@telora/daemon 0.22.245 → 0.22.289

package/dist/verify/gate-verdicts/no-own-delta-verdict.js

@@ -0,0 +1,85 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/integration/fully-merged-focus-sibling-red-scenario.test.ts,
+//   packages/daemon/src/verify/engine/verification-commit-sharing.test.ts
+// PINNED-BY-END
+/**
+ * A focus commit that adds nothing of the focus's own is not judged again: it
+ * carries the verdict the focus's own commits already earned.
+ *
+ * When every commit on a focus branch is already on integration and the branch
+ * tip moved past the newest commit the gate judged ONLY by commits other foci own
+ * (git/focus-own-delta.ts isForeignOnlyExtension), a run at that tip would judge
+ * the integration tip in the focus's place, charging a sibling's failing tests
+ * to a fast-forwarded focus. So no run
+ * starts: the verdict recorded for that newest judged ancestor is carried to the
+ * tip (recorded there, naming where it came from), and the delivery is routed on
+ * it exactly as on any recorded verdict -- its state follows from what its own
+ * commits earned, and it is never stranded waiting on a run that must not happen.
+ *
+ * Only a PASSING verdict is carried, and the asymmetry is the point. A pass is
+ * safe to carry: the focus added nothing, so it cannot have broken anything of
+ * its own. A failure is not, because the run that recorded it judged the whole
+ * tip -- every foreign commit since the focus's own work included -- so the
+ * failure may be a sibling's, and the very foreign commits being carried over
+ * may already have FIXED it. Carrying it anyway leaves no path back to green:
+ * each later foreign-only tip carries the same stale failure and no run is ever
+ * dispatched.
+ *
+ * Anything short of proof -- an own or unattributed commit since the judged
+ * ancestor, a judged ancestor that did not pass, no judged ancestor within the
+ * search depth, an unreadable read -- carries nothing, and the dispatch runs the
+ * gate as before. That is the same posture git/focus-own-delta.ts takes on a read
+ * it cannot make: fail toward judging, never toward asserting a state unproven.
+ *
+ * History: docs/daemon/history-verify.md (verify/gate-verdicts/no-own-delta-verdict.ts).
+ *
+ * @module verify/gate-verdicts/no-own-delta-verdict
+ */
+import { ANCESTOR_SEARCH_DEPTH, findJudgedAncestor } from './judged-ancestor.js';
+/**
+ * How many ancestors of the tip are searched for the newest judged one. Kept as
+ * this module's name for the walk's depth, which now lives in
+ * verify/gate-verdicts/judged-ancestor.ts beside the walk itself.
+ */
+export const CARRIED_VERDICT_SEARCH_DEPTH = ANCESTOR_SEARCH_DEPTH;
+/**
+ * The verdict `head` carries from its newest judged ancestor when it adds nothing
+ * of the focus's own (module doc), or null.
+ */
+export async function resolveCarriedVerdict(productId, focusId, head, gate, deps) {
+    const worktreePath = deps.resolveWorktreePath(focusId);
+    if (!worktreePath)
+        return null;
+    const found = findJudgedAncestor(productId, focusId, head, gate, {
+        worktreePath,
+        readCommitVerdict: deps.readCommitVerdict,
+        listAncestors: deps.listAncestors,
+    }, () => true);
+    if (!found)
+        return null;
+    const { sha: judged, verdict: recorded } = found;
+    if (recorded.outcome !== 'passed')
+        return null;
+    let ids;
+    try {
+        ids = await deps.listFocusDeliveryIds(focusId);
+    }
+    catch {
+        return null;
+    }
+    const foreignOnly = deps.isForeignOnlyExtension(worktreePath, deps.integrationBranch, judged, head, new Set(ids));
+    if (!foreignOnly)
+        return null;
+    const carriedWhy = `carried from ${judged.slice(0, 8)}: the focus has no unverified delta of its own -- every commit `
+        + `since is another focus's, already on integration`;
+    return {
+        carriedFrom: judged,
+        verdict: {
+            ...recorded,
+            sha: head,
+            recordedAt: new Date().toISOString(),
+            rationale: recorded.rationale ? `${carriedWhy}; ${recorded.rationale}` : carriedWhy,
+        },
+    };
+}
+//# sourceMappingURL=no-own-delta-verdict.js.map

package/dist/verify/gate-verdicts/no-own-delta-verdict.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-own-delta-verdict.js","sourceRoot":"","sources":["../../../src/verify/gate-verdicts/no-own-delta-verdict.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,8FAA8F;AAC9F,0EAA0E;AAC1E,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAuB,MAAM,sBAAsB,CAAC;AAGtG;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,qBAAqB,CAAC;AA4BlE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAAiB,EACjB,OAAe,EACf,IAAY,EACZ,IAAuB,EACvB,IAAwB;IAExB,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,KAAK,GAAG,kBAAkB,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE;QAC/D,YAAY;QACZ,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,aAAa,EAAE,IAAI,CAAC,aAAa;KAClC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACf,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IACjD,IAAI,QAAQ,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,GAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,sBAAsB,CAC7C,YAAY,EAAE,IAAI,CAAC,iBAAiB,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,CACjE,CAAC;IACF,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,UAAU,GAAG,gBAAgB,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,iEAAiE;UAClH,kDAAkD,CAAC;IACvD,OAAO;QACL,WAAW,EAAE,MAAM;QACnB,OAAO,EAAE;YACP,GAAG,QAAQ;YACX,GAAG,EAAE,IAAI;YACT,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,UAAU,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,UAAU;SACpF;KACF,CAAC;AACJ,CAAC"}

package/dist/verify/gate-verdicts/no-verdict-record.d.ts

@@ -0,0 +1,108 @@
+import { type CommitVerdictGate } from './commit-verdict-record.js';
+import type { FileEscalationInput } from '../../nexus/file-escalation.js';
+/** Backoff after the FIRST no-verdict run on a commit; doubles per further one. */
+export declare const NO_VERDICT_BACKOFF_BASE_MS: number;
+/** The longest a commit waits between no-verdict runs. */
+export declare const NO_VERDICT_BACKOFF_MAX_MS: number;
+/** No-verdict runs on one focus commit (any gate) that raise its one escalation. */
+export declare const NO_VERDICT_ESCALATION_THRESHOLD = 3;
+/** Machine kind the escalation carries (metadata discriminator). */
+export declare const NO_VERDICT_ESCALATION_KIND = "verify_commit_no_verdict";
+/** Why a run rendered no verdict. */
+export type NoVerdictKind = 'timed_out' | 'instrument_fault';
+/** What identifies one commit under one gate. */
+export interface NoVerdictKey {
+    productId: string;
+    focusId: string;
+    sha: string;
+    gate: CommitVerdictGate;
+}
+/** One no-verdict run. */
+export interface NoVerdictRun {
+    at: string;
+    deliveryId: string;
+    kind: NoVerdictKind;
+}
+/** A dispatch that ran the commit again after its backoff elapsed, and why. */
+export interface NoVerdictRedispatch {
+    at: string;
+    deliveryId: string;
+    reason: string;
+}
+/** The durable backoff record for one (product, focus, sha, gate). */
+export interface NoVerdictRecord extends NoVerdictKey {
+    runs: NoVerdictRun[];
+    redispatches: NoVerdictRedispatch[];
+}
+/** What identifies one focus commit, whatever gate judged it. */
+export type NoVerdictCommitKey = Omit<NoVerdictKey, 'gate'>;
+/** A no-verdict run in its commit's tally, with the gate it ran under. */
+export interface NoVerdictTallyRun extends NoVerdictRun {
+    gate: CommitVerdictGate;
+}
+/** The durable escalation tally for one (product, focus, sha): every no-verdict run, under any gate. */
+export interface NoVerdictCommitTally extends NoVerdictCommitKey {
+    runs: NoVerdictTallyRun[];
+    /** When the one escalation for this commit was filed; absent until it is. */
+    escalatedAt?: string;
+}
+/** The production directory of the no-verdict records, under the daemon state dir (resolved per call). */
+export declare function noVerdictDir(): string;
+/** The record for a key, or null when there is none (or it is unreadable / for another key). */
+export declare function readNoVerdict(key: NoVerdictKey, dir?: string): NoVerdictRecord | null;
+/** The commit's tally, or null when there is none (or it is unreadable / for another commit). */
+export declare function readNoVerdictTally(key: NoVerdictCommitKey, dir?: string): NoVerdictCommitTally | null;
+/** Append one no-verdict run to the key's record; returns the record as written. */
+export declare function recordNoVerdictRun(key: NoVerdictKey, run: NoVerdictRun, dir?: string): NoVerdictRecord;
+/** Append one no-verdict run, with its gate, to its commit's tally; returns the tally as written. */
+export declare function recordNoVerdictTallyRun(key: NoVerdictKey, run: NoVerdictRun, dir?: string): NoVerdictCommitTally;
+/** Append a re-dispatch after backoff, with why it ran. */
+export declare function recordNoVerdictRedispatch(key: NoVerdictKey, redispatch: NoVerdictRedispatch, dir?: string): void;
+/** Stamp that the commit's one escalation was filed. */
+export declare function markNoVerdictEscalated(key: NoVerdictCommitKey, at: string, dir?: string): void;
+/** The backoff a record imposes after its latest run: base * 2^(runs-1), capped. Pure. */
+export declare function noVerdictBackoffMs(record: Pick<NoVerdictRecord, 'runs'>): number;
+/** Whether a dispatch may run the commit now. Pure. */
+export type NoVerdictGate = {
+    run: true;
+    redispatch: null;
+} | {
+    run: true;
+    redispatch: string;
+} | {
+    run: false;
+    until: string;
+    why: string;
+};
+/**
+ * What a record says about dispatching its commit at `now`: no record runs as
+ * before; inside the backoff nothing runs; past it the run goes ahead, and the
+ * reason it did is returned so it can be recorded. An unparseable run time holds
+ * nothing (fails toward judging). Pure.
+ */
+export declare function noVerdictDispatchGate(record: NoVerdictRecord | null, now: number): NoVerdictGate;
+/** True exactly when the commit's tally reached the threshold and nothing was filed yet. Pure. */
+export declare function noVerdictEscalationDue(tally: NoVerdictCommitTally): boolean;
+/** The one escalation for a focus commit that keeps rendering no verdict, under whatever gates. Pure. */
+export declare function buildNoVerdictEscalation(tally: NoVerdictCommitTally, organizationId: string): FileEscalationInput;
+/** The record's IO as the verification path uses it (a seam: tests pin a clock). */
+export interface NoVerdictStore {
+    read: (key: NoVerdictKey) => NoVerdictRecord | null;
+    /** Record one no-verdict run in its gate's backoff record AND its commit's escalation tally. */
+    recordRun: (key: NoVerdictKey, run: Omit<NoVerdictRun, 'at'>) => {
+        record: NoVerdictRecord;
+        tally: NoVerdictCommitTally;
+    };
+    recordRedispatch: (key: NoVerdictKey, redispatch: Omit<NoVerdictRedispatch, 'at'>) => void;
+    markEscalated: (key: NoVerdictCommitKey) => void;
+    now: () => number;
+}
+/**
+ * The durable store under `dir` (the composition root binds {@link noVerdictDir},
+ * resolved per call so TELORA_STATE_DIR is honoured) on the clock `now`.
+ */
+export declare function durableNoVerdictStore(opts: {
+    dir: () => string;
+    now: () => number;
+}): NoVerdictStore;
+//# sourceMappingURL=no-verdict-record.d.ts.map

package/dist/verify/gate-verdicts/no-verdict-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-verdict-record.d.ts","sourceRoot":"","sources":["../../../src/verify/gate-verdicts/no-verdict-record.ts"],"names":[],"mappings":"AAoDA,OAAO,EAAqB,KAAK,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACvF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAK1E,mFAAmF;AACnF,eAAO,MAAM,0BAA0B,QAAiB,CAAC;AACzD,0DAA0D;AAC1D,eAAO,MAAM,yBAAyB,QAAqB,CAAC;AAC5D,oFAAoF;AACpF,eAAO,MAAM,+BAA+B,IAAI,CAAC;AACjD,oEAAoE;AACpE,eAAO,MAAM,0BAA0B,6BAA6B,CAAC;AAErE,qCAAqC;AACrC,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,kBAAkB,CAAC;AAE7D,iDAAiD;AACjD,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,iBAAiB,CAAC;CACzB;AAED,0BAA0B;AAC1B,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,aAAa,CAAC;CACrB;AAED,+EAA+E;AAC/E,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,sEAAsE;AACtE,MAAM,WAAW,eAAgB,SAAQ,YAAY;IACnD,IAAI,EAAE,YAAY,EAAE,CAAC;IACrB,YAAY,EAAE,mBAAmB,EAAE,CAAC;CACrC;AAED,iEAAiE;AACjE,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;AAE5D,0EAA0E;AAC1E,MAAM,WAAW,iBAAkB,SAAQ,YAAY;IACrD,IAAI,EAAE,iBAAiB,CAAC;CACzB;AAED,wGAAwG;AACxG,MAAM,WAAW,oBAAqB,SAAQ,kBAAkB;IAC9D,IAAI,EAAE,iBAAiB,EAAE,CAAC;IAC1B,6EAA6E;IAC7E,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,0GAA0G;AAC1G,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAgBD,gGAAgG;AAChG,wBAAgB,aAAa,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,GAAE,MAAuB,GAAG,eAAe,GAAG,IAAI,CAQrG;AAED,iGAAiG;AACjG,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,GAAE,MAAuB,GAAG,oBAAoB,GAAG,IAAI,CAQrH;AAgBD,oFAAoF;AACpF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,GAAE,MAAuB,GAAG,eAAe,CAYtH;AAED,qGAAqG;AACrG,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,GAAE,MAAuB,GAAG,oBAAoB,CAUhI;AAED,2DAA2D;AAC3D,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,mBAAmB,EAAE,GAAG,GAAE,MAAuB,GAAG,IAAI,CAIhI;AAED,wDAAwD;AACxD,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,GAAE,MAAuB,GAAG,IAAI,CAI9G;AAED,0FAA0F;AAC1F,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,GAAG,MAAM,CAGhF;AAED,uDAAuD;AACvD,MAAM,MAAM,aAAa,GACrB;IAAE,GAAG,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,IAAI,CAAA;CAAE,GAC/B;IAAE,GAAG,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,GAAG,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/C;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,GAAG,aAAa,CAUhG;AAED,kGAAkG;AAClG,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAE3E;AAED,yGAAyG;AACzG,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,GAAG,mBAAmB,CAoBjH;AAED,oFAAoF;AACpF,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,CAAC,GAAG,EAAE,YAAY,KAAK,eAAe,GAAG,IAAI,CAAC;IACpD,gGAAgG;IAChG,SAAS,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,KAAK;QAAE,MAAM,EAAE,eAAe,CAAC;QAAC,KAAK,EAAE,oBAAoB,CAAA;KAAE,CAAC;IAC1H,gBAAgB,EAAE,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,CAAC,mBAAmB,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC;IAC3F,aAAa,EAAE,CAAC,GAAG,EAAE,kBAAkB,KAAK,IAAI,CAAC;IACjD,GAAG,EAAE,MAAM,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,MAAM,CAAA;CAAE,GAAG,cAAc,CAapG"}

package/dist/verify/gate-verdicts/no-verdict-record.js

@@ -0,0 +1,222 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/verify/engine/verification-commit-sharing.test.ts,
+//   packages/daemon/src/verify/gate-verdicts/no-verdict-record.test.ts
+// PINNED-BY-END
+/**
+ * A focus commit whose gate run rendered NO verdict is not run again blind.
+ *
+ * A run that renders a verdict is recorded per (product, focus, sha, gate)
+ * (verify/gate-verdicts/commit-verdict-record.ts) and every delivery judged on that commit
+ * takes it. A run that renders none -- killed by its timeout with nothing
+ * rendered (verify/deterministic-gate/timed-out-rendered-verdict.ts), or routed to instrument-fault
+ * re-work because the gate could not attribute it -- is covered by neither.
+ * The re-run guards and the stall budget are keyed per DELIVERY and pruned on
+ * re-entry to verify, so without a per-commit record the same commit would be
+ * dispatched again by each sibling in turn, and runs spread across deliveries
+ * would trip no per-delivery cap and raise nothing.
+ *
+ * So the no-verdict outcome is recorded against the COMMIT, under the same key a
+ * verdict would be (the gate the run applied, at the sha it judged), durably
+ * beside the verdict records:
+ *
+ *   - Dispatch reads it (verify/engine/verification-commit-sharing.ts reuseOrRun) where
+ *     it finds no verdict to take: while the backoff since the last no-verdict run
+ *     has not elapsed, NO candidate -- a sibling delivery, a re-entry to verify, a
+ *     restart -- starts that commit's gate. The backoff doubles per recorded
+ *     no-verdict run (NO_VERDICT_BACKOFF_BASE_MS, capped at NO_VERDICT_BACKOFF_MAX_MS),
+ *     and each dispatch that runs after it elapsed is appended to the record with
+ *     why it ran.
+ *   - The ESCALATION is counted per focus COMMIT, not per gate: every no-verdict
+ *     run on a commit also lands in that commit's tally (product, focus, sha --
+ *     no gate), whatever gate it ran under. At NO_VERDICT_ESCALATION_THRESHOLD
+ *     runs in the tally ONE escalation is filed for that focus and commit,
+ *     whichever deliveries and gates triggered the runs; the tally carries that it
+ *     was filed, so neither a later run, a changed gate nor a restart files a
+ *     second.
+ *   - The BACKOFF stays keyed by gate: a different commit, or a changed gate
+ *     identity (command or timeout), is a different backoff key, so an earlier
+ *     commit's or gate's record blocks no run.
+ *
+ * Not recorded here: a run that never started the command (no checkout could be
+ * made, an unresolvable config) -- it spent no gate time, and the tick retries it.
+ *
+ * History: docs/daemon/history-verify.md (verify/gate-verdicts/no-verdict-record.ts).
+ *
+ * @module verify/gate-verdicts/no-verdict-record
+ */
+import { mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { ESCALATION_DISPOSITIONS, ESCALATION_REASONS } from '@telora/daemon-core';
+import { resolveGlobalStateDir } from '../../daemon-state/daemon-process.js';
+import { commitVerdictPath } from './commit-verdict-record.js';
+import { createLogger } from '../../log/daemon-log.js';
+const log = createLogger({ module: 'verification' });
+/** Backoff after the FIRST no-verdict run on a commit; doubles per further one. */
+export const NO_VERDICT_BACKOFF_BASE_MS = 15 * 60 * 1000;
+/** The longest a commit waits between no-verdict runs. */
+export const NO_VERDICT_BACKOFF_MAX_MS = 2 * 60 * 60 * 1000;
+/** No-verdict runs on one focus commit (any gate) that raise its one escalation. */
+export const NO_VERDICT_ESCALATION_THRESHOLD = 3;
+/** Machine kind the escalation carries (metadata discriminator). */
+export const NO_VERDICT_ESCALATION_KIND = 'verify_commit_no_verdict';
+/** The production directory of the no-verdict records, under the daemon state dir (resolved per call). */
+export function noVerdictDir() {
+    return resolve(resolveGlobalStateDir(), 'verification-no-verdicts');
+}
+function recordPath(key, dir) {
+    return commitVerdictPath(key.productId, key.focusId, key.sha, dir, key.gate);
+}
+/** The tally's file: the gate-less name under the same dir, so no gate's backoff file is it. */
+function tallyPath(key, dir) {
+    return commitVerdictPath(key.productId, key.focusId, key.sha, dir);
+}
+function sameKey(record, key) {
+    return record.productId === key.productId && record.focusId === key.focusId && record.sha === key.sha
+        && record.gate?.command === key.gate.command && record.gate?.timeoutMs === key.gate.timeoutMs;
+}
+/** The record for a key, or null when there is none (or it is unreadable / for another key). */
+export function readNoVerdict(key, dir = noVerdictDir()) {
+    try {
+        const parsed = JSON.parse(readFileSync(recordPath(key, dir), 'utf8'));
+        if (!sameKey(parsed, key) || !Array.isArray(parsed.runs))
+            return null;
+        return { ...parsed, redispatches: Array.isArray(parsed.redispatches) ? parsed.redispatches : [] };
+    }
+    catch {
+        return null;
+    }
+}
+/** The commit's tally, or null when there is none (or it is unreadable / for another commit). */
+export function readNoVerdictTally(key, dir = noVerdictDir()) {
+    try {
+        const parsed = JSON.parse(readFileSync(tallyPath(key, dir), 'utf8'));
+        const same = parsed.productId === key.productId && parsed.focusId === key.focusId && parsed.sha === key.sha;
+        return same && Array.isArray(parsed.runs) ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
+function writeRecord(record, dir) {
+    const path = 'gate' in record ? recordPath(record, dir) : tallyPath(record, dir);
+    const tmp = `${path}.${process.pid}.tmp`;
+    try {
+        mkdirSync(dir, { recursive: true });
+        writeFileSync(tmp, JSON.stringify(record, null, 2), { mode: 0o600 });
+        renameSync(tmp, path);
+        return true;
+    }
+    catch (err) {
+        log.warn(`[verification] failed to record the no-verdict run for ${record.focusId}@${record.sha.slice(0, 8)}:`, err.message);
+        return false;
+    }
+}
+/** Append one no-verdict run to the key's record; returns the record as written. */
+export function recordNoVerdictRun(key, run, dir = noVerdictDir()) {
+    const prior = readNoVerdict(key, dir);
+    const record = {
+        productId: key.productId,
+        focusId: key.focusId,
+        sha: key.sha,
+        gate: { command: key.gate.command, timeoutMs: key.gate.timeoutMs },
+        runs: [...(prior?.runs ?? []), run],
+        redispatches: prior?.redispatches ?? [],
+    };
+    writeRecord(record, dir);
+    return record;
+}
+/** Append one no-verdict run, with its gate, to its commit's tally; returns the tally as written. */
+export function recordNoVerdictTallyRun(key, run, dir = noVerdictDir()) {
+    const commit = { productId: key.productId, focusId: key.focusId, sha: key.sha };
+    const prior = readNoVerdictTally(commit, dir);
+    const tally = {
+        ...commit,
+        runs: [...(prior?.runs ?? []), { ...run, gate: { command: key.gate.command, timeoutMs: key.gate.timeoutMs } }],
+        ...(prior?.escalatedAt ? { escalatedAt: prior.escalatedAt } : {}),
+    };
+    writeRecord(tally, dir);
+    return tally;
+}
+/** Append a re-dispatch after backoff, with why it ran. */
+export function recordNoVerdictRedispatch(key, redispatch, dir = noVerdictDir()) {
+    const prior = readNoVerdict(key, dir);
+    if (!prior)
+        return;
+    writeRecord({ ...prior, redispatches: [...prior.redispatches, redispatch] }, dir);
+}
+/** Stamp that the commit's one escalation was filed. */
+export function markNoVerdictEscalated(key, at, dir = noVerdictDir()) {
+    const prior = readNoVerdictTally(key, dir);
+    if (!prior)
+        return;
+    writeRecord({ ...prior, escalatedAt: at }, dir);
+}
+/** The backoff a record imposes after its latest run: base * 2^(runs-1), capped. Pure. */
+export function noVerdictBackoffMs(record) {
+    const n = Math.max(1, record.runs.length);
+    return Math.min(NO_VERDICT_BACKOFF_MAX_MS, NO_VERDICT_BACKOFF_BASE_MS * 2 ** (n - 1));
+}
+/**
+ * What a record says about dispatching its commit at `now`: no record runs as
+ * before; inside the backoff nothing runs; past it the run goes ahead, and the
+ * reason it did is returned so it can be recorded. An unparseable run time holds
+ * nothing (fails toward judging). Pure.
+ */
+export function noVerdictDispatchGate(record, now) {
+    const last = record?.runs[record.runs.length - 1];
+    if (!record || !last)
+        return { run: true, redispatch: null };
+    const lastAt = Date.parse(last.at);
+    if (Number.isNaN(lastAt))
+        return { run: true, redispatch: null };
+    const backoff = noVerdictBackoffMs(record);
+    const until = lastAt + backoff;
+    const tally = `${record.runs.length} run(s) on ${record.sha.slice(0, 8)} rendered no verdict (latest ${last.kind}, delivery ${last.deliveryId}, at ${last.at})`;
+    if (now < until)
+        return { run: false, until: new Date(until).toISOString(), why: `${tally}; backoff ${Math.round(backoff / 60000)} min` };
+    return { run: true, redispatch: `${tally}; the ${Math.round(backoff / 60000)}-min backoff elapsed, so the commit is judged again` };
+}
+/** True exactly when the commit's tally reached the threshold and nothing was filed yet. Pure. */
+export function noVerdictEscalationDue(tally) {
+    return tally.escalatedAt === undefined && tally.runs.length >= NO_VERDICT_ESCALATION_THRESHOLD;
+}
+/** The one escalation for a focus commit that keeps rendering no verdict, under whatever gates. Pure. */
+export function buildNoVerdictEscalation(tally, organizationId) {
+    const deliveries = [...new Set(tally.runs.map((r) => r.deliveryId))];
+    const kinds = [...new Set(tally.runs.map((r) => r.kind))];
+    const gates = [...new Set(tally.runs.map((r) => `\`${r.gate.command}\` (${r.gate.timeoutMs}ms timeout)`))];
+    return {
+        organizationId,
+        focusId: tally.focusId,
+        productId: tally.productId,
+        reason: `The deterministic gate has run ${tally.runs.length} times on focus commit ${tally.sha} and rendered no verdict `
+            + `each time (${kinds.join(', ')}), across deliveries ${deliveries.join(', ')}. Dispatch backs off between runs `
+            + `of this commit, but no run has judged it. Gate(s): ${gates.join(', ')}.`,
+        reasonType: ESCALATION_REASONS.ERROR_ENCOUNTERED,
+        disposition: ESCALATION_DISPOSITIONS.AGENT_RESOLVABLE,
+        kind: NO_VERDICT_ESCALATION_KIND,
+        details: {
+            sha: tally.sha,
+            runs: tally.runs,
+        },
+    };
+}
+/**
+ * The durable store under `dir` (the composition root binds {@link noVerdictDir},
+ * resolved per call so TELORA_STATE_DIR is honoured) on the clock `now`.
+ */
+export function durableNoVerdictStore(opts) {
+    const { now, dir } = opts;
+    const at = () => new Date(now()).toISOString();
+    return {
+        read: (key) => readNoVerdict(key, dir()),
+        recordRun: (key, run) => {
+            const stamped = { ...run, at: at() };
+            return { record: recordNoVerdictRun(key, stamped, dir()), tally: recordNoVerdictTallyRun(key, stamped, dir()) };
+        },
+        recordRedispatch: (key, redispatch) => recordNoVerdictRedispatch(key, { ...redispatch, at: at() }, dir()),
+        markEscalated: (key) => markNoVerdictEscalated(key, at(), dir()),
+        now,
+    };
+}
+//# sourceMappingURL=no-verdict-record.js.map

package/dist/verify/gate-verdicts/no-verdict-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-verdict-record.js","sourceRoot":"","sources":["../../../src/verify/gate-verdicts/no-verdict-record.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,oFAAoF;AACpF,uEAAuE;AACvE,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAA0B,MAAM,4BAA4B,CAAC;AAEvF,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAErD,mFAAmF;AACnF,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACzD,0DAA0D;AAC1D,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5D,oFAAoF;AACpF,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC;AACjD,oEAAoE;AACpE,MAAM,CAAC,MAAM,0BAA0B,GAAG,0BAA0B,CAAC;AAgDrE,0GAA0G;AAC1G,MAAM,UAAU,YAAY;IAC1B,OAAO,OAAO,CAAC,qBAAqB,EAAE,EAAE,0BAA0B,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,UAAU,CAAC,GAAiB,EAAE,GAAW;IAChD,OAAO,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;AAC/E,CAAC;AAED,gGAAgG;AAChG,SAAS,SAAS,CAAC,GAAuB,EAAE,GAAW;IACrD,OAAO,iBAAiB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,OAAO,CAAC,MAAuB,EAAE,GAAiB;IACzD,OAAO,MAAM,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG;WAChG,MAAM,CAAC,IAAI,EAAE,OAAO,KAAK,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,EAAE,SAAS,KAAK,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;AAClG,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,aAAa,CAAC,GAAiB,EAAE,MAAc,YAAY,EAAE;IAC3E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAoB,CAAC;QACzF,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACtE,OAAO,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACpG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,kBAAkB,CAAC,GAAuB,EAAE,MAAc,YAAY,EAAE;IACtF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAyB,CAAC;QAC7F,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,CAAC;QAC5G,OAAO,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,MAA8C,EAAE,GAAW;IAC9E,MAAM,IAAI,GAAG,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjF,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACzC,IAAI,CAAC;QACH,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,0DAA0D,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QACxI,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,kBAAkB,CAAC,GAAiB,EAAE,GAAiB,EAAE,MAAc,YAAY,EAAE;IACnG,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACtC,MAAM,MAAM,GAAoB;QAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE;QAClE,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC;QACnC,YAAY,EAAE,KAAK,EAAE,YAAY,IAAI,EAAE;KACxC,CAAC;IACF,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACzB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,uBAAuB,CAAC,GAAiB,EAAE,GAAiB,EAAE,MAAc,YAAY,EAAE;IACxG,MAAM,MAAM,GAAuB,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;IACpG,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAyB;QAClC,GAAG,MAAM;QACT,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QAC9G,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAC;IACF,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACxB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,yBAAyB,CAAC,GAAiB,EAAE,UAA+B,EAAE,MAAc,YAAY,EAAE;IACxH,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,WAAW,CAAC,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;AACpF,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,sBAAsB,CAAC,GAAuB,EAAE,EAAU,EAAE,MAAc,YAAY,EAAE;IACtG,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,WAAW,CAAC,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;AAClD,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,kBAAkB,CAAC,MAAqC;IACtE,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO,IAAI,CAAC,GAAG,CAAC,yBAAyB,EAAE,0BAA0B,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACxF,CAAC;AAQD;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAA8B,EAAE,GAAW;IAC/E,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACjE,MAAM,OAAO,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC;IAC/B,MAAM,KAAK,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,cAAc,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,gCAAgC,IAAI,CAAC,IAAI,cAAc,IAAI,CAAC,UAAU,QAAQ,IAAI,CAAC,EAAE,GAAG,CAAC;IAChK,IAAI,GAAG,GAAG,KAAK;QAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,GAAG,KAAK,aAAa,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;IAC1I,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,qDAAqD,EAAE,CAAC;AACtI,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,sBAAsB,CAAC,KAA2B;IAChE,OAAO,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,+BAA+B,CAAC;AACjG,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,wBAAwB,CAAC,KAA2B,EAAE,cAAsB;IAC1F,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,aAAa,CAAC,CAAC,CAAC,CAAC;IAC3G,OAAO;QACL,cAAc;QACd,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EACJ,kCAAkC,KAAK,CAAC,IAAI,CAAC,MAAM,0BAA0B,KAAK,CAAC,GAAG,2BAA2B;cAC/G,cAAc,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,oCAAoC;cAC/G,sDAAsD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QAC7E,UAAU,EAAE,kBAAkB,CAAC,iBAAiB;QAChD,WAAW,EAAE,uBAAuB,CAAC,gBAAgB;QACrD,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE;YACP,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB;KACF,CAAC;AACJ,CAAC;AAYD;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAA8C;IAClF,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/C,OAAO;QACL,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;QACxC,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACtB,MAAM,OAAO,GAAG,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;YACrC,OAAO,EAAE,MAAM,EAAE,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QAClH,CAAC;QACD,gBAAgB,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,CAAC,yBAAyB,CAAC,GAAG,EAAE,EAAE,GAAG,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;QACzG,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,sBAAsB,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;QAChE,GAAG;KACJ,CAAC;AACJ,CAAC"}

package/dist/verify/gate-verdicts/own-gate-verdict.d.ts

@@ -0,0 +1,65 @@
+/**
+ * A delivery's OWN-gate verdict at one commit -- the read every verdict consumer
+ * shares: the review exit's commit-verdict gate
+ * (completion/review-exit-holds/review-exit-verdict-gate.ts), the release pass
+ * (completion/review-exit-holds/commit-verdict-release.ts), standing-approval convergence, the
+ * verification loop's held-verdict read (composition/verification-context.ts)
+ * and the resumed coding team's prompt (spawn/prompt-assembly.ts).
+ *
+ * A verdict is read from the delivery's own gate sources only: the per-commit
+ * record under the gate that governs the delivery (resolveCommitGate: its
+ * explicit command + timeout, or the default-on gate), and the outcome its
+ * explicit-method run recorded (readDeliveryGateOutcome) under the gate the
+ * resolution names for it (explicitGateKey). A FAILED verdict from any source
+ * wins; a pass needs no failure from another. A resolution that throws holds
+ * (fail closed), and a null sha matches no per-commit record. The full rule and
+ * its reasons are the module header of completion/review-exit-holds/review-exit-verdict-gate.ts,
+ * the gate that first read verdicts this way.
+ *
+ * @module verify/gate-verdicts/own-gate-verdict
+ */
+import type { GateVerdictSummary } from '../../queries/delivery-gate-state/delivery-gate-state.js';
+import type { CommitGateResolution, CommitGateSeams, CommitGateSubject } from '../gate-config/commit-gate-configured.js';
+import type { CommitVerdict } from './commit-verdict-record.js';
+import type { RecordedGateOutcome } from './gate-run-registry.js';
+/** The verdict reads: the gate seams a delivery's own-gate verdict is read through. */
+export type GateReads = Pick<Partial<CommitGateSeams>, 'isCommitGateConfigured' | 'resolveCommitGate' | 'readCommitVerdict' | 'readDeliveryGateOutcome'>;
+/** What the gate knows about a commit: no gate configured, or the verdict recorded for it (pending = none yet). */
+export type GateVerdictState = 'unconfigured' | 'passed' | 'failed' | 'pending';
+/** The delivery's own-gate verdict at one commit, and the per-commit record read for it. */
+export interface OwnGateVerdict {
+    outcome: RecordedGateOutcome;
+    record: CommitVerdict | null;
+}
+/**
+ * Read every own-gate source for one delivery at one commit (see the module
+ * header): the per-commit record under `resolution.gate`, and the outcome its
+ * explicit-method run recorded for that commit -- failed when either failed, else
+ * passed when either passed, else null. A null sha matches no per-commit record,
+ * only an explicit outcome that judged no commit.
+ */
+export declare function readOwnGateVerdict(deps: Pick<GateReads, 'readCommitVerdict' | 'readDeliveryGateOutcome'>, subject: CommitGateSubject, sha: string | null, resolution: CommitGateResolution): OwnGateVerdict | null;
+/**
+ * Read the gate's state for one delivery at one judged commit from its own-gate
+ * sources (readOwnGateVerdict): unconfigured when no gate is configured (or no
+ * gate seam is wired), else the verdict, else pending. A resolution that throws
+ * holds (fail closed), and a null sha matches no per-commit record (a verdict
+ * cannot be matched to a commit nobody could name).
+ */
+export declare function readGateVerdictState(deps: GateReads, subject: CommitGateSubject, sha: string | null): Promise<GateVerdictState>;
+/** readGateVerdictState, with the per-commit record the own-gate read took (null when none). */
+export declare function readGateVerdict(deps: GateReads, subject: CommitGateSubject, sha: string | null): Promise<{
+    state: GateVerdictState;
+    record: CommitVerdict | null;
+}>;
+/**
+ * The verdict for exactly `sha` from the same own-gate sources the gate reads
+ * (readOwnGateVerdict): the per-commit record's summary (with its failing stage)
+ * where the record is the deciding verdict, else the outcome alone. The gate is
+ * resolved without asking configured-ness -- a bare predicate carries no gate, and
+ * a resolution that cannot be read matches no record. Null when no source has one.
+ * Also the resume's read for a judged-commit stamp that persisted no verdict
+ * (spawn/prompt-assembly.ts), so that read is never gate-less either.
+ */
+export declare function ownGateVerdictFor(deps: GateReads, subject: CommitGateSubject, sha: string): Promise<GateVerdictSummary | null>;
+//# sourceMappingURL=own-gate-verdict.d.ts.map

package/dist/verify/gate-verdicts/own-gate-verdict.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"own-gate-verdict.d.ts","sourceRoot":"","sources":["../../../src/verify/gate-verdicts/own-gate-verdict.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0DAA0D,CAAC;AACnG,OAAO,KAAK,EAAE,oBAAoB,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AACzH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAMlE,uFAAuF;AACvF,MAAM,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,wBAAwB,GAAG,mBAAmB,GAAG,mBAAmB,GAAG,yBAAyB,CAAC,CAAC;AAEzJ,mHAAmH;AACnH,MAAM,MAAM,gBAAgB,GAAG,cAAc,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;AA2BhF,4FAA4F;AAC5F,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,mBAAmB,CAAC;IAC7B,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,mBAAmB,GAAG,yBAAyB,CAAC,EACtE,OAAO,EAAE,iBAAiB,EAC1B,GAAG,EAAE,MAAM,GAAG,IAAI,EAClB,UAAU,EAAE,oBAAoB,GAC/B,cAAc,GAAG,IAAI,CAMvB;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,SAAS,EACf,OAAO,EAAE,iBAAiB,EAC1B,GAAG,EAAE,MAAM,GAAG,IAAI,GACjB,OAAO,CAAC,gBAAgB,CAAC,CAE3B;AAED,gGAAgG;AAChG,wBAAsB,eAAe,CACnC,IAAI,EAAE,SAAS,EACf,OAAO,EAAE,iBAAiB,EAC1B,GAAG,EAAE,MAAM,GAAG,IAAI,GACjB,OAAO,CAAC;IAAE,KAAK,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAAA;CAAE,CAAC,CAKpE;AAED;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,SAAS,EACf,OAAO,EAAE,iBAAiB,EAC1B,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAcpC"}

package/dist/verify/gate-verdicts/own-gate-verdict.js

@@ -0,0 +1,91 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/completion/review-exit-holds/review-exit-verdict-gate.test.ts,
+//   packages/daemon/src/verify/engine/verification-commit-sharing.test.ts
+// PINNED-BY-END
+import { gateVerdictFromCommitVerdict } from './gate-verdict-source.js';
+import { createLogger } from '../../log/daemon-log.js';
+const log = createLogger({ module: 'focus-executor' });
+/** No gate to read a per-commit record under, and nothing configured. */
+const NO_GATE = { configured: false, gate: null };
+/**
+ * The resolution the gate reads take: a bare isCommitGateConfigured predicate,
+ * when supplied (a partial deps object; production wires resolveCommitGate only),
+ * answers configured-ness alone with no gate and wins over a resolver beside it --
+ * so an override is never silently shadowed by spread production seams. Null when
+ * neither seam is wired. A resolution that throws reads as configured with no gate
+ * (fail closed).
+ */
+async function resolveGateReads(deps, subject) {
+    const { isCommitGateConfigured } = deps;
+    const resolveGate = isCommitGateConfigured
+        ? async (s) => ({ configured: await isCommitGateConfigured(s), gate: null })
+        : deps.resolveCommitGate;
+    if (!resolveGate)
+        return null;
+    try {
+        return await resolveGate(subject);
+    }
+    catch (err) {
+        log.warn(`[focus-executor] commit-gate predicate failed for delivery ${subject.deliveryId} -- holding (fail-closed): ${err.message}`);
+        return { configured: true, gate: null };
+    }
+}
+/**
+ * Read every own-gate source for one delivery at one commit (see the module
+ * header): the per-commit record under `resolution.gate`, and the outcome its
+ * explicit-method run recorded for that commit -- failed when either failed, else
+ * passed when either passed, else null. A null sha matches no per-commit record,
+ * only an explicit outcome that judged no commit.
+ */
+export function readOwnGateVerdict(deps, subject, sha, resolution) {
+    const record = sha && deps.readCommitVerdict ? deps.readCommitVerdict(subject.productId, subject.focusId, sha, resolution.gate) : null;
+    const explicit = deps.readDeliveryGateOutcome?.(subject.deliveryId, sha, subject.gateState, resolution.explicitGateKey) ?? null;
+    const outcomes = [record?.outcome ?? null, explicit];
+    const outcome = outcomes.includes('failed') ? 'failed' : outcomes.find((o) => o !== null) ?? null;
+    return outcome ? { outcome, record } : null;
+}
+/**
+ * Read the gate's state for one delivery at one judged commit from its own-gate
+ * sources (readOwnGateVerdict): unconfigured when no gate is configured (or no
+ * gate seam is wired), else the verdict, else pending. A resolution that throws
+ * holds (fail closed), and a null sha matches no per-commit record (a verdict
+ * cannot be matched to a commit nobody could name).
+ */
+export async function readGateVerdictState(deps, subject, sha) {
+    return (await readGateVerdict(deps, subject, sha)).state;
+}
+/** readGateVerdictState, with the per-commit record the own-gate read took (null when none). */
+export async function readGateVerdict(deps, subject, sha) {
+    const resolution = await resolveGateReads(deps, subject);
+    if (!resolution?.configured)
+        return { state: 'unconfigured', record: null };
+    const verdict = readOwnGateVerdict(deps, subject, sha, resolution);
+    return { state: verdict?.outcome ?? 'pending', record: verdict?.record ?? null };
+}
+/**
+ * The verdict for exactly `sha` from the same own-gate sources the gate reads
+ * (readOwnGateVerdict): the per-commit record's summary (with its failing stage)
+ * where the record is the deciding verdict, else the outcome alone. The gate is
+ * resolved without asking configured-ness -- a bare predicate carries no gate, and
+ * a resolution that cannot be read matches no record. Null when no source has one.
+ * Also the resume's read for a judged-commit stamp that persisted no verdict
+ * (spawn/prompt-assembly.ts), so that read is never gate-less either.
+ */
+export async function ownGateVerdictFor(deps, subject, sha) {
+    let resolution = NO_GATE;
+    if (!deps.isCommitGateConfigured && deps.resolveCommitGate) {
+        try {
+            resolution = await deps.resolveCommitGate(subject);
+        }
+        catch {
+            // Unresolvable: no gate, so no per-commit record; the explicit outcome is still read.
+        }
+    }
+    const verdict = readOwnGateVerdict(deps, subject, sha, resolution);
+    if (!verdict)
+        return null;
+    return verdict.record && verdict.record.outcome === verdict.outcome
+        ? gateVerdictFromCommitVerdict(verdict.record)
+        : { outcome: verdict.outcome, sha };
+}
+//# sourceMappingURL=own-gate-verdict.js.map

package/dist/verify/gate-verdicts/own-gate-verdict.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"own-gate-verdict.js","sourceRoot":"","sources":["../../../src/verify/gate-verdicts/own-gate-verdict.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,gGAAgG;AAChG,0EAA0E;AAC1E,gBAAgB;AA2BhB,OAAO,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAQvD,yEAAyE;AACzE,MAAM,OAAO,GAAyB,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAExE;;;;;;;GAOG;AACH,KAAK,UAAU,gBAAgB,CAAC,IAAe,EAAE,OAA0B;IACzE,MAAM,EAAE,sBAAsB,EAAE,GAAG,IAAI,CAAC;IACxC,MAAM,WAAW,GAAG,sBAAsB;QACxC,CAAC,CAAC,KAAK,EAAE,CAAoB,EAAiC,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC9H,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;IAC3B,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC;QACH,OAAO,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,8DAA8D,OAAO,CAAC,UAAU,8BAA+B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACjJ,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;AACH,CAAC;AAQD;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAsE,EACtE,OAA0B,EAC1B,GAAkB,EAClB,UAAgC;IAEhC,MAAM,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvI,MAAM,QAAQ,GAAG,IAAI,CAAC,uBAAuB,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC;IAChI,MAAM,QAAQ,GAAsC,CAAC,MAAM,EAAE,OAAO,IAAI,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxF,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC;IAClG,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAe,EACf,OAA0B,EAC1B,GAAkB;IAElB,OAAO,CAAC,MAAM,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;AAC3D,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAe,EACf,OAA0B,EAC1B,GAAkB;IAElB,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU,EAAE,UAAU;QAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5E,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;IACnE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,IAAI,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,IAAI,EAAE,CAAC;AACnF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAe,EACf,OAA0B,EAC1B,GAAW;IAEX,IAAI,UAAU,GAAG,OAAO,CAAC;IACzB,IAAI,CAAC,IAAI,CAAC,sBAAsB,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3D,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,sFAAsF;QACxF,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;IACnE,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,OAAO,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;QACjE,CAAC,CAAC,4BAA4B,CAAC,OAAO,CAAC,MAAM,CAAC;QAC9C,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC;AACxC,CAAC"}