fix(agent99): validate v5 incident formatter

apps/api/tests/test_agent99_transport_recovery_deploy_contract.py

@@ -3,7 +3,6 @@ from __future__ import annotations
 import json
 from pathlib import Path
 
-
 ROOT = Path(__file__).resolve().parents[3]
 CONTROL = ROOT / "agent99-control-plane.ps1"
 DEPLOY = ROOT / "agent99-deploy.ps1"
@@ -76,6 +75,22 @@ def test_agent99_telegram_v5_hides_raw_evidence_and_has_operator_fields() -> Non
     assert 'messageFormat = "incident_card_zh_tw_v5"' in source
 
 
+def test_agent99_v5_formatter_synthetic_gate_loads_model_dependencies() -> None:
+    synthetic = (ROOT / "agent99-synthetic-tests.ps1").read_text(encoding="utf-8")
+
+    for function_name in (
+        "Convert-AgentBool",
+        "Get-AgentSha256Hex",
+        "Get-AgentIncidentCardModel",
+        "Format-AgentTelegramText",
+        "Format-AgentTelegramCaption",
+    ):
+        assert f'"{function_name}"' in synthetic
+    assert 'telegram:no_internal_paths' in synthetic
+    assert 'telegram:caption_bounded' in synthetic
+    assert 'C:\\Wooo' in synthetic
+
+
 def test_agent99_telegram_threads_source_alert_and_persists_lifecycle() -> None:
     source = CONTROL.read_text(encoding="utf-8")
     inbox = SRE_INBOX.read_text(encoding="utf-8")
@@ -149,6 +164,28 @@ def test_agent99_deployer_verifies_promoted_runtime_and_writes_revision() -> Non
         assert f'"{name}"' in bootstrap
 
 
+def test_agent99_completion_callback_waits_for_durable_same_trace_readback() -> None:
+    source = CONTROL.read_text(encoding="utf-8")
+    deploy = DEPLOY.read_text(encoding="utf-8")
+    config = json.loads((ROOT / "agent99.config.99.example.json").read_text())
+
+    callback = config["completionCallback"]
+    assert callback["enabled"] is True
+    assert callback["url"].startswith("https://awoooi.wooo.work/")
+    assert callback["tokenEnv"] == "AGENT99_SRE_RELAY_TOKEN"
+    assert callback["retryAfterMinutes"] == 5
+    assert 'schema_version = "agent99_completion_callback_v1"' in source
+    assert '"X-Agent99-Completion-Token" = $token' in source
+    assert '$receipt.durableReadback' in source
+    assert '$sameIdentity' in source
+    assert '$receipt.operationReceiptCount -gt 0' in source
+    assert 'state\\completion-callbacks\\pending' in source
+    assert 'Invoke-AgentPendingCompletionCallbacks' in source
+    assert 'Add-DefaultProperty $config "completionCallback"' in deploy
+    assert 'rawResponseStored = $false' in source
+    assert 'secretValueLogged = $false' in source
+
+
 def test_load_shedding_requires_configured_post_verifier() -> None:
     source = CONTROL.read_text(encoding="utf-8")
     function = source[source.index("function Invoke-LoadShedding") :]