@lucid-agents/taskmarket 1.19.0 → 1.20.0

package/dist/agent-compatibility.json

@@ -1,5 +1,5 @@
 {
-  "taskmarket": "1.19.0",
+  "taskmarket": "1.20.0",
   "manifestVersion": 1,
   "pi": {
     "package": "@earendil-works/pi-coding-agent",
@@ -35,6 +35,16 @@
       "version": "0.85.1"
     }
   ],
+  "piVendored": [
+    {
+      "package": "@silvia-odwyer/photon-node",
+      "version": "0.3.4"
+    },
+    {
+      "package": "jiti",
+      "version": "2.7.0"
+    }
+  ],
   "support": [
     {
       "package": "ssh2",

package/dist/{budget-view-JPZ7HWR2.js → budget-view-J6L7X6EY.js}

@@ -15,7 +15,7 @@ import {
   statusBarText,
   uncertainPurchaseMessage,
   usdcToAtomic
-} from "./chunk-EB6OJBF5.js";
+} from "./chunk-XJOB4NMV.js";
 import "./chunk-S7SJMJ2I.js";
 export {
   AGENT_VIEW_VERSION,

package/dist/{channels-ZMYXFZ72.js → channels-A57K7BP6.js}

@@ -10,10 +10,10 @@ import {
   selectRail,
   uncertainPurchases,
   withdrawalHatch
-} from "./chunk-7Y7IOFKT.js";
-import "./chunk-VMSV4EYS.js";
-import "./chunk-PGXPZFVY.js";
-import "./chunk-EB6OJBF5.js";
+} from "./chunk-W7JSBEGK.js";
+import "./chunk-SCZPZWRF.js";
+import "./chunk-F7HVOUHY.js";
+import "./chunk-XJOB4NMV.js";
 import "./chunk-YM4S6IE4.js";
 import "./chunk-S7SJMJ2I.js";
 export {

package/dist/{chunk-6KJ5EFBN.js → chunk-2YFJNXXA.js}

@@ -16,7 +16,7 @@ import {
   readMppTempoChallenge,
   reconcileX402Payment,
   withX402FileLock
-} from "./chunk-VMSV4EYS.js";
+} from "./chunk-SCZPZWRF.js";
 import {
   ApiError,
   ComputeCreditBuyOutputSchema,
@@ -38,7 +38,7 @@ import {
   resolveIdempotencyKey,
   selectedNetwork,
   withIdempotentWrite
-} from "./chunk-PGXPZFVY.js";
+} from "./chunk-F7HVOUHY.js";
 
 // src/lib/x402-fee.ts
 import { randomUUID as randomUUID3 } from "crypto";

package/dist/{chunk-OKZ2NRYZ.js → chunk-4ZC6SH7H.js}

@@ -24,6 +24,15 @@ var AGENT_COMPATIBILITY = {
     { package: "@earendil-works/chord", version: "0.85.1" },
     { package: "@earendil-works/pi-telemetry", version: "0.85.1" }
   ],
+  /**
+   * The packages Pi's published bundle still loads from npm, copied as published into
+   * `dist/pi/vendor`. Pi takes them at a range, so a lockfile bump could otherwise ship another
+   * release; the build also checks every copied file's hash (scripts/bundle-agent-runtime.ts).
+   */
+  piVendored: [
+    { package: "@silvia-odwyer/photon-node", version: "0.3.4" },
+    { package: "jiti", version: "2.7.0" }
+  ],
   /** What the remote tool extension and the broker connector are built with besides Pi. */
   support: [{ package: "ssh2", version: "1.17.0" }],
   /**
@@ -76,9 +85,14 @@ function findInstalledPackage(name, fromDir) {
   }
 }
 var here = path.dirname(fileURLToPath(import.meta.url));
-function piRuntime(fromDir = here) {
+var runningFromSource = fileURLToPath(import.meta.url).endsWith(".ts");
+function piRuntime(fromDir = here, options = {}) {
   const staged = path.join(fromDir, "pi");
-  const packageDir = existsSync(path.join(staged, "package.json")) ? staged : findInstalledPackage(AGENT_COMPATIBILITY.pi.package, fromDir)?.dir;
+  let packageDir;
+  if (existsSync(path.join(staged, "package.json"))) packageDir = staged;
+  else if (options.fromSource ?? runningFromSource) {
+    packageDir = findInstalledPackage(AGENT_COMPATIBILITY.pi.package, fromDir)?.dir;
+  }
   if (!packageDir) return void 0;
   return { packageDir, cliPath: path.join(packageDir, "dist", "bundle", "cli.js") };
 }
@@ -92,11 +106,11 @@ function assertAgentCompatibility(options = {}) {
     );
   }
   const fromDir = options.fromDir ?? here;
-  const runtime = piRuntime(fromDir);
+  const runtime = piRuntime(fromDir, { fromSource: options.fromSource });
   if (!runtime || !existsSync(runtime.cliPath)) {
     throw new AgentLaunchError(
       "incompatible_install",
-      `Pi, which taskmarket agent runs, is missing from this install; ${reinstall}`
+      `This install is damaged: the Pi bundled with it (${path.join(fromDir, "pi")}) is missing or incomplete, and taskmarket agent runs no other Pi; ${reinstall}`
     );
   }
   const pi = JSON.parse(readFileSync(path.join(runtime.packageDir, "package.json"), "utf8"));

package/dist/{chunk-PGXPZFVY.js → chunk-F7HVOUHY.js}

@@ -85,8 +85,17 @@ var SandboxConnectionSchema = z.object({
 var SandboxListOutputSchema = z.object({ sandboxes: z.array(SandboxSummarySchema) });
 
 // ../../packages/shared/dist/schemas/common.schemas.js
+import { getAddress } from "viem";
 import { z as z2 } from "zod";
-var EthAddressSchema = z2.string().regex(/^0x[a-fA-F0-9]{40}$/, "Invalid Ethereum address");
+var EthAddressSchema = z2.string().regex(/^0x[a-fA-F0-9]{40}$/, "Invalid Ethereum address").refine(hasValidChecksumIfMixedCase, "Invalid Ethereum address checksum");
+function hasValidChecksumIfMixedCase(address2) {
+  if (!/^0x[a-fA-F0-9]{40}$/.test(address2))
+    return true;
+  const body = address2.slice(2);
+  if (body === body.toLowerCase() || body === body.toUpperCase())
+    return true;
+  return getAddress(address2.toLowerCase()) === address2;
+}
 var UsdcBaseUnitsSchema = z2.string().regex(/^[0-9]+$/, "Amount must be a non-negative integer in USDC base units");
 var PositiveUsdcBaseUnitsSchema = UsdcBaseUnitsSchema.refine(
   // The refine still runs when the regex check has already failed; skip the
@@ -1506,8 +1515,7 @@ var RatingInputSchema = z11.object({
   taskId: z11.string(),
   worker: z11.string(),
   rating: z11.number().int().min(0).max(100),
-  feedbackText: z11.string().max(500).optional(),
-  raterAgentId: z11.number().int().nonnegative().optional()
+  feedbackText: z11.string().max(500).optional()
 });
 var FeedbackSchema = z11.object({
   id: z11.string(),
@@ -1837,25 +1845,31 @@ var AccountRecoveryCodeSchema = z17.string().regex(/^\d{8}$/);
 var SetWithdrawalAddressOutputSchema = z17.object({
   withdrawalAddress: z17.string(),
   // Returned exactly once, in this same response -- there is no other way to see it again.
-  accountRecoveryCode: AccountRecoveryCodeSchema
+  accountRecoveryCode: AccountRecoveryCodeSchema,
+  chainId: z17.number().int().positive()
 });
 var ChangeWithdrawalAddressInputSchema = z17.object({
   address: EthAddressSchema,
   accountRecoveryCode: AccountRecoveryCodeSchema,
-  newWithdrawalAddress: EthAddressSchema
+  newWithdrawalAddress: EthAddressSchema,
+  chainId: z17.number().int().positive().optional()
 });
 var ChangeWithdrawalAddressOutputSchema = z17.object({
   withdrawalAddress: z17.string(),
   // A fresh code, minted the same way, immediately: using a code invalidates it and
   // replaces it, so the operator always holds exactly one current, unused code.
-  accountRecoveryCode: AccountRecoveryCodeSchema
+  accountRecoveryCode: AccountRecoveryCodeSchema,
+  chainId: z17.number().int().positive()
 });
 var RevealBackfilledRecoveryCodeInputSchema = z17.object({
   address: EthAddressSchema,
-  signature: z17.string().min(1)
+  signature: z17.string().min(1),
+  // Named, the signed message binds it (buildRevealAccountRecoveryCodeMessage).
+  chainId: z17.number().int().positive().optional()
 });
 var RevealBackfilledRecoveryCodeOutputSchema = z17.object({
-  accountRecoveryCode: AccountRecoveryCodeSchema
+  accountRecoveryCode: AccountRecoveryCodeSchema,
+  chainId: z17.number().int().positive()
 });
 var UsdcDomainSchema = z17.object({
   name: z17.string(),
@@ -1865,6 +1879,7 @@ var UsdcDomainSchema = z17.object({
 });
 var GetWithdrawalAddressOutputSchema = z17.object({
   withdrawalAddress: z17.string().nullable(),
+  chainId: z17.number().int().positive(),
   usdcDomain: UsdcDomainSchema
 });
 var AuthorizationSchema = z17.object({
@@ -5707,8 +5722,9 @@ function buildSetWithdrawalAddressMessage(input2) {
   ].join("\n");
 }
 var SET_WITHDRAWAL_ADDRESS_MAX_TTL_SECONDS = 15 * 60;
-function buildRevealAccountRecoveryCodeMessage(address2) {
-  return `taskmarket:reveal-account-recovery-code:${address2.toLowerCase()}`;
+function buildRevealAccountRecoveryCodeMessage(address2, chainId) {
+  const base2 = `taskmarket:reveal-account-recovery-code:${address2.toLowerCase()}`;
+  return chainId === void 0 ? base2 : `${base2}:chain:${chainId}`;
 }
 function buildWithdrawDreamsMessage(input2) {
   return [
@@ -7394,10 +7410,31 @@ var DirectPendingSchema = z51.object({
    * save and a resumed job never counts the same turn twice.
    */
   sessionItems: z51.number().int().nonnegative().optional(),
+  /**
+   * ADR-0314. The value `project.unproven` had before this job's work turn set it, kept so a
+   * turn that could not have changed the sandbox puts it back. Absent until the work turn is
+   * dispatched into a session with a sandbox.
+   */
+  unprovenBefore: z51.boolean().optional(),
+  /**
+   * ADR-0314. `keepSetup` held back a setup change this job would otherwise have made, so the
+   * job's work turn is proved, best effort, while the agent has no verified backup. Decided
+   * when the job is prepared; a successor reads it rather than deciding again.
+   */
+  setupHeld: z51.literal(true).optional(),
   checkpointRepair: z51.object({
     workTurnId: z51.string().min(1),
     finalText: z51.string().min(1).max(65536),
-    nativeTurnIds: z51.array(z51.string()).max(2e3).optional()
+    nativeTurnIds: z51.array(z51.string()).max(2e3).optional(),
+    /**
+     * ADR-0314. Why the maintenance turn runs: the work turn could have changed the sandbox
+     * (`changed`, and every block written before the field), or it is a best-effort proof
+     * after an unproven turn (`unproven`) or for a held setup change (`held`). A best-effort
+     * proof that is refused or fails leaves the job's answer standing.
+     */
+    rule: z51.enum(["changed", "unproven", "held"]).optional(),
+    /** ADR-0314. The refusal that stopped a best-effort maintenance turn being dispatched. */
+    refused: z51.string().min(1).max(100).optional()
   }).optional(),
   replies: z51.record(z51.object({
     success: z51.boolean(),
@@ -7668,7 +7705,13 @@ var DirectAgentCheckpointSchema = z51.object({
   skillBundle: z51.object({
     sessionId: z51.string().min(1).max(256),
     docsHash: z51.string().regex(/^[a-f0-9]{64}$/),
-    inventoryHash: z51.string().regex(/^[a-f0-9]{64}$/)
+    inventoryHash: z51.string().regex(/^[a-f0-9]{64}$/),
+    /**
+     * The sandbox identity (the sentinel name, ADR-0193) the market skill inventory was last
+     * verified in for this session (ADR-0312). Absent until a check passes with an identity
+     * read, and in checkpoints written before it was recorded: those list on their next job.
+     */
+    verifiedSandbox: z51.string().uuid().optional()
   }).optional(),
   /**
    * The owner's session reset (`hosted_agents.session_reset_version`) this checkpoint has handled.
@@ -7686,6 +7729,13 @@ var DirectAgentCheckpointSchema = z51.object({
     setupHash: z51.string().regex(/^[a-f0-9]{64}$/),
     snapshot: DirectProjectSnapshotSchema.nullable(),
     restoring: z51.boolean().default(false),
+    /**
+     * ADR-0314. The sandbox may hold something the last verified backup does not. Set before a
+     * work turn goes into a session with a sandbox, put back when the turn could not have
+     * changed it, and cleared by a verified backup or a completed restore, so a crash anywhere
+     * leaves it set. Absent in checkpoints written before it existed, which reads as clear.
+     */
+    unproven: z51.boolean().optional(),
     restoreSetupHash: z51.string().regex(/^[a-f0-9]{64}$/).optional(),
     restoreConfiguration: DirectRuntimeConfigurationSchema.optional(),
     // `contextPending` and `context` (conversation excerpts) were removed by SM-35; checkpoints
@@ -9815,6 +9865,8 @@ var BUG_REPORT_STATUSES = [
   "wont-fix"
 ];
 var BugReportStatusSchema = z77.enum(BUG_REPORT_STATUSES);
+var BUG_REPORT_VISIBILITIES = ["public", "private"];
+var BugReportVisibilitySchema = z77.enum(BUG_REPORT_VISIBILITIES);
 var BUG_REPORT_TITLE_MAX_CHARS = 200;
 var BUG_REPORT_DESCRIPTION_MAX_BYTES = 10 * 1024;
 var BUG_REPORT_CONTEXT_MAX_BYTES = 32 * 1024;
@@ -9844,7 +9896,8 @@ var SubmitBugReportInputSchema = z77.object({
   severity: BugReportSeveritySchema.default("medium"),
   source: BugReportSourceSchema,
   agentId: z77.string().max(128).optional(),
-  context: BugReportContextSchema.default({})
+  context: BugReportContextSchema.default({}),
+  visibility: BugReportVisibilitySchema.default("public")
 }).strict();
 var SubmitBugReportOutputSchema = z77.object({
   id: z77.string().uuid(),
@@ -9852,6 +9905,9 @@ var SubmitBugReportOutputSchema = z77.object({
 });
 var BugReportSchema = z77.object({
   id: z77.string().uuid(),
+  /** The public report number, shown as #N (ADR-0321). */
+  number: z77.number().int(),
+  visibility: BugReportVisibilitySchema,
   title: z77.string(),
   description: z77.string(),
   severity: BugReportSeveritySchema,
@@ -9860,6 +9916,8 @@ var BugReportSchema = z77.object({
   duplicateOfId: z77.string().uuid().nullable(),
   githubIssueNumber: z77.number().int().nullable(),
   githubIssueUrl: z77.string().url().nullable(),
+  /** The other side has posted since the viewer last read the thread (ADR-0318 decision 5). */
+  unread: z77.boolean(),
   context: z77.record(z77.unknown()),
   createdAt: z77.string(),
   updatedAt: z77.string()
@@ -9883,6 +9941,8 @@ var ListStaffBugReportsInputSchema = z77.object({
   severity: BugReportSeveritySchema.optional(),
   createdFrom: z77.string().datetime().optional(),
   createdTo: z77.string().datetime().optional(),
+  /** Only reports with a reporter reply staff have not read. */
+  unread: z77.boolean().optional(),
   limit: z77.number().int().min(1).max(200).default(50),
   offset: z77.number().int().min(0).default(0)
 }).default({});
@@ -9907,6 +9967,95 @@ var UpdateBugReportInputSchema = z77.object({
 }).refine((v) => v.status !== void 0 || v.staffNote !== void 0, {
   message: "Nothing to update"
 });
+var BUG_REPORT_MESSAGE_AUTHOR_KINDS = ["staff", "reporter"];
+var BugReportMessageAuthorKindSchema = z77.enum(BUG_REPORT_MESSAGE_AUTHOR_KINDS);
+var BugReportMessageBodySchema = z77.string().trim().min(1).refine((value) => utf8Bytes(value) <= BUG_REPORT_DESCRIPTION_MAX_BYTES, {
+  message: `body must be at most ${BUG_REPORT_DESCRIPTION_MAX_BYTES} bytes`
+});
+var BugReportMessageSchema = z77.object({
+  id: z77.string().uuid(),
+  authorKind: BugReportMessageAuthorKindSchema,
+  /** "Taskmarket staff" for staff, "Reporter" for the reporter. */
+  author: z77.string(),
+  body: z77.string(),
+  createdAt: z77.string(),
+  /** Posted by the other side since the viewer last read the thread. */
+  isNew: z77.boolean()
+});
+var BugReportDetailSchema = BugReportSchema.extend({
+  messages: z77.array(BugReportMessageSchema)
+});
+var BugReportStaffDetailSchema = BugReportStaffViewSchema.extend({
+  messages: z77.array(BugReportMessageSchema)
+});
+var PostBugReportMessageInputSchema = z77.object({ id: z77.string().uuid(), body: BugReportMessageBodySchema }).strict();
+var PublicBugReportSchema = z77.object({
+  id: z77.string().uuid(),
+  number: z77.number().int(),
+  title: z77.string(),
+  description: z77.string(),
+  severity: BugReportSeveritySchema,
+  source: BugReportSourceSchema,
+  status: BugReportStatusSchema,
+  duplicateOfId: z77.string().uuid().nullable(),
+  reporterAddress: z77.string(),
+  reporterAgentId: z77.string().nullable(),
+  context: z77.record(z77.unknown()),
+  /** Wallets that said "I have this too". */
+  affectedCount: z77.number().int(),
+  commentCount: z77.number().int(),
+  createdAt: z77.string(),
+  updatedAt: z77.string()
+});
+var PUBLIC_BUG_REPORT_SORTS = ["newest", "most-affected"];
+var ListPublicBugReportsInputSchema = z77.object({
+  status: BugReportStatusSchema.optional(),
+  /** Matched case-insensitively against the title and description. */
+  query: z77.string().trim().min(1).max(200).optional(),
+  sort: z77.enum(PUBLIC_BUG_REPORT_SORTS).default("newest"),
+  // Coerced: the REST route reads these from the query string.
+  limit: z77.coerce.number().int().min(1).max(100).default(50),
+  offset: z77.coerce.number().int().min(0).default(0)
+}).default({});
+var ListPublicBugReportsOutputSchema = z77.object({
+  reports: z77.array(PublicBugReportSchema),
+  total: z77.number().int()
+});
+var BugReportCommentSchema = z77.object({
+  id: z77.string().uuid(),
+  authorAddress: z77.string(),
+  authorAgentId: z77.string().nullable(),
+  /** The comment is by the report's reporter. */
+  isReporter: z77.boolean(),
+  body: z77.string(),
+  createdAt: z77.string()
+});
+var BugReportStaffCommentSchema = BugReportCommentSchema.extend({
+  hiddenAt: z77.string().nullable(),
+  hiddenBy: z77.string().nullable(),
+  /** Staff have blocked the comment's author from commenting on any report. */
+  authorBlocked: z77.boolean()
+});
+var PublicBugReportDetailSchema = PublicBugReportSchema.extend({
+  comments: z77.array(BugReportCommentSchema),
+  /** The public number of the report this one duplicates; null when none, or it is private. */
+  duplicateOfNumber: z77.number().int().nullable(),
+  /** The signed-in viewer said "I have this too"; false when signed out. */
+  viewerAffected: z77.boolean()
+});
+var GetPublicBugReportInputSchema = z77.object({
+  number: z77.coerce.number().int().positive()
+});
+var MarkBugReportAffectedOutputSchema = z77.object({ affectedCount: z77.number().int() });
+var PostBugReportCommentInputSchema = z77.object({
+  id: z77.string().uuid(),
+  body: BugReportMessageBodySchema,
+  agentId: z77.string().max(128).optional()
+}).strict();
+var SetBugReportVisibilityInputSchema = z77.object({ id: z77.string().uuid(), visibility: BugReportVisibilitySchema }).strict();
+var HideBugReportCommentInputSchema = z77.object({ commentId: z77.string().uuid() }).strict();
+var BlockBugReportCommenterInputSchema = z77.object({ wallet: z77.string().min(1).max(128), reason: z77.string().max(500).optional() }).strict();
+var UnblockBugReportCommenterInputSchema = z77.object({ wallet: z77.string().min(1).max(128) }).strict();
 
 // ../../packages/shared/dist/lib/redact-secrets.js
 import { english as english2 } from "viem/accounts";
@@ -10069,6 +10218,13 @@ var NETWORKS = {
     available: true
   }
 };
+function networkNameForChain(chainId) {
+  return NETWORK_NAMES.find((name) => NETWORKS[name].chainId === chainId);
+}
+function taskmarketCommandFor(chainId) {
+  const name = networkNameForChain(chainId);
+  return name ? `taskmarket --network ${name}` : "taskmarket";
+}
 var DEFAULT_NETWORK = "base";
 function isNetworkName(value) {
   return NETWORK_NAMES.includes(value);
@@ -10333,11 +10489,13 @@ export {
   resolveTaskTerms,
   SponsoredTaskRewardStateSchema,
   SponsoredTaskWorkerRewardClaimStatusSchema,
+  TaskAwardSchema,
   MppTempoChargeRequestSchema,
   decodeMppJson,
   parseMppChallenge,
   formatMppCredential,
   mppAttributionMemo,
+  NetworkChainInfoSchema,
   AgentMessageEnvelopeSchema,
   ComputeCreditBuyOutputSchema,
   ComputeCreditStatusOutputSchema,
@@ -10353,6 +10511,7 @@ export {
   isRecordingPendingResponse,
   TEMPO_MAX_VALIDITY_WINDOW_SECONDS,
   clampValidityWindowSeconds,
+  isTaskmarketChainId,
   taskmarketChain,
   clientValidityWindowSeconds,
   WALLET_BRIDGE_ORIGIN_CHAIN_ID,
@@ -10405,8 +10564,11 @@ export {
   claimStakeToPost,
   BUG_REPORT_SEVERITIES,
   BUG_REPORT_STATUSES,
+  BUG_REPORT_VISIBILITIES,
   SubmitBugReportInputSchema,
-  GetBugReportInputSchema,
+  BugReportMessageBodySchema,
+  PostBugReportMessageInputSchema,
+  PUBLIC_BUG_REPORT_SORTS,
   REDACTED,
   redactSecrets,
   getTaskmarketHome,
@@ -10423,6 +10585,7 @@ export {
   idempotencyHeaders,
   NETWORK_NAMES,
   NETWORKS,
+  taskmarketCommandFor,
   resolveNetwork,
   setSelectedNetwork,
   selectedNetwork,

package/dist/{chunk-U5F3Z2BR.js → chunk-LKO25UQ7.js}

@@ -6,14 +6,14 @@ import {
   loadDeliverableRecord,
   readComputeView,
   taskStage
-} from "./chunk-RKGRXJ5X.js";
+} from "./chunk-S62UQAAF.js";
 import {
   activeClaim,
   captureProblem,
   killedSession,
   loadSyncState,
   orphanOf
-} from "./chunk-MJR2CZWZ.js";
+} from "./chunk-RA6EZSII.js";
 import {
   allocationViews,
   channelView,
@@ -21,19 +21,19 @@ import {
   openAgentChannels,
   uncertainPurchases,
   withdrawalHatch
-} from "./chunk-7Y7IOFKT.js";
+} from "./chunk-W7JSBEGK.js";
 import {
   SandboxListOutputSchema,
   apiUrl,
   selectedNetwork
-} from "./chunk-PGXPZFVY.js";
+} from "./chunk-F7HVOUHY.js";
 import {
   AGENT_VIEW_VERSION,
   blockingPurchases,
   channelLines,
   computeLines,
   formatUsdc
-} from "./chunk-EB6OJBF5.js";
+} from "./chunk-XJOB4NMV.js";
 import {
   AgentLaunchError
 } from "./chunk-YM4S6IE4.js";
@@ -60,6 +60,7 @@ async function readTaskStatus(wallet) {
     } : null,
     deliverableId: record.deliverable?.deliverableId ?? record.submission?.deliverableId ?? null,
     submissionId: record.submission?.submissionId ?? null,
+    outcome: record.state === "submitted" ? record.outcome ?? null : null,
     updatedAt: record.updatedAt,
     source: "saved_state"
   };
@@ -289,6 +290,11 @@ var STAGES = {
   frozen: "frozen (validated, waiting for your approval to submit)",
   submitting: "submitting (sent; the next session looks it up before anything is sent again)",
   submitted: "submitted (not yet accepted or paid)",
+  awaiting_acceptance: "awaiting acceptance (submitted; the requester or evaluator decides)",
+  reward_pending: "reward pending (awarded; the payout is not verified on the chain yet)",
+  paid: "paid (the payout is verified on the chain)",
+  rejected: "rejected (no reward)",
+  expired: "expired (ended without an award; no reward)",
   stopped: "stopped"
 };
 function taskLines(task, error) {
@@ -304,6 +310,17 @@ function taskLines(task, error) {
   }
   if (task.deliverableId) lines.push(`  Deliverable: ${task.deliverableId}`);
   if (task.submissionId) lines.push(`  Submission: ${task.submissionId}`);
+  const outcome = task.outcome;
+  if (outcome?.payout) {
+    lines.push(
+      `  Paid: ${outcome.payout.amount} atomic units of ${outcome.payout.asset} in ${outcome.payout.settlementTxHash}`
+    );
+  } else if (outcome?.award) {
+    lines.push(
+      `  Award: ${outcome.award.workerPayment} atomic units of ${outcome.award.asset}, not verified (${outcome.unverified?.reason ?? "unverified"})`
+    );
+  }
+  if (outcome) lines.push(`  Outcome observed ${outcome.observedAt}`);
   lines.push(`  As recorded ${task.updatedAt}`);
   return lines;
 }

package/dist/{chunk-MJR2CZWZ.js → chunk-RA6EZSII.js}

@@ -1,7 +1,7 @@
 import { createRequire as __tmCreateRequire } from 'node:module'; import { fileURLToPath as __tmFileURLToPath } from 'node:url'; import { dirname as __tmDirname } from 'node:path'; const require = __tmCreateRequire(import.meta.url); const __tmFilename = __tmFileURLToPath(import.meta.url); const __tmDirnameValue = __tmDirname(__tmFilename);
 import {
   getTaskmarketHome
-} from "./chunk-PGXPZFVY.js";
+} from "./chunk-F7HVOUHY.js";
 import {
   AgentLaunchError
 } from "./chunk-YM4S6IE4.js";
@@ -23778,6 +23778,7 @@ function hostKeyBlob(pinned) {
 var KILL_SETTLE_MS = 5e3;
 var KILL_RETRY_MS = [1e3, 3e3];
 var EXIT_DRAIN_MS = 150;
+var UNTIL_CLOSE_MS = 6e4;
 var earlyExits = /* @__PURE__ */ new WeakMap();
 var SshConnection = class _SshConnection {
   client;
@@ -24076,8 +24077,8 @@ var SshConnection = class _SshConnection {
             exitSignal = signal;
           drainTimer = setTimeout(() => {
             channel.close();
-            finish();
-          }, EXIT_DRAIN_MS);
+            finish(options.untilClose ? new Error("The sandbox did not finish sending the command output") : void 0);
+          }, options.untilClose ? UNTIL_CLOSE_MS : EXIT_DRAIN_MS);
         };
         channel.on("exit", onExit);
         const early = earlyExits.get(channel);
@@ -24528,7 +24529,8 @@ var SshSandboxBackend = class {
       },
       signal,
       maxStreamBytes: this.maxStreamBytes,
-      killCommand: stopScopeCommand(unit)
+      killCommand: stopScopeCommand(unit),
+      untilClose: true
     });
     return { exitCode, stderr: Buffer.concat(stderr).toString("utf8").trim().slice(0, 2e3) };
   }
@@ -24609,7 +24611,16 @@ var SshSandboxBackend = class {
     } finally {
       options.signal?.removeEventListener("abort", onAbort);
     }
-    const parsed = parseManifestOutput(Buffer.concat(out));
+    if (overLimit)
+      throw new ManifestLimitError(options.limit);
+    let parsed;
+    try {
+      parsed = parseManifestOutput(Buffer.concat(out));
+    } catch (error) {
+      if (entries >= (limit + 1) * 4)
+        throw new ManifestLimitError(options.limit);
+      throw error;
+    }
     if (parsed.length > limit)
       throw new ManifestLimitError(options.limit);
     return parsed;

package/dist/{chunk-RKGRXJ5X.js → chunk-S62UQAAF.js}

@@ -8,7 +8,7 @@ import {
   unsafeHostPath,
   withFileLock,
   writeAtomic
-} from "./chunk-MJR2CZWZ.js";
+} from "./chunk-RA6EZSII.js";
 import {
   buyComputeCredit,
   fetchComputePricing,
@@ -16,14 +16,14 @@ import {
   loadComputeCreditConfig,
   onComputeBalanceObserved,
   readComputeCreditStatus
-} from "./chunk-6KJ5EFBN.js";
+} from "./chunk-2YFJNXXA.js";
 import {
   getTaskmarketHome
-} from "./chunk-PGXPZFVY.js";
+} from "./chunk-F7HVOUHY.js";
 import {
   burnRate,
   computeLow
-} from "./chunk-EB6OJBF5.js";
+} from "./chunk-XJOB4NMV.js";
 import {
   AgentLaunchError
 } from "./chunk-YM4S6IE4.js";
@@ -34,6 +34,7 @@ import { promises as fs } from "fs";
 import path from "path";
 var ACTIVE_TASK_VERSION = 1;
 function taskStage(record) {
+  if (record.state === "submitted") return record.outcome?.state ?? "submitted";
   if (record.state !== "claimed") return record.state;
   if (record.deliverable) return "frozen";
   return record.workspace?.state === "ready" ? "working" : "claimed";