@telora/daemon 0.22.239 → 0.22.289

package/dist/verify/gate-config/commit-gate-configured.d.ts

@@ -0,0 +1,91 @@
+import type { DaemonConfig } from '../../types/index.js';
+import { type DefaultVerificationResolver } from './verification-config.js';
+import { type VerifyManifestReader } from './verification-manifest.js';
+import { type JudgedCommitRead } from '../run-selection/verification-default-on.js';
+import { type CommitVerdict, type CommitVerdictGate } from '../gate-verdicts/commit-verdict-record.js';
+import { type RecordedGateOutcome } from '../gate-verdicts/gate-run-registry.js';
+/** The delivery the question is asked about. */
+export interface CommitGateSubject {
+    productId: string;
+    focusId: string;
+    focusReadOnly: boolean;
+    deliveryId: string;
+    injectionId: string | null;
+    /** The delivery's gate_state as the caller read it: it carries the explicit-method verdict across a restart. */
+    gateState?: unknown;
+}
+/** What governs a delivery's gate verdict. */
+export interface CommitGateResolution {
+    /** Whether the verification tick runs a gate whose verdict routing can wait on. */
+    configured: boolean;
+    /**
+     * The gate the delivery's per-commit verdict is recorded under -- its explicit
+     * row's command + timeout, or the product's default-on gate -- or null when no
+     * per-commit record can govern it.
+     */
+    gate: CommitVerdictGate | null;
+    /**
+     * The gate an explicit run's recorded verdict must have been rendered under to
+     * govern the delivery (explicitGateKeyOf over its row's method + config); null
+     * when the row names no method or cannot be read, so no explicit verdict governs
+     * it; absent when an older edge sends the row without its columns, so a verdict
+     * of any gate does.
+     */
+    explicitGateKey?: string | null;
+}
+/** The gate reads a verify routing decision takes (review exit, release pass, live open-work pass). */
+export interface CommitGateSeams {
+    /** Whether a gate is configured for the delivery, and which gate governs its verdict. */
+    resolveCommitGate: (subject: CommitGateSubject) => Promise<CommitGateResolution>;
+    /**
+     * A bare configured-ness predicate: supplied only by a partial deps object (a
+     * test), it answers alone and asks the record with no gate, and it wins over a
+     * resolver beside it. Production wires resolveCommitGate only.
+     */
+    isCommitGateConfigured?: (subject: CommitGateSubject) => Promise<boolean>;
+    /** The commit a focus's deliveries are judged on (its worktree HEAD), or null when unreadable. */
+    resolveJudgedCommit: (focusId: string) => string | null;
+    /** The per-commit verdict recorded for the focus commit under `gate`; a null gate matches no record. */
+    readCommitVerdict: (productId: string, focusId: string, sha: string, gate: CommitVerdictGate | null) => CommitVerdict | null;
+    /** The outcome an explicit-method run recorded for the delivery (in process, else on `gateState`), when it applies to `sha` under `gateKey`. */
+    readDeliveryGateOutcome: (deliveryId: string, sha: string | null, gateState?: unknown, gateKey?: string | null) => RecordedGateOutcome | null;
+    /** Whether a gate run that may judge `sha` on the focus is selected or in flight. */
+    hasPendingGateRun: (focusId: string, sha: string | null) => boolean;
+}
+/** A delivery row as the explicit-identity read takes it (undefined columns: an edge that does not send them). */
+interface VerificationIdentityRow {
+    id: string;
+    verificationMethod?: string | null;
+    verificationConfig?: unknown;
+    verificationOutcome?: string | null;
+}
+/**
+ * The resolution's collaborators, every one REQUIRED: the composition root
+ * (composition/commit-gate-context.ts) binds the production set once; a test
+ * binds its own.
+ */
+export interface CommitGateConfiguredDeps {
+    getConfig: () => DaemonConfig | null;
+    env: NodeJS.ProcessEnv;
+    /** The durable delivery rows of a focus (their verification columns). */
+    getFocusDeliveries: (focusId: string) => Promise<ReadonlyArray<VerificationIdentityRow>>;
+    getPendingVerifications: (productId: string) => Promise<ReadonlyArray<{
+        deliveryId: string;
+        verificationMethod?: string;
+        verificationConfig?: Record<string, unknown> | null;
+        verificationOutcome?: string | null;
+    }>>;
+    resolveDefaultVerification: DefaultVerificationResolver;
+    /** Reads a repoPath's telora.verify.json (the fallback a judged-commit gate reads beside the committed one). */
+    readVerifyManifest: VerifyManifestReader;
+    /** The telora.verify.json the focus's judged commit ships; production binds buildJudgedCommitManifestReader. */
+    readJudgedCommitManifest: (focusId: string) => JudgedCommitRead | null;
+}
+/** The commit a focus's deliveries are judged on: its registered worktree's HEAD, or null when unreadable. */
+export declare function resolveFocusJudgedCommit(focusId: string): string | null;
+/** See the module header: whether a gate is configured for the delivery, and which gate governs its verdict. */
+export declare function resolveCommitGate(subject: CommitGateSubject, deps: CommitGateConfiguredDeps): Promise<CommitGateResolution>;
+/** Whether a gate is configured for the delivery (see the module header). */
+export declare function isCommitGateConfigured(subject: CommitGateSubject, deps: CommitGateConfiguredDeps): Promise<boolean>;
+export {};
+//# sourceMappingURL=commit-gate-configured.d.ts.map

package/dist/verify/gate-config/commit-gate-configured.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commit-gate-configured.d.ts","sourceRoot":"","sources":["../../../src/verify/gate-config/commit-gate-configured.ts"],"names":[],"mappings":"AA2GA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzD,OAAO,EAAE,KAAK,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,KAAK,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAoC,KAAK,gBAAgB,EAAE,MAAM,6CAA6C,CAAC;AAItH,OAAO,EAA0C,KAAK,aAAa,EAAE,KAAK,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AAC/I,OAAO,EAAE,KAAK,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AAGjF,gDAAgD;AAChD,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,gHAAgH;IAChH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,8CAA8C;AAC9C,MAAM,WAAW,oBAAoB;IACnC,mFAAmF;IACnF,UAAU,EAAE,OAAO,CAAC;IACpB;;;;OAIG;IACH,IAAI,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC/B;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,uGAAuG;AACvG,MAAM,WAAW,eAAe;IAC9B,yFAAyF;IACzF,iBAAiB,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjF;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1E,kGAAkG;IAClG,mBAAmB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACxD,wGAAwG;IACxG,iBAAiB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,IAAI,KAAK,aAAa,GAAG,IAAI,CAAC;IAC7H,gJAAgJ;IAChJ,uBAAuB,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,KAAK,mBAAmB,GAAG,IAAI,CAAC;IAC9I,qFAAqF;IACrF,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC;CACrE;AAED,kHAAkH;AAClH,UAAU,uBAAuB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,YAAY,GAAG,IAAI,CAAC;IACrC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,yEAAyE;IACzE,kBAAkB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,aAAa,CAAC,uBAAuB,CAAC,CAAC,CAAC;IACzF,uBAAuB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,aAAa,CAAC;QACpE,UAAU,EAAE,MAAM,CAAC;QACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;QACpD,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACrC,CAAC,CAAC,CAAC;IACJ,0BAA0B,EAAE,2BAA2B,CAAC;IACxD,gHAAgH;IAChH,kBAAkB,EAAE,oBAAoB,CAAC;IACzC,gHAAgH;IAChH,wBAAwB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,gBAAgB,GAAG,IAAI,CAAC;CACxE;AAID,8GAA8G;AAC9G,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGvE;AA0DD,gHAAgH;AAChH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,iBAAiB,EAC1B,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,oBAAoB,CAAC,CAwB/B;AA6BD,6EAA6E;AAC7E,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,iBAAiB,EAC1B,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,OAAO,CAAC,CAElB"}

package/dist/verify/gate-config/commit-gate-configured.js

@@ -0,0 +1,219 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/completion/review-exit-holds/review-exit-verdict-gate.test.ts,
+//   packages/daemon/src/composition/subsystem-contexts.test.ts,
+//   packages/daemon/src/focus/focus-poller-product-poll.test.ts,
+//   packages/daemon/src/integration/delivery-gate-write-interleaving.test.ts,
+//   packages/daemon/src/integration/explicit-gate-identity-unreadable.test.ts,
+//   packages/daemon/src/integration/explicit-gate-outcome-restart.test.ts,
+//   packages/daemon/src/integration/explicit-verdict-invalidation-restart.test.ts,
+//   packages/daemon/src/integration/explicit-verdict-reuse.test.ts,
+//   packages/daemon/src/integration/focus-commit-verdict-scenario.test.ts,
+//   packages/daemon/src/merge/approval-gate-state.test.ts,
+//   packages/daemon/src/spawn/prompt-assembly-resume-verdict.test.ts,
+//   packages/daemon/src/verify/engine/verification-commit-sharing.test.ts,
+//   packages/daemon/src/verify/gate-config/commit-gate-configured.test.ts
+// PINNED-BY-END
+/**
+ * Whether a deterministic gate is configured for a verify delivery -- whether the
+ * verification tick runs a gate whose verdict the review exit can wait on, and
+ * WHICH gate that is -- plus the gate seams contract every verify routing
+ * decision reads (bound for production at the composition root,
+ * composition/commit-gate-context.ts).
+ *
+ * The review exit holds a verify delivery out of done until a passing verdict
+ * exists for the commit it judges (completion/review-exit-holds/review-exit-verdict-gate.ts). That
+ * hold is only safe where a verdict will actually be rendered -- holding a
+ * delivery no gate will ever judge strands it in verify -- so this predicate
+ * mirrors the tick's own selection (runVerificationTick ->
+ * resolveProductVerificationScopes -> collectDefaultOnVerifications) instead of
+ * restating it:
+ *   - the verification loop runs (TELORA_VERIFICATION_LOOP is not '0');
+ *   - the focus is not read-only and the delivery is anchored to an injection;
+ *   - the delivery is an explicit-method row with a method that renders verdicts,
+ *     OR its product resolves a command, or -- unless the operator declined -- the
+ *     telora.verify.json its judged commit ships declares one (or is malformed,
+ *     which the dispatch still runs and fails loudly).
+ *
+ * An explicit-method delivery is gated by its own run, and is known as one from
+ * the DURABLE delivery row (its verification_method, on the focus delivery read),
+ * not from the pending-verification queue: that queue drops a row once its
+ * outcome is terminal, and an explicit pass must not then read as a default-on
+ * delivery. Only a row from an edge that does not send the column yet (undefined,
+ * not null), or an unreadable row, falls back to the queue. Where neither names a
+ * method, a verdict an explicit run recorded (verify/gate-verdicts/explicit-gate-outcome.ts: in
+ * process, or on the gate_state the subject carries) still reads "configured", so
+ * a restarted daemon never takes that verdict for no gate at all. The exception
+ * is the behavioral method, a scaffold that always returns pending: no verdict is
+ * ever rendered for it, so waiting on one would strand the delivery -- not
+ * configured.
+ *
+ * Where an explicit run writes no per-commit verdict (an in-place run has no
+ * judged sha; an ai_inspection writes none), the outcome it records IS the
+ * verdict, from two sources read in order (readDeliveryGateOutcome):
+ *   (a) this process's own record (verify/gate-verdicts/gate-run-registry.ts);
+ *   (b) else the record on the delivery's gate_state
+ *       (verificationHistory.explicitOutcome), which carries failures, no-SHA
+ *       outcomes and the commit the run judged, and is removed before a
+ *       replacement run starts -- so it never outlives the run that supersedes it.
+ * The row's own verification_outcome is NOT a verdict source: the edge stores a
+ * pass with no judged commit, so a pass rendered for commit A would read as a
+ * pass for every later commit. Where neither (a) nor (b) knows the run, the
+ * explicit re-arm scan (verify/run-selection/explicit-rearm.ts) selects the row again, so the
+ * gate renders a verdict bound to the judged commit.
+ *
+ * The gate is part of the answer (resolveCommitGate). A per-commit verdict is
+ * recorded under the gate its run APPLIED (verify/gate-verdicts/commit-verdict-record.ts), and
+ * one commit can carry verdicts of several gates: a sibling's default-on pass says
+ * nothing about a delivery whose own explicit command never ran, and a sibling's
+ * failure must not hold it. Routing reads a verdict only under the delivery's own
+ * gate -- its explicit row's command + timeout, or, for a default-on delivery, the
+ * gate its run applies at the judged commit (verify/gate-config/judged-commit-gate.ts: a
+ * branch manifest that overrides the repoPath gate is the gate that runs), or the
+ * scan's gate where no focus worktree exists and the run is in place. No gate (no
+ * command, a judged commit nobody could read or whose manifest is malformed, or a
+ * delivery gated only by its recorded explicit verdict) matches no per-commit
+ * record. Every own-gate source is read, and a failure from any wins
+ * (completion/review-exit-holds/review-exit-verdict-gate.ts).
+ *
+ * An explicit run's recorded verdict is read the same way: only under the gate its
+ * run applied (explicitGateKey: the row's method + config). The edge lets an
+ * operator change a row's method or config without resetting its outcome, so a
+ * verdict rendered under the old gate governs nothing, and a row that names no
+ * method takes no explicit verdict at all. A row an older edge sends without the
+ * columns, which the queue does not list, takes a recorded verdict of any gate.
+ * But a row that cannot be read at all, or that a
+ * successful read of the focus's deliveries does not contain, which the queue does
+ * not list, has an identity nobody knows -- it may name a changed gate,
+ * or be explicit where the product also has a default-on gate -- so it is gated by
+ * NO gate: configured, with no per-commit gate and no explicit gate. It holds until
+ * the row reads again, and never borrows the default-on gate's verdict or one an
+ * arbitrary explicit gate rendered.
+ *
+ * Deliberately NOT mirrored: the tick's re-run guards (already ran this
+ * verify-entry; failed on the unchanged HEAD). They decide whether to run AGAIN,
+ * not whether a gate is configured, and the verdict is read from the durable
+ * per-commit record either way.
+ *
+ * Direction of error: an answer git could not give (the judged commit's manifest
+ * is unreadable) and an unreadable explicit-method list read as "configured" --
+ * hold, fail closed -- because the release pass re-asks every poll and releases
+ * the moment this reads "not configured". No daemon config or no such product (no
+ * running daemon context) reads "not configured": nothing would run a gate there.
+ *
+ * @module verify/gate-config/commit-gate-configured
+ */
+import { loadEnvConfig } from '@telora/daemon-core';
+import { findProduct } from '../../config/config.js';
+import { resolveProductVerificationScopes } from '../run-selection/verification-default-on.js';
+import { judgedCommitGate } from './judged-commit-gate.js';
+import { getFocusWorktree } from '../../worktree/focus-worktree-state.js';
+import { resolveHeadSha } from '../attribution/verification-baseline.js';
+import { commitVerdictGateOf, explicitGateKeyOf } from '../gate-verdicts/commit-verdict-record.js';
+import { hasRecordedExplicitGateOutcome } from '../gate-verdicts/explicit-gate-outcome.js';
+const NOT_CONFIGURED = { configured: false, gate: null };
+/** The commit a focus's deliveries are judged on: its registered worktree's HEAD, or null when unreadable. */
+export function resolveFocusJudgedCommit(focusId) {
+    const worktree = getFocusWorktree(focusId);
+    return worktree ? resolveHeadSha(worktree.worktreePath) : null;
+}
+function configRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value) ? value : null;
+}
+/**
+ * The delivery's explicit verification identity: from the durable row, or -- when
+ * the row does not carry the columns or cannot be read -- from the
+ * pending-verification queue. See the module header.
+ */
+async function readExplicitIdentity(subject, deps) {
+    // Until a read shows the row itself, its identity is unknown: a read that throws, or one that omits the row.
+    let unlisted = { kind: 'unknown' };
+    try {
+        const rows = await deps.getFocusDeliveries(subject.focusId);
+        const row = rows.find((d) => d.id === subject.deliveryId);
+        if (row && row.verificationMethod !== undefined) {
+            return row.verificationMethod
+                ? { kind: 'explicit', identity: { method: row.verificationMethod, config: configRecord(row.verificationConfig), outcome: row.verificationOutcome ?? null } }
+                : { kind: 'none' };
+        }
+        // A present row without the columns is an older edge's; an absent one stays unknown.
+        if (row)
+            unlisted = { kind: 'unsent' };
+    }
+    catch {
+        // Unreadable row: the pending queue below may still name its identity.
+    }
+    try {
+        const pending = await deps.getPendingVerifications(subject.productId);
+        const row = pending.find((p) => p.deliveryId === subject.deliveryId);
+        return row
+            ? { kind: 'explicit', identity: { method: row.verificationMethod ?? '', config: row.verificationConfig ?? null, outcome: row.verificationOutcome ?? null } }
+            : unlisted;
+    }
+    catch {
+        // Unreadable: the tick skips the product on this same failure and retries.
+        return unlisted;
+    }
+}
+/** A delivery whose identity nobody could read: held, and governed by no gate's verdict (see the module header). */
+const UNKNOWN_IDENTITY = { configured: true, gate: null, explicitGateKey: null };
+/** See the module header: whether a gate is configured for the delivery, and which gate governs its verdict. */
+export async function resolveCommitGate(subject, deps) {
+    const { env } = deps;
+    if (!loadEnvConfig(env).TELORA_VERIFICATION_LOOP)
+        return NOT_CONFIGURED;
+    if (subject.focusReadOnly || !subject.injectionId)
+        return NOT_CONFIGURED;
+    const config = deps.getConfig();
+    const product = config ? findProduct(config, subject.productId) : undefined;
+    if (!config || !product)
+        return NOT_CONFIGURED;
+    const read = await readExplicitIdentity(subject, deps);
+    if (read.kind === 'explicit') {
+        const explicit = read.identity;
+        if (explicit.method === 'behavioral')
+            return NOT_CONFIGURED;
+        return {
+            configured: true,
+            gate: commitVerdictGateOf({ verificationConfig: explicit.config }),
+            explicitGateKey: explicitGateKeyOf(explicit.method, explicit.config),
+        };
+    }
+    if (read.kind === 'unknown')
+        return UNKNOWN_IDENTITY;
+    const defaultOn = resolveDefaultOnGate(subject, deps, env, config, product);
+    // The row names no method: no explicit verdict governs it, one recorded before its method was cleared included.
+    if (read.kind === 'none')
+        return { ...defaultOn, explicitGateKey: null };
+    if (defaultOn.configured || !hasRecordedExplicitGateOutcome(subject.deliveryId, subject.gateState))
+        return defaultOn;
+    // No method named anywhere, but its explicit run recorded a verdict: gated by that run, with no per-commit gate.
+    return { configured: true, gate: null };
+}
+/** The default-on gate the verification scan arms for the delivery (see the module header), or not configured. */
+function resolveDefaultOnGate(subject, deps, env, config, product) {
+    const [scope] = resolveProductVerificationScopes({ ...config, products: [product] }, deps.resolveDefaultVerification);
+    const scanResolved = scope?.resolved ?? scope?.judgedCommitOnly;
+    if (!scope || !scanResolved)
+        return NOT_CONFIGURED;
+    if (!scanResolved.enabled && scope.productConfig.defaultVerification?.declined === true)
+        return NOT_CONFIGURED;
+    const read = deps.readJudgedCommitManifest(subject.focusId);
+    if (read === null) {
+        // No focus worktree: an armed candidate runs in place on the scan's own config.
+        return scanResolved.enabled
+            ? { configured: true, gate: { command: scanResolved.command, timeoutMs: scanResolved.timeoutMs } }
+            : NOT_CONFIGURED;
+    }
+    if ('unreadable' in read)
+        return { configured: true, gate: null };
+    if (!scanResolved.enabled && read.manifest === undefined && read.malformed === undefined)
+        return NOT_CONFIGURED;
+    // The run re-resolves its gate from the judged commit and records under what it applied: read under that same gate.
+    const source = { defaultVerification: scope.productConfig.defaultVerification, repoPath: scope.productConfig.repoPath };
+    return { configured: true, gate: judgedCommitGate(source, read, env, deps.readVerifyManifest) };
+}
+/** Whether a gate is configured for the delivery (see the module header). */
+export async function isCommitGateConfigured(subject, deps) {
+    return (await resolveCommitGate(subject, deps)).configured;
+}
+//# sourceMappingURL=commit-gate-configured.js.map

package/dist/verify/gate-config/commit-gate-configured.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commit-gate-configured.js","sourceRoot":"","sources":["../../../src/verify/gate-config/commit-gate-configured.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,gGAAgG;AAChG,gEAAgE;AAChE,iEAAiE;AACjE,8EAA8E;AAC9E,+EAA+E;AAC/E,2EAA2E;AAC3E,mFAAmF;AACnF,oEAAoE;AACpE,2EAA2E;AAC3E,2DAA2D;AAC3D,sEAAsE;AACtE,2EAA2E;AAC3E,0EAA0E;AAC1E,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwFG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAGrD,OAAO,EAAE,gCAAgC,EAAyB,MAAM,6CAA6C,CAAC;AACtH,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAA8C,MAAM,2CAA2C,CAAC;AAE/I,OAAO,EAAE,8BAA8B,EAAE,MAAM,2CAA2C,CAAC;AAoF3F,MAAM,cAAc,GAAyB,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAE/E,8GAA8G;AAC9G,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC3C,OAAO,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjE,CAAC;AASD,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1H,CAAC;AAWD;;;;GAIG;AACH,KAAK,UAAU,oBAAoB,CAAC,OAA0B,EAAE,IAA8B;IAC5F,6GAA6G;IAC7G,IAAI,QAAQ,GAAiB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1D,IAAI,GAAG,IAAI,GAAG,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAChD,OAAO,GAAG,CAAC,kBAAkB;gBAC3B,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,kBAAkB,EAAE,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,mBAAmB,IAAI,IAAI,EAAE,EAAE;gBAC5J,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACvB,CAAC;QACD,qFAAqF;QACrF,IAAI,GAAG;YAAE,QAAQ,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;IACzE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;QACrE,OAAO,GAAG;YACR,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,kBAAkB,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,kBAAkB,IAAI,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,mBAAmB,IAAI,IAAI,EAAE,EAAE;YAC5J,CAAC,CAAC,QAAQ,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;QAC3E,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,oHAAoH;AACpH,MAAM,gBAAgB,GAAyB,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;AAEvG,gHAAgH;AAChH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAA0B,EAC1B,IAA8B;IAE9B,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACrB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,wBAAwB;QAAE,OAAO,cAAc,CAAC;IACxE,IAAI,OAAO,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,WAAW;QAAE,OAAO,cAAc,CAAC;IACzE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO;QAAE,OAAO,cAAc,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACvD,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,IAAI,QAAQ,CAAC,MAAM,KAAK,YAAY;YAAE,OAAO,cAAc,CAAC;QAC5D,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE,mBAAmB,CAAC,EAAE,kBAAkB,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;YAClE,eAAe,EAAE,iBAAiB,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;SACrE,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,gBAAgB,CAAC;IACrD,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5E,gHAAgH;IAChH,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,GAAG,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACzE,IAAI,SAAS,CAAC,UAAU,IAAI,CAAC,8BAA8B,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IACrH,iHAAiH;IACjH,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED,kHAAkH;AAClH,SAAS,oBAAoB,CAC3B,OAA0B,EAC1B,IAA8B,EAC9B,GAAsB,EACtB,MAAoB,EACpB,OAAoD;IAEpD,MAAM,CAAC,KAAK,CAAC,GAAG,gCAAgC,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACtH,MAAM,YAAY,GAAG,KAAK,EAAE,QAAQ,IAAI,KAAK,EAAE,gBAAgB,CAAC;IAChE,IAAI,CAAC,KAAK,IAAI,CAAC,YAAY;QAAE,OAAO,cAAc,CAAC;IACnD,IAAI,CAAC,YAAY,CAAC,OAAO,IAAI,KAAK,CAAC,aAAa,CAAC,mBAAmB,EAAE,QAAQ,KAAK,IAAI;QAAE,OAAO,cAAc,CAAC;IAE/G,MAAM,IAAI,GAAG,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,gFAAgF;QAChF,OAAO,YAAY,CAAC,OAAO;YACzB,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC,SAAS,EAAE,EAAE;YAClG,CAAC,CAAC,cAAc,CAAC;IACrB,CAAC;IACD,IAAI,YAAY,IAAI,IAAI;QAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAClE,IAAI,CAAC,YAAY,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,cAAc,CAAC;IAChH,oHAAoH;IACpH,MAAM,MAAM,GAAG,EAAE,mBAAmB,EAAE,KAAK,CAAC,aAAa,CAAC,mBAAmB,EAAE,QAAQ,EAAE,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;IACxH,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;AAClG,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAA0B,EAC1B,IAA8B;IAE9B,OAAO,CAAC,MAAM,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;AAC7D,CAAC"}

package/dist/verify/gate-config/judged-commit-gate.d.ts

@@ -0,0 +1,11 @@
+import { type VerificationConfigScope } from './verification-config.js';
+import { type VerifyManifestReader } from './verification-manifest.js';
+import type { CommitVerdictGate } from '../gate-verdicts/commit-verdict-record.js';
+import type { JudgedCommitManifest } from '../run-selection/verification-default-on.js';
+/**
+ * The gate a default-on run applies at the judged commit `read` names (see the
+ * module header), or null when that run would record no verdict. `source` is the
+ * candidate's default-on source (its operator block and the product repoPath).
+ */
+export declare function judgedCommitGate(source: VerificationConfigScope, read: JudgedCommitManifest, env: NodeJS.ProcessEnv, readManifest: VerifyManifestReader): CommitVerdictGate | null;
+//# sourceMappingURL=judged-commit-gate.d.ts.map

package/dist/verify/gate-config/judged-commit-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"judged-commit-gate.d.ts","sourceRoot":"","sources":["../../../src/verify/gate-config/judged-commit-gate.ts"],"names":[],"mappings":"AA6BA,OAAO,EAAoC,KAAK,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAC1G,OAAO,EAA6B,KAAK,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2CAA2C,CAAC;AACnF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6CAA6C,CAAC;AAExF;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,uBAAuB,EAC/B,IAAI,EAAE,oBAAoB,EAC1B,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,YAAY,EAAE,oBAAoB,GACjC,iBAAiB,GAAG,IAAI,CAW1B"}

package/dist/verify/gate-config/judged-commit-gate.js

@@ -0,0 +1,48 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/verify/gate-config/judged-commit-gate.test.ts
+// PINNED-BY-END
+/**
+ * The gate a default-on run of a focus's judged commit actually APPLIES, resolved
+ * without a checkout -- the ONE derivation the per-commit verdict reuse read
+ * (verify/engine/verification-commit-sharing.ts) and verify routing
+ * (verify/gate-config/commit-gate-configured.ts) key a default-on verdict by.
+ *
+ * A default-on candidate is selected with a command + timeout resolved against
+ * the product repoPath, but its run re-resolves both from the detached checkout
+ * of the judged commit (verify/deterministic-gate/verification-checkout.ts) and records its verdict
+ * under the config it APPLIED (commit-verdict-record.ts recordCommitVerdictFor).
+ * A branch whose telora.verify.json overrides the repoPath gate therefore runs --
+ * and records -- gate B while it was selected under gate A. A read keyed by A
+ * would reuse a verdict of a gate that never ran on that commit, and miss the one
+ * that did. So this resolves the same layers the run does -- env > operator block
+ * > the manifest the judged commit ships (read from git at that sha) > the
+ * repoPath manifest as fallback -- through resolveAppliedVerificationConfig itself.
+ *
+ * No gate (null) where the run renders no verdict to key: a malformed committed
+ * manifest or a resolution that throws (the run refuses both as unresolvable), or
+ * no command at all.
+ *
+ * @module verify/gate-config/judged-commit-gate
+ */
+import { dirname } from 'node:path';
+import { resolveAppliedVerificationConfig } from './verification-config.js';
+import { resolveVerifyManifestPath } from './verification-manifest.js';
+/**
+ * The gate a default-on run applies at the judged commit `read` names (see the
+ * module header), or null when that run would record no verdict. `source` is the
+ * candidate's default-on source (its operator block and the product repoPath).
+ */
+export function judgedCommitGate(source, read, env, readManifest) {
+    if (read.malformed !== undefined)
+        return null;
+    // The judged commit's manifest answers for the worktree path; every other path (the fallback) is read as the run reads it.
+    const atJudgedCommit = (repoPath) => (repoPath !== undefined && resolveVerifyManifestPath(repoPath) === read.manifestPath ? read.manifest : readManifest(repoPath));
+    try {
+        const applied = resolveAppliedVerificationConfig(source, dirname(read.manifestPath), env, atJudgedCommit);
+        return applied.command.trim() === '' ? null : { command: applied.command, timeoutMs: applied.timeoutMs };
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=judged-commit-gate.js.map

package/dist/verify/gate-config/judged-commit-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"judged-commit-gate.js","sourceRoot":"","sources":["../../../src/verify/gate-config/judged-commit-gate.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,+EAA+E;AAC/E,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,gCAAgC,EAAgC,MAAM,0BAA0B,CAAC;AAC1G,OAAO,EAAE,yBAAyB,EAA6B,MAAM,4BAA4B,CAAC;AAIlG;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAA+B,EAC/B,IAA0B,EAC1B,GAAsB,EACtB,YAAkC;IAElC,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC9C,2HAA2H;IAC3H,MAAM,cAAc,GAAyB,CAAC,QAAQ,EAAE,EAAE,CACxD,CAAC,QAAQ,KAAK,SAAS,IAAI,yBAAyB,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjI,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,gCAAgC,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;QAC1G,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;IAC3G,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}