@tea-agent/loop-agent 0.44.0-next.8 → 0.44.0-next.9

package/dist/task/source-prepare/source-provider-budget.js

@@ -0,0 +1,290 @@
+import { completedSourceExecutionSchema } from "./source-execution.js";
+import { currentFrontendSessionIdentity } from "../../workflows/dag/frontend-session-context.js";
+import { sha256OfCanonicalJson } from "../contract/hash.js";
+import { createHash, randomUUID } from "node:crypto";
+import { lstat, mkdir, readdir, rmdir } from "node:fs/promises";
+import path from "node:path";
+import { sourceProviderBudgetSchema as ledgerSchema } from "../../application/evaluation/budget.js";
+import { writeJsonAtomic } from "../../infrastructure/harness/atomic-write.js";
+import { readFileBoundarySafe } from "../../shared/path-safety.js";
+import { getTaskPaths, loadTaskConfig } from "../runtime.js";
+/** Read-only generation snapshot; never create a zero ledger over old receipts. */
+export async function readTaskSourceProviderBudget(input) {
+    const root = path.join(getTaskPaths(input.repoRoot, input.taskId).taskDir, "artifacts");
+    const file = path.join(root, "source-provider-budget.json");
+    const exists = await lstat(file).then(() => true).catch(error => { if (error.code === "ENOENT")
+        return false; throw error; });
+    if (!exists) {
+        const files = await readdir(path.join(root, "session-budget")).catch(error => { if (error.code === "ENOENT")
+            return []; throw error; });
+        if (files.length || input.expectedBudgetId)
+            throw Error("FRONTEND_PROVIDER_BUDGET_INVALID: missing bound source budget");
+        return undefined;
+    }
+    const ledger = ledgerSchema.parse(JSON.parse((await readFileBoundarySafe({ boundaryRoot: root, targetPath: file, label: "source provider budget" })).toString("utf8")));
+    validateBinding(input, ledger);
+    return ledger;
+}
+function validateBinding(input, ledger) {
+    if (ledger.taskId !== input.taskId || ledger.maxProviderRequests !== input.maxProviderRequests || input.expectedBudgetId && ledger.budgetId !== input.expectedBudgetId || input.minimumReservedRequests !== undefined && ledger.reservedRequests < input.minimumReservedRequests)
+        throw Error("FRONTEND_PROVIDER_BUDGET_INVALID: source budget binding changed");
+}
+/** The short filesystem critical section spans read, admission and atomic
+ * persistence. A stale lock is never stolen on an age heuristic. */
+async function transact(input, reserve) {
+    if (!/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(input.taskId) || !Number.isSafeInteger(input.maxProviderRequests) || input.maxProviderRequests < 1)
+        throw Error("FRONTEND_PROVIDER_BUDGET_INVALID: invalid source budget identity or limit");
+    await loadTaskConfig(input.repoRoot, input.taskId); // never recreate a missing task
+    const root = path.join(getTaskPaths(input.repoRoot, input.taskId).taskDir, "artifacts");
+    const rootStat = await lstat(root);
+    if (!rootStat.isDirectory() || rootStat.isSymbolicLink())
+        throw Error("FRONTEND_PROVIDER_BUDGET_INVALID: source artifact directory is not a real directory");
+    const file = path.join(root, "source-provider-budget.json");
+    const lock = path.join(root, ".source-provider-budget.lock");
+    let held = false;
+    try {
+        for (let attempt = 0; attempt < 100; attempt++) {
+            try {
+                await mkdir(lock);
+                held = true;
+                break;
+            }
+            catch (error) {
+                if (error.code !== "EEXIST")
+                    throw error;
+                await new Promise(resolve => setTimeout(resolve, 10));
+            }
+        }
+        if (!held)
+            throw Error("FRONTEND_PROVIDER_BUDGET_BUSY: source budget lock unavailable");
+        let ledger;
+        try {
+            await lstat(file);
+            ledger = ledgerSchema.parse(JSON.parse((await readFileBoundarySafe({ boundaryRoot: root, targetPath: file, label: "source provider budget" })).toString("utf8")));
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw Error(`FRONTEND_PROVIDER_BUDGET_INVALID: ${error instanceof Error ? error.message : String(error)}`);
+            if (input.expectedBudgetId)
+                throw Error("FRONTEND_PROVIDER_BUDGET_INVALID: bound task budget is missing");
+            // Existing attempts cannot be silently imported as zero-cost history.
+            const previous = await readdir(path.join(root, "session-budget")).catch(error => {
+                if (error.code === "ENOENT")
+                    return [];
+                throw error;
+            });
+            if (previous.length)
+                throw Error("FRONTEND_PROVIDER_BUDGET_INVALID: source receipts have no bound budget");
+            ledger = { schemaVersion: 1, taskId: input.taskId, budgetId: randomUUID(), maxProviderRequests: input.maxProviderRequests, reservedRequests: 0 };
+        }
+        validateBinding(input, ledger);
+        if (reserve) {
+            if (ledger.reservedRequests >= ledger.maxProviderRequests)
+                throw Error("FRONTEND_PROVIDER_BUDGET_EXHAUSTED: source request quota reached");
+            const identity = currentFrontendSessionIdentity();
+            if (identity) {
+                if (identity.executionKind !== "model" || identity.taskId && identity.taskId !== input.taskId)
+                    throw Error("FRONTEND_PROVIDER_BUDGET_INVALID: request belongs to another session/task");
+                const key = `${identity.runId ?? "task"}:${identity.sessionId}`;
+                const previous = ledger.requestSessions?.[key];
+                if (previous && sha256OfCanonicalJson(previous.identity) !== sha256OfCanonicalJson(identity))
+                    throw Error("FRONTEND_PROVIDER_BUDGET_INVALID: session identity changed");
+                ledger.requestSessions ??= {};
+                ledger.requestSessions[key] = { identity, reservedRequests: (previous?.reservedRequests ?? 0) + 1 };
+            }
+            ledger.reservedRequests++;
+        }
+        // A failed write grants no admission. A successful reservation is never refunded.
+        await writeJsonAtomic(file, ledger, { repoRoot: input.repoRoot });
+        return ledger;
+    }
+    finally {
+        if (held)
+            await rmdir(lock);
+    }
+}
+export async function reserveTaskSourceProviderRequest(input) {
+    try {
+        await transact(input, true);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        throw Error(message.startsWith("FRONTEND_PROVIDER_") ? message : `FRONTEND_PROVIDER_BUDGET_PERSIST_FAILED: ${message}`);
+    }
+}
+/** Initialize before the adapter writes its first incomplete session receipt. */
+export async function openTaskSourceProviderBudget(input) {
+    await transact(input, false);
+    return () => reserveTaskSourceProviderRequest(input);
+}
+/** Check the closed set of source sessions registered by durable admission.
+ * Receipt copies deduplicate only when their contents are identical. */
+export function summarizeBoundSourceUsage(ledger, receipts) {
+    ledgerSchema.parse(ledger);
+    const diagnostics = [];
+    const sessions = Object.values(ledger.requestSessions ?? {});
+    const sources = sessions.filter(session => session.identity.runId === null);
+    const unattributedRequests = ledger.reservedRequests - sessions.reduce((sum, session) => sum + session.reservedRequests, 0);
+    if (unattributedRequests)
+        diagnostics.push("unattributed-task-requests");
+    const byId = new Map();
+    for (const receipt of receipts) {
+        if (receipt.identity.runId !== null)
+            continue;
+        const key = receipt.identity.sessionId;
+        const previous = byId.get(key);
+        if (previous && sha256OfCanonicalJson(previous) !== sha256OfCanonicalJson(receipt))
+            diagnostics.push(`conflicting-source-receipt:${key}`);
+        byId.set(key, receipt);
+        if (!sources.some(session => session.identity.sessionId === key))
+            diagnostics.push(`unbound-source-receipt:${key}`);
+    }
+    let totalTokens = 0;
+    for (const session of sources) {
+        const receipt = byId.get(session.identity.sessionId);
+        if (!receipt || session.identity.taskId !== ledger.taskId || !session.identity.sourceDigest || sha256OfCanonicalJson(session.identity) !== sha256OfCanonicalJson(receipt.identity)) {
+            diagnostics.push(`source-session-binding:${session.identity.sessionId}`);
+            continue;
+        }
+        if (receipt.completion !== "complete" || !receipt.terminal || receipt.actual.requestCount !== session.reservedRequests)
+            diagnostics.push(`source-session-incomplete:${session.identity.sessionId}`);
+        const tokens = receipt.actual.totalTokens;
+        if (tokens === null || !Number.isFinite(tokens) || tokens < 0)
+            diagnostics.push(`source-tokens-unknown:${session.identity.sessionId}`);
+        else
+            totalTokens += tokens;
+        if (receipt.attempts.length && (receipt.attempts.some(attempt => attempt.completion !== "complete" || attempt.actual?.requestCount == null || attempt.actual?.totalTokens == null) || receipt.attempts.reduce((sum, attempt) => sum + (attempt.actual?.requestCount ?? 0), 0) !== session.reservedRequests || receipt.attempts.reduce((sum, attempt) => sum + (attempt.actual?.totalTokens ?? 0), 0) !== tokens))
+            diagnostics.push(`source-attempt-usage-mismatch:${session.identity.sessionId}`);
+    }
+    return { complete: diagnostics.length === 0, diagnostics, sourceSessions: sources.length, sourceRequests: sources.reduce((sum, session) => sum + session.reservedRequests, 0), unattributedRequests, totalTokens: diagnostics.length ? null : totalTokens };
+}
+const receiptHash = (bytes) => createHash("sha256").update(bytes).digest("hex");
+/** Freeze actual bytes, not a caller-supplied token total. Concurrent changes
+ * remain diagnostic evidence rather than a cheaper snapshot. */
+export async function freezeTaskSourceUsage(input, ledger) {
+    const root = path.join(getTaskPaths(input.repoRoot, input.taskId).taskDir, "artifacts");
+    const evidence = { receipts: [], executions: [], diagnostics: [] };
+    try {
+        const files = await readdir(path.join(root, "session-budget")).catch(error => { if (error.code === "ENOENT")
+            return []; throw error; });
+        for (const name of files.sort()) {
+            const relative = `session-budget/${name}`;
+            const bytes = await readFileBoundarySafe({ boundaryRoot: root, targetPath: path.join(root, relative), label: "source usage receipt" });
+            evidence.receipts.push({ path: relative, sha256: receiptHash(bytes), content: bytes.toString("utf8") });
+        }
+        const executionIds = new Set(Object.values(ledger.requestSessions ?? {}).filter(row => row.identity.runId === null).map(row => row.identity.sourceExecutionId).filter((id) => !!id));
+        for (const id of [...executionIds].sort()) {
+            const relative = `source-executions/${id}.json`;
+            const bytes = await readFileBoundarySafe({ boundaryRoot: root, targetPath: path.join(root, relative), label: "source execution" });
+            evidence.executions.push({ path: relative, sha256: receiptHash(bytes), content: bytes.toString("utf8") });
+        }
+        for (const ref of [...evidence.receipts, ...evidence.executions]) {
+            const bytes = await readFileBoundarySafe({ boundaryRoot: root, targetPath: path.join(root, ref.path), label: "source usage receipt" });
+            if (receiptHash(bytes) !== ref.sha256)
+                throw Error("source-receipt-changed-during-freeze");
+        }
+        const after = await readTaskSourceProviderBudget(input);
+        if (sha256OfCanonicalJson(after ?? null) !== sha256OfCanonicalJson(ledger))
+            throw Error("source-ledger-changed-during-freeze");
+    }
+    catch (error) {
+        evidence.diagnostics.push(error instanceof Error ? error.message : String(error));
+    }
+    return evidence;
+}
+export function summarizeFrozenSourceUsage(binding) {
+    const diagnostics = [...(binding.evidence?.diagnostics ?? [])];
+    const receipts = [];
+    if (!binding.evidence)
+        diagnostics.push("missing-frozen-source-evidence");
+    for (const ref of binding.evidence?.receipts ?? []) {
+        try {
+            if (!/^session-budget\/[^/\\]+\.json$/.test(ref.path) || receiptHash(ref.content) !== ref.sha256)
+                throw Error("source-receipt-hash-or-path");
+            const receipt = JSON.parse(ref.content);
+            if (receipt.schemaVersion !== 2 || receipt.policyVersion !== "frontend-session-observation-v2" || !receipt.identity || receipt.identity.runId !== null || !receipt.actual || !Array.isArray(receipt.attempts) || !Number.isFinite(Date.parse(receipt.startedAt)) || !receipt.finishedAt || Date.parse(receipt.finishedAt) < Date.parse(receipt.startedAt) || !Number.isFinite(Date.parse(receipt.finishedAt)))
+                throw Error("invalid-source-receipt");
+            receipts.push(receipt);
+        }
+        catch {
+            diagnostics.push(`invalid-frozen-source-receipt:${ref.path}`);
+        }
+    }
+    const executions = new Map();
+    const required = new Set(Object.values(binding.ledger.requestSessions ?? {}).filter(row => row.identity.runId === null).map(row => row.identity.sourceExecutionId).filter((id) => !!id));
+    for (const ref of binding.evidence?.executions ?? []) {
+        try {
+            if (receiptHash(ref.content) !== ref.sha256)
+                throw Error("execution hash");
+            const execution = completedSourceExecutionSchema.parse(JSON.parse(ref.content));
+            if (ref.path !== `source-executions/${execution.executionId}.json` || execution.taskId !== binding.ledger.taskId || !required.has(execution.executionId) || executions.has(execution.executionId))
+                throw Error("execution identity");
+            executions.set(execution.executionId, execution);
+        }
+        catch {
+            diagnostics.push(`invalid-source-execution:${ref.path}`);
+        }
+    }
+    for (const id of required)
+        if (!executions.has(id))
+            diagnostics.push(`missing-source-execution:${id}`);
+    for (const receipt of receipts) {
+        const id = receipt.identity.sourceExecutionId;
+        if (!id) {
+            diagnostics.push(`unregistered-source-execution:${receipt.identity.sessionId}`);
+            continue;
+        }
+        const execution = executions.get(id);
+        if (!execution || Date.parse(receipt.startedAt) < Date.parse(execution.startedAt) || Date.parse(receipt.finishedAt) > Date.parse(execution.finishedAt) || (execution.phase === "semantic-intake") !== (receipt.identity.phase === "semantic-intake"))
+            diagnostics.push(`source-execution-session-mismatch:${receipt.identity.sessionId}`);
+    }
+    const relation = (snapshot) => {
+        if (!binding.contract)
+            return "unbound";
+        if (snapshot.revision === null && snapshot.canonicalHash === null && snapshot.observedCanonicalHash === null)
+            return "pre-contract";
+        if (snapshot.revision === null || snapshot.canonicalHash === null || snapshot.observedCanonicalHash !== snapshot.canonicalHash)
+            return "conflict";
+        if (snapshot.revision > binding.contract.revision)
+            return "future-revision";
+        if (snapshot.revision < binding.contract.revision)
+            return "prior-revision";
+        return snapshot.canonicalHash === binding.contract.canonicalHash ? "current" : "conflict";
+    };
+    const executionContracts = [...executions.values()].map(execution => ({ executionId: execution.executionId, before: relation(execution.beforeContract), after: relation(execution.afterContract) }));
+    for (const row of executionContracts)
+        if ([row.before, row.after].some(value => ["unbound", "conflict", "future-revision"].includes(value)))
+            diagnostics.push(`source-execution-contract:${row.executionId}`);
+    try {
+        const usage = summarizeBoundSourceUsage(binding.ledger, receipts);
+        diagnostics.push(...usage.diagnostics);
+        // Non-source requests in a task-lifetime ledger have not been priced by
+        // this source-only proof. Keep their existing unknown-cost marker.
+        if (binding.ledger.reservedRequests !== usage.sourceRequests)
+            diagnostics.push("non-source-task-cost-unproven");
+        return { ...usage, executionContracts, complete: diagnostics.length === 0, diagnostics, totalTokens: diagnostics.length ? null : usage.totalTokens };
+    }
+    catch {
+        return { executionContracts, complete: false, diagnostics: [...diagnostics, "invalid-source-usage"], sourceSessions: null, sourceRequests: null, unattributedRequests: null, totalTokens: null };
+    }
+}
+/** Evaluation checks the original files against the frozen generation bytes.
+ * It never reads today's task ledger as yesterday's cost. */
+export async function verifyFrozenSourceUsage(repoRoot, binding) {
+    const summary = summarizeFrozenSourceUsage(binding);
+    const diagnostics = [...summary.diagnostics];
+    const root = path.join(getTaskPaths(repoRoot, binding.ledger.taskId).taskDir, "artifacts");
+    for (const ref of [...(binding.evidence?.receipts ?? []), ...(binding.evidence?.executions ?? [])]) {
+        try {
+            if (!/^(?:session-budget|source-executions)\/[^/\\]+\.json$/.test(ref.path))
+                throw Error("invalid path");
+            const bytes = await readFileBoundarySafe({ boundaryRoot: root, targetPath: path.join(root, ref.path), label: "frozen source usage" });
+            if (receiptHash(bytes) !== ref.sha256)
+                throw Error("changed receipt");
+        }
+        catch {
+            diagnostics.push(`source-evidence-missing-or-changed:${ref.path}`);
+        }
+    }
+    return { ...summary, complete: diagnostics.length === 0, diagnostics, totalTokens: diagnostics.length ? null : summary.totalTokens };
+}

package/dist/worker/console/operator-actions.js

@@ -2789,7 +2789,6 @@ export async function dispatchOperatorAction(ctx, req) {
                     reconcileAction,
                     "--reason",
                     reason,
-                    "--json",
                 ],
             });
             await finalizeMutationGateReceipt(ctx, gated.receiptId, accepted);

package/dist/worker/console/operator-user-error.js

@@ -114,7 +114,7 @@ const CONTEXT_TRANSFER_CODE_COPY = [
     },
     {
         pattern: /\bOPERATION_NEEDS_RECONCILE\b/,
-        copy: "当前操作的执行结果尚未确认，需要先核对（OPERATION_NEEDS_RECONCILE）。请查看操作记录和相关任务状态，核对实际执行结果后再决定后续操作；确认前请勿重复提交。",
+        copy: "当前操作的执行结果尚未确认，需要先核对（OPERATION_NEEDS_RECONCILE）。请查看操作记录和相关任务状态，核对实际执行结果后再决定后续操作；确认前请勿重复提交。"
     },
     {
         pattern: /\bCONTEXT_EXPORT_FAILED\b/,

package/dist/worker/console/prd-intake-bridge.js

@@ -1,3 +1,4 @@
+import { capabilityBoundarySchema } from "../../task/config-types.js";
 /**
  * Console PRD Intake Bridge (design 2026-08-11-console-prd-intake-bridge).
  * Maps task-side intake artifacts / projected source into Console DraftStore
@@ -119,20 +120,9 @@ export function parseEngineeringBoundaryFromParams(p) {
     };
     const allowedPaths = asList(p.allowedPaths ?? p.allowedPath);
     const forbiddenPaths = asList(p.forbiddenPaths ?? p.forbiddenPath);
-    const capabilityBoundaryRaw = p.capabilityBoundary;
-    const capabilityBoundary = capabilityBoundaryRaw && typeof capabilityBoundaryRaw === "object" && !Array.isArray(capabilityBoundaryRaw)
-        ? {
-            allowed: Array.isArray(capabilityBoundaryRaw.allowed)
-                ? capabilityBoundaryRaw.allowed.filter((x) => typeof x === "string" && x.trim().length > 0)
-                : undefined,
-            forbidden: Array.isArray(capabilityBoundaryRaw.forbidden)
-                ? capabilityBoundaryRaw.forbidden.filter((x) => typeof x === "string" && x.trim().length > 0)
-                : undefined,
-            requiredClauses: Array.isArray(capabilityBoundaryRaw.requiredClauses)
-                ? capabilityBoundaryRaw.requiredClauses.filter((x) => typeof x === "string" && x.trim().length > 0)
-                : undefined,
-        }
-        : undefined;
+    const capabilityBoundary = p.capabilityBoundary === undefined
+        ? undefined
+        : capabilityBoundarySchema.parse(p.capabilityBoundary);
     const interactionIds = asList(p.interactionIds ?? p.interactionId);
     const requirementOwnership = Array.isArray(p.requirementOwnership)
         ? p.requirementOwnership
@@ -206,7 +196,7 @@ export function parseEngineeringBoundaryFromParams(p) {
         ...(forbiddenPaths.length > 0 ? { forbiddenPaths } : {}),
         ...(verifyCommands.length > 0 ? { verifyCommands } : {}),
         ...(requirementOwnership?.length ? { requirementOwnership } : {}),
-        ...(capabilityBoundary && ((capabilityBoundary.allowed?.length ?? 0) + (capabilityBoundary.forbidden?.length ?? 0)) > 0
+        ...(capabilityBoundary
             ? { capabilityBoundary }
             : {}),
         ...(interactionIds.length > 0 ? { interactionIds } : {}),

package/dist/workflows/dag/budget-enforcement.js

@@ -1,6 +1,6 @@
 import { writeFile } from "node:fs/promises";
 import path from "node:path";
-import { checkBudgetPreNode, createBudgetLedger, formatBudgetReportMarkdown, isHardBudgetBreached, recordNodeBudgetSample, reserveProviderBudget, skipPendingNodesForBudgetBreach, } from "../../application/evaluation/budget.js";
+import { campaignBudgetSchema, checkBudgetPreNode, createBudgetLedger, formatBudgetReportMarkdown, isHardBudgetBreached, recordNodeBudgetSample, reserveProviderBudget, skipPendingNodesForBudgetBreach, } from "../../application/evaluation/budget.js";
 import { sha256OfCanonicalJson } from "../../task/contract/hash.js";
 /** A continuation already contains its ancestors' consumption. Never sum both. */
 export function validateCumulativeBudgetSuccessor(parent, child) {
@@ -9,9 +9,33 @@ export function validateCumulativeBudgetSuccessor(parent, child) {
     const next = child.budgetLedger;
     if (!previous || !next || !lineage || (child.continuation?.parentRunId ?? child.frontendRecoveryState?.parentRunId) !== parent.runId || lineage.parentLedgerSha256 !== sha256OfCanonicalJson(previous) || sha256OfCanonicalJson(lineage.inheritedConsumed) !== sha256OfCanonicalJson(previous.consumed) || sha256OfCanonicalJson(parent.budget ?? null) !== sha256OfCanonicalJson(child.budget ?? null))
         throw Error("FRONTEND_PROVIDER_BUDGET_LINEAGE_INVALID: unbound cumulative continuation");
+    const invalid = (reason) => { throw Error(`FRONTEND_PROVIDER_BUDGET_LINEAGE_INVALID: ${reason}`); };
+    for (const [state, ledger] of [[parent, previous], [child, next]]) {
+        const parsed = campaignBudgetSchema.safeParse(state.budget);
+        if (!parsed.success || ledger.schemaVersion !== 1 || ledger.mode !== parsed.data.mode || sha256OfCanonicalJson(ledger.limits) !== sha256OfCanonicalJson(parsed.data.limits))
+            invalid("ledger differs from frozen budget");
+        const count = (value) => typeof value === "number" && Number.isFinite(value) && value >= 0;
+        for (const key of ["executorCalls", "wallTimeMs", "repairPasses", "peakContextChars"])
+            if (!count(ledger.consumed[key]))
+                invalid("invalid consumption");
+        if (ledger.consumed.tokens !== null && !count(ledger.consumed.tokens))
+            invalid("invalid token consumption");
+        if ((ledger.mode === "hard" && ledger.limits.maxProviderRequests !== undefined || ledger.consumed.providerRequests !== undefined) && !count(ledger.consumed.providerRequests))
+            invalid("invalid request consumption");
+        if (!Array.isArray(ledger.consumed.missingTokenNodeIds) || ledger.consumed.missingTokenNodeIds.some(id => typeof id !== "string" || !id))
+            invalid("invalid missing token records");
+        if (!Array.isArray(ledger.breaches) || (ledger.mode === "record-only" ? ledger.status !== "record-only" : !["ok", "breached"].includes(ledger.status)))
+            invalid("invalid ledger status");
+    }
     for (const key of ["executorCalls", "providerRequests", "wallTimeMs", "repairPasses", "peakContextChars"])
         if ((next.consumed[key] ?? 0) < (previous.consumed[key] ?? 0))
-            throw Error("FRONTEND_PROVIDER_BUDGET_LINEAGE_INVALID: consumption decreased");
+            invalid("consumption decreased");
+    if (previous.consumed.tokens !== null && (next.consumed.tokens === null || next.consumed.tokens < previous.consumed.tokens))
+        invalid("token consumption decreased");
+    if (previous.consumed.missingTokenNodeIds.some(id => !next.consumed.missingTokenNodeIds.includes(id)))
+        invalid("missing token records lost");
+    if (previous.status === "breached" && next.status !== "breached" || previous.breaches.some(breach => !next.breaches.some(value => sha256OfCanonicalJson(value) === sha256OfCanonicalJson(breach))))
+        invalid("budget breach lost");
     return next;
 }
 const requestQueues = new WeakMap();
@@ -27,6 +51,11 @@ export async function reserveDagProviderRequest(input) {
             throw Error("FRONTEND_PROVIDER_BUDGET_STALE: request belongs to an inactive attempt");
         if (isHardBudgetBreached(ledger))
             throw Error("FRONTEND_PROVIDER_BUDGET_EXHAUSTED: run budget already breached");
+        if ((ledger.consumed.providerRequests ?? 0) < ledger.limits.maxProviderRequests && input.reserveTaskRequest) {
+            await input.reserveTaskRequest();
+            if (!active())
+                throw Error("FRONTEND_PROVIDER_BUDGET_STALE: attempt stopped during task reservation");
+        }
         const breach = reserveProviderBudget(ledger, input.nodeId);
         if (breach)
             applyHardBudgetBreach(input.state, breach);

package/dist/workflows/dag/frontend-closeout.js

@@ -44,6 +44,8 @@ export const frontendCloseoutFactsSchema = z
         status: frontendCoverageStatusSchema,
         evidence: z.enum(["file-exists", "command-execution", "test-file-execution", "unavailable"]).optional(),
         behaviorCoverage: z.enum(["unconfirmed"]).optional(),
+        plannedEvidenceLevel: z.enum(["unit", "mounted", "real-integration", "unknown"]).optional(),
+        boundary: z.string().min(1).optional(),
     })
         .strict()),
     lintStatus: frontendLintStatusSchema,
@@ -145,7 +147,7 @@ function bulletList(items) {
     return items.map((item) => `- ${item}`).join("\n");
 }
 function coverageLines(facts) {
-    const lines = facts.coverageMatrix.map((entry) => `- ${entry.verificationTargetId}: execution=${entry.status}; evidence=${entry.evidence ?? "unspecified"}; behavior-coverage=${entry.behaviorCoverage ?? "unconfirmed"}`);
+    const lines = facts.coverageMatrix.map((entry) => `- ${entry.verificationTargetId}: execution=${entry.status}; evidence=${entry.evidence ?? "unspecified"}; behavior-coverage=${entry.behaviorCoverage ?? "unconfirmed"}; planned-evidence=${entry.plannedEvidenceLevel ?? "unknown"}${entry.boundary ? `; boundary=${entry.boundary}` : ""}`);
     return lines.length > 0 ? lines.join("\n") : "_(none)_";
 }
 function frontendStatus(facts) {

package/dist/workflows/dag/frontend-contract-facts.js

@@ -5,7 +5,8 @@ function object(value) {
         ? value
         : undefined;
 }
-/** Join requirement-owned identity with separately committed evidence by id.
+/** Project the latest requirement per id while retaining first-seen order.
+ * The append-only ledger also contains earlier execution metadata revisions.
  * Later evidence declarations replace only the lanes they explicitly name. */
 export function resolveFrontendContractRequirements(facts) {
     const contractFacts = facts.map(object).filter((fact) => fact?.origin === "contract");
@@ -19,13 +20,15 @@ export function resolveFrontendContractRequirements(facts) {
             ...object(fact.evidence),
         });
     }
-    return contractFacts.flatMap((fact) => fact.kind === "requirement" && typeof fact.id === "string"
-        ? [{
-                ...fact,
-                id: fact.id,
-                evidence: { ...object(fact.evidence), ...evidenceById.get(fact.id) },
-            }]
-        : []);
+    const requirements = new Map();
+    for (const fact of contractFacts) {
+        if (fact.kind === "requirement" && typeof fact.id === "string")
+            requirements.set(fact.id, fact);
+    }
+    return [...requirements].map(([id, fact]) => ({
+        ...fact, id,
+        evidence: { ...object(fact.evidence), ...evidenceById.get(id) },
+    }));
 }
 function names(value) {
     return Array.isArray(value)

package/dist/workflows/dag/frontend-design-policy.js

@@ -243,9 +243,9 @@ export function checkComponentChoice(contract, componentSpecCandidatePaths, opti
     });
     return findings;
 }
-/** 5. Every implementation target and every non-static verification target
- * must fall inside the declared writeSet patterns. */
-export function checkTargetPaths(contract, writeSetPatterns) {
+/** 5. Implementation targets require write permission. Existing, safely
+ * resolved verification files may remain read-only outside that writeSet. */
+export function checkTargetPaths(contract, writeSetPatterns, existingVerificationPaths = []) {
     const findings = [];
     // No frozen writeSet patterns (legacy / unconfigured run) → nothing to
     // check; an empty pattern set must not report every file as out of scope.
@@ -275,7 +275,7 @@ export function checkTargetPaths(contract, writeSetPatterns) {
     for (const target of contract.verificationTargets) {
         if (target.mode === "static")
             continue;
-        if (!matches(target.file)) {
+        if (!matches(target.file) && !existingVerificationPaths.includes(target.file)) {
             findings.push({
                 code: "target-path-outside-write-set",
                 message: `verification target "${target.id}" file is outside the writeSet patterns: ${target.file}`,
@@ -442,7 +442,7 @@ export function checkRequiredDeliverables(contract) {
         return [];
     const planned = new Set([
         ...contract.targets.files,
-        ...contract.requirements.flatMap((requirement) => requirement.implementationTargets),
+        ...contract.requirements.flatMap((requirement) => [...requirement.implementationTargets, ...(requirement.deliverableTargets ?? [])]),
         ...contract.verificationTargets.map((target) => target.file),
     ]);
     return required
@@ -464,7 +464,7 @@ export function evaluateFrontendDesignPolicy(input) {
         ...checkComponentChoice(input.contract, input.componentSpecCandidatePaths, input.hasFreshPathEvidence
             ? { hasFreshPathEvidence: input.hasFreshPathEvidence }
             : undefined),
-        ...checkTargetPaths(input.contract, input.writeSetPatterns),
+        ...checkTargetPaths(input.contract, input.writeSetPatterns, input.existingVerificationPaths),
         ...checkDependencies(input.contract, input.allowedDependencies),
         ...checkUiStateAttribution(input.contract),
         ...checkUxNameCollisions(input.contract),