@cleocode/core 2026.9.20 → 2026.9.21

package/dist/tasks/done-record.d.ts

@@ -0,0 +1,127 @@
+/**
+ * `cleo done` / `cleo verify --auto` — record every required gate in one write.
+ *
+ * {@link recordTaskDone} turns the read-only plan from
+ * {@link deriveTaskEvidence} into recorded gates, in a fixed order that keeps
+ * every slow step OUTSIDE the task write transaction:
+ *
+ *  1. plan — change set, gate evidence, AC links, blockers (git and gh only);
+ *  2. tools — `lint` and `typecheck` in parallel, then `test`, each through the
+ *     ADR-061 resolver and cache (`runToolCached`, under its global semaphore
+ *     and memory caps); a cached result is reused, a failure stops here;
+ *  3. typed gates — executed once by `previewTaskGates`, which caches each pass
+ *     (T12621); a failure stops here;
+ *  4. write — ONE `validateGateVerify` call with per-gate evidence
+ *     (`gateEvidence`), which parses and validates every atom through the
+ *     existing `parseEvidence` → `validateAtom` → gate minimum →
+ *     `checkTaskEvidenceContext` path, serves the typed gates from the cache
+ *     (`noRun`), and persists all gates in a single transaction.
+ *
+ * Tool atoms re-enter `validateAtom` at step 4, where they hit the cache entry
+ * step 2 wrote — the same key, because the tools ran in the same execution
+ * root the validator resolves. That is why a plan whose change set lives in the
+ * task's worktree refuses to run from the main checkout: the validator would
+ * measure the wrong tree.
+ *
+ * There is no override: `CLEO_OWNER_OVERRIDE` is refused by the multi-gate
+ * write and stays a single-gate `cleo verify` path. Completion is the caller's
+ * next step (`cleo done` dispatches `tasks.complete`, unchanged).
+ *
+ * Spec: `verify-streamlined-design` §3.2 steps 3-7 and §4.
+ *
+ * @task T12625
+ */
+import type { DoneRecordResult, VerificationGate } from '@cleocode/contracts';
+import { type EngineResult } from '../engine-result.js';
+import { type DeriveTaskEvidenceOptions } from './done-plan.js';
+/** A tool run as `recordTaskDone` needs it; injectable for tests. */
+export type DoneToolRunner = (tool: string, storeRoot: string, executionRoot: string) => Promise<{
+    exitCode: number | null;
+    cacheHit: boolean;
+    durationMs: number;
+    timedOut: boolean;
+    tail: string;
+}>;
+/** Typed-gate execution before the write; injectable for tests. */
+export type DoneTypedGateRunner = (storeRoot: string, taskId: string) => Promise<{
+    gateCount: number;
+    passed: boolean;
+    failing: string[];
+}>;
+/** The single multi-gate write; injectable for tests. */
+export type DoneGateWriter = (storeRoot: string, params: {
+    taskId: string;
+    gateEvidence: Partial<Record<VerificationGate, string | readonly string[]>>;
+    noRun: boolean;
+    sessionId?: string;
+    agent?: string;
+}) => Promise<EngineResult<{
+    passed: boolean;
+}>>;
+/** Options for {@link recordTaskDone}. */
+export interface RecordTaskDoneOptions extends DeriveTaskEvidenceOptions {
+    /** Agent recorded as the gate author. */
+    agent?: string;
+    /** Session for the audit trail; defaults to the caller's bound session. */
+    sessionId?: string;
+    /** Injectable slow steps (tests assert their order). */
+    steps?: {
+        runTool?: DoneToolRunner;
+        runTypedGates?: DoneTypedGateRunner;
+        write?: DoneGateWriter;
+    };
+}
+/**
+ * Record every required gate a task lacks, in one write, from derived
+ * evidence. Does not complete the task.
+ *
+ * @param taskId - Task to record.
+ * @param opts - Planner options (`satisfies`, `prNumber`, roots) plus author,
+ *   session and injectable steps.
+ * @returns The recorded gates, or `E_DONE_BLOCKED` with one next step and
+ *   the original cause in `details.cause`.
+ * @example
+ * ```ts
+ * const r = await recordTaskDone('T123', { satisfies: 'all' });
+ * if (!r.success) console.error(r.error.fix);
+ * ```
+ * @task T12625
+ */
+export declare function recordTaskDone(taskId: string, opts?: RecordTaskDoneOptions): Promise<EngineResult<DoneRecordResult>>;
+/**
+ * A tool runner shared by a batch: each (tool, execution root) pair runs once
+ * and every later caller gets the same outcome. Keyed on the root as well as
+ * the tool — two tasks whose work lives in different trees must each be
+ * measured in their own tree.
+ *
+ * @param base - The runner that actually executes.
+ * @returns A memoising runner.
+ * @task T12628
+ */
+export declare function sharedToolRunner(base: DoneToolRunner): DoneToolRunner;
+/** One task's outcome in a batch close. */
+export interface BatchDoneEntry {
+    /** Task the entry is for. */
+    taskId: string;
+    /** Its record result, or its `E_DONE_BLOCKED`. */
+    result: EngineResult<DoneRecordResult>;
+}
+/**
+ * Close several tasks shipped by one PR (T12628): each task is planned and
+ * recorded on its own, and one task's blocker never stops the others. The
+ * tools run once per execution root for the whole batch — every task shares
+ * one memoised runner — and each task still gets its own validated write.
+ * Shared evidence is NOT pre-acknowledged: the ADR-059 warning fires as for
+ * any other reuse.
+ *
+ * @param taskIds - Tasks to record, in order.
+ * @param opts - Shared options (`prNumber`, `satisfies`, roots, author, steps).
+ * @returns One entry per task, in the given order.
+ * @example
+ * ```ts
+ * const entries = await recordTasksDone(['T1', 'T2', 'T3'], { prNumber: 42 });
+ * ```
+ * @task T12628
+ */
+export declare function recordTasksDone(taskIds: readonly string[], opts?: RecordTaskDoneOptions): Promise<BatchDoneEntry[]>;
+//# sourceMappingURL=done-record.d.ts.map

package/dist/tasks/done-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"done-record.d.ts","sourceRoot":"","sources":["../../src/tasks/done-record.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAGH,OAAO,KAAK,EAIV,gBAAgB,EAEhB,gBAAgB,EACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,KAAK,YAAY,EAA8B,MAAM,qBAAqB,CAAC;AAGpF,OAAO,EAAE,KAAK,yBAAyB,EAAkC,MAAM,gBAAgB,CAAC;AAGhG,qEAAqE;AACrE,MAAM,MAAM,cAAc,GAAG,CAC3B,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,KAClB,OAAO,CAAC;IACX,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC,CAAC;AAEH,mEAAmE;AACnE,MAAM,MAAM,mBAAmB,GAAG,CAChC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,KACX,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAAC;AAExE,yDAAyD;AACzD,MAAM,MAAM,cAAc,GAAG,CAC3B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE;IACN,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5E,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,KACE,OAAO,CAAC,YAAY,CAAC;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC,CAAC;AAEhD,0CAA0C;AAC1C,MAAM,WAAW,qBAAsB,SAAQ,yBAAyB;IACtE,yCAAyC;IACzC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wDAAwD;IACxD,KAAK,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,cAAc,CAAC;QAAC,aAAa,CAAC,EAAE,mBAAmB,CAAC;QAAC,KAAK,CAAC,EAAE,cAAc,CAAA;KAAE,CAAC;CACnG;AAoMD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,qBAA0B,GAC/B,OAAO,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,CA6FzC;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,cAAc,GAAG,cAAc,CAWrE;AAED,2CAA2C;AAC3C,MAAM,WAAW,cAAc;IAC7B,6BAA6B;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,MAAM,EAAE,YAAY,CAAC,gBAAgB,CAAC,CAAC;CACxC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,IAAI,GAAE,qBAA0B,GAC/B,OAAO,CAAC,cAAc,EAAE,CAAC,CAU3B"}

package/dist/tasks/done-record.js

@@ -0,0 +1,373 @@
+/**
+ * `cleo done` / `cleo verify --auto` — record every required gate in one write.
+ *
+ * {@link recordTaskDone} turns the read-only plan from
+ * {@link deriveTaskEvidence} into recorded gates, in a fixed order that keeps
+ * every slow step OUTSIDE the task write transaction:
+ *
+ *  1. plan — change set, gate evidence, AC links, blockers (git and gh only);
+ *  2. tools — `lint` and `typecheck` in parallel, then `test`, each through the
+ *     ADR-061 resolver and cache (`runToolCached`, under its global semaphore
+ *     and memory caps); a cached result is reused, a failure stops here;
+ *  3. typed gates — executed once by `previewTaskGates`, which caches each pass
+ *     (T12621); a failure stops here;
+ *  4. write — ONE `validateGateVerify` call with per-gate evidence
+ *     (`gateEvidence`), which parses and validates every atom through the
+ *     existing `parseEvidence` → `validateAtom` → gate minimum →
+ *     `checkTaskEvidenceContext` path, serves the typed gates from the cache
+ *     (`noRun`), and persists all gates in a single transaction.
+ *
+ * Tool atoms re-enter `validateAtom` at step 4, where they hit the cache entry
+ * step 2 wrote — the same key, because the tools ran in the same execution
+ * root the validator resolves. That is why a plan whose change set lives in the
+ * task's worktree refuses to run from the main checkout: the validator would
+ * measure the wrong tree.
+ *
+ * There is no override: `CLEO_OWNER_OVERRIDE` is refused by the multi-gate
+ * write and stays a single-gate `cleo verify` path. Completion is the caller's
+ * next step (`cleo done` dispatches `tasks.complete`, unchanged).
+ *
+ * Spec: `verify-streamlined-design` §3.2 steps 3-7 and §4.
+ *
+ * @task T12625
+ */
+import { execFileSync } from 'node:child_process';
+import { engineError, engineSuccess } from '../engine-result.js';
+import { cleoErrorToEngineResult } from '../errors-to-engine.js';
+import { getProjectRoot } from '../paths.js';
+import { deriveTaskEvidence, shellQuote } from './done-plan.js';
+import { resolveToolCommand } from './tool-resolver.js';
+/** Default tool runner: resolve through ADR-061 and run through its cache. */
+const defaultRunTool = async (tool, storeRoot, executionRoot) => {
+    if (tool === 'test-affected') {
+        const { planAffectedTestRun } = await import('./affected-packages.js');
+        const affected = await planAffectedTestRun(storeRoot, executionRoot);
+        if (!affected.ok) {
+            return {
+                exitCode: null,
+                cacheHit: false,
+                durationMs: 0,
+                timedOut: false,
+                tail: affected.reason,
+            };
+        }
+        const { runToolCached } = await import('./tool-cache.js');
+        const r = await runToolCached(affected.command, storeRoot, { executionRoot });
+        return {
+            exitCode: r.exitCode,
+            cacheHit: r.cacheHit,
+            durationMs: r.cacheHit ? 0 : r.durationMs,
+            timedOut: r.timedOut,
+            tail: (r.stderrTail || r.stdoutTail).trim().slice(-400),
+        };
+    }
+    const resolved = resolveToolCommand(tool, storeRoot);
+    if (!resolved.ok) {
+        return {
+            exitCode: null,
+            cacheHit: false,
+            durationMs: 0,
+            timedOut: false,
+            tail: resolved.reason,
+        };
+    }
+    const { runToolCached } = await import('./tool-cache.js');
+    const r = await runToolCached(resolved.command, storeRoot, { executionRoot });
+    return {
+        exitCode: r.exitCode,
+        cacheHit: r.cacheHit,
+        durationMs: r.cacheHit ? 0 : r.durationMs,
+        timedOut: r.timedOut,
+        tail: (r.stderrTail || r.stdoutTail).trim().slice(-400),
+    };
+};
+/** Default typed-gate runner: `previewTaskGates`, which caches each pass (T12621). */
+const defaultRunTypedGates = async (storeRoot, taskId) => {
+    const { previewTaskGates } = await import('./gate-preview.js');
+    const preview = await previewTaskGates(storeRoot, { taskId });
+    return {
+        gateCount: preview.gateCount,
+        passed: preview.passed,
+        failing: preview.results
+            .filter((r) => r.result === 'fail' || r.result === 'error')
+            .map((r) => `${r.req ?? `#${r.index}`} (${r.kind}): ${r.errorMessage ?? r.result}`),
+    };
+};
+/** Default writer: the existing gate write, with per-gate evidence. */
+const defaultWrite = async (storeRoot, params) => {
+    const { validateGateVerify } = await import('../validation/engine-ops.js');
+    const result = await validateGateVerify(storeRoot, params);
+    return result.success ? engineSuccess({ passed: result.data.passed }) : result;
+};
+function blocked(plan, blocker, recordedGates = []) {
+    const details = {
+        blocker: blocker.code,
+        ...(blocker.cause ? { cause: blocker.cause } : {}),
+        next: blocker.next,
+        recordedGates,
+        plan,
+    };
+    return engineError('E_DONE_BLOCKED', blocker.message, { details, fix: blocker.next.command });
+}
+/** `git` read in `cwd`, trimmed; `null` on failure (a non-zero exit included). */
+function gitRead(cwd, args) {
+    try {
+        return execFileSync('git', args, {
+            cwd,
+            encoding: 'utf-8',
+            stdio: ['ignore', 'pipe', 'ignore'],
+        }).trim();
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The tools and typed gates run on whatever `executionRoot` has checked out.
+ * `implemented` cites the change set's commit; unless that tree CONTAINS the
+ * change, `testsPassed`/`qaPassed` would attest a different tree — the T12625
+ * review reproduced a failing test recording testsPassed from the main
+ * checkout while `implemented` cited the unchecked-out task branch.
+ *
+ * - branch: the change-set commit must be the checked-out HEAD (a dirty tree
+ *   is already a plan blocker);
+ * - pr: the merge commit must be an ancestor of the checked-out HEAD.
+ */
+function checkoutBlocker(plan) {
+    const cs = plan.changeSet;
+    const root = cs.executionRoot;
+    const head = gitRead(root, ['rev-parse', 'HEAD']);
+    const short = (sha) => (sha ?? 'nothing').slice(0, 12);
+    if (cs.source === 'branch') {
+        if (cs.headRef === 'HEAD' && head !== null && head === cs.commitSha)
+            return null;
+        const branch = cs.headRef && cs.headRef !== 'HEAD' ? cs.headRef : `task/${plan.taskId}`;
+        return {
+            code: 'checkout-required',
+            message: `${plan.taskId}'s change is ${short(cs.commitSha)} on ${branch}, but ${root} has ${short(head)} checked out; the tools would measure a different tree than implemented cites.`,
+            next: {
+                command: `git -C ${shellQuote(root)} switch ${branch} && cleo done ${plan.taskId}`,
+                why: 'Tests, lint, typecheck and typed gates must run on the commit implemented records.',
+            },
+        };
+    }
+    if (cs.source === 'pr' && cs.mergeCommitSha) {
+        // D11151: every PR the task shipped in must be in the tested tree.
+        const merges = [
+            ...(cs.additionalPrs ?? []).flatMap((p) => p.mergeCommitSha ? [{ pr: p.prNumber, sha: p.mergeCommitSha }] : []),
+            { pr: cs.prNumber, sha: cs.mergeCommitSha },
+        ];
+        const missing = merges.find((m) => head === null || gitRead(root, ['merge-base', '--is-ancestor', m.sha, 'HEAD']) === null);
+        if (!missing)
+            return null;
+        return {
+            code: 'checkout-required',
+            message: `${root} has ${short(head)} checked out, which does not contain PR #${missing.pr}'s merge commit ${short(missing.sha)}.`,
+            next: {
+                command: `git -C ${shellQuote(root)} switch --detach ${cs.mergeCommitSha} && cleo done ${plan.taskId}`,
+                why: 'Tests, lint, typecheck and typed gates must run on a tree containing the merged change.',
+            },
+        };
+    }
+    return null;
+}
+/** Step 2: lint + typecheck in parallel, then test; stop at the first failure. */
+async function runPlannedTools(plan, storeRoot, runTool) {
+    const root = plan.changeSet.executionRoot;
+    const runnable = plan.toolRuns.filter((r) => r.cache !== 'not-applicable');
+    const results = [];
+    const waves = [
+        runnable.filter((r) => r.tool !== 'test'),
+        runnable.filter((r) => r.tool === 'test'),
+    ];
+    for (const wave of waves) {
+        const outcomes = await Promise.all(wave.map(async (r) => ({ run: r, out: await runTool(r.tool, storeRoot, root) })));
+        for (const { run, out } of outcomes) {
+            results.push({
+                tool: run.tool,
+                gate: run.gate,
+                exitCode: out.exitCode,
+                cacheHit: out.cacheHit,
+                durationMs: out.durationMs,
+            });
+        }
+        const failed = outcomes.find(({ out }) => out.exitCode !== 0);
+        if (failed) {
+            const { run, out } = failed;
+            return {
+                results,
+                blocker: {
+                    code: 'tool-failed',
+                    message: out.timedOut
+                        ? `tool:${run.tool} exceeded its deadline in ${root}.`
+                        : `tool:${run.tool} failed (exit ${out.exitCode}) in ${root}: ${out.tail}`,
+                    next: {
+                        command: `cd ${shellQuote(root)} && ${run.command ?? `cleo done ${plan.taskId}`}`,
+                        why: `${run.gate} needs a passing ${run.tool} run on the recorded tree.`,
+                    },
+                    cause: out.timedOut ? 'E_EVIDENCE_TOOL_TIMEOUT' : 'E_EVIDENCE_TOOL_FAILED',
+                },
+            };
+        }
+    }
+    return { results };
+}
+/**
+ * Record every required gate a task lacks, in one write, from derived
+ * evidence. Does not complete the task.
+ *
+ * @param taskId - Task to record.
+ * @param opts - Planner options (`satisfies`, `prNumber`, roots) plus author,
+ *   session and injectable steps.
+ * @returns The recorded gates, or `E_DONE_BLOCKED` with one next step and
+ *   the original cause in `details.cause`.
+ * @example
+ * ```ts
+ * const r = await recordTaskDone('T123', { satisfies: 'all' });
+ * if (!r.success) console.error(r.error.fix);
+ * ```
+ * @task T12625
+ */
+export async function recordTaskDone(taskId, opts = {}) {
+    const storeRoot = opts.projectRoot ?? getProjectRoot();
+    let plan;
+    try {
+        plan = await deriveTaskEvidence(taskId, { ...opts, projectRoot: storeRoot });
+    }
+    catch (err) {
+        return cleoErrorToEngineResult(err, 'E_DONE_FAILED', 'cleo done failed');
+    }
+    if (plan.changeSet.rootSource === 'task-worktree') {
+        return blocked(plan, {
+            code: 'run-from-worktree',
+            message: `${taskId}'s work is in its worktree ${plan.runFrom}; tools must run in that tree.`,
+            next: {
+                command: `cd ${shellQuote(plan.runFrom)} && cleo done ${taskId}`,
+                why: 'Evidence tools measure the invocation tree; run cleo done from the task worktree.',
+            },
+        });
+    }
+    const first = plan.blockers[0];
+    if (first)
+        return blocked(plan, first);
+    if (plan.toolRuns.length > 0 || plan.typedGates.length > 0) {
+        const checkout = checkoutBlocker(plan);
+        if (checkout)
+            return blocked(plan, checkout);
+    }
+    const steps = opts.steps ?? {};
+    const tools = await runPlannedTools(plan, storeRoot, steps.runTool ?? defaultRunTool);
+    if (tools.blocker)
+        return blocked(plan, tools.blocker);
+    const typed = plan.typedGates.length
+        ? await (steps.runTypedGates ?? defaultRunTypedGates)(storeRoot, taskId)
+        : { gateCount: 0, passed: true, failing: [] };
+    if (!typed.passed) {
+        return blocked(plan, {
+            code: 'typed-gate-failed',
+            message: `Typed gate(s) failed: ${typed.failing.join('; ')}`,
+            next: {
+                command: `cleo verify ${taskId} --run`,
+                why: 'Fix the failing typed gate and re-run.',
+            },
+        });
+    }
+    const pending = plan.gates.filter((g) => !g.passed && g.evidence !== null);
+    const gateEvidence = Object.fromEntries(pending.map((g) => [g.gate, g.evidence]));
+    let verificationPassed = plan.gates.every((g) => g.passed);
+    if (pending.length > 0) {
+        let sessionId = opts.sessionId;
+        if (sessionId === undefined) {
+            const { resolveBoundSessionId } = await import('../store/session-store.js');
+            sessionId = (await resolveBoundSessionId(storeRoot).catch(() => null)) ?? undefined;
+        }
+        const { readAllowCachedGates } = await import('./gate-result-cache.js');
+        // D11151: every earlier own-branch PR is an ordered implemented attempt in
+        // the SAME write as the primary, so all are recorded or none (review HIGH).
+        if (plan.additionalImplemented?.length && gateEvidence.implemented) {
+            gateEvidence.implemented = [
+                ...plan.additionalImplemented,
+                gateEvidence.implemented,
+            ];
+        }
+        const written = await (steps.write ?? defaultWrite)(storeRoot, {
+            taskId,
+            gateEvidence,
+            noRun: typed.gateCount > 0 && readAllowCachedGates(storeRoot),
+            ...(sessionId ? { sessionId } : {}),
+            ...(opts.agent ? { agent: opts.agent } : {}),
+        });
+        if (!written.success) {
+            return blocked(plan, {
+                code: 'evidence-refused',
+                message: written.error.message,
+                next: {
+                    command: `cleo done ${taskId} --plan`,
+                    why: 'The validators refused the derived evidence; the plan shows what changed.',
+                },
+                cause: written.error.code,
+            });
+        }
+        verificationPassed = written.data.passed;
+    }
+    return engineSuccess({
+        taskId,
+        recordedGates: pending.map((g) => g.gate),
+        alreadyPassed: plan.gates.filter((g) => g.passed).map((g) => g.gate),
+        toolResults: tools.results,
+        typedGateCount: typed.gateCount,
+        verificationPassed,
+        plan,
+    });
+}
+/**
+ * A tool runner shared by a batch: each (tool, execution root) pair runs once
+ * and every later caller gets the same outcome. Keyed on the root as well as
+ * the tool — two tasks whose work lives in different trees must each be
+ * measured in their own tree.
+ *
+ * @param base - The runner that actually executes.
+ * @returns A memoising runner.
+ * @task T12628
+ */
+export function sharedToolRunner(base) {
+    const runs = new Map();
+    return (tool, storeRoot, executionRoot) => {
+        const key = `${tool}\u0000${executionRoot}`;
+        let run = runs.get(key);
+        if (!run) {
+            run = base(tool, storeRoot, executionRoot);
+            runs.set(key, run);
+        }
+        return run;
+    };
+}
+/**
+ * Close several tasks shipped by one PR (T12628): each task is planned and
+ * recorded on its own, and one task's blocker never stops the others. The
+ * tools run once per execution root for the whole batch — every task shares
+ * one memoised runner — and each task still gets its own validated write.
+ * Shared evidence is NOT pre-acknowledged: the ADR-059 warning fires as for
+ * any other reuse.
+ *
+ * @param taskIds - Tasks to record, in order.
+ * @param opts - Shared options (`prNumber`, `satisfies`, roots, author, steps).
+ * @returns One entry per task, in the given order.
+ * @example
+ * ```ts
+ * const entries = await recordTasksDone(['T1', 'T2', 'T3'], { prNumber: 42 });
+ * ```
+ * @task T12628
+ */
+export async function recordTasksDone(taskIds, opts = {}) {
+    const runTool = sharedToolRunner(opts.steps?.runTool ?? defaultRunTool);
+    const entries = [];
+    for (const taskId of taskIds) {
+        entries.push({
+            taskId,
+            result: await recordTaskDone(taskId, { ...opts, steps: { ...opts.steps, runTool } }),
+        });
+    }
+    return entries;
+}
+//# sourceMappingURL=done-record.js.map

package/dist/tasks/done-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"done-record.js","sourceRoot":"","sources":["../../src/tasks/done-record.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AASlD,OAAO,EAAqB,WAAW,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAkC,kBAAkB,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAChG,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AA2CxD,8EAA8E;AAC9E,MAAM,cAAc,GAAmB,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE;IAC9E,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QAC7B,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QACvE,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACrE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,KAAK;gBACf,UAAU,EAAE,CAAC;gBACb,QAAQ,EAAE,KAAK;gBACf,IAAI,EAAE,QAAQ,CAAC,MAAM;aACtB,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC1D,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;QAC9E,OAAO;YACL,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU;YACzC,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC;SACxD,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,KAAK;YACf,UAAU,EAAE,CAAC;YACb,QAAQ,EAAE,KAAK;YACf,IAAI,EAAE,QAAQ,CAAC,MAAM;SACtB,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC1D,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC;IAC9E,OAAO;QACL,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU;QACzC,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC;KACxD,CAAC;AACJ,CAAC,CAAC;AAEF,sFAAsF;AACtF,MAAM,oBAAoB,GAAwB,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE;IAC5E,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9D,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,OAAO,CAAC,OAAO;aACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC;aAC1D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;KACtF,CAAC;AACJ,CAAC,CAAC;AAEF,uEAAuE;AACvE,MAAM,YAAY,GAAmB,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE;IAC/D,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AACjF,CAAC,CAAC;AAEF,SAAS,OAAO,CACd,IAAc,EACd,OAAwB,EACxB,gBAAoC,EAAE;IAEtC,MAAM,OAAO,GAAuB;QAClC,OAAO,EAAE,OAAO,CAAC,IAAI;QACrB,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,aAAa;QACb,IAAI;KACL,CAAC;IACF,OAAO,WAAW,CAAC,gBAAgB,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;AAChG,CAAC;AAED,kFAAkF;AAClF,SAAS,OAAO,CAAC,GAAW,EAAE,IAAuB;IACnD,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE;YAC/B,GAAG;YACH,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,eAAe,CAAC,IAAc;IACrC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;IAC1B,MAAM,IAAI,GAAG,EAAE,CAAC,aAAa,CAAC;IAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,CAAC,GAA8B,EAAU,EAAE,CAAC,CAAC,GAAG,IAAI,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1F,IAAI,EAAE,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC3B,IAAI,EAAE,CAAC,OAAO,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QACjF,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QACxF,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,gBAAgB,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,OAAO,MAAM,SAAS,IAAI,QAAQ,KAAK,CAAC,IAAI,CAAC,gFAAgF;YACvL,IAAI,EAAE;gBACJ,OAAO,EAAE,UAAU,UAAU,CAAC,IAAI,CAAC,WAAW,MAAM,iBAAiB,IAAI,CAAC,MAAM,EAAE;gBAClF,GAAG,EAAE,oFAAoF;aAC1F;SACF,CAAC;IACJ,CAAC;IACD,IAAI,EAAE,CAAC,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC,cAAc,EAAE,CAAC;QAC5C,mEAAmE;QACnE,MAAM,MAAM,GAAG;YACb,GAAG,CAAC,EAAE,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACxC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CACpE;YACD,EAAE,EAAE,EAAE,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,EAAE;SAC5C,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CACzB,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,YAAY,EAAE,eAAe,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,KAAK,IAAI,CAC1F,CAAC;QACF,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,GAAG,IAAI,QAAQ,KAAK,CAAC,IAAI,CAAC,4CAA4C,OAAO,CAAC,EAAE,mBAAmB,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG;YACjI,IAAI,EAAE;gBACJ,OAAO,EAAE,UAAU,UAAU,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,cAAc,iBAAiB,IAAI,CAAC,MAAM,EAAE;gBACtG,GAAG,EAAE,yFAAyF;aAC/F;SACF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kFAAkF;AAClF,KAAK,UAAU,eAAe,CAC5B,IAAc,EACd,SAAiB,EACjB,OAAuB;IAEvB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,gBAAgB,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG;QACZ,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;QACzC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;KAC1C,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CACjF,CAAC;QACF,KAAK,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,UAAU,EAAE,GAAG,CAAC,UAAU;aAC3B,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC;QAC9D,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;YAC5B,OAAO;gBACL,OAAO;gBACP,OAAO,EAAE;oBACP,IAAI,EAAE,aAAa;oBACnB,OAAO,EAAE,GAAG,CAAC,QAAQ;wBACnB,CAAC,CAAC,QAAQ,GAAG,CAAC,IAAI,6BAA6B,IAAI,GAAG;wBACtD,CAAC,CAAC,QAAQ,GAAG,CAAC,IAAI,iBAAiB,GAAG,CAAC,QAAQ,QAAQ,IAAI,KAAK,GAAG,CAAC,IAAI,EAAE;oBAC5E,IAAI,EAAE;wBACJ,OAAO,EAAE,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,OAAO,IAAI,aAAa,IAAI,CAAC,MAAM,EAAE,EAAE;wBACjF,GAAG,EAAE,GAAG,GAAG,CAAC,IAAI,oBAAoB,GAAG,CAAC,IAAI,4BAA4B;qBACzE;oBACD,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,wBAAwB;iBAC3E;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,OAA8B,EAAE;IAEhC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,IAAI,cAAc,EAAE,CAAC;IACvD,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,uBAAuB,CAAmB,GAAG,EAAE,eAAe,EAAE,kBAAkB,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,KAAK,eAAe,EAAE,CAAC;QAClD,OAAO,OAAO,CAAC,IAAI,EAAE;YACnB,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,GAAG,MAAM,8BAA8B,IAAI,CAAC,OAAO,gCAAgC;YAC5F,IAAI,EAAE;gBACJ,OAAO,EAAE,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,MAAM,EAAE;gBAChE,GAAG,EAAE,mFAAmF;aACzF;SACF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,KAAK;QAAE,OAAO,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3D,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,QAAQ;YAAE,OAAO,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO,IAAI,cAAc,CAAC,CAAC;IACtF,IAAI,KAAK,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAEvD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM;QAClC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,IAAI,oBAAoB,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC;QACxE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC,IAAI,EAAE;YACnB,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,yBAAyB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC5D,IAAI,EAAE;gBACJ,OAAO,EAAE,eAAe,MAAM,QAAQ;gBACtC,GAAG,EAAE,wCAAwC;aAC9C;SACF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAyD,MAAM,CAAC,WAAW,CAC3F,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAkB,CAAC,CAAC,CACnD,CAAC;IACF,IAAI,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,IAAI,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;YAC5E,SAAS,GAAG,CAAC,MAAM,qBAAqB,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,SAAS,CAAC;QACtF,CAAC;QACD,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QACxE,2EAA2E;QAC3E,4EAA4E;QAC5E,IAAI,IAAI,CAAC,qBAAqB,EAAE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,CAAC;YACnE,YAAY,CAAC,WAAW,GAAG;gBACzB,GAAG,IAAI,CAAC,qBAAqB;gBAC7B,YAAY,CAAC,WAAqB;aACnC,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,YAAY,CAAC,CAAC,SAAS,EAAE;YAC7D,MAAM;YACN,YAAY;YACZ,KAAK,EAAE,KAAK,CAAC,SAAS,GAAG,CAAC,IAAI,oBAAoB,CAAC,SAAS,CAAC;YAC7D,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7C,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,OAAO,CAAC,IAAI,EAAE;gBACnB,IAAI,EAAE,kBAAkB;gBACxB,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;gBAC9B,IAAI,EAAE;oBACJ,OAAO,EAAE,aAAa,MAAM,SAAS;oBACrC,GAAG,EAAE,2EAA2E;iBACjF;gBACD,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI;aAC1B,CAAC,CAAC;QACL,CAAC;QACD,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;IAC3C,CAAC;IAED,OAAO,aAAa,CAAC;QACnB,MAAM;QACN,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACzC,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACpE,WAAW,EAAE,KAAK,CAAC,OAAO;QAC1B,cAAc,EAAE,KAAK,CAAC,SAAS;QAC/B,kBAAkB;QAClB,IAAI;KACL,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAoB;IACnD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAsC,CAAC;IAC3D,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE;QACxC,MAAM,GAAG,GAAG,GAAG,IAAI,SAAS,aAAa,EAAE,CAAC;QAC5C,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;YAC3C,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;AACJ,CAAC;AAUD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAA0B,EAC1B,OAA8B,EAAE;IAEhC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,cAAc,CAAC,CAAC;IACxE,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC;YACX,MAAM;YACN,MAAM,EAAE,MAAM,cAAc,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;SACrF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/tasks/duplicate-detector.d.ts

@@ -20,10 +20,20 @@
  *     score <  0.40 → insert
  *     score in [0.40, 0.85) → escalate to Tier 3 (LLM, paid)
  *
- *   Tier 3 — LLM reasoning (max 1 call per cleo add):
- *     are_duplicate=true  → reject
- *     are_duplicate=false → insert
- *     LLM error / timeout → fall back to Tier-1-only decision (never block on error)
+ *   Tier 3 — one batched System One decision (T12492), then the optional
+ *     generative LLM tier:
+ *     - System One: ONE `decide()` request carrying up to {@link MAX_CANDIDATES}
+ *       noul questions ("is the new task the same work as candidate cN?"),
+ *       bounded by {@link DUPLICATE_DECISION_BUDGET_MS} end to end. Mode comes
+ *       from `decide.sites.duplicateDetection` (`off | shadow | on`): `shadow`
+ *       (the default once a provider is configured) records the heuristic and
+ *       decision answers side by side in `.cleo/audit/decisions.jsonl` and acts
+ *       on the heuristic; `on` acts on the decision when one arrives. No
+ *       provider configured → `off`, and no network call is made at all.
+ *     - Generative LLM (T1681, max 1 call): OPT-IN via
+ *       `decide.generativeFallback.duplicateDetection: true`. Off by default,
+ *       so `cleo add` no longer pays its 15 s timeout.
+ *     Fallback on every failure: the Tier-1-only decision (never block on error).
  *
  * Thresholds (original T1633 behavior preserved for the Tier-1 clear-match path):
  *   Tier-1 score >= 0.85 → warning emitted to stderr (non-blocking)
@@ -35,6 +45,8 @@
  */
 import type { Task } from '@cleocode/contracts';
 import { z } from 'zod';
+import type { DecideOptions } from '../decide/client.js';
+import { type DecisionSiteMode } from '../decide/site.js';
 import type { DataAccessor } from '../store/data-accessor.js';
 /** Tier-1 score at which a non-blocking warning is emitted. (Name kept: exported API.) */
 export declare const DUPLICATE_WARN_THRESHOLD = 0.85;
@@ -42,6 +54,25 @@ export declare const DUPLICATE_WARN_THRESHOLD = 0.85;
 export declare const DUPLICATE_REJECT_THRESHOLD = 0.92;
 /** Maximum number of candidates to surface in the warning/rejection message. */
 export declare const MAX_CANDIDATES = 3;
+/**
+ * End-to-end budget for the System One duplicate decision, in milliseconds:
+ * module load, settings, redaction, the shared request budget and the HTTP
+ * round trip (connection setup included) all fit inside it.
+ *
+ * @task T12492
+ */
+export declare const DUPLICATE_DECISION_BUDGET_MS = 300;
+/**
+ * Minimum confidence EVERY decision answer needs before `on` mode acts on the
+ * decision. Below it the decision is audited but the heuristic acts.
+ */
+export declare const DUPLICATE_DECISION_MIN_CONFIDENCE = 0.6;
+/** Call-site id for the duplicate decision; keys the audit line. */
+export declare const DUPLICATE_DECISION_SITE = "tasks.duplicate-detection";
+/** Config key selecting the System One mode for duplicate detection. */
+export declare const DUPLICATE_DECISION_MODE_KEY = "decide.sites.duplicateDetection";
+/** Config key opting in to the generative LLM tier (T1681). Default `false`. */
+export declare const DUPLICATE_LLM_TIER_KEY = "decide.generativeFallback.duplicateDetection";
 /** A candidate active task that scored above the warning threshold. */
 export interface DuplicateCandidate {
     /** The matching active task ID. */
@@ -76,7 +107,24 @@ export interface DuplicateCheckResult {
      * not BM25 — see the module docblock. Reporting WHICH Tier-1 implementation
      * ran (lexical vs vector) is tracked separately.
      */
-    tier?: 'bm25' | 'jaccard' | 'llm';
+    tier?: 'bm25' | 'jaccard' | 'llm' | 'decision';
+}
+/**
+ * System One mode for duplicate detection (T12492).
+ *
+ * - `off`    — no decision request.
+ * - `shadow` — ask, audit both answers, act on the heuristic.
+ * - `on`     — ask, act on the decision; the heuristic acts on any fallback.
+ */
+export type DuplicateDecisionMode = DecisionSiteMode;
+/** Optional wiring for {@link checkDuplicates}. Every field defaults from config. */
+export interface DuplicateCheckOptions {
+    /** Force a mode instead of reading {@link DUPLICATE_DECISION_MODE_KEY}. Still `off` when unconfigured. */
+    mode?: DuplicateDecisionMode;
+    /** Force the generative LLM tier on/off instead of reading {@link DUPLICATE_LLM_TIER_KEY}. */
+    llmTier?: boolean;
+    /** Provider, connection, budget, cache and audit wiring forwarded to `decide()`. Tests inject a stub here. */
+    decide?: DecideOptions;
 }
 /**
  * Structured output schema for the LLM duplicate-reasoning call.
@@ -158,27 +206,32 @@ export declare function callLlmDuplicateReasoning(incomingTitle: string, incomin
  *   - score < JACCARD_ESCALATE_LOW (0.40): clear different → skip LLM.
  *   - score in [0.40, 0.85): ambiguous → escalate to LLM (cost cap: 1 call per invocation).
  *
- * Tier 3 — LLM reasoning (max 1 call per `cleo add`):
- *   Call the daemon provider with both task descriptions and the structured-output schema.
- *   On error/timeout: fall back to the Tier-1 decision for the candidate (never block).
+ * Tier 3 — System One, then the opt-in generative LLM (T12492):
+ *   One `decide()` request with up to 3 candidates as noul questions, bounded by
+ *   DUPLICATE_DECISION_BUDGET_MS. `shadow` audits it and acts on the heuristic; `on`
+ *   acts on it. Then, only when `decide.generativeFallback.duplicateDetection` is true,
+ *   the T1681 LLM call (max 1). On any failure: the Tier-1 decision (never block).
  *
  * @param title - Title of the task being added.
  * @param description - Description of the task being added (empty string if not provided).
  * @param accessor - DataAccessor instance to load active tasks from.
  * @param labels - Labels of the task being added (empty array if not provided).
  * @param cwd - Project root for LLM credential resolution (Tier 3).
+ * @param options - System One mode, generative-tier opt-in and `decide()` wiring (T12492).
  * @returns Duplicate check result with tier provenance.
  * @task T1633
  * @task T1681
+ * @task T12492
  */
-export declare function checkDuplicates(title: string, description: string, accessor: DataAccessor, labels?: string[], cwd?: string): Promise<DuplicateCheckResult>;
+export declare function checkDuplicates(title: string, description: string, accessor: DataAccessor, labels?: string[], cwd?: string, options?: DuplicateCheckOptions): Promise<DuplicateCheckResult>;
 /**
  * Format a human-readable candidate list for warning/rejection messages.
  *
  * @param candidates - Array of duplicate candidates.
+ * @param label - What `score` measures; defaults to the lexical `similarity`.
  * @returns Formatted multi-line string listing candidates.
  */
-export declare function formatCandidateList(candidates: DuplicateCandidate[]): string;
+export declare function formatCandidateList(candidates: DuplicateCandidate[], label?: string): string;
 /**
  * Build a warning message for candidates above the warn threshold.
  *
@@ -189,10 +242,14 @@ export declare function buildWarnMessage(candidates: DuplicateCandidate[]): stri
 /**
  * Build a rejection message for candidates above the reject threshold.
  *
+ * A System One rejection (`tier: 'decision'`) is worded as what it is — the
+ * model's duplicate probability — never as a lexical similarity score.
+ *
  * @param candidates - Candidates to include in the message.
+ * @param tier - The tier that decided (from {@link DuplicateCheckResult.tier}).
  * @returns Rejection string (no newline at end).
  */
-export declare function buildRejectMessage(candidates: DuplicateCandidate[]): string;
+export declare function buildRejectMessage(candidates: DuplicateCandidate[], tier?: DuplicateCheckResult['tier']): string;
 /**
  * Load active tasks from the data accessor, restricted to non-terminal statuses.
  * Exported for testing purposes.