@tea-agent/loop-agent 0.40.0-next.3 → 0.40.0-next.4

package/CHANGELOG.md

@@ -61,6 +61,7 @@
 
 ### 改进
 
+- 检查器「提示词重启」只读态的提示词卡片会撑满剩余高度并在卡片内滚动，不再在面板底部留下大块空白；失败节点的可编辑布局不变。
 - DAG 节点表「备注」改为节点用途简介（是什么、做什么、目的），不再重复节点 ID；失败节点仍显示错误摘要。检查器标题与图节点悬浮提示同步展示同一句说明。
 - 实验「提示词重启」会为 Pi 节点的每次失败 attempt 保存独立、脱敏且 64 KiB 有界的提示词候选；Inspector 始终展示提示词版本选择框，新 run 会列出冻结原始提示词与全部失败尝试（含自动重试产生的恢复提示词），历史 run 未保存候选时明确说明，成功尝试不混入。提示词卡片右上角提供复制图标并以勾选图标反馈成功；已截断候选复制时明确标记为截断预览，并保持只读、禁止直接提交，避免用不完整提示词发起续跑。选择失败候选会载入「全文替换」编辑器；即使节点后续自动重试成功，历史失败候选仍可只读切换查看。
 - DAG 节点检查器「执行过程」按执行器分流：Pi 仍看 session-events；有命令的 shell 展示 `shell-command-receipt` 与 stdout/stderr；`frontendBrowserToolPreflight` 等内部处理器展示步骤回执（历史 run 可从 capability / attempt 产物合成）。空态不再把 shell/static 误说成「暂无过程日志」。节点输入补充 named handler 名称。脚本仍属于节点输入，不假装已执行。

package/dist/build-stamp.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "version": "0.40.0-next.3",
-  "gitSha": "1b04fc99ec8ef7ffad6549eeda272cc4e9cc8013",
-  "builtAt": "2026-08-26T06:29:08.294Z"
+  "version": "0.40.0-next.4",
+  "gitSha": "84dabbbd0cdd880a29ed8cf22e11feb7f4550188",
+  "builtAt": "2026-08-26T13:58:53.067Z"
 }

package/dist/executors/dag-pi-executor.js

@@ -9,6 +9,7 @@ import { cleanupPlaywrightCliDefaultSession, createPlaywrightCliTool, PI_COMMAND
 import { dagCommandPolicyAllows, resolveDagCommandPolicy, } from "../workflows/dag/types.js";
 import { redactPromptForLog, truncateOutput, } from "../shared/output-truncation.js";
 import { GitStatusUnavailableError, pathsChangedDuringRun, readGitStatusPorcelain, recoverRootNulArtifact, snapshotGitStatusPathFingerprints, snapshotGitStatusPorcelain, validateShellWriteGuard, } from "./shell-write-guard.js";
+import { captureWorkspaceWriteSnapshot, diffWorkspaceWriteSnapshots, } from "./workspace-write-snapshot.js";
 import { isTargetTemplateTransientRetryNode, isWriterEmptyDiffRetryCandidate, isWriterTransportRetryCandidate, INCOMPLETE_WRITE_SET_RETRY_CATEGORY, WRITER_CLEAN_TIMEOUT_RETRY_CATEGORY, WRITER_EMPTY_DIFF_RETRY_CATEGORY, } from "../workflows/dag/retry-policy.js";
 import { assessBackendTestMdPlanCompleteness, assessBackendTestMdWriterCompleteness, assessBackendTestPytestPlanCompleteness, assessBackendTestPytestWriterCompleteness, assessBackendTestShardChildCompleteness, backendTestWriterProgressRoleForTask, classifyBackendTestWriterCompletenessFailure, isBackendTestCompletenessRetryCandidate, isBackendTestMdPlanTask, isBackendTestPytestPlanTask, isBackendTestShardChildTask, writeBackendTestWriterProgressArtifacts, } from "../workflows/dag/backend-test-writer-completeness.js";
 import { resolveBackendTestLayout } from "../workflows/dag/backend-test-layout.js";
@@ -446,9 +447,28 @@ export async function executeDagPiNode(input, meta, piStepFn = executePiStep, wr
         };
     }
     let beforeStatus;
+    let beforeWorkspaceSnapshot;
     let beforePathFingerprints;
-    /** tools-only: keep SDK path sandbox; skip git baseline + post-diff write-guard hard fail. */
-    const skipGitWriteGuard = isWriteTask && input.task.writeGuardPolicy === "tools-only";
+    /** tools-only and filesystem-only keep the tool sandbox but skip Git baseline. */
+    const filesystemOnly = isWriteTask && meta.spec.backendTestWorkspaceControl === "filesystem-only";
+    const skipGitWriteGuard = isWriteTask && (input.task.writeGuardPolicy === "tools-only" || filesystemOnly);
+    if (isWriteTask && filesystemOnly) {
+        try {
+            beforeWorkspaceSnapshot = await captureWorkspaceWriteSnapshot({
+                rootCwd: input.cwd,
+                paths: input.task.writeSet ?? input.task.allowedPaths,
+            });
+        }
+        catch (error) {
+            return {
+                ok: false,
+                stdout: "",
+                stderr: `workspace filesystem baseline unavailable before Pi execution: ${error instanceof Error ? error.message : String(error)}`,
+                failureCategory: "write-guard",
+                durationMs: Date.now() - started,
+            };
+        }
+    }
     if (isWriteTask && !skipGitWriteGuard) {
         try {
             beforeStatus = await writeGuardDependencies.readGitStatusPorcelain(input.cwd, { phase: "pi-writer-before" });
@@ -678,6 +698,27 @@ export async function executeDagPiNode(input, meta, piStepFn = executePiStep, wr
     let writeGuardViolations = [];
     let changeManifestAfterStatus;
     let changeManifestChangedFiles;
+    let afterWorkspaceSnapshot;
+    if (filesystemOnly && beforeWorkspaceSnapshot) {
+        try {
+            afterWorkspaceSnapshot = await captureWorkspaceWriteSnapshot({
+                rootCwd: input.cwd,
+                paths: input.task.writeSet ?? input.task.allowedPaths,
+            });
+            changeManifestChangedFiles = diffWorkspaceWriteSnapshots(beforeWorkspaceSnapshot, afterWorkspaceSnapshot);
+            const guard = validateShellWriteGuardFromDiff({
+                changedFiles: changeManifestChangedFiles,
+                task: input.task,
+                concurrentSiblingWriteSets: meta.concurrentSiblingWriteSets,
+            });
+            writeGuardOk = guard.ok;
+            writeGuardViolations = guard.violations;
+        }
+        catch (error) {
+            writeGuardOk = false;
+            writeGuardViolations = [`workspace snapshot unavailable: ${error instanceof Error ? error.message : String(error)}`];
+        }
+    }
     if (beforeStatus !== undefined) {
         let recoveryEvidence;
         let removalPendingRecheck;
@@ -850,7 +891,7 @@ export async function executeDagPiNode(input, meta, piStepFn = executePiStep, wr
         }
     }
     if (writeGuardOk &&
-        beforeStatus !== undefined &&
+        (beforeStatus !== undefined || beforeWorkspaceSnapshot !== undefined) &&
         changeManifestChangedFiles !== undefined) {
         await persistWriterChangeManifest({
             runDir: meta.runDir,
@@ -860,8 +901,8 @@ export async function executeDagPiNode(input, meta, piStepFn = executePiStep, wr
             approvalSourceNodeId: input.task.resolvedFinalWriteSetApproval?.approvalSourceNodeId,
             approvalDigest: input.task.resolvedFinalWriteSetApproval?.approvalDigest,
             changedFiles: changeManifestChangedFiles,
-            beforeStatus,
-            afterStatus: changeManifestAfterStatus ?? "",
+            beforeStatus: beforeStatus ?? JSON.stringify(beforeWorkspaceSnapshot),
+            afterStatus: changeManifestAfterStatus ?? JSON.stringify(afterWorkspaceSnapshot),
         });
     }
     let completenessFailure;

package/dist/executors/shell-executor.js

@@ -41,6 +41,7 @@ import { computeL5ReportMetrics } from "../workflows/dag/l5-report-metrics.js";
 import { buildBackendTestCanonicalResultFromInitialShellSnippet, materializeBackendTestClassification, } from "../workflows/dag/backend-test-classification-contract.js";
 import { backendTestSemanticReviewSchema, materializeBackendTestSemanticReview, } from "../workflows/dag/backend-test-semantic-review-contract.js";
 import { pathsChangedDuringRun, readGitStatusPorcelain, snapshotGitStatusPorcelain, validateShellWriteGuard, } from "./shell-write-guard.js";
+import { captureWorkspaceWriteSnapshot, diffWorkspaceWriteSnapshots, } from "./workspace-write-snapshot.js";
 import { parseAndValidateFinalWriteSetApproval, } from "../workflows/dag/node-execution.js";
 import { buildShellProcessEnv } from "./shell-verification.js";
 import { readRunState } from "../workflows/dag/run-store.js";
@@ -1719,6 +1720,33 @@ async function executeBackendTestPipeline(input, meta) {
     }
 }
 async function executeBackendTestPipelineWithWriteGuard(input, meta) {
+    if (meta.spec.backendTestWorkspaceControl === "filesystem-only") {
+        const paths = input.task.writeSet ?? input.task.allowedPaths;
+        let beforeSnapshot;
+        try {
+            beforeSnapshot = await captureWorkspaceWriteSnapshot({ rootCwd: input.cwd, paths });
+        }
+        catch (error) {
+            return { ok: false, stdout: "", stderr: `workspace filesystem baseline unavailable: ${error instanceof Error ? error.message : String(error)}`, failureCategory: "write-guard", durationMs: 0 };
+        }
+        const result = await executeBackendTestPipeline(input, meta);
+        try {
+            const afterSnapshot = await captureWorkspaceWriteSnapshot({ rootCwd: input.cwd, paths });
+            const guard = validateShellWriteGuard({
+                changedPaths: diffWorkspaceWriteSnapshots(beforeSnapshot, afterSnapshot),
+                writePolicy: input.task.writePolicy,
+                writeSet: input.task.writeSet,
+                allowedPaths: input.task.allowedPaths,
+                forbiddenPaths: input.task.forbiddenPaths,
+            });
+            if (!guard.ok)
+                return { ...result, ok: false, stderr: [result.stderr, `filesystem write guard failed: ${guard.violations.join(", ")}`].filter(Boolean).join("\n\n"), failureCategory: "write-guard" };
+            return result;
+        }
+        catch (error) {
+            return { ...result, ok: false, stderr: [result.stderr, `filesystem write guard failed: ${error instanceof Error ? error.message : String(error)}`].filter(Boolean).join("\n\n"), failureCategory: "write-guard" };
+        }
+    }
     let beforeStatus;
     try {
         beforeStatus = await readGitStatusPorcelain(input.cwd);

package/dist/executors/workspace-write-snapshot.js

@@ -0,0 +1,68 @@
+import { createHash } from "node:crypto";
+import { lstat, readdir, readFile } from "node:fs/promises";
+import path from "node:path";
+import { pathMatchesPattern } from "../shared/git-progress.js";
+const normalize = (value) => value.replace(/\\/g, "/").replace(/^\.\//, "").replace(/\/$/, "");
+function rootBeforeWildcard(pattern) {
+    const value = normalize(pattern);
+    const wildcard = value.search(/[?*]/);
+    if (wildcard < 0)
+        return path.posix.dirname(value);
+    const prefix = value.slice(0, wildcard);
+    return prefix.slice(0, prefix.lastIndexOf("/")) || ".";
+}
+async function walk(rootCwd, relative, files) {
+    let entries;
+    try {
+        entries = await readdir(path.resolve(rootCwd, relative), { withFileTypes: true });
+    }
+    catch {
+        return;
+    }
+    for (const entry of entries) {
+        if ([".git", ".harness", "node_modules"].includes(entry.name))
+            continue;
+        const child = normalize(path.posix.join(relative, entry.name));
+        if (entry.isDirectory())
+            await walk(rootCwd, child, files);
+        else if (entry.isFile())
+            files.add(child);
+    }
+}
+export async function captureWorkspaceWriteSnapshot(input) {
+    const candidates = new Set();
+    for (const pattern of input.paths) {
+        await walk(input.rootCwd, rootBeforeWildcard(pattern), candidates);
+        if (!/[?*]/.test(pattern)) {
+            try {
+                if ((await lstat(path.resolve(input.rootCwd, pattern))).isFile())
+                    candidates.add(normalize(pattern));
+            }
+            catch { /* absent target */ }
+        }
+    }
+    const files = {};
+    let totalBytes = 0;
+    for (const relative of [...candidates].filter((file) => input.paths.some((pattern) => pathMatchesPattern(file, pattern))).sort()) {
+        if (Object.keys(files).length >= 20_000)
+            throw new Error("workspace snapshot file limit exceeded");
+        const absolute = path.resolve(input.rootCwd, relative);
+        const stat = await lstat(absolute);
+        if (!stat.isFile())
+            throw new Error(`workspace snapshot encountered non-regular file: ${relative}`);
+        totalBytes += stat.size;
+        if (totalBytes > 64 * 1024 * 1024)
+            throw new Error("workspace snapshot byte limit exceeded");
+        files[relative] = { size: stat.size, sha256: createHash("sha256").update(await readFile(absolute)).digest("hex") };
+    }
+    const body = JSON.stringify(files);
+    return { schemaVersion: 1, controlMode: "filesystem-only", files, sha256: createHash("sha256").update(body).digest("hex") };
+}
+export function diffWorkspaceWriteSnapshots(before, after) {
+    const paths = new Set([...Object.keys(before.files), ...Object.keys(after.files)]);
+    return [...paths].sort().filter((file) => {
+        const left = before.files[file];
+        const right = after.files[file];
+        return !left || !right || left.size !== right.size || left.sha256 !== right.sha256;
+    });
+}

package/dist/task/config-types.js

@@ -147,6 +147,8 @@ export const backendTestConfigSchema = z
     gapDoc: z.string().min(1).optional(),
     /** gap-fill pytest execution scope: only affected items (default) or all eligible. */
     executeScope: z.enum(["affected", "all"]).optional(),
+    /** Backend-test-only workspace mutation control; omitted means Git guard. */
+    workspaceControl: z.enum(["git", "filesystem-only"]).optional(),
 })
     .strict()
     .optional();
@@ -237,5 +239,13 @@ export const taskConfigSchema = z.preprocess((raw) => {
     if ("executor" in obj || "cursorModel" in obj) {
         throw new Error(CURSOR_TASK_FIELD_REMOVED_ERROR);
     }
+    const backendTest = obj.backendTest;
+    if (backendTest &&
+        typeof backendTest === "object" &&
+        !Array.isArray(backendTest) &&
+        "workspaceControl" in backendTest &&
+        obj.taskKind !== "backend-test") {
+        throw new Error("backendTest.workspaceControl is only valid when taskKind is backend-test");
+    }
     return raw;
 }, taskConfigObjectSchema);

package/dist/worker/observe/static/styles.css

@@ -3580,6 +3580,10 @@ button.copy-command:focus-visible {
 #dag-inspector-panel-prompt-restart {
 	display: flex;
 	flex-direction: column;
+	min-height: 0;
+}
+#dag-inspector-panel-prompt-restart:has(.prompt-restart-panel.is-readonly) {
+	overflow: hidden;
 }
 .prompt-restart-panel,
 .prompt-restart-box {
@@ -3589,6 +3593,14 @@ button.copy-command:focus-visible {
 	min-width: 0;
 	flex: 1;
 }
+.prompt-restart-panel.is-readonly {
+	min-height: 0;
+	overflow: hidden;
+}
+.prompt-restart-panel.is-readonly .prompt-restart-prompt-card {
+	flex: 1 1 auto;
+	min-height: 12rem;
+}
 .prompt-restart-toolbar {
 	display: grid;
 	grid-template-columns: minmax(0, 1fr) auto;
@@ -3814,7 +3826,6 @@ button.copy-command:focus-visible {
 .prompt-restart-readonly {
 	margin: 0;
 	padding: 14px 16px;
-	max-height: min(36vh, 18rem);
 	overflow: auto;
 	background: var(--canvas-soft);
 	color: var(--ink);
@@ -3825,6 +3836,14 @@ button.copy-command:focus-visible {
 	overflow-wrap: anywhere;
 	tab-size: 2;
 }
+.prompt-restart-panel.is-readonly .prompt-restart-readonly {
+	flex: 1 1 auto;
+	min-height: 0;
+	max-height: none;
+}
+.prompt-restart-panel.is-edit .prompt-restart-readonly {
+	max-height: min(36vh, 18rem);
+}
 .prompt-restart-textarea {
 	width: 100%;
 	min-height: 8rem;

package/dist/worker/observe/static/views/dag-inspector.js

@@ -1404,7 +1404,7 @@ async function renderPromptRestart(content, dagRunId, node) {
 
 	if (node.status !== "ERROR") {
 		// Non-failed nodes still show their frozen prompt — read-only.
-		const panel = el("div", "prompt-restart-panel");
+		const panel = el("div", "prompt-restart-panel is-readonly");
 		panel.appendChild(
 			createPromptRestartBanner({
 				tone: "readonly",

package/dist/workflows/dag/init-hybrid.js

@@ -4412,6 +4412,7 @@ async function buildBackendTestGapFillDag(sources) {
         ],
     };
     spec.backendTestLayout = layout;
+    applyBackendTestWorkspaceControl(spec, taskConfig.backendTest?.workspaceControl ?? "git");
     if (sharedSetup) {
         spec.backendTestSharedSetup = { ...sharedSetup };
     }
@@ -4868,6 +4869,7 @@ async function buildBackendTestHybridDag(sources) {
     // against the resolved layout. The default layout is identity, so the
     // packaged template stays byte-identical with the historical contract.
     applyBackendTestLayoutToDagSpec(spec, layout);
+    applyBackendTestWorkspaceControl(spec, taskConfig.backendTest?.workspaceControl ?? "git");
     // Plan B: carry the bound shared-setup document on the spec so runtime
     // validators (N6 markdown case validation) see the same binding as prompts.
     if (intake.sharedSetup) {
@@ -4878,6 +4880,23 @@ async function buildBackendTestHybridDag(sources) {
     assertValidDagSpec(spec);
     return spec;
 }
+function applyBackendTestWorkspaceControl(spec, control) {
+    if (control !== "filesystem-only") {
+        delete spec.backendTestWorkspaceControl;
+        return;
+    }
+    spec.backendTestWorkspaceControl = control;
+    for (const task of spec.tasks) {
+        if ((task.executor === "pi" && task.toolProfile === "write") ||
+            task.shell?.backendTestPipeline) {
+            task.writeGuardPolicy = "filesystem-only";
+        }
+        const child = task.dynamicExpansion?.childTask;
+        if (child?.executor === "pi" && child.toolProfile === "write") {
+            child.writeGuardPolicy = "filesystem-only";
+        }
+    }
+}
 /** Rewrite layout-dependent strings across a compiled backend-test DAG spec (plan A). */
 function applyBackendTestLayoutToDagSpec(spec, layout) {
     if (layout.isDefault) {

package/dist/workflows/dag/types.js

@@ -382,7 +382,7 @@ export const dagWritePolicySchema = z.enum([
     "none",
 ]);
 /** Git/post-diff write guard intensity for exclusive Pi writers. */
-export const dagWriteGuardPolicySchema = z.enum(["full", "tools-only"]);
+export const dagWriteGuardPolicySchema = z.enum(["full", "tools-only", "filesystem-only"]);
 /**
  * Fail-closed outcome/diff consistency contract for bounded Pi writers.
  * The writer must begin with IMPLEMENTATION_OUTCOME: changed,
@@ -997,6 +997,8 @@ export const dagSpecSchema = z
     taskContractBinding: dagTaskContractBindingSchema.optional(),
     /** Optional unresolved parent-run feedback for a full task rerun. */
     rerunFeedback: dagRerunFeedbackSchema.optional(),
+    /** Backend-test-only workspace mutation control; absent means Git. */
+    backendTestWorkspaceControl: z.enum(["git", "filesystem-only"]).optional(),
     /** Frozen backend-test artifact layout (plan A); absent = historical default testcase/ layout. */
     backendTestLayout: z
         .object({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tea-agent/loop-agent",
-  "version": "0.40.0-next.3",
+  "version": "0.40.0-next.4",
   "type": "module",
   "bin": {
     "loop-agent": "bin/loop-agent.js",