@telora/daemon 0.22.245 → 0.22.289

package/dist/verify/deterministic-gate/verification-checkout.js

@@ -0,0 +1,391 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/composition/subsystem-contexts.test.ts,
+//   packages/daemon/src/verify/attribution/verification-attribution.test.ts,
+//   packages/daemon/src/verify/deterministic-gate/verification-checkout.test.ts,
+//   packages/daemon/src/verify/deterministic-gate/verify-unprovisioned-worktree.test.ts,
+//   packages/daemon/src/verify/gate-config/verification-run-config-source.test.ts,
+//   packages/daemon/src/worktree/worktree-package-provisioning.test.ts
+// PINNED-BY-END
+/**
+ * A deterministic verify judges a FIXED commit, never the live focus worktree.
+ *
+ * Every delivery of a focus shares one worktree, and the verify hold
+ * withholds only the delivery under verify (worktree/verify-hold-facts.ts) -- so
+ * a coding team can be alive in that worktree, editing and committing a sibling
+ * delivery's fix, while a verify runs. A verify run IN that
+ * worktree would judge a tree the team moved mid-run: a verdict about no commit
+ * at all. So the run happens in a detached checkout of the focus HEAD sha taken
+ * at dispatch, under the daemon state dir (the same shape as the baseline runner
+ * in verification-baseline.ts), and the verdict carries that sha.
+ *
+ * The verify interlock hold is still acquired on the FOCUS worktree (with the
+ * judged delivery id): daemon-authored commits and the coding->verify advance
+ * defer to it, so a team alive during a verify tears neither.
+ *
+ * Environment parity WITHOUT shared mutable state. A fresh checkout has no
+ * installed dependencies; the focus worktree resolves them from its own ignored
+ * node_modules dirs and by Node's walk-up to ancestor node_modules (the main
+ * checkout's, for a worktree nested under it -- often its ONLY real package tree).
+ * The checkout rebuilds that resolution as REAL node_modules directories whose
+ * package entries are symlinks: the root one merges the worktree's root
+ * node_modules with every ancestor node_modules in walk-up order (the first
+ * source naming a package wins, as resolution does), and `.bin` / `@scope` dirs
+ * merge one level down. Two things are deliberately NOT carried:
+ *   - dot-entries other than `.bin` (`.vite`, `.cache`, ...): tool caches both
+ *     sides write, which the verify recreates inside its own directories;
+ *   - build output (`dist`): it is whatever tree the team last built, not the
+ *     judged commit, so the gate builds what it needs inside the checkout.
+ * So no team write to caches or build output reaches the verify, and no verify
+ * write reaches the team. The linked package trees are read, never written; the
+ * one way they move is a dependency install, which the checkout DETECTS: a
+ * fingerprint of each source's package set and npm's hidden lockfile is taken at
+ * setup and re-read after the run, and a verdict rendered while the dependencies
+ * moved is discarded as `pending` (re-run next tick). The checkout is removed by
+ * lstat-based removal, which unlinks a link and never follows it into its target.
+ *
+ * Fail-closed: when no checkout can be made the run is NOT performed in the live
+ * worktree; it reports `pending` with checkoutUnavailable so the tick retries.
+ * The same holds for an UNPROVISIONED focus worktree: a nested package's
+ * node_modules is reachable only from the worktree itself, so while its install
+ * is in flight, failed, or stale (worktree/worktree-package-provisioning.ts) no
+ * checkout is made and the verify reports checkoutUnavailable, naming the package
+ * and the install error -- a missing install is never a verdict on the delivery.
+ *
+ * The command + timeout come from the COMMIT BEING JUDGED. A default-on
+ * candidate's config is provisional: the tick resolved it against the product
+ * repoPath (the operator's checkout, which may lag the branch). Once the checkout
+ * exists, both are re-resolved from ITS telora.verify.json, so a command or
+ * timeout committed on the verified branch applies to that branch's next run
+ * with no daemon restart and no edit to the operator's checkout. A checkout that
+ * ships no manifest falls back to the repoPath manifest -- recorded on the result
+ * (appliedConfig.manifestFallback) and warned, never silent. A MALFORMED checkout
+ * manifest fails the run without running the command, and never falls back.
+ * Explicit-method rows carry their own config and are never re-resolved; an
+ * in-place run (no focus worktree) keeps the tick's values, which were resolved
+ * against the very repoPath it runs in.
+ *
+ * History: docs/daemon/history-verify.md (verify/deterministic-gate/verification-checkout.ts).
+ *
+ * @module verify/deterministic-gate/verification-checkout
+ */
+import { existsSync, mkdirSync, readdirSync, rmSync, statSync, symlinkSync } from 'node:fs';
+import { basename, dirname, join, resolve } from 'node:path';
+import { resolveGlobalStateDir } from '../../daemon-state/daemon-process.js';
+import { DEFAULT_VERIFICATION_TIMEOUT_MS } from './verification-deterministic.js';
+import { formatVerifyConfigSource, resolveAppliedVerificationConfig, } from '../gate-config/verification-config.js';
+import { resolveVerifyManifestPath } from '../gate-config/verification-manifest.js';
+import { resolveVerifyBoundaryEnv } from './verification-boundary-env.js';
+import { noteGateRunCommit } from '../gate-verdicts/gate-run-registry.js';
+import { createLogger } from '../../log/daemon-log.js';
+const log = createLogger({ module: 'verification' });
+/** The ignored directory name a checkout rebuilds from the focus worktree. */
+const DEPENDENCY_DIR = 'node_modules';
+/** The production parent directory of verify checkouts, under the daemon state dir. */
+export const verifyCheckoutRoot = () => resolve(resolveGlobalStateDir(), 'verification-checkout');
+/**
+ * Repo-relative ignored node_modules dirs of the focus worktree (never one nested
+ * inside another node_modules). `--directory` keeps git from walking into a
+ * wholly-ignored tree. Build output is deliberately not listed (module doc).
+ */
+export function listMirroredDirs(focusWorktreePath, runGit) {
+    const listed = runGit(['ls-files', '--others', '--ignored', '--exclude-standard', '--directory'], focusWorktreePath);
+    if (!listed.success)
+        return [];
+    return listed.output
+        .split('\n')
+        .map((line) => line.trim().replace(/\/$/, ''))
+        .filter((rel) => rel.length > 0
+        && basename(rel) === DEPENDENCY_DIR
+        && !rel.split('/').slice(0, -1).includes(DEPENDENCY_DIR));
+}
+/** Every node_modules Node's walk-up reaches from `dir` upward, nearest first. */
+function ancestorNodeModules(dir) {
+    const found = [];
+    let current = resolve(dir);
+    for (;;) {
+        const candidate = join(current, DEPENDENCY_DIR);
+        if (existsSync(candidate))
+            found.push(candidate);
+        const parent = dirname(current);
+        if (parent === current)
+            return found;
+        current = parent;
+    }
+}
+/** A directory's entry names, or [] when it cannot be read. */
+function entriesOf(dir) {
+    try {
+        return readdirSync(dir);
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Build `at` as a REAL directory whose entries link into `sources` (nearest
+ * first; the first source naming an entry wins). At the top level a `.bin` or
+ * `@scope` entry is merged one level down the same way, and every other
+ * dot-entry (a tool cache) is skipped.
+ */
+function buildMergedModulesDir(sources, at, depth = 0) {
+    mkdirSync(at, { recursive: true });
+    const seen = new Set();
+    for (const source of sources) {
+        for (const name of entriesOf(source)) {
+            if (seen.has(name))
+                continue;
+            const merged = depth === 0 && (name === '.bin' || name.startsWith('@'));
+            if (depth === 0 && name.startsWith('.') && !merged)
+                continue;
+            seen.add(name);
+            if (merged) {
+                buildMergedModulesDir(sources.map((s) => join(s, name)), join(at, name), depth + 1);
+            }
+            else {
+                symlinkSync(join(source, name), join(at, name));
+            }
+        }
+    }
+}
+/**
+ * A fingerprint of the dependency trees a checkout links into: each source's
+ * package set (top-level and `@scope` entry names; tool caches excluded) and
+ * npm's hidden lockfile (`.package-lock.json`, rewritten by every install). Equal
+ * before and after a run => no install moved the linked packages mid-run.
+ */
+function dependencyFingerprint(sources) {
+    return JSON.stringify(sources.map((source) => {
+        const names = entriesOf(source).filter((name) => !name.startsWith('.')).sort();
+        const scoped = names.filter((name) => name.startsWith('@')).map((name) => [name, entriesOf(join(source, name)).sort()]);
+        let lockfile = 'none';
+        try {
+            const stat = statSync(join(source, '.package-lock.json'));
+            lockfile = `${stat.mtimeMs}:${stat.size}`;
+        }
+        catch { /* no hidden lockfile */ }
+        return [source, names, scoped, lockfile];
+    }));
+}
+/**
+ * Rebuild the focus worktree's dependency resolution inside the checkout (module
+ * doc). Returns every source node_modules the checkout links into.
+ */
+function mirrorDependencyDirs(focusWorktreePath, checkoutPath, runGit) {
+    const plans = listMirroredDirs(focusWorktreePath, runGit)
+        .filter((rel) => rel !== DEPENDENCY_DIR)
+        .map((rel) => ({ rel, sources: [join(focusWorktreePath, rel)] }));
+    const ownRoot = join(focusWorktreePath, DEPENDENCY_DIR);
+    const rootSources = [...(existsSync(ownRoot) ? [ownRoot] : []), ...ancestorNodeModules(dirname(focusWorktreePath))];
+    if (rootSources.length > 0)
+        plans.push({ rel: DEPENDENCY_DIR, sources: rootSources });
+    for (const plan of plans)
+        buildMergedModulesDir(plan.sources, join(checkoutPath, plan.rel));
+    return plans.flatMap((plan) => plan.sources);
+}
+/**
+ * Remove a checkout directory and its registration. rmSync removes by lstat, so
+ * a linked package entry is unlinked, never followed into its target; `git
+ * worktree prune` then drops the registration of the now-missing directory.
+ */
+function removeCheckout(checkoutPath, focusWorktreePath, runGit) {
+    try {
+        rmSync(checkoutPath, { recursive: true, force: true });
+    }
+    catch (err) {
+        log.warn(`verify checkout removal failed at ${checkoutPath}: ${err.message}`);
+    }
+    runGit(['worktree', 'prune'], focusWorktreePath);
+}
+/**
+ * Create a detached checkout of the focus worktree's HEAD for one verify run.
+ * `checkoutKey` names the checkout directory (the delivery id -- a delivery
+ * never verifies twice at once, so concurrent verifies never share a path). A
+ * leftover from a crashed run at the same path is removed first. Returns null
+ * when HEAD cannot be read or the checkout cannot be created.
+ */
+export function createVerifyCheckout(focusWorktreePath, checkoutKey, deps) {
+    const runGit = deps.runGit;
+    const head = runGit(['rev-parse', 'HEAD'], focusWorktreePath);
+    const sha = head.success ? head.output.trim() : '';
+    if (sha.length === 0) {
+        log.warn(`verify checkout: cannot read HEAD of ${focusWorktreePath}: ${head.error ?? 'empty output'}`);
+        return null;
+    }
+    const root = deps.checkoutRoot;
+    const checkoutPath = resolve(root, checkoutKey.replace(/[^a-zA-Z0-9._-]/g, '_'));
+    let sources;
+    try {
+        mkdirSync(root, { recursive: true });
+        if (existsSync(checkoutPath))
+            removeCheckout(checkoutPath, focusWorktreePath, runGit);
+        const added = runGit(['worktree', 'add', '--detach', checkoutPath, sha], focusWorktreePath);
+        if (!added.success) {
+            log.warn(`verify checkout: worktree add at ${sha.slice(0, 8)} failed: ${added.error ?? added.output}`);
+            removeCheckout(checkoutPath, focusWorktreePath, runGit);
+            return null;
+        }
+        sources = mirrorDependencyDirs(focusWorktreePath, checkoutPath, runGit);
+    }
+    catch (err) {
+        log.warn(`verify checkout: setup failed at ${checkoutPath}: ${err.message}`);
+        removeCheckout(checkoutPath, focusWorktreePath, runGit);
+        return null;
+    }
+    const fingerprint = dependencyFingerprint(sources);
+    let disposed = false;
+    return {
+        path: checkoutPath,
+        sha,
+        dependenciesMoved: () => dependencyFingerprint(sources) !== fingerprint,
+        dispose: () => {
+            if (disposed)
+                return;
+            disposed = true;
+            removeCheckout(checkoutPath, focusWorktreePath, runGit);
+        },
+    };
+}
+/**
+ * A detached verify checkout of `sha` -- a commit already chosen (the one a run
+ * judged, or the focus base) -- rather than of whatever the focus worktree's HEAD
+ * is now (a team may have moved it). createVerifyCheckout takes its sha from the
+ * focus worktree's `rev-parse HEAD`; that one read is answered with `sha` and
+ * every other git call passes through, so the checkout is made and its
+ * dependencies mirrored exactly as a HEAD checkout's are. Callers still compare
+ * the returned sha to the one they asked for.
+ */
+export function createPinnedVerifyCheckout(focusWorktreePath, checkoutKey, sha, deps) {
+    return createVerifyCheckout(focusWorktreePath, checkoutKey, {
+        ...deps,
+        runGit: (args, cwd) => (cwd === focusWorktreePath && args.length === 2 && args[0] === 'rev-parse' && args[1] === 'HEAD'
+            ? { success: true, output: sha }
+            : deps.runGit(args, cwd)),
+    });
+}
+/**
+ * The dispatch-time resolver (module doc): env > the candidate's operator
+ * block > the manifest at `runPath` > the repoPath manifest, a fallback that is
+ * recorded on the result and warned naming the delivery and both paths. `env` and
+ * `readManifest` are bound at the composition root (process.env and the real
+ * manifest reader), so tests never touch process.env.
+ */
+export function buildRunVerificationConfigResolver(env, readManifest) {
+    return (v, runPath) => {
+        const applied = resolveAppliedVerificationConfig(v.defaultOnSource ?? {}, runPath, env, readManifest);
+        if (applied.manifestFallback) {
+            log.warn(`verify config: delivery ${v.deliveryId}: the verified checkout ships no manifest at `
+                + `${applied.verifiedManifestPath}; applying the product repoPath manifest at ${applied.manifestPath} `
+                + 'as a recorded fallback');
+        }
+        return applied;
+    };
+}
+/**
+ * A row's own command + timeout as a run applies them (the strategy default when
+ * no timeout is set). The timeout's source is the label stamped on the row at
+ * synthesis (a default-on candidate carries the tick's resolved layer); a row
+ * with no stamp is an explicit-method row, whose timeout is its own config -- or
+ * the typed default when it sets none.
+ */
+function appliedFromRow(cfg) {
+    const command = cfg?.command;
+    if (typeof command !== 'string' || !cfg)
+        return undefined;
+    const timeoutMs = typeof cfg.timeoutMs === 'number' && cfg.timeoutMs > 0 ? cfg.timeoutMs : DEFAULT_VERIFICATION_TIMEOUT_MS;
+    const timeoutSource = typeof cfg.timeoutSource === 'string'
+        ? cfg.timeoutSource
+        : formatVerifyConfigSource(timeoutMs === cfg.timeoutMs ? { layer: 'delivery' } : { layer: 'default' });
+    return { command, timeoutMs, timeoutSource };
+}
+/**
+ * Choose what a checkout run applies. A DEFAULT-ON candidate is re-resolved from
+ * the checkout's own manifest; an explicit-method row applies the config it
+ * carries, unchanged. A resolution that throws (a malformed manifest in the
+ * verified code) yields the rationale instead, logged at ERROR: no fallback.
+ * The re-resolved run config carries the timeout's source label so a timeout
+ * rationale can name the layer it was read from.
+ */
+function chooseCheckoutRunConfig(deps, v, checkoutPath) {
+    if (!v.defaultOnSource)
+        return { runConfig: v.verificationConfig, appliedConfig: appliedFromRow(v.verificationConfig) };
+    try {
+        const appliedConfig = deps.resolveRunVerificationConfig(v, checkoutPath);
+        const { command, timeoutMs, timeoutSource } = appliedConfig;
+        return { runConfig: { command, timeoutMs, timeoutSource }, appliedConfig };
+    }
+    catch (err) {
+        const unresolvable = `verify config unresolvable from the verified checkout (manifest ${resolveVerifyManifestPath(checkoutPath)}): `
+            + `${err.message} -- the command was not run, and no other checkout's manifest is substituted`;
+        log.error(`verify config: delivery ${v.deliveryId}: ${unresolvable}`);
+        return { unresolvable };
+    }
+}
+/**
+ * The deterministic strategy: resolve the verify boundary env, then run the
+ * configured command against a detached checkout of the focus HEAD (holding the
+ * FOCUS worktree's interlock for the judged delivery), stamping the verdict with
+ * the sha it judged and the config it applied -- for a default-on candidate,
+ * re-resolved from the checkout itself (module doc). A verdict rendered while an
+ * install moved the linked dependencies is discarded (pending, retried). A
+ * delivery with no focus worktree runs in place, as before, on the config it
+ * carries: no team works in the product repo path the fallback cwd names, and
+ * that is the path the tick resolved the config against.
+ */
+export async function runDeterministicAtFixedCommit(deps, v) {
+    // Hoist the boundary resolution BEFORE the run so the command's targeted-test
+    // selector diffs against the delivery's recorded pre-merge boundary.
+    const extraEnv = await resolveVerifyBoundaryEnv(deps, v);
+    const logContext = { deliveryId: v.deliveryId, startedAtMs: Date.now() };
+    const focusWorktreePath = deps.resolveFocusWorktreePath(v);
+    if (focusWorktreePath === null) {
+        const cwd = deps.resolveVerificationCwd(v);
+        const appliedConfig = appliedFromRow(v.verificationConfig);
+        const inPlace = await deps.runDeterministic(v.verificationConfig, cwd, logContext, extraEnv);
+        return appliedConfig ? { ...inPlace, appliedConfig } : inPlace;
+    }
+    const provisioning = deps.readWorktreeProvisioning(focusWorktreePath);
+    if (!provisioning.ready) {
+        return {
+            outcome: 'pending',
+            rationale: `verify checkout unavailable: the focus worktree is not provisioned (${provisioning.state}: `
+                + `${provisioning.reason}); the verify is not run against missing dependencies -- retried next tick`,
+            checkoutUnavailable: true,
+        };
+    }
+    const checkout = deps.createVerifyCheckout(focusWorktreePath, v.deliveryId);
+    if (!checkout) {
+        return {
+            outcome: 'pending',
+            rationale: 'verify checkout unavailable: no detached checkout of the focus HEAD could be made; '
+                + 'the verify is not run in the live focus worktree (a team may be moving it) -- retried next tick',
+            checkoutUnavailable: true,
+        };
+    }
+    // From here the run judges a known commit: a routing wait keyed on another commit no longer waits on it.
+    noteGateRunCommit(v.deliveryId, checkout.sha);
+    try {
+        const chosen = chooseCheckoutRunConfig(deps, v, checkout.path);
+        if ('unresolvable' in chosen) {
+            return { outcome: 'failed', rationale: chosen.unresolvable, verifiedSha: checkout.sha, configUnresolved: true };
+        }
+        const result = await deps.runDeterministic(chosen.runConfig, checkout.path, logContext, extraEnv, { worktreePath: focusWorktreePath, deliveryId: v.deliveryId });
+        if (checkout.dependenciesMoved()) {
+            log.warn(`verify checkout: dependencies moved during the run for delivery ${v.deliveryId}; verdict discarded`);
+            return {
+                outcome: 'pending',
+                rationale: 'verify discarded: a dependency install moved the node_modules trees the checkout links into '
+                    + 'while the run was in flight, so the verdict judged no fixed environment -- retried next tick',
+                checkoutUnavailable: true,
+            };
+        }
+        return {
+            ...result,
+            verifiedSha: checkout.sha,
+            ...(chosen.appliedConfig ? { appliedConfig: chosen.appliedConfig } : {}),
+        };
+    }
+    finally {
+        checkout.dispose();
+    }
+}
+//# sourceMappingURL=verification-checkout.js.map

package/dist/verify/deterministic-gate/verification-checkout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-checkout.js","sourceRoot":"","sources":["../../../src/verify/deterministic-gate/verification-checkout.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,yEAAyE;AACzE,6EAA6E;AAC7E,iFAAiF;AACjF,yFAAyF;AACzF,mFAAmF;AACnF,uEAAuE;AACvE,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAC5F,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAE7E,OAAO,EAAE,+BAA+B,EAAuB,MAAM,iCAAiC,CAAC;AAEvG,OAAO,EACL,wBAAwB,EACxB,gCAAgC,GAEjC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,yBAAyB,EAA6B,MAAM,yCAAyC,CAAC;AAC/G,OAAO,EAAE,wBAAwB,EAA8B,MAAM,gCAAgC,CAAC;AACtG,OAAO,EAAE,iBAAiB,EAAE,MAAM,uCAAuC,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAwBrD,8EAA8E;AAC9E,MAAM,cAAc,GAAG,cAAc,CAAC;AAEtC,uFAAuF;AACvF,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAW,EAAE,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,uBAAuB,CAAC,CAAC;AAE1G;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,iBAAyB,EAAE,MAAc;IACxE,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,oBAAoB,EAAE,aAAa,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACrH,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAC/B,OAAO,MAAM,CAAC,MAAM;SACjB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;SAC7C,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;WAC1B,QAAQ,CAAC,GAAG,CAAC,KAAK,cAAc;WAChC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,kFAAkF;AAClF,SAAS,mBAAmB,CAAC,GAAW;IACtC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3B,SAAS,CAAC;QACR,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QAChD,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACrC,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,OAA0B,EAAE,EAAU,EAAE,KAAK,GAAG,CAAC;IAC9E,SAAS,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC7B,MAAM,MAAM,GAAG,KAAK,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YACxE,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM;gBAAE,SAAS;YAC7D,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,IAAI,MAAM,EAAE,CAAC;gBACX,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACtF,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,OAA0B;IACvD,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/E,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACxH,IAAI,QAAQ,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC;YAC1D,QAAQ,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC,CAAC,wBAAwB,CAAC,CAAC;QACpC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,iBAAyB,EAAE,YAAoB,EAAE,MAAc;IAC3F,MAAM,KAAK,GAAG,gBAAgB,CAAC,iBAAiB,EAAE,MAAM,CAAC;SACtD,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,cAAc,CAAC;SACvC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC;IACxD,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,mBAAmB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACpH,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IACtF,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,qBAAqB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5F,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,YAAoB,EAAE,iBAAyB,EAAE,MAAc;IACrF,IAAI,CAAC;QACH,MAAM,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,qCAAqC,YAAY,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,MAAM,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,iBAAiB,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,iBAAyB,EACzB,WAAmB,EACnB,IAAwB;IAExB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,GAAG,CAAC,IAAI,CAAC,wCAAwC,iBAAiB,KAAK,IAAI,CAAC,KAAK,IAAI,cAAc,EAAE,CAAC,CAAC;QACvG,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC;IAC/B,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,CAAC;IACjF,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,IAAI,UAAU,CAAC,YAAY,CAAC;YAAE,cAAc,CAAC,YAAY,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAC5F,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,GAAG,CAAC,IAAI,CAAC,oCAAoC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACvG,cAAc,CAAC,YAAY,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC;YACxD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,GAAG,oBAAoB,CAAC,iBAAiB,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,oCAAoC,YAAY,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACxF,cAAc,CAAC,YAAY,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,GAAG;QACH,iBAAiB,EAAE,GAAG,EAAE,CAAC,qBAAqB,CAAC,OAAO,CAAC,KAAK,WAAW;QACvE,OAAO,EAAE,GAAG,EAAE;YACZ,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,cAAc,CAAC,YAAY,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC;QAC1D,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B,CACxC,iBAAyB,EACzB,WAAmB,EACnB,GAAW,EACX,IAAwB;IAExB,OAAO,oBAAoB,CAAC,iBAAiB,EAAE,WAAW,EAAE;QAC1D,GAAG,IAAI;QACP,MAAM,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,iBAAiB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM;YACrH,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE;YAChC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;KAC5B,CAAC,CAAC;AACL,CAAC;AAgBD;;;;;;GAMG;AACH,MAAM,UAAU,kCAAkC,CAChD,GAAsB,EACtB,YAAkC;IAElC,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE;QACpB,MAAM,OAAO,GAAG,gCAAgC,CAAC,CAAC,CAAC,eAAe,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;QACtG,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC7B,GAAG,CAAC,IAAI,CACN,2BAA2B,CAAC,CAAC,UAAU,+CAA+C;kBACpF,GAAG,OAAO,CAAC,oBAAoB,+CAA+C,OAAO,CAAC,YAAY,GAAG;kBACrG,wBAAwB,CAC3B,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,GAAmC;IACzD,MAAM,OAAO,GAAG,GAAG,EAAE,OAAO,CAAC;IAC7B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,+BAA+B,CAAC;IAC3H,MAAM,aAAa,GAAG,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ;QACzD,CAAC,CAAC,GAAG,CAAC,aAAa;QACnB,CAAC,CAAC,wBAAwB,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACzG,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;AAC/C,CAAC;AAOD;;;;;;;GAOG;AACH,SAAS,uBAAuB,CAAC,IAA2B,EAAE,CAAsB,EAAE,YAAoB;IACxG,IAAI,CAAC,CAAC,CAAC,eAAe;QAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,kBAAkB,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC;IACxH,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,IAAI,CAAC,4BAA4B,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;QACzE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,aAAa,CAAC;QAC5D,OAAO,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,aAAa,EAAE,CAAC;IAC7E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,YAAY,GAAG,mEAAmE,yBAAyB,CAAC,YAAY,CAAC,KAAK;cAChI,GAAI,GAAa,CAAC,OAAO,8EAA8E,CAAC;QAC5G,GAAG,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,UAAU,KAAK,YAAY,EAAE,CAAC,CAAC;QACtE,OAAO,EAAE,YAAY,EAAE,CAAC;IAC1B,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,IAA2B,EAC3B,CAAsB;IAEtB,8EAA8E;IAC9E,qEAAqE;IACrE,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACzE,MAAM,iBAAiB,GAAG,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,iBAAiB,KAAK,IAAI,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,aAAa,GAAG,cAAc,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,kBAAkB,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC7F,OAAO,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IACjE,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;IACtE,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QACxB,OAAO;YACL,OAAO,EAAE,SAAS;YAClB,SAAS,EAAE,uEAAuE,YAAY,CAAC,KAAK,IAAI;kBACpG,GAAG,YAAY,CAAC,MAAM,4EAA4E;YACtG,mBAAmB,EAAE,IAAI;SAC1B,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,oBAAoB,CAAC,iBAAiB,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;IAC5E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,OAAO,EAAE,SAAS;YAClB,SAAS,EAAE,qFAAqF;kBAC5F,iGAAiG;YACrG,mBAAmB,EAAE,IAAI;SAC1B,CAAC;IACJ,CAAC;IACD,yGAAyG;IACzG,iBAAiB,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,cAAc,IAAI,MAAM,EAAE,CAAC;YAC7B,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,YAAY,EAAE,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;QAClH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CACxC,MAAM,CAAC,SAAS,EAChB,QAAQ,CAAC,IAAI,EACb,UAAU,EACV,QAAQ,EACR,EAAE,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAC9D,CAAC;QACF,IAAI,QAAQ,CAAC,iBAAiB,EAAE,EAAE,CAAC;YACjC,GAAG,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC,UAAU,qBAAqB,CAAC,CAAC;YAC/G,OAAO;gBACL,OAAO,EAAE,SAAS;gBAClB,SAAS,EAAE,8FAA8F;sBACrG,8FAA8F;gBAClG,mBAAmB,EAAE,IAAI;aAC1B,CAAC;QACJ,CAAC;QACD,OAAO;YACL,GAAG,MAAM;YACT,WAAW,EAAE,QAAQ,CAAC,GAAG;YACzB,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/verify/deterministic-gate/verification-deterministic.d.ts

@@ -0,0 +1,193 @@
+/**
+ * Deterministic verification strategy: run a shell command and map exit 0 to a
+ * pass, streaming the full stdout+stderr to a persistent log file under the
+ * daemon state dir.
+ *
+ * verification-engine.ts owns dispatch + the pass-path side effects. The
+ * StrategyResult shape lives here because this is the strategy that produces
+ * every field on it; verification-engine imports the type back.
+ *
+ * History: docs/daemon/history-verify.md (verify/deterministic-gate/verification-deterministic.ts).
+ *
+ * @module verification-deterministic
+ */
+import type { ModelUnavailableDetail } from '../../queries/delivery-gate-state/verify-own-holds.js';
+import type { VerificationParseFailure } from '../../queries/delivery-gate-state/delivery-gate-state.js';
+import type { VerificationOutcome } from '../../queries/verification/verification.js';
+/**
+ * Default deterministic timeout when the config sets none: 30 minutes.
+ *
+ * This is a generous SAFETY CEILING, not a sizing of the expected gate. As of
+ * the "per-delivery gate runs the whole repo" focus, the per-delivery gate
+ * (verify:gate) is the CHEAP dev-loop check -- linters + both ratchets +
+ * typecheck + the TARGETED tests for the changed files, low single-digit minutes
+ * -- and the whole-repo suite is enforced one altitude up, by the CI ci job on
+ * every push to integration and main (no daemon code runs it). The 30-min
+ * ceiling still earns its place: telora.verify.json sets an
+ * explicit 30-min timeoutMs, and a focus MAY point the manifest at a heavier
+ * command whose honest runtime approaches it.
+ *
+ * Matches DEFAULT_BASELINE_TIMEOUT_MS (verification-baseline.ts) on purpose: the
+ * HEAD run and its baseline run the SAME configured gate, so an asymmetric HEAD
+ * default silently SIGKILLs a long gate that set no explicit timeoutMs, and the
+ * killed-mid-run output parses to zero failing ids -- laundering a blind kill
+ * into a differential pass. An explicit config.timeoutMs override stays
+ * authoritative.
+ */
+export declare const DEFAULT_VERIFICATION_TIMEOUT_MS: number;
+export interface StrategyResult {
+    outcome: VerificationOutcome;
+    rationale?: string;
+    /**
+     * The reconciliation could not RUN (the model was not reached), so this
+     * 'pending' is an awaited judge, not a rendered verdict: the default-on run
+     * guard drops its mark (verify/run-selection/default-on-guards.ts noteDefaultOnResult) so
+     * the next tick re-selects the delivery at the same commit.
+     */
+    modelUnavailable?: boolean;
+    /**
+     * The awaited-judge hold a STRATEGY names itself (ai_inspection's input too
+     * large for the model), written like a reconciliation's
+     * (verify/outcome-routing/verification-model-unavailable-hold.ts).
+     */
+    modelUnavailableHold?: ModelUnavailableDetail;
+    exitCode?: number | null;
+    stdoutTail?: string;
+    stderrTail?: string;
+    /**
+     * Absolute path to the persistent full-log file for a deterministic run
+     * (full stdout+stderr, not just the 4000-char tails). Written under the
+     * daemon state dir. Undefined when no log sink was supplied (e.g. a strategy
+     * that runs no shell command). Carried on the result so the feedback loop
+     * (gate_state) can point at it.
+     */
+    logPath?: string;
+    /** Delivery diff against integration, when the strategy resolved one (ai_inspection). */
+    deliveryDiff?: string;
+    /** Baseline-diff attribution: NEW failures the focus introduced (these gate). */
+    newFailures?: string[];
+    /** Baseline-diff attribution: pre-existing base failures (recorded, non-blocking). */
+    preExisting?: string[];
+    /** A failed run whose log parsed to zero failing-test ids (verification-failure-parser.ts describeParseFailure). */
+    parseFailure?: VerificationParseFailure;
+    /**
+     * Stage attribution (verify/attribution/verification-attribution.ts): the gate stage whose
+     * red is charged to the delivery, when the outcome is 'failed' on a stage the
+     * run's log identifies.
+     */
+    failedStage?: string;
+    /**
+     * Stage attribution: gate stages whose red also fails the same way on the focus
+     * base -- recorded, non-blocking. The stages after each were still run and
+     * judged at the same commit before any pass.
+     */
+    preExistingStages?: string[];
+    /**
+     * True when the run was KILLED by the deterministic timeout (SIGKILL on the
+     * timer), as opposed to exiting on its own. A timed-out run died before it
+     * could finish, so its output parses to zero failing ids -- the caller must
+     * route it to the bounded instrument-fault re-work path, NEVER let the
+     * zero-parse output be laundered into a differential pass.
+     */
+    timedOut?: boolean;
+    /**
+     * Set when a run the timeout ended was judged from what it had ALREADY
+     * rendered (verify/deterministic-gate/timed-out-rendered-verdict.ts): 'passed' when its log
+     * carries the gate's completion sentinel with every stage passed, 'failed'
+     * when it names failing tests. Such a run is no longer `timedOut` -- it
+     * rendered a verdict, and is recorded and fed back like any other.
+     */
+    renderedBeforeKill?: 'passed' | 'failed';
+    /**
+     * The test runner's own totals line(s), found in a TIMED-OUT run's output
+     * (verify/deterministic-gate/verification-timeout-fault.ts). Present only when the runner got as
+     * far as printing them: the kill then landed after that runner finished (in
+     * teardown, a lingering handle, or a later stage of the command), not mid-suite,
+     * and the descriptions say so. Descriptive only -- the run stays timedOut and
+     * failed; a printed summary is never a pass verdict.
+     */
+    runnerSummary?: string[];
+    /**
+     * The commit the run judged: the focus HEAD sha of the detached checkout the
+     * command ran in (verify/deterministic-gate/verification-checkout.ts). Undefined for an in-place
+     * run (no focus worktree). Keys the default-on HEAD re-verify guard.
+     */
+    verifiedSha?: string;
+    /**
+     * True when no fixed-commit verdict exists (outcome 'pending'): no detached
+     * checkout of the focus HEAD could be made, so the command was NOT run, or a
+     * dependency install moved the checkout's linked packages mid-run, so its
+     * verdict was discarded. The tick retries next pass.
+     */
+    checkoutUnavailable?: boolean;
+    /**
+     * The command + timeout the run applied, and where they were read. A default-on
+     * run on a detached checkout re-resolves both from the telora.verify.json IN THE
+     * CHECKOUT (the code under verification), so a value committed on the verified
+     * branch applies to its next run; `manifestFallback` records that the checkout
+     * shipped none and the product repoPath manifest was used. An explicit-method
+     * row carries its row values; an in-place run carries the tick-resolved values.
+     * Set by verify/deterministic-gate/verification-checkout.ts; the baseline run sizes itself from it.
+     */
+    appliedConfig?: {
+        command: string;
+        timeoutMs: number;
+        /**
+         * Where `timeoutMs` was read, as a formatVerifyConfigSource label (an env var,
+         * daemon.json, a manifest path or its recorded fallback, the typed default, or
+         * the delivery's own config), so a timed-out run can say which layer to change.
+         */
+        timeoutSource: string;
+        /** The manifest the values were read from, when one was read. */
+        manifestPath?: string;
+        /** True when the verified code shipped no manifest and the repoPath manifest was applied. */
+        manifestFallback?: boolean;
+        /** Where the verified code's manifest was looked for (read first). */
+        verifiedManifestPath?: string;
+    };
+    /**
+     * True when the command was NOT run because its config could not be resolved
+     * from the verified code (a malformed manifest there). No run output exists to
+     * attribute, so baseline attribution is skipped and the rationale -- naming the
+     * manifest and the problem -- stands.
+     */
+    configUnresolved?: boolean;
+}
+/**
+ * The worktree whose verify interlock a run holds, and the delivery it judges.
+ * Omitted for an in-place run, which holds its own cwd and names no delivery.
+ */
+export interface VerifyHoldTarget {
+    worktreePath: string;
+    deliveryId?: string;
+}
+/**
+ * Context for persisting a deterministic run's full log to a file. When
+ * supplied, runDeterministicStrategy streams the complete stdout+stderr to
+ * `<stateDir>/verification/verification-<deliveryId>-<startedAtMs>.log` and
+ * returns the absolute path on the result. Optional so unit tests that only
+ * assert exit-code handling can omit it (no file written).
+ */
+export interface DeterministicLogContext {
+    deliveryId: string;
+    /** Millisecond timestamp for a stable, unique filename (injectable for tests). */
+    startedAtMs: number;
+    /** Override the log directory (defaults to <stateDir>/verification). */
+    logDir?: string;
+}
+/**
+ * Run a configured shell command in the focus's worktree (or the product
+ * repo path as fallback). Pass = exit 0.
+ *
+ * `extraEnv` is merged over the inherited process env into the spawned command.
+ * It carries the verify BOUNDARY the daemon resolved before the run
+ * (TELORA_VERIFY_BASE_REF + TELORA_VERIFY_RECORDED_COMMIT_COUNT): on a
+ * merged-back delivery the command's targeted-test selector must diff against
+ * the delivery's recorded pre-merge boundary, not merge-base(HEAD, integration)
+ * (which equals HEAD once the branch merged back, selecting nothing and passing
+ * as a no-op). Empty / undefined => the process env is inherited unchanged (the
+ * still-on-branch delivery path, where the selector's merge-base auto-derivation
+ * is correct).
+ */
+export declare function runDeterministicStrategy(config: Record<string, unknown> | null, cwd: string, logContext?: DeterministicLogContext, extraEnv?: Record<string, string>, hold?: VerifyHoldTarget): Promise<StrategyResult>;
+//# sourceMappingURL=verification-deterministic.d.ts.map

package/dist/verify/deterministic-gate/verification-deterministic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-deterministic.d.ts","sourceRoot":"","sources":["../../../src/verify/deterministic-gate/verification-deterministic.ts"],"names":[],"mappings":"AAkBA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uDAAuD,CAAC;AACpG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0DAA0D,CAAC;AAMzG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AAQtF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,+BAA+B,QAAiB,CAAC;AAE9D,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,mBAAmB,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yFAAyF;IACzF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,sFAAsF;IACtF,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,oHAAoH;IACpH,YAAY,CAAC,EAAE,wBAAwB,CAAC;IACxC;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACzC;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB;;;;WAIG;QACH,aAAa,EAAE,MAAM,CAAC;QACtB,iEAAiE;QACjE,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,6FAA6F;QAC7F,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAC3B,sEAAsE;QACtE,oBAAoB,CAAC,EAAE,MAAM,CAAC;KAC/B,CAAC;IACF;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,WAAW,EAAE,MAAM,CAAC;IACpB,wEAAwE;IACxE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAiBD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACtC,GAAG,EAAE,MAAM,EACX,UAAU,CAAC,EAAE,uBAAuB,EACpC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACjC,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,cAAc,CAAC,CA8HzB"}