@vercel/factory 0.0.15 → 0.0.16

package/dist/change-verification/eve-tool.mjs

@@ -1,8 +1,10 @@
 import { changeIdSchema, taskIdSchema } from "../schema/id.mjs";
-import { requireTaskExecution } from "../eve/task-execution.mjs";
+import { requireTaskExecution, requireTaskExecutionIdentity } from "../eve/task-execution.mjs";
 import { changeEvidenceSchema, changeLevelSchema } from "../schema/change.mjs";
+import { applyVerificationReport, saveVerificationReport, verificationDelivery, verificationOutputSchema, verificationParentAttempt } from "./result.mjs";
 import { z } from "zod";
 import { defineTool } from "eve/tools";
+import { isDeepStrictEqual } from "node:util";
 //#region src/change-verification/eve-tool.ts
 /**
 * The verifier's outcome tool. Writes evidence onto the change and moves it
@@ -27,7 +29,33 @@ function createRecordVerificationTool(stores, options = {}) {
 			summary: z.string().min(1).max(2e3).describe("What you checked and what you found.")
 		}),
 		async execute({ taskId, changeId, verdict, evidence, confidence, summary }, ctx) {
-			const task = await requireTaskExecution(stores, ctx, taskId);
+			const task = await requireTaskExecutionIdentity(stores, ctx, taskId);
+			const output = verificationOutputSchema.parse({
+				changeId,
+				verdict,
+				evidence,
+				confidence,
+				summary
+			});
+			if (![
+				"running",
+				"succeeded",
+				"failed"
+			].includes(task.state)) throw new Error("Task execution is missing, inactive, or replaced");
+			const saved = await stores.signals.getByDelivery(verificationDelivery(task));
+			if (saved) {
+				const recorded = z.object({ output: verificationOutputSchema }).parse(saved.payload).output;
+				if (!isDeepStrictEqual(recorded, output)) throw new Error("This verification attempt already recorded a different result");
+				const result = await applyVerificationReport(stores, saved);
+				if (result.recorded) await options.presentResult?.({
+					taskId,
+					changeId,
+					verdict,
+					summary
+				});
+				return result;
+			}
+			await requireTaskExecution(stores, ctx, taskId);
 			const change = await stores.changes.get(changeId);
 			if (change === null) return {
 				recorded: false,
@@ -38,60 +66,20 @@ function createRecordVerificationTool(stores, options = {}) {
 				reason: `change is ${change.state}, not open for verification; nothing to record`
 			};
 			const parent = task.parentTaskId === void 0 ? null : await stores.tasks.get(task.parentTaskId);
-			if (task.changeId !== changeId || parent === null || parent.changeId !== changeId || parent.state !== "verifying" || task.rootTaskId !== parent.rootTaskId || task.repositoryIds.length !== 1 || task.repositoryIds[0] !== change.repositoryId || parent.repositoryIds.length !== 1 || parent.repositoryIds[0] !== change.repositoryId) return {
+			if (task.changeId !== changeId || parent === null || parent.changeId !== changeId || parent.state !== "verifying" || parent.attempt !== verificationParentAttempt(task) || task.rootTaskId !== parent.rootTaskId || task.repositoryIds.length !== 1 || task.repositoryIds[0] !== change.repositoryId || parent.repositoryIds.length !== 1 || parent.repositoryIds[0] !== change.repositoryId) return {
 				recorded: false,
 				reason: "Verification Task, parent, Change, and repository must match"
 			};
 			await requireTaskExecution(stores, ctx, taskId);
-			let updatedChange = change;
-			if (verdict === "pass" && change.state === "verifying") updatedChange = await stores.changes.transition(changeId, "ready", {
-				patch: {
-					evidence,
-					confidence
-				},
-				reason: summary
-			});
-			else if (verdict === "fail" && change.state === "ready") updatedChange = await stores.changes.transition(changeId, "verifying", { reason: summary });
-			const output = {
-				changeId,
-				verdict,
-				evidence,
-				confidence,
-				summary
-			};
-			if (verdict === "pass") await stores.tasks.transition(taskId, "succeeded", {
-				expectFrom: "running",
-				expectAttempt: task.attempt,
-				expectExecution: task.execution,
-				output
-			});
-			else await stores.tasks.transition(taskId, "failed", {
-				expectFrom: "running",
-				expectAttempt: task.attempt,
-				expectExecution: task.execution,
-				reason: summary
-			});
-			await (verdict === "pass" ? stores.tasks.transition(parent.id, "succeeded", {
-				expectFrom: "verifying",
-				expectAttempt: parent.attempt,
-				output
-			}) : stores.tasks.transition(parent.id, "failed", {
-				expectFrom: "verifying",
-				expectAttempt: parent.attempt,
-				reason: `verification failed: ${summary}`
-			})).catch(() => void 0);
-			await options.presentResult?.({
+			const report = await saveVerificationReport(stores, task, output);
+			const result = await applyVerificationReport(stores, report);
+			if (result.recorded) await options.presentResult?.({
 				taskId,
 				changeId,
 				verdict,
 				summary
 			});
-			return {
-				recorded: true,
-				verdict,
-				changeState: updatedChange.state,
-				taskState: verdict === "pass" ? "succeeded" : "failed"
-			};
+			return result;
 		}
 	});
 }

package/dist/change-verification/eve-tool.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"eve-tool.mjs","names":[],"sources":["../../src/change-verification/eve-tool.ts"],"sourcesContent":["import { defineTool, type ToolContext, type ToolDefinition } from \"eve/tools\";\nimport { z } from \"zod\";\nimport {\n  changeEvidenceSchema,\n  changeLevelSchema,\n  type ChangeEvidence,\n  type ChangeLevel,\n  type ChangeState,\n} from \"../schema/change\";\nimport { changeIdSchema, taskIdSchema } from \"../schema/id\";\nimport type { ChangeId, TaskId } from \"../schema/id\";\nimport type { FactoryStores } from \"../store/engine\";\nimport { requireTaskExecution } from \"../eve/task-execution\";\n\n/** Change and Task capabilities required by the verification-result tool. */\nexport type RecordVerificationToolStores = Pick<FactoryStores, \"changes\" | \"tasks\">;\n\n/** Verified outcome presented after its Task and Change updates commit. */\nexport interface PresentVerificationResultInput {\n  taskId: TaskId;\n  changeId: ChangeId;\n  verdict: \"pass\" | \"fail\";\n  summary: string;\n}\n\n/** Configures presentation after a verification verdict has been durably recorded. */\nexport interface RecordVerificationToolOptions {\n  presentResult?: (input: PresentVerificationResultInput) => Promise<void>;\n}\n\n/** Evidence and verdict supplied by the verifier for one Change. */\nexport interface RecordVerificationInput {\n  taskId: TaskId;\n  changeId: ChangeId;\n  verdict: \"pass\" | \"fail\";\n  evidence: ChangeEvidence;\n  confidence: ChangeLevel;\n  summary: string;\n}\n\n/** Bounded refusal returned when a verification result cannot be associated safely. */\nexport interface RecordVerificationRefusal {\n  readonly recorded: false;\n  readonly reason: string;\n}\n\n/** Durable lifecycle state returned after a verification verdict is recorded. */\nexport interface RecordVerificationSuccess {\n  readonly recorded: true;\n  readonly verdict: \"pass\" | \"fail\";\n  readonly changeState: ChangeState;\n  readonly taskState: \"succeeded\" | \"failed\";\n}\n\n/** Recorded verification state or bounded association refusal. */\nexport type RecordVerificationResult = RecordVerificationRefusal | RecordVerificationSuccess;\n\n/** Eve outcome tool that records evidence and a verdict for one Change. */\nexport interface RecordVerificationTool extends ToolDefinition<\n  RecordVerificationInput,\n  RecordVerificationResult\n> {\n  execute(input: RecordVerificationInput, ctx: ToolContext): Promise<RecordVerificationResult>;\n}\n\n/**\n * The verifier's outcome tool. Writes evidence onto the change and moves it\n * to ready only when the verdict is pass; a failed verdict leaves the change\n * verifying with the evidence recorded, and the verification task itself\n * ends with a receipt either way. The change's own code_change task follows\n * the verdict too: succeeded on pass, failed on fail with the verifier's\n * summary as the reason, so the ledger never shows a verified-and-rejected fix\n * as still in progress. Fail closed: the agent cannot mark a change ready\n * without supplying every evidence field. Requires the authenticated current\n * Task execution and matching parent, Change, and repository associations.\n */\nexport function createRecordVerificationTool(\n  stores: RecordVerificationToolStores,\n  options: RecordVerificationToolOptions = {},\n): RecordVerificationTool {\n  return defineTool({\n    description:\n      \"Record the outcome of a verification task: the evidence you gathered and whether the change passed. Pass moves the change to ready for human review; fail keeps it out of review.\",\n    inputSchema: z.object({\n      taskId: taskIdSchema.describe(\"Your verification task.\"),\n      changeId: changeIdSchema.describe(\"The change you verified.\"),\n      verdict: z.enum([\"pass\", \"fail\"]),\n      evidence: changeEvidenceSchema,\n      confidence: changeLevelSchema.describe(\"How certain you are in the verdict.\"),\n      summary: z.string().min(1).max(2000).describe(\"What you checked and what you found.\"),\n    }),\n    async execute(\n      { taskId, changeId, verdict, evidence, confidence, summary },\n      ctx,\n    ): Promise<RecordVerificationResult> {\n      const task = await requireTaskExecution(stores, ctx, taskId);\n      const change = await stores.changes.get(changeId);\n      if (change === null) {\n        return { recorded: false as const, reason: `change ${changeId} does not exist` };\n      }\n      if (change.state !== \"verifying\" && change.state !== \"ready\") {\n        return {\n          recorded: false as const,\n          reason: `change is ${change.state}, not open for verification; nothing to record`,\n        };\n      }\n\n      const parent =\n        task.parentTaskId === undefined ? null : await stores.tasks.get(task.parentTaskId);\n      if (\n        task.changeId !== changeId ||\n        parent === null ||\n        parent.changeId !== changeId ||\n        parent.state !== \"verifying\" ||\n        task.rootTaskId !== parent.rootTaskId ||\n        task.repositoryIds.length !== 1 ||\n        task.repositoryIds[0] !== change.repositoryId ||\n        parent.repositoryIds.length !== 1 ||\n        parent.repositoryIds[0] !== change.repositoryId\n      ) {\n        return {\n          recorded: false as const,\n          reason: \"Verification Task, parent, Change, and repository must match\",\n        };\n      }\n\n      await requireTaskExecution(stores, ctx, taskId);\n\n      let updatedChange = change;\n      if (verdict === \"pass\" && change.state === \"verifying\") {\n        updatedChange = await stores.changes.transition(changeId, \"ready\", {\n          patch: { evidence, confidence },\n          reason: summary,\n        });\n      } else if (verdict === \"fail\" && change.state === \"ready\") {\n        updatedChange = await stores.changes.transition(changeId, \"verifying\", {\n          reason: summary,\n        });\n      }\n\n      const output = { changeId, verdict, evidence, confidence, summary };\n      if (verdict === \"pass\") {\n        await stores.tasks.transition(taskId, \"succeeded\", {\n          expectFrom: \"running\",\n          expectAttempt: task.attempt,\n          expectExecution: task.execution,\n          output,\n        });\n      } else {\n        await stores.tasks.transition(taskId, \"failed\", {\n          expectFrom: \"running\",\n          expectAttempt: task.attempt,\n          expectExecution: task.execution,\n          reason: summary,\n        });\n      }\n\n      await (\n        verdict === \"pass\"\n          ? stores.tasks.transition(parent.id, \"succeeded\", {\n              expectFrom: \"verifying\",\n              expectAttempt: parent.attempt,\n              output,\n            })\n          : stores.tasks.transition(parent.id, \"failed\", {\n              expectFrom: \"verifying\",\n              expectAttempt: parent.attempt,\n              reason: `verification failed: ${summary}`,\n            })\n      ).catch(() => undefined);\n\n      await options.presentResult?.({ taskId, changeId, verdict, summary });\n\n      return {\n        recorded: true as const,\n        verdict,\n        changeState: updatedChange.state,\n        taskState: verdict === \"pass\" ? (\"succeeded\" as const) : (\"failed\" as const),\n      };\n    },\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AA4EA,SAAgB,6BACd,QACA,UAAyC,CAAC,GAClB;CACxB,OAAO,WAAW;EAChB,aACE;EACF,aAAa,EAAE,OAAO;GACpB,QAAQ,aAAa,SAAS,yBAAyB;GACvD,UAAU,eAAe,SAAS,0BAA0B;GAC5D,SAAS,EAAE,KAAK,CAAC,QAAQ,MAAM,CAAC;GAChC,UAAU;GACV,YAAY,kBAAkB,SAAS,qCAAqC;GAC5E,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAI,CAAC,CAAC,SAAS,sCAAsC;EACtF,CAAC;EACD,MAAM,QACJ,EAAE,QAAQ,UAAU,SAAS,UAAU,YAAY,WACnD,KACmC;GACnC,MAAM,OAAO,MAAM,qBAAqB,QAAQ,KAAK,MAAM;GAC3D,MAAM,SAAS,MAAM,OAAO,QAAQ,IAAI,QAAQ;GAChD,IAAI,WAAW,MACb,OAAO;IAAE,UAAU;IAAgB,QAAQ,UAAU,SAAS;GAAiB;GAEjF,IAAI,OAAO,UAAU,eAAe,OAAO,UAAU,SACnD,OAAO;IACL,UAAU;IACV,QAAQ,aAAa,OAAO,MAAM;GACpC;GAGF,MAAM,SACJ,KAAK,iBAAiB,KAAA,IAAY,OAAO,MAAM,OAAO,MAAM,IAAI,KAAK,YAAY;GACnF,IACE,KAAK,aAAa,YAClB,WAAW,QACX,OAAO,aAAa,YACpB,OAAO,UAAU,eACjB,KAAK,eAAe,OAAO,cAC3B,KAAK,cAAc,WAAW,KAC9B,KAAK,cAAc,OAAO,OAAO,gBACjC,OAAO,cAAc,WAAW,KAChC,OAAO,cAAc,OAAO,OAAO,cAEnC,OAAO;IACL,UAAU;IACV,QAAQ;GACV;GAGF,MAAM,qBAAqB,QAAQ,KAAK,MAAM;GAE9C,IAAI,gBAAgB;GACpB,IAAI,YAAY,UAAU,OAAO,UAAU,aACzC,gBAAgB,MAAM,OAAO,QAAQ,WAAW,UAAU,SAAS;IACjE,OAAO;KAAE;KAAU;IAAW;IAC9B,QAAQ;GACV,CAAC;QACI,IAAI,YAAY,UAAU,OAAO,UAAU,SAChD,gBAAgB,MAAM,OAAO,QAAQ,WAAW,UAAU,aAAa,EACrE,QAAQ,QACV,CAAC;GAGH,MAAM,SAAS;IAAE;IAAU;IAAS;IAAU;IAAY;GAAQ;GAClE,IAAI,YAAY,QACd,MAAM,OAAO,MAAM,WAAW,QAAQ,aAAa;IACjD,YAAY;IACZ,eAAe,KAAK;IACpB,iBAAiB,KAAK;IACtB;GACF,CAAC;QAED,MAAM,OAAO,MAAM,WAAW,QAAQ,UAAU;IAC9C,YAAY;IACZ,eAAe,KAAK;IACpB,iBAAiB,KAAK;IACtB,QAAQ;GACV,CAAC;GAGH,OACE,YAAY,SACR,OAAO,MAAM,WAAW,OAAO,IAAI,aAAa;IAC9C,YAAY;IACZ,eAAe,OAAO;IACtB;GACF,CAAC,IACD,OAAO,MAAM,WAAW,OAAO,IAAI,UAAU;IAC3C,YAAY;IACZ,eAAe,OAAO;IACtB,QAAQ,wBAAwB;GAClC,CAAC,EAAA,CACL,YAAY,KAAA,CAAS;GAEvB,MAAM,QAAQ,gBAAgB;IAAE;IAAQ;IAAU;IAAS;GAAQ,CAAC;GAEpE,OAAO;IACL,UAAU;IACV;IACA,aAAa,cAAc;IAC3B,WAAW,YAAY,SAAU,cAAyB;GAC5D;EACF;CACF,CAAC;AACH"}
+{"version":3,"file":"eve-tool.mjs","names":[],"sources":["../../src/change-verification/eve-tool.ts"],"sourcesContent":["import { defineTool, type ToolContext, type ToolDefinition } from \"eve/tools\";\nimport { z } from \"zod\";\nimport {\n  changeEvidenceSchema,\n  changeLevelSchema,\n  type ChangeEvidence,\n  type ChangeLevel,\n  type ChangeState,\n} from \"../schema/change\";\nimport { changeIdSchema, taskIdSchema } from \"../schema/id\";\nimport type { ChangeId, TaskId } from \"../schema/id\";\nimport type { FactoryStores } from \"../store/engine\";\nimport { requireTaskExecution, requireTaskExecutionIdentity } from \"../eve/task-execution\";\nimport { isDeepStrictEqual } from \"node:util\";\nimport {\n  applyVerificationReport,\n  saveVerificationReport,\n  verificationDelivery,\n  verificationOutputSchema,\n  verificationParentAttempt,\n} from \"./result\";\n\n/** Change and Task capabilities required by the verification-result tool. */\nexport type RecordVerificationToolStores = Pick<FactoryStores, \"changes\" | \"tasks\" | \"signals\">;\n\n/** Verified outcome presented after its Task and Change updates commit. */\nexport interface PresentVerificationResultInput {\n  taskId: TaskId;\n  changeId: ChangeId;\n  verdict: \"pass\" | \"fail\";\n  summary: string;\n}\n\n/** Configures presentation after a verification verdict has been durably recorded. */\nexport interface RecordVerificationToolOptions {\n  /** Idempotent delivery, retried with the saved verdict after interrupted completion. */\n  presentResult?: (input: PresentVerificationResultInput) => Promise<void>;\n}\n\n/** Evidence and verdict supplied by the verifier for one Change. */\nexport interface RecordVerificationInput {\n  taskId: TaskId;\n  changeId: ChangeId;\n  verdict: \"pass\" | \"fail\";\n  evidence: ChangeEvidence;\n  confidence: ChangeLevel;\n  summary: string;\n}\n\n/** Bounded refusal returned when a verification result cannot be associated safely. */\nexport interface RecordVerificationRefusal {\n  readonly recorded: false;\n  readonly reason: string;\n}\n\n/** Durable lifecycle state returned after a verification verdict is recorded. */\nexport interface RecordVerificationSuccess {\n  readonly recorded: true;\n  readonly verdict: \"pass\" | \"fail\";\n  readonly changeState: ChangeState;\n  readonly taskState: \"succeeded\" | \"failed\";\n}\n\n/** Recorded verification state or bounded association refusal. */\nexport type RecordVerificationResult = RecordVerificationRefusal | RecordVerificationSuccess;\n\n/** Eve outcome tool that records evidence and a verdict for one Change. */\nexport interface RecordVerificationTool extends ToolDefinition<\n  RecordVerificationInput,\n  RecordVerificationResult\n> {\n  execute(input: RecordVerificationInput, ctx: ToolContext): Promise<RecordVerificationResult>;\n}\n\n/**\n * The verifier's outcome tool. Writes evidence onto the change and moves it\n * to ready only when the verdict is pass; a failed verdict leaves the change\n * verifying with the evidence recorded, and the verification task itself\n * ends with a receipt either way. The change's own code_change task follows\n * the verdict too: succeeded on pass, failed on fail with the verifier's\n * summary as the reason, so the ledger never shows a verified-and-rejected fix\n * as still in progress. Fail closed: the agent cannot mark a change ready\n * without supplying every evidence field. Requires the authenticated current\n * Task execution and matching parent, Change, and repository associations.\n */\nexport function createRecordVerificationTool(\n  stores: RecordVerificationToolStores,\n  options: RecordVerificationToolOptions = {},\n): RecordVerificationTool {\n  return defineTool({\n    description:\n      \"Record the outcome of a verification task: the evidence you gathered and whether the change passed. Pass moves the change to ready for human review; fail keeps it out of review.\",\n    inputSchema: z.object({\n      taskId: taskIdSchema.describe(\"Your verification task.\"),\n      changeId: changeIdSchema.describe(\"The change you verified.\"),\n      verdict: z.enum([\"pass\", \"fail\"]),\n      evidence: changeEvidenceSchema,\n      confidence: changeLevelSchema.describe(\"How certain you are in the verdict.\"),\n      summary: z.string().min(1).max(2000).describe(\"What you checked and what you found.\"),\n    }),\n    async execute(\n      { taskId, changeId, verdict, evidence, confidence, summary },\n      ctx,\n    ): Promise<RecordVerificationResult> {\n      const task = await requireTaskExecutionIdentity(stores, ctx, taskId);\n      const output = verificationOutputSchema.parse({\n        changeId,\n        verdict,\n        evidence,\n        confidence,\n        summary,\n      });\n      if (![\"running\", \"succeeded\", \"failed\"].includes(task.state))\n        throw new Error(\"Task execution is missing, inactive, or replaced\");\n      const saved = await stores.signals.getByDelivery(verificationDelivery(task));\n      if (saved) {\n        const recorded = z.object({ output: verificationOutputSchema }).parse(saved.payload).output;\n        if (!isDeepStrictEqual(recorded, output))\n          throw new Error(\"This verification attempt already recorded a different result\");\n        const result = await applyVerificationReport(stores, saved);\n        if (result.recorded) await options.presentResult?.({ taskId, changeId, verdict, summary });\n        return result;\n      }\n      await requireTaskExecution(stores, ctx, taskId);\n      const change = await stores.changes.get(changeId);\n      if (change === null) {\n        return { recorded: false as const, reason: `change ${changeId} does not exist` };\n      }\n      if (change.state !== \"verifying\" && change.state !== \"ready\") {\n        return {\n          recorded: false as const,\n          reason: `change is ${change.state}, not open for verification; nothing to record`,\n        };\n      }\n\n      const parent =\n        task.parentTaskId === undefined ? null : await stores.tasks.get(task.parentTaskId);\n      if (\n        task.changeId !== changeId ||\n        parent === null ||\n        parent.changeId !== changeId ||\n        parent.state !== \"verifying\" ||\n        parent.attempt !== verificationParentAttempt(task) ||\n        task.rootTaskId !== parent.rootTaskId ||\n        task.repositoryIds.length !== 1 ||\n        task.repositoryIds[0] !== change.repositoryId ||\n        parent.repositoryIds.length !== 1 ||\n        parent.repositoryIds[0] !== change.repositoryId\n      ) {\n        return {\n          recorded: false as const,\n          reason: \"Verification Task, parent, Change, and repository must match\",\n        };\n      }\n\n      await requireTaskExecution(stores, ctx, taskId);\n\n      const report = await saveVerificationReport(stores, task, output);\n      const result = await applyVerificationReport(stores, report);\n      if (result.recorded) await options.presentResult?.({ taskId, changeId, verdict, summary });\n      return result;\n    },\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAqFA,SAAgB,6BACd,QACA,UAAyC,CAAC,GAClB;CACxB,OAAO,WAAW;EAChB,aACE;EACF,aAAa,EAAE,OAAO;GACpB,QAAQ,aAAa,SAAS,yBAAyB;GACvD,UAAU,eAAe,SAAS,0BAA0B;GAC5D,SAAS,EAAE,KAAK,CAAC,QAAQ,MAAM,CAAC;GAChC,UAAU;GACV,YAAY,kBAAkB,SAAS,qCAAqC;GAC5E,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAI,CAAC,CAAC,SAAS,sCAAsC;EACtF,CAAC;EACD,MAAM,QACJ,EAAE,QAAQ,UAAU,SAAS,UAAU,YAAY,WACnD,KACmC;GACnC,MAAM,OAAO,MAAM,6BAA6B,QAAQ,KAAK,MAAM;GACnE,MAAM,SAAS,yBAAyB,MAAM;IAC5C;IACA;IACA;IACA;IACA;GACF,CAAC;GACD,IAAI,CAAC;IAAC;IAAW;IAAa;GAAQ,CAAC,CAAC,SAAS,KAAK,KAAK,GACzD,MAAM,IAAI,MAAM,kDAAkD;GACpE,MAAM,QAAQ,MAAM,OAAO,QAAQ,cAAc,qBAAqB,IAAI,CAAC;GAC3E,IAAI,OAAO;IACT,MAAM,WAAW,EAAE,OAAO,EAAE,QAAQ,yBAAyB,CAAC,CAAC,CAAC,MAAM,MAAM,OAAO,CAAC,CAAC;IACrF,IAAI,CAAC,kBAAkB,UAAU,MAAM,GACrC,MAAM,IAAI,MAAM,+DAA+D;IACjF,MAAM,SAAS,MAAM,wBAAwB,QAAQ,KAAK;IAC1D,IAAI,OAAO,UAAU,MAAM,QAAQ,gBAAgB;KAAE;KAAQ;KAAU;KAAS;IAAQ,CAAC;IACzF,OAAO;GACT;GACA,MAAM,qBAAqB,QAAQ,KAAK,MAAM;GAC9C,MAAM,SAAS,MAAM,OAAO,QAAQ,IAAI,QAAQ;GAChD,IAAI,WAAW,MACb,OAAO;IAAE,UAAU;IAAgB,QAAQ,UAAU,SAAS;GAAiB;GAEjF,IAAI,OAAO,UAAU,eAAe,OAAO,UAAU,SACnD,OAAO;IACL,UAAU;IACV,QAAQ,aAAa,OAAO,MAAM;GACpC;GAGF,MAAM,SACJ,KAAK,iBAAiB,KAAA,IAAY,OAAO,MAAM,OAAO,MAAM,IAAI,KAAK,YAAY;GACnF,IACE,KAAK,aAAa,YAClB,WAAW,QACX,OAAO,aAAa,YACpB,OAAO,UAAU,eACjB,OAAO,YAAY,0BAA0B,IAAI,KACjD,KAAK,eAAe,OAAO,cAC3B,KAAK,cAAc,WAAW,KAC9B,KAAK,cAAc,OAAO,OAAO,gBACjC,OAAO,cAAc,WAAW,KAChC,OAAO,cAAc,OAAO,OAAO,cAEnC,OAAO;IACL,UAAU;IACV,QAAQ;GACV;GAGF,MAAM,qBAAqB,QAAQ,KAAK,MAAM;GAE9C,MAAM,SAAS,MAAM,uBAAuB,QAAQ,MAAM,MAAM;GAChE,MAAM,SAAS,MAAM,wBAAwB,QAAQ,MAAM;GAC3D,IAAI,OAAO,UAAU,MAAM,QAAQ,gBAAgB;IAAE;IAAQ;IAAU;IAAS;GAAQ,CAAC;GACzF,OAAO;EACT;CACF,CAAC;AACH"}

package/dist/change-verification/result.mjs

@@ -0,0 +1,130 @@
+import { changeIdSchema, taskIdSchema } from "../schema/id.mjs";
+import { executionReferenceSchema } from "../schema/task.mjs";
+import { changeEvidenceSchema, changeLevelSchema } from "../schema/change.mjs";
+import { z } from "zod";
+import { isDeepStrictEqual } from "node:util";
+//#region src/change-verification/result.ts
+const verificationOutputSchema = z.object({
+	changeId: changeIdSchema,
+	verdict: z.enum(["pass", "fail"]),
+	evidence: changeEvidenceSchema,
+	confidence: changeLevelSchema,
+	summary: z.string().min(1).max(2e3)
+});
+const verificationReportSchema = z.object({
+	taskId: taskIdSchema,
+	attempt: z.number().int().positive(),
+	execution: executionReferenceSchema,
+	parentTaskId: taskIdSchema,
+	parentAttempt: z.number().int().positive(),
+	output: verificationOutputSchema
+});
+function verificationParentAttempt(task) {
+	return z.object({ parentAttempt: z.number().int().positive().default(1) }).parse(task.work.input).parentAttempt;
+}
+function verificationDelivery(task) {
+	return {
+		source: "change_verification",
+		deliveryId: `${task.id}:${task.attempt}`
+	};
+}
+async function saveVerificationReport(stores, task, output) {
+	const payload = verificationReportSchema.parse({
+		taskId: task.id,
+		attempt: task.attempt,
+		execution: task.execution,
+		parentTaskId: task.parentTaskId,
+		parentAttempt: verificationParentAttempt(task),
+		output
+	});
+	const report = await stores.signals.create({
+		...verificationDelivery(task),
+		repositoryId: task.repositoryIds[0],
+		replyTo: task.replyTo,
+		payload
+	});
+	if (report.repositoryId !== task.repositoryIds[0] || !isDeepStrictEqual(report.payload, payload)) throw new Error("This verification attempt already recorded a different result");
+	return report;
+}
+async function applyVerificationReport(stores, report) {
+	const saved = verificationReportSchema.parse(report.payload);
+	const task = await stores.tasks.get(saved.taskId);
+	const parent = await stores.tasks.get(saved.parentTaskId);
+	const { output } = saved;
+	const terminal = output.verdict === "pass" ? "succeeded" : "failed";
+	const change = await stores.changes.get(output.changeId);
+	if (report.source !== "change_verification" || !task || !parent || !change || report.deliveryId !== verificationDelivery(task).deliveryId || task.attempt !== saved.attempt || !isDeepStrictEqual(task.execution, saved.execution) || task.parentTaskId !== parent.id || verificationParentAttempt(task) !== saved.parentAttempt || parent.attempt !== saved.parentAttempt || task.rootTaskId !== parent.rootTaskId || task.changeId !== change.id || parent.changeId !== change.id || task.repositoryIds.length !== 1 || parent.repositoryIds.length !== 1 || task.repositoryIds[0] !== change.repositoryId || parent.repositoryIds[0] !== change.repositoryId || report.repositoryId !== change.repositoryId || task.state !== "running" && !(task.state === terminal && task.reportRef === report.id) || parent.state !== "verifying" && !(parent.state === terminal && parent.reportRef === report.id)) return {
+		recorded: false,
+		reason: "Verification result no longer belongs to the current Task and producer attempt"
+	};
+	let updatedChange = change;
+	if (task.state === "running") {
+		if (parent.state !== "verifying" || !["verifying", "ready"].includes(change.state)) return {
+			recorded: false,
+			reason: "Change and producer are no longer open for verification"
+		};
+		const target = output.verdict === "pass" ? "ready" : "verifying";
+		if (change.state !== target) updatedChange = await stores.changes.transition(change.id, target, {
+			reason: output.summary,
+			patch: {
+				evidence: output.evidence,
+				confidence: output.confidence
+			}
+		});
+		if (!isDeepStrictEqual(updatedChange.evidence, output.evidence) || updatedChange.confidence !== output.confidence) updatedChange = await stores.changes.updateEvidence(change.id, {
+			evidence: output.evidence,
+			confidence: output.confidence,
+			expected: updatedChange
+		});
+		const fence = {
+			expectFrom: "running",
+			expectAttempt: saved.attempt,
+			expectExecution: saved.execution,
+			patch: { reportRef: report.id },
+			phase: "verification"
+		};
+		if (output.verdict === "pass") await stores.tasks.transition(task.id, "succeeded", {
+			...fence,
+			output
+		});
+		else await stores.tasks.transition(task.id, "failed", {
+			...fence,
+			reason: output.summary
+		});
+	}
+	if (parent.state === "verifying") {
+		const fence = {
+			expectFrom: "verifying",
+			expectAttempt: saved.parentAttempt,
+			expectExecution: parent.execution,
+			patch: { reportRef: report.id },
+			phase: "verification"
+		};
+		if (output.verdict === "pass") await stores.tasks.transition(parent.id, "succeeded", {
+			...fence,
+			output
+		});
+		else await stores.tasks.transition(parent.id, "failed", {
+			...fence,
+			reason: `verification failed: ${output.summary}`
+		});
+	}
+	if (report.outcome === "pending") try {
+		await stores.signals.decide(report.id, {
+			outcome: "accepted",
+			reason: "Verification outcome applied"
+		});
+	} catch (error) {
+		if ((await stores.signals.get(report.id))?.outcome !== "accepted") throw error;
+	}
+	return {
+		recorded: true,
+		verdict: output.verdict,
+		changeState: updatedChange.state,
+		taskState: terminal
+	};
+}
+//#endregion
+export { applyVerificationReport, saveVerificationReport, verificationDelivery, verificationOutputSchema, verificationParentAttempt, verificationReportSchema };
+
+//# sourceMappingURL=result.mjs.map

package/dist/change-verification/result.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.mjs","names":[],"sources":["../../src/change-verification/result.ts"],"sourcesContent":["import { isDeepStrictEqual } from \"node:util\";\nimport { z } from \"zod\";\nimport { changeEvidenceSchema, changeLevelSchema } from \"../schema/change\";\nimport { changeIdSchema, taskIdSchema } from \"../schema/id\";\nimport type { Signal } from \"../schema/signal\";\nimport { executionReferenceSchema, type Task } from \"../schema/task\";\nimport type { FactoryStores } from \"../store/engine\";\nimport type { RecordVerificationResult } from \"./eve-tool\";\n\nexport const verificationOutputSchema = z.object({\n  changeId: changeIdSchema,\n  verdict: z.enum([\"pass\", \"fail\"]),\n  evidence: changeEvidenceSchema,\n  confidence: changeLevelSchema,\n  summary: z.string().min(1).max(2000),\n});\n\nexport const verificationReportSchema = z.object({\n  taskId: taskIdSchema,\n  attempt: z.number().int().positive(),\n  execution: executionReferenceSchema,\n  parentTaskId: taskIdSchema,\n  parentAttempt: z.number().int().positive(),\n  output: verificationOutputSchema,\n});\n\ntype Stores = Pick<FactoryStores, \"tasks\" | \"changes\" | \"signals\">;\n\nexport function verificationParentAttempt(task: Task): number {\n  // Pre-binding verification Tasks only authorize the initial producer attempt.\n  return z.object({ parentAttempt: z.number().int().positive().default(1) }).parse(task.work.input)\n    .parentAttempt;\n}\n\nexport function verificationDelivery(task: Task) {\n  return { source: \"change_verification\", deliveryId: `${task.id}:${task.attempt}` };\n}\n\nexport async function saveVerificationReport(\n  stores: Stores,\n  task: Task,\n  output: z.infer<typeof verificationOutputSchema>,\n) {\n  const payload = verificationReportSchema.parse({\n    taskId: task.id,\n    attempt: task.attempt,\n    execution: task.execution,\n    parentTaskId: task.parentTaskId,\n    parentAttempt: verificationParentAttempt(task),\n    output,\n  });\n  const report = await stores.signals.create({\n    ...verificationDelivery(task),\n    repositoryId: task.repositoryIds[0]!,\n    replyTo: task.replyTo,\n    payload,\n  });\n  if (report.repositoryId !== task.repositoryIds[0] || !isDeepStrictEqual(report.payload, payload))\n    throw new Error(\"This verification attempt already recorded a different result\");\n  return report;\n}\n\nexport async function applyVerificationReport(\n  stores: Stores,\n  report: Signal,\n): Promise<RecordVerificationResult> {\n  const saved = verificationReportSchema.parse(report.payload);\n  const task = await stores.tasks.get(saved.taskId);\n  const parent = await stores.tasks.get(saved.parentTaskId);\n  const { output } = saved;\n  const terminal = output.verdict === \"pass\" ? \"succeeded\" : \"failed\";\n  const change = await stores.changes.get(output.changeId);\n  if (\n    report.source !== \"change_verification\" ||\n    !task ||\n    !parent ||\n    !change ||\n    report.deliveryId !== verificationDelivery(task).deliveryId ||\n    task.attempt !== saved.attempt ||\n    !isDeepStrictEqual(task.execution, saved.execution) ||\n    task.parentTaskId !== parent.id ||\n    verificationParentAttempt(task) !== saved.parentAttempt ||\n    parent.attempt !== saved.parentAttempt ||\n    task.rootTaskId !== parent.rootTaskId ||\n    task.changeId !== change.id ||\n    parent.changeId !== change.id ||\n    task.repositoryIds.length !== 1 ||\n    parent.repositoryIds.length !== 1 ||\n    task.repositoryIds[0] !== change.repositoryId ||\n    parent.repositoryIds[0] !== change.repositoryId ||\n    report.repositoryId !== change.repositoryId ||\n    (task.state !== \"running\" && !(task.state === terminal && task.reportRef === report.id)) ||\n    (parent.state !== \"verifying\" && !(parent.state === terminal && parent.reportRef === report.id))\n  )\n    return {\n      recorded: false,\n      reason: \"Verification result no longer belongs to the current Task and producer attempt\",\n    };\n\n  let updatedChange = change;\n  if (task.state === \"running\") {\n    if (parent.state !== \"verifying\" || ![\"verifying\", \"ready\"].includes(change.state))\n      return { recorded: false, reason: \"Change and producer are no longer open for verification\" };\n    const target = output.verdict === \"pass\" ? \"ready\" : \"verifying\";\n    if (change.state !== target)\n      updatedChange = await stores.changes.transition(change.id, target, {\n        reason: output.summary,\n        patch: { evidence: output.evidence, confidence: output.confidence },\n      });\n    if (\n      !isDeepStrictEqual(updatedChange.evidence, output.evidence) ||\n      updatedChange.confidence !== output.confidence\n    )\n      updatedChange = await stores.changes.updateEvidence(change.id, {\n        evidence: output.evidence,\n        confidence: output.confidence,\n        expected: updatedChange,\n      });\n    const fence = {\n      expectFrom: \"running\" as const,\n      expectAttempt: saved.attempt,\n      expectExecution: saved.execution,\n      patch: { reportRef: report.id },\n      phase: \"verification\",\n    };\n    if (output.verdict === \"pass\")\n      await stores.tasks.transition(task.id, \"succeeded\", { ...fence, output });\n    else await stores.tasks.transition(task.id, \"failed\", { ...fence, reason: output.summary });\n  }\n  if (parent.state === \"verifying\") {\n    const fence = {\n      expectFrom: \"verifying\" as const,\n      expectAttempt: saved.parentAttempt,\n      expectExecution: parent.execution,\n      patch: { reportRef: report.id },\n      phase: \"verification\",\n    };\n    if (output.verdict === \"pass\")\n      await stores.tasks.transition(parent.id, \"succeeded\", { ...fence, output });\n    else\n      await stores.tasks.transition(parent.id, \"failed\", {\n        ...fence,\n        reason: `verification failed: ${output.summary}`,\n      });\n  }\n  if (report.outcome === \"pending\") {\n    try {\n      await stores.signals.decide(report.id, {\n        outcome: \"accepted\",\n        reason: \"Verification outcome applied\",\n      });\n    } catch (error) {\n      if ((await stores.signals.get(report.id))?.outcome !== \"accepted\") throw error;\n    }\n  }\n  return {\n    recorded: true,\n    verdict: output.verdict,\n    changeState: updatedChange.state,\n    taskState: terminal,\n  };\n}\n"],"mappings":";;;;;;AASA,MAAa,2BAA2B,EAAE,OAAO;CAC/C,UAAU;CACV,SAAS,EAAE,KAAK,CAAC,QAAQ,MAAM,CAAC;CAChC,UAAU;CACV,YAAY;CACZ,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAI;AACrC,CAAC;AAED,MAAa,2BAA2B,EAAE,OAAO;CAC/C,QAAQ;CACR,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;CACnC,WAAW;CACX,cAAc;CACd,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS;CACzC,QAAQ;AACV,CAAC;AAID,SAAgB,0BAA0B,MAAoB;CAE5D,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,KAAK,CAAC,CAC9F;AACL;AAEA,SAAgB,qBAAqB,MAAY;CAC/C,OAAO;EAAE,QAAQ;EAAuB,YAAY,GAAG,KAAK,GAAG,GAAG,KAAK;CAAU;AACnF;AAEA,eAAsB,uBACpB,QACA,MACA,QACA;CACA,MAAM,UAAU,yBAAyB,MAAM;EAC7C,QAAQ,KAAK;EACb,SAAS,KAAK;EACd,WAAW,KAAK;EAChB,cAAc,KAAK;EACnB,eAAe,0BAA0B,IAAI;EAC7C;CACF,CAAC;CACD,MAAM,SAAS,MAAM,OAAO,QAAQ,OAAO;EACzC,GAAG,qBAAqB,IAAI;EAC5B,cAAc,KAAK,cAAc;EACjC,SAAS,KAAK;EACd;CACF,CAAC;CACD,IAAI,OAAO,iBAAiB,KAAK,cAAc,MAAM,CAAC,kBAAkB,OAAO,SAAS,OAAO,GAC7F,MAAM,IAAI,MAAM,+DAA+D;CACjF,OAAO;AACT;AAEA,eAAsB,wBACpB,QACA,QACmC;CACnC,MAAM,QAAQ,yBAAyB,MAAM,OAAO,OAAO;CAC3D,MAAM,OAAO,MAAM,OAAO,MAAM,IAAI,MAAM,MAAM;CAChD,MAAM,SAAS,MAAM,OAAO,MAAM,IAAI,MAAM,YAAY;CACxD,MAAM,EAAE,WAAW;CACnB,MAAM,WAAW,OAAO,YAAY,SAAS,cAAc;CAC3D,MAAM,SAAS,MAAM,OAAO,QAAQ,IAAI,OAAO,QAAQ;CACvD,IACE,OAAO,WAAW,yBAClB,CAAC,QACD,CAAC,UACD,CAAC,UACD,OAAO,eAAe,qBAAqB,IAAI,CAAC,CAAC,cACjD,KAAK,YAAY,MAAM,WACvB,CAAC,kBAAkB,KAAK,WAAW,MAAM,SAAS,KAClD,KAAK,iBAAiB,OAAO,MAC7B,0BAA0B,IAAI,MAAM,MAAM,iBAC1C,OAAO,YAAY,MAAM,iBACzB,KAAK,eAAe,OAAO,cAC3B,KAAK,aAAa,OAAO,MACzB,OAAO,aAAa,OAAO,MAC3B,KAAK,cAAc,WAAW,KAC9B,OAAO,cAAc,WAAW,KAChC,KAAK,cAAc,OAAO,OAAO,gBACjC,OAAO,cAAc,OAAO,OAAO,gBACnC,OAAO,iBAAiB,OAAO,gBAC9B,KAAK,UAAU,aAAa,EAAE,KAAK,UAAU,YAAY,KAAK,cAAc,OAAO,OACnF,OAAO,UAAU,eAAe,EAAE,OAAO,UAAU,YAAY,OAAO,cAAc,OAAO,KAE5F,OAAO;EACL,UAAU;EACV,QAAQ;CACV;CAEF,IAAI,gBAAgB;CACpB,IAAI,KAAK,UAAU,WAAW;EAC5B,IAAI,OAAO,UAAU,eAAe,CAAC,CAAC,aAAa,OAAO,CAAC,CAAC,SAAS,OAAO,KAAK,GAC/E,OAAO;GAAE,UAAU;GAAO,QAAQ;EAA0D;EAC9F,MAAM,SAAS,OAAO,YAAY,SAAS,UAAU;EACrD,IAAI,OAAO,UAAU,QACnB,gBAAgB,MAAM,OAAO,QAAQ,WAAW,OAAO,IAAI,QAAQ;GACjE,QAAQ,OAAO;GACf,OAAO;IAAE,UAAU,OAAO;IAAU,YAAY,OAAO;GAAW;EACpE,CAAC;EACH,IACE,CAAC,kBAAkB,cAAc,UAAU,OAAO,QAAQ,KAC1D,cAAc,eAAe,OAAO,YAEpC,gBAAgB,MAAM,OAAO,QAAQ,eAAe,OAAO,IAAI;GAC7D,UAAU,OAAO;GACjB,YAAY,OAAO;GACnB,UAAU;EACZ,CAAC;EACH,MAAM,QAAQ;GACZ,YAAY;GACZ,eAAe,MAAM;GACrB,iBAAiB,MAAM;GACvB,OAAO,EAAE,WAAW,OAAO,GAAG;GAC9B,OAAO;EACT;EACA,IAAI,OAAO,YAAY,QACrB,MAAM,OAAO,MAAM,WAAW,KAAK,IAAI,aAAa;GAAE,GAAG;GAAO;EAAO,CAAC;OACrE,MAAM,OAAO,MAAM,WAAW,KAAK,IAAI,UAAU;GAAE,GAAG;GAAO,QAAQ,OAAO;EAAQ,CAAC;CAC5F;CACA,IAAI,OAAO,UAAU,aAAa;EAChC,MAAM,QAAQ;GACZ,YAAY;GACZ,eAAe,MAAM;GACrB,iBAAiB,OAAO;GACxB,OAAO,EAAE,WAAW,OAAO,GAAG;GAC9B,OAAO;EACT;EACA,IAAI,OAAO,YAAY,QACrB,MAAM,OAAO,MAAM,WAAW,OAAO,IAAI,aAAa;GAAE,GAAG;GAAO;EAAO,CAAC;OAE1E,MAAM,OAAO,MAAM,WAAW,OAAO,IAAI,UAAU;GACjD,GAAG;GACH,QAAQ,wBAAwB,OAAO;EACzC,CAAC;CACL;CACA,IAAI,OAAO,YAAY,WACrB,IAAI;EACF,MAAM,OAAO,QAAQ,OAAO,OAAO,IAAI;GACrC,SAAS;GACT,QAAQ;EACV,CAAC;CACH,SAAS,OAAO;EACd,KAAK,MAAM,OAAO,QAAQ,IAAI,OAAO,EAAE,EAAA,EAAI,YAAY,YAAY,MAAM;CAC3E;CAEF,OAAO;EACL,UAAU;EACV,SAAS,OAAO;EAChB,aAAa,cAAc;EAC3B,WAAW;CACb;AACF"}

package/dist/changes/eve-record-change.d.mts

@@ -30,8 +30,8 @@ type RecordChangeInput = z.infer<typeof recordChangeInputSchema>;
 /** Configures policy gates and durable presentation for the software record-change tool. */
 interface RecordChangeToolOptions {
   /**
-   * Pre-action gate for record_change, run as an Eve approval policy before
-   * the tool executes. Refusals reach the model as a denial with the reason.
+   * PR association gate, run as an Eve approval policy and again after
+   * authentication before recording. Refusals include the gate's reason.
    * Gates must fail closed: when they cannot verify, they refuse.
    */
   recordChangeGate?: (input: RecordChangeInput) => Promise<PullRequestPublicationGateResult>;

package/dist/changes/eve-record-change.mjs

@@ -1,4 +1,5 @@
 import { repositoryIdSchema, taskIdSchema } from "../schema/id.mjs";
+import { requireTaskExecution, requireTaskExecutionIdentity } from "../eve/task-execution.mjs";
 import { changeLevelSchema } from "../schema/change.mjs";
 import { z } from "zod";
 import { defineTool } from "eve/tools";
@@ -31,13 +32,31 @@ function createRecordChangeTool(stores, options = {}) {
 				reason: verdict.reason
 			};
 		} },
-		async execute({ taskId, repositoryId, prNumber, prUrl, risk, confidence, summary }) {
-			const currentTask = await stores.tasks.get(taskId);
-			if (currentTask === null) throw new Error(`task ${taskId} does not exist`);
+		async execute({ taskId, repositoryId, prNumber, prUrl, risk, confidence, summary }, ctx) {
+			const currentTask = await requireTaskExecutionIdentity(stores, ctx, taskId);
 			if (currentTask.state !== "running" && currentTask.state !== "verifying" && currentTask.state !== "succeeded") throw new Error(`task ${taskId} is ${currentTask.state}, not running`);
+			if (currentTask.repositoryIds.length !== 1 || currentTask.repositoryIds[0] !== repositoryId) throw new Error("Repository does not match the authenticated Task");
+			if (currentTask.state !== "running" && currentTask.changeId === void 0) throw new Error(`task ${taskId} has no recorded change`);
 			const linkedChange = currentTask.changeId === void 0 ? void 0 : await stores.changes.get(currentTask.changeId);
 			if (currentTask.changeId !== void 0 && linkedChange === null) throw new Error(`change ${currentTask.changeId} does not exist`);
 			let change = linkedChange ?? (await stores.changes.list()).find((candidate) => candidate.taskId === taskId);
+			if (change !== void 0 && (change.repositoryId !== repositoryId || change.prNumber !== prNumber || change.prUrl !== prUrl)) throw new Error("Pull request does not match the Task's recorded Change");
+			if (currentTask.state === "running") {
+				await requireTaskExecution(stores, ctx, taskId);
+				if (recordChangeGate !== void 0) {
+					const verdict = await recordChangeGate({
+						taskId,
+						repositoryId,
+						prNumber,
+						prUrl,
+						risk,
+						confidence,
+						summary
+					});
+					if (!verdict.ok) throw new Error(verdict.reason);
+				}
+				await requireTaskExecution(stores, ctx, taskId);
+			}
 			if (change === void 0) {
 				if (currentTask.state !== "running") throw new Error(`task ${taskId} has no recorded change`);
 				change = await stores.changes.create({
@@ -59,14 +78,24 @@ function createRecordChangeTool(stores, options = {}) {
 			}
 			if (change === void 0) throw new Error(`task ${taskId} has no recorded change`);
 			let recordedChange = change;
-			if (currentTask.state === "running") await options.presentChange?.({
-				taskId,
-				changeId: recordedChange.id,
-				verification,
-				summary
-			});
+			if (currentTask.state === "succeeded") return {
+				change: recordedChange,
+				task: currentTask
+			};
+			if (currentTask.state === "running") {
+				await requireTaskExecution(stores, ctx, taskId);
+				await options.presentChange?.({
+					taskId,
+					changeId: recordedChange.id,
+					verification,
+					summary
+				});
+			}
 			let task = currentTask;
 			if (task.state === "running") task = await stores.tasks.transition(taskId, "verifying", {
+				expectFrom: "running",
+				expectAttempt: currentTask.attempt,
+				expectExecution: currentTask.execution,
 				patch: { changeId: recordedChange.id },
 				reason: summary
 			});
@@ -74,8 +103,13 @@ function createRecordChangeTool(stores, options = {}) {
 				change: recordedChange,
 				task
 			};
+			const completion = await requireTaskExecutionIdentity(stores, ctx, taskId);
+			if (completion.state !== "verifying" || completion.changeId !== recordedChange.id) throw new Error("Task is no longer awaiting this Change's completion");
 			if (recordedChange.state === "verifying") recordedChange = await stores.changes.transition(recordedChange.id, "ready", { reason: "independent verification is not configured" });
 			if (task.state === "verifying") task = await stores.tasks.transition(taskId, "succeeded", {
+				expectFrom: "verifying",
+				expectAttempt: currentTask.attempt,
+				expectExecution: currentTask.execution,
 				reason: "change recorded for human review without independent verification",
 				output: {
 					changeId: recordedChange.id,

package/dist/changes/eve-record-change.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"eve-record-change.mjs","names":[],"sources":["../../src/changes/eve-record-change.ts"],"sourcesContent":["import { defineTool, type ToolContext, type ToolDefinition } from \"eve/tools\";\nimport { z } from \"zod\";\nimport type { ChangePresenter } from \"./presentation\";\nimport { changeLevelSchema, type Change } from \"../schema/change\";\nimport { repositoryIdSchema, taskIdSchema } from \"../schema/id\";\nimport type { Task } from \"../schema/task\";\nimport type { PullRequestPublicationGateResult } from \"../pull-requests/contracts\";\nimport type { FactoryStores } from \"../store/engine\";\n\n/** Change and Task capabilities required by the record-change tool. */\nexport type RecordChangeToolStores = Pick<FactoryStores, \"changes\" | \"tasks\">;\n\nconst recordChangeInputSchema = z.object({\n  taskId: taskIdSchema,\n  repositoryId: repositoryIdSchema,\n  prNumber: z.number().int().min(1),\n  prUrl: z.url(),\n  risk: changeLevelSchema.describe(\"Blast radius of the change if it is wrong.\"),\n  confidence: changeLevelSchema.describe(\"How certain you are the change is correct.\"),\n  summary: z.string().min(1).describe(\"One-sentence description of the change.\"),\n});\n\n/** Validated input accepted by the tool that links a pull request to its producing Task. */\nexport type RecordChangeInput = z.infer<typeof recordChangeInputSchema>;\n\n/** Configures policy gates and durable presentation for the software record-change tool. */\nexport interface RecordChangeToolOptions {\n  /**\n   * Pre-action gate for record_change, run as an Eve approval policy before\n   * the tool executes. Refusals reach the model as a denial with the reason.\n   * Gates must fail closed: when they cannot verify, they refuse.\n   */\n  recordChangeGate?: (input: RecordChangeInput) => Promise<PullRequestPublicationGateResult>;\n  /** Whether recorded code changes wait for an independent verification task. Default: required. */\n  verification?: \"required\" | \"disabled\";\n  /** Present the pull request after record_change persists its durable state. */\n  presentChange?: ChangePresenter;\n}\n\n/** Change and producing Task returned after a pull request is recorded. */\nexport interface RecordChangeResult {\n  readonly change: Change;\n  readonly task: Task;\n}\n\n/** Eve outcome tool that links a pull request to its producing Task. */\nexport interface RecordChangeTool extends ToolDefinition<RecordChangeInput, RecordChangeResult> {\n  execute(input: RecordChangeInput, ctx: ToolContext): Promise<RecordChangeResult>;\n}\n\n/** Create the supplied software workflow's pull-request outcome tool. */\nexport function createRecordChangeTool(\n  stores: RecordChangeToolStores,\n  options: RecordChangeToolOptions = {},\n): RecordChangeTool {\n  const recordChangeGate = options.recordChangeGate;\n  const verification = options.verification ?? \"required\";\n  return defineTool({\n    description:\n      verification === \"required\"\n        ? \"Record the pull request produced for a code_change task. Creates the change, links it to the task, and moves the task to verifying.\"\n        : \"Record the pull request produced for a code_change task. Creates the change and marks it ready for human review without independent verification.\",\n    inputSchema: recordChangeInputSchema,\n    ...(recordChangeGate === undefined\n      ? {}\n      : {\n          approval: async ({ toolInput }: { toolInput?: unknown }) => {\n            const parsed = recordChangeInputSchema.safeParse(toolInput);\n            if (!parsed.success) {\n              return {\n                type: \"denied\" as const,\n                reason: \"record_change input is malformed; fix the arguments and retry\",\n              };\n            }\n            const verdict = await recordChangeGate(parsed.data);\n            return verdict.ok\n              ? (\"not-applicable\" as const)\n              : { type: \"denied\" as const, reason: verdict.reason };\n          },\n        }),\n    async execute({\n      taskId,\n      repositoryId,\n      prNumber,\n      prUrl,\n      risk,\n      confidence,\n      summary,\n    }): Promise<RecordChangeResult> {\n      const currentTask = await stores.tasks.get(taskId);\n      if (currentTask === null) throw new Error(`task ${taskId} does not exist`);\n      if (\n        currentTask.state !== \"running\" &&\n        currentTask.state !== \"verifying\" &&\n        currentTask.state !== \"succeeded\"\n      ) {\n        throw new Error(`task ${taskId} is ${currentTask.state}, not running`);\n      }\n      const linkedChange =\n        currentTask.changeId === undefined\n          ? undefined\n          : await stores.changes.get(currentTask.changeId);\n      if (currentTask.changeId !== undefined && linkedChange === null) {\n        throw new Error(`change ${currentTask.changeId} does not exist`);\n      }\n      let change =\n        linkedChange ??\n        (await stores.changes.list()).find((candidate) => candidate.taskId === taskId);\n\n      if (change === undefined) {\n        if (currentTask.state !== \"running\") {\n          throw new Error(`task ${taskId} has no recorded change`);\n        }\n        change = await stores.changes.create({\n          repositoryId,\n          taskId,\n          prNumber,\n          prUrl,\n          author: \"factory\",\n          risk,\n          confidence,\n          evidence: {\n            reproVerified: false,\n            testsAdded: 0,\n            checksGreen: false,\n            attackPassed: false,\n            scopeMatches: false,\n          },\n        });\n      }\n      if (change === undefined) throw new Error(`task ${taskId} has no recorded change`);\n      let recordedChange = change;\n\n      if (currentTask.state === \"running\") {\n        await options.presentChange?.({\n          taskId,\n          changeId: recordedChange.id,\n          verification,\n          summary,\n        });\n      }\n\n      let task: Task = currentTask;\n      if (task.state === \"running\") {\n        task = await stores.tasks.transition(taskId, \"verifying\", {\n          patch: { changeId: recordedChange.id },\n          reason: summary,\n        });\n      }\n      if (verification === \"required\") return { change: recordedChange, task };\n\n      if (recordedChange.state === \"verifying\") {\n        recordedChange = await stores.changes.transition(recordedChange.id, \"ready\", {\n          reason: \"independent verification is not configured\",\n        });\n      }\n      if (task.state === \"verifying\") {\n        task = await stores.tasks.transition(taskId, \"succeeded\", {\n          reason: \"change recorded for human review without independent verification\",\n          output: {\n            changeId: recordedChange.id,\n            prUrl: recordedChange.prUrl,\n            summary,\n            verification,\n          },\n        });\n      }\n      return { change: recordedChange, task };\n    },\n  });\n}\n"],"mappings":";;;;;AAYA,MAAM,0BAA0B,EAAE,OAAO;CACvC,QAAQ;CACR,cAAc;CACd,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;CAChC,OAAO,EAAE,IAAI;CACb,MAAM,kBAAkB,SAAS,4CAA4C;CAC7E,YAAY,kBAAkB,SAAS,4CAA4C;CACnF,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,yCAAyC;AAC/E,CAAC;;AA+BD,SAAgB,uBACd,QACA,UAAmC,CAAC,GAClB;CAClB,MAAM,mBAAmB,QAAQ;CACjC,MAAM,eAAe,QAAQ,gBAAgB;CAC7C,OAAO,WAAW;EAChB,aACE,iBAAiB,aACb,wIACA;EACN,aAAa;EACb,GAAI,qBAAqB,KAAA,IACrB,CAAC,IACD,EACE,UAAU,OAAO,EAAE,gBAAyC;GAC1D,MAAM,SAAS,wBAAwB,UAAU,SAAS;GAC1D,IAAI,CAAC,OAAO,SACV,OAAO;IACL,MAAM;IACN,QAAQ;GACV;GAEF,MAAM,UAAU,MAAM,iBAAiB,OAAO,IAAI;GAClD,OAAO,QAAQ,KACV,mBACD;IAAE,MAAM;IAAmB,QAAQ,QAAQ;GAAO;EACxD,EACF;EACJ,MAAM,QAAQ,EACZ,QACA,cACA,UACA,OACA,MACA,YACA,WAC8B;GAC9B,MAAM,cAAc,MAAM,OAAO,MAAM,IAAI,MAAM;GACjD,IAAI,gBAAgB,MAAM,MAAM,IAAI,MAAM,QAAQ,OAAO,gBAAgB;GACzE,IACE,YAAY,UAAU,aACtB,YAAY,UAAU,eACtB,YAAY,UAAU,aAEtB,MAAM,IAAI,MAAM,QAAQ,OAAO,MAAM,YAAY,MAAM,cAAc;GAEvE,MAAM,eACJ,YAAY,aAAa,KAAA,IACrB,KAAA,IACA,MAAM,OAAO,QAAQ,IAAI,YAAY,QAAQ;GACnD,IAAI,YAAY,aAAa,KAAA,KAAa,iBAAiB,MACzD,MAAM,IAAI,MAAM,UAAU,YAAY,SAAS,gBAAgB;GAEjE,IAAI,SACF,iBACC,MAAM,OAAO,QAAQ,KAAK,EAAA,CAAG,MAAM,cAAc,UAAU,WAAW,MAAM;GAE/E,IAAI,WAAW,KAAA,GAAW;IACxB,IAAI,YAAY,UAAU,WACxB,MAAM,IAAI,MAAM,QAAQ,OAAO,wBAAwB;IAEzD,SAAS,MAAM,OAAO,QAAQ,OAAO;KACnC;KACA;KACA;KACA;KACA,QAAQ;KACR;KACA;KACA,UAAU;MACR,eAAe;MACf,YAAY;MACZ,aAAa;MACb,cAAc;MACd,cAAc;KAChB;IACF,CAAC;GACH;GACA,IAAI,WAAW,KAAA,GAAW,MAAM,IAAI,MAAM,QAAQ,OAAO,wBAAwB;GACjF,IAAI,iBAAiB;GAErB,IAAI,YAAY,UAAU,WACxB,MAAM,QAAQ,gBAAgB;IAC5B;IACA,UAAU,eAAe;IACzB;IACA;GACF,CAAC;GAGH,IAAI,OAAa;GACjB,IAAI,KAAK,UAAU,WACjB,OAAO,MAAM,OAAO,MAAM,WAAW,QAAQ,aAAa;IACxD,OAAO,EAAE,UAAU,eAAe,GAAG;IACrC,QAAQ;GACV,CAAC;GAEH,IAAI,iBAAiB,YAAY,OAAO;IAAE,QAAQ;IAAgB;GAAK;GAEvE,IAAI,eAAe,UAAU,aAC3B,iBAAiB,MAAM,OAAO,QAAQ,WAAW,eAAe,IAAI,SAAS,EAC3E,QAAQ,6CACV,CAAC;GAEH,IAAI,KAAK,UAAU,aACjB,OAAO,MAAM,OAAO,MAAM,WAAW,QAAQ,aAAa;IACxD,QAAQ;IACR,QAAQ;KACN,UAAU,eAAe;KACzB,OAAO,eAAe;KACtB;KACA;IACF;GACF,CAAC;GAEH,OAAO;IAAE,QAAQ;IAAgB;GAAK;EACxC;CACF,CAAC;AACH"}
+{"version":3,"file":"eve-record-change.mjs","names":[],"sources":["../../src/changes/eve-record-change.ts"],"sourcesContent":["import { defineTool, type ToolContext, type ToolDefinition } from \"eve/tools\";\nimport { z } from \"zod\";\nimport type { ChangePresenter } from \"./presentation\";\nimport { changeLevelSchema, type Change } from \"../schema/change\";\nimport { repositoryIdSchema, taskIdSchema } from \"../schema/id\";\nimport type { Task } from \"../schema/task\";\nimport type { PullRequestPublicationGateResult } from \"../pull-requests/contracts\";\nimport type { FactoryStores } from \"../store/engine\";\nimport { requireTaskExecution, requireTaskExecutionIdentity } from \"../eve/task-execution\";\n\n/** Change and Task capabilities required by the record-change tool. */\nexport type RecordChangeToolStores = Pick<FactoryStores, \"changes\" | \"tasks\">;\n\nconst recordChangeInputSchema = z.object({\n  taskId: taskIdSchema,\n  repositoryId: repositoryIdSchema,\n  prNumber: z.number().int().min(1),\n  prUrl: z.url(),\n  risk: changeLevelSchema.describe(\"Blast radius of the change if it is wrong.\"),\n  confidence: changeLevelSchema.describe(\"How certain you are the change is correct.\"),\n  summary: z.string().min(1).describe(\"One-sentence description of the change.\"),\n});\n\n/** Validated input accepted by the tool that links a pull request to its producing Task. */\nexport type RecordChangeInput = z.infer<typeof recordChangeInputSchema>;\n\n/** Configures policy gates and durable presentation for the software record-change tool. */\nexport interface RecordChangeToolOptions {\n  /**\n   * PR association gate, run as an Eve approval policy and again after\n   * authentication before recording. Refusals include the gate's reason.\n   * Gates must fail closed: when they cannot verify, they refuse.\n   */\n  recordChangeGate?: (input: RecordChangeInput) => Promise<PullRequestPublicationGateResult>;\n  /** Whether recorded code changes wait for an independent verification task. Default: required. */\n  verification?: \"required\" | \"disabled\";\n  /** Present the pull request after record_change persists its durable state. */\n  presentChange?: ChangePresenter;\n}\n\n/** Change and producing Task returned after a pull request is recorded. */\nexport interface RecordChangeResult {\n  readonly change: Change;\n  readonly task: Task;\n}\n\n/** Eve outcome tool that links a pull request to its producing Task. */\nexport interface RecordChangeTool extends ToolDefinition<RecordChangeInput, RecordChangeResult> {\n  execute(input: RecordChangeInput, ctx: ToolContext): Promise<RecordChangeResult>;\n}\n\n/** Create the supplied software workflow's pull-request outcome tool. */\nexport function createRecordChangeTool(\n  stores: RecordChangeToolStores,\n  options: RecordChangeToolOptions = {},\n): RecordChangeTool {\n  const recordChangeGate = options.recordChangeGate;\n  const verification = options.verification ?? \"required\";\n  return defineTool({\n    description:\n      verification === \"required\"\n        ? \"Record the pull request produced for a code_change task. Creates the change, links it to the task, and moves the task to verifying.\"\n        : \"Record the pull request produced for a code_change task. Creates the change and marks it ready for human review without independent verification.\",\n    inputSchema: recordChangeInputSchema,\n    ...(recordChangeGate === undefined\n      ? {}\n      : {\n          approval: async ({ toolInput }: { toolInput?: unknown }) => {\n            const parsed = recordChangeInputSchema.safeParse(toolInput);\n            if (!parsed.success) {\n              return {\n                type: \"denied\" as const,\n                reason: \"record_change input is malformed; fix the arguments and retry\",\n              };\n            }\n            const verdict = await recordChangeGate(parsed.data);\n            return verdict.ok\n              ? (\"not-applicable\" as const)\n              : { type: \"denied\" as const, reason: verdict.reason };\n          },\n        }),\n    async execute(\n      { taskId, repositoryId, prNumber, prUrl, risk, confidence, summary },\n      ctx,\n    ): Promise<RecordChangeResult> {\n      const currentTask = await requireTaskExecutionIdentity(stores, ctx, taskId);\n      if (\n        currentTask.state !== \"running\" &&\n        currentTask.state !== \"verifying\" &&\n        currentTask.state !== \"succeeded\"\n      ) {\n        throw new Error(`task ${taskId} is ${currentTask.state}, not running`);\n      }\n      if (currentTask.repositoryIds.length !== 1 || currentTask.repositoryIds[0] !== repositoryId) {\n        throw new Error(\"Repository does not match the authenticated Task\");\n      }\n      if (currentTask.state !== \"running\" && currentTask.changeId === undefined) {\n        throw new Error(`task ${taskId} has no recorded change`);\n      }\n      const linkedChange =\n        currentTask.changeId === undefined\n          ? undefined\n          : await stores.changes.get(currentTask.changeId);\n      if (currentTask.changeId !== undefined && linkedChange === null) {\n        throw new Error(`change ${currentTask.changeId} does not exist`);\n      }\n      let change =\n        linkedChange ??\n        (await stores.changes.list()).find((candidate) => candidate.taskId === taskId);\n\n      if (\n        change !== undefined &&\n        (change.repositoryId !== repositoryId ||\n          change.prNumber !== prNumber ||\n          change.prUrl !== prUrl)\n      ) {\n        throw new Error(\"Pull request does not match the Task's recorded Change\");\n      }\n      if (currentTask.state === \"running\") {\n        await requireTaskExecution(stores, ctx, taskId);\n        if (recordChangeGate !== undefined) {\n          const verdict = await recordChangeGate({\n            taskId,\n            repositoryId,\n            prNumber,\n            prUrl,\n            risk,\n            confidence,\n            summary,\n          });\n          if (!verdict.ok) throw new Error(verdict.reason);\n        }\n        await requireTaskExecution(stores, ctx, taskId);\n      }\n\n      if (change === undefined) {\n        if (currentTask.state !== \"running\") {\n          throw new Error(`task ${taskId} has no recorded change`);\n        }\n        change = await stores.changes.create({\n          repositoryId,\n          taskId,\n          prNumber,\n          prUrl,\n          author: \"factory\",\n          risk,\n          confidence,\n          evidence: {\n            reproVerified: false,\n            testsAdded: 0,\n            checksGreen: false,\n            attackPassed: false,\n            scopeMatches: false,\n          },\n        });\n      }\n      if (change === undefined) throw new Error(`task ${taskId} has no recorded change`);\n      let recordedChange = change;\n\n      if (currentTask.state === \"succeeded\") return { change: recordedChange, task: currentTask };\n\n      if (currentTask.state === \"running\") {\n        await requireTaskExecution(stores, ctx, taskId);\n        await options.presentChange?.({\n          taskId,\n          changeId: recordedChange.id,\n          verification,\n          summary,\n        });\n      }\n\n      let task: Task = currentTask;\n      if (task.state === \"running\") {\n        task = await stores.tasks.transition(taskId, \"verifying\", {\n          expectFrom: \"running\",\n          expectAttempt: currentTask.attempt,\n          expectExecution: currentTask.execution,\n          patch: { changeId: recordedChange.id },\n          reason: summary,\n        });\n      }\n      if (verification === \"required\") return { change: recordedChange, task };\n\n      const completion = await requireTaskExecutionIdentity(stores, ctx, taskId);\n      if (completion.state !== \"verifying\" || completion.changeId !== recordedChange.id) {\n        throw new Error(\"Task is no longer awaiting this Change's completion\");\n      }\n      if (recordedChange.state === \"verifying\") {\n        recordedChange = await stores.changes.transition(recordedChange.id, \"ready\", {\n          reason: \"independent verification is not configured\",\n        });\n      }\n      if (task.state === \"verifying\") {\n        task = await stores.tasks.transition(taskId, \"succeeded\", {\n          expectFrom: \"verifying\",\n          expectAttempt: currentTask.attempt,\n          expectExecution: currentTask.execution,\n          reason: \"change recorded for human review without independent verification\",\n          output: {\n            changeId: recordedChange.id,\n            prUrl: recordedChange.prUrl,\n            summary,\n            verification,\n          },\n        });\n      }\n      return { change: recordedChange, task };\n    },\n  });\n}\n"],"mappings":";;;;;;AAaA,MAAM,0BAA0B,EAAE,OAAO;CACvC,QAAQ;CACR,cAAc;CACd,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;CAChC,OAAO,EAAE,IAAI;CACb,MAAM,kBAAkB,SAAS,4CAA4C;CAC7E,YAAY,kBAAkB,SAAS,4CAA4C;CACnF,SAAS,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,yCAAyC;AAC/E,CAAC;;AA+BD,SAAgB,uBACd,QACA,UAAmC,CAAC,GAClB;CAClB,MAAM,mBAAmB,QAAQ;CACjC,MAAM,eAAe,QAAQ,gBAAgB;CAC7C,OAAO,WAAW;EAChB,aACE,iBAAiB,aACb,wIACA;EACN,aAAa;EACb,GAAI,qBAAqB,KAAA,IACrB,CAAC,IACD,EACE,UAAU,OAAO,EAAE,gBAAyC;GAC1D,MAAM,SAAS,wBAAwB,UAAU,SAAS;GAC1D,IAAI,CAAC,OAAO,SACV,OAAO;IACL,MAAM;IACN,QAAQ;GACV;GAEF,MAAM,UAAU,MAAM,iBAAiB,OAAO,IAAI;GAClD,OAAO,QAAQ,KACV,mBACD;IAAE,MAAM;IAAmB,QAAQ,QAAQ;GAAO;EACxD,EACF;EACJ,MAAM,QACJ,EAAE,QAAQ,cAAc,UAAU,OAAO,MAAM,YAAY,WAC3D,KAC6B;GAC7B,MAAM,cAAc,MAAM,6BAA6B,QAAQ,KAAK,MAAM;GAC1E,IACE,YAAY,UAAU,aACtB,YAAY,UAAU,eACtB,YAAY,UAAU,aAEtB,MAAM,IAAI,MAAM,QAAQ,OAAO,MAAM,YAAY,MAAM,cAAc;GAEvE,IAAI,YAAY,cAAc,WAAW,KAAK,YAAY,cAAc,OAAO,cAC7E,MAAM,IAAI,MAAM,kDAAkD;GAEpE,IAAI,YAAY,UAAU,aAAa,YAAY,aAAa,KAAA,GAC9D,MAAM,IAAI,MAAM,QAAQ,OAAO,wBAAwB;GAEzD,MAAM,eACJ,YAAY,aAAa,KAAA,IACrB,KAAA,IACA,MAAM,OAAO,QAAQ,IAAI,YAAY,QAAQ;GACnD,IAAI,YAAY,aAAa,KAAA,KAAa,iBAAiB,MACzD,MAAM,IAAI,MAAM,UAAU,YAAY,SAAS,gBAAgB;GAEjE,IAAI,SACF,iBACC,MAAM,OAAO,QAAQ,KAAK,EAAA,CAAG,MAAM,cAAc,UAAU,WAAW,MAAM;GAE/E,IACE,WAAW,KAAA,MACV,OAAO,iBAAiB,gBACvB,OAAO,aAAa,YACpB,OAAO,UAAU,QAEnB,MAAM,IAAI,MAAM,wDAAwD;GAE1E,IAAI,YAAY,UAAU,WAAW;IACnC,MAAM,qBAAqB,QAAQ,KAAK,MAAM;IAC9C,IAAI,qBAAqB,KAAA,GAAW;KAClC,MAAM,UAAU,MAAM,iBAAiB;MACrC;MACA;MACA;MACA;MACA;MACA;MACA;KACF,CAAC;KACD,IAAI,CAAC,QAAQ,IAAI,MAAM,IAAI,MAAM,QAAQ,MAAM;IACjD;IACA,MAAM,qBAAqB,QAAQ,KAAK,MAAM;GAChD;GAEA,IAAI,WAAW,KAAA,GAAW;IACxB,IAAI,YAAY,UAAU,WACxB,MAAM,IAAI,MAAM,QAAQ,OAAO,wBAAwB;IAEzD,SAAS,MAAM,OAAO,QAAQ,OAAO;KACnC;KACA;KACA;KACA;KACA,QAAQ;KACR;KACA;KACA,UAAU;MACR,eAAe;MACf,YAAY;MACZ,aAAa;MACb,cAAc;MACd,cAAc;KAChB;IACF,CAAC;GACH;GACA,IAAI,WAAW,KAAA,GAAW,MAAM,IAAI,MAAM,QAAQ,OAAO,wBAAwB;GACjF,IAAI,iBAAiB;GAErB,IAAI,YAAY,UAAU,aAAa,OAAO;IAAE,QAAQ;IAAgB,MAAM;GAAY;GAE1F,IAAI,YAAY,UAAU,WAAW;IACnC,MAAM,qBAAqB,QAAQ,KAAK,MAAM;IAC9C,MAAM,QAAQ,gBAAgB;KAC5B;KACA,UAAU,eAAe;KACzB;KACA;IACF,CAAC;GACH;GAEA,IAAI,OAAa;GACjB,IAAI,KAAK,UAAU,WACjB,OAAO,MAAM,OAAO,MAAM,WAAW,QAAQ,aAAa;IACxD,YAAY;IACZ,eAAe,YAAY;IAC3B,iBAAiB,YAAY;IAC7B,OAAO,EAAE,UAAU,eAAe,GAAG;IACrC,QAAQ;GACV,CAAC;GAEH,IAAI,iBAAiB,YAAY,OAAO;IAAE,QAAQ;IAAgB;GAAK;GAEvE,MAAM,aAAa,MAAM,6BAA6B,QAAQ,KAAK,MAAM;GACzE,IAAI,WAAW,UAAU,eAAe,WAAW,aAAa,eAAe,IAC7E,MAAM,IAAI,MAAM,qDAAqD;GAEvE,IAAI,eAAe,UAAU,aAC3B,iBAAiB,MAAM,OAAO,QAAQ,WAAW,eAAe,IAAI,SAAS,EAC3E,QAAQ,6CACV,CAAC;GAEH,IAAI,KAAK,UAAU,aACjB,OAAO,MAAM,OAAO,MAAM,WAAW,QAAQ,aAAa;IACxD,YAAY;IACZ,eAAe,YAAY;IAC3B,iBAAiB,YAAY;IAC7B,QAAQ;IACR,QAAQ;KACN,UAAU,eAAe;KACzB,OAAO,eAAe;KACtB;KACA;IACF;GACF,CAAC;GAEH,OAAO;IAAE,QAAQ;IAAgB;GAAK;EACxC;CACF,CAAC;AACH"}

package/dist/changes.d.mts

@@ -1,12 +1,13 @@
+/// <reference types="node" />
 import { ChangeId, RepositoryId, changeIdSchema } from "./schema/id.mjs";
 import { Change, ChangeEvidence, ChangeInState, ChangeLevel, ChangeState, changeEvidenceSchema, changeLevelSchema, changeSchema, changeStateSchema } from "./schema/change.mjs";
-import { ChangeAssociationError, ChangePatch, ChangeTransitionArguments, ChangeTransitionOptions, CreateChangeInput, FactoryStores } from "./store/engine.mjs";
+import { ChangeAssociationError, ChangePatch, ChangeTransitionArguments, ChangeTransitionOptions, CreateChangeInput, FactoryStores, UpdateChangeEvidenceInput } from "./store/engine.mjs";
 import { changeInitialState, changeTransitions } from "./schema/transitions.mjs";
 import { ChangePresenter, PresentChangeInput } from "./changes/presentation.mjs";
 import { RecordChangeInput, RecordChangeResult, RecordChangeTool, RecordChangeToolOptions, RecordChangeToolStores, createRecordChangeTool } from "./changes/eve-record-change.mjs";
 import { formatChangeVerificationBrief } from "./change-verification/brief.mjs";
-import { ChangeVerificationStores, EnsureChangeVerificationTasksOptions, EnsureChangeVerificationTasksResult, ensureChangeVerificationTasks } from "./change-verification/dispatch.mjs";
 import { PresentVerificationResultInput, RecordVerificationInput, RecordVerificationRefusal, RecordVerificationResult, RecordVerificationSuccess, RecordVerificationTool, RecordVerificationToolOptions, RecordVerificationToolStores, createRecordVerificationTool } from "./change-verification/eve-tool.mjs";
+import { ChangeVerificationStores, EnsureChangeVerificationTasksOptions, EnsureChangeVerificationTasksResult, RecoverChangeVerificationResultOptions, ensureChangeVerificationTasks, recoverChangeVerificationResult } from "./change-verification/dispatch.mjs";
 import { CreateMultiRepositoryChangeTasksInput, CreateMultiRepositoryChangeTasksStores, MultiRepositoryChangePlan, ReconcileMultiRepositoryChangeTasksResult, ReconcileMultiRepositoryChangeTasksStores, createMultiRepositoryChangeTasks, reconcileMultiRepositoryChangeTasks } from "./multi-repository-changes/coordination.mjs";
 //#region src/changes.d.ts
 /** Provider identity and author required to represent an existing pull request as a Change. */
@@ -19,5 +20,5 @@ interface AdoptPullRequestInput {
 /** Create a conservative, unverified Change for a pull request not authored by Factory. */
 declare function adoptPullRequest(stores: Pick<FactoryStores, "changes">, input: AdoptPullRequestInput): Promise<Change>;
 //#endregion
-export { AdoptPullRequestInput, type Change, ChangeAssociationError, type ChangeEvidence, type ChangeId, type ChangeInState, type ChangeLevel, type ChangePatch, type ChangePresenter, type ChangeState, type ChangeTransitionArguments, type ChangeTransitionOptions, type ChangeVerificationStores, type CreateChangeInput, type CreateMultiRepositoryChangeTasksInput, type CreateMultiRepositoryChangeTasksStores, type EnsureChangeVerificationTasksOptions, type EnsureChangeVerificationTasksResult, type MultiRepositoryChangePlan, type PresentChangeInput, type PresentVerificationResultInput, type ReconcileMultiRepositoryChangeTasksResult, type ReconcileMultiRepositoryChangeTasksStores, type RecordChangeInput, type RecordChangeResult, type RecordChangeTool, type RecordChangeToolOptions, type RecordChangeToolStores, type RecordVerificationInput, type RecordVerificationRefusal, type RecordVerificationResult, type RecordVerificationSuccess, type RecordVerificationTool, type RecordVerificationToolOptions, type RecordVerificationToolStores, adoptPullRequest, changeEvidenceSchema, changeIdSchema, changeInitialState, changeLevelSchema, changeSchema, changeStateSchema, changeTransitions, createMultiRepositoryChangeTasks, createRecordChangeTool, createRecordVerificationTool, ensureChangeVerificationTasks, formatChangeVerificationBrief, reconcileMultiRepositoryChangeTasks };
+export { AdoptPullRequestInput, type Change, ChangeAssociationError, type ChangeEvidence, type ChangeId, type ChangeInState, type ChangeLevel, type ChangePatch, type ChangePresenter, type ChangeState, type ChangeTransitionArguments, type ChangeTransitionOptions, type ChangeVerificationStores, type CreateChangeInput, type CreateMultiRepositoryChangeTasksInput, type CreateMultiRepositoryChangeTasksStores, type EnsureChangeVerificationTasksOptions, type EnsureChangeVerificationTasksResult, type MultiRepositoryChangePlan, type PresentChangeInput, type PresentVerificationResultInput, type ReconcileMultiRepositoryChangeTasksResult, type ReconcileMultiRepositoryChangeTasksStores, type RecordChangeInput, type RecordChangeResult, type RecordChangeTool, type RecordChangeToolOptions, type RecordChangeToolStores, type RecordVerificationInput, type RecordVerificationRefusal, type RecordVerificationResult, type RecordVerificationSuccess, type RecordVerificationTool, type RecordVerificationToolOptions, type RecordVerificationToolStores, type RecoverChangeVerificationResultOptions, type UpdateChangeEvidenceInput, adoptPullRequest, changeEvidenceSchema, changeIdSchema, changeInitialState, changeLevelSchema, changeSchema, changeStateSchema, changeTransitions, createMultiRepositoryChangeTasks, createRecordChangeTool, createRecordVerificationTool, ensureChangeVerificationTasks, formatChangeVerificationBrief, reconcileMultiRepositoryChangeTasks, recoverChangeVerificationResult };
 //# sourceMappingURL=changes.d.mts.map

package/dist/changes.mjs

@@ -4,7 +4,7 @@ import { changeEvidenceSchema, changeLevelSchema, changeSchema, changeStateSchem
 import { ChangeAssociationError } from "./store/engine.mjs";
 import { createRecordChangeTool } from "./changes/eve-record-change.mjs";
 import { formatChangeVerificationBrief } from "./change-verification/brief.mjs";
-import { ensureChangeVerificationTasks } from "./change-verification/dispatch.mjs";
+import { ensureChangeVerificationTasks, recoverChangeVerificationResult } from "./change-verification/dispatch.mjs";
 import { createRecordVerificationTool } from "./change-verification/eve-tool.mjs";
 import { createMultiRepositoryChangeTasks, reconcileMultiRepositoryChangeTasks } from "./multi-repository-changes/coordination.mjs";
 //#region src/changes.ts
@@ -24,6 +24,6 @@ async function adoptPullRequest(stores, input) {
 	});
 }
 //#endregion
-export { ChangeAssociationError, adoptPullRequest, changeEvidenceSchema, changeIdSchema, changeInitialState, changeLevelSchema, changeSchema, changeStateSchema, changeTransitions, createMultiRepositoryChangeTasks, createRecordChangeTool, createRecordVerificationTool, ensureChangeVerificationTasks, formatChangeVerificationBrief, reconcileMultiRepositoryChangeTasks };
+export { ChangeAssociationError, adoptPullRequest, changeEvidenceSchema, changeIdSchema, changeInitialState, changeLevelSchema, changeSchema, changeStateSchema, changeTransitions, createMultiRepositoryChangeTasks, createRecordChangeTool, createRecordVerificationTool, ensureChangeVerificationTasks, formatChangeVerificationBrief, reconcileMultiRepositoryChangeTasks, recoverChangeVerificationResult };
 
 //# sourceMappingURL=changes.mjs.map

package/dist/changes.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"changes.mjs","names":[],"sources":["../src/changes.ts"],"sourcesContent":["import type { Change } from \"./schema/change\";\nimport type { RepositoryId } from \"./schema/id\";\nimport type { FactoryStores } from \"./store/engine\";\n\nexport { type ChangePresenter, type PresentChangeInput } from \"./changes/presentation\";\nexport {\n  createRecordChangeTool,\n  type RecordChangeInput,\n  type RecordChangeResult,\n  type RecordChangeTool,\n  type RecordChangeToolStores,\n  type RecordChangeToolOptions,\n} from \"./changes/eve-record-change\";\nexport { formatChangeVerificationBrief } from \"./change-verification/brief\";\nexport {\n  ensureChangeVerificationTasks,\n  type ChangeVerificationStores,\n  type EnsureChangeVerificationTasksOptions,\n  type EnsureChangeVerificationTasksResult,\n} from \"./change-verification/dispatch\";\nexport {\n  createRecordVerificationTool,\n  type PresentVerificationResultInput,\n  type RecordVerificationInput,\n  type RecordVerificationRefusal,\n  type RecordVerificationResult,\n  type RecordVerificationSuccess,\n  type RecordVerificationTool,\n  type RecordVerificationToolStores,\n  type RecordVerificationToolOptions,\n} from \"./change-verification/eve-tool\";\nexport {\n  createMultiRepositoryChangeTasks,\n  reconcileMultiRepositoryChangeTasks,\n  type CreateMultiRepositoryChangeTasksInput,\n  type CreateMultiRepositoryChangeTasksStores,\n  type MultiRepositoryChangePlan,\n  type ReconcileMultiRepositoryChangeTasksResult,\n  type ReconcileMultiRepositoryChangeTasksStores,\n} from \"./multi-repository-changes/coordination\";\n\n/** Provider identity and author required to represent an existing pull request as a Change. */\nexport interface AdoptPullRequestInput {\n  repositoryId: RepositoryId;\n  prNumber: number;\n  prUrl: string;\n  author: string;\n}\n\n/** Create a conservative, unverified Change for a pull request not authored by Factory. */\nexport async function adoptPullRequest(\n  stores: Pick<FactoryStores, \"changes\">,\n  input: AdoptPullRequestInput,\n): Promise<Change> {\n  return stores.changes.create({\n    ...input,\n    risk: \"low\",\n    confidence: \"low\",\n    evidence: {\n      reproVerified: false,\n      testsAdded: 0,\n      checksGreen: false,\n      attackPassed: false,\n      scopeMatches: false,\n    },\n  });\n}\n\nexport {\n  changeEvidenceSchema,\n  changeSchema,\n  changeStateSchema,\n  changeLevelSchema,\n  type Change,\n  type ChangeEvidence,\n  type ChangeInState,\n  type ChangeState,\n  type ChangeLevel,\n} from \"./schema/change\";\nexport { changeIdSchema, type ChangeId } from \"./schema/id\";\nexport { changeInitialState, changeTransitions } from \"./schema/transitions\";\nexport {\n  ChangeAssociationError,\n  type ChangePatch,\n  type ChangeTransitionOptions,\n  type ChangeTransitionArguments,\n  type CreateChangeInput,\n} from \"./store/engine\";\n"],"mappings":";;;;;;;;;;;AAkDA,eAAsB,iBACpB,QACA,OACiB;CACjB,OAAO,OAAO,QAAQ,OAAO;EAC3B,GAAG;EACH,MAAM;EACN,YAAY;EACZ,UAAU;GACR,eAAe;GACf,YAAY;GACZ,aAAa;GACb,cAAc;GACd,cAAc;EAChB;CACF,CAAC;AACH"}
+{"version":3,"file":"changes.mjs","names":[],"sources":["../src/changes.ts"],"sourcesContent":["import type { Change } from \"./schema/change\";\nimport type { RepositoryId } from \"./schema/id\";\nimport type { FactoryStores } from \"./store/engine\";\n\nexport { type ChangePresenter, type PresentChangeInput } from \"./changes/presentation\";\nexport {\n  createRecordChangeTool,\n  type RecordChangeInput,\n  type RecordChangeResult,\n  type RecordChangeTool,\n  type RecordChangeToolStores,\n  type RecordChangeToolOptions,\n} from \"./changes/eve-record-change\";\nexport { formatChangeVerificationBrief } from \"./change-verification/brief\";\nexport {\n  ensureChangeVerificationTasks,\n  recoverChangeVerificationResult,\n  type ChangeVerificationStores,\n  type EnsureChangeVerificationTasksOptions,\n  type EnsureChangeVerificationTasksResult,\n  type RecoverChangeVerificationResultOptions,\n} from \"./change-verification/dispatch\";\nexport {\n  createRecordVerificationTool,\n  type PresentVerificationResultInput,\n  type RecordVerificationInput,\n  type RecordVerificationRefusal,\n  type RecordVerificationResult,\n  type RecordVerificationSuccess,\n  type RecordVerificationTool,\n  type RecordVerificationToolStores,\n  type RecordVerificationToolOptions,\n} from \"./change-verification/eve-tool\";\nexport {\n  createMultiRepositoryChangeTasks,\n  reconcileMultiRepositoryChangeTasks,\n  type CreateMultiRepositoryChangeTasksInput,\n  type CreateMultiRepositoryChangeTasksStores,\n  type MultiRepositoryChangePlan,\n  type ReconcileMultiRepositoryChangeTasksResult,\n  type ReconcileMultiRepositoryChangeTasksStores,\n} from \"./multi-repository-changes/coordination\";\n\n/** Provider identity and author required to represent an existing pull request as a Change. */\nexport interface AdoptPullRequestInput {\n  repositoryId: RepositoryId;\n  prNumber: number;\n  prUrl: string;\n  author: string;\n}\n\n/** Create a conservative, unverified Change for a pull request not authored by Factory. */\nexport async function adoptPullRequest(\n  stores: Pick<FactoryStores, \"changes\">,\n  input: AdoptPullRequestInput,\n): Promise<Change> {\n  return stores.changes.create({\n    ...input,\n    risk: \"low\",\n    confidence: \"low\",\n    evidence: {\n      reproVerified: false,\n      testsAdded: 0,\n      checksGreen: false,\n      attackPassed: false,\n      scopeMatches: false,\n    },\n  });\n}\n\nexport {\n  changeEvidenceSchema,\n  changeSchema,\n  changeStateSchema,\n  changeLevelSchema,\n  type Change,\n  type ChangeEvidence,\n  type ChangeInState,\n  type ChangeState,\n  type ChangeLevel,\n} from \"./schema/change\";\nexport { changeIdSchema, type ChangeId } from \"./schema/id\";\nexport { changeInitialState, changeTransitions } from \"./schema/transitions\";\nexport {\n  ChangeAssociationError,\n  type ChangePatch,\n  type ChangeTransitionOptions,\n  type ChangeTransitionArguments,\n  type CreateChangeInput,\n  type UpdateChangeEvidenceInput,\n} from \"./store/engine\";\n"],"mappings":";;;;;;;;;;;AAoDA,eAAsB,iBACpB,QACA,OACiB;CACjB,OAAO,OAAO,QAAQ,OAAO;EAC3B,GAAG;EACH,MAAM;EACN,YAAY;EACZ,UAAU;GACR,eAAe;GACf,YAAY;GACZ,aAAa;GACb,cAAc;GACd,cAAc;EAChB;CACF,CAAC;AACH"}

package/dist/client-events.d.mts

@@ -1,14 +1,21 @@
 import { z } from "zod";
 //#region src/client-events.d.ts
-/** Validates one newline-delimited event from a Factory execution stream. */
-declare const streamEventSchema: z.ZodObject<{
+/** Validates an execution stream event, normalizing payloadless completion events. */
+declare const streamEventSchema: z.ZodUnion<[z.ZodObject<{
   type: z.ZodString;
   data: z.ZodRecord<z.ZodString, z.ZodUnknown>;
   meta: z.ZodOptional<z.ZodObject<{
     id: z.ZodOptional<z.ZodString>;
     at: z.ZodOptional<z.ZodString>;
   }, z.core.$strip>>;
-}, z.core.$strip>;
+}, z.core.$strip>, z.ZodObject<{
+  meta: z.ZodOptional<z.ZodObject<{
+    id: z.ZodOptional<z.ZodString>;
+    at: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>>;
+  type: z.ZodLiteral<"session.completed">;
+  data: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>]>;
 /** One validated event received from a Factory execution stream. */
 type StreamEvent = z.infer<typeof streamEventSchema>;
 /** Parses validated newline-delimited events from a response body. */

package/dist/client-events.mjs

@@ -1,7 +1,6 @@
 import { z } from "zod";
 //#region src/client-events.ts
-/** Validates one newline-delimited event from a Factory execution stream. */
-const streamEventSchema = z.object({
+const eventWithDataSchema = z.object({
 	type: z.string(),
 	data: z.record(z.string(), z.unknown()),
 	meta: z.object({
@@ -9,6 +8,11 @@ const streamEventSchema = z.object({
 		at: z.string().optional()
 	}).optional()
 });
+/** Validates an execution stream event, normalizing payloadless completion events. */
+const streamEventSchema = eventWithDataSchema.or(eventWithDataSchema.extend({
+	type: z.literal("session.completed"),
+	data: z.record(z.string(), z.unknown()).default({})
+}));
 /** Parses validated newline-delimited events from a response body. */
 async function* readEvents(body) {
 	const reader = body.getReader();

package/dist/client-events.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"client-events.mjs","names":[],"sources":["../src/client-events.ts"],"sourcesContent":["import { z } from \"zod\";\n\n/** Validates one newline-delimited event from a Factory execution stream. */\nexport const streamEventSchema = z.object({\n  type: z.string(),\n  data: z.record(z.string(), z.unknown()),\n  meta: z.object({ id: z.string().optional(), at: z.string().optional() }).optional(),\n});\n/** One validated event received from a Factory execution stream. */\nexport type StreamEvent = z.infer<typeof streamEventSchema>;\n\n/** Parses validated newline-delimited events from a response body. */\nexport async function* readEvents(body: ReadableStream<Uint8Array>): AsyncGenerator<StreamEvent> {\n  const reader = body.getReader();\n  const decoder = new TextDecoder();\n  let pending = \"\";\n  try {\n    for (;;) {\n      const { done, value } = await reader.read();\n      pending += done ? decoder.decode() : decoder.decode(value, { stream: true });\n      let newline: number;\n      while ((newline = pending.indexOf(\"\\n\")) >= 0) {\n        const line = pending.slice(0, newline).trim();\n        pending = pending.slice(newline + 1);\n        if (line) yield streamEventSchema.parse(JSON.parse(line));\n      }\n      if (pending.length > 2_000_000) throw new Error(\"Stream event exceeds the 2 MB limit\");\n      if (done) {\n        if (pending.trim()) yield streamEventSchema.parse(JSON.parse(pending));\n        return;\n      }\n    }\n  } finally {\n    await reader.cancel().catch(() => {});\n    reader.releaseLock();\n  }\n}\n"],"mappings":";;;AAGA,MAAa,oBAAoB,EAAE,OAAO;CACxC,MAAM,EAAE,OAAO;CACf,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;CACtC,MAAM,EAAE,OAAO;EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,SAAS;EAAG,IAAI,EAAE,OAAO,CAAC,CAAC,SAAS;CAAE,CAAC,CAAC,CAAC,SAAS;AACpF,CAAC;;AAKD,gBAAuB,WAAW,MAA+D;CAC/F,MAAM,SAAS,KAAK,UAAU;CAC9B,MAAM,UAAU,IAAI,YAAY;CAChC,IAAI,UAAU;CACd,IAAI;EACF,SAAS;GACP,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;GAC1C,WAAW,OAAO,QAAQ,OAAO,IAAI,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;GAC3E,IAAI;GACJ,QAAQ,UAAU,QAAQ,QAAQ,IAAI,MAAM,GAAG;IAC7C,MAAM,OAAO,QAAQ,MAAM,GAAG,OAAO,CAAC,CAAC,KAAK;IAC5C,UAAU,QAAQ,MAAM,UAAU,CAAC;IACnC,IAAI,MAAM,MAAM,kBAAkB,MAAM,KAAK,MAAM,IAAI,CAAC;GAC1D;GACA,IAAI,QAAQ,SAAS,KAAW,MAAM,IAAI,MAAM,qCAAqC;GACrF,IAAI,MAAM;IACR,IAAI,QAAQ,KAAK,GAAG,MAAM,kBAAkB,MAAM,KAAK,MAAM,OAAO,CAAC;IACrE;GACF;EACF;CACF,UAAU;EACR,MAAM,OAAO,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC;EACpC,OAAO,YAAY;CACrB;AACF"}
+{"version":3,"file":"client-events.mjs","names":[],"sources":["../src/client-events.ts"],"sourcesContent":["import { z } from \"zod\";\n\nconst eventWithDataSchema = z.object({\n  type: z.string(),\n  data: z.record(z.string(), z.unknown()),\n  meta: z.object({ id: z.string().optional(), at: z.string().optional() }).optional(),\n});\n/** Validates an execution stream event, normalizing payloadless completion events. */\nexport const streamEventSchema = eventWithDataSchema.or(\n  eventWithDataSchema.extend({\n    type: z.literal(\"session.completed\"),\n    data: z.record(z.string(), z.unknown()).default({}),\n  }),\n);\n/** One validated event received from a Factory execution stream. */\nexport type StreamEvent = z.infer<typeof streamEventSchema>;\n\n/** Parses validated newline-delimited events from a response body. */\nexport async function* readEvents(body: ReadableStream<Uint8Array>): AsyncGenerator<StreamEvent> {\n  const reader = body.getReader();\n  const decoder = new TextDecoder();\n  let pending = \"\";\n  try {\n    for (;;) {\n      const { done, value } = await reader.read();\n      pending += done ? decoder.decode() : decoder.decode(value, { stream: true });\n      let newline: number;\n      while ((newline = pending.indexOf(\"\\n\")) >= 0) {\n        const line = pending.slice(0, newline).trim();\n        pending = pending.slice(newline + 1);\n        if (line) yield streamEventSchema.parse(JSON.parse(line));\n      }\n      if (pending.length > 2_000_000) throw new Error(\"Stream event exceeds the 2 MB limit\");\n      if (done) {\n        if (pending.trim()) yield streamEventSchema.parse(JSON.parse(pending));\n        return;\n      }\n    }\n  } finally {\n    await reader.cancel().catch(() => {});\n    reader.releaseLock();\n  }\n}\n"],"mappings":";;AAEA,MAAM,sBAAsB,EAAE,OAAO;CACnC,MAAM,EAAE,OAAO;CACf,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;CACtC,MAAM,EAAE,OAAO;EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,SAAS;EAAG,IAAI,EAAE,OAAO,CAAC,CAAC,SAAS;CAAE,CAAC,CAAC,CAAC,SAAS;AACpF,CAAC;;AAED,MAAa,oBAAoB,oBAAoB,GACnD,oBAAoB,OAAO;CACzB,MAAM,EAAE,QAAQ,mBAAmB;CACnC,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AACpD,CAAC,CACH;;AAKA,gBAAuB,WAAW,MAA+D;CAC/F,MAAM,SAAS,KAAK,UAAU;CAC9B,MAAM,UAAU,IAAI,YAAY;CAChC,IAAI,UAAU;CACd,IAAI;EACF,SAAS;GACP,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;GAC1C,WAAW,OAAO,QAAQ,OAAO,IAAI,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;GAC3E,IAAI;GACJ,QAAQ,UAAU,QAAQ,QAAQ,IAAI,MAAM,GAAG;IAC7C,MAAM,OAAO,QAAQ,MAAM,GAAG,OAAO,CAAC,CAAC,KAAK;IAC5C,UAAU,QAAQ,MAAM,UAAU,CAAC;IACnC,IAAI,MAAM,MAAM,kBAAkB,MAAM,KAAK,MAAM,IAAI,CAAC;GAC1D;GACA,IAAI,QAAQ,SAAS,KAAW,MAAM,IAAI,MAAM,qCAAqC;GACrF,IAAI,MAAM;IACR,IAAI,QAAQ,KAAK,GAAG,MAAM,kBAAkB,MAAM,KAAK,MAAM,OAAO,CAAC;IACrE;GACF;EACF;CACF,UAAU;EACR,MAAM,OAAO,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC;EACpC,OAAO,YAAY;CACrB;AACF"}

package/dist/client-stream.mjs

@@ -123,7 +123,7 @@ async function hydrateCurrent(client, options) {
 			401,
 			403
 		].includes(error.status)) return false;
-		if (error instanceof ApiError && options.taskId && error.status === 404) return false;
+		if (error instanceof ApiError && error.status === 404) return false;
 		if (error instanceof ApiError && error.status === 409) {
 			await options.onConflict();
 			return false;
@@ -189,7 +189,13 @@ async function followSessionStream(client, options) {
 				401,
 				403
 			].includes(error.status)) return;
-			if (error instanceof ApiError && options.taskId && error.status === 404) return;
+			if (error instanceof ApiError && error.status === 404) {
+				if (transcript.state === "running") {
+					transcript.state = "connecting";
+					options.onChange();
+				}
+				return;
+			}
 			if (error instanceof ApiError && error.status === 409) {
 				await options.onConflict();
 				return;