@qduc/term2 0.33.0 → 0.35.0

package/dist/services/completion-verification/orchestrator.js

@@ -0,0 +1,275 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { DEFAULT_BUDGETS, POLICY_VERSION, budgetsSchema, decisionSchema, proposalSchema, reportSchema, } from './contracts.js';
+import { mandatoryVerification } from './gate.js';
+/** A deadline races even a broken adapter that ignores cancellation; late results have no write capability. */
+async function bounded(operation, milliseconds, signal) {
+    const controller = new AbortController();
+    let timer;
+    let onAbort;
+    try {
+        return await Promise.race([
+            new Promise((_resolve, reject) => {
+                onAbort = () => {
+                    controller.abort();
+                    reject(new Error('Verification cancelled'));
+                };
+                signal?.addEventListener('abort', onAbort, { once: true });
+                timer = setTimeout(() => {
+                    controller.abort();
+                    reject(new Error('Verification deadline exceeded'));
+                }, milliseconds);
+                if (signal?.aborted)
+                    onAbort();
+            }),
+            Promise.resolve().then(() => {
+                if (controller.signal.aborted)
+                    throw new Error('Verification cancelled');
+                return operation(controller.signal);
+            }),
+        ]);
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+        if (onAbort)
+            signal?.removeEventListener('abort', onAbort);
+    }
+}
+export class CompletionVerificationOrchestrator {
+    store;
+    operations;
+    #owner = randomUUID();
+    #active = new Map();
+    #budgets;
+    constructor(store, operations, budgets = DEFAULT_BUDGETS) {
+        this.store = store;
+        this.operations = operations;
+        this.#budgets = budgetsSchema.parse(budgets);
+    }
+    configureNewTaskBudgets(budgets) {
+        this.#budgets = budgetsSchema.parse(budgets);
+    }
+    propose(raw, signal) {
+        const parsed = proposalSchema.safeParse(raw);
+        if (!parsed.success)
+            return Promise.resolve({ action: 'blocked', reason: 'Invalid completion proposal' });
+        const proposal = parsed.data;
+        // Duplicates in one owner share dispatch. Conflicting proposals never share a result.
+        const key = JSON.stringify(proposal);
+        const active = this.#active.get(key);
+        if (active)
+            return active;
+        const result = this.#run(proposal, signal)
+            .catch(() => {
+            this.#alert('Completion verification persistence or adapter failure');
+            return { action: 'blocked', reason: 'Completion verification failed; completion is not authorized' };
+        })
+            .finally(() => this.#active.delete(key));
+        this.#active.set(key, result);
+        return result;
+    }
+    #alert(message) {
+        try {
+            this.operations.alert?.(message);
+        }
+        catch {
+            /* Alerts cannot authorize completion. */
+        }
+    }
+    #persist(next, previous) {
+        if (!this.store.write(next, previous?.generation))
+            throw new Error('Stale verification transition');
+        try {
+            this.operations.observe?.(next);
+        }
+        catch {
+            this.#alert('Completion verification observability failed');
+        }
+        return next;
+    }
+    #settle(previous, update) {
+        return this.#persist({ ...previous, ...update, updatedAt: Date.now(), generation: previous.generation + 1 }, previous);
+    }
+    #blocked(previous, reason) {
+        const record = this.#settle(previous, { state: 'BLOCKED', reason });
+        return { action: 'blocked', reason, record };
+    }
+    async #revisionMatches(record, deadline, signal) {
+        if (signal?.aborted || Date.now() >= deadline)
+            return false;
+        try {
+            const revision = await bounded(() => this.operations.currentRevision(), Math.max(1, Math.min(10_000, deadline - Date.now())), signal);
+            return revision === record.revision && !signal?.aborted && Date.now() < deadline;
+        }
+        catch {
+            return false;
+        }
+    }
+    async #run(proposal, signal) {
+        const contract = createHash('sha256')
+            .update(JSON.stringify([proposal.goal, proposal.criteria, proposal.environment]))
+            .digest('hex');
+        const prior = this.store.read(proposal.taskId);
+        if (prior &&
+            (prior.contract !== contract ||
+                prior.state === 'COMPLETED' ||
+                prior.state === 'BLOCKED' ||
+                prior.state === 'ESCALATED')) {
+            if (prior.state === 'COMPLETED' &&
+                prior.contract === contract &&
+                prior.revision === proposal.revision &&
+                (await this.#revisionMatches(prior, Date.now() + 10_000, signal))) {
+                return { action: 'complete', record: prior };
+            }
+            return {
+                action: 'blocked',
+                reason: 'Task contract changed or task is terminal; explicit administrative recovery required',
+                record: prior,
+            };
+        }
+        if (prior?.state === 'VERIFICATION_PENDING') {
+            // Never redispatch an uncertain in-flight operation after restart. The lease remains authoritative.
+            if (prior.operationDeadline <= Date.now() || prior.owner !== this.#owner) {
+                return this.#blocked(prior, 'Unsettled verification after restart or lease expiration');
+            }
+            return { action: 'blocked', reason: 'Another completion attempt is pending', record: prior };
+        }
+        if (prior) {
+            if (prior.revision === proposal.revision)
+                return this.#blocked(prior, 'Repair made no repository progress');
+            if (prior.deadline <= Date.now() || prior.gates >= prior.budgets.maxGateAttempts) {
+                return this.#blocked(prior, 'Task deadline or gate budget exhausted');
+            }
+        }
+        const now = Date.now();
+        let record = this.#persist({
+            taskId: proposal.taskId,
+            contract,
+            revision: proposal.revision,
+            state: 'VERIFICATION_PENDING',
+            generation: prior ? prior.generation + 1 : 0,
+            owner: this.#owner,
+            attemptId: randomUUID(),
+            epoch: prior?.epoch ?? randomUUID(),
+            createdAt: prior?.createdAt ?? now,
+            updatedAt: now,
+            deadline: prior?.deadline ?? now + this.#budgets.taskTimeoutMs,
+            operationDeadline: Math.min(prior?.deadline ?? Infinity, now + (prior?.budgets.gateTimeoutMs ?? this.#budgets.gateTimeoutMs)),
+            repairs: prior?.repairs ?? 0,
+            gates: (prior?.gates ?? 0) + 1,
+            verifications: prior?.verifications ?? 0,
+            budgets: prior?.budgets ?? this.#budgets,
+            ...(prior?.report ? { report: prior.report } : {}),
+            reason: 'Completion proposed; gate dispatch reserved',
+        }, prior);
+        const gateStarted = performance.now();
+        let decision;
+        try {
+            decision = decisionSchema.parse(await bounded((operationSignal) => this.operations.gate(proposal, operationSignal), Math.max(1, record.operationDeadline - Date.now()), signal));
+        }
+        catch {
+            decision = {
+                action: 'independent_verify',
+                policyVersion: POLICY_VERSION,
+                reason: 'Gate failure; deterministic fallback',
+            };
+        }
+        if (signal?.aborted)
+            return this.#blocked(record, 'Verification cancelled');
+        decision = { ...decision, recommendedAction: decision.action };
+        if (mandatoryVerification(proposal))
+            decision = {
+                ...decision,
+                action: 'independent_verify',
+                reason: 'Mandatory verification policy override',
+            };
+        if (decision.action === 'quick_check' && !proposal.quickCheck)
+            decision = {
+                ...decision,
+                action: 'independent_verify',
+                reason: 'No applicable host-owned deterministic checker',
+            };
+        // Deterministic 5% skip audit; selected tasks are verified before completion.
+        if (decision.action === 'skip' &&
+            parseInt(createHash('sha256').update(proposal.taskId).digest('hex').slice(0, 8), 16) % 20 === 0) {
+            decision = { ...decision, action: 'independent_verify', auditedSkip: true, reason: 'Sampled skip audit' };
+        }
+        if (Date.now() >= record.deadline)
+            return this.#blocked(record, 'Task deadline exhausted');
+        record = this.#settle(record, {
+            decision,
+            gateLatencyMs: performance.now() - gateStarted,
+            reason: decision.reason,
+        });
+        if (decision.action === 'skip') {
+            record = this.#settle(record, { operationDeadline: Math.min(record.deadline, Date.now() + 10_000) });
+            if (!(await this.#revisionMatches(record, record.operationDeadline, signal))) {
+                return this.#blocked(record, 'Task changed or cancelled before completion');
+            }
+            record = this.#settle(record, {
+                state: 'COMPLETED',
+                reason: 'Policy-authorized completion without additional verification',
+            });
+            return { action: 'complete', record };
+        }
+        if (record.verifications >= record.budgets.maxVerifications)
+            return this.#blocked(record, 'Verification budget exhausted');
+        record = this.#settle(record, {
+            attemptId: randomUUID(),
+            verifications: record.verifications + 1,
+            operationDeadline: Math.min(record.deadline, Date.now() + record.budgets.operationTimeoutMs),
+            reason: 'Verification dispatch reserved',
+        });
+        // Deliberately exclude worker evidence, history, and subjective confidence.
+        const request = {
+            goal: proposal.goal,
+            criteria: proposal.criteria,
+            environment: proposal.environment,
+            revision: proposal.revision,
+            attemptId: record.attemptId,
+        };
+        const verificationStarted = performance.now();
+        let report;
+        try {
+            report = reportSchema.parse(await bounded((operationSignal) => decision.action === 'quick_check'
+                ? this.operations.quickCheck(proposal, request, operationSignal)
+                : this.operations.verify(request, operationSignal), Math.max(1, record.operationDeadline - Date.now()), signal));
+        }
+        catch {
+            record = this.#settle(record, { verificationLatencyMs: performance.now() - verificationStarted });
+            return this.#blocked(record, 'Verifier timeout, error, cancellation, or malformed result');
+        }
+        if (report.attemptId !== record.attemptId ||
+            report.revision !== proposal.revision ||
+            signal?.aborted ||
+            Date.now() >= record.operationDeadline ||
+            !(await this.#revisionMatches(record, Math.min(record.deadline, record.operationDeadline), signal))) {
+            return this.#blocked(record, 'Stale, late, conflicting, or cancelled verification result');
+        }
+        const previousReport = record.report;
+        record = this.#settle(record, {
+            report,
+            verificationLatencyMs: performance.now() - verificationStarted,
+            reason: `Verification outcome: ${report.outcome}`,
+        });
+        if (report.outcome === 'PASS') {
+            if (signal?.aborted || Date.now() >= Math.min(record.deadline, record.operationDeadline)) {
+                return this.#blocked(record, 'Deadline or cancellation reached before completion');
+            }
+            record = this.#settle(record, { state: 'COMPLETED', reason: `Completed through ${decision.action}` });
+            return { action: 'complete', record };
+        }
+        if (report.outcome !== 'FAIL')
+            return this.#blocked(record, `Verification ${report.outcome}; completion not established`);
+        if (record.repairs >= record.budgets.maxRepairs ||
+            record.verifications >= record.budgets.maxVerifications ||
+            Date.now() >= record.deadline ||
+            previousReport?.evidence === report.evidence) {
+            return this.#blocked(record, 'Repair budget, deadline, or repeated-failure limit reached');
+        }
+        // Consume the repair before returning its dispatch instruction. A crash never refunds it.
+        record = this.#settle(record, { state: 'REPAIR_REQUIRED', repairs: record.repairs + 1, reason: 'Repair reserved' });
+        return { action: 'repair', record };
+    }
+}
+//# sourceMappingURL=orchestrator.js.map

package/dist/services/completion-verification/orchestrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator.js","sourceRoot":"","sources":["../../../source/services/completion-verification/orchestrator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EACL,eAAe,EACf,cAAc,EACd,aAAa,EACb,cAAc,EACd,cAAc,EACd,YAAY,GAOb,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAYlD,+GAA+G;AAC/G,KAAK,UAAU,OAAO,CACpB,SAA8C,EAC9C,YAAoB,EACpB,MAAoB;IAEpB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,KAAgD,CAAC;IACrD,IAAI,OAAiC,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;gBACtC,OAAO,GAAG,GAAG,EAAE;oBACb,UAAU,CAAC,KAAK,EAAE,CAAC;oBACnB,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;gBAC9C,CAAC,CAAC;gBACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3D,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBACtB,UAAU,CAAC,KAAK,EAAE,CAAC;oBACnB,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;gBACtD,CAAC,EAAE,YAAY,CAAC,CAAC;gBACjB,IAAI,MAAM,EAAE,OAAO;oBAAE,OAAO,EAAE,CAAC;YACjC,CAAC,CAAC;YACF,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1B,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;gBACzE,OAAO,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACtC,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,OAAO;YAAE,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,MAAM,OAAO,kCAAkC;IAKzB,KAAK;IAA6B,UAAU;IAJhE,MAAM,GAAG,UAAU,EAAE,CAAC;IACtB,OAAO,GAAG,IAAI,GAAG,EAAsC,CAAC;IACxD,QAAQ,CAAsB;IAE9B,YAAoB,KAAwB,EAAU,UAAkC,EAAE,OAAO,GAAG,eAAe;qBAA/F,KAAK;0BAA6B,UAAU;QAC9D,IAAI,CAAC,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,uBAAuB,CAAC,OAA4B;QAClD,IAAI,CAAC,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,CAAC,GAAY,EAAE,MAAoB;QACxC,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC,CAAC;QAC1G,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;QAC7B,sFAAsF;QACtF,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC;aACvC,KAAK,CAAC,GAAG,EAAE;YACV,IAAI,CAAC,MAAM,CAAC,wDAAwD,CAAC,CAAC;YACtE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,8DAA8D,EAAW,CAAC;QAChH,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,OAAe;QACpB,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,yCAAyC;QAC3C,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,IAAwB,EAAE,QAA6B;QAC9D,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACpG,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,MAAM,CAAC,8CAA8C,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,QAA4B,EAAE,MAAmC;QACvE,OAAO,IAAI,CAAC,QAAQ,CAClB,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,GAAG,CAAC,EAAE,EACtF,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,QAA4B,EAAE,MAAc;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACpE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAA0B,EAAE,QAAgB,EAAE,MAAoB;QACvF,IAAI,MAAM,EAAE,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,EACvC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EACpD,MAAM,CACP,CAAC;YACF,OAAO,QAAQ,KAAK,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;QACnF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAA4B,EAAE,MAAoB;QAC3D,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;aAClC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;aAChF,MAAM,CAAC,KAAK,CAAC,CAAC;QACjB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/C,IACE,KAAK;YACL,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ;gBAC1B,KAAK,CAAC,KAAK,KAAK,WAAW;gBAC3B,KAAK,CAAC,KAAK,KAAK,SAAS;gBACzB,KAAK,CAAC,KAAK,KAAK,WAAW,CAAC,EAC9B,CAAC;YACD,IACE,KAAK,CAAC,KAAK,KAAK,WAAW;gBAC3B,KAAK,CAAC,QAAQ,KAAK,QAAQ;gBAC3B,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;gBACpC,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC,EACjE,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;YAC/C,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,sFAAsF;gBAC9F,MAAM,EAAE,KAAK;aACd,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,EAAE,KAAK,KAAK,sBAAsB,EAAE,CAAC;YAC5C,oGAAoG;YACpG,IAAI,KAAK,CAAC,iBAAiB,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;gBACzE,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,0DAA0D,CAAC,CAAC;YAC1F,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,uCAAuC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC/F,CAAC;QACD,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,oCAAoC,CAAC,CAAC;YAC5G,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;gBACjF,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,wCAAwC,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,MAAM,GAAG,IAAI,CAAC,QAAQ,CACxB;YACE,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,QAAQ;YACR,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,KAAK,EAAE,sBAAsB;YAC7B,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,KAAK,EAAE,IAAI,CAAC,MAAM;YAClB,SAAS,EAAE,UAAU,EAAE;YACvB,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,UAAU,EAAE;YACnC,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,GAAG;YAClC,SAAS,EAAE,GAAG;YACd,QAAQ,EAAE,KAAK,EAAE,QAAQ,IAAI,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa;YAC9D,iBAAiB,EAAE,IAAI,CAAC,GAAG,CACzB,KAAK,EAAE,QAAQ,IAAI,QAAQ,EAC3B,GAAG,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CACpE;YACD,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,CAAC;YAC5B,KAAK,EAAE,CAAC,KAAK,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC;YAC9B,aAAa,EAAE,KAAK,EAAE,aAAa,IAAI,CAAC;YACxC,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI,CAAC,QAAQ;YACxC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,MAAM,EAAE,6CAA6C;SACtD,EACD,KAAK,CACN,CAAC;QACF,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACtC,IAAI,QAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,QAAQ,GAAG,cAAc,CAAC,KAAK,CAC7B,MAAM,OAAO,CACX,CAAC,eAAe,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,EACpE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAClD,MAAM,CACP,CACF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,GAAG;gBACT,MAAM,EAAE,oBAAoB;gBAC5B,aAAa,EAAE,cAAc;gBAC7B,MAAM,EAAE,sCAAsC;aAC/C,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;QAC5E,QAAQ,GAAG,EAAE,GAAG,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC/D,IAAI,qBAAqB,CAAC,QAAQ,CAAC;YACjC,QAAQ,GAAG;gBACT,GAAG,QAAQ;gBACX,MAAM,EAAE,oBAAoB;gBAC5B,MAAM,EAAE,wCAAwC;aACjD,CAAC;QACJ,IAAI,QAAQ,CAAC,MAAM,KAAK,aAAa,IAAI,CAAC,QAAQ,CAAC,UAAU;YAC3D,QAAQ,GAAG;gBACT,GAAG,QAAQ;gBACX,MAAM,EAAE,oBAAoB;gBAC5B,MAAM,EAAE,gDAAgD;aACzD,CAAC;QACJ,8EAA8E;QAC9E,IACE,QAAQ,CAAC,MAAM,KAAK,MAAM;YAC1B,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,EAC/F,CAAC;YACD,QAAQ,GAAG,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,oBAAoB,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;QAC5G,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;QAC3F,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YAC5B,QAAQ;YACR,aAAa,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,WAAW;YAC9C,MAAM,EAAE,QAAQ,CAAC,MAAM;SACxB,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC/B,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;YACrG,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC7E,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,6CAA6C,CAAC,CAAC;YAC9E,CAAC;YACD,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;gBAC5B,KAAK,EAAE,WAAW;gBAClB,MAAM,EAAE,8DAA8D;aACvE,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;QACxC,CAAC;QACD,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB;YACzD,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;QAChE,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YAC5B,SAAS,EAAE,UAAU,EAAE;YACvB,aAAa,EAAE,MAAM,CAAC,aAAa,GAAG,CAAC;YACvC,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC;YAC5F,MAAM,EAAE,gCAAgC;SACzC,CAAC,CAAC;QACH,4EAA4E;QAC5E,MAAM,OAAO,GAAwB;YACnC,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC;QACF,MAAM,mBAAmB,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC9C,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,YAAY,CAAC,KAAK,CACzB,MAAM,OAAO,CACX,CAAC,eAAe,EAAE,EAAE,CAClB,QAAQ,CAAC,MAAM,KAAK,aAAa;gBAC/B,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,EAAE,eAAe,CAAC;gBAChE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,EACtD,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAClD,MAAM,CACP,CACF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,qBAAqB,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,mBAAmB,EAAE,CAAC,CAAC;YAClG,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,4DAA4D,CAAC,CAAC;QAC7F,CAAC;QACD,IACE,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;YACrC,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;YACrC,MAAM,EAAE,OAAO;YACf,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,iBAAiB;YACtC,CAAC,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC,CAAC,EACnG,CAAC;YACD,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,4DAA4D,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;QACrC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YAC5B,MAAM;YACN,qBAAqB,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,mBAAmB;YAC9D,MAAM,EAAE,yBAAyB,MAAM,CAAC,OAAO,EAAE;SAClD,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC9B,IAAI,MAAM,EAAE,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACzF,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,oDAAoD,CAAC,CAAC;YACrF,CAAC;YACD,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,qBAAqB,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACtG,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;QACxC,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM;YAC3B,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,MAAM,CAAC,OAAO,8BAA8B,CAAC,CAAC;QAC7F,IACE,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU;YAC3C,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB;YACvD,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,QAAQ;YAC7B,cAAc,EAAE,QAAQ,KAAK,MAAM,CAAC,QAAQ,EAC5C,CAAC;YACD,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,4DAA4D,CAAC,CAAC;QAC7F,CAAC;QACD,0FAA0F;QAC1F,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACpH,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACtC,CAAC;CACF"}

package/dist/services/completion-verification/root-boundary.d.ts

@@ -0,0 +1,21 @@
+import type { ProviderInputItem } from '../../contracts/provider-input.js';
+import type { DurableGoal } from '../logging/conversation-log-events.js';
+import type { ILoggingService, ISettingsService } from '../service-interfaces.js';
+import type { ExecutionContext } from '../execution-context.js';
+import type { ApplicationRunLoopDeps } from '../agent-runtime/application-run-loop.js';
+import { type CompletionVerdict } from './contracts.js';
+/** Root durable-goal adapter. The generic orchestrator has no dependency on conversational state. */
+export declare class RootCompletionBoundary {
+    #private;
+    private deps;
+    constructor(deps: {
+        settings: ISettingsService;
+        logger: ILoggingService;
+        executionContext?: ExecutionContext;
+        resolveModel: ApplicationRunLoopDeps['resolveModel'];
+        model(): string;
+    });
+    verify(goal: DurableGoal, history: readonly ProviderInputItem[], signal?: AbortSignal): Promise<CompletionVerdict>;
+    dispose(): void;
+}
+//# sourceMappingURL=root-boundary.d.ts.map

package/dist/services/completion-verification/root-boundary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"root-boundary.d.ts","sourceRoot":"","sources":["../../../source/services/completion-verification/root-boundary.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAC;AACzE,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAClF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0CAA0C,CAAC;AAEvF,OAAO,EAAmB,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAOzE,qGAAqG;AACrG,qBAAa,sBAAsB;;IAI/B,OAAO,CAAC,IAAI;IADd,YACU,IAAI,EAAE;QACZ,QAAQ,EAAE,gBAAgB,CAAC;QAC3B,MAAM,EAAE,eAAe,CAAC;QACxB,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;QACpC,YAAY,EAAE,sBAAsB,CAAC,cAAc,CAAC,CAAC;QACrD,KAAK,IAAI,MAAM,CAAC;KACjB,EACC;IAqBE,MAAM,CACV,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,SAAS,iBAAiB,EAAE,EACrC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,iBAAiB,CAAC,CAoG5B;IAED,OAAO,IAAI,IAAI,CAEd;CACF"}

package/dist/services/completion-verification/root-boundary.js

@@ -0,0 +1,130 @@
+import envPaths from 'env-paths';
+import path from 'node:path';
+import { createHash } from 'node:crypto';
+import { createOpenRouterDecisionClient } from '../decision-shadow/decision-client.js';
+import { DEFAULT_BUDGETS } from './contracts.js';
+import { createVerificationGate } from './gate.js';
+import { CompletionVerificationOrchestrator } from './orchestrator.js';
+import { VerificationStore } from './store.js';
+import { UnsupportedWorkspaceError, snapshotWorkspace } from './workspace.js';
+import { createIndependentVerifier, runQuickCheck } from './verifier.js';
+/** Root durable-goal adapter. The generic orchestrator has no dependency on conversational state. */
+export class RootCompletionBoundary {
+    deps;
+    #store;
+    #orchestrator;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    #openStore() {
+        return (this.#store ??= new VerificationStore(path.join(envPaths('term2').data, 'completion-verification.sqlite')));
+    }
+    /**
+     * An unsupported workspace is an explicit outcome, not a generic failure: the user
+     * gets the reason and the operator gets an alert naming the task and the cause.
+     */
+    #unsupported(reason, message, goal, cwd, detail) {
+        this.deps.logger.error('Completion verification cannot inspect this workspace', {
+            eventType: 'completion_verification.operational_alert',
+            reason,
+            detail: detail ?? message,
+            environment: cwd,
+            taskId: createHash('sha256').update(`${cwd}\0${goal.id}`).digest('hex'),
+        });
+        return { action: 'blocked', reason: `Unsupported workspace: ${message}` };
+    }
+    async verify(goal, history, signal) {
+        const cwd = this.deps.executionContext?.getCwd() ?? process.cwd();
+        if (this.deps.executionContext?.isRemote())
+            return this.#unsupported('remote-workspace-unsupported', 'Remote workspace verification is unavailable', goal, cwd);
+        let snapshot;
+        try {
+            snapshot = await snapshotWorkspace(cwd);
+        }
+        catch (error) {
+            if (error instanceof UnsupportedWorkspaceError)
+                return this.#unsupported(error.reason, error.message, goal, cwd, error.detail);
+            throw error;
+        }
+        if (signal?.aborted)
+            return { action: 'blocked', reason: 'Completion verification cancelled' };
+        if (!this.#orchestrator) {
+            const settings = this.deps.settings;
+            this.#orchestrator = new CompletionVerificationOrchestrator(this.#openStore(), {
+                gate: createVerificationGate({
+                    client: createOpenRouterDecisionClient({
+                        resolveTransport: () => ({
+                            apiKey: settings.get('agent.openrouter.apiKey') || process.env.OPENROUTER_API_KEY || '',
+                            baseUrl: settings.get('agent.openrouter.baseUrl'),
+                        }),
+                    }),
+                    model: () => settings.get('agent.decisionModel'),
+                }),
+                verify: createIndependentVerifier({
+                    resolveModel: this.deps.resolveModel,
+                    model: () => settings.get('verifier.model') || this.deps.model(),
+                }),
+                quickCheck: runQuickCheck,
+                currentRevision: async () => (await snapshotWorkspace(this.deps.executionContext?.getCwd() ?? process.cwd())).revision,
+                observe: (record) => this.deps.logger.info('Completion verification transition', {
+                    eventType: 'completion_verification.transition',
+                    taskId: record.taskId,
+                    revision: record.revision,
+                    state: record.state,
+                    attemptId: record.attemptId,
+                    generation: record.generation,
+                    createdAt: record.createdAt,
+                    updatedAt: record.updatedAt,
+                    gateLatencyMs: record.gateLatencyMs,
+                    verificationLatencyMs: record.verificationLatencyMs,
+                    gate: record.decision,
+                    outcome: record.report?.outcome,
+                    reportAttemptId: record.report?.attemptId,
+                    reportRevision: record.report?.revision,
+                    reportCurrent: record.report?.attemptId === record.attemptId,
+                    verifierVersion: record.report?.verifierVersion,
+                    costUsdMicros: record.report?.costUsdMicros,
+                    repairs: record.repairs,
+                    gates: record.gates,
+                    verifications: record.verifications,
+                    deadline: record.deadline,
+                    reason: record.reason,
+                }),
+                alert: (message) => this.deps.logger.error(message, { eventType: 'completion_verification.operational_alert' }),
+            }, { ...DEFAULT_BUDGETS, maxRepairs: settings.get('agent.verificationMaxRepairs') ?? 3 });
+        }
+        const call = [...history].reverse().find((item) => item.name === 'goal_check' && item.arguments !== undefined);
+        let evidence = 'Recorded worker completion claim';
+        if (call) {
+            try {
+                const args = typeof call.arguments === 'string' ? JSON.parse(call.arguments) : call.arguments;
+                if (typeof args?.evidence === 'string')
+                    evidence = args.evidence;
+            }
+            catch {
+                /* Validated at the goal-stop seam; missing evidence falls back conservatively. */
+            }
+        }
+        const criteria = goal.successCriteria ?? '';
+        this.#orchestrator.configureNewTaskBudgets({
+            ...DEFAULT_BUDGETS,
+            maxRepairs: this.deps.settings.get('agent.verificationMaxRepairs') ?? 3,
+        });
+        return this.#orchestrator.propose({
+            ...snapshot,
+            taskId: createHash('sha256').update(`${snapshot.environment}\0${goal.id}`).digest('hex'),
+            goal: goal.outcome,
+            criteria,
+            evidence,
+            ...(criteria.trim() === 'git diff --check' &&
+                snapshot.classification === 'documentation' &&
+                snapshot.files.length > 0
+                ? { quickCheck: 'diff_whitespace' }
+                : {}),
+        }, signal);
+    }
+    dispose() {
+        this.#store?.close();
+    }
+}
+//# sourceMappingURL=root-boundary.js.map

package/dist/services/completion-verification/root-boundary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"root-boundary.js","sourceRoot":"","sources":["../../../source/services/completion-verification/root-boundary.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAMzC,OAAO,EAAE,8BAA8B,EAAE,MAAM,uCAAuC,CAAC;AACvF,OAAO,EAAE,eAAe,EAA0B,MAAM,gBAAgB,CAAC;AACzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,kCAAkC,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,yBAAyB,EAAE,iBAAiB,EAA0B,MAAM,gBAAgB,CAAC;AACtG,OAAO,EAAE,yBAAyB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEzE,qGAAqG;AACrG,MAAM,OAAO,sBAAsB;IAIvB,IAAI;IAHd,MAAM,CAAqB;IAC3B,aAAa,CAAsC;IACnD,YACU,IAMP;oBANO,IAAI;IAOX,CAAC;IAEJ,UAAU;QACR,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,gCAAgC,CAAC,CAAC,CAAC,CAAC;IACtH,CAAC;IAED;;;OAGG;IACH,YAAY,CAAC,MAAc,EAAE,OAAe,EAAE,IAAiB,EAAE,GAAW,EAAE,MAAe;QAC3F,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,EAAE;YAC9E,SAAS,EAAE,2CAA2C;YACtD,MAAM;YACN,MAAM,EAAE,MAAM,IAAI,OAAO;YACzB,WAAW,EAAE,GAAG;YAChB,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,GAAG,KAAK,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SACxE,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,0BAA0B,OAAO,EAAE,EAAE,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,MAAM,CACV,IAAiB,EACjB,OAAqC,EACrC,MAAoB;QAEpB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAClE,IAAI,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,EAAE;YACxC,OAAO,IAAI,CAAC,YAAY,CACtB,8BAA8B,EAC9B,8CAA8C,EAC9C,IAAI,EACJ,GAAG,CACJ,CAAC;QACJ,IAAI,QAA2B,CAAC;QAChC,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,yBAAyB;gBAC5C,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACjF,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;QAC/F,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;YACpC,IAAI,CAAC,aAAa,GAAG,IAAI,kCAAkC,CACzD,IAAI,CAAC,UAAU,EAAE,EACjB;gBACE,IAAI,EAAE,sBAAsB,CAAC;oBAC3B,MAAM,EAAE,8BAA8B,CAAC;wBACrC,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;4BACvB,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,yBAAyB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE;4BACvF,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,0BAA0B,CAAC;yBAClD,CAAC;qBACH,CAAC;oBACF,KAAK,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,qBAAqB,CAAC;iBACjD,CAAC;gBACF,MAAM,EAAE,yBAAyB,CAAC;oBAChC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY;oBACpC,KAAK,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;iBACjE,CAAC;gBACF,UAAU,EAAE,aAAa;gBACzB,eAAe,EAAE,KAAK,IAAI,EAAE,CAC1B,CAAC,MAAM,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,EAAE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ;gBAC3F,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAClB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;oBAC1D,SAAS,EAAE,oCAAoC;oBAC/C,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;oBACnD,IAAI,EAAE,MAAM,CAAC,QAAQ;oBACrB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO;oBAC/B,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS;oBACzC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ;oBACvC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,KAAK,MAAM,CAAC,SAAS;oBAC5D,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe;oBAC/C,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa;oBAC3C,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;iBACtB,CAAC;gBACJ,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CACjB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,2CAA2C,EAAE,CAAC;aAC9F,EACD,EAAE,GAAG,eAAe,EAAE,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,8BAA8B,CAAC,IAAI,CAAC,EAAE,CACtF,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;QAC/G,IAAI,QAAQ,GAAG,kCAAkC,CAAC;QAClD,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC9F,IAAI,OAAO,IAAI,EAAE,QAAQ,KAAK,QAAQ;oBAAE,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YACnE,CAAC;YAAC,MAAM,CAAC;gBACP,kFAAkF;YACpF,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,aAAa,CAAC,uBAAuB,CAAC;YACzC,GAAG,eAAe;YAClB,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,8BAA8B,CAAC,IAAI,CAAC;SACxE,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAC/B;YACE,GAAG,QAAQ;YACX,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,WAAW,KAAK,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YACxF,IAAI,EAAE,IAAI,CAAC,OAAO;YAClB,QAAQ;YACR,QAAQ;YACR,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,kBAAkB;gBAC1C,QAAQ,CAAC,cAAc,KAAK,eAAe;gBAC3C,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;gBACvB,CAAC,CAAC,EAAE,UAAU,EAAE,iBAAiB,EAAE;gBACnC,CAAC,CAAC,EAAE,CAAC;SACR,EACD,MAAM,CACP,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;IACvB,CAAC;CACF"}

package/dist/services/completion-verification/store.d.ts

@@ -0,0 +1,13 @@
+import { type VerificationRecord } from './contracts.js';
+/** One authoritative CAS row per task. All counters and dispatch leases commit together. */
+export declare class VerificationStore {
+    #private;
+    constructor(filename: string);
+    read(taskId: string): VerificationRecord | undefined;
+    /** Undefined generation means insert only. Terminal rows cannot be changed through this API. */
+    write(record: VerificationRecord, expectedGeneration?: number): boolean;
+    /** Explicit administrative recovery; audit and removal are atomic. Never called by a worker. */
+    recover(taskId: string, operator: string, reason: string): void;
+    close(): void;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/services/completion-verification/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../source/services/completion-verification/store.ts"],"names":[],"mappings":"AAGA,OAAO,EAAgB,KAAK,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEvE,4FAA4F;AAC5F,qBAAa,iBAAiB;;IAG5B,YAAY,QAAQ,EAAE,MAAM,EAgB3B;IAED,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAKnD;IAED,gGAAgG;IAChG,KAAK,CAAC,MAAM,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,EAAE,MAAM,GAAG,OAAO,CAoBtE;IAED,gGAAgG;IAChG,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAiB9D;IAED,KAAK,IAAI,IAAI,CAEZ;CACF"}

package/dist/services/completion-verification/store.js

@@ -0,0 +1,69 @@
+import Database from 'better-sqlite3';
+import { chmodSync, mkdirSync } from 'node:fs';
+import path from 'node:path';
+import { recordSchema } from './contracts.js';
+/** One authoritative CAS row per task. All counters and dispatch leases commit together. */
+export class VerificationStore {
+    #db;
+    constructor(filename) {
+        mkdirSync(path.dirname(filename), { recursive: true, mode: 0o700 });
+        this.#db = new Database(filename);
+        chmodSync(filename, 0o600);
+        this.#db.pragma('busy_timeout = 5000');
+        this.#db.pragma('journal_mode = WAL');
+        this.#db.pragma('synchronous = FULL');
+        this.#db.exec(`
+      CREATE TABLE IF NOT EXISTS completion_verification (
+        task_id TEXT PRIMARY KEY, generation INTEGER NOT NULL, record TEXT NOT NULL
+      );
+      CREATE TABLE IF NOT EXISTS completion_verification_recovery (
+        id INTEGER PRIMARY KEY, task_id TEXT NOT NULL, operator TEXT NOT NULL,
+        reason TEXT NOT NULL, recorded_at INTEGER NOT NULL, previous_record TEXT NOT NULL
+      );
+    `);
+    }
+    read(taskId) {
+        const row = this.#db.prepare('SELECT record FROM completion_verification WHERE task_id = ?').get(taskId);
+        return row ? recordSchema.parse(JSON.parse(row.record)) : undefined;
+    }
+    /** Undefined generation means insert only. Terminal rows cannot be changed through this API. */
+    write(record, expectedGeneration) {
+        const value = recordSchema.parse(record);
+        if (expectedGeneration === undefined) {
+            return (this.#db
+                .prepare('INSERT OR IGNORE INTO completion_verification VALUES (?, ?, ?)')
+                .run(value.taskId, value.generation, JSON.stringify(value)).changes === 1);
+        }
+        if (value.generation !== expectedGeneration + 1)
+            throw new Error('Invalid verification generation');
+        return (this.#db
+            .prepare(`UPDATE completion_verification SET generation = ?, record = ?
+      WHERE task_id = ? AND generation = ?
+      AND json_extract(record, '$.epoch') = ?
+      AND json_extract(record, '$.state') IN ('VERIFICATION_PENDING', 'REPAIR_REQUIRED')`)
+            .run(value.generation, JSON.stringify(value), value.taskId, expectedGeneration, value.epoch).changes === 1);
+    }
+    /** Explicit administrative recovery; audit and removal are atomic. Never called by a worker. */
+    recover(taskId, operator, reason) {
+        if (!operator.trim() || !reason.trim())
+            throw new Error('Administrative recovery requires operator and reason');
+        this.#db
+            .transaction(() => {
+            const previous = this.read(taskId);
+            if (!previous)
+                throw new Error('Unknown verification task');
+            if (previous.state === 'VERIFICATION_PENDING' && previous.operationDeadline > Date.now())
+                throw new Error('Cannot recover an in-flight verification before its deadline');
+            this.#db
+                .prepare(`INSERT INTO completion_verification_recovery
+        (task_id, operator, reason, recorded_at, previous_record) VALUES (?, ?, ?, ?, ?)`)
+                .run(taskId, operator, reason, Date.now(), JSON.stringify(previous));
+            this.#db.prepare('DELETE FROM completion_verification WHERE task_id = ?').run(taskId);
+        })
+            .immediate();
+    }
+    close() {
+        this.#db.close();
+    }
+}
+//# sourceMappingURL=store.js.map

package/dist/services/completion-verification/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../source/services/completion-verification/store.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAA2B,MAAM,gBAAgB,CAAC;AAEvE,4FAA4F;AAC5F,MAAM,OAAO,iBAAiB;IAC5B,GAAG,CAAoB;IAEvB,YAAY,QAAgB;QAC1B,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,IAAI,CAAC,GAAG,GAAG,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAClC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;;;;;;;;KAQb,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,MAAc;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,8DAA8D,CAAC,CAAC,GAAG,CAAC,MAAM,CAE1F,CAAC;QACd,OAAO,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,CAAC;IAED,gGAAgG;IAChG,KAAK,CAAC,MAA0B,EAAE,kBAA2B;QAC3D,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACrC,OAAO,CACL,IAAI,CAAC,GAAG;iBACL,OAAO,CAAC,gEAAgE,CAAC;iBACzE,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAC5E,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,KAAK,kBAAkB,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACpG,OAAO,CACL,IAAI,CAAC,GAAG;aACL,OAAO,CACN;;;yFAG+E,CAChF;aACA,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,kBAAkB,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC,CAC7G,CAAC;IACJ,CAAC;IAED,gGAAgG;IAChG,OAAO,CAAC,MAAc,EAAE,QAAgB,EAAE,MAAc;QACtD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAChH,IAAI,CAAC,GAAG;aACL,WAAW,CAAC,GAAG,EAAE;YAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACnC,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC5D,IAAI,QAAQ,CAAC,KAAK,KAAK,sBAAsB,IAAI,QAAQ,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE;gBACtF,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;YAClF,IAAI,CAAC,GAAG;iBACL,OAAO,CACN;yFAC6E,CAC9E;iBACA,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;YACvE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,uDAAuD,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxF,CAAC,CAAC;aACD,SAAS,EAAE,CAAC;IACjB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;CACF"}

package/dist/services/completion-verification/verifier.d.ts

@@ -0,0 +1,11 @@
+import { type ApplicationRunLoopDeps } from '../agent-runtime/application-run-loop.js';
+import { type VerificationRequest, type VerificationReport, type CompletionProposal } from './contracts.js';
+export declare const VERIFIER_VERSION = "fresh-repository-verifier-v1";
+/** Fresh run, literal instructions, a single original-goal message, no inherited history or memory. */
+export declare function createIndependentVerifier(deps: {
+    resolveModel: ApplicationRunLoopDeps['resolveModel'];
+    model: () => string;
+}): (request: VerificationRequest, signal: AbortSignal) => Promise<VerificationReport>;
+/** The exact criterion is host-matched. No worker/model-generated command is ever executed. */
+export declare function runQuickCheck(proposal: CompletionProposal, request: VerificationRequest, signal: AbortSignal): Promise<VerificationReport>;
+//# sourceMappingURL=verifier.d.ts.map

package/dist/services/completion-verification/verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifier.d.ts","sourceRoot":"","sources":["../../../source/services/completion-verification/verifier.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,sBAAsB,EAC5B,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACxB,MAAM,gBAAgB,CAAC;AAGxB,eAAO,MAAM,gBAAgB,iCAAiC,CAAC;AAE/D,uGAAuG;AACvG,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,YAAY,EAAE,sBAAsB,CAAC,cAAc,CAAC,CAAC;IACrD,KAAK,EAAE,MAAM,MAAM,CAAC;CACrB,aACwB,mBAAmB,UAAU,WAAW,KAAG,OAAO,CAAC,kBAAkB,CAAC,CAgH9F;AAkCD,+FAA+F;AAC/F,wBAAsB,aAAa,CACjC,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,EAAE,mBAAmB,EAC5B,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,kBAAkB,CAAC,CA4B7B"}