@tea-agent/loop-agent 0.41.1 → 0.42.0-next.10

package/dist/worker/observe/static/views/dag.js

@@ -35,7 +35,12 @@ import {
 	parseMarkdownBlocks,
 	markdownLinkHref,
 } from "../format.js";
-import { parseRoute, navigate, buildHashPath } from "../router.js";
+import {
+	parseRoute,
+	navigate,
+	buildHashPath,
+	withWorkspaceQuery,
+} from "../router.js";
 import {
 	fetchJson,
 	artifactUrl,
@@ -248,6 +253,7 @@ export async function renderDagDetail(dagRunId, initial = true) {
 		uiState.dagInspectorAttempt = null;
 		uiState.dagGraphViewportState = null;
 		uiState.dagTimelineViewportState = null;
+		uiState.dagTimelineAutoScrollEnabled = true;
 	}
 	// AC-001：同会话内重新进入同一 dagRunId 保持当前图视图模式（不切回逻辑拓扑）。
 	uiState.dagGraphViewMode = dagGraphViewModes.get(dagRunId) ?? "topology";
@@ -364,7 +370,9 @@ export async function renderDagDetail(dagRunId, initial = true) {
 			"page-action-btn",
 			"在操作台中止此运行 →",
 		);
-		interruptLink.href = `/#/operate/recovery?dagRunId=${encodeURIComponent(dag.dagRunId)}&intent=interrupt`;
+		interruptLink.href = withWorkspaceQuery(
+			`/#/operate/recovery?dagRunId=${encodeURIComponent(dag.dagRunId)}&intent=interrupt`,
+		);
 		interruptLink.setAttribute("data-testid", "inspect-dag-interrupt-link");
 		interruptLink.title = "只跳转到操作台 Recovery，不会在观测页执行中止";
 		primaryEntries.push(["协作中止", interruptLink]);

package/dist/worker/observe/static/views/dags.js

@@ -327,7 +327,9 @@ function buildRow(run) {
 
 	const nameTd = document.createElement("td");
 	const nameLink = el("a", "dags-name-link", run.title || run.dagRunId);
-	nameLink.href = `#/dag/${encodeURIComponent(run.dagRunId)}`;
+	nameLink.href = inspectPathToCanonicalHref(
+		`/dag/${encodeURIComponent(run.dagRunId)}`,
+	);
 	nameLink.addEventListener("click", (event) => {
 		event.preventDefault();
 		event.stopPropagation();

package/dist/worker/observe/static/views/dashboard.js

@@ -35,7 +35,13 @@ import {
 	parseMarkdownBlocks,
 	markdownLinkHref,
 } from "../format.js";
-import { parseRoute, navigate, buildHashPath } from "../router.js";
+import {
+	parseRoute,
+	navigate,
+	buildHashPath,
+	inspectPathToCanonicalHref,
+	withWorkspaceQuery,
+} from "../router.js";
 import { fetchJson, artifactUrl, parseArtifactPreviewResponse } from "../api.js";
 import {
 	objectRouteLink,
@@ -118,14 +124,14 @@ async function renderNightStrip() {
 
 	const actions = el("div", "night-strip-actions");
 	const detail = el("a", "page-action-btn", "夜间详情");
-	detail.href = "/#/inspect/night";
+	detail.href = inspectPathToCanonicalHref("/night");
 	detail.addEventListener("click", (e) => {
 		e.preventDefault();
 		navigate("/night");
 	});
 	actions.appendChild(detail);
 	const manage = el("a", "page-action-btn night-strip-manage", "晨审处置 →");
-	manage.href = "/#/operate/night";
+	manage.href = withWorkspaceQuery("/#/operate/night");
 	manage.title = "夜间计划的管理与晨审处置在操作台完成（Inspect 保持只读）";
 	actions.appendChild(manage);
 	strip.appendChild(actions);
@@ -528,7 +534,7 @@ export async function renderDashboard(scrollTo) {
 							workerBlock.appendChild(el("div", "risk-total", String(block.total)));
 							workerBlock.appendChild(el("p", "risk-summary", block.summary));
 							const link = el("a", "risk-link", "查看异常 Task →");
-							link.href = "#/failures";
+							link.href = inspectPathToCanonicalHref("/failures");
 							link.addEventListener("click", (event) => {
 								event.preventDefault();
 								navigate("/failures");
@@ -556,7 +562,7 @@ export async function renderDashboard(scrollTo) {
 			const head = el("div", "section-heading-row");
 			head.appendChild(el("h3", "section-heading", UI_TEXT.recentDags));
 			const allLink = el("a", "section-heading-action", UI_TEXT.viewAllDags);
-			allLink.href = "#/dags?page=1&pageSize=20";
+			allLink.href = inspectPathToCanonicalHref("/dags?page=1&pageSize=20");
 			allLink.setAttribute("aria-label", "查看全部 DAG 运行历史");
 			allLink.addEventListener("click", (event) => {
 				event.preventDefault();
@@ -686,7 +692,9 @@ function syncTableRow(row, cells) {
 function buildDagTimelineItem(dag) {
 	const progress = dagProgress(dag);
 	const item = el("a", "dag-run-timeline-item");
-	item.href = `#/dag/${encodeURIComponent(dag.dagRunId)}`;
+	item.href = inspectPathToCanonicalHref(
+		`/dag/${encodeURIComponent(dag.dagRunId)}`,
+	);
 	item.title = dag.title || dag.dagRunId;
 	item.addEventListener("click", (event) => {
 		event.preventDefault();

package/dist/worker/observe/static/views/pool.js

@@ -8,7 +8,12 @@ import {
 	livenessBadge,
 	truncateText,
 } from "../format.js";
-import { parseRoute, navigate, buildHashPath } from "../router.js";
+import {
+	parseRoute,
+	navigate,
+	buildHashPath,
+	inspectPathToCanonicalHref,
+} from "../router.js";
 import { fetchJson } from "../api.js";
 import { objectRouteLink } from "../relations.js";
 import {
@@ -118,7 +123,7 @@ function taskPath(task) {
 
 function linkTo(path, label, className) {
 	const a = el("a", className || "object-link", label);
-	a.href = `#${path}`;
+	a.href = inspectPathToCanonicalHref(path);
 	a.addEventListener("click", (e) => {
 		e.preventDefault();
 		e.stopPropagation();

package/dist/worker/observe/static/views/run.js

@@ -35,7 +35,12 @@ import {
 	parseMarkdownBlocks,
 	markdownLinkHref,
 } from "../format.js";
-import { parseRoute, navigate, buildHashPath } from "../router.js";
+import {
+	parseRoute,
+	navigate,
+	buildHashPath,
+	inspectPathToCanonicalHref,
+} from "../router.js";
 import {
 	fetchJson,
 	artifactUrl,
@@ -176,7 +181,9 @@ export function renderRunDagProgress(task, snapshot) {
 				"详情",
 				(() => {
 					const a = el("a", "link", "查看 DAG 详情 →");
-					a.href = `#/dag/${encodeURIComponent(dag.dagRunId)}`;
+					a.href = inspectPathToCanonicalHref(
+						`/dag/${encodeURIComponent(dag.dagRunId)}`,
+					);
 					a.addEventListener("click", (e) => {
 						e.preventDefault();
 						navigate(`/dag/${encodeURIComponent(dag.dagRunId)}`);
@@ -295,7 +302,9 @@ export function renderRunPanels(task, events, snapshot) {
 		li.appendChild(marker);
 		if (step.label === "run-dag" && dag?.dagRunId) {
 			const link = document.createElement("a");
-			link.href = `#/dag/${encodeURIComponent(dag.dagRunId)}`;
+			link.href = inspectPathToCanonicalHref(
+				`/dag/${encodeURIComponent(dag.dagRunId)}`,
+			);
 			link.className = "step-link";
 			link.textContent = "DAG →";
 			link.addEventListener("click", (e) => {

package/dist/worker/observe/static/views/session-timeline.js

@@ -7,12 +7,72 @@ import { fetchJson } from "../api.js";
 import {
 	uiState,
 	updateDagTimelineViewportState,
-	computeFollowLatest,
 } from "../state.js";
 
 /** Default visible lines for tool result preview before expand. */
 export const TOOL_RESULT_PREVIEW_LINES = 20;
 
+function isTimelineAutoScrollEnabled() {
+	return uiState.dagTimelineAutoScrollEnabled !== false;
+}
+
+function scrollTimelineToLatest(content) {
+	content.scrollLeft = 0;
+	content.scrollTop = content.scrollHeight;
+	uiState.dagTimelineViewportState = updateDagTimelineViewportState(
+		uiState.dagTimelineViewportState,
+		uiState.currentDagRunId,
+		content.dataset.nodeId,
+		content.scrollLeft,
+		content.scrollTop,
+		true,
+	);
+}
+
+/** Floating, explicit live-follow control for the execution-record viewport. */
+export function createTimelineAutoScrollControl(content) {
+	const dock = el("div", "process-timeline-autoscroll-dock");
+	const button = document.createElement("button");
+	button.type = "button";
+	const signal = el("span", "process-timeline-autoscroll-signal");
+	signal.setAttribute("aria-hidden", "true");
+	const icon = el("i", "ri-arrow-down-line");
+	icon.setAttribute("aria-hidden", "true");
+	button.appendChild(signal);
+	button.appendChild(icon);
+
+	const sync = () => {
+		const enabled = isTimelineAutoScrollEnabled();
+		const actionLabel = enabled ? "关闭自动滚动" : "自动滚动";
+		button.className = `process-timeline-autoscroll${enabled ? " is-active" : ""}`;
+		button.setAttribute("aria-pressed", String(enabled));
+		button.setAttribute("aria-label", actionLabel);
+		button.setAttribute("data-tooltip", actionLabel);
+		icon.className = enabled ? "ri-arrow-down-line" : "ri-pause-mini-fill";
+	};
+
+	button.addEventListener("click", () => {
+		const enabled = !isTimelineAutoScrollEnabled();
+		uiState.dagTimelineAutoScrollEnabled = enabled;
+		if (enabled) scrollTimelineToLatest(content);
+		else {
+			uiState.dagTimelineViewportState = updateDagTimelineViewportState(
+				uiState.dagTimelineViewportState,
+				uiState.currentDagRunId,
+				content.dataset.nodeId,
+				content.scrollLeft,
+				content.scrollTop,
+				false,
+			);
+		}
+		sync();
+	});
+
+	sync();
+	dock.appendChild(button);
+	return dock;
+}
+
 export function normalizeSessionEventFields(event) {
 	if (!event || typeof event !== "object") return {};
 	const args = event.args ?? event.input ?? event.toolInput;
@@ -623,6 +683,35 @@ export function buildRichTimelineItems(events, options = {}) {
 	return items;
 }
 
+const EXECUTION_RECORD_FILTERS = Object.freeze([
+	["all", "全部"],
+	["model", "模型消息"],
+	["tools", "工具与进程"],
+]);
+
+function normalizeExecutionRecordFilter(value) {
+	return value === "model" || value === "tools" ? value : "all";
+}
+
+export function filterExecutionRecordItems(items, filter) {
+	const normalized = normalizeExecutionRecordFilter(filter);
+	if (normalized === "all") return items;
+	return items.filter((item) => {
+		const protocolEvents = Array.isArray(item.protocolEvents)
+			? item.protocolEvents
+			: [item.event];
+		const toolProtocol =
+			item.kind === "protocol" &&
+			protocolEvents.some((event) => {
+				const role = event?.message?.role ?? event?.role;
+				return role === "tool" || role === "toolResult";
+			});
+		const modelFact =
+			item.kind === "turn" || (item.kind === "protocol" && !toolProtocol);
+		return normalized === "model" ? modelFact : !modelFact;
+	});
+}
+
 function ensureOpenDetailsSet() {
 	if (!(uiState.sessionTimelineOpenDetails instanceof Set)) {
 		uiState.sessionTimelineOpenDetails = new Set();
@@ -866,7 +955,26 @@ export function renderSessionTimeline(content, nodeId, options = {}) {
 	}
 
 	const showProtocol = Boolean(uiState.sessionTimelineShowProtocol);
+	const activeFilter = normalizeExecutionRecordFilter(
+		uiState.executionRecordFilter,
+	);
 	const toolbar = el("div", "process-timeline-toolbar");
+	const filterGroup = el("div", "process-timeline-filter-group");
+	filterGroup.setAttribute("role", "group");
+	filterGroup.setAttribute("aria-label", "筛选执行记录");
+	for (const [filter, label] of EXECUTION_RECORD_FILTERS) {
+		const button = document.createElement("button");
+		button.type = "button";
+		button.className = "process-timeline-toggle process-timeline-filter";
+		button.setAttribute("aria-pressed", String(activeFilter === filter));
+		button.textContent = label;
+		button.addEventListener("click", () => {
+			uiState.executionRecordFilter = filter;
+			rerenderSessionTimeline(content, nodeId, options);
+		});
+		filterGroup.appendChild(button);
+	}
+	toolbar.appendChild(filterGroup);
 	const protocolToggle = document.createElement("button");
 	protocolToggle.type = "button";
 	protocolToggle.className = "process-timeline-toggle";
@@ -876,13 +984,7 @@ export function renderSessionTimeline(content, nodeId, options = {}) {
 		: "展开原始协议事件";
 	protocolToggle.addEventListener("click", () => {
 		uiState.sessionTimelineShowProtocol = !showProtocol;
-		const parent = content;
-		const scrollTop = parent.scrollTop;
-		const scrollLeft = parent.scrollLeft;
-		while (parent.firstChild) parent.removeChild(parent.firstChild);
-		renderSessionTimeline(parent, nodeId, options);
-		parent.scrollTop = scrollTop;
-		parent.scrollLeft = scrollLeft;
+		rerenderSessionTimeline(content, nodeId, options);
 	});
 	toolbar.appendChild(protocolToggle);
 	const exportBtn = el("button", "btn btn-secondary", "导出 HTML");
@@ -909,10 +1011,12 @@ export function renderSessionTimeline(content, nodeId, options = {}) {
 	});
 	toolbar.appendChild(exportBtn);
 	content.appendChild(toolbar);
+	content.appendChild(createTimelineAutoScrollControl(content));
 
-	const timelineItems = buildRichTimelineItems(visible.events, {
-		showProtocol,
-	});
+	const timelineItems = filterExecutionRecordItems(
+		buildRichTimelineItems(visible.events, { showProtocol }),
+		activeFilter,
+	);
 	const hasEventTimes = visible.events.some((event) =>
 		Boolean(sessionEventTimestamp(event)),
 	);
@@ -926,6 +1030,13 @@ export function renderSessionTimeline(content, nodeId, options = {}) {
 		);
 	}
 
+	if (timelineItems.length === 0) {
+		content.appendChild(
+			el("p", "empty", "当前筛选下没有可显示的执行记录。"),
+		);
+		return;
+	}
+
 	const ul = el("ul", "process-timeline process-timeline-rich");
 	for (let index = 0; index < timelineItems.length; index += 1) {
 		const item = timelineItems[index];
@@ -980,23 +1091,18 @@ export function renderSessionTimeline(content, nodeId, options = {}) {
 	content.addEventListener(
 		"scroll",
 		() => {
-			const followLatest = computeFollowLatest(
-				content.scrollTop,
-				content.scrollHeight,
-				content.clientHeight,
-			);
 			uiState.dagTimelineViewportState = updateDagTimelineViewportState(
 				uiState.dagTimelineViewportState,
 				uiState.currentDagRunId,
 				nodeId,
 				content.scrollLeft,
 				content.scrollTop,
-				followLatest,
+				isTimelineAutoScrollEnabled(),
 			);
 		},
 		{ passive: true },
 	);
-	if (timelineState?.followLatest ?? true) {
+	if (isTimelineAutoScrollEnabled()) {
 		content.scrollLeft = timelineState?.scrollLeft ?? 0;
 		content.scrollTop = content.scrollHeight;
 	} else {
@@ -1004,3 +1110,21 @@ export function renderSessionTimeline(content, nodeId, options = {}) {
 		content.scrollTop = timelineState.scrollTop;
 	}
 }
+
+function rerenderSessionTimeline(content, nodeId, options) {
+	const scrollTop = content.scrollTop;
+	const scrollLeft = content.scrollLeft;
+	const autoScrollEnabled = isTimelineAutoScrollEnabled();
+	const preserved = [...content.children].filter((child) =>
+		String(child.className ?? "")
+			.split(/\s+/)
+			.includes("dag-inspector-attempt-bar"),
+	);
+	while (content.firstChild) content.removeChild(content.firstChild);
+	for (const child of preserved) content.appendChild(child);
+	renderSessionTimeline(content, nodeId, options);
+	if (!autoScrollEnabled) {
+		content.scrollTop = scrollTop;
+		content.scrollLeft = scrollLeft;
+	}
+}

package/dist/worker/observe/static/views/task.js

@@ -36,7 +36,12 @@ import {
 	markdownLinkHref,
 	formatLedgerSummary,
 } from "../format.js";
-import { parseRoute, navigate, buildHashPath } from "../router.js";
+import {
+	parseRoute,
+	navigate,
+	buildHashPath,
+	inspectPathToCanonicalHref,
+} from "../router.js";
 import {
 	fetchJson,
 	fetchJsonResult,
@@ -133,7 +138,7 @@ export async function renderTaskDetail(featureId, taskId) {
 					if (!c?.featureId || !c?.taskId) continue;
 					const path = `/feature/${encodeURIComponent(c.featureId)}/task/${encodeURIComponent(c.taskId)}`;
 					const a = el("a", "object-link", `${c.featureId}::${c.taskId}`);
-					a.href = `#${path}`;
+					a.href = inspectPathToCanonicalHref(path);
 					a.addEventListener("click", (e) => {
 						e.preventDefault();
 						navigate(path);

package/dist/worker/outcomes/adapters.js

@@ -98,6 +98,24 @@ class FrontendImplementationAdapter {
         };
     }
 }
+/**
+ * `backend-test-analysis` — read-only requirements/API analysis. It produces
+ * the strict Backend Test Analysis v2 contract without claiming that tests or
+ * a real integration ran.
+ */
+class BackendTestAnalysisAdapter {
+    workflow = "backend-test-analysis";
+    project(input) {
+        return {
+            artifacts: [
+                ...canonicalArtifacts(input),
+                ...structuredArtifactsFromReport(input.dagReportRun),
+            ],
+            acceptanceCoverage: [...input.acceptanceRefs],
+            integrationStatus: { mock: false, real: false },
+        };
+    }
+}
 /**
  * `backend-test` — generates + executes backend tests. Integration status is
  * `real: true` only when the report completed (a real test execution); mock is
@@ -139,6 +157,7 @@ class FrontendTestAdapter {
 const ADAPTERS = new Map([
     ["agent-dag", new AgentDagAdapter()],
     ["frontend-implementation", new FrontendImplementationAdapter()],
+    ["backend-test-analysis", new BackendTestAnalysisAdapter()],
     ["backend-test", new BackendTestAdapter()],
     ["frontend-test", new FrontendTestAdapter()],
 ]);

package/dist/worker/outcomes/types.js

@@ -24,6 +24,7 @@ export const outcomeFailureCategorySchema = z.enum([
 export const OUTCOME_WORKFLOWS = [
     "agent-dag",
     "frontend-implementation",
+    "backend-test-analysis",
     "backend-test",
     "frontend-test",
 ];

package/dist/worker/pool/attempt-lease.js

@@ -1,6 +1,7 @@
 import { randomBytes } from "node:crypto";
 import { mkdir, readFile, readdir, unlink } from "node:fs/promises";
 import path from "node:path";
+import { acquireDirLock } from "../../infrastructure/console/dir-lock.js";
 import { writeJsonAtomic } from "../../infrastructure/harness/atomic-write.js";
 import { assertSafeTaskPoolId, getTaskPoolRoot, } from "./run-store.js";
 import { TASK_POOL_STATE_ERROR_CODES, TaskPoolStateError } from "./types.js";
@@ -19,6 +20,20 @@ export function getAttemptLeasePath(repoRoot, featureId, taskId) {
     }
     return leasePath;
 }
+function getAttemptLeaseMutationLockPath(repoRoot, featureId, taskId) {
+    assertSafeTaskPoolId(featureId, "featureId");
+    assertSafeTaskPoolId(taskId, "taskId");
+    return path.join(getAttemptLeasesRoot(repoRoot), "_locks", `${featureId}__${taskId}.lock`);
+}
+async function withAttemptLeaseMutationLock(repoRoot, featureId, taskId, operation) {
+    const lock = await acquireDirLock(getAttemptLeaseMutationLockPath(repoRoot, featureId, taskId));
+    try {
+        return await operation();
+    }
+    finally {
+        await lock.release();
+    }
+}
 function isLeaseRecord(value) {
     if (!value || typeof value !== "object" || Array.isArray(value))
         return false;
@@ -30,7 +45,11 @@ function isLeaseRecord(value) {
         typeof record.batchRunId === "string" &&
         typeof record.token === "string" &&
         typeof record.acquiredAt === "string" &&
-        typeof record.renewedAt === "string");
+        typeof record.renewedAt === "string" &&
+        (record.revisionId === undefined || typeof record.revisionId === "string") &&
+        (record.controllerAnchor === undefined ||
+            typeof record.controllerAnchor === "string") &&
+        (record.claimId === undefined || typeof record.claimId === "string"));
 }
 export async function readAttemptLease(repoRoot, featureId, taskId) {
     const leasePath = getAttemptLeasePath(repoRoot, featureId, taskId);
@@ -47,82 +66,94 @@ export async function readAttemptLease(repoRoot, featureId, taskId) {
 }
 /**
  * Acquire Task-scoped attempt lease before beginWorkerAttempt.
- * Same identity+token reuse is idempotent; different active identity → conflict.
+ * Same identity+claim reuse is idempotent; a competing admission or active
+ * identity conflicts. The Task-scoped mutation lock closes cross-process
+ * read-before-rename and release-vs-successor races.
  */
 export async function acquireAttemptLease(input) {
-    const now = input.now ?? new Date();
-    const existing = await readAttemptLease(input.repoRoot, input.featureId, input.taskId);
-    if (existing) {
-        if (existing.workerRunId === input.workerRunId &&
-            existing.batchRunId === input.batchRunId &&
-            existing.featureId === input.featureId &&
-            existing.taskId === input.taskId) {
-            return { status: "idempotent-reuse", lease: existing };
+    return withAttemptLeaseMutationLock(input.repoRoot, input.featureId, input.taskId, async () => {
+        const now = input.now ?? new Date();
+        const existing = await readAttemptLease(input.repoRoot, input.featureId, input.taskId);
+        if (existing) {
+            if (existing.workerRunId === input.workerRunId &&
+                existing.batchRunId === input.batchRunId &&
+                existing.featureId === input.featureId &&
+                existing.taskId === input.taskId &&
+                existing.revisionId === input.revisionId &&
+                existing.controllerAnchor === input.controllerAnchor &&
+                existing.claimId === input.claimId) {
+                return { status: "idempotent-reuse", lease: existing };
+            }
+            throw new TaskPoolStateError(TASK_POOL_STATE_ERROR_CODES.CONFLICT, `attempt-lease-conflict for ${input.featureId}/${input.taskId}: held by ${existing.workerRunId}`);
         }
-        throw new TaskPoolStateError(TASK_POOL_STATE_ERROR_CODES.CONFLICT, `attempt-lease-conflict for ${input.featureId}/${input.taskId}: held by ${existing.workerRunId}`);
-    }
-    const lease = {
-        schemaVersion: 1,
-        featureId: input.featureId,
-        taskId: input.taskId,
-        workerRunId: input.workerRunId,
-        batchRunId: input.batchRunId,
-        acquiredAt: now.toISOString(),
-        renewedAt: now.toISOString(),
-        token: `atk-${randomBytes(8).toString("hex")}`,
-        ownerProcess: { pid: process.pid },
-        ...(input.revisionId ? { revisionId: input.revisionId } : {}),
-        ...(input.controllerAnchor
-            ? { controllerAnchor: input.controllerAnchor }
-            : {}),
-    };
-    await mkdir(path.dirname(getAttemptLeasePath(input.repoRoot, input.featureId, input.taskId)), {
-        recursive: true,
+        const lease = {
+            schemaVersion: 1,
+            featureId: input.featureId,
+            taskId: input.taskId,
+            workerRunId: input.workerRunId,
+            batchRunId: input.batchRunId,
+            acquiredAt: now.toISOString(),
+            renewedAt: now.toISOString(),
+            token: `atk-${randomBytes(8).toString("hex")}`,
+            ownerProcess: { pid: process.pid },
+            ...(input.revisionId ? { revisionId: input.revisionId } : {}),
+            ...(input.controllerAnchor
+                ? { controllerAnchor: input.controllerAnchor }
+                : {}),
+            ...(input.claimId ? { claimId: input.claimId } : {}),
+        };
+        await mkdir(path.dirname(getAttemptLeasePath(input.repoRoot, input.featureId, input.taskId)), {
+            recursive: true,
+        });
+        await writeJsonAtomic(getAttemptLeasePath(input.repoRoot, input.featureId, input.taskId), lease, { repoRoot: input.repoRoot });
+        const confirmed = await readAttemptLease(input.repoRoot, input.featureId, input.taskId);
+        if (!confirmed) {
+            throw new Error(`failed to persist attempt lease for ${input.featureId}/${input.taskId}`);
+        }
+        if (confirmed.token !== lease.token) {
+            throw new TaskPoolStateError(TASK_POOL_STATE_ERROR_CODES.CONFLICT, `attempt-lease-conflict race for ${input.featureId}/${input.taskId}`);
+        }
+        return { status: "acquired", lease: confirmed };
     });
-    await writeJsonAtomic(getAttemptLeasePath(input.repoRoot, input.featureId, input.taskId), lease, { repoRoot: input.repoRoot });
-    const confirmed = await readAttemptLease(input.repoRoot, input.featureId, input.taskId);
-    if (!confirmed) {
-        throw new Error(`failed to persist attempt lease for ${input.featureId}/${input.taskId}`);
-    }
-    if (confirmed.workerRunId !== input.workerRunId) {
-        throw new TaskPoolStateError(TASK_POOL_STATE_ERROR_CODES.CONFLICT, `attempt-lease-conflict race for ${input.featureId}/${input.taskId}`);
-    }
-    return { status: "acquired", lease: confirmed };
 }
 export async function renewAttemptLease(input) {
-    const existing = await readAttemptLease(input.repoRoot, input.featureId, input.taskId);
-    if (!existing) {
-        throw new TaskPoolStateError(TASK_POOL_STATE_ERROR_CODES.CONFLICT, `cannot renew missing lease for ${input.featureId}/${input.taskId}`);
-    }
-    if (existing.token !== input.token || existing.workerRunId !== input.workerRunId) {
-        throw new TaskPoolStateError(TASK_POOL_STATE_ERROR_CODES.CONFLICT, `cannot renew lease: CAS token/identity mismatch for ${input.featureId}/${input.taskId}`);
-    }
-    const renewed = {
-        ...existing,
-        renewedAt: (input.now ?? new Date()).toISOString(),
-    };
-    await writeJsonAtomic(getAttemptLeasePath(input.repoRoot, input.featureId, input.taskId), renewed, { repoRoot: input.repoRoot });
-    return renewed;
+    return withAttemptLeaseMutationLock(input.repoRoot, input.featureId, input.taskId, async () => {
+        const existing = await readAttemptLease(input.repoRoot, input.featureId, input.taskId);
+        if (!existing) {
+            throw new TaskPoolStateError(TASK_POOL_STATE_ERROR_CODES.CONFLICT, `cannot renew missing lease for ${input.featureId}/${input.taskId}`);
+        }
+        if (existing.token !== input.token || existing.workerRunId !== input.workerRunId) {
+            throw new TaskPoolStateError(TASK_POOL_STATE_ERROR_CODES.CONFLICT, `cannot renew lease: CAS token/identity mismatch for ${input.featureId}/${input.taskId}`);
+        }
+        const renewed = {
+            ...existing,
+            renewedAt: (input.now ?? new Date()).toISOString(),
+        };
+        await writeJsonAtomic(getAttemptLeasePath(input.repoRoot, input.featureId, input.taskId), renewed, { repoRoot: input.repoRoot });
+        return renewed;
+    });
 }
 /**
  * Release active lease after terminal/recovery evidence. Moves to lease-history then deletes active locator.
  */
 export async function releaseAttemptLease(input) {
-    const existing = await readAttemptLease(input.repoRoot, input.featureId, input.taskId);
-    if (!existing)
-        return;
-    if (existing.token !== input.token || existing.workerRunId !== input.workerRunId) {
-        throw new TaskPoolStateError(TASK_POOL_STATE_ERROR_CODES.CONFLICT, `cannot release lease: CAS token/identity mismatch for ${input.featureId}/${input.taskId}`);
-    }
-    const historyRoot = path.join(getAttemptLeasesRoot(input.repoRoot), "_history");
-    await mkdir(historyRoot, { recursive: true });
-    const historyPath = path.join(historyRoot, `${input.featureId}__${input.taskId}__${existing.workerRunId}.json`);
-    const activePath = getAttemptLeasePath(input.repoRoot, input.featureId, input.taskId);
-    await writeJsonAtomic(historyPath, {
-        ...existing,
-        releasedAt: (input.now ?? new Date()).toISOString(),
-    }, { repoRoot: input.repoRoot });
-    await unlink(activePath).catch(() => { });
+    await withAttemptLeaseMutationLock(input.repoRoot, input.featureId, input.taskId, async () => {
+        const existing = await readAttemptLease(input.repoRoot, input.featureId, input.taskId);
+        if (!existing)
+            return;
+        if (existing.token !== input.token || existing.workerRunId !== input.workerRunId) {
+            throw new TaskPoolStateError(TASK_POOL_STATE_ERROR_CODES.CONFLICT, `cannot release lease: CAS token/identity mismatch for ${input.featureId}/${input.taskId}`);
+        }
+        const historyRoot = path.join(getAttemptLeasesRoot(input.repoRoot), "_history");
+        await mkdir(historyRoot, { recursive: true });
+        const historyPath = path.join(historyRoot, `${input.featureId}__${input.taskId}__${existing.workerRunId}.json`);
+        const activePath = getAttemptLeasePath(input.repoRoot, input.featureId, input.taskId);
+        await writeJsonAtomic(historyPath, {
+            ...existing,
+            releasedAt: (input.now ?? new Date()).toISOString(),
+        }, { repoRoot: input.repoRoot });
+        await unlink(activePath).catch(() => { });
+    });
 }
 export function decideAttemptLeaseReclaim(input) {
     if (input.hasTerminalEvidence) {