implementation-contract-revision-patch-v1",
 ];
 export const dagTaskSchema = z.object({ id: z.string().regex(/^[a-z][a-z0-9-]*$/, "task id must be kebab-case"),
     depends_on: z.array(z.string()).default([]),
@@ -712,6 +765,13 @@ export const dagTaskSchema = z.object({ id: z.string().regex(/^[a-z][a-z0-9-]*$/
     role: dagRoleSchema.optional(),
     skills: z.array(z.string()).optional(),
     toolProfile: dagToolProfileSchema.optional(),
+    /**
+     * Explicit Pi extension allowlist (backend implementation DAGs only):
+     * frozen short ids resolved at run time against the Pi settings package
+     * inventory. Omitted = extension discovery stays fully closed (R8.1).
+     * Only `executor: "pi"` nodes may declare it (validated fail-closed).
+     */
+    piExtensions: dagPiExtensionsSchema.optional(),
     /** Default deny: file write (toolProfile=write) does not grant command execution. */
     commandPolicy: dagCommandPolicySchema.optional(),
     writePolicy: dagWritePolicySchema.optional(),
@@ -739,8 +799,25 @@ export const dagTaskSchema = z.object({ id: z.string().regex(/^[a-z][a-z0-9-]*$/
         .object({
         schemaId: z.enum(structuredContractOutputSchemaIds),
         retryOnInvalid: z.boolean().default(true),
+        /**
+         * Optional deterministic base object for patch-producing structured
+         * nodes. The frontend plan patch validator applies the model delta to
+         * this run-owned skeleton before strict contract validation.
+         */
+        skeleton: z.record(z.string(), z.unknown()).optional(),
     })
         .strict()
+        .superRefine((value, ctx) => {
+        if (value.schemaId ===
+            "frontend-implementation-contract-plan-patch-v1" &&
+            !value.skeleton) {
+            ctx.addIssue({
+                code: "custom",
+                message: "frontend plan patch output requires a runtime skeleton",
+                path: ["skeleton"],
+            });
+        }
+    })
         .optional(),
     /**
      * Fail-closed outcome/diff consistency contract for bounded Pi writers.
@@ -772,6 +849,14 @@ export const dagTaskSchema = z.object({ id: z.string().regex(/^[a-z][a-z0-9-]*$/
     forbiddenPaths: z.array(z.string()).optional().default([]),
     decisionGate: dagDecisionGateSchema.optional(),
     retryPolicy: dagRetryPolicySchema.optional(),
+    /**
+     * Generation-path stamp for implicit same-run transient retry. Only the
+     * three target templates stamp canonical final verify shells and
+     * exclusive `implement-pi`. Zod-declared so parseDagSpec does not strip it.
+     */
+    transientRetryProfile: z
+        .literal(TARGET_TEMPLATE_TRANSIENT_RETRY_PROFILE)
+        .optional(),
     /** Optional per-node adaptive liveness override (merged over defaults). */
     livenessPolicy: dagLivenessPolicySchema,
     dynamicExpansion: dagDynamicExpansionSchema.optional(),
@@ -819,6 +904,55 @@ export const dagSourceBindingSchema = z.object({
         .min(1),
     requirementIds: z.array(z.string().regex(/^(?:REQ|BR|AC)-[A-Z0-9]+(?:-[A-Z0-9]+)*$/)),
 });
+const dagRerunFeedbackEvidencePathSchema = z
+    .string()
+    .min(1)
+    .refine((value) => !/^(?:[A-Za-z]:[\\/]|[\\/]{2}|\/)/.test(value), "rerun feedback evidence paths must be repository-relative");
+/**
+ * Bounded unresolved verify/review feedback carried by a full task rerun.
+ * This is recovery context, not a mutation of the original task contract.
+ */
+export const dagRerunFeedbackSchema = z
+    .object({
+    schemaVersion: z.literal(1),
+    kind: z.literal("unresolved-terminal-feedback"),
+    parentRunId: z.string().min(1),
+    taskId: z.string().min(1),
+    sourceNodeId: z.string().min(1),
+    verdict: z.enum(["request-revision", "fail"]).optional(),
+    failureCategory: z.string().min(1).optional(),
+    feedbackText: z.string().min(1).max(12_000),
+    evidenceRefs: z
+        .array(z
+        .object({
+        nodeId: z.string().min(1),
+        preservedNodeRecordPath: dagRerunFeedbackEvidencePathSchema,
+    })
+        .strict())
+        .max(8),
+    attemptSummary: z
+        .object({
+        completedPasses: z.number().int().positive(),
+        maxPasses: z.number().int().positive(),
+        terminalReason: z.string().min(1).optional(),
+    })
+        .strict(),
+    binding: z
+        .object({
+        sourceCanonicalHash: z
+            .string()
+            .regex(/^[a-f0-9]{64}$/)
+            .optional(),
+        taskContractCanonicalHash: z
+            .string()
+            .regex(/^[a-f0-9]{64}$/)
+            .optional(),
+        status: z.enum(["exact", "changed", "unknown"]),
+    })
+        .strict(),
+    digest: z.string().regex(/^[a-f0-9]{64}$/),
+})
+    .strict();
 export const dagSpecSchema = z
     .object({
     version: dagVersionSchema,
@@ -830,6 +964,28 @@ export const dagSpecSchema = z
     sourceBinding: dagSourceBindingSchema.optional(),
     /** v4 managed Task Contract binding; only valid on version 4. */
     taskContractBinding: dagTaskContractBindingSchema.optional(),
+    /** Optional unresolved parent-run feedback for a full task rerun. */
+    rerunFeedback: dagRerunFeedbackSchema.optional(),
+    /** Frozen backend-test artifact layout (plan A); absent = historical default testcase/ layout. */
+    backendTestLayout: z
+        .object({
+        testRoot: z.string(),
+        markdownRel: z.string(),
+        scriptRel: z.string(),
+        markdownDir: z.string(),
+        scriptDir: z.string(),
+        readmePath: z.string(),
+        isDefault: z.boolean(),
+    })
+        .optional(),
+    /** Bound user shared-setup document (plan B); absent = no shared setup references expected. */
+    backendTestSharedSetup: z
+        .object({
+        path: z.string(),
+        readPath: z.string(),
+        sha256: z.string(),
+    })
+        .optional(),
     outputLanguage: dagOutputLanguageSchema.optional(),
     objective: z.string().optional(),
     successCriteria: z.array(z.string()).optional(),

package/dist/workflows/dag/validate.js

@@ -1,4 +1,4 @@
-import { DEFAULT_DAG_EXECUTOR_MODELS, ENV_VAR_NAME_PATTERN, dagCommandPolicyAllows, resolveDagCommandPolicy, } from "./types.js";
+import { DEFAULT_DAG_EXECUTOR_MODELS, ENV_VAR_NAME_PATTERN, dagCommandPolicyAllows, dagPiExtensionIdSchema, resolveDagCommandPolicy, } from "./types.js";
 import { resolveShellCommands } from "../../executors/shell-executor.js";
 import { pathMatchesPattern } from "../../shared/git-progress.js";
 import { resolveRepairTaskForGate } from "./repair-artifact.js";
@@ -465,6 +465,8 @@ function validateShellTaskConfig(task, spec, issues) {
         !shell.backendTestPipeline &&
         !shell.frontendPrewriteGate &&
         !shell.frontendBrowserToolPreflight &&
+        !shell.frontendTestStandardScenarios &&
+        !shell.frontendTestEnvironmentProbe &&
         !shell.frontendVerificationBundle &&
         !shell.frontendReviewContext &&
         !shell.frontendTestCaseChecklist &&
@@ -953,6 +955,7 @@ export function validateDagSpec(spec) {
         validateCommandPolicyTaskConfig(task, issues);
         validateDynamicChildCommandPolicy(task, issues);
         validateProjectGovernanceTaskConfig(task, spec, issues);
+        validatePiExtensionsTaskConfig(task, issues);
         validateFailureAwareDependsOn(task, spec, issues);
     }
     validateSameRankWriteSetConflicts(spec, ranks, issues);
@@ -963,6 +966,43 @@ export function validateDagSpec(spec) {
     }
     return issues;
 }
+/**
+ * Fail-closed `piExtensions` validation (plan 2026-08-21 D1/D2):
+ * - only `executor: "pi"` nodes may declare it (shell/static reject);
+ * - unknown ids outside the frozen enum are rejected at parse time by zod,
+ *   and here for task objects that bypass schema parsing;
+ * - closeout nodes must stay fully closed (extension-free) — the two-bucket
+ *   generator never assigns it there, so any appearance is contract drift.
+ */
+function validatePiExtensionsTaskConfig(task, issues) {
+    const ids = task.piExtensions;
+    if (ids === undefined)
+        return;
+    if (task.executor !== "pi") {
+        issues.push({
+            type: "invalid-pi-extensions-config",
+            message: `task ${task.id} piExtensions requires executor "pi" (found ${task.executor})`,
+        });
+        return;
+    }
+    const allowed = new Set(dagPiExtensionIdSchema.options);
+    for (const id of ids) {
+        if (!allowed.has(id)) {
+            issues.push({
+                type: "invalid-pi-extensions-config",
+                message: `task ${task.id} piExtensions has unknown id "${id}"; allowed: ${[
+                    ...allowed,
+                ].join(", ")}`,
+            });
+        }
+    }
+    if (task.id === "closeout-pi" && ids.length > 0) {
+        issues.push({
+            type: "invalid-pi-extensions-config",
+            message: "closeout-pi must stay extension-free (read buckets exclude closeout)",
+        });
+    }
+}
 function validateProjectGovernanceTaskConfig(task, spec, issues) {
     if (task.governanceStandardReview) {
         if (task.executor !== "pi" ||

package/docs/init-surface.manifest.json

@@ -50,6 +50,9 @@
     "scripts/kb-graph-materialize.mjs",
     "scripts/kb-graph-promote.mjs",
     "scripts/kb-graph-incremental-prepare.mjs",
+    "scripts/next-info.mjs",
+    "scripts/next-publish-gate.mjs",
+    "scripts/release-source-binding.mjs",
     "docs/templates/agent-dag.schema.json",
     "examples/example-dag.json",
     "skills/agent-worker/SKILL.md",
@@ -277,6 +280,7 @@
     "harness.json",
     "package.json",
     "src/commands/init.ts",
+    "src/commands/init-model-catalog.ts",
     "src/commands/client-recovery.ts",
     "src/commands/init-upgrade.ts",
     "src/cli.ts",
@@ -302,6 +306,7 @@
         "description": "Changes that may alter target-project initialization behavior, default DAG role skills, skill resolution, or package/init contracts.",
         "patterns": [
           "src/commands/init.ts",
+          "src/commands/init-model-catalog.ts",
           "src/commands/client-recovery.ts",
           "src/commands/init-upgrade.ts",
           "src/cli.ts",

package/docs/operations/README.md

@@ -7,7 +7,7 @@
 - [`local-development-environment.md`](local-development-environment.md)：本地环境、Windows 差异和常见排障。
 - [`branch-merge-guideline.md`](branch-merge-guideline.md)：按风险选择合并模式并留下 source-SHA 证据。
 - [`github-collaboration.md`](github-collaboration.md)：仓库内 GitHub 协作约定及发布通道。
-- [`version-and-release-management.md`](version-and-release-management.md)：版本发布管理——next / release-x.y / latest 渠道、workflow 与 promote 手册。
+- [`version-and-release-management.md`](version-and-release-management.md)：版本发布管理——next / release-x.y / latest 渠道、移动式 `npm-next` ref、`inspect next` 查询入口、workflow 与 promote 手册。
 - [`production-readiness.md`](production-readiness.md)：交付前的生产就绪判断。
 - [`agent-worker-production-readiness.md`](agent-worker-production-readiness.md)：agent-worker Feature/Task Pool 外层编排的 Production Readiness v1 操作合同。
 - [`backend-test-jacoco-coverage.md`](backend-test-jacoco-coverage.md)：Java 被测服务挂载 JaCoCo tcpserver agent 的 Maven、`java -jar` 与 Docker 操作手册。

package/docs/operations/local-development-environment.md

@@ -29,11 +29,7 @@ Cursor Cloud VM 当前有两个需要特别注意的环境问题。
 
 ### Node.js 版本
 
-VM 默认 `node`（`/exec-daemon/node`）可能是 v22.14.0，但可选依赖 `@earendil-works/pi-ai` / `@earendil-works/pi-coding-agent` 要求 Node.js `>=22.19.0`。版本过低时，`npm install` / `npm ci` 可能跳过这些依赖，随后 `npm run typecheck` 或 `npm run build` 会报告：
-
-```text
-Cannot find module '@earendil-works/...'
-```
+VM 默认 `node`（`/exec-daemon/node`）可能是 v22.14.0，但根包与运行时依赖 `@earendil-works/pi-ai` / `@earendil-works/pi-coding-agent` 都要求 Node.js `>=22.19.0`。版本过低时，npm 默认模式会报告 `EBADENGINE` 警告；启用 `engine-strict` 时，`npm install` / `npm ci` 会直接失败。即使默认模式完成安装，也不应在不受支持的 Node.js 版本上继续执行 typecheck、build 或 runtime 命令。
 
 在 Cursor Cloud 中执行安装或验证前，先切换到已配置的 Node.js 22：
 

package/docs/skills/vetted-skill-registry.md

@@ -16,10 +16,22 @@ The entries below are local wrappers or existing local skills. They are not whol
 | `code-review-core` | local wrapper inspired by code review practice | `skills/code-review-core/SKILL.md` | reviewer | reviewer | No external tools or network by default. |
 | `codebase-scout` | local wrapper | `skills/codebase-scout/SKILL.md` | scout | scout | Read-only reconnaissance guidance. |
 | `init-capability-evolution` | local wrapper | `skills/init-capability-evolution/SKILL.md` | supervisor, maintenance | optional | Used only when changes may affect target-project initialization, package surface, or init projection rules. |
+| `frontend-implementation` | local existing (frontend hybrid DAG) | `skills/frontend-implementation/SKILL.md` | frontend plan / contract / scout / mock nodes (spec-level `skillsByRole`) | frontend-implementation DAG only | Required refs node-contracts / design-spec / code-standards; injected by `init-hybrid.ts` spec generation and `src/adapters/loop-agent.ts`; projected via init-surface manifest. Not in `DEFAULT_SKILLS_BY_ROLE`. |
+| `frontend-review` | local existing (frontend hybrid DAG) | `skills/frontend-review/SKILL.md` | reviewer (frontend review nodes, spec-level) | frontend-implementation / repair DAGs | Consumed by `init-hybrid.ts` / `frontend-repair.ts` / `shell-executor.ts`; required ref review-findings (maxChars 2800). |
+| `frontend-verification` | local existing (frontend hybrid DAG) | `skills/frontend-verification/SKILL.md` | verifier / closeout (frontend evidence, spec-level) | frontend DAG closeout | Consumed by `shell-executor.ts` / `frontend-repair.ts` / `frontend-review-context.ts`; required ref verification-checklist. |
+| `frontend-design-review` | local existing (frontend hybrid DAG) | `skills/frontend-design-review/SKILL.md` | design-gate reviewer (before any writer) | frontend-implementation DAG design gate | Injected by `init-hybrid.ts`; runs before the prewrite gate authorizes writers; required ref review-checklist. |
+| `frontend-bounded-implement` | local existing (frontend hybrid DAG) | `skills/frontend-bounded-implement/SKILL.md` | implementer (writer nodes, spec-level) | frontend writers after canonical contract gate | Injected by `init-hybrid.ts`; writers run only after the canonical contract gate accepts and only inside the frozen writeSet (ADR 0015/0016 discipline). |
 | `grill-with-docs` | local operator skill adapted from domain grilling + ADR/glossary discipline | `skills/grill-with-docs/SKILL.md` | explicit interactive operator only | never a default DAG role | Resolves decisions via `harness.json.governanceRoot`; required refs `context-format.md` / `adr-format.md`; respects writeSet; not in `DEFAULT_SKILLS_BY_ROLE`. |
+| `grill-me` | local interview question engine wrapper | `skills/grill-me/SKILL.md` | interview runtime dependency (not a DAG role) | never a default DAG role | Question engine lives in `src/worker/console/interview/grill-me.ts` (Console interview / operator-actions); intentionally NOT projected by init-surface manifest — runs in this repo's Console only. |
+| `analyze-product-requirements` | local org-internal Product Analysis V4 skill | `skills/analyze-product-requirements/SKILL.md` | source-prepare dependency (not a DAG role) | never a default DAG role | Loaded by `src/task/source-prepare/prepare.ts` during 任务源 preparation; IRON-LAW freeze semantics on `product-analysis.md`; intentionally NOT projected by init-surface manifest. |
 | `webapp-testing` | local wrapper inspired by frontend/browser testing practice | `skills/webapp-testing/SKILL.md` | verifier, reviewer | optional | Only applies when task explicitly involves browser-rendered behavior; no default Playwright/Semgrep execution. |
 | `playwright-cli` | repo-local Playwright CLI instructions | `skills/playwright-cli/SKILL.md` | FE-test case executor | FE-test only | Direct browser commands require isolated test environments, per-case evidence paths, and explicit credential/data handling. |
 | `playwright-cli-case-generator` | adapted from the repo-local playwright CLI case-generator contract | `skills/playwright-cli-case-generator/SKILL.md` | FE-test case generator | FE-test only | Generates Markdown cases and a compact manifest from RAG facts; does not execute browsers, create test code, or invent API/data constraints. |
+| `analyze-product-dependencies` | local org-internal product dependency analysis | `skills/analyze-product-dependencies/SKILL.md` | explicit interactive operator only | never a default DAG role | PRD → code/API mapping analysis; read-only; no runtime references; not projected. |
+| `browser-tools` | local operator skill (CDP automation) | `skills/browser-tools/SKILL.md` | explicit interactive operator only | never a default DAG role | Requires user-visible Chrome with remote debugging (:9222); credential/data handling reviewed per use; not projected. |
+| `local-jacoco-coverage` | local operator orchestration skill | `skills/local-jacoco-coverage/SKILL.md` | explicit interactive operator only | never a default DAG role | Orchestrates backend-test DAGs with a JaCoCo agent — it drives DAGs, so it must never be loaded by one (no recursion); not projected. |
+| `using-git-worktrees` | local wrapper | `skills/using-git-worktrees/SKILL.md` | explicit interactive operator only | never a default DAG role | Workspace isolation guidance only; no runtime references; not projected. |
+| `improve-codebase-architecture` | local operator skill (copied from shared agent platform 2026-08-21) | `skills/improve-codebase-architecture/SKILL.md` | explicit interactive operator only | never a default DAG role | Interactive architecture review producing a temp HTML report; reads CONTEXT.md glossary + `docs/decisions/` ADRs; cross-directory refs `../grill-with-docs/{context,adr}-format.md` are exempt (see Vetting Rules); not projected. |
 
 ## Verification placement taxonomy
 
@@ -42,6 +54,8 @@ Authoring vocabulary for where a check or verification skill should live. Prefer
 - Default role mappings may reference only repo-local skills that resolve cleanly under `dag validate --strict-skills`.
 - `agent-worker` is explicitly outside default role mappings. Its trigger description must cover `agent-worker`, Feature Packet, TaskSpec, Task Pool, self-host/candidate and the `loop-agent` routing boundary; `scripts/check-skill-entry.sh` enforces this public entry contract.
 - `grill-with-docs` is an explicit interactive operator skill only; it must stay outside `DEFAULT_SKILLS_BY_ROLE`.
+- Registry ↔ disk sync: every `skills/*/SKILL.md` in the repo must have a row above. Operator-local skills are recorded with `never a default DAG role` instead of being omitted, so an audit cannot mistake them for drift.
+- `improve-codebase-architecture` is exempt from the "references stay within the skill directory" rule: it is operator-only, never resolved by DAG skill snapshots, and reuses `grill-with-docs` context/ADR formats by relative path.
 - Optional/security/web skills remain task- or profile-specific until their tool, network, credential, and write behavior is reviewed.
 - This registry records source inspiration, not license clearance for vendored third-party content. Vendoring requires a separate license/security review.
 - `SKILL.md` is the entry point. References must be declared in frontmatter and stay within the skill directory.

package/docs/templates/README.md

@@ -30,7 +30,7 @@
 
 ## Backend-test
 
-- `backend-test-dag.json` — backend-test DAG 模板；其中 `generate-backend-md-cases-pi` 是唯一允许 `writer-empty-diff` 重试的 writer（总共两次，仅限 post-write-guard attribution 确认的空 diff）。
+- `backend-test-dag.json` — backend-test DAG 模板；其中 `generate-backend-md-cases-pi` 是唯一允许 `writer-empty-diff` 重试的 writer（总共两次，仅限 post-write-guard attribution 确认的空 diff）；N2/N5 合同限定 Scenario Partition 必须有源有限域。
 - `backend-test-dag.classify.prompt.md`、`backend-test-dag.generate-pytest.prompt.md`、`backend-test-dag.review-cases.prompt.md`、`backend-test-dag.retrospect.prompt.md` — 分类、生成、审查和复盘提示。
 - `backend-test-analysis.schema.json`、`backend-test-execution.schema.json`、`backend-test-result.schema.json`、`backend-test-case-manifest.schema.json` — 分析、执行、结果与用例清单 schema。
 

package/docs/templates/agent-dag.schema.json

@@ -130,6 +130,18 @@
     "toolProfile": {
       "enum": ["read-only", "write"]
     },
+    "piExtensionId": {
+      "type": "string",
+      "enum": ["pi-codegraph", "pi-lens"],
+      "description": "Frozen Pi extension short id resolved at run time against the Pi settings package inventory. Adding a package requires changing the plan and this enum."
+    },
+    "piExtensions": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": { "$ref": "#/$defs/piExtensionId" },
+      "description": "Node-level explicit Pi extension allowlist (backend implementation DAGs only). Omitted = extension discovery stays fully closed (R8.1). Only executor 'pi' nodes may declare it."
+    },
     "role": {
       "enum": ["planner", "scout", "implementer", "reviewer", "supervisor", "verifier", "closeout"]
     },
@@ -356,6 +368,31 @@
           "properties": { "schemaVersion": { "const": 1 }, "requireBaseline": { "const": true } }
         },
         "frontendTestCaseChecklist": { "type": "object", "additionalProperties": false },
+        "frontendBrowserToolPreflight": { "type": "object", "additionalProperties": false },
+        "frontendTestStandardScenarios": { "type": "object", "additionalProperties": false },
+        "frontendTestEnvironmentProbe": { "type": "object", "additionalProperties": false },
+        "frontendTestCaseManifest": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "maxCases": { "type": "integer", "minimum": 1 },
+            "declaredAcIds": { "type": "array", "items": { "type": "string" } }
+          }
+        },
+        "frontendTestResultFinalize": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "declaredAcIds": { "type": "array", "items": { "type": "string" } }
+          }
+        },
+        "frontendTestReports": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "l5": { "type": "boolean" }
+          }
+        },
         "frontendTestEvidenceValidation": { "type": "object", "additionalProperties": false },
         "frontendTestHtmlReport": { "type": "object", "additionalProperties": false },
         "backendTestPipeline": {
@@ -383,6 +420,12 @@
         { "required": ["frontendVerificationBundle"] },
         { "required": ["frontendReviewContext"] },
         { "required": ["frontendTestCaseChecklist"] },
+        { "required": ["frontendBrowserToolPreflight"] },
+        { "required": ["frontendTestStandardScenarios"] },
+        { "required": ["frontendTestEnvironmentProbe"] },
+        { "required": ["frontendTestCaseManifest"] },
+        { "required": ["frontendTestResultFinalize"] },
+        { "required": ["frontendTestReports"] },
         { "required": ["frontendTestEvidenceValidation"] },
         { "required": ["frontendTestHtmlReport"] },
         { "required": ["backendTestPipeline"] }
@@ -485,6 +528,7 @@
           "items": { "type": "string", "minLength": 1 }
         },
         "toolProfile": { "$ref": "#/$defs/toolProfile" },
+        "piExtensions": { "$ref": "#/$defs/piExtensions" },
         "governanceStandardReview": {
           "type": "boolean",
           "description": "Explicitly opts this node into writer-change-scoped AGENTS.md and repository-local code-standard review. Never inferred from node id or role."