@telora/daemon 0.22.239 → 0.22.289

package/dist/verify/explicit-rearm.js

@@ -1,165 +0,0 @@
-// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: packages/daemon/src/integration/explicit-verdict-departure-during-removal.test.ts,
-//   packages/daemon/src/integration/explicit-verdict-invalidation-restart.test.ts,
-//   packages/daemon/src/integration/explicit-verdict-reuse.test.ts,
-//   packages/daemon/src/integration/held-route-pull-dispatch.test.ts,
-//   packages/daemon/src/integration/review-verdict-ruling-release.test.ts,
-//   packages/daemon/src/integration/shortfall-ruling-disposes-proposals-regression.test.ts,
-//   packages/daemon/src/integration/shortfall-ruling-release.test.ts,
-//   packages/daemon/src/verify/verification-commit-sharing.test.ts
-// PINNED-BY-END
-/**
- * Re-arm an explicit-method verification whose recorded pass does not cover the
- * focus HEAD under the gate its row names now.
- *
- * daemon_get_pending_verifications lists an explicit-method row only while its
- * verification_outcome is null or pending: the edge keeps a pass (and nulls a
- * failure, which re-admits it). The default-on scan skips every row that names a
- * method (verify/verification-default-on.ts). So once an explicit row passed at
- * commit A, nothing ran its gate again: a team commit B was never judged, and the
- * review exit either held for a verdict no run would render or -- through a
- * commit-less row pass -- took A's pass for B. The same holds for the gate: the
- * edge lets an operator change a row's method or config without resetting its
- * outcome, so a new gate at an unchanged commit never ran either.
- *
- * Each tick, for a delivery still in verify whose durable row names a method that
- * renders verdicts (not the always-pending behavioral scaffold) and records a pass,
- * this reads the verdict its run is known to have rendered -- this process's record
- * of the run, else the one on the delivery's gate_state
- * (verify/explicit-gate-outcome.ts) -- and selects the row again, built from its
- * durable columns, as an explicit candidate unless that verdict was rendered under
- * the gate the row names now (explicitGateKeyOf) for the focus HEAD or for no commit:
- *   - only at a readable HEAD: an unreadable one re-arms nothing;
- *   - a verdict that judged NO commit (an in-place run, an ai_inspection) under the
- *     row's gate applies to the delivery, not to a commit: not re-armed;
- *   - a pass with no record of its run (a gate_state write that never landed), or
- *     one rendered under another gate, stands in for nothing, so it is re-armed;
- *   - not while a run for the delivery is selected or in flight, and at most once
- *     per (delivery, HEAD, gate) in this process once that run has routed a result:
- *     a routed result either moves the row off its pass (the edge records a
- *     pending, nulls a failure -- the pending queue takes it from there) or records
- *     the verdict this scan reads; a per-commit verdict a deterministic row's
- *     dispatch takes in place of a run is a routed result too.
- * A re-armed run that routes NOTHING -- never started (the verdict its previous run
- * recorded could not be durably removed, its delivery left verify, or its status
- * could not be re-read), left verify mid-run, or threw -- judged nothing for the
- * delivery, so the tick releases the mark (releaseExplicitRearm,
- * verify/verification-commit-sharing.ts) and a later tick selects the unjudged HEAD
- * again, rather than leaving it unjudged, and review held, until a restart or
- * another commit.
- * The explicit gate therefore runs once per new commit or gate, across ticks and a
- * restart. Never throws.
- *
- * @module verify/explicit-rearm
- */
-import { DELIVERY_STATUS } from '@telora/daemon-core';
-import { defaultResolveFocusHeadSha } from './verification-default-on.js';
-import { isGateRunSelected } from './gate-run-registry.js';
-import { readExplicitGateOutcomeRecord } from './explicit-gate-outcome.js';
-import { explicitGateKeyOf } from './commit-verdict-record.js';
-import { createLogger } from '../shell/log.js';
-const log = createLogger({ module: 'verification' });
-/** The (HEAD, gate) each delivery was last re-armed at in this process. */
-const rearmedAt = new Map();
-/** The mark each re-armed candidate set, so its dispatch releases exactly that mark. */
-const candidateMarks = new WeakMap();
-/** A method whose run renders a verdict (the behavioral scaffold always returns pending). */
-function rendersVerdict(method) {
-    return method === 'deterministic' || method === 'ai_inspection';
-}
-function configRecord(value) {
-    return typeof value === 'object' && value !== null && !Array.isArray(value) ? value : null;
-}
-/** Why the recorded verdict does not cover `sha` under `gateKey`, or null when it does. */
-function uncoveredBecause(recorded, sha, gateKey) {
-    if (recorded === null)
-        return 'there is no record of its run';
-    if (recorded.gateKey !== gateKey)
-        return 'its recorded verdict was rendered under another gate';
-    if (recorded.sha === null || recorded.sha === sha)
-        return null;
-    return `its recorded verdict judged ${recorded.sha.slice(0, 8)}`;
-}
-/**
- * The explicit-method rows of the product to select again this tick (see the
- * module header). `pendingIds` are the rows daemon_get_pending_verifications
- * already listed. Never throws: an unreadable focus list or delivery list re-arms
- * nothing for it, and the next tick asks again.
- */
-export async function collectRearmedExplicitVerifications(config, pendingIds, deps) {
-    const candidates = [];
-    let focuses;
-    try {
-        focuses = await deps.getActiveFocuses(config.organizationId, config.productId);
-    }
-    catch (err) {
-        log.warn(`[verification] explicit re-arm: failed to list focuses for product ${config.productId}:`, err.message);
-        return candidates;
-    }
-    for (const focus of focuses) {
-        if (focus.read_only === true)
-            continue;
-        let deliveries;
-        try {
-            deliveries = await deps.getFocusDeliveries(focus.focus_id);
-        }
-        catch (err) {
-            log.warn(`[verification] explicit re-arm: failed to fetch deliveries for focus ${focus.focus_id.slice(0, 8)}:`, err.message);
-            continue;
-        }
-        let head;
-        const readHead = () => (head ??= { sha: (deps.resolveFocusHeadSha ?? defaultResolveFocusHeadSha)(focus.focus_id) }).sha;
-        for (const d of deliveries) {
-            const method = d.verificationMethod;
-            if (d.executionStatus !== DELIVERY_STATUS.VERIFY || !d.injectionId || !rendersVerdict(method))
-                continue;
-            if (d.verificationOutcome !== 'passed' || pendingIds.has(d.id) || isGateRunSelected(d.id))
-                continue;
-            const sha = readHead();
-            if (sha === null)
-                continue;
-            const verificationConfig = configRecord(d.verificationConfig);
-            const gateKey = explicitGateKeyOf(method, verificationConfig);
-            const mark = `${sha}:${gateKey}`;
-            if (rearmedAt.get(d.id) === mark)
-                continue;
-            const why = uncoveredBecause(readExplicitGateOutcomeRecord(d.id, d.gateState), sha, gateKey);
-            if (why === null)
-                continue;
-            rearmedAt.set(d.id, mark);
-            log.info(`[verification] explicit: re-arming delivery "${d.name}" (${d.id}) at focus HEAD ${sha.slice(0, 8)} -- ${why}`);
-            const candidate = {
-                deliveryId: d.id,
-                deliveryName: d.name,
-                productId: config.productId,
-                focusId: focus.focus_id,
-                injectionNodeId: d.injectionId,
-                verificationMethod: method,
-                verificationConfig,
-                verificationOutcome: null,
-                verificationLastRunAt: null,
-                gitState: d.gitState,
-                mergeCommitSha: d.mergeCommitSha,
-            };
-            candidateMarks.set(candidate, mark);
-            candidates.push(candidate);
-        }
-    }
-    return candidates;
-}
-/**
- * Release the re-arm mark `candidate` set, when its run never judged its commit
- * (see the module header), so the scan selects the delivery again at the same HEAD
- * and gate. A no-op for a candidate this scan did not build, or once a later re-arm
- * replaced its mark.
- */
-export function releaseExplicitRearm(candidate) {
-    const mark = candidateMarks.get(candidate);
-    if (mark !== undefined && rearmedAt.get(candidate.deliveryId) === mark)
-        rearmedAt.delete(candidate.deliveryId);
-}
-/** Test seam: forget every re-arm this process made. */
-export function __resetExplicitRearmForTests() {
-    rearmedAt.clear();
-}
-//# sourceMappingURL=explicit-rearm.js.map

package/dist/verify/explicit-rearm.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"explicit-rearm.js","sourceRoot":"","sources":["../../src/verify/explicit-rearm.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,gGAAgG;AAChG,mFAAmF;AACnF,oEAAoE;AACpE,sEAAsE;AACtE,2EAA2E;AAC3E,4FAA4F;AAC5F,sEAAsE;AACtE,mEAAmE;AACnE,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAKtD,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAgC,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAE,6BAA6B,EAAE,MAAM,4BAA4B,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AASrD,2EAA2E;AAC3E,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;AAC5C,wFAAwF;AACxF,MAAM,cAAc,GAAG,IAAI,OAAO,EAA+B,CAAC;AAElE,6FAA6F;AAC7F,SAAS,cAAc,CAAC,MAAe;IACrC,OAAO,MAAM,KAAK,eAAe,IAAI,MAAM,KAAK,eAAe,CAAC;AAClE,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1H,CAAC;AAED,2FAA2F;AAC3F,SAAS,gBAAgB,CAAC,QAAwC,EAAE,GAAW,EAAE,OAAe;IAC9F,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,+BAA+B,CAAC;IAC9D,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO;QAAE,OAAO,sDAAsD,CAAC;IAChG,IAAI,QAAQ,CAAC,GAAG,KAAK,IAAI,IAAI,QAAQ,CAAC,GAAG,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC/D,OAAO,+BAA+B,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AACnE,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,MAAoB,EACpB,UAA+B,EAC/B,IAAuB;IAEvB,MAAM,UAAU,GAA0B,EAAE,CAAC;IAC7C,IAAI,OAAqD,CAAC;IAC1D,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACjF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,sEAAsE,MAAM,CAAC,SAAS,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QAC5H,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI;YAAE,SAAS;QACvC,IAAI,UAA0D,CAAC;QAC/D,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,wEAAwE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YACxI,SAAS;QACX,CAAC;QACD,IAAI,IAAwC,CAAC;QAC7C,MAAM,QAAQ,GAAG,GAAkB,EAAE,CAAC,CAAC,IAAI,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,mBAAmB,IAAI,0BAA0B,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;QACvI,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,CAAC,CAAC,kBAAkB,CAAC;YACpC,IAAI,CAAC,CAAC,eAAe,KAAK,eAAe,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;gBAAE,SAAS;YACxG,IAAI,CAAC,CAAC,mBAAmB,KAAK,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAE,SAAS;YACpG,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;YACvB,IAAI,GAAG,KAAK,IAAI;gBAAE,SAAS;YAC3B,MAAM,kBAAkB,GAAG,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;YAC9D,MAAM,IAAI,GAAG,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC;YACjC,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,IAAI;gBAAE,SAAS;YAC3C,MAAM,GAAG,GAAG,gBAAgB,CAAC,6BAA6B,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YAC7F,IAAI,GAAG,KAAK,IAAI;gBAAE,SAAS;YAC3B,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC1B,GAAG,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,EAAE,mBAAmB,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;YACzH,MAAM,SAAS,GAAwB;gBACrC,UAAU,EAAE,CAAC,CAAC,EAAE;gBAChB,YAAY,EAAE,CAAC,CAAC,IAAI;gBACpB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO,EAAE,KAAK,CAAC,QAAQ;gBACvB,eAAe,EAAE,CAAC,CAAC,WAAW;gBAC9B,kBAAkB,EAAE,MAAM;gBAC1B,kBAAkB;gBAClB,mBAAmB,EAAE,IAAI;gBACzB,qBAAqB,EAAE,IAAI;gBAC3B,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,cAAc,EAAE,CAAC,CAAC,cAAc;aACjC,CAAC;YACF,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACpC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAA8B;IACjE,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,SAAS,IAAI,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,IAAI;QAAE,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;AACjH,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,4BAA4B;IAC1C,SAAS,CAAC,KAAK,EAAE,CAAC;AACpB,CAAC"}

package/dist/verify/explicit-row-selection.d.ts

@@ -1,47 +0,0 @@
-/**
- * Which explicit-method rows a verification tick may dispatch.
- *
- * THE EDGE RE-LISTS a pending or failed explicit row EVERY TICK, and nothing on
- * that path consults a run mark -- the default-on scan's guards do not cover it.
- * So a parked explicit row was dispatched every ~60s at an unchanged HEAD
- * forever, which is exactly the shape of the 2026-09-24 incident this focus
- * exists to close (verify/shortfall-rulings.ts carries the full account and the
- * closed list of paths that may re-select a parked delivery).
- *
- * A re-listing is neither a new ruling nor a new commit, so it is not one of the
- * two things the declared rule lets re-select a parked delivery. A row whose
- * shortfall park stands on an unchanged commit set and unchanged rulings is
- * therefore DROPPED here, and says so in its own re-selection line -- a declined
- * re-selection is as diagnosable from the log as a taken one.
- *
- * WHAT IS STILL DISPATCHED, unchanged: a row whose facts MOVED (a new commit, a
- * new ruling) and a row any of whose facts is UNKNOWN. This only ever removes a
- * dispatch it can PROVE is pointless; an unreadable gate_state, commit set or
- * rulings read dispatches exactly as before. The park read costs one gate_state
- * read per listed row and stops at "no park" for the ordinary case
- * (verify/parked-shortfall-reuse.ts).
- *
- * ONE LINE PER RE-SELECTION, not per listing. A listing is not a re-selection:
- * the edge lists the row every tick whether or not anything happens to it, and
- * its dispatch starts nothing for a delivery that left verify meanwhile. What
- * re-selects a delivery IN VERIFY is a dispatch that ROUTES a verdict for it, so
- * that is where the line is written (noteRelistedDispatch, called by the tick
- * after each dispatch) -- once per routed dispatch, never de-duplicated, so a row
- * re-dispatched every tick writes a line every tick. A declined listing still
- * writes its own line, de-duplicated per (outcome, last run): it re-selects
- * nothing, and repeating it would say nothing new.
- *
- * @module verify/explicit-row-selection
- */
-import type { PendingVerification } from '../queries/verification.js';
-import type { StrategyResult } from './verification-deterministic.js';
-import { type ParkedShortfallReuseDeps } from './parked-shortfall-reuse.js';
-export declare function selectDispatchableExplicitRows(pending: readonly PendingVerification[], deps: ParkedShortfallReuseDeps): Promise<PendingVerification[]>;
-/**
- * The re-selection line for a row the listing passed on: written when its
- * dispatch ROUTED a verdict (the delivery was in verify and was judged again),
- * once per dispatch. A dispatch that routed nothing re-selected nothing and
- * writes nothing; a row that did not come from the listing is not this path's.
- */
-export declare function noteRelistedDispatch(row: PendingVerification, routed: StrategyResult | null): void;
-//# sourceMappingURL=explicit-row-selection.d.ts.map

package/dist/verify/explicit-row-selection.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"explicit-row-selection.d.ts","sourceRoot":"","sources":["../../src/verify/explicit-row-selection.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAA6B,KAAK,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAGvG,wBAAsB,8BAA8B,CAClD,OAAO,EAAE,SAAS,mBAAmB,EAAE,EACvC,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAmBhC;AAKD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,mBAAmB,EAAE,MAAM,EAAE,cAAc,GAAG,IAAI,GAAG,IAAI,CAQlG"}

package/dist/verify/explicit-row-selection.js

@@ -1,37 +0,0 @@
-// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: packages/daemon/src/verify/explicit-row-selection.test.ts
-// PINNED-BY-END
-import { parkHoldsOnUnchangedFacts } from './parked-shortfall-reuse.js';
-import { logReselection } from './reselection-log.js';
-export async function selectDispatchableExplicitRows(pending, deps) {
-    const out = [];
-    for (const row of pending) {
-        const outcome = row.verificationOutcome ?? 'none';
-        const lastRun = row.verificationLastRunAt ?? 'never';
-        if (await parkHoldsOnUnchangedFacts(row, null, deps)) {
-            logReselection('pending-relisting', row.deliveryId, `DECLINED: the pending-verifications queue lists its explicit ${row.verificationMethod} row `
-                + `(outcome ${outcome}, last run ${lastRun}), but its shortfall park stands on an unchanged commit `
-                + 'set and unchanged rulings -- a re-listing is neither a new ruling nor a new commit, so it is not dispatched', `park-declined@${outcome}@${lastRun}`);
-            continue;
-        }
-        relisted.add(row);
-        out.push(row);
-    }
-    return out;
-}
-/** The rows this tick's listing passed on to dispatch (identity, so a re-armed copy of a row is not one). */
-const relisted = new WeakSet();
-/**
- * The re-selection line for a row the listing passed on: written when its
- * dispatch ROUTED a verdict (the delivery was in verify and was judged again),
- * once per dispatch. A dispatch that routed nothing re-selected nothing and
- * writes nothing; a row that did not come from the listing is not this path's.
- */
-export function noteRelistedDispatch(row, routed) {
-    if (!routed || !relisted.has(row))
-        return;
-    logReselection('pending-relisting', row.deliveryId, `the pending-verifications queue re-listed its explicit ${row.verificationMethod} row `
-        + `(outcome ${row.verificationOutcome ?? 'none'}, last run ${row.verificationLastRunAt ?? 'never'}) `
-        + `and its dispatch routed '${routed.outcome}'`);
-}
-//# sourceMappingURL=explicit-row-selection.js.map

package/dist/verify/explicit-row-selection.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"explicit-row-selection.js","sourceRoot":"","sources":["../../src/verify/explicit-row-selection.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,uEAAuE;AACvE,gBAAgB;AAwChB,OAAO,EAAE,yBAAyB,EAAiC,MAAM,6BAA6B,CAAC;AACvG,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,OAAuC,EACvC,IAA8B;IAE9B,MAAM,GAAG,GAA0B,EAAE,CAAC;IACtC,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,GAAG,CAAC,mBAAmB,IAAI,MAAM,CAAC;QAClD,MAAM,OAAO,GAAG,GAAG,CAAC,qBAAqB,IAAI,OAAO,CAAC;QACrD,IAAI,MAAM,yBAAyB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YACrD,cAAc,CACZ,mBAAmB,EAAE,GAAG,CAAC,UAAU,EACnC,gEAAgE,GAAG,CAAC,kBAAkB,OAAO;kBAC3F,YAAY,OAAO,cAAc,OAAO,0DAA0D;kBAClG,6GAA6G,EAC/G,iBAAiB,OAAO,IAAI,OAAO,EAAE,CACtC,CAAC;YACF,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,6GAA6G;AAC7G,MAAM,QAAQ,GAAG,IAAI,OAAO,EAAuB,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAwB,EAAE,MAA6B;IAC1F,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO;IAC1C,cAAc,CACZ,mBAAmB,EAAE,GAAG,CAAC,UAAU,EACnC,0DAA0D,GAAG,CAAC,kBAAkB,OAAO;UACrF,YAAY,GAAG,CAAC,mBAAmB,IAAI,MAAM,cAAc,GAAG,CAAC,qBAAqB,IAAI,OAAO,IAAI;UACnG,4BAA4B,MAAM,CAAC,OAAO,GAAG,CAChD,CAAC;AACJ,CAAC"}

package/dist/verify/explicit-run-ledger.d.ts

@@ -1,26 +0,0 @@
-/** What the ledger names for a delivery: no run, its current run, or an entry that cannot be read. */
-export type ExplicitRunLedgerEntry = {
-    kind: 'none';
-} | {
-    kind: 'run';
-    runId: string;
-} | {
-    kind: 'unreadable';
-};
-/** The ledger directory under the daemon's global state dir. */
-export declare function explicitRunLedgerDir(): string;
-/**
- * Name `runId` the delivery's current explicit run (see the module header),
- * superseding every run before it. Throws when the entry cannot be written: the
- * run it names must then not start.
- */
-export declare function beginExplicitRun(deliveryId: string, runId: string, now?: () => string, dir?: string): void;
-/** The run the ledger names for the delivery. Never throws. */
-export declare function readExplicitRunLedger(deliveryId: string, dir?: string): ExplicitRunLedgerEntry;
-/**
- * Whether a verdict recorded by run `runId` (undefined: a record that named no
- * run) may govern the delivery: the ledger names no run for it, or names that
- * one. Never throws.
- */
-export declare function isCurrentExplicitRun(deliveryId: string, runId: string | undefined, dir?: string): boolean;
-//# sourceMappingURL=explicit-run-ledger.d.ts.map

package/dist/verify/explicit-run-ledger.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"explicit-run-ledger.d.ts","sourceRoot":"","sources":["../../src/verify/explicit-run-ledger.ts"],"names":[],"mappings":"AA2CA,sGAAsG;AACtG,MAAM,MAAM,sBAAsB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,CAAC;AAEhH,gEAAgE;AAChE,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAMD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,GAAG,GAAE,MAAM,MAAuC,EAClD,GAAG,GAAE,MAA+B,GACnC,IAAI,CAWN;AAED,+DAA+D;AAC/D,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,GAAE,MAA+B,GAAG,sBAAsB,CActH;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,GAAE,MAA+B,GAAG,OAAO,CAGjI"}

package/dist/verify/explicit-run-ledger.js

@@ -1,93 +0,0 @@
-// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: packages/daemon/src/integration/explicit-verdict-departure-during-removal.test.ts,
-//   packages/daemon/src/integration/explicit-verdict-reuse.test.ts,
-//   packages/daemon/src/verify/explicit-run-ledger.test.ts
-// PINNED-BY-END
-/**
- * Which explicit-method run of a delivery is the CURRENT one, kept on local disk
- * where no gate_state writer can reach it.
- *
- * An explicit run's verdict lives on the delivery's gate_state
- * (verificationHistory.explicitOutcome, verify/explicit-gate-outcome.ts), and the
- * tick removes it before a replacement run starts. But gate_state is rewritten
- * WHOLE by every writer that holds or clears a delivery, each carrying the history
- * of the row IT read (queries/delivery-gate-state.ts carryVerificationHistory). A
- * writer that read the row before the removal -- a review exit holding for the
- * replacement's verdict, say -- writes the older verdict straight back after it,
- * and once a restart clears the in-process record that resurrected pass approves a
- * commit the replacement never judged. No gate_state write can be monotonic
- * against such a writer, and the edge offers no compare-and-swap.
- *
- * So each selection of an explicit run names a fresh run id here, durably, before
- * the removal and before the run can start; the run's verdict is recorded with
- * that id, and a run no longer named here records nothing; and a durable verdict
- * governs only while its id is the one named here. A verdict a stale writer carries
- * back carries its own, older id, and reads as no verdict. One file per delivery
- * under `<state dir>/explicit-verdict-runs`, replaced atomically (write + rename),
- * beside the per-commit verdict records (verify/commit-verdict-record.ts) on the
- * host whose daemon runs the product's gates.
- *
- * Direction of error: a delivery with no entry takes its recorded verdict as
- * before (one recorded before runs were named, or a delivery no run was selected
- * for on this host); an entry that cannot be read takes none -- routing holds, and
- * the explicit re-arm scan selects the row again, which names a fresh run. A
- * selection whose entry cannot be written does not start.
- *
- * @module verify/explicit-run-ledger
- */
-import { mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs';
-import { resolve } from 'node:path';
-import { resolveGlobalStateDir } from '../shell/daemon-process.js';
-/** The ledger directory under the daemon's global state dir. */
-export function explicitRunLedgerDir() {
-    return resolve(resolveGlobalStateDir(), 'explicit-verdict-runs');
-}
-function entryPath(deliveryId, dir) {
-    return resolve(dir, `${encodeURIComponent(deliveryId)}.json`);
-}
-/**
- * Name `runId` the delivery's current explicit run (see the module header),
- * superseding every run before it. Throws when the entry cannot be written: the
- * run it names must then not start.
- */
-export function beginExplicitRun(deliveryId, runId, now = () => new Date().toISOString(), dir = explicitRunLedgerDir()) {
-    mkdirSync(dir, { recursive: true, mode: 0o700 });
-    const path = entryPath(deliveryId, dir);
-    const tmp = `${path}.${process.pid}.${runId}.tmp`;
-    try {
-        writeFileSync(tmp, JSON.stringify({ deliveryId, runId, selectedAt: now() }), { mode: 0o600 });
-        renameSync(tmp, path);
-    }
-    catch (err) {
-        rmSync(tmp, { force: true });
-        throw err;
-    }
-}
-/** The run the ledger names for the delivery. Never throws. */
-export function readExplicitRunLedger(deliveryId, dir = explicitRunLedgerDir()) {
-    let text;
-    try {
-        text = readFileSync(entryPath(deliveryId, dir), 'utf8');
-    }
-    catch (err) {
-        return err.code === 'ENOENT' ? { kind: 'none' } : { kind: 'unreadable' };
-    }
-    try {
-        const parsed = JSON.parse(text);
-        const runId = typeof parsed === 'object' && parsed !== null ? parsed.runId : undefined;
-        return typeof runId === 'string' && runId !== '' ? { kind: 'run', runId } : { kind: 'unreadable' };
-    }
-    catch {
-        return { kind: 'unreadable' };
-    }
-}
-/**
- * Whether a verdict recorded by run `runId` (undefined: a record that named no
- * run) may govern the delivery: the ledger names no run for it, or names that
- * one. Never throws.
- */
-export function isCurrentExplicitRun(deliveryId, runId, dir = explicitRunLedgerDir()) {
-    const entry = readExplicitRunLedger(deliveryId, dir);
-    return entry.kind === 'none' || (entry.kind === 'run' && entry.runId === runId);
-}
-//# sourceMappingURL=explicit-run-ledger.js.map

package/dist/verify/explicit-run-ledger.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"explicit-run-ledger.js","sourceRoot":"","sources":["../../src/verify/explicit-run-ledger.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,gGAAgG;AAChG,oEAAoE;AACpE,2DAA2D;AAC3D,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAKnE,gEAAgE;AAChE,MAAM,UAAU,oBAAoB;IAClC,OAAO,OAAO,CAAC,qBAAqB,EAAE,EAAE,uBAAuB,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,SAAS,CAAC,UAAkB,EAAE,GAAW;IAChD,OAAO,OAAO,CAAC,GAAG,EAAE,GAAG,kBAAkB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAAkB,EAClB,KAAa,EACb,MAAoB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAClD,MAAc,oBAAoB,EAAE;IAEpC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,KAAK,MAAM,CAAC;IAClD,IAAI,CAAC;QACH,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9F,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7B,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,qBAAqB,CAAC,UAAkB,EAAE,MAAc,oBAAoB,EAAE;IAC5F,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAQ,GAA6B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IACtG,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAE,MAAkC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QACpH,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IACrG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAChC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAkB,EAAE,KAAyB,EAAE,MAAc,oBAAoB,EAAE;IACtH,MAAM,KAAK,GAAG,qBAAqB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;AAClF,CAAC"}

package/dist/verify/failure-signature.d.ts

@@ -1,91 +0,0 @@
-import { type VerificationSignatureRun } from '../queries/delivery-gate-state.js';
-/** Stage label when failing tests were parsed but no npm script header names a stage. */
-export declare const UNNAMED_STAGE_LABEL = "failing-tests";
-/**
- * Normalize ONE output line so two runs of the same failure compare equal:
- * strips ANSI, replaces the run's cwd, uuids, ISO timestamps, clock times, tmp
- * paths, hex shas and durations with placeholders, then every remaining digit run
- * with '#' (line counts, over-by deltas, pids, versions), collapsing whitespace.
- * Pure -- exported for direct testing.
- */
-export declare function normalizeVolatileDetail(line: string, cwd?: string | null): string;
-/** Where the failing stage's own output begins, and the stage's label. */
-export interface FailingStage {
-    /** "<package> <script>" with the version stripped (volatile across deliveries). */
-    label: string;
-    /** Index of the first line after the failing stage's header. */
-    detailStart: number;
-}
-/**
- * Locate the failing npm script in a gate log (see the module doc for why the
- * LAST header names it). Null when the log carries no npm script header at all.
- * Pure -- exported for direct testing.
- */
-export declare function locateFailingStage(lines: readonly string[]): FailingStage | null;
-export interface FailureSignatureInput {
-    /** The run's output: the full verification log when available, else the captured tails. */
-    logText: string;
-    /** Failing-test ids that GATE the rejection (baseline-attributed new failures, or all parsed). */
-    failingTests?: readonly string[];
-}
-/**
- * Derive the failure signature "<stage>#<hash>" of a rejected verify run.
- *
- * The hash covers the failing stage's normalized detail: the gating failing-test
- * ids when there are any (so a test stage is keyed on WHICH tests fail, not on
- * the ok-lines of whatever tests the targeted selector picked), otherwise the
- * stage's own output lines. Detail lines are normalized (normalizeVolatileDetail),
- * de-duplicated and sorted, so volatile values and interleaving order never make
- * one failure look like two. A different stage -- or the same stage failing on a
- * different file, function, claim or test -- yields a different signature.
- *
- * Null when underivable: an empty log, or one with neither an npm script header
- * nor a parseable failing test. Pure -- no I/O.
- */
-export declare function deriveFailureSignature(input: FailureSignatureInput): string | null;
-/**
- * Advance the run-length record by one rejection. A signature equal to the prior
- * run's increments `consecutive`; a different one resets it to 1; a null
- * (underivable) signature records 0 -- an unknown failure never counts as a
- * repeat, and the next known signature starts a fresh run. Bounded by
- * construction: one current + one previous signature, never a history. Pure.
- */
-export declare function advanceSignatureRun(prior: VerificationSignatureRun | null, signature: string | null): VerificationSignatureRun;
-/**
- * The signature run recorded on a delivery's LATEST deterministic rejection
- * (gate_state.verification), or null when none is usable: no verification
- * detail (a guard-only, shortfall or evidence-unavailable gate_state), a legacy
- * row written before signatures existed, or an underivable (null) signature.
- * The stall detector falls back to the iteration cap on null. Pure.
- */
-export declare function readRecordedSignatureRun(gateState: unknown): {
-    signature: string;
-    consecutive: number;
-} | null;
-/** The slice of a verify StrategyResult the signature reads its text from. */
-export interface VerificationLogSource {
-    logPath?: string;
-    stdoutTail?: string;
-    stderrTail?: string;
-}
-/** The full verification log when it exists on disk, else the captured tails. */
-export declare function readVerificationLogText(source: VerificationLogSource): string;
-/** Injected I/O for stamping a signature onto a rejection; the default reads the real log. */
-export interface FailureSignatureDeps {
-    readLogText: (source: VerificationLogSource) => string;
-}
-export declare const defaultFailureSignatureDeps: () => FailureSignatureDeps;
-/**
- * Compute the signature fields a rejection's gate_state.verification carries.
- * The run extends the one recorded on the delivery's PRIOR gate_state, whether
- * live or carried forward across the coding -> verify advance
- * (readVerificationHistory). Best-effort: an unreadable log yields a null
- * signature, so consecutive is 0 and the detector falls back to the iteration
- * cap. A prior gate_state with no usable run counts as none. A signature fault
- * must never block the rejection write.
- */
-export declare function computeFailureSignatureRecord(deliveryId: string, source: VerificationLogSource, failingTests: readonly string[], priorGateState: unknown, deps: FailureSignatureDeps): {
-    failureSignature: string | null;
-    signatureRun: VerificationSignatureRun;
-};
-//# sourceMappingURL=failure-signature.d.ts.map

package/dist/verify/failure-signature.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"failure-signature.d.ts","sourceRoot":"","sources":["../../src/verify/failure-signature.ts"],"names":[],"mappings":"AA0DA,OAAO,EAGL,KAAK,wBAAwB,EAC9B,MAAM,mCAAmC,CAAC;AAK3C,yFAAyF;AACzF,eAAO,MAAM,mBAAmB,kBAAkB,CAAC;AAyBnD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,GAAG,IAAW,GAAG,MAAM,CAavF;AAED,0EAA0E;AAC1E,MAAM,WAAW,YAAY;IAC3B,mFAAmF;IACnF,KAAK,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,YAAY,GAAG,IAAI,CAoBhF;AAED,MAAM,WAAW,qBAAqB;IACpC,2FAA2F;IAC3F,OAAO,EAAE,MAAM,CAAC;IAChB,kGAAkG;IAClG,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,qBAAqB,GAAG,MAAM,GAAG,IAAI,CAkBlF;AAMD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,wBAAwB,GAAG,IAAI,EACtC,SAAS,EAAE,MAAM,GAAG,IAAI,GACvB,wBAAwB,CAO1B;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,OAAO,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAS9G;AAMD,8EAA8E;AAC9E,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,iFAAiF;AACjF,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,qBAAqB,GAAG,MAAM,CAS7E;AAED,8FAA8F;AAC9F,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,CAAC,MAAM,EAAE,qBAAqB,KAAK,MAAM,CAAC;CACxD;AAED,eAAO,MAAM,2BAA2B,QAAO,oBAE7C,CAAC;AAEH;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAC3C,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,qBAAqB,EAC7B,YAAY,EAAE,SAAS,MAAM,EAAE,EAC/B,cAAc,EAAE,OAAO,EACvB,IAAI,EAAE,oBAAoB,GACzB;IAAE,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,YAAY,EAAE,wBAAwB,CAAA;CAAE,CAS7E"}