@telora/daemon 0.22.239 → 0.22.289

package/dist/verify/outcome-routing/failure-signature.js

@@ -0,0 +1,210 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/integration/verification-history-round-trip.test.ts,
+//   packages/daemon/src/verify/gate-verdicts/commit-verdict-record.test.ts,
+//   packages/daemon/src/verify/outcome-routing/failure-signature.test.ts
+// PINNED-BY-END
+/**
+ * Failure SIGNATURE of a rejected deterministic verify run, and the run-length
+ * record that tells a delivery failing IDENTICALLY from one CONVERGING.
+ *
+ * iteration_count counts rejections; it cannot say whether they were the SAME
+ * rejection. A delivery can fail a DIFFERENT stage each cycle -- every fix
+ * correct, each one uncovering the next gate -- and a count-keyed stall detector
+ * reads that as "will not converge". A signature is the discriminator: which
+ * stage failed and what it
+ * said, with the detail that varies between two runs of the SAME failure
+ * (timestamps, durations, line and over-by counts, tmp paths, pids, shas, the
+ * package version in npm's script header) normalized away.
+ *
+ * Three parts:
+ *   1. deriveFailureSignature -- PURE: log text (+ the gating failing-test ids)
+ *      -> "<stage>#<detail-hash>", or null when underivable.
+ *   2. advanceSignatureRun -- PURE: prior run + this signature -> the bounded
+ *      run-length record (reset on change, +1 on repeat; a null signature never
+ *      counts as a repeat).
+ *   3. The PRIOR run's home: gate_state, and nothing else. The rejection stamps
+ *      the run on gate_state.verification. The stall detector reads it there,
+ *      from the delivery row it already has. Between two rejections the delivery
+ *      walks verify_failed -> queued -> coding -> verify, and every writer that
+ *      clears or replaces the gate on the way (above all the guard-pass coding ->
+ *      verify advance) carries the run forward under
+ *      gate_state.verificationHistory (queries/delivery-gate-state/delivery-gate-state.ts
+ *      carryVerificationHistory). The next rejection reads it back off its prior
+ *      gate_state (computeFailureSignatureRecord). A verify pass resets it
+ *      (clearVerificationHistory).
+ *
+ * Stage location: npm 10 prints NO "Lifecycle script failed" line for a nested
+ * npm-run failure, only the "> <pkg>@<version> <script>" header of every script
+ * it starts. verify:gate chains its stages with &&, so nothing starts after the
+ * failing script and the LAST header in the log names it. When an older npm's
+ * "Lifecycle script ... failed" line is present, its first (innermost) occurrence
+ * wins. Known imprecision: a stage that itself spawns an npm script
+ * (check:types-drift -> gen:types:ephemeral) is labelled by the nested script --
+ * stable across repeats, so the discriminator still holds.
+ *
+ * History: docs/daemon/history-verify.md (verify/outcome-routing/failure-signature.ts).
+ *
+ * @module verify/outcome-routing/failure-signature
+ */
+import { createHash } from 'node:crypto';
+import { existsSync, readFileSync } from 'node:fs';
+import { createLogger } from '../../log/daemon-log.js';
+import { readVerificationHistory, } from '../../queries/delivery-gate-state/delivery-gate-state.js';
+import { parseFailingTests } from '../deterministic-gate/verification-failure-parser.js';
+const log = createLogger({ module: 'verification' });
+/** Stage label when failing tests were parsed but no npm script header names a stage. */
+export const UNNAMED_STAGE_LABEL = 'failing-tests';
+const STAGE_LABEL_MAX_CHARS = 120;
+const DETAIL_HASH_CHARS = 12;
+/** ANSI CSI/SGR sequences, built from a char code so no control char sits in a regex literal. */
+const ANSI_RE = new RegExp(`${String.fromCharCode(27)}\\[[0-9;?]*[A-Za-z]`, 'g');
+const UUID_RE = /\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\b/gi;
+const ISO_TS_RE = /\b\d{4}-\d{2}-\d{2}[T ]\d{2}:\d{2}(?::\d{2}(?:[.,]\d+)?)?(?:Z|[+-]\d{2}:?\d{2})?/g;
+const CLOCK_RE = /\b\d{1,2}:\d{2}:\d{2}(?:\.\d+)?\b/g;
+const TMP_PATH_RE = /(?:\/private)?\/(?:tmp|var\/tmp|var\/folders)\/[^\s'"`),;]+/g;
+/** Lowercase hex runs holding at least one letter AND one digit (git shas, hex ids). */
+const HEX_SHA_RE = /\b(?=[0-9a-f]*[a-f])(?=[0-9a-f]*\d)[0-9a-f]{7,64}\b/g;
+const DURATION_RE = /\b\d+(?:\.\d+)?\s?(?:ms|ns|s|secs?|seconds?|m|mins?|minutes?|h|hrs?|hours?)\b/g;
+const DIGITS_RE = /\d+/g;
+/** npm's per-script header: "> <name>@<version> <script>" (name may be scoped). */
+const NPM_HEADER_RE = /^> ((?:@[^\s@/]+\/)?[^\s@]+)@\S+ (\S+)\s*$/;
+/** npm 7-9 innermost-failure line (npm 10 omits it for nested runs). */
+const NPM_LIFECYCLE_FAILED_RE = /^npm (?:error|ERR!) Lifecycle script `([^`]+)` failed/;
+/** npm / gate chrome lines -- never failure detail. */
+const CHROME_RE = /^(?:npm (?:error|ERR!|warn|WARN|notice)\b|> |TELORA_GATE_COMPLETE:)/;
+/** The "(cwd: <path>)" line runDeterministicStrategy writes at the top of every log. */
+const CWD_HEADER_RE = /^\(cwd: (.+)\)$/m;
+/**
+ * Normalize ONE output line so two runs of the same failure compare equal:
+ * strips ANSI, replaces the run's cwd, uuids, ISO timestamps, clock times, tmp
+ * paths, hex shas and durations with placeholders, then every remaining digit run
+ * with '#' (line counts, over-by deltas, pids, versions), collapsing whitespace.
+ * Pure -- exported for direct testing.
+ */
+export function normalizeVolatileDetail(line, cwd = null) {
+    let s = line.replace(ANSI_RE, '');
+    if (cwd)
+        s = s.split(cwd).join('<cwd>');
+    return s
+        .replace(UUID_RE, '<uuid>')
+        .replace(ISO_TS_RE, '<ts>')
+        .replace(CLOCK_RE, '<time>')
+        .replace(TMP_PATH_RE, '<tmp>')
+        .replace(HEX_SHA_RE, '<sha>')
+        .replace(DURATION_RE, '<dur>')
+        .replace(DIGITS_RE, '#')
+        .replace(/\s+/g, ' ')
+        .trim();
+}
+/**
+ * Locate the failing npm script in a gate log (see the module doc for why the
+ * LAST header names it). Null when the log carries no npm script header at all.
+ * Pure -- exported for direct testing.
+ */
+export function locateFailingStage(lines) {
+    const headers = [];
+    let lifecycle = null;
+    for (let index = 0; index < lines.length; index++) {
+        const line = lines[index];
+        const header = NPM_HEADER_RE.exec(line);
+        if (header)
+            headers.push({ index, name: header[1], script: header[2] });
+        const failed = lifecycle === null ? NPM_LIFECYCLE_FAILED_RE.exec(line) : null;
+        if (failed)
+            lifecycle = { script: failed[1], index };
+    }
+    const label = (name, script) => `${name} ${script}`.slice(0, STAGE_LABEL_MAX_CHARS);
+    if (lifecycle !== null) {
+        const failedAt = lifecycle;
+        const owner = headers.filter((h) => h.index < failedAt.index && h.script === failedAt.script).pop();
+        return owner
+            ? { label: label(owner.name, owner.script), detailStart: owner.index + 1 }
+            : { label: failedAt.script.slice(0, STAGE_LABEL_MAX_CHARS), detailStart: 0 };
+    }
+    const last = headers[headers.length - 1];
+    return last ? { label: label(last.name, last.script), detailStart: last.index + 1 } : null;
+}
+/**
+ * Derive the failure signature "<stage>#<hash>" of a rejected verify run.
+ *
+ * The hash covers the failing stage's normalized detail: the gating failing-test
+ * ids when there are any (so a test stage is keyed on WHICH tests fail, not on
+ * the ok-lines of whatever tests the targeted selector picked), otherwise the
+ * stage's own output lines. Detail lines are normalized (normalizeVolatileDetail),
+ * de-duplicated and sorted, so volatile values and interleaving order never make
+ * one failure look like two. A different stage -- or the same stage failing on a
+ * different file, function, claim or test -- yields a different signature.
+ *
+ * Null when underivable: an empty log, or one with neither an npm script header
+ * nor a parseable failing test. Pure -- no I/O.
+ */
+export function deriveFailureSignature(input) {
+    const text = typeof input.logText === 'string' ? input.logText.replace(ANSI_RE, '') : '';
+    if (text.trim().length === 0)
+        return null;
+    const cwd = CWD_HEADER_RE.exec(text)?.[1] ?? null;
+    const lines = text.split(/\r?\n/);
+    const stage = locateFailingStage(lines);
+    const segment = lines.slice(stage?.detailStart ?? 0);
+    const tests = input.failingTests && input.failingTests.length > 0
+        ? [...input.failingTests]
+        : [...parseFailingTests(segment.join('\n'))];
+    if (stage === null && tests.length === 0)
+        return null;
+    const rawDetail = tests.length > 0 ? tests : segment.filter((line) => !CHROME_RE.test(line));
+    const detail = [...new Set(rawDetail.map((line) => normalizeVolatileDetail(line, cwd)).filter((line) => line.length > 0))].sort();
+    const hash = createHash('sha256').update(detail.join('\n')).digest('hex').slice(0, DETAIL_HASH_CHARS);
+    return `${stage?.label ?? UNNAMED_STAGE_LABEL}#${hash}`;
+}
+// ---------------------------------------------------------------------------
+// Run-length record
+// ---------------------------------------------------------------------------
+/**
+ * Advance the run-length record by one rejection. A signature equal to the prior
+ * run's increments `consecutive`; a different one resets it to 1; a null
+ * (underivable) signature records 0 -- an unknown failure never counts as a
+ * repeat, and the next known signature starts a fresh run. Bounded by
+ * construction: one current + one previous signature, never a history. Pure.
+ */
+export function advanceSignatureRun(prior, signature) {
+    const previousSignature = prior?.signature ?? null;
+    if (signature === null)
+        return { signature: null, previousSignature, consecutive: 0 };
+    const consecutive = prior && prior.signature === signature && prior.consecutive >= 1
+        ? prior.consecutive + 1
+        : 1;
+    return { signature, previousSignature, consecutive };
+}
+/** The full verification log when it exists on disk, else the captured tails. */
+export function readVerificationLogText(source) {
+    if (source.logPath && existsSync(source.logPath)) {
+        try {
+            return readFileSync(source.logPath, 'utf8');
+        }
+        catch (err) {
+            log.debug('verification log unreadable; using tails', { error: String(err?.message ?? err) });
+        }
+    }
+    return `${source.stdoutTail ?? ''}\n${source.stderrTail ?? ''}`;
+}
+/**
+ * Compute the signature fields a rejection's gate_state.verification carries.
+ * The run extends the one recorded on the delivery's PRIOR gate_state, whether
+ * live or carried forward across the coding -> verify advance
+ * (readVerificationHistory). Best-effort: an unreadable log yields a null
+ * signature, so consecutive is 0 and the detector falls back to the iteration
+ * cap. A prior gate_state with no usable run counts as none. A signature fault
+ * must never block the rejection write.
+ */
+export function computeFailureSignatureRecord(deliveryId, source, failingTests, priorGateState, deps) {
+    let failureSignature = null;
+    try {
+        failureSignature = deriveFailureSignature({ logText: deps.readLogText(source), failingTests });
+    }
+    catch (err) {
+        log.warn(`failure signature derivation failed for delivery ${deliveryId}:`, err.message);
+    }
+    const prior = readVerificationHistory(priorGateState).signatureRun ?? null;
+    return { failureSignature, signatureRun: advanceSignatureRun(prior, failureSignature) };
+}
+//# sourceMappingURL=failure-signature.js.map

package/dist/verify/outcome-routing/failure-signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"failure-signature.js","sourceRoot":"","sources":["../../../src/verify/outcome-routing/failure-signature.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,sFAAsF;AACtF,4EAA4E;AAC5E,yEAAyE;AACzE,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EACL,uBAAuB,GAExB,MAAM,0DAA0D,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sDAAsD,CAAC;AAEzF,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAErD,yFAAyF;AACzF,MAAM,CAAC,MAAM,mBAAmB,GAAG,eAAe,CAAC;AAEnD,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,iGAAiG;AACjG,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;AACjF,MAAM,OAAO,GAAG,oEAAoE,CAAC;AACrF,MAAM,SAAS,GAAG,mFAAmF,CAAC;AACtG,MAAM,QAAQ,GAAG,oCAAoC,CAAC;AACtD,MAAM,WAAW,GAAG,8DAA8D,CAAC;AACnF,wFAAwF;AACxF,MAAM,UAAU,GAAG,sDAAsD,CAAC;AAC1E,MAAM,WAAW,GAAG,gFAAgF,CAAC;AACrG,MAAM,SAAS,GAAG,MAAM,CAAC;AAEzB,mFAAmF;AACnF,MAAM,aAAa,GAAG,4CAA4C,CAAC;AACnE,wEAAwE;AACxE,MAAM,uBAAuB,GAAG,uDAAuD,CAAC;AACxF,uDAAuD;AACvD,MAAM,SAAS,GAAG,qEAAqE,CAAC;AACxF,wFAAwF;AACxF,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAEzC;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAY,EAAE,MAAqB,IAAI;IAC7E,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAClC,IAAI,GAAG;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO,CAAC;SACL,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC;SAC1B,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;SAC1B,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC;SAC3B,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC;SAC7B,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC;SAC5B,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC;SAC7B,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;AACZ,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAwB;IACzD,MAAM,OAAO,GAA2D,EAAE,CAAC;IAC3E,IAAI,SAAS,GAA6C,IAAI,CAAC;IAC/D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxE,MAAM,MAAM,GAA2B,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtG,IAAI,MAAM;YAAE,SAAS,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;IACpG,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,SAAS,CAAC;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC;QACpG,OAAO,KAAK;YACV,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE;YAC1E,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IACjF,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7F,CAAC;AASD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAA4B;IACjE,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,IAAI,CAAC,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAC/D,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC;QACzB,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CACxB,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAC9F,CAAC,CAAC,IAAI,EAAE,CAAC;IACV,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACtG,OAAO,GAAG,KAAK,EAAE,KAAK,IAAI,mBAAmB,IAAI,IAAI,EAAE,CAAC;AAC1D,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAsC,EACtC,SAAwB;IAExB,MAAM,iBAAiB,GAAG,KAAK,EAAE,SAAS,IAAI,IAAI,CAAC;IACnD,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IACtF,MAAM,WAAW,GAAG,KAAK,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC;QAClF,CAAC,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC;QACvB,CAAC,CAAC,CAAC,CAAC;IACN,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,WAAW,EAAE,CAAC;AACvD,CAAC;AAaD,iFAAiF;AACjF,MAAM,UAAU,uBAAuB,CAAC,MAA6B;IACnE,IAAI,MAAM,CAAC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,0CAA0C,EAAE,EAAE,KAAK,EAAE,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IACD,OAAO,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,KAAK,MAAM,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;AAClE,CAAC;AAOD;;;;;;;;GAQG;AACH,MAAM,UAAU,6BAA6B,CAC3C,UAAkB,EAClB,MAA6B,EAC7B,YAA+B,EAC/B,cAAuB,EACvB,IAA0B;IAE1B,IAAI,gBAAgB,GAAkB,IAAI,CAAC;IAC3C,IAAI,CAAC;QACH,gBAAgB,GAAG,sBAAsB,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;IACjG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,oDAAoD,UAAU,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,KAAK,GAAG,uBAAuB,CAAC,cAAc,CAAC,CAAC,YAAY,IAAI,IAAI,CAAC;IAC3E,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAAE,CAAC;AAC1F,CAAC"}

package/dist/verify/outcome-routing/incurable-model-hold.d.ts

@@ -0,0 +1,44 @@
+import type { DeliveryGateRecord } from '../../queries/deliveries/deliveries.js';
+import type { ModelUnavailableDetail, ModelUnavailableJudgedAgainst } from '../../queries/delivery-gate-state/verify-own-holds.js';
+import type { PendingVerification } from '../../queries/verification/verification.js';
+import type { ShortfallRulingsReader } from '../shortfalls/shortfall-rulings.js';
+/** The reads the decision takes its facts through. */
+export interface IncurableHoldDeps {
+    readDeliveryGateRecord: (deliveryId: string) => Promise<DeliveryGateRecord | null>;
+    readShortfallRulings: ShortfallRulingsReader;
+    resolveDeliveryCommitSet: (v: PendingVerification, judgedSha: string | null) => Promise<string[] | null> | string[] | null;
+}
+/** Reads the fingerprint of the question a judge is asked (judgedQuestionFingerprint), or null when it cannot be read. */
+export type JudgedQuestionReader = () => Promise<string | null>;
+/** The input this dispatch judges, or null when any part of it could not be read. Never throws. */
+export declare function readJudgedInput(v: PendingVerification, judgedSha: string | null, rulingsFingerprint: string | null, readQuestion: JudgedQuestionReader, deps: Pick<IncurableHoldDeps, 'resolveDeliveryCommitSet'>): Promise<ModelUnavailableJudgedAgainst | null>;
+/** The input this dispatch judges, reading the rulings fingerprint itself. Never throws. */
+export declare function readJudgedInputReadingRulings(v: PendingVerification, judgedSha: string | null, readQuestion: JudgedQuestionReader, deps: Pick<IncurableHoldDeps, 'resolveDeliveryCommitSet' | 'readShortfallRulings'>): Promise<ModelUnavailableJudgedAgainst | null>;
+/**
+ * The standing hold this dispatch re-holds without a model call, or null to
+ * judge: the prior hold is of a kind retrying cannot cure, recorded the input it
+ * was judged against, and no change to that input is observed (`current` null:
+ * unreadable, which observes none). Pure.
+ */
+export declare function standingIncurableHold(prior: ModelUnavailableDetail | null | undefined, current: ModelUnavailableJudgedAgainst | null): ModelUnavailableDetail | null;
+/** Reads the input a dispatch judges; called only where an incurable hold needs it. */
+export type JudgedInputReader = () => Promise<ModelUnavailableJudgedAgainst | null>;
+/**
+ * What a hold records when its input could not be read at hold time: no real
+ * fingerprint equals it, so the first successful read afterwards re-judges once,
+ * and a read that keeps failing keeps the hold (no every-tick retry).
+ */
+export declare const UNREAD_JUDGED_INPUT: ModelUnavailableJudgedAgainst;
+/**
+ * The hold, carrying the input it was judged against when retrying cannot cure
+ * it (UNREAD_JUDGED_INPUT when that input could not be read). The input is read
+ * only for such a kind. Never throws.
+ */
+export declare function withJudgedInput(hold: ModelUnavailableDetail, readInput: JudgedInputReader): Promise<ModelUnavailableDetail>;
+/**
+ * Read the delivery's standing hold and decide about it (module header). The
+ * input is read only when an incurable hold stands, so an ordinary dispatch pays
+ * one gate_state read. Never throws: a failed read judges.
+ */
+export declare function resolveStandingIncurableHold(v: PendingVerification, readInput: JudgedInputReader, deps: Pick<IncurableHoldDeps, 'readDeliveryGateRecord'>): Promise<ModelUnavailableDetail | null>;
+//# sourceMappingURL=incurable-model-hold.d.ts.map

package/dist/verify/outcome-routing/incurable-model-hold.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"incurable-model-hold.d.ts","sourceRoot":"","sources":["../../../src/verify/outcome-routing/incurable-model-hold.ts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,KAAK,EAAE,sBAAsB,EAAE,6BAA6B,EAAE,MAAM,uDAAuD,CAAC;AACnI,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AAEtF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAMjF,sDAAsD;AACtD,MAAM,WAAW,iBAAiB;IAChC,sBAAsB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IACnF,oBAAoB,EAAE,sBAAsB,CAAC;IAC7C,wBAAwB,EAAE,CAAC,CAAC,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC;CAC5H;AAED,0HAA0H;AAC1H,MAAM,MAAM,oBAAoB,GAAG,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;AAEhE,mGAAmG;AACnG,wBAAsB,eAAe,CACnC,CAAC,EAAE,mBAAmB,EACtB,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,kBAAkB,EAAE,MAAM,GAAG,IAAI,EACjC,YAAY,EAAE,oBAAoB,EAClC,IAAI,EAAE,IAAI,CAAC,iBAAiB,EAAE,0BAA0B,CAAC,GACxD,OAAO,CAAC,6BAA6B,GAAG,IAAI,CAAC,CAW/C;AAED,4FAA4F;AAC5F,wBAAsB,6BAA6B,CACjD,CAAC,EAAE,mBAAmB,EACtB,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,YAAY,EAAE,oBAAoB,EAClC,IAAI,EAAE,IAAI,CAAC,iBAAiB,EAAE,0BAA0B,GAAG,sBAAsB,CAAC,GACjF,OAAO,CAAC,6BAA6B,GAAG,IAAI,CAAC,CAS/C;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,EAChD,OAAO,EAAE,6BAA6B,GAAG,IAAI,GAC5C,sBAAsB,GAAG,IAAI,CAS/B;AAaD,uFAAuF;AACvF,MAAM,MAAM,iBAAiB,GAAG,MAAM,OAAO,CAAC,6BAA6B,GAAG,IAAI,CAAC,CAAC;AAEpF;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,6BAA+G,CAAC;AAElJ;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,sBAAsB,EAAE,SAAS,EAAE,iBAAiB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAGjI;AAED;;;;GAIG;AACH,wBAAsB,4BAA4B,CAChD,CAAC,EAAE,mBAAmB,EACtB,SAAS,EAAE,iBAAiB,EAC5B,IAAI,EAAE,IAAI,CAAC,iBAAiB,EAAE,wBAAwB,CAAC,GACtD,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAsBxC"}

package/dist/verify/outcome-routing/incurable-model-hold.js

@@ -0,0 +1,136 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/verify/outcome-routing/incurable-model-hold.test.ts
+// PINNED-BY-END
+/**
+ * A model failure retrying cannot cure waits for NEW INPUT, not for the model.
+ *
+ * Most reasons a reconciliation could not run clear on their own: a rate-limit
+ * window closes, a timeout may not recur, a host is re-authenticated. An input
+ * too large for the model does not: the same delivery produces the same prompt,
+ * and the same prompt is refused every time (backends/claude/one-shot-model.ts
+ * retryCannotCure). So such a hold records WHAT IT WAS JUDGED AGAINST -- the
+ * delivery's commit set, its rulings fingerprint (which also moves when an
+ * approving review's verdicts land, since review verdicts reach verify as
+ * rulings) and a fingerprint of the question (every declared statement the
+ * judge is handed: a declared future over the size a judge takes whole is
+ * itself an input_too_large) -- and a later dispatch whose input is unchanged
+ * re-holds it WITHOUT calling the model. A new commit, a new ruling, a new
+ * approving review or an edited declared statement changes the input and the
+ * judge runs again.
+ *
+ * Only an OBSERVED change releases the hold: a commit set, rulings and question
+ * fingerprint read successfully and differing from the recorded ones. A current
+ * input that cannot be read (the commit set, the rulings, the question) proves no change, so
+ * the hold stands and makes no call -- otherwise a persistent read failure
+ * would re-create the every-tick retry on an input that never changed. A hold
+ * that recorded no input, a curable kind, or an unreadable gate_state (no hold
+ * is known to stand) judge as before.
+ *
+ * @module verify/outcome-routing/incurable-model-hold
+ */
+import { retryCannotCure } from '../../backends/claude/one-shot-model.js';
+import { commitSetFingerprint } from '../shortfalls/shortfall-park.js';
+import { createLogger } from '../../log/daemon-log.js';
+import { evaluateStop } from '../../supervision/stop-registry.js';
+const log = createLogger({ module: 'verification' });
+/** The input this dispatch judges, or null when any part of it could not be read. Never throws. */
+export async function readJudgedInput(v, judgedSha, rulingsFingerprint, readQuestion, deps) {
+    if (rulingsFingerprint === null)
+        return null;
+    try {
+        const ids = await deps.resolveDeliveryCommitSet(v, judgedSha);
+        if (ids === null)
+            return null;
+        const question = await readQuestion();
+        return question === null ? null : { commitSet: commitSetFingerprint(ids), rulingsFingerprint, question };
+    }
+    catch (err) {
+        log.warn(`[verification] delivery ${v.deliveryId}: judged input unreadable -- no input change is observed:`, err.message);
+        return null;
+    }
+}
+/** The input this dispatch judges, reading the rulings fingerprint itself. Never throws. */
+export async function readJudgedInputReadingRulings(v, judgedSha, readQuestion, deps) {
+    let fingerprint;
+    try {
+        fingerprint = (await deps.readShortfallRulings(v.deliveryId)).fingerprint;
+    }
+    catch (err) {
+        log.warn(`[verification] delivery ${v.deliveryId}: rulings unreadable -- no input change is observed:`, err.message);
+        fingerprint = null;
+    }
+    return readJudgedInput(v, judgedSha, fingerprint, readQuestion, deps);
+}
+/**
+ * The standing hold this dispatch re-holds without a model call, or null to
+ * judge: the prior hold is of a kind retrying cannot cure, recorded the input it
+ * was judged against, and no change to that input is observed (`current` null:
+ * unreadable, which observes none). Pure.
+ */
+export function standingIncurableHold(prior, current) {
+    if (!prior)
+        return null;
+    const recorded = prior.judgedAgainst;
+    const held = evaluateStop('incurable_model_hold', {
+        incurableKind: retryCannotCure(prior.kind),
+        inputRecorded: recorded !== undefined,
+        inputChangeProven: recorded !== undefined && current !== null && judgedInputChanged(recorded, current),
+    });
+    return held ? prior : null;
+}
+/**
+ * Whether the current input differs from the recorded one: its commit set, its
+ * rulings or its question. A hold recorded before the question was part of its
+ * identity cannot show that its question is unchanged, so it is re-judged ONCE;
+ * the hold that re-judgement writes records the question. Pure.
+ */
+function judgedInputChanged(recorded, current) {
+    if (recorded.commitSet !== current.commitSet || recorded.rulingsFingerprint !== current.rulingsFingerprint)
+        return true;
+    return recorded.question !== current.question;
+}
+/**
+ * What a hold records when its input could not be read at hold time: no real
+ * fingerprint equals it, so the first successful read afterwards re-judges once,
+ * and a read that keeps failing keeps the hold (no every-tick retry).
+ */
+export const UNREAD_JUDGED_INPUT = { commitSet: '(unread)', rulingsFingerprint: '(unread)', question: '(unread)' };
+/**
+ * The hold, carrying the input it was judged against when retrying cannot cure
+ * it (UNREAD_JUDGED_INPUT when that input could not be read). The input is read
+ * only for such a kind. Never throws.
+ */
+export async function withJudgedInput(hold, readInput) {
+    if (!retryCannotCure(hold.kind))
+        return hold;
+    return { ...hold, judgedAgainst: (await readInput()) ?? UNREAD_JUDGED_INPUT };
+}
+/**
+ * Read the delivery's standing hold and decide about it (module header). The
+ * input is read only when an incurable hold stands, so an ordinary dispatch pays
+ * one gate_state read. Never throws: a failed read judges.
+ */
+export async function resolveStandingIncurableHold(v, readInput, deps) {
+    let record;
+    try {
+        record = await deps.readDeliveryGateRecord(v.deliveryId);
+    }
+    catch (err) {
+        log.warn(`[verification] delivery ${v.deliveryId}: gate_state unreadable, an incurable hold is re-judged:`, err.message);
+        return null;
+    }
+    const prior = record?.gateState?.modelUnavailable;
+    if (!prior || !retryCannotCure(prior.kind) || !prior.judgedAgainst)
+        return null;
+    const current = await readInput();
+    const standing = standingIncurableHold(prior, current);
+    if (standing) {
+        const input = current
+            ? `an unchanged input (commit set ${current.commitSet}, rulings "${current.rulingsFingerprint}", question ${current.question ?? '(unrecorded)'})`
+            : 'an input that could not be read, so no change to it is observed';
+        log.info(`[verification] delivery "${v.deliveryName}" (${v.deliveryId}): its ${standing.kind} hold stands on ${input} `
+            + '-- NO MODEL CALL; a new commit, ruling, approving review or edited declared statement, once read, re-judges it');
+    }
+    return standing;
+}
+//# sourceMappingURL=incurable-model-hold.js.map

package/dist/verify/outcome-routing/incurable-model-hold.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"incurable-model-hold.js","sourceRoot":"","sources":["../../../src/verify/outcome-routing/incurable-model-hold.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,qFAAqF;AACrF,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAI1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAEvE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAElE,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAYrD,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,CAAsB,EACtB,SAAwB,EACxB,kBAAiC,EACjC,YAAkC,EAClC,IAAyD;IAEzD,IAAI,kBAAkB,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAC9D,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;QACtC,OAAO,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,oBAAoB,CAAC,GAAG,CAAC,EAAE,kBAAkB,EAAE,QAAQ,EAAE,CAAC;IAC3G,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,UAAU,2DAA2D,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QACrI,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,CAAsB,EACtB,SAAwB,EACxB,YAAkC,EAClC,IAAkF;IAElF,IAAI,WAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,WAAW,GAAG,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC;IAC5E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,UAAU,sDAAsD,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QAChI,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC;IACD,OAAO,eAAe,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;AACxE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAgD,EAChD,OAA6C;IAE7C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,QAAQ,GAAG,KAAK,CAAC,aAAa,CAAC;IACrC,MAAM,IAAI,GAAG,YAAY,CAAC,sBAAsB,EAAE;QAChD,aAAa,EAAE,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC;QAC1C,aAAa,EAAE,QAAQ,KAAK,SAAS;QACrC,iBAAiB,EAAE,QAAQ,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,IAAI,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC;KACvG,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,QAAuC,EAAE,OAAsC;IACzG,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC,kBAAkB,KAAK,OAAO,CAAC,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACxH,OAAO,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,CAAC;AAChD,CAAC;AAKD;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAkC,EAAE,SAAS,EAAE,UAAU,EAAE,kBAAkB,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAElJ;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAA4B,EAAE,SAA4B;IAC9F,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,CAAC,MAAM,SAAS,EAAE,CAAC,IAAI,mBAAmB,EAAE,CAAC;AAChF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,CAAsB,EACtB,SAA4B,EAC5B,IAAuD;IAEvD,IAAI,MAAiC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,UAAU,0DAA0D,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QACpI,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,EAAE,SAAS,EAAE,gBAAgB,CAAC;IAClD,IAAI,CAAC,KAAK,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAChF,MAAM,OAAO,GAAG,MAAM,SAAS,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACvD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,OAAO;YACnB,CAAC,CAAC,kCAAkC,OAAO,CAAC,SAAS,cAAc,OAAO,CAAC,kBAAkB,eAAe,OAAO,CAAC,QAAQ,IAAI,cAAc,GAAG;YACjJ,CAAC,CAAC,iEAAiE,CAAC;QACtE,GAAG,CAAC,IAAI,CACN,4BAA4B,CAAC,CAAC,YAAY,MAAM,CAAC,CAAC,UAAU,UAAU,QAAQ,CAAC,IAAI,mBAAmB,KAAK,GAAG;cAC5G,gHAAgH,CACnH,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/verify/outcome-routing/rework-judgment.d.ts

@@ -0,0 +1,59 @@
+/**
+ * What a verification re-work stamps as the delivery's judged commit: the commit
+ * its run judged, and THAT run's own verdict persisted beside it.
+ *
+ * A run is selected under the delivery's own gate, so the verdict it rendered
+ * (gateVerdictFromRun, by the rule the durable per-commit record uses) is the
+ * delivery's own-gate verdict for the commit. Persisting it beside the sha is what
+ * lets the resume (spawn/prompt-assembly.ts) show it without reading any record.
+ * A stamp that carries none -- the run rendered no verdict (a timeout, an
+ * unavailable checkout, an instrument fault), or a legacy stamp -- is resolved
+ * there under the delivery's own gate, never by a gate-less record read.
+ *
+ * The deterministic-failure, shortfall and evidence-unavailable re-work writers
+ * share it (verify/outcome-routing/verification-feedback.ts,
+ * verify/outcome-routing/verification-evidence-unavailable-feedback.ts).
+ *
+ * History: docs/daemon/history-verify.md (verify/outcome-routing/rework-judgment.ts).
+ *
+ * @module verify/outcome-routing/rework-judgment
+ */
+import { type DeliveryGateState, type GateVerdictSummary } from '../../queries/delivery-gate-state/delivery-gate-state.js';
+import { type GateRunVerdictSource, type JudgedCommitTarget } from '../gate-verdicts/gate-verdict-source.js';
+/** The run a re-work feeds back, as its writer is handed it. */
+export interface ReworkRunJudgment {
+    /** The commit the run judged; null or absent when it judged none. */
+    judgedSha?: string | null;
+    /**
+     * The verdict that run rendered for `judgedSha` (runVerdictOf); null when it
+     * rendered none. Absent only where the writer was not handed the run at all.
+     */
+    runVerdict?: GateVerdictSummary | null;
+}
+/**
+ * The verdict a finished run rendered for its commit, or null when it rendered
+ * none. `instrumentFault` is true when attribution routed the run to
+ * instrument-fault re-work, which records no verdict for the commit
+ * (commit-verdict-record.buildCommitVerdict), so none is shown for it either. Pure.
+ */
+export declare function runVerdictOf(run: GateRunVerdictSource, instrumentFault: boolean): GateVerdictSummary | null;
+/**
+ * `gateState` with its judged commit replaced by the run's, and the run's own
+ * verdict persisted beside it when it is a verdict for that commit
+ * (stampJudgedCommit). Never a record read. Pure.
+ */
+export declare function stampReworkJudgment(gateState: DeliveryGateState, judgment: ReworkRunJudgment, judgedAt: string): DeliveryGateState;
+/**
+ * The verdict a re-work DETAIL carries (the live inject, and the listing a
+ * respawned team reads): the run's own verdict whenever the writer was handed the
+ * run -- null included, since a run that rendered none has none to show -- else
+ * the recorded verdict for exactly the judged commit through the writer's reader.
+ * No judged sha asks nothing.
+ */
+export declare function reworkDetailVerdict(d: {
+    readGateVerdict: (target: JudgedCommitTarget) => GateVerdictSummary | null;
+}, v: {
+    productId?: string | null;
+    focusId?: string | null;
+}, judgment: ReworkRunJudgment): GateVerdictSummary | null;
+//# sourceMappingURL=rework-judgment.d.ts.map

package/dist/verify/outcome-routing/rework-judgment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rework-judgment.d.ts","sourceRoot":"","sources":["../../../src/verify/outcome-routing/rework-judgment.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAqB,KAAK,iBAAiB,EAAE,KAAK,kBAAkB,EAAE,MAAM,0DAA0D,CAAC;AAC9I,OAAO,EAGL,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACxB,MAAM,yCAAyC,CAAC;AAEjD,gEAAgE;AAChE,MAAM,WAAW,iBAAiB;IAChC,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;OAGG;IACH,UAAU,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACxC;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,oBAAoB,EAAE,eAAe,EAAE,OAAO,GAAG,kBAAkB,GAAG,IAAI,CAE3G;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,iBAAiB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,GAAG,iBAAiB,CAElI;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,CAAC,EAAE;IAAE,eAAe,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,kBAAkB,GAAG,IAAI,CAAA;CAAE,EACjF,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,EACzD,QAAQ,EAAE,iBAAiB,GAC1B,kBAAkB,GAAG,IAAI,CAG3B"}

package/dist/verify/outcome-routing/rework-judgment.js

@@ -0,0 +1,55 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/verify/outcome-routing/rework-judgment.test.ts
+// PINNED-BY-END
+/**
+ * What a verification re-work stamps as the delivery's judged commit: the commit
+ * its run judged, and THAT run's own verdict persisted beside it.
+ *
+ * A run is selected under the delivery's own gate, so the verdict it rendered
+ * (gateVerdictFromRun, by the rule the durable per-commit record uses) is the
+ * delivery's own-gate verdict for the commit. Persisting it beside the sha is what
+ * lets the resume (spawn/prompt-assembly.ts) show it without reading any record.
+ * A stamp that carries none -- the run rendered no verdict (a timeout, an
+ * unavailable checkout, an instrument fault), or a legacy stamp -- is resolved
+ * there under the delivery's own gate, never by a gate-less record read.
+ *
+ * The deterministic-failure, shortfall and evidence-unavailable re-work writers
+ * share it (verify/outcome-routing/verification-feedback.ts,
+ * verify/outcome-routing/verification-evidence-unavailable-feedback.ts).
+ *
+ * History: docs/daemon/history-verify.md (verify/outcome-routing/rework-judgment.ts).
+ *
+ * @module verify/outcome-routing/rework-judgment
+ */
+import { stampJudgedCommit } from '../../queries/delivery-gate-state/delivery-gate-state.js';
+import { gateVerdictFromRun, readJudgedVerdictFor, } from '../gate-verdicts/gate-verdict-source.js';
+/**
+ * The verdict a finished run rendered for its commit, or null when it rendered
+ * none. `instrumentFault` is true when attribution routed the run to
+ * instrument-fault re-work, which records no verdict for the commit
+ * (commit-verdict-record.buildCommitVerdict), so none is shown for it either. Pure.
+ */
+export function runVerdictOf(run, instrumentFault) {
+    return instrumentFault ? null : gateVerdictFromRun(run);
+}
+/**
+ * `gateState` with its judged commit replaced by the run's, and the run's own
+ * verdict persisted beside it when it is a verdict for that commit
+ * (stampJudgedCommit). Never a record read. Pure.
+ */
+export function stampReworkJudgment(gateState, judgment, judgedAt) {
+    return stampJudgedCommit(gateState, judgment.judgedSha ?? null, judgedAt, judgment.runVerdict ?? null);
+}
+/**
+ * The verdict a re-work DETAIL carries (the live inject, and the listing a
+ * respawned team reads): the run's own verdict whenever the writer was handed the
+ * run -- null included, since a run that rendered none has none to show -- else
+ * the recorded verdict for exactly the judged commit through the writer's reader.
+ * No judged sha asks nothing.
+ */
+export function reworkDetailVerdict(d, v, judgment) {
+    if (judgment.runVerdict !== undefined)
+        return judgment.runVerdict;
+    return readJudgedVerdictFor(d, v, judgment.judgedSha ?? null);
+}
+//# sourceMappingURL=rework-judgment.js.map

package/dist/verify/outcome-routing/rework-judgment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rework-judgment.js","sourceRoot":"","sources":["../../../src/verify/outcome-routing/rework-judgment.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,gFAAgF;AAChF,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,iBAAiB,EAAmD,MAAM,0DAA0D,CAAC;AAC9I,OAAO,EACL,kBAAkB,EAClB,oBAAoB,GAGrB,MAAM,yCAAyC,CAAC;AAajD;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,GAAyB,EAAE,eAAwB;IAC9E,OAAO,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAA4B,EAAE,QAA2B,EAAE,QAAgB;IAC7G,OAAO,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC;AACzG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,CAAiF,EACjF,CAAyD,EACzD,QAA2B;IAE3B,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC,UAAU,CAAC;IAClE,OAAO,oBAAoB,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;AAChE,CAAC"}

package/dist/verify/outcome-routing/verification-evidence-unavailable-feedback.d.ts

@@ -0,0 +1,46 @@
+import { type DeliveryGateState, type EvidenceUnavailableDetail } from '../../queries/delivery-gate-state/delivery-gate-state.js';
+import type { PendingVerification } from '../../queries/verification/verification.js';
+import { type ShortfallRequeueDeps } from './verification-feedback.js';
+import { type ReworkRunJudgment } from './rework-judgment.js';
+import { type ReworkIssueDeps } from './verification-rework-issue.js';
+/** Build the gate_state for an evidence-unavailable instrument-fault hold. Pure -- exported for testing. */
+export declare function buildEvidenceUnavailableGateState(detail: EvidenceUnavailableDetail): DeliveryGateState;
+/** Build the informational message injected into a live coding team. Pure -- exported for testing. */
+export declare function buildEvidenceUnavailableInjectMessage(deliveryName: string, detail: EvidenceUnavailableDetail): string;
+/**
+ * Re-enter a verify EVIDENCE-UNAVAILABLE instrument fault as BOUNDED RE-WORK,
+ * never a human inbox item.
+ *
+ * "A hold must name a human act" (2026-07-28): verify_evidence_unavailable named
+ * no act only a human can perform -- its helpNeeded ("fix the diff range /
+ * confirm the merge / clear the delivery manually") is the gate reporting its own
+ * blindness to an operator queue, the same topology defect this focus exists to
+ * remove. So it no longer FILES an escalation.
+ *
+ * Two flavours reach here: EMPTY (nothing judgeable at all) and INCOMPLETE
+ * (half-blind -- the resolved range covered only part of the delivery's recorded
+ * commit set, so a verdict would judge part of the work). Both are the gate
+ * failing to vouch for its own evidence, so both take this path.
+ *
+ * Where the delivery's diff is recoverable (the recorded commit set, or a real
+ * merge commit -- see resolveRecordedCommitRange / resolveRecordedMergeRange,
+ * the latter refusing a non-merge sha), the reconciliation renders a verdict and
+ * this path is never reached. Where the evidence cannot be vouched for, the
+ * delivery re-enters the SAME bounded
+ * verify -> verify_failed re-work the shortfall case uses (requeueShortfallAsRework):
+ * routed through the single-writer reconciler with `gaps_found` + `fromStatus:'verify'`
+ * so the server-side iteration_count increment fires and the EXISTING
+ * TELORA_VERIFY_FAILED_ITERATION_CAP (-> verify_gate_unclearable, needs_operator)
+ * bounds it. verify_gate_unclearable is the SOLE surviving human residue.
+ *
+ * Writes the evidence-unavailable gate_state (never a shortfall verdict) so the
+ * re-queued team's resume prompt carries the instrument-fault context, and best-
+ * effort injects it into a live coding team. Files NO escalation. Best-effort
+ * throughout -- a feedback failure must never crash the verification tick.
+ */
+export declare function requeueEvidenceUnavailableAsRework(v: Pick<PendingVerification, 'deliveryId' | 'deliveryName' | 'focusId'> & Partial<Pick<PendingVerification, 'productId'>>, fault: Omit<EvidenceUnavailableDetail, 'heldAt'>, organizationId: string, d: ShortfallRequeueDeps & ReworkIssueDeps, opts?: ReworkRunJudgment): Promise<{
+    transitioned: boolean;
+    injected: boolean;
+    detail: EvidenceUnavailableDetail;
+}>;
+//# sourceMappingURL=verification-evidence-unavailable-feedback.d.ts.map

package/dist/verify/outcome-routing/verification-evidence-unavailable-feedback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-evidence-unavailable-feedback.d.ts","sourceRoot":"","sources":["../../../src/verify/outcome-routing/verification-evidence-unavailable-feedback.ts"],"names":[],"mappings":"AA6BA,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,yBAAyB,EAE/B,MAAM,0DAA0D,CAAC;AAElE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AAItF,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAA4C,KAAK,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAExG,OAAO,EAA+B,KAAK,eAAe,EAAE,MAAM,gCAAgC,CAAC;AASnG,4GAA4G;AAC5G,wBAAgB,iCAAiC,CAAC,MAAM,EAAE,yBAAyB,GAAG,iBAAiB,CAOtG;AAED,sGAAsG;AACtG,wBAAgB,qCAAqC,CACnD,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,yBAAyB,GAChC,MAAM,CA8DR;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAsB,kCAAkC,CACtD,CAAC,EAAE,IAAI,CAAC,mBAAmB,EAAE,YAAY,GAAG,cAAc,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,CAAC,EACzH,KAAK,EAAE,IAAI,CAAC,yBAAyB,EAAE,QAAQ,CAAC,EAChD,cAAc,EAAE,MAAM,EACtB,CAAC,EAAE,oBAAoB,GAAG,eAAe,EACzC,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC;IAAE,YAAY,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,yBAAyB,CAAA;CAAE,CAAC,CAsE1F"}