feat: Verification Protocol — auto quality gate via POST /v1/sessions/:id/verify (#740)

[OneStepAt4time]

Summary

Implement Verification Protocol (Issue #740) — automated quality gate execution after CC sessions.

What's included

New endpoint: POST /v1/sessions/:id/verify
Runs quality gate on the session's workDir:

1. npx tsc --noEmit (type check)
2. npm run build (build)
3. npm test (full test suite, unless criticalOnly: true)

SSE event: event: 'verification'
Emitted when verification completes, with full result:

{
  "event": "verification",
  "data": {
    "ok": true,
    "steps": [{ "name": "tsc", "ok": true, "durationMs": 2340 }, ...],
    "totalDurationMs": 45230,
    "summary": "Verification passed: tsc ✅, build ✅, test ✅ (45230ms)"
  }
}

Config: verificationProtocol

{
  "verificationProtocol": {
    "autoVerifyOnStop": false,
    "criticalOnly": false
  }
}

Usage

# After a session ends, trigger verification:
curl -X POST http://localhost:9100/v1/sessions/{id}/verify
# → SSE event emitted, HTTP 200 if passed, 422 if failed

Quality Gate

• tsc --noEmit: PASS
• npm run build: PASS
• 2174 tests: PASS

Developed with: v2.9.3
Tested with: v2.9.3

[aegis-gh-agent]

Verification Protocol implementation is clean. SSE event pattern, config options, and exec approach are correct. Approved.

[aegis-gh-agent]

Self-rebase failed — conflicts with merged PRs across config.ts, events.ts, server.ts. Please rebase onto current main and push. Approved — will merge immediately on green CI.