@lazyingart/agintiflow 0.20.265 → 0.20.267

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lazyingart/agintiflow",
-  "version": "0.20.265",
+  "version": "0.20.267",
   "type": "module",
   "description": "AgInTiFlow is a project-aware agent workspace for hybrid wet-dry R&D, hardware-aware intelligence, software automation, and industrial workflows.",
   "license": "Apache-2.0",

package/scripts/smoke-capabilities.js

@@ -159,6 +159,12 @@ try {
   assert(defaultMaxStepsForProfile("pipeline") >= 44, "pipeline profile step budget is too low for repair/verify/resume loops");
   assert(!/misleading failing test/i.test(qaProfile.prompt), "QA profile still encourages misleading test fixtures");
   assert(/do not stage fake bugs/i.test(qaProfile.prompt), "QA profile does not discourage fake staged failures");
+  const slidesProfile = listTaskProfiles().find((profile) => profile.id === "slides");
+  assert(slidesProfile, "slides profile is missing");
+  assert(/source-grounded editable slide source/i.test(slidesProfile.prompt), "slides profile does not require grounded editable source");
+  assert(/render every slide/i.test(slidesProfile.prompt), "slides profile does not require full rendered inspection");
+  assert(/wrapped-title decoration overlap/i.test(slidesProfile.prompt), "slides profile does not guard wrapped-title collisions");
+  assert(/fresh git status --short/i.test(slidesProfile.prompt), "slides profile does not require fresh repository evidence");
   assert(
     capabilities.trustedDockerPolicy.some((check) => check.command.startsWith("apt-get install") && check.allowed),
     "trusted Docker policy did not allow apt-get install"

package/scripts/smoke-dynamic-step-budget.js

@@ -5306,6 +5306,153 @@ try {
       postMutationVerificationRuntime.testVerificationCommand === postMutationVerifier,
     "a material failed-test repair did not advance directly to its exact retained verifier"
   );
+  const generatedDeckValidator =
+    "python3 /tmp/presentation_deck_contract.py --root .";
+  const staleGeneratedDeckState = {
+    goal: [
+      "Rebuild the canonical presentation output after repairing build_deck.py.",
+      "Do not modify source_brief.md, measurements.csv,",
+      "prompt.txt, or TASK.md.",
+      `Run ${generatedDeckValidator} only after the generated deck is fresh.`,
+    ].join("\n"),
+    meta: {
+      taskProfile: "slides",
+      goalContract: {
+        revision: 13,
+        currentRequest: "Rebuild the canonical presentation output from build_deck.py.",
+      },
+      activeExecutionContract: {
+        revision: 13,
+        startedMutationRevision: 8,
+        materialMutationRevision: 9,
+        requiresFileMutation: true,
+        requiresSourceGrounding: true,
+      },
+      projectVerification: {
+        mutationRevision: 9,
+        mutationHistory: [
+          { revision: 8, toolName: "run_command", paths: [] },
+          { revision: 9, toolName: "apply_patch", paths: ["build_deck.py"] },
+        ],
+        commandRuns: [{
+          command:
+            'rm -rf dist && echo "removed dist" && python3 build_deck.py && ls -la output',
+          at: "2026-08-27T18:18:14.726Z",
+          ok: true,
+          mutationRevision: 8,
+          privateMutationRevision: 0,
+        }],
+        testRuns: [{
+          command: generatedDeckValidator,
+          at: "2026-08-27T18:24:28.347Z",
+          mutationRevision: 9,
+          privateMutationRevision: 0,
+          passed: false,
+          failureEvidenceVersion: 2,
+          failureSignature: "stale-generated-deck",
+          failureSummary: "acceptance failed: deck omits source-grounded phrase: single reader",
+        }],
+      },
+    },
+  };
+  const staleGeneratedDeckRuntime = nextStepRuntimeConfig(
+    {
+      provider: "deepseek",
+      taskProfile: "slides",
+      commandCwd: workspace,
+      goal: staleGeneratedDeckState.goal,
+    },
+    staleGeneratedDeckState
+  );
+  const staleGeneratedDeckPhase = buildKnownConstrainedPhasePlan(
+    {
+      provider: "deepseek",
+      taskProfile: "slides",
+      commandCwd: workspace,
+      goal: staleGeneratedDeckState.goal,
+    },
+    staleGeneratedDeckState,
+    staleGeneratedDeckRuntime
+  );
+  assert(
+    staleGeneratedDeckRuntime.generatedArtifactProducerPending === true &&
+      staleGeneratedDeckRuntime.generatedArtifactProducerCommand === "python3 build_deck.py" &&
+      staleGeneratedDeckPhase?.mode === "generated-artifact-producer" &&
+      staleGeneratedDeckPhase?.command === "python3 build_deck.py",
+    `a stale generated artifact did not recover its exact safe producer before validation: ${JSON.stringify(
+      staleGeneratedDeckRuntime
+    )}`
+  );
+  recordProjectVerificationOutcome(
+    staleGeneratedDeckState,
+    {
+      toolName: "run_command",
+      ok: true,
+      exitCode: 0,
+      args: { command: "python3 build_deck.py" },
+      stdout: "Wrote output/deck.pptx\n",
+      stderr: "",
+    },
+    {
+      provider: "deepseek",
+      taskProfile: "slides",
+      commandCwd: workspace,
+      goal: staleGeneratedDeckState.goal,
+      allowShellTool: true,
+      sandboxMode: "host",
+    }
+  );
+  const postProducerRuntime = nextStepRuntimeConfig(
+    {
+      provider: "deepseek",
+      taskProfile: "slides",
+      commandCwd: workspace,
+      goal: staleGeneratedDeckState.goal,
+    },
+    staleGeneratedDeckState
+  );
+  assert(
+    staleGeneratedDeckState.meta.projectVerification.mutationRevision === 10 &&
+      postProducerRuntime.generatedArtifactProducerPending !== true &&
+      postProducerRuntime.testVerificationPending === true &&
+      postProducerRuntime.testVerificationCommand === generatedDeckValidator,
+    `a successful producer replay did not advance exactly once to fresh validation: ${JSON.stringify({
+      verification: staleGeneratedDeckState.meta.projectVerification,
+      activeExecutionContract: staleGeneratedDeckState.meta.activeExecutionContract,
+      runtime: postProducerRuntime,
+    })}`
+  );
+  const immutableOnlyRepairState = {
+    goal: "Treat service_ctl.py as immutable read-only source evidence and finish from existing results.",
+    meta: {
+      taskProfile: "devops",
+      projectVerification: {
+        mutationRevision: 0,
+        mutationHistory: [],
+        commandRuns: [],
+        testRuns: [],
+      },
+      completionEvidenceRepair: {
+        key: "protected-source-only",
+        at: "2026-08-27T19:00:00.000Z",
+        requiresFreshFileMutation: true,
+        requiredFreshMutationRevision: 1,
+      },
+      toolLoop: { recent: [] },
+    },
+  };
+  assert(
+    nextStepRuntimeConfig(
+      {
+        provider: "deepseek",
+        taskProfile: "devops",
+        commandCwd: workspace,
+        goal: immutableOnlyRepairState.goal,
+      },
+      immutableOnlyRepairState
+    ).completionFreshMutationRequired !== true,
+    "completion recovery forced a mutation when every concrete candidate was immutable"
+  );
   const concreteGoalUpdate = applyContinuationContractTransition(
     concreteContinuationState,
     concreteContinuation,

package/scripts/smoke-progressive-tool-selection.js

@@ -1747,6 +1747,28 @@ sameNames(
   "failed-test repair did not receive the bounded diagnose-patch-retest tool surface"
 );
 
+const generatedArtifactProducerTools = selectProgressiveTools(allTools, {
+  config: {
+    provider: "localllm",
+    testFailureRepairActive: true,
+    testFailureRepairMutationRequired: true,
+    generatedArtifactProducerPending: true,
+    generatedArtifactProducerCommand: "python3 build_deck.py",
+  },
+  goal: "Rebuild the generated presentation before rerunning its validator.",
+  profile: "slides",
+});
+sameNames(
+  generatedArtifactProducerTools,
+  ["run_command", "finish"],
+  "a stale generated artifact did not expose only its retained producer command"
+);
+assertStrict.deepEqual(
+  generatedArtifactProducerTools[0].function.parameters.properties.command.enum,
+  ["python3 build_deck.py"],
+  "the generated-artifact producer command was not schema-constrained"
+);
+
 const mutationOnlyFailedTestRepairTools = selectProgressiveTools(allTools, {
   config: {
     provider: "localllm",

package/scripts/smoke-scs-evidence-visibility.js

@@ -60,6 +60,16 @@ const coordinatedForbiddenOutputContract = deriveScsTaskContract({
   taskProfile: "devops",
 });
 
+const wrappedImmutableSourceContract = deriveScsTaskContract({
+  goal: [
+    "Continue the exact task. Do not modify source_brief.md, measurements.csv,",
+    "prompt.txt, or TASK.md.",
+    "Treat source_brief.md, measurements.csv, prompt.txt, and TASK.md as immutable read-only source evidence.",
+    "Repair build_deck.py and rebuild output/deck.pptx.",
+  ].join("\n"),
+  taskProfile: "slides",
+});
+
 const recoveryInstructionContract = deriveScsTaskContract({
   goal: [
     "Use the retained source and these two failures: the tests invoke ../service_ctl.py, while `python3 service_ctl.py start --state-dir .runtime` fails. Preserve the lifecycle assertions rather than replacing them, repair service_ctl.py, and remove the accidental untracked resume-after-git-baseline-recovery-dev-prompt.txt.",
@@ -152,6 +162,17 @@ assert.deepEqual(
   ["scratch.py", "temporary.py"],
   "a coordinated list did not retain each path governed by one exclusion"
 );
+assert.deepEqual(
+  wrappedImmutableSourceContract.excludedOutputPaths.sort(),
+  ["TASK.md", "measurements.csv", "prompt.txt", "source_brief.md"].sort(),
+  "a wrapped immutable source list lost one or more protected paths"
+);
+assert(
+  !wrappedImmutableSourceContract.exactOutputPaths.some((item) =>
+    ["TASK.md", "measurements.csv", "prompt.txt", "source_brief.md"].includes(item)
+  ),
+  "an immutable source path leaked into exact output requirements"
+);
 assert(
   recoveryInstructionContract.excludedOutputPaths.includes("resume-after-git-baseline-recovery-dev-prompt.txt") &&
     !recoveryInstructionContract.exactOutputPaths.includes("resume-after-git-baseline-recovery-dev-prompt.txt"),

package/scripts/smoke-skills.js

@@ -115,6 +115,11 @@ assert(selectedIds("write SQL migrations for sqlite schema").includes("database"
 assert(selectedIds("debug Docker deployment logs and port config").includes("devops-deployment"), "devops prompt did not select devops-deployment");
 assert(selectedIds("review auth security and secrets handling").includes("security-review"), "security prompt did not select security-review");
 assert(selectedIds("make a PowerPoint pitch deck").includes("presentation-slides"), "slides prompt did not select presentation-slides");
+const presentationSkill = skills.find((skill) => skill.id === "presentation-slides");
+assert(presentationSkill?.body.includes("Render every slide"), "presentation skill does not require every slide to be rendered");
+assert(presentationSkill?.body.includes("wrapped titles"), "presentation skill does not require wrapped-title inspection");
+assert(presentationSkill?.body.includes("git status --short"), "presentation skill does not require final repository evidence");
+assert(presentationSkill?.body.includes("Do not call the deck complete"), "presentation skill still permits build-only completion");
 assert(selectedIds("edit a markdown screenplay final draft").includes("writing-editing"), "writing prompt did not select writing-editing");
 assert(selectedIds("create a lesson with exercises and quiz").includes("education-tutorial"), "education prompt did not select education-tutorial");
 assert(selectedIds("review this PR architecture without editing").includes("code-review"), "review prompt did not select code-review");

package/skills/presentation-slides/SKILL.md

@@ -20,7 +20,17 @@ tools:
 ---
 # Slides And Presentations
 
-Clarify audience, goal, length, and tone from context. Build a durable outline before slide text. Keep slides visually sparse: one message, one figure/table/story per slide when possible.
+Infer audience, goal, length, and tone from the request and available project context. Ask only when a missing fact materially changes the deck. Build a durable outline before slide text. Keep slides visually sparse: one message and usually one figure, table, or story per slide.
 
-Use markdown, HTML, LaTeX beamer, PPTX tooling, or available local converters depending on the workspace. Save source plus exported artifacts when possible.
+Use the workspace's established presentation tooling when it exists. Otherwise choose editable PPTX, HTML, Markdown, or LaTeX Beamer tooling that can be rebuilt locally. Keep essential titles, claims, labels, citations, and body text editable. Image generation may supply bounded visual assets, but never use one generated bitmap as a complete slide or slide background.
 
+Ground claims and calculations in the supplied sources. Preserve a reproducible source or build script and speaker notes when they improve delivery. Produce only the requested artifacts, with descriptive stable filenames. If the user supplied an exact validator or acceptance command, run that exact command after the final rebuild.
+
+Before completion:
+
+1. Rebuild the final deck and every requested export from the current source.
+2. Render every slide to a PNG or equivalent preview and inspect the actual images. Check especially wrapped titles, accent rules, clipping, collisions, overflow, unreadably small text, charts, tables, and consistent framing.
+3. Verify that the PPTX or source remains editable, exported files open, slide and PDF page counts agree, calculations match the source data, and no unsupported claims were introduced.
+4. In a Git repository, if the task requests a commit, stage intentional source and deliverables, narrowly ignore only transient build or perception evidence, commit the result, then run a fresh `git status --short`.
+
+Do not call the deck complete from a successful build alone. Artifact paths, model-generated visual descriptions, or an earlier clean status are not substitutes for current rendered inspection and final external verification.

package/src/agent-runner.js

@@ -2157,7 +2157,13 @@ export function buildKnownConstrainedPhasePlan(
   runtimeConfig = nextStepRuntimeConfig(config, state)
 ) {
   const repositoryStateRepair = runtimeConfig.testFailureRepositoryStateRepair === true;
-  if (runtimeConfig.testFailureRepairActive === true && !repositoryStateRepair) return null;
+  const generatedArtifactProducer =
+    runtimeConfig.generatedArtifactProducerPending === true;
+  if (
+    runtimeConfig.testFailureRepairActive === true &&
+    !repositoryStateRepair &&
+    !generatedArtifactProducer
+  ) return null;
 
   const freshSourceMutation = runtimeConfig.completionFreshMutationRequired === true;
   const verificationPending = runtimeConfig.testVerificationPending === true;
@@ -2181,6 +2187,7 @@ export function buildKnownConstrainedPhasePlan(
   if (
     !repositoryStateRepair &&
     !freshSourceMutation &&
+    !generatedArtifactProducer &&
     !verificationPending &&
     !requiredProjectCommandPending &&
     !verifiedCompletion &&
@@ -2191,19 +2198,22 @@ export function buildKnownConstrainedPhasePlan(
   }
 
   const command = String(
-    requiredProjectCommandPending
-      ? runtimeConfig.requiredProjectCommand || ""
-      : verificationPending
-        ? runtimeConfig.testVerificationCommand || ""
-        : repositoryStateRepair
-          ? runtimeConfig.testFailureCommand || ""
-          : runtimeConfig.verifiedCompletionCommand || ""
+    generatedArtifactProducer
+      ? runtimeConfig.generatedArtifactProducerCommand || ""
+      : requiredProjectCommandPending
+        ? runtimeConfig.requiredProjectCommand || ""
+        : verificationPending
+          ? runtimeConfig.testVerificationCommand || ""
+          : repositoryStateRepair
+            ? runtimeConfig.testFailureCommand || ""
+            : runtimeConfig.verifiedCompletionCommand || ""
   ).trim();
   if (
     !verifiedCompletion &&
     !artifactCommitPending &&
     !taskOwnedCommitPending &&
     !freshSourceMutation &&
+    !generatedArtifactProducer &&
     !command
   ) return null;
 
@@ -2211,6 +2221,8 @@ export function buildKnownConstrainedPhasePlan(
     ? "repository-state-repair"
     : freshSourceMutation
       ? "fresh-source-mutation"
+      : generatedArtifactProducer
+        ? "generated-artifact-producer"
       : requiredProjectCommandPending
       ? "required-project-command"
       : verificationPending
@@ -2250,6 +2262,12 @@ export function buildKnownConstrainedPhasePlan(
             "2. Preserve unrelated current behavior and do not edit private verification evidence.",
             "3. After the mutation succeeds, rerun the retained validation and complete required Git actions.",
           ].join("\n")
+      : generatedArtifactProducer
+        ? [
+            `1. Run the exact retained local producer command now: ${command}`,
+            "2. Rebuild generated artifacts from the latest canonical source mutation; do not rerun the stale validator first or substitute another command.",
+            "3. After the producer succeeds, run the exact retained validator and repair only from any fresh concrete failure.",
+          ].join("\n")
       : artifactCommitPending || taskOwnedCommitPending
       ? [
           "1. Use the offered commit_project_changes tool once; its path scope comes from recorded task-owned mutations.",
@@ -2281,6 +2299,8 @@ export function buildKnownConstrainedPhasePlan(
       ? runtimeConfig.completionFreshMutationNeedsSourceRead === true
         ? "Completion was rejected because a fresh canonical source correction is still missing. Read one exact offered project file now; command, test, Git, and finish actions remain intentionally unavailable until the source is grounded and materially patched."
         : "Completion was rejected because a fresh canonical source correction is still missing. Use the offered path-bounded apply_patch tool now. Do not substitute another read-only inspection, test rerun, Git command, private verifier edit, or finish claim."
+      : generatedArtifactProducer
+        ? "A canonical producer source changed after the last successful build. Run only the exact retained local producer command now so validation observes fresh artifacts; do not rerun the stale validator or invent another source edit."
       : artifactCommitPending
       ? "The exact artifact and current source changes already passed deterministic checks. Only the required local commit is missing. Call commit_project_changes with a concise factual subject, then finish; do not restart discovery or validation."
       : taskOwnedCommitPending
@@ -6030,6 +6050,9 @@ export function recordProjectVerificationOutcome(state = {}, toolResult = {}, co
         toolResult.blocked !== true &&
         commandCanMutateProjectContent(mutationCommand, commandPolicy)
     );
+    const generatedArtifactProducer = projectContentMutation
+      ? safeProjectProducerSegment(command, config)
+      : "";
     let requiredBatch = currentRequiredCommandBatch(verification, requiredCommands);
     const activeExecutionContract = state.meta?.activeExecutionContract;
     const activeTurnCommands =
@@ -6086,6 +6109,21 @@ export function recordProjectVerificationOutcome(state = {}, toolResult = {}, co
         paths: [],
         commandCategory: String(commandPolicy.category || "general-shell"),
       }, config);
+      if (
+        generatedArtifactProducer &&
+        Number(activeExecutionContract?.revision || 0) ===
+          Number(state.meta?.goalContract?.revision || 0)
+      ) {
+        activeExecutionContract.materialMutationRevision = verification.mutationRevision;
+        activeExecutionContract.materialMutationCommands = [
+          ...new Set([
+            ...(Array.isArray(activeExecutionContract.materialMutationCommands)
+              ? activeExecutionContract.materialMutationCommands
+              : []),
+            generatedArtifactProducer,
+          ]),
+        ].slice(0, 12);
+      }
     }
     const run = {
       command,
@@ -6096,6 +6134,7 @@ export function recordProjectVerificationOutcome(state = {}, toolResult = {}, co
       ...(requiredBatch?.id ? { requiredCommandBatchId: requiredBatch.id } : {}),
       ...(requiredCommand ? { requiredProjectCommand: requiredCommand } : {}),
       ...(exitProbe.present ? { explicitExitStatus: exitProbe.status } : {}),
+      ...(generatedArtifactProducer ? { generatedArtifactProducer } : {}),
     };
     if (requiredCommand && commandSucceeded) {
       if (!requiredBatch && requiredMutatingCommands.length === 0) {
@@ -10415,6 +10454,139 @@ function completionFreshMutationCandidatePaths(state = {}, config = {}) {
   return selected.slice(0, 16);
 }
 
+function commandSegmentHasProducerIntent(command = "") {
+  const normalized = normalizeProjectCommand(command);
+  const tokens = tokenizeShellWords(normalized);
+  if (!tokens.length) return false;
+  let index = 0;
+  while (/^[A-Za-z_][A-Za-z0-9_]*=/.test(String(tokens[index] || ""))) {
+    index += 1;
+  }
+  const executable = path.posix.basename(
+    String(tokens[index] || "").replace(/\\/g, "/")
+  ).toLocaleLowerCase("en-US");
+  const args = tokens.slice(index + 1);
+  const rejectedProducerName =
+    /(?:^|[_-])(?:acceptance|audit|check|lint|smoke|spec|test|validat(?:e|or|ion)?|verif(?:y|ier|ication)?)(?:[_-]|$)/i;
+  const producerName =
+    /(?:^|[_-])(?:build|bundle|compile|deck|export|generat(?:e|or)|package|presentation|regen(?:erate)?|render|report|slides?)(?:[_-]|$)/i;
+
+  if (["python", "python3", "node", "ruby", "bash", "sh"].some((name) =>
+    executable === name || executable.startsWith(`${name}.`)
+  )) {
+    const scriptIndex = args[0] === "-m" ? 1 : 0;
+    const scriptName = path.posix.basename(
+      String(args[scriptIndex] || "").replace(/\\/g, "/")
+    ).replace(/\.[A-Za-z0-9]{1,8}$/u, "");
+    return Boolean(
+      scriptName &&
+        producerName.test(scriptName) &&
+        !rejectedProducerName.test(scriptName)
+    );
+  }
+
+  if (["npm", "pnpm", "yarn", "bun"].includes(executable)) {
+    const script = String(
+      args[0] === "run" ? args[1] : args[0]
+    ).toLocaleLowerCase("en-US");
+    return Boolean(
+      script && producerName.test(script) && !rejectedProducerName.test(script)
+    );
+  }
+  if (["make", "ninja", "latexmk", "pdflatex", "xelatex", "lualatex", "openscad"].includes(executable)) {
+    return true;
+  }
+  if (executable === "pandoc") return args.some((arg) => ["-o", "--output"].includes(arg));
+  if (executable === "typst") return args[0] === "compile";
+  if (executable === "cmake") return args.includes("--build");
+  if (executable === "meson") return ["compile", "install"].includes(args[0]);
+  if (["cargo", "go", "dotnet"].includes(executable)) return args[0] === "build";
+  return Boolean(
+    executable &&
+      producerName.test(executable.replace(/\.[A-Za-z0-9]{1,8}$/u, "")) &&
+      !rejectedProducerName.test(executable)
+  );
+}
+
+function safeProjectProducerSegment(command = "", config = {}) {
+  const normalized = normalizeProjectCommand(
+    normalizeCommandForPolicy(command, config)
+  );
+  const unwrapped = parseNonMutatingExitStatusWrapper(normalized)?.command || normalized;
+  const sequence = parseTopLevelShellSequence(unwrapped);
+  if (
+    !sequence.commands.length ||
+    sequence.openQuote ||
+    sequence.trailingEscape ||
+    sequence.trailingSeparator
+  ) {
+    return "";
+  }
+  for (const rawSegment of sequence.commands) {
+    const segment = normalizeProjectCommand(rawSegment);
+    if (!segment || !commandSegmentHasProducerIntent(segment)) continue;
+    const policy = classifyCommand(segment);
+    if (
+      policy.hardBlocked === true ||
+      policy.needsNetwork === true ||
+      ["blocked", "destructive", "external-write", "git-remote", "git-workflow", "package-install"].includes(
+        String(policy.category || "")
+      ) ||
+      isSubstantiveTestCommand(segment, config) ||
+      !commandCanMutateProjectContent(segment, policy)
+    ) {
+      continue;
+    }
+    return segment;
+  }
+  return "";
+}
+
+function pendingGeneratedArtifactProducerCommand(
+  state = {},
+  config = {},
+  verification = {},
+  currentFailedTest = null
+) {
+  if (!currentFailedTest || currentFailedTest.passed === true) return "";
+  if (failedTestRequiresCleanRepositoryState(currentFailedTest)) return "";
+  const context = [
+    completionContractGoal(config, state),
+    state.meta?.taskProfile || config.taskProfile || "",
+    currentFailedTest.failureSummary || "",
+  ].join("\n");
+  if (
+    !/(?:\b(?:artifact|build|bundle|compile|deck|export|generat(?:e|ed|or)|output|package|presentation|rebuild|regenerate|render|report|slides?)\b|\.(?:pdf|pptx|docx|html|svg|png|jpe?g|webp|mp4|mov)\b)/i.test(
+      context
+    )
+  ) {
+    return "";
+  }
+  const mutationRevision = Math.max(0, Number(verification.mutationRevision || 0));
+  const latestSourceMutation = [...(verification.mutationHistory || [])]
+    .reverse()
+    .find(
+      (mutation) =>
+        Number(mutation?.revision || 0) === mutationRevision &&
+        ["apply_patch", "write_file"].includes(String(mutation?.toolName || "")) &&
+        (Array.isArray(mutation?.paths) ? mutation.paths : []).some(
+          (item) => !isPrivateVerificationEvidencePath(item)
+        )
+    );
+  if (!latestSourceMutation) return "";
+  for (const run of [...(verification.commandRuns || [])].reverse()) {
+    if (
+      run?.ok !== true ||
+      Number(run?.mutationRevision || 0) >= mutationRevision
+    ) {
+      continue;
+    }
+    const producer = safeProjectProducerSegment(run?.command || "", config);
+    if (producer) return producer;
+  }
+  return "";
+}
+
 function exactOutputPathsForState(state = {}) {
   const scsOutputPaths = Array.isArray(state.meta?.scs?.taskContract?.exactOutputPaths)
     ? state.meta.scs.taskContract.exactOutputPaths.filter(Boolean)
@@ -11082,7 +11254,7 @@ export function nextStepRuntimeConfig(config = {}, state = {}) {
       const entryAt = Date.parse(String(entry?.at || ""));
       return !Number.isFinite(repairAt) || (Number.isFinite(entryAt) && entryAt > repairAt);
     });
-    if (candidatePaths.length > 0 || !currentTurnRequiresFreshMutation) {
+    if (candidatePaths.length > 0) {
       runtimeConfig.completionFreshMutationRequired = true;
       runtimeConfig.completionFreshMutationRevision = currentTurnRequiresFreshMutation
         ? groundingMutationBaseline + 1
@@ -11099,6 +11271,15 @@ export function nextStepRuntimeConfig(config = {}, state = {}) {
   const latestRecordedTest = [...testRuns]
     .reverse()
     .find((run) => String(run?.command || "").trim());
+  const freshGeneratedArtifactProducer = [...(verification.commandRuns || [])]
+    .reverse()
+    .some(
+      (run) =>
+        run?.ok === true &&
+        String(run?.generatedArtifactProducer || "").trim() &&
+        Number(run?.mutationRevision || 0) === mutationRevision &&
+        Number(run?.privateMutationRevision || 0) === privateMutationRevision
+    );
   const retainedRepairPacket = state.meta?.failedTestRecoveryPacket;
   const repairedRetainedFailure = Boolean(
     latestRecordedTest?.passed !== true &&
@@ -11112,6 +11293,16 @@ export function nextStepRuntimeConfig(config = {}, state = {}) {
   );
   const retainedFailedTest =
     latestCurrentTest && latestCurrentTest.passed !== true ? latestCurrentTest : null;
+  const pendingArtifactProducerCommand = pendingGeneratedArtifactProducerCommand(
+    state,
+    config,
+    verification,
+    retainedFailedTest
+  );
+  if (pendingArtifactProducerCommand) {
+    runtimeConfig.generatedArtifactProducerPending = true;
+    runtimeConfig.generatedArtifactProducerCommand = pendingArtifactProducerCommand;
+  }
   if (retainedFailedTest) {
     const repositoryStateRepairMarker = state.meta?.repositoryStateRepair;
     const retainedRepositoryStateRepair = Boolean(
@@ -11572,7 +11763,7 @@ export function nextStepRuntimeConfig(config = {}, state = {}) {
       runtimeConfig.testVerificationCommand = String(retainedFailedTest.command || "");
     }
   } else if (
-    (!implementationOpen || repairedRetainedFailure) &&
+    (!implementationOpen || repairedRetainedFailure || freshGeneratedArtifactProducer) &&
     !latestCurrentTest &&
     latestRecordedTest &&
     !testRunMatchesVerificationRevision(latestRecordedTest, verification)

package/src/progressive-tool-selection.js

@@ -1937,6 +1937,16 @@ export function selectProgressiveTools(
     return artifactValidationToolNames(config).map((name) => available.get(name)).filter(Boolean);
   }
 
+  if (config.generatedArtifactProducerPending === true) {
+    const available = new Map(enabled.map(({ name, tool }) => [name, tool]));
+    const producerCommand = constrainRunCommand(
+      available.get("run_command"),
+      config.generatedArtifactProducerCommand,
+      "Run this exact previously successful local producer command once. Canonical source changed after its last run, so generated artifacts must be rebuilt before the retained validator can provide fresh evidence. Do not substitute another command or rerun the stale validator first."
+    );
+    return [producerCommand, finish].filter(Boolean);
+  }
+
   if (config.testFailureRepairActive === true) {
     const available = new Map(enabled.map(({ name, tool }) => [name, tool]));
     if (

package/src/scs-evidence.js

@@ -542,7 +542,10 @@ export function filterExplicitlyExcludedOutputPaths(paths = [], exclusions = [])
 }
 
 export function inferExplicitlyExcludedOutputPaths(goal = "") {
-  const source = String(goal || "");
+  // Preserve coordinated path lists that wrap after a comma. Prompt and task
+  // files commonly format "do not modify a, b,\nc, or d" across lines; splitting
+  // that text first drops the governing negative action from the continuation.
+  const source = String(goal || "").replace(/([,，、])\s*\r?\n\s*/gu, "$1 ");
   if (!source.trim()) return [];
   const extensionPattern = "md|txt|json|jsonl|ndjson|ya?ml|html|css|js|ts|tsx|jsx|py|sh|csv|tex|svg|png|jpe?g|webp|mp4|mov|pdf|docx";
   const pathPattern = new RegExp(
@@ -573,6 +576,11 @@ export function inferExplicitlyExcludedOutputPaths(goal = "") {
   for (const clause of source.split(/[;；\n]|(?<=[.!?。！？])\s+/u)) {
     pathPattern.lastIndex = 0;
     const matches = [...clause.matchAll(pathPattern)];
+    const immutablePathClause = Boolean(
+      /\b(?:treat|consider|regard)\b[^!?。！？;；\n]{0,260}\b(?:as\s+)?(?:immutable|read[ -]?only)\b/i.test(
+        clause
+      )
+    );
     let previousExcluded = false;
     for (let matchIndex = 0; matchIndex < matches.length; matchIndex += 1) {
       const match = matches[matchIndex];
@@ -595,6 +603,7 @@ export function inferExplicitlyExcludedOutputPaths(goal = "") {
           )
       );
       const directExclusion = Boolean(
+        immutablePathClause ||
         negativeActionBefore.test(before) ||
         negativeActionAfter.test(after) ||
         keepAbsent.test(`${before}${after}`) ||

package/src/task-profiles.js

@@ -122,7 +122,7 @@ export const TASK_PROFILES = {
     id: "slides",
     label: "Slides and presentations",
     prompt:
-      "Bias toward presentation, pitch deck, poster, lecture, and slide-style communication. Clarify audience and purpose from available context, create a durable outline and slide files or markdown deck, keep each slide visually focused, include speaker notes when useful, and export/preview when local tools support it.",
+      "Bias toward presentation, pitch deck, poster, lecture, and slide-style communication. Infer audience and purpose from available context, create a durable outline and source-grounded editable slide source, keep each slide visually focused, and include useful speaker notes. Preserve editable text, charts, tables, and shapes instead of flattening complete slides into images. Produce the requested deck/export formats and a reproducible build path when practical. Render every slide to a preview and inspect the actual pixels for clipping, collisions, wrapped-title decoration overlap, unreadable text, and inconsistent framing; rebuild after repairs. Verify source claims and calculations, artifact existence and package readability, slide/page counts across PPTX/PDF/previews, and any exact acceptance command supplied by the user. In a Git repository, when the task asks for a commit, commit intentional source and deliverables, narrowly ignore only transient build/perception evidence, and run a fresh git status --short before claiming completion.",
     tools: ["files", "shell", "canvas", "web_search"],
   },
   education: {