@lucid-agents/taskmarket 1.19.0 → 1.19.1

package/dist/agent-compatibility.json

@@ -1,5 +1,5 @@
 {
-  "taskmarket": "1.19.0",
+  "taskmarket": "1.19.1",
   "manifestVersion": 1,
   "pi": {
     "package": "@earendil-works/pi-coding-agent",
@@ -35,6 +35,16 @@
       "version": "0.85.1"
     }
   ],
+  "piVendored": [
+    {
+      "package": "@silvia-odwyer/photon-node",
+      "version": "0.3.4"
+    },
+    {
+      "package": "jiti",
+      "version": "2.7.0"
+    }
+  ],
   "support": [
     {
       "package": "ssh2",

package/dist/{budget-view-JPZ7HWR2.js → budget-view-J6L7X6EY.js}

@@ -15,7 +15,7 @@ import {
   statusBarText,
   uncertainPurchaseMessage,
   usdcToAtomic
-} from "./chunk-EB6OJBF5.js";
+} from "./chunk-XJOB4NMV.js";
 import "./chunk-S7SJMJ2I.js";
 export {
   AGENT_VIEW_VERSION,

package/dist/{channels-ZMYXFZ72.js → channels-7DEGKHO5.js}

@@ -10,10 +10,10 @@ import {
   selectRail,
   uncertainPurchases,
   withdrawalHatch
-} from "./chunk-7Y7IOFKT.js";
-import "./chunk-VMSV4EYS.js";
-import "./chunk-PGXPZFVY.js";
-import "./chunk-EB6OJBF5.js";
+} from "./chunk-MZSOLQZB.js";
+import "./chunk-NRKTRQEA.js";
+import "./chunk-X7AUWPZV.js";
+import "./chunk-XJOB4NMV.js";
 import "./chunk-YM4S6IE4.js";
 import "./chunk-S7SJMJ2I.js";
 export {

package/dist/{chunk-OKZ2NRYZ.js → chunk-4ZC6SH7H.js}

@@ -24,6 +24,15 @@ var AGENT_COMPATIBILITY = {
     { package: "@earendil-works/chord", version: "0.85.1" },
     { package: "@earendil-works/pi-telemetry", version: "0.85.1" }
   ],
+  /**
+   * The packages Pi's published bundle still loads from npm, copied as published into
+   * `dist/pi/vendor`. Pi takes them at a range, so a lockfile bump could otherwise ship another
+   * release; the build also checks every copied file's hash (scripts/bundle-agent-runtime.ts).
+   */
+  piVendored: [
+    { package: "@silvia-odwyer/photon-node", version: "0.3.4" },
+    { package: "jiti", version: "2.7.0" }
+  ],
   /** What the remote tool extension and the broker connector are built with besides Pi. */
   support: [{ package: "ssh2", version: "1.17.0" }],
   /**
@@ -76,9 +85,14 @@ function findInstalledPackage(name, fromDir) {
   }
 }
 var here = path.dirname(fileURLToPath(import.meta.url));
-function piRuntime(fromDir = here) {
+var runningFromSource = fileURLToPath(import.meta.url).endsWith(".ts");
+function piRuntime(fromDir = here, options = {}) {
   const staged = path.join(fromDir, "pi");
-  const packageDir = existsSync(path.join(staged, "package.json")) ? staged : findInstalledPackage(AGENT_COMPATIBILITY.pi.package, fromDir)?.dir;
+  let packageDir;
+  if (existsSync(path.join(staged, "package.json"))) packageDir = staged;
+  else if (options.fromSource ?? runningFromSource) {
+    packageDir = findInstalledPackage(AGENT_COMPATIBILITY.pi.package, fromDir)?.dir;
+  }
   if (!packageDir) return void 0;
   return { packageDir, cliPath: path.join(packageDir, "dist", "bundle", "cli.js") };
 }
@@ -92,11 +106,11 @@ function assertAgentCompatibility(options = {}) {
     );
   }
   const fromDir = options.fromDir ?? here;
-  const runtime = piRuntime(fromDir);
+  const runtime = piRuntime(fromDir, { fromSource: options.fromSource });
   if (!runtime || !existsSync(runtime.cliPath)) {
     throw new AgentLaunchError(
       "incompatible_install",
-      `Pi, which taskmarket agent runs, is missing from this install; ${reinstall}`
+      `This install is damaged: the Pi bundled with it (${path.join(fromDir, "pi")}) is missing or incomplete, and taskmarket agent runs no other Pi; ${reinstall}`
     );
   }
   const pi = JSON.parse(readFileSync(path.join(runtime.packageDir, "package.json"), "utf8"));

package/dist/{chunk-3HCDMHXW.js → chunk-AEOZNLZD.js}

@@ -22,7 +22,7 @@ import {
   unresolvedCount,
   updateSyncState,
   uploadWorkspace
-} from "./chunk-MJR2CZWZ.js";
+} from "./chunk-ATHBKQT4.js";
 import {
   AgentLaunchError
 } from "./chunk-YM4S6IE4.js";

package/dist/{chunk-MJR2CZWZ.js → chunk-ATHBKQT4.js}

@@ -1,7 +1,7 @@
 import { createRequire as __tmCreateRequire } from 'node:module'; import { fileURLToPath as __tmFileURLToPath } from 'node:url'; import { dirname as __tmDirname } from 'node:path'; const require = __tmCreateRequire(import.meta.url); const __tmFilename = __tmFileURLToPath(import.meta.url); const __tmDirnameValue = __tmDirname(__tmFilename);
 import {
   getTaskmarketHome
-} from "./chunk-PGXPZFVY.js";
+} from "./chunk-X7AUWPZV.js";
 import {
   AgentLaunchError
 } from "./chunk-YM4S6IE4.js";
@@ -23778,6 +23778,7 @@ function hostKeyBlob(pinned) {
 var KILL_SETTLE_MS = 5e3;
 var KILL_RETRY_MS = [1e3, 3e3];
 var EXIT_DRAIN_MS = 150;
+var UNTIL_CLOSE_MS = 6e4;
 var earlyExits = /* @__PURE__ */ new WeakMap();
 var SshConnection = class _SshConnection {
   client;
@@ -24076,8 +24077,8 @@ var SshConnection = class _SshConnection {
             exitSignal = signal;
           drainTimer = setTimeout(() => {
             channel.close();
-            finish();
-          }, EXIT_DRAIN_MS);
+            finish(options.untilClose ? new Error("The sandbox did not finish sending the command output") : void 0);
+          }, options.untilClose ? UNTIL_CLOSE_MS : EXIT_DRAIN_MS);
         };
         channel.on("exit", onExit);
         const early = earlyExits.get(channel);
@@ -24528,7 +24529,8 @@ var SshSandboxBackend = class {
       },
       signal,
       maxStreamBytes: this.maxStreamBytes,
-      killCommand: stopScopeCommand(unit)
+      killCommand: stopScopeCommand(unit),
+      untilClose: true
     });
     return { exitCode, stderr: Buffer.concat(stderr).toString("utf8").trim().slice(0, 2e3) };
   }
@@ -24609,7 +24611,16 @@ var SshSandboxBackend = class {
     } finally {
       options.signal?.removeEventListener("abort", onAbort);
     }
-    const parsed = parseManifestOutput(Buffer.concat(out));
+    if (overLimit)
+      throw new ManifestLimitError(options.limit);
+    let parsed;
+    try {
+      parsed = parseManifestOutput(Buffer.concat(out));
+    } catch (error) {
+      if (entries >= (limit + 1) * 4)
+        throw new ManifestLimitError(options.limit);
+      throw error;
+    }
     if (parsed.length > limit)
       throw new ManifestLimitError(options.limit);
     return parsed;

package/dist/{chunk-F2SZG7TC.js → chunk-ICT56PNO.js}

@@ -1,15 +1,16 @@
 import { createRequire as __tmCreateRequire } from 'node:module'; import { fileURLToPath as __tmFileURLToPath } from 'node:url'; import { dirname as __tmDirname } from 'node:path'; const require = __tmCreateRequire(import.meta.url); const __tmFilename = __tmFileURLToPath(import.meta.url); const __tmDirnameValue = __tmDirname(__tmFilename);
 import {
   x402FeePost
-} from "./chunk-6KJ5EFBN.js";
+} from "./chunk-M7WD6A2T.js";
 import {
   createWalletAccountFromKeystore,
   signMessage
-} from "./chunk-VMSV4EYS.js";
+} from "./chunk-NRKTRQEA.js";
 import {
   READ_AUTH_ADDRESS_HEADER,
   READ_AUTH_SIGNATURE_HEADER,
   TASK_ACCESS_GRANT_HEADER,
+  TaskAwardSchema,
   apiGet,
   apiPost,
   buildClaimMessage,
@@ -18,7 +19,7 @@ import {
   getTaskmarketHome,
   isRecordingPendingResponse,
   loadKeystore
-} from "./chunk-PGXPZFVY.js";
+} from "./chunk-X7AUWPZV.js";
 
 // src/lib/read-auth.ts
 async function signReadAuth() {
@@ -313,6 +314,16 @@ async function getAgentStats(ctx, options) {
     {}
   );
 }
+function taskAwardsOf(task) {
+  const parsed = TaskAwardSchema.array().safeParse(task.awards ?? []);
+  if (!parsed.success) {
+    throw new TaskOperationError(
+      "malformed_response",
+      `Task ${task.id} returned awards that do not match the award schema`
+    );
+  }
+  return parsed.data;
+}
 async function claimTask(ctx, ref, options = {}) {
   const signature = await ctx.signer.signMessage(buildClaimMessage(ref.taskId));
   const { data, idempotencyKey } = await ctx.transport.post(
@@ -438,6 +449,7 @@ export {
   listWorkerSubmissions,
   getWorkerInbox,
   getAgentStats,
+  taskAwardsOf,
   claimTask,
   authorizeUploads,
   readArtifactFile,

package/dist/{chunk-U5F3Z2BR.js → chunk-IWZNOYQE.js}

@@ -6,14 +6,14 @@ import {
   loadDeliverableRecord,
   readComputeView,
   taskStage
-} from "./chunk-RKGRXJ5X.js";
+} from "./chunk-OTXEK6VM.js";
 import {
   activeClaim,
   captureProblem,
   killedSession,
   loadSyncState,
   orphanOf
-} from "./chunk-MJR2CZWZ.js";
+} from "./chunk-ATHBKQT4.js";
 import {
   allocationViews,
   channelView,
@@ -21,19 +21,19 @@ import {
   openAgentChannels,
   uncertainPurchases,
   withdrawalHatch
-} from "./chunk-7Y7IOFKT.js";
+} from "./chunk-MZSOLQZB.js";
 import {
   SandboxListOutputSchema,
   apiUrl,
   selectedNetwork
-} from "./chunk-PGXPZFVY.js";
+} from "./chunk-X7AUWPZV.js";
 import {
   AGENT_VIEW_VERSION,
   blockingPurchases,
   channelLines,
   computeLines,
   formatUsdc
-} from "./chunk-EB6OJBF5.js";
+} from "./chunk-XJOB4NMV.js";
 import {
   AgentLaunchError
 } from "./chunk-YM4S6IE4.js";
@@ -60,6 +60,7 @@ async function readTaskStatus(wallet) {
     } : null,
     deliverableId: record.deliverable?.deliverableId ?? record.submission?.deliverableId ?? null,
     submissionId: record.submission?.submissionId ?? null,
+    outcome: record.state === "submitted" ? record.outcome ?? null : null,
     updatedAt: record.updatedAt,
     source: "saved_state"
   };
@@ -289,6 +290,11 @@ var STAGES = {
   frozen: "frozen (validated, waiting for your approval to submit)",
   submitting: "submitting (sent; the next session looks it up before anything is sent again)",
   submitted: "submitted (not yet accepted or paid)",
+  awaiting_acceptance: "awaiting acceptance (submitted; the requester or evaluator decides)",
+  reward_pending: "reward pending (awarded; the payout is not verified on the chain yet)",
+  paid: "paid (the payout is verified on the chain)",
+  rejected: "rejected (no reward)",
+  expired: "expired (ended without an award; no reward)",
   stopped: "stopped"
 };
 function taskLines(task, error) {
@@ -304,6 +310,17 @@ function taskLines(task, error) {
   }
   if (task.deliverableId) lines.push(`  Deliverable: ${task.deliverableId}`);
   if (task.submissionId) lines.push(`  Submission: ${task.submissionId}`);
+  const outcome = task.outcome;
+  if (outcome?.payout) {
+    lines.push(
+      `  Paid: ${outcome.payout.amount} atomic units of ${outcome.payout.asset} in ${outcome.payout.settlementTxHash}`
+    );
+  } else if (outcome?.award) {
+    lines.push(
+      `  Award: ${outcome.award.workerPayment} atomic units of ${outcome.award.asset}, not verified (${outcome.unverified?.reason ?? "unverified"})`
+    );
+  }
+  if (outcome) lines.push(`  Outcome observed ${outcome.observedAt}`);
   lines.push(`  As recorded ${task.updatedAt}`);
   return lines;
 }

package/dist/{chunk-6KJ5EFBN.js → chunk-M7WD6A2T.js}

@@ -16,7 +16,7 @@ import {
   readMppTempoChallenge,
   reconcileX402Payment,
   withX402FileLock
-} from "./chunk-VMSV4EYS.js";
+} from "./chunk-NRKTRQEA.js";
 import {
   ApiError,
   ComputeCreditBuyOutputSchema,
@@ -38,7 +38,7 @@ import {
   resolveIdempotencyKey,
   selectedNetwork,
   withIdempotentWrite
-} from "./chunk-PGXPZFVY.js";
+} from "./chunk-X7AUWPZV.js";
 
 // src/lib/x402-fee.ts
 import { randomUUID as randomUUID3 } from "crypto";

package/dist/{chunk-7Y7IOFKT.js → chunk-MZSOLQZB.js}

@@ -11,15 +11,19 @@ import {
   listX402Payments,
   loadX402Policy,
   rpcUrlForNetwork
-} from "./chunk-VMSV4EYS.js";
+} from "./chunk-NRKTRQEA.js";
 import {
   getTaskmarketHome,
   keystoreExists,
   loadKeystore
-} from "./chunk-PGXPZFVY.js";
+} from "./chunk-X7AUWPZV.js";
 import {
-  formatUsdc
-} from "./chunk-EB6OJBF5.js";
+  failureDetail,
+  failureDetailOf,
+  formatUsdc,
+  responseFailureReason,
+  withFailureDetail
+} from "./chunk-XJOB4NMV.js";
 import {
   AgentLaunchError
 } from "./chunk-YM4S6IE4.js";
@@ -299,6 +303,63 @@ function parse(bytes) {
 function routeOfCatalogRow(row) {
   return row?.owned_by === "anthropic" ? "/providers/anthropic/v1/messages" : "/providers/openai/v1/responses";
 }
+var MAX_NOTED_FAILURES = 16;
+var NETWORK_CODE = /^[A-Z][A-Z0-9_]{2,40}$/;
+function networkCode(error) {
+  let current = error?.cause;
+  for (let depth = 0; depth < 5 && current && typeof current === "object"; depth++) {
+    const code = current.code;
+    if (typeof code === "string" && NETWORK_CODE.test(code)) return code;
+    current = current.cause;
+  }
+  return void 0;
+}
+function payerFailureDetail(error) {
+  const e = error;
+  const message = typeof e?.message === "string" && !(typeof e.code === "string" && e.message.includes(e.code)) ? e.message : void 0;
+  const code = networkCode(error);
+  return failureDetail({
+    status: e?.status ?? e?.response?.status,
+    reason: responseFailureReason(e?.response) ?? (code ? `${message ?? "network error"} (${code})` : message)
+  });
+}
+function recordingFailures(payer) {
+  const noted = /* @__PURE__ */ new Map();
+  const note = (invocationId, detail) => {
+    if (!detail) return;
+    noted.delete(invocationId);
+    noted.set(invocationId, detail);
+    if (noted.size > MAX_NOTED_FAILURES) noted.delete(noted.keys().next().value);
+  };
+  return {
+    payer: {
+      apiVersion: payer.apiVersion,
+      async request(input, callOptions) {
+        try {
+          const result = await payer.request(input, callOptions);
+          const status = result.response.status;
+          if (status < 200 || status > 299) {
+            note(
+              input.invocationId,
+              failureDetail({ status, reason: responseFailureReason(result.response) })
+            );
+          }
+          return result;
+        } catch (error) {
+          note(input.invocationId, payerFailureDetail(error));
+          throw error;
+        }
+      },
+      status: (invocationId) => payer.status(invocationId),
+      reconcile: (invocationId) => payer.reconcile(invocationId)
+    },
+    take(invocationId) {
+      const detail = noted.get(invocationId);
+      noted.delete(invocationId);
+      return detail;
+    }
+  };
+}
 async function createAgentRails(options) {
   const journalPath = getX402JournalPath();
   const policyPath = getX402PolicyPath();
@@ -342,8 +403,9 @@ async function createAgentRails(options) {
         ...options.onConfirmationWait ? { onWait: (progress) => options.onConfirmationWait(rail, progress) } : {}
       }
     });
+    const recorder = recordingFailures(payer);
     const transport = createTaskMarketTransport({
-      payer,
+      payer: recorder.payer,
       origin: rail.origin,
       allocationId: rail.allocationId,
       policyRuleId: rail.policyRuleId,
@@ -352,7 +414,7 @@ async function createAgentRails(options) {
       balances: () => allocations.balances(),
       ...options.fetch ? { fetch: options.fetch } : {}
     });
-    return { rail, payer, transport };
+    return { rail, payer, transport, takeFailureDetail: recorder.take };
   });
 }
 function bodyModel(body) {
@@ -409,12 +471,16 @@ function createAgentTransport(rails) {
       }
       try {
         return await rail.transport.purchase(invocation, signal, onResponse);
-      } catch (error) {
+      } catch (caught) {
+        const error = withFailureDetail(caught, rail.takeFailureDetail?.(invocation.id));
         if (error instanceof XgatePurchaseError && error.pending && await neverRecorded(rail.payer, invocation.id)) {
-          throw new XgatePurchaseError(
-            error.code === "outcome_uncertain" ? "channel_operation_pending" : error.code,
-            invocation.id,
-            false
+          throw withFailureDetail(
+            new XgatePurchaseError(
+              error.code === "outcome_uncertain" ? "channel_operation_pending" : error.code,
+              invocation.id,
+              false
+            ),
+            failureDetailOf(error)
           );
         }
         throw error;

package/dist/{chunk-VMSV4EYS.js → chunk-NRKTRQEA.js}

@@ -11,7 +11,7 @@ import {
   loadKeystore,
   mppAttributionMemo,
   parseMppChallenge
-} from "./chunk-PGXPZFVY.js";
+} from "./chunk-X7AUWPZV.js";
 
 // ../../packages/x402-payer/dist/api.js
 var X402_PAYER_API_VERSION = 1;
@@ -4254,13 +4254,17 @@ async function runX402Exchange(runtime, input, options, context) {
     throw aborted();
   let response;
   try {
-    response = await fetchImpl(new Request(prepared.url, {
-      method: prepared.method,
-      headers: unpaidHeaders,
-      body: prepared.body,
-      redirect: "error",
-      signal
-    }));
+    response = await fetchImpl(
+      new Request(prepared.url, {
+        method: prepared.method,
+        headers: unpaidHeaders,
+        body: prepared.body,
+        redirect: "error",
+        signal
+      }),
+      // See the paid request below: without it, a garbage collection can cut off the abort.
+      { signal }
+    );
   } catch (error) {
     if (signal.aborted)
       throw aborted();
@@ -4576,13 +4580,19 @@ async function runX402Exchange(runtime, input, options, context) {
   await transition({ state: "dispatched" });
   let paid;
   try {
-    paid = await fetchImpl(new Request(prepared.url, {
-      method: prepared.method,
-      headers: paidHeaders,
-      body: prepared.body,
-      redirect: "error",
-      signal
-    }));
+    paid = await fetchImpl(
+      new Request(prepared.url, {
+        method: prepared.method,
+        headers: paidHeaders,
+        body: prepared.body,
+        redirect: "error",
+        signal
+      }),
+      // The signal again, so fetch follows it directly. A Request follows its signal through an
+      // AbortController that only the Request holds strongly: once fetch has copied it, a garbage
+      // collection drops that controller, and aborting `signal` no longer cancels the request.
+      { signal }
+    );
   } catch (error) {
     await transition({ state: "unknown", error: errorMessage(error) });
     throw fail("outcome_uncertain", X402_OUTCOME_UNKNOWN_MESSAGE, { cause: error, pending: true });
@@ -5464,7 +5474,7 @@ function createChannelRuntime(config) {
     const combined = anyX402Signal([deadline.signal, ...signal ? [signal] : []]);
     try {
       throwIfAborted(combined.signal);
-      const response = await (config.fetch ?? globalThis.fetch)(new Request(requestUrl, { ...init, redirect: "error", signal: combined.signal }));
+      const response = await (config.fetch ?? globalThis.fetch)(new Request(requestUrl, { ...init, redirect: "error", signal: combined.signal }), { signal: combined.signal });
       const bytes = await readX402BoundedBody(response, 64 * 1024, combined.signal);
       let body;
       try {

package/dist/{chunk-RKGRXJ5X.js → chunk-OTXEK6VM.js}

@@ -8,7 +8,7 @@ import {
   unsafeHostPath,
   withFileLock,
   writeAtomic
-} from "./chunk-MJR2CZWZ.js";
+} from "./chunk-ATHBKQT4.js";
 import {
   buyComputeCredit,
   fetchComputePricing,
@@ -16,14 +16,14 @@ import {
   loadComputeCreditConfig,
   onComputeBalanceObserved,
   readComputeCreditStatus
-} from "./chunk-6KJ5EFBN.js";
+} from "./chunk-M7WD6A2T.js";
 import {
   getTaskmarketHome
-} from "./chunk-PGXPZFVY.js";
+} from "./chunk-X7AUWPZV.js";
 import {
   burnRate,
   computeLow
-} from "./chunk-EB6OJBF5.js";
+} from "./chunk-XJOB4NMV.js";
 import {
   AgentLaunchError
 } from "./chunk-YM4S6IE4.js";
@@ -34,6 +34,7 @@ import { promises as fs } from "fs";
 import path from "path";
 var ACTIVE_TASK_VERSION = 1;
 function taskStage(record) {
+  if (record.state === "submitted") return record.outcome?.state ?? "submitted";
   if (record.state !== "claimed") return record.state;
   if (record.deliverable) return "frozen";
   return record.workspace?.state === "ready" ? "working" : "claimed";

package/dist/{chunk-PGXPZFVY.js → chunk-X7AUWPZV.js}

@@ -85,8 +85,17 @@ var SandboxConnectionSchema = z.object({
 var SandboxListOutputSchema = z.object({ sandboxes: z.array(SandboxSummarySchema) });
 
 // ../../packages/shared/dist/schemas/common.schemas.js
+import { getAddress } from "viem";
 import { z as z2 } from "zod";
-var EthAddressSchema = z2.string().regex(/^0x[a-fA-F0-9]{40}$/, "Invalid Ethereum address");
+var EthAddressSchema = z2.string().regex(/^0x[a-fA-F0-9]{40}$/, "Invalid Ethereum address").refine(hasValidChecksumIfMixedCase, "Invalid Ethereum address checksum");
+function hasValidChecksumIfMixedCase(address2) {
+  if (!/^0x[a-fA-F0-9]{40}$/.test(address2))
+    return true;
+  const body = address2.slice(2);
+  if (body === body.toLowerCase() || body === body.toUpperCase())
+    return true;
+  return getAddress(address2.toLowerCase()) === address2;
+}
 var UsdcBaseUnitsSchema = z2.string().regex(/^[0-9]+$/, "Amount must be a non-negative integer in USDC base units");
 var PositiveUsdcBaseUnitsSchema = UsdcBaseUnitsSchema.refine(
   // The refine still runs when the regex check has already failed; skip the
@@ -1506,8 +1515,7 @@ var RatingInputSchema = z11.object({
   taskId: z11.string(),
   worker: z11.string(),
   rating: z11.number().int().min(0).max(100),
-  feedbackText: z11.string().max(500).optional(),
-  raterAgentId: z11.number().int().nonnegative().optional()
+  feedbackText: z11.string().max(500).optional()
 });
 var FeedbackSchema = z11.object({
   id: z11.string(),
@@ -7394,10 +7402,31 @@ var DirectPendingSchema = z51.object({
    * save and a resumed job never counts the same turn twice.
    */
   sessionItems: z51.number().int().nonnegative().optional(),
+  /**
+   * ADR-0314. The value `project.unproven` had before this job's work turn set it, kept so a
+   * turn that could not have changed the sandbox puts it back. Absent until the work turn is
+   * dispatched into a session with a sandbox.
+   */
+  unprovenBefore: z51.boolean().optional(),
+  /**
+   * ADR-0314. `keepSetup` held back a setup change this job would otherwise have made, so the
+   * job's work turn is proved, best effort, while the agent has no verified backup. Decided
+   * when the job is prepared; a successor reads it rather than deciding again.
+   */
+  setupHeld: z51.literal(true).optional(),
   checkpointRepair: z51.object({
     workTurnId: z51.string().min(1),
     finalText: z51.string().min(1).max(65536),
-    nativeTurnIds: z51.array(z51.string()).max(2e3).optional()
+    nativeTurnIds: z51.array(z51.string()).max(2e3).optional(),
+    /**
+     * ADR-0314. Why the maintenance turn runs: the work turn could have changed the sandbox
+     * (`changed`, and every block written before the field), or it is a best-effort proof
+     * after an unproven turn (`unproven`) or for a held setup change (`held`). A best-effort
+     * proof that is refused or fails leaves the job's answer standing.
+     */
+    rule: z51.enum(["changed", "unproven", "held"]).optional(),
+    /** ADR-0314. The refusal that stopped a best-effort maintenance turn being dispatched. */
+    refused: z51.string().min(1).max(100).optional()
   }).optional(),
   replies: z51.record(z51.object({
     success: z51.boolean(),
@@ -7668,7 +7697,13 @@ var DirectAgentCheckpointSchema = z51.object({
   skillBundle: z51.object({
     sessionId: z51.string().min(1).max(256),
     docsHash: z51.string().regex(/^[a-f0-9]{64}$/),
-    inventoryHash: z51.string().regex(/^[a-f0-9]{64}$/)
+    inventoryHash: z51.string().regex(/^[a-f0-9]{64}$/),
+    /**
+     * The sandbox identity (the sentinel name, ADR-0193) the market skill inventory was last
+     * verified in for this session (ADR-0312). Absent until a check passes with an identity
+     * read, and in checkpoints written before it was recorded: those list on their next job.
+     */
+    verifiedSandbox: z51.string().uuid().optional()
   }).optional(),
   /**
    * The owner's session reset (`hosted_agents.session_reset_version`) this checkpoint has handled.
@@ -7686,6 +7721,13 @@ var DirectAgentCheckpointSchema = z51.object({
     setupHash: z51.string().regex(/^[a-f0-9]{64}$/),
     snapshot: DirectProjectSnapshotSchema.nullable(),
     restoring: z51.boolean().default(false),
+    /**
+     * ADR-0314. The sandbox may hold something the last verified backup does not. Set before a
+     * work turn goes into a session with a sandbox, put back when the turn could not have
+     * changed it, and cleared by a verified backup or a completed restore, so a crash anywhere
+     * leaves it set. Absent in checkpoints written before it existed, which reads as clear.
+     */
+    unproven: z51.boolean().optional(),
     restoreSetupHash: z51.string().regex(/^[a-f0-9]{64}$/).optional(),
     restoreConfiguration: DirectRuntimeConfigurationSchema.optional(),
     // `contextPending` and `context` (conversation excerpts) were removed by SM-35; checkpoints
@@ -10333,11 +10375,13 @@ export {
   resolveTaskTerms,
   SponsoredTaskRewardStateSchema,
   SponsoredTaskWorkerRewardClaimStatusSchema,
+  TaskAwardSchema,
   MppTempoChargeRequestSchema,
   decodeMppJson,
   parseMppChallenge,
   formatMppCredential,
   mppAttributionMemo,
+  NetworkChainInfoSchema,
   AgentMessageEnvelopeSchema,
   ComputeCreditBuyOutputSchema,
   ComputeCreditStatusOutputSchema,