[Feat] Add persisted environment verification state

.changeset/environment-verification-state.md

@@ -0,0 +1,5 @@
+---
+"@roomote/web": minor
+---
+
+Environments now track a persisted verification state that is separate from "a definition exists". A new environment is Configured until a follow-up verification task confirms it works, then it becomes Verified; runtime-affecting edits reset it to Configured while name/description-only edits keep it verified. Onboarding can finish while verification runs, the Environments settings page shows the verification status with a Retry verification action and a link to the related task, and agents record the outcome through the new `manage_environments` `record_verification` action.

apps/api/src/handlers/environments/createEnvironment.ts

@@ -172,6 +172,32 @@ export async function attachEnvironmentIdToTaskRun(
     .where(eq(taskRuns.id, taskRun.id));
 }
 
+/**
+ * Resolve the calling task run's Roomote task id, if the write is driven by a
+ * run-token task. Used to atomically register that task as the current
+ * verification attempt for the environment it just created or applied a
+ * runtime-affecting update to. The environment-setup skill runs verification
+ * from this same setup task and records the outcome through
+ * `record_verification`; registering the caller's taskId means that recording
+ * matches server-side without the agent having to hand-pass any task id.
+ */
+export async function resolveCallingVerificationTaskId(
+  auth: McpAuth,
+): Promise<string | undefined> {
+  const runId = extractRunId(auth);
+
+  if (!runId) {
+    return undefined;
+  }
+
+  const taskRun = await db.query.taskRuns.findFirst({
+    where: eq(taskRuns.id, runId),
+    columns: { taskId: true },
+  });
+
+  return taskRun?.taskId ?? undefined;
+}
+
 /**
  * POST /api/mcp/environments
  *
@@ -266,6 +292,8 @@ export async function createEnvironment(
       return c.json({ error: missingRepositoryError }, 400);
     }
 
+    const verificationTaskId = await resolveCallingVerificationTaskId(auth);
+
     const created = await db.transaction(async (tx) => {
       const inserted = await tx
         .insert(environments)
@@ -275,6 +303,13 @@ export async function createEnvironment(
           name: config.name,
           description: config.description,
           config,
+          // New environments start configured but not yet verified. A
+          // follow-up verification task confirms the runtime works. Registering
+          // the calling task here means its record_verification matches
+          // server-side without the agent hand-passing a task id.
+          isVerified: false,
+          verificationTaskId: verificationTaskId ?? null,
+          verificationError: null,
         })
         .returning({ id: environments.id });
 

apps/api/src/handlers/environments/index.ts

@@ -5,10 +5,12 @@ import { createEnvironment } from './createEnvironment';
 import { getEnvironment } from './getEnvironment';
 import { updateEnvironment } from './updateEnvironment';
 import { listEnvironments } from './listEnvironments';
+import { recordVerification } from './recordVerification';
 
 export const environmentsRouter = new Hono<{ Variables: Variables }>();
 
 environmentsRouter.post('/', createEnvironment);
 environmentsRouter.patch('/:id', updateEnvironment);
+environmentsRouter.post('/:id/verification', recordVerification);
 environmentsRouter.get('/:id', getEnvironment);
 environmentsRouter.get('/', listEnvironments);