@tea-agent/loop-agent 0.40.0-next.1 → 0.40.0-next.10

package/dist/workflows/dag/backend-test-pytest-collection.js

@@ -131,6 +131,23 @@ function normalizeHazardOccurrenceIdentity(line) {
     // Unclosed quote or no out-of-string `#`: do not invent a comment boundary.
     return trimmed;
 }
+/**
+ * Bare `__NNN_*` helper module names imported by a Python source snippet.
+ * Only the head token of an `import`/`from` statement is considered a module
+ * name; dotted submodules (`__551_manager_helpers.x`) collapse to the head.
+ */
+function importedBareHelperModules(source) {
+    const names = [];
+    const seen = new Set();
+    for (const match of normalizeSourceNewlines(source).matchAll(/\b(?:import|from)\s+([A-Za-z0-9_.]+)/g)) {
+        const head = match[1].split(".")[0];
+        if (/^__\d+[A-Za-z0-9_]*$/.test(head) && !seen.has(head)) {
+            seen.add(head);
+            names.push(head);
+        }
+    }
+    return names;
+}
 function listPatternOccurrences(source, patternSource, flags = "") {
     const normalized = normalizeSourceNewlines(source);
     const pattern = new RegExp(patternSource, flags.includes("g") ? flags : `${flags}g`);
@@ -221,6 +238,8 @@ export async function buildBackendPytestAssetInventory(workspaceRoot, mappedScri
     const inputHashes = {};
     const hazardOccurrenceCounts = {};
     const hazardOccurrences = {};
+    const scriptBareImports = {};
+    const mappedScriptSet = new Set(normalizedScripts);
     for (const file of assetFiles) {
         const bytes = await readFile(path.resolve(workspaceRoot, file));
         const source = bytes.toString("utf8");
@@ -228,8 +247,10 @@ export async function buildBackendPytestAssetInventory(workspaceRoot, mappedScri
         const lists = scanRepairHazardOccurrenceLists(source);
         hazardOccurrences[file] = lists;
         hazardOccurrenceCounts[file] = Object.fromEntries(Object.entries(lists).map(([label, identities]) => [label, identities.length]));
+        if (mappedScriptSet.has(file))
+            scriptBareImports[file] = importedBareHelperModules(source);
     }
-    return { mappedScripts: normalizedScripts, assetFiles, inputHashes, hazardOccurrenceCounts, hazardOccurrences };
+    return { mappedScripts: normalizedScripts, assetFiles, inputHashes, hazardOccurrenceCounts, hazardOccurrences, scriptBareImports };
 }
 function bounded(value) {
     const normalized = value.replaceAll(/(Bearer|Basic)\s+[A-Za-z0-9._~+\/-]+/gi, "$1 [REDACTED]");
@@ -237,13 +258,14 @@ function bounded(value) {
         ? normalized
         : `${normalized.slice(0, MAX_DIAGNOSTIC_CHARS)}\n...[truncated]`;
 }
-function collectionItems(stdout) {
+function collectionItems(stdout, layout) {
+    const rootPrefix = `${(layout ?? resolveBackendTestLayout(undefined)).testRoot}/`;
     return [...new Set(stdout.split(/\r?\n/).map((line) => line.trim()).filter((line) => {
             if (!line.includes("::"))
                 return false;
             if (/^(ERROR|FAILED|E\s+)/.test(line))
                 return false;
-            return /^testcase\//.test(line.replaceAll("\\", "/"));
+            return line.replaceAll("\\", "/").startsWith(rootPrefix);
         }).map((line) => line.replaceAll("\\", "/")))];
 }
 function escapeRegExp(value) {
@@ -308,8 +330,68 @@ function classifyFixtureResolutionFailure(output, layout) {
         repairPaths: paths,
     };
 }
-function classifyCollectionFailure(output) {
+/**
+ * Generated-local bare helper module signatures found in the bound pytest
+ * asset inventory. A file such as `testcase/__551_manager_helpers.py` in the
+ * test root/script dir is generated-local: when collection reports
+ * `No module named '__551_manager_helpers'`, the defect can be precisely
+ * attributed to the generated mapped script instead of a missing third-party
+ * package.
+ */
+function generatedLocalBareHelperNames(inventory) {
+    if (!inventory)
+        return [];
+    const names = [];
+    for (const file of inventory.assetFiles) {
+        const stem = path.posix.basename(file).replace(/\.py$/, "");
+        if (/^__\d+[A-Za-z0-9_]*$/.test(stem))
+            names.push(stem);
+    }
+    return [...new Set(names)];
+}
+function classifyCollectionFailure(output, evidence) {
     const normalized = output.replaceAll("\\", "/");
+    const helperNames = generatedLocalBareHelperNames(evidence?.inventory);
+    const helperByLower = new Map(helperNames.map((name) => [name.toLowerCase(), name]));
+    // A bare `__NNN_...` module import that collection cannot find is only a
+    // candidate generated-local helper signature. REPAIRABLE requires two
+    // deterministic pieces of evidence: (1) a helper asset of the same name in
+    // the bound inventory, and (2) at least one mapped generated script whose
+    // source truly imports that bare module. Without both — or when attribution
+    // is impossible — fail closed as BLOCKED so an un-attributable dependency
+    // error is never widened into a repair. Genuine third-party modules (no
+    // `__NNN_` signature) stay BLOCKED below.
+    const missingModule = /No module named ['\"]([^'\"]+)['\"]/i.exec(normalized)?.[1];
+    if (missingModule && /^__\d+[A-Za-z0-9_]*$/.test(missingModule)) {
+        const helperAsset = helperByLower.get(missingModule.toLowerCase());
+        const inventory = evidence?.inventory;
+        const scriptBareImports = inventory?.scriptBareImports ?? {};
+        const missingLower = missingModule.toLowerCase();
+        const importedByMappedScript = inventory
+            ? inventory.mappedScripts.some((script) => (scriptBareImports[script] ?? []).some((name) => name.toLowerCase() === missingLower))
+            : false;
+        if (helperAsset && importedByMappedScript && inventory) {
+            const repairPaths = [...new Set([
+                    ...(helperAsset
+                        ? inventory.assetFiles.filter((file) => path.posix.basename(file).replace(/\.py$/, "") === helperAsset)
+                        : []),
+                    ...inventory.mappedScripts,
+                ])].sort();
+            return {
+                status: "REPAIRABLE",
+                kind: "missing-generated-local-helper",
+                detail: `generated testcase asset imports missing bare generated-local helper module ${missingModule}; inline the helper or remove the generated shared dependency`,
+                repairPaths,
+            };
+        }
+        return {
+            status: "BLOCKED",
+            kind: "missing-generated-local-helper-without-evidence",
+            detail: helperAsset
+                ? `missing bare generated-local helper module ${missingModule} has a name match but no mapped generated script imports it (no precise generated-local attribution)`
+                : `missing bare __NNN_* module ${missingModule} has no generated-local helper asset in the bound inventory (cannot be precisely attributed)`,
+        };
+    }
     const blockedPatterns = [
         [/No module named ['\"](?!testcase(?:\.|['\"]))/i, "missing-third-party-module"],
         [/pytest(?:_|-)plugin|pluggy|unknown hook|unrecognized arguments/i, "pytest-plugin-or-config"],
@@ -335,7 +417,7 @@ function classifyCollectionFailure(output) {
     return { status: "BLOCKED", kind: "unclassified-collection-error", detail: "collection failure cannot be safely attributed to generated testcase assets" };
 }
 export function assessBackendPytestCollection(input) {
-    const items = collectionItems(input.stdout);
+    const items = collectionItems(input.stdout, input.layout);
     const fixtureResolution = input.fixtureResolution ?? { exitCode: 0, stdout: "fixture resolution assumed by direct assessor", stderr: "" };
     if (input.exitCode === 0 && fixtureResolution.exitCode === 0) {
         return backendPytestCollectionFactsSchema.parse({
@@ -401,7 +483,7 @@ export function assessBackendPytestCollection(input) {
             fixtureStderrExcerpt: bounded(fixtureResolution.stderr),
         });
     }
-    const classification = classifyCollectionFailure(`${input.stdout}\n${input.stderr}`);
+    const classification = classifyCollectionFailure(`${input.stdout}\n${input.stderr}`, { layout: input.layout, inventory: input.inventory });
     return backendPytestCollectionFactsSchema.parse({
         schemaId: "backend-test-pytest-collection-v3",
         phase: input.phase,
@@ -412,7 +494,9 @@ export function assessBackendPytestCollection(input) {
         fixtureResolutionAttempted: false,
         fixtureResolutionStatus: "NOT_RUN",
         fixtureResolutionExitCode: null,
-        repairPaths: testcasePythonPaths(`${input.stdout}\n${input.stderr}`),
+        repairPaths: classification.repairPaths && classification.repairPaths.length > 0
+            ? classification.repairPaths
+            : testcasePythonPaths(`${input.stdout}\n${input.stderr}`),
         mappedScripts: input.inventory.mappedScripts,
         existingMappedScripts: input.inventory.mappedScripts,
         missingMappedScripts: [],
@@ -657,7 +741,7 @@ export async function materializeBackendTestExecutionReadiness(input) {
     if (input.effective.phase !== "effective" || input.effective.status !== "PASS" || input.effective.fixtureResolutionStatus !== "PASS") {
         throw new Error("backend-test execution readiness requires effective collection and fixture-resolution PASS");
     }
-    const current = await buildBackendPytestAssetInventory(input.workspaceRoot, input.effective.mappedScripts);
+    const current = await buildBackendPytestAssetInventory(input.workspaceRoot, input.effective.mappedScripts, { layout: input.layout });
     assertSameInventory(input.effective, current);
     const eligibility = input.eligibility ?? { eligibleItemIds: input.effective.collectedItemIds, excludedItems: [] };
     const status = eligibility.eligibleItemIds.length === 0
@@ -756,7 +840,7 @@ async function firstUnreadableAssetPath(workspaceRoot, readiness) {
     }
     return undefined;
 }
-export async function assertBackendTestExecutionReadinessFresh(workspaceRoot, readiness) {
+export async function assertBackendTestExecutionReadinessFresh(workspaceRoot, readiness, layout) {
     if (!["PASS", "PARTIAL"].includes(readiness.status)) {
         const counts = formatReadinessCounts(readiness);
         const reasonTally = readiness.eligibleItemIds.length === 0 && readiness.excludedItems.length > 0
@@ -779,7 +863,7 @@ export async function assertBackendTestExecutionReadinessFresh(workspaceRoot, re
     }
     let current;
     try {
-        current = await buildBackendPytestAssetInventory(workspaceRoot, readiness.mappedScripts);
+        current = await buildBackendPytestAssetInventory(workspaceRoot, readiness.mappedScripts, { layout });
     }
     catch {
         const fallbackPath = [...readiness.mappedScripts].sort()[0] ?? Object.keys(readiness.assetHashes).sort()[0] ?? "unknown";
@@ -814,11 +898,11 @@ export async function assertBackendTestExecutionReadinessFresh(workspaceRoot, re
         }
     }
 }
-export async function assertBackendPytestCollectionFresh(workspaceRoot, effective) {
+export async function assertBackendPytestCollectionFresh(workspaceRoot, effective, layout) {
     if (effective.phase !== "effective" || effective.status !== "PASS") {
         throw new Error("backend pytest execution requires effective collection PASS facts");
     }
-    const current = await buildBackendPytestAssetInventory(workspaceRoot, effective.mappedScripts);
+    const current = await buildBackendPytestAssetInventory(workspaceRoot, effective.mappedScripts, { layout });
     const priorityOnly = priorityOnlyBackendPytestScripts(current.assetFiles);
     if (priorityOnly.length > 0)
         throw new Error(`priority-only-pytest-module: ${priorityOnly.join(", ")}`);
@@ -826,7 +910,7 @@ export async function assertBackendPytestCollectionFresh(workspaceRoot, effectiv
 }
 export async function materializeEffectiveBackendPytestCollection(input) {
     if (input.initial.status === "PASS") {
-        const current = await buildBackendPytestAssetInventory(input.workspaceRoot, input.initial.mappedScripts);
+        const current = await buildBackendPytestAssetInventory(input.workspaceRoot, input.initial.mappedScripts, { layout: input.layout });
         const priorityOnly = priorityOnlyBackendPytestScripts(current.assetFiles);
         if (priorityOnly.length > 0)
             throw new Error(`priority-only-pytest-module: ${priorityOnly.join(", ")}`);
@@ -844,7 +928,7 @@ export async function materializeEffectiveBackendPytestCollection(input) {
     if (input.final.status !== "PASS")
         throw new Error("backend pytest collection still fails after bounded repair");
     await assertBackendPytestRepairSafety(input.workspaceRoot, input.initial, input.final);
-    const current = await buildBackendPytestAssetInventory(input.workspaceRoot, input.final.mappedScripts);
+    const current = await buildBackendPytestAssetInventory(input.workspaceRoot, input.final.mappedScripts, { layout: input.layout });
     const priorityOnly = priorityOnlyBackendPytestScripts(current.assetFiles);
     if (priorityOnly.length > 0)
         throw new Error(`priority-only-pytest-module: ${priorityOnly.join(", ")}`);

package/dist/workflows/dag/backend-test-writer-completeness.js

@@ -385,12 +385,17 @@ export const FORBIDDEN_GENERATED_IMPORT_NAMESPACES = [
     "testcase.helpers",
     "testcase.factories",
 ];
-const FORBIDDEN_GENERATED_IMPORT_PATTERN = /^\s*(?:from\s+(testcase_helpers|testcase\.helpers|testcase\.factories)\b|import\s+(testcase_helpers|testcase\.helpers|testcase\.factories)\b)/gm;
+const FORBIDDEN_GENERATED_IMPORT_PATTERN = /^\s*(?:from\s+(testcase_helpers|testcase\.helpers|testcase\.factories|__\d+[A-Za-z0-9_]*)\b|import\s+(testcase_helpers|testcase\.helpers|testcase\.factories|__\d+[A-Za-z0-9_]*)\b)/gm;
 /**
- * Scan Python source for imports from forbidden generated shared namespaces.
- * Anchored at line start with a word boundary so `testcase.helpers_other` or a
- * substring inside a docstring sentence is not falsely flagged. Returns the
- * list of offending namespace module names (deduplicated, order-preserving).
+ * Scan Python source for imports from forbidden generated shared namespaces
+ * or bare generated-local helper modules. Anchored at line start with a word
+ * boundary so `testcase.helpers_other` or a substring inside a docstring is not
+ * falsely flagged. In addition to the `testcase_helpers`/`testcase.helpers`/
+ * `testcase.factories` namespaces, bare `__<digits>...` helper modules (for
+ * example `from __551_manager_helpers import ...` / `import __551_manager_helpers`)
+ * are generated-local shared dependencies: a self-contained pytest child must
+ * inline or remove them rather than depend on a generated shared module.
+ * Returns the list of offending module names (deduplicated, order-preserving).
  */
 export function findForbiddenGeneratedImports(source) {
     const hits = [];
@@ -879,28 +884,23 @@ export function isBackendTestShardChildTask(task) {
         task.id?.startsWith("generate-backend-pytest-case-"));
 }
 /**
- * Is this task the README-only plan node of the map-sharded md topology?
- * The plan node writes testcase/md/README.md alone; module case cards are
- * produced by the downstream map_agent children, so the Completeness Gate
- * must NOT require module files to exist at plan time.
+ * Historical classifier for the Markdown plan node. Current backend-test N2
+ * is read-only and persists a run-owned plan.md, so writer completeness never
+ * invokes the workspace README assessment below for newly generated DAGs.
  */
 export function isBackendTestMdPlanTask(task) {
     return task.id === "generate-backend-md-plan-pi";
 }
 /**
- * Is this task the shared-resources plan node of the map-sharded pytest
- * topology? The plan node writes helpers/factories only; per-module pytest
- * scripts are produced by the downstream map_agent children, so the Gate
- * must NOT require mapped pytest scripts to exist at plan time.
+ * Historical classifier for the former shared-resources pytest writer. Current
+ * N7 is static and every map child writes one self-contained pytest module.
  */
 export function isBackendTestPytestPlanTask(task) {
     return task.id === "generate-backend-pytest-plan-pi";
 }
 /**
- * Plan-node completeness for the md topology: verify the README itself is
- * structurally complete (Coverage Scope, Coverage Matrix, a non-empty module
- * index), WITHOUT requiring the indexed module files to exist yet — those are
- * written by the downstream map_agent shard children.
+ * Legacy workspace-plan completeness helper retained for isolated historical
+ * fixtures. New DAGs validate the run-owned plan artifact in N3 instead.
  */
 export async function assessBackendTestMdPlanCompleteness(workspaceRoot, layout) {
     const resolvedPlan = layout ?? resolveBackendTestLayout(undefined);

package/dist/workflows/dag/dynamic-runtime/map.js

@@ -26,6 +26,7 @@ export function buildExpandedChildTask(input) {
         allowedPaths: renderDynamicPatternList(child.allowedPaths, item, index, expansion.itemName) ?? [],
         forbiddenPaths: renderDynamicPatternList(child.forbiddenPaths, item, index, expansion.itemName) ?? [],
         writeSet: renderDynamicPatternList(child.writeSet, item, index, expansion.itemName),
+        readSet: renderDynamicPatternList(child.readSet, item, index, expansion.itemName),
         outputContract: child.outputContract,
         writerOutcomePolicy: child.writerOutcomePolicy,
         writeGuardPolicy: child.writeGuardPolicy,

package/dist/workflows/dag/frontend-implementation-contract.js

@@ -8,6 +8,7 @@ import { writeTextArtifactFile } from "../../infrastructure/harness/artifact-sto
 import { findPackageRoot } from "../../shared/package-metadata.js";
 import { pathMatchesPattern } from "../../shared/git-progress.js";
 import { resolveDagTaskSourcePath } from "../../task/dag-source-paths.js";
+import { isDagSourceBindingV2 } from "./types.js";
 import { canonicalContractRel, classifyStructuredContractFailure, formatStructuredArtifactPointer, openspecCitationsRel, parseOpenspecCitationsBlock, persistRuntimeSkeleton, } from "./structured-output-repair.js";
 export const frontendNormalizationActionSchema = z.enum([
     "remove-trailing-commas",
@@ -279,8 +280,33 @@ export const frontendImplementationContractSchema = z
         requirementSha256: z.string().regex(/^[a-f0-9]{64}$/),
         referencePaths: z.array(safePath),
         requirementIds: z.array(id),
+        // Source binding v2 (frontend): bound ledger pointer + fragment map.
+        ledgerPath: safePath.optional(),
+        ledgerSha256: z.string().regex(/^[a-f0-9]{64}$/).optional(),
+        inputDigest: z.string().regex(/^[a-f0-9]{64}$/).optional(),
+        requirementToFragments: z
+            .record(z.string(), z.array(z.string()))
+            .optional(),
     })
-        .strict(),
+        .strict()
+        .superRefine((value, ctx) => {
+        // v2 all-or-none：任一 ledger 字段出现则四项必须齐全，防止 v1+optional 冒充 v2。
+        const anyLedgerField = value.ledgerPath !== undefined ||
+            value.ledgerSha256 !== undefined ||
+            value.inputDigest !== undefined ||
+            value.requirementToFragments !== undefined;
+        const allLedgerFields = value.ledgerPath !== undefined &&
+            value.ledgerSha256 !== undefined &&
+            value.inputDigest !== undefined &&
+            value.requirementToFragments !== undefined;
+        if (anyLedgerField && !allLedgerFields) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ["sourceBinding"],
+                message: "source binding v2 ledger fields (ledgerPath/ledgerSha256/inputDigest/requirementToFragments) must be provided together; partial or optional v1+ledger bindings are rejected",
+            });
+        }
+    }),
     riskLevel: z.enum(["small", "standard", "high-risk"]),
     targets: z
         .object({
@@ -296,6 +322,10 @@ export const frontendImplementationContractSchema = z
         implementationTargets: z.array(safePath),
         verificationTargetIds: z.array(z.string().min(1)),
         evidenceGap: gap.optional(),
+        // Source fidelity ledger binding (AC-005/AC-006): 每个 requirement
+        // 携带来源 fragment 证据，prewrite 门禁校验其真实性与覆盖。
+        sourceFragmentIds: z.array(z.string().min(1)).optional(),
+        sourceRefs: z.array(safePath).optional(),
     })
         .strict()).min(1),
     uiStates: z.array(z
@@ -432,6 +462,30 @@ export const frontendImplementationContractSchema = z
                     message: `unknown verification target ${targetId}`,
                     path: ["requirements"],
                 });
+        // Source fidelity ledger binding (AC-005/AC-006): 绑定携带
+        // requirementToFragments（ledger v2）时，每个 requirement 必须携带
+        // 有效 sourceFragmentIds/sourceRefs，否则 fail closed（防引用伪造/缺失）。
+        const boundFragments = value.sourceBinding.requirementToFragments?.[requirement.id];
+        if (value.sourceBinding.ledgerPath &&
+            (!requirement.sourceFragmentIds ||
+                requirement.sourceFragmentIds.length === 0 ||
+                !requirement.sourceRefs ||
+                requirement.sourceRefs.length === 0)) {
+            ctx.addIssue({
+                code: "custom",
+                message: `requirement ${requirement.id} must carry sourceFragmentIds/sourceRefs when a source fidelity ledger is bound`,
+                path: ["requirements", requirement.id, "sourceFragmentIds"],
+            });
+        }
+        else if (boundFragments !== undefined &&
+            (!requirement.sourceFragmentIds ||
+                requirement.sourceFragmentIds.length === 0)) {
+            ctx.addIssue({
+                code: "custom",
+                message: `requirement ${requirement.id} is bound to ledger fragments ${boundFragments.join(", ")} but declares none`,
+                path: ["requirements", requirement.id, "sourceFragmentIds"],
+            });
+        }
     }
     for (const state of value.uiStates) {
         if (state.applicable &&
@@ -568,6 +622,29 @@ export async function assertFrontendSourceBindingFresh(input) {
             throw new Error(`frontend source binding is stale: ${source.path}`);
         }
     }
+    // Source binding v2 ledger 新鲜度（AC-FIDELITY-REPAIR-001/002）：v2 绑定携带的
+    // ledger 文件必须存在且 sha256 与绑定一致，否则 fail closed；v1 绑定无此路径。
+    if (isDagSourceBindingV2(input.binding)) {
+        const absolute = resolveDagTaskSourcePath({
+            workspaceRoot: input.workspaceRoot,
+            taskId: input.binding.taskId,
+            sourcePath: input.binding.ledgerPath,
+        });
+        let content;
+        try {
+            content = await readFile(absolute);
+            const info = await stat(absolute);
+            if (!info.isFile())
+                throw new Error("not a regular file");
+        }
+        catch (error) {
+            throw new Error(`frontend source fidelity ledger unavailable: ${input.binding.ledgerPath}: ${error instanceof Error ? error.message : String(error)}`);
+        }
+        const actual = createHash("sha256").update(content).digest("hex");
+        if (actual !== input.binding.ledgerSha256) {
+            throw new Error(`frontend source fidelity ledger is stale or tampered: ${input.binding.ledgerPath} (bound ${input.binding.ledgerSha256}, observed ${actual})`);
+        }
+    }
 }
 const SECRET_KEY = /(?:password|passwd|secret|token|api[_-]?key|private[_-]?key|credential|authorization)/i;
 const SECRET_VALUE = /(?:-----BEGIN [A-Z ]*PRIVATE KEY-----|\b(?:sk|ghp|github_pat|xox[baprs]|AKIA)[-_A-Za-z0-9]{12,}\b)/;
@@ -742,7 +819,7 @@ export function canonicalFrontendContractSourceBinding(binding) {
     const requirement = binding.sources.find((source) => source.kind === "requirement");
     if (!requirement)
         throw new Error("frontend implementation contract gate requires a requirement source in DAG sourceBinding");
-    return {
+    const sourceBinding = {
         taskId: binding.taskId,
         requirementPath: requirement.path,
         requirementSha256: requirement.sha256,
@@ -752,6 +829,15 @@ export function canonicalFrontendContractSourceBinding(binding) {
             .sort(),
         requirementIds: binding.requirementIds.map(canonicalizeRequirementId),
     };
+    // Source binding v2（schemaVersion=2 强制字段）：透传 ledger 指针与
+    // requirement→fragment 映射。v1 绑定不得以 optional 字段冒充 v2。
+    if (isDagSourceBindingV2(binding)) {
+        sourceBinding.ledgerPath = binding.ledgerPath;
+        sourceBinding.ledgerSha256 = binding.ledgerSha256;
+        sourceBinding.inputDigest = binding.inputDigest;
+        sourceBinding.requirementToFragments = binding.requirementToFragments;
+    }
+    return sourceBinding;
 }
 function asRecord(value) {
     return value && typeof value === "object" && !Array.isArray(value)

package/dist/workflows/dag/frontend-plan-render.js

@@ -47,6 +47,27 @@ function componentSelection(contract) {
     })
         .join("\n");
 }
+/**
+ * 有界 source fidelity ledger 指针（AC-007 / AC-FIDELITY-007）：长原文不重新
+ * 全量内联到节点提示词；只注入紧凑 canonical contract 与 bound ledger 指针
+ * （路径/哈希/inputDigest），ledger coverage 证明长尾未丢失。
+ */
+function sourceFidelityLedger(contract) {
+    const binding = contract.sourceBinding;
+    if (!binding.ledgerPath)
+        return "_(not bound — v1 source binding)_";
+    const lines = [
+        `- ledger: ${binding.ledgerPath}`,
+        `- ledgerSha256: ${binding.ledgerSha256 ?? "(missing)"}`,
+        `- inputDigest: ${binding.inputDigest ?? "(missing)"}`,
+        "- 语义权威：原始 requirement/acceptance 文档与 requirement-ledger.json；本计划只消费派生摘要与 bound ledger 指针，长原文不内联。",
+    ];
+    const boundCount = Object.keys(binding.requirementToFragments ?? {}).length;
+    if (boundCount > 0) {
+        lines.push(`- requirement→fragment bindings: ${boundCount}`);
+    }
+    return lines.join("\n");
+}
 export function renderFrontendPlanMarkdown(contract) {
     return [
         "# Frontend Implementation Plan",
@@ -54,6 +75,9 @@ export function renderFrontendPlanMarkdown(contract) {
         "## Requirement Coverage",
         requirementsCoverage(contract),
         "",
+        "## Source Fidelity Ledger",
+        sourceFidelityLedger(contract),
+        "",
         "## Implementation Steps",
         bulletList(contract.implementationSteps) || "_(not specified)_",
         "",