@telora/daemon 0.22.245 → 0.22.289

package/dist/verify/deterministic-gate/verification-gate-stages.d.ts

@@ -0,0 +1,111 @@
+/**
+ * Per-stage outcomes of an npm `&&`-chain gate run, read from its log.
+ *
+ * Parsed failing-test ids alone cannot attribute a red in a stage that runs no
+ * tests (a lint, a ratchet, a typecheck): it parses to zero ids and cannot be
+ * told apart from a crash -- even when the very same stage fails on the focus
+ * base. Attribution needs to know WHICH
+ * stage failed, which stages passed before it, and which never ran after it. This
+ * module answers that from the log alone, so it works for any product's gate and
+ * hard-codes no stage names.
+ *
+ * What the log carries. npm prints, for every script it starts,
+ *   > <package>@<version> <script>
+ *   > <the script's command line>
+ * and nothing when a script ends. A gate command `npm run <gate>` therefore opens
+ * with its own header, whose command line is the chain. Every `npm run <name>`
+ * segment of a chain whose own command line is again a pure chain is DESCENDED
+ * into (lint:all is itself a chain of linters), so a red is located at the
+ * innermost chain step, not at the whole wrapper stage: that is what lets the
+ * steps after it be run. A segment whose command is anything else is ATOMIC.
+ * A trailing `echo TELORA_GATE_COMPLETE:<name>` segment is the completion
+ * sentinel, not a stage.
+ *
+ * Walking the headers in order against a stack of chains: a header that starts
+ * the next expected segment of some chain on the stack means every stage above
+ * that chain finished green (`&&` moved on). A header nothing expects is the
+ * nested output of an atomic stage (check:types-drift spawns an npm script of its
+ * own). For a failed run the last started stage is the red; the segments not yet
+ * started, innermost chain first, are the CONTINUATION -- re-runnable as-is from
+ * the gate's cwd.
+ *
+ * Fail closed. Any shape this model cannot vouch for yields null, and a null
+ * outcome demotes nothing (the caller falls back to failing-test ids alone):
+ * a gate command other than a bare `npm run <gate>`, a chain segment that is not
+ * `npm run <name>` (optionally `--prefix <dir>`), a header that contradicts the
+ * chain, a finished run whose sentinel is missing, a failed run that printed its
+ * sentinel, or a run with no exit status (killed).
+ *
+ * Known imprecision, both sides alike: npm prints no end marker, so when a stage
+ * passes and the NEXT one fails before printing a header (a missing script), the
+ * earlier stage is read as the red. A red read one stage early is still followed
+ * by a continuation that re-runs the real failing step at the same commit, so it
+ * is re-exposed rather than hidden. Pure -- no I/O.
+ *
+ * History: docs/daemon/history-verify.md (verify/deterministic-gate/verification-gate-stages.ts).
+ *
+ * @module verify/deterministic-gate/verification-gate-stages
+ */
+/** A step of a gate chain, re-runnable on its own from the gate's cwd. */
+export interface GateSegment {
+    /** The segment's text in the chain (e.g. `npm run lint --prefix packages/daemon`). */
+    text: string;
+    /** Stage label: the script (with its `--prefix`), nested under its chain's label by ` > `. */
+    label: string;
+    /** The npm script the segment runs; null for the completion sentinel. */
+    script: string | null;
+    /** The `--prefix` package dir, when the segment runs another package's script. */
+    prefix: string | null;
+    /** The sentinel line the segment echoes; null for a script segment. */
+    sentinel: string | null;
+}
+/** What a gate run did, stage by stage (the part a baseline cache entry records). */
+export interface GateStageOutcome {
+    /** Labels of the stages that ran and passed, in the order they finished. */
+    ran: string[];
+    /** Label of the stage that failed; null when the whole chain passed. */
+    failedStage: string | null;
+    /** Labels of the stages that never started because an earlier one failed. */
+    notRun: string[];
+}
+/** A parsed run: its outcome plus what re-running the never-run stages needs. */
+export interface ParsedGateRun extends GateStageOutcome {
+    /** The gate's own package, as npm printed it (keys header matching in a continuation). */
+    package: string;
+    /** The never-started segments in chain order, innermost chain first (sentinel included). */
+    continuation: GateSegment[];
+    /**
+     * The failed stage's own log segment (ANSI-stripped lines after its header, to
+     * the end of the log); [] for a passing run. Its diagnostics are what tell two
+     * reds of the same stage apart (verify/attribution/verification-diagnostics.ts).
+     */
+    failedStageOutput: string[];
+}
+/**
+ * Backstop on how many red stages one gate is walked past (a continuation per
+ * red, on either side). Each round's red is strictly later in the gate's finite
+ * chain, so a real log settles long before this; it only bounds a log that
+ * would not.
+ */
+export declare const MAX_STAGE_ROUNDS = 64;
+/**
+ * Split a command line into chain segments, or null when it is not a pure chain
+ * of `npm run <name>` steps (a sentinel echo is allowed as the last step).
+ */
+export declare function parseChainSegments(command: string, parentLabel: string): GateSegment[] | null;
+/**
+ * Stage outcomes of a run of `gateCommand` (a bare `npm run <gate>`), or null
+ * when the log does not vouch for them (module doc).
+ */
+export declare function parseGateRunStages(log: string, exitCode: number | null | undefined, gateCommand: string): ParsedGateRun | null;
+/**
+ * Stage outcomes of a CONTINUATION run: `segments` (a parsed run's continuation)
+ * joined by ` && ` and run directly, so no gate header opens the log. Labels stay
+ * those of the original gate, so they compare against the base's outcome.
+ */
+export declare function parseContinuationStages(log: string, exitCode: number | null | undefined, segments: readonly GateSegment[], gatePackage: string): ParsedGateRun | null;
+/** The command a continuation runs: the segments' own text, chained as the gate chained them. */
+export declare function continuationCommand(segments: readonly GateSegment[]): string;
+/** True when a parsed run's continuation still has a stage to run. */
+export declare function hasStageToContinue(run: Pick<ParsedGateRun, 'continuation'>): boolean;
+//# sourceMappingURL=verification-gate-stages.d.ts.map

package/dist/verify/deterministic-gate/verification-gate-stages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-gate-stages.d.ts","sourceRoot":"","sources":["../../../src/verify/deterministic-gate/verification-gate-stages.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAEH,0EAA0E;AAC1E,MAAM,WAAW,WAAW;IAC1B,sFAAsF;IACtF,IAAI,EAAE,MAAM,CAAC;IACb,8FAA8F;IAC9F,KAAK,EAAE,MAAM,CAAC;IACd,yEAAyE;IACzE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,kFAAkF;IAClF,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,uEAAuE;IACvE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,qFAAqF;AACrF,MAAM,WAAW,gBAAgB;IAC/B,4EAA4E;IAC5E,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,wEAAwE;IACxE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,6EAA6E;IAC7E,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,iFAAiF;AACjF,MAAM,WAAW,aAAc,SAAQ,gBAAgB;IACrD,0FAA0F;IAC1F,OAAO,EAAE,MAAM,CAAC;IAChB,4FAA4F;IAC5F,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B;;;;OAIG;IACH,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAWnC;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,WAAW,EAAE,GAAG,IAAI,CAoB7F;AAsHD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,WAAW,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAU9H;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACnC,QAAQ,EAAE,SAAS,WAAW,EAAE,EAChC,WAAW,EAAE,MAAM,GAClB,aAAa,GAAG,IAAI,CAItB;AAED,iGAAiG;AACjG,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,SAAS,WAAW,EAAE,GAAG,MAAM,CAE5E;AAED,sEAAsE;AACtE,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,GAAG,OAAO,CAEpF"}

package/dist/verify/deterministic-gate/verification-gate-stages.js

@@ -0,0 +1,179 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/verify/attribution/verification-attribution.test.ts,
+//   packages/daemon/src/verify/deterministic-gate/verification-gate-stages.test.ts
+// PINNED-BY-END
+/**
+ * Backstop on how many red stages one gate is walked past (a continuation per
+ * red, on either side). Each round's red is strictly later in the gate's finite
+ * chain, so a real log settles long before this; it only bounds a log that
+ * would not.
+ */
+export const MAX_STAGE_ROUNDS = 64;
+const ESC = String.fromCharCode(27);
+const ANSI_RE = new RegExp(`${ESC}\\[[0-9;?]*[A-Za-z]`, 'g');
+/** npm's per-script header: "> <name>@<version> <script>" (name may be scoped). */
+const NPM_HEADER_RE = /^> ((?:@[^\s@/]+\/)?[^\s@]+)@\S+ (\S+)$/;
+const SCRIPT_NAME = '[A-Za-z0-9][A-Za-z0-9:._-]*';
+const NPM_RUN_SEGMENT_RE = new RegExp(`^npm run (${SCRIPT_NAME})(?: --prefix ([A-Za-z0-9._/-]+))?$`);
+const SENTINEL_SEGMENT_RE = /^echo (TELORA_GATE_COMPLETE:[A-Za-z0-9._-]+)$/;
+const GATE_COMMAND_RE = new RegExp(`^npm run (${SCRIPT_NAME})$`);
+/**
+ * Split a command line into chain segments, or null when it is not a pure chain
+ * of `npm run <name>` steps (a sentinel echo is allowed as the last step).
+ */
+export function parseChainSegments(command, parentLabel) {
+    const parts = command.trim().split(/\s+&&\s+/);
+    const segments = [];
+    for (const [index, raw] of parts.entries()) {
+        const part = raw.trim();
+        const run = NPM_RUN_SEGMENT_RE.exec(part);
+        if (run) {
+            const prefix = run[2] ?? null;
+            const name = prefix ? `${run[1]} --prefix ${prefix}` : run[1];
+            segments.push({ text: part, label: parentLabel ? `${parentLabel} > ${name}` : name, script: run[1], prefix, sentinel: null });
+            continue;
+        }
+        const sentinel = SENTINEL_SEGMENT_RE.exec(part);
+        if (sentinel && index === parts.length - 1) {
+            segments.push({ text: part, label: sentinel[1], script: null, prefix: null, sentinel: sentinel[1] });
+            continue;
+        }
+        return null;
+    }
+    return segments.some((segment) => segment.script !== null) ? segments : null;
+}
+/** Every npm script header in the log, with the command line printed under it. */
+function readScriptHeaders(lines) {
+    const headers = [];
+    for (let index = 0; index < lines.length; index++) {
+        const header = NPM_HEADER_RE.exec(lines[index]);
+        if (!header)
+            continue;
+        const next = lines[index + 1];
+        const command = next !== undefined && next.startsWith('> ') ? next.slice(2).trim() : null;
+        if (command !== null)
+            index += 1; // the command line is not a header
+        headers.push({ pkg: header[1], script: header[2], command, bodyStart: index + 1 });
+    }
+    return headers;
+}
+const pendingSegments = (frame) => (frame.segments ? frame.segments.slice(frame.next) : []);
+const chainFinished = (frame) => pendingSegments(frame).every((segment) => segment.script === null);
+/**
+ * Does header `h` start `segment` of a chain run by package `chainPkg`? A plain
+ * segment runs the chain's own package; a `--prefix` one runs another.
+ */
+function startsSegment(segment, h, chainPkg) {
+    if (!segment || segment.script !== h.script)
+        return false;
+    return segment.prefix === null ? h.pkg === chainPkg : h.pkg !== chainPkg;
+}
+/** Advance the stack by one header; false when the header contradicts the chains. */
+function applyHeader(stack, ran, h) {
+    let at = stack.length - 1;
+    while (at >= 0 && !startsSegment(stack[at].segments?.[stack[at].next], h, stack[at].pkg))
+        at--;
+    // Nothing expects it: the nested output of an atomic stage, or a contradiction.
+    if (at < 0)
+        return stack[stack.length - 1].segments === null;
+    for (let index = stack.length - 1; index > at; index--) {
+        if (!chainFinished(stack[index]))
+            return false; // a chain moved on past an unfinished one
+        ran.push(stack[index].label);
+    }
+    stack.length = at + 1;
+    const parent = stack[at];
+    const segment = parent.segments[parent.next];
+    parent.next += 1;
+    // Descend only into a same-package chain: a prefixed package's steps are not
+    // re-runnable from the gate's cwd by their bare text.
+    const segments = segment.prefix === null && h.command !== null ? parseChainSegments(h.command, segment.label) : null;
+    stack.push({ label: segment.label, pkg: h.pkg, segments, next: 0, bodyStart: h.bodyStart });
+    return true;
+}
+/** Read the walked stack into an outcome, or null when the exit status contradicts it. */
+function settleRun(lines, stack, ran, exitCode, sentinelSeen) {
+    const pkg = stack[0].pkg;
+    if (exitCode === 0) {
+        if (sentinelSeen === false || !stack.every(chainFinished))
+            return null;
+        const finished = [...ran, ...stack.slice(1).reverse().map((frame) => frame.label)];
+        return { package: pkg, ran: finished, failedStage: null, notRun: [], continuation: [], failedStageOutput: [] };
+    }
+    if (typeof exitCode !== 'number' || sentinelSeen === true)
+        return null;
+    const top = stack[stack.length - 1];
+    let failedStage;
+    let continuation;
+    if (top.segments === null) {
+        failedStage = top.label;
+        continuation = [];
+    }
+    else {
+        // A chain whose next step printed no header: that step could not start.
+        const blocked = top.segments[top.next];
+        if (!blocked || blocked.script === null)
+            return null;
+        failedStage = blocked.label;
+        continuation = top.segments.slice(top.next + 1);
+    }
+    // Then every enclosing chain's untouched steps, innermost first.
+    for (let index = stack.length - 2; index >= 0; index--)
+        continuation.push(...pendingSegments(stack[index]));
+    const notRun = continuation.filter((segment) => segment.script !== null).map((segment) => segment.label);
+    // A blocked chain step printed no header of its own: its output follows the chain's header.
+    return { package: pkg, ran, failedStage, notRun, continuation, failedStageOutput: lines.slice(top.bodyStart) };
+}
+/** Walk the headers against a root chain; the sentinel is the root chain's own. */
+function walkChain(lines, headers, root, exitCode) {
+    const stack = [root];
+    const ran = [];
+    for (const h of headers) {
+        if (!applyHeader(stack, ran, h))
+            return null;
+    }
+    const sentinel = root.segments?.find((segment) => segment.sentinel !== null)?.sentinel ?? null;
+    const sentinelSeen = sentinel === null ? null : lines.some((line) => line.trim() === sentinel);
+    return settleRun(lines, stack, ran, exitCode, sentinelSeen);
+}
+function logLines(log) {
+    return (typeof log === 'string' ? log : '').replace(ANSI_RE, '').split(/\r?\n/).map((line) => line.trimEnd());
+}
+/**
+ * Stage outcomes of a run of `gateCommand` (a bare `npm run <gate>`), or null
+ * when the log does not vouch for them (module doc).
+ */
+export function parseGateRunStages(log, exitCode, gateCommand) {
+    const gate = GATE_COMMAND_RE.exec(gateCommand.trim());
+    if (!gate)
+        return null;
+    const lines = logLines(log);
+    const headers = readScriptHeaders(lines);
+    const root = headers[0];
+    if (!root || root.script !== gate[1] || root.command === null)
+        return null;
+    const segments = parseChainSegments(root.command, '');
+    if (!segments)
+        return null;
+    return walkChain(lines, headers.slice(1), { label: '', pkg: root.pkg, segments, next: 0, bodyStart: root.bodyStart }, exitCode);
+}
+/**
+ * Stage outcomes of a CONTINUATION run: `segments` (a parsed run's continuation)
+ * joined by ` && ` and run directly, so no gate header opens the log. Labels stay
+ * those of the original gate, so they compare against the base's outcome.
+ */
+export function parseContinuationStages(log, exitCode, segments, gatePackage) {
+    if (!segments.some((segment) => segment.script !== null))
+        return null;
+    const lines = logLines(log);
+    return walkChain(lines, readScriptHeaders(lines), { label: '', pkg: gatePackage, segments: [...segments], next: 0, bodyStart: 0 }, exitCode);
+}
+/** The command a continuation runs: the segments' own text, chained as the gate chained them. */
+export function continuationCommand(segments) {
+    return segments.map((segment) => segment.text).join(' && ');
+}
+/** True when a parsed run's continuation still has a stage to run. */
+export function hasStageToContinue(run) {
+    return run.continuation.some((segment) => segment.script !== null);
+}
+//# sourceMappingURL=verification-gate-stages.js.map

package/dist/verify/deterministic-gate/verification-gate-stages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-gate-stages.js","sourceRoot":"","sources":["../../../src/verify/deterministic-gate/verification-gate-stages.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,sFAAsF;AACtF,mFAAmF;AACnF,gBAAgB;AAyFhB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAEnC,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AACpC,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,GAAG,GAAG,qBAAqB,EAAE,GAAG,CAAC,CAAC;AAC7D,mFAAmF;AACnF,MAAM,aAAa,GAAG,yCAAyC,CAAC;AAChE,MAAM,WAAW,GAAG,6BAA6B,CAAC;AAClD,MAAM,kBAAkB,GAAG,IAAI,MAAM,CAAC,aAAa,WAAW,qCAAqC,CAAC,CAAC;AACrG,MAAM,mBAAmB,GAAG,+CAA+C,CAAC;AAC5E,MAAM,eAAe,GAAG,IAAI,MAAM,CAAC,aAAa,WAAW,IAAI,CAAC,CAAC;AAEjE;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,WAAmB;IACrE,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;YAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC9D,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9H,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,QAAQ,IAAI,KAAK,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACrG,SAAS;QACX,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/E,CAAC;AAUD,kFAAkF;AAClF,SAAS,iBAAiB,CAAC,KAAwB;IACjD,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1F,IAAI,OAAO,KAAK,IAAI;YAAE,KAAK,IAAI,CAAC,CAAC,CAAC,mCAAmC;QACrE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAYD,MAAM,eAAe,GAAG,CAAC,KAAY,EAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAClH,MAAM,aAAa,GAAG,CAAC,KAAY,EAAW,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;AAEpH;;;GAGG;AACH,SAAS,aAAa,CAAC,OAAgC,EAAE,CAAe,EAAE,QAAgB;IACxF,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1D,OAAO,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC;AAC3E,CAAC;AAED,qFAAqF;AACrF,SAAS,WAAW,CAAC,KAAc,EAAE,GAAa,EAAE,CAAe;IACjE,IAAI,EAAE,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1B,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;QAAE,EAAE,EAAE,CAAC;IAC/F,gFAAgF;IAChF,IAAI,EAAE,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC;IAC7D,KAAK,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC;QACvD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,0CAA0C;QAC1F,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,KAAK,CAAC,MAAM,GAAG,EAAE,GAAG,CAAC,CAAC;IACtB,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;IACzB,MAAM,OAAO,GAAI,MAAM,CAAC,QAA0B,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAChE,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;IACjB,6EAA6E;IAC7E,sDAAsD;IACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrH,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IAC5F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,0FAA0F;AAC1F,SAAS,SAAS,CAChB,KAAwB,EACxB,KAAc,EACd,GAAa,EACb,QAAmC,EACnC,YAA4B;IAE5B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACzB,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,IAAI,YAAY,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC;YAAE,OAAO,IAAI,CAAC;QACvE,MAAM,QAAQ,GAAG,CAAC,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACnF,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC;IACjH,CAAC;IACD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvE,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpC,IAAI,WAAmB,CAAC;IACxB,IAAI,YAA2B,CAAC;IAChC,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC1B,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC;QACxB,YAAY,GAAG,EAAE,CAAC;IACpB,CAAC;SAAM,CAAC;QACN,wEAAwE;QACxE,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACrD,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,iEAAiE;IACjE,KAAK,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,EAAE;QAAE,YAAY,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5G,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACzG,4FAA4F;IAC5F,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,iBAAiB,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;AACjH,CAAC;AAED,mFAAmF;AACnF,SAAS,SAAS,CAAC,KAAwB,EAAE,OAAgC,EAAE,IAAW,EAAE,QAAmC;IAC7H,MAAM,KAAK,GAAY,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAC/C,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,EAAE,QAAQ,IAAI,IAAI,CAAC;IAC/F,MAAM,YAAY,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,QAAQ,CAAC,CAAC;IAC/F,OAAO,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,OAAO,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;AAChH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,QAAmC,EAAE,WAAmB;IACtG,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3E,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,QAAQ,CAAC,CAAC;AAClI,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAAW,EACX,QAAmC,EACnC,QAAgC,EAChC,WAAmB;IAEnB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtE,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC5B,OAAO,SAAS,CAAC,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC/I,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,mBAAmB,CAAC,QAAgC;IAClE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC9D,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,kBAAkB,CAAC,GAAwC;IACzE,OAAO,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;AACrE,CAAC"}

package/dist/verify/deterministic-gate/verification-timeout-fault.d.ts

@@ -0,0 +1,128 @@
+/**
+ * Reads a timed-out deterministic run's captured output for a COMPLETE
+ * test-runner summary.
+ *
+ * Why this exists: when the deterministic verify command outlives its timeout
+ * the gate SIGKILLs it, and a fixed "run did not complete" / "killed by timeout
+ * before completion" description, never looking at the output, would describe a
+ * run that had FINISHED its test pass as one that never got there. That
+ * misdescription sends
+ * the reader (human or agent) hunting a slow/hung test that does not exist,
+ * when the real fault is the time spent after the tests (teardown, a lingering
+ * handle, a post-test stage) or a timeout sized below the suite.
+ *
+ * This module is the evidence read those descriptions lack: given the stdout /
+ * stderr tails, it returns the runner's own totals lines when the runner got as
+ * far as printing them, else null. It does NOT decide pass/fail -- a timed-out
+ * run still fails the gate; this only lets the wording say what the output
+ * shows.
+ *
+ * The two describers built on it keep that wording in one place:
+ * `describeTimeout` (the deterministic strategy's rationale) and
+ * `buildTimeoutFaultHold` (the verification engine's instrument-fault hold).
+ * Both allow for a multi-stage gate command (`npm run verify:gate` chains lint,
+ * typecheck, and tests): a printed summary means THAT RUNNER finished, never that
+ * the command did, so they say the command had not exited -- never that it
+ * completed. Without a summary both return their fixed no-summary strings.
+ *
+ * Recognised totals (progress lines such as `✓ src/foo.test.ts (3 tests)`,
+ * `ok 4 - name`, `# Subtest: x` are deliberately NOT summaries):
+ *   - vitest:           `Test Files  2 failed | 439 passed (441)` (sufficient
+ *                       alone) with its `Tests  N passed (N)` line; a `Tests`
+ *                       totals line alone also counts.
+ *   - node:test TAP:    `# tests N` AND `# pass N` (+ `# fail N` when present).
+ *   - node:test spec:   `ℹ tests N` AND `ℹ pass N` (+ `ℹ fail N` when present).
+ *
+ * Each tail is the last 4000 chars of a stream, so it may begin mid-line; the
+ * matchers are anchored at line start, so a truncated first line simply fails
+ * to match rather than matching a fragment. A tail can also have LOST the
+ * summary: a gate that keeps printing after its tests evicts it past 4000
+ * chars. So the strategy tracks each stream's summary while it streams
+ * (createRunnerSummaryTracker, fed before each cut) and hands the latest one to
+ * describeTimeout. PURE (no I/O).
+ *
+ * History: docs/daemon/history-verify.md (verify/deterministic-gate/verification-timeout-fault.ts).
+ *
+ * @module verification-timeout-fault
+ */
+import type { StrategyResult } from './verification-deterministic.js';
+import type { EvidenceUnavailableDetail } from '../../queries/delivery-gate-state/delivery-gate-state.js';
+/**
+ * The complete test-runner summary line(s) in a run's captured output, or null.
+ *
+ * Searches stdout first, then stderr (each independently -- a summary is never
+ * assembled from lines split across the two streams).
+ *
+ * @param stdoutTail The captured stdout tail (last ~4000 chars) of the run.
+ * @param stderrTail The captured stderr tail (last ~4000 chars) of the run.
+ * @returns The runner's totals lines, trimmed and in output order; null when no
+ *   complete summary is present.
+ */
+export declare function findRunnerSummary(stdoutTail?: string, stderrTail?: string): string[] | null;
+/** The latest complete runner summary one stream has printed, however much output followed it. */
+export interface RunnerSummaryTracker {
+    /**
+     * Observe the stream after `chunk` was appended to `buffer`, BEFORE the buffer
+     * is cut to its tail: whatever is still in `buffer` has not been evicted yet.
+     */
+    observe(buffer: string, chunk: string): void;
+    /** The most recent complete summary observed, or null. */
+    latest(): string[] | null;
+}
+/**
+ * Track one stream's runner summary while it streams. The strategy keeps only a
+ * 4000-char tail per stream, and a multi-stage gate keeps printing after its
+ * tests (the next stage, teardown logs), so by the time the kill lands the
+ * summary may be gone from the tail. Each observation scans the not-yet-evicted
+ * buffer -- only when the new text could complete a summary -- and remembers the
+ * latest found, so a later re-printed summary still supersedes an earlier one.
+ */
+export declare function createRunnerSummaryTracker(): RunnerSummaryTracker;
+/**
+ * The rationale for a deterministic run killed by its timeout, read from what
+ * the run's output shows.
+ *
+ * With a runner summary the kill landed after the tests had finished, so the
+ * rationale quotes it and names what actually ran out: the command had not
+ * exited within the limit. Without one it is the legacy "run did not complete"
+ * string, byte-identical. Either way the run stays a failed timeout -- this only
+ * chooses the words.
+ *
+ * A `timeoutSource` label is named right after the value (`after 600000ms (from
+ * /repo/telora.verify.json)`), because a timeout sized below the suite is fixed
+ * in whichever layer supplied it and the reader otherwise has to guess which. With
+ * no label both strings are unchanged.
+ *
+ * @param timeoutMs The timeout the run was killed at.
+ * @param stdoutTail The captured stdout tail of the killed run.
+ * @param stderrTail The captured stderr tail of the killed run.
+ * @param timeoutSource Where `timeoutMs` was read (formatVerifyConfigSource label), when known.
+ * @param observedSummary The latest summary tracked while the run streamed, used
+ *   when later output evicted it from the tails (createRunnerSummaryTracker).
+ * @returns The rationale, plus the matched summary lines when one was found.
+ */
+export declare function describeTimeout(timeoutMs: number, stdoutTail?: string, stderrTail?: string, timeoutSource?: string, observedSummary?: readonly string[] | null): {
+    rationale: string;
+    runnerSummary?: string[];
+};
+/**
+ * The instrument-fault hold for a timed-out deterministic run, with its
+ * `missing` evidence named from the captured output.
+ *
+ * Routing is the caller's and does not change here: a timeout is never a
+ * verdict about the work, so this is always a `deterministicFault` of kind
+ * 'timeout'. What a summary changes is the NAME of the missing evidence -- the
+ * test output is there; the clean exit is not -- so the hold stops pointing a
+ * reader at a hung test that does not exist. Prefers the summary the strategy
+ * already matched; falls back to reading the tails (a result built elsewhere).
+ *
+ * The fault also records the timeout the run applied and where it was read,
+ * taken from the run's `appliedConfig`, so the gate state (and every human
+ * surface rendered from it) names the value and the layer to change. A result
+ * that recorded no applied config leaves both out rather than guessing.
+ *
+ * @param result The timed-out run's exit code, matched summary, output tails, and applied config.
+ * @returns The hold detail, minus the `heldAt` stamp the requeue path adds.
+ */
+export declare function buildTimeoutFaultHold(result: Pick<StrategyResult, 'exitCode' | 'runnerSummary' | 'stdoutTail' | 'stderrTail' | 'appliedConfig'>): Omit<EvidenceUnavailableDetail, 'heldAt'>;
+//# sourceMappingURL=verification-timeout-fault.d.ts.map

package/dist/verify/deterministic-gate/verification-timeout-fault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-timeout-fault.d.ts","sourceRoot":"","sources":["../../../src/verify/deterministic-gate/verification-timeout-fault.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,0DAA0D,CAAC;AA8D1G;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAE3F;AAOD,kGAAkG;AAClG,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7C,0DAA0D;IAC1D,MAAM,IAAI,MAAM,EAAE,GAAG,IAAI,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,IAAI,oBAAoB,CAWjE;AAKD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,eAAe,CAC7B,SAAS,EAAE,MAAM,EACjB,UAAU,CAAC,EAAE,MAAM,EACnB,UAAU,CAAC,EAAE,MAAM,EACnB,aAAa,CAAC,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GACzC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAajD;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,eAAe,GAAG,YAAY,GAAG,YAAY,GAAG,eAAe,CAAC,GACzG,IAAI,CAAC,yBAAyB,EAAE,QAAQ,CAAC,CAkB3C"}

package/dist/verify/deterministic-gate/verification-timeout-fault.js

@@ -0,0 +1,173 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/verify/deterministic-gate/verification-deterministic.test.ts,
+//   packages/daemon/src/verify/deterministic-gate/verification-timeout-fault.test.ts,
+//   packages/daemon/src/verify/outcome-routing/verify-evidence-unavailable.test.ts
+// PINNED-BY-END
+const ESC = String.fromCharCode(27);
+/** SGR colour/style codes; the ESC byte is optional so an already-stripped `[32m` also goes. */
+const ANSI_SGR = new RegExp(`${ESC}?\\[[0-9;]*m`, 'g');
+/** vitest counts: `2 failed | 439 passed | 1 skipped (442)` -- segments, then a parenthesised total. */
+const VITEST_SEGMENT = String.raw `\d+\s+(?:failed|passed|skipped|todo)`;
+const VITEST_COUNTS = String.raw `${VITEST_SEGMENT}(?:\s*\|\s*${VITEST_SEGMENT})*\s+\(\d+\)`;
+const VITEST_TEST_FILES = new RegExp(String.raw `^\s*Test Files\s+${VITEST_COUNTS}\s*$`);
+const VITEST_TESTS = new RegExp(String.raw `^\s*Tests\s+${VITEST_COUNTS}\s*$`);
+const totalsLine = (prefix, label) => new RegExp(String.raw `^\s*${prefix} ${label} \d+\s*$`);
+/** First matcher that is satisfied wins; order is most-specific first. */
+const SUMMARY_MATCHERS = [
+    { required: [VITEST_TEST_FILES], optional: [VITEST_TESTS] },
+    { required: [VITEST_TESTS], optional: [] },
+    { required: [totalsLine('#', 'tests'), totalsLine('#', 'pass')], optional: [totalsLine('#', 'fail')] },
+    { required: [totalsLine('ℹ', 'tests'), totalsLine('ℹ', 'pass')], optional: [totalsLine('ℹ', 'fail')] },
+];
+/** Index of the LAST line matching `pattern` (a re-printed summary supersedes an earlier one), or -1. */
+function lastMatchIndex(lines, pattern) {
+    for (let i = lines.length - 1; i >= 0; i--) {
+        if (pattern.test(lines[i] ?? ''))
+            return i;
+    }
+    return -1;
+}
+/** The matcher's lines (trimmed, output order) when all its required lines are present, else null. */
+function applyMatcher(lines, matcher) {
+    const indices = [];
+    for (const pattern of matcher.required) {
+        const idx = lastMatchIndex(lines, pattern);
+        if (idx < 0)
+            return null;
+        indices.push(idx);
+    }
+    for (const pattern of matcher.optional) {
+        const idx = lastMatchIndex(lines, pattern);
+        if (idx >= 0)
+            indices.push(idx);
+    }
+    return [...new Set(indices)].sort((a, b) => a - b).map((i) => (lines[i] ?? '').trim());
+}
+function findInStream(tail) {
+    if (typeof tail !== 'string' || tail.length === 0)
+        return null;
+    const lines = tail.replace(ANSI_SGR, '').split(/\r\n|\n|\r/);
+    for (const matcher of SUMMARY_MATCHERS) {
+        const found = applyMatcher(lines, matcher);
+        if (found)
+            return found;
+    }
+    return null;
+}
+/**
+ * The complete test-runner summary line(s) in a run's captured output, or null.
+ *
+ * Searches stdout first, then stderr (each independently -- a summary is never
+ * assembled from lines split across the two streams).
+ *
+ * @param stdoutTail The captured stdout tail (last ~4000 chars) of the run.
+ * @param stderrTail The captured stderr tail (last ~4000 chars) of the run.
+ * @returns The runner's totals lines, trimmed and in output order; null when no
+ *   complete summary is present.
+ */
+export function findRunnerSummary(stdoutTail, stderrTail) {
+    return findInStream(stdoutTail) ?? findInStream(stderrTail);
+}
+/** Text a summary line carries; a window without one cannot hold a new summary, so it is not scanned. */
+const SUMMARY_HINT = /Test Files|Tests|[#ℹ] (?:tests|pass|fail)/;
+/** Chars before a chunk rescanned for the hint, so a summary line split across two chunks is still seen. */
+const HINT_OVERLAP = 200;
+/**
+ * Track one stream's runner summary while it streams. The strategy keeps only a
+ * 4000-char tail per stream, and a multi-stage gate keeps printing after its
+ * tests (the next stage, teardown logs), so by the time the kill lands the
+ * summary may be gone from the tail. Each observation scans the not-yet-evicted
+ * buffer -- only when the new text could complete a summary -- and remembers the
+ * latest found, so a later re-printed summary still supersedes an earlier one.
+ */
+export function createRunnerSummaryTracker() {
+    let found = null;
+    return {
+        observe(buffer, chunk) {
+            const window = buffer.slice(-(chunk.length + HINT_OVERLAP));
+            if (!SUMMARY_HINT.test(window))
+                return;
+            const summary = findInStream(buffer);
+            if (summary)
+                found = summary;
+        },
+        latest: () => found,
+    };
+}
+/** A summary's lines as one quotable span. */
+const quoteSummary = (summary) => `"${summary.join(' / ')}"`;
+/**
+ * The rationale for a deterministic run killed by its timeout, read from what
+ * the run's output shows.
+ *
+ * With a runner summary the kill landed after the tests had finished, so the
+ * rationale quotes it and names what actually ran out: the command had not
+ * exited within the limit. Without one it is the legacy "run did not complete"
+ * string, byte-identical. Either way the run stays a failed timeout -- this only
+ * chooses the words.
+ *
+ * A `timeoutSource` label is named right after the value (`after 600000ms (from
+ * /repo/telora.verify.json)`), because a timeout sized below the suite is fixed
+ * in whichever layer supplied it and the reader otherwise has to guess which. With
+ * no label both strings are unchanged.
+ *
+ * @param timeoutMs The timeout the run was killed at.
+ * @param stdoutTail The captured stdout tail of the killed run.
+ * @param stderrTail The captured stderr tail of the killed run.
+ * @param timeoutSource Where `timeoutMs` was read (formatVerifyConfigSource label), when known.
+ * @param observedSummary The latest summary tracked while the run streamed, used
+ *   when later output evicted it from the tails (createRunnerSummaryTracker).
+ * @returns The rationale, plus the matched summary lines when one was found.
+ */
+export function describeTimeout(timeoutMs, stdoutTail, stderrTail, timeoutSource, observedSummary) {
+    const summary = findRunnerSummary(stdoutTail, stderrTail)
+        ?? (observedSummary && observedSummary.length > 0 ? [...observedSummary] : null);
+    const limit = timeoutSource ? `${timeoutMs}ms (from ${timeoutSource})` : `${timeoutMs}ms`;
+    if (!summary) {
+        return { rationale: `deterministic check timed out after ${limit} (SIGKILL) -- run did not complete` };
+    }
+    return {
+        rationale: `deterministic check killed by the timeout after ${limit} (SIGKILL) -- the test runner had ` +
+            `already printed its summary (${quoteSummary(summary)}), but the command had not exited within the limit`,
+        runnerSummary: summary,
+    };
+}
+/**
+ * The instrument-fault hold for a timed-out deterministic run, with its
+ * `missing` evidence named from the captured output.
+ *
+ * Routing is the caller's and does not change here: a timeout is never a
+ * verdict about the work, so this is always a `deterministicFault` of kind
+ * 'timeout'. What a summary changes is the NAME of the missing evidence -- the
+ * test output is there; the clean exit is not -- so the hold stops pointing a
+ * reader at a hung test that does not exist. Prefers the summary the strategy
+ * already matched; falls back to reading the tails (a result built elsewhere).
+ *
+ * The fault also records the timeout the run applied and where it was read,
+ * taken from the run's `appliedConfig`, so the gate state (and every human
+ * surface rendered from it) names the value and the layer to change. A result
+ * that recorded no applied config leaves both out rather than guessing.
+ *
+ * @param result The timed-out run's exit code, matched summary, output tails, and applied config.
+ * @returns The hold detail, minus the `heldAt` stamp the requeue path adds.
+ */
+export function buildTimeoutFaultHold(result) {
+    const summary = result.runnerSummary && result.runnerSummary.length > 0
+        ? result.runnerSummary
+        : findRunnerSummary(result.stdoutTail, result.stderrTail);
+    const missing = summary
+        ? `a clean exit within the timeout (the test runner printed its summary -- ${quoteSummary(summary)} -- ` +
+            'but the command had not exited when it was killed)'
+        : 'complete deterministic run output (killed by timeout before completion)';
+    const applied = result.appliedConfig;
+    return {
+        missing: [missing],
+        commitsAhead: 0,
+        deterministicFault: {
+            kind: 'timeout',
+            exitCode: result.exitCode ?? null,
+            ...(applied ? { timeoutMs: applied.timeoutMs, timeoutSource: applied.timeoutSource } : {}),
+        },
+    };
+}
+//# sourceMappingURL=verification-timeout-fault.js.map

package/dist/verify/deterministic-gate/verification-timeout-fault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-timeout-fault.js","sourceRoot":"","sources":["../../../src/verify/deterministic-gate/verification-timeout-fault.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,+FAA+F;AAC/F,sFAAsF;AACtF,mFAAmF;AACnF,gBAAgB;AA6DhB,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AACpC,gGAAgG;AAChG,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,GAAG,GAAG,cAAc,EAAE,GAAG,CAAC,CAAC;AAEvD,wGAAwG;AACxG,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,CAAA,sCAAsC,CAAC;AACxE,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAA,GAAG,cAAc,cAAc,cAAc,cAAc,CAAC;AAC5F,MAAM,iBAAiB,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,oBAAoB,aAAa,MAAM,CAAC,CAAC;AACxF,MAAM,YAAY,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,eAAe,aAAa,MAAM,CAAC,CAAC;AAE9E,MAAM,UAAU,GAAG,CAAC,MAAc,EAAE,KAAa,EAAU,EAAE,CAC3D,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,OAAO,MAAM,IAAI,KAAK,UAAU,CAAC,CAAC;AAEzD,0EAA0E;AAC1E,MAAM,gBAAgB,GAA8B;IAClD,EAAE,QAAQ,EAAE,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,CAAC,YAAY,CAAC,EAAE;IAC3D,EAAE,QAAQ,EAAE,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;IAC1C,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE;IACtG,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE;CACvG,CAAC;AAEF,yGAAyG;AACzG,SAAS,cAAc,CAAC,KAAwB,EAAE,OAAe;IAC/D,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC;AAED,sGAAsG;AACtG,SAAS,YAAY,CAAC,KAAwB,EAAE,OAAuB;IACrE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,GAAG,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,YAAY,CAAC,IAAwB;IAC5C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC7D,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAmB,EAAE,UAAmB;IACxE,OAAO,YAAY,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,UAAU,CAAC,CAAC;AAC9D,CAAC;AAED,yGAAyG;AACzG,MAAM,YAAY,GAAG,2CAA2C,CAAC;AACjE,4GAA4G;AAC5G,MAAM,YAAY,GAAG,GAAG,CAAC;AAazB;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B;IACxC,IAAI,KAAK,GAAoB,IAAI,CAAC;IAClC,OAAO;QACL,OAAO,CAAC,MAAM,EAAE,KAAK;YACnB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC;YAC5D,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,OAAO;YACvC,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,OAAO;gBAAE,KAAK,GAAG,OAAO,CAAC;QAC/B,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK;KACpB,CAAC;AACJ,CAAC;AAED,8CAA8C;AAC9C,MAAM,YAAY,GAAG,CAAC,OAA0B,EAAU,EAAE,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;AAExF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,eAAe,CAC7B,SAAiB,EACjB,UAAmB,EACnB,UAAmB,EACnB,aAAsB,EACtB,eAA0C;IAE1C,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,EAAE,UAAU,CAAC;WACpD,CAAC,eAAe,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,SAAS,YAAY,aAAa,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,IAAI,CAAC;IAC1F,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,SAAS,EAAE,uCAAuC,KAAK,oCAAoC,EAAE,CAAC;IACzG,CAAC;IACD,OAAO;QACL,SAAS,EACP,mDAAmD,KAAK,oCAAoC;YAC5F,gCAAgC,YAAY,CAAC,OAAO,CAAC,oDAAoD;QAC3G,aAAa,EAAE,OAAO;KACvB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAA0G;IAE1G,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;QACrE,CAAC,CAAC,MAAM,CAAC,aAAa;QACtB,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,OAAO;QACrB,CAAC,CAAC,2EAA2E,YAAY,CAAC,OAAO,CAAC,MAAM;YACtG,oDAAoD;QACtD,CAAC,CAAC,yEAAyE,CAAC;IAC9E,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,CAAC;IACrC,OAAO;QACL,OAAO,EAAE,CAAC,OAAO,CAAC;QAClB,YAAY,EAAE,CAAC;QACf,kBAAkB,EAAE;YAClB,IAAI,EAAE,SAAS;YACf,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;YACjC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3F;KACF,CAAC;AACJ,CAAC"}

package/dist/verify/effect-reconciliation/cascade-restatement.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Shared FRT-restatement type aliases.
+ *
+ * Holds the two shared type aliases the retire-aware restatement path and the
+ * backfill CLI import (`CallApiFn`, `AuthorRestatementFn`), so those importers
+ * keep a stable specifier. It runs no timer: per-injection FRT prose is authored
+ * at the verify event (`verify-restatement.ts`).
+ *
+ * History: docs/daemon/history-verify.md (verify/effect-reconciliation/cascade-restatement.ts).
+ *
+ * @module cascade-restatement
+ */
+import type { RestatementInputs } from './de-restatement.js';
+export type CallApiFn = <T>(action: string, params?: Record<string, unknown>) => Promise<T>;
+/** Authors one positive restatement, its model call already bound. */
+export type AuthorRestatementFn = (inputs: RestatementInputs) => Promise<string>;
+//# sourceMappingURL=cascade-restatement.d.ts.map