@tea-agent/loop-agent 0.39.0-next.9 → 0.39.1

package/docs/templates/frontend-test-case-checklist.md

@@ -15,7 +15,7 @@ LLM review (when `frontendTest.reviewMode=blocking`) must not invent blocking ru
 | `unknown-ac` | When task `sourceBinding.requirementIds` lists ACs, every `acIds` entry must be in that set |
 | `case-id-shape` | `caseId` matches `FE-<FEATURE>-<NNN>-...` (never `AC-FE-*`) |
 | `case-id-is-ac` | Do not use acceptance id as `caseId` / filename |
-| `case-path-mismatch` | `casePath === testcase/frontend/cases/{caseId}.md` |
+| `case-path-mismatch` | `casePath === {casesDir}/{caseId}.md`（默认 `testcase/frontend/cases/{caseId}.md`） |
 | `case-file-missing` | `casePath` exists |
 
 ## Tool guidance (non-blocking)
@@ -40,5 +40,5 @@ LLM review (when `frontendTest.reviewMode=blocking`) must not invent blocking ru
 
 ## Pipeline vs quality
 
-- **Pipeline acceptance**: final `testcase/frontend/reports/frontend-test-retrospect-*.md` exists after result materialize
+- **Pipeline acceptance**: final `{reportsDir}/frontend-test-retrospect-*.md` exists after result materialize (default `testcase/frontend/reports/`)
 - **Quality**: `frontend-test-result-v1.outcome=passed` with 0 blocked/failed (opt-in via `frontendTest.strictOutcomeGate`)

package/docs/templates/frontend-test-dag.json

@@ -66,12 +66,11 @@
         ".harness/**",
         "artifacts/**"
       ],
-      "outputContract": "Write testcase/frontend/rag/standard-scenarios.v1.json for generate-time standard scenario coverage.",
-      "subtask_prompt": "Materialize frontend-test standard scenarios v1 into the RAG package.",
+      "outputContract": "Write testcase/frontend/rag/standard-scenarios.v1.json for generate-time standard scenario coverage. Copy docs/templates or harness.json governanceRoot templates (including ai_workspace/loop-agent/templates) when present; otherwise write the minimal STD-FE-SMOKE-ENTRY fallback.",
+      "subtask_prompt": "Prepare frontend-test package: materialize standard-scenarios.v1.json into the RAG package from docs/templates, governanceRoot/templates, or the init-projected ai_workspace/loop-agent/templates path.",
       "shell": {
-        "commands": [
-          "node -e \"const fs=require('fs'),path=require('path');const dest='testcase/frontend/rag/standard-scenarios.v1.json';const candidates=[path.join('docs','templates','frontend-test-standard-scenarios.v1.json')];let src=null;for(const c of candidates){if(fs.existsSync(c)){src=c;break;}}fs.mkdirSync(path.dirname(dest),{recursive:true});if(src){fs.copyFileSync(src,dest);process.stdout.write(JSON.stringify({status:'copied',from:src,to:dest}));}else{const minimal={schemaVersion:1,id:'frontend-test-standard-scenarios-v1',scenarios:[{id:'STD-FE-SMOKE-ENTRY',title:'入口可打开',category:'smoke',priority:'must',testPoints:['open'],minCases:1}]};fs.writeFileSync(dest,JSON.stringify(minimal,null,2)+'\\n');process.stdout.write(JSON.stringify({status:'fallback',to:dest}));}"
-        ],
+        "commands": [],
+        "frontendTestStandardScenarios": {},
         "cwd": ".",
         "timeoutMs": 60000
       }
@@ -120,12 +119,11 @@
         ".harness/**",
         "artifacts/**"
       ],
-      "outputContract": "Fail-closed environment preflight: absolute non-production baseUrl + curl HTTP reachability; writes environmentProbe facts; unreachable => blockedReason frontend-base-url-unreachable (node ERROR so generate/map do not run).",
-      "subtask_prompt": "Parse the concrete baseUrl selected by retrieve-frontend-test-context-pi from testcase/frontend/rag/context.md. Reject production, non-http(s), credentials, query and fragment. Probe with curl (HEAD then GET fallback; connect/max-time; no auth/cookie). 2xx/3xx => reachable and continue. 4xx/5xx/DNS/timeout/connection refused/TLS => blockedReason frontend-base-url-unreachable. Missing curl => blockedReason curl-unavailable. Do not start the app. Runtime hybrid generator embeds the authoritative probe script.",
+      "outputContract": "Fail-closed environment preflight: absolute non-production baseUrl + curl HTTP reachability; writes environmentProbe facts; unreachable => blockedReason frontend-base-url-unreachable with errorClass (connection-refused / dns-unresolved / connect-timeout / http-N). Node ERROR so generate/map do not run. Does not start the app.",
+      "subtask_prompt": "Parse the concrete baseUrl selected by retrieve-frontend-test-context-pi from testcase/frontend/rag/context.md. Reject production, non-http(s), credentials, query and fragment. Probe with curl (HEAD then GET fallback; connect/max-time; no auth/cookie). 2xx/3xx => reachable and continue. Connection refused records errorClass=connection-refused and tells the operator to start the local app then rerun from this node. 4xx/5xx/DNS/timeout/TLS => blockedReason frontend-base-url-unreachable. Missing curl => blockedReason curl-unavailable. Do not start the app.",
       "shell": {
-        "commands": [
-          "node -e \"console.log('template placeholder: runtime hybrid DAG embeds curl preflight; do not use this static command as source of truth')\""
-        ],
+        "commands": [],
+        "frontendTestEnvironmentProbe": {},
         "cwd": ".",
         "timeoutMs": 60000
       }

package/docs/templates/frontend-test-dag.retrieve-context.prompt.md

@@ -17,5 +17,5 @@ Do not claim the environment is reachable until preflight completes. Preflight d
 
 ## Standard scenario coverage
 
-- Copy or reference `docs/templates/frontend-test-standard-scenarios.v1.json` into `testcase/frontend/rag/standard-scenarios.v1.json` when available.
+- Copy or reference `docs/templates/frontend-test-standard-scenarios.v1.json`, `harness.json` `governanceRoot`/templates, or the init-projected `ai_workspace/loop-agent/templates/frontend-test-standard-scenarios.v1.json` into `testcase/frontend/rag/standard-scenarios.v1.json` when available.
 - Add `## Standard scenario coverage` to coverage-map.md with planned/n/a for each must scenario.

package/docs/templates/init-managed-agents.md

@@ -80,9 +80,19 @@ loop-agent init update --repo-root . --apply-safe
 当用户要求初始化 loop-agent（“初始化 loop-agent”“loop agent 初始化”“loop agent初始化”“loop-agent 初始化”），或发现 `README.md` / `__LOOP_AGENT_GOVERNANCE_ROOT__/verification-matrix.md` 仍停留在通用初始化状态时，模型应在同一轮工作中完成初始化闭环，不要把补全文档和验证矩阵留给用户交互。
 
 1. 运行 `loop-agent init instructions --repo-root .`。
-2. 运行 `loop-agent init --repo-root . --profile full --merge`。
-3. 基于真实项目文件补全根 `README.md`、`__LOOP_AGENT_GOVERNANCE_ROOT__/verification-matrix.md`，必要时适配 `scripts/ci-tests.sh`。
-4. 运行 `loop-agent init doctor --repo-root .`、`loop-agent inspect`、`loop-agent docs audit` 并完成 quick verification。
+2. 运行 `loop-agent init model-catalog --repo-root . --json`。loop-agent 不直接打开或解析认证文件原文，只让 Pi/OpenCode 自己的 runtime 加载其配置，并输出白名单模型元数据、Pi setup 状态、Pi 兼容性与 credential-ready 布尔值；token、headers、URL、原始命令输出和认证路径不会进入 catalog。
+3. 先处理 `piSetup`：如果没有模型定义，向用户索取无法推断的 provider/model id、API/base URL、上下文窗口、最大输出、输入/推理能力、成本约束和凭据方式，帮助按 Pi 原生 schema 合并 `~/.pi/agent/models.json`；不得让用户把凭据值写入对话、harness 或报告，优先 Pi 登录/auth storage 或环境变量引用。如果已有定义但凭据未就绪，只修复认证。随后重跑 catalog，未出现 credential-ready Pi model 前不得继续初始化。
+4. 对已有 `harness.json`，逐档保留仍存在于 Pi 的 LOW/MED/HIGH 原值；只为已移除或缺失的档位重新选择。结合目标项目实际技术栈、模型能力、成本与上下文窗口，从 `eligibleForHarness=true` 的候选中自主选择，并直接运行带完整三档参数的 init/update；代码会拒绝改动仍有效的档位。三档可以相同。只有凭据、成本、合规或可用性存在无法推断的实质歧义时才询问用户；OpenCode-only 候选不能证明 Pi executor 可用。
+5. 基于真实项目文件补全根 `README.md`、`__LOOP_AGENT_GOVERNANCE_ROOT__/verification-matrix.md`，必要时适配 `scripts/ci-tests.sh`。
+6. 运行 `loop-agent init doctor --repo-root .`、`loop-agent inspect`、`loop-agent docs audit` 并完成 quick verification；doctor 未确认 Pi model matrix 时不得开始 DAG。
+
+```bash
+loop-agent init --repo-root . --profile full --merge \
+  --low-model <provider/model> --med-model <provider/model> --high-model <provider/model>
+# 已初始化项目只替换失效档位；仍有效档位在完整参数中保持当前引用
+loop-agent init update --repo-root . --apply-safe \
+  --low-model <current-or-selected> --med-model <current-or-selected> --high-model <current-or-selected>
+```
 
 信息不足时写明尚未识别到的事实；不要留下泛化占位符。
 

package/harness.json

@@ -30,7 +30,9 @@
     "nightScheduler": {
       "enabled": true,
       "timezone": "Asia/Shanghai",
-      "allowedHours": ["00:00-08:00"],
+      "allowedHours": [
+        "00:00-08:00"
+      ],
       "maxConcurrency": 1,
       "maxAutoAttempts": 1,
       "misfirePolicy": "wait-next-window",
@@ -80,9 +82,9 @@
   "executors": {
     "pi": {
       "description": "Pi 负责规划、评审、诊断；当 DAG toolProfile=write 时也可做有界写入。模型按复杂度三档配置，支持 provider/model 字符串或带 thinking 的对象；斜杠前为 Pi provider，后为 modelId，勿只写裸 modelId。",
-      "LOW": "wizard-local/minimax-m3",
-      "MED": "wizard-local/grok-4.6",
-      "HIGH": "wizard-local/gpt-5.6-sol"
+      "LOW": "deepseek/deepseek-v4-flash",
+      "MED": "deepseek/deepseek-v4-flash",
+      "HIGH": "deepseek/deepseek-v4-flash"
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tea-agent/loop-agent",
-  "version": "0.39.0-next.9",
+  "version": "0.39.1",
   "type": "module",
   "bin": {
     "loop-agent": "bin/loop-agent.js",
@@ -33,12 +33,18 @@
     "scripts/kb-graph-materialize.mjs",
     "scripts/kb-graph-promote.mjs",
     "scripts/kb-graph-incremental-prepare.mjs",
+    "scripts/next-info.mjs",
+    "scripts/next-publish-gate.mjs",
+    "scripts/release-source-binding.mjs",
     "README.md",
     "CHANGELOG.md"
   ],
   "publishConfig": {
     "access": "public"
   },
+  "engines": {
+    "node": ">=22.19.0"
+  },
   "scripts": {
     "dev": "node --import tsx/esm src/cli.ts",
     "cursor": "node --import tsx/esm src/cli.ts cursor-prompt",
@@ -55,6 +61,7 @@
     "test": "node scripts/run-tests.mjs",
     "test:host": "vitest run test/init-upgrade.test.ts --maxWorkers=1 -t \"records and reuses|controller-authorized semantic merge|authority-sensitive\"",
     "test:fast": "vitest run --config vitest.fast.config.ts",
+    "test:io-heavy": "vitest run --config vitest.io-heavy.config.ts",
     "test:integration": "vitest run --config vitest.integration.config.ts",
     "docs:dev": "npm --prefix website start",
     "docs:build": "npm --prefix website run build",
@@ -64,6 +71,8 @@
     "verify:tree": "node scripts/pre-push-verify.mjs --verify-current-tree"
   },
   "dependencies": {
+    "@earendil-works/pi-ai": "0.83.0",
+    "@earendil-works/pi-coding-agent": "0.83.0",
     "commander": "^12.1.0",
     "katex": "^0.16.47",
     "mermaid": "^11.16.1",
@@ -71,13 +80,12 @@
     "rehype-katex": "^7.0.1",
     "remark-math": "^6.0.0",
     "semver": "^7.8.5",
+    "typebox": "1.3.7",
     "yaml": "^2.9.0",
     "zod": "^3.25.76"
   },
   "optionalDependencies": {
-    "@cursor/sdk": "^1.0.7",
-    "@earendil-works/pi-ai": "0.80.10",
-    "@earendil-works/pi-coding-agent": "0.80.10"
+    "@cursor/sdk": "^1.0.7"
   },
   "devDependencies": {
     "@remixicon/react": "^4.9.0",

package/scripts/next-info.mjs

@@ -0,0 +1,356 @@
+#!/usr/bin/env node
+/**
+ * next-info: read-only report of the current npm `next` binding.
+ *
+ * Resolves the moving git ref `npm-next` (local, then origin) and the
+ * published tarball build stamp. Does not write the repo, move dist-tags,
+ * or call GitHub APIs.
+ */
+import { execFileSync } from "node:child_process";
+import { mkdtempSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import process from "node:process";
+import {
+	commandLaunch,
+	defaultRun,
+	isAncestor,
+	normalizeCommandArgs,
+	npmViewDistTags,
+} from "./next-publish-gate.mjs";
+import {
+	downloadNpmTarball,
+	readTarballBuildStamp,
+} from "./release-source-binding.mjs";
+
+export const UNPUBLISHED_COMMIT_LIMIT_DEFAULT = 50;
+const GIT_REF_CANDIDATES = ["refs/heads/npm-next", "origin/npm-next"];
+
+/**
+ * @param {string} cmd
+ * @param {string[]} args
+ * @param {string} [cwd]
+ */
+function runWithCwd(cmd, args, cwd) {
+	const launch = commandLaunch(cmd, normalizeCommandArgs(cmd, args));
+	return execFileSync(launch.cmd, launch.args, {
+		encoding: "utf8",
+		stdio: ["ignore", "pipe", "pipe"],
+		cwd,
+	});
+}
+
+function scriptEntryHref(argv1) {
+	try {
+		return argv1 ? new URL(`file://${argv1}`).href : "";
+	} catch {
+		return "";
+	}
+}
+
+function trimSha(value) {
+	if (typeof value !== "string") return null;
+	const sha = value.trim();
+	return sha ? sha : null;
+}
+
+function equalSha(left, right) {
+	if (!left || !right) return false;
+	return left.toLowerCase() === right.toLowerCase();
+}
+
+function tryRevParse(run, ref) {
+	try {
+		return trimSha(run("git", ["rev-parse", ref]));
+	} catch {
+		return null;
+	}
+}
+
+function resolveGitRefSha(run) {
+	for (const ref of GIT_REF_CANDIDATES) {
+		const sha = tryRevParse(run, ref);
+		if (sha) return { ref, sha };
+	}
+	return null;
+}
+
+function readStampBuiltAt(tarballPath, run) {
+	try {
+		const listing = run("tar", ["-tzf", tarballPath]);
+		const stampEntry = String(listing)
+			.split("\n")
+			.map((line) => line.trim())
+			.find((line) => /\/dist\/build-stamp\.json$/.test(line));
+		if (!stampEntry) return null;
+		const stampJson = run("tar", ["-xzf", tarballPath, "-O", stampEntry]);
+		const parsed = JSON.parse(String(stampJson));
+		return typeof parsed.builtAt === "string" ? parsed.builtAt : null;
+	} catch {
+		return null;
+	}
+}
+
+/** Download the published next tarball and read gitSha + builtAt. */
+export function defaultNextStampProbe(version, run = defaultRun) {
+	const dir = mkdtempSync(join(tmpdir(), "loop-agent-next-info-"));
+	try {
+		const tarball = downloadNpmTarball(version, dir, run);
+		const stamp = readTarballBuildStamp(tarball, run);
+		return {
+			gitSha: stamp.gitSha,
+			version: stamp.version ?? null,
+			builtAt: readStampBuiltAt(tarball, run),
+		};
+	} catch {
+		return null;
+	} finally {
+		rmSync(dir, { recursive: true, force: true });
+	}
+}
+
+function emptyResult(overrides) {
+	return {
+		ok: false,
+		exitCode: 1,
+		npmNextVersion: null,
+		gitSha: null,
+		gitRef: null,
+		gitRefSha: null,
+		stampSha: null,
+		builtAt: null,
+		source: null,
+		aheadBy: null,
+		aheadByReason: null,
+		unpublishedCommits: [],
+		unpublishedTruncated: false,
+		unpublishedLimit: UNPUBLISHED_COMMIT_LIMIT_DEFAULT,
+		drift: false,
+		error: null,
+		...overrides,
+	};
+}
+
+function collectAheadState(gitSha, run) {
+	if (!gitSha) {
+		return {
+			aheadBy: null,
+			aheadByReason: "no gitSha to compare against HEAD",
+			unpublishedCommits: [],
+			unpublishedTruncated: false,
+		};
+	}
+	const headSha = tryRevParse(run, "HEAD");
+	if (!headSha) {
+		return {
+			aheadBy: null,
+			aheadByReason: "HEAD is unavailable",
+			unpublishedCommits: [],
+			unpublishedTruncated: false,
+		};
+	}
+	let unpublishedCommits = [];
+	let unpublishedTruncated = false;
+	try {
+		const log = run("git", ["log", "--oneline", `${gitSha}..HEAD`]);
+		const lines = String(log ?? "")
+			.split("\n")
+			.map((line) => line.trim())
+			.filter(Boolean);
+		unpublishedTruncated = lines.length > UNPUBLISHED_COMMIT_LIMIT_DEFAULT;
+		unpublishedCommits = lines.slice(0, UNPUBLISHED_COMMIT_LIMIT_DEFAULT);
+	} catch {
+		unpublishedCommits = [];
+	}
+	if (!isAncestor(gitSha, headSha, run)) {
+		return {
+			aheadBy: null,
+			aheadByReason: "gitSha is not an ancestor of HEAD",
+			unpublishedCommits,
+			unpublishedTruncated,
+		};
+	}
+	try {
+		const count = Number(
+			String(run("git", ["rev-list", "--count", `${gitSha}..HEAD`])).trim(),
+		);
+		if (!Number.isFinite(count)) {
+			return {
+				aheadBy: null,
+				aheadByReason: "rev-list count is not a number",
+				unpublishedCommits,
+				unpublishedTruncated,
+			};
+		}
+		return {
+			aheadBy: count,
+			aheadByReason: null,
+			unpublishedCommits,
+			unpublishedTruncated,
+		};
+	} catch {
+		return {
+			aheadBy: null,
+			aheadByReason: "rev-list failed",
+			unpublishedCommits,
+			unpublishedTruncated,
+		};
+	}
+}
+
+/**
+ * Pure-ish collector. Tests inject `run` / `viewDistTags` / `stampProbe`
+ * so this never hits the real npm registry.
+ *
+ * @param {{
+ *   cwd?: string,
+ *   run?: (cmd: string, args: string[]) => string,
+ *   viewDistTags?: () => Record<string, string>,
+ *   stampProbe?: (version: string) =>
+ *     | { gitSha?: string, builtAt?: string | null }
+ *     | null,
+ * }} [deps]
+ */
+export function collectNextInfo(deps = {}) {
+	const run =
+		deps.run ??
+		((cmd, args) =>
+			deps.cwd ? runWithCwd(cmd, args, deps.cwd) : defaultRun(cmd, args));
+	const viewDistTags = deps.viewDistTags ?? (() => npmViewDistTags(run));
+	const stampProbe =
+		deps.stampProbe ?? ((version) => defaultNextStampProbe(version, run));
+
+	let distTags = {};
+	try {
+		distTags = viewDistTags() ?? {};
+	} catch {
+		distTags = {};
+	}
+	const npmNextVersion = distTags.next ? String(distTags.next) : null;
+	const gitRef = resolveGitRefSha(run);
+	const gitRefSha = gitRef?.sha ?? null;
+	let stamp = null;
+	if (npmNextVersion) {
+		try {
+			stamp = stampProbe(npmNextVersion);
+		} catch {
+			stamp = null;
+		}
+	}
+	const stampSha = trimSha(stamp?.gitSha);
+	const builtAt = typeof stamp?.builtAt === "string" ? stamp.builtAt : null;
+
+	if (!gitRefSha && !stampSha) {
+		const error = npmNextVersion
+			? `no npm-next git ref and tarball stamp unreadable for next=${npmNextVersion}`
+			: "no npm-next git ref and no dist-tags.next";
+		return emptyResult({ error, npmNextVersion });
+	}
+
+	let source;
+	let gitSha;
+	let drift = false;
+	let error = null;
+	let ok = true;
+	let exitCode = 0;
+
+	if (gitRefSha && stampSha) {
+		source = "both";
+		if (!equalSha(gitRefSha, stampSha)) {
+			drift = true;
+			ok = false;
+			exitCode = 1;
+			error =
+				`npm-next git ref (${gitRefSha}) does not match tarball stamp gitSha (${stampSha})`;
+		}
+		gitSha = gitRefSha;
+	} else if (gitRefSha) {
+		source = "git-ref";
+		gitSha = gitRefSha;
+	} else {
+		source = "tarball-stamp";
+		gitSha = stampSha;
+	}
+
+	const ahead = collectAheadState(gitSha, run);
+	return {
+		ok,
+		exitCode,
+		npmNextVersion,
+		gitSha,
+		gitRef: gitRef?.ref ?? null,
+		gitRefSha,
+		stampSha,
+		builtAt,
+		source,
+		aheadBy: ahead.aheadBy,
+		aheadByReason: ahead.aheadByReason,
+		unpublishedCommits: ahead.unpublishedCommits,
+		unpublishedTruncated: ahead.unpublishedTruncated,
+		unpublishedLimit: UNPUBLISHED_COMMIT_LIMIT_DEFAULT,
+		drift,
+		error,
+	};
+}
+
+export function formatNextInfo(result, { json = false } = {}) {
+	if (json) {
+		return `${JSON.stringify(result, null, 2)}\n`;
+	}
+	const lines = [];
+	if (result.npmNextVersion) {
+		lines.push(`npm next: ${result.npmNextVersion}`);
+	} else {
+		lines.push("npm next: (no dist-tags.next)");
+	}
+	if (result.gitSha) {
+		lines.push(`gitSha: ${result.gitSha} (source: ${result.source})`);
+	} else {
+		lines.push("gitSha: (unavailable)");
+	}
+	if (result.gitRefSha && result.stampSha && result.drift) {
+		lines.push(`git-ref SHA: ${result.gitRefSha}`);
+		lines.push(`tarball stamp SHA: ${result.stampSha}`);
+	}
+	if (result.builtAt) {
+		lines.push(`builtAt: ${result.builtAt}`);
+	}
+	if (result.aheadBy === null) {
+		lines.push(
+			`aheadBy: null${result.aheadByReason ? ` (${result.aheadByReason})` : ""}`,
+		);
+	} else {
+		lines.push(`aheadBy: ${result.aheadBy}`);
+	}
+	const commits = result.unpublishedCommits ?? [];
+	if (commits.length === 0) {
+		lines.push("unpublishedCommits: (none)");
+	} else {
+		lines.push("unpublishedCommits:");
+		for (const commit of commits) lines.push(`  ${commit}`);
+		if (result.unpublishedTruncated) {
+			lines.push(
+				`  … truncated to ${result.unpublishedLimit} commits`,
+			);
+		}
+	}
+	if (result.error) {
+		lines.push(`error: ${result.error}`);
+	}
+	return `${lines.join("\n")}\n`;
+}
+
+function main(argv = process.argv.slice(2)) {
+	const json = argv.includes("--json");
+	const result = collectNextInfo();
+	process.stdout.write(formatNextInfo(result, { json }));
+	process.exit(result.ok ? 0 : result.exitCode || 1);
+}
+
+const invokedAsScript =
+	Boolean(process.argv[1]) &&
+	import.meta.url === scriptEntryHref(process.argv[1]);
+
+if (invokedAsScript) {
+	main();
+}