@grimoire-rs/indexer 0.3.3 → 0.4.0

package/dist/ratings/provider_github.js

@@ -0,0 +1,134 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 The Grimoire Authors
+/**
+ * GitHub Discussions — GraphQL only, no REST equivalent.
+ *
+ * Upvotes are first-class here: `upvoteCount` is a scalar on the discussion, so
+ * the tally costs ~1 GraphQL point per page. Counting `reactionGroups` nodes
+ * instead would multiply nested-node cost for the same number.
+ */
+import { authorizeThread } from "./marker.js";
+import { ForgeError, PAGE_SIZE, at, graphql, nodes, threadBody, stringAt, } from "./provider.js";
+import { EXIT } from "../cli/exit.js";
+const CATEGORIES = `
+query($owner:String!,$name:String!){
+  repository(owner:$owner,name:$name){
+    id
+    discussionCategories(first:100){nodes{id name}}
+  }
+}`;
+// `databaseId` rather than the node `id`: R-1 clause 2 compares against
+// `index-policy.json`'s `trustedBots[].id`, which is the numeric account id the
+// validate gate already writes there — the opaque node id would never match.
+const DISCUSSIONS = `
+query($owner:String!,$name:String!,$categoryId:ID!,$cursor:String){
+  repository(owner:$owner,name:$name){
+    discussions(first:${PAGE_SIZE},after:$cursor,categoryId:$categoryId){
+      pageInfo{hasNextPage endCursor}
+      nodes{
+        id url upvoteCount body
+        category{id}
+        repository{id}
+        author{...on User{databaseId} ...on Bot{databaseId}}
+      }
+    }
+  }
+}`;
+const CREATE = `
+mutation($repositoryId:ID!,$categoryId:ID!,$title:String!,$body:String!){
+  createDiscussion(input:{repositoryId:$repositoryId,categoryId:$categoryId,title:$title,body:$body}){
+    discussion{id url upvoteCount}
+  }
+}`;
+const LOCK = `
+mutation($lockableId:ID!){
+  lockLockable(input:{lockableId:$lockableId}){clientMutationId}
+}`;
+export function githubProvider(config) {
+    const headers = { Authorization: `Bearer ${config.token}` };
+    const [owner = "", name = ""] = config.project.split("/", 2);
+    let resolved = null;
+    /** `container` is a name the operator typed; R-1 compares ids, so resolve it once. */
+    async function resolve() {
+        if (resolved)
+            return resolved;
+        const data = await graphql(config.api, headers, CATEGORIES, { owner, name });
+        const repositoryId = stringAt(data, "repository", "id");
+        if (repositoryId === "") {
+            throw new ForgeError(`${config.project}: no such repository, or it is not visible to this token`);
+        }
+        const wanted = config.container.trim().toLowerCase();
+        const categories = nodes(at(data, "repository", "discussionCategories"));
+        const match = categories.find((node) => stringAt(node, "name").trim().toLowerCase() === wanted);
+        if (!match) {
+            throw new ForgeError(`${config.project}: no discussion category named ${JSON.stringify(config.container)} ` +
+                `(found: ${categories.map((node) => stringAt(node, "name")).join(", ") || "none"})`, 
+            // The operator's `container` is wrong, not the forge — a data error, so
+            // a retry on the next schedule cannot fix it and should not pretend to.
+            EXIT.data);
+        }
+        resolved = { repositoryId, categoryId: stringAt(match, "id") };
+        return resolved;
+    }
+    return {
+        async listAuthored() {
+            const { repositoryId, categoryId } = await resolve();
+            const threads = [];
+            let cursor = null;
+            for (;;) {
+                const data = await graphql(config.api, headers, DISCUSSIONS, { owner, name, categoryId, cursor }, threads);
+                const page = at(data, "repository", "discussions");
+                for (const node of nodes(page)) {
+                    const author = at(node, "author");
+                    const databaseId = at(author, "databaseId");
+                    const observed = {
+                        target: stringAt(node, "id"),
+                        url: stringAt(node, "url"),
+                        up: typeof at(node, "upvoteCount") === "number" ? at(node, "upvoteCount") : 0,
+                        body: stringAt(node, "body"),
+                        authorId: typeof databaseId === "number" ? String(databaseId) : undefined,
+                        containerId: stringAt(node, "repository", "id"),
+                        categoryId: stringAt(node, "category", "id"),
+                    };
+                    const authorized = authorizeThread(observed, {
+                        trustedBots: config.trustedBots,
+                        containerId: repositoryId,
+                        categoryId,
+                    });
+                    if (authorized)
+                        threads.push(authorized);
+                }
+                if (at(page, "pageInfo", "hasNextPage") !== true)
+                    return threads;
+                cursor = stringAt(page, "pageInfo", "endCursor");
+            }
+        },
+        async create(ref) {
+            const { repositoryId, categoryId } = await resolve();
+            const data = await graphql(config.api, headers, CREATE, {
+                repositoryId,
+                categoryId,
+                title: ref,
+                body: threadBody(ref),
+            });
+            const discussion = at(data, "createDiscussion", "discussion");
+            const target = stringAt(discussion, "id");
+            if (target === "")
+                throw new ForgeError(`${config.project}: createDiscussion returned no discussion`);
+            // Locking is the promise `lockThreads: true` makes — votes count, replies
+            // are refused — so a failure here fails the run rather than silently
+            // leaving an open forum the operator did not ask to moderate. Turn it off
+            // in `index.config.json` if the forge cannot honour it.
+            if (config.lockThreads) {
+                await graphql(config.api, headers, LOCK, { lockableId: target });
+            }
+            return {
+                ref,
+                target,
+                url: stringAt(discussion, "url"),
+                up: typeof at(discussion, "upvoteCount") === "number" ? at(discussion, "upvoteCount") : 0,
+            };
+        },
+    };
+}
+//# sourceMappingURL=provider_github.js.map

package/dist/ratings/provider_github.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider_github.js","sourceRoot":"","sources":["../../src/ratings/provider_github.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,sCAAsC;AAEtC;;;;;;GAMG;AAEH,OAAO,EAAE,eAAe,EAAuB,MAAM,aAAa,CAAC;AACnE,OAAO,EACL,UAAU,EACV,SAAS,EACT,EAAE,EACF,OAAO,EACP,KAAK,EACL,UAAU,EACV,QAAQ,GAIT,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAEtC,MAAM,UAAU,GAAG;;;;;;EAMjB,CAAC;AAEH,wEAAwE;AACxE,gFAAgF;AAChF,6EAA6E;AAC7E,MAAM,WAAW,GAAG;;;wBAGI,SAAS;;;;;;;;;;EAU/B,CAAC;AAEH,MAAM,MAAM,GAAG;;;;;EAKb,CAAC;AAEH,MAAM,IAAI,GAAG;;;EAGX,CAAC;AAEH,MAAM,UAAU,cAAc,CAAC,MAA4B;IACzD,MAAM,OAAO,GAAG,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;IAC5D,MAAM,CAAC,KAAK,GAAG,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAE7D,IAAI,QAAQ,GAAwD,IAAI,CAAC;IAEzE,sFAAsF;IACtF,KAAK,UAAU,OAAO;QACpB,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7E,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;QACxD,IAAI,YAAY,KAAK,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,UAAU,CAAC,GAAG,MAAM,CAAC,OAAO,0DAA0D,CAAC,CAAC;QACpG,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,UAAU,GAAG,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,sBAAsB,CAAC,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC;QAChG,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,UAAU,CAClB,GAAG,MAAM,CAAC,OAAO,kCAAkC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG;gBACpF,WAAW,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG;YACrF,wEAAwE;YACxE,wEAAwE;YACxE,IAAI,CAAC,IAAI,CACV,CAAC;QACJ,CAAC;QACD,QAAQ,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QAC/D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO;QACL,KAAK,CAAC,YAAY;YAChB,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;YACrD,MAAM,OAAO,GAAmB,EAAE,CAAC;YACnC,IAAI,MAAM,GAAkB,IAAI,CAAC;YAEjC,SAAS,CAAC;gBACR,MAAM,IAAI,GAAG,MAAM,OAAO,CACxB,MAAM,CAAC,GAAG,EACV,OAAO,EACP,WAAW,EACX,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,EACnC,OAAO,CACR,CAAC;gBACF,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;gBACnD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC/B,MAAM,MAAM,GAAG,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;oBAClC,MAAM,UAAU,GAAG,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;oBAC5C,MAAM,QAAQ,GAAmB;wBAC/B,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;wBAC5B,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;wBAC1B,EAAE,EAAE,OAAO,EAAE,CAAC,IAAI,EAAE,aAAa,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,EAAE,CAAC,IAAI,EAAE,aAAa,CAAY,CAAC,CAAC,CAAC,CAAC;wBACzF,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;wBAC5B,QAAQ,EAAE,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;wBACzE,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC;wBAC/C,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC;qBAC7C,CAAC;oBACF,MAAM,UAAU,GAAG,eAAe,CAAC,QAAQ,EAAE;wBAC3C,WAAW,EAAE,MAAM,CAAC,WAAW;wBAC/B,WAAW,EAAE,YAAY;wBACzB,UAAU;qBACX,CAAC,CAAC;oBACH,IAAI,UAAU;wBAAE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC3C,CAAC;gBACD,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,aAAa,CAAC,KAAK,IAAI;oBAAE,OAAO,OAAO,CAAC;gBACjE,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,GAAG;YACd,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;gBACtD,YAAY;gBACZ,UAAU;gBACV,KAAK,EAAE,GAAG;gBACV,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC;aACtB,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,EAAE,CAAC,IAAI,EAAE,kBAAkB,EAAE,YAAY,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAC1C,IAAI,MAAM,KAAK,EAAE;gBAAE,MAAM,IAAI,UAAU,CAAC,GAAG,MAAM,CAAC,OAAO,2CAA2C,CAAC,CAAC;YAEtG,0EAA0E;YAC1E,qEAAqE;YACrE,0EAA0E;YAC1E,wDAAwD;YACxD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;YACnE,CAAC;YAED,OAAO;gBACL,GAAG;gBACH,MAAM;gBACN,GAAG,EAAE,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC;gBAChC,EAAE,EAAE,OAAO,EAAE,CAAC,UAAU,EAAE,aAAa,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,EAAE,CAAC,UAAU,EAAE,aAAa,CAAY,CAAC,CAAC,CAAC,CAAC;aACtG,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/ratings/provider_gitlab.d.ts

@@ -0,0 +1,3 @@
+import { type RatingProvider, type RatingProviderConfig } from "./provider.js";
+export declare function gitlabProvider(config: RatingProviderConfig): RatingProvider;
+//# sourceMappingURL=provider_gitlab.d.ts.map

package/dist/ratings/provider_gitlab.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider_gitlab.d.ts","sourceRoot":"","sources":["../../src/ratings/provider_gitlab.ts"],"names":[],"mappings":"AAcA,OAAO,EAQL,KAAK,cAAc,EACnB,KAAK,oBAAoB,EAE1B,MAAM,eAAe,CAAC;AA+DvB,wBAAgB,cAAc,CAAC,MAAM,EAAE,oBAAoB,GAAG,cAAc,CA8F3E"}

package/dist/ratings/provider_gitlab.js

@@ -0,0 +1,152 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 The Grimoire Authors
+/**
+ * GitLab work items — the GraphQL surface, not the long-term-deprecated REST
+ * issues API.
+ *
+ * The counter lives on the **Emoji Reactions** widget (`upvotes`). GitLab
+ * renamed the feature from Award Emoji in 16.0 while leaving the GraphQL names
+ * (`AwardEmoji`, `awardEmojiToggle`) unchanged, so the schema below reads
+ * legacy and the prose reads current — that is the rename, not a mismatch.
+ */
+import { authorizeThread } from "./marker.js";
+import { ForgeError, PAGE_SIZE, at, graphql, nodes, threadBody, stringAt, } from "./provider.js";
+import { EXIT } from "../cli/exit.js";
+const TYPES = `
+query($path:ID!){
+  project(fullPath:$path){
+    id
+    workItemTypes{nodes{id name}}
+  }
+}`;
+const WORK_ITEMS = `
+query($path:ID!,$types:[IssueType!],$cursor:String){
+  project(fullPath:$path){
+    id
+    workItems(first:${PAGE_SIZE},after:$cursor,types:$types){
+      pageInfo{hasNextPage endCursor}
+      nodes{
+        id webUrl
+        author{id}
+        workItemType{id}
+        widgets{
+          ...on WorkItemWidgetDescription{description}
+          ...on WorkItemWidgetAwardEmoji{upvotes}
+        }
+      }
+    }
+  }
+}`;
+const CREATE = `
+mutation($path:ID!,$typeId:WorkItemsTypeID!,$title:String!,$body:String!){
+  workItemCreate(input:{namespacePath:$path,workItemTypeId:$typeId,title:$title,descriptionWidget:{description:$body}}){
+    workItem{id webUrl}
+  }
+}`;
+const LOCK = `
+mutation($id:WorkItemID!){
+  workItemUpdate(input:{id:$id,notesWidget:{discussionLocked:true}}){
+    workItem{id}
+  }
+}`;
+/**
+ * The numeric tail of a global id — `gid://gitlab/User/42` → `42`.
+ *
+ * Only the **author** id is normalized, and only because R-1 clause 2 compares
+ * it against `index-policy.json`'s `trustedBots[].id`, which the validate gate
+ * writes as GitLab's numeric user id. Container and type ids stay whole gids:
+ * both sides of those comparisons come from this same provider, so there is
+ * nothing to agree with.
+ */
+function numericId(gid) {
+    const tail = gid.split("/").pop();
+    return tail !== undefined && /^\d+$/.test(tail) ? tail : undefined;
+}
+/** `Issue` → `ISSUE`, `Test case` → `TEST_CASE`. The `types:` filter's enum. */
+function typeEnum(container) {
+    return container.trim().toUpperCase().replace(/\s+/g, "_");
+}
+export function gitlabProvider(config) {
+    const headers = { Authorization: `Bearer ${config.token}` };
+    const path = config.project;
+    let resolved = null;
+    async function resolve() {
+        if (resolved)
+            return resolved;
+        const data = await graphql(config.api, headers, TYPES, { path });
+        const projectId = stringAt(data, "project", "id");
+        if (projectId === "") {
+            throw new ForgeError(`${path}: no such project, or it is not visible to this token`);
+        }
+        const wanted = config.container.trim().toLowerCase();
+        const types = nodes(at(data, "project", "workItemTypes"));
+        const match = types.find((node) => stringAt(node, "name").trim().toLowerCase() === wanted);
+        if (!match) {
+            throw new ForgeError(`${path}: no work item type named ${JSON.stringify(config.container)} ` +
+                `(found: ${types.map((node) => stringAt(node, "name")).join(", ") || "none"})`, EXIT.data);
+        }
+        resolved = { projectId, typeId: stringAt(match, "id") };
+        return resolved;
+    }
+    return {
+        async listAuthored() {
+            const { projectId, typeId } = await resolve();
+            const threads = [];
+            let cursor = null;
+            for (;;) {
+                const data = await graphql(config.api, headers, WORK_ITEMS, { path, types: [typeEnum(config.container)], cursor }, threads);
+                const page = at(data, "project", "workItems");
+                for (const node of nodes(page)) {
+                    const widgets = at(node, "widgets");
+                    const list = Array.isArray(widgets) ? widgets : [];
+                    const upvotes = list.map((w) => at(w, "upvotes")).find((v) => typeof v === "number");
+                    const description = list.map((w) => at(w, "description")).find((v) => typeof v === "string");
+                    const observed = {
+                        target: stringAt(node, "id"),
+                        url: stringAt(node, "webUrl"),
+                        up: typeof upvotes === "number" ? upvotes : 0,
+                        body: typeof description === "string" ? description : "",
+                        authorId: numericId(stringAt(node, "author", "id")),
+                        // The query is scoped to this project, so every node it returns is
+                        // in it. R-1 clause 4 still compares — the rule lives in one place.
+                        containerId: projectId,
+                        categoryId: stringAt(node, "workItemType", "id"),
+                    };
+                    const authorized = authorizeThread(observed, {
+                        trustedBots: config.trustedBots,
+                        containerId: projectId,
+                        categoryId: typeId,
+                    });
+                    if (authorized)
+                        threads.push(authorized);
+                }
+                if (at(page, "pageInfo", "hasNextPage") !== true)
+                    return threads;
+                cursor = stringAt(page, "pageInfo", "endCursor");
+            }
+        },
+        async create(ref) {
+            const { typeId } = await resolve();
+            const data = await graphql(config.api, headers, CREATE, {
+                path,
+                typeId,
+                title: ref,
+                body: threadBody(ref),
+            });
+            const item = at(data, "workItemCreate", "workItem");
+            const target = stringAt(item, "id");
+            if (target === "")
+                throw new ForgeError(`${path}: workItemCreate returned no work item`);
+            // Same contract as the GitHub side: `lockThreads: true` promises replies
+            // are refused, so failing to lock fails the run rather than quietly
+            // opening a forum the operator did not ask to moderate.
+            if (config.lockThreads) {
+                await graphql(config.api, headers, LOCK, { id: target });
+            }
+            // A fresh work item has no reactions, and asking for them would cost a
+            // second round trip to learn zero.
+            return { ref, target, url: stringAt(item, "webUrl"), up: 0 };
+        },
+    };
+}
+//# sourceMappingURL=provider_gitlab.js.map

package/dist/ratings/provider_gitlab.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider_gitlab.js","sourceRoot":"","sources":["../../src/ratings/provider_gitlab.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,sCAAsC;AAEtC;;;;;;;;GAQG;AAEH,OAAO,EAAE,eAAe,EAAuB,MAAM,aAAa,CAAC;AACnE,OAAO,EACL,UAAU,EACV,SAAS,EACT,EAAE,EACF,OAAO,EACP,KAAK,EACL,UAAU,EACV,QAAQ,GAIT,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAEtC,MAAM,KAAK,GAAG;;;;;;EAMZ,CAAC;AAEH,MAAM,UAAU,GAAG;;;;sBAIG,SAAS;;;;;;;;;;;;;EAa7B,CAAC;AAEH,MAAM,MAAM,GAAG;;;;;EAKb,CAAC;AAEH,MAAM,IAAI,GAAG;;;;;EAKX,CAAC;AAEH;;;;;;;;GAQG;AACH,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IAClC,OAAO,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACrE,CAAC;AAED,gFAAgF;AAChF,SAAS,QAAQ,CAAC,SAAiB;IACjC,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAA4B;IACzD,MAAM,OAAO,GAAG,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;IAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC;IAE5B,IAAI,QAAQ,GAAiD,IAAI,CAAC;IAElE,KAAK,UAAU,OAAO;QACpB,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAClD,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;YACrB,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,uDAAuD,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC;QAC3F,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,UAAU,CAClB,GAAG,IAAI,6BAA6B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG;gBACrE,WAAW,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG,EAChF,IAAI,CAAC,IAAI,CACV,CAAC;QACJ,CAAC;QACD,QAAQ,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QACxD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO;QACL,KAAK,CAAC,YAAY;YAChB,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;YAC9C,MAAM,OAAO,GAAmB,EAAE,CAAC;YACnC,IAAI,MAAM,GAAkB,IAAI,CAAC;YAEjC,SAAS,CAAC;gBACR,MAAM,IAAI,GAAG,MAAM,OAAO,CACxB,MAAM,CAAC,GAAG,EACV,OAAO,EACP,UAAU,EACV,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,EAAE,EACrD,OAAO,CACR,CAAC;gBACF,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;gBAC9C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC/B,MAAM,OAAO,GAAG,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;oBACpC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;oBACrF,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;oBAC7F,MAAM,QAAQ,GAAmB;wBAC/B,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;wBAC5B,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;wBAC7B,EAAE,EAAE,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;wBAC7C,IAAI,EAAE,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;wBACxD,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;wBACnD,mEAAmE;wBACnE,oEAAoE;wBACpE,WAAW,EAAE,SAAS;wBACtB,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC;qBACjD,CAAC;oBACF,MAAM,UAAU,GAAG,eAAe,CAAC,QAAQ,EAAE;wBAC3C,WAAW,EAAE,MAAM,CAAC,WAAW;wBAC/B,WAAW,EAAE,SAAS;wBACtB,UAAU,EAAE,MAAM;qBACnB,CAAC,CAAC;oBACH,IAAI,UAAU;wBAAE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC3C,CAAC;gBACD,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,aAAa,CAAC,KAAK,IAAI;oBAAE,OAAO,OAAO,CAAC;gBACjE,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,GAAG;YACd,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE;gBACtD,IAAI;gBACJ,MAAM;gBACN,KAAK,EAAE,GAAG;gBACV,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC;aACtB,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACpC,IAAI,MAAM,KAAK,EAAE;gBAAE,MAAM,IAAI,UAAU,CAAC,GAAG,IAAI,wCAAwC,CAAC,CAAC;YAEzF,yEAAyE;YACzE,oEAAoE;YACpE,wDAAwD;YACxD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3D,CAAC;YAED,uEAAuE;YACvE,mCAAmC;YACnC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;QAC/D,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/ratings/provider_memory.d.ts

@@ -0,0 +1,28 @@
+/**
+ * The in-memory `RatingProvider` — the primary local test seam.
+ *
+ * It proves the reconcile logic with no network and no fixtures: threads live
+ * in an array, `create` appends to it, and the next `listAuthored` sees them.
+ * That is what makes "a rerun is idempotent" a thing a test can assert rather
+ * than a thing a comment claims.
+ *
+ * R-1 is not re-applied here. Every thread the fake holds is one it authored,
+ * which is exactly the post-R-1 state a live provider hands back.
+ */
+import { type RatingProvider, type RatingThread } from "./provider.js";
+export interface MemoryProviderOptions {
+    /** Threads already on the fake forge. Repeat a `ref` to stage a conflict. */
+    threads?: RatingThread[];
+    /** Stop the listing pass after this many threads and raise a rate limit. */
+    listLimit?: number;
+    /** Raise a rate limit on the create after this many succeeded. */
+    createLimit?: number;
+}
+export interface MemoryProvider extends RatingProvider {
+    /** Live view of the fake forge — assert on it after a run. */
+    readonly threads: RatingThread[];
+    /** Targets of threads created with locking asked for. */
+    readonly locked: string[];
+}
+export declare function memoryProvider(options?: MemoryProviderOptions): MemoryProvider;
+//# sourceMappingURL=provider_memory.d.ts.map

package/dist/ratings/provider_memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider_memory.d.ts","sourceRoot":"","sources":["../../src/ratings/provider_memory.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;GAUG;AAEH,OAAO,EAAe,KAAK,cAAc,EAAE,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAEpF,MAAM,WAAW,qBAAqB;IACpC,6EAA6E;IAC7E,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAe,SAAQ,cAAc;IACpD,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC;IACjC,yDAAyD;IACzD,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,wBAAgB,cAAc,CAAC,OAAO,GAAE,qBAA0B,GAAG,cAAc,CAsClF"}

package/dist/ratings/provider_memory.js

@@ -0,0 +1,49 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 The Grimoire Authors
+/**
+ * The in-memory `RatingProvider` — the primary local test seam.
+ *
+ * It proves the reconcile logic with no network and no fixtures: threads live
+ * in an array, `create` appends to it, and the next `listAuthored` sees them.
+ * That is what makes "a rerun is idempotent" a thing a test can assert rather
+ * than a thing a comment claims.
+ *
+ * R-1 is not re-applied here. Every thread the fake holds is one it authored,
+ * which is exactly the post-R-1 state a live provider hands back.
+ */
+import { RateLimited } from "./provider.js";
+export function memoryProvider(options = {}) {
+    const threads = options.threads ?? [];
+    const locked = [];
+    // The fake's limits are per-run, and a run always starts by listing — so the
+    // create counter resets there rather than needing a separate reset call.
+    let created = 0;
+    return {
+        threads,
+        locked,
+        listAuthored() {
+            created = 0;
+            const { listLimit } = options;
+            if (listLimit !== undefined && listLimit < threads.length) {
+                return Promise.reject(new RateLimited("memory: secondary rate limit while listing", 60_000, threads.slice(0, listLimit)));
+            }
+            return Promise.resolve([...threads]);
+        },
+        create(ref) {
+            if (options.createLimit !== undefined && created >= options.createLimit) {
+                return Promise.reject(new RateLimited("memory: secondary rate limit while creating", 60_000));
+            }
+            created += 1;
+            const thread = {
+                ref,
+                target: `t-${ref}`,
+                url: `https://forge.example/${ref}`,
+                up: 0,
+            };
+            threads.push(thread);
+            locked.push(thread.target);
+            return Promise.resolve(thread);
+        },
+    };
+}
+//# sourceMappingURL=provider_memory.js.map

package/dist/ratings/provider_memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider_memory.js","sourceRoot":"","sources":["../../src/ratings/provider_memory.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,sCAAsC;AAEtC;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,WAAW,EAA0C,MAAM,eAAe,CAAC;AAkBpF,MAAM,UAAU,cAAc,CAAC,UAAiC,EAAE;IAChE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;IACtC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,6EAA6E;IAC7E,yEAAyE;IACzE,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,OAAO;QACL,OAAO;QACP,MAAM;QAEN,YAAY;YACV,OAAO,GAAG,CAAC,CAAC;YACZ,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;YAC9B,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC1D,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,WAAW,CAAC,4CAA4C,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CACnG,CAAC;YACJ,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,CAAC,GAAG;YACR,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBACxE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,6CAA6C,EAAE,MAAM,CAAC,CAAC,CAAC;YAChG,CAAC;YACD,OAAO,IAAI,CAAC,CAAC;YACb,MAAM,MAAM,GAAiB;gBAC3B,GAAG;gBACH,MAAM,EAAE,KAAK,GAAG,EAAE;gBAClB,GAAG,EAAE,yBAAyB,GAAG,EAAE;gBACnC,EAAE,EAAE,CAAC;aACN,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC3B,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/ratings/reconcile.d.ts

@@ -0,0 +1,47 @@
+/**
+ * The reconcile + tally loop (design §6.2). Stateless and level-triggered:
+ * every run re-derives everything, so a partial run leaves *fewer threads
+ * created*, never corrupt state, and a rerun is idempotent.
+ *
+ * Pure given a `RatingProvider` and a desired-ref set — no filesystem, no
+ * config, no network of its own.
+ */
+import { conflictWarning, type RefConflict } from "./marker.js";
+import { type RatingProvider } from "./provider.js";
+import type { StatsSeed } from "./seed.js";
+/** One ref's `rating` value, exactly as it lands in `stats.json`. */
+export interface RatingStat {
+    up: number;
+    target: string;
+    url: string;
+}
+export interface ReconcileInput {
+    provider: RatingProvider;
+    /** Every ref in the index. */
+    desired: readonly string[];
+    /** Threads this run may create. */
+    budget: number;
+    /**
+     * The published sidecar. Read **only** to carry ratings forward when the
+     * listing pass was truncated — see the carry-forward note in [`reconcile`].
+     */
+    seed: StatsSeed;
+}
+export interface ReconcileResult {
+    /** `mergeStats`'s `fresh`: ref → this producer's stat value, and nothing else. */
+    fresh: Record<string, RatingStat>;
+    refs: number;
+    created: number;
+    /** Refs with no bound thread when the run started. */
+    missing: number;
+    conflicts: RefConflict[];
+    /** A secondary limit was hit somewhere in the run. */
+    limited: boolean;
+    /** Nothing observed and nothing created, because of a rate limit. */
+    starved: boolean;
+}
+export { conflictWarning };
+export declare function reconcile(input: ReconcileInput): Promise<ReconcileResult>;
+/** The one structured line per run (design §8, Observability). */
+export declare function logLine(result: ReconcileResult): string;
+//# sourceMappingURL=reconcile.d.ts.map

package/dist/ratings/reconcile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile.d.ts","sourceRoot":"","sources":["../../src/ratings/reconcile.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAAoB,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAElF,OAAO,EAAe,KAAK,cAAc,EAAqB,MAAM,eAAe,CAAC;AACpF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAE3C,qEAAqE;AACrE,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,cAAc,CAAC;IACzB,8BAA8B;IAC9B,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,mCAAmC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,IAAI,EAAE,SAAS,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,kFAAkF;IAClF,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,WAAW,EAAE,CAAC;IACzB,sDAAsD;IACtD,OAAO,EAAE,OAAO,CAAC;IACjB,qEAAqE;IACrE,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,OAAO,EAAE,eAAe,EAAE,CAAC;AAW3B,wBAAsB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC,CAoG/E;AAED,kEAAkE;AAClE,wBAAgB,OAAO,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAMvD"}

package/dist/ratings/reconcile.js

@@ -0,0 +1,133 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright 2026 The Grimoire Authors
+/**
+ * The reconcile + tally loop (design §6.2). Stateless and level-triggered:
+ * every run re-derives everything, so a partial run leaves *fewer threads
+ * created*, never corrupt state, and a rerun is idempotent.
+ *
+ * Pure given a `RatingProvider` and a desired-ref set — no filesystem, no
+ * config, no network of its own.
+ */
+import { conflictWarning, resolveConflicts } from "./marker.js";
+import { planCreations } from "./budget.js";
+import { RateLimited } from "./provider.js";
+export { conflictWarning };
+/** A published `rating` value, when the seed carries one for this ref. */
+function seededRating(seed, ref) {
+    const rating = seed.entries[ref]?.rating;
+    if (rating === null || typeof rating !== "object")
+        return null;
+    const { up, target, url } = rating;
+    if (typeof up !== "number" || typeof target !== "string" || typeof url !== "string")
+        return null;
+    return { up, target, url };
+}
+export async function reconcile(input) {
+    const { provider, desired, budget, seed } = input;
+    // 1. OBSERVE — paginated to exhaustion inside the provider, R-1 applied there.
+    let threads;
+    let listTruncated = false;
+    try {
+        threads = await provider.listAuthored();
+    }
+    catch (err) {
+        // Every other failure propagates: a forge that did not answer says nothing
+        // about how many votes exist, and publishing on that basis is the silent
+        // emptying R-2 exists to prevent.
+        if (!(err instanceof RateLimited))
+            throw err;
+        threads = err.observed;
+        listTruncated = true;
+    }
+    let limited = listTruncated;
+    // 2. CONFLICT — a ref bound by more than one authorized thread contributes
+    //    zero, so `bound` already excludes them and step 4 needs no second check.
+    const { bound, conflicts } = resolveConflicts(threads);
+    // 3. DIFF + BUDGETED CREATE — sorted, so successive runs make monotonic
+    //    progress with no stored cursor. Skipped outright when the listing pass
+    //    was truncated: the forge just said stop, and the diff is unreliable
+    //    anyway when the observation is partial.
+    //
+    //    Conflicted refs count as present, not missing. §6.2's pseudocode
+    //    subtracts only `observed`, which would have this run create a *third*
+    //    thread for a ref already bound by two — deepening, every run, the exact
+    //    ambiguity the warning tells the operator to resolve by deleting.
+    const present = new Set([...bound.keys(), ...conflicts.map((conflict) => conflict.ref)]);
+    const plan = planCreations(desired, present, budget);
+    let created = 0;
+    if (!listTruncated) {
+        for (const ref of plan.batch) {
+            try {
+                bound.set(ref, await provider.create(ref));
+                created += 1;
+            }
+            catch (err) {
+                if (!(err instanceof RateLimited))
+                    throw err;
+                limited = true;
+                break;
+            }
+        }
+    }
+    // 4. TALLY — the forge's own scalar counter. A zero-vote thread says nothing,
+    //    so it is omitted rather than published as `up: 0`.
+    const fresh = {};
+    for (const [ref, thread] of bound) {
+        if (thread.up > 0)
+            fresh[ref] = { up: thread.up, target: thread.target, url: thread.url };
+    }
+    // 4b. CARRY FORWARD what a truncated pass never reached.
+    //
+    //     `mergeStats` drops the `rating` key of every ref absent from `fresh`,
+    //     and that is correct *because this producer completed* — design §6.2
+    //     says so in as many words, and only a FAILED producer carries forward.
+    //     A truncated listing pass did not complete: refs on the pages it never
+    //     read look identical to refs whose votes went to zero. Publishing on
+    //     that basis is exactly the silent emptying R-2 forbids, so their
+    //     published value is re-emitted instead. It is stale, not wiped, and the
+    //     next complete run re-derives it.
+    //
+    //     A truncated *create* pass needs none of this: listing completed, so the
+    //     tally is authoritative for every thread that exists.
+    if (listTruncated) {
+        for (const ref of Object.keys(seed.entries)) {
+            if (ref in fresh)
+                continue;
+            const carried = seededRating(seed, ref);
+            if (carried)
+                fresh[ref] = carried;
+        }
+    }
+    return {
+        fresh,
+        refs: desired.length,
+        created,
+        missing: plan.missing.length,
+        conflicts,
+        limited,
+        // Nothing was observed and nothing was created, against an index that
+        // wanted threads — the run did no real work, and publishing on that basis
+        // empties every previously published rating at exit 0.
+        //
+        // This deliberately does NOT require `limited`. Spec review (2026-08-18,
+        // F-1) drove the real verb with a numeric `trustedBots[].id`: R-1
+        // authorized nothing, `listAuthored` returned `[]`, the run *completed*,
+        // and the merge dropped every rating key — a full wipe that R-2 never sees,
+        // because the seed fetch succeeded and the emptying arrived through the
+        // R-1 door instead. Any R-1 misconfiguration (a wrong container id, a
+        // wrong category, a bot that is not the author) has the same shape.
+        //
+        // A genuinely empty tally is distinguishable: threads whose votes all went
+        // to zero are still *observed*, so `threads.length > 0`. A first run on a
+        // fresh index creates threads, so `created > 0`. An index with no refs at
+        // all has nothing to do and is not starved.
+        starved: desired.length > 0 && threads.length === 0 && created === 0,
+    };
+}
+/** The one structured line per run (design §8, Observability). */
+export function logLine(result) {
+    return (`ratings: refs=${result.refs} created=${result.created}/${result.missing} ` +
+        `tallied=${Object.keys(result.fresh).length} conflicts=${result.conflicts.length} ` +
+        `secondary_limit_hit=${result.limited}`);
+}
+//# sourceMappingURL=reconcile.js.map

package/dist/ratings/reconcile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile.js","sourceRoot":"","sources":["../../src/ratings/reconcile.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,sCAAsC;AAEtC;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAoB,MAAM,aAAa,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,WAAW,EAA0C,MAAM,eAAe,CAAC;AAqCpF,OAAO,EAAE,eAAe,EAAE,CAAC;AAE3B,0EAA0E;AAC1E,SAAS,YAAY,CAAC,IAAe,EAAE,GAAW;IAChD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACzC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC/D,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAiC,CAAC;IAC9D,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjG,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAqB;IACnD,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAElD,+EAA+E;IAC/E,IAAI,OAAgC,CAAC;IACrC,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,2EAA2E;QAC3E,yEAAyE;QACzE,kCAAkC;QAClC,IAAI,CAAC,CAAC,GAAG,YAAY,WAAW,CAAC;YAAE,MAAM,GAAG,CAAC;QAC7C,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC;QACvB,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC;IACD,IAAI,OAAO,GAAG,aAAa,CAAC;IAE5B,2EAA2E;IAC3E,8EAA8E;IAC9E,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAEvD,wEAAwE;IACxE,4EAA4E;IAC5E,yEAAyE;IACzE,6CAA6C;IAC7C,EAAE;IACF,sEAAsE;IACtE,2EAA2E;IAC3E,6EAA6E;IAC7E,sEAAsE;IACtE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACzF,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACrD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC3C,OAAO,IAAI,CAAC,CAAC;YACf,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,CAAC,GAAG,YAAY,WAAW,CAAC;oBAAE,MAAM,GAAG,CAAC;gBAC7C,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,wDAAwD;IACxD,MAAM,KAAK,GAA+B,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QAClC,IAAI,MAAM,CAAC,EAAE,GAAG,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;IAC5F,CAAC;IAED,yDAAyD;IACzD,EAAE;IACF,4EAA4E;IAC5E,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,0EAA0E;IAC1E,sEAAsE;IACtE,6EAA6E;IAC7E,uCAAuC;IACvC,EAAE;IACF,8EAA8E;IAC9E,2DAA2D;IAC3D,IAAI,aAAa,EAAE,CAAC;QAClB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5C,IAAI,GAAG,IAAI,KAAK;gBAAE,SAAS;YAC3B,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACxC,IAAI,OAAO;gBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC;QACpC,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK;QACL,IAAI,EAAE,OAAO,CAAC,MAAM;QACpB,OAAO;QACP,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;QAC5B,SAAS;QACT,OAAO;QACP,sEAAsE;QACtE,0EAA0E;QAC1E,uDAAuD;QACvD,EAAE;QACF,yEAAyE;QACzE,kEAAkE;QAClE,yEAAyE;QACzE,4EAA4E;QAC5E,wEAAwE;QACxE,sEAAsE;QACtE,oEAAoE;QACpE,EAAE;QACF,2EAA2E;QAC3E,0EAA0E;QAC1E,0EAA0E;QAC1E,4CAA4C;QAC5C,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,OAAO,CAAC,MAAuB;IAC7C,OAAO,CACL,iBAAiB,MAAM,CAAC,IAAI,YAAY,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,GAAG;QAC3E,WAAW,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,cAAc,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG;QACnF,uBAAuB,MAAM,CAAC,OAAO,EAAE,CACxC,CAAC;AACJ,CAAC"}