@telora/daemon 0.22.239 → 0.22.289

package/dist/verify/verification-default-on.js

@@ -1,448 +0,0 @@
-// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: packages/daemon/src/verify/judged-commit-gate.test.ts,
-//   packages/daemon/src/verify/verification-run-config-source.test.ts,
-//   packages/daemon/src/verify/verify-unprovisioned-worktree.test.ts
-// PINNED-BY-END
-/**
- * Default-on deterministic verification: selection + concurrency cap.
- *
- * The deterministic verification method used to be opt-in (a delivery only ran
- * a check when it carried an explicit verification_method). This module makes
- * it the DEFAULT for every delivery entering verify: it discovers verify-status
- * deliveries with no explicit method and synthesizes a `deterministic`
- * PendingVerification carrying the config-default command, and it caps
- * concurrent daemon-side runs so a burst cannot spawn N whole-repo suites.
- *
- * Extracted from verification-engine.ts to keep that file under the daemon
- * 800-line limit. The dispatch (runVerificationForDelivery / runVerificationTick)
- * stays in verification-engine.ts and imports from here.
- *
- * @module verification-default-on
- */
-import { DELIVERY_STATUS } from '@telora/daemon-core';
-import { DEFAULT_VERIFY_MAX_CONCURRENT, formatVerifyConfigSource, } from './verification-config.js';
-import { readVerifyManifest, resolveVerifyManifestPath, VERIFY_MANIFEST_FILENAME, } from './verification-manifest.js';
-import { runGitSync } from '../git/exec.js';
-import { configForProduct } from '../shell/config.js';
-import { getFocusWorktree } from '../focus/focus-worktree-state.js';
-import { resolveHeadSha } from './verification-baseline.js';
-import { alreadyPassed, failedOnCurrentHead, pruneGuardsOutsideVerify, ranOnCurrentHead, } from './default-on-guards.js';
-import { retryOwedReworkIssue } from './verification-rework-issue.js';
-import { createLogger } from '../shell/log.js';
-const log = createLogger({ module: 'verification' });
-/** Default HEAD reader: the registered focus worktree's HEAD, or null when unreadable. */
-export function defaultResolveFocusHeadSha(focusId) {
-    const worktree = getFocusWorktree(focusId);
-    return worktree ? resolveHeadSha(worktree.worktreePath) : null;
-}
-// ---------------------------------------------------------------------------
-// Concurrency cap
-// ---------------------------------------------------------------------------
-/**
- * Counting semaphore capping concurrent daemon-side verification runs.
- *
- * A default-on deterministic run is a full build+test sweep (minutes). The
- * verification tick passes `skipIfRunning`, so ticks themselves no longer
- * overlap; the cap guards the remaining fan-out (multiple products within one
- * tick, and any future callers outside the latched tick). The module-level
- * singleton below is shared across every invocation, so the cap holds
- * globally, not just within one call.
- *
- * A dedicated semaphore (rather than the shared ResourceGovernor) because the
- * governor's per-engine slots model agent-team spawns and are wired through
- * the governor-construction path; runVerificationTick is invoked with only
- * `config` and has no governor handle. The cap value comes from
- * resolveDefaultVerification (maxConcurrent).
- */
-export class VerificationSemaphore {
-    permits;
-    limit;
-    waiters = [];
-    constructor(limit) {
-        this.limit = Math.max(1, limit);
-        this.permits = this.limit;
-    }
-    /** Adjust the cap (config change between ticks). Only frees waiters on a raise. */
-    setLimit(limit) {
-        const next = Math.max(1, limit);
-        if (next === this.limit)
-            return;
-        const delta = next - this.limit;
-        this.limit = next;
-        this.permits += delta;
-        while (this.permits > 0 && this.waiters.length > 0) {
-            const w = this.waiters.shift();
-            this.permits--;
-            w?.();
-        }
-    }
-    async acquire() {
-        if (this.permits > 0) {
-            this.permits--;
-            return;
-        }
-        await new Promise((resolve) => this.waiters.push(resolve));
-    }
-    release() {
-        const w = this.waiters.shift();
-        if (w) {
-            w();
-        }
-        else if (this.permits < this.limit) {
-            this.permits++;
-        }
-    }
-    /** Test-only: how many permits are currently available. */
-    availablePermits() {
-        return this.permits;
-    }
-}
-/** Shared cap across all tick invocations. Sized from config at each tick. */
-export const verificationSemaphore = new VerificationSemaphore(1);
-/** Test-only: inspect the concurrency semaphore. */
-export function __getVerificationSemaphoreForTests() {
-    return verificationSemaphore;
-}
-/**
- * Resolve the default-on verification config for every product, from each
- * product's OWN scoped config.
- *
- * WHY per-product (this is the whole point): the repo-manifest layer is read
- * from `config.repoPath`, so resolution is only meaningful on a product-scoped
- * config. A multi-product `daemon.json` (products[] each with their own
- * repoPath) carries no meaningful TOP-LEVEL repoPath -- `config.ts:158` falls
- * back to `process.cwd()`, the daemon's LAUNCH DIRECTORY. Resolving once from
- * the un-scoped config therefore made every product's gate a function of where
- * the daemon happened to be started: launched outside a repo -> no manifest ->
- * silently inert; launched inside one product's repo -> that repo's command
- * applied to every OTHER product's deliveries. Neither is a gate.
- *
- * Error containment: `resolveDefaultVerification` THROWS on a malformed
- * manifest by design (verification-manifest.ts -- a typo must never silently
- * un-arm the gate). Per-product, an uncaught throw would kill the tick for every
- * product including healthy ones, so it is contained HERE: logged at ERROR
- * naming the product and the manifest path (every tick -- a persistent,
- * operator-visible state, never a debug line), and that product's `resolved`
- * comes back `undefined`: it contributes no cap while other products keep
- * gating. The product's EXPLICIT-method deliveries still verify: they carry
- * their own command on the delivery row, so a repo-root manifest typo has no
- * bearing on them and must not disarm them.
- *
- * Nor does the typo disarm a branch that ships a working gate. repoPath is the
- * operator's checkout, which may lag the code under verification, so the product
- * is resolved again with that manifest set aside (`judgedCommitOnly`) and its
- * scan still arms each delivery from the manifest its judged commit ships. That
- * resolution carries no command even when env or daemon.json declare one: a
- * delivery whose commit ships no manifest would fall back at dispatch to the
- * broken repoPath file and fail on it, so until the file is fixed only
- * branch-declared gates arm.
- */
-export function resolveProductVerificationScopes(config, resolve) {
-    return config.products.map((product) => {
-        const productConfig = configForProduct(config, product);
-        try {
-            return { product, productConfig, resolved: resolve(productConfig) };
-        }
-        catch (err) {
-            log.error(`[verification] default-on config unresolvable for product ${product.id} `
-                + `(manifest: ${resolveVerifyManifestPath(productConfig.repoPath)}): `
-                + `${err.message} -- until it is fixed this product's default-on gate arms only deliveries `
-                + `whose judged commit ships its own manifest; its explicit-method deliveries and all other products are unaffected.`);
-            return { product, productConfig, resolved: undefined, ...resolveJudgedCommitOnly(productConfig, resolve) };
-        }
-    });
-}
-/** The product resolved with its repoPath manifest set aside, holding no command (see resolveProductVerificationScopes). */
-function resolveJudgedCommitOnly(productConfig, resolve) {
-    try {
-        const withoutRepoManifest = resolve(productConfig, () => undefined);
-        return {
-            judgedCommitOnly: {
-                ...withoutRepoManifest,
-                command: '',
-                enabled: false,
-                sources: { ...withoutRepoManifest.sources, command: { layer: 'default' } },
-            },
-        };
-    }
-    catch {
-        return {};
-    }
-}
-/**
- * Resolve the ONE daemon-wide concurrency cap for the shared semaphore.
- *
- * The cap is DAEMON-WIDE, not per-product, and deliberately so: the semaphore is
- * a module-level singleton and the resource it protects is the daemon's HOST
- * (CPU/RAM/disk for a minutes-long build+test sweep), which every product shares.
- * Three products each declaring `maxConcurrent: 3` must not mean 9 concurrent
- * suites on one box. So a single value must be chosen -- and simply calling
- * `setLimit` inside the per-product loop would be incoherent: the LAST product
- * iterated would silently win for the rest of the tick.
- *
- * RULE: the minimum across the products that resolved one. Chosen because:
- *  - it is order-independent (min is commutative), so no "last product wins";
- *  - it is fail-safe -- the cap never exceeds any declaration, and over-capping
- *    only slows a tick where under-capping can thrash the host;
- *  - it keeps every layer's declaration live rather than silently dropping the
- *    manifest's `maxConcurrent`. Each product still resolves through the full
- *    env > operator file > manifest chain, so an operator setting the env var or
- *    the global block pins EVERY product's value and therefore the min: the
- *    operator, who alone knows the box, always has the last word. A repo can
- *    only make the daemon more conservative than the operator's setting, never
- *    less.
- * Stated plainly: the daemon runs at most as many concurrent suites as the most
- * conservative managed repo allows.
- *
- * No resolved values at all (every product's manifest malformed) => the
- * conservative floor, not a stale limit from a previous tick.
- */
-export function resolveDaemonWideVerifyCap(scopes) {
-    const declared = scopes
-        .map((s) => s.resolved?.maxConcurrent)
-        .filter((n) => typeof n === 'number');
-    if (declared.length === 0)
-        return DEFAULT_VERIFY_MAX_CONCURRENT;
-    return Math.min(...declared);
-}
-/** A focus HEAD reader that asks git at most once per scan (every delivery of a focus is judged on the same HEAD). */
-function memoizedHead(focusId, deps) {
-    let read;
-    return () => {
-        read ??= { head: (deps.resolveFocusHeadSha ?? defaultResolveFocusHeadSha)(focusId) };
-        return read.head;
-    };
-}
-/** Read telora.verify.json as committed at `sha`, through the manifest reader's own validation. */
-function readManifestAtCommit(worktreePath, sha, runGit) {
-    const manifestPath = resolveVerifyManifestPath(worktreePath);
-    // readVerifyManifest reports a readText throw as a malformed file, so a git
-    // failure is recorded here and told apart after the read.
-    let gitFailure;
-    const failed = (what, error) => {
-        gitFailure = `git ${what} failed in ${worktreePath}: ${error ?? 'no error output'}`;
-        return new Error(gitFailure);
-    };
-    const committed = {
-        // ls-tree exits 0 with no output for an absent path: only that empty listing means "ships none".
-        exists: () => {
-            const listed = runGit(['ls-tree', '--name-only', sha, '--', VERIFY_MANIFEST_FILENAME], worktreePath);
-            if (!listed.success)
-                throw failed(`ls-tree ${sha}`, listed.error);
-            return listed.output.trim() !== '';
-        },
-        readText: () => {
-            const shown = runGit(['show', `${sha}:${VERIFY_MANIFEST_FILENAME}`], worktreePath);
-            if (!shown.success)
-                throw failed(`show ${sha}:${VERIFY_MANIFEST_FILENAME}`, shown.error);
-            return shown.output;
-        },
-    };
-    try {
-        const manifest = readVerifyManifest(worktreePath, committed);
-        return { sha, manifestPath, ...(manifest ? { manifest } : {}) };
-    }
-    catch (err) {
-        if (gitFailure !== undefined)
-            return { unreadable: gitFailure };
-        return { sha, manifestPath, malformed: err.message };
-    }
-}
-/**
- * Build the judged-commit manifest reader over a focus -> worktree lookup. A file
- * is immutable at a sha, so each worktree's last read is reused while its HEAD
- * is unchanged rather than re-running git every tick. Only reads git answered
- * are kept; an unreadable one is retried on the next call.
- */
-export function buildJudgedCommitManifestReader(resolveWorktreePath = (focusId) => getFocusWorktree(focusId)?.worktreePath ?? null, runGit = runGitSync) {
-    const lastRead = new Map();
-    return (focusId) => {
-        const worktreePath = resolveWorktreePath(focusId);
-        if (!worktreePath)
-            return null;
-        const head = runGit(['rev-parse', 'HEAD'], worktreePath);
-        const sha = head.output.trim();
-        if (!head.success || sha === '') {
-            return { unreadable: `git rev-parse HEAD failed in ${worktreePath}: ${head.error ?? 'no error output'}` };
-        }
-        const cached = lastRead.get(worktreePath);
-        if (cached?.sha === sha)
-            return cached;
-        const read = readManifestAtCommit(worktreePath, sha, runGit);
-        if (!('unreadable' in read))
-            lastRead.set(worktreePath, read);
-        return read;
-    };
-}
-const defaultReadJudgedCommitManifest = buildJudgedCommitManifestReader();
-/**
- * The provisional run config for a delivery whose product repoPath resolves no
- * command: what its judged commit declares, or null when that commit ships no
- * manifest. An operator timeout (env or daemon.json) still outranks the
- * manifest's, as in resolveDefaultVerification. A MALFORMED committed manifest
- * still arms: the dispatch re-reads it in the checkout and fails the run naming
- * the file -- the same loud result a configured product gets -- rather than the
- * delivery silently skipping its gate. An UNREADABLE commit is logged at ERROR
- * and left unarmed for this tick only: it is not marked run, so the next tick
- * reads it again, and no verdict is recorded against a commit nobody read.
- */
-function armFromJudgedCommit(deliveryId, focusId, resolved, deps) {
-    const read = (deps.readJudgedCommitManifest ?? defaultReadJudgedCommitManifest)(focusId);
-    if (read && 'unreadable' in read) {
-        log.error(`[verification] default-on: delivery ${deliveryId} is NOT armed this tick -- the telora.verify.json its judged `
-            + `commit ships could not be read (${read.unreadable}); it is read again next tick`);
-        return null;
-    }
-    if (!read || (read.manifest === undefined && read.malformed === undefined))
-        return null;
-    log.info(`[verification] default-on: delivery ${deliveryId} armed from the telora.verify.json committed at `
-        + `${read.sha.slice(0, 8)} (the product repoPath declares no command)`);
-    return judgedCommitVerificationConfig(read, resolved);
-}
-/**
- * The run config a judged commit's telora.verify.json arms: its command, and its
- * timeout unless an operator layer outranks it. The ONE derivation both the scan
- * and the commit-gate predicate (verify/commit-gate-configured.ts) key a verdict by. Pure.
- */
-export function judgedCommitVerificationConfig(read, resolved) {
-    const manifestTimeout = resolved.sources.timeoutMs.layer === 'default' ? read.manifest?.timeoutMs : undefined;
-    return {
-        command: read.manifest?.command ?? '',
-        timeoutMs: manifestTimeout ?? resolved.timeoutMs,
-        timeoutSource: formatVerifyConfigSource(manifestTimeout !== undefined ? { layer: 'manifest', path: read.manifestPath } : resolved.sources.timeoutMs),
-    };
-}
-// ---------------------------------------------------------------------------
-// Selection
-// ---------------------------------------------------------------------------
-/**
- * Drop the guards of this PRODUCT's deliveries the scan no longer saw in verify.
- *
- * Two bounds, both of them "a scan may only conclude what it actually looked at":
- * the product (verify/default-on-guards.ts -- one product's scan cannot observe
- * another's deliveries, and concluding about them wiped their guards every tick,
- * incident 2026-09-24), and completeness (a focus whose deliveries could not be
- * read leaves the view partial, so the prune waits for the next complete scan
- * rather than reading an unread focus as an empty one).
- */
-function pruneProductGuards(productId, observedInVerify, complete) {
-    if (complete) {
-        pruneGuardsOutsideVerify(observedInVerify, productId);
-        return;
-    }
-    log.info(`[verification] default-on: not pruning the re-run guards of product ${productId} this tick -- `
-        + 'a focus\'s deliveries could not be read, so "no longer in verify" is not established');
-}
-/**
- * Discover deliveries that should receive a DEFAULT-ON deterministic run: in
- * `verify` status, anchored to an injection, with no explicit verification
- * method (so not already returned by getPendingVerifications), not in a
- * read-only audit focus (those are discovery-only and never run a suite), not
- * already run this verify-entry (steady-state guard), and not already failed or
- * passed on the focus's unchanged HEAD (HEAD-keyed guards).
- *
- * Synthesizes a `deterministic` PendingVerification carrying the resolved
- * config-default command + timeout and a `defaultOnSource` marker. Those values
- * are PROVISIONAL -- resolved against the product repoPath, which may lag the
- * branch -- and a run on a detached checkout re-resolves both from the verified
- * code (verify/verification-checkout.ts).
- *
- * Arming does not wait on repoPath either. When no command resolves there, each
- * delivery is armed from the telora.verify.json its judged commit ships
- * (armFromJudgedCommit), so a branch that introduces the gate is verified on its
- * next run. An operator's `declined` marker is the exception: it suppresses the
- * repo manifest, and no branch overturns it. With no command anywhere the
- * feature stays inert.
- *
- * `config` must be product-scoped (config.productId identifies the product), and
- * that is now load-bearing rather than conventional: the guard prune at the end is
- * SCOPED to config.productId, because a scan of one product observes none of
- * another's deliveries and must conclude nothing about them (pruneProductGuards).
- */
-export async function collectDefaultOnVerifications(config, resolved, explicitDeliveryIds, deps) {
-    if (!resolved.enabled && config.defaultVerification?.declined === true)
-        return [];
-    const focuses = await deps.getActiveFocuses(config.organizationId, config.productId);
-    const candidates = [];
-    const observedInVerify = new Set();
-    // The prune below concludes "no longer in verify" from what this scan SAW, so it
-    // may only run on a scan that saw the whole product. A focus whose deliveries
-    // could not be read leaves the view partial; the prune is then deferred to the
-    // next complete scan rather than reading an unread focus as an empty one.
-    let observationComplete = true;
-    for (const focus of focuses) {
-        // Read-only audit/discovery focuses terminalize on Context Group findings;
-        // they must never trigger a whole-repo suite.
-        if (focus.read_only === true)
-            continue;
-        let deliveries;
-        try {
-            deliveries = await deps.getFocusDeliveries(focus.focus_id);
-        }
-        catch (err) {
-            log.warn(`[verification] default-on: failed to fetch deliveries for focus ${focus.focus_id.slice(0, 8)}:`, err.message);
-            observationComplete = false;
-            continue;
-        }
-        const readHead = memoizedHead(focus.focus_id, deps);
-        for (const d of deliveries) {
-            if (d.executionStatus !== DELIVERY_STATUS.VERIFY)
-                continue;
-            await (deps.retryOwedReworkIssue ?? retryOwedReworkIssue)(d, { productId: config.productId, focusId: focus.focus_id, readHead });
-            // The default-on path retires an injection on pass, so it requires an
-            // injection anchor. Unanchored deliveries fall through to focus-level review.
-            if (!d.injectionId)
-                continue;
-            // An explicit-method delivery is gated by its own run: excluded while its row is
-            // pending (getPendingVerifications) AND once its outcome went terminal and that
-            // queue dropped it -- read from the durable row's verification_method.
-            if (explicitDeliveryIds.has(d.id) || (typeof d.verificationMethod === 'string' && d.verificationMethod !== ''))
-                continue;
-            observedInVerify.add(d.id);
-            // The pass is read FIRST, and reads no HEAD: it answers a question about the
-            // DELIVERY (has its work been judged?), where the two below answer questions
-            // about the COMMIT. Asked after ranOnCurrentHead, a sibling's commit would
-            // drop the run mark and log a re-arm the pass then silently suppressed.
-            if (alreadyPassed(d.id))
-                continue; // its verify passed; only a re-entry re-arms it
-            if (ranOnCurrentHead(d.id, readHead))
-                continue; // already judged on this commit this verify-entry
-            if (failedOnCurrentHead(d, readHead))
-                continue; // unchanged commit already failed
-            // timeoutSource names the layer the timeout came from, so a run that applies
-            // these tick values as-is (in place, no checkout) can still say where its
-            // timeout was read if it is killed by it.
-            const verificationConfig = resolved.enabled
-                ? { command: resolved.command, timeoutMs: resolved.timeoutMs, timeoutSource: formatVerifyConfigSource(resolved.sources.timeoutMs) }
-                : armFromJudgedCommit(d.id, focus.focus_id, resolved, deps);
-            if (!verificationConfig)
-                continue; // no command at repoPath, and the judged commit declares none (or went unread)
-            candidates.push({
-                deliveryId: d.id,
-                deliveryName: d.name,
-                productId: config.productId,
-                focusId: focus.focus_id,
-                injectionNodeId: d.injectionId,
-                verificationMethod: 'deterministic',
-                verificationConfig,
-                verificationOutcome: null,
-                verificationLastRunAt: null,
-                // Recorded git state travels with the verification so the evidence
-                // resolver can judge an already-merged-back delivery from its own merge
-                // commit rather than reporting blindness.
-                gitState: d.gitState,
-                mergeCommitSha: d.mergeCommitSha,
-                // Marks the candidate default-on. The command + timeout above were read
-                // from repoPath and are provisional: a checkout run re-resolves them from
-                // the verified code, with this block and repoPath as the lower layers.
-                defaultOnSource: {
-                    defaultVerification: config.defaultVerification,
-                    repoPath: config.repoPath,
-                },
-            });
-        }
-    }
-    pruneProductGuards(config.productId, observedInVerify, observationComplete);
-    return candidates;
-}
-//# sourceMappingURL=verification-default-on.js.map

package/dist/verify/verification-default-on.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"verification-default-on.js","sourceRoot":"","sources":["../../src/verify/verification-default-on.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,oEAAoE;AACpE,uEAAuE;AACvE,qEAAqE;AACrE,gBAAgB;AAEhB;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,eAAe,EAAqB,MAAM,qBAAqB,CAAC;AAGzE,OAAO,EACL,6BAA6B,EAC7B,wBAAwB,GAEzB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,wBAAwB,GAIzB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAErD,0FAA0F;AAC1F,MAAM,UAAU,0BAA0B,CAAC,OAAe;IACxD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC3C,OAAO,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjE,CAAC;AA6BD,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,qBAAqB;IACxB,OAAO,CAAS;IAChB,KAAK,CAAS;IACL,OAAO,GAAsB,EAAE,CAAC;IAEjD,YAAY,KAAa;QACvB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC;IAC5B,CAAC;IAED,mFAAmF;IACnF,QAAQ,CAAC,KAAa;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,IAAI,CAAC,KAAK;YAAE,OAAO;QAChC,MAAM,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;QACtB,OAAO,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnD,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,CAAC,EAAE,EAAE,CAAC;QACR,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,OAAO;QACL,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,EAAE,CAAC;YACN,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YACrC,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED,2DAA2D;IAC3D,gBAAgB;QACd,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF;AAED,8EAA8E;AAC9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,qBAAqB,CAAC,CAAC,CAAC,CAAC;AAElE,oDAAoD;AACpD,MAAM,UAAU,kCAAkC;IAChD,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AA6BD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,gCAAgC,CAC9C,MAAoB,EACpB,OAA8F;IAE9F,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACrC,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QACtE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CACP,6DAA6D,OAAO,CAAC,EAAE,GAAG;kBACxE,cAAc,yBAAyB,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK;kBACpE,GAAI,GAAa,CAAC,OAAO,4EAA4E;kBACrG,mHAAmH,CACtH,CAAC;YACF,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,uBAAuB,CAAC,aAAa,EAAE,OAAO,CAAC,EAAE,CAAC;QAC7G,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,4HAA4H;AAC5H,SAAS,uBAAuB,CAC9B,aAA2B,EAC3B,OAA8F;IAE9F,IAAI,CAAC;QACH,MAAM,mBAAmB,GAAG,OAAO,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACpE,OAAO;YACL,gBAAgB,EAAE;gBAChB,GAAG,mBAAmB;gBACtB,OAAO,EAAE,EAAE;gBACX,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,EAAE,GAAG,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;aAC3E;SACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAA2C;IAE3C,MAAM,QAAQ,GAAG,MAAM;SACpB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC;SACrC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,6BAA6B,CAAC;IAChE,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAGD,sHAAsH;AACtH,SAAS,YAAY,CAAC,OAAe,EAAE,IAAuB;IAC5D,IAAI,IAAyC,CAAC;IAC9C,OAAO,GAAG,EAAE;QACV,IAAI,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,mBAAmB,IAAI,0BAA0B,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACrF,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC;AAiCD,mGAAmG;AACnG,SAAS,oBAAoB,CAAC,YAAoB,EAAE,GAAW,EAAE,MAAc;IAC7E,MAAM,YAAY,GAAG,yBAAyB,CAAC,YAAY,CAAC,CAAC;IAC7D,4EAA4E;IAC5E,0DAA0D;IAC1D,IAAI,UAA8B,CAAC;IACnC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,KAAyB,EAAS,EAAE;QAChE,UAAU,GAAG,OAAO,IAAI,cAAc,YAAY,KAAK,KAAK,IAAI,iBAAiB,EAAE,CAAC;QACpF,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC,CAAC;IACF,MAAM,SAAS,GAAqB;QAClC,iGAAiG;QACjG,MAAM,EAAE,GAAG,EAAE;YACX,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,EAAE,wBAAwB,CAAC,EAAE,YAAY,CAAC,CAAC;YACrG,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,MAAM,CAAC,WAAW,GAAG,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAClE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;QACrC,CAAC;QACD,QAAQ,EAAE,GAAG,EAAE;YACb,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,MAAM,EAAE,GAAG,GAAG,IAAI,wBAAwB,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC;YACnF,IAAI,CAAC,KAAK,CAAC,OAAO;gBAAE,MAAM,MAAM,CAAC,QAAQ,GAAG,IAAI,wBAAwB,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACzF,OAAO,KAAK,CAAC,MAAM,CAAC;QACtB,CAAC;KACF,CAAC;IACF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QAC7D,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;QAChE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;IAClE,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,+BAA+B,CAC7C,sBAA0D,CAAC,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,YAAY,IAAI,IAAI,EACtH,SAAiB,UAAU;IAE3B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAgC,CAAC;IACzD,OAAO,CAAC,OAAO,EAAE,EAAE;QACjB,MAAM,YAAY,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;YAChC,OAAO,EAAE,UAAU,EAAE,gCAAgC,YAAY,KAAK,IAAI,CAAC,KAAK,IAAI,iBAAiB,EAAE,EAAE,CAAC;QAC5G,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC1C,IAAI,MAAM,EAAE,GAAG,KAAK,GAAG;YAAE,OAAO,MAAM,CAAC;QACvC,MAAM,IAAI,GAAG,oBAAoB,CAAC,YAAY,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,CAAC,YAAY,IAAI,IAAI,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,+BAA+B,GAAG,+BAA+B,EAAE,CAAC;AAE1E;;;;;;;;;;GAUG;AACH,SAAS,mBAAmB,CAC1B,UAAkB,EAClB,OAAe,EACf,QAAqC,EACrC,IAAuB;IAEvB,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,wBAAwB,IAAI,+BAA+B,CAAC,CAAC,OAAO,CAAC,CAAC;IACzF,IAAI,IAAI,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;QACjC,GAAG,CAAC,KAAK,CACP,uCAAuC,UAAU,+DAA+D;cAC9G,mCAAmC,IAAI,CAAC,UAAU,+BAA+B,CACpF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACxF,GAAG,CAAC,IAAI,CACN,uCAAuC,UAAU,kDAAkD;UACjG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,6CAA6C,CACvE,CAAC;IACF,OAAO,8BAA8B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACxD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAAC,IAA0B,EAAE,QAAqC;IAC9G,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9G,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE;QACrC,SAAS,EAAE,eAAe,IAAI,QAAQ,CAAC,SAAS;QAChD,aAAa,EAAE,wBAAwB,CACrC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAC5G;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E;;;;;;;;;GASG;AACH,SAAS,kBAAkB,CAAC,SAAiB,EAAE,gBAAqC,EAAE,QAAiB;IACrG,IAAI,QAAQ,EAAE,CAAC;QACb,wBAAwB,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IACD,GAAG,CAAC,IAAI,CACN,uEAAuE,SAAS,gBAAgB;UAC9F,sFAAsF,CACzF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,MAAoB,EACpB,QAAqC,EACrC,mBAAwC,EACxC,IAAuB;IAEvB,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,mBAAmB,EAAE,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAElF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACrF,MAAM,UAAU,GAA0B,EAAE,CAAC;IAC7C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,iFAAiF;IACjF,8EAA8E;IAC9E,+EAA+E;IAC/E,0EAA0E;IAC1E,IAAI,mBAAmB,GAAG,IAAI,CAAC;IAE/B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,2EAA2E;QAC3E,8CAA8C;QAC9C,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI;YAAE,SAAS;QAEvC,IAAI,UAA0D,CAAC;QAC/D,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CACN,mEAAmE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAC/F,GAAa,CAAC,OAAO,CACvB,CAAC;YACF,mBAAmB,GAAG,KAAK,CAAC;YAC5B,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACpD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,eAAe,KAAK,eAAe,CAAC,MAAM;gBAAE,SAAS;YAC3D,MAAM,CAAC,IAAI,CAAC,oBAAoB,IAAI,oBAAoB,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;YACjI,sEAAsE;YACtE,8EAA8E;YAC9E,IAAI,CAAC,CAAC,CAAC,WAAW;gBAAE,SAAS;YAC7B,iFAAiF;YACjF,gFAAgF;YAChF,uEAAuE;YACvE,IAAI,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,kBAAkB,KAAK,QAAQ,IAAI,CAAC,CAAC,kBAAkB,KAAK,EAAE,CAAC;gBAAE,SAAS;YAEzH,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3B,6EAA6E;YAC7E,6EAA6E;YAC7E,2EAA2E;YAC3E,wEAAwE;YACxE,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAE,SAAS,CAAC,gDAAgD;YACnF,IAAI,gBAAgB,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC;gBAAE,SAAS,CAAC,kDAAkD;YAClG,IAAI,mBAAmB,CAAC,CAAC,EAAE,QAAQ,CAAC;gBAAE,SAAS,CAAC,kCAAkC;YAElF,6EAA6E;YAC7E,0EAA0E;YAC1E,0CAA0C;YAC1C,MAAM,kBAAkB,GAAG,QAAQ,CAAC,OAAO;gBACzC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,aAAa,EAAE,wBAAwB,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;gBACnI,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC9D,IAAI,CAAC,kBAAkB;gBAAE,SAAS,CAAC,+EAA+E;YAElH,UAAU,CAAC,IAAI,CAAC;gBACd,UAAU,EAAE,CAAC,CAAC,EAAE;gBAChB,YAAY,EAAE,CAAC,CAAC,IAAI;gBACpB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO,EAAE,KAAK,CAAC,QAAQ;gBACvB,eAAe,EAAE,CAAC,CAAC,WAAW;gBAC9B,kBAAkB,EAAE,eAAe;gBACnC,kBAAkB;gBAClB,mBAAmB,EAAE,IAAI;gBACzB,qBAAqB,EAAE,IAAI;gBAC3B,mEAAmE;gBACnE,wEAAwE;gBACxE,0CAA0C;gBAC1C,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,cAAc,EAAE,CAAC,CAAC,cAAc;gBAChC,wEAAwE;gBACxE,0EAA0E;gBAC1E,uEAAuE;gBACvE,eAAe,EAAE;oBACf,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;oBAC/C,QAAQ,EAAE,MAAM,CAAC,QAAQ;iBAC1B;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,kBAAkB,CAAC,MAAM,CAAC,SAAS,EAAE,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;IAE5E,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/verify/verification-deps-default.d.ts

@@ -1,4 +0,0 @@
-import type { DaemonConfig } from '../types/index.js';
-import type { VerificationDeps } from './verification-deps.js';
-export declare const defaultDeps: (config: DaemonConfig) => VerificationDeps;
-//# sourceMappingURL=verification-deps-default.d.ts.map

package/dist/verify/verification-deps-default.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"verification-deps-default.d.ts","sourceRoot":"","sources":["../../src/verify/verification-deps-default.ts"],"names":[],"mappings":"AA6CA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AA0BtD,OAAO,KAAK,EAA8B,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAkF3F,eAAO,MAAM,WAAW,GAAI,QAAQ,YAAY,KAAG,gBA4FlD,CAAC"}