@telora/daemon 0.22.239 → 0.22.289

package/dist/verify/verification-baseline.js

@@ -1,364 +0,0 @@
-// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: packages/daemon/src/integration/focus-commit-verdict-scenario.test.ts,
-//   packages/daemon/src/integration/fully-merged-focus-sibling-red-scenario.test.ts,
-//   packages/daemon/src/verify/verification-attribution-base.test.ts,
-//   packages/daemon/src/verify/verification-attribution.test.ts,
-//   packages/daemon/src/verify/verification-baseline-run.test.ts,
-//   packages/daemon/src/verify/verification-baseline.test.ts
-// PINNED-BY-END
-/**
- * Baseline-diff attribution keyed by the focus-base SHA.
- *
- * Replaces per-delivery LLM failure attribution with an exact mechanical diff:
- * measure the verification command ONCE against the focus base (the merge-base of
- * the focus branch and integration), cache the parsed failing-test set and stage
- * outcomes per (product, base SHA, gate), then classify each delivery-HEAD
- * failure as NEW (in HEAD not baseline -> gates) or PRE-EXISTING (in both ->
- * recorded, non-blocking). The differential gate then measures only the delta
- * the focus introduced.
- *
- * Correctness note: the HEAD run executes in a detached checkout of the focus
- * HEAD, and the baseline in a detached checkout of the merge-base made off the
- * same provisioned focus worktree (verify/verification-baseline-run.ts) --
- * otherwise the two sides are not comparable. A base that cannot be measured
- * this tick is evidence-unavailable, never a verdict and never cached.
- *
- * @module verification-baseline
- */
-import { createHash } from 'node:crypto';
-import { mkdirSync, readFileSync, writeFileSync, existsSync } from 'node:fs';
-import { resolve } from 'node:path';
-import { resolveGlobalStateDir } from '../shell/daemon-process.js';
-import { FAILURE_PARSER_VERSION, parseFailingTests } from './verification-failure-parser.js';
-import { parseGateRunStages } from './verification-gate-stages.js';
-import { diagnosticSignatures, logCwdRoots } from './verification-diagnostics.js';
-import { buildDefaultOpenBaseline, isBaselineUnavailable, measureBaseline, readBaseStages, } from './verification-baseline-run.js';
-import { runGitSync } from '../git/exec.js';
-import { resolveAttributionBase } from './verification-attribution-base.js';
-import { getFocusWorktree } from '../focus/focus-worktree-state.js';
-import { createLogger } from '../shell/log.js';
-const log = createLogger({ module: 'verification' });
-/**
- * Default timeout for a baseline run when the verification config sets none:
- * 30 min. A safety CEILING, mirroring DEFAULT_VERIFICATION_TIMEOUT_MS (the HEAD
- * run must share the baseline's timeout -- see the note there). The per-delivery
- * gate is now the cheap dev-loop check, not a ~30-min whole-repo sweep; the
- * ceiling covers a manifest deliberately pointed at a heavier command.
- */
-const DEFAULT_BASELINE_TIMEOUT_MS = 30 * 60 * 1000;
-/**
- * Partition a HEAD failing-test set against the baseline failing-test set. Pure.
- * Sorted for stable output / comparison.
- */
-export function classifyFailures(headFailing, baselineFailing) {
-    const newFailures = [];
-    const preExisting = [];
-    for (const id of headFailing) {
-        if (baselineFailing.has(id))
-            preExisting.push(id);
-        else
-            newFailures.push(id);
-    }
-    return { newFailures: newFailures.sort(), preExisting: preExisting.sort() };
-}
-function baselineCacheDir() {
-    return resolve(resolveGlobalStateDir(), 'verification-baseline');
-}
-/** Short, filename-safe fingerprint of a gate. */
-function gateFingerprint(gate) {
-    return createHash('sha256').update(JSON.stringify([gate.command, gate.timeoutMs])).digest('hex').slice(0, 16);
-}
-/** Cache file path for a (product, base SHA, gate). Exported for tests. */
-export function baselineCachePath(productId, baseSha, gate) {
-    // Sanitize: productId is a uuid and baseSha a hex sha, both filename-safe, but
-    // guard against separators defensively.
-    const safe = `${productId}-${baseSha}-${gateFingerprint(gate)}`.replace(/[^a-zA-Z0-9._-]/g, '_');
-    return resolve(baselineCacheDir(), `${safe}.json`);
-}
-/**
- * Read the cached baseline record, or null on miss / unreadable. The file records
- * the gate it was run with and is re-checked against the one asked for, so an
- * entry only ever answers for its own gate. An entry of an older format (no
- * `stages` key, or stages recorded as a single red with no diagnostic signatures)
- * is a MISS: it cannot answer which diagnostics each red carried, nor any red
- * after the first, so the base is measured once more and the entry is rewritten.
- * So is an entry whose failing tests were parsed by another FAILURE_PARSER_VERSION
- * (or none recorded, i.e. before versions): its ids are not comparable with the
- * ones HEAD parses now -- a base the old parser read as naming no failing test
- * would charge every red HEAD shares with it as new.
- */
-export function readBaselineCache(productId, baseSha, gate) {
-    const path = baselineCachePath(productId, baseSha, gate);
-    if (!existsSync(path))
-        return null;
-    try {
-        const parsed = JSON.parse(readFileSync(path, 'utf8'));
-        if (parsed.command !== gate.command || parsed.timeoutMs !== gate.timeoutMs)
-            return null;
-        if (parsed.parserVersion !== FAILURE_PARSER_VERSION)
-            return null;
-        if (!Array.isArray(parsed.failingTests) || !('stages' in parsed))
-            return null;
-        const stages = readBaseStages(parsed.stages);
-        if (stages === undefined)
-            return null;
-        return { failingTests: parsed.failingTests.filter((t) => typeof t === 'string'), stages };
-    }
-    catch {
-        return null;
-    }
-}
-/** Write the baseline record for a (product, base SHA, gate). Best-effort. */
-export function writeBaselineCache(productId, baseSha, gate, record) {
-    try {
-        mkdirSync(baselineCacheDir(), { recursive: true });
-        writeFileSync(baselineCachePath(productId, baseSha, gate), JSON.stringify({ productId, baseSha, command: gate.command, timeoutMs: gate.timeoutMs, parserVersion: FAILURE_PARSER_VERSION, failingTests: record.failingTests, stages: record.stages }, null, 2), { mode: 0o600 });
-    }
-    catch (err) {
-        log.warn(`failed to write baseline cache for ${productId}@${baseSha.slice(0, 8)}:`, err.message);
-    }
-}
-/**
- * Resolve the baseline record for a (product, base SHA, gate): a cache hit
- * short-circuits (an unchanged SHA under an unchanged gate is never measured
- * again); a miss opens ONE base checkout, measures the gate and every red past
- * the first in it (verify/verification-baseline-run.ts), and caches the record.
- * A base that could not be measured -- no checkout, a run that threw, an install
- * that moved its dependencies mid-run, or a checkout refused because the focus
- * changed its dependency install inputs (`incomparable`) -- is returned as
- * unavailable and NOT cached: another HEAD at the same base sha may leave them
- * unchanged. `gate` must be the one the checkout runs.
- */
-export async function getBaselineRecord(productId, baseSha, gate, deps) {
-    const cached = deps.readCache(productId, baseSha, gate);
-    if (cached)
-        return cached;
-    const checkout = await deps.openBaseline(baseSha);
-    if (isBaselineUnavailable(checkout))
-        return checkout;
-    let record;
-    try {
-        record = await measureBaseline(checkout, gate.command);
-        if (checkout.dependenciesMoved?.()) {
-            return { unavailable: 'a dependency install moved the node_modules trees the base checkout links into while it was measured' };
-        }
-    }
-    catch (err) {
-        return { unavailable: `the base measurement threw: ${err.message}` };
-    }
-    finally {
-        checkout.dispose?.();
-    }
-    deps.writeCache(productId, baseSha, gate, record);
-    return record;
-}
-// ---------------------------------------------------------------------------
-// git helpers
-// ---------------------------------------------------------------------------
-/** Resolve the focus base = merge-base(integrationBranch, HEAD) in a worktree. Null on failure. */
-export function resolveFocusBaseSha(worktreePath, integrationBranch) {
-    const result = runGitSync(['merge-base', integrationBranch, 'HEAD'], worktreePath);
-    if (!result.success || result.output.trim().length === 0)
-        return null;
-    return result.output.trim();
-}
-/** Resolve the worktree HEAD sha. Null on failure. */
-export function resolveHeadSha(worktreePath) {
-    const result = runGitSync(['rev-parse', 'HEAD'], worktreePath);
-    if (!result.success || result.output.trim().length === 0)
-        return null;
-    return result.output.trim();
-}
-/**
- * Classify a failed HEAD run against the focus base. Returns null when no
- * baseline could be resolved (no worktree / no merge-base) -- the caller then
- * treats all HEAD failures as new (fail-closed toward gating, the behavior
- * before attribution existed). A base that resolved but could not be measured
- * returns a classification carrying `baseUnavailable` and nothing attributed.
- */
-export async function attributeFailures(v, result, deps) {
-    const worktreePath = deps.resolveWorktreePath(v);
-    if (!worktreePath || !v.productId)
-        return null;
-    // The base is taken against the commit the HEAD run JUDGED (the detached
-    // checkout's sha), falling back to the live focus HEAD when none is carried
-    // or the worktree does not know it.
-    const judged = result.verifiedSha && runGitSync(['cat-file', '-e', `${result.verifiedSha}^{commit}`], worktreePath).success
-        ? result.verifiedSha
-        : null;
-    const headRef = judged ?? 'HEAD';
-    const headSha = judged ?? deps.resolveHeadSha(worktreePath);
-    // An unreadable own-commit record reverts nothing: a merge-base that is HEAD then gates every red.
-    const ownCommitShas = deps.resolveOwnCommitShas ? await deps.resolveOwnCommitShas(v).catch(() => []) : [];
-    // The integration commit HEAD is based on, minus the delivery's own commits
-    // (verify/verification-attribution-base.ts): a sibling focus's red pulled in by
-    // a merge or fast-forward of integration stays in the base (pre-existing), the
-    // delivery's own merged-back defects never do. No base -> every HEAD red gates.
-    const base = resolveAttributionBase(worktreePath, deps.integrationBranch, headRef, headSha, ownCommitShas);
-    if (base.sha === null) {
-        log.info(`[verification] delivery ${v.deliveryId}: no attribution base (${base.reason}) -- every HEAD failure gates`);
-        return null;
-    }
-    const baseSha = base.sha;
-    // POST-MERGE-BACK LAUNDERING GUARD: a baseline identical to HEAD runs the
-    // delivery's OWN code, so its defects would demote to pre-existing. It can
-    // attribute nothing: refuse it (null gates every HEAD failure as new).
-    if (headSha && headSha === baseSha)
-        return null;
-    const headOutput = deps.readHeadOutput(result);
-    const headFailing = parseFailingTests(headOutput);
-    const baseline = await deps.getBaseline(v.productId, baseSha, worktreePath);
-    if (isBaselineUnavailable(baseline) && !baseline.incomparable) {
-        return { newFailures: [], preExisting: [], baseUnavailable: baseline.unavailable };
-    }
-    const head = parseGateRunStages(headOutput, result.exitCode, resolveBaselineRunConfig(v, result).command);
-    const headDiagnostics = head ? diagnosticSignatures(head.failedStageOutput, logCwdRoots(headOutput)) : [];
-    if (isBaselineUnavailable(baseline)) {
-        // Incomparable: the base was never measured, so no HEAD failure or stage red is set against it.
-        const stages = { head, headDiagnostics, base: null, baseFailingTests: [] };
-        return { ...classifyFailures(headFailing, new Set()), baseIncomparable: baseline.unavailable, stages };
-    }
-    // A demotion to pre-existing only ever removes a HEAD failure that is present in
-    // the baseline's failing set, so it is by construction taken only against
-    // failing-test ids the baseline run actually PARSED: an empty (blind or green)
-    // baseline demotes nothing and every HEAD failure gates. No blind baseline can
-    // launder a HEAD failure into "pre-existing". The same holds for stages: a base
-    // whose log vouched for no stage outcomes (stages null) matches no HEAD stage.
-    const classification = classifyFailures(headFailing, new Set(baseline.failingTests));
-    return { ...classification, stages: { head, headDiagnostics, base: baseline.stages, baseFailingTests: baseline.failingTests } };
-}
-/** Default HEAD-output reader: full log file when present, else the tails. */
-export function readHeadOutputDefault(result) {
-    if (result.logPath && existsSync(result.logPath)) {
-        try {
-            return readFileSync(result.logPath, 'utf8');
-        }
-        catch (err) {
-            // fall through to tails
-            log.debug('fall through to tails', { error: String(err?.message ?? err) });
-        }
-    }
-    return `${result.stdoutTail ?? ''}\n${result.stderrTail ?? ''}`;
-}
-// ---------------------------------------------------------------------------
-// Default wiring consumed by verification-engine (kept here to keep that file
-// under the daemon 800-line limit).
-// ---------------------------------------------------------------------------
-/**
- * The command + timeout the baseline run applies: the HEAD run's applied config
- * when the result carries one, else the verification row's. Both sides of the
- * diff must run the SAME gate. A default-on HEAD run re-resolves its command +
- * timeout from the verified checkout's manifest at dispatch, so sizing the
- * baseline from the tick's provisional row config would kill a baseline the
- * branch declared a longer timeout for -- and a killed baseline attributes
- * nothing. Pure -- exported for testing.
- */
-export function resolveBaselineRunConfig(v, result) {
-    if (result.appliedConfig) {
-        return { command: result.appliedConfig.command, timeoutMs: result.appliedConfig.timeoutMs };
-    }
-    const cfg = v.verificationConfig ?? {};
-    return {
-        command: typeof cfg.command === 'string' ? cfg.command : '',
-        timeoutMs: typeof cfg.timeoutMs === 'number' && cfg.timeoutMs > 0 ? cfg.timeoutMs : DEFAULT_BASELINE_TIMEOUT_MS,
-    };
-}
-const DEFAULT_ATTRIBUTION_SEAMS = {
-    resolveWorktreePath: (pv) => (pv.focusId ? getFocusWorktree(pv.focusId)?.worktreePath ?? null : null),
-    resolveHeadSha,
-    readCache: readBaselineCache,
-    writeCache: writeBaselineCache,
-    buildOpenBaseline: (focusWorktreePath, checkoutKey, gate) => buildDefaultOpenBaseline(focusWorktreePath, checkoutKey, gate.timeoutMs),
-    readHeadOutput: readHeadOutputDefault,
-};
-/**
- * Build the default `attributeFailures` closure: reads the focus-worktree cwd,
- * resolves the merge-base, measures (or reuses a cached measurement of) the base
- * at that SHA in a provisioned detached checkout -- with the command + timeout the
- * HEAD run applied -- and classifies HEAD failures against it. Returns null when
- * no baseline is resolvable (caller gates all failures) or when no command ran.
- */
-export function buildDefaultAttributeFailures(config, overrides = {}) {
-    const seams = { ...DEFAULT_ATTRIBUTION_SEAMS, ...overrides };
-    return (v, result) => {
-        // No command ran (its config was unresolvable from the verified code): there
-        // is no HEAD output to attribute, and a baseline run would only cost a suite.
-        if (result.configUnresolved)
-            return Promise.resolve(null);
-        // One gate sizes the baseline run AND keys its cache entry, so a set cached
-        // under another command or timeout is never reused for this HEAD run.
-        const gate = resolveBaselineRunConfig(v, result);
-        return attributeFailures(v, result, {
-            resolveWorktreePath: seams.resolveWorktreePath,
-            resolveHeadSha: seams.resolveHeadSha,
-            ...(seams.resolveOwnCommitShas ? { resolveOwnCommitShas: seams.resolveOwnCommitShas } : {}),
-            integrationBranch: config.integrationBranch,
-            getBaseline: (productId, baseSha, worktreePath) => getBaselineRecord(productId, baseSha, gate, {
-                readCache: seams.readCache,
-                writeCache: seams.writeCache,
-                openBaseline: seams.buildOpenBaseline(worktreePath, `${v.deliveryId}-base`, gate),
-            }),
-            readHeadOutput: seams.readHeadOutput,
-        });
-    };
-}
-/**
- * Build the default `resolveVerificationCwd`: the focus worktree (HEAD of the
- * focus branch) so the deterministic run measures the focus's changes, falling
- * back to the product repo path when no focus worktree exists.
- */
-export function buildResolveVerificationCwd(resolveCwd) {
-    return (v) => {
-        if (v.focusId) {
-            const wt = getFocusWorktree(v.focusId);
-            if (wt?.worktreePath)
-                return wt.worktreePath;
-        }
-        return resolveCwd(v.productId);
-    };
-}
-/**
- * Decide the attributed outcome for a failed deterministic run. `applyAttribution`
- * is only ever called for a NON-ZERO (failed) run, so the parsed set is what
- * discriminates:
- *   - zero parsed ids TOTAL (no new AND no pre-existing) -> 'blind': the run exited
- *     non-zero but produced no attributable failing-test id (a type-check crash,
- *     missing deps, or a run killed before any test ran). The gate is blind, not
- *     the work passing -- it must NOT be laundered into a differential pass.
- *   - all-pre-existing (>=1 pre-existing, zero new) -> 'passed': a genuine
- *     differential pass; the focus introduced no regression.
- *   - any new failure -> 'failed'.
- * Pure -- exported for testing.
- */
-export function applyAttribution(deliveryId, classification) {
-    const { newFailures, preExisting } = classification;
-    if (newFailures.length === 0 && preExisting.length === 0) {
-        return {
-            outcome: 'blind',
-            rationale: `deterministic check exited non-zero but parsed zero failing-test ids -- the gate ` +
-                `cannot attribute the failure (instrument fault, not a differential pass)`,
-            newFailures,
-            preExisting,
-            log: null,
-        };
-    }
-    if (newFailures.length === 0) {
-        return {
-            outcome: 'passed',
-            rationale: `deterministic check exited non-zero but all ${preExisting.length} failure(s) ` +
-                `pre-exist on the focus base -- no new regression (differential pass)`,
-            newFailures,
-            preExisting,
-            log: `[verification] delivery ${deliveryId}: ${preExisting.length} pre-existing base failure(s) recorded, non-blocking (differential pass)`,
-        };
-    }
-    return {
-        outcome: 'failed',
-        rationale: `deterministic check failed: ${newFailures.length} NEW failure(s) vs focus base` +
-            (preExisting.length > 0 ? `, ${preExisting.length} pre-existing (recorded, non-blocking)` : ''),
-        newFailures,
-        preExisting,
-        log: null,
-    };
-}
-//# sourceMappingURL=verification-baseline.js.map

package/dist/verify/verification-baseline.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"verification-baseline.js","sourceRoot":"","sources":["../../src/verify/verification-baseline.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,oFAAoF;AACpF,qFAAqF;AACrF,sEAAsE;AACtE,iEAAiE;AACjE,kEAAkE;AAClE,6DAA6D;AAC7D,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAC7F,OAAO,EAAE,kBAAkB,EAAsB,MAAM,+BAA+B,CAAC;AACvF,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAClF,OAAO,EACL,wBAAwB,EACxB,qBAAqB,EACrB,eAAe,EACf,cAAc,GAKf,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAGpE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAI/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAGrD;;;;;;GAMG;AACH,MAAM,2BAA2B,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AA2CnD;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,WAAgC,EAChC,eAAoC;IAEpC,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;QAC7B,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;;YAC7C,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;AAC9E,CAAC;AAiBD,SAAS,gBAAgB;IACvB,OAAO,OAAO,CAAC,qBAAqB,EAAE,EAAE,uBAAuB,CAAC,CAAC;AACnE,CAAC;AAED,kDAAkD;AAClD,SAAS,eAAe,CAAC,IAAkB;IACzC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAChH,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,OAAe,EAAE,IAAkB;IACtF,+EAA+E;IAC/E,wCAAwC;IACxC,MAAM,IAAI,GAAG,GAAG,SAAS,IAAI,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACjG,OAAO,OAAO,CAAC,gBAAgB,EAAE,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,OAAe,EAAE,IAAkB;IACtF,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAkH,CAAC;QACvK,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QACxF,IAAI,MAAM,CAAC,aAAa,KAAK,sBAAsB;YAAE,OAAO,IAAI,CAAC;QACjE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9E,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACtC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACzG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAAC,SAAiB,EAAE,OAAe,EAAE,IAAkB,EAAE,MAAsB;IAC/G,IAAI,CAAC;QACH,SAAS,CAAC,gBAAgB,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,aAAa,CACX,iBAAiB,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAC3C,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,aAAa,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAClM,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,sCAAsC,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;IAC9G,CAAC;AACH,CAAC;AAUD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,SAAiB,EACjB,OAAe,EACf,IAAkB,EAClB,IAAkB;IAElB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACxD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,qBAAqB,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IACrD,IAAI,MAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,QAAQ,CAAC,iBAAiB,EAAE,EAAE,EAAE,CAAC;YACnC,OAAO,EAAE,WAAW,EAAE,sGAAsG,EAAE,CAAC;QACjI,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,WAAW,EAAE,+BAAgC,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;IAClF,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAClD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E,mGAAmG;AACnG,MAAM,UAAU,mBAAmB,CAAC,YAAoB,EAAE,iBAAyB;IACjF,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,YAAY,EAAE,iBAAiB,EAAE,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC;IACnF,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,cAAc,CAAC,YAAoB;IACjD,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC;IAC/D,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAC9B,CAAC;AAoCD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,CAAsB,EACtB,MAA8B,EAC9B,IAAqB;IAErB,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACjD,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC/C,yEAAyE;IACzE,4EAA4E;IAC5E,oCAAoC;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,IAAI,UAAU,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,WAAW,WAAW,CAAC,EAAE,YAAY,CAAC,CAAC,OAAO;QACzH,CAAC,CAAC,MAAM,CAAC,WAAW;QACpB,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,OAAO,GAAG,MAAM,IAAI,MAAM,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,IAAI,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;IAC5D,mGAAmG;IACnG,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1G,4EAA4E;IAC5E,gFAAgF;IAChF,+EAA+E;IAC/E,gFAAgF;IAChF,MAAM,IAAI,GAAG,sBAAsB,CAAC,YAAY,EAAE,IAAI,CAAC,iBAAiB,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;IAC3G,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;QACtB,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,UAAU,0BAA0B,IAAI,CAAC,MAAM,+BAA+B,CAAC,CAAC;QACtH,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC;IACzB,0EAA0E;IAC1E,2EAA2E;IAC3E,uEAAuE;IACvE,IAAI,OAAO,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;IAC5E,IAAI,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC9D,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,eAAe,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrF,CAAC;IACD,MAAM,IAAI,GAAG,kBAAkB,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC;IAC1G,MAAM,eAAe,GAAG,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1G,IAAI,qBAAqB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpC,gGAAgG;QAChG,MAAM,MAAM,GAAsB,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC;QAC9F,OAAO,EAAE,GAAG,gBAAgB,CAAC,WAAW,EAAE,IAAI,GAAG,EAAE,CAAC,EAAE,gBAAgB,EAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;IACzG,CAAC;IACD,iFAAiF;IACjF,0EAA0E;IAC1E,+EAA+E;IAC/E,+EAA+E;IAC/E,gFAAgF;IAChF,+EAA+E;IAC/E,MAAM,cAAc,GAAG,gBAAgB,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;IACrF,OAAO,EAAE,GAAG,cAAc,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,gBAAgB,EAAE,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;AAClI,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,qBAAqB,CAAC,MAA8B;IAClE,IAAI,MAAM,CAAC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACnB,wBAAwB;YAClB,GAAG,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IACD,OAAO,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,KAAK,MAAM,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;AAClE,CAAC;AAED,8EAA8E;AAC9E,8EAA8E;AAC9E,oCAAoC;AACpC,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CACtC,CAAkD,EAClD,MAA8B;IAE9B,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC;IAC9F,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,CAAC,kBAAkB,IAAI,EAAE,CAAC;IACvC,OAAO;QACL,OAAO,EAAE,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QAC3D,SAAS,EAAE,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,2BAA2B;KAChH,CAAC;AACJ,CAAC;AA0BD,MAAM,yBAAyB,GAA4B;IACzD,mBAAmB,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACrG,cAAc;IACd,SAAS,EAAE,iBAAiB;IAC5B,UAAU,EAAE,kBAAkB;IAC9B,iBAAiB,EAAE,CAAC,iBAAiB,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC,wBAAwB,CAAC,iBAAiB,EAAE,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC;IACrI,cAAc,EAAE,qBAAqB;CACtC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAC3C,MAAoB,EACpB,YAA8C,EAAE;IAEhD,MAAM,KAAK,GAA4B,EAAE,GAAG,yBAAyB,EAAE,GAAG,SAAS,EAAE,CAAC;IACtF,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QACnB,6EAA6E;QAC7E,8EAA8E;QAC9E,IAAI,MAAM,CAAC,gBAAgB;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1D,4EAA4E;QAC5E,sEAAsE;QACtE,MAAM,IAAI,GAAG,wBAAwB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACjD,OAAO,iBAAiB,CAAC,CAAC,EAAE,MAAM,EAAE;YAClC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;YAC9C,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3F,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,WAAW,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,CAChD,iBAAiB,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE;gBAC1C,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,YAAY,EAAE,KAAK,CAAC,iBAAiB,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,UAAU,OAAO,EAAE,IAAI,CAAC;aAClF,CAAC;YACJ,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,UAAgD;IAEhD,OAAO,CAAC,CAAC,EAAE,EAAE;QACX,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACvC,IAAI,EAAE,EAAE,YAAY;gBAAE,OAAO,EAAE,CAAC,YAAY,CAAC;QAC/C,CAAC;QACD,OAAO,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC,CAAC;AACJ,CAAC;AAmBD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAkB,EAAE,cAAqC;IACxF,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,cAAc,CAAC;IACpD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO;YACL,OAAO,EAAE,OAAO;YAChB,SAAS,EACP,mFAAmF;gBACnF,0EAA0E;YAC5E,WAAW;YACX,WAAW;YACX,GAAG,EAAE,IAAI;SACV,CAAC;IACJ,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,OAAO,EAAE,QAAQ;YACjB,SAAS,EACP,+CAA+C,WAAW,CAAC,MAAM,cAAc;gBAC/E,sEAAsE;YACxE,WAAW;YACX,WAAW;YACX,GAAG,EAAE,2BAA2B,UAAU,KAAK,WAAW,CAAC,MAAM,0EAA0E;SAC5I,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,QAAQ;QACjB,SAAS,EACP,+BAA+B,WAAW,CAAC,MAAM,+BAA+B;YAChF,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC,MAAM,wCAAwC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjG,WAAW;QACX,WAAW;QACX,GAAG,EAAE,IAAI;KACV,CAAC;AACJ,CAAC"}

package/dist/verify/verification-boundary-env.d.ts

@@ -1,104 +0,0 @@
-/**
- * The verify BOUNDARY the daemon resolves before a deterministic run and hands
- * to the command as environment, so the gate's own stages diff against the
- * commits in front of the gate rather than against merge-base(HEAD, integration).
- *
- * ONE env var, TWO concerns, and they combine by taking the OLDER base.
- *
- * 1. The recorded PRE-MERGE BOUNDARY (a floor). On a merged-back delivery
- *    merge-base(HEAD, integration) equals HEAD: the changed-file set is empty and
- *    the gate passes as a "clean no-op" having run none of the delivery's own
- *    tests. Handing the recorded boundary makes the selection see the delivery's
- *    real changes, and the recorded commit count rides with it so the selector can
- *    FAIL rather than no-op on an empty diff (the laundered-pass guard).
- *
- * 2. The newest GREEN ANCESTOR (a ceiling on how far back to look). Both
- *    expensive stages of verify:gate -- the conditional check:types-drift and the
- *    test:targeted selection -- scope themselves from this base, so taking it from
- *    merge-base(HEAD, integration) makes it the branch's CUMULATIVE delta, which
- *    only grows: every area eventually crosses the "no precise pin map" line and
- *    widens to its whole suite. Measured on mars 2026-09-20, one delivery: 76
- *    files/22 min, 102/42, 101/28, 115/30, against 5 min for an empty delta.
- *    Everything up to a commit this gate judged PASSING was covered by that run,
- *    so the delta from there is what no green gate has covered
- *    (verify/judged-ancestor.ts).
- *
- * WHY NOT THE JUDGED DELIVERY'S OWN COMMITS, which is the narrower base the
- * delivery's acceptance criteria name. A gate run's verdict belongs to the
- * COMMIT, not to the delivery that happened to trigger it: it is written once per
- * (product, focus, sha, gate) and TAKEN by every delivery judged on that commit
- * with no second run (verify/verification-commit-sharing.ts) -- the saving this
- * focus exists to make. Basing the selection on the judged delivery's own
- * Telora-Delivery commits would therefore mean a sibling's intervening commit is
- * selected by NO run: the sibling's own dispatch takes the recorded verdict
- * instead of running, so its changed files would reach integration judged by
- * nothing. Restoring the cover would cost one run per delivery per commit, which
- * is the 5.7h/day this focus removed. So the range stays the union -- every
- * commit since the last green -- and it is the right one: those commits ARE the
- * work in front of the gate, and no green gate has covered them.
- *
- * What that leaves is a cost question, not a coverage one, and it is bounded by
- * the green ancestor: a sibling's commit adds only its own changed files, and
- * only until the next passing verdict anchors a newer base. The OTHER half of
- * the concern -- that a delivery is told to fix a red its commits did not cause
- * -- is real and is answered where it belongs, by naming the owner of the
- * failure rather than by narrowing what the gate reads
- * (verify/rework-attribution.ts).
- *
- * WHY THE OLDER WINS when both resolve: it is never fewer files than either
- * concern requires. A green ancestor NEWER than the pre-merge boundary would put
- * the delivery's own recorded commits behind the base, empty the diff, and fire
- * the laundered-pass guard on honest work. Older by ANCESTRY, never by date --
- * every coding spawn rebases the focus worktree, so commit dates are shuffled
- * relative to branch order. An undetermined comparison hands the pre-merge
- * boundary: that is the base whose absence causes a laundered pass rather than
- * merely a slow run.
- *
- * Every resolution failure falls back to what was handed before it, and handing
- * nothing leaves the selector's own merge-base auto-derivation unchanged. A base
- * that is too old costs time; one that is too new launders a pass.
- *
- * Sliced out of verification-engine.ts to keep that file under the daemon
- * 800-line limit; the engine's STRATEGIES dispatch calls resolveVerifyBoundaryEnv
- * before running the deterministic strategy.
- *
- * @module verification-boundary-env
- */
-import type { PendingVerification } from '../queries/verification.js';
-import type { VerificationDeps } from './verification-deps.js';
-/**
- * Env vars handed to the deterministic verify command:
- *
- * TELORA_VERIFY_BASE_REF               the recorded pre-merge boundary ref.
- * TELORA_VERIFY_RECORDED_COMMIT_COUNT  the delivery's own recorded commit count,
- *                                      so the selector can FAIL (never no-op)
- *                                      when the handed base..HEAD range is too
- *                                      SHORT to hold the delivery's recorded
- *                                      commits. The selector compares commits,
- *                                      not paths: a path count is perturbed by
- *                                      untracked files in the checkout, and a
- *                                      docs-only delivery legitimately selects
- *                                      no test at all.
- *
- * Consumed by scripts/select-targeted-tests.mjs (mirrored there by string, as
- * that script cannot import this TS); pinned together by
- * scripts/verify-gate.test.mjs.
- */
-export declare const VERIFY_BASE_REF_ENV = "TELORA_VERIFY_BASE_REF";
-export declare const VERIFY_RECORDED_COMMIT_COUNT_ENV = "TELORA_VERIFY_RECORDED_COMMIT_COUNT";
-/**
- * Resolve the verify boundary env for the deterministic command, BEFORE the run.
- * Best-effort: every resolution failure narrows nothing, so the command inherits
- * the process env and the selector's merge-base auto-derivation is used
- * unchanged. A recorded pre-merge boundary is handed alongside the delivery's own
- * recorded commit count, so the selector can distinguish an honest empty diff (no
- * recorded commits) from a laundered no-op (recorded commits, empty diff); the
- * count rides with the boundary and only with it, so that guard's precondition is
- * exactly what it was.
- *
- * The FAST-FORWARD merge-back case (no merge commit) resolves its boundary from
- * the recorded pre-merge ref (deps.resolveRecordedPreMergeRef is the
- * fast-forward-safe source), never from a merge commit's parent.
- */
-export declare function resolveVerifyBoundaryEnv(deps: VerificationDeps, v: PendingVerification): Promise<Record<string, string>>;
-//# sourceMappingURL=verification-boundary-env.d.ts.map

package/dist/verify/verification-boundary-env.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"verification-boundary-env.d.ts","sourceRoot":"","sources":["../../src/verify/verification-boundary-env.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiEG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAO/D;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,mBAAmB,2BAA2B,CAAC;AAC5D,eAAO,MAAM,gCAAgC,wCAAwC,CAAC;AA6EtF;;;;;;;;;;;;;GAaG;AACH,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,gBAAgB,EACtB,CAAC,EAAE,mBAAmB,GACrB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAiCjC"}

package/dist/verify/verification-boundary-env.js

@@ -1,151 +0,0 @@
-// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: packages/daemon/src/verify/verification-boundary-env.test.ts
-// PINNED-BY-END
-import { commitVerdictGateOf } from './commit-verdict-record.js';
-import { findGreenAncestor, isAncestorOf } from './judged-ancestor.js';
-import { createLogger } from '../shell/log.js';
-const log = createLogger({ module: 'verification' });
-/**
- * Env vars handed to the deterministic verify command:
- *
- * TELORA_VERIFY_BASE_REF               the recorded pre-merge boundary ref.
- * TELORA_VERIFY_RECORDED_COMMIT_COUNT  the delivery's own recorded commit count,
- *                                      so the selector can FAIL (never no-op)
- *                                      when the handed base..HEAD range is too
- *                                      SHORT to hold the delivery's recorded
- *                                      commits. The selector compares commits,
- *                                      not paths: a path count is perturbed by
- *                                      untracked files in the checkout, and a
- *                                      docs-only delivery legitimately selects
- *                                      no test at all.
- *
- * Consumed by scripts/select-targeted-tests.mjs (mirrored there by string, as
- * that script cannot import this TS); pinned together by
- * scripts/verify-gate.test.mjs.
- */
-export const VERIFY_BASE_REF_ENV = 'TELORA_VERIFY_BASE_REF';
-export const VERIFY_RECORDED_COMMIT_COUNT_ENV = 'TELORA_VERIFY_RECORDED_COMMIT_COUNT';
-/**
- * Where the base is walked: the focus's worktree, and the HEAD to walk back from.
- *
- * Both come from `deps`, and BOTH ARE WIRED IN THE COMPOSITION ROOT
- * (verify/verification-deps-default.ts). They used to be optional seams no
- * production wiring supplied, which would have made this whole resolution
- * dormant -- always null in the daemon, green only under test. Supplying them at
- * the root is what keeps the instrument live, and importing the real readers
- * here instead would re-enter the verification-default-on <-> baseline <->
- * checkout import cycle. verification-deps-default.test.ts pins that they are
- * supplied.
- */
-function resolveWalkInputs(deps, v, focusId) {
-    return {
-        head: deps.resolveFocusHeadSha?.(focusId) ?? null,
-        worktreePath: deps.resolveFocusWorktreePath?.(v) ?? null,
-    };
-}
-/**
- * The newest ancestor of the judged commit this run's gate recorded a PASSING
- * verdict for, or null. Null on every unreadable input (no worktree, no focus or
- * product id, no gate identity, no verdict reader, an unreadable rev-list): the
- * caller then keeps whatever base it already had. Never throws.
- */
-function resolveGreenAncestorBase(deps, v) {
-    // The verdict record is keyed by (product, focus, sha, gate); without both ids
-    // there is no record to read, so no base is narrowed.
-    const { focusId, productId } = v;
-    if (!focusId || !productId)
-        return null;
-    const read = deps.readCommitVerdict;
-    const gate = commitVerdictGateOf(v);
-    if (!read || !gate)
-        return null;
-    try {
-        const { head, worktreePath } = resolveWalkInputs(deps, v, focusId);
-        if (!head || !worktreePath)
-            return null;
-        return findGreenAncestor(productId, focusId, head, gate, { worktreePath, readCommitVerdict: read });
-    }
-    catch (err) {
-        log.debug(`[verification] green-ancestor base lookup failed for ${v.deliveryId}:`, err.message);
-        return null;
-    }
-}
-/**
- * The older of two bases by ANCESTRY, or `fallback` when git cannot tell (see the
- * module header for why the pre-merge boundary is the conservative side).
- */
-function olderBase(worktreePath, preMergeRef, greenAncestor) {
-    if (!worktreePath)
-        return preMergeRef;
-    const greenIsOlder = isAncestorOf(worktreePath, greenAncestor, preMergeRef);
-    if (greenIsOlder === null)
-        return preMergeRef; // undetermined: hand the floor
-    return greenIsOlder ? greenAncestor : preMergeRef;
-}
-/**
- * How many of the delivery's own commits the handed boundary must bound. The
- * boundary is the STAMPED batch's pre-merge ref, so the count is the delivery's
- * commits in that batch: a delivery merged back in several batches has its
- * earlier commits behind the latest boundary by construction, and counting the
- * whole-history set made the selector refuse every such delivery as a laundered
- * pass (2026-09-24: range 1 commit, recorded 7). Where the batch yields none (an
- * empty fast-forward batch, or no batch reader) the whole-history count stands,
- * as before. A failed lookup counts 0 -- the guard goes inert, never red.
- */
-async function resolveBoundaryCommitCount(deps, v) {
-    try {
-        const inBatch = deps.resolveRecordedBoundaryCommitShas ? await deps.resolveRecordedBoundaryCommitShas(v) : [];
-        if (inBatch.length > 0)
-            return inBatch.length;
-        return deps.resolveRecordedCommitShas ? (await deps.resolveRecordedCommitShas(v)).length : 0;
-    }
-    catch (err) {
-        log.debug(`[verification] recorded commit-set lookup failed for ${v.deliveryId}:`, err.message);
-        return 0;
-    }
-}
-/**
- * Resolve the verify boundary env for the deterministic command, BEFORE the run.
- * Best-effort: every resolution failure narrows nothing, so the command inherits
- * the process env and the selector's merge-base auto-derivation is used
- * unchanged. A recorded pre-merge boundary is handed alongside the delivery's own
- * recorded commit count, so the selector can distinguish an honest empty diff (no
- * recorded commits) from a laundered no-op (recorded commits, empty diff); the
- * count rides with the boundary and only with it, so that guard's precondition is
- * exactly what it was.
- *
- * The FAST-FORWARD merge-back case (no merge commit) resolves its boundary from
- * the recorded pre-merge ref (deps.resolveRecordedPreMergeRef is the
- * fast-forward-safe source), never from a merge commit's parent.
- */
-export async function resolveVerifyBoundaryEnv(deps, v) {
-    let preMergeRef = null;
-    if (deps.resolveRecordedPreMergeRef) {
-        try {
-            preMergeRef = await deps.resolveRecordedPreMergeRef(v);
-        }
-        catch (err) {
-            log.debug(`[verification] pre-merge boundary lookup failed for ${v.deliveryId}:`, err.message);
-        }
-    }
-    const greenAncestor = resolveGreenAncestorBase(deps, v);
-    // No recorded boundary: a delivery still on its branch, or a merged-back row
-    // whose boundary the resolver suppressed to stay honestly blind. This is the
-    // common case and where the measured cost lives, so the green ancestor alone
-    // bounds the diff here; with neither, hand nothing and the selector diffs
-    // against merge-base(HEAD, integration) as today. The recorded commit count is
-    // NOT handed with a green-ancestor-only base: it is the pre-merge boundary's
-    // companion, and an empty range against a green ancestor is an honest no-op
-    // (nothing landed since the gate last passed), not a laundered one.
-    if (!preMergeRef) {
-        return greenAncestor ? { [VERIFY_BASE_REF_ENV]: greenAncestor } : {};
-    }
-    const recordedCommitCount = await resolveBoundaryCommitCount(deps, v);
-    return {
-        [VERIFY_BASE_REF_ENV]: greenAncestor
-            ? olderBase(v.focusId ? resolveWalkInputs(deps, v, v.focusId).worktreePath : null, preMergeRef, greenAncestor)
-            : preMergeRef,
-        [VERIFY_RECORDED_COMMIT_COUNT_ENV]: String(recordedCommitCount),
-    };
-}
-//# sourceMappingURL=verification-boundary-env.js.map

package/dist/verify/verification-boundary-env.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"verification-boundary-env.js","sourceRoot":"","sources":["../../src/verify/verification-boundary-env.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,0EAA0E;AAC1E,gBAAgB;AAuEhB,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAErD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,wBAAwB,CAAC;AAC5D,MAAM,CAAC,MAAM,gCAAgC,GAAG,qCAAqC,CAAC;AAEtF;;;;;;;;;;;GAWG;AACH,SAAS,iBAAiB,CAAC,IAAsB,EAAE,CAAsB,EAAE,OAAe;IACxF,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI;QACjD,YAAY,EAAE,IAAI,CAAC,wBAAwB,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI;KACzD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,wBAAwB,CAAC,IAAsB,EAAE,CAAsB;IAC9E,+EAA+E;IAC/E,sDAAsD;IACtD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC;IACpC,MAAM,IAAI,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,iBAAiB,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QACxC,OAAO,iBAAiB,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IACtG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC,UAAU,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QAC3G,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,YAA2B,EAAE,WAAmB,EAAE,aAAqB;IACxF,IAAI,CAAC,YAAY;QAAE,OAAO,WAAW,CAAC;IACtC,MAAM,YAAY,GAAG,YAAY,CAAC,YAAY,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;IAC5E,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,WAAW,CAAC,CAAC,+BAA+B;IAC9E,OAAO,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC;AACpD,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,0BAA0B,CAAC,IAAsB,EAAE,CAAsB;IACtF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,iCAAiC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9G,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC;QAC9C,OAAO,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC,UAAU,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QAC3G,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAsB,EACtB,CAAsB;IAEtB,IAAI,WAAW,GAAkB,IAAI,CAAC;IACtC,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CACP,uDAAuD,CAAC,CAAC,UAAU,GAAG,EACrE,GAAa,CAAC,OAAO,CACvB,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,wBAAwB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAExD,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,0EAA0E;IAC1E,+EAA+E;IAC/E,6EAA6E;IAC7E,4EAA4E;IAC5E,oEAAoE;IACpE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,CAAC;IAED,MAAM,mBAAmB,GAAG,MAAM,0BAA0B,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACtE,OAAO;QACL,CAAC,mBAAmB,CAAC,EAAE,aAAa;YAClC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,aAAa,CAAC;YAC9G,CAAC,CAAC,WAAW;QACf,CAAC,gCAAgC,CAAC,EAAE,MAAM,CAAC,mBAAmB,CAAC;KAChE,CAAC;AACJ,CAAC"}