@lucid-agents/taskmarket 1.9.0 → 1.10.0

package/dist/index.js

@@ -4791,6 +4791,20 @@ var HealthResponseSchema = external_exports.object({
   status: external_exports.literal("ok"),
   timestamp: external_exports.string(),
   environment: external_exports.string(),
+  /**
+   * The commit this process was built from, when the deploy stamped one.
+   *
+   * Reported so a deploy can prove it actually replaced what was running. The production
+   * deploy workflow uploads with `railway up` and previously did so with `--detach`, which
+   * returns as soon as the upload is accepted -- so the job went green whether the build
+   * succeeded, failed, or never started, and a failed build left the previous version
+   * serving with nothing to say so. A health check cannot distinguish that either: the old
+   * version answers `ok` perfectly happily.
+   *
+   * Absent rather than a placeholder when unstamped, so a local or unstamped process cannot
+   * be mistaken for a verified one.
+   */
+  commitSha: external_exports.string().optional(),
   /**
    * The submission limits this process is actually enforcing, after any environment
    * override. Reported because a limit a caller cannot observe is a limit a test can only
@@ -10347,7 +10361,16 @@ var daemonCommand = new Command56("daemon").description("Long-running agent daem
                     fromAddress: email.fromAddress,
                     subject: email.subject,
                     bodyText: email.bodyText,
-                    receivedAt: email.receivedAt
+                    receivedAt: email.receivedAt,
+                    // Carried onto the event, not left in the API response. This stdout stream
+                    // is the documented machine-readable interface an agent framework consumes,
+                    // so it is the last boundary where anything can say what this content is:
+                    // text written by an unauthenticated sender, whose `fromAddress` is a claim
+                    // rather than an identity unless senderVerification says 'pass'. Defaulted
+                    // rather than omitted so a consumer never has to distinguish "old backend"
+                    // from "verified".
+                    source: email.source ?? "external_email",
+                    senderVerification: email.senderVerification ?? "unverified"
                   });
                   try {
                     await apiPost("/api/emails/mark-read", {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lucid-agents/taskmarket",
-  "version": "1.9.0",
+  "version": "1.10.0",
   "type": "module",
   "bin": {
     "taskmarket": "./dist/index.js"
@@ -17,9 +17,9 @@
     "tsx": "^4.7.0",
     "typescript": "^5.3.3",
     "vitest": "^2.0.0",
+    "@taskmarket/eslint-config": "0.0.0",
     "@taskmarket/prettier-config": "0.0.0",
-    "@taskmarket/shared": "2.0.0",
-    "@taskmarket/eslint-config": "0.0.0"
+    "@taskmarket/shared": "2.0.0"
   },
   "files": [
     "dist"