@tea-agent/loop-agent 0.44.0-next.13 → 0.44.0-next.14

package/dist/workflows/dag/skill-snapshot.js

@@ -32,6 +32,9 @@ const unresolvedReferenceSchema = z.object({
 const resolvedInstructionSchema = z.object({
     name: z.string().min(1),
     resolution: z.enum(["resolved", "missing", "error"]),
+    sourceKind: z.enum(["builtin", "project", "user", "auto"]).optional(),
+    logicalResourceId: z.string().min(1).optional(),
+    catalogDigest: z.string().regex(/^[a-f0-9]{64}$/).optional(),
     path: z.string().min(1).optional(),
     sha256: z.string().regex(/^[a-f0-9]{64}$/).optional(),
     bytes: z.number().int().nonnegative().optional(),

package/dist/workflows/dag/skills.js

@@ -3,13 +3,13 @@
  * Applied when a node has a role but the spec omits skillsByRole[role].
  */
 export const DEFAULT_SKILLS_BY_ROLE = {
-    planner: ["loop-agent"],
-    scout: ["ai-engineering-context", "codebase-scout"],
-    implementer: ["test-driven-development", "verification-before-completion"],
-    verifier: ["verification-before-completion", "systematic-debugging"],
-    reviewer: ["requesting-code-review", "code-review-core"],
-    supervisor: ["verification-before-completion", "loop-agent"],
-    closeout: ["loop-agent", "verification-before-completion"],
+    planner: ["builtin:loop-agent"],
+    scout: ["builtin:ai-engineering-context", "builtin:codebase-scout"],
+    implementer: ["builtin:test-driven-development", "builtin:verification-before-completion"],
+    verifier: ["builtin:verification-before-completion", "builtin:systematic-debugging"],
+    reviewer: ["builtin:requesting-code-review", "builtin:code-review-core"],
+    supervisor: ["builtin:verification-before-completion", "builtin:loop-agent"],
+    closeout: ["builtin:loop-agent", "builtin:verification-before-completion"],
 };
 /**
  * Resolve prompt-level skills for a DAG node.

package/dist/workflows/dag/validate.js

@@ -773,10 +773,10 @@ function validateCommandPolicyTaskConfig(task, issues, spec) {
     }
     if (allowsPlaywright) {
         const skills = task.skills ?? [];
-        if (!skills.includes("playwright-cli")) {
+        if (!skills.some((skill) => skill === "playwright-cli" || skill === "builtin:playwright-cli")) {
             issues.push({
                 type: "invalid-command-policy",
-                message: `task ${task.id} playwright-cli command capability requires skills to include playwright-cli`,
+                message: `task ${task.id} playwright-cli command capability requires skills to include builtin:playwright-cli`,
             });
         }
         if (!taskMentionsPlaywrightCliContract(task)) {

package/dist/workflows/dag/workspace-checkpoint.js

@@ -44,7 +44,19 @@ async function hashWorkspacePath(repoRoot, relPath, state) {
     const abs = path.join(repoRoot, relPath);
     try {
         const st = await lstat(abs);
-        const mode = (st.mode & 0o777777).toString(8);
+        // Normalize to git-style 6-digit modes. Windows lstat() carries no
+        // file-type bits and reports permissive 0o666/0o777 permission masks
+        // that git never stores; collapse to the git permission shape
+        // (100644 regular / 100755 executable / 120000 symlink / 040000 dir)
+        // so checkpoint consumers agree cross-platform.
+        const executable = Boolean(st.mode & 0o111) && !st.isDirectory();
+        const mode = st.isSymbolicLink()
+            ? "120000"
+            : st.isDirectory()
+                ? "040000"
+                : executable
+                    ? "100755"
+                    : "100644";
         if (st.isSymbolicLink()) {
             const target = await realpath(abs).catch(async () => {
                 const { readlink } = await import("node:fs/promises");

package/docs/architecture/runtime-boundaries.md

@@ -6,8 +6,14 @@
 
 ```text
 Skill layer
-  ├─ DAG/runtime 入口策略（.agents/skills/loop-agent/）
-  └─ Feature/Task Pool 外层 operator 路由（.agents/skills/agent-worker/）
+  ├─ package 内置 DAG/runtime Skills（skills/** + resource catalog）
+  ├─ 目标项目外部 Agent 发现桥（.agents/skills/loop-agent/SKILL.md）
+  └─ 项目/用户自定义 Skills（显式来源，不与 builtin 混用）
+
+Controller context (src/governance/)
+  ├─ normalized project config（package defaults + tracked project + local harness）
+  ├─ package resource catalog/provider
+  └─ bounded project capability scanner
 
 CLI layer (src/cli/)
   └─ argv 解析、adapter 解析、调用 application / command handler、格式化输出
@@ -45,10 +51,18 @@ Governance (scripts/check-*.sh, src/governance/)
 
 ### Skill layer
 
-- **位置**：`.agents/skills/loop-agent/**` 与 `.agents/skills/agent-worker/**`
-- **职责**：`loop-agent` skill 定义单个 DAG/runtime 工作的入口、硬规则与 reference 路由；`agent-worker` skill 只定义 Feature Packet、TaskSpec、Task Pool、controller pinning、自举 release train 与失败恢复的外层 operator 路由。
+- **位置**：package `skills/**`、目标项目 `.agents/skills/loop-agent/SKILL.md` bridge，以及项目/用户自定义 Skill 目录。
+- **职责**：package `loop-agent` Skill 定义 DAG/runtime 工作的入口、硬规则与 reference 路由；目标项目 bridge 只负责发现当前安装的 controller 与给出唯一下一步，不复制治理正文、不授予写权限。`agent-worker` Skill 仍定义 Feature Packet、TaskSpec、Task Pool、controller pinning、自举 release train 与失败恢复的外层 operator 路由。
+- **来源身份**：runtime 使用 `builtin:<name>`、`project:<name>`、`user:<name>` 区分来源。默认 DAG role 只解析 package builtin；同名项目或用户 Skill 不得遮挡。每个 run 在执行前冻结实际 Skill bytes、reference 与 SHA-256，resume 只信任 run-owned snapshot。
 - **路由边界**：DAG leaf node 不得递归启动 `agent-worker`；`agent-worker` 不得加入 `DEFAULT_SKILLS_BY_ROLE`，也不实现 executor、scheduler、prompt 或 write guard。
-- **禁止**：在入口 skill 中重复维护 CLI command 列表或与 `src/cli/catalog.ts` 冲突的事实源。
+- **禁止**：把 bridge 当作完整 policy、在入口 Skill 中重复维护 CLI command 列表，或从 bare name 在多个来源中猜测 Skill。
+
+### Controller context
+
+- **位置**：`src/governance/project-config.ts`、`project-capability-scanner.ts`、`resource-catalog.ts` 与 package 根 `resource-catalog.v1.json`。
+- **配置边界**：`.loop-agent/project.json` 是可选、可提交且无凭据的项目覆盖；`harness.json` 是默认忽略的本机模型/provider/运行配置。合并顺序为 package defaults → tracked project config → local runtime config，其中本机 verification 只能追加，不能删除或降低 tracked verification。
+- **资源边界**：package docs、templates、schemas 与内置 Skills 通过 catalog 逻辑 ID 解析。provider 延迟读取单个资源，并在使用时校验路径 containment、普通文件、size 与 SHA-256；调用方不得递归扫描 package 目录寻找权威资源。
+- **项目事实边界**：capability scanner 只读取有界的 manifest/build/config 候选，不执行项目文件、不递归源码树。验证命令必须携带 evidence；歧义、高风险或无证据候选不能自动进入 authority。
 
 ### CLI layer
 
@@ -59,9 +73,10 @@ Governance (scripts/check-*.sh, src/governance/)
 
 ### Init-upgrade command boundary
 
-- **位置**：`src/commands/init-upgrade.ts`，复用 `src/commands/init.ts` 的 ownership scan / safe action 与 `src/commands/client-recovery.ts` 的 generated recovery builders。
-- **职责**：拥有可恢复升级状态机与目标项目 run facts；version gate、identity drift、active runtime/lock、workspace re-scan、single-file merge boundary、home zero-write fingerprint 和 completion invariant 都由 controller 决定。
-- **禁止**：OpenCode/Pi plugin、主会话 skill 或 notifier 拥有升级状态机；命令不得修改业务源码、用户 home 或以宽泛路径授权模型。主会话仅可按 controller 返回的具体 `allowedPaths` 合并 init surface，随后必须 `--continue`。
+- **位置**：`src/commands/init-upgrade.ts`，复用 `src/commands/init.ts` 的 ownership scan、最小 surface safe action 与 v1/v2 state normalization。
+- **职责**：拥有从旧 full projection 到唯一最小架构的可恢复迁移。version gate、identity drift、active/runtime inventory、单文件内容处置、action/disposition receipt 与 completion invariant 都由 controller 决定。
+- **最小完成面**：`.gitignore` managed block、ignored `harness.json`、共享 `.agents/skills/loop-agent/SKILL.md` bridge 与 `.harness/init-surface.json` v2。README/AGENTS、治理 docs/scripts、内置 Skill 镜像、client recovery 文件和预建 runtime 目录均不是 fresh init surface。
+- **禁止**：仅凭路径把旧文件提升为 controller-owned；递归删除目录；覆盖用户同路径 bridge；整体 untrack `.agents`；在 active/paused/resumable DAG、scheduled goal、Worker、Console operation 或 identity mismatch 存在时写入。
 
 ### Application layer
 
@@ -74,6 +89,7 @@ Governance (scripts/check-*.sh, src/governance/)
 
 - **位置**：`src/workflows/dag/**`、`src/workflows/dynamic/**`、`src/workflows/loop/**`
 - **职责**：DAG spec 校验与执行、dynamic workflow 编译与 expansion、Loop 状态机与 action 编排；新 DAG run 在任何节点执行前创建 run-owned resolved skill profile snapshot，并在普通节点、dynamic child、approve/resume 路径执行 integrity gate。
+- **package resource 合同**：默认 Skills 与模板从当前 package resource provider 解析；目标项目不需要保存内置 Skill、`docs/templates/**` 或 `scripts/check-repo.sh` 副本。run 创建后冻结资源与 normalized project context，package 升级或 scanner cache 变化不得改变该 run。
 - **skill snapshot 契约**：snapshot ref 使用 run-relative `.runtime/skill-snapshot.json` 与原始 bytes SHA-256；ref、artifact、profile 或 binding 不一致时 fail closed，不允许回退 live skill resolution。旧 run 只有在 ref 与 artifact 都不存在时，才可在 resume 前标记为 `legacy-resume-backfill` 并冻结剩余节点。
 - **允许依赖**：`src/executors/**`、`src/task/**`、`src/records/**`、`src/shared/**`、application use-case（目标态）。
 - **禁止**：`import` 来自 `src/commands/**`（见下方过渡例外）。
@@ -102,7 +118,7 @@ Governance (scripts/check-*.sh, src/governance/)
 
 - **位置**：`src/worker/**`，独立 `agent-worker` CLI 为 `src/worker/cli.ts`。
 - **职责**：TaskSpec 校验与物化、Task Pool batch/retry/morning report under `.harness/task-pool/`、失败路由，以及只读 Observe 事件/快照/UI；实际 DAG 执行通过 `LoopAgentClient` 启动已发布的 `loop-agent` 子进程。自 0.8.0 起该目录是唯一受支持的 Task Pool runtime root，旧路径不读取、不迁移、不合并、不重映射。
-- **controller identity**：写入型 Feature/batch/Task/final verification 在任何目标仓库或 Task Pool 状态写入前解析并冻结 schemaVersion 1 identity，包括 package name/version、绝对 entry/real entry、直接可执行 launch spec、binary SHA-256 和覆盖 `package.json`、`bin/**`、`dist/**`、`.agents/skills/**` 的 portable fingerprint。expected version/fingerprint 不匹配时 fail-fast；后续 spawn 不重新查询 PATH。
+- **controller identity**：写入型 Feature/batch/Task/final verification 在任何目标仓库或 Task Pool 状态写入前解析并冻结 schemaVersion 1 identity，包括 package name/version、绝对 entry/real entry、直接可执行 launch spec、binary SHA-256 与 package resource catalog digest。expected version/fingerprint 不匹配时 fail-fast；后续 spawn 不重新查询 PATH。
 - **证据传播**：canonical Worker record、Task Pool run、batch/Feature、QA/final evidence 可选携带同一 identity；只有所有相关层都省略 identity 时才按 legacy evidence 接受，部分缺失或锚点不一致会拒绝。
 - **Worker-aware recovery**：`agent-worker task reconcile --action abandon` 由 Worker 持有 Worker run ↔ DAG run association，再调用 DAG-kernel reconcile（`src/workflows/dag/reconcile-run.ts`）并把 Task Pool 投影为 `Failed` + recovery evidence。低层 `loop-agent dag reconcile-run` 只维护 DAG lifecycle，不搜索/修改 Task Pool。应急入口 `pool mark-failed` 同属 Worker，禁止覆盖 `Done`。
 - **允许依赖**：TaskSpec、Task Pool、observability、Node filesystem/path、明确的 shared/task contract，以及只读/共享的 `src/workflows/dag/**` reconcile/lifecycle helpers；它不是第二套 executor 或 DAG kernel。
@@ -118,7 +134,7 @@ Governance (scripts/check-*.sh, src/governance/)
 ### Governance
 
 - **位置**：`scripts/check-repo.sh` 及子脚本、`src/governance/**`、相关 Vitest。
-- **职责**：在 CI / in-flight DAG 中检测文档链接、exec plan 状态、架构 import、command registry 漂移、两个公共 skill entry 与 init/package surface 完整性。源码仓库另提供 `scripts/self-host-canary.mjs` 作为 repo-maintainer candidate takeover 证据入口；它不属于发布 package surface。
+- **职责**：在 CI / in-flight DAG 中检测文档链接、exec plan 状态、架构 import、command registry 漂移、package Skills、外部 bridge、resource catalog 与最小 init/package surface 完整性。源码仓库另提供 `scripts/self-host-canary.mjs` 作为 repo-maintainer candidate takeover 证据入口；它不属于发布 package surface。
 
 ## 允许的依赖方向
 
@@ -201,19 +217,9 @@ Runtime 变更另需 `npm run typecheck` 及对应 targeted Vitest（见 exec pl
 
 ## Client session 恢复边界
 
-主会话模型有两类常见缺口：**瞬态 UnknownError**（非标准 502 / `LLMRequestError` / 网络抖动 / 超时经 TypeValidation 落入 UnknownError，内置 APIError 重试不命中）与 **上下文过大**（含内网中文「请求上下文过大」及常见英文 overflow 文案，默认 overflow 识别不全）。loop-agent 通过 **职责分离的项目级产物** 补偿，不修改 OpenCode/Pi 上游，也不引入外部监督器，不改默认模型 `contextWindow`。
-
-| 面 | 路径 / 入口 | 边界 |
-| --- | --- | --- |
-| OpenCode transient-retry | `.opencode/plugins/loop-agent-transient-retry.js`（init surface `generated`） | 瞬态 UnknownError / TypeValidation wrapper 及已知被裁剪的内部 provider 波动文案 resume；busy/retry 门控 + backoff；overflow/401/配额/取消/业务标 permanent（`plugin-ignore-permanent-error`），**不** compact |
-| OpenCode overflow-compact | `.opencode/plugins/loop-agent-context-overflow-compact.js`（init surface `generated`） | 仅 context overflow → `session.compact`（无则 `summarize`）+ 有限 `promptAsync` 续接；`MAX_OVERFLOW_RECOVERIES ≤ 2`；session 锁；非 overflow 不动作 |
-| Pi project extension | `.pi/extensions/loop-agent-context-overflow.js`（init surface `generated`） | `message_end` 上将 overflow `errorMessage` 幂等改写为 `context_length_exceeded:` 前缀，触发 Pi 原生 compact/retry；分类器与控制器共享 P1–P10 / N1–N5 语料（含嵌套 JSON）；**不**写 `~/.pi` settings / compaction / 模型窗口，**不**投影 sift native |
-| Console / DAG 运行时 | npm 内置 inline extension + 可选 `@agent-context/sift` | Console 无需 init 即启用内部 provider transient 规范化、字段级 retry process defaults 与 L0/L1/L2；项目显式 retry 字段优先于用户全局字段，再优先于推荐默认值。DAG 使用独立 in-memory retry/compaction，且不做 streaming 主动 compact。`HARNESS_CONTEXT_PRESSURE_MODE=off` 只关 L0/L2，不关闭 Console transient 恢复；`HARNESS_CONSOLE_SIFT` / `HARNESS_DAG_SIFT` 的 `0\|false\|off` 关 L1。不进入目标项目 init 文件 |
-| Pi 用户配置 | `~/.pi/agent/settings.json` | **不**进入项目 `.harness/init-surface.json` hash；仅 `--client-recovery=user` 可字段级补缺并原子写；`auto`/`project`/`off` 与 `check-update` 默认零写 home；读取时只有 `ENOENT` 视为缺文件，其他 I/O 错误 fail closed |
-| CLI mode | `--client-recovery=auto\|project\|user\|off`（默认 `auto`） | `auto`/`project` 安装上述三份项目产物；`user` = 三产物 + 显式 Pi retry 合并；`off` 全跳过 |
-| Ownership | recorded sha256 + apply-safe | 三份 generated 缺失可补、与 recorded hash 一致可升级；用户改过 → model merge / human decision，禁止静默覆盖 |
+Console 与 DAG 的 provider transient normalization、retry defaults 和 context-pressure 防护属于 package runtime，不依赖目标项目 init 文件。`loop-agent init` 不再生成 `.opencode/plugins/**`、`.pi/extensions/**`、`.pi/settings.json`，也不写 `~/.pi/**`。
 
-实现落点：`src/shared/pi-provider-recovery.ts`（内置规则、纯 `additionalRules` 扩展接口与 generated predicate）、`src/shared/pi-retry-settings.ts`（字段级 process defaults）、`src/shared/pi-context-pressure/` 与 `src/worker/console/chat/pi-runtime.ts`（Console inline normalization），以及 `src/commands/client-recovery.ts` / `src/commands/init.ts`（项目投影与 surface 编排）。
+需要特定客户端适配时必须走独立、显式的 adapter 生命周期；adapter 缺失不影响 core init 或 DAG 健康。旧项目中仍与 controller recorded hash 一致的 recovery 文件属于可退役投影；用户修改过的文件保留并解除 init ownership。
 
 ## 演进里程碑
 

package/docs/init-surface.manifest.json

@@ -1,284 +1,27 @@
 {
-  "version": 1,
-  "description": "Machine-checked contract for files that must remain available through npm packaging and target-project initialization.",
+  "version": 2,
+  "description": "Machine-checked contract for package resources and the minimal target-project initialization surface.",
+  "resourceCatalog": "resource-catalog.v1.json",
   "packageRequired": [
     "AGENTS.md",
     "CHANGELOG.md",
     "README.md",
     "harness.json",
     "bin/loop-agent.js",
-    "docs/README.md",
-    "docs/governance/harness-methodology-tdd.md",
-    "docs/governance/harness-methodology-verification.md",
-    "docs/governance/harness-methodology-debugging.md",
-    "docs/operations/local-development-environment.md",
+    "bin/agent-worker.js",
     "docs/init-surface.manifest.json",
     "docs/architecture/runtime-boundaries.md",
-    "docs/architecture/README.md",
-    "docs/architecture/system-overview.md",
-    "docs/architecture/dag-execution.md",
-    "docs/architecture/worker-and-feature.md",
-    "docs/architecture/facts-and-state.md",
-    "docs/architecture/evolution.md",
-    "docs/skills/README.md",
-    "docs/skills/vetted-skill-registry.md",
-    "docs/templates/README.md",
-    "docs/templates/init-managed-agents.md",
-    "docs/templates/init-evolution-review.md",
-    "docs/templates/exec-plan.md",
-    "docs/templates/production-readiness-checklist.md",
-    "docs/templates/frontend-task-requirement.md",
-    "docs/templates/frontend-task-constraints.md",
-    "docs/templates/frontend-design-contract.md",
-    "docs/templates/frontend-implementation-contract.schema.json",
-    "docs/templates/worker-dogfood-setup.md",
-    "docs/templates/worker-dogfood-evidence.md",
     "docs/templates/harness.schema.json",
-    "docs/templates/spec-registry.schema.json",
-    "docs/templates/interactive-ui-round2-experiment.md",
-    "docs/templates/product-line/README.md",
-    "docs/templates/product-line/AGENTS.md",
-    "docs/templates/product-line/requirement.md",
-    "docs/templates/product-line/acceptance.yaml",
-    "docs/templates/product-line/design.md",
-    "docs/templates/product-line/test-plan.md",
-    "docs/templates/product-line/task-graph.yaml",
-    "docs/templates/product-line/task.yaml",
-    "docs/templates/product-line/feature.yaml",
-    "docs/templates/product-line/closeout.yaml",
-    "docs/templates/product-line/links.md",
-    "scripts/kb-bootstrap-init-skeleton.sh",
-    "scripts/kb-query.mjs",
-    "scripts/kb-graph-materialize.mjs",
-    "scripts/kb-graph-promote.mjs",
-    "scripts/kb-graph-incremental-prepare.mjs",
-    "scripts/next-info.mjs",
-    "scripts/next-publish-gate.mjs",
-    "scripts/release-source-binding.mjs",
-    "docs/templates/agent-dag.schema.json",
-    "examples/example-dag.json",
+    "resource-catalog.v1.json",
+    "resources/agent-bridge/loop-agent/SKILL.md",
     "skills/agent-worker/SKILL.md",
-    "skills/agent-worker/references/agent-worker-operator.md",
-    "skills/loop-agent/SKILL.md",
-    "skills/loop-agent/references/command-reference.md",
-    "skills/loop-agent/references/hybrid-dag.md",
-    "skills/loop-agent/references/source-and-plan-practice.md",
-    "skills/loop-agent/references/docs-converge.md",
-    "skills/ai-engineering-context/SKILL.md",
-    "skills/verification-before-completion/SKILL.md",
-    "skills/systematic-debugging/SKILL.md",
-    "skills/requesting-code-review/SKILL.md",
-    "skills/codebase-scout/SKILL.md",
-    "skills/test-driven-development/SKILL.md",
-    "skills/code-review-core/SKILL.md",
-    "skills/init-capability-evolution/SKILL.md",
-    "skills/grill-with-docs/SKILL.md",
-    "skills/grill-with-docs/context-format.md",
-    "skills/grill-with-docs/adr-format.md",
-    "skills/webapp-testing/SKILL.md",
-    "skills/playwright-cli/SKILL.md",
-    "skills/playwright-cli-case-generator/SKILL.md",
-    "skills/frontend-contract/SKILL.md",
-    "skills/frontend-contract/references/contract-protocol.md",
-    "skills/frontend-scout/SKILL.md",
-    "skills/frontend-scout/references/scout-evidence.md",
-    "skills/frontend-scout/references/design-evidence.md",
-    "skills/frontend-plan/SKILL.md",
-    "skills/frontend-plan/references/decision-contract.md",
-    "skills/frontend-plan/references/design-decisions.md",
-    "skills/frontend-bounded-implement/SKILL.md",
-    "skills/frontend-bounded-implement/references/code-standards.md",
-    "skills/frontend-design-review/SKILL.md",
-    "skills/frontend-design-review/references/review-checklist.md",
-    "skills/frontend-review/SKILL.md",
-    "skills/frontend-review/references/review-findings.md",
-    "skills/frontend-verification/SKILL.md",
-    "skills/frontend-verification/references/verification-checklist.md",
-    "docs/templates/backend-test-analysis.schema.json",
-    "docs/templates/backend-test-execution.schema.json",
-    "docs/templates/backend-test-result.schema.json",
-    "docs/templates/backend-test-case-manifest.schema.json"
-  ],
-  "initFullRequired": [
-    "README.md",
-    "AGENTS.md",
-    ".gitignore",
-    "harness.json",
-    "docs/README.md",
-    "docs/development-principles.md",
-    "docs/feature-workflow.md",
-    "docs/verification-matrix.md",
-    "docs/loop-agent-harness.md",
-    "docs/spec-registry.json",
-    "docs/harness-methodology-tdd.md",
-    "docs/harness-methodology-verification.md",
-    "docs/harness-methodology-debugging.md",
-    "docs/templates/README.md",
-    "docs/templates/init-evolution-review.md",
-    "docs/templates/production-readiness-checklist.md",
-    "docs/templates/frontend-task-requirement.md",
-    "docs/templates/frontend-task-constraints.md",
-    "docs/templates/frontend-design-contract.md",
-    "docs/templates/worker-dogfood-setup.md",
-    "docs/templates/worker-dogfood-evidence.md",
-    "docs/templates/harness.schema.json",
-    "docs/templates/interactive-ui-round2-experiment.md",
-    "docs/templates/product-line/README.md",
-    "docs/templates/product-line/AGENTS.md",
-    "docs/templates/product-line/requirement.md",
-    "docs/templates/product-line/acceptance.yaml",
-    "docs/templates/product-line/design.md",
-    "docs/templates/product-line/test-plan.md",
-    "docs/templates/product-line/task-graph.yaml",
-    "docs/templates/product-line/task.yaml",
-    "docs/templates/product-line/feature.yaml",
-    "docs/templates/product-line/closeout.yaml",
-    "docs/templates/product-line/links.md",
-    "scripts/check-skill-entry.sh",
-    "scripts/check-product-line-docs.sh",
-    "scripts/check-repo.sh",
-    "scripts/ci-governance.sh",
-    "scripts/ci-tests.sh",
-    "scripts/ci.sh",
-    ".harness/prompts/analyze.md",
-    ".harness/tasks",
-    ".harness/dag-runs/active",
-    ".agents/skills/agent-worker/SKILL.md",
-    ".agents/skills/agent-worker/references/agent-worker-operator.md",
-    ".agents/skills/loop-agent/SKILL.md",
-    ".agents/skills/loop-agent/references/command-reference.md",
-    ".agents/skills/loop-agent/references/hybrid-dag.md",
-    ".agents/skills/loop-agent/references/source-and-plan-practice.md",
-    ".agents/skills/loop-agent/references/docs-converge.md",
-    ".agents/skills/ai-engineering-context/SKILL.md",
-    ".agents/skills/verification-before-completion/SKILL.md",
-    ".agents/skills/systematic-debugging/SKILL.md",
-    ".agents/skills/requesting-code-review/SKILL.md",
-    ".agents/skills/codebase-scout/SKILL.md",
-    ".agents/skills/test-driven-development/SKILL.md",
-    ".agents/skills/code-review-core/SKILL.md",
-    ".agents/skills/init-capability-evolution/SKILL.md",
-    ".agents/skills/grill-with-docs/SKILL.md",
-    ".agents/skills/grill-with-docs/context-format.md",
-    ".agents/skills/grill-with-docs/adr-format.md",
-    ".agents/skills/webapp-testing/SKILL.md",
-    ".agents/skills/playwright-cli/SKILL.md",
-    ".agents/skills/playwright-cli-case-generator/SKILL.md",
-    ".agents/skills/frontend-contract/SKILL.md",
-    ".agents/skills/frontend-contract/references/contract-protocol.md",
-    ".agents/skills/frontend-scout/SKILL.md",
-    ".agents/skills/frontend-scout/references/scout-evidence.md",
-    ".agents/skills/frontend-scout/references/design-evidence.md",
-    ".agents/skills/frontend-plan/SKILL.md",
-    ".agents/skills/frontend-plan/references/decision-contract.md",
-    ".agents/skills/frontend-plan/references/design-decisions.md",
-    ".agents/skills/frontend-bounded-implement/SKILL.md",
-    ".agents/skills/frontend-bounded-implement/references/code-standards.md",
-    ".agents/skills/frontend-design-review/SKILL.md",
-    ".agents/skills/frontend-design-review/references/review-checklist.md",
-    ".agents/skills/frontend-review/SKILL.md",
-    ".agents/skills/frontend-review/references/review-findings.md",
-    ".agents/skills/frontend-verification/SKILL.md",
-    ".agents/skills/frontend-verification/references/verification-checklist.md",
-    "docs/templates/backend-test-analysis.schema.json",
-    "docs/templates/backend-test-execution.schema.json",
-    "docs/templates/backend-test-result.schema.json",
-    "docs/templates/backend-test-case-manifest.schema.json",
-    ".opencode/plugins/loop-agent-transient-retry.js",
-    ".opencode/plugins/loop-agent-context-overflow-compact.js",
-    ".pi/extensions/loop-agent-context-overflow.js",
-    ".pi/settings.json"
+    "skills/loop-agent/SKILL.md"
   ],
   "initSurface": {
-    "docs/spec-registry.json": "generated",
-    "README.md": "managed-block",
-    "AGENTS.md": "managed-block",
     ".gitignore": "managed-block",
     "harness.json": "generated",
-    "docs/README.md": "generated",
-    "docs/development-principles.md": "generated",
-    "docs/feature-workflow.md": "generated",
-    "docs/verification-matrix.md": "generated",
-    "docs/loop-agent-harness.md": "generated",
-    "docs/harness-methodology-tdd.md": "copied",
-    "docs/harness-methodology-verification.md": "copied",
-    "docs/harness-methodology-debugging.md": "copied",
-    "docs/templates/README.md": "copied",
-    "docs/templates/init-evolution-review.md": "copied",
-    "docs/templates/production-readiness-checklist.md": "copied",
-    "docs/templates/frontend-task-requirement.md": "copied",
-    "docs/templates/frontend-task-constraints.md": "copied",
-    "docs/templates/frontend-design-contract.md": "copied",
-    "docs/templates/worker-dogfood-setup.md": "copied",
-    "docs/templates/worker-dogfood-evidence.md": "copied",
-    "docs/templates/harness.schema.json": "copied",
-    "docs/templates/interactive-ui-round2-experiment.md": "copied",
-    "docs/templates/product-line/README.md": "copied",
-    "docs/templates/product-line/AGENTS.md": "copied",
-    "docs/templates/product-line/requirement.md": "copied",
-    "docs/templates/product-line/acceptance.yaml": "copied",
-    "docs/templates/product-line/design.md": "copied",
-    "docs/templates/product-line/test-plan.md": "copied",
-    "docs/templates/product-line/task-graph.yaml": "copied",
-    "docs/templates/product-line/task.yaml": "copied",
-    "docs/templates/product-line/feature.yaml": "copied",
-    "docs/templates/product-line/closeout.yaml": "copied",
-    "docs/templates/product-line/links.md": "copied",
-    "scripts/check-skill-entry.sh": "generated",
-    "scripts/check-product-line-docs.sh": "generated",
-    "scripts/check-repo.sh": "generated",
-    "scripts/ci-governance.sh": "generated",
-    "scripts/ci-tests.sh": "generated",
-    "scripts/ci.sh": "generated",
-    ".harness/prompts/analyze.md": "generated",
-    ".harness/tasks": "directory",
-    ".harness/dag-runs/active": "directory",
-    ".harness/init-surface.json": "state",
-    ".agents/skills/agent-worker/SKILL.md": "copied",
-    ".agents/skills/agent-worker/references/agent-worker-operator.md": "copied",
     ".agents/skills/loop-agent/SKILL.md": "copied",
-    ".agents/skills/loop-agent/references/command-reference.md": "copied",
-    ".agents/skills/loop-agent/references/hybrid-dag.md": "copied",
-    ".agents/skills/loop-agent/references/source-and-plan-practice.md": "copied",
-    ".agents/skills/loop-agent/references/docs-converge.md": "copied",
-    ".agents/skills/ai-engineering-context/SKILL.md": "copied",
-    ".agents/skills/verification-before-completion/SKILL.md": "copied",
-    ".agents/skills/systematic-debugging/SKILL.md": "copied",
-    ".agents/skills/requesting-code-review/SKILL.md": "copied",
-    ".agents/skills/codebase-scout/SKILL.md": "copied",
-    ".agents/skills/test-driven-development/SKILL.md": "copied",
-    ".agents/skills/code-review-core/SKILL.md": "copied",
-    ".agents/skills/init-capability-evolution/SKILL.md": "copied",
-    ".agents/skills/grill-with-docs/SKILL.md": "copied",
-    ".agents/skills/grill-with-docs/context-format.md": "copied",
-    ".agents/skills/grill-with-docs/adr-format.md": "copied",
-    ".agents/skills/webapp-testing/SKILL.md": "copied",
-    ".agents/skills/playwright-cli/SKILL.md": "copied",
-    ".agents/skills/playwright-cli-case-generator/SKILL.md": "copied",
-    ".agents/skills/frontend-contract/SKILL.md": "copied",
-    ".agents/skills/frontend-contract/references/contract-protocol.md": "copied",
-    ".agents/skills/frontend-scout/SKILL.md": "copied",
-    ".agents/skills/frontend-scout/references/scout-evidence.md": "copied",
-    ".agents/skills/frontend-scout/references/design-evidence.md": "copied",
-    ".agents/skills/frontend-plan/SKILL.md": "copied",
-    ".agents/skills/frontend-plan/references/decision-contract.md": "copied",
-    ".agents/skills/frontend-plan/references/design-decisions.md": "copied",
-    ".agents/skills/frontend-bounded-implement/SKILL.md": "copied",
-    ".agents/skills/frontend-bounded-implement/references/code-standards.md": "copied",
-    ".agents/skills/frontend-design-review/SKILL.md": "copied",
-    ".agents/skills/frontend-design-review/references/review-checklist.md": "copied",
-    ".agents/skills/frontend-review/SKILL.md": "copied",
-    ".agents/skills/frontend-review/references/review-findings.md": "copied",
-    ".agents/skills/frontend-verification/SKILL.md": "copied",
-    ".agents/skills/frontend-verification/references/verification-checklist.md": "copied",
-    "docs/templates/backend-test-analysis.schema.json": "copied",
-    "docs/templates/backend-test-execution.schema.json": "copied",
-    "docs/templates/backend-test-result.schema.json": "copied",
-    "docs/templates/backend-test-case-manifest.schema.json": "copied",
-    ".opencode/plugins/loop-agent-transient-retry.js": "generated",
-    ".opencode/plugins/loop-agent-context-overflow-compact.js": "generated",
-    ".pi/extensions/loop-agent-context-overflow.js": "generated",
-    ".pi/settings.json": "generated"
+    ".harness/init-surface.json": "state"
   },
   "packageExcluded": [
     "docs/progress/20*.md",
@@ -288,9 +31,18 @@
     "docs/exec-plans/completed/20*.md"
   ],
   "initExcluded": [
-    "examples/example-dag.json",
-    "docs/skills/vetted-skill-registry.md",
-    "docs/templates/init-managed-agents.md"
+    "README.md",
+    "AGENTS.md",
+    "ai_workspace/loop-agent",
+    "scripts",
+    ".harness/prompts",
+    ".harness/tasks",
+    ".harness/dag-runs",
+    ".agents/skills/agent-worker",
+    ".opencode/plugins/loop-agent-transient-retry.js",
+    ".opencode/plugins/loop-agent-context-overflow-compact.js",
+    ".pi/extensions/loop-agent-context-overflow.js",
+    ".pi/settings.json"
   ],
   "reviewTriggers": [
     "AGENTS.md",
@@ -298,19 +50,16 @@
     "CHANGELOG.md",
     "harness.json",
     "package.json",
+    "resource-catalog.v1.json",
+    "resources/**",
     "src/commands/init.ts",
-    "src/commands/init-model-catalog.ts",
-    "src/commands/client-recovery.ts",
     "src/commands/init-upgrade.ts",
-    "src/cli.ts",
-    "src/cli/update/init-surface-notifier.ts",
-    "src/cli/update/policy.ts",
-    "src/cli/update/runtime-activity.ts",
+    "src/governance/project-config.ts",
+    "src/governance/project-capability-scanner.ts",
+    "src/governance/resource-catalog.ts",
     "src/workflows/dag/skills.ts",
-    "src/workflows/dag/init-hybrid.ts",
     "src/workflows/dag/skill-instructions.ts",
     "docs/templates/**",
-    "docs/skills/**",
     "skills/**",
     "scripts/**"
   ],
@@ -322,25 +71,23 @@
         "name": "model-review",
         "severity": "high",
         "strictRequiresReport": true,
-        "description": "Changes that may alter target-project initialization behavior, default DAG role skills, skill resolution, or package/init contracts.",
+        "description": "Changes that may alter minimal initialization, migration ownership, normalized project context, package resources, or DAG Skill resolution.",
         "patterns": [
           "src/commands/init.ts",
-          "src/commands/init-model-catalog.ts",
-          "src/commands/client-recovery.ts",
           "src/commands/init-upgrade.ts",
-          "src/cli.ts",
           "src/cli/update/init-surface-notifier.ts",
           "src/cli/update/policy.ts",
-          "src/cli/update/runtime-activity.ts",
+          "src/shared/runtime-activity.ts",
+          "src/governance/project-config.ts",
+          "src/governance/project-capability-scanner.ts",
+          "src/governance/resource-catalog.ts",
           "src/workflows/dag/skills.ts",
-          "src/workflows/dag/init-hybrid.ts",
           "src/workflows/dag/skill-instructions.ts",
-          "src/workflows/dag/prompt.ts",
-          "src/workflows/dag/node-execution.ts",
           "docs/init-surface.manifest.json",
+          "resource-catalog.v1.json",
+          "resources/**",
           "package.json",
           "harness.json",
-          "AGENTS.md",
           "README.md"
         ]
       },
@@ -348,20 +95,22 @@
         "name": "surface-check",
         "severity": "medium",
         "strictRequiresReport": false,
-        "description": "Asset surface changes that usually need deterministic package/init smoke checks but not a model review when the checks pass.",
+        "description": "Package resource and bridge changes that require deterministic catalog, package, and minimal-init checks.",
         "patterns": [
           "skills/**",
           "docs/templates/**",
-          "docs/skills/**",
+          "resources/**",
+          "resource-catalog.v1.json",
           "scripts/check-init-surface.sh",
-          "scripts/check-repo.sh"
+          "scripts/check-skill-entry.sh",
+          "scripts/generate-resource-catalog.mjs"
         ]
       },
       {
         "name": "advisory",
         "severity": "low",
         "strictRequiresReport": false,
-        "description": "Documentation and user-facing guidance changes that should be considered but should not slow normal iteration.",
+        "description": "User-facing guidance changes that should be reviewed without slowing normal iteration.",
         "patterns": [
           "CHANGELOG.md",
           "CHANGELOG/**",
@@ -372,12 +121,11 @@
       }
     ],
     "modelReviewQuestions": [
-      "Does this change alter files or guidance produced by loop-agent init --profile full --merge?",
-      "Does a new or changed skill need to be bundled, projected to target projects, or documented as optional only?",
-      "Do target-project AGENTS.md, README managed blocks, governance docs, templates, or script matrix need updates?",
-      "Does package.json files include every static asset required by the runtime and init projection?",
-      "Does docs/init-surface.manifest.json still match the intended package and init surface?",
-      "Do older initialized target projects need a migration note, manual copy guidance, or future init audit/update support?"
+      "Does this change alter the four-file minimal init surface or old-project migration ownership?",
+      "Does a runtime resource belong in the package catalog instead of the target project?",
+      "Can a project or user Skill shadow a builtin Skill, or can resume observe live package drift?",
+      "Can tracked project verification be removed or weakened by local harness settings?",
+      "Do package files, the resource catalog, and the init manifest describe the same shipped bytes?"
     ]
   }
 }