@lucid-agents/taskmarket 1.25.0 → 1.26.0

package/dist/agent-compatibility.json

@@ -1,5 +1,5 @@
 {
-  "taskmarket": "1.25.0",
+  "taskmarket": "1.26.0",
   "manifestVersion": 1,
   "pi": {
     "package": "@earendil-works/pi-coding-agent",

package/dist/api-H7VPA6C6.js

@@ -0,0 +1,35 @@
+import { createRequire as __tmCreateRequire } from 'node:module'; import { fileURLToPath as __tmFileURLToPath } from 'node:url'; import { dirname as __tmDirname } from 'node:path'; const require = __tmCreateRequire(import.meta.url); const __tmFilename = __tmFileURLToPath(import.meta.url); const __tmDirnameValue = __tmDirname(__tmFilename);
+import {
+  ApiError,
+  apiDelete,
+  apiGet,
+  apiOrigin,
+  apiPost,
+  apiPut,
+  apiReadPost,
+  apiUrl,
+  failureMessage,
+  isPendingApiError,
+  legalReceiptHeadersForKeystore,
+  parseFailureBody,
+  readFailureBody,
+  withErrorContext
+} from "./chunk-Q2FZSDFG.js";
+import "./chunk-VTMYCZLT.js";
+import "./chunk-S7SJMJ2I.js";
+export {
+  ApiError,
+  apiDelete,
+  apiGet,
+  apiOrigin,
+  apiPost,
+  apiPut,
+  apiReadPost,
+  apiUrl,
+  failureMessage,
+  isPendingApiError,
+  legalReceiptHeadersForKeystore,
+  parseFailureBody,
+  readFailureBody,
+  withErrorContext
+};

package/dist/{channels-CNVUFGAL.js → channels-4IFPTRDY.js}

@@ -10,11 +10,12 @@ import {
   selectRail,
   uncertainPurchases,
   withdrawalHatch
-} from "./chunk-HTJ7WSAL.js";
-import "./chunk-GBQBHJ77.js";
-import "./chunk-4WVIB4DD.js";
-import "./chunk-XJOB4NMV.js";
+} from "./chunk-YIOZ7W3M.js";
+import "./chunk-2AJZDGEL.js";
+import "./chunk-Q2FZSDFG.js";
+import "./chunk-VTMYCZLT.js";
 import "./chunk-YM4S6IE4.js";
+import "./chunk-XJOB4NMV.js";
 import "./chunk-S7SJMJ2I.js";
 export {
   allocationViews,

package/dist/{chunk-GBQBHJ77.js → chunk-2AJZDGEL.js}

@@ -2,16 +2,13 @@ import { createRequire as __tmCreateRequire } from 'node:module'; import { fileU
 import {
   MppTempoChargeRequestSchema,
   TEMPO_MAX_VALIDITY_WINDOW_SECONDS,
-  apiUrl,
   clampValidityWindowSeconds,
   decodeMppJson,
-  decryptPrivateKey,
   formatMppCredential,
   getTaskmarketHome,
-  loadKeystore,
   mppAttributionMemo,
   parseMppChallenge
-} from "./chunk-4WVIB4DD.js";
+} from "./chunk-VTMYCZLT.js";
 
 // ../../packages/x402-payer/dist/api.js
 var X402_PAYER_API_VERSION = 1;
@@ -7470,42 +7467,6 @@ async function createMppTempoCredential(input) {
   return { authorization, request, transaction, memo, validBefore };
 }
 
-// src/lib/signer.ts
-import { privateKeyToAccount } from "viem/accounts";
-async function fetchDeviceKey(deviceId, apiToken, keyServerUrl) {
-  const base2 = keyServerUrl ?? apiUrl();
-  const res = await fetch(`${base2}/api/devices/${deviceId}/key`, {
-    method: "POST",
-    headers: { "Content-Type": "application/json" },
-    body: JSON.stringify({ deviceId, apiToken })
-  });
-  if (!res.ok) {
-    const text = await res.text().catch(() => "");
-    throw new Error(`Failed to fetch device key (${res.status}): ${text}`);
-  }
-  const data = await res.json();
-  return data.deviceEncryptionKey;
-}
-async function signTypedData(typedData, keystore) {
-  const account = await createWalletAccountFromKeystore(keystore);
-  const sig = await account.signTypedData(typedData);
-  return sig;
-}
-async function signMessage(message, keystore) {
-  const account = await createWalletAccountFromKeystore(keystore);
-  const sig = await account.signMessage({ message });
-  return sig;
-}
-async function createWalletAccountFromKeystore(keystore) {
-  const dek = await fetchDeviceKey(keystore.deviceId, keystore.apiToken, keystore.keyServerUrl);
-  const privateKey = decryptPrivateKey(dek, keystore.encryptedKey);
-  return privateKeyToAccount(privateKey);
-}
-async function getWalletAddress() {
-  const keystore = await loadKeystore();
-  return keystore.walletAddress;
-}
-
 // src/lib/x402-paths.ts
 import path5 from "path";
 function getX402JournalPath() {
@@ -7549,11 +7510,6 @@ export {
   signSponsoredTempoTransfer,
   readMppTempoChallenge,
   createMppTempoCredential,
-  fetchDeviceKey,
-  signTypedData,
-  signMessage,
-  createWalletAccountFromKeystore,
-  getWalletAddress,
   getX402JournalPath,
   getX402PolicyPath
 };

package/dist/{chunk-OZUGI2FO.js → chunk-CNWA5PU3.js}

@@ -22,7 +22,7 @@ import {
   unresolvedCount,
   updateSyncState,
   uploadWorkspace
-} from "./chunk-VSAHZTWA.js";
+} from "./chunk-GT5TOHOY.js";
 import {
   AgentLaunchError
 } from "./chunk-YM4S6IE4.js";

package/dist/{chunk-SBCQA7NQ.js → chunk-FMK32RJF.js}

@@ -6,14 +6,14 @@ import {
   loadDeliverableRecord,
   readComputeView,
   taskStage
-} from "./chunk-KW2FNQFI.js";
+} from "./chunk-RPGVVVJD.js";
 import {
   activeClaim,
   captureProblem,
   killedSession,
   loadSyncState,
   orphanOf
-} from "./chunk-VSAHZTWA.js";
+} from "./chunk-GT5TOHOY.js";
 import {
   allocationViews,
   channelView,
@@ -21,22 +21,21 @@ import {
   openAgentChannels,
   uncertainPurchases,
   withdrawalHatch
-} from "./chunk-HTJ7WSAL.js";
+} from "./chunk-YIOZ7W3M.js";
 import {
-  SandboxListOutputSchema,
   apiUrl,
   selectedNetwork
-} from "./chunk-4WVIB4DD.js";
+} from "./chunk-Q2FZSDFG.js";
 import {
-  AGENT_VIEW_VERSION,
-  blockingPurchases,
-  channelLines,
-  computeLines,
-  formatUsdc
-} from "./chunk-XJOB4NMV.js";
+  SandboxListOutputSchema
+} from "./chunk-VTMYCZLT.js";
 import {
   AgentLaunchError
 } from "./chunk-YM4S6IE4.js";
+import {
+  AGENT_VIEW_VERSION,
+  blockingPurchases
+} from "./chunk-XJOB4NMV.js";
 
 // src/lib/agent/status.ts
 import { promises as fs } from "fs";
@@ -244,125 +243,10 @@ async function collectAgentStatus(deps = {}) {
   view.inference.blocked = reasons.length > 0;
   return view;
 }
-function statusLines(view) {
-  const lines = [
-    `taskmarket agent status (view v${view.version}, ${view.generatedAt})`,
-    view.wallet ? `Wallet: ${view.wallet.address}` : "Wallet: none",
-    `Spending policy: ${view.policy.state}${view.policy.models.length ? ` (${view.policy.models.join(", ")})` : ""}${view.policy.error ? `: ${view.policy.error}` : ""}`
-  ];
-  for (const channel of view.channels) {
-    lines.push(...channelLines(channel));
-    if (channel.state === "blocked" || channel.state === "withdrawal_pending") {
-      lines.push(`  ${channel.withdrawal.note}`);
-    }
-  }
-  if (view.purchases.uncertain.length === 0) {
-    lines.push("Purchases with an unknown outcome: none");
-  } else {
-    lines.push("Purchases with an unknown outcome (never resent; reconcile them):");
-    for (const purchase of view.purchases.uncertain) {
-      lines.push(
-        `  ${purchase.invocationId} on ${purchase.rail}: ${purchase.state}, at most ${formatUsdc(purchase.authorizedAtomic)}${purchase.blocking ? ", blocks new turns" : ""}`
-      );
-    }
-  }
-  lines.push(
-    view.inference.blocked ? `New inference: blocked (${view.inference.reasons.join("; ")})` : "New inference: ready"
-  );
-  if (view.sandbox.state === "ok") {
-    lines.push(
-      view.sandbox.sandboxes.length === 0 ? "Sandbox: none" : `Sandbox: ${view.sandbox.sandboxes.map(
-        (s) => `${s.sandboxId} ${s.purpose} ${s.state}${s.creditWarning ? ` (${s.creditWarning})` : ""}`
-      ).join("; ")}`
-    );
-  } else if (view.sandbox.state === "unavailable") {
-    lines.push(`Sandbox: unavailable (${view.sandbox.error})`);
-  }
-  lines.push(...computeLines(view.compute));
-  lines.push(...syncLines(view.sync));
-  lines.push(...taskLines(view.task, view.taskError));
-  return lines;
-}
-var STAGES = {
-  claiming: "claiming (a claim may have been sent; the next session confirms it before anything else)",
-  claimed: "claimed (the task workspace is not set up yet)",
-  working: "working (workspace ready, not validated yet)",
-  frozen: "frozen (validated, waiting for your approval to submit)",
-  submitting: "submitting (sent; the next session looks it up before anything is sent again)",
-  submitted: "submitted (not yet accepted or paid)",
-  awaiting_acceptance: "awaiting acceptance (submitted; the requester or evaluator decides)",
-  reward_pending: "reward pending (awarded; the payout is not verified on the chain yet)",
-  paid: "paid (the payout is verified on the chain)",
-  rejected: "rejected (no reward)",
-  expired: "expired (ended without an award; no reward)",
-  stopped: "stopped"
-};
-function taskLines(task, error) {
-  if (error) return [`Marketplace task: the run state cannot be read (${error})`];
-  if (!task) return ["Marketplace task: none"];
-  const lines = [`Marketplace task ${task.taskId} on ${task.network}: ${STAGES[task.stage]}`];
-  if (task.claimId) lines.push(`  Claim: ${task.claimId}`);
-  if (task.workspace) lines.push(`  Workspace (in the sandbox): ${task.workspace}`);
-  if (task.validation) {
-    lines.push(
-      `  Validation: ${task.validation.attemptsUsed} of ${task.validation.maxAttempts} attempt(s) used, until ${task.validation.deadline}`
-    );
-  }
-  if (task.deliverableId) lines.push(`  Deliverable: ${task.deliverableId}`);
-  if (task.submissionId) lines.push(`  Submission: ${task.submissionId}`);
-  const outcome = task.outcome;
-  if (outcome?.payout) {
-    lines.push(
-      `  Paid: ${outcome.payout.amount} atomic units of ${outcome.payout.asset} in ${outcome.payout.settlementTxHash}`
-    );
-  } else if (outcome?.award) {
-    lines.push(
-      `  Award: ${outcome.award.workerPayment} atomic units of ${outcome.award.asset}, not verified (${outcome.unverified?.reason ?? "unverified"})`
-    );
-  }
-  if (outcome) lines.push(`  Outcome observed ${outcome.observedAt}`);
-  lines.push(`  As recorded ${task.updatedAt}`);
-  return lines;
-}
-function syncLines(sync) {
-  if (!sync.project) return ["Workspace sync: this directory cannot be read"];
-  const lines = [
-    `Workspace sync (${sync.project}): ${sync.approved ? `upload approved ${sync.approvedAt}` : "upload not approved yet"}${sync.sessionRunning ? "; a session is running here" : ""}`
-  ];
-  if (sync.lastUploadAt) {
-    lines.push(`  Last upload: ${sync.lastUploadAt} (${sync.uploadedFiles ?? 0} file(s))`);
-  }
-  if (sync.lastPullAt) lines.push(`  Last pull: ${sync.lastPullAt}`);
-  if (sync.pending) {
-    const { clean, conflict, blocked } = sync.pending;
-    const notSaved = sync.pending.notSaved ?? 0;
-    const tooDeep = sync.pending.tooDeep ?? 0;
-    const waiting = `${clean + conflict} change(s) to pull${conflict ? ` (${conflict} in conflict)` : ""}${notSaved ? `, ${notSaved} too large to have been saved` : ""}${tooDeep ? `, ${tooDeep} director(ies) nested too deep to have been saved (taskmarket agent pull --keep-local <dir> acknowledges one, --discard all)` : ""}${blocked ? `, ${blocked} blocked` : ""}`;
-    lines.push(
-      sync.pending.saved ? `  Saved from the last session: ${waiting}; review them with taskmarket agent pull` : `  In the sandbox: ${waiting}, as counted ${sync.pending.checkedAt} (not checked live, which would resume the sandbox)`
-    );
-  }
-  if (sync.orphanSandboxId) {
-    lines.push(
-      `  A killed --no-sync session left sandbox ${sync.orphanSandboxId}: taskmarket agent pull --recover brings back what the agent made there, until it stops once idle.`
-    );
-  }
-  if (sync.captureFailed) {
-    const failed = sync.captureFailed;
-    const where = failed.sandboxId ? ` (sandbox ${failed.sandboxId})` : "";
-    lines.push(
-      failed.kind === "interrupted" ? `  The last session ended at ${failed.at} before its changes were saved${where}: recover them with taskmarket agent pull --recover, or drop them with taskmarket agent pull --discard. New sessions wait until then.` : `  The last session's changes could not be saved${where}: ${failed.reason}. Recover them with taskmarket agent pull --recover, or drop them with taskmarket agent pull --discard. New sessions wait until then.`
-    );
-  }
-  return lines;
-}
 
 export {
   readTaskStatus,
   readSyncStatus,
   listSandboxes,
-  collectAgentStatus,
-  statusLines,
-  taskLines,
-  syncLines
+  collectAgentStatus
 };

package/dist/{chunk-VSAHZTWA.js → chunk-GT5TOHOY.js}

@@ -1,7 +1,7 @@
 import { createRequire as __tmCreateRequire } from 'node:module'; import { fileURLToPath as __tmFileURLToPath } from 'node:url'; import { dirname as __tmDirname } from 'node:path'; const require = __tmCreateRequire(import.meta.url); const __tmFilename = __tmFileURLToPath(import.meta.url); const __tmDirnameValue = __tmDirname(__tmFilename);
 import {
   getTaskmarketHome
-} from "./chunk-4WVIB4DD.js";
+} from "./chunk-VTMYCZLT.js";
 import {
   AgentLaunchError
 } from "./chunk-YM4S6IE4.js";
@@ -24404,8 +24404,8 @@ var SshSandboxBackend = class {
   get isConnected() {
     return !!this.conn && !this.conn.closed;
   }
-  log(message) {
-    this.options.log?.(message);
+  log(message, level = "error") {
+    this.options.log?.(message, level);
   }
   async connect(signal) {
     await this.ensure(signal);
@@ -24458,13 +24458,13 @@ var SshSandboxBackend = class {
       this.info = { label: `${this.user}@${endpoint.host} (${this.root})` };
       this.failure = void 0;
       this.lastHeartbeat = Date.now();
-      this.log(`${this.dialed ? "Reconnected" : "Connected"} to the sandbox at ${endpoint.host}`);
+      this.log(`${this.dialed ? "Reconnected" : "Connected"} to the sandbox at ${endpoint.host}`, "info");
       this.dialed = true;
       conn.onClose(() => {
         if (this.conn === conn) {
           this.conn = void 0;
           this.files = void 0;
-          this.log("The sandbox connection closed; the next tool call reconnects");
+          this.log("The sandbox connection closed; the next tool call reconnects", "info");
         }
       });
       return { conn, files };

package/dist/chunk-NTLOY7SP.js

@@ -0,0 +1,46 @@
+import { createRequire as __tmCreateRequire } from 'node:module'; import { fileURLToPath as __tmFileURLToPath } from 'node:url'; import { dirname as __tmDirname } from 'node:path'; const require = __tmCreateRequire(import.meta.url); const __tmFilename = __tmFileURLToPath(import.meta.url); const __tmDirnameValue = __tmDirname(__tmFilename);
+import {
+  TASK_ACCESS_GRANT_HEADER,
+  getTaskmarketHome
+} from "./chunk-VTMYCZLT.js";
+
+// src/lib/task-access-grants.ts
+import { promises as fs } from "fs";
+import path from "path";
+function getGrantsPath() {
+  return path.join(getTaskmarketHome(), "task-access-grants.json");
+}
+async function readGrantsFile() {
+  try {
+    const raw = await fs.readFile(getGrantsPath(), "utf-8");
+    return JSON.parse(raw);
+  } catch {
+    return {};
+  }
+}
+async function loadTaskAccessGrant(taskId) {
+  const grants = await readGrantsFile();
+  const record = grants[taskId];
+  if (!record) return null;
+  if (new Date(record.expiresAt).getTime() <= Date.now()) return null;
+  return record.grant;
+}
+async function taskAccessGrantHeaders(taskId) {
+  const grant = await loadTaskAccessGrant(taskId);
+  return grant ? { [TASK_ACCESS_GRANT_HEADER]: grant } : {};
+}
+async function saveTaskAccessGrant(taskId, grant, expiresAt) {
+  const grants = await readGrantsFile();
+  grants[taskId] = { grant, expiresAt };
+  const dir = path.dirname(getGrantsPath());
+  await fs.mkdir(dir, { recursive: true });
+  await fs.writeFile(getGrantsPath(), JSON.stringify(grants, null, 2), {
+    mode: 384
+  });
+}
+
+export {
+  loadTaskAccessGrant,
+  taskAccessGrantHeaders,
+  saveTaskAccessGrant
+};

package/dist/chunk-PJAWRHHZ.js

@@ -0,0 +1,39 @@
+import { createRequire as __tmCreateRequire } from 'node:module'; import { fileURLToPath as __tmFileURLToPath } from 'node:url'; import { dirname as __tmDirname } from 'node:path'; const require = __tmCreateRequire(import.meta.url); const __tmFilename = __tmFileURLToPath(import.meta.url); const __tmDirnameValue = __tmDirname(__tmFilename);
+import {
+  createWalletAccountFromKeystore,
+  loadKeystore
+} from "./chunk-Q2FZSDFG.js";
+import {
+  READ_AUTH_ADDRESS_HEADER,
+  READ_AUTH_SIGNATURE_HEADER,
+  buildReadAuthMessage
+} from "./chunk-VTMYCZLT.js";
+
+// src/lib/read-auth.ts
+async function signReadAuth() {
+  let keystore;
+  try {
+    keystore = await loadKeystore();
+  } catch {
+    return null;
+  }
+  try {
+    const account = await createWalletAccountFromKeystore(keystore);
+    const signature = await account.signMessage({
+      message: buildReadAuthMessage(keystore.walletAddress)
+    });
+    return {
+      walletAddress: keystore.walletAddress,
+      headers: {
+        [READ_AUTH_ADDRESS_HEADER]: keystore.walletAddress,
+        [READ_AUTH_SIGNATURE_HEADER]: signature
+      }
+    };
+  } catch {
+    return { walletAddress: keystore.walletAddress, headers: {} };
+  }
+}
+
+export {
+  signReadAuth
+};