@fitlab-ai/agent-infra 0.11.3 → 0.11.5

package/lib/task/artifact-command.ts

@@ -13,6 +13,9 @@ export type ArtifactCommand = Readonly<{
   family: string;
   artifact: string;
   locale?: 'zh-CN' | 'en';
+  sourceFinding?: string;
+  sourceArtifact?: string;
+  sourceSha256?: string;
 }>;
 
 /** One option contract for the CLI and trusted projection executor. */
@@ -23,7 +26,7 @@ export function parseArtifactCommand(args: readonly string[]): ArtifactCommand {
   }
   const fields: Record<string, string> = {};
   const allowed = {
-    inspect: ['--family'],
+    inspect: ['--family', '--source-finding', '--source-artifact', '--source-sha256'],
     init: ['--family', '--artifact', '--locale'],
     'preflight': ['--family', '--artifact'],
     'finalize-local': ['--family', '--artifact']
@@ -41,8 +44,10 @@ export function parseArtifactCommand(args: readonly string[]): ArtifactCommand {
   const locale = fields['--locale'];
   if (locale !== undefined && locale !== 'zh-CN' && locale !== 'en') throw new Error("option '--locale' must be 'zh-CN' or 'en'");
   return {
-    taskRef, operation: operation as ArtifactCommand['operation'], family: fields['--family'],
-    artifact: fields['--artifact'] ?? '', locale
+    taskRef, operation: operation as ArtifactCommand['operation'], family: fields['--family'] ?? '',
+    artifact: fields['--artifact'] ?? '', locale,
+    sourceFinding: fields['--source-finding'], sourceArtifact: fields['--source-artifact'],
+    sourceSha256: fields['--source-sha256']
   };
 }
 /** Resolve authoritative task metadata separately from a trusted candidate directory. */
@@ -53,7 +58,12 @@ export function executeArtifactCommand(
   const { taskRef, operation, family, artifact, locale } = command;
   const fail = (code: string, message: string) => ({ status: 'failed', changed: false, error: { code, message } });
   if (operation === 'inspect') {
-    const result = resolveArtifactContext(taskRef, family, { repoRoot: options.repoRoot });
+    const result = resolveArtifactContext(taskRef, family, {
+      repoRoot: options.repoRoot,
+      sourceFinding: command.sourceFinding,
+      sourceArtifact: command.sourceArtifact,
+      sourceSha256: command.sourceSha256
+    });
     return family === 'code' && result.codeMode ? {
       ...result, mode: result.codeMode.mode, code_max: result.codeMode.codeMax, rev_max: result.codeMode.reviewMax,
       verdict: result.codeMode.verdict, next_round: result.next?.round ?? null, next_artifact: result.next?.name ?? null,

package/lib/task/artifact-lifecycle.ts

@@ -11,8 +11,12 @@ import { extractSection, findSectionHeading } from './sections.ts';
 import { receiptForOutput, sha256File } from './artifact-receipts.ts';
 import { isArtifactInvalidated, parseInvalidationDocument } from './invalidation.ts';
 import type { InvalidationDocument } from './invalidation.ts';
-import { validateQualificationAudit } from './qualification-audit.ts';
 import type { ArtifactFamily, ArtifactFamilySpec } from './artifact-name.ts';
+import { parseLifecyclePathDecision } from './lifecycle-path.ts';
+import type { LifecyclePathState } from './lifecycle-path.ts';
+import { parseReworkIntentDocument } from './rework-intent.ts';
+import { selectArtifactDisposition } from './artifact-selection.ts';
+import type { ArtifactSelection } from './artifact-selection.ts';
 
 const artifactFamilyCatalog = ARTIFACT_FAMILY_CATALOG;
 const ARTIFACT_STEPS: Readonly<Record<string, string>> = {
@@ -33,6 +37,16 @@ export function hasOpenArtifactRound(content: string, family: string, round: num
   return startedBackedRows(pairEntries(activity.entries)).filter((row) => expected.test(row.step) && !row.done).length === 1;
 }
 
+function hasCompletedArtifactRound(content: string, family: string, round: number, name: string): boolean {
+  const activity = locateActivityLog(content);
+  const step = ARTIFACT_STEPS[family];
+  if (!activity || !step) return false;
+  const expected = new RegExp(`^${escapeRegExp(step)} \\(Round ${round}(?:, [^)]+)?\\)$`);
+  return startedBackedRows(pairEntries(activity.entries)).some((row) =>
+    expected.test(row.step) && Boolean(row.done) && row.note.includes(`→ ${name}`)
+  );
+}
+
 type ArtifactIdentity = {
   family: ArtifactFamily;
   round: number;
@@ -55,9 +69,12 @@ type ArtifactErrorCode =
   | ResolveTaskRefErrorCode | 'ARTIFACT_FAMILY_UNKNOWN' | 'ARTIFACT_DIRECTORY_READ_FAILED'
   | 'ARTIFACT_TOPOLOGY_CONFLICT' | 'ARTIFACT_INPUT_MISSING'
   | 'ARTIFACT_REFERENCE_INVALID' | 'ARTIFACT_PATH_INVALID'
+  | 'LIFECYCLE_PATH_INVALID'
   | 'ARTIFACT_IDENTITY_INVALID' | 'ARTIFACT_NOT_FOUND'
   | 'ARTIFACT_NOT_REGULAR' | 'ARTIFACT_NOT_READABLE' | 'ARTIFACT_VERDICT_INVALID'
-  | 'ARTIFACT_MODE_REFUSED' | 'ARTIFACT_INVALIDATION_INVALID';
+  | 'ARTIFACT_MODE_REFUSED' | 'ARTIFACT_INVALIDATION_INVALID'
+  | 'ARTIFACT_SELECTION_INDETERMINATE';
+
 type ArtifactError = { code: ArtifactErrorCode; message: string };
 type ArtifactInventoryResult = {
   status: 'ready' | 'failed';
@@ -79,6 +96,7 @@ type CodeArtifactMode = 'init' | 'fix' | 'decision' | 'refused' | 'error';
 type ArtifactContextResult = Omit<ArtifactInventoryResult, 'status'> & {
   status: ArtifactContextStatus;
   inputs: readonly ArtifactIdentity[];
+  selection?: ArtifactSelection | null;
   codeMode: {
     mode: CodeArtifactMode;
     codeMax: number;
@@ -91,7 +109,13 @@ type ArtifactContextResult = Omit<ArtifactInventoryResult, 'status'> & {
     message: string;
   } | null;
 };
-type InspectOptions = { repoRoot?: string };
+type InspectOptions = {
+  repoRoot?: string;
+  reasonCode?: string;
+  sourceFinding?: string;
+  sourceArtifact?: string;
+  sourceSha256?: string;
+};
 
 const BLOCKING_DIAGNOSTICS = new Set<ArtifactDiagnosticCode>([
   'NONCANONICAL_NAME', 'ROUND_OUT_OF_RANGE', 'MISSING_BASE', 'ROUND_GAP',
@@ -260,9 +284,11 @@ function resolveCodeInputReceipt(taskDir: string, code: ArtifactIdentity): { inp
   try { receipt = receiptForOutput(taskContent, code.name); }
   catch { return null; }
   if (!receipt || receipt.event !== 'code.completed') return null;
-  const plan = inspectArtifactDirectory(taskDir, 'plan');
-  if (plan.status !== 'ready') return null;
-  const input = plan.artifacts.find((artifact) => artifact.name === receipt.input);
+  const identity = parseArtifactName(receipt.input);
+  if (!identity || !['analysis', 'plan'].includes(identity.family)) return null;
+  const source = inspectArtifactDirectory(taskDir, identity.family);
+  if (source.status !== 'ready') return null;
+  const input = source.artifacts.find((artifact) => artifact.name === receipt.input);
   return input ? { input, inputSha256: receipt.inputSha256 } : null;
 }
 
@@ -270,6 +296,16 @@ function resolveCodePlanInput(taskDir: string, code: ArtifactIdentity): { input:
   return resolveCodeInputReceipt(taskDir, code);
 }
 
+function lifecyclePathState(taskDir: string): LifecyclePathState {
+  const analysis = inspectArtifactDirectory(taskDir, 'analysis');
+  if (analysis.status !== 'ready' || !analysis.latest) return { status: 'missing', decision: null, message: 'analysis artifact is missing' };
+  try {
+    return parseLifecyclePathDecision(fs.readFileSync(analysis.latest.path, 'utf8'), analysis.latest.name, sha256File(analysis.latest.path));
+  } catch (error) {
+    return { status: 'invalid', decision: null, message: error instanceof Error ? error.message : String(error) };
+  }
+}
+
 function assertWritableInventory(inventory: ArtifactInventoryResult): ArtifactError | null {
   if (inventory.status === 'failed') return inventory.error;
   const blockers = inventory.diagnostics.filter((item) => BLOCKING_DIAGNOSTICS.has(item.code));
@@ -282,21 +318,127 @@ function assertWritableInventory(inventory: ArtifactInventoryResult): ArtifactEr
 const REQUIRED_INPUT: Partial<Record<ArtifactFamily, ArtifactFamily>> = {
   'review-analysis': 'analysis', plan: 'analysis', 'review-plan': 'plan', 'review-code': 'code'
 };
-const OPTIONAL_CONTEXT: Partial<Record<ArtifactFamily, { family: ArtifactFamily; requireReference?: boolean }>> = {
-  analysis: { family: 'review-analysis', requireReference: true },
-  plan: { family: 'review-plan', requireReference: true },
+const OPTIONAL_CONTEXT: Partial<Record<ArtifactFamily, { family: ArtifactFamily }>> = {
+  analysis: { family: 'review-analysis' },
+  plan: { family: 'review-plan' },
   'review-code': { family: 'review-plan' },
   'manual-validation': { family: 'review-code' },
   'validation-run': { family: 'review-code' }
 };
-const QUALIFICATION_RECOVERY_OPTIONAL_CONTEXT_CONSUMERS = new Set<ArtifactFamily>(['analysis', 'plan']);
+function hasSelectionEvidence(
+  content: string,
+  family: ArtifactFamily,
+  options: InspectOptions,
+  context: ArtifactContextResult
+): boolean {
+  if (options.sourceFinding && options.sourceArtifact && options.sourceSha256) return true;
+  if (options.reasonCode === 'new-requirement' || options.reasonCode === 'upstream-fact-doubt') return true;
+  if (family.startsWith('review-')) {
+    const reviewedFamily = family === 'review-analysis' ? 'analysis' : family === 'review-plan' ? 'plan' : 'code';
+    const currentInput = context.inputs.find((input) => input.family === reviewedFamily);
+    if (currentInput && context.reviewedInput?.name !== currentInput.name) return true;
+  }
+  const target = family === 'analysis' ? 'analysis' : family === 'plan' ? 'plan' : family === 'code' ? 'code' : null;
+  if (target) {
+    const parsed = parseReworkIntentDocument(content);
+    if (!parsed.ok) throw new Error(`${parsed.code}: ${parsed.message}`);
+    if (parsed.intents.some((intent) => intent.status === 'pending'
+      && (intent.target === target || family === 'analysis' && intent.target === 'plan'))) return true;
+  }
+  if (family === 'code') {
+    if (context.latest && context.codeMode?.mode === 'init') return true;
+    if (parseImplementationInputs(content).rows.some((input) => input.needsImplementation && input.status === 'pending')) return true;
+  }
+  return context.inputs.filter((candidate) => candidate.family.startsWith('review-')).some((input) => {
+    const verdict = parseVerdict(input.path);
+    if (!verdict.ok || verdict.verdict !== 'Changes Requested' || !context.latest) return false;
+    const receipt = receiptForOutput(content, input.name);
+    return receipt?.event === reviewEventName(input.family)
+      && receipt.input === context.latest.name
+      && receipt.inputSha256 === sha256File(context.latest.path);
+  });
+}
+
+function attachArtifactSelection(
+  context: ArtifactContextResult,
+  pathState: LifecyclePathState,
+  options: InspectOptions
+): ArtifactContextResult {
+  if (context.status !== 'ready' || !context.taskDir || !context.taskId
+    || (context.family !== 'analysis' && pathState.status !== 'valid')) return context;
+  const family = context.family as ArtifactFamily;
+  const fail = (code: ArtifactErrorCode, message: string): ArtifactContextResult => ({
+    ...context, status: 'failed', selection: null, error: { code, message }
+  });
+  if (!context.next) return fail('ARTIFACT_SELECTION_INDETERMINATE', 'artifact inventory did not provide a writable identity');
+  let taskContent: string;
+  try {
+    taskContent = fs.readFileSync(path.join(context.taskDir, 'task.md'), 'utf8');
+  } catch (error) {
+    return fail('ARTIFACT_SELECTION_INDETERMINATE', error instanceof Error ? error.message : String(error));
+  }
+  const openLatest = context.latest ? hasOpenArtifactRound(taskContent, family, context.latest.round) : false;
+  const openNext = hasOpenArtifactRound(taskContent, family, context.next.round);
+  const open = openLatest || openNext;
+  const selectedIdentity = openLatest ? context.latest! : context.next;
+  try {
+    const hasChangeEvidence = hasSelectionEvidence(taskContent, family, options, context);
+    const selection = selectArtifactDisposition({
+      next: { family, round: selectedIdentity.round, name: selectedIdentity.name },
+      latest: context.latest,
+      open,
+      hasChangeEvidence
+    });
+    return {
+      ...context,
+      selection,
+      next: selection.writeRequired ? { round: selection.artifact.round, name: selection.artifact.name } : null
+    };
+  } catch (error) {
+    return fail('ARTIFACT_SELECTION_INDETERMINATE', error instanceof Error ? error.message : String(error));
+  }
+}
 
 function resolveArtifactContext(taskRef: string, family: string, options: InspectOptions = {}): ArtifactContextResult {
   const inventory = inspectTaskArtifacts(taskRef, family, options);
   if (inventory.status === 'failed') return { ...inventory, inputs: [], codeMode: null };
   const writableError = assertWritableInventory(inventory);
   if (writableError) return { ...inventory, status: 'failed', inputs: [], codeMode: null, error: writableError };
-  if (inventory.family === 'code') return resolveCodeContext(inventory, options);
+  const pathState = lifecyclePathState(inventory.taskDir!);
+  if (inventory.family !== 'analysis' && pathState.status !== 'valid') {
+    return contextFailure(inventory, 'LIFECYCLE_PATH_INVALID', pathState.message);
+  }
+  if (inventory.family === 'code') {
+    const code = resolveCodeContext(inventory, options);
+    const selected = attachArtifactSelection(code, pathState, options);
+    if (selected.status !== 'ready' || !selected.selection) return selected;
+    if (selected.selection.disposition === 'reuse') return selected;
+    if (selected.codeMode?.mode === 'error') {
+      return {
+        ...selected,
+        status: 'ready',
+        codeMode: {
+          ...selected.codeMode,
+          mode: 'init',
+          message: 'A new implementation round was requested.'
+        },
+        error: null
+      };
+    }
+    if (selected.codeMode?.mode === 'refused') {
+      return {
+        ...selected,
+        status: 'ready',
+        codeMode: {
+          ...selected.codeMode,
+          mode: 'init',
+          message: 'A new implementation round was requested.'
+        },
+        error: null
+      };
+    }
+    return selected;
+  }
   const required = REQUIRED_INPUT[inventory.family as ArtifactFamily];
   const inputs: ArtifactIdentity[] = [];
   if (required) {
@@ -304,116 +446,113 @@ function resolveArtifactContext(taskRef: string, family: string, options: Inspec
     if (input.status === 'failed' || !input.latest) {
       return { ...inventory, status: 'failed', inputs, codeMode: null, error: { code: 'ARTIFACT_INPUT_MISSING', message: `latest ${required} artifact is required` } };
     }
-    const qualificationError = qualificationErrorForArtifact(input.latest);
-    if (qualificationError) return { ...inventory, status: 'failed', inputs, codeMode: null, error: { code: 'ARTIFACT_REFERENCE_INVALID', message: qualificationError } };
     inputs.push(input.latest);
   }
   const optional = OPTIONAL_CONTEXT[inventory.family as ArtifactFamily];
   if (optional) {
     const context = inspectTaskArtifacts(taskRef, optional.family, options);
     if (context.status === 'ready' && context.latest) {
-      if (optional.requireReference && !context.reviewedInput) {
-        return { ...inventory, status: 'failed', inputs, codeMode: null, error: { code: 'ARTIFACT_REFERENCE_INVALID', message: `${context.latest.name} has no valid reviewed input` } };
-      }
-      const qualificationError = qualificationErrorForArtifact(context.latest);
-      if (qualificationError && !QUALIFICATION_RECOVERY_OPTIONAL_CONTEXT_CONSUMERS.has(inventory.family as ArtifactFamily)) {
-        return { ...inventory, status: 'failed', inputs, codeMode: null, error: { code: 'ARTIFACT_REFERENCE_INVALID', message: qualificationError } };
-      }
       inputs.push(context.latest);
     }
   }
-  return { ...inventory, inputs, codeMode: null };
-}
-
-function qualificationErrorForArtifact(artifact: ArtifactIdentity): string | null {
-  try {
-    const taskContent = fs.readFileSync(path.join(path.dirname(artifact.path), 'task.md'), 'utf8');
-    const artifactContent = fs.readFileSync(artifact.path, 'utf8');
-    const result = validateQualificationAudit(taskContent, artifactContent);
-    return result.ok ? null : `${result.code}: ${result.message}`;
-  } catch (error) {
-    return error instanceof Error ? error.message : String(error);
+  if (inventory.family === 'manual-validation' || inventory.family === 'validation-run') {
+    return { ...inventory, inputs, codeMode: null };
   }
+  return attachArtifactSelection({ ...inventory, inputs, codeMode: null }, pathState, options);
 }
 
 function resolveCodeContext(inventory: ArtifactInventoryResult, options: InspectOptions): ArtifactContextResult {
   const taskRef = inventory.requestRef;
-  const plan = inspectTaskArtifacts(taskRef, 'plan', options);
-  if (plan.status === 'failed' || !plan.latest) return contextFailure(inventory, 'ARTIFACT_INPUT_MISSING', 'latest plan artifact is required');
-  const reviewPlan = inspectTaskArtifacts(taskRef, 'review-plan', options);
+  const pathState = lifecyclePathState(inventory.taskDir!);
+  if (pathState.status !== 'valid') return contextFailure(inventory, 'LIFECYCLE_PATH_INVALID', pathState.message);
+  const inputFamily = pathState.decision.path === 'streamlined' ? 'analysis' : 'plan';
+  const source = inspectTaskArtifacts(taskRef, inputFamily, options);
+  if (source.status === 'failed' || !source.latest) return contextFailure(inventory, 'ARTIFACT_INPUT_MISSING', `latest ${inputFamily} artifact is required`);
   const reviewCode = inspectTaskArtifacts(taskRef, 'review-code', options);
   const latestCode = inventory.latest;
   const codeMax = latestCode?.round ?? 0;
   const reviewMax = reviewCode.latest?.round ?? 0;
-  const inputs = [plan.latest];
-  const planQualificationError = qualificationErrorForArtifact(plan.latest);
-  if (planQualificationError) return contextFailure(inventory, 'ARTIFACT_REFERENCE_INVALID', planQualificationError);
+  const inputs = [source.latest];
   if (latestCode) {
-    const qualificationError = qualificationErrorForArtifact(latestCode);
-    if (qualificationError) return contextFailure(inventory, 'ARTIFACT_REFERENCE_INVALID', qualificationError, latestCode.name);
-  }
-  if (reviewCode.latest) {
-    const qualificationError = qualificationErrorForArtifact(reviewCode.latest);
-    if (qualificationError) return contextFailure(inventory, 'ARTIFACT_REFERENCE_INVALID', qualificationError, reviewCode.latest.name);
+    try {
+      const taskContent = fs.readFileSync(path.join(inventory.taskDir!, 'task.md'), 'utf8');
+      if (hasOpenArtifactRound(taskContent, 'code', latestCode.round)) {
+        const review = reviewCode.latest;
+        const openInputs = review ? [...inputs, review] : inputs;
+        const openVerdict = review ? parseVerdict(review.path) : null;
+        const openRow = locateActivityLog(taskContent)
+          ? startedBackedRows(pairEntries(locateActivityLog(taskContent)!.entries))
+            .find((row) => row.step.startsWith(`Code Task (Round ${latestCode.round}`) && !row.done)
+          : null;
+        const decisionInput = /, decision (II-[1-9]\d*)\)$/u.exec(openRow?.step ?? '')?.[1] ?? null;
+        const fixInput = /, fix for (review-code(?:-r\d+)?\.md)\)$/u.exec(openRow?.step ?? '')?.[1] ?? null;
+        const mode = decisionInput ? 'decision'
+          : fixInput || (openVerdict?.ok && openVerdict.verdict === 'Changes Requested') ? 'fix'
+            : 'init';
+        return withCodeMode(
+          inventory, openInputs, 'ready', mode, codeMax, reviewMax,
+          openVerdict?.ok ? openVerdict.verdict : null, fixInput ?? review?.name ?? null,
+          `Resuming open code round ${latestCode.round}.`,
+          decisionInput
+        );
+      }
+    } catch (error) {
+      return contextFailure(inventory, 'ARTIFACT_REFERENCE_INVALID', error instanceof Error ? error.message : String(error));
+    }
   }
   if (!latestCode) {
-    if (!reviewPlan.latest || reviewPlan.reviewedInput?.name !== plan.latest.name) {
-      return contextFailure(inventory, 'ARTIFACT_INPUT_MISSING', `latest plan '${plan.latest.name}' requires a matching approved review-plan`);
-    }
-    const verdict = parseVerdict(reviewPlan.latest.path);
-    if (!verdict.ok) return contextFailure(inventory, 'ARTIFACT_VERDICT_INVALID', `${verdict.code}: ${verdict.message}`, reviewPlan.latest.name);
-    if (verdict.verdict !== 'Approved') {
-      return contextFailure(inventory, 'ARTIFACT_REFERENCE_INVALID', `latest ${reviewPlan.latest.name} is not approved`, reviewPlan.latest.name);
-    }
     return withCodeMode(inventory, inputs, 'ready', 'init', codeMax, reviewMax, null, null,
       'No prior code artifact. Starting initial implementation (round 1 -> code.md).');
   }
   const codePlanInput = resolveCodePlanInput(inventory.taskDir!, latestCode);
   if (!codePlanInput) {
-    return contextFailure(inventory, 'ARTIFACT_REFERENCE_INVALID', `code completion receipt for ${latestCode.name} is missing or does not match the current plan`, latestCode.name);
+    return withCodeMode(inventory, inputs, 'ready', 'error', codeMax, reviewMax, null, null,
+      `Code input receipt for ${latestCode.name} is unavailable.`);
   }
-  if (reviewPlan.latest && !reviewPlan.reviewedInput) {
-    return contextFailure(inventory, 'ARTIFACT_REFERENCE_INVALID', `${reviewPlan.latest.name} has no valid reviewed input`, reviewPlan.latest.name);
-  }
-  if (reviewPlan.latest) {
-    const qualificationError = qualificationErrorForArtifact(reviewPlan.latest);
-    if (qualificationError) return contextFailure(inventory, 'ARTIFACT_REFERENCE_INVALID', qualificationError, reviewPlan.latest.name);
-  }
-  if (reviewPlan.latest && reviewPlan.reviewedInput?.name === plan.latest.name) {
-    const verdict = parseVerdict(reviewPlan.latest.path);
-    if (!verdict.ok) return contextFailure(inventory, 'ARTIFACT_VERDICT_INVALID', `${verdict.code}: ${verdict.message}`, reviewPlan.latest.name);
-    const reviewedPlanSha256 = sha256File(reviewPlan.reviewedInput.path);
-    if (verdict.ok && verdict.verdict === 'Approved' && (
-      codePlanInput.input.name !== plan.latest.name || codePlanInput.inputSha256 !== reviewedPlanSha256
-    )) {
-      return withCodeMode(inventory, inputs, 'ready', 'init', codeMax, reviewMax, verdict.verdict, reviewPlan.latest.name,
-        `Latest ${reviewPlan.latest.name} approves plan content not captured by the latest code input receipt. Entering replan-driven init.`);
-    }
+  const currentInputSha256 = sha256File(source.latest.path);
+  if (codePlanInput.input.name !== source.latest.name || codePlanInput.inputSha256 !== currentInputSha256) {
+    return withCodeMode(inventory, inputs, 'ready', 'init', codeMax, reviewMax, null, null,
+      `Latest ${source.latest.name} is not captured by the latest code input receipt. Entering replan-driven init.`);
   }
   if (!reviewCode.latest || reviewCode.reviewedInput?.name !== latestCode.name) {
     const expected = reviewCode.next?.name ?? artifactName('review-code', reviewMax + 1);
-    return contextFailure(inventory, 'ARTIFACT_INPUT_MISSING', `${expected} is required before another code round`, expected);
+    return withCodeMode(inventory, inputs, 'ready', 'error', codeMax, reviewMax, null, expected,
+      `${expected} is required before another code round`);
   }
   const review = reviewCode.latest;
   if (!review) return contextFailure(inventory, 'ARTIFACT_INPUT_MISSING', 'latest review-code artifact is required');
   const verdict = parseVerdict(review.path);
   if (!verdict.ok) return contextFailure(inventory, 'ARTIFACT_VERDICT_INVALID', `${verdict.code}: ${verdict.message}`, review.name);
-  if (verdict.verdict === 'Approved') {
-    const decision = resolveDecisionImplementationInput(inventory, review);
-    if ('error' in decision) return contextFailure(inventory, 'ARTIFACT_REFERENCE_INVALID', decision.error, review.name);
-    if (decision.input) {
-      return withCodeMode(
-        inventory, [...inputs, review], 'ready', 'decision', codeMax, reviewMax,
-        verdict.verdict, review.name, `Implementation input ${decision.input.id} requires a new code round.`,
-        decision.input.id, decision.input.ledgerId, decision.input.decisionEvidence
-      );
+  const decision = resolveDecisionImplementationInput(inventory, review);
+  if ('error' in decision) return contextFailure(inventory, 'ARTIFACT_REFERENCE_INVALID', decision.error, review.name);
+  if (decision.input) {
+    return withCodeMode(
+      inventory, [...inputs, review], 'ready', 'decision', codeMax, reviewMax,
+      verdict.verdict, review.name, `Implementation input ${decision.input.id} requires a new code round.`,
+      decision.input.id, decision.input.ledgerId, decision.input.decisionEvidence
+    );
+  }
+  try {
+    const taskContent = fs.readFileSync(path.join(inventory.taskDir!, 'task.md'), 'utf8');
+    const rework = parseReworkIntentDocument(taskContent);
+    const reviewSha256 = sha256File(review.path);
+    if (rework.ok && rework.intents.some((intent) => intent.status === 'pending'
+      && intent.target === 'code'
+      && intent.sourceArtifact === review.name
+      && intent.sourceSha256 === reviewSha256)) {
+      return withCodeMode(inventory, [...inputs, review], 'ready', 'fix', codeMax, reviewMax, verdict.verdict, review.name,
+        `Pending rework evidence requires a new code round after ${review.name}.`);
     }
+  } catch (error) {
+    return contextFailure(inventory, 'ARTIFACT_REFERENCE_INVALID', error instanceof Error ? error.message : String(error), review.name);
   }
-  if (verdict.verdict === 'Approved' || verdict.verdict === 'Rejected') {
-    return withCodeMode(inventory, [...inputs, review], 'refused', 'refused', codeMax, reviewMax, verdict.verdict, review.name,
-      verdict.verdict === 'Approved'
-        ? `Latest ${review.name} verdict is Approved with no findings. Nothing to fix. Run /commit to proceed.`
-        : `Latest ${review.name} verdict is Rejected. Re-plan before re-running code-task.`);
+  if (verdict.verdict === 'Approved') {
+    return withCodeMode(inventory, [...inputs, review], 'ready', 'refused', codeMax, reviewMax, verdict.verdict, review.name,
+      `Latest ${review.name} verdict is Approved with no findings. Nothing to fix. Run /commit to proceed.`);
+  }
+  if (verdict.verdict === 'Rejected') {
+    return withCodeMode(inventory, [...inputs, review], 'ready', 'refused', codeMax, reviewMax, verdict.verdict, review.name,
+      `Latest ${review.name} verdict is Rejected. Re-plan before re-running code-task.`);
   }
   return withCodeMode(inventory, [...inputs, review], 'ready', 'fix', codeMax, reviewMax, verdict.verdict, review.name,
     `Latest ${review.name} requires or permits fixes. Entering fix mode.`);
@@ -482,7 +621,19 @@ export function validateArtifactPublication(taskDir: string, family: ArtifactFam
   const inventory = inspectArtifactDirectory(taskDir, family);
   const error = assertWritableInventory(inventory);
   if (error) return error;
-  if (inventory.next?.name === name || inventory.artifacts.some((artifact) => artifact.name === name)) return null;
+  if (inventory.next?.name === name) return null;
+  const existing = inventory.artifacts.find((artifact) => artifact.name === name);
+  if (existing) {
+    try {
+      const task = fs.readFileSync(path.join(taskDir, 'task.md'), 'utf8');
+      if (hasCompletedArtifactRound(task, family, existing.round, name)) {
+        return { code: 'ARTIFACT_IDENTITY_INVALID', message: `completed artifact '${name}' is immutable` };
+      }
+    } catch (error) {
+      return { code: 'ARTIFACT_SELECTION_INDETERMINATE', message: error instanceof Error ? error.message : String(error) };
+    }
+    return null;
+  }
   return { code: 'ARTIFACT_IDENTITY_INVALID', message: `artifact '${name}' is not a current or next ${family} slot` };
 }
 

package/lib/task/artifact-operations.ts

@@ -10,12 +10,6 @@ import {
   renderArtifactSkeleton
 } from './artifact-schema.ts';
 import { withTaskExecutionLock } from './task-execution-lock.ts';
-import {
-  buildQualificationAudit,
-  expectedQualificationRelations,
-  parseTaskQualification,
-  renderQualificationAudit
-} from './qualification-audit.ts';
 import type {
   ArtifactSchema,
   ArtifactSchemaFamily,
@@ -33,6 +27,7 @@ type ArtifactStructuralDiagnosticCode =
   | 'ARTIFACT_EMPTY_SECTION'
   | 'ARTIFACT_SECTION_ORDER_INVALID'
   | 'ARTIFACT_HEADING_TRAILING_PUNCTUATION'
+  | 'ARTIFACT_STATE_CHECK_PATTERN_MISSING'
   | 'ARTIFACT_REQUIRED_PATTERN_MISSING';
 
 type ArtifactStructuralDiagnostic = Readonly<{
@@ -260,13 +255,68 @@ function inspectArtifactPatterns(
   };
 }
 
+function inspectArtifactStateCheck(
+  content: string,
+  schema: ArtifactSchema,
+  scopeToStateCheckSection: boolean
+): ArtifactStructureResult {
+  const stateCheck = schema.sections.find((section) => section.id === 'state-check');
+  if (!stateCheck || schema.stateCheckPatterns.length === 0) {
+    return { ok: true, family: schema.family, semanticDigest: canonicalSemanticDigest(content), diagnostics: [] };
+  }
+
+  if (!scopeToStateCheckSection) {
+    const diagnostics = schema.stateCheckPatterns
+      .filter((pattern) => !new RegExp(pattern, 'm').test(content))
+      .map((pattern) => diagnostic(
+        'ARTIFACT_STATE_CHECK_PATTERN_MISSING',
+        `artifact is missing required state-check command '${pattern}'`,
+        stateCheck.id,
+        null
+      ));
+    return {
+      ok: diagnostics.length === 0,
+      family: schema.family,
+      semanticDigest: canonicalSemanticDigest(content),
+      diagnostics
+    };
+  }
+
+  const scanned = scanVisibleMarkdown(content);
+  const headings = scanned.headings.filter((heading) => (
+    heading.level === 2 && sectionHeadings(schema, stateCheck).includes(heading.text)
+  ));
+  if (headings.length !== 1) {
+    return { ok: true, family: schema.family, semanticDigest: canonicalSemanticDigest(content), diagnostics: [] };
+  }
+
+  const bodyBounds = sectionBodyBounds(content, headings[0]!, scanned);
+  const body = content.slice(bodyBounds.start, bodyBounds.end);
+  const diagnostics = schema.stateCheckPatterns
+    .filter((pattern) => !new RegExp(pattern, 'm').test(body))
+    .map((pattern) => diagnostic(
+      'ARTIFACT_STATE_CHECK_PATTERN_MISSING',
+      `state-check section is missing required command '${pattern}'`,
+      stateCheck.id,
+      lineNumber(content, headings[0]!.start)
+    ));
+  return {
+    ok: diagnostics.length === 0,
+    family: schema.family,
+    semanticDigest: canonicalSemanticDigest(content),
+    diagnostics
+  };
+}
+
 function inspectArtifactContract(
   content: string,
-  schema: ArtifactSchema
+  schema: ArtifactSchema,
+  options: { scopeStateCheckSection?: boolean } = {}
 ): ArtifactStructureResult {
   const structure = inspectArtifactStructure(content, schema);
+  const stateCheck = inspectArtifactStateCheck(content, schema, options.scopeStateCheckSection === true);
   const patterns = inspectArtifactPatterns(content, schema);
-  const diagnostics = [...structure.diagnostics, ...patterns.diagnostics];
+  const diagnostics = [...structure.diagnostics, ...stateCheck.diagnostics, ...patterns.diagnostics];
   return {
     ok: diagnostics.length === 0,
     family: schema.family,
@@ -294,23 +344,6 @@ function artifactRound(family: ArtifactSchemaFamily, artifact: string): number |
   return identity?.family === family ? identity.round : null;
 }
 
-function qualificationAuditForInit(request: ArtifactInitRequest): { ok: true; content: string } | { ok: false; code: string; message: string } {
-  let taskContent: string;
-  try {
-    taskContent = readStableFileSync(path.join(request.taskDir, 'task.md'), { maxBytes: 1024 * 1024 }).bytes.toString('utf8');
-  } catch (error) {
-    return { ok: false, code: 'ARTIFACT_INIT_TASK_READ_FAILED', message: error instanceof Error ? error.message : String(error) };
-  }
-  const qualification = parseTaskQualification(taskContent);
-  if (!qualification.ok) return qualification;
-  if (!qualification.qualification.present) return { ok: true, content: '' };
-  const relations = expectedQualificationRelations(taskContent, request.family);
-  if (!relations.ok) return relations;
-  const audit = buildQualificationAudit(taskContent, { upstreamRelations: relations.relations ?? [] });
-  if (!audit.ok) return audit;
-  return { ok: true, content: `\n## 资格审计\n\n${renderQualificationAudit(audit.audit)}\n` };
-}
-
 function initializeArtifactSkeleton(request: ArtifactInitRequest): ArtifactFileResult {
   const schema = getArtifactSchema(request.family);
   if (!schema) return resultFailure('ARTIFACT_FAMILY_UNKNOWN', `unknown artifact family '${request.family}'`);
@@ -333,9 +366,7 @@ function initializeArtifactSkeleton(request: ArtifactInitRequest): ArtifactFileR
         artifact: request.artifact,
         ...(request.locale ? { locale: request.locale } : {})
       });
-      const audit = qualificationAuditForInit(request);
-      if (!audit.ok) return resultFailure(audit.code, audit.message);
-      const content = `${skeleton.trimEnd()}${audit.content}`;
+      const content = skeleton.trimEnd();
       const tempPath = path.join(request.taskDir, `.${request.artifact}.init-${process.pid}-${Date.now()}.tmp`);
       try {
         fs.writeFileSync(tempPath, content, { encoding: 'utf8', mode: 0o600, flag: 'wx' });

package/lib/task/artifact-receipts.ts

@@ -64,7 +64,10 @@ function validateReceiptShape(event: ArtifactReceiptEvent, output: string, input
   const inputIdentity = parseArtifactName(input);
   if (!outputIdentity || !inputIdentity) throw new ArtifactReceiptError(`receipt artifact identity is invalid: ${output} -> ${input}`);
   const shape = RECEIPT_SHAPES[event];
-  if (outputIdentity.family !== shape.output || inputIdentity.family !== shape.input) {
+  const inputMatches = event === 'code.completed'
+    ? inputIdentity.family === 'analysis' || inputIdentity.family === 'plan'
+    : inputIdentity.family === shape.input;
+  if (outputIdentity.family !== shape.output || !inputMatches) {
     throw new ArtifactReceiptError(`receipt event '${event}' does not match ${output} -> ${input}`);
   }
 }