[ADD] Local sTask lifecycle proof (queued -> completed) in demo runtime verification logs and tests

Author: Dmi3yy

PRD.md

@@ -18,6 +18,7 @@
 - Runtime HTTP integration (`tests/Integration/RuntimeIntegrationHttpTest.php`) -> PASS.
 - Підтверджено API шлях читання даних з БД через MCP (`evo.content.search`, `evo.content.root_tree`, `evo.content.get`).
 - Автоматично генерується `demo/logs.md` з деталями токена, MCP запитів/відповідей, manual-check командами і негативними probe-кейсами (`401/403/413/415/409/429`, `evo.model.get(User)` sanity).
+- `demo/logs.md` додатково включає локальний `sTask` lifecycle proof (`queued -> completed`) через `php artisan stask:worker`.
 
 Залишок до RC-1 (core platform hardening):
 - branch protection required-check enforcement для CI runtime jobs (`demo-runtime-proof`, `runtime-integration`) на `release/*`;

README.md

@@ -239,6 +239,7 @@ make demo-all
 This target installs demo Evo, starts `php -S`, issues sApi JWT, runs `php artisan emcp:test`, then runs `composer run test` with HTTP runtime integration enabled.
 After run, detailed evidence is written to:
 - `demo/logs.md` (token/masked auth info, MCP request payloads, HTTP statuses, responses, manual verification commands, plus negative probes: 401/403/413/415/409/429 and `evo.model.get(User)` sanity)
+- `demo/logs.md` also includes local `sTask` lifecycle proof (`queued -> completed`) via `php artisan stask:worker` in demo runtime.
 - `/tmp/emcp-demo-php-server.log` (php built-in server log)
 
 If GitHub API auth is needed during install, pass token via ENV (same pattern as `evolution`):

README.uk.md

@@ -238,6 +238,7 @@ make demo-all
 Ця ціль встановлює demo Evo, запускає `php -S`, видає sApi JWT, виконує `php artisan emcp:test`, а потім `composer run test` з увімкненою HTTP runtime integration перевіркою.
 Після виконання детальні докази записуються у:
 - `demo/logs.md` (masked token, MCP payload-и, HTTP статуси, відповіді, manual verification команди, а також negative probes: 401/403/413/415/409/429 і sanity check для `evo.model.get(User)`)
+- `demo/logs.md` також містить локальний proof для lifecycle `sTask` (`queued -> completed`) через `php artisan stask:worker` у demo runtime.
 - `/tmp/emcp-demo-php-server.log` (лог PHP built-in server)
 
 Якщо під час інсталяції потрібна GitHub авторизація API, передай токен через ENV (як у `evolution`):

SPEC.md

@@ -18,6 +18,7 @@ Current validation snapshot (2026-03-03):
 - Runtime HTTP integration PASS for `/api/v1/mcp/{server}`.
 - Verified content-read tool flow in runtime (`evo.content.search`, `evo.content.root_tree`, `evo.content.get`).
 - One-click verification writes `demo/logs.md` with request/response evidence, negative transport/security probes (`401/403/413/415/409/429`) and model-safety sanity (`evo.model.get(User)` without sensitive fields).
+- `demo/logs.md` also captures local `sTask` lifecycle proof (`queued -> completed`) in demo runtime.
 
 Open RC-1 validation scope:
 - live CI runtime integration jobs are wired for `release/*` pushes (`demo-runtime-proof`, `runtime-integration`), but branch-protection required-check enforcement must be configured in repository settings;

TASKS.md

@@ -237,6 +237,7 @@ DoD:
 - [ ] Configure repository branch protection to require `demo-runtime-proof` and `runtime-integration` on `release/*`.
 - [ ] Streaming tests under typical PHP-FPM constraints.
 - [ ] Async tests for `sTask` path and failover.
+- [x] Add local demo `sTask` lifecycle proof in `demo/logs.md` (`queued -> completed`) using `php artisan stask:worker`.
 - [x] Baseline feature-behavior test for dispatch idempotency semantics (`reuse` and `409 conflict`) with policy deny path.
 - [ ] Functional tests for `SiteContent` tree/TV tool contracts.
 - [ ] Security tests for forbidden fields and invalid TV operators/casts.

scripts/demo_verify.sh

@@ -325,6 +325,10 @@ EMCP_RUNTIME_NEGATIVE=1 \
 EMCP_RUNTIME_MODEL_SANITY=1 \
 EMCP_RUNTIME_NEGATIVE_REQUIRE_RATE_LIMIT=1 \
 EMCP_TEST_JWT_SECRET="${SAPI_JWT_SECRET}" \
+EMCP_STASK_LIFECYCLE_CHECK=1 \
+EMCP_STASK_WORKER_CMD="php artisan stask:worker" \
+EMCP_STASK_WORKER_CWD="${DEMO_CORE_DIR_PATH}" \
+EMCP_STASK_POLL_ATTEMPTS=20 \
 composer run test
 test_exit=$?
 set -e
@@ -466,6 +470,69 @@ dispatch_conflict_raw=$(mcp_post_with_token_optional_session "${probe_token}" "$
 dispatch_conflict_http_code=$(printf '%s' "${dispatch_conflict_raw}" | sed -n 's/^__HTTP_CODE__://p' | tail -n 1)
 dispatch_conflict_response=$(printf '%s' "${dispatch_conflict_raw}" | sed '/^__HTTP_CODE__:/d')
 
+dispatch_lifecycle_key='demo-verify-k2'
+dispatch_lifecycle_start_headers="${TMP_DIR}/dispatch-lifecycle-start.headers"
+dispatch_lifecycle_start_raw=$(mcp_post_with_token_optional_session "${probe_token}" "${dispatch_payload_a}" "${dispatch_lifecycle_start_headers}" "Idempotency-Key: ${dispatch_lifecycle_key}" "${dispatch_url}")
+dispatch_lifecycle_start_http_code=$(printf '%s' "${dispatch_lifecycle_start_raw}" | sed -n 's/^__HTTP_CODE__://p' | tail -n 1)
+dispatch_lifecycle_start_response=$(printf '%s' "${dispatch_lifecycle_start_raw}" | sed '/^__HTTP_CODE__:/d')
+dispatch_lifecycle_task_id=$(printf '%s' "${dispatch_lifecycle_start_response}" | php -r '
+$raw = stream_get_contents(STDIN);
+$json = json_decode($raw, true);
+$taskId = $json["task_id"] ?? null;
+if (is_numeric($taskId) && (int)$taskId > 0) {
+    echo (string)(int)$taskId;
+}
+')
+
+stask_worker_exit=0
+stask_worker_output=""
+if [ -n "${dispatch_lifecycle_task_id}" ]; then
+  set +e
+  stask_worker_output=$(cd "${DEMO_CORE_DIR_PATH}" && php artisan stask:worker 2>&1)
+  stask_worker_exit=$?
+  set -e
+else
+  stask_worker_exit=1
+  stask_worker_output="No task_id returned from lifecycle dispatch start; async path unavailable."
+fi
+
+dispatch_lifecycle_after_headers="${TMP_DIR}/dispatch-lifecycle-after.headers"
+dispatch_lifecycle_after_raw=$(mcp_post_with_token_optional_session "${probe_token}" "${dispatch_payload_a}" "${dispatch_lifecycle_after_headers}" "Idempotency-Key: ${dispatch_lifecycle_key}" "${dispatch_url}")
+dispatch_lifecycle_after_http_code=$(printf '%s' "${dispatch_lifecycle_after_raw}" | sed -n 's/^__HTTP_CODE__://p' | tail -n 1)
+dispatch_lifecycle_after_response=$(printf '%s' "${dispatch_lifecycle_after_raw}" | sed '/^__HTTP_CODE__:/d')
+
+stask_lifecycle_result=$(DISPATCH_START="${dispatch_lifecycle_start_response}" DISPATCH_AFTER="${dispatch_lifecycle_after_response}" WORKER_EXIT="${stask_worker_exit}" php -r '
+$start = json_decode((string)getenv("DISPATCH_START"), true);
+$after = json_decode((string)getenv("DISPATCH_AFTER"), true);
+$workerExit = (int)getenv("WORKER_EXIT");
+if (!is_array($start)) {
+    echo "FAILED: lifecycle start response is not JSON";
+    exit(0);
+}
+if (!is_array($after)) {
+    echo "FAILED: lifecycle after-worker response is not JSON";
+    exit(0);
+}
+if ($workerExit !== 0) {
+    echo "FAILED: stask worker exited with code " . $workerExit;
+    exit(0);
+}
+if (($after["reused"] ?? null) !== true) {
+    echo "FAILED: lifecycle reuse response has reused!=true";
+    exit(0);
+}
+if (($after["status"] ?? null) !== "completed") {
+    echo "FAILED: lifecycle status is not completed";
+    exit(0);
+}
+$result = $after["result"] ?? null;
+if (!is_array($result)) {
+    echo "FAILED: lifecycle completed response has no result payload";
+    exit(0);
+}
+echo "PASS: queued -> completed with persisted result";
+')
+
 model_headers_file="${TMP_DIR}/model.headers"
 model_raw=$(mcp_post_with_token_optional_session "${probe_token}" "${model_get_user_payload}" "${model_headers_file}")
 model_http_code=$(printf '%s' "${model_raw}" | sed -n 's/^__HTTP_CODE__://p' | tail -n 1)
@@ -705,6 +772,33 @@ Response:
 ${model_response}
 \`\`\`
 
+### 13) local sTask lifecycle probe (queued -> completed)
+
+Dispatch start HTTP: \`${dispatch_lifecycle_start_http_code}\`
+Task ID: \`${dispatch_lifecycle_task_id:-n/a}\`
+
+Dispatch start response:
+\`\`\`json
+${dispatch_lifecycle_start_response}
+\`\`\`
+
+Worker command: \`php artisan stask:worker\`  
+Worker exit code: \`${stask_worker_exit}\`
+
+Worker output:
+\`\`\`
+${stask_worker_output}
+\`\`\`
+
+Dispatch after worker HTTP: \`${dispatch_lifecycle_after_http_code}\`
+
+Dispatch after worker response:
+\`\`\`json
+${dispatch_lifecycle_after_response}
+\`\`\`
+
+Lifecycle result: \`${stask_lifecycle_result}\`
+
 ## How To Verify Manually
 
 1. Get token:
@@ -742,6 +836,12 @@ curl -sS -H 'Content-Type: application/json' -H 'Authorization: Bearer <TOKEN>'
   -d '${model_get_user_payload}' \\
   '${mcp_url}'
 \`\`\`
+
+6. Local sTask worker run (optional lifecycle proof in demo):
+\`\`\`bash
+cd '${DEMO_CORE_DIR_PATH}'
+php artisan stask:worker
+\`\`\`
 EOF
 
 echo "[demo-verify] Wrote detailed run log: ${LOGS_MD}"

tests/Integration/RuntimeIntegrationHttpTest.php

@@ -282,6 +282,44 @@ function issueHs256Jwt(array $payload, string $secret): string
     return $signingInput . '.' . $encode($signature);
 }
 
+/**
+ * @return array{exit:int, output:string}
+ */
+function runShellCommand(string $command, string $cwd = ''): array
+{
+    if (function_exists('proc_open')) {
+        $descriptors = [
+            0 => ['pipe', 'r'],
+            1 => ['pipe', 'w'],
+            2 => ['pipe', 'w'],
+        ];
+        $proc = proc_open($command, $descriptors, $pipes, $cwd !== '' ? $cwd : null);
+        if (is_resource($proc)) {
+            fclose($pipes[0]);
+            $stdout = stream_get_contents($pipes[1]);
+            fclose($pipes[1]);
+            $stderr = stream_get_contents($pipes[2]);
+            fclose($pipes[2]);
+            $exit = proc_close($proc);
+
+            return [
+                'exit' => is_int($exit) ? $exit : 1,
+                'output' => trim((string)$stdout . (string)$stderr),
+            ];
+        }
+    }
+
+    $prefix = $cwd !== '' ? 'cd ' . escapeshellarg($cwd) . ' && ' : '';
+    $outputLines = [];
+    $exit = 1;
+    @exec($prefix . $command . ' 2>&1', $outputLines, $exit);
+
+    return [
+        'exit' => $exit,
+        'output' => trim(implode("\n", $outputLines)),
+    ];
+}
+
 $enabled = getenv('EMCP_INTEGRATION_ENABLED');
 if ($enabled !== '1') {
     info('Skipped (set EMCP_INTEGRATION_ENABLED=1 to run runtime integration checks).');
@@ -340,6 +378,13 @@ function issueHs256Jwt(array $payload, string $secret): string
 if ($rateProbeMaxAttempts < 1) {
     $rateProbeMaxAttempts = 90;
 }
+$runStaskLifecycleCheck = getenv('EMCP_STASK_LIFECYCLE_CHECK') === '1';
+$staskWorkerCommand = trim((string)getenv('EMCP_STASK_WORKER_CMD'));
+$staskWorkerCwd = trim((string)getenv('EMCP_STASK_WORKER_CWD'));
+$staskPollAttempts = (int)getenv('EMCP_STASK_POLL_ATTEMPTS');
+if ($staskPollAttempts < 1) {
+    $staskPollAttempts = 20;
+}
 
 $readOnlyToken = trim((string)getenv('EMCP_TEST_JWT_READ_TOKEN'));
 $jwtSecret = trim((string)getenv('EMCP_TEST_JWT_SECRET'));
@@ -683,6 +728,79 @@ function issueHs256Jwt(array $payload, string $secret): string
         if ($traceId === '') {
             fail("{$label} dispatch conflict missing error.trace_id.");
         }
+
+        if ($runStaskLifecycleCheck && $label === 'api') {
+            if ($staskWorkerCommand === '' || $staskWorkerCwd === '') {
+                fail("{$label} sTask lifecycle check requires EMCP_STASK_WORKER_CMD and EMCP_STASK_WORKER_CWD.");
+            }
+
+            $lifecycleKey = 'runtime-k-lifecycle';
+            $dispatchLifecycleStart = httpPostJson($dispatchUrl, [
+                'jsonrpc' => '2.0',
+                'id' => 'dl1',
+                'method' => 'tools/call',
+                'params' => [
+                    'name' => 'evo.content.search',
+                    'arguments' => ['limit' => 1, 'offset' => 0],
+                ],
+            ], array_merge($callHeaders, ['Idempotency-Key: ' . $lifecycleKey]));
+
+            if (!in_array($dispatchLifecycleStart['status'], [200, 202], true)) {
+                fail("{$label} sTask lifecycle start expected 200/202, got {$dispatchLifecycleStart['status']}.");
+            }
+
+            $dispatchLifecycleStartJson = decodeJson($dispatchLifecycleStart['body']);
+            $dispatchLifecycleTaskId = is_numeric($dispatchLifecycleStartJson['task_id'] ?? null)
+                ? (int)$dispatchLifecycleStartJson['task_id']
+                : 0;
+
+            if ($dispatchLifecycleTaskId < 1) {
+                fail("{$label} sTask lifecycle expected async task_id > 0, got " . (string)($dispatchLifecycleStartJson['task_id'] ?? 'null') . '.');
+            }
+
+            $workerRun = runShellCommand($staskWorkerCommand, $staskWorkerCwd);
+            if ($workerRun['exit'] !== 0) {
+                fail("{$label} sTask worker command failed (exit {$workerRun['exit']}): " . $workerRun['output']);
+            }
+
+            $completed = false;
+            for ($i = 1; $i <= $staskPollAttempts; $i++) {
+                $dispatchLifecycleAfter = httpPostJson($dispatchUrl, [
+                    'jsonrpc' => '2.0',
+                    'id' => 'dl2-' . $i,
+                    'method' => 'tools/call',
+                    'params' => [
+                        'name' => 'evo.content.search',
+                        'arguments' => ['limit' => 1, 'offset' => 0],
+                    ],
+                ], array_merge($callHeaders, ['Idempotency-Key: ' . $lifecycleKey]));
+
+                if (!in_array($dispatchLifecycleAfter['status'], [200, 202], true)) {
+                    fail("{$label} sTask lifecycle reuse expected 200/202, got {$dispatchLifecycleAfter['status']}.");
+                }
+
+                $dispatchLifecycleAfterJson = decodeJson($dispatchLifecycleAfter['body']);
+                if (($dispatchLifecycleAfterJson['reused'] ?? null) !== true) {
+                    fail("{$label} sTask lifecycle reuse must return reused=true.");
+                }
+
+                $lifecycleStatus = trim((string)($dispatchLifecycleAfterJson['status'] ?? ''));
+                if ($lifecycleStatus === 'completed') {
+                    $result = $dispatchLifecycleAfterJson['result'] ?? null;
+                    if (!is_array($result)) {
+                        fail("{$label} sTask lifecycle completed response missing result payload.");
+                    }
+                    $completed = true;
+                    break;
+                }
+
+                usleep(300000);
+            }
+
+            if (!$completed) {
+                fail("{$label} sTask lifecycle did not reach completed status after {$staskPollAttempts} polls.");
+            }
+        }
     }
 
     info("{$label} checks passed.");