@lucid-agents/taskmarket 1.5.0 → 1.6.0

package/dist/index.js

@@ -4182,6 +4182,7 @@ var TaskDropPageDataSchema = external_exports.object({
 // ../../packages/shared/dist/schemas/task.schemas.js
 var TaskMode = external_exports.enum(["bounty", "claim", "pitch", "benchmark", "auction"]);
 var TaskVisibility = external_exports.enum(["unlisted", "public"]);
+var SubmissionVisibility = external_exports.enum(["public", "reveal_all", "winner_only", "never"]);
 var TaskStatus = external_exports.enum([
   "open",
   "claimed",
@@ -4194,6 +4195,7 @@ var TaskStatus = external_exports.enum([
   "expired",
   "cancelled"
 ]);
+var TaskPhase = external_exports.enum(["active", "in_review", "awaiting_settlement", "resolved"]);
 var AuctionType = external_exports.enum(["dutch", "english", "reverse_dutch", "reverse_english"]);
 var PendingActionName = external_exports.enum([
   "accept",
@@ -4249,6 +4251,7 @@ var TaskCreateSchema = external_exports.object({
   tags: external_exports.array(external_exports.string()).max(10, "Maximum 10 tags allowed"),
   mode: TaskMode.optional().default("bounty"),
   taskVisibility: TaskVisibility.optional().default("public"),
+  submissionVisibility: SubmissionVisibility.optional().default("public"),
   stakeRequired: external_exports.boolean().optional().default(false),
   stakeBps: external_exports.number().min(0).max(1e4).optional().default(0),
   pitchDeadline: external_exports.number().positive().optional(),
@@ -4342,6 +4345,7 @@ var TaskResponseSchema = external_exports.object({
   tags: external_exports.array(external_exports.string()),
   mode: TaskMode,
   taskVisibility: TaskVisibility.optional().default("public"),
+  submissionVisibility: SubmissionVisibility.optional().default("public"),
   stakeRequired: external_exports.boolean(),
   stakeBps: external_exports.number(),
   pitchDeadline: external_exports.string().nullable(),
@@ -4388,6 +4392,7 @@ var TaskResponseSchema = external_exports.object({
   verdictConfidence: external_exports.number().nullable().optional(),
   verdictEvidenceHash: external_exports.string().nullable().optional(),
   submissionWindowOpen: external_exports.boolean(),
+  phase: TaskPhase,
   netReward: external_exports.string().nullable().optional(),
   pendingActions: PendingActionSchema.array().optional(),
   selfAward: external_exports.boolean().nullable().optional(),
@@ -4402,6 +4407,7 @@ var TaskListInputSchema = external_exports.object({
   limit: external_exports.number().min(1).max(100).optional().default(20),
   cursor: external_exports.string().optional(),
   status: external_exports.union([TaskStatus, external_exports.literal("ALL")]).optional().default("ALL"),
+  phase: TaskPhase.optional(),
   mode: external_exports.enum(["ALL", "bounty", "claim", "pitch", "benchmark", "auction"]).optional().default("ALL"),
   auctionType: AuctionType.optional(),
   requesterActorType: external_exports.enum(["agent", "human"]).optional(),
@@ -4411,6 +4417,7 @@ var TaskListInputSchema = external_exports.object({
   deadlineHours: external_exports.number().int().positive().optional(),
   requester: external_exports.string().optional(),
   worker: external_exports.string().optional(),
+  taskDropId: external_exports.string().trim().min(1).optional(),
   sort: external_exports.enum(["newest", "reward_desc", "reward_asc", "deadline_asc"]).optional().default("newest")
 });
 var TaskListResponseSchema = external_exports.object({
@@ -4419,12 +4426,7 @@ var TaskListResponseSchema = external_exports.object({
   hasMore: external_exports.boolean()
 });
 var TaskInboxInputSchema = external_exports.object({
-  address: external_exports.string(),
-  // Optional proof that the caller owns `address`: a signature over
-  // `taskmarket:inbox:<address>` (see ADR-0015). When present and valid, the
-  // response additionally includes that address's own unlisted tasks; otherwise
-  // behavior is unchanged (public tasks only, same as today, for any address).
-  signature: external_exports.string().optional()
+  address: external_exports.string()
 });
 var TaskInboxResponseSchema = external_exports.object({
   asRequester: external_exports.array(TaskResponseSchema),
@@ -5417,12 +5419,11 @@ function formatDreams(baseUnits) {
 function buildSelectWorkerMessage(taskId, pitchId, workerAddress) {
   return `taskmarket:select-worker:${taskId}:${pitchId}:${workerAddress.toLowerCase()}`;
 }
-function buildInboxSelfAuthMessage(address) {
-  return `taskmarket:inbox:${address.toLowerCase()}`;
-}
-function buildMyBidsMessage(address) {
-  return `taskmarket:my-bids:${address.toLowerCase()}`;
+function buildReadAuthMessage(address) {
+  return `taskmarket:read:${address.toLowerCase()}`;
 }
+var READ_AUTH_ADDRESS_HEADER = "X-Taskmarket-Caller-Address";
+var READ_AUTH_SIGNATURE_HEADER = "X-Taskmarket-Caller-Signature";
 function buildSubmitMessage(taskId) {
   return `taskmarket:submit:${taskId}`;
 }
@@ -6597,6 +6598,10 @@ var createCmd = new Command6("create").description("Create a new task (costs rew
   "--task-visibility <mode>",
   "Task visibility: public (default) or unlisted. Unlisted only hides a task from Taskmarket's own listings/search/SEO -- it stays permanently visible on the public blockchain to anyone with the link, reading the contract directly, or running their own indexer. Not a privacy feature.",
   "public"
+).option(
+  "--submission-visibility <mode>",
+  "Submission visibility: public (default), reveal_all, winner_only, or never. Controls who can see what workers submit while the task is live and after it ends. public matches today's behavior exactly. The other three modes hide submissions from everyone but the requester and each submitting worker while the task is active; once it ends, reveal_all shows everything, winner_only shows only the winning submission(s), and never keeps every submission hidden indefinitely. Chosen once here and locked in permanently -- there is no command to change it later.",
+  "public"
 ).option("--tags <tags>", "Comma-separated tags").option("--pitch-deadline <hours>", "Pitch deadline in hours from now (pitch mode only)").option("--bid-deadline <hours>", "Bid deadline in hours from now (auction mode only)").option("--max-price <usdc>", "Maximum bid price in USDC (required for auction mode)").option(
   "--auction-type <type>",
   "Auction subtype: dutch, english, reverse_dutch, reverse_english (required for auction mode)"
@@ -6626,6 +6631,12 @@ var createCmd = new Command6("create").description("Create a new task (costs rew
     if (opts.taskVisibility !== "public" && opts.taskVisibility !== "unlisted") {
       return void printError("--task-visibility must be one of: public, unlisted");
     }
+    const validSubmissionVisibilities = ["public", "reveal_all", "winner_only", "never"];
+    if (!validSubmissionVisibilities.includes(opts.submissionVisibility)) {
+      return void printError(
+        `--submission-visibility must be one of: ${validSubmissionVisibilities.join(", ")}`
+      );
+    }
     if (opts.mode === "auction") {
       if (!opts.maxPrice) {
         return void printError("--max-price is required for auction mode");
@@ -6670,6 +6681,7 @@ var createCmd = new Command6("create").description("Create a new task (costs rew
       duration,
       mode: opts.mode,
       taskVisibility: opts.taskVisibility,
+      submissionVisibility: opts.submissionVisibility,
       tags,
       stakeRequired: false,
       stakeBps: 0
@@ -6756,13 +6768,17 @@ var createCmd = new Command6("create").description("Create a new task (costs rew
 
 // src/commands/task/search.ts
 import { Command as Command7 } from "commander";
-var listCmd = new Command7("list").alias("search").description("List available tasks").option("--status <status>", "Filter by status (e.g. open)", "open").option("--mode <mode>", "Filter by mode (bounty, claim, pitch, benchmark, auction)").option(
+var listCmd = new Command7("list").alias("search").description("List available tasks").option("--status <status>", "Filter by status (e.g. open)", "open").option(
+  "--phase <phase>",
+  "Filter by derived lifecycle phase (active, in_review, awaiting_settlement, resolved) -- independent of --status, e.g. --phase awaiting_settlement finds tasks whose deadline has passed but are still open/claimed/worker_selected"
+).option("--mode <mode>", "Filter by mode (bounty, claim, pitch, benchmark, auction)").option(
   "--auction-type <type>",
   "Filter auction tasks by subtype (dutch, english, reverse_dutch, reverse_english)"
 ).option("--tags <tags>", "Comma-separated tags to filter by").option("--skill <skill>", "Filter by skill tag (comma-separated, alias for --tags)").option("--reward-min <n>", "Minimum reward in USDC").option("--reward-max <n>", "Maximum reward in USDC").option("--deadline-hours <n>", "Only tasks expiring within this many hours").option("--limit <n>", "Maximum results to return", "20").option("--cursor <cursor>", "Cursor from previous page (nextCursor in JSON output)").action(
   async (opts) => {
     const params = new URLSearchParams();
     if (opts.status) params.set("status", opts.status);
+    if (opts.phase) params.set("phase", opts.phase);
     if (opts.mode) params.set("mode", opts.mode);
     if (opts.auctionType) params.set("auctionType", opts.auctionType);
     const tagsValue = opts.tags ?? opts.skill;
@@ -7148,10 +7164,38 @@ var auctionAcceptCmd = new Command20("auction-accept").description("Accept curre
 
 // src/commands/task/submissions.ts
 import { Command as Command21 } from "commander";
+
+// src/lib/read-auth.ts
+async function signReadAuth() {
+  let keystore;
+  try {
+    keystore = await loadKeystore();
+  } catch {
+    return null;
+  }
+  try {
+    const account = await createWalletAccountFromKeystore(keystore);
+    const signature = await account.signMessage({
+      message: buildReadAuthMessage(keystore.walletAddress)
+    });
+    return {
+      walletAddress: keystore.walletAddress,
+      headers: {
+        [READ_AUTH_ADDRESS_HEADER]: keystore.walletAddress,
+        [READ_AUTH_SIGNATURE_HEADER]: signature
+      }
+    };
+  } catch {
+    return { walletAddress: keystore.walletAddress, headers: {} };
+  }
+}
+
+// src/commands/task/submissions.ts
 var submissionsCmd = new Command21("submissions").description("List submissions for a task").argument("<taskId>", "Task ID (0x-prefixed hex)").action(async (taskId) => {
+  const auth = await signReadAuth();
   let subs;
   try {
-    subs = await apiGet(`/api/tasks/${taskId}/submissions`);
+    subs = await apiGet(`/api/tasks/${taskId}/submissions`, { headers: auth?.headers ?? {} });
   } catch (err) {
     const msg = err instanceof Error ? err.message : "Failed to fetch submissions.";
     printError(msg);
@@ -7314,13 +7358,14 @@ var rejectAllSubmissionsCmd = new Command27("reject-all-submissions").descriptio
 import { Command as Command28 } from "commander";
 var mySubmissionsCmd = new Command28("my-submissions").description("List all submissions made by your wallet across all tasks.").option("--address <address>", "Wallet address to query (defaults to own wallet from keystore)").action(async (opts) => {
   try {
-    let address = opts.address;
+    const auth = await signReadAuth();
+    const address = opts.address ?? auth?.walletAddress;
     if (!address) {
-      const keystore = await loadKeystore();
-      address = keystore.walletAddress;
+      throw new Error("No address provided and no keystore found -- pass --address <address>.");
     }
     const result = await apiGet(
-      `/api/submissions/mine?workerAddress=${encodeURIComponent(address)}`
+      `/api/submissions/mine?workerAddress=${encodeURIComponent(address)}`,
+      { headers: auth?.headers ?? {} }
     );
     printResult(result);
   } catch (err) {
@@ -7611,30 +7656,18 @@ var agentsCommand = new Command37("agents").description("Browse the agent direct
 // src/commands/inbox.ts
 import { Command as Command38 } from "commander";
 var inboxCommand = new Command38("inbox").description("Show tasks you created and tasks you are working on").action(async () => {
-  let keystore;
-  try {
-    keystore = await loadKeystore();
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : "No keystore found. Run `taskmarket init` first.";
-    printError(msg);
-  }
-  const address = keystore.walletAddress;
-  let account;
-  try {
-    account = await createWalletAccountFromKeystore(keystore);
-  } catch {
+  const auth = await signReadAuth();
+  if (!auth) {
+    printError("No keystore found. Run `taskmarket init` first.");
   }
-  const [signature, bidsSignature] = await Promise.all([
-    account?.signMessage({ message: buildInboxSelfAuthMessage(address) }).catch(() => void 0),
-    account?.signMessage({ message: buildMyBidsMessage(address) }).catch(() => void 0)
-  ]);
+  const address = auth.walletAddress;
+  const hasReadAuth = Object.keys(auth.headers).length > 0;
   const inboxParams = new URLSearchParams({ address });
-  if (signature) inboxParams.set("signature", signature);
-  const bidParams = new URLSearchParams({ address });
-  if (bidsSignature) bidParams.set("signature", bidsSignature);
   const [taskResult, pendingBids] = await Promise.all([
-    apiGet(`/api/agents/inbox?${inboxParams.toString()}`),
-    bidsSignature ? apiGet(`/api/bids/my?${bidParams.toString()}`).catch(
+    apiGet(`/api/agents/inbox?${inboxParams.toString()}`, {
+      headers: auth.headers
+    }),
+    hasReadAuth ? apiGet("/api/bids/my", { headers: auth.headers }).catch(
       () => []
     ) : Promise.resolve([])
   ]);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lucid-agents/taskmarket",
-  "version": "1.5.0",
+  "version": "1.6.0",
   "type": "module",
   "bin": {
     "taskmarket": "./dist/index.js"
@@ -17,8 +17,8 @@
     "tsx": "^4.7.0",
     "typescript": "^5.3.3",
     "vitest": "^2.0.0",
-    "@taskmarket/eslint-config": "0.0.0",
     "@taskmarket/prettier-config": "0.0.0",
+    "@taskmarket/eslint-config": "0.0.0",
     "@taskmarket/shared": "2.0.0"
   },
   "files": [