@fitlab-ai/agent-infra 0.11.6 → 0.11.8

package/dist/lib/task/finalization.js

@@ -5,8 +5,11 @@ import { syncPlatformComment } from '../platform/issue-comments.js';
 import { canonicalizeSummaryBody } from '../platform/comment-safety.js';
 import { backfillCompletionComments, inspectCompletionBackfillEligibility } from '../platform/completion-backfill.js';
 import { taskIssueIdentity } from '../platform/task-identities.js';
+import { inspectPlatformIssue, syncPlatformIssue } from '../platform/issues.js';
+import { resourceIdentityEquals } from '../platform/resource-identity.js';
 import { parseTaskFrontmatter } from './frontmatter.js';
-import { applyTaskLifecycle, inspectTaskLifecycleProgress } from './lifecycle.js';
+import { recoverPlatformOperations } from './platform-operation-recovery.js';
+import { applyTaskLifecycle, inspectTaskLifecycleProgress, previewTaskCompletion } from './lifecycle.js';
 import { resolveTaskRef } from './resolve-ref.js';
 import { inspectShortIdRegistry } from './short-id.js';
 import { TaskExecutionLockError, withTaskExecutionLock } from './task-execution-lock.js';
@@ -329,19 +332,16 @@ function capabilityError(code, message) {
     Object.assign(error, { code });
     return error;
 }
-function hasPreparedTaskDocument(repoRoot, taskId) {
+function hasFinalizationTaskDocument(repoRoot, taskId) {
     const resolved = resolveTaskRef(taskId, { repoRoot });
-    if (!resolved.ok)
-        return false;
-    if (resolved.state === 'completed')
-        return true;
-    if (resolved.state !== 'active')
+    if (!resolved.ok || (resolved.state !== 'active' && resolved.state !== 'completed'))
         return false;
     try {
-        return parseTaskFrontmatter(fs.readFileSync(resolved.taskMdPath, 'utf8')).status === 'completed';
+        const journal = JSON.parse(fs.readFileSync(path.join(resolved.taskDir, '.task-lifecycle.json'), 'utf8'));
+        return journal.taskId === taskId && journal.intent === 'complete';
     }
     catch {
-        return false;
+        return resolved.state === 'completed';
     }
 }
 function mutationKeys(value) {
@@ -388,7 +388,14 @@ function mutationPatch(current, mutation) {
     if (mutation.scope === 'task-comment') {
         if (mutation.operation === 'succeeded') {
             const warnings = resolveStepWarnings(current, 'task-comment');
-            return { taskComment: mutation.state, warningProjection: warnings.length > 0 ? 'pending' : 'done', warnings, lastError: null };
+            const retryWithResolvedWarning = mutation.state === 'done'
+                && current.warnings.some((warning) => warning.step === 'task-comment' && warning.status === 'open');
+            return {
+                taskComment: retryWithResolvedWarning ? 'pending' : mutation.state,
+                warningProjection: warnings.length > 0 || retryWithResolvedWarning ? 'pending' : 'done',
+                warnings,
+                lastError: null
+            };
         }
         const warnings = replaceWarning(current, warningFromError('task-comment', mutation.error), 'open');
         return { taskComment: 'pending', warningProjection: 'pending', warnings, lastError: mutation.error };
@@ -413,8 +420,8 @@ function mutationPatch(current, mutation) {
         : { warningProjection: 'pending', lastError: mutation.error };
 }
 function applyFinalizationReceiptMutationUnderLock(repoRoot, receipt, capability, mutation, consumed) {
-    if (!hasPreparedTaskDocument(repoRoot, receipt.taskId)) {
-        throw capabilityError('FINALIZATION_SCOPE_INVALID', 'finalization capability requires an active prepared task or a completed task');
+    if (!hasFinalizationTaskDocument(repoRoot, receipt.taskId)) {
+        throw capabilityError('FINALIZATION_SCOPE_INVALID', 'finalization capability requires an active task or a completed task');
     }
     const current = readReceipt(repoRoot, receipt.taskId);
     if (!current || current.receiptId !== receipt.receiptId || current.revision !== receipt.revision) {
@@ -426,8 +433,8 @@ function applyFinalizationReceiptMutationUnderLock(repoRoot, receipt, capability
     return next;
 }
 function applyFinalizationReceiptMutation(repoRoot, receipt, capability, mutation) {
-    if (!hasPreparedTaskDocument(repoRoot, receipt.taskId)) {
-        throw capabilityError('FINALIZATION_SCOPE_INVALID', 'finalization capability requires an active prepared task or a completed task');
+    if (!hasFinalizationTaskDocument(repoRoot, receipt.taskId)) {
+        throw capabilityError('FINALIZATION_SCOPE_INVALID', 'finalization capability requires an active task or a completed task');
     }
     return withTaskExecutionLock(repoRoot, receipt.taskId, 'task-finalization.receipt-mutation', () => applyFinalizationReceiptMutationUnderLock(repoRoot, receipt, capability, mutation, new Set()));
 }
@@ -483,7 +490,15 @@ async function syncPendingTaskComment(input) {
         };
     }
     try {
-        const result = await commentSync(taskId, { kind: 'task', agent, cwd: repoRoot });
+        const result = await commentSync(taskId, {
+            kind: 'task', agent, cwd: repoRoot, dependency: 'required',
+            ...(input.projection ? {
+                taskProjection: {
+                    content: input.projection.content,
+                    sha256: createHash('sha256').update(input.projection.content).digest('hex')
+                }
+            } : {})
+        });
         const step = commentStep(result);
         if (result.status === 'applied' || result.status === 'no-op') {
             const skipped = result.error?.code === 'ISSUE_NOT_LINKED';
@@ -492,6 +507,14 @@ async function syncPendingTaskComment(input) {
                 scope: 'task-comment', operation: 'succeeded', state: skipped ? 'skipped' : 'done'
             }, consumedCapabilities);
             receipt = reconcileWarningProjection(repoRoot, taskId, receipt, consumedCapabilities);
+            if (!skipped && receipt.taskComment === 'pending') {
+                const retry = await syncPendingTaskComment({
+                    ...input,
+                    receipt,
+                    projection: input.refreshProjection?.() ?? input.projection
+                });
+                return { ...retry, changed: result.changed || retry.changed };
+            }
             return { receipt, step: skipped ? { ...step, status: 'skipped' } : step, changed: result.changed, error: null };
         }
         const detail = step.error ?? { code: 'COMMENT_SYNC_FAILED', message: 'task comment synchronization failed', retryable: true };
@@ -540,8 +563,8 @@ async function syncPendingSummary(input) {
     let { receipt } = input;
     try {
         const resolved = resolveTaskRef(input.taskId, { repoRoot: input.repoRoot });
-        if (!resolved.ok || !hasPreparedTaskDocument(input.repoRoot, input.taskId))
-            throw Object.assign(new Error('prepared task is unavailable for summary sync'), { code: 'SUMMARY_STAGING_INVALID' });
+        if (!resolved.ok || (resolved.state !== 'active' && resolved.state !== 'completed'))
+            throw Object.assign(new Error('task is unavailable for summary sync'), { code: 'SUMMARY_STAGING_INVALID' });
         if (!fs.existsSync(path.join(resolved.taskDir, '.delivery-summary.json'))) {
             receipt = updateReceipt(input.repoRoot, receipt, { summary: 'skipped', lastError: null });
             return { receipt, step: { status: 'skipped', changed: false, error: null }, changed: false, error: null };
@@ -555,7 +578,8 @@ async function syncPendingSummary(input) {
         const summary = readDeliverySummary(resolved.taskDir, input.taskId);
         const result = await input.commentSync(input.taskId, {
             kind: 'summary', agent: input.agent, body: summary.body, cwd: input.repoRoot,
-            summaryAuthorization: { sha256: summary.sha256 }
+            summaryAuthorization: { sha256: summary.sha256 },
+            dependency: 'required'
         });
         const step = commentStep(result);
         if (result.status === 'applied' || result.status === 'no-op') {
@@ -565,7 +589,7 @@ async function syncPendingSummary(input) {
             receipt = updateReceipt(input.repoRoot, receipt, {
                 summary: skipped ? 'skipped' : 'done',
                 taskComment: resolvedWarning ? 'pending' : receipt.taskComment,
-                warningProjection: warnings.some((warning) => warning.status === 'open') ? 'pending' : 'done',
+                warningProjection: warnings.some((warning) => warning.status === 'open') || resolvedWarning ? 'pending' : 'done',
                 warnings,
                 lastError: null
             });
@@ -637,6 +661,8 @@ async function prepareUnderLock(request, taskId, options) {
     const lifecycle = options.lifecycle ?? applyTaskLifecycle;
     const backfill = options.backfill ?? backfillCompletionComments;
     const commentSync = options.commentSync ?? syncPlatformComment;
+    const issueSync = options.issueSync ?? syncPlatformIssue;
+    const issueInspect = options.issueInspect ?? inspectPlatformIssue;
     const verify = options.verify ?? verifyTaskEvent;
     const consumedCapabilities = new Set();
     let receipt;
@@ -679,6 +705,100 @@ async function prepareUnderLock(request, taskId, options) {
             return failed(taskId, errorOf(error, 'TASK_FINALIZATION_PREFLIGHT_FAILED', true));
         }
     }
+    if (preflightState.ok && preflightState.state === 'active') {
+        const recovery = await recoverPlatformOperations(taskId, 'all', { agent: request.agent, cwd: repoRoot });
+        if (recovery.status !== 'applied' && recovery.status !== 'no-op') {
+            return failed(taskId, recovery.error ?? {
+                code: 'PLATFORM_OPERATION_RECOVERY_PENDING',
+                message: 'Pending platform operations remain unresolved',
+                retryable: true
+            });
+        }
+        const taskContent = fs.readFileSync(preflightState.taskMdPath, 'utf8');
+        const taskFrontmatter = parseTaskFrontmatter(taskContent);
+        const issueIdentity = taskIssueIdentity(taskFrontmatter);
+        if (issueIdentity) {
+            const base = typeof taskFrontmatter.delivery_base_ref === 'string' ? taskFrontmatter.delivery_base_ref.trim() : '';
+            let synced;
+            try {
+                synced = await issueSync(taskId, {
+                    agent: request.agent, cwd: repoRoot, requirements: true, issueType: true, fields: true,
+                    ...(base ? { inLabels: 'from-diff', base } : {}), dependency: 'required'
+                });
+            }
+            catch (error) {
+                const detail = errorOf(error, 'FINALIZATION_ISSUE_METADATA_FAILED', true);
+                return failed(taskId, detail);
+            }
+            const issueOperations = synced.operations;
+            const badOperation = issueOperations?.find((operation) => ['requirements', 'issue-type', 'fields', ...(base ? ['labels:in'] : [])].includes(operation.name)
+                && operation.status !== 'applied' && operation.status !== 'no-op');
+            if ((synced.status !== 'applied' && synced.status !== 'no-op') || synced.error || badOperation) {
+                const error = synced.error ?? {
+                    code: badOperation?.reasonCode || 'FINALIZATION_ISSUE_METADATA_UNCONFIRMED',
+                    message: `Required Issue metadata operation '${badOperation?.name ?? 'sync'}' was not confirmed`,
+                    retryable: true
+                };
+                return failed(taskId, errorOf(error, 'FINALIZATION_ISSUE_METADATA_FAILED', true));
+            }
+            let inspected;
+            try {
+                inspected = await issueInspect(taskId, { cwd: repoRoot });
+            }
+            catch (error) {
+                return failed(taskId, errorOf(error, 'FINALIZATION_ISSUE_INSPECT_FAILED', true));
+            }
+            if (inspected.status !== 'no-op' || inspected.error || !inspected.issue
+                || !resourceIdentityEquals(inspected.issue.identity, issueIdentity)) {
+                return failed(taskId, inspected.error ?? {
+                    code: 'FINALIZATION_ISSUE_IDENTITY_UNCONFIRMED',
+                    message: 'Required Issue metadata could not be reread under the bound Issue identity',
+                    retryable: true
+                });
+            }
+            for (const name of ['requirements', 'issue-type', 'fields', ...(base ? ['labels:in'] : [])]) {
+                const operation = issueOperations?.find((candidate) => candidate.name === name);
+                if (!operation)
+                    return failed(taskId, {
+                        code: 'FINALIZATION_ISSUE_METADATA_UNCONFIRMED',
+                        message: `Required Issue metadata operation '${name}' was not reported`, retryable: true
+                    });
+                const before = synced.issue;
+                const remote = inspected.issue;
+                if (name === 'requirements') {
+                    const expected = typeof operation.value === 'string' ? operation.value : before?.body;
+                    if (expected === undefined || remote.body !== expected)
+                        return failed(taskId, {
+                            code: 'FINALIZATION_ISSUE_REQUIREMENTS_UNCONFIRMED', message: 'Issue requirements did not match the verified target', retryable: true
+                        });
+                }
+                else if (name === 'issue-type') {
+                    const expected = typeof operation.value === 'string' ? operation.value : before?.issueType;
+                    if (!expected || remote.issueType !== expected)
+                        return failed(taskId, {
+                            code: 'FINALIZATION_ISSUE_TYPE_UNCONFIRMED', message: 'Issue Type did not match the verified target', retryable: true
+                        });
+                }
+                else if (name === 'labels:in') {
+                    const expected = Array.isArray(operation.value) ? operation.value : before?.labels;
+                    if (!expected || expected.filter((label) => label.startsWith('in:')).sort().join('\0')
+                        !== remote.labels.filter((label) => label.startsWith('in:')).sort().join('\0'))
+                        return failed(taskId, {
+                            code: 'FINALIZATION_IN_LABELS_UNCONFIRMED', message: 'Issue in-labels did not match the verified target', retryable: true
+                        });
+                }
+                else {
+                    const expected = operation.value && typeof operation.value === 'object'
+                        ? operation.value
+                        : before?.fields;
+                    if (!expected || Object.entries(expected).some(([field, value]) => remote.fields[field] !== value))
+                        return failed(taskId, {
+                            code: 'FINALIZATION_ISSUE_FIELDS_UNCONFIRMED', message: 'Pinned Issue fields did not match the verified target', retryable: true
+                        });
+                }
+            }
+        }
+    }
     let changed = false;
     let backfillResult = null;
     let runBackfill = shouldRunBackfill(receipt);
@@ -748,9 +868,10 @@ async function prepareUnderLock(request, taskId, options) {
     else
         backfillResult = { status: 'no-op', changed: false, error: null };
     let lifecycleResult = null;
+    let projection;
     try {
         const resolved = resolveTaskRef(taskId, { repoRoot });
-        if (receipt.lifecycle === 'done' && resolved.ok && resolved.state === 'completed') {
+        if (resolved.ok && resolved.state === 'completed') {
             lifecycleResult = { status: 'no-op', changed: false, error: null };
             receipt = updateReceipt(repoRoot, receipt, { lifecycle: 'done', lastError: null });
         }
@@ -762,6 +883,12 @@ async function prepareUnderLock(request, taskId, options) {
                 return terminalResult(taskId, receipt, { backfill: backfillResult, lifecycle: lifecycleResult, taskComment: null, verification: null }, result.changed, lifecycleResult.error);
             }
             changed = changed || result.changed;
+            if (result.timestamp && result.agentInfraVersion) {
+                projection = previewTaskCompletion(taskId, request.agent, {
+                    repoRoot,
+                    metadataProvider: () => ({ timestamp: result.timestamp, agentInfraVersion: result.agentInfraVersion })
+                });
+            }
         }
     }
     catch (error) {
@@ -774,6 +901,12 @@ async function prepareUnderLock(request, taskId, options) {
     }
     let taskComment = null;
     receipt = reconcileWarningProjection(repoRoot, taskId, receipt, consumedCapabilities);
+    const currentProjection = () => projection
+        ? previewTaskCompletion(taskId, request.agent, {
+            repoRoot,
+            metadataProvider: () => ({ timestamp: projection.timestamp, agentInfraVersion: projection.agentInfraVersion })
+        })
+        : undefined;
     let verification = null;
     if (receipt.verification !== 'pending') {
         verification = { status: receipt.verification === 'skipped' ? 'skipped' : 'no-op', changed: false, error: null };
@@ -796,7 +929,7 @@ async function prepareUnderLock(request, taskId, options) {
                 });
                 receipt = reconcileWarningProjection(repoRoot, taskId, receipt, consumedCapabilities);
                 const finalComment = await syncPendingTaskComment({
-                    repoRoot, taskId, agent: request.agent, receipt, commentSync, consumedCapabilities
+                    repoRoot, taskId, agent: request.agent, receipt, projection: currentProjection(), refreshProjection: currentProjection, commentSync, consumedCapabilities
                 });
                 receipt = finalComment.receipt;
                 if (finalComment.step.status !== 'no-op')
@@ -814,7 +947,7 @@ async function prepareUnderLock(request, taskId, options) {
                 });
                 receipt = reconcileWarningProjection(repoRoot, taskId, receipt, consumedCapabilities);
                 const warningComment = await syncPendingTaskComment({
-                    repoRoot, taskId, agent: request.agent, receipt, commentSync, consumedCapabilities
+                    repoRoot, taskId, agent: request.agent, receipt, projection: currentProjection(), refreshProjection: currentProjection, commentSync, consumedCapabilities
                 });
                 receipt = warningComment.receipt;
                 taskComment = warningComment.step;
@@ -846,7 +979,7 @@ async function prepareUnderLock(request, taskId, options) {
                 }, changed, hardError);
             }
             try {
-                const warningComment = await syncPendingTaskComment({ repoRoot, taskId, agent: request.agent, receipt, commentSync, consumedCapabilities });
+                const warningComment = await syncPendingTaskComment({ repoRoot, taskId, agent: request.agent, receipt, projection: currentProjection(), refreshProjection: currentProjection, commentSync, consumedCapabilities });
                 receipt = warningComment.receipt;
                 if (warningComment.step.status !== 'no-op')
                     taskComment = warningComment.step;
@@ -868,7 +1001,7 @@ async function prepareUnderLock(request, taskId, options) {
     receipt = reconcileWarningProjection(repoRoot, taskId, receipt, consumedCapabilities);
     if (receipt.taskComment === 'pending') {
         const finalComment = await syncPendingTaskComment({
-            repoRoot, taskId, agent: request.agent, receipt, commentSync, consumedCapabilities
+            repoRoot, taskId, agent: request.agent, receipt, projection: currentProjection(), refreshProjection: currentProjection, commentSync, consumedCapabilities
         });
         receipt = finalComment.receipt;
         taskComment = finalComment.step;

package/dist/lib/task/invalidation-command.js

@@ -38,8 +38,10 @@ function reconcileTaskInvalidation(taskRef, options = {}) {
         if (target.status === 'completed')
             continue;
         if (target.targetKind === 'receipt') {
-            const receipt = receipts.find((candidate) => candidate.output === target.targetArtifact);
-            if (!receipt || receipt.inputSha256 !== target.targetSha256) {
+            const receiptExists = Boolean(target.targetInput) && receipts.some((candidate) => candidate.output === target.targetArtifact
+                && candidate.input === target.targetInput
+                && candidate.inputSha256 === target.targetSha256);
+            if (!receiptExists) {
                 return {
                     status: 'failed', changed: false, taskId: resolved.taskId, processed: 0, remaining: beforePending,
                     error: { code: 'INVALIDATION_TARGET_HASH_CONFLICT', message: `invalidation receipt target '${target.targetArtifact}' changed before reconcile` }

package/dist/lib/task/invalidation.js

@@ -1,4 +1,5 @@
 import { createHash } from 'node:crypto';
+import { parseArtifactName } from './artifact-name.js';
 import { findSectionRange, parseTable } from './sections.js';
 import { scanVisibleMarkdown } from './markdown.js';
 const INVALIDATION_HEADINGS = ['产物失效记录', 'Artifact Invalidation'];
@@ -7,6 +8,10 @@ const OPERATION_COLUMNS = [
     'status', 'processed', 'total', 'created_at', 'updated_at', 'completed_at', 'error'
 ];
 const TARGET_COLUMNS = [
+    'target_id', 'operation_id', 'target_kind', 'target_family', 'target_artifact', 'target_input',
+    'target_round', 'target_sha256', 'status', 'reason_code', 'updated_at'
+];
+const LEGACY_TARGET_COLUMNS = [
     'target_id', 'operation_id', 'target_kind', 'target_family', 'target_artifact',
     'target_round', 'target_sha256', 'status', 'reason_code', 'updated_at'
 ];
@@ -20,7 +25,7 @@ function operationIdFor(source) {
     return `INV-${hashIdentity([source.sourceFamily, source.sourceArtifact, source.sourceRound, source.sourceSha256])}`;
 }
 function targetIdFor(operationId, target) {
-    return `INV-T-${hashIdentity([operationId, target.targetKind, target.targetFamily, target.targetArtifact, target.targetRound, target.targetSha256])}`;
+    return `INV-T-${hashIdentity([operationId, target.targetKind, target.targetFamily, target.targetArtifact, ...(target.targetKind === 'receipt' && target.targetInput ? [target.targetInput] : []), target.targetRound, target.targetSha256])}`;
 }
 function createInvalidationOperation(source, targets = []) {
     const operationId = source.operationId ?? operationIdFor(source);
@@ -31,14 +36,28 @@ function createInvalidationOperation(source, targets = []) {
         createdAt: source.createdAt, updatedAt: source.updatedAt, completedAt: '', error: ''
     };
 }
-function parseInvalidationTable(body, heading, columns) {
+function parseInvalidationTable(body, heading, columnChoices) {
     const section = findSectionRange(body, [heading], 3);
     const lines = scanVisibleMarkdown(body).lines.filter((line) => line.text.trim());
-    const table = parseTable(lines.map((line) => line.text).join('\n'), { sectionAliases: [heading], columns });
+    let table = null;
+    let legacy = false;
+    for (const columns of columnChoices) {
+        try {
+            const candidate = parseTable(lines.map((line) => line.text).join('\n'), { sectionAliases: [heading], columns });
+            if (candidate) {
+                table = candidate;
+                legacy = columns === LEGACY_TARGET_COLUMNS;
+                break;
+            }
+        }
+        catch {
+            // Try the next explicitly supported schema.
+        }
+    }
     if (!section || !table || lines.filter((line) => line.start >= section.bodyStart && line.start < section.end).length !== table.rows.length + 2) {
         throw new Error(`invalidation ${heading} section must contain only its canonical table`);
     }
-    return table.rows;
+    return { rows: table.rows, legacy };
 }
 function required(value, field) {
     if (!value)
@@ -62,9 +81,10 @@ function parseInvalidationDocument(content) {
         return { ok: true, present: false, document: { operations: [], targets: [] } };
     try {
         const body = content.slice(section.bodyStart, section.end);
-        const operationRows = parseInvalidationTable(body, 'Operations', OPERATION_COLUMNS);
-        const targetRows = parseInvalidationTable(body, 'Targets', TARGET_COLUMNS);
-        const operations = operationRows.map(({ values: row }) => ({
+        const operationRows = parseInvalidationTable(body, 'Operations', [OPERATION_COLUMNS]);
+        // TODO(compat): Remove legacy target table parsing and completed receipt targets without target_input once a workspace inventory confirms all persisted targets have input identities.
+        const targetRows = parseInvalidationTable(body, 'Targets', [TARGET_COLUMNS, LEGACY_TARGET_COLUMNS]);
+        const operations = operationRows.rows.map(({ values: row }) => ({
             operationId: required(row.operation_id, 'operation_id'), sourceFamily: required(row.source_family, 'source_family'),
             sourceArtifact: required(row.source_artifact, 'source_artifact'), sourceRound: numberValue(row.source_round, 'source_round', false),
             sourceSha256: required(row.source_sha256, 'source_sha256'), status: status(row.status, 'operation status'),
@@ -72,10 +92,11 @@ function parseInvalidationDocument(content) {
             createdAt: required(row.created_at, 'created_at'), updatedAt: required(row.updated_at, 'updated_at'),
             completedAt: row.completed_at ?? '', error: row.error ?? ''
         }));
-        const targets = targetRows.map(({ values: row }) => ({
+        const targets = targetRows.rows.map(({ values: row }) => ({
             targetId: required(row.target_id, 'target_id'), operationId: required(row.operation_id, 'operation_id'),
             targetKind: row.target_kind, targetFamily: required(row.target_family, 'target_family'),
             targetArtifact: required(row.target_artifact, 'target_artifact'), targetRound: numberValue(row.target_round, 'target_round', false),
+            ...(row.target_input ? { targetInput: row.target_input } : {}),
             targetSha256: required(row.target_sha256, 'target_sha256'), status: status(row.status, 'target status'),
             reasonCode: required(row.reason_code, 'reason_code'), updatedAt: required(row.updated_at, 'updated_at')
         }));
@@ -100,6 +121,14 @@ function parseInvalidationDocument(content) {
             targetIds.add(target.targetId);
             if (!operationIds.has(target.operationId))
                 throw new Error(`target '${target.targetId}' references an unknown operation`);
+            if (target.targetKind === 'receipt') {
+                if (!target.targetInput && target.status !== 'completed')
+                    throw new Error(`receipt target '${target.targetId}' input identity is required`);
+                if (target.targetInput && !parseArtifactName(target.targetInput))
+                    throw new Error(`receipt target '${target.targetId}' input identity is invalid`);
+            }
+            else if (target.targetInput)
+                throw new Error(`non-receipt target '${target.targetId}' cannot have an input identity`);
             if (target.targetId !== targetIdFor(target.operationId, target))
                 throw new Error(`target '${target.targetId}' has a non-canonical identity`);
             if (!/^[a-f0-9]{64}$/.test(target.targetSha256))
@@ -143,7 +172,7 @@ function renderInvalidation(document) {
         '### Targets', '',
         table(TARGET_COLUMNS, targets.map((row) => [
             row.targetId, row.operationId, row.targetKind, row.targetFamily, row.targetArtifact,
-            row.targetRound, row.targetSha256, row.status, row.reasonCode, row.updatedAt
+            row.targetInput ?? '', row.targetRound, row.targetSha256, row.status, row.reasonCode, row.updatedAt
         ]))
     ].join('\n');
 }

package/dist/lib/task/lifecycle.js

@@ -4,7 +4,8 @@ import path from 'node:path';
 import { appendActivityEntry, locateActivityLog } from './activity-log.js';
 import { artifactFamilyCatalog, inspectArtifactDirectory } from './artifact-lifecycle.js';
 import { parseArtifactName } from './artifact-name.js';
-import { parseTypedTaskFrontmatter } from './frontmatter.js';
+import { parseTypedTaskFrontmatter, updateTaskFrontmatter } from './frontmatter.js';
+import { upsertSection } from './sections.js';
 import { locateHotTaskDirs, resolveTaskRef, TASK_ID_RE } from './resolve-ref.js';
 import { configuredShortIdLength, executeShortIdCommand, loadShortIdByTaskId, mutateShortIdRegistry } from './short-id.js';
 import { captureTaskWriteMetadata, writeTask } from './write.js';
@@ -261,6 +262,31 @@ function mutationsFor(request, content, metadata, restoredFiles, allowMissingAct
     }
     return mutations;
 }
+function previewTaskCompletion(taskRef, agent, options = {}) {
+    const resolved = resolveTaskRef(taskRef, { repoRoot: options.repoRoot });
+    if (!resolved.ok)
+        throw Object.assign(new Error(resolved.message), { code: resolved.code });
+    if (resolved.state !== 'active')
+        throw Object.assign(new Error(`task ${resolved.taskId} is ${resolved.state}, expected active`), { code: 'TASK_STATE_MISMATCH' });
+    const original = fs.readFileSync(resolved.taskMdPath, 'utf8');
+    const metadata = (options.metadataProvider ?? captureTaskWriteMetadata)();
+    if (!isValidAgentInfraVersion(metadata.agentInfraVersion))
+        throw Object.assign(new Error('metadata agentInfraVersion is invalid'), { code: 'LIFECYCLE_METADATA_FAILED' });
+    const mutations = mutationsFor({ taskRef: resolved.taskId, intent: 'complete', agent }, original, metadata, 0);
+    if (!Array.isArray(mutations))
+        throw Object.assign(new Error(mutations.message), { code: mutations.code });
+    let content = original;
+    for (const mutation of mutations) {
+        if (mutation.kind === 'frontmatter')
+            content = updateTaskFrontmatter(content, mutation.set, mutation.remove);
+        else if (mutation.kind === 'section')
+            content = upsertSection(content, mutation).content;
+        else
+            throw Object.assign(new Error('completion projection contains an unsupported mutation'), { code: 'LIFECYCLE_PROJECTION_INVALID' });
+    }
+    content = updateTaskFrontmatter(content, { updated_at: metadata.timestamp, agent_infra_version: metadata.agentInfraVersion });
+    return { taskId: resolved.taskId, content, timestamp: metadata.timestamp, agentInfraVersion: metadata.agentInfraVersion };
+}
 function writeJournal(file, journal, io, create = false) {
     const temporary = `${file}.tmp.${process.pid}.${Math.random().toString(36).slice(2)}`;
     io.writeFileSync(temporary, `${JSON.stringify(journal, null, 2)}\n`, 'wx');
@@ -593,6 +619,16 @@ function applyTaskLifecycle(requestInput, options = {}) {
             completed.add('registry-committed');
     }
     let taskOperations = [];
+    if (options.prepareOnly && !matchingCompletion(io.readFileSync(path.join(sourcePath, 'task.md')), request, restoredFiles)) {
+        return {
+            ...failed(request, { code: '', message: '' }), status: 'applied', changed: true, error: null,
+            taskId, sourceState, targetState: spec.target, sourcePath, targetPath,
+            task: { operations: [] }, directory: { effect: 'unchanged', changed: false },
+            shortId: { effect: 'unchanged', shortId: null, changed: false },
+            timestamp: journal.metadata.timestamp, agentInfraVersion: journal.metadata.agentInfraVersion,
+            journalPath, completedSteps: [...completed], pendingSteps: STEPS.filter((step) => !completed.has(step))
+        };
+    }
     if (matchingCompletion(io.readFileSync(path.join(sourcePath, 'task.md')), request, restoredFiles))
         completed.add('task-written');
     if (!completed.has('task-written')) {
@@ -724,5 +760,5 @@ function applyTaskLifecycle(requestInput, options = {}) {
         journalPath, completedSteps: [...completed], pendingSteps: []
     };
 }
-export { lifecycleIntentCatalog, lifecycleFailureCatalog, lifecycleProducerCatalog, applyTaskLifecycle };
+export { lifecycleIntentCatalog, lifecycleFailureCatalog, lifecycleProducerCatalog, applyTaskLifecycle, previewTaskCompletion };
 //# sourceMappingURL=lifecycle.js.map

package/dist/lib/task/local-artifact-finalization.js

@@ -6,6 +6,7 @@ import { parseLifecyclePathDecision } from './lifecycle-path.js';
 import { resolveTaskRef } from './resolve-ref.js';
 import { canonicalSemanticDigest, inspectArtifactContract, sha256Content } from './artifact-operations.js';
 import { getArtifactSchema } from './artifact-schema.js';
+import { validateQualificationAudit } from './qualification-audit.js';
 const LOCAL_ARTIFACT_REQUIRED_SECTIONS = {
     analysis: getArtifactSchema('analysis').sections.map((section) => section.headings.zh),
     plan: getArtifactSchema('plan').sections.map((section) => section.headings.zh),
@@ -82,19 +83,32 @@ function prepareLocalArtifact(request, candidate) {
     const validation = validateLocalArtifact(content, {
         family: request.family, requiredSections: request.requiredSections
     });
+    let qualificationError = null;
+    try {
+        const taskContent = fs.readFileSync(resolved.taskMdPath, 'utf8');
+        const qualification = validateQualificationAudit(taskContent, content, { family: request.family, artifact: request.artifact });
+        if (!qualification.ok)
+            qualificationError = `${qualification.code}: ${qualification.message}`;
+    }
+    catch (error) {
+        qualificationError = `QUALIFICATION_AUDIT_INVALID: ${String(error)}`;
+    }
     const artifactSha256 = sha256Content(content);
+    const diagnostics = qualificationError
+        ? [...validation.diagnostics, { code: 'LOCAL_STRUCTURAL_INVALID', message: qualificationError, line: null }]
+        : validation.diagnostics;
     const result = failedFinalization(request, {
         code: 'LOCAL_ARTIFACT_INVALID',
-        message: validation.diagnostics.map((item) => `${item.code}: ${item.message}`).join('; ')
+        message: diagnostics.map((item) => `${item.code}: ${item.message}`).join('; ')
     }, {
         taskId: resolved.taskId, taskDir: resolved.taskDir, artifactSha256,
-        semanticDigest: validation.semanticDigest, diagnostics: validation.diagnostics
+        semanticDigest: validation.semanticDigest, diagnostics
     });
     // Trusted local operators edit the canonical artifact directly.  A
     // finalization result is a fresh observation of those bytes, never a
     // capability minted by an earlier recovery attempt or generation.
     return {
-        result: validation.ok ? { ...result, status: 'passed', error: null } : result,
+        result: validation.ok && !qualificationError ? { ...result, status: 'passed', error: null } : result,
         content,
         repoRoot: resolved.repoRoot,
         lockAlreadyHeld: request.lockAlreadyHeld