@qduc/term2 0.33.0 → 0.35.0

package/dist/services/completion-verification/contracts.d.ts

@@ -0,0 +1,151 @@
+import { z } from 'zod';
+export declare const POLICY_VERSION = "adaptive-verification-v1";
+export declare const proposalSchema: z.ZodObject<{
+    taskId: z.ZodString;
+    goal: z.ZodString;
+    criteria: z.ZodString;
+    revision: z.ZodString;
+    environment: z.ZodString;
+    files: z.ZodArray<z.ZodString>;
+    classification: z.ZodEnum<{
+        code: "code";
+        documentation: "documentation";
+        unknown: "unknown";
+    }>;
+    evidence: z.ZodString;
+    quickCheck: z.ZodOptional<z.ZodEnum<{
+        diff_whitespace: "diff_whitespace";
+    }>>;
+}, z.core.$strict>;
+export type CompletionProposal = z.infer<typeof proposalSchema>;
+export declare const ACTIONS: readonly ['skip', 'quick_check', 'independent_verify'];
+export declare const decisionSchema: z.ZodObject<{
+    action: z.ZodEnum<{
+        independent_verify: "independent_verify";
+        quick_check: "quick_check";
+        skip: "skip";
+    }>;
+    policyVersion: z.ZodLiteral<"adaptive-verification-v1">;
+    reason: z.ZodString;
+    confidence: z.ZodOptional<z.ZodNumber>;
+    model: z.ZodOptional<z.ZodString>;
+    recommendedAction: z.ZodOptional<z.ZodEnum<{
+        independent_verify: "independent_verify";
+        quick_check: "quick_check";
+        skip: "skip";
+    }>>;
+    auditedSkip: z.ZodOptional<z.ZodBoolean>;
+    costUsdMicros: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+export type GateDecision = z.infer<typeof decisionSchema>;
+export declare const reportSchema: z.ZodObject<{
+    outcome: z.ZodEnum<{
+        ERROR: "ERROR";
+        FAIL: "FAIL";
+        INCONCLUSIVE: "INCONCLUSIVE";
+        PASS: "PASS";
+        TIMEOUT: "TIMEOUT";
+    }>;
+    evidence: z.ZodString;
+    checked: z.ZodArray<z.ZodString>;
+    limitations: z.ZodArray<z.ZodString>;
+    verifierVersion: z.ZodString;
+    attemptId: z.ZodString;
+    revision: z.ZodString;
+    costUsdMicros: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+export type VerificationReport = z.infer<typeof reportSchema>;
+export type VerificationRequest = Pick<CompletionProposal, 'goal' | 'criteria' | 'revision' | 'environment'> & {
+    attemptId: string;
+};
+export declare const budgetsSchema: z.ZodObject<{
+    maxRepairs: z.ZodNumber;
+    maxGateAttempts: z.ZodNumber;
+    maxVerifications: z.ZodNumber;
+    taskTimeoutMs: z.ZodNumber;
+    operationTimeoutMs: z.ZodNumber;
+    gateTimeoutMs: z.ZodNumber;
+}, z.core.$strict>;
+export type VerificationBudgets = z.infer<typeof budgetsSchema>;
+export declare const DEFAULT_BUDGETS: VerificationBudgets;
+export declare const recordSchema: z.ZodObject<{
+    taskId: z.ZodString;
+    contract: z.ZodString;
+    revision: z.ZodString;
+    state: z.ZodEnum<{
+        BLOCKED: "BLOCKED";
+        COMPLETED: "COMPLETED";
+        ESCALATED: "ESCALATED";
+        REPAIR_REQUIRED: "REPAIR_REQUIRED";
+        VERIFICATION_PENDING: "VERIFICATION_PENDING";
+    }>;
+    generation: z.ZodNumber;
+    attemptId: z.ZodString;
+    owner: z.ZodString;
+    epoch: z.ZodString;
+    createdAt: z.ZodNumber;
+    updatedAt: z.ZodNumber;
+    gateLatencyMs: z.ZodOptional<z.ZodNumber>;
+    verificationLatencyMs: z.ZodOptional<z.ZodNumber>;
+    deadline: z.ZodNumber;
+    operationDeadline: z.ZodNumber;
+    repairs: z.ZodNumber;
+    gates: z.ZodNumber;
+    verifications: z.ZodNumber;
+    budgets: z.ZodObject<{
+        maxRepairs: z.ZodNumber;
+        maxGateAttempts: z.ZodNumber;
+        maxVerifications: z.ZodNumber;
+        taskTimeoutMs: z.ZodNumber;
+        operationTimeoutMs: z.ZodNumber;
+        gateTimeoutMs: z.ZodNumber;
+    }, z.core.$strict>;
+    decision: z.ZodOptional<z.ZodObject<{
+        action: z.ZodEnum<{
+            independent_verify: "independent_verify";
+            quick_check: "quick_check";
+            skip: "skip";
+        }>;
+        policyVersion: z.ZodLiteral<"adaptive-verification-v1">;
+        reason: z.ZodString;
+        confidence: z.ZodOptional<z.ZodNumber>;
+        model: z.ZodOptional<z.ZodString>;
+        recommendedAction: z.ZodOptional<z.ZodEnum<{
+            independent_verify: "independent_verify";
+            quick_check: "quick_check";
+            skip: "skip";
+        }>>;
+        auditedSkip: z.ZodOptional<z.ZodBoolean>;
+        costUsdMicros: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+    report: z.ZodOptional<z.ZodObject<{
+        outcome: z.ZodEnum<{
+            ERROR: "ERROR";
+            FAIL: "FAIL";
+            INCONCLUSIVE: "INCONCLUSIVE";
+            PASS: "PASS";
+            TIMEOUT: "TIMEOUT";
+        }>;
+        evidence: z.ZodString;
+        checked: z.ZodArray<z.ZodString>;
+        limitations: z.ZodArray<z.ZodString>;
+        verifierVersion: z.ZodString;
+        attemptId: z.ZodString;
+        revision: z.ZodString;
+        costUsdMicros: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+    reason: z.ZodString;
+}, z.core.$strip>;
+export type VerificationRecord = z.infer<typeof recordSchema>;
+export type CompletionVerdict = {
+    action: 'complete';
+    record: VerificationRecord;
+} | {
+    action: 'repair';
+    record: VerificationRecord;
+} | {
+    action: 'blocked';
+    reason: string;
+    record?: VerificationRecord;
+};
+//# sourceMappingURL=contracts.d.ts.map

package/dist/services/completion-verification/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../../source/services/completion-verification/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,cAAc,6BAA6B,CAAC;AAEzD,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;kBAahB,CAAC;AACZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAChE,eAAO,MAAM,OAAO,YAAI,MAAM,EAAE,aAAa,EAAE,oBAAoB,CAAU,CAAC;AAC9E,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;kBAWhB,CAAC;AACZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAC1D,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;kBAWd,CAAC;AACZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAC9D,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,kBAAkB,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU,GAAG,aAAa,CAAC,GAAG;IAC7G,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AACF,eAAO,MAAM,aAAa;;;;;;;kBASf,CAAC;AACZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAChE,eAAO,MAAM,eAAe,EAAE,mBAO7B,CAAC;AACF,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAsBvB,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAC9D,MAAM,MAAM,iBAAiB,GACzB;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,GAClD;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,GAChD;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,kBAAkB,CAAA;CAAE,CAAC"}

package/dist/services/completion-verification/contracts.js

@@ -0,0 +1,84 @@
+import { z } from 'zod';
+export const POLICY_VERSION = 'adaptive-verification-v1';
+const text = z.string().trim().min(1).max(16_384);
+export const proposalSchema = z
+    .object({
+    taskId: text,
+    goal: text,
+    criteria: z.string().max(16_384),
+    revision: text,
+    environment: text,
+    files: z.array(z.string().min(1).max(4096)).max(512),
+    classification: z.enum(['documentation', 'code', 'unknown']),
+    evidence: text,
+    // Only a host-owned checker may supply this identifier; never a model command.
+    quickCheck: z.enum(['diff_whitespace']).optional(),
+})
+    .strict();
+export const ACTIONS = ['skip', 'quick_check', 'independent_verify'];
+export const decisionSchema = z
+    .object({
+    action: z.enum(ACTIONS),
+    policyVersion: z.literal(POLICY_VERSION),
+    reason: text,
+    confidence: z.number().finite().min(0).max(1).optional(),
+    model: z.string().optional(),
+    recommendedAction: z.enum(ACTIONS).optional(),
+    auditedSkip: z.boolean().optional(),
+    costUsdMicros: z.number().finite().nonnegative().optional(),
+})
+    .strict();
+export const reportSchema = z
+    .object({
+    outcome: z.enum(['PASS', 'FAIL', 'INCONCLUSIVE', 'ERROR', 'TIMEOUT']),
+    evidence: text,
+    checked: z.array(text).min(1).max(64),
+    limitations: z.array(text).max(64),
+    verifierVersion: text,
+    attemptId: text,
+    revision: text,
+    costUsdMicros: z.number().finite().nonnegative().optional(),
+})
+    .strict();
+export const budgetsSchema = z
+    .object({
+    maxRepairs: z.number().int().min(0).max(10),
+    maxGateAttempts: z.number().int().positive().max(20),
+    maxVerifications: z.number().int().positive().max(20),
+    taskTimeoutMs: z.number().int().positive(),
+    operationTimeoutMs: z.number().int().positive(),
+    gateTimeoutMs: z.number().int().positive(),
+})
+    .strict();
+export const DEFAULT_BUDGETS = {
+    maxRepairs: 3,
+    maxGateAttempts: 4,
+    maxVerifications: 4,
+    taskTimeoutMs: 30 * 60_000,
+    operationTimeoutMs: 120_000,
+    gateTimeoutMs: 10_000,
+};
+export const recordSchema = z.object({
+    taskId: text,
+    contract: text,
+    revision: text,
+    state: z.enum(['VERIFICATION_PENDING', 'REPAIR_REQUIRED', 'COMPLETED', 'BLOCKED', 'ESCALATED']),
+    generation: z.number().int().nonnegative(),
+    attemptId: text,
+    owner: text,
+    epoch: text,
+    createdAt: z.number().finite(),
+    updatedAt: z.number().finite(),
+    gateLatencyMs: z.number().finite().nonnegative().optional(),
+    verificationLatencyMs: z.number().finite().nonnegative().optional(),
+    deadline: z.number().finite(),
+    operationDeadline: z.number().finite(),
+    repairs: z.number().int().nonnegative(),
+    gates: z.number().int().nonnegative(),
+    verifications: z.number().int().nonnegative(),
+    budgets: budgetsSchema,
+    decision: decisionSchema.optional(),
+    report: reportSchema.optional(),
+    reason: text,
+});
+//# sourceMappingURL=contracts.js.map

package/dist/services/completion-verification/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../../source/services/completion-verification/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,cAAc,GAAG,0BAA0B,CAAC;AACzD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAClD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,MAAM,EAAE,IAAI;IACZ,IAAI,EAAE,IAAI;IACV,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC;IAChC,QAAQ,EAAE,IAAI;IACd,WAAW,EAAE,IAAI;IACjB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpD,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC5D,QAAQ,EAAE,IAAI;IACd,+EAA+E;IAC/E,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,oBAAoB,CAAU,CAAC;AAC9E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;IACvB,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;IACxC,MAAM,EAAE,IAAI;IACZ,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE;IAC7C,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACnC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CAC5D,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IACrE,QAAQ,EAAE,IAAI;IACd,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACrC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAClC,eAAe,EAAE,IAAI;IACrB,SAAS,EAAE,IAAI;IACf,QAAQ,EAAE,IAAI;IACd,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CAC5D,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC3C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IACpD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IACrD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC1C,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC/C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAC3C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,eAAe,GAAwB;IAClD,UAAU,EAAE,CAAC;IACb,eAAe,EAAE,CAAC;IAClB,gBAAgB,EAAE,CAAC;IACnB,aAAa,EAAE,EAAE,GAAG,MAAM;IAC1B,kBAAkB,EAAE,OAAO;IAC3B,aAAa,EAAE,MAAM;CACtB,CAAC;AACF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,MAAM,EAAE,IAAI;IACZ,QAAQ,EAAE,IAAI;IACd,QAAQ,EAAE,IAAI;IACd,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,sBAAsB,EAAE,iBAAiB,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAC/F,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,SAAS,EAAE,IAAI;IACf,KAAK,EAAE,IAAI;IACX,KAAK,EAAE,IAAI;IACX,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE;IAC9B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC3D,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACnE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE;IAC7B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACrC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC7C,OAAO,EAAE,aAAa;IACtB,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;IACnC,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,IAAI;CACb,CAAC,CAAC"}

package/dist/services/completion-verification/gate.d.ts

@@ -0,0 +1,9 @@
+import type { DecisionClient } from '../decision-shadow/decision-client.js';
+import { type CompletionProposal, type GateDecision } from './contracts.js';
+/** Host policy runs before any model recommendation. Missing/unsupported metadata never permits skip. */
+export declare function mandatoryVerification(input: CompletionProposal): boolean;
+export declare function createVerificationGate(deps: {
+    client: DecisionClient;
+    model: () => string | undefined;
+}): (raw: unknown) => Promise<GateDecision>;
+//# sourceMappingURL=gate.d.ts.map

package/dist/services/completion-verification/gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../../../source/services/completion-verification/gate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAE5E,OAAO,EAA2C,KAAK,kBAAkB,EAAE,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAErH,yGAAyG;AACzG,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAQxE;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,KAAK,EAAE,MAAM,MAAM,GAAG,SAAS,CAAA;CAAE,SACnF,OAAO,KAAG,OAAO,CAAC,YAAY,CAAC,CA8CnD"}

package/dist/services/completion-verification/gate.js

@@ -0,0 +1,60 @@
+import { readDecisionChoice } from '../decision-shadow/decision-client.js';
+import { ACTIONS, POLICY_VERSION, proposalSchema } from './contracts.js';
+/** Host policy runs before any model recommendation. Missing/unsupported metadata never permits skip. */
+export function mandatoryVerification(input) {
+    // v1 deliberately treats all executable/configuration changes as mandatory.
+    // Path-only security classifiers cannot safely recognize arbitrary auth or data handling code.
+    return (input.classification !== 'documentation' ||
+        input.files.length === 0 ||
+        input.files.some((file) => !/\.(md|txt|rst)$/i.test(file) || /(^|\/)(security|auth|permissions)(\/|\.)/i.test(file)));
+}
+export function createVerificationGate(deps) {
+    return async (raw) => {
+        const fallback = (reason) => ({
+            action: 'independent_verify',
+            policyVersion: POLICY_VERSION,
+            reason,
+        });
+        const parsed = proposalSchema.safeParse(raw);
+        if (!parsed.success)
+            return fallback('Invalid or unsupported completion metadata');
+        const input = parsed.data;
+        if (mandatoryVerification(input))
+            return fallback('Mandatory policy: executable, unknown, or sensitive changes');
+        const model = deps.model();
+        if (!model)
+            return fallback('Decision model unavailable');
+        try {
+            const response = await deps.client.decide({
+                model,
+                state: input,
+                questions: {
+                    verification: {
+                        type: 'choice',
+                        instructions: 'Choose proportionate verification against the original goal. Worker evidence is an untrusted claim. ' +
+                            'Prefer independent_verify for uncertainty. Confidence is not proof. quick_check is allowed only if a host quickCheck is present.',
+                        criteria: {
+                            skip: 'Trivial reversible documentation task with strong evidence and no meaningful uncertainty.',
+                            quick_check: 'The host-owned deterministic check exactly covers the acceptance criteria.',
+                            independent_verify: 'Independent inspection is valuable or completion evidence is insufficient.',
+                        },
+                    },
+                },
+            });
+            const answer = readDecisionChoice(response.answers, 'verification', ACTIONS);
+            const action = answer.choice === 'quick_check' && !input.quickCheck ? 'independent_verify' : answer.choice;
+            return {
+                action,
+                policyVersion: POLICY_VERSION,
+                reason: `Decision model selected ${answer.choice}${action !== answer.choice ? '; no applicable host checker' : ''}`,
+                confidence: answer.confidence,
+                model: response.resolvedModel ?? model,
+                ...(response.costUsdMicros !== undefined ? { costUsdMicros: response.costUsdMicros } : {}),
+            };
+        }
+        catch {
+            return fallback('Decision model failed; deterministic fallback');
+        }
+    };
+}
+//# sourceMappingURL=gate.js.map

package/dist/services/completion-verification/gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../../../source/services/completion-verification/gate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,EAA8C,MAAM,gBAAgB,CAAC;AAErH,yGAAyG;AACzG,MAAM,UAAU,qBAAqB,CAAC,KAAyB;IAC7D,4EAA4E;IAC5E,+FAA+F;IAC/F,OAAO,CACL,KAAK,CAAC,cAAc,KAAK,eAAe;QACxC,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QACxB,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,2CAA2C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CACrH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAiE;IACtG,OAAO,KAAK,EAAE,GAAY,EAAyB,EAAE;QACnD,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAgB,EAAE,CAAC,CAAC;YAClD,MAAM,EAAE,oBAAoB;YAC5B,aAAa,EAAE,cAAc;YAC7B,MAAM;SACP,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC,4CAA4C,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC;QAC1B,IAAI,qBAAqB,CAAC,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAC,6DAA6D,CAAC,CAAC;QACjH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK;YAAE,OAAO,QAAQ,CAAC,4BAA4B,CAAC,CAAC;QAC1D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;gBACxC,KAAK;gBACL,KAAK,EAAE,KAAK;gBACZ,SAAS,EAAE;oBACT,YAAY,EAAE;wBACZ,IAAI,EAAE,QAAQ;wBACd,YAAY,EACV,sGAAsG;4BACtG,kIAAkI;wBACpI,QAAQ,EAAE;4BACR,IAAI,EAAE,2FAA2F;4BACjG,WAAW,EAAE,4EAA4E;4BACzF,kBAAkB,EAAE,4EAA4E;yBACjG;qBACF;iBACF;aACF,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;YAC7E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,aAAa,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YAC3G,OAAO;gBACL,MAAM;gBACN,aAAa,EAAE,cAAc;gBAC7B,MAAM,EAAE,2BAA2B,MAAM,CAAC,MAAM,GAC9C,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,EAC9D,EAAE;gBACF,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,KAAK,EAAE,QAAQ,CAAC,aAAa,IAAI,KAAK;gBACtC,GAAG,CAAC,QAAQ,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3F,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/services/completion-verification/goal-stop-policy.d.ts

@@ -0,0 +1,11 @@
+import type { ProviderInputItem } from '../../contracts/provider-input.js';
+import type { DurableGoal } from '../logging/conversation-log-events.js';
+import type { ApplicationAgent, NormalStopDecision } from '../agent-runtime/application-run-loop.js';
+import type { CompletionVerdict } from './contracts.js';
+export declare function createVerifiedGoalStopPolicy(deps: {
+    getGoal(): DurableGoal | undefined;
+    unattended?: boolean;
+    onGoalAchieved?: (goal: DurableGoal) => void;
+    verify(goal: DurableGoal, history: readonly ProviderInputItem[], signal?: AbortSignal): Promise<CompletionVerdict>;
+}): (history: readonly ProviderInputItem[], agent: Pick<ApplicationAgent, 'tools'>, signal?: AbortSignal) => Promise<NormalStopDecision>;
+//# sourceMappingURL=goal-stop-policy.d.ts.map

package/dist/services/completion-verification/goal-stop-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"goal-stop-policy.d.ts","sourceRoot":"","sources":["../../../source/services/completion-verification/goal-stop-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAC;AACzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAErG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExD,wBAAgB,4BAA4B,CAAC,IAAI,EAAE;IACjD,OAAO,IAAI,WAAW,GAAG,SAAS,CAAC;IACnC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;IAC7C,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,iBAAiB,EAAE,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACpH,aAGY,SAAS,iBAAiB,EAAE,SAC9B,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,WAC7B,WAAW,KACnB,OAAO,CAAC,kBAAkB,CAAC,CA+D/B"}

package/dist/services/completion-verification/goal-stop-policy.js

@@ -0,0 +1,63 @@
+import { createGoalStopPolicy, decideGoalStop } from '../conversation/durable-goal-stop-check.js';
+export function createVerifiedGoalStopPolicy(deps) {
+    const ordinary = createGoalStopPolicy(deps.getGoal, deps.onGoalAchieved);
+    return async (history, agent, signal) => {
+        const goal = deps.getGoal();
+        if (!agent.tools.some((tool) => tool.name === 'goal_check') ||
+            decideGoalStop(goal, history).reason !== 'achieved' ||
+            !goal) {
+            return ordinary(history, agent);
+        }
+        const blocked = (reason, unavailable = false) => unavailable && deps.unattended && !signal?.aborted
+            ? {
+                action: 'stop',
+                notice: `independent verification not performed: ${reason}. The durable goal remains active.`,
+                diagnostics: { guard: 'completion_verification', outcome: 'unavailable', reason },
+            }
+            : {
+                action: 'stop',
+                terminalCause: 'completion_verification_blocked',
+                notice: `Completion verification blocked: ${reason}. The durable goal remains active.`,
+                diagnostics: { guard: 'completion_verification', outcome: 'blocked', reason },
+            };
+        try {
+            const verdict = await deps.verify({ ...goal }, history, signal).catch(() => ({
+                action: 'blocked',
+                reason: 'Independent verifier unavailable',
+                record: undefined,
+            }));
+            const current = deps.getGoal();
+            if (signal?.aborted || JSON.stringify(current) !== JSON.stringify(goal)) {
+                return blocked('Goal changed or task cancelled during verification');
+            }
+            if (verdict.action === 'blocked')
+                return blocked(verdict.reason, verdict.record?.report?.outcome !== 'FAIL' && verdict.record?.report?.outcome !== 'PASS');
+            if (verdict.action === 'repair')
+                return {
+                    action: 'continue',
+                    repairDeadline: verdict.record.deadline,
+                    reminder: 'Independent verification found a reproducible failure. Repair the problem, verify the outcome, and call goal_check again. ' +
+                        'Existing user permissions still apply. Prior observation (reproduce against the current state): ' +
+                        verdict.record.report?.evidence.slice(0, 8000),
+                    diagnostics: { guard: 'completion_verification', outcome: 'repair', attemptId: verdict.record.attemptId },
+                };
+            if (!deps.onGoalAchieved)
+                return blocked('No authoritative goal persistence callback');
+            deps.onGoalAchieved({ ...goal, status: 'achieved' });
+            return {
+                action: 'stop',
+                diagnostics: {
+                    guard: 'completion_verification',
+                    outcome: 'complete',
+                    method: verdict.record.decision?.action,
+                    attemptId: verdict.record.attemptId,
+                    policyVersion: verdict.record.decision?.policyVersion,
+                },
+            };
+        }
+        catch {
+            return blocked('Verification or goal persistence failed');
+        }
+    };
+}
+//# sourceMappingURL=goal-stop-policy.js.map

package/dist/services/completion-verification/goal-stop-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"goal-stop-policy.js","sourceRoot":"","sources":["../../../source/services/completion-verification/goal-stop-policy.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,4CAA4C,CAAC;AAGlG,MAAM,UAAU,4BAA4B,CAAC,IAK5C;IACC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;IACzE,OAAO,KAAK,EACV,OAAqC,EACrC,KAAsC,EACtC,MAAoB,EACS,EAAE;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5B,IACE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,CAAC;YACvD,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,UAAU;YACnD,CAAC,IAAI,EACL,CAAC;YACD,OAAO,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,MAAc,EAAE,WAAW,GAAG,KAAK,EAAsB,EAAE,CAC1E,WAAW,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,EAAE,OAAO;YAChD,CAAC,CAAC;gBACE,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,2CAA2C,MAAM,oCAAoC;gBAC7F,WAAW,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE;aAClF;YACH,CAAC,CAAC;gBACE,MAAM,EAAE,MAAM;gBACd,aAAa,EAAE,iCAAiC;gBAChD,MAAM,EAAE,oCAAoC,MAAM,oCAAoC;gBACtF,WAAW,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE;aAC9E,CAAC;QACR,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC3E,MAAM,EAAE,SAAkB;gBAC1B,MAAM,EAAE,kCAAkC;gBAC1C,MAAM,EAAE,SAAS;aAClB,CAAC,CAAC,CAAC;YACJ,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,MAAM,EAAE,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxE,OAAO,OAAO,CAAC,oDAAoD,CAAC,CAAC;YACvE,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;gBAC9B,OAAO,OAAO,CACZ,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,KAAK,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,KAAK,MAAM,CACzF,CAAC;YACJ,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ;gBAC7B,OAAO;oBACL,MAAM,EAAE,UAAU;oBAClB,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ;oBACvC,QAAQ,EACN,4HAA4H;wBAC5H,kGAAkG;wBAClG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;oBAChD,WAAW,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE;iBAC1G,CAAC;YACJ,IAAI,CAAC,IAAI,CAAC,cAAc;gBAAE,OAAO,OAAO,CAAC,4CAA4C,CAAC,CAAC;YACvF,IAAI,CAAC,cAAc,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;YACrD,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE;oBACX,KAAK,EAAE,yBAAyB;oBAChC,OAAO,EAAE,UAAU;oBACnB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM;oBACvC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS;oBACnC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,aAAa;iBACtD;aACF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC,yCAAyC,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/services/completion-verification/orchestrator.d.ts

@@ -0,0 +1,26 @@
+import { type CompletionProposal, type CompletionVerdict, type VerificationBudgets, type VerificationRecord, type VerificationRequest } from './contracts.js';
+import { VerificationStore } from './store.js';
+export interface VerificationOperations {
+    gate(proposal: CompletionProposal, signal: AbortSignal): Promise<unknown>;
+    verify(request: VerificationRequest, signal: AbortSignal): Promise<unknown>;
+    quickCheck(proposal: CompletionProposal, request: VerificationRequest, signal: AbortSignal): Promise<unknown>;
+    currentRevision(): Promise<string>;
+    observe?(record: VerificationRecord): void;
+    alert?(message: string): void;
+}
+export declare class CompletionVerificationOrchestrator {
+    #private;
+    private store;
+    private operations;
+    constructor(store: VerificationStore, operations: VerificationOperations, budgets?: {
+        maxRepairs: number;
+        maxGateAttempts: number;
+        maxVerifications: number;
+        taskTimeoutMs: number;
+        operationTimeoutMs: number;
+        gateTimeoutMs: number;
+    });
+    configureNewTaskBudgets(budgets: VerificationBudgets): void;
+    propose(raw: unknown, signal?: AbortSignal): Promise<CompletionVerdict>;
+}
+//# sourceMappingURL=orchestrator.d.ts.map

package/dist/services/completion-verification/orchestrator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator.d.ts","sourceRoot":"","sources":["../../../source/services/completion-verification/orchestrator.ts"],"names":[],"mappings":"AACA,OAAO,EAOL,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EAEtB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACzB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,QAAQ,EAAE,kBAAkB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1E,MAAM,CAAC,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5E,UAAU,CAAC,QAAQ,EAAE,kBAAkB,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9G,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,OAAO,CAAC,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC3C,KAAK,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAoCD,qBAAa,kCAAkC;;IAKjC,OAAO,CAAC,KAAK;IAAqB,OAAO,CAAC,UAAU;IAAhE,YAAoB,KAAK,EAAE,iBAAiB,EAAU,UAAU,EAAE,sBAAsB,EAAE,OAAO;;;;;;;KAAkB,EAElH;IAED,uBAAuB,CAAC,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAE1D;IAED,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAgBtE;CA4OF"}