@telora/daemon 0.22.132 → 0.22.136

package/dist/verify/misattributed-commits.js

@@ -0,0 +1,148 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/verify/misattributed-commits.test.ts
+// PINNED-BY-END
+/**
+ * Commits in a focus's recorded batches that may hold a held delivery's work
+ * without being attributed to it.
+ *
+ * Verify judges a delivery on its OWN commits: those whose Telora-Delivery
+ * trailer names it. A commit trailered `none` (housekeeping), `unattributed` (a
+ * daemon capture whose delivery was unknown) or not trailered at all belongs to
+ * no delivery's evidence. When such a commit holds a delivery's implementation,
+ * verify reports "the diff lacks the work" on every pass while the work sits one
+ * commit away (Tinker Tailor 1bc76c8e: a 51-file exit capture stamped `none`,
+ * iteration 23). This module finds those commits so a shortfall hold can name
+ * them, making misattributed work distinguishable from missing work.
+ *
+ * Scope -- "the files a held node concerns" -- is the union of the shortfall's
+ * cited diff file, the delivery's issues' completion-artifact files and tests,
+ * and its Context Groups' relevantFiles. When none of those name a file the
+ * scope is `unscoped` and every candidate commit is named, labelled unscoped --
+ * never silently nothing. An unattributed capture is named whatever it touches:
+ * it is delivery work by declaration.
+ */
+import { runGitSync } from '../git/index.js';
+import { classifyTrailerValue, DELIVERY_TRAILER_KEY } from '../resolvers/shared/delivery-trailer.js';
+import { compilePathPattern } from '../worktree/capture-attribution.js';
+import { completionFilesOf } from '../worktree/capture-attribution-read.js';
+/** Bound on commits named, and files listed per commit, in a hold. */
+const MAX_NAMED_COMMITS = 20;
+const MAX_FILES_PER_COMMIT = 10;
+/** Commits per `git show` invocation when reading the batch. */
+const READ_CHUNK = 100;
+const FIELD = '\x1f';
+const RECORD = '\x1e';
+/**
+ * Read and classify every distinct commit in the focus's recorded batches. A
+ * commit git cannot read is skipped. `overrides` (sha -> delivery id) replaces a
+ * commit's trailer classification with a delivery attribution.
+ */
+export function readFocusCommitRecords(cwd, batches, overrides = new Map()) {
+    const shas = [...new Set(batches.flatMap((b) => b ?? []).map((s) => s.trim()).filter((s) => /^[0-9a-f]{7,64}$/i.test(s)))];
+    const records = [];
+    for (let i = 0; i < shas.length; i += READ_CHUNK) {
+        const chunk = shas.slice(i, i + READ_CHUNK);
+        const res = runGitSync(['show', '-s', '--ignore-missing',
+            `--format=%H${FIELD}%P${FIELD}%s${FIELD}%(trailers:key=${DELIVERY_TRAILER_KEY},valueonly,separator=%x2c)${RECORD}`,
+            ...chunk], cwd);
+        if (!res.success)
+            continue;
+        for (const raw of res.output.split(RECORD)) {
+            const [sha = '', parents = '', subject = '', trailers = ''] = raw.trim().split(FIELD);
+            if (!/^[0-9a-f]{40,64}$/i.test(sha))
+                continue;
+            const override = overrides.get(sha);
+            const firstTrailer = trailers.split(',').map((t) => t.trim()).find((t) => t !== '') ?? '';
+            records.push({
+                sha,
+                subject,
+                isMerge: parents.trim().split(/\s+/).filter(Boolean).length > 1,
+                attribution: override ? { kind: 'delivery', deliveryId: override } : classifyTrailerValue(firstTrailer),
+            });
+        }
+    }
+    return records;
+}
+/** The files a commit changed (renames split), or null when git cannot read it. */
+export function readCommitChangedFiles(cwd, sha) {
+    const res = runGitSync(['show', '--name-only', '--no-renames', '--format=', sha, '--'], cwd);
+    if (!res.success)
+        return null;
+    return res.output.split('\n').map((l) => l.trim()).filter((l) => l !== '');
+}
+/** The file named by a shortfall's diff citation ("path:line", "path @@ ..."), or null. */
+export function citedFile(diffCitation) {
+    const token = (diffCitation ?? '').trim().split(/[\s:@(]/)[0] ?? '';
+    return /[./]/.test(token) ? token.replace(/^[ab]\//, '') : null;
+}
+/** Pure: the node's file scope from its shortfall citations and the delivery's issues. */
+export function resolveNodeFileScope(diffCitations, deliveryIssues) {
+    const patterns = new Set();
+    for (const c of diffCitations) {
+        const f = citedFile(c);
+        if (f)
+            patterns.add(f);
+    }
+    for (const issue of deliveryIssues) {
+        for (const f of completionFilesOf(issue.completionArtifacts))
+            patterns.add(f);
+        for (const line of (issue.relevantFiles ?? '').split('\n')) {
+            if (line.trim() !== '')
+                patterns.add(line.trim());
+        }
+    }
+    return patterns.size === 0 ? { kind: 'unscoped' } : { kind: 'files', patterns: [...patterns] };
+}
+/**
+ * Pure: the commits a held node's work may live in -- every non-merge commit in
+ * the batches trailered `none`, `unattributed` or not at all whose changed files
+ * meet the node's scope (any, when unscoped). An unattributed capture is named
+ * whatever it touches. Commits attributed to a delivery -- this one or another --
+ * never are. Newest-batch order is kept; the list and each file list are bounded.
+ */
+export function findMisattributedCommits(commits, changedFilesOf, scope) {
+    const matchers = scope.kind === 'files'
+        ? scope.patterns.map(compilePathPattern).filter((m) => m !== null)
+        : [];
+    const named = [];
+    for (const c of commits) {
+        if (named.length >= MAX_NAMED_COMMITS)
+            break;
+        const trailer = c.attribution.kind;
+        if (trailer === 'delivery' || c.isMerge)
+            continue;
+        const changed = changedFilesOf(c.sha) ?? [];
+        const inScope = scope.kind === 'unscoped' ? changed : changed.filter((f) => matchers.some((m) => m(f)));
+        if (inScope.length === 0 && trailer !== 'unattributed_capture')
+            continue;
+        named.push({ sha: c.sha, subject: c.subject, trailer, files: inScope.slice(0, MAX_FILES_PER_COMMIT) });
+    }
+    return { scope: scope.kind, commits: named };
+}
+const TRAILER_LABEL = {
+    sentinel: 'Telora-Delivery: none',
+    unattributed: 'no Telora-Delivery trailer',
+    unattributed_capture: 'Telora-Delivery: unattributed (daemon capture, delivery unknown)',
+};
+/** The lines a hold renders for a non-empty note; [] when there is nothing to name. */
+export function renderMisattributedCommitLines(note) {
+    if (!note || note.commits.length === 0)
+        return [];
+    const lines = [
+        note.scope === 'files'
+            ? `Possibly misattributed work (${note.commits.length}): these commits in the focus's merged batches touch ` +
+                `files this delivery concerns but are not attributed to it, so verify did not count them. The work ` +
+                `may already exist -- if a commit holds this delivery's work, credit it to the delivery instead of ` +
+                `re-writing it.`
+            : `Possibly misattributed work (${note.commits.length}, unscoped -- no file scope is recorded for this ` +
+                `delivery): these commits in the focus's merged batches are not attributed to any delivery, so verify ` +
+                `did not count them. If one holds this delivery's work, credit it to the delivery instead of re-writing it.`,
+    ];
+    for (const c of note.commits) {
+        lines.push(`- ${c.sha.slice(0, 12)} "${c.subject}" (${TRAILER_LABEL[c.trailer]})`);
+        if (c.files.length > 0)
+            lines.push(`  files: ${c.files.join(', ')}`);
+    }
+    return lines;
+}
+//# sourceMappingURL=misattributed-commits.js.map

package/dist/verify/misattributed-commits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"misattributed-commits.js","sourceRoot":"","sources":["../../src/verify/misattributed-commits.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,sEAAsE;AACtE,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAA2B,MAAM,yCAAyC,CAAC;AAC9H,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAExE,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AA+B5E,sEAAsE;AACtE,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAChC,gEAAgE;AAChE,MAAM,UAAU,GAAG,GAAG,CAAC;AAEvB,MAAM,KAAK,GAAG,MAAM,CAAC;AACrB,MAAM,MAAM,GAAG,MAAM,CAAC;AAEtB;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAAW,EACX,OAA0D,EAC1D,YAAyC,IAAI,GAAG,EAAE;IAElD,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3H,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,UAAU,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,UAAU,CACpB,CAAC,MAAM,EAAE,IAAI,EAAE,kBAAkB;YAC/B,cAAc,KAAK,KAAK,KAAK,KAAK,KAAK,kBAAkB,oBAAoB,6BAA6B,MAAM,EAAE;YAClH,GAAG,KAAK,CAAC,EACX,GAAG,CACJ,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,OAAO;YAAE,SAAS;QAC3B,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3C,MAAM,CAAC,GAAG,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,EAAE,QAAQ,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACtF,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC9C,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACpC,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;YAC1F,OAAO,CAAC,IAAI,CAAC;gBACX,GAAG;gBACH,OAAO;gBACP,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;gBAC/D,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,YAAY,CAAC;aACxG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,sBAAsB,CAAC,GAAW,EAAE,GAAW;IAC7D,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7F,IAAI,CAAC,GAAG,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC9B,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,SAAS,CAAC,YAAgC;IACxD,MAAM,KAAK,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,oBAAoB,CAClC,aAA8C,EAC9C,cAAoG;IAEpG,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,iBAAiB,CAAC,KAAK,CAAC,mBAAmB,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9E,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3D,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC;AACjG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAqC,EACrC,cAAgD,EAChD,KAAoB;IAEpB,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,KAAK,OAAO;QACrC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAkC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;QAClG,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,KAAK,GAA0B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,KAAK,CAAC,MAAM,IAAI,iBAAiB;YAAE,MAAM;QAC7C,MAAM,OAAO,GAAG,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC;QACnC,IAAI,OAAO,KAAK,UAAU,IAAI,CAAC,CAAC,OAAO;YAAE,SAAS;QAClD,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,sBAAsB;YAAE,SAAS;QACzE,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,EAAE,CAAC,CAAC;IACzG,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,aAAa,GAAyC;IAC1D,QAAQ,EAAE,uBAAuB;IACjC,YAAY,EAAE,4BAA4B;IAC1C,oBAAoB,EAAE,kEAAkE;CACzF,CAAC;AAEF,uFAAuF;AACvF,MAAM,UAAU,8BAA8B,CAAC,IAA0C;IACvF,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClD,MAAM,KAAK,GAAG;QACZ,IAAI,CAAC,KAAK,KAAK,OAAO;YACpB,CAAC,CAAC,gCAAgC,IAAI,CAAC,OAAO,CAAC,MAAM,uDAAuD;gBAC1G,oGAAoG;gBACpG,oGAAoG;gBACpG,gBAAgB;YAClB,CAAC,CAAC,gCAAgC,IAAI,CAAC,OAAO,CAAC,MAAM,mDAAmD;gBACtG,uGAAuG;gBACvG,4GAA4G;KACjH,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,OAAO,MAAM,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnF,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/verify/no-own-delta-verdict.d.ts

@@ -0,0 +1,47 @@
+/**
+ * A focus commit that adds nothing of the focus's own is not judged again: it
+ * carries the verdict the focus's own commits already earned.
+ *
+ * When every commit on a focus branch is already on integration and the branch
+ * tip moved past the newest commit the gate judged ONLY by commits other foci own
+ * (git/focus-own-delta.ts isForeignOnlyExtension), a run at that tip would judge
+ * the integration tip in the focus's place -- the 2026-09-17 incident, where a
+ * sibling's failing tests were charged to a fast-forwarded focus. So no run
+ * starts: the verdict recorded for that newest judged ancestor is carried to the
+ * tip (recorded there, naming where it came from), and the delivery is routed on
+ * it exactly as on any recorded verdict -- its state follows from what its own
+ * commits earned, and it is never stranded waiting on a run that must not happen.
+ *
+ * Anything short of proof -- an own or unattributed commit since the judged
+ * ancestor, no judged ancestor within the search depth, an unreadable read --
+ * carries nothing, and the dispatch runs the gate as before.
+ *
+ * @module verify/no-own-delta-verdict
+ */
+import { isForeignOnlyExtension } from '../git/focus-own-delta.js';
+import type { CommitVerdict, CommitVerdictGate, CommitVerdictReader } from './commit-verdict-record.js';
+/** How many ancestors of the tip are searched for the newest judged one. */
+export declare const CARRIED_VERDICT_SEARCH_DEPTH = 200;
+/** The reads a carried verdict is resolved from. */
+export interface CarriedVerdictDeps {
+    integrationBranch: string;
+    /** The focus worktree path, null when the focus has none. */
+    resolveWorktreePath: (focusId: string) => string | null;
+    /** The focus's delivery ids. May throw (then nothing is carried). */
+    listFocusDeliveryIds: (focusId: string) => Promise<readonly string[]>;
+    readCommitVerdict: CommitVerdictReader;
+    /** Ancestors of `tip`, newest first, excluding `tip`; null when unreadable. */
+    listAncestors?: (worktreePath: string, tip: string, depth: number) => string[] | null;
+    isForeignOnlyExtension?: typeof isForeignOnlyExtension;
+}
+/** A verdict carried to `head`, and the judged commit it came from. */
+export interface CarriedVerdict {
+    verdict: CommitVerdict;
+    carriedFrom: string;
+}
+/**
+ * The verdict `head` carries from its newest judged ancestor when it adds nothing
+ * of the focus's own (module doc), or null.
+ */
+export declare function resolveCarriedVerdict(productId: string, focusId: string, head: string, gate: CommitVerdictGate, deps: CarriedVerdictDeps): Promise<CarriedVerdict | null>;
+//# sourceMappingURL=no-own-delta-verdict.d.ts.map

package/dist/verify/no-own-delta-verdict.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-own-delta-verdict.d.ts","sourceRoot":"","sources":["../../src/verify/no-own-delta-verdict.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAEnE,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAExG,4EAA4E;AAC5E,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAEhD,oDAAoD;AACpD,MAAM,WAAW,kBAAkB;IACjC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,6DAA6D;IAC7D,mBAAmB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACxD,qEAAqE;IACrE,oBAAoB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;IACtE,iBAAiB,EAAE,mBAAmB,CAAC;IACvC,+EAA+E;IAC/E,aAAa,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,EAAE,GAAG,IAAI,CAAC;IACtF,sBAAsB,CAAC,EAAE,OAAO,sBAAsB,CAAC;CACxD;AAQD,uEAAuE;AACvE,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,aAAa,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,iBAAiB,EACvB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CA8BhC"}

package/dist/verify/no-own-delta-verdict.js

@@ -0,0 +1,74 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/integration/fully-merged-focus-sibling-red-scenario.test.ts,
+//   packages/daemon/src/verify/verification-commit-sharing.test.ts
+// PINNED-BY-END
+/**
+ * A focus commit that adds nothing of the focus's own is not judged again: it
+ * carries the verdict the focus's own commits already earned.
+ *
+ * When every commit on a focus branch is already on integration and the branch
+ * tip moved past the newest commit the gate judged ONLY by commits other foci own
+ * (git/focus-own-delta.ts isForeignOnlyExtension), a run at that tip would judge
+ * the integration tip in the focus's place -- the 2026-09-17 incident, where a
+ * sibling's failing tests were charged to a fast-forwarded focus. So no run
+ * starts: the verdict recorded for that newest judged ancestor is carried to the
+ * tip (recorded there, naming where it came from), and the delivery is routed on
+ * it exactly as on any recorded verdict -- its state follows from what its own
+ * commits earned, and it is never stranded waiting on a run that must not happen.
+ *
+ * Anything short of proof -- an own or unattributed commit since the judged
+ * ancestor, no judged ancestor within the search depth, an unreadable read --
+ * carries nothing, and the dispatch runs the gate as before.
+ *
+ * @module verify/no-own-delta-verdict
+ */
+import { isForeignOnlyExtension } from '../git/focus-own-delta.js';
+import { runGitSync } from '../git/types.js';
+/** How many ancestors of the tip are searched for the newest judged one. */
+export const CARRIED_VERDICT_SEARCH_DEPTH = 200;
+function defaultListAncestors(worktreePath, tip, depth) {
+    const r = runGitSync(['rev-list', '--topo-order', `--max-count=${depth}`, '--skip=1', tip], worktreePath);
+    if (!r.success)
+        return null;
+    return r.output.split('\n').map((l) => l.trim()).filter((l) => l !== '');
+}
+/**
+ * The verdict `head` carries from its newest judged ancestor when it adds nothing
+ * of the focus's own (module doc), or null.
+ */
+export async function resolveCarriedVerdict(productId, focusId, head, gate, deps) {
+    const worktreePath = deps.resolveWorktreePath(focusId);
+    if (!worktreePath)
+        return null;
+    const ancestors = (deps.listAncestors ?? defaultListAncestors)(worktreePath, head, CARRIED_VERDICT_SEARCH_DEPTH);
+    if (!ancestors)
+        return null;
+    const judged = ancestors.find((sha) => deps.readCommitVerdict(productId, focusId, sha, gate) !== null);
+    if (!judged)
+        return null;
+    const recorded = deps.readCommitVerdict(productId, focusId, judged, gate);
+    if (!recorded)
+        return null;
+    let ids;
+    try {
+        ids = await deps.listFocusDeliveryIds(focusId);
+    }
+    catch {
+        return null;
+    }
+    const foreignOnly = (deps.isForeignOnlyExtension ?? isForeignOnlyExtension)(worktreePath, deps.integrationBranch, judged, head, new Set(ids));
+    if (!foreignOnly)
+        return null;
+    const carriedWhy = `carried from ${judged.slice(0, 8)}: the focus has no unverified delta of its own -- every commit `
+        + `since is another focus's, already on integration`;
+    return {
+        carriedFrom: judged,
+        verdict: {
+            ...recorded,
+            sha: head,
+            recordedAt: new Date().toISOString(),
+            rationale: recorded.rationale ? `${carriedWhy}; ${recorded.rationale}` : carriedWhy,
+        },
+    };
+}
+//# sourceMappingURL=no-own-delta-verdict.js.map

package/dist/verify/no-own-delta-verdict.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-own-delta-verdict.js","sourceRoot":"","sources":["../../src/verify/no-own-delta-verdict.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,8FAA8F;AAC9F,mEAAmE;AACnE,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAG7C,4EAA4E;AAC5E,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AAehD,SAAS,oBAAoB,CAAC,YAAoB,EAAE,GAAW,EAAE,KAAa;IAC5E,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,UAAU,EAAE,cAAc,EAAE,eAAe,KAAK,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC;IAC1G,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAC3E,CAAC;AAQD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAAiB,EACjB,OAAe,EACf,IAAY,EACZ,IAAuB,EACvB,IAAwB;IAExB,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,oBAAoB,CAAC,CAAC,YAAY,EAAE,IAAI,EAAE,4BAA4B,CAAC,CAAC;IACjH,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;IACvG,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1E,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,GAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,sBAAsB,IAAI,sBAAsB,CAAC,CACzE,YAAY,EAAE,IAAI,CAAC,iBAAiB,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,CACjE,CAAC;IACF,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,UAAU,GAAG,gBAAgB,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,iEAAiE;UAClH,kDAAkD,CAAC;IACvD,OAAO;QACL,WAAW,EAAE,MAAM;QACnB,OAAO,EAAE;YACP,GAAG,QAAQ;YACX,GAAG,EAAE,IAAI;YACT,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,UAAU,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,UAAU;SACpF;KACF,CAAC;AACJ,CAAC"}

package/dist/verify/shortfall-park-escalation.d.ts

@@ -0,0 +1,41 @@
+import type { FileEscalationIdempotentParams, FileEscalationIdempotentResult } from '../queries/escalation-suppression.js';
+import type { HumanAct } from '../queries/filing-observation.js';
+import type { MisattributedCommitsRecord, ShortfallReconciliationDetail } from '../queries/delivery-gate-state.js';
+import type { PendingVerification } from '../queries/verification.js';
+import { type ShortfallPark } from './shortfall-park.js';
+import type { ShortfallRepeat } from './shortfall-repeat.js';
+import type { TargetShortfall } from './verify-restatement.js';
+/**
+ * The MCP tool and action an operator rules a shortfall node met or excused with.
+ * ONE definition: the operator-rulings delivery aligns its action name to this
+ * constant, and the filing's proposed human act names it.
+ */
+export declare const SHORTFALL_RULING_TOOL = "telora_product_delivery";
+export declare const SHORTFALL_RULING_ACTION = "shortfall_rule";
+/**
+ * escalation_kind of the park filing: the existing verify_gate_unclearable (see
+ * the module header for why reuse, and why its self-report exclusion is right).
+ */
+export declare const SHORTFALL_PARK_ESCALATION_KIND = "verify_gate_unclearable";
+/** metadata.diagnosis of the park filing. */
+export declare const SHORTFALL_PARK_DIAGNOSIS = "shortfall_park";
+/** Pure: the park a filing is about -- the standing record, or one read off the repeat when none was passed. */
+export declare function shortfallParkOf(shortfalls: readonly TargetShortfall[], repeat: ShortfallRepeat, park: ShortfallPark | undefined, at: string): ShortfallPark;
+/** Pure: the human act a park proposes -- rule the named nodes, or correct their tree claim. */
+export declare function shortfallParkHumanAct(deliveryName: string, nodeIds: readonly string[]): HumanAct;
+/** Pure: the park filing's body -- every repeated node, the count and limit, the commit-set fact, what releases it. */
+export declare function buildShortfallParkEscalation(deliveryName: string, shortfalls: readonly TargetShortfall[], park: ShortfallPark, limit?: number, misattributed?: MisattributedCommitsRecord): {
+    description: string;
+    whatWasTried: string;
+    helpNeeded: string;
+};
+/**
+ * File the park's ONE escalation through the cause-keyed idempotent gate (see the
+ * module header). Returns whether the filing call completed (filed, suppressed as
+ * the same standing park, or correlated onto the delivery's open incident row).
+ * Best-effort: a failure is logged, never thrown.
+ */
+export declare function fileShortfallParkEscalation(v: Pick<PendingVerification, 'deliveryId' | 'deliveryName' | 'focusId' | 'productId'>, shortfalls: readonly TargetShortfall[], park: ShortfallPark, organizationId: string, fileEscalation: (params: FileEscalationIdempotentParams) => Promise<FileEscalationIdempotentResult>, limit?: number, misattributed?: MisattributedCommitsRecord): Promise<boolean>;
+/** Pure: the message a live coding team is sent when its delivery is parked. */
+export declare function buildShortfallParkInjectMessage(deliveryName: string, park: ShortfallPark, detail: ShortfallReconciliationDetail): string;
+//# sourceMappingURL=shortfall-park-escalation.d.ts.map

package/dist/verify/shortfall-park-escalation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shortfall-park-escalation.d.ts","sourceRoot":"","sources":["../../src/verify/shortfall-park-escalation.ts"],"names":[],"mappings":"AAyCA,OAAO,KAAK,EACV,8BAA8B,EAC9B,8BAA8B,EAC/B,MAAM,sCAAsC,CAAC;AAE9C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,KAAK,EAAE,0BAA0B,EAAE,6BAA6B,EAAE,MAAM,mCAAmC,CAAC;AACnH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAGtE,OAAO,EAA+B,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACtF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAI/D;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,4BAA4B,CAAC;AAC/D,eAAO,MAAM,uBAAuB,mBAAmB,CAAC;AAExD;;;GAGG;AACH,eAAO,MAAM,8BAA8B,4BAA4B,CAAC;AAExE,6CAA6C;AAC7C,eAAO,MAAM,wBAAwB,mBAAmB,CAAC;AAEzD,gHAAgH;AAChH,wBAAgB,eAAe,CAC7B,UAAU,EAAE,SAAS,eAAe,EAAE,EACtC,MAAM,EAAE,eAAe,EACvB,IAAI,EAAE,aAAa,GAAG,SAAS,EAC/B,EAAE,EAAE,MAAM,GACT,aAAa,CAQf;AAED,gGAAgG;AAChG,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,QAAQ,CAQhG;AAED,uHAAuH;AACvH,wBAAgB,4BAA4B,CAC1C,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,SAAS,eAAe,EAAE,EACtC,IAAI,EAAE,aAAa,EACnB,KAAK,GAAE,MAAoC,EAC3C,aAAa,CAAC,EAAE,0BAA0B,GACzC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAuCnE;AAED;;;;;GAKG;AACH,wBAAsB,2BAA2B,CAC/C,CAAC,EAAE,IAAI,CAAC,mBAAmB,EAAE,YAAY,GAAG,cAAc,GAAG,SAAS,GAAG,WAAW,CAAC,EACrF,UAAU,EAAE,SAAS,eAAe,EAAE,EACtC,IAAI,EAAE,aAAa,EACnB,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,CAAC,MAAM,EAAE,8BAA8B,KAAK,OAAO,CAAC,8BAA8B,CAAC,EACnG,KAAK,GAAE,MAAoC,EAC3C,aAAa,CAAC,EAAE,0BAA0B,GACzC,OAAO,CAAC,OAAO,CAAC,CAiDlB;AAED,gFAAgF;AAChF,wBAAgB,+BAA+B,CAC7C,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,6BAA6B,GACpC,MAAM,CAQR"}

package/dist/verify/shortfall-park-escalation.js

@@ -0,0 +1,177 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/verify/shortfall-park-escalation.test.ts
+// PINNED-BY-END
+/**
+ * The ONE filing a shortfall PARK makes, and the message a live team gets when a
+ * park lands.
+ *
+ * Why (reality tree injection #13): a delivery looping on an identical verify
+ * shortfall stopped only when an operator disarmed its focus. The park
+ * (verify/shortfall-park.ts) now stops the loop on its own; this module is how a
+ * human learns of it. The act that ends a park is not a coding act: either the
+ * named nodes are ruled met or excused on the delivery (a recorded, attributed
+ * lowering of the bar -- an operator's, never a team's) or the tree claim for them
+ * is corrected. So the filing NAMES that act as its proposed human act, names
+ * every repeated node with its declared/achieved/reason, and states what releases
+ * the park.
+ *
+ * Routing (queries/filing-observation.ts): the daemon files no human-facing row.
+ * The filing lands as a machine-lane observation carrying proposed_disposition
+ * needs_operator and the proposed act; the promotion sweep hands it to a routing
+ * decider IMMEDIATELY on the delivery_parked basis (queries/agent-resolvable-promotion.ts
+ * isDeliveryParkObservation, keyed on this filing's cause key), which is what
+ * makes it the one human-facing escalation.
+ *
+ * Exactly one: the cause key (queries/cause-key.ts shortfallParkCauseKey) is the
+ * delivery plus the park's subject (repeated signature + commit set), filed
+ * through the idempotent gate. A re-judgement of the same park re-holds and is
+ * suppressed by the open (or dismissed) row; a NEW park (new commits, or another
+ * shortfall) is a new key -- and while the delivery's earlier row is still open,
+ * the incident reducer attaches it there as a symptom rather than filing a second
+ * row. The kind is the existing verify_gate_unclearable (admitted by the DB CHECK;
+ * a new kind would need a CHECK migration), and its self-report exclusion from the
+ * operator-hold predicate (queries/holds.ts) is right for a park: the durable park
+ * record, not this row, is what holds the delivery, so a ruling that releases the
+ * park is not also blocked on the row being closed.
+ *
+ * @module verify/shortfall-park-escalation
+ */
+import { ESCALATION_DISPOSITIONS, ESCALATION_REASONS, withRetry } from '@telora/daemon-core';
+import { shortfallParkCauseKey } from '../queries/cause-key.js';
+import { buildShortfallParkLines, SHORTFALL_PARK_HEADING } from '../prompt-sections/shortfall-park-section.js';
+import { createLogger } from '../shell/log.js';
+import { SHORTFALL_PARK_REPEAT_LIMIT } from './shortfall-park.js';
+import { renderMisattributedCommitLines } from './misattributed-commits.js';
+const log = createLogger({ module: 'verification' });
+/**
+ * The MCP tool and action an operator rules a shortfall node met or excused with.
+ * ONE definition: the operator-rulings delivery aligns its action name to this
+ * constant, and the filing's proposed human act names it.
+ */
+export const SHORTFALL_RULING_TOOL = 'telora_product_delivery';
+export const SHORTFALL_RULING_ACTION = 'shortfall_rule';
+/**
+ * escalation_kind of the park filing: the existing verify_gate_unclearable (see
+ * the module header for why reuse, and why its self-report exclusion is right).
+ */
+export const SHORTFALL_PARK_ESCALATION_KIND = 'verify_gate_unclearable';
+/** metadata.diagnosis of the park filing. */
+export const SHORTFALL_PARK_DIAGNOSIS = 'shortfall_park';
+/** Pure: the park a filing is about -- the standing record, or one read off the repeat when none was passed. */
+export function shortfallParkOf(shortfalls, repeat, park, at) {
+    return park ?? {
+        signature: repeat.signature,
+        commitSet: repeat.commitSet ?? null,
+        nodeIds: [...new Set(shortfalls.map((s) => s.nodeId))].sort(),
+        count: repeat.count,
+        parkedAt: at,
+    };
+}
+/** Pure: the human act a park proposes -- rule the named nodes, or correct their tree claim. */
+export function shortfallParkHumanAct(deliveryName, nodeIds) {
+    return {
+        kind: 'unreachable_capability',
+        act: `Rule the repeated shortfall node(s) ${nodeIds.join(', ')} on delivery "${deliveryName}" met or excused ` +
+            `(${SHORTFALL_RULING_TOOL} action ${SHORTFALL_RULING_ACTION}, with a rationale), or correct the tree claim ` +
+            `for those nodes.`,
+    };
+}
+/** Pure: the park filing's body -- every repeated node, the count and limit, the commit-set fact, what releases it. */
+export function buildShortfallParkEscalation(deliveryName, shortfalls, park, limit = SHORTFALL_PARK_REPEAT_LIMIT, misattributed) {
+    // Unattributed commits touching the delivery's files make an unchanged commit set
+    // doubtful evidence: the work may exist and merely be uncredited. Say so first.
+    const misattributedLines = renderMisattributedCommitLines(misattributed);
+    const misattributedBlock = misattributedLines.length > 0
+        ? `BEFORE ruling or correcting the tree, check attribution: ${misattributedLines.join('\n')}\n\n`
+        : '';
+    const nodeLines = shortfalls.map((s) => `- tree node ${s.nodeId}\n` +
+        `  declared (the outcome the injection claims): ${s.declaredStatement}\n` +
+        `  achieved (what the diff actually produced): ${s.achievedStatement}\n` +
+        `  reason: ${s.reason}`);
+    const commitFact = park.commitSet !== null
+        ? `No new delivery-trailered commits since the last judgement: every one of those judgements saw the same ` +
+            `delivery commit set (fingerprint ${park.commitSet}).`
+        : `The delivery's commit set could not be read, so the park counted identical judgements alone.`;
+    return {
+        description: `Delivery "${deliveryName}" is PARKED on a repeating verify shortfall naming node(s) ${park.nodeIds.join(', ')}.\n\n` +
+            `The identical shortfall has held on ${park.count} consecutive verify judgements (the park limit is ${limit}). ` +
+            `${commitFact} Re-coding the same diff cannot change the verdict, so the daemon has stopped sending the ` +
+            `delivery back to coding and holds it in verify (parked at ${park.parkedAt}).\n\n` +
+            `Repeated shortfall node(s):\n${nodeLines.join('\n')}\n\n` +
+            misattributedBlock +
+            `What releases the park:\n` +
+            `- genuinely new delivery commits (Telora-Delivery trailer) that change the judged commit set -- the next ` +
+            `verify judges them fresh; or\n` +
+            `- a ruling on the named node(s): ${SHORTFALL_RULING_TOOL} action ${SHORTFALL_RULING_ACTION}, met or excused, ` +
+            `with a rationale; or\n` +
+            `- a tree correction (telora_reality_tree_*) so the declared claim is one this delivery's diff can produce.`,
+        whatWasTried: `The delivery re-entered verify_failed re-work and was judged ${park.count} times; the identical shortfall ` +
+            `reproduced on an unchanged commit set each time, so further re-work was stopped.`,
+        helpNeeded: `Rule the named node(s) met or excused on the delivery (${SHORTFALL_RULING_ACTION}, with a rationale), or ` +
+            `correct the tree claim for them. The delivery stays parked in verify -- NOT re-queued for re-work -- until ` +
+            `one of those lands or new delivery commits change the outcome.`,
+    };
+}
+/**
+ * File the park's ONE escalation through the cause-keyed idempotent gate (see the
+ * module header). Returns whether the filing call completed (filed, suppressed as
+ * the same standing park, or correlated onto the delivery's open incident row).
+ * Best-effort: a failure is logged, never thrown.
+ */
+export async function fileShortfallParkEscalation(v, shortfalls, park, organizationId, fileEscalation, limit = SHORTFALL_PARK_REPEAT_LIMIT, misattributed) {
+    const body = buildShortfallParkEscalation(v.deliveryName, shortfalls, park, limit, misattributed);
+    try {
+        const result = await withRetry(() => fileEscalation({
+            causeKey: shortfallParkCauseKey(v.deliveryId, park.signature, park.commitSet),
+            organizationId,
+            sessionId: '',
+            issueId: null,
+            reasonType: ESCALATION_REASONS.ERROR_ENCOUNTERED,
+            disposition: ESCALATION_DISPOSITIONS.NEEDS_OPERATOR,
+            // Lowering the bar on a declared node is an authority act no agent session
+            // holds; the chokepoint carries it as the observation's proposed_human_act.
+            humanAct: shortfallParkHumanAct(v.deliveryName, park.nodeIds),
+            anchor: {
+                deliveryId: v.deliveryId,
+                ...(v.focusId ? { focusId: v.focusId } : {}),
+                ...(v.productId ? { productId: v.productId } : {}),
+            },
+            escalationKind: SHORTFALL_PARK_ESCALATION_KIND,
+            description: body.description,
+            whatWasTried: body.whatWasTried,
+            helpNeeded: body.helpNeeded,
+            metadata: {
+                cause: SHORTFALL_PARK_ESCALATION_KIND,
+                diagnosis: SHORTFALL_PARK_DIAGNOSIS,
+                deliveryName: v.deliveryName,
+                nodeIds: park.nodeIds,
+                repeatCount: park.count,
+                repeatLimit: limit,
+                commitSet: park.commitSet,
+                signature: park.signature,
+                parkedAt: park.parkedAt,
+                rulingAction: SHORTFALL_RULING_ACTION,
+            },
+        }), { maxAttempts: 3, label: `escalation-shortfall-park-${v.deliveryId}` });
+        if (result.filed) {
+            log.info(`[verification] Parked delivery "${v.deliveryName}" on a repeating shortfall (x${park.count}, nodes ` +
+                `${park.nodeIds.join(', ')}); filed its one escalation.`);
+        }
+        return true;
+    }
+    catch (err) {
+        log.warn(`failed to file shortfall-park escalation for delivery ${v.deliveryId}:`, err.message);
+        return false;
+    }
+}
+/** Pure: the message a live coding team is sent when its delivery is parked. */
+export function buildShortfallParkInjectMessage(deliveryName, park, detail) {
+    return [
+        `VERIFY PARKED for delivery "${deliveryName}".`,
+        '',
+        `**${SHORTFALL_PARK_HEADING}:**`,
+        ...buildShortfallParkLines(park, detail.shortfalls),
+        ...renderMisattributedCommitLines(detail.misattributed).map((l) => `- ${l}`),
+    ].join('\n');
+}
+//# sourceMappingURL=shortfall-park-escalation.js.map

package/dist/verify/shortfall-park-escalation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shortfall-park-escalation.js","sourceRoot":"","sources":["../../src/verify/shortfall-park-escalation.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,0EAA0E;AAC1E,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAK7F,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAIhE,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAC;AAC/G,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,2BAA2B,EAAsB,MAAM,qBAAqB,CAAC;AAEtF,OAAO,EAAE,8BAA8B,EAAE,MAAM,4BAA4B,CAAC;AAG5E,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAErD;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,yBAAyB,CAAC;AAC/D,MAAM,CAAC,MAAM,uBAAuB,GAAG,gBAAgB,CAAC;AAExD;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,yBAAyB,CAAC;AAExE,6CAA6C;AAC7C,MAAM,CAAC,MAAM,wBAAwB,GAAG,gBAAgB,CAAC;AAEzD,gHAAgH;AAChH,MAAM,UAAU,eAAe,CAC7B,UAAsC,EACtC,MAAuB,EACvB,IAA+B,EAC/B,EAAU;IAEV,OAAO,IAAI,IAAI;QACb,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;QACnC,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;QAC7D,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,EAAE;KACb,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,qBAAqB,CAAC,YAAoB,EAAE,OAA0B;IACpF,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,GAAG,EACD,uCAAuC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,YAAY,mBAAmB;YACzG,IAAI,qBAAqB,WAAW,uBAAuB,iDAAiD;YAC5G,kBAAkB;KACrB,CAAC;AACJ,CAAC;AAED,uHAAuH;AACvH,MAAM,UAAU,4BAA4B,CAC1C,YAAoB,EACpB,UAAsC,EACtC,IAAmB,EACnB,QAAgB,2BAA2B,EAC3C,aAA0C;IAE1C,kFAAkF;IAClF,gFAAgF;IAChF,MAAM,kBAAkB,GAAG,8BAA8B,CAAC,aAAa,CAAC,CAAC;IACzE,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,MAAM,GAAG,CAAC;QACtD,CAAC,CAAC,4DAA4D,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;QACjG,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACrC,eAAe,CAAC,CAAC,MAAM,IAAI;QAC3B,kDAAkD,CAAC,CAAC,iBAAiB,IAAI;QACzE,iDAAiD,CAAC,CAAC,iBAAiB,IAAI;QACxE,aAAa,CAAC,CAAC,MAAM,EAAE,CACxB,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,KAAK,IAAI;QACxC,CAAC,CAAC,yGAAyG;YACzG,oCAAoC,IAAI,CAAC,SAAS,IAAI;QACxD,CAAC,CAAC,8FAA8F,CAAC;IACnG,OAAO;QACL,WAAW,EACT,aAAa,YAAY,8DAA8D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO;YACrH,uCAAuC,IAAI,CAAC,KAAK,qDAAqD,KAAK,KAAK;YAChH,GAAG,UAAU,4FAA4F;YACzG,6DAA6D,IAAI,CAAC,QAAQ,QAAQ;YAClF,gCAAgC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;YAC1D,kBAAkB;YAClB,2BAA2B;YAC3B,2GAA2G;YAC3G,gCAAgC;YAChC,oCAAoC,qBAAqB,WAAW,uBAAuB,oBAAoB;YAC/G,wBAAwB;YACxB,4GAA4G;QAC9G,YAAY,EACV,gEAAgE,IAAI,CAAC,KAAK,kCAAkC;YAC5G,kFAAkF;QACpF,UAAU,EACR,0DAA0D,uBAAuB,0BAA0B;YAC3G,6GAA6G;YAC7G,gEAAgE;KACnE,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,CAAqF,EACrF,UAAsC,EACtC,IAAmB,EACnB,cAAsB,EACtB,cAAmG,EACnG,QAAgB,2BAA2B,EAC3C,aAA0C;IAE1C,MAAM,IAAI,GAAG,4BAA4B,CAAC,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;IAClG,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,GAAG,EAAE,CAAC,cAAc,CAAC;YACnB,QAAQ,EAAE,qBAAqB,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC;YAC7E,cAAc;YACd,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,kBAAkB,CAAC,iBAAiB;YAChD,WAAW,EAAE,uBAAuB,CAAC,cAAc;YACnD,2EAA2E;YAC3E,4EAA4E;YAC5E,QAAQ,EAAE,qBAAqB,CAAC,CAAC,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC;YAC7D,MAAM,EAAE;gBACN,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnD;YACD,cAAc,EAAE,8BAA8B;YAC9C,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ,EAAE;gBACR,KAAK,EAAE,8BAA8B;gBACrC,SAAS,EAAE,wBAAwB;gBACnC,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,WAAW,EAAE,IAAI,CAAC,KAAK;gBACvB,WAAW,EAAE,KAAK;gBAClB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,YAAY,EAAE,uBAAuB;aACtC;SACF,CAAC,EACF,EAAE,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,6BAA6B,CAAC,CAAC,UAAU,EAAE,EAAE,CACvE,CAAC;QACF,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,GAAG,CAAC,IAAI,CACN,mCAAmC,CAAC,CAAC,YAAY,gCAAgC,IAAI,CAAC,KAAK,UAAU;gBACrG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,CACzD,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC,UAAU,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QAC3G,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,+BAA+B,CAC7C,YAAoB,EACpB,IAAmB,EACnB,MAAqC;IAErC,OAAO;QACL,+BAA+B,YAAY,IAAI;QAC/C,EAAE;QACF,KAAK,sBAAsB,KAAK;QAChC,GAAG,uBAAuB,CAAC,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC;QACnD,GAAG,8BAA8B,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;KAC7E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/verify/shortfall-park.d.ts

@@ -0,0 +1,109 @@
+import { type DeliveryGateState, type ShortfallPark, type ShortfallRepeatRecord } from '../queries/delivery-gate-state.js';
+import type { TargetShortfall } from './verify-restatement.js';
+export { SHORTFALL_PARK_REPEAT_LIMIT } from './shortfall-repeat.js';
+export type { ShortfallPark } from '../queries/delivery-gate-state.js';
+/**
+ * Order-independent fingerprint of a delivery's commit set. The input is the set
+ * of commit IDENTITIES the resolver read (verify/delivery-commit-set.ts: patch ids,
+ * so a rebase that re-shas unchanged commits is not "new work"); trimmed,
+ * lowercased, deduped and sorted before hashing, so the same set in any order or
+ * with repeats fingerprints identically. The empty set has a fingerprint too: a
+ * delivery with no commits of its own is a known, unchanging set. Pure.
+ */
+export declare function commitSetFingerprint(ids: readonly string[]): string;
+/** The standing park a gate_state carries, or null (none, malformed, or a verify pass dropped it). Pure. */
+export declare function readShortfallPark(gateState: unknown): ShortfallPark | null;
+/**
+ * The park that makes a delivery NON-REWORKABLE: a standing park on a delivery
+ * that sits in verify, or null. The ONE predicate every daemon writer and spawn
+ * gate reads before sending a verify delivery back to coding (the review exit's
+ * verify_failed route, the live open-issues pass, the review-next-step decision,
+ * the review park), so none of them can disagree about a parked delivery.
+ *
+ * The park is AUTHORITATIVE in those readers: they neither release nor replace
+ * it. VERIFY is its single releaser -- a verify re-judgement on a changed
+ * delivery commit set (a new focus HEAD re-arms every delivery in verify) routes
+ * the delivery to re-work and drops the park (routeShortfallOutcome ->
+ * withShortfallPark(..., null)); a pass drops it (clearVerificationHistory); an
+ * operator ruling releases it through isShortfallParkReleased, which re-arms that
+ * re-judgement at an unchanged focus HEAD (verify/shortfall-rulings.ts). A reader that cannot know the current commit set therefore holds.
+ *
+ * Only a delivery IN VERIFY is refused: a park carried onto another status (the
+ * Nexus hand-back of a declined request moves a verify delivery to re-plan on a
+ * new external fact, once) is not a verify re-judgement loop, and the park still
+ * re-holds at its first unchanged re-judgement. Literal 'verify' (mock-safe). Pure.
+ */
+export declare function shortfallParkRefusingRework(delivery: {
+    executionStatus?: string | null;
+    gateState?: unknown;
+}): ShortfallPark | null;
+/** What a reader knows NOW about the facts that release a park. */
+export interface ShortfallParkReleaseFacts {
+    /** The delivery's current commit-set fingerprint; null when it could not be read. */
+    commitSet: string | null;
+    /**
+     * The fingerprint of the operator rulings recorded on the delivery now
+     * (queries/shortfall-rulings.ts). Absent or null means the reader has no ruling facts.
+     */
+    rulingsFingerprint?: string | null;
+}
+/**
+ * Whether a standing park is RELEASED -- the delivery may be judged and sent to
+ * coding again. Released when:
+ *   - a KNOWN current commit set differs from the park's known set (someone
+ *     committed new delivery work since the park); or
+ *   - a non-empty current rulings fingerprint differs from the park's (a ruling
+ *     was recorded since the park; verify/shortfall-rulings.ts re-arms verify on
+ *     it at an unchanged focus HEAD).
+ * An unreadable current set, or a park recorded without one, releases nothing by
+ * commit set: a read failure must not respawn a parked loop. Pure.
+ */
+export declare function isShortfallParkReleased(park: ShortfallPark, current: ShortfallParkReleaseFacts): boolean;
+/** The outcome of classifying one shortfall judgement. */
+export interface ShortfallParkClassification {
+    /** The repeat record to persist (live on the written gate), carrying the commit set when known. */
+    repeat: ShortfallRepeatRecord;
+    /** True when the delivery is (or stays) parked: do NOT send it back to coding. */
+    parked: boolean;
+    /** The park record to carry when parked (the original parkedAt kept on a re-hold); null otherwise. */
+    park: ShortfallPark | null;
+}
+/**
+ * Classify this judgement's shortfall set against the delivery's prior gate_state
+ * and the commit set it was judged on (see the module header for the count rule).
+ *
+ * A standing, unreleased park for the SAME signature keeps the delivery parked
+ * even when the live repeat record was displaced by another writer: the count
+ * continues from the larger of the two, and the park keeps its original parkedAt.
+ * The count keeps climbing on every re-hold (it reports how many identical
+ * judgements the park has absorbed; it is never used as a cap). When the current
+ * set is unknown, the last KNOWN set is carried forward, so the next readable
+ * judgement still compares against real history.
+ *
+ * OPERATOR RULINGS (verify/shortfall-rulings.ts) are applied before this runs: a
+ * ruled node is no longer in `shortfalls`. `rulingsFingerprint` is the fingerprint
+ * of the rulings that judgement applied (null when they could not be read). Two
+ * rules follow:
+ *   - the park records it (null keeps the standing park's), so a park re-held by
+ *     the judgement a ruling re-armed is no longer released by that ruling -- the
+ *     re-judgement happens once per new ruling, not on every tick;
+ *   - a NEW ruling that disposed of SOME of the parked nodes on an unchanged
+ *     commit set narrows the park to the rest instead of ending it: those nodes
+ *     already repeated unchanged, so sending them back to coding would restart the
+ *     loop the park stopped. The narrowed park keeps its parkedAt; its changed
+ *     signature files its own escalation naming the nodes still held.
+ * A ruling that disposes of every node leaves no shortfall to classify: the
+ * verify passes and the pass reset drops the park.
+ *
+ * Pure -- the caller supplies the prior gate_state (read once), the current commit
+ * fingerprint (or null), `now` for a first park's parkedAt, and the applied
+ * rulings fingerprint (or null).
+ */
+export declare function classifyShortfallPark(priorGateState: DeliveryGateState | null | undefined, shortfalls: readonly TargetShortfall[], commitSet: string | null, limit?: number, now?: string, rulingsFingerprint?: string | null): ShortfallParkClassification;
+/**
+ * `gateState` with its shortfall park REPLACED: set to `park`, or removed when
+ * null (a shortfall routed back to re-work is not parked). The rest of the
+ * history is untouched; an emptied history key is dropped. Pure.
+ */
+export declare function withShortfallPark(gateState: DeliveryGateState, park: ShortfallPark | null): DeliveryGateState;
+//# sourceMappingURL=shortfall-park.d.ts.map