@telora/daemon 0.22.132 → 0.22.136

package/dist/completion/review-approved-head-gate.js

@@ -0,0 +1,124 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/completion/review-approved-head-gate.test.ts,
+//   packages/daemon/src/integration/approved-head-gate-failure-respawn-regression.test.ts,
+//   packages/daemon/src/integration/approved-head-hold-release-regression.test.ts,
+//   packages/daemon/src/integration/fully-merged-focus-sibling-red-scenario.test.ts,
+//   packages/daemon/src/integration/shortfall-ruling-disposes-proposals-regression.test.ts,
+//   packages/daemon/src/integration/standing-approval-release-regression.test.ts
+// PINNED-BY-END
+/**
+ * Review runs once per distinct focus head: an unchanged head since the focus's
+ * current approval draws no new review window.
+ *
+ * checkAutoReview (state-cascade.ts) opens the review window when a focus
+ * converges on verify. Its only in-memory backoff is a signature over the delivery
+ * aggregate (status, updated_at, merge commit, git state) -- and a verify delivery
+ * held by a repeating shortfall has its gate_state rewritten every pass, which
+ * bumps updated_at and invalidates that signature. Each rewrite re-opened the
+ * window at the SAME focus head, a review team spawned, and it approved the same
+ * commit again: daemon 0.22.132 stamped 9 approvals in ~40 minutes at one
+ * reviewedSha.
+ *
+ * The approval that makes a re-review pointless is the one the merge gate already
+ * reads (queries/focus-review-approval.ts readLatestApprovedReviewSha): the newest
+ * CURRENT approval -- an approved focus_reviews row or a recorded clean
+ * full-coverage auto-approval (completion/review-auto-approval-record.ts) -- which
+ * a newer gaps_found review of the same commit revokes. The head is the focus
+ * branch tip a review spawn would pin as its coverage anchor (focus-executor.ts
+ * captureReviewSpawnCoverage resolves the branch ref; a review spawn skips the
+ * rebase, and worktrees share the repo's refs).
+ *
+ * So the window is declined only when the head and the current approval are both
+ * KNOWN and name the same commit. A new commit on the focus, a newer gaps_found at
+ * that commit (approval revoked -> null), or no approval at all leaves review
+ * eligible exactly as before.
+ *
+ * FAILS OPEN: an unresolvable head, an unreadable review history, or a thrown read
+ * lets the window open. A missed skip costs one review pass; a false skip would
+ * strand a verify delivery that still needs its verdict.
+ *
+ * NO SAME-HEAD EXCEPTION: a verify delivery that becomes closable at the approved
+ * head with no new commit (a ruling released its shortfall park and verify then
+ * passed) does NOT re-open the window -- that re-ran review and stamped another
+ * approval of the unchanged commit. It converges on the STANDING approval instead
+ * (completion/standing-approval-convergence.ts), through the review exit's own
+ * holds, with no review run and no approval written.
+ *
+ * @module completion/review-approved-head-gate
+ */
+import { resolveRef as defaultResolveRef } from '../git/index.js';
+import { readLatestApprovedReviewSha, sameCommit } from '../queries/focus-review-approval.js';
+import { listReviewAutoApprovals } from './review-auto-approval-record.js';
+import { isForeignOnlyExtension } from '../git/focus-own-delta.js';
+import { getFocusDeliveries } from '../queries/focuses.js';
+import { createLogger } from '../shell/log.js';
+const log = createLogger({ module: 'state-cascade' });
+/**
+ * The production ownership proof: `repoPath` is the product checkout (its HEAD is
+ * not the focus branch), so provenance is read from the NAMED focus branch, with the
+ * focus's delivery ids from `listDeliveryIds` (the product-api by default).
+ */
+export function makeHeadAddsNoOwnWork(listDeliveryIds = async (focusId) => (await getFocusDeliveries(focusId)).map((d) => d.id)) {
+    return async (target, approved, head) => isForeignOnlyExtension(target.repoPath, target.integrationBranch, approved, head, new Set(await listDeliveryIds(target.focusId)), { focusBranch: target.branchName ?? undefined });
+}
+const defaultReadDeps = {
+    resolveRef: defaultResolveRef,
+    readApprovedReviewSha: (target) => readLatestApprovedReviewSha(target.focusId, {
+        autoApprovals: listReviewAutoApprovals(target.productId, target.focusId),
+    }),
+    addsNoOwnWork: makeHeadAddsNoOwnWork(),
+};
+/**
+ * Read the focus head and its current approval. The approval is read only once
+ * the head resolves (with no head there is nothing to compare, so the product-api
+ * call is skipped). Throws when the approval read throws.
+ */
+export async function readReviewHeadApproval(target, deps = defaultReadDeps) {
+    const headSha = target.branchName ? deps.resolveRef(target.repoPath, target.branchName) : null;
+    if (!headSha)
+        return { headSha: null, approvedSha: null };
+    const approvedSha = await deps.readApprovedReviewSha(target);
+    const { integrationBranch } = target;
+    if (approvedSha && integrationBranch && deps.addsNoOwnWork && !sameCommit(headSha, approvedSha)) {
+        // A focus whose commits are all on integration, moved past its approved commit
+        // only by other foci's commits, has no own work to review: its OWN head is the
+        // approved commit. Unprovable (or a failed read) keeps the branch tip.
+        const noOwnWork = await deps.addsNoOwnWork({ ...target, integrationBranch }, approvedSha, headSha).catch(() => false);
+        if (noOwnWork) {
+            log.info(`[state-cascade] Focus ${target.focusId}: head ${headSha.slice(0, 12)} adds only other foci's commits (already on ` +
+                `integration) to its approved commit ${approvedSha.slice(0, 12)} -- read as that approved head, no review over them`);
+            return { headSha: approvedSha, approvedSha };
+        }
+    }
+    return { headSha, approvedSha };
+}
+/** Whether the focus head is the commit its current approval already judged. Pure. */
+export function isHeadAlreadyApproved(read) {
+    return read.headSha !== null && read.approvedSha !== null && sameCommit(read.headSha, read.approvedSha);
+}
+/**
+ * Whether checkAutoReview must decline to open the review window because the focus
+ * head is unchanged since its current approval. Logs the decline (info). Fails
+ * OPEN: an absent reader, an unknown head or approval, or a thrown read returns
+ * false (a thrown read is logged at warn).
+ */
+export async function declinesReviewAtApprovedHead(focusId, read) {
+    if (!read)
+        return false;
+    let result;
+    try {
+        result = await read(focusId);
+    }
+    catch (err) {
+        log.warn(`[state-cascade] Could not read the approved review head for focus ${focusId}; ` +
+            `opening the review window as before: ${err.message}`);
+        return false;
+    }
+    if (!isHeadAlreadyApproved(result))
+        return false;
+    log.info(`[state-cascade] Not opening a review window on focus ${focusId}: its head ` +
+        `${(result.headSha ?? '').slice(0, 12)} is the commit its current approval already judged ` +
+        `-- review runs once per distinct focus head.`);
+    return true;
+}
+//# sourceMappingURL=review-approved-head-gate.js.map

package/dist/completion/review-approved-head-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-approved-head-gate.js","sourceRoot":"","sources":["../../src/completion/review-approved-head-gate.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,+EAA+E;AAC/E,2FAA2F;AAC3F,mFAAmF;AACnF,qFAAqF;AACrF,4FAA4F;AAC5F,iFAAiF;AACjF,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAE,UAAU,IAAI,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,2BAA2B,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AAC9F,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;AAkCtD;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,kBAAmE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAE1I,OAAO,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAC7D,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,iBAAiB,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,MAAM,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EACzG,EAAE,WAAW,EAAE,MAAM,CAAC,UAAU,IAAI,SAAS,EAAE,CAChD,CAAC;AACJ,CAAC;AAED,MAAM,eAAe,GAA+B;IAClD,UAAU,EAAE,iBAAiB;IAC7B,qBAAqB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,2BAA2B,CAAC,MAAM,CAAC,OAAO,EAAE;QAC7E,aAAa,EAAE,uBAAuB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC;KACzE,CAAC;IACF,aAAa,EAAE,qBAAqB,EAAE;CACvC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAgC,EAChC,OAAmC,eAAe;IAElD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/F,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC1D,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAAC;IACrC,IAAI,WAAW,IAAI,iBAAiB,IAAI,IAAI,CAAC,aAAa,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;QAChG,+EAA+E;QAC/E,+EAA+E;QAC/E,uEAAuE;QACvE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,GAAG,MAAM,EAAE,iBAAiB,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACtH,IAAI,SAAS,EAAE,CAAC;YACd,GAAG,CAAC,IAAI,CACN,yBAAyB,MAAM,CAAC,OAAO,UAAU,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,8CAA8C;gBACnH,uCAAuC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,qDAAqD,CACrH,CAAC;YACF,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;QAC/C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,qBAAqB,CAAC,IAAwB;IAC5D,OAAO,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;AAC1G,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OAAe,EACf,IAAoE;IAEpE,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,MAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CACN,qEAAqE,OAAO,IAAI;YAChF,wCAAyC,GAAa,CAAC,OAAO,EAAE,CACjE,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,GAAG,CAAC,IAAI,CACN,wDAAwD,OAAO,aAAa;QAC5E,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,qDAAqD;QAC3F,8CAA8C,CAC/C,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/completion/review-census-record.d.ts

@@ -0,0 +1,52 @@
+/** A delivery a census saw in verify. */
+export interface CensusDelivery {
+    id: string;
+    iterationCount: number;
+}
+/** One review exit's census of a focus commit. */
+export interface ReviewCensus {
+    productId: string;
+    focusId: string;
+    /** The commit the review covered (its spawn tip, else its exit tip). */
+    sha: string;
+    sessionId: string;
+    /** Whether the exit's own verdict approved `sha` (an approved report, or a clean full-coverage inspected exit). */
+    approving: boolean;
+    /** The deliveries in verify when the exit ran, each with its re-code iteration count then. */
+    verifyDeliveries: CensusDelivery[];
+    recordedAt: string;
+}
+/** Record a census atomically, replacing the commit's previous one. Best-effort: false (and logged) on a malformed sha or a failed write. */
+export declare function writeReviewCensus(census: ReviewCensus, dir?: string): boolean;
+/** Every census recorded for the focus, newest first. Empty when none can be read: a missing census covers nothing. */
+export declare function listReviewCensuses(productId: string, focusId: string, dir?: string): ReviewCensus[];
+/** The review-exit facts a census is taken from (a structural slice of the exit's params + derived evidence). */
+export interface ReviewExitCensusInput {
+    productId: string;
+    focusId: string;
+    sessionId: string;
+    sessionType: 'coding' | 'review';
+    succeeded: boolean;
+    reviewInspected?: boolean;
+    windowOpen: boolean;
+    coveredSha: string | null;
+    coverageComplete: boolean;
+    reportExists: boolean;
+    reviewOutcome: 'approved' | 'gaps_found' | null;
+    deliveries: ReadonlyArray<{
+        id: string;
+        executionStatus?: string | null;
+        iterationCount?: number | null;
+    }>;
+}
+/**
+ * Take the census of a review exit (see the module header). Only a REVIEW session
+ * exiting with its window open and a known covered commit judges anything; any
+ * other exit records nothing. The exit approves the commit when its report says
+ * approved, or when it is a clean (no report), succeeded, inspected,
+ * coverage-complete review -- the two shapes that approve a commit
+ * (queries/focus-review-approval.ts). No-op without a writer (a partial test deps
+ * object). Never throws.
+ */
+export declare function recordReviewExitCensus(write: ((census: ReviewCensus) => boolean) | undefined, input: ReviewExitCensusInput): void;
+//# sourceMappingURL=review-census-record.d.ts.map

package/dist/completion/review-census-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-census-record.d.ts","sourceRoot":"","sources":["../../src/completion/review-census-record.ts"],"names":[],"mappings":"AAkDA,yCAAyC;AACzC,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,kDAAkD;AAClD,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,wEAAwE;IACxE,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,mHAAmH;IACnH,SAAS,EAAE,OAAO,CAAC;IACnB,8FAA8F;IAC9F,gBAAgB,EAAE,cAAc,EAAE,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC;CACpB;AA8BD,6IAA6I;AAC7I,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,GAAE,MAAoB,GAAG,OAAO,CAa1F;AAED,uHAAuH;AACvH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,GAAE,MAAoB,GAAG,YAAY,EAAE,CAkBhH;AAED,iHAAiH;AACjH,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACjC,SAAS,EAAE,OAAO,CAAC;IACnB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,UAAU,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,UAAU,GAAG,YAAY,GAAG,IAAI,CAAC;IAChD,UAAU,EAAE,aAAa,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;CAC5G;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,YAAY,KAAK,OAAO,CAAC,GAAG,SAAS,EACtD,KAAK,EAAE,qBAAqB,GAC3B,IAAI,CAkBN"}

package/dist/completion/review-census-record.js

@@ -0,0 +1,145 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/completion/standing-approval-convergence.test.ts,
+//   packages/daemon/src/focus/unchanged-reviewed-head.test.ts,
+//   packages/daemon/src/integration/approved-head-hold-release-regression.test.ts,
+//   packages/daemon/src/integration/failed-verdict-review-exit-respawn-regression.test.ts,
+//   packages/daemon/src/integration/failed-verdict-review-loop-regression.test.ts,
+//   packages/daemon/src/integration/shortfall-ruling-disposes-proposals-regression.test.ts,
+//   packages/daemon/src/integration/standing-approval-release-regression.test.ts
+// PINNED-BY-END
+/**
+ * Which verify deliveries a review exit saw at the commit it covered, and whether
+ * that exit's own verdict approved the commit -- recorded durably.
+ *
+ * Review runs once per distinct focus head (completion/review-approved-head-gate.ts),
+ * so a verify delivery that becomes closable at an ALREADY-APPROVED head (a ruling
+ * released its shortfall park and verify then passed, with no new commit) converges
+ * on the standing approval instead of drawing another review
+ * (completion/standing-approval-convergence.ts). That is honest only for a delivery
+ * the approving review actually judged. The approval read names a commit, not the
+ * deliveries it judged, and no delivery read carries when it reached verify -- so a
+ * delivery that reached verify AFTER the approval at the same head (work that
+ * committed nothing) would be indistinguishable from one the review held. This
+ * record is the distinguishing fact: the review exit writes the verify deliveries
+ * it saw (with each one's re-code iteration count), the commit it covered and
+ * whether its verdict approved that commit. The iteration count is what makes the
+ * census about THAT pass of the delivery: org_nodes.iteration_count climbs on every
+ * verify_failed re-code cycle, so a delivery the exit (or anything after it) sent
+ * back to coding returns to verify with a different count and is no longer covered.
+ *
+ * One file per (product, focus, sha) under the global state dir, written atomically
+ * (temp + rename) and OVERWRITTEN by each later review exit covering the same
+ * commit: only the newest exit's census speaks for the commit, so a gaps_found exit
+ * after an approving one withdraws it, and a re-approval that no longer saw a
+ * delivery in verify does not carry an older census for it. A record that is
+ * missing, unreadable or malformed covers nothing (the convergence leaves the
+ * delivery in verify -- the safe direction). Host-local like the auto-approval
+ * record (completion/review-auto-approval-record.ts).
+ *
+ * @module completion/review-census-record
+ */
+import { DELIVERY_STATUS } from '@telora/daemon-core';
+import { mkdirSync, readdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { resolveGlobalStateDir } from '../shell/daemon-process.js';
+import { createLogger } from '../shell/log.js';
+const log = createLogger({ module: 'focus-executor' });
+const SHA_RE = /^[0-9a-f]{7,64}$/i;
+function censusDir() {
+    return resolve(resolveGlobalStateDir(), 'review-census');
+}
+function filePrefix(productId, focusId) {
+    return `${productId}-${focusId}-`.replace(/[^a-zA-Z0-9._-]/g, '_');
+}
+function isCensusDelivery(raw) {
+    if (typeof raw !== 'object' || raw === null)
+        return false;
+    const r = raw;
+    return typeof r.id === 'string' && typeof r.iterationCount === 'number' && Number.isInteger(r.iterationCount);
+}
+function parseCensus(raw) {
+    if (typeof raw !== 'object' || raw === null)
+        return null;
+    const r = raw;
+    if (typeof r.productId !== 'string' || typeof r.focusId !== 'string' || typeof r.sessionId !== 'string')
+        return null;
+    if (typeof r.sha !== 'string' || !SHA_RE.test(r.sha) || typeof r.approving !== 'boolean' || typeof r.recordedAt !== 'string')
+        return null;
+    if (!Array.isArray(r.verifyDeliveries) || !r.verifyDeliveries.every(isCensusDelivery))
+        return null;
+    return {
+        productId: r.productId, focusId: r.focusId, sha: r.sha, sessionId: r.sessionId,
+        approving: r.approving, verifyDeliveries: r.verifyDeliveries, recordedAt: r.recordedAt,
+    };
+}
+/** Record a census atomically, replacing the commit's previous one. Best-effort: false (and logged) on a malformed sha or a failed write. */
+export function writeReviewCensus(census, dir = censusDir()) {
+    if (!SHA_RE.test(census.sha))
+        return false;
+    const path = resolve(dir, `${filePrefix(census.productId, census.focusId)}${census.sha.replace(/[^a-zA-Z0-9]/g, '_')}.json`);
+    const tmp = `${path}.${process.pid}.tmp`;
+    try {
+        mkdirSync(dir, { recursive: true });
+        writeFileSync(tmp, JSON.stringify(census, null, 2), { mode: 0o600 });
+        renameSync(tmp, path);
+        return true;
+    }
+    catch (err) {
+        log.warn(`[focus-executor] failed to record the review census of ${census.focusId}@${census.sha.slice(0, 8)}: ${err.message}`);
+        return false;
+    }
+}
+/** Every census recorded for the focus, newest first. Empty when none can be read: a missing census covers nothing. */
+export function listReviewCensuses(productId, focusId, dir = censusDir()) {
+    const prefix = filePrefix(productId, focusId);
+    let names;
+    try {
+        names = readdirSync(dir).filter((name) => name.startsWith(prefix) && name.endsWith('.json'));
+    }
+    catch {
+        return [];
+    }
+    const censuses = [];
+    for (const name of names) {
+        try {
+            const parsed = parseCensus(JSON.parse(readFileSync(resolve(dir, name), 'utf8')));
+            if (parsed && parsed.productId === productId && parsed.focusId === focusId)
+                censuses.push(parsed);
+        }
+        catch {
+            // Unreadable or malformed: covers nothing.
+        }
+    }
+    return censuses.sort((a, b) => Date.parse(b.recordedAt) - Date.parse(a.recordedAt));
+}
+/**
+ * Take the census of a review exit (see the module header). Only a REVIEW session
+ * exiting with its window open and a known covered commit judges anything; any
+ * other exit records nothing. The exit approves the commit when its report says
+ * approved, or when it is a clean (no report), succeeded, inspected,
+ * coverage-complete review -- the two shapes that approve a commit
+ * (queries/focus-review-approval.ts). No-op without a writer (a partial test deps
+ * object). Never throws.
+ */
+export function recordReviewExitCensus(write, input) {
+    if (!write || input.sessionType !== 'review' || !input.windowOpen || !input.coveredSha)
+        return;
+    const cleanApproval = !input.reportExists && input.succeeded && input.reviewInspected !== false && input.coverageComplete;
+    try {
+        write({
+            productId: input.productId,
+            focusId: input.focusId,
+            sha: input.coveredSha,
+            sessionId: input.sessionId,
+            approving: input.reviewOutcome === 'approved' || cleanApproval,
+            verifyDeliveries: input.deliveries
+                .filter((d) => d.executionStatus === DELIVERY_STATUS.VERIFY)
+                .map((d) => ({ id: d.id, iterationCount: d.iterationCount ?? 0 })),
+            recordedAt: new Date().toISOString(),
+        });
+    }
+    catch (err) {
+        log.warn(`[focus-executor] review census not recorded for ${input.focusId}: ${err.message}`);
+    }
+}
+//# sourceMappingURL=review-census-record.js.map

package/dist/completion/review-census-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-census-record.js","sourceRoot":"","sources":["../../src/completion/review-census-record.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,mFAAmF;AACnF,+DAA+D;AAC/D,mFAAmF;AACnF,2FAA2F;AAC3F,mFAAmF;AACnF,4FAA4F;AAC5F,iFAAiF;AACjF,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1F,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAsBvD,MAAM,MAAM,GAAG,mBAAmB,CAAC;AAEnC,SAAS,SAAS;IAChB,OAAO,OAAO,CAAC,qBAAqB,EAAE,EAAE,eAAe,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB,EAAE,OAAe;IACpD,OAAO,GAAG,SAAS,IAAI,OAAO,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAY;IACpC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,OAAO,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;AAChH,CAAC;AAED,SAAS,WAAW,CAAC,GAAY;IAC/B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrH,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1I,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAC;IACnG,OAAO;QACL,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;QAC9E,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;KACvF,CAAC;AACJ,CAAC;AAED,6IAA6I;AAC7I,MAAM,UAAU,iBAAiB,CAAC,MAAoB,EAAE,MAAc,SAAS,EAAE;IAC/E,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7H,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACzC,IAAI,CAAC;QACH,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,0DAA0D,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1I,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,uHAAuH;AACvH,MAAM,UAAU,kBAAkB,CAAC,SAAiB,EAAE,OAAe,EAAE,MAAc,SAAS,EAAE;IAC9F,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC9C,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YACjF,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO;gBAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpG,CAAC;QAAC,MAAM,CAAC;YACP,2CAA2C;QAC7C,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;AACtF,CAAC;AAkBD;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAsD,EACtD,KAA4B;IAE5B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,UAAU;QAAE,OAAO;IAC/F,MAAM,aAAa,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,eAAe,KAAK,KAAK,IAAI,KAAK,CAAC,gBAAgB,CAAC;IAC1H,IAAI,CAAC;QACH,KAAK,CAAC;YACJ,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,EAAE,KAAK,CAAC,UAAU;YACrB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,aAAa,KAAK,UAAU,IAAI,aAAa;YAC9D,gBAAgB,EAAE,KAAK,CAAC,UAAU;iBAC/B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,KAAK,eAAe,CAAC,MAAM,CAAC;iBAC3D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,IAAI,CAAC,EAAE,CAAC,CAAC;YACpE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,mDAAmD,KAAK,CAAC,OAAO,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1G,CAAC;AACH,CAAC"}

package/dist/completion/review-exit-deps.d.ts

@@ -21,8 +21,9 @@ import { getDeliveryIssues, rehomeIssueToDelivery } from '../queries/issues.js';
 import { createEscalation, hasOpenFocusEscalation, hasOpenEscalationForDelivery } from '../queries/escalations.js';
 import { findOpenOperatorHoldForDelivery } from '../queries/holds.js';
 import { listOpenShortfallProposalIds } from '../queries/reality-tree.js';
-import type { CommitVerdictGateDeps } from './review-exit-verdict-gate.js';
+import type { CommitVerdictGateDeps, FailedGateVerdict } from './review-exit-verdict-gate.js';
 import { type ReviewAutoApproval } from './review-auto-approval-record.js';
+import { type ReviewCensus } from './review-census-record.js';
 /**
  * Dependencies for runReviewExitHandler. Defaults to real implementations;
  * overridable in tests via the optional `deps` argument.
@@ -36,7 +37,10 @@ export interface ReviewExitDeps {
     updateDeliveryStatus: typeof updateDeliveryStatus;
     markDeliveryAutoApproved: typeof markDeliveryAutoApproved;
     recordReviewAutoApproval?: (approval: ReviewAutoApproval) => boolean;
+    recordReviewCensus?: (census: ReviewCensus) => boolean;
     clearReviewRequestedAt: typeof clearReviewRequestedAt;
+    fileReworkForFailedVerdict?: (focusId: string, verdict: FailedGateVerdict) => Promise<number>;
+    clearPendingReviewDirective?: (focusId: string) => boolean;
     setReviewedThroughSha: typeof setReviewedThroughSha;
     setReviewCycleCount?: typeof setReviewCycleCount;
     resolveReviewCycleCap?: typeof resolveReviewCycleCap;

package/dist/completion/review-exit-deps.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"review-exit-deps.d.ts","sourceRoot":"","sources":["../../src/completion/review-exit-deps.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAsB,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEhI,OAAO,EAA6C,KAAK,kBAAkB,EAAE,MAAM,8CAA8C,CAAC;AAClI,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,sBAAsB,EACtB,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,EACrB,8BAA8B,EAC9B,2BAA2B,EAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AACpG,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,4BAA4B,EAAuE,MAAM,2BAA2B,CAAC;AACxL,OAAO,EAAE,+BAA+B,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAE1E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAA2B,KAAK,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAEpG;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,cAAc,EAAE,OAAO,cAAc,CAAC;IACtC,iBAAiB,EAAE,OAAO,iBAAiB,CAAC;IAC5C,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;IACtD,oBAAoB,EAAE,OAAO,oBAAoB,CAAC;IAClD,wBAAwB,EAAE,OAAO,wBAAwB,CAAC;IAO1D,wBAAwB,CAAC,EAAE,CAAC,QAAQ,EAAE,kBAAkB,KAAK,OAAO,CAAC;IACrE,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;IACtD,qBAAqB,EAAE,OAAO,qBAAqB,CAAC;IAIpD,mBAAmB,CAAC,EAAE,OAAO,mBAAmB,CAAC;IACjD,qBAAqB,CAAC,EAAE,OAAO,qBAAqB,CAAC;IAKrD,qBAAqB,CAAC,EAAE,OAAO,qBAAqB,CAAC;IACrD,uBAAuB,CAAC,EAAE,OAAO,uBAAuB,CAAC;IAKzD,2BAA2B,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAKlF,gCAAgC,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAGvF,sBAAsB,CAAC,EAAE,OAAO,sBAAsB,CAAC;IAKvD,4BAA4B,CAAC,EAAE,OAAO,4BAA4B,CAAC;IAMnE,+BAA+B,CAAC,EAAE,OAAO,+BAA+B,CAAC;IAOzE,sBAAsB,CAAC,EAAE,qBAAqB,CAAC,wBAAwB,CAAC,CAAC;IACzE,iBAAiB,CAAC,EAAE,qBAAqB,CAAC,mBAAmB,CAAC,CAAC;IAC/D,mBAAmB,CAAC,EAAE,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;IACnE,iBAAiB,CAAC,EAAE,qBAAqB,CAAC,mBAAmB,CAAC,CAAC;IAE/D,uBAAuB,CAAC,EAAE,qBAAqB,CAAC,yBAAyB,CAAC,CAAC;IAG3E,iBAAiB,CAAC,EAAE,qBAAqB,CAAC,mBAAmB,CAAC,CAAC;IAK/D,qBAAqB,CAAC,EAAE,OAAO,qBAAqB,CAAC;IAQrD,uBAAuB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,SAAS,kBAAkB,EAAE,GAAG,IAAI,CAAC;IAC/G,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;IAClH,sBAAsB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACxE,gBAAgB,CAAC,EAAE,OAAO,gBAAgB,CAAC;IAC3C,4BAA4B,CAAC,EAAE,OAAO,4BAA4B,CAAC;IACnE,wBAAwB,EAAE,OAAO,wBAAwB,CAAC;IAC1D,eAAe,EAAE,OAAO,eAAe,CAAC;IACxC,8BAA8B,EAAE,OAAO,8BAA8B,CAAC;IAMtE,2BAA2B,CAAC,EAAE,OAAO,2BAA2B,CAAC;IACjE,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;CAC3C;AAED,eAAO,MAAM,qBAAqB,EAAE,cAuCnC,CAAC"}
+{"version":3,"file":"review-exit-deps.d.ts","sourceRoot":"","sources":["../../src/completion/review-exit-deps.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAsB,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEhI,OAAO,EAA6C,KAAK,kBAAkB,EAAE,MAAM,8CAA8C,CAAC;AAClI,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAA+B,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AACxG,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,sBAAsB,EACtB,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,EACrB,8BAA8B,EAC9B,2BAA2B,EAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AACpG,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,4BAA4B,EAAuE,MAAM,2BAA2B,CAAC;AACxL,OAAO,EAAE,+BAA+B,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAE1E,OAAO,KAAK,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAC9F,OAAO,EAA2B,KAAK,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACpG,OAAO,EAAqB,KAAK,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAGjF;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,cAAc,EAAE,OAAO,cAAc,CAAC;IACtC,iBAAiB,EAAE,OAAO,iBAAiB,CAAC;IAC5C,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;IACtD,oBAAoB,EAAE,OAAO,oBAAoB,CAAC;IAClD,wBAAwB,EAAE,OAAO,wBAAwB,CAAC;IAO1D,wBAAwB,CAAC,EAAE,CAAC,QAAQ,EAAE,kBAAkB,KAAK,OAAO,CAAC;IAIrE,kBAAkB,CAAC,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,OAAO,CAAC;IACvD,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;IAGtD,0BAA0B,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAE9F,2BAA2B,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IAC3D,qBAAqB,EAAE,OAAO,qBAAqB,CAAC;IAIpD,mBAAmB,CAAC,EAAE,OAAO,mBAAmB,CAAC;IACjD,qBAAqB,CAAC,EAAE,OAAO,qBAAqB,CAAC;IAKrD,qBAAqB,CAAC,EAAE,OAAO,qBAAqB,CAAC;IACrD,uBAAuB,CAAC,EAAE,OAAO,uBAAuB,CAAC;IAKzD,2BAA2B,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAKlF,gCAAgC,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAGvF,sBAAsB,CAAC,EAAE,OAAO,sBAAsB,CAAC;IAKvD,4BAA4B,CAAC,EAAE,OAAO,4BAA4B,CAAC;IAMnE,+BAA+B,CAAC,EAAE,OAAO,+BAA+B,CAAC;IAOzE,sBAAsB,CAAC,EAAE,qBAAqB,CAAC,wBAAwB,CAAC,CAAC;IACzE,iBAAiB,CAAC,EAAE,qBAAqB,CAAC,mBAAmB,CAAC,CAAC;IAC/D,mBAAmB,CAAC,EAAE,qBAAqB,CAAC,qBAAqB,CAAC,CAAC;IACnE,iBAAiB,CAAC,EAAE,qBAAqB,CAAC,mBAAmB,CAAC,CAAC;IAE/D,uBAAuB,CAAC,EAAE,qBAAqB,CAAC,yBAAyB,CAAC,CAAC;IAG3E,iBAAiB,CAAC,EAAE,qBAAqB,CAAC,mBAAmB,CAAC,CAAC;IAK/D,qBAAqB,CAAC,EAAE,OAAO,qBAAqB,CAAC;IAQrD,uBAAuB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,SAAS,kBAAkB,EAAE,GAAG,IAAI,CAAC;IAC/G,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;IAClH,sBAAsB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACxE,gBAAgB,CAAC,EAAE,OAAO,gBAAgB,CAAC;IAC3C,4BAA4B,CAAC,EAAE,OAAO,4BAA4B,CAAC;IACnE,wBAAwB,EAAE,OAAO,wBAAwB,CAAC;IAC1D,eAAe,EAAE,OAAO,eAAe,CAAC;IACxC,8BAA8B,EAAE,OAAO,8BAA8B,CAAC;IAMtE,2BAA2B,CAAC,EAAE,OAAO,2BAA2B,CAAC;IACjE,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;CAC3C;AAED,eAAO,MAAM,qBAAqB,EAAE,cA0CnC,CAAC"}

package/dist/completion/review-exit-deps.js

@@ -1,5 +1,5 @@
 // PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: none -- no test imports this module directly (baselined; see lint:pinned-by)
+// Pinned by: packages/daemon/src/integration/failed-verdict-review-exit-respawn-regression.test.ts
 // PINNED-BY-END
 /**
  * Dependency contract + default wiring for the review-exit phase.
@@ -17,7 +17,7 @@ import { updateDeliveryStatus, markDeliveryAutoApproved, getDeliveryContext, get
 import { getFocusWorktree } from '../focus/focus-worktree-state.js';
 import { blameLineCommits, listReviewWindowCommits } from '../resolvers/shared/review-window-commits.js';
 import { getActiveFocuses } from '../queries/focus-discovery.js';
-import { hasPendingSpawnDirective } from '../directive/directive-queue.js';
+import { clearPendingReviewDirective, hasPendingSpawnDirective } from '../directive/directive-queue.js';
 import { emitLoopTrigger } from '../loops/index.js';
 import { getFocusDeliveries, getFocusIssues, clearReviewRequestedAt, setReviewedThroughSha, setReviewCycleCount, setReviewHandoffCount, getFocusReviewReportForSession, getFocusReviewFiledIssueIds, } from '../queries/focuses.js';
 import { resolveReviewCycleCap, resolveReviewHandoffCap } from '../verify/stall-detector-config.js';
@@ -27,6 +27,8 @@ import { findOpenOperatorHoldForDelivery } from '../queries/holds.js';
 import { listOpenShortfallProposalIds } from '../queries/reality-tree.js';
 import { commitGateSeams } from '../verify/commit-gate-configured.js';
 import { writeReviewAutoApproval } from './review-auto-approval-record.js';
+import { writeReviewCensus } from './review-census-record.js';
+import { fileReworkForFailedVerdict } from '../verify/verification-rework-issue.js';
 export const defaultReviewExitDeps = {
     getActiveFocuses,
     getFocusDeliveries,
@@ -36,7 +38,10 @@ export const defaultReviewExitDeps = {
     updateDeliveryStatus,
     markDeliveryAutoApproved,
     recordReviewAutoApproval: (approval) => writeReviewAutoApproval(approval),
+    recordReviewCensus: (census) => writeReviewCensus(census),
     clearReviewRequestedAt,
+    fileReworkForFailedVerdict: (focusId, verdict) => fileReworkForFailedVerdict(focusId, verdict),
+    clearPendingReviewDirective,
     setReviewedThroughSha,
     setReviewCycleCount,
     resolveReviewCycleCap,

package/dist/completion/review-exit-deps.js.map

@@ -1 +1 @@
-{"version":3,"file":"review-exit-deps.js","sourceRoot":"","sources":["../../src/completion/review-exit-deps.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,0FAA0F;AAC1F,gBAAgB;AAEhB;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAChI,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAA2B,MAAM,8CAA8C,CAAC;AAClI,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,sBAAsB,EACtB,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,EACrB,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AACpG,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,iCAAiC,EAAE,gCAAgC,EAAE,MAAM,2BAA2B,CAAC;AACxL,OAAO,EAAE,+BAA+B,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAEtE,OAAO,EAAE,uBAAuB,EAA2B,MAAM,kCAAkC,CAAC;AAsGpG,MAAM,CAAC,MAAM,qBAAqB,GAAmB;IACnD,gBAAgB;IAChB,kBAAkB;IAClB,cAAc;IACd,iBAAiB;IACjB,sBAAsB;IACtB,oBAAoB;IACpB,wBAAwB;IACxB,wBAAwB,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC;IACzE,sBAAsB;IACtB,qBAAqB;IACrB,mBAAmB;IACnB,qBAAqB;IACrB,qBAAqB;IACrB,uBAAuB;IACvB,2BAA2B,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAC9C,iCAAiC,CAAC,OAAO,EAAE,0BAA0B,EAAE,eAAe,EAAE,KAAK,CAAC;IAChG,gCAAgC;IAChC,sBAAsB;IACtB,4BAA4B;IAC5B,+BAA+B;IAC/B,GAAG,eAAe;IAClB,qBAAqB;IACrB,uBAAuB,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC9C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC3C,OAAO,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrF,CAAC;IACD,UAAU,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC7C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC3C,OAAO,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1F,CAAC;IACD,sBAAsB,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,IAAI;IACvG,gBAAgB;IAChB,4BAA4B;IAC5B,wBAAwB;IACxB,eAAe;IACf,8BAA8B;IAC9B,2BAA2B;IAC3B,gBAAgB;CACjB,CAAC"}
+{"version":3,"file":"review-exit-deps.js","sourceRoot":"","sources":["../../src/completion/review-exit-deps.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,mGAAmG;AACnG,gBAAgB;AAEhB;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAChI,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAA2B,MAAM,8CAA8C,CAAC;AAClI,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AACxG,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,sBAAsB,EACtB,qBAAqB,EACrB,mBAAmB,EACnB,qBAAqB,EACrB,8BAA8B,EAC9B,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AACpG,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,iCAAiC,EAAE,gCAAgC,EAAE,MAAM,2BAA2B,CAAC;AACxL,OAAO,EAAE,+BAA+B,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,4BAA4B,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAEtE,OAAO,EAAE,uBAAuB,EAA2B,MAAM,kCAAkC,CAAC;AACpG,OAAO,EAAE,iBAAiB,EAAqB,MAAM,2BAA2B,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,wCAAwC,CAAC;AA+GpF,MAAM,CAAC,MAAM,qBAAqB,GAAmB;IACnD,gBAAgB;IAChB,kBAAkB;IAClB,cAAc;IACd,iBAAiB;IACjB,sBAAsB;IACtB,oBAAoB;IACpB,wBAAwB;IACxB,wBAAwB,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC;IACzE,kBAAkB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC;IACzD,sBAAsB;IACtB,0BAA0B,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,0BAA0B,CAAC,OAAO,EAAE,OAAO,CAAC;IAC9F,2BAA2B;IAC3B,qBAAqB;IACrB,mBAAmB;IACnB,qBAAqB;IACrB,qBAAqB;IACrB,uBAAuB;IACvB,2BAA2B,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAC9C,iCAAiC,CAAC,OAAO,EAAE,0BAA0B,EAAE,eAAe,EAAE,KAAK,CAAC;IAChG,gCAAgC;IAChC,sBAAsB;IACtB,4BAA4B;IAC5B,+BAA+B;IAC/B,GAAG,eAAe;IAClB,qBAAqB;IACrB,uBAAuB,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC9C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC3C,OAAO,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrF,CAAC;IACD,UAAU,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC7C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC3C,OAAO,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1F,CAAC;IACD,sBAAsB,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,IAAI;IACvG,gBAAgB;IAChB,4BAA4B;IAC5B,wBAAwB;IACxB,eAAe;IACf,8BAA8B;IAC9B,2BAA2B;IAC3B,gBAAgB;CACjB,CAAC"}

package/dist/completion/review-exit-phase.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"review-exit-phase.d.ts","sourceRoot":"","sources":["../../src/completion/review-exit-phase.ts"],"names":[],"mappings":"AA+CA,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAK5D,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACjC,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC;;;;;;;;;;OAUG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;;;;;;;;;OAYG;IACH,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAMD,OAAO,EACL,iCAAiC,EACjC,uBAAuB,GACxB,MAAM,2BAA2B,CAAC;AAEnC,gGAAgG;AAChG,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAMnE;AAyBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,gBAAgB,EACxB,IAAI,GAAE,cAAsC,GAC3C,OAAO,CAAC,IAAI,CAAC,CA6lBf"}
+{"version":3,"file":"review-exit-phase.d.ts","sourceRoot":"","sources":["../../src/completion/review-exit-phase.ts"],"names":[],"mappings":"AAiDA,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAK5D,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACjC,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC;;;;;;;;;;OAUG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;;;;;;;;;OAYG;IACH,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAMD,OAAO,EACL,iCAAiC,EACjC,uBAAuB,GACxB,MAAM,2BAA2B,CAAC;AAEnC,gGAAgG;AAChG,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAMnE;AAyBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,gBAAgB,EACxB,IAAI,GAAE,cAAsC,GAC3C,OAAO,CAAC,IAAI,CAAC,CA8lBf"}

package/dist/completion/review-exit-phase.js

@@ -1,5 +1,5 @@
 // PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: 29 tests -- run: npm run gen:pinned-by -- --list packages/daemon/src/completion/review-exit-phase.ts
+// Pinned by: 34 tests -- run: npm run gen:pinned-by -- --list packages/daemon/src/completion/review-exit-phase.ts
 // PINNED-BY-END
 /**
  * Review-exit phase of the team completion flow.
@@ -22,12 +22,14 @@ import { resolveShortfallHold, writeShortfallGateState, describeShortfallHold, }
 import { recordReviewCycleAndMaybeHold } from './review-cycle-cap.js';
 import { fileCoverageIncompleteEscalation, fileGapsWithoutIssueEscalation, fileMissingReportNotice, recordHandoffAndMaybeTerminate, } from './review-exit-escalations.js';
 import { forceFullPassReviewFocuses, recordBelowCoverageDrift, resetCoverageDriftState } from './coverage-drift-state.js';
-import { resolveReviewCycleProgress, emitReviewCompleted } from './review-exit-progress.js';
-import { holdForCommitVerdict, logCommitVerdictHeldExit, reviewReworkGateState } from './review-exit-verdict-gate.js';
+import { resolveReviewCycleProgress, emitReviewCompleted, logLeftInVerifyWithoutSignal } from './review-exit-progress.js';
+import { closeFailedVerdictExit, holdForCommitVerdict, logCommitVerdictHeldExit, reviewReworkGateState } from './review-exit-verdict-gate.js';
+import { refusesReworkOnShortfallPark, logShortfallParkedExit } from './review-exit-shortfall-park.js';
 import { resolveGapsAttribution } from './review-exit-attribution.js';
 import { resolveOutsideWindowFindings, rehomeOutsideWindowFindings } from './review-exit-rehoming.js';
 import { scopeReviewEvidenceToOwnWork } from './review-exit-foreign-findings.js';
 import { gatherReviewExitEvidence } from './review-exit-evidence.js';
+import { recordReviewExitCensus } from './review-census-record.js';
 import { createLogger } from '../shell/log.js';
 import { defaultReviewExitDeps } from './review-exit-deps.js';
 const log = createLogger({ module: 'focus-executor' });
@@ -170,6 +172,8 @@ export async function runReviewExitHandler(params, deps = defaultReviewExitDeps)
     // team that left pre-existing open work behind no longer needs the review
     // agent to file fresh defects before the loop can correct itself.
     const reviewDeliveries = await deps.getFocusDeliveries(focusId);
+    // Which verify deliveries this review saw at the commit it covered (review-census-record.ts): the standing-approval convergence reads it.
+    recordReviewExitCensus(deps.recordReviewCensus, { ...params, windowOpen, coveredSha, coverageComplete, reportExists, reviewOutcome, deliveries: reviewDeliveries });
     // Judge only THIS focus's work: a blocking finding about another focus's commit (by Telora-Delivery
     // trailer) is moved to its owner and leaves the target sets; an all-foreign gaps_found verdict resolves
     // (not 'unresolvable'), so the in-verify delivery converges on merit (review-exit-foreign-findings.ts).
@@ -205,6 +209,9 @@ export async function runReviewExitHandler(params, deps = defaultReviewExitDeps)
     // Set when a delivery's done / verify_failed route is held on the gate verdict for the
     // commit it judges (review-exit-verdict-gate.ts). Keeps the review window open.
     let verdictHeldAny = false;
+    let verdictFailed = null; // held on a verdict to come / on a FAILED one
+    // Set when a verify delivery's verify_failed route is refused by a shortfall park (review-exit-shortfall-park.ts).
+    let parkedAny = false;
     // attributionResolvable (scoped above): whether the gaps_found verdict resolved
     // to ANY delivery (or only to relocated foreign findings). When false, every
     // delivery reads 'unresolvable' -- absence of attribution holds toward intent.
@@ -318,12 +325,19 @@ export async function runReviewExitHandler(params, deps = defaultReviewExitDeps)
                     continue;
                 }
             }
+            if (isVerify && target === DELIVERY_STATUS.VERIFY_FAILED && refusesReworkOnShortfallPark(d)) {
+                parkedAny = true;
+                continue;
+            }
             // Commit-verdict gate (review-exit-verdict-gate.ts): done where a done write follows; a verify delivery's verify_failed.
             const verdictGatedRoute = target === DELIVERY_STATUS.DONE ? (shortfallsClear && (reportExists || coverageComplete) ? 'done' : null)
                 : isVerify && target === DELIVERY_STATUS.VERIFY_FAILED ? 'verify_failed' : null;
             const verdictGate = verdictGatedRoute ? await holdForCommitVerdict(deps, params, current, d, verdictGatedRoute) : null;
             if (verdictGate?.held) {
-                verdictHeldAny = true;
+                if (verdictGate.failed !== undefined)
+                    verdictFailed = verdictGate;
+                else
+                    verdictHeldAny = true;
                 continue;
             }
             if (target === DELIVERY_STATUS.VERIFY_FAILED) {
@@ -398,14 +412,8 @@ export async function runReviewExitHandler(params, deps = defaultReviewExitDeps)
                 }
             }
             else {
-                // No signal to auto-approve. This exit leaves review_requested_at set, and
-                // checkAutoReview is suppressed while it is set -- so auto-review re-arms
-                // only when the window CLOSES (review_complete or the silence/staleness deadline).
-                const reason = sessionType !== 'review'
-                    ? `${sessionType} session exited (not eligible for auto-approve)`
-                    : 'review session did not succeed';
-                log.info(`[focus-executor] Delivery "${d.name}" left in verify: ${reason} ` +
-                    `(verify-cycling; review_requested_at still set -> auto-review suppressed until the window closes).`);
+                // No signal to auto-approve; the window stays set (review-exit-progress.ts logLeftInVerifyWithoutSignal).
+                logLeftInVerifyWithoutSignal(d.name, sessionType);
             }
         }
         catch (err) {
@@ -422,6 +430,8 @@ export async function runReviewExitHandler(params, deps = defaultReviewExitDeps)
     // reportExists=true, and that notice requires !reportExists, so the two can
     // never double-fire for one exit.
     const gapsWithoutIssue = reviewOutcome === 'gaps_found' && !hasBlockingIssueEvidence;
+    if (verdictFailed)
+        await closeFailedVerdictExit(deps, params, verdictFailed, verdictHeldAny);
     if (routedAny) {
         // A delivery held on its gate verdict still owns this window: the release replay converges it.
         if (!verdictHeldAny)
@@ -496,9 +506,12 @@ export async function runReviewExitHandler(params, deps = defaultReviewExitDeps)
             gapsWithoutIssue, reportExists, hasBlockingIssueEvidence, sessionType, succeeded, reviewInspected,
         });
     }
-    else if (verdictHeldAny) {
-        // Ahead of the hand-off bound: a gate run, not an incoming team, owns this wait -- never a hand-off.
-        logCommitVerdictHeldExit(focusName);
+    else if (verdictHeldAny || parkedAny || verdictFailed) {
+        // Ahead of the hand-off bound: a gate run or a verify re-judgement, not an incoming team, owns this wait.
+        if (verdictHeldAny)
+            logCommitVerdictHeldExit(focusName);
+        else if (parkedAny)
+            logShortfallParkedExit(focusName);
     }
     else if (deps.hasPendingSpawnDirective(focusId)) {
         // Nothing routed AND a spawn directive is pending: the team was torn down
@@ -626,7 +639,7 @@ export async function runReviewExitHandler(params, deps = defaultReviewExitDeps)
     // converged focus carries no pending operator rows (the 2026-09-10 stranded
     // review-family rows and the 2026-09-09 team_failure-after-last-delivery row).
     if (convergedAny && !anyReopenedToVerifyFailed && !operatorHeldAny &&
-        !externalHeldAny && !shortfallHold && !belowCoverageHold && !verdictHeldAny &&
+        !externalHeldAny && !shortfallHold && !belowCoverageHold && !verdictHeldAny && !verdictFailed &&
         deps.resolveConvergedFocusEscalations &&
         reviewDeliveries.every(d => d.executionStatus === DELIVERY_STATUS.DONE ||
             d.executionStatus === DELIVERY_STATUS.CANCELLED ||