@telora/daemon 0.22.239 → 0.22.289

package/dist/completion/read-only-pristine.d.ts

@@ -1,72 +0,0 @@
-/**
- * Pristine-at-exit assertion for read-only audit focuses.
- *
- * A read-only audit focus is supposed to leave the worktree exactly as it found
- * it -- discovery only, no file modifications. The write-deny settings overlay
- * (templates/claude-settings -> audit-hooks) makes this physically true at the
- * tool layer, and the pre-commit hook blocks commits. This module is the
- * completion-side backstop: when a read-only team exits, assert the worktree is
- * pristine; if it is NOT, file a (dedup-aware) escalation so an operator sees
- * that a read-only audit modified files it shouldn't have.
- *
- * Modeled on delivery-advance-block.ts `ensureWorktreeCommittedBeforeAdvance`:
- * dependency-injected collaborators, durable dedup via
- * `hasOpenEscalationForDelivery`, fail-open lookup.
- *
- * @module completion/read-only-pristine
- */
-import { createEscalation, hasOpenEscalationForDelivery } from '../queries/escalations.js';
-import { worktreeHasNonDaemonAuthoredChanges } from '../worktree/index.js';
-/**
- * escalation_kind discriminator for the read-only-pristine violation.
- *
- * Reuses ADVANCE_BLOCKED -- the violation is "the daemon refuses to advance /
- * merge this focus because its worktree is not in the expected (pristine)
- * state", the same class as the uncommitted-changes advance block. Keeps the
- * dedup keyed on a kind already in the escalation_kind CHECK set without a
- * schema change.
- */
-export declare const READ_ONLY_PRISTINE_ESCALATION_KIND: "advance_blocked";
-/**
- * Injectable collaborators for assertReadOnlyWorktreePristine. Defaults to the
- * real implementations; tests override them to drive the violation path without
- * a live worktree or Supabase.
- */
-export interface AssertReadOnlyPristineDeps {
-    /**
-     * Dirtiness probe. Defaults to {@link worktreeHasNonDaemonAuthoredChanges},
-     * which excludes the daemon's OWN read-only overlay (.claude/settings.json,
-     * .codex/config.toml, .telora-hooks/, .telora/) so only agent-authored dirt
-     * trips the assertion -- the guard measures the agent, not the daemon.
-     */
-    worktreeHasNonDaemonAuthoredChanges?: typeof worktreeHasNonDaemonAuthoredChanges;
-    createEscalation?: typeof createEscalation;
-    hasOpenEscalationForDelivery?: typeof hasOpenEscalationForDelivery;
-}
-/**
- * Assert that a read-only focus's worktree is pristine at team exit.
- *
- * Returns pristine=true when the worktree has no AGENT-authored changes -- the
- * daemon's own read-only overlay (.claude/settings.json, .codex/config.toml,
- * .telora-hooks/, .telora/) is excluded, so the daemon writing its own deny
- * boundary never reads as an audit modifying files -- or when no worktree path
- * is known. Returns pristine=false and files a dedup-aware escalation when
- * agent-authored changes are present -- the caller then reverts the dirty tree
- * and skips the merge.
- *
- * Dedup: at most ONE open escalation per delivery (queried via
- * hasOpenEscalationForDelivery on the ADVANCE_BLOCKED kind). Fail-open on the
- * lookup so a genuine first violation is never silently swallowed.
- */
-export declare function assertReadOnlyWorktreePristine(params: {
-    worktreePath: string | null | undefined;
-    organizationId: string;
-    sessionId: string | null;
-    deliveryId: string;
-    focusId: string;
-    focusName: string;
-    branchName: string;
-}, deps?: AssertReadOnlyPristineDeps): Promise<{
-    pristine: boolean;
-}>;
-//# sourceMappingURL=read-only-pristine.d.ts.map

package/dist/completion/read-only-pristine.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"read-only-pristine.d.ts","sourceRoot":"","sources":["../../src/completion/read-only-pristine.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AAG3F,OAAO,EAAE,mCAAmC,EAAE,MAAM,sBAAsB,CAAC;AAM3E;;;;;;;;GAQG;AACH,eAAO,MAAM,kCAAkC,mBAAmC,CAAC;AAEnF;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;;;OAKG;IACH,mCAAmC,CAAC,EAAE,OAAO,mCAAmC,CAAC;IACjF,gBAAgB,CAAC,EAAE,OAAO,gBAAgB,CAAC;IAC3C,4BAA4B,CAAC,EAAE,OAAO,4BAA4B,CAAC;CACpE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,8BAA8B,CAClD,MAAM,EAAE;IACN,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACxC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB,EACD,IAAI,GAAE,0BAA+B,GACpC,OAAO,CAAC;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,CAAC,CA6DhC"}

package/dist/completion/read-only-pristine.js

@@ -1,99 +0,0 @@
-// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: packages/daemon/src/completion/read-only-pristine.test.ts
-// PINNED-BY-END
-/**
- * Pristine-at-exit assertion for read-only audit focuses.
- *
- * A read-only audit focus is supposed to leave the worktree exactly as it found
- * it -- discovery only, no file modifications. The write-deny settings overlay
- * (templates/claude-settings -> audit-hooks) makes this physically true at the
- * tool layer, and the pre-commit hook blocks commits. This module is the
- * completion-side backstop: when a read-only team exits, assert the worktree is
- * pristine; if it is NOT, file a (dedup-aware) escalation so an operator sees
- * that a read-only audit modified files it shouldn't have.
- *
- * Modeled on delivery-advance-block.ts `ensureWorktreeCommittedBeforeAdvance`:
- * dependency-injected collaborators, durable dedup via
- * `hasOpenEscalationForDelivery`, fail-open lookup.
- *
- * @module completion/read-only-pristine
- */
-import { createEscalation, hasOpenEscalationForDelivery } from '../queries/escalations.js';
-import { NO_HUMAN_ACT } from '../queries/filing-observation.js';
-import { withRetry, ESCALATION_REASONS, ESCALATION_DISPOSITIONS, ESCALATION_KINDS } from '@telora/daemon-core';
-import { worktreeHasNonDaemonAuthoredChanges } from '../worktree/index.js';
-import { createLogger } from '../shell/log.js';
-const log = createLogger({ module: 'focus-executor' });
-/**
- * escalation_kind discriminator for the read-only-pristine violation.
- *
- * Reuses ADVANCE_BLOCKED -- the violation is "the daemon refuses to advance /
- * merge this focus because its worktree is not in the expected (pristine)
- * state", the same class as the uncommitted-changes advance block. Keeps the
- * dedup keyed on a kind already in the escalation_kind CHECK set without a
- * schema change.
- */
-export const READ_ONLY_PRISTINE_ESCALATION_KIND = ESCALATION_KINDS.ADVANCE_BLOCKED;
-/**
- * Assert that a read-only focus's worktree is pristine at team exit.
- *
- * Returns pristine=true when the worktree has no AGENT-authored changes -- the
- * daemon's own read-only overlay (.claude/settings.json, .codex/config.toml,
- * .telora-hooks/, .telora/) is excluded, so the daemon writing its own deny
- * boundary never reads as an audit modifying files -- or when no worktree path
- * is known. Returns pristine=false and files a dedup-aware escalation when
- * agent-authored changes are present -- the caller then reverts the dirty tree
- * and skips the merge.
- *
- * Dedup: at most ONE open escalation per delivery (queried via
- * hasOpenEscalationForDelivery on the ADVANCE_BLOCKED kind). Fail-open on the
- * lookup so a genuine first violation is never silently swallowed.
- */
-export async function assertReadOnlyWorktreePristine(params, deps = {}) {
-    const hasAgentDirt = deps.worktreeHasNonDaemonAuthoredChanges ?? worktreeHasNonDaemonAuthoredChanges;
-    const createEsc = deps.createEscalation ?? createEscalation;
-    const hasOpenEsc = deps.hasOpenEscalationForDelivery ?? hasOpenEscalationForDelivery;
-    const { worktreePath, organizationId, sessionId, deliveryId, focusId, focusName, branchName } = params;
-    if (!worktreePath || !hasAgentDirt(worktreePath)) {
-        return { pristine: true };
-    }
-    log.warn(`[focus-executor] READ-ONLY PRISTINE VIOLATION: audit "${focusName}" left uncommitted changes in ${worktreePath}.`);
-    // Durable dedup: skip filing if an open escalation already exists for this
-    // delivery. Fail open -- a lookup error proceeds to file.
-    let alreadyOpen = false;
-    try {
-        alreadyOpen = await hasOpenEsc(deliveryId, READ_ONLY_PRISTINE_ESCALATION_KIND);
-    }
-    catch (err) {
-        log.warn(`[focus-executor] Open read-only-pristine escalation lookup failed for "${focusName}", proceeding to file: ${err.message}`);
-    }
-    if (alreadyOpen) {
-        return { pristine: false };
-    }
-    try {
-        await withRetry(() => createEsc({
-            organizationId,
-            sessionId: sessionId ?? '',
-            issueId: null,
-            reasonType: ESCALATION_REASONS.ERROR_ENCOUNTERED,
-            disposition: ESCALATION_DISPOSITIONS.NEEDS_OPERATOR,
-            // The daemon already reverted the dirt and skipped the merge; inspecting
-            // the audit session or tightening its deny overlay is repo work.
-            humanAct: NO_HUMAN_ACT,
-            escalationKind: READ_ONLY_PRISTINE_ESCALATION_KIND,
-            anchor: { deliveryId, focusId, branch: branchName },
-            description: `Read-only audit "${focusName}" left uncommitted changes in its worktree.\n\n` +
-                `A read-only audit focus must leave the worktree pristine (discovery ` +
-                `only -- no file modifications). The daemon has reverted the changes ` +
-                `and will NOT merge this focus. Review what the audit modified.`,
-            whatWasTried: 'On read-only team exit the daemon ran `git status --porcelain` and found uncommitted changes in the focus worktree, which a read-only audit must never produce.',
-            helpNeeded: `Inspect the audit session for "${focusName}"; the worktree at ${worktreePath} has been reverted. No merge was performed.`,
-        }), { maxAttempts: 3, label: 'escalation-read-only-pristine' });
-        log.info(`Filed read-only-pristine escalation for "${focusName}"`);
-    }
-    catch (err) {
-        log.error(`[focus-executor] Failed to file read-only-pristine escalation for "${focusName}": ${err.message}`);
-    }
-    return { pristine: false };
-}
-//# sourceMappingURL=read-only-pristine.js.map

package/dist/completion/read-only-pristine.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"read-only-pristine.js","sourceRoot":"","sources":["../../src/completion/read-only-pristine.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,uEAAuE;AACvE,gBAAgB;AAEhB;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC/G,OAAO,EAAE,mCAAmC,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAGvD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,gBAAgB,CAAC,eAAe,CAAC;AAmBnF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,MAQC,EACD,OAAmC,EAAE;IAErC,MAAM,YAAY,GAAG,IAAI,CAAC,mCAAmC,IAAI,mCAAmC,CAAC;IACrG,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,IAAI,gBAAgB,CAAC;IAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,4BAA4B,IAAI,4BAA4B,CAAC;IAErF,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IAEvG,IAAI,CAAC,YAAY,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,EAAE,CAAC;QACjD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAED,GAAG,CAAC,IAAI,CACN,yDAAyD,SAAS,iCAAiC,YAAY,GAAG,CACnH,CAAC;IAEF,2EAA2E;IAC3E,0DAA0D;IAC1D,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,kCAAkC,CAAC,CAAC;IACjF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CACN,0EAA0E,SAAS,0BAA2B,GAAa,CAAC,OAAO,EAAE,CACtI,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;IAED,IAAI,CAAC;QACH,MAAM,SAAS,CACb,GAAG,EAAE,CAAC,SAAS,CAAC;YACd,cAAc;YACd,SAAS,EAAE,SAAS,IAAI,EAAE;YAC1B,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,kBAAkB,CAAC,iBAAiB;YAChD,WAAW,EAAE,uBAAuB,CAAC,cAAc;YACnD,yEAAyE;YACzE,iEAAiE;YACjE,QAAQ,EAAE,YAAY;YACtB,cAAc,EAAE,kCAAkC;YAClD,MAAM,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE;YACnD,WAAW,EACT,oBAAoB,SAAS,iDAAiD;gBAC9E,sEAAsE;gBACtE,sEAAsE;gBACtE,gEAAgE;YAClE,YAAY,EACV,iKAAiK;YACnK,UAAU,EAAE,kCAAkC,SAAS,sBAAsB,YAAY,6CAA6C;SACvI,CAAC,EACF,EAAE,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAC3D,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,4CAA4C,SAAS,GAAG,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CACP,sEAAsE,SAAS,MAAO,GAAa,CAAC,OAAO,EAAE,CAC9G,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC"}

package/dist/completion/reengagement-redrive.d.ts

@@ -1,44 +0,0 @@
-/**
- * Handoff-floor SELF RE-DRIVE.
- *
- * The handoff floor DEFERS a re-engagement/handoff that arrives inside
- * HANDOFF_MIN_INTERVAL_MS (anti-spam). The old code then returned, assuming the
- * lead's next completion would re-read work fresh -- but a parked lead only
- * emits a completion event in RESPONSE to a wake, so a deferred FINAL completion
- * was never followed by another and the team sat phase=executing (merge-back
- * skipped it) until the 3h idle-stall timer (incident 2026-08-31). Instead of
- * losing that wakeup, executeCompletionAction schedules a post-floor re-drive
- * here: after the remaining floor interval, with NO new lead event, it
- * re-invokes the completion decision (deps.reDrive -> handleCompletionEvent),
- * which re-reads deliveries/issues and either hands off actionable work or
- * terminates work that turned out terminal.
- */
-import type { CompletionEventContext, CompletionEventDeps } from './event.js';
-/**
- * Fallback timer used when deps.scheduleReDrive is absent (a partial deps in a
- * direct-call test). Production always carries the injected default. A real
- * setTimeout whose handle is unref()'d so a pending re-drive never keeps the
- * daemon process alive on its own; the returned canceller clears it.
- */
-export declare function fallbackScheduleReDrive(fn: () => void, delayMs: number): () => void;
-/**
- * Schedule a post-floor self re-drive for a team whose re-engagement was just
- * deferred by the handoff floor.
- *
- * The fire is guarded: it re-drives only a still-`executing`, still-alive team.
- * A newer deferral supersedes the prior pending re-drive (cancel then
- * reschedule); handleCompletionEvent and terminateTeam also cancel it, so at
- * most one re-drive is ever pending and it is taken at most once. The re-drive
- * itself re-enters the floor check with lastHandoffAt unchanged, so once the
- * floor has elapsed it hands off (or terminates) rather than deferring again --
- * the loop converges and the anti-spam bound (<=1 handoff per interval) holds.
- */
-export declare function scheduleDeferredReDrive(ctx: CompletionEventContext, deps: CompletionEventDeps, delayMs: number, 
-/**
- * Asked when the timer fires: a number means "still holding -- check again
- * in that many ms" (no re-drive, no cycle), null means re-drive now. Used by
- * the wait on live workers (completion/worker-wait.ts), so a worker that keeps
- * reporting costs the lead no completion cycles at all.
- */
-recheck?: () => number | null | Promise<number | null>): void;
-//# sourceMappingURL=reengagement-redrive.d.ts.map

package/dist/completion/reengagement-redrive.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"reengagement-redrive.d.ts","sourceRoot":"","sources":["../../src/completion/reengagement-redrive.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAM9E;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,IAAI,CAInF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,sBAAsB,EAC3B,IAAI,EAAE,mBAAmB,EACzB,OAAO,EAAE,MAAM;AACf;;;;;GAKG;AACH,OAAO,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GACrD,IAAI,CAwCN"}

package/dist/completion/reengagement-redrive.js

@@ -1,76 +0,0 @@
-// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: packages/daemon/src/completion/reengagement-redrive.test.ts
-// PINNED-BY-END
-import { isProcessAlive as defaultIsLeadAlive } from '../spawn/liveness.js';
-import { createLogger } from '../shell/log.js';
-const log = createLogger({ module: 'focus-executor' });
-/**
- * Fallback timer used when deps.scheduleReDrive is absent (a partial deps in a
- * direct-call test). Production always carries the injected default. A real
- * setTimeout whose handle is unref()'d so a pending re-drive never keeps the
- * daemon process alive on its own; the returned canceller clears it.
- */
-export function fallbackScheduleReDrive(fn, delayMs) {
-    const timer = setTimeout(fn, delayMs);
-    timer.unref?.();
-    return () => clearTimeout(timer);
-}
-/**
- * Schedule a post-floor self re-drive for a team whose re-engagement was just
- * deferred by the handoff floor.
- *
- * The fire is guarded: it re-drives only a still-`executing`, still-alive team.
- * A newer deferral supersedes the prior pending re-drive (cancel then
- * reschedule); handleCompletionEvent and terminateTeam also cancel it, so at
- * most one re-drive is ever pending and it is taken at most once. The re-drive
- * itself re-enters the floor check with lastHandoffAt unchanged, so once the
- * floor has elapsed it hands off (or terminates) rather than deferring again --
- * the loop converges and the anti-spam bound (<=1 handoff per interval) holds.
- */
-export function scheduleDeferredReDrive(ctx, deps, delayMs, 
-/**
- * Asked when the timer fires: a number means "still holding -- check again
- * in that many ms" (no re-drive, no cycle), null means re-drive now. Used by
- * the wait on live workers (completion/worker-wait.ts), so a worker that keeps
- * reporting costs the lead no completion cycles at all.
- */
-recheck) {
-    const { teamState } = ctx;
-    // Deferral resets the completion detector so a genuine future completion is
-    // still observed; the two halves of "defer" (reset + schedule) live together
-    // here so the caller's branch stays a single statement.
-    ctx.completionDetector.reset();
-    // Supersede any prior pending re-drive; the latest deferral owns the timer.
-    teamState.reDriveCancel?.();
-    teamState.reDriveCancel = undefined;
-    const reDrive = deps.reDrive;
-    if (!reDrive) {
-        // No re-drive action wired (partial deps in a direct-call test). Nothing to
-        // schedule -- behavior degrades to the pre-fix "return only", never worse.
-        return;
-    }
-    const schedule = deps.scheduleReDrive ?? fallbackScheduleReDrive;
-    const isAlive = deps.isLeadAlive ?? defaultIsLeadAlive;
-    teamState.reDriveCancel = schedule(() => {
-        // The timer fired: clear our own canceller first so the re-driven
-        // handleCompletionEvent (which also cancels) sees a clean slate.
-        teamState.reDriveCancel = undefined;
-        // Only re-drive a team still live and still executing. A terminated /
-        // shutting-down team, or one whose lead process has died, must not be woken.
-        if (teamState.phase !== 'executing')
-            return;
-        if (teamState.leadPid != null && !isAlive(teamState.leadPid))
-            return;
-        void (async () => {
-            const again = recheck ? await recheck() : null;
-            if (again !== null) {
-                scheduleDeferredReDrive(ctx, deps, again, recheck);
-                return;
-            }
-            await reDrive(ctx, deps);
-        })().catch(err => {
-            log.warn(`Deferred re-drive for "${ctx.focusName}" failed: ${err.message}`);
-        });
-    }, delayMs);
-}
-//# sourceMappingURL=reengagement-redrive.js.map

package/dist/completion/reengagement-redrive.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"reengagement-redrive.js","sourceRoot":"","sources":["../../src/completion/reengagement-redrive.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,yEAAyE;AACzE,gBAAgB;AAmBhB,OAAO,EAAE,cAAc,IAAI,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,EAAc,EAAE,OAAe;IACrE,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACtC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAChB,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAA2B,EAC3B,IAAyB,EACzB,OAAe;AACf;;;;;GAKG;AACH,OAAsD;IAEtD,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC;IAC1B,4EAA4E;IAC5E,6EAA6E;IAC7E,wDAAwD;IACxD,GAAG,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC;IAC/B,4EAA4E;IAC5E,SAAS,CAAC,aAAa,EAAE,EAAE,CAAC;IAC5B,SAAS,CAAC,aAAa,GAAG,SAAS,CAAC;IAEpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,4EAA4E;QAC5E,2EAA2E;QAC3E,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,IAAI,uBAAuB,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,IAAI,kBAAkB,CAAC;IAEvD,SAAS,CAAC,aAAa,GAAG,QAAQ,CAAC,GAAG,EAAE;QACtC,kEAAkE;QAClE,iEAAiE;QACjE,SAAS,CAAC,aAAa,GAAG,SAAS,CAAC;QACpC,sEAAsE;QACtE,6EAA6E;QAC7E,IAAI,SAAS,CAAC,KAAK,KAAK,WAAW;YAAE,OAAO;QAC5C,IAAI,SAAS,CAAC,OAAO,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC;YAAE,OAAO;QACrE,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,uBAAuB,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YACD,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;YACf,GAAG,CAAC,IAAI,CACN,0BAA0B,GAAG,CAAC,SAAS,aAAc,GAAa,CAAC,OAAO,EAAE,CAC7E,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,EAAE,OAAO,CAAC,CAAC;AACd,CAAC"}

package/dist/completion/review-approved-head-gate.d.ts

@@ -1,53 +0,0 @@
-/** The focus head a review would cover, and the commit its current approval judged. */
-export interface ReviewHeadApproval {
-    /** The focus branch tip, null when it cannot be resolved. */
-    headSha: string | null;
-    /** The commit the newest current approval judged, null when none (or not read). */
-    approvedSha: string | null;
-}
-/** Which focus branch to resolve, and where its approvals are recorded. */
-export interface ReviewHeadApprovalTarget {
-    productId: string;
-    focusId: string;
-    /** Pinned focus branch identity (product_focuses.branch_name), or null. */
-    branchName: string | null;
-    /** Product repo path -- the branch ref lives in its git dir (worktrees share it). */
-    repoPath: string;
-    /**
-     * The integration branch. When given, a head that only adds OTHER foci's commits
-     * on top of the approved commit is read as that approved commit (module doc).
-     */
-    integrationBranch?: string;
-}
-/** Injected reads; the defaults reach git, the product-api and the auto-approval records. */
-export interface ReviewHeadApprovalReadDeps {
-    resolveRef: (repoPath: string, ref: string) => string | null;
-    /** Throws when the review history cannot be read. */
-    readApprovedReviewSha: (target: ReviewHeadApprovalTarget) => Promise<string | null>;
-    /** Whether `head` adds nothing of the focus's own on top of `approved` (git/focus-own-delta.ts). Absent: never. */
-    addsNoOwnWork?: (target: ReviewHeadApprovalTarget & {
-        integrationBranch: string;
-    }, approved: string, head: string) => Promise<boolean>;
-}
-/**
- * The production ownership proof: `repoPath` is the product checkout (its HEAD is
- * not the focus branch), so provenance is read from the NAMED focus branch, with the
- * focus's delivery ids from `listDeliveryIds` (the product-api by default).
- */
-export declare function makeHeadAddsNoOwnWork(listDeliveryIds?: (focusId: string) => Promise<readonly string[]>): NonNullable<ReviewHeadApprovalReadDeps['addsNoOwnWork']>;
-/**
- * Read the focus head and its current approval. The approval is read only once
- * the head resolves (with no head there is nothing to compare, so the product-api
- * call is skipped). Throws when the approval read throws.
- */
-export declare function readReviewHeadApproval(target: ReviewHeadApprovalTarget, deps?: ReviewHeadApprovalReadDeps): Promise<ReviewHeadApproval>;
-/** Whether the focus head is the commit its current approval already judged. Pure. */
-export declare function isHeadAlreadyApproved(read: ReviewHeadApproval): boolean;
-/**
- * Whether checkAutoReview must decline to open the review window because the focus
- * head is unchanged since its current approval. Logs the decline (info). Fails
- * OPEN: an absent reader, an unknown head or approval, or a thrown read returns
- * false (a thrown read is logged at warn).
- */
-export declare function declinesReviewAtApprovedHead(focusId: string, read: ((focusId: string) => Promise<ReviewHeadApproval>) | undefined): Promise<boolean>;
-//# sourceMappingURL=review-approved-head-gate.d.ts.map

package/dist/completion/review-approved-head-gate.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"review-approved-head-gate.d.ts","sourceRoot":"","sources":["../../src/completion/review-approved-head-gate.ts"],"names":[],"mappings":"AA2DA,uFAAuF;AACvF,MAAM,WAAW,kBAAkB;IACjC,6DAA6D;IAC7D,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,mFAAmF;IACnF,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,2EAA2E;AAC3E,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,qFAAqF;IACrF,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,6FAA6F;AAC7F,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAC7D,qDAAqD;IACrD,qBAAqB,EAAE,CAAC,MAAM,EAAE,wBAAwB,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACpF,mHAAmH;IACnH,aAAa,CAAC,EAAE,CAAC,MAAM,EAAE,wBAAwB,GAAG;QAAE,iBAAiB,EAAE,MAAM,CAAA;KAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACxI;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,eAAe,GAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,MAAM,EAAE,CAA2E,GACzI,WAAW,CAAC,0BAA0B,CAAC,eAAe,CAAC,CAAC,CAK1D;AAUD;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,wBAAwB,EAChC,IAAI,GAAE,0BAA4C,GACjD,OAAO,CAAC,kBAAkB,CAAC,CAmB7B;AAED,sFAAsF;AACtF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAEvE;AAED;;;;;GAKG;AACH,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC,GAAG,SAAS,GACnE,OAAO,CAAC,OAAO,CAAC,CAmBlB"}

package/dist/completion/review-approved-head-gate.js

@@ -1,124 +0,0 @@
-// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: packages/daemon/src/completion/review-approved-head-gate.test.ts,
-//   packages/daemon/src/integration/approved-head-gate-failure-respawn-regression.test.ts,
-//   packages/daemon/src/integration/approved-head-hold-release-regression.test.ts,
-//   packages/daemon/src/integration/fully-merged-focus-sibling-red-scenario.test.ts,
-//   packages/daemon/src/integration/shortfall-ruling-disposes-proposals-regression.test.ts,
-//   packages/daemon/src/integration/standing-approval-release-regression.test.ts
-// PINNED-BY-END
-/**
- * Review runs once per distinct focus head: an unchanged head since the focus's
- * current approval draws no new review window.
- *
- * checkAutoReview (state-cascade.ts) opens the review window when a focus
- * converges on verify. Its only in-memory backoff is a signature over the delivery
- * aggregate (status, updated_at, merge commit, git state) -- and a verify delivery
- * held by a repeating shortfall has its gate_state rewritten every pass, which
- * bumps updated_at and invalidates that signature. Each rewrite re-opened the
- * window at the SAME focus head, a review team spawned, and it approved the same
- * commit again: daemon 0.22.132 stamped 9 approvals in ~40 minutes at one
- * reviewedSha.
- *
- * The approval that makes a re-review pointless is the one the merge gate already
- * reads (queries/focus-review-approval.ts readLatestApprovedReviewSha): the newest
- * CURRENT approval -- an approved focus_reviews row or a recorded clean
- * full-coverage auto-approval (completion/review-auto-approval-record.ts) -- which
- * a newer gaps_found review of the same commit revokes. The head is the focus
- * branch tip a review spawn would pin as its coverage anchor (focus-executor.ts
- * captureReviewSpawnCoverage resolves the branch ref; a review spawn skips the
- * rebase, and worktrees share the repo's refs).
- *
- * So the window is declined only when the head and the current approval are both
- * KNOWN and name the same commit. A new commit on the focus, a newer gaps_found at
- * that commit (approval revoked -> null), or no approval at all leaves review
- * eligible exactly as before.
- *
- * FAILS OPEN: an unresolvable head, an unreadable review history, or a thrown read
- * lets the window open. A missed skip costs one review pass; a false skip would
- * strand a verify delivery that still needs its verdict.
- *
- * NO SAME-HEAD EXCEPTION: a verify delivery that becomes closable at the approved
- * head with no new commit (a ruling released its shortfall park and verify then
- * passed) does NOT re-open the window -- that re-ran review and stamped another
- * approval of the unchanged commit. It converges on the STANDING approval instead
- * (completion/standing-approval-convergence.ts), through the review exit's own
- * holds, with no review run and no approval written.
- *
- * @module completion/review-approved-head-gate
- */
-import { resolveRef as defaultResolveRef } from '../git/index.js';
-import { readLatestApprovedReviewSha, sameCommit } from '../queries/focus-review-approval.js';
-import { listReviewAutoApprovals } from './review-auto-approval-record.js';
-import { isForeignOnlyExtension } from '../git/focus-own-delta.js';
-import { getFocusDeliveries } from '../queries/focuses.js';
-import { createLogger } from '../shell/log.js';
-const log = createLogger({ module: 'state-cascade' });
-/**
- * The production ownership proof: `repoPath` is the product checkout (its HEAD is
- * not the focus branch), so provenance is read from the NAMED focus branch, with the
- * focus's delivery ids from `listDeliveryIds` (the product-api by default).
- */
-export function makeHeadAddsNoOwnWork(listDeliveryIds = async (focusId) => (await getFocusDeliveries(focusId)).map((d) => d.id)) {
-    return async (target, approved, head) => isForeignOnlyExtension(target.repoPath, target.integrationBranch, approved, head, new Set(await listDeliveryIds(target.focusId)), { focusBranch: target.branchName ?? undefined });
-}
-const defaultReadDeps = {
-    resolveRef: defaultResolveRef,
-    readApprovedReviewSha: (target) => readLatestApprovedReviewSha(target.focusId, {
-        autoApprovals: listReviewAutoApprovals(target.productId, target.focusId),
-    }),
-    addsNoOwnWork: makeHeadAddsNoOwnWork(),
-};
-/**
- * Read the focus head and its current approval. The approval is read only once
- * the head resolves (with no head there is nothing to compare, so the product-api
- * call is skipped). Throws when the approval read throws.
- */
-export async function readReviewHeadApproval(target, deps = defaultReadDeps) {
-    const headSha = target.branchName ? deps.resolveRef(target.repoPath, target.branchName) : null;
-    if (!headSha)
-        return { headSha: null, approvedSha: null };
-    const approvedSha = await deps.readApprovedReviewSha(target);
-    const { integrationBranch } = target;
-    if (approvedSha && integrationBranch && deps.addsNoOwnWork && !sameCommit(headSha, approvedSha)) {
-        // A focus whose commits are all on integration, moved past its approved commit
-        // only by other foci's commits, has no own work to review: its OWN head is the
-        // approved commit. Unprovable (or a failed read) keeps the branch tip.
-        const noOwnWork = await deps.addsNoOwnWork({ ...target, integrationBranch }, approvedSha, headSha).catch(() => false);
-        if (noOwnWork) {
-            log.info(`[state-cascade] Focus ${target.focusId}: head ${headSha.slice(0, 12)} adds only other foci's commits (already on ` +
-                `integration) to its approved commit ${approvedSha.slice(0, 12)} -- read as that approved head, no review over them`);
-            return { headSha: approvedSha, approvedSha };
-        }
-    }
-    return { headSha, approvedSha };
-}
-/** Whether the focus head is the commit its current approval already judged. Pure. */
-export function isHeadAlreadyApproved(read) {
-    return read.headSha !== null && read.approvedSha !== null && sameCommit(read.headSha, read.approvedSha);
-}
-/**
- * Whether checkAutoReview must decline to open the review window because the focus
- * head is unchanged since its current approval. Logs the decline (info). Fails
- * OPEN: an absent reader, an unknown head or approval, or a thrown read returns
- * false (a thrown read is logged at warn).
- */
-export async function declinesReviewAtApprovedHead(focusId, read) {
-    if (!read)
-        return false;
-    let result;
-    try {
-        result = await read(focusId);
-    }
-    catch (err) {
-        log.warn(`[state-cascade] Could not read the approved review head for focus ${focusId}; ` +
-            `opening the review window as before: ${err.message}`);
-        return false;
-    }
-    if (!isHeadAlreadyApproved(result))
-        return false;
-    log.info(`[state-cascade] Not opening a review window on focus ${focusId}: its head ` +
-        `${(result.headSha ?? '').slice(0, 12)} is the commit its current approval already judged ` +
-        `-- review runs once per distinct focus head.`);
-    return true;
-}
-//# sourceMappingURL=review-approved-head-gate.js.map

package/dist/completion/review-approved-head-gate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"review-approved-head-gate.js","sourceRoot":"","sources":["../../src/completion/review-approved-head-gate.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,+EAA+E;AAC/E,2FAA2F;AAC3F,mFAAmF;AACnF,qFAAqF;AACrF,4FAA4F;AAC5F,iFAAiF;AACjF,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAE,UAAU,IAAI,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,2BAA2B,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AAC9F,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;AAkCtD;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,kBAAmE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAE1I,OAAO,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAC7D,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,iBAAiB,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,MAAM,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EACzG,EAAE,WAAW,EAAE,MAAM,CAAC,UAAU,IAAI,SAAS,EAAE,CAChD,CAAC;AACJ,CAAC;AAED,MAAM,eAAe,GAA+B;IAClD,UAAU,EAAE,iBAAiB;IAC7B,qBAAqB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,2BAA2B,CAAC,MAAM,CAAC,OAAO,EAAE;QAC7E,aAAa,EAAE,uBAAuB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC;KACzE,CAAC;IACF,aAAa,EAAE,qBAAqB,EAAE;CACvC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAgC,EAChC,OAAmC,eAAe;IAElD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/F,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC1D,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAAC;IACrC,IAAI,WAAW,IAAI,iBAAiB,IAAI,IAAI,CAAC,aAAa,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;QAChG,+EAA+E;QAC/E,+EAA+E;QAC/E,uEAAuE;QACvE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,GAAG,MAAM,EAAE,iBAAiB,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACtH,IAAI,SAAS,EAAE,CAAC;YACd,GAAG,CAAC,IAAI,CACN,yBAAyB,MAAM,CAAC,OAAO,UAAU,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,8CAA8C;gBACnH,uCAAuC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,qDAAqD,CACrH,CAAC;YACF,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;QAC/C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,qBAAqB,CAAC,IAAwB;IAC5D,OAAO,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;AAC1G,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OAAe,EACf,IAAoE;IAEpE,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,MAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CACN,qEAAqE,OAAO,IAAI;YAChF,wCAAyC,GAAa,CAAC,OAAO,EAAE,CACjE,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,GAAG,CAAC,IAAI,CACN,wDAAwD,OAAO,aAAa;QAC5E,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,qDAAqD;QAC3F,8CAA8C,CAC/C,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/completion/review-auto-approval-record.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"review-auto-approval-record.d.ts","sourceRoot":"","sources":["../../src/completion/review-auto-approval-record.ts"],"names":[],"mappings":"AAuCA,+DAA+D;AAC/D,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,GAAG,EAAE,MAAM,CAAC;IACZ,iDAAiD;IACjD,SAAS,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAYD,sGAAsG;AACtG,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,MAAsB,GAAG,MAAM,CAE3H;AAYD,yHAAyH;AACzH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,GAAG,GAAE,MAAsB,GAAG,OAAO,CAgB1G;AAED,gIAAgI;AAChI,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,GAAE,MAAsB,GAAG,kBAAkB,EAAE,CAkB7H"}

package/dist/completion/review-auto-approval-record.js

@@ -1,102 +0,0 @@
-// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: packages/daemon/src/completion/review-coverage-gate.test.ts,
-//   packages/daemon/src/completion/teardown-merge-gate.test.ts
-// PINNED-BY-END
-/**
- * The commit a clean full-coverage review auto-approval covered, recorded durably.
- *
- * A review session that exits clean (succeeded, no defects filed, no
- * focus_reviews row) with its spawn tip equal to its exit tip auto-approves its
- * verify deliveries to done (completion/review-exit-phase.ts). That approval
- * writes no focus_reviews row, and auto_approved_at on the delivery names a
- * session, not a commit -- so the merge gate had no commit to read for it, and a
- * product with no deterministic gate kept reviewed, done work on the focus branch
- * forever.
- *
- * One file per (product, focus, sha) under the global state dir, written
- * atomically (temp + rename) BEFORE the delivery's move to done: a write that
- * fails leaves the delivery in verify, so no auto-approved delivery is done
- * without the evidence its work needs to merge, and a record whose move then
- * fails still names a commit a clean full-coverage review judged. The
- * merge gate reads a focus's records as approvals of the exact commit each covered
- * (queries/focus-review-approval.ts places them by time among the focus's
- * completed reviews, so a newer gaps_found review of the same commit revokes
- * one). A record that is missing, unreadable or malformed approves nothing: the
- * merge holds, the safe direction. Host-local like the per-commit verdict record
- * (verify/commit-verdict-record.ts): the daemon that claims the product writes
- * and reads it.
- *
- * @module review-auto-approval-record
- */
-import { mkdirSync, readdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
-import { resolve } from 'node:path';
-import { resolveGlobalStateDir } from '../shell/daemon-process.js';
-import { createLogger } from '../shell/log.js';
-const log = createLogger({ module: 'focus-executor' });
-const SHA_RE = /^[0-9a-f]{7,64}$/i;
-function approvalDir() {
-    return resolve(resolveGlobalStateDir(), 'review-auto-approvals');
-}
-function filePrefix(productId, focusId) {
-    return `${productId}-${focusId}-`.replace(/[^a-zA-Z0-9._-]/g, '_');
-}
-/** The record file for a focus commit; `dir` defaults to the global state dir. Exported for tests. */
-export function reviewAutoApprovalPath(productId, focusId, sha, dir = approvalDir()) {
-    return resolve(dir, `${filePrefix(productId, focusId)}${sha.replace(/[^a-zA-Z0-9]/g, '_')}.json`);
-}
-/** Validate a parsed record; null when it is not a well-formed approval. */
-function parseApproval(raw) {
-    if (typeof raw !== 'object' || raw === null)
-        return null;
-    const r = raw;
-    if (typeof r.productId !== 'string' || typeof r.focusId !== 'string')
-        return null;
-    if (typeof r.sha !== 'string' || !SHA_RE.test(r.sha))
-        return null;
-    if (typeof r.sessionId !== 'string' || typeof r.deliveryId !== 'string' || typeof r.recordedAt !== 'string')
-        return null;
-    return { productId: r.productId, focusId: r.focusId, sha: r.sha, sessionId: r.sessionId, deliveryId: r.deliveryId, recordedAt: r.recordedAt };
-}
-/** Record an auto-approval atomically. Best-effort: false (and logged) when the sha is malformed or the write failed. */
-export function writeReviewAutoApproval(approval, dir = approvalDir()) {
-    if (!SHA_RE.test(approval.sha)) {
-        log.warn(`[focus-executor] not recording the auto-approval of focus ${approval.focusId}: malformed covered sha '${approval.sha}'`);
-        return false;
-    }
-    const path = reviewAutoApprovalPath(approval.productId, approval.focusId, approval.sha, dir);
-    const tmp = `${path}.${process.pid}.tmp`;
-    try {
-        mkdirSync(dir, { recursive: true });
-        writeFileSync(tmp, JSON.stringify(approval, null, 2), { mode: 0o600 });
-        renameSync(tmp, path);
-        return true;
-    }
-    catch (err) {
-        log.warn(`[focus-executor] failed to record the auto-approval of ${approval.focusId}@${approval.sha.slice(0, 8)}: ${err.message}`);
-        return false;
-    }
-}
-/** Every auto-approval recorded for the focus, newest first. Empty when none can be read: a missing record approves nothing. */
-export function listReviewAutoApprovals(productId, focusId, dir = approvalDir()) {
-    const prefix = filePrefix(productId, focusId);
-    let names;
-    try {
-        names = readdirSync(dir).filter((name) => name.startsWith(prefix) && name.endsWith('.json'));
-    }
-    catch {
-        return [];
-    }
-    const approvals = [];
-    for (const name of names) {
-        try {
-            const parsed = parseApproval(JSON.parse(readFileSync(resolve(dir, name), 'utf8')));
-            if (parsed && parsed.productId === productId && parsed.focusId === focusId)
-                approvals.push(parsed);
-        }
-        catch {
-            // Unreadable or malformed: approves nothing.
-        }
-    }
-    return approvals.sort((a, b) => Date.parse(b.recordedAt) - Date.parse(a.recordedAt));
-}
-//# sourceMappingURL=review-auto-approval-record.js.map

package/dist/completion/review-auto-approval-record.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"review-auto-approval-record.js","sourceRoot":"","sources":["../../src/completion/review-auto-approval-record.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,0EAA0E;AAC1E,+DAA+D;AAC/D,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1F,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAevD,MAAM,MAAM,GAAG,mBAAmB,CAAC;AAEnC,SAAS,WAAW;IAClB,OAAO,OAAO,CAAC,qBAAqB,EAAE,EAAE,uBAAuB,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB,EAAE,OAAe;IACpD,OAAO,GAAG,SAAS,IAAI,OAAO,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,sBAAsB,CAAC,SAAiB,EAAE,OAAe,EAAE,GAAW,EAAE,MAAc,WAAW,EAAE;IACjH,OAAO,OAAO,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;AACpG,CAAC;AAED,4EAA4E;AAC5E,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAClF,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClE,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzH,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;AAChJ,CAAC;AAED,yHAAyH;AACzH,MAAM,UAAU,uBAAuB,CAAC,QAA4B,EAAE,MAAc,WAAW,EAAE;IAC/F,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,6DAA6D,QAAQ,CAAC,OAAO,4BAA4B,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC;QACnI,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,GAAG,sBAAsB,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7F,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACzC,IAAI,CAAC;QACH,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,0DAA0D,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9I,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,gIAAgI;AAChI,MAAM,UAAU,uBAAuB,CAAC,SAAiB,EAAE,OAAe,EAAE,MAAc,WAAW,EAAE;IACrG,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC9C,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;YACnF,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO;gBAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrG,CAAC;QAAC,MAAM,CAAC;YACP,6CAA6C;QAC/C,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;AACvF,CAAC"}