@fitlab-ai/agent-infra 0.9.13 → 0.9.15

package/dist/lib/task/events.js

@@ -1,7 +1,8 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { appendActivityEntry, locateActivityLog, pairEntries, startedBackedRows } from './activity-log.js';
-import { buildArtifactLinkSection, artifactName, inspectArtifactDirectory, parseReviewedInputReference, parseCodePlanInputReference, parseArtifactName, resolveArtifactContext, validateCompletedArtifact } from './artifact-lifecycle.js';
+import { buildArtifactLinkSection, inspectArtifactDirectory, parseReviewedInputReference, parseCodePlanInputReference, resolveArtifactContext, validateCompletedArtifact } from './artifact-lifecycle.js';
+import { artifactName, parseArtifactName } from './artifact-name.js';
 import { ArtifactReceiptError, parseArtifactReceipts, sha256File, upsertArtifactReceipt } from './artifact-receipts.js';
 import { parseTypedTaskFrontmatter } from './frontmatter.js';
 import { consumeImplementationInput, IMPLEMENTATION_INPUT_ALIASES, parseImplementationInputs, renderImplementationInputs } from './implementation-inputs.js';
@@ -14,11 +15,16 @@ import { commitOrchestrationStageCompletion } from './orchestration.js';
 import { TaskExecutionLockError, withTaskExecutionLock } from './task-execution-lock.js';
 import { captureTaskWriteMetadata, writeTask } from './write.js';
 import { allowsManualOverride } from './guard-override.js';
-import { LOCAL_ARTIFACT_REQUIRED_PATTERNS, LOCAL_ARTIFACT_REQUIRED_SECTIONS, consumeLocalArtifactFinalizationIntent, readLocalArtifactFinalizationIntent, validateLocalArtifact } from './local-artifact-finalization.js';
-import { loadVerificationConfig } from './verification-config.js';
+import { consumeLocalArtifactFinalizationIntent, readLocalArtifactFinalizationIntent, validateLocalArtifact } from './local-artifact-finalization.js';
+import { writeArtifactRepairIntent } from './artifact-repair-intent.js';
 import { buildLifecycleFacts, canStart } from './capabilities.js';
 import { createInvalidationOperation, invalidationMutation, parseInvalidationDocument, targetIdFor, upsertInvalidation } from './invalidation.js';
 import { consumeReworkIntents, parseReworkIntentDocument, reworkIntentMutation, supersedeReworkIntents } from './rework-intent.js';
+import { ARTIFACT_FAMILIES, expectedQualificationRelations, parseQualificationAudit, parseTaskQualification, upstreamArtifactDigest, validateQualificationAudit } from './qualification-audit.js';
+import { getArtifactSchema } from './artifact-schema.js';
+import { inspectArtifactContract } from './artifact-operations.js';
+import { consumeLifecycleRecoveryAttestation, lifecycleRecoveryAttestationDigest, validateLifecycleRecoveryAttestation } from './control-authority.js';
+import { readManualValidationCompletion } from './manual-validation-completion.js';
 const eventCatalog = [
     'analyze.started', 'analyze.awaiting-input', 'analyze.completed',
     'review-analysis.started', 'review-analysis.completed',
@@ -44,36 +50,11 @@ const SCHEMAS = {
     'code.completed': { required: ['artifact', 'artifactSha256', 'semanticDigest'], optional: ['round', 'fixFor', 'implementationInput', 'filesModified', 'testsPassed', 'blockers', 'major', 'minor', 'manualValidation', 'orchestrated'] },
     'review-code.started': { optional: ['round'] },
     'review-code.completed': { required: ['artifact', 'verdict', 'blockers', 'major', 'minor', 'manualValidation'], optional: ['round', 'orchestrated'] },
-    'manual-validation.started': { optional: ['round'] },
-    'manual-validation.completed': { required: ['artifact', 'summaryResult'], optional: ['round'] },
+    'manual-validation.started': { optional: ['round', 'transactionId'] },
+    'manual-validation.completed': { required: ['artifact', 'summaryResult', 'transactionId', 'receiptDigest', 'prHeadSha'], optional: ['round'] },
     'validation-run.started': { optional: ['round'] },
     'validation-run.completed': { required: ['artifact'], optional: ['round'] }
 };
-function localArtifactValidationConfig(repoRoot, family) {
-    const fallback = {
-        requiredSections: LOCAL_ARTIFACT_REQUIRED_SECTIONS[family],
-        requiredPatterns: LOCAL_ARTIFACT_REQUIRED_PATTERNS
-    };
-    const skillName = family === 'analysis' ? 'analyze-task' : family === 'plan' ? 'plan-task' : 'code-task';
-    try {
-        const artifact = loadVerificationConfig(repoRoot, skillName).checks.artifact;
-        if (!artifact || typeof artifact !== 'object' || Array.isArray(artifact))
-            return fallback;
-        const sections = artifact.required_sections;
-        const patterns = artifact.required_patterns;
-        return {
-            requiredSections: Array.isArray(sections)
-                ? sections.filter((value) => typeof value === 'string')
-                : fallback.requiredSections,
-            requiredPatterns: Array.isArray(patterns)
-                ? patterns.filter((value) => typeof value === 'string')
-                : fallback.requiredPatterns
-        };
-    }
-    catch {
-        return fallback;
-    }
-}
 function validateTaskEventRequest(request) {
     if (!eventCatalog.includes(request.event))
         return { code: 'EVENT_UNKNOWN', message: `unknown task event '${request.event}'` };
@@ -115,7 +96,7 @@ function validateTaskEventRequest(request) {
         if (modeRequired.some((key) => request[key] === undefined) || forbidden.some((key) => request[key] !== undefined))
             return { code: 'EVENT_PAYLOAD_INVALID', message: 'code.completed requires either initial or fix completion payload' };
     }
-    if (request.fixFor && !/^review-code(?:-r(?:[2-9]|[1-9]\d+))?\.md$/.test(request.fixFor))
+    if (request.fixFor && parseArtifactName(request.fixFor)?.family !== 'review-code')
         return { code: 'EVENT_PAYLOAD_INVALID', message: 'fixFor must reference a canonical review-code artifact' };
     if (request.implementationInput && !/^II-[1-9]\d*$/.test(request.implementationInput))
         return { code: 'EVENT_PAYLOAD_INVALID', message: 'implementationInput must be a canonical II-N id' };
@@ -127,6 +108,19 @@ function validateTaskEventRequest(request) {
         return { code: 'EVENT_PAYLOAD_INVALID', message: 'fixFor and implementationInput are mutually exclusive' };
     if (request.summaryResult !== undefined && (!request.summaryResult.trim() || /[\r\n]/.test(request.summaryResult)))
         return { code: 'EVENT_PAYLOAD_INVALID', message: 'summaryResult must be a non-empty single line' };
+    if (request.event === 'manual-validation.completed') {
+        for (const [name, value, pattern] of [
+            ['transactionId', request.transactionId, /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/u],
+            ['receiptDigest', request.receiptDigest, /^[a-f0-9]{64}$/u],
+            ['prHeadSha', request.prHeadSha, /^[a-f0-9]{40}$/u]
+        ])
+            if (!value || !pattern.test(value))
+                return { code: 'EVENT_PAYLOAD_INVALID', message: `manual-validation.completed requires a valid ${name}` };
+    }
+    if (request.event === 'manual-validation.started' && request.transactionId !== undefined
+        && !/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/u.test(request.transactionId)) {
+        return { code: 'EVENT_PAYLOAD_INVALID', message: 'manual-validation.started requires a valid transactionId' };
+    }
     if (request.event !== 'analyze.awaiting-input' && /\.(?:started|completed)$/.test(request.event)) {
         if (!request.initiator || !request.requestId || !request.reasonCode) {
             return { code: 'EVENT_TRIGGER_REQUIRED', message: `${request.event} requires --initiator, --request-id, and --reason-code` };
@@ -225,7 +219,9 @@ function identity(request) {
     if (family === 'manual-validation') {
         return {
             family, phase, action: spec.label,
-            note: phase === 'started' ? 'started' : `Manual validation passed → ${request.artifact}; ${request.summaryResult}`,
+            note: phase === 'started'
+                ? `started${request.transactionId ? `; transaction=${request.transactionId}` : ''}`
+                : `Manual validation passed → ${request.artifact}; ${request.summaryResult}; transaction=${request.transactionId}; receipt=${request.receiptDigest}; head=${request.prHeadSha}`,
             target: null
         };
     }
@@ -280,6 +276,24 @@ function normalizeStarted(request, repoRoot) {
         return { error: { code: 'EVENT_ARTIFACT_CONFLICT', message: `implementationInput '${request.implementationInput ?? ''}' conflicts with artifact context` }, context };
     return { request: { ...request, round, artifact: context.next.name, fixFor: expectedFix, implementationInput: expectedImplementation }, context };
 }
+function validateManualValidationCompletion(taskDir, taskId, request, artifactPath) {
+    const completion = readManualValidationCompletion(taskDir, {
+        transactionId: request.transactionId,
+        taskId,
+        prHeadSha: request.prHeadSha,
+        artifact: request.artifact,
+        receiptDigest: request.receiptDigest
+    });
+    if (!completion.ok)
+        return completion.error;
+    const { receipt, transaction } = completion.value;
+    if (!['receipt-committed', 'final-promotion-in-progress', 'committed'].includes(transaction.phase)) {
+        return { code: 'MANUAL_VALIDATION_TRANSACTION_PHASE_INVALID', message: 'manual validation completion requires the receipt-backed transaction phase' };
+    }
+    if (sha256File(artifactPath) !== receipt.artifactSha256)
+        return { code: 'MANUAL_VALIDATION_RECEIPT_INVALID', message: 'manual-validation artifact digest does not match the receipt' };
+    return null;
+}
 function openStartedIdentity(rows, family) {
     const spec = FAMILY[family];
     if (family === 'manual-validation') {
@@ -300,6 +314,24 @@ function openStartedIdentity(rows, family) {
 function reviewInputFamily(family) {
     return family === 'review-analysis' ? 'analysis' : family === 'review-plan' ? 'plan' : 'code';
 }
+function relationForStartedInput(family, input) {
+    if (family.startsWith('review-')) {
+        return input.family === reviewInputFamily(family) ? 'reviewed-input' : 'approval-context';
+    }
+    const consumer = family === 'analyze' ? 'analysis' : family;
+    if ((consumer === 'plan' && input.family === 'analysis') || (consumer === 'code' && input.family === 'plan'))
+        return 'required-input';
+    return 'review-context';
+}
+function qualificationRelationsForStarted(family, inputs) {
+    return inputs.map((input) => ({
+        upstreamFamily: input.family,
+        upstreamArtifact: input.name,
+        upstreamRound: input.round,
+        upstreamSha256: sha256File(input.path),
+        relation: relationForStartedInput(family, input)
+    }));
+}
 function lifecycleAction(family) {
     return family === 'analyze' ? 'analysis' : family;
 }
@@ -328,6 +360,7 @@ function invalidationMutationForCompletion(content, taskDir, family, artifact, t
         code: ['review-code']
     };
     const sourceFamily = family;
+    const sourceArtifactFamily = sourceFamily === 'analyze' ? 'analysis' : sourceFamily;
     let receipts = [];
     try {
         receipts = parseArtifactReceipts(content).rows;
@@ -335,46 +368,134 @@ function invalidationMutationForCompletion(content, taskDir, family, artifact, t
     catch (error) {
         return { error: error instanceof Error ? error.message : String(error) };
     }
-    const targets = downstream[sourceFamily].flatMap((targetFamily) => {
-        const names = fs.readdirSync(taskDir).filter((name) => {
-            const pattern = targetFamily === 'review-analysis' ? /^review-analysis(?:-r\d+)?\.md$/
-                : targetFamily === 'review-plan' ? /^review-plan(?:-r\d+)?\.md$/
-                    : targetFamily === 'review-code' ? /^review-code(?:-r\d+)?\.md$/
-                        : new RegExp(`^${targetFamily}(?:-r\\d+)?\\.md$`);
-            return pattern.test(name);
-        });
-        return names.flatMap((name) => {
-            try {
-                const stat = fs.lstatSync(path.join(taskDir, name));
-                if (!stat.isFile() || stat.isSymbolicLink())
-                    return [];
-                const targetRound = parseArtifactName(name)?.round ?? 1;
-                const targetSha256 = sha256File(path.join(taskDir, name));
-                const shapes = [
-                    { targetKind: 'artifact', targetFamily, targetArtifact: name, targetRound, targetSha256 }
-                ];
-                const receipt = receipts.find((candidate) => candidate.output === name);
-                if (receipt)
-                    shapes.push({
-                        targetKind: 'receipt', targetFamily, targetArtifact: name, targetRound,
-                        targetSha256: receipt.inputSha256
-                    });
-                if (targetFamily.startsWith('review-')) {
-                    shapes.push({ targetKind: 'approval', targetFamily, targetArtifact: name, targetRound, targetSha256 });
-                }
-                if (targetFamily === 'review-code') {
-                    shapes.push({ targetKind: 'reviewed-snapshot', targetFamily, targetArtifact: name, targetRound, targetSha256 });
+    const inventory = fs.readdirSync(taskDir).flatMap((name) => {
+        const identity = parseArtifactName(name);
+        if (!identity || !ARTIFACT_FAMILIES.includes(identity.family))
+            return [];
+        try {
+            const stat = fs.lstatSync(path.join(taskDir, name));
+            if (!stat.isFile() || stat.isSymbolicLink())
+                return [];
+            return [{ family: identity.family, name, round: identity.round, sha256: sha256File(path.join(taskDir, name)) }];
+        }
+        catch (error) {
+            throw new Error(`cannot inspect invalidation artifact '${name}': ${error instanceof Error ? error.message : String(error)}`);
+        }
+    });
+    const taskQualification = parseTaskQualification(content);
+    if (!taskQualification.ok)
+        return { error: taskQualification.message };
+    const nodeMap = new Map(inventory.map((node) => [`${node.family}/${node.name}`, node]));
+    const audits = new Map();
+    let taskInputChanged = false;
+    let graphUsable = taskQualification.qualification.present;
+    if (graphUsable) {
+        for (const node of inventory) {
+            const artifactContent = fs.readFileSync(path.join(taskDir, node.name), 'utf8');
+            const parsedAudit = parseQualificationAudit(artifactContent);
+            if (!parsedAudit.ok || !parsedAudit.audit.present || !parsedAudit.audit.snapshot) {
+                graphUsable = false;
+                break;
+            }
+            audits.set(`${node.family}/${node.name}`, parsedAudit.audit);
+            if (parsedAudit.audit.snapshot.taskInputDigest !== taskQualification.qualification.taskInputDigest)
+                taskInputChanged = true;
+            if (parsedAudit.audit.snapshot.nonConstraintInputDigest !== taskQualification.qualification.nonConstraintInputDigest) {
+                graphUsable = false;
+                break;
+            }
+            if (parsedAudit.audit.snapshot.upstreamArtifactDigest !== upstreamArtifactDigest(parsedAudit.audit.upstreamRelations)) {
+                graphUsable = false;
+                break;
+            }
+            for (const relation of parsedAudit.audit.upstreamRelations) {
+                const upstream = nodeMap.get(`${relation.upstreamFamily}/${relation.upstreamArtifact}`);
+                if (!upstream || upstream.round !== relation.upstreamRound || upstream.sha256 !== relation.upstreamSha256) {
+                    graphUsable = false;
+                    break;
                 }
-                return shapes.map((targetShape) => ({
-                    ...targetShape,
-                    targetId: targetIdFor('pending', targetShape), operationId: 'pending', status: 'pending',
-                    reasonCode: 'upstream-replaced', updatedAt: timestamp
-                }));
             }
-            catch (error) {
-                throw new Error(`cannot inspect invalidation target '${name}': ${error instanceof Error ? error.message : String(error)}`);
+            if (!graphUsable)
+                break;
+        }
+    }
+    const selected = new Set();
+    if (graphUsable) {
+        const changedConstraints = new Set();
+        for (const audit of audits.values()) {
+            for (const dependency of audit.constraintDependencies) {
+                const current = taskQualification.qualification.constraints.find((row) => row.constraintId === dependency.constraintId);
+                if (!current || current.digest !== dependency.constraintDigest)
+                    changedConstraints.add(dependency.constraintId);
             }
-        });
+        }
+        const currentCandidates = new Map(taskQualification.qualification.candidates.map((candidate) => [candidate.candidateId, candidate]));
+        const candidateSnapshotMatches = [...audits.values()].every((audit) => audit.candidateQualifications.length === currentCandidates.size && audit.candidateQualifications.every((row) => {
+            const current = currentCandidates.get(row.candidateId);
+            return Boolean(current && current.status === row.status && current.impact === row.impact
+                && current.evidence === row.evidence && current.constraintIds.join(',') === row.constraintIds.join(','));
+        }));
+        // A task-input digest also covers candidates. A narrowed invalidation graph
+        // is safe only when the old audit rows show that the candidate projection
+        // stayed unchanged and the change is explained by at least one constraint.
+        if (taskInputChanged && (changedConstraints.size === 0 || !candidateSnapshotMatches))
+            graphUsable = false;
+        for (const node of inventory) {
+            const audit = audits.get(`${node.family}/${node.name}`);
+            if (audit.constraintDependencies.some((dependency) => changedConstraints.has(dependency.constraintId)))
+                selected.add(`${node.family}/${node.name}`);
+            if (audit.upstreamRelations.some((relation) => relation.upstreamFamily === sourceArtifactFamily))
+                selected.add(`${node.family}/${node.name}`);
+        }
+        // Relation rows point from a consumer to its actual upstream artifact. Walk
+        // that reverse edge so review-only seeds and multi-hop consumers receive the
+        // same derived targets as ordinary executor seeds.
+        let changed = true;
+        while (changed) {
+            changed = false;
+            for (const node of inventory) {
+                const key = `${node.family}/${node.name}`;
+                const audit = audits.get(key);
+                if (audit.upstreamRelations.some((relation) => selected.has(`${relation.upstreamFamily}/${relation.upstreamArtifact}`)) && !selected.has(key)) {
+                    selected.add(key);
+                    changed = true;
+                }
+            }
+        }
+        // A relation cycle cannot establish a safe downstream closure.
+        const visiting = new Set();
+        const visited = new Set();
+        const hasCycle = (key) => {
+            if (visiting.has(key))
+                return true;
+            if (visited.has(key))
+                return false;
+            visiting.add(key);
+            const cycle = audits.get(key)?.upstreamRelations.some((relation) => hasCycle(`${relation.upstreamFamily}/${relation.upstreamArtifact}`)) ?? false;
+            visiting.delete(key);
+            visited.add(key);
+            return cycle;
+        };
+        if ([...nodeMap.keys()].some(hasCycle))
+            graphUsable = false;
+    }
+    const reasonCode = graphUsable ? 'qualification-changed' : 'upstream-replaced';
+    const targetNodes = (graphUsable
+        ? inventory.filter((node) => selected.has(`${node.family}/${node.name}`))
+        : inventory.filter((node) => downstream[sourceFamily].includes(node.family)))
+        .filter((node) => !(node.family === FAMILY[family].artifact && node.name === artifact.name));
+    const targets = targetNodes.flatMap((node) => {
+        const shapes = [
+            { targetKind: 'artifact', targetFamily: node.family, targetArtifact: node.name, targetRound: node.round, targetSha256: node.sha256 }
+        ];
+        const receipt = receipts.find((candidate) => candidate.output === node.name);
+        if (receipt)
+            shapes.push({ targetKind: 'receipt', targetFamily: node.family, targetArtifact: node.name, targetRound: node.round, targetSha256: receipt.inputSha256 });
+        if (node.family.startsWith('review-'))
+            shapes.push({ targetKind: 'approval', targetFamily: node.family, targetArtifact: node.name, targetRound: node.round, targetSha256: node.sha256 });
+        if (node.family === 'review-code')
+            shapes.push({ targetKind: 'reviewed-snapshot', targetFamily: node.family, targetArtifact: node.name, targetRound: node.round, targetSha256: node.sha256 });
+        return shapes.map((targetShape) => ({ ...targetShape, targetId: targetIdFor('pending', targetShape), operationId: 'pending', status: 'pending', reasonCode, updatedAt: timestamp }));
     });
     if (targets.length === 0)
         return { mutation: null };
@@ -539,6 +660,11 @@ function applyTaskEventUnlocked(request, options = {}) {
         if (openIdentity) {
             if (openIdentity.row.agent !== request.agent)
                 return failed(request, { code: 'EVENT_LOG_CONFLICT', message: 'open started event has a different agent' }, { taskId: resolved.taskId, taskMdPath: resolved.taskMdPath });
+            if (initialParts.family === 'manual-validation' && request.transactionId !== undefined) {
+                const existingTransactionId = /(?:^|;\s*)transaction=([A-Za-z0-9][A-Za-z0-9._-]{0,127})(?:;|$)/u.exec(openIdentity.row.note)?.[1];
+                if (existingTransactionId !== undefined && existingTransactionId !== request.transactionId)
+                    return failed(request, { code: 'EVENT_LOG_CONFLICT', message: 'open manual-validation started event has a different transactionId' }, { taskId: resolved.taskId, taskMdPath: resolved.taskMdPath });
+            }
             if (request.round !== undefined && request.round !== openIdentity.round)
                 return failed(request, { code: 'EVENT_ARTIFACT_CONFLICT', message: `round ${request.round} conflicts with open round ${openIdentity.round}` }, { taskId: resolved.taskId, taskMdPath: resolved.taskMdPath });
             if (request.fixFor !== undefined && request.fixFor !== openIdentity.fixFor)
@@ -560,6 +686,25 @@ function applyTaskEventUnlocked(request, options = {}) {
             normalized = { ...request, round: identity.round };
     }
     const eventIdentity = identity(normalized);
+    const lifecycleAuthority = options.lifecycleRecoveryAttestation ?? null;
+    if (lifecycleAuthority) {
+        try {
+            validateLifecycleRecoveryAttestation(lifecycleAuthority);
+        }
+        catch (error) {
+            return failed(normalized, { code: 'EVENT_ARTIFACT_CONFLICT', message: error instanceof Error ? error.message : String(error) }, { taskId: resolved.taskId, taskMdPath: resolved.taskMdPath });
+        }
+        const expectedFamily = eventIdentity.family === 'analyze' ? 'analysis' : eventIdentity.family;
+        if (eventIdentity.phase !== 'completed'
+            || lifecycleAuthority.phase !== 'task-event.completed'
+            || lifecycleAuthority.taskId !== resolved.taskId
+            || lifecycleAuthority.family !== expectedFamily
+            || lifecycleAuthority.artifact !== normalized.artifact
+            || lifecycleAuthority.round !== normalized.round
+            || (normalized.requestId !== undefined && lifecycleAuthority.lifecycleRequestId !== normalized.requestId)) {
+            return failed(normalized, { code: 'EVENT_ARTIFACT_CONFLICT', message: 'lifecycle completion authority does not match the event tuple' }, { taskId: resolved.taskId, taskMdPath: resolved.taskMdPath });
+        }
+    }
     const currentStep = typeof frontmatter.current_step === 'string' ? frontmatter.current_step : '';
     const matchingRows = rows.filter((item) => item.step === eventIdentity.action);
     const manual = eventIdentity.family === 'manual-validation';
@@ -573,6 +718,12 @@ function applyTaskEventUnlocked(request, options = {}) {
     if (eventIdentity.phase === 'started' && row) {
         if (row.agent !== normalized.agent)
             return failed(normalized, { code: 'EVENT_LOG_CONFLICT', message: 'open started event has a different agent' }, { taskId: resolved.taskId, taskMdPath: resolved.taskMdPath });
+        if (manual && normalized.transactionId !== undefined) {
+            const existingTransactionId = /(?:^|;\s*)transaction=([A-Za-z0-9][A-Za-z0-9._-]{0,127})(?:;|$)/u.exec(row.note)?.[1];
+            if (existingTransactionId !== undefined && existingTransactionId !== normalized.transactionId) {
+                return failed(normalized, { code: 'EVENT_LOG_CONFLICT', message: 'open manual-validation started event has a different transactionId' }, { taskId: resolved.taskId, taskMdPath: resolved.taskMdPath });
+            }
+        }
         return successNoOp(normalized, resolved.taskId, resolved.taskMdPath, currentStep, eventIdentity, row.started, frontmatter, artifactContext);
     }
     if (eventIdentity.phase === 'started' && !manual && completedRows.length > 0)
@@ -589,6 +740,37 @@ function applyTaskEventUnlocked(request, options = {}) {
         if (!validated.ok)
             return failed(normalized, validated.error, { taskId: resolved.taskId, taskMdPath: resolved.taskMdPath, fromStep: currentStep, toStep: currentStep, action: eventIdentity.action, phase: eventIdentity.phase });
         completedArtifact = validated.artifact;
+        if (eventIdentity.family === 'manual-validation') {
+            const validationError = validateManualValidationCompletion(resolved.taskDir, resolved.taskId, normalized, completedArtifact.path);
+            if (validationError)
+                return failed(normalized, validationError, { taskId: resolved.taskId, taskMdPath: resolved.taskMdPath, fromStep: currentStep, toStep: currentStep, action: eventIdentity.action, phase: eventIdentity.phase });
+        }
+        if (eventIdentity.family.startsWith('review-')) {
+            let reviewContent;
+            try {
+                reviewContent = fs.readFileSync(completedArtifact.path, 'utf8');
+            }
+            catch (error) {
+                return failed(normalized, { code: 'EVENT_ARTIFACT_CONFLICT', message: `cannot read qualification audit from ${completedArtifact.name}: ${error instanceof Error ? error.message : String(error)}` }, { taskId: resolved.taskId, taskMdPath: resolved.taskMdPath, fromStep: currentStep, toStep: currentStep, action: eventIdentity.action, phase: eventIdentity.phase });
+            }
+            const schema = getArtifactSchema(eventIdentity.family);
+            const structure = schema ? inspectArtifactContract(reviewContent, schema) : null;
+            if (structure && !structure.ok) {
+                return failed(normalized, { code: 'EVENT_ARTIFACT_CONFLICT', message: `shared artifact structure invalid: ${structure.diagnostics.map((item) => `${item.code}: ${item.message}`).join('; ')}` }, { taskId: resolved.taskId, taskMdPath: resolved.taskMdPath, fromStep: currentStep, toStep: currentStep, action: eventIdentity.action, phase: eventIdentity.phase });
+            }
+            const expected = expectedQualificationRelations(content, eventIdentity.family);
+            if (!expected.ok) {
+                return failed(normalized, { code: 'EVENT_ARTIFACT_CONFLICT', message: `${expected.code}: ${expected.message}` }, { taskId: resolved.taskId, taskMdPath: resolved.taskMdPath, fromStep: currentStep, toStep: currentStep, action: eventIdentity.action, phase: eventIdentity.phase });
+            }
+            const qualification = validateQualificationAudit(content, reviewContent, {
+                family: eventIdentity.family,
+                artifact: completedArtifact.name,
+                expectedUpstreamRelations: expected.relations
+            });
+            if (!qualification.ok) {
+                return failed(normalized, { code: 'EVENT_ARTIFACT_CONFLICT', message: `${qualification.code}: ${qualification.message}` }, { taskId: resolved.taskId, taskMdPath: resolved.taskMdPath, fromStep: currentStep, toStep: currentStep, action: eventIdentity.action, phase: eventIdentity.phase });
+            }
+        }
         if (eventIdentity.family === 'analyze' || eventIdentity.family === 'plan' || eventIdentity.family === 'code') {
             const localFamily = eventIdentity.family === 'analyze'
                 ? 'analysis'
@@ -600,11 +782,10 @@ function applyTaskEventUnlocked(request, options = {}) {
             catch (error) {
                 return failed(normalized, { code: 'EVENT_ARTIFACT_CONFLICT', message: `cannot read ${completedArtifact.name}: ${String(error)}` }, { taskId: resolved.taskId, taskMdPath: resolved.taskMdPath, fromStep: currentStep, toStep: currentStep, action: eventIdentity.action, phase: eventIdentity.phase });
             }
-            const validationConfig = localArtifactValidationConfig(resolved.repoRoot, localFamily);
             const local = validateLocalArtifact(artifactContent, {
                 family: localFamily,
-                requiredSections: validationConfig.requiredSections,
-                requiredPatterns: validationConfig.requiredPatterns
+                taskContent: content,
+                artifact: completedArtifact.name
             });
             if (!local.ok) {
                 return failed(normalized, {
@@ -634,7 +815,7 @@ function applyTaskEventUnlocked(request, options = {}) {
                     message: `cannot read local finalizer provenance for ${completedArtifact.name}: ${error instanceof Error ? error.message : String(error)}`
                 }, { taskId: resolved.taskId, taskMdPath: resolved.taskMdPath, fromStep: currentStep, toStep: currentStep, action: eventIdentity.action, phase: eventIdentity.phase });
             }
-            if (!localFinalizationIntent || !['passed', 'consumed'].includes(localFinalizationIntent.state)) {
+            if (!localFinalizationIntent || !['passed', 'consumed', 'finalize-ready', 'commit-started'].includes(localFinalizationIntent.state)) {
                 return failed(normalized, {
                     code: 'EVENT_ARTIFACT_CONFLICT',
                     message: `local finalizer provenance is missing or incomplete for ${completedArtifact.name}`
@@ -646,6 +827,18 @@ function applyTaskEventUnlocked(request, options = {}) {
                     message: `local finalizer provenance does not match ${completedArtifact.name}`
                 }, { taskId: resolved.taskId, taskMdPath: resolved.taskMdPath, fromStep: currentStep, toStep: currentStep, action: eventIdentity.action, phase: eventIdentity.phase });
             }
+            if (localFinalizationIntent.recoveryOperationId !== null) {
+                if (!lifecycleAuthority
+                    || localFinalizationIntent.recoveryOperationId !== lifecycleAuthority.operationId
+                    || localFinalizationIntent.requestId !== lifecycleAuthority.lifecycleRequestId
+                    || (localFinalizationIntent.phase !== 'artifact.finalize-local'
+                        && localFinalizationIntent.authorityDigest !== lifecycleRecoveryAttestationDigest(lifecycleAuthority))) {
+                    return failed(normalized, {
+                        code: 'EVENT_ARTIFACT_CONFLICT',
+                        message: `local finalizer provenance does not match lifecycle completion authority for ${completedArtifact.name}`
+                    }, { taskId: resolved.taskId, taskMdPath: resolved.taskMdPath, fromStep: currentStep, toStep: currentStep, action: eventIdentity.action, phase: eventIdentity.phase, artifactContext });
+                }
+            }
         }
     }
     if (eventIdentity.phase === 'waiting' && section.entries.some((entry) => entry.step === eventIdentity.action && entry.note === eventIdentity.note)) {
@@ -726,6 +919,14 @@ function applyTaskEventUnlocked(request, options = {}) {
     const body = appendActivityEntry(section, { time: metadata.timestamp, step: logStep, agent: normalized.agent, note: eventIdentity.note });
     const frontmatterSet = { current_step: step, assigned_to: normalized.agent };
     let frontmatterRemove;
+    if (eventIdentity.phase === 'started' && artifactContext) {
+        try {
+            frontmatterSet.qualification_input_relations = JSON.stringify(qualificationRelationsForStarted(eventIdentity.family, artifactContext.inputs));
+        }
+        catch (error) {
+            return failed(normalized, { code: 'EVENT_ARTIFACT_CONFLICT', message: `cannot capture qualification input relations: ${error instanceof Error ? error.message : String(error)}` }, { taskId: resolved.taskId, taskMdPath: resolved.taskMdPath, fromStep: currentStep, toStep: step, action: eventIdentity.action, phase: eventIdentity.phase, artifactContext });
+        }
+    }
     if (eventIdentity.phase === 'started' && eventIdentity.family === 'code') {
         const planInput = artifactContext?.inputs.find((input) => input.family === 'plan');
         if (!planInput)
@@ -757,6 +958,8 @@ function applyTaskEventUnlocked(request, options = {}) {
     else if (eventIdentity.phase === 'completed' && eventIdentity.family.startsWith('review-')) {
         frontmatterRemove = ['review_input_artifact', 'review_input_sha256'];
     }
+    if (eventIdentity.phase === 'completed')
+        frontmatterRemove = [...(frontmatterRemove ?? []), 'qualification_input_relations'];
     if (eventIdentity.phase === 'started' && normalized.implementationInput)
         frontmatterSet.last_reviewed_commit = '';
     const mutations = [
@@ -795,14 +998,28 @@ function applyTaskEventUnlocked(request, options = {}) {
         });
     }
     mutations.push({ kind: 'section', aliases: ['活动日志', 'Activity Log'], heading: section.heading, body });
-    if (!normalized.dryRun && localFinalizationIntent && completedArtifact && localFinalizationIntent.state === 'passed') {
+    if (!normalized.dryRun && localFinalizationIntent && completedArtifact) {
         try {
-            localFinalizationIntent = consumeLocalArtifactFinalizationIntent(resolved.repoRoot, localFinalizationIntent);
+            if (lifecycleAuthority && localFinalizationIntent.state === 'passed') {
+                const expectedIntent = localFinalizationIntent;
+                localFinalizationIntent = {
+                    ...localFinalizationIntent,
+                    state: 'commit-started',
+                    phase: 'task-event.completed',
+                    authorityDigest: lifecycleRecoveryAttestationDigest(lifecycleAuthority),
+                    requestId: lifecycleAuthority.lifecycleRequestId,
+                    updatedAt: Date.now()
+                };
+                writeArtifactRepairIntent(resolved.repoRoot, localFinalizationIntent, { expected: expectedIntent });
+            }
+            else if (!lifecycleAuthority && localFinalizationIntent.state === 'passed') {
+                localFinalizationIntent = consumeLocalArtifactFinalizationIntent(resolved.repoRoot, localFinalizationIntent);
+            }
         }
         catch (error) {
             return failed(normalized, {
                 code: 'EVENT_ARTIFACT_CONFLICT',
-                message: `local finalizer provenance could not be consumed before task write for ${completedArtifact.name}: ${error instanceof Error ? error.message : String(error)}`
+                message: `local finalizer provenance could not be advanced before task write for ${completedArtifact.name}: ${error instanceof Error ? error.message : String(error)}`
             }, {
                 taskId: resolved.taskId,
                 taskMdPath: resolved.taskMdPath,
@@ -819,6 +1036,19 @@ function applyTaskEventUnlocked(request, options = {}) {
     const result = writeTask({ taskRef: normalized.taskRef, expectedState: stateOverride ? resolved.state : 'active', dryRun: normalized.dryRun, mutations }, { ...options, invalidationContext: sourceCompletion ? 'source-completion' : 'standard', metadataProvider: () => metadata });
     if (result.status === 'failed')
         return failed(normalized, result.error, { taskId: result.taskId, taskMdPath: result.taskMdPath, fromStep: currentStep, toStep: step, action: eventIdentity.action, phase: eventIdentity.phase, timestamp: result.timestamp, agentInfraVersion: result.agentInfraVersion, operations: result.operations, artifactContext });
+    if (!normalized.dryRun && lifecycleAuthority && localFinalizationIntent && completedArtifact) {
+        try {
+            if (!options.deferLifecycleRecoveryConsumption)
+                consumeLifecycleRecoveryAttestation(lifecycleAuthority);
+            writeArtifactRepairIntent(resolved.repoRoot, { ...localFinalizationIntent, state: 'consumed', updatedAt: Date.now() }, { expected: localFinalizationIntent });
+        }
+        catch (error) {
+            return failed(normalized, {
+                code: 'EVENT_ARTIFACT_CONFLICT',
+                message: `task completion was written but lifecycle recovery consumption is incomplete: ${error instanceof Error ? error.message : String(error)}`
+            }, { taskId: result.taskId, taskMdPath: result.taskMdPath, fromStep: currentStep, toStep: step, action: eventIdentity.action, phase: eventIdentity.phase, timestamp: result.timestamp, agentInfraVersion: result.agentInfraVersion, operations: result.operations, artifactContext });
+        }
+    }
     if (!normalized.dryRun && orchestrationCompletion) {
         try {
             (options.commitOrchestrationCompletion ?? commitOrchestrationStageCompletion)(orchestrationCompletion);

package/dist/lib/task/finalization-state.js

@@ -0,0 +1,9 @@
+export function taskFinalizationReceiptState(receipt) {
+    if (receipt.lifecycle !== 'done' || receipt.taskComment === 'pending'
+        || receipt.verification === 'pending' || receipt.warningProjection !== 'done')
+        return 'pending';
+    if (receipt.lastError !== null || receipt.warnings.some((warning) => warning.status === 'open'))
+        return 'unresolved';
+    return 'complete';
+}
+//# sourceMappingURL=finalization-state.js.map

package/dist/lib/task/human-override.js

@@ -1,6 +1,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { createHash, randomUUID } from 'node:crypto';
+import { parseArtifactName } from './artifact-name.js';
 import { locateActivityLog } from './activity-log.js';
 import { applyPrReviewActivityIntent } from './activity-intent.js';
 import { applyHumanDecision } from './decision-intents.js';
@@ -577,12 +578,8 @@ function latestArtifact(taskDir, family) {
     catch {
         return undefined;
     }
-    const candidates = names.filter((name) => (name === `${family}.md` || new RegExp(`^${family}-r\\d+\\.md$`).test(name)));
-    candidates.sort((a, b) => {
-        const round = (name) => Number(/-r(\d+)\.md$/.exec(name)?.[1] ?? 1);
-        return round(b) - round(a);
-    });
-    return candidates[0];
+    return names.map(parseArtifactName).filter((identity) => identity !== null)
+        .filter((identity) => identity.family === family).sort((left, right) => right.round - left.round)[0]?.name;
 }
 async function probeVerificationEngineFailure(policy, resolved) {
     const candidates = [

package/dist/lib/task/implementation-inputs.js

@@ -1,3 +1,4 @@
+import { parseArtifactName } from './artifact-name.js';
 import { parseTable } from './sections.js';
 const SECTION_ALIASES = ['实现输入', 'Implementation Inputs'];
 const COLUMNS = [
@@ -5,7 +6,6 @@ const COLUMNS = [
     'decided_at', 'status', 'consumed_by'
 ];
 const TIMESTAMP_RE = /^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}[+-]\d{2}:\d{2}$/;
-const ARTIFACT_RE = /^code(?:-r(?:[2-9]|[1-9]\d+))?\.md$/;
 function validateInput(row) {
     if (!/^II-[1-9]\d*$/.test(row.id))
         throw new Error(`implementation input id '${row.id}' is invalid`);
@@ -17,7 +17,7 @@ function validateInput(row) {
     const valid = (row.status === 'declared' && row.decidedAt === '' && row.consumedBy === '') ||
         (hasValidTimestamp && row.needsImplementation && row.status === 'pending' && row.consumedBy === '') ||
         (hasValidTimestamp && !row.needsImplementation && row.status === 'not-required' && row.consumedBy === '') ||
-        (hasValidTimestamp && row.needsImplementation && row.status === 'consumed' && ARTIFACT_RE.test(row.consumedBy));
+        (hasValidTimestamp && row.needsImplementation && row.status === 'consumed' && parseArtifactName(row.consumedBy)?.family === 'code');
     if (!valid)
         throw new Error(`implementation input ${row.id} has an invalid state combination`);
 }
@@ -122,7 +122,7 @@ function selectPendingImplementationInput(rows) {
     })[0] ?? null;
 }
 function consumeImplementationInput(rows, id, artifact) {
-    if (!ARTIFACT_RE.test(artifact))
+    if (parseArtifactName(artifact)?.family !== 'code')
         throw new Error(`implementation input artifact '${artifact}' is invalid`);
     let found = false;
     const next = rows.map((row) => {