@tea-agent/loop-agent 0.42.0-next.2 → 0.42.0-next.3

package/docs/init-surface.manifest.json

@@ -34,6 +34,7 @@
     "docs/templates/worker-dogfood-setup.md",
     "docs/templates/worker-dogfood-evidence.md",
     "docs/templates/harness.schema.json",
+    "docs/templates/spec-registry.schema.json",
     "docs/templates/interactive-ui-round2-experiment.md",
     "docs/templates/product-line/README.md",
     "docs/templates/product-line/AGENTS.md",
@@ -77,11 +78,16 @@
     "skills/webapp-testing/SKILL.md",
     "skills/playwright-cli/SKILL.md",
     "skills/playwright-cli-case-generator/SKILL.md",
-    "skills/frontend-implementation/SKILL.md",
-    "skills/frontend-implementation/references/node-contracts.md",
-    "skills/frontend-implementation/references/design-spec.md",
-    "skills/frontend-implementation/references/code-standards.md",
+    "skills/frontend-contract/SKILL.md",
+    "skills/frontend-contract/references/contract-protocol.md",
+    "skills/frontend-scout/SKILL.md",
+    "skills/frontend-scout/references/scout-evidence.md",
+    "skills/frontend-scout/references/design-evidence.md",
+    "skills/frontend-plan/SKILL.md",
+    "skills/frontend-plan/references/decision-contract.md",
+    "skills/frontend-plan/references/design-decisions.md",
     "skills/frontend-bounded-implement/SKILL.md",
+    "skills/frontend-bounded-implement/references/code-standards.md",
     "skills/frontend-design-review/SKILL.md",
     "skills/frontend-design-review/references/review-checklist.md",
     "skills/frontend-review/SKILL.md",
@@ -103,6 +109,7 @@
     "docs/feature-workflow.md",
     "docs/verification-matrix.md",
     "docs/loop-agent-harness.md",
+    "docs/spec-registry.json",
     "docs/harness-methodology-tdd.md",
     "docs/harness-methodology-verification.md",
     "docs/harness-methodology-debugging.md",
@@ -157,11 +164,16 @@
     ".agents/skills/webapp-testing/SKILL.md",
     ".agents/skills/playwright-cli/SKILL.md",
     ".agents/skills/playwright-cli-case-generator/SKILL.md",
-    ".agents/skills/frontend-implementation/SKILL.md",
-    ".agents/skills/frontend-implementation/references/node-contracts.md",
-    ".agents/skills/frontend-implementation/references/design-spec.md",
-    ".agents/skills/frontend-implementation/references/code-standards.md",
+    ".agents/skills/frontend-contract/SKILL.md",
+    ".agents/skills/frontend-contract/references/contract-protocol.md",
+    ".agents/skills/frontend-scout/SKILL.md",
+    ".agents/skills/frontend-scout/references/scout-evidence.md",
+    ".agents/skills/frontend-scout/references/design-evidence.md",
+    ".agents/skills/frontend-plan/SKILL.md",
+    ".agents/skills/frontend-plan/references/decision-contract.md",
+    ".agents/skills/frontend-plan/references/design-decisions.md",
     ".agents/skills/frontend-bounded-implement/SKILL.md",
+    ".agents/skills/frontend-bounded-implement/references/code-standards.md",
     ".agents/skills/frontend-design-review/SKILL.md",
     ".agents/skills/frontend-design-review/references/review-checklist.md",
     ".agents/skills/frontend-review/SKILL.md",
@@ -178,6 +190,7 @@
     ".pi/settings.json"
   ],
   "initSurface": {
+    "docs/spec-registry.json": "generated",
     "README.md": "managed-block",
     "AGENTS.md": "managed-block",
     ".gitignore": "managed-block",
@@ -242,11 +255,16 @@
     ".agents/skills/webapp-testing/SKILL.md": "copied",
     ".agents/skills/playwright-cli/SKILL.md": "copied",
     ".agents/skills/playwright-cli-case-generator/SKILL.md": "copied",
-    ".agents/skills/frontend-implementation/SKILL.md": "copied",
-    ".agents/skills/frontend-implementation/references/node-contracts.md": "copied",
-    ".agents/skills/frontend-implementation/references/design-spec.md": "copied",
-    ".agents/skills/frontend-implementation/references/code-standards.md": "copied",
+    ".agents/skills/frontend-contract/SKILL.md": "copied",
+    ".agents/skills/frontend-contract/references/contract-protocol.md": "copied",
+    ".agents/skills/frontend-scout/SKILL.md": "copied",
+    ".agents/skills/frontend-scout/references/scout-evidence.md": "copied",
+    ".agents/skills/frontend-scout/references/design-evidence.md": "copied",
+    ".agents/skills/frontend-plan/SKILL.md": "copied",
+    ".agents/skills/frontend-plan/references/decision-contract.md": "copied",
+    ".agents/skills/frontend-plan/references/design-decisions.md": "copied",
     ".agents/skills/frontend-bounded-implement/SKILL.md": "copied",
+    ".agents/skills/frontend-bounded-implement/references/code-standards.md": "copied",
     ".agents/skills/frontend-design-review/SKILL.md": "copied",
     ".agents/skills/frontend-design-review/references/review-checklist.md": "copied",
     ".agents/skills/frontend-review/SKILL.md": "copied",

package/docs/skills/vetted-skill-registry.md

@@ -16,11 +16,13 @@ The entries below are local wrappers or existing local skills. They are not whol
 | `code-review-core` | local wrapper inspired by code review practice | `skills/code-review-core/SKILL.md` | reviewer | reviewer | No external tools or network by default. |
 | `codebase-scout` | local wrapper | `skills/codebase-scout/SKILL.md` | scout | scout | Read-only reconnaissance guidance. |
 | `init-capability-evolution` | local wrapper | `skills/init-capability-evolution/SKILL.md` | supervisor, maintenance | optional | Used only when changes may affect target-project initialization, package surface, or init projection rules. |
-| `frontend-implementation` | local existing (frontend hybrid DAG) | `skills/frontend-implementation/SKILL.md` | frontend plan / contract / scout / mock nodes (spec-level `skillsByRole`) | frontend-implementation DAG only | Required refs node-contracts / design-spec / code-standards; injected by `init-hybrid.ts` spec generation and `src/adapters/loop-agent.ts`; projected via init-surface manifest. Not in `DEFAULT_SKILLS_BY_ROLE`. |
+| `frontend-contract` | local frontend hybrid DAG contract skill | `skills/frontend-contract/SKILL.md` | `frontend-contract-pi` only | frontend-implementation DAG only | Required contract-protocol ref stays complete under the default runtime budget; does not inject design or implementation guidance. |
+| `frontend-scout` | local frontend hybrid DAG scouting skill | `skills/frontend-scout/SKILL.md` | `frontend-scout-pi` only | frontend-implementation DAG only | Required target-surface and design-evidence refs are bounded and complete; discovery does not leak into Plan. |
+| `frontend-plan` | local frontend hybrid DAG planning skill | `skills/frontend-plan/SKILL.md` | `frontend-plan-pi` and legacy Mock assessment only | frontend-implementation DAG only | Required decision/design refs carry stable trace IDs, Mock/data and dependency decisions without the full lifecycle contract. |
 | `frontend-review` | local existing (frontend hybrid DAG) | `skills/frontend-review/SKILL.md` | reviewer (frontend review nodes, spec-level) | frontend-implementation / repair DAGs | Consumed by `init-hybrid.ts` / `frontend-repair.ts` / `shell-executor.ts`; required ref review-findings (maxChars 2800). |
 | `frontend-verification` | local existing (frontend hybrid DAG) | `skills/frontend-verification/SKILL.md` | verifier / closeout (frontend evidence, spec-level) | frontend DAG closeout | Consumed by `shell-executor.ts` / `frontend-repair.ts` / `frontend-review-context.ts`; required ref verification-checklist. |
 | `frontend-design-review` | local existing (frontend hybrid DAG) | `skills/frontend-design-review/SKILL.md` | design-gate reviewer (before any writer) | frontend-implementation DAG design gate | Injected by `init-hybrid.ts`; runs before the prewrite gate authorizes writers; required ref review-checklist. |
-| `frontend-bounded-implement` | local existing (frontend hybrid DAG) | `skills/frontend-bounded-implement/SKILL.md` | implementer (writer nodes, spec-level) | frontend writers after canonical contract gate | Injected by `init-hybrid.ts`; writers run only after the canonical contract gate accepts and only inside the frozen writeSet (ADR 0015/0016 discipline). |
+| `frontend-bounded-implement` | local existing (frontend hybrid DAG) | `skills/frontend-bounded-implement/SKILL.md` | implementer (writer nodes, spec-level) | frontend writers after canonical contract gate | Injected by `init-hybrid.ts`; its required bounded code-standards ref applies only inside canonical targets and does not authorize OpenSpec/source rediscovery. |
 | `grill-with-docs` | local operator skill adapted from domain grilling + ADR/glossary discipline | `skills/grill-with-docs/SKILL.md` | explicit interactive operator only | never a default DAG role | Resolves decisions via `harness.json.governanceRoot`; required refs `context-format.md` / `adr-format.md`; respects writeSet; not in `DEFAULT_SKILLS_BY_ROLE`. |
 | `grill-me` | local interview question engine wrapper | `skills/grill-me/SKILL.md` | interview runtime dependency (not a DAG role) | never a default DAG role | Question engine lives in `src/worker/console/interview/grill-me.ts` (Console interview / operator-actions); intentionally NOT projected by init-surface manifest — runs in this repo's Console only. |
 | `analyze-product-requirements` | local org-internal Product Analysis V4 skill | `skills/analyze-product-requirements/SKILL.md` | source-prepare dependency (not a DAG role) | never a default DAG role | Loaded by `src/task/source-prepare/prepare.ts` during 任务源 preparation; IRON-LAW freeze semantics on `product-analysis.md`; intentionally NOT projected by init-surface manifest. |

package/docs/templates/README.md

@@ -38,6 +38,7 @@
 
 - `frontend-task-requirement.md`、`frontend-task-constraints.md`、`frontend-design-contract.md` — 前端任务输入与设计合同。
 - `frontend-implementation-contract.schema.json` — 前端实现合同 schema（sourceBinding v2 ledger 字段 all-or-none：任一出现则四项齐全，禁止 v1+optional 冒充 v2）。`requirements[].sourceRefs[].items` 使用合法 `$ref: #/$defs/path`（相对路径、无 `..` 逃逸、无反斜杠），模板 JSON 无非法键，运行时加载器可直接编译（AC-003）。
+- `frontend-implementation-dag.json` — 自包含的前端实现 DAG 模板：契约 → 侦察 → 计划 → 设计策略/评审 → writer 准入 → 有界写入 → 验证 → 真实 diff 审查 → closeout。它不依赖 runtime builder 或其他模板；执行前必须将所有 `REPLACE/WITH/...` 路径和确定性命令替换为当前项目的具体值。
 - `frontend-test-dag.json` — frontend-test DAG 模板；其 deterministic checklist 会拒绝 alternative executable instructions，仅允许 allowlisted `playwright-cli` command。Pi generator/reviser 的 runtime writeSet 仅授权下列目标项目生成路径（不是本仓库文档索引目标）：
 
   ~~~text
@@ -56,6 +57,7 @@
 - `knowledge-sync-dag.json`、`knowledge-graph-bootstrap-dag.json` — 知识同步与图谱初始化 DAG。
 - `knowledge-sync-draft.schema.json` — 知识同步草稿 schema。
 - `harness.schema.json` — `harness.json` 的 IDE JSON Schema。
+- `spec-registry.schema.json` — 项目级 `ai_workspace/loop-agent/spec-registry.json` 的机器校验 schema。
 
 ## 子目录
 

package/docs/templates/agent-dag-report.schema.json

@@ -176,7 +176,8 @@
         "humanEscalationJson",
         "humanEscalationMd",
         "humanApproval",
-        "humanRejection"
+        "humanRejection",
+        "changeManifest"
       ],
       "properties": {
         "resultSummary": { "$ref": "#/$defs/dagArtifactRef" },
@@ -188,7 +189,12 @@
         "humanEscalationJson": { "$ref": "#/$defs/dagArtifactRef" },
         "humanEscalationMd": { "$ref": "#/$defs/dagArtifactRef" },
         "humanApproval": { "$ref": "#/$defs/dagArtifactRef" },
-        "humanRejection": { "$ref": "#/$defs/dagArtifactRef" }
+        "humanRejection": { "$ref": "#/$defs/dagArtifactRef" },
+        "changeManifest": { "$ref": "#/$defs/dagArtifactRef" },
+        "changeManifestChangedFiles": {
+          "type": "array",
+          "items": { "type": "string" }
+        }
       }
     },
     "repairArtifact": {

package/docs/templates/agent-dag.schema.json

@@ -466,7 +466,7 @@
         "retryCategories": {
           "type": "array",
           "items": {
-            "enum": ["timeout", "network", "rate-limit", "unavailable", "empty-output", "output-too-large", "protocol-invalid", "invalid-output", "writer-empty-diff", "incomplete-write-set", "writer-clean-timeout"]
+            "enum": ["timeout", "network", "rate-limit", "unavailable", "empty-output", "output-too-large", "protocol-invalid", "invalid-output", "writer-empty-diff", "incomplete-write-set", "writer-clean-timeout", "read-burst", "context-overflow"]
           },
           "default": ["timeout", "network", "rate-limit", "unavailable", "empty-output"],
           "description": "Failure categories eligible for retry. quota/auth/write-guard are never eligible. invalid-output is allowed only on explicit structured/protocol policies; writer-empty-diff and incomplete-write-set are reserved for requireChangedFiles generation/completeness writers; writer-clean-timeout is reserved for standard bounded writers after explicit zero-write-tool-call and empty-diff evidence."

package/docs/templates/frontend-implementation-contract.schema.json

@@ -502,9 +502,12 @@
               ]
             },
             "then": {
+              "required": [
+                "specReference"
+              ],
               "properties": {
                 "specReference": {
-                  "type": "null"
+                  "$ref": "#/$defs/uiComponentSpecReference"
                 }
               }
             }

package/docs/templates/frontend-implementation-dag.json

@@ -0,0 +1,89 @@
+{
+  "$schema": "./agent-dag.schema.json",
+  "version": 2,
+  "title": "Frontend implementation independent DAG template",
+  "objective": "Replace with the concrete, bounded frontend implementation objective for this DAG run.",
+  "successCriteria": [
+    "The contract covers every required user-visible behavior, state, and interaction.",
+    "The implementation is admitted only after a concrete, narrow writeSet is reviewed.",
+    "Static and behavior verification are recorded before final review.",
+    "The final closeout distinguishes passed, not-run, and residual-risk evidence."
+  ],
+  "globalConstraints": [
+    "This is a self-contained static template: do not generate, import, or merge a DAG from a runtime builder before execution.",
+    "Replace every REPLACE/WITH/... placeholder with concrete repository paths or deterministic commands before execution.",
+    "Do not commit runtime traces under .harness/dag-runs/.",
+    "Every node must explicitly declare its executor; defaults.executor is schema-only and not a runtime fallback.",
+    "Only frontend-implement-pi may write project files, and only inside its concrete writeSet.",
+    "Read-only nodes must not write root artifacts/**; root artifacts/ is not a per-node scratchpad.",
+    "Do not infer missing behavior, states, interactions, design decisions, or verification commands. Stop for an explicit task-contract revision instead.",
+    "Do not add dependencies unless they are already declared by the project contract."
+  ],
+  "defaults": {"executor":"pi","contextProfile":"slim","skills":["ai-engineering-context"],"writePolicy":"read-only"},
+  "skillsByRole": {
+    "planner":["loop-agent"], "scout":["ai-engineering-context"], "implementer":["verification-before-completion"], "reviewer":["requesting-code-review"], "verifier":["verification-before-completion","systematic-debugging"], "closeout":["loop-agent","verification-before-completion"]
+  },
+  "executorModels": {"pi":{"LOW":"gpt-5.3-codex-spark","MED":"gpt-5.5","HIGH":"gpt-5.5"}},
+  "tasks": [
+    {
+      "id":"frontend-contract-pi", "depends_on":[], "complexity":"MED", "executor":"pi", "role":"planner", "writePolicy":"read-only", "allowedPaths":["**"], "forbiddenPaths":[".harness/**","artifacts/**"],
+      "outputContract":"Plain Markdown frontend contract: required behavior, states, interactions, non-goals, concrete verification expectations, and unresolved gaps; no file writes.",
+      "subtask_prompt":"Read the task inputs. Produce a concise frontend contract that maps each required behavior, UI state, and interaction to observable outcomes. Identify missing or conflicting requirements as blockers; do not infer them and do not edit files."
+    },
+    {
+      "id":"frontend-scout-pi", "depends_on":["frontend-contract-pi"], "complexity":"LOW", "executor":"pi", "role":"scout", "writePolicy":"read-only", "allowedPaths":["REPLACE/WITH/FRONTEND/SOURCE/PATH/**","REPLACE/WITH/FRONTEND/TEST/PATH/**"], "forbiddenPaths":[".harness/**","artifacts/**"],
+      "outputContract":"Plain Markdown source and verification reconnaissance: relevant routes, components, styles, state patterns, focused tests, and risks; no file writes.",
+      "subtask_prompt":"Inspect only the declared frontend source and test paths. Report reusable component, styling, accessibility, state-management, and verification patterns that satisfy the contract. Do not edit files or broaden the allowed paths."
+    },
+    {
+      "id":"frontend-plan-pi", "depends_on":["frontend-scout-pi"], "complexity":"MED", "executor":"pi", "role":"planner", "writePolicy":"read-only", "allowedPaths":["REPLACE/WITH/FRONTEND/SOURCE/PATH/**","REPLACE/WITH/FRONTEND/TEST/PATH/**"], "forbiddenPaths":[".harness/**","artifacts/**"],
+      "outputContract":"Plain Markdown implementation plan: ordered changes, concrete target files, behavior/state/interaction coverage, and focused verification mapping; no file writes.",
+      "subtask_prompt":"Turn the contract and reconnaissance into a minimal implementation plan. Every target file and verification step must be concrete. Preserve existing design and accessibility conventions. If any behavior lacks a verifiable target, report it as blocked instead of guessing."
+    },
+    {
+      "id":"frontend-design-policy-shell", "depends_on":["frontend-plan-pi"], "complexity":"LOW", "executor":"shell", "role":"verifier", "writePolicy":"read-only", "allowedPaths":["REPLACE/WITH/FRONTEND/SOURCE/PATH/**","REPLACE/WITH/FRONTEND/TEST/PATH/**"], "forbiddenPaths":[".harness/**","artifacts/**"],
+      "outputContract":"Archived deterministic design-policy result proving the plan uses declared dependencies, concrete requirements, and approved design evidence; no worktree writes.",
+      "subtask_prompt":"Run the project-specific deterministic design-policy check selected for this task. It must reject missing requirement coverage, unauthorized dependencies, and unresolved design conflicts.",
+      "shell":{"commands":["REPLACE/WITH/DESIGN-POLICY/COMMAND"],"cwd":".","timeoutMs":300000}
+    },
+    {
+      "id":"frontend-design-review-pi", "depends_on":["frontend-design-policy-shell"], "complexity":"MED", "executor":"pi", "role":"reviewer", "writePolicy":"read-only", "allowedPaths":["REPLACE/WITH/FRONTEND/SOURCE/PATH/**","REPLACE/WITH/FRONTEND/TEST/PATH/**"], "forbiddenPaths":[".harness/**","artifacts/**"],
+      "outputContract":"Plain Markdown design review: approved plan or explicit blocking findings for behavior, state, interaction, design-system, and accessibility coverage; no file writes.",
+      "subtask_prompt":"Review the approved plan against the frontend contract and design-policy result. Reject missing visible states, interaction behavior, accessibility obligations, or unsupported design claims. Do not edit files."
+    },
+    {
+      "id":"frontend-writer-admission-shell", "depends_on":["frontend-design-review-pi"], "complexity":"LOW", "executor":"shell", "role":"verifier", "writePolicy":"read-only", "allowedPaths":["REPLACE/WITH/FRONTEND/TARGET/PATH/**"], "forbiddenPaths":[".harness/**","artifacts/**"],
+      "outputContract":"Archived deterministic writer-admission result with a concrete, narrow writeSet and pre-write baseline; no worktree writes.",
+      "subtask_prompt":"Run the project-specific writer-admission check. It must derive and record a concrete writeSet from the approved plan, reject broad paths and scope drift, and capture the pre-write baseline before authorizing the writer.",
+      "shell":{"commands":["REPLACE/WITH/WRITER-ADMISSION/COMMAND"],"cwd":".","timeoutMs":300000}
+    },
+    {
+      "id":"frontend-implement-pi", "depends_on":["frontend-writer-admission-shell"], "complexity":"HIGH", "executor":"pi", "role":"implementer", "toolProfile":"write", "writePolicy":"exclusive", "writeSet":["REPLACE/WITH/FRONTEND/TARGET/PATH/**"], "allowedPaths":["REPLACE/WITH/FRONTEND/TARGET/PATH/**"], "forbiddenPaths":[".harness/**","artifacts/**"],
+      "outputContract":"Implementation summary with changed files, contract coverage, focused checks run, and residual risks.",
+      "subtask_prompt":"Implement only the admitted frontend changes. Preserve established component, styling, accessibility, and state-management conventions. Cover every approved behavior, state, and interaction, then report changed files and focused verification. Do not broaden writeSet or add undeclared dependencies."
+    },
+    {
+      "id":"frontend-verify-shell", "depends_on":["frontend-implement-pi"], "complexity":"LOW", "executor":"shell", "role":"verifier", "writePolicy":"read-only", "allowedPaths":["REPLACE/WITH/FRONTEND/TARGET/PATH/**"], "forbiddenPaths":[".harness/**","artifacts/**"],
+      "outputContract":"Archived static and behavior verification output with command exit codes; no worktree writes.",
+      "subtask_prompt":"Run the contract-selected deterministic static and behavior verification commands. Record all exit codes. A failed required command is terminal for this DAG run; do not silently substitute a different command.",
+      "shell":{"preset":"loop-agent-standard-verify","cwd":".","timeoutMs":300000}
+    },
+    {
+      "id":"frontend-review-context-shell", "depends_on":["frontend-verify-shell"], "complexity":"LOW", "executor":"shell", "role":"verifier", "writePolicy":"read-only", "allowedPaths":["REPLACE/WITH/FRONTEND/TARGET/PATH/**"], "forbiddenPaths":[".harness/**","artifacts/**"],
+      "outputContract":"Archived deterministic final-review context: admitted writeSet, cumulative diff, and required verification evidence; no worktree writes.",
+      "subtask_prompt":"Run the project-specific review-context collector. It must bind the admitted writeSet, actual cumulative diff, and required verification results so final review cannot rely on summaries alone.",
+      "shell":{"commands":["REPLACE/WITH/REVIEW-CONTEXT/COMMAND"],"cwd":".","timeoutMs":300000}
+    },
+    {
+      "id":"frontend-review-pi", "depends_on":["frontend-review-context-shell"], "complexity":"MED", "executor":"pi", "role":"reviewer", "writePolicy":"read-only", "allowedPaths":["REPLACE/WITH/FRONTEND/TARGET/PATH/**"], "forbiddenPaths":[".harness/**","artifacts/**"],
+      "outputContract":"Plain Markdown final review: approved result or explicit findings for contract coverage, regression risk, accessibility, and verification gaps; no file writes.",
+      "subtask_prompt":"Review the actual diff and archived verification evidence against the frontend contract. Do not treat missing, weak, mock-only, or not-run evidence as passed. Report explicit residual risks; do not edit files."
+    },
+    {
+      "id":"frontend-closeout-shell", "depends_on":["frontend-review-pi"], "complexity":"LOW", "executor":"shell", "role":"closeout", "writePolicy":"read-only", "allowedPaths":["REPLACE/WITH/FRONTEND/TARGET/PATH/**"], "forbiddenPaths":[".harness/**","artifacts/**"],
+      "outputContract":"Archived deterministic closeout summarizing contract coverage, verification status, review findings, evidence gaps, and residual risks; no worktree writes.",
+      "subtask_prompt":"Run the project-specific deterministic closeout renderer. Preserve evidence status exactly: passed, failed, not-run, mock-backed, and baseline debt must never be promoted to a stronger result.",
+      "shell":{"commands":["REPLACE/WITH/CLOSEOUT/COMMAND"],"cwd":".","timeoutMs":300000}
+    }
+  ]
+}

package/docs/templates/spec-registry.schema.json

@@ -0,0 +1,45 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://loop-agent.local/schemas/spec-registry.schema.json",
+  "title": "Frontend specification registry",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["version", "roots"],
+  "properties": {
+    "version": { "const": 1 },
+    "roots": {
+      "type": "array",
+      "maxItems": 32,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["path"],
+        "properties": {
+          "path": {
+            "type": "string",
+            "minLength": 1,
+            "pattern": "^(?!/)(?!.*//)(?!.*\\\\)(?!.*(?:^|/)\\.{1,2}(?:/|$)).+$"
+          },
+          "scope": {
+            "type": "array",
+            "items": { "type": "string", "minLength": 1 },
+            "uniqueItems": true
+          },
+          "mode": { "enum": ["normative", "advisory"] },
+          "description": { "type": "string" }
+        }
+      }
+    },
+    "discovery": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "enabled": { "type": "boolean", "default": true },
+        "maxDepth": { "type": "integer", "minimum": 0, "maximum": 8, "default": 3 },
+        "maxFiles": { "type": "integer", "minimum": 1, "maximum": 200, "default": 100 },
+        "maxBytes": { "type": "integer", "minimum": 1, "maximum": 10485760, "default": 1048576 },
+        "timeoutMs": { "type": "integer", "minimum": 1, "maximum": 10000, "default": 2000 }
+      }
+    }
+  }
+}

package/harness.json

@@ -87,4 +87,4 @@
       "HIGH": "wizard-local/gpt-5.6-sol"
     }
   }
-}
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tea-agent/loop-agent",
-  "version": "0.42.0-next.2",
+  "version": "0.42.0-next.3",
   "type": "module",
   "bin": {
     "loop-agent": "bin/loop-agent.js",

package/skills/frontend-bounded-implement/SKILL.md

@@ -1,17 +1,23 @@
 ---
 name: frontend-bounded-implement
 description: >-
-  Use only for frontend implementation and repair writers after the canonical
+  Use only for frontend implementation writers after the canonical
   contract gate has authorized a bounded write set.
+references:
+  - path: references/code-standards.md
+    required: true
+    maxChars: 2600
 ---
 
 # Frontend Bounded Implement
 
+Read the bounded code standards before editing. They apply only inside the
+canonical targets and do not authorize additional discovery.
+
 ## Authoritative Inputs
 
 - For implementation, use the run-owned
   `contracts/frontend-implementation-contract.json`.
-- For repair, also use `contracts/frontend-repair-assessment.json`.
 - Treat requirement `expectedOutcome`, interaction `trigger` /
   `expectedBehavior`, target files, UI states, Mock/API strategy, and verification
   targets as closed decisions. Do not rediscover or reinterpret them.
@@ -25,7 +31,7 @@ description: >-
 - Start the bounded edit after confirming the contract and targets. Optional
   context is not a reason to postpone implementation.
 - If behavior is still ambiguous or a required target is outside `writeSet`, stop
-  with `IMPLEMENTATION_OUTCOME: blocked`; do not compensate with broader scouting.
+  without writing and explain the blocker; do not compensate with broader scouting.
 
 ## Implementation Discipline
 
@@ -39,15 +45,10 @@ description: >-
 - Run only the focused checks already frozen by the task. Leave full verification
   to downstream deterministic nodes.
 
-## Required Outcome
-
-The first non-empty response line must be exactly one of:
-
-- `IMPLEMENTATION_OUTCOME: changed` — a non-empty bounded diff was produced.
-- `IMPLEMENTATION_OUTCOME: already-satisfied` — the contract was already met and
-  no file changed.
-- `IMPLEMENTATION_OUTCOME: blocked` — implementation cannot proceed without
-  guessing or exceeding the write boundary.
+## Completion Summary
 
-Then report changed files, requirements/interactions implemented, tests or focused
-checks attempted, and residual risks. Never report `changed` for an empty diff.
+Briefly report changed files, implemented requirements/interactions, focused checks
+attempted, blockers, and residual risks. This summary is human-readable only: the
+runtime derives implementation state from persisted write events, run delta, write
+guard, requirement coverage, and focused checks. Do not use a mandatory
+`IMPLEMENTATION_OUTCOME:` response-text protocol.

package/skills/frontend-bounded-implement/references/code-standards.md

@@ -0,0 +1,19 @@
+# Bounded Frontend Code Standards
+
+Apply the canonical contract and the conventions visible in target files and their
+direct local dependencies. Do not reopen task sources, OpenSpec, `ai_workspace`, or
+unrelated repository areas to discover new rules or redesign approved decisions.
+
+- Work test-first when behavior changes and preserve unrelated behavior.
+- Reuse existing public helpers, APIs, components, tokens, schemas, and test
+  patterns that are directly available from the bounded target surface.
+- Keep rendering, transitions, validation, request lifecycle, errors, and side
+  effects testable; cover relevant races and boundaries.
+- Keep real API behavior enabled by default. Mock activation must follow the
+  approved strategy, remain explicit and dev/test-only, and never import test mocks
+  into production code.
+- Trace fixtures to the approved API/schema evidence and never store secrets.
+- Do not add unapproved dependencies, relax lint/type/test/build configuration,
+  add `.skip`/`.only`, comment out real requests, or write outside `writeSet`.
+- Run only frozen focused checks and report their real status. Downstream shell
+  verification remains authoritative.

package/skills/frontend-contract/SKILL.md

@@ -0,0 +1,23 @@
+---
+name: frontend-contract
+description: Use only for the read-only frontend requirement contract node.
+references:
+  - path: references/contract-protocol.md
+    required: true
+    maxChars: 4200
+---
+
+# Frontend Contract
+
+Use task sources, explicit references, constraints, and the frozen source-fidelity
+ledger. Preserve canonical requirement IDs, source fragments, commands, paths, and
+language. Do not inspect implementation files or choose components, routes, Mock
+mechanisms, dependencies, or target code as requirement facts.
+
+Submit confirmed facts incrementally with the contract `record_*` tools and finish
+with exactly one `finalize_contract`. Start recording as soon as a requirement or
+constraint is confirmed; do not accumulate the whole contract in one response.
+
+Missing product semantics may be explicit assumptions only when they do not change
+observable behavior. Otherwise record a blocking question or a split proposal.
+This node is read-only.

package/skills/frontend-contract/references/contract-protocol.md

@@ -0,0 +1,34 @@
+# Frontend Contract Protocol
+
+## Requirement fidelity
+
+- Use the frozen canonical requirement ID for every requirement. Never invent a
+  replacement REQ/BR/AC ID.
+- Bind every requirement to exactly the source fragment IDs supplied by the
+  source-fidelity ledger. Do not infer fragment IDs from prose.
+- Record observable outcomes, applicable UI states, runtime/environment constraints,
+  non-goals, risks, and verification expectations without choosing implementation.
+- Classify each requirement as `explicit`, `repository-resolvable`, `assumption`, or
+  `blocking`. Blocking facts name their owner and evidence.
+
+## Evidence and handoff
+
+- Register static, behavior, Mock, and real-integration evidence expectations as
+  required, optional, or not-applicable. The classification follows the source and
+  risk; it is not selected for model convenience.
+- Register a non-blocking frontend-test handoff for UI-visible or interactive work.
+- Preserve exact command labels and referenced paths. Do not invent evidence,
+  connector results, APIs, or verification commands.
+
+## OpenSpec selection
+
+When the frozen task exposes OpenSpec candidates, record only candidates actually
+used by the contract as `required` or `relevant`. Explicit required paths and task
+source citations remain required. Unmentioned candidates are irrelevant; do not
+enumerate or downgrade them.
+
+## Terminal
+
+Commit facts in small batches and call `finalize_contract` exactly once with
+`ready`, `ready-with-assumptions`, or `blocked`. If the task is too large for one
+bounded writer, record a split proposal instead of broadening the contract.

package/skills/frontend-design-review/SKILL.md

@@ -9,31 +9,26 @@ references:
 
 # Frontend Design Review
 
-For frontend design review nodes. Read the checklist; audit contract, scout, Mock
-strategy, effective plan, task bounds, and traceable design evidence.
-Knowledge base, OpenSpec, and `ai_workspace/` are parallel sources. Query the
-knowledge-base connector when available; always search/read `openspec/schemas/**`,
-`openspec/project-specs/**`, and `ai_workspace/**` before accepting conventions.
-Connector format is TODO: never invent results.
+For frontend design review nodes. Read the checklist and the non-blocking contract
+capacity diagnostic first. Audit either the canonical contract or, when the
+diagnostic recommends indexed reading, its hash-bound field sections. Check the
+bound Mock strategy, task bounds, and traceable design evidence supplied by the
+upstream context. Do not rediscover task sources, search specification roots, or
+replace frozen evidence with nearby-code conventions. Use only exact, bound evidence
+paths when additional reading is necessary; never invent connector results.
 
-## Verdict Contract
+## Authoritative Terminal
 
-First non-empty line: exactly `VERDICT: pass` or `VERDICT: request-revision`.
-Any blocker requires request-revision. An initial pass is the effective verdict;
-there is no intermediate first-design shell gate.
+Complete the review with exactly one committed typed tool call:
 
-In standard/full topology, revision and final review run only after initial
-`VERDICT: request-revision`. Verify every Required Plan Correction against the
-complete revision; reject remaining, incomplete, or new gaps. An initial pass uses
-the original plan and skips both conditional nodes.
+- `approve_design` when no blocking design defect remains;
+- `request_design_changes` when a blocker exists. It must include a typed
+  `issueCategory`, at least one `evidenceRef`, and non-empty findings.
 
-Small-risk topology instead removes initial review and revision, then runs
-`frontend-final-design-review-pi` as the sole review of the original plan. Do not
-expect initial findings or a revision there.
-
-The deterministic gate prefers final-review output and falls back to initial review
-only when no current-run final output exists. Existing malformed/non-pass primary
-output fails closed.
+The typed terminal is the only authoritative outcome. Do not require or emit a
+`VERDICT:` line, JSON verdict, revision patch, or a second final-design-review
+verdict. A requested design change ends this run; the recovery controller creates
+any bounded follow-up run from the appropriate phase.
 
 ## Blocking Conditions
 
@@ -51,29 +46,15 @@ Knowledge-base absence is advisory if relevant rules from either openspec
 specification directory were read and applied. Block skipped fallback, unresolved
 conflict, or unresolved UI decisions.
 
-## Method And Output
+## Method And Human-readable Output
 
 Map criteria to steps/files/states/checks, audit paths/evidence, classify Blocking
 or Advisory, and never edit files.
 
 ### Spec Evidence Rules
 
-Run `grep`/`find`, then explicit `read` calls for applicable specs/checklist. Only
-successful paired reads count as “已读取规范文件”; summaries do not. List each path/
-section in `Checked Items`; search/read both openspec specification directories
-before accepting conventions.
-
-```markdown
-VERDICT: pass
-
-## Findings
-- None blocking.
-
-## Required Plan Corrections
-- None.
-
-## Checked Items
-- ...
-```
-
-Each correction names its criterion/section, gap, and exact plan change.
+Read only the canonical contract (or its indexed, hash-bound sections) and any exact
+evidence paths bound in its upstream context. Successful paired reads are the only proof that a specification was read;
+summaries do not substitute for them. A concise human-readable summary may list
+checked items and findings, but it is never a control protocol. Each requested
+change names its criterion/section, gap, and required plan change.

package/skills/frontend-plan/SKILL.md

@@ -0,0 +1,26 @@
+---
+name: frontend-plan
+description: Use only for the tool-only frontend decision planning node.
+references:
+  - path: references/decision-contract.md
+    required: true
+    maxChars: 5200
+  - path: references/design-decisions.md
+    required: true
+    maxChars: 3400
+---
+
+# Frontend Plan
+
+Plan only the delta between frozen Contract facts and the Scout target surface.
+Do not reread task sources, Contract/Scout prose, or target files, and do not repeat
+requirements or repository discovery.
+
+Commit the smallest necessary typed decisions through the plan `record_*` tools:
+requirement coverage, component/styling choices, applicable states and interactions,
+data/Mock strategy, deviations, and dependency policy. Process a bounded requirement
+slice and record facts immediately rather than reasoning over the whole task first.
+
+The runtime owns protected skeleton fields, path/command validation, materialization,
+and final schema checks. Finish with exactly one `finalize_plan`; return no Markdown
+narrative. Record a genuine evidence gap when frozen facts are insufficient.