@telora/daemon 0.22.104 → 0.22.132

package/dist/verify/explicit-run-ledger.d.ts

@@ -0,0 +1,26 @@
+/** What the ledger names for a delivery: no run, its current run, or an entry that cannot be read. */
+export type ExplicitRunLedgerEntry = {
+    kind: 'none';
+} | {
+    kind: 'run';
+    runId: string;
+} | {
+    kind: 'unreadable';
+};
+/** The ledger directory under the daemon's global state dir. */
+export declare function explicitRunLedgerDir(): string;
+/**
+ * Name `runId` the delivery's current explicit run (see the module header),
+ * superseding every run before it. Throws when the entry cannot be written: the
+ * run it names must then not start.
+ */
+export declare function beginExplicitRun(deliveryId: string, runId: string, now?: () => string, dir?: string): void;
+/** The run the ledger names for the delivery. Never throws. */
+export declare function readExplicitRunLedger(deliveryId: string, dir?: string): ExplicitRunLedgerEntry;
+/**
+ * Whether a verdict recorded by run `runId` (undefined: a record that named no
+ * run) may govern the delivery: the ledger names no run for it, or names that
+ * one. Never throws.
+ */
+export declare function isCurrentExplicitRun(deliveryId: string, runId: string | undefined, dir?: string): boolean;
+//# sourceMappingURL=explicit-run-ledger.d.ts.map

package/dist/verify/explicit-run-ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"explicit-run-ledger.d.ts","sourceRoot":"","sources":["../../src/verify/explicit-run-ledger.ts"],"names":[],"mappings":"AA2CA,sGAAsG;AACtG,MAAM,MAAM,sBAAsB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,CAAC;AAEhH,gEAAgE;AAChE,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAMD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,GAAG,GAAE,MAAM,MAAuC,EAClD,GAAG,GAAE,MAA+B,GACnC,IAAI,CAWN;AAED,+DAA+D;AAC/D,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,GAAE,MAA+B,GAAG,sBAAsB,CActH;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,GAAE,MAA+B,GAAG,OAAO,CAGjI"}

package/dist/verify/explicit-run-ledger.js

@@ -0,0 +1,93 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/integration/explicit-verdict-departure-during-removal.test.ts,
+//   packages/daemon/src/integration/explicit-verdict-reuse.test.ts,
+//   packages/daemon/src/verify/explicit-run-ledger.test.ts
+// PINNED-BY-END
+/**
+ * Which explicit-method run of a delivery is the CURRENT one, kept on local disk
+ * where no gate_state writer can reach it.
+ *
+ * An explicit run's verdict lives on the delivery's gate_state
+ * (verificationHistory.explicitOutcome, verify/explicit-gate-outcome.ts), and the
+ * tick removes it before a replacement run starts. But gate_state is rewritten
+ * WHOLE by every writer that holds or clears a delivery, each carrying the history
+ * of the row IT read (queries/delivery-gate-state.ts carryVerificationHistory). A
+ * writer that read the row before the removal -- a review exit holding for the
+ * replacement's verdict, say -- writes the older verdict straight back after it,
+ * and once a restart clears the in-process record that resurrected pass approves a
+ * commit the replacement never judged. No gate_state write can be monotonic
+ * against such a writer, and the edge offers no compare-and-swap.
+ *
+ * So each selection of an explicit run names a fresh run id here, durably, before
+ * the removal and before the run can start; the run's verdict is recorded with
+ * that id, and a run no longer named here records nothing; and a durable verdict
+ * governs only while its id is the one named here. A verdict a stale writer carries
+ * back carries its own, older id, and reads as no verdict. One file per delivery
+ * under `<state dir>/explicit-verdict-runs`, replaced atomically (write + rename),
+ * beside the per-commit verdict records (verify/commit-verdict-record.ts) on the
+ * host whose daemon runs the product's gates.
+ *
+ * Direction of error: a delivery with no entry takes its recorded verdict as
+ * before (one recorded before runs were named, or a delivery no run was selected
+ * for on this host); an entry that cannot be read takes none -- routing holds, and
+ * the explicit re-arm scan selects the row again, which names a fresh run. A
+ * selection whose entry cannot be written does not start.
+ *
+ * @module verify/explicit-run-ledger
+ */
+import { mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { resolveGlobalStateDir } from '../shell/daemon-process.js';
+/** The ledger directory under the daemon's global state dir. */
+export function explicitRunLedgerDir() {
+    return resolve(resolveGlobalStateDir(), 'explicit-verdict-runs');
+}
+function entryPath(deliveryId, dir) {
+    return resolve(dir, `${encodeURIComponent(deliveryId)}.json`);
+}
+/**
+ * Name `runId` the delivery's current explicit run (see the module header),
+ * superseding every run before it. Throws when the entry cannot be written: the
+ * run it names must then not start.
+ */
+export function beginExplicitRun(deliveryId, runId, now = () => new Date().toISOString(), dir = explicitRunLedgerDir()) {
+    mkdirSync(dir, { recursive: true, mode: 0o700 });
+    const path = entryPath(deliveryId, dir);
+    const tmp = `${path}.${process.pid}.${runId}.tmp`;
+    try {
+        writeFileSync(tmp, JSON.stringify({ deliveryId, runId, selectedAt: now() }), { mode: 0o600 });
+        renameSync(tmp, path);
+    }
+    catch (err) {
+        rmSync(tmp, { force: true });
+        throw err;
+    }
+}
+/** The run the ledger names for the delivery. Never throws. */
+export function readExplicitRunLedger(deliveryId, dir = explicitRunLedgerDir()) {
+    let text;
+    try {
+        text = readFileSync(entryPath(deliveryId, dir), 'utf8');
+    }
+    catch (err) {
+        return err.code === 'ENOENT' ? { kind: 'none' } : { kind: 'unreadable' };
+    }
+    try {
+        const parsed = JSON.parse(text);
+        const runId = typeof parsed === 'object' && parsed !== null ? parsed.runId : undefined;
+        return typeof runId === 'string' && runId !== '' ? { kind: 'run', runId } : { kind: 'unreadable' };
+    }
+    catch {
+        return { kind: 'unreadable' };
+    }
+}
+/**
+ * Whether a verdict recorded by run `runId` (undefined: a record that named no
+ * run) may govern the delivery: the ledger names no run for it, or names that
+ * one. Never throws.
+ */
+export function isCurrentExplicitRun(deliveryId, runId, dir = explicitRunLedgerDir()) {
+    const entry = readExplicitRunLedger(deliveryId, dir);
+    return entry.kind === 'none' || (entry.kind === 'run' && entry.runId === runId);
+}
+//# sourceMappingURL=explicit-run-ledger.js.map

package/dist/verify/explicit-run-ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"explicit-run-ledger.js","sourceRoot":"","sources":["../../src/verify/explicit-run-ledger.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,gGAAgG;AAChG,oEAAoE;AACpE,2DAA2D;AAC3D,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAKnE,gEAAgE;AAChE,MAAM,UAAU,oBAAoB;IAClC,OAAO,OAAO,CAAC,qBAAqB,EAAE,EAAE,uBAAuB,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,SAAS,CAAC,UAAkB,EAAE,GAAW;IAChD,OAAO,OAAO,CAAC,GAAG,EAAE,GAAG,kBAAkB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAAkB,EAClB,KAAa,EACb,MAAoB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAClD,MAAc,oBAAoB,EAAE;IAEpC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,KAAK,MAAM,CAAC;IAClD,IAAI,CAAC;QACH,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9F,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7B,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,qBAAqB,CAAC,UAAkB,EAAE,MAAc,oBAAoB,EAAE;IAC5F,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAQ,GAA6B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IACtG,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAE,MAAkC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QACpH,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IACrG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAChC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAkB,EAAE,KAAyB,EAAE,MAAc,oBAAoB,EAAE;IACtH,MAAM,KAAK,GAAG,qBAAqB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;AAClF,CAAC"}

package/dist/verify/failure-signature.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"failure-signature.d.ts","sourceRoot":"","sources":["../../src/verify/failure-signature.ts"],"names":[],"mappings":"AAqDA,OAAO,EAGL,KAAK,wBAAwB,EAC9B,MAAM,mCAAmC,CAAC;AAK3C,yFAAyF;AACzF,eAAO,MAAM,mBAAmB,kBAAkB,CAAC;AAyBnD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,GAAG,IAAW,GAAG,MAAM,CAavF;AAED,0EAA0E;AAC1E,MAAM,WAAW,YAAY;IAC3B,mFAAmF;IACnF,KAAK,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,YAAY,GAAG,IAAI,CAoBhF;AAED,MAAM,WAAW,qBAAqB;IACpC,2FAA2F;IAC3F,OAAO,EAAE,MAAM,CAAC;IAChB,kGAAkG;IAClG,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,qBAAqB,GAAG,MAAM,GAAG,IAAI,CAkBlF;AAMD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,wBAAwB,GAAG,IAAI,EACtC,SAAS,EAAE,MAAM,GAAG,IAAI,GACvB,wBAAwB,CAO1B;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,OAAO,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAS9G;AAMD,8EAA8E;AAC9E,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,iFAAiF;AACjF,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,qBAAqB,GAAG,MAAM,CAS7E;AAED,8FAA8F;AAC9F,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,CAAC,MAAM,EAAE,qBAAqB,KAAK,MAAM,CAAC;CACxD;AAED,eAAO,MAAM,2BAA2B,QAAO,oBAE7C,CAAC;AAEH;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAC3C,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,qBAAqB,EAC7B,YAAY,EAAE,SAAS,MAAM,EAAE,EAC/B,cAAc,EAAE,OAAO,EACvB,IAAI,EAAE,oBAAoB,GACzB;IAAE,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,YAAY,EAAE,wBAAwB,CAAA;CAAE,CAS7E"}
+{"version":3,"file":"failure-signature.d.ts","sourceRoot":"","sources":["../../src/verify/failure-signature.ts"],"names":[],"mappings":"AAyDA,OAAO,EAGL,KAAK,wBAAwB,EAC9B,MAAM,mCAAmC,CAAC;AAK3C,yFAAyF;AACzF,eAAO,MAAM,mBAAmB,kBAAkB,CAAC;AAyBnD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,GAAG,IAAW,GAAG,MAAM,CAavF;AAED,0EAA0E;AAC1E,MAAM,WAAW,YAAY;IAC3B,mFAAmF;IACnF,KAAK,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,YAAY,GAAG,IAAI,CAoBhF;AAED,MAAM,WAAW,qBAAqB;IACpC,2FAA2F;IAC3F,OAAO,EAAE,MAAM,CAAC;IAChB,kGAAkG;IAClG,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,qBAAqB,GAAG,MAAM,GAAG,IAAI,CAkBlF;AAMD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,wBAAwB,GAAG,IAAI,EACtC,SAAS,EAAE,MAAM,GAAG,IAAI,GACvB,wBAAwB,CAO1B;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,OAAO,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAS9G;AAMD,8EAA8E;AAC9E,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,iFAAiF;AACjF,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,qBAAqB,GAAG,MAAM,CAS7E;AAED,8FAA8F;AAC9F,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,CAAC,MAAM,EAAE,qBAAqB,KAAK,MAAM,CAAC;CACxD;AAED,eAAO,MAAM,2BAA2B,QAAO,oBAE7C,CAAC;AAEH;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAC3C,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,qBAAqB,EAC7B,YAAY,EAAE,SAAS,MAAM,EAAE,EAC/B,cAAc,EAAE,OAAO,EACvB,IAAI,EAAE,oBAAoB,GACzB;IAAE,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,YAAY,EAAE,wBAAwB,CAAA;CAAE,CAS7E"}

package/dist/verify/failure-signature.js

@@ -1,6 +1,10 @@
 // PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: packages/daemon/src/integration/verification-history-round-trip.test.ts,
+// Pinned by: packages/daemon/src/integration/explicit-verdict-reuse.test.ts,
+//   packages/daemon/src/integration/focus-commit-verdict-scenario.test.ts,
+//   packages/daemon/src/integration/verification-history-round-trip.test.ts,
+//   packages/daemon/src/integration/verification-rework-resume-verdict.test.ts,
 //   packages/daemon/src/verify/failure-signature.test.ts, packages/daemon/src/verify/stall-detectors.test.ts,
+//   packages/daemon/src/verify/verification-commit-sharing.test.ts,
 //   packages/daemon/src/verify/verification-default-on.test.ts,
 //   packages/daemon/src/verify/verification-feedback.test.ts
 // PINNED-BY-END

package/dist/verify/failure-signature.js.map

@@ -1 +1 @@
-{"version":3,"file":"failure-signature.js","sourceRoot":"","sources":["../../src/verify/failure-signature.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,sFAAsF;AACtF,8GAA8G;AAC9G,gEAAgE;AAChE,6DAA6D;AAC7D,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EACL,iBAAiB,EACjB,uBAAuB,GAExB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAErE,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAErD,yFAAyF;AACzF,MAAM,CAAC,MAAM,mBAAmB,GAAG,eAAe,CAAC;AAEnD,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,iGAAiG;AACjG,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;AACjF,MAAM,OAAO,GAAG,oEAAoE,CAAC;AACrF,MAAM,SAAS,GAAG,mFAAmF,CAAC;AACtG,MAAM,QAAQ,GAAG,oCAAoC,CAAC;AACtD,MAAM,WAAW,GAAG,8DAA8D,CAAC;AACnF,wFAAwF;AACxF,MAAM,UAAU,GAAG,sDAAsD,CAAC;AAC1E,MAAM,WAAW,GAAG,gFAAgF,CAAC;AACrG,MAAM,SAAS,GAAG,MAAM,CAAC;AAEzB,mFAAmF;AACnF,MAAM,aAAa,GAAG,4CAA4C,CAAC;AACnE,wEAAwE;AACxE,MAAM,uBAAuB,GAAG,uDAAuD,CAAC;AACxF,uDAAuD;AACvD,MAAM,SAAS,GAAG,qEAAqE,CAAC;AACxF,wFAAwF;AACxF,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAEzC;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAY,EAAE,MAAqB,IAAI;IAC7E,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAClC,IAAI,GAAG;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO,CAAC;SACL,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC;SAC1B,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;SAC1B,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC;SAC3B,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC;SAC7B,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC;SAC5B,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC;SAC7B,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;AACZ,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAwB;IACzD,MAAM,OAAO,GAA2D,EAAE,CAAC;IAC3E,IAAI,SAAS,GAA6C,IAAI,CAAC;IAC/D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxE,MAAM,MAAM,GAA2B,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtG,IAAI,MAAM;YAAE,SAAS,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;IACpG,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,SAAS,CAAC;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC;QACpG,OAAO,KAAK;YACV,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE;YAC1E,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IACjF,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7F,CAAC;AASD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAA4B;IACjE,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,IAAI,CAAC,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAC/D,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC;QACzB,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CACxB,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAC9F,CAAC,CAAC,IAAI,EAAE,CAAC;IACV,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACtG,OAAO,GAAG,KAAK,EAAE,KAAK,IAAI,mBAAmB,IAAI,IAAI,EAAE,CAAC;AAC1D,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAsC,EACtC,SAAwB;IAExB,MAAM,iBAAiB,GAAG,KAAK,EAAE,SAAS,IAAI,IAAI,CAAC;IACnD,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IACtF,MAAM,WAAW,GAAG,KAAK,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC;QAClF,CAAC,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC;QACvB,CAAC,CAAC,CAAC,CAAC;IACN,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,WAAW,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,SAAkB;IACzD,IAAI,SAAS,IAAI,IAAI,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACpE,MAAM,YAAY,GAAI,SAAwC,CAAC,YAAY,CAAC;IAC5E,IAAI,YAAY,IAAI,IAAI,IAAI,OAAO,YAAY,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1E,MAAM,CAAC,GAAG,YAAsE,CAAC;IACjF,IAAI,OAAO,CAAC,CAAC,gBAAgB,KAAK,QAAQ,IAAI,CAAC,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3F,MAAM,GAAG,GAAG,iBAAiB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,KAAK,CAAC,CAAC,gBAAgB,IAAI,GAAG,CAAC,WAAW,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;AACpE,CAAC;AAaD,iFAAiF;AACjF,MAAM,UAAU,uBAAuB,CAAC,MAA6B;IACnE,IAAI,MAAM,CAAC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,0CAA0C,EAAE,EAAE,KAAK,EAAE,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IACD,OAAO,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,KAAK,MAAM,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;AAClE,CAAC;AAOD,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAyB,EAAE,CAAC,CAAC;IACtE,WAAW,EAAE,uBAAuB;CACrC,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,UAAU,6BAA6B,CAC3C,UAAkB,EAClB,MAA6B,EAC7B,YAA+B,EAC/B,cAAuB,EACvB,IAA0B;IAE1B,IAAI,gBAAgB,GAAkB,IAAI,CAAC;IAC3C,IAAI,CAAC;QACH,gBAAgB,GAAG,sBAAsB,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;IACjG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,oDAAoD,UAAU,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,KAAK,GAAG,uBAAuB,CAAC,cAAc,CAAC,CAAC,YAAY,IAAI,IAAI,CAAC;IAC3E,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAAE,CAAC;AAC1F,CAAC"}
+{"version":3,"file":"failure-signature.js","sourceRoot":"","sources":["../../src/verify/failure-signature.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,6EAA6E;AAC7E,2EAA2E;AAC3E,6EAA6E;AAC7E,gFAAgF;AAChF,8GAA8G;AAC9G,oEAAoE;AACpE,gEAAgE;AAChE,6DAA6D;AAC7D,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EACL,iBAAiB,EACjB,uBAAuB,GAExB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAErE,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAErD,yFAAyF;AACzF,MAAM,CAAC,MAAM,mBAAmB,GAAG,eAAe,CAAC;AAEnD,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,iGAAiG;AACjG,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;AACjF,MAAM,OAAO,GAAG,oEAAoE,CAAC;AACrF,MAAM,SAAS,GAAG,mFAAmF,CAAC;AACtG,MAAM,QAAQ,GAAG,oCAAoC,CAAC;AACtD,MAAM,WAAW,GAAG,8DAA8D,CAAC;AACnF,wFAAwF;AACxF,MAAM,UAAU,GAAG,sDAAsD,CAAC;AAC1E,MAAM,WAAW,GAAG,gFAAgF,CAAC;AACrG,MAAM,SAAS,GAAG,MAAM,CAAC;AAEzB,mFAAmF;AACnF,MAAM,aAAa,GAAG,4CAA4C,CAAC;AACnE,wEAAwE;AACxE,MAAM,uBAAuB,GAAG,uDAAuD,CAAC;AACxF,uDAAuD;AACvD,MAAM,SAAS,GAAG,qEAAqE,CAAC;AACxF,wFAAwF;AACxF,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAEzC;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAY,EAAE,MAAqB,IAAI;IAC7E,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAClC,IAAI,GAAG;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO,CAAC;SACL,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC;SAC1B,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;SAC1B,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC;SAC3B,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC;SAC7B,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC;SAC5B,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC;SAC7B,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;AACZ,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAwB;IACzD,MAAM,OAAO,GAA2D,EAAE,CAAC;IAC3E,IAAI,SAAS,GAA6C,IAAI,CAAC;IAC/D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxE,MAAM,MAAM,GAA2B,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtG,IAAI,MAAM;YAAE,SAAS,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;IACpG,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,SAAS,CAAC;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC;QACpG,OAAO,KAAK;YACV,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE;YAC1E,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IACjF,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7F,CAAC;AASD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAA4B;IACjE,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,IAAI,CAAC,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAC/D,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC;QACzB,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CACxB,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAC9F,CAAC,CAAC,IAAI,EAAE,CAAC;IACV,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACtG,OAAO,GAAG,KAAK,EAAE,KAAK,IAAI,mBAAmB,IAAI,IAAI,EAAE,CAAC;AAC1D,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAsC,EACtC,SAAwB;IAExB,MAAM,iBAAiB,GAAG,KAAK,EAAE,SAAS,IAAI,IAAI,CAAC;IACnD,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IACtF,MAAM,WAAW,GAAG,KAAK,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC;QAClF,CAAC,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC;QACvB,CAAC,CAAC,CAAC,CAAC;IACN,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,WAAW,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,SAAkB;IACzD,IAAI,SAAS,IAAI,IAAI,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACpE,MAAM,YAAY,GAAI,SAAwC,CAAC,YAAY,CAAC;IAC5E,IAAI,YAAY,IAAI,IAAI,IAAI,OAAO,YAAY,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1E,MAAM,CAAC,GAAG,YAAsE,CAAC;IACjF,IAAI,OAAO,CAAC,CAAC,gBAAgB,KAAK,QAAQ,IAAI,CAAC,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3F,MAAM,GAAG,GAAG,iBAAiB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,KAAK,CAAC,CAAC,gBAAgB,IAAI,GAAG,CAAC,WAAW,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;AACpE,CAAC;AAaD,iFAAiF;AACjF,MAAM,UAAU,uBAAuB,CAAC,MAA6B;IACnE,IAAI,MAAM,CAAC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,0CAA0C,EAAE,EAAE,KAAK,EAAE,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IACD,OAAO,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,KAAK,MAAM,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;AAClE,CAAC;AAOD,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAyB,EAAE,CAAC,CAAC;IACtE,WAAW,EAAE,uBAAuB;CACrC,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,UAAU,6BAA6B,CAC3C,UAAkB,EAClB,MAA6B,EAC7B,YAA+B,EAC/B,cAAuB,EACvB,IAA0B;IAE1B,IAAI,gBAAgB,GAAkB,IAAI,CAAC;IAC3C,IAAI,CAAC;QACH,gBAAgB,GAAG,sBAAsB,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;IACjG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,oDAAoD,UAAU,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,KAAK,GAAG,uBAAuB,CAAC,cAAc,CAAC,CAAC,YAAY,IAAI,IAAI,CAAC;IAC3E,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAAE,CAAC;AAC1F,CAAC"}

package/dist/verify/gate-run-registry.d.ts

@@ -0,0 +1,105 @@
+/**
+ * The gate runs a routing decision can still wait on, held in process.
+ *
+ * Two facts the review exit and the live open-work pass read before they route a
+ * verify delivery on review evidence alone (completion/review-exit-verdict-gate.ts):
+ *
+ *   - which gate runs are SELECTED BUT NOT FINISHED, per focus. The verification
+ *     tick registers every candidate the moment it selects it -- before the run
+ *     waits on the shared verification semaphore behind another focus's gate --
+ *     and ends the registration when its dispatch settles, however it settles
+ *     (a verdict, a timeout, no checkout, a delivery that left verify, a throw).
+ *     Once a run's detached checkout exists it names the commit it judges, so a
+ *     wait keyed on one commit is not held by a run judging another; until then a
+ *     registration may judge any commit on its focus (a dispatch reads HEAD only
+ *     when it starts).
+ *   - the outcome an EXPLICIT-METHOD run last recorded for its delivery. Such a run
+ *     may execute in place or render a non-deterministic verdict, and neither
+ *     writes a per-commit verdict record (verify/commit-verdict-record.ts), so its
+ *     recorded outcome is its gate verdict: a pass or a failure, at the commit it
+ *     judged, or for the delivery when it judged none. A run that rendered no
+ *     verdict leaves none, and a new selection of the delivery forgets the outcome
+ *     of the run before it -- both are remembered as "no verdict", so the durable
+ *     copy of an older outcome is not read in their place. The tick also removes
+ *     that durable copy before the selected run can start
+ *     (verify/verification-commit-sharing.ts), so a restart reads "no verdict" too.
+ *
+ * The selected runs are in process on purpose. A daemon restart abandons every
+ * selected run, and an abandoned run renders no verdict, so after a restart
+ * nothing waits on one: a toward-intent route is never stranded behind a verdict
+ * no process will render. The explicit outcomes here are only the in-process fast
+ * path: each is also written to the delivery's gate_state
+ * (verify/explicit-gate-outcome.ts), which is what routing reads after a restart,
+ * when this process has seen no explicit run for the delivery.
+ *
+ * A leaf with no imports.
+ *
+ * @module verify/gate-run-registry
+ */
+/** A candidate the verification tick selected. */
+export interface GateRunSelection {
+    deliveryId: string;
+    focusId: string | null;
+    /** An explicit-method row: its run supersedes the outcome the delivery's previous run recorded. */
+    explicit: boolean;
+}
+/** The handle a selection is ended through. Idempotent. */
+export interface GateRunRegistration {
+    end: () => void;
+}
+/** The outcome kept for an explicit-method delivery. */
+export type RecordedGateOutcome = 'passed' | 'failed';
+/** A verdict an explicit-method run rendered, the commit it applies to (null: it judged none, so it applies to any), and its gate. */
+export interface RecordedExplicitOutcome {
+    outcome: RecordedGateOutcome;
+    sha: string | null;
+    /** The gate the run applied (verify/commit-verdict-record.ts explicitGateKeyOf); absent on a record that kept none. */
+    gateKey?: string;
+}
+/** Register a candidate the tick selected; end the registration when its dispatch settles. */
+export declare function registerGateRun(selection: GateRunSelection): GateRunRegistration;
+/** Name the commit a selected run judges (its detached checkout's sha). A no-op when the delivery has no selected run. */
+export declare function noteGateRunCommit(deliveryId: string, sha: string): void;
+/**
+ * Whether a selected, unfinished gate run on the focus may judge `sha`: one that
+ * names that commit, or one that names none yet. A null `sha` (a judged commit
+ * nobody could read) matches every run on the focus.
+ */
+export declare function hasPendingGateRun(focusId: string, sha: string | null): boolean;
+/** Whether a gate run for the delivery is selected and not yet finished (verify/explicit-rearm.ts selects no second one). */
+export declare function isGateRunSelected(deliveryId: string): boolean;
+/**
+ * The verdict a run's result renders: a pass or a failure, at its judged commit
+ * when that is a well-formed sha, else for no commit, under the gate the run
+ * applied (`gateKey`); null for any other outcome (no verdict). The one rule the
+ * in-process record and the durable one (verify/explicit-gate-outcome.ts) both
+ * apply. Pure.
+ */
+export declare function explicitGateOutcomeOf(result: {
+    outcome: string;
+    verifiedSha?: string;
+}, gateKey?: string): RecordedExplicitOutcome | null;
+/** Note the run id a selected explicit candidate's selection named, so its verdict is recorded as that run's. */
+export declare function noteExplicitRunId(candidate: object, runId: string): void;
+/** The run id the candidate's selection named, or undefined when none did. */
+export declare function explicitRunIdOf(candidate: object): string | undefined;
+/** Record the outcome an explicit-method run rendered under the gate it applied (see the module header for what is kept). */
+export declare function recordExplicitGateOutcome(deliveryId: string, result: {
+    outcome: string;
+    verifiedSha?: string;
+}, gateKey?: string): void;
+/**
+ * What this process knows about the delivery's explicit-method verdict: the
+ * verdict its latest run rendered, null for "no verdict" (a selection since, or a
+ * run that rendered none), or undefined when this process has seen no explicit run
+ * for the delivery -- the durable record is then the one to read.
+ */
+export declare function readLiveExplicitGateOutcome(deliveryId: string): RecordedExplicitOutcome | null | undefined;
+/**
+ * The outcome an explicit-method run recorded for the delivery in this process when
+ * it applies to `sha` -- the run judged that commit, or judged none -- else null.
+ */
+export declare function readExplicitGateOutcome(deliveryId: string, sha: string | null): RecordedGateOutcome | null;
+/** Test seam: forget every selected run and recorded outcome. */
+export declare function __resetGateRunRegistryForTests(): void;
+//# sourceMappingURL=gate-run-registry.d.ts.map

package/dist/verify/gate-run-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-run-registry.d.ts","sourceRoot":"","sources":["../../src/verify/gate-run-registry.ts"],"names":[],"mappings":"AAgBA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,kDAAkD;AAClD,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,mGAAmG;IACnG,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,2DAA2D;AAC3D,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,IAAI,CAAC;CACjB;AAED,wDAAwD;AACxD,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAStD,sIAAsI;AACtI,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,mBAAmB,CAAC;IAC7B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,uHAAuH;IACvH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAQD,8FAA8F;AAC9F,wBAAgB,eAAe,CAAC,SAAS,EAAE,gBAAgB,GAAG,mBAAmB,CAShF;AAED,0HAA0H;AAC1H,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAIvE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAK9E;AAED,6HAA6H;AAC7H,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAK7D;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,uBAAuB,GAAG,IAAI,CAKzI;AAKD,iHAAiH;AACjH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAExE;AAED,8EAA8E;AAC9E,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAErE;AAED,6HAA6H;AAC7H,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAEvI;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,uBAAuB,GAAG,IAAI,GAAG,SAAS,CAE1G;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,mBAAmB,GAAG,IAAI,CAI1G;AAED,iEAAiE;AACjE,wBAAgB,8BAA8B,IAAI,IAAI,CAGrD"}

package/dist/verify/gate-run-registry.js

@@ -0,0 +1,111 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/completion/commit-verdict-release.test.ts,
+//   packages/daemon/src/focus/listener-product-poll.test.ts,
+//   packages/daemon/src/focus/verify-routing-passes.test.ts,
+//   packages/daemon/src/integration/delivery-gate-write-interleaving.test.ts,
+//   packages/daemon/src/integration/explicit-gate-identity-unreadable.test.ts,
+//   packages/daemon/src/integration/explicit-gate-outcome-restart.test.ts,
+//   packages/daemon/src/integration/explicit-verdict-departure-during-removal.test.ts,
+//   packages/daemon/src/integration/explicit-verdict-invalidation-restart.test.ts,
+//   packages/daemon/src/integration/explicit-verdict-reuse.test.ts,
+//   packages/daemon/src/integration/focus-commit-verdict-scenario.test.ts,
+//   packages/daemon/src/integration/review-rework-resume-verdict.test.ts,
+//   packages/daemon/src/verify/explicit-run-ledger.test.ts,
+//   packages/daemon/src/verify/verification-commit-sharing.test.ts
+// PINNED-BY-END
+const SHA_RE = /^[0-9a-f]{7,64}$/i;
+const selectedRuns = new Set();
+/** Per delivery this process has seen an explicit run for: its verdict, or null for "no verdict" (see the module header). */
+const explicitOutcomes = new Map();
+/** Register a candidate the tick selected; end the registration when its dispatch settles. */
+export function registerGateRun(selection) {
+    const run = { deliveryId: selection.deliveryId, focusId: selection.focusId, sha: null };
+    selectedRuns.add(run);
+    if (selection.explicit)
+        explicitOutcomes.set(selection.deliveryId, null);
+    return {
+        end: () => {
+            selectedRuns.delete(run);
+        },
+    };
+}
+/** Name the commit a selected run judges (its detached checkout's sha). A no-op when the delivery has no selected run. */
+export function noteGateRunCommit(deliveryId, sha) {
+    for (const run of selectedRuns) {
+        if (run.deliveryId === deliveryId)
+            run.sha = sha;
+    }
+}
+/**
+ * Whether a selected, unfinished gate run on the focus may judge `sha`: one that
+ * names that commit, or one that names none yet. A null `sha` (a judged commit
+ * nobody could read) matches every run on the focus.
+ */
+export function hasPendingGateRun(focusId, sha) {
+    for (const run of selectedRuns) {
+        if (run.focusId === focusId && (run.sha === null || sha === null || run.sha === sha))
+            return true;
+    }
+    return false;
+}
+/** Whether a gate run for the delivery is selected and not yet finished (verify/explicit-rearm.ts selects no second one). */
+export function isGateRunSelected(deliveryId) {
+    for (const run of selectedRuns) {
+        if (run.deliveryId === deliveryId)
+            return true;
+    }
+    return false;
+}
+/**
+ * The verdict a run's result renders: a pass or a failure, at its judged commit
+ * when that is a well-formed sha, else for no commit, under the gate the run
+ * applied (`gateKey`); null for any other outcome (no verdict). The one rule the
+ * in-process record and the durable one (verify/explicit-gate-outcome.ts) both
+ * apply. Pure.
+ */
+export function explicitGateOutcomeOf(result, gateKey) {
+    const { outcome } = result;
+    if (outcome !== 'passed' && outcome !== 'failed')
+        return null;
+    const sha = typeof result.verifiedSha === 'string' && SHA_RE.test(result.verifiedSha) ? result.verifiedSha : null;
+    return { outcome, sha, ...(gateKey !== undefined ? { gateKey } : {}) };
+}
+/** The run id each selected explicit candidate was named (verify/explicit-run-ledger.ts), keyed by the candidate itself. */
+const explicitRunIds = new WeakMap();
+/** Note the run id a selected explicit candidate's selection named, so its verdict is recorded as that run's. */
+export function noteExplicitRunId(candidate, runId) {
+    explicitRunIds.set(candidate, runId);
+}
+/** The run id the candidate's selection named, or undefined when none did. */
+export function explicitRunIdOf(candidate) {
+    return explicitRunIds.get(candidate);
+}
+/** Record the outcome an explicit-method run rendered under the gate it applied (see the module header for what is kept). */
+export function recordExplicitGateOutcome(deliveryId, result, gateKey) {
+    explicitOutcomes.set(deliveryId, explicitGateOutcomeOf(result, gateKey));
+}
+/**
+ * What this process knows about the delivery's explicit-method verdict: the
+ * verdict its latest run rendered, null for "no verdict" (a selection since, or a
+ * run that rendered none), or undefined when this process has seen no explicit run
+ * for the delivery -- the durable record is then the one to read.
+ */
+export function readLiveExplicitGateOutcome(deliveryId) {
+    return explicitOutcomes.get(deliveryId);
+}
+/**
+ * The outcome an explicit-method run recorded for the delivery in this process when
+ * it applies to `sha` -- the run judged that commit, or judged none -- else null.
+ */
+export function readExplicitGateOutcome(deliveryId, sha) {
+    const recorded = explicitOutcomes.get(deliveryId);
+    if (!recorded)
+        return null;
+    return recorded.sha === null || recorded.sha === sha ? recorded.outcome : null;
+}
+/** Test seam: forget every selected run and recorded outcome. */
+export function __resetGateRunRegistryForTests() {
+    selectedRuns.clear();
+    explicitOutcomes.clear();
+}
+//# sourceMappingURL=gate-run-registry.js.map

package/dist/verify/gate-run-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-run-registry.js","sourceRoot":"","sources":["../../src/verify/gate-run-registry.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,4EAA4E;AAC5E,6DAA6D;AAC7D,6DAA6D;AAC7D,8EAA8E;AAC9E,+EAA+E;AAC/E,2EAA2E;AAC3E,uFAAuF;AACvF,mFAAmF;AACnF,oEAAoE;AACpE,2EAA2E;AAC3E,0EAA0E;AAC1E,4DAA4D;AAC5D,mEAAmE;AACnE,gBAAgB;AAwEhB,MAAM,MAAM,GAAG,mBAAmB,CAAC;AAEnC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAe,CAAC;AAC5C,6HAA6H;AAC7H,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA0C,CAAC;AAE3E,8FAA8F;AAC9F,MAAM,UAAU,eAAe,CAAC,SAA2B;IACzD,MAAM,GAAG,GAAgB,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACrG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,SAAS,CAAC,QAAQ;QAAE,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACzE,OAAO;QACL,GAAG,EAAE,GAAG,EAAE;YACR,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,0HAA0H;AAC1H,MAAM,UAAU,iBAAiB,CAAC,UAAkB,EAAE,GAAW;IAC/D,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,GAAG,CAAC,UAAU,KAAK,UAAU;YAAE,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC;IACnD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,GAAkB;IACnE,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACpG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6HAA6H;AAC7H,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,GAAG,CAAC,UAAU,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAiD,EAAE,OAAgB;IACvG,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC3B,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC9D,MAAM,GAAG,GAAG,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IAClH,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACzE,CAAC;AAED,4HAA4H;AAC5H,MAAM,cAAc,GAAG,IAAI,OAAO,EAAkB,CAAC;AAErD,iHAAiH;AACjH,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,KAAa;IAChE,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,SAAiB;IAC/C,OAAO,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AACvC,CAAC;AAED,6HAA6H;AAC7H,MAAM,UAAU,yBAAyB,CAAC,UAAkB,EAAE,MAAiD,EAAE,OAAgB;IAC/H,gBAAgB,CAAC,GAAG,CAAC,UAAU,EAAE,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,UAAkB;IAC5D,OAAO,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAkB,EAAE,GAAkB;IAC5E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO,QAAQ,CAAC,GAAG,KAAK,IAAI,IAAI,QAAQ,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACjF,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,8BAA8B;IAC5C,YAAY,CAAC,KAAK,EAAE,CAAC;IACrB,gBAAgB,CAAC,KAAK,EAAE,CAAC;AAC3B,CAAC"}

package/dist/verify/gate-verdict-source.d.ts

@@ -0,0 +1,68 @@
+import { type GateVerdictSummary, type JudgedCommit } from '../queries/delivery-gate-state.js';
+import { type CommitVerdict } from './commit-verdict-record.js';
+/** The slice of a deterministic StrategyResult a verdict is derived from. */
+export interface GateRunVerdictSource {
+    outcome?: string;
+    exitCode?: number | null;
+    timedOut?: boolean;
+    checkoutUnavailable?: boolean;
+    configUnresolved?: boolean;
+    verifiedSha?: string;
+    failedStage?: string;
+    preExistingStages?: string[];
+}
+/** The commit a run judged (its well-formed verifiedSha), or null for a run that judged none. Pure. */
+export declare function judgedShaOfRun(run: Pick<GateRunVerdictSource, 'verifiedSha'>): string | null;
+/** The verdict a finished deterministic run rendered for its commit, or null when it rendered none. Pure. */
+export declare function gateVerdictFromRun(run: GateRunVerdictSource): GateVerdictSummary | null;
+/** The summary of a durable commit verdict. Pure. */
+export declare function gateVerdictFromCommitVerdict(verdict: CommitVerdict): GateVerdictSummary;
+/** Injected IO for the judged-commit read; the default reaches the record store. */
+export interface JudgedCommitVerdictDeps {
+    readVerdict: (productId: string, focusId: string, sha: string) => CommitVerdict | null;
+}
+/** Which judged commit to read: the exact sha a run judged, on its product + focus. */
+export interface JudgedCommitTarget {
+    productId?: string | null;
+    focusId?: string | null;
+    sha?: string | null;
+}
+/**
+ * The recorded gate verdict for exactly the judged commit `target.sha`, or null
+ * (no product/focus, no or malformed sha, no record). Never resolves HEAD and
+ * never throws: a message that cannot read the verdict still goes out, just
+ * without the section.
+ */
+export declare function readJudgedCommitGateVerdict(target: JudgedCommitTarget, deps?: Partial<JudgedCommitVerdictDeps>): GateVerdictSummary | null;
+/**
+ * The recorded verdict for the commit a re-work's run judged, through the
+ * re-work's reader, or null when the run judged none (the reader is then not
+ * asked: no sha is never "the HEAD").
+ */
+export declare function readJudgedVerdictFor(d: {
+    readGateVerdict: (target: JudgedCommitTarget) => GateVerdictSummary | null;
+}, v: {
+    productId?: string | null;
+    focusId?: string | null;
+}, judgedSha: string | null): GateVerdictSummary | null;
+/** A focus delivery as the resume path reads it. */
+export interface JudgedDeliveryRow {
+    executionStatus?: string | null;
+    gateState?: unknown;
+}
+/**
+ * The live (not done, not cancelled) delivery carrying the most recent judged
+ * commit stamped on its gate_state, with that judged commit, or null when none
+ * carries one. The delivery is what the resume resolves its own gate for. Pure.
+ */
+export declare function latestJudgedDelivery<T extends JudgedDeliveryRow>(deliveries: readonly T[]): {
+    delivery: T;
+    judged: JudgedCommit;
+} | null;
+/**
+ * The most recent judged commit stamped on a live delivery's gate_state
+ * (latestJudgedDelivery), or null. What a resumed focus session is shown the
+ * verdict for. Pure.
+ */
+export declare function latestJudgedCommit(deliveries: readonly JudgedDeliveryRow[]): JudgedCommit | null;
+//# sourceMappingURL=gate-verdict-source.d.ts.map

package/dist/verify/gate-verdict-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-verdict-source.d.ts","sourceRoot":"","sources":["../../src/verify/gate-verdict-source.ts"],"names":[],"mappings":"AA4CA,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,YAAY,EAClB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAqB,KAAK,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAMnF,6EAA6E;AAC7E,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAMD,uGAAuG;AACvG,wBAAgB,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,oBAAoB,EAAE,aAAa,CAAC,GAAG,MAAM,GAAG,IAAI,CAG5F;AAED,6GAA6G;AAC7G,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,oBAAoB,GAAG,kBAAkB,GAAG,IAAI,CAiBvF;AAED,qDAAqD;AACrD,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,aAAa,GAAG,kBAAkB,CAOvF;AAED,oFAAoF;AACpF,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,aAAa,GAAG,IAAI,CAAC;CACxF;AAMD,uFAAuF;AACvF,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,kBAAkB,EAC1B,IAAI,GAAE,OAAO,CAAC,uBAAuB,CAAM,GAC1C,kBAAkB,GAAG,IAAI,CAW3B;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,CAAC,EAAE;IAAE,eAAe,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,kBAAkB,GAAG,IAAI,CAAA;CAAE,EACjF,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,EACzD,SAAS,EAAE,MAAM,GAAG,IAAI,GACvB,kBAAkB,GAAG,IAAI,CAE3B;AAED,oDAAoD;AACpD,MAAM,WAAW,iBAAiB;IAChC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAKD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,iBAAiB,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,GAAG;IAAE,QAAQ,EAAE,CAAC,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE,GAAG,IAAI,CAQxI;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,SAAS,iBAAiB,EAAE,GAAG,YAAY,GAAG,IAAI,CAEhG"}

package/dist/verify/gate-verdict-source.js

@@ -0,0 +1,143 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/verify/gate-verdict-source.test.ts,
+//   packages/daemon/src/verify/rework-judgment.test.ts,
+//   packages/daemon/src/verify/verification-feedback.test.ts,
+//   packages/daemon/src/verify/verify-evidence-unavailable.test.ts
+// PINNED-BY-END
+/**
+ * Where the gate verdict a team is shown comes from.
+ *
+ * One shape (GateVerdictSummary), always for the commit a run JUDGED -- never
+ * for whatever the focus worktree HEAD is when the message is built. Commit B can
+ * land while commit A is being judged; a message about A that re-resolved HEAD
+ * would omit A's verdict or report B's.
+ *
+ *   - the RUN in hand. The deterministic-failure feedback holds the StrategyResult
+ *     and derives the verdict from it by the same rule the durable record uses
+ *     (commit-verdict-record.buildCommitVerdict): no verdict for a timeout, an
+ *     unavailable checkout, an unresolved config, or a run with no judged commit.
+ *   - the durable RECORD for the judged sha. The shortfall and evidence-unavailable
+ *     re-work are handed the sha of the run that judged them (judgedShaOfRun) and
+ *     that run's own verdict (verify/rework-judgment.ts runVerdictOf); only a
+ *     writer handed no run reads the record by exactly that sha.
+ *   - the JUDGED COMMIT a re-work stamped. The resume delta holds no run, so it
+ *     reads the judged commit the latest re-work stamped on a live delivery's
+ *     gate_state (latestJudgedDelivery) -- a verification re-work's, or a
+ *     verify_failed route for review-filed work (the review exit, or the live
+ *     open-work pass; completion/review-exit-verdict-gate.ts). Every writer
+ *     persists the delivery's OWN verdict beside that sha (a verification
+ *     re-work: its run's; a review-filed route: its own-gate read), and the
+ *     resume shows it. A stamp that carries none is resolved under THAT
+ *     delivery's own gate (spawn/prompt-assembly.ts, through the review exit's
+ *     own-gate reads), never by a gate-less record read: one commit can carry
+ *     several gates' verdicts, and a sibling gate's must not answer. No judged
+ *     sha, or no own-gate verdict for it, is no verdict: the message omits the
+ *     section rather than guessing.
+ *
+ * Rendering lives in prompt-sections/gate-verdict-section.ts.
+ *
+ * @module gate-verdict-source
+ */
+import { DELIVERY_STATUS } from '@telora/daemon-core';
+import { createLogger } from '../shell/log.js';
+import { readVerificationHistory, } from '../queries/delivery-gate-state.js';
+import { readCommitVerdict } from './commit-verdict-record.js';
+const log = createLogger({ module: 'verification' });
+const SHA_RE = /^[0-9a-f]{7,64}$/i;
+function carriedStages(stages) {
+    return stages && stages.length > 0 ? { preExistingStages: [...stages] } : {};
+}
+/** The commit a run judged (its well-formed verifiedSha), or null for a run that judged none. Pure. */
+export function judgedShaOfRun(run) {
+    const sha = run.verifiedSha;
+    return typeof sha === 'string' && SHA_RE.test(sha) ? sha : null;
+}
+/** The verdict a finished deterministic run rendered for its commit, or null when it rendered none. Pure. */
+export function gateVerdictFromRun(run) {
+    if (run.timedOut || run.checkoutUnavailable || run.configUnresolved)
+        return null;
+    const sha = judgedShaOfRun(run);
+    if (sha === null)
+        return null;
+    // Exit 0 is the gate command passing: the strategy never reports 'failed' at
+    // exit 0 itself, so a failed outcome at exit 0 was demoted AFTER the gate by a
+    // per-delivery check (the security verify-closed gate) -- not the commit's
+    // verdict. A non-zero exit whose reds all pre-exist was demoted to 'passed' by
+    // attribution, and that pass IS what the record holds for the commit.
+    const passed = run.exitCode === 0 || run.outcome === 'passed';
+    if (!passed && (run.outcome !== 'failed' || typeof run.exitCode !== 'number'))
+        return null;
+    return {
+        outcome: passed ? 'passed' : 'failed',
+        sha,
+        ...(!passed && run.failedStage ? { failedStage: run.failedStage } : {}),
+        ...carriedStages(run.preExistingStages),
+    };
+}
+/** The summary of a durable commit verdict. Pure. */
+export function gateVerdictFromCommitVerdict(verdict) {
+    return {
+        outcome: verdict.outcome,
+        sha: verdict.sha,
+        ...(verdict.outcome === 'failed' && verdict.failedStage ? { failedStage: verdict.failedStage } : {}),
+        ...carriedStages(verdict.preExistingStages),
+    };
+}
+const defaultJudgedCommitVerdictDeps = () => ({
+    readVerdict: (productId, focusId, sha) => readCommitVerdict(productId, focusId, sha),
+});
+/**
+ * The recorded gate verdict for exactly the judged commit `target.sha`, or null
+ * (no product/focus, no or malformed sha, no record). Never resolves HEAD and
+ * never throws: a message that cannot read the verdict still goes out, just
+ * without the section.
+ */
+export function readJudgedCommitGateVerdict(target, deps = {}) {
+    const { productId, focusId, sha } = target;
+    if (!productId || !focusId || !sha || !SHA_RE.test(sha))
+        return null;
+    const d = { ...defaultJudgedCommitVerdictDeps(), ...deps };
+    try {
+        const verdict = d.readVerdict(productId, focusId, sha);
+        return verdict ? gateVerdictFromCommitVerdict(verdict) : null;
+    }
+    catch (err) {
+        log.debug(`[verification] judged-commit verdict read failed for ${focusId}@${sha.slice(0, 8)}:`, err.message);
+        return null;
+    }
+}
+/**
+ * The recorded verdict for the commit a re-work's run judged, through the
+ * re-work's reader, or null when the run judged none (the reader is then not
+ * asked: no sha is never "the HEAD").
+ */
+export function readJudgedVerdictFor(d, v, judgedSha) {
+    return judgedSha ? d.readGateVerdict({ productId: v.productId, focusId: v.focusId, sha: judgedSha }) : null;
+}
+/** Deliveries whose judgment no longer describes work a resumed team is doing. */
+const SETTLED_STATUSES = new Set([DELIVERY_STATUS.DONE, DELIVERY_STATUS.CANCELLED]);
+/**
+ * The live (not done, not cancelled) delivery carrying the most recent judged
+ * commit stamped on its gate_state, with that judged commit, or null when none
+ * carries one. The delivery is what the resume resolves its own gate for. Pure.
+ */
+export function latestJudgedDelivery(deliveries) {
+    let latest = null;
+    for (const delivery of deliveries) {
+        if (delivery.executionStatus && SETTLED_STATUSES.has(delivery.executionStatus))
+            continue;
+        const judged = readVerificationHistory(delivery.gateState).judgedCommit;
+        if (judged && (latest === null || judged.judgedAt > latest.judged.judgedAt))
+            latest = { delivery, judged };
+    }
+    return latest;
+}
+/**
+ * The most recent judged commit stamped on a live delivery's gate_state
+ * (latestJudgedDelivery), or null. What a resumed focus session is shown the
+ * verdict for. Pure.
+ */
+export function latestJudgedCommit(deliveries) {
+    return latestJudgedDelivery(deliveries)?.judged ?? null;
+}
+//# sourceMappingURL=gate-verdict-source.js.map