@telora/daemon 0.22.245 → 0.22.289

package/dist/queries/verification.js

@@ -1,434 +0,0 @@
-// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: 34 tests -- run: npm run gen:pinned-by -- --list packages/daemon/src/queries/verification.ts
-// PINNED-BY-END
-/**
- * Pluggable verification queries (Differential Focus Spec).
- *
- * - Fetch deliveries in verify status that need verification.
- * - Record the outcome of a verification attempt.
- * - Trigger the existing reality_tree_verify_injection compound op on pass.
- */
-import { callApi } from './shared.js';
-import { decideNodeWriteback, detectInwardDrift, shortfallWritebacksFromObservation, } from '../reality/reality-writeback.js';
-import { createLogger } from '../shell/log.js';
-const log = createLogger({ module: 'reality-writeback' });
-export async function getPendingVerifications(productId) {
-    const response = await callApi('daemon_get_pending_verifications', productId ? { productId } : {});
-    return response.items ?? [];
-}
-export async function recordDeliveryVerificationOutcome(deliveryId, outcome) {
-    await callApi('daemon_record_delivery_verification_outcome', { deliveryId, outcome });
-}
-/**
- * True when `err` is the verify edge's lifecycle rejection of an injection that
- * is ALREADY 'verified' ("Cannot verify injection in status 'verified'...").
- * That injection already sits in the state the stamp drives it to (an earlier
- * pass of the same delivery, or a sibling, stamped it), so the daemon treats the
- * rejection as success. Keyed on the rejection text because an edge deployed
- * before the idempotent no-op still returns it as a 400 -- the daemon must not
- * depend on when the edge function deploys. Every OTHER rejection (a non-verify
- * lifecycle state, a non-injection node, a transport error) is not matched.
- */
-export function isAlreadyVerifiedRejection(err) {
-    const message = err instanceof Error ? err.message : typeof err === 'string' ? err : '';
-    return /Cannot verify injection in status 'verified'/.test(message);
-}
-/**
- * Issue `reality_tree_verify_injection`, treating an already-verified injection
- * as success (see `isAlreadyVerifiedRejection`). Any other failure is rethrown.
- */
-async function callVerifyInjectionIdempotent(call, body) {
-    try {
-        await call('reality_tree_verify_injection', body);
-    }
-    catch (err) {
-        if (!isAlreadyVerifiedRejection(err))
-            throw err;
-        log.info(`[verify-injection] injection ${String(body.injectionNodeId).slice(0, 8)} is already verified -- ` +
-            'the stamp has already landed; treating as success');
-    }
-}
-/**
- * Build the SINGLE `reality_tree_verify_injection` body: the injection id, the
- * restatement entries (key omitted when there are none, so a plain flip sends
- * the body it always did), and the evidence.
- *
- * EVIDENCE RIDES THIS BODY rather than a preceding `reality_tree_node_update`,
- * and that is the whole point of the collapse. The earned-promotion gate lives
- * INSIDE the verify action
- * (`supabase/functions/product-api/handlers/reality-tree/graph-verification.ts`
- * `verifyInjectionImpl`), so
- * any write issued before it is a write an ordinary refusal -- the common case
- * the gate exists to produce -- has already made and cannot take back. Nor is
- * the answer to reorder the two calls: a verify that succeeded followed by an
- * evidence write that failed leaves a verified injection citing nothing, which
- * inverts the defect instead of closing it. The edge now persists `evidence` in
- * the SAME update that flips `injection_status='verified'` and `status=
- * 'retired'`, strictly after the gate, so a refusal of ANY kind
- * (`unearned_promotion`, `override_reason_required`, a bad lifecycle status,
- * unreadable anchors) leaves the injection byte-for-byte as it found it. The
- * MCP tool `telora_reality_tree_injection_verify` was collapsed onto the same
- * action first (f5527c3c1); this is the same fix on the busier caller.
- *
- * A blank/absent citation sends NO `evidence` key, mirroring the edge's own
- * rule: an absent value writes no column rather than blanking the citation
- * already there. Several callers (the plain stamp with no evidence resolved)
- * legitimately have none, and treating that as "erase what is there" would
- * destroy evidence on a path that never had any to offer.
- */
-function buildVerifyInjectionBody(injectionNodeId, entries, evidence) {
-    const body = { injectionNodeId };
-    if (entries.length > 0)
-        body.restatements = entries;
-    // Trimmed, because the edge trims before deciding whether to write -- sending
-    // the trimmed text keeps client and server reading the same citation.
-    const cited = typeof evidence === 'string' ? evidence.trim() : '';
-    if (cited.length > 0)
-        body.evidence = cited;
-    return body;
-}
-/**
- * Compound op: retires the injection, persists the evidence that justifies it,
- * and promotes its FRT overlay to CRT -- in ONE gated call.
- * Idempotent: an injection already 'verified' is a success, not an error.
- * Optional per-target restatements (authored on the passing verdict) are
- * applied by the edge as each targeted UDE's new base statement; the edge
- * never authors prose itself.
- *
- * `evidence`, when a real citation, is carried on the verify body and written
- * by the edge in the same update that retires the node -- never by a preceding
- * `reality_tree_node_update`, which a refused verify could not take back. See
- * `buildVerifyInjectionBody`. A blank/absent value writes nothing.
- *
- * `withheldNodeIds` are targets that must NOT flip with the injection: nodes an
- * operator EXCUSED from a shortfall (verify/shortfall-rulings.ts) -- cleared from
- * the gate, never achieved. Each is sent as a shortfall-classified restatement,
- * the edge's no-flip entry (graph-verification.ts verifyInjectionImpl skips it
- * entirely: no node_type flip, no statement, no classification). Pure pass-through
- * of ids; nothing is sent when none are given.
- */
-export async function verifyInjectionOnPass(injectionNodeId, restatements, evidence, withheldNodeIds = [], deps = {}) {
-    const call = deps.callApi ?? callApi;
-    const withheld = withheldNodeIds.map((nodeId) => ({ nodeId, classification: 'shortfall' }));
-    const entries = [...(restatements ?? []), ...withheld];
-    await callVerifyInjectionIdempotent(call, buildVerifyInjectionBody(injectionNodeId, entries, evidence));
-}
-/**
- * Same compound op as `verifyInjectionOnPass`, for a caller that always has a
- * citation: ONE `reality_tree_verify_injection` call carrying `evidence`, which
- * the edge persists in the same update that flips injection_status to
- * 'verified', retains targets edges, and promotes FRT overlays.
- *
- * Used by the focus-level close-loop injection sweep so the rationale
- * (which closed delivery anchored the realization) is persisted alongside
- * the verify decision -- and, because it is one gated call, persisted if and
- * only if that decision was actually made. See `buildVerifyInjectionBody` for
- * why the evidence cannot be a separate preceding write.
- */
-export async function verifyInjectionWithEvidence(injectionNodeId, evidence, deps = {}) {
-    const call = deps.callApi ?? callApi;
-    await callVerifyInjectionIdempotent(call, buildVerifyInjectionBody(injectionNodeId, [], evidence));
-}
-/**
- * Translate the pure `decideNodeWriteback` output into the verify call's
- * `restatements` payload.
- *
- * The flip endpoint (`reality_tree_verify_injection`) is the only seam that
- * persists a node's `verify_classification` / `verify_divergence_reason`, and
- * it does so per-restatement -- but ONLY when the restatement carries a
- * non-empty `statement` (an empty statement is dropped whole, classification
- * included). So a writeback can be applied iff it carries achieved prose.
- *
- * Mapping:
- *   - match | legitimate_divergence WITH a non-empty statement -> a
- *     VerifyRestatement carried into the flip so classification (+ reason)
- *     lands atomically with the promotion. The achieved statement is the prose
- *     written as the targeted UDE's new base statement (for a match this equals
- *     the declared desired effect carried forward unchanged).
- *   - any writeback WITHOUT achieved prose, or a `shortfall` -> NOT emitted as
- *     a restatement (there is no edge path that stamps classification without
- *     prose, and a shortfall must not flip the node). Reported back via
- *     `skipped` so the caller can see what was not stamped.
- *
- * Pure (no I/O); exported for unit testing the mapping.
- */
-export function planNodeWritebackApply(writebacks) {
-    const restatements = [];
-    const skipped = [];
-    for (const wb of writebacks) {
-        if (wb.classification === 'shortfall') {
-            skipped.push({
-                nodeId: wb.nodeId,
-                reason: 'shortfall: no flip; classification not persisted (claim did not hold)',
-            });
-            continue;
-        }
-        // TEL-6: an `assumed` match carries no evidence. Persisting a
-        // verify_classification='match' for it would record an UNEARNED "verified"
-        // claim, so skip it -- the node stays unstamped until grounded by evidence.
-        if (wb.classification === 'match' && wb.assumed === true) {
-            skipped.push({
-                nodeId: wb.nodeId,
-                reason: 'assumed match: no evidence; not stamped verified (unearned certainty)',
-            });
-            continue;
-        }
-        const statement = wb.statement;
-        if (typeof statement !== 'string' || statement.trim().length === 0) {
-            skipped.push({
-                nodeId: wb.nodeId,
-                reason: 'no achieved statement: verify edge drops a restatement with empty prose',
-            });
-            continue;
-        }
-        // match | legitimate_divergence WITH prose -> restatement.
-        const entry = {
-            nodeId: wb.nodeId,
-            statement,
-            classification: wb.classification,
-        };
-        if (wb.classification === 'legitimate_divergence' && wb.verifyDivergenceReason) {
-            entry.divergenceReason = wb.verifyDivergenceReason;
-        }
-        restatements.push(entry);
-    }
-    return { restatements, skipped };
-}
-/**
- * Same as `verifyInjectionWithEvidence` but additionally stamps the per-node
- * realized/diverged writeback computed by `decideNodeWriteback`. Closes the
- * reality-tree writeback loop: as a delivery lands, the nodes its injection
- * targeted carry an explicit match / legitimate_divergence status legible to a
- * later reader.
- *
- * ONE gated call does all of it: `reality_tree_verify_injection` carries the
- * per-node restatements AND the evidence, so the edge flips the injection,
- * promotes overlays, applies the classification (+ reason) to each targeted
- * UDE, and persists the citation in a single post-gate update. Writebacks with
- * no achieved prose, and shortfalls, are skipped (logged) -- there is no edge
- * path that persists a classification without prose / a flip. The evidence is
- * NOT a preceding `reality_tree_node_update`: see `buildVerifyInjectionBody`
- * for why a write ahead of the earned-promotion gate is a write a refusal
- * cannot take back.
- *
- * Non-destructive: only stamps status + evidence/reason on nodes the injection
- * owns; a match carries the declared desired effect forward unchanged. When
- * `writebacks` is empty this is byte-equivalent to `verifyInjectionWithEvidence`.
- */
-export async function verifyInjectionWithWriteback(injectionNodeId, evidence, writebacks, realityTreeId, deps = {}) {
-    const call = deps.callApi ?? callApi;
-    const { restatements, skipped } = planNodeWritebackApply(writebacks);
-    if (skipped.length > 0) {
-        log.warn(`[reality-writeback] injection ${injectionNodeId.slice(0, 8)}: ` +
-            `${skipped.length} targeted node writeback(s) not stamped -- ` +
-            skipped.map((s) => `${s.nodeId.slice(0, 8)} (${s.reason})`).join('; '));
-    }
-    await callVerifyInjectionIdempotent(call, buildVerifyInjectionBody(injectionNodeId, restatements, evidence));
-    // Inward drift: any node reality CONTRADICTED (legitimate_divergence /
-    // shortfall) is a claim the tree got wrong. Turn each one into an inward
-    // crt_drift_proposal so the tree-owner can correct the asserting claim,
-    // instead of leaving a mistaken assertion frozen. Surfaced for human ratify;
-    // never auto-applied. Best-effort + non-fatal: a proposal-emit failure must
-    // not undo the verify/flip that already landed.
-    await emitInwardDriftProposals(injectionNodeId, writebacks, realityTreeId, deps);
-}
-/**
- * Surface inward drift proposals for the contradicted nodes in a writeback.
- *
- * For each writeback the pure `detectInwardDrift` deems a contradicted claim
- * (`legitimate_divergence` / `shortfall`), create one `update_statement`
- * crt_drift_proposal flagged `inward:true` via the EXISTING
- * `crt_drift_proposal_create` pipeline. A `match` (or unstamped) node yields
- * nothing, so a clean landing emits no proposals.
- *
- * Requires the reality tree id (the create action keys off it). When the tree
- * id is unknown, the proposals cannot be created -- we log and skip, leaving
- * the per-node stamps in place (a later reader still sees the divergence).
- *
- * Non-fatal: each create is independently try/caught so one failure neither
- * blocks the others nor unwinds the already-applied verify flip.
- */
-export async function emitInwardDriftProposals(injectionNodeId, writebacks, realityTreeId, deps = {}) {
-    const call = deps.callApi ?? callApi;
-    const proposals = writebacks
-        .map((wb) => {
-        const stamped = {
-            nodeId: wb.nodeId,
-            verifyClassification: wb.classification,
-            verifyDivergenceReason: wb.verifyDivergenceReason ?? null,
-            // TEL-5: the claim a human ratifier must reconsider is the tree's
-            // ORIGINAL assertion (the claim reality CONTRADICTED), NOT the achieved
-            // reality prose. Carry `originalClaim`; the detector falls back to a
-            // placeholder when it is absent. (`wb.statement` is the achieved prose
-            // -- it belongs in proposedCorrection / the divergence reason, never in
-            // observedState.)
-            claimStatement: wb.originalClaim ?? null,
-        };
-        return detectInwardDrift(stamped);
-    })
-        .filter((p) => p !== null);
-    if (proposals.length === 0)
-        return;
-    if (!realityTreeId) {
-        log.warn(`[reality-writeback] injection ${injectionNodeId.slice(0, 8)}: ` +
-            `${proposals.length} contradicted node(s) detected but no realityTreeId -- ` +
-            `inward drift proposals NOT created (per-node stamps retained).`);
-        return;
-    }
-    for (const proposal of proposals) {
-        try {
-            await call('crt_drift_proposal_create', {
-                realityTreeId,
-                proposalKind: proposal.proposalKind,
-                observedState: proposal.observedState,
-                proposedCorrection: proposal.proposedCorrection,
-                nodeId: proposal.nodeId,
-                proposedMetadata: proposal.proposedMetadata,
-            });
-        }
-        catch (err) {
-            log.warn(`[reality-writeback] Failed to create inward drift proposal for node ` +
-                `${proposal.nodeId.slice(0, 8)} (tree ${realityTreeId.slice(0, 8)}): ` +
-                `${err.message}. Stamp retained; proposal not surfaced.`);
-        }
-    }
-}
-/**
- * BAR-LOWERING METER FEED: turn a genuine under-delivery OBSERVED at the
- * per-delivery verify gate into a PENDING inward `shortfall` drift proposal, so
- * the tree claim it contradicts can be adjudicated by a human. The injection is
- * NOT flipped (a shortfall must never verify the claim). The `emit` seam is the
- * caller's injectable `emitInwardDriftProposals` (kept injectable so the verify
- * engine's tests can observe it). `delivered` is sourced from OBSERVATION inside
- * `shortfallWritebacksFromObservation` -- never a hardcoded literal. Best-effort +
- * non-fatal: an emit failure must not disturb the caller's gate hold / re-work
- * routing. No shortfalls -> no writeback -> no emit (a clean pass raises nothing).
- */
-export async function emitObservedShortfallDrift(emit, injectionNodeId, shortfalls, realityTreeId) {
-    const writebacks = shortfallWritebacksFromObservation(injectionNodeId, shortfalls);
-    if (writebacks.length === 0)
-        return;
-    try {
-        await emit(injectionNodeId, writebacks, realityTreeId);
-    }
-    catch (err) {
-        log.warn(`[reality-writeback] inward shortfall drift emit failed for ` +
-            `${injectionNodeId.slice(0, 8)}: ${err.message}`);
-    }
-}
-/**
- * Resolve the targeted UDE nodes of an injection via the existing
- * `reality_tree_edge_list` ('targets' edges out of the injection) joined to
- * `reality_tree_node_list` for each target's declared prose. Returns [] when
- * the tree id is unknown or a lookup fails -- the writeback then degrades to a
- * plain injection verify (no per-node stamping), which is non-destructive and
- * matches prior behavior.
- */
-export async function resolveTargetedNodes(injectionId, treeId, deps = {}) {
-    const call = deps.callApi ?? callApi;
-    if (!treeId)
-        return [];
-    try {
-        const [edgesResp, nodesResp] = await Promise.all([
-            call('reality_tree_edge_list', { treeId }),
-            call('reality_tree_node_list', { treeId }),
-        ]);
-        const targetIds = (edgesResp.items ?? [])
-            .filter((e) => e.edgeType === 'targets' && e.fromNodeId === injectionId)
-            .map((e) => e.toNodeId);
-        if (targetIds.length === 0)
-            return [];
-        const nodeById = new Map();
-        for (const n of nodesResp.items ?? [])
-            nodeById.set(n.id, n);
-        const isClassification = (v) => v === 'match' || v === 'legitimate_divergence' || v === 'shortfall';
-        return targetIds.map((nodeId) => {
-            const node = nodeById.get(nodeId);
-            const declared = node?.frtStatement ?? node?.statement ?? '';
-            const existing = node?.verifyClassification;
-            return {
-                nodeId,
-                achievedStatement: declared,
-                originalClaim: declared,
-                existingClassification: isClassification(existing) ? existing : null,
-            };
-        });
-    }
-    catch (err) {
-        log.warn(`[reality-writeback] Failed to resolve targeted nodes for injection ` +
-            `${injectionId.slice(0, 8)} (tree ${treeId.slice(0, 8)}): ${err.message}. ` +
-            `Falling back to plain verify (no per-node writeback).`);
-        return [];
-    }
-}
-/**
- * Build the writeback-applying verify callback used by the close-loop sweep.
- *
- * For each injection the sweep verifies, this closure:
- *   1. Resolves the injection's targeted UDE node ids (edge-list) + each node's
- *      EXISTING verify_classification.
- *   2. Models the landing as a CLEAN realization for the still-unstamped (or
- *      already-match) targets -- the anchoring delivery closed successfully, so
- *      the cascade is treated as flipped and the injection as delivered. A
- *      target the per-delivery verify path ALREADY stamped as a contradiction
- *      (legitimate_divergence / shortfall) is EXCLUDED from the landing so the
- *      close-loop sweep never clobbers a diverged stamp back to 'match' (TEL-3).
- *   3. Computes the per-node writeback and applies it via
- *      `verifyInjectionWithWriteback`, stamping match/evidence on each targeted
- *      UDE so a later reader sees which claims actually held.
- *
- * No targeted nodes -> the writeback is empty and the call is byte-equivalent
- * to the plain `verifyInjectionWithEvidence`.
- *
- * `treeIdByInjection` maps an injection node id to its reality_tree id, captured
- * from the focus-injections snapshot. The returned callback matches the
- * `(injectionId, evidence) => Promise<void>` shape the focus injection sweep
- * expects, so it drops into `executeSweep` unchanged.
- *
- * Exported here (rather than in the sweep module) so the wiring is unit-testable
- * against the callApi mock seam without dragging the sweep's import graph.
- */
-export function buildWritebackVerify(treeIdByInjection, deps = {}, deliveredByInjection = new Map()) {
-    return async (injectionId, evidence) => {
-        const treeId = treeIdByInjection.get(injectionId);
-        const resolved = await resolveTargetedNodes(injectionId, treeId, deps);
-        // TEL-3: a node the per-delivery verify path ALREADY stamped as a
-        // contradiction (legitimate_divergence / shortfall) must NOT be clobbered
-        // back to 'match' at close-loop. Exclude it from the clean-match landing --
-        // its stamp (and its inward drift proposal) already landed at verify time.
-        // Only un-stamped (or already-match) nodes get a fresh close-loop match.
-        const targetedNodes = resolved
-            .filter((n) => n.existingClassification !== 'legitimate_divergence' &&
-            n.existingClassification !== 'shortfall')
-            .map((n) => ({
-            nodeId: n.nodeId,
-            achievedStatement: n.achievedStatement,
-            originalClaim: n.originalClaim,
-        }));
-        // `delivered` / `cascadeFlipped` are sourced from OBSERVATION -- the
-        // anchoring delivery's real terminal state (done => delivered), threaded in
-        // via `deliveredByInjection` -- never a hardcoded literal. Only injections
-        // whose anchoring delivery closed successfully are ever swept, so this is
-        // true in practice; reading it from observation (rather than `true`) keeps
-        // decideNodeWriteback Rule 2 reachable, so a future divergent landing routed
-        // through this path stamps a `shortfall` instead of a false `match`. The
-        // cascade is treated as flipped exactly when the injection delivered --
-        // derived from the same observed verdict, not a literal. Absent an entry
-        // (older callers), it defaults to delivered=true (the sweep's prior meaning).
-        const delivered = deliveredByInjection.get(injectionId) !== false;
-        const writebacks = decideNodeWriteback({
-            injectionId,
-            targetedNodes,
-            cascadeFlipped: delivered,
-            delivered,
-            evidence,
-        });
-        // Pass the tree id so any contradicted node (divergence/shortfall) can be
-        // surfaced as an inward drift proposal. The close-loop sweep models a clean
-        // landing (all 'match') for a delivered injection, so this emits nothing in
-        // that case -- but the seam is wired so a divergent/undelivered landing
-        // routed through this path corrects the tree.
-        await verifyInjectionWithWriteback(injectionId, evidence, writebacks, treeId, deps);
-    };
-}
-//# sourceMappingURL=verification.js.map

package/dist/queries/verification.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"verification.js","sourceRoot":"","sources":["../../src/queries/verification.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,0GAA0G;AAC1G,gBAAgB;AAEhB;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,EAAoB,MAAM,aAAa,CAAC;AACxD,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,kCAAkC,GAMnC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAG/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;AA2C1D,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,SAAkB;IAElB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B,kCAAkC,EAClC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAC/B,CAAC;IACF,OAAO,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,UAAkB,EAClB,OAA4B;IAE5B,MAAM,OAAO,CAAC,6CAA6C,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;AACxF,CAAC;AAiBD;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CAAC,GAAY;IACrD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,OAAO,8CAA8C,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACtE,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,6BAA6B,CAC1C,IAAoB,EACpB,IAA6B;IAE7B,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC;YAAE,MAAM,GAAG,CAAC;QAChD,GAAG,CAAC,IAAI,CACN,gCAAgC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,0BAA0B;YAClG,mDAAmD,CACpD,CAAC;IACJ,CAAC;AACH,CAAC;AAUD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,SAAS,wBAAwB,CAC/B,eAAuB,EACvB,OAAmC,EACnC,QAAiB;IAEjB,MAAM,IAAI,GAA4B,EAAE,eAAe,EAAE,CAAC;IAC1D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;IACpD,8EAA8E;IAC9E,sEAAsE;IACtE,MAAM,KAAK,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;IAC5C,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,eAAuB,EACvB,YAAkC,EAClC,QAAiB,EACjB,kBAAqC,EAAE,EACvC,OAAoB,EAAE;IAEtB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC;IACrC,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAClC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,WAAoB,EAAE,CAAC,CAC/D,CAAC;IACF,MAAM,OAAO,GAAsB,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,GAAG,QAAQ,CAAC,CAAC;IAC1E,MAAM,6BAA6B,CACjC,IAAI,EACJ,wBAAwB,CAAC,eAAe,EAAE,OAAO,EAAE,QAAQ,CAAC,CAC7D,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,eAAuB,EACvB,QAAgB,EAChB,OAAoB,EAAE;IAEtB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC;IACrC,MAAM,6BAA6B,CAAC,IAAI,EAAE,wBAAwB,CAAC,eAAe,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;AACrG,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,sBAAsB,CAAC,UAAoC;IAIzE,MAAM,YAAY,GAAwB,EAAE,CAAC;IAC7C,MAAM,OAAO,GAA8C,EAAE,CAAC;IAC9D,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,IAAI,EAAE,CAAC,cAAc,KAAK,WAAW,EAAE,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,MAAM,EAAE,uEAAuE;aAChF,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,8DAA8D;QAC9D,2EAA2E;QAC3E,4EAA4E;QAC5E,IAAI,EAAE,CAAC,cAAc,KAAK,OAAO,IAAI,EAAE,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,MAAM,EAAE,uEAAuE;aAChF,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,EAAE,CAAC,SAAS,CAAC;QAC/B,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnE,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,MAAM,EAAE,yEAAyE;aAClF,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,2DAA2D;QAC3D,MAAM,KAAK,GAAsB;YAC/B,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,SAAS;YACT,cAAc,EAAE,EAAE,CAAC,cAAc;SAClC,CAAC;QACF,IAAI,EAAE,CAAC,cAAc,KAAK,uBAAuB,IAAI,EAAE,CAAC,sBAAsB,EAAE,CAAC;YAC/E,KAAK,CAAC,gBAAgB,GAAG,EAAE,CAAC,sBAAsB,CAAC;QACrD,CAAC;QACD,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,eAAuB,EACvB,QAAgB,EAChB,UAAoC,EACpC,aAAsB,EACtB,OAAoB,EAAE;IAEtB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC;IACrC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,sBAAsB,CAAC,UAAU,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CACN,iCAAiC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI;YAChE,GAAG,OAAO,CAAC,MAAM,6CAA6C;YAC9D,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACvE,CAAC;IACJ,CAAC;IAED,MAAM,6BAA6B,CACjC,IAAI,EACJ,wBAAwB,CAAC,eAAe,EAAE,YAAY,EAAE,QAAQ,CAAC,CAClE,CAAC;IAEF,uEAAuE;IACvE,yEAAyE;IACzE,wEAAwE;IACxE,6EAA6E;IAC7E,4EAA4E;IAC5E,gDAAgD;IAChD,MAAM,wBAAwB,CAAC,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;AACnF,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,eAAuB,EACvB,UAAoC,EACpC,aAAsB,EACtB,OAAoB,EAAE;IAEtB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC;IACrC,MAAM,SAAS,GAAG,UAAU;SACzB,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;QACV,MAAM,OAAO,GAAgB;YAC3B,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,oBAAoB,EAAE,EAAE,CAAC,cAAc;YACvC,sBAAsB,EAAE,EAAE,CAAC,sBAAsB,IAAI,IAAI;YACzD,kEAAkE;YAClE,wEAAwE;YACxE,qEAAqE;YACrE,uEAAuE;YACvE,wEAAwE;YACxE,kBAAkB;YAClB,cAAc,EAAE,EAAE,CAAC,aAAa,IAAI,IAAI;SACzC,CAAC;QACF,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAA8B,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAEzD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEnC,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,GAAG,CAAC,IAAI,CACN,iCAAiC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI;YAChE,GAAG,SAAS,CAAC,MAAM,yDAAyD;YAC5E,gEAAgE,CACjE,CAAC;QACF,OAAO;IACT,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,2BAA2B,EAAE;gBACtC,aAAa;gBACb,YAAY,EAAE,QAAQ,CAAC,YAAY;gBACnC,aAAa,EAAE,QAAQ,CAAC,aAAa;gBACrC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;gBAC/C,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;aAC5C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CACN,sEAAsE;gBACtE,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK;gBACtE,GAAI,GAAa,CAAC,OAAO,0CAA0C,CACpE,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,IAIkB,EAClB,eAAuB,EACvB,UAAwC,EACxC,aAAsB;IAEtB,MAAM,UAAU,GAAG,kCAAkC,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;IACnF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACpC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,eAAe,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CACN,6DAA6D;YAC7D,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAC5D,CAAC;IACJ,CAAC;AACH,CAAC;AA6BD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,WAAmB,EACnB,MAA0B,EAC1B,OAAoB,EAAE;IAEtB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC;IACrC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAYvB,IAAI,CAAC;QACH,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC/C,IAAI,CAAwB,wBAAwB,EAAE,EAAE,MAAM,EAAE,CAAC;YACjE,IAAI,CAAwB,wBAAwB,EAAE,EAAE,MAAM,EAAE,CAAC;SAClE,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;aACtC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,KAAK,WAAW,CAAC;aACvE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC1B,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;QAC5C,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,KAAK,IAAI,EAAE;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7D,MAAM,gBAAgB,GAAG,CAAC,CAAU,EAAgC,EAAE,CACpE,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,uBAAuB,IAAI,CAAC,KAAK,WAAW,CAAC;QACtE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAC9B,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,QAAQ,GAAG,IAAI,EAAE,YAAY,IAAI,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC;YAC7D,MAAM,QAAQ,GAAG,IAAI,EAAE,oBAAoB,CAAC;YAC5C,OAAO;gBACL,MAAM;gBACN,iBAAiB,EAAE,QAAQ;gBAC3B,aAAa,EAAE,QAAQ;gBACvB,sBAAsB,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;aACrE,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CACN,qEAAqE;YACrE,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAO,GAAa,CAAC,OAAO,IAAI;YACtF,uDAAuD,CACxD,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,oBAAoB,CAClC,iBAA8C,EAC9C,OAAoB,EAAE,EACtB,uBAAqD,IAAI,GAAG,EAAE;IAE9D,OAAO,KAAK,EAAE,WAAmB,EAAE,QAAgB,EAAiB,EAAE;QACpE,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACvE,kEAAkE;QAClE,0EAA0E;QAC1E,4EAA4E;QAC5E,2EAA2E;QAC3E,yEAAyE;QACzE,MAAM,aAAa,GAA0B,QAAQ;aAClD,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,sBAAsB,KAAK,uBAAuB;YACpD,CAAC,CAAC,sBAAsB,KAAK,WAAW,CAC3C;aACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;YACtC,aAAa,EAAE,CAAC,CAAC,aAAa;SAC/B,CAAC,CAAC,CAAC;QACN,qEAAqE;QACrE,4EAA4E;QAC5E,2EAA2E;QAC3E,0EAA0E;QAC1E,2EAA2E;QAC3E,6EAA6E;QAC7E,yEAAyE;QACzE,wEAAwE;QACxE,yEAAyE;QACzE,8EAA8E;QAC9E,MAAM,SAAS,GAAG,oBAAoB,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,KAAK,CAAC;QAClE,MAAM,UAAU,GAAG,mBAAmB,CAAC;YACrC,WAAW;YACX,aAAa;YACb,cAAc,EAAE,SAAS;YACzB,SAAS;YACT,QAAQ;SACT,CAAC,CAAC;QACH,0EAA0E;QAC1E,4EAA4E;QAC5E,4EAA4E;QAC5E,wEAAwE;QACxE,8CAA8C;QAC9C,MAAM,4BAA4B,CAAC,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACtF,CAAC,CAAC;AACJ,CAAC"}

package/dist/queries/verify-own-holds.d.ts

@@ -1,89 +0,0 @@
-/**
- * Verify's OWN holds: the gate_state guards verify itself writes, and what a
- * verify PASS supersedes.
- *
- * A pass at the same status (a delivery that never left verify: a released
- * park, an awaited model) must drop these, or the stale hold outlives the
- * verdict that judged the same targets. Measured 2026-09-23: four deliveries
- * passed every tick with `verify_shortfall_unclearable_claim` still in
- * `blocking`, so no done route would take them. Operator, external and
- * commit-verdict holds are NOT verify's and are never cleared here.
- *
- * A LEAF, deliberately: it imports nothing, so the gate-state vocabulary
- * (queries/delivery-gate-state.ts) can name the model-unavailable detail from
- * here without a cycle, and the pure functions are typed structurally over the
- * keys they touch.
- *
- * @module queries/verify-own-holds
- */
-/** gate_state guard name a deterministic verification failure reports under. */
-export declare const DETERMINISTIC_VERIFICATION_GUARD = "deterministic_verification";
-/**
- * gate_state guard name a verify-SHORTFALL reconciliation hold reports under.
- * Distinct from the deterministic guard: a shortfall hold means the declared
- * desired effect was not realized by the diff, NOT that a shell command failed.
- */
-export declare const SHORTFALL_RECONCILIATION_GUARD = "verify_shortfall_reconciliation";
-/** gate_state guard name for an unclearable-CLAIM shortfall hold (a modelling defect). */
-export declare const UNCLEARABLE_SHORTFALL_GUARD = "verify_shortfall_unclearable_claim";
-/** gate_state guard name for a verify EVIDENCE-UNAVAILABLE (instrument-fault) hold. */
-export declare const EVIDENCE_UNAVAILABLE_GUARD = "verify_evidence_unavailable";
-/**
- * gate_state guard name for a verify whose reconciliation could not RUN: the
- * model was not reached (rate limit, auth, timeout, spawn). Not a verdict about
- * the work and not a fault in the evidence -- the judge was absent. The delivery
- * is held in verify, awaited, and re-judged on a later tick.
- */
-export declare const MODEL_UNAVAILABLE_GUARD = "verify_model_unavailable";
-/** The guards VERIFY ITSELF writes, and so a verify PASS supersedes. */
-export declare const VERIFY_OWN_HOLD_GUARDS: ReadonlySet<string>;
-/** Why a one-shot model call could not complete (spawn/one-shot-model.ts ModelUnavailableKind, mirrored to keep this a leaf). */
-export type ModelUnavailableHoldKind = 'rate_limit' | 'auth' | 'timeout' | 'spawn' | 'unknown';
-/**
- * The reconciliation could not run: a typed model unavailability, recorded so
- * the board can name what the delivery waits on. No verdict, no shortfall, no
- * iteration: the delivery is re-judged on a later tick, and the first judgement
- * that renders replaces this hold.
- */
-export interface ModelUnavailableDetail {
-    /** ISO timestamp the hold was recorded. */
-    heldAt: string;
-    /** Why the model could not be reached. */
-    kind: ModelUnavailableHoldKind;
-    /** ISO instant the provider said capacity returns (rate_limit only, when it said). */
-    resetAt: string | null;
-    /** Which one-shot could not run (e.g. 'verify-reconciliation'). */
-    label: string;
-    /** The typed failure's message (the CLI's own words, when it had any). */
-    message: string;
-}
-/** The gate_state keys these functions read: a guard-verdict list and verify's detail keys. */
-export interface VerifyOwnHoldCarrier {
-    blocking?: Array<{
-        guardName: string;
-        passed: boolean;
-    }>;
-    verification?: unknown;
-    shortfallReconciliation?: unknown;
-    evidenceUnavailable?: unknown;
-    modelUnavailable?: unknown;
-}
-/**
- * Whether a gate_state carries the awaited-judge hold (its reconciliation could
- * not run). Read by the review park: a delivery awaiting the model is held work,
- * exactly like one awaiting a gate verdict -- a review that ran over it would
- * approve a reconciliation that never happened. Defensive over the JSONB. Pure.
- */
-export declare function hasModelUnavailableHold(gateState: unknown): boolean;
-/** Whether a gate_state carries any guard or detail that verify itself wrote. Pure. */
-export declare function hasVerifyOwnHold(gateState: VerifyOwnHoldCarrier | null | undefined): boolean;
-/**
- * The gate_state with verify's OWN holds dropped -- what a verify PASS
- * supersedes (VERIFY_OWN_HOLD_GUARDS and their detail keys). Every other key
- * (operator, external and commit-verdict holds, the recorded targets, the
- * history) is preserved; whether what remains is an empty clear is the
- * caller's to decide (delivery-gate-state.ts clearVerificationHistory does).
- * Pure.
- */
-export declare function clearVerifyOwnHolds<T extends VerifyOwnHoldCarrier>(gateState: T | null): T | null;
-//# sourceMappingURL=verify-own-holds.d.ts.map

package/dist/queries/verify-own-holds.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"verify-own-holds.d.ts","sourceRoot":"","sources":["../../src/queries/verify-own-holds.ts"],"names":[],"mappings":"AAOA;;;;;;;;;;;;;;;;;GAiBG;AAEH,gFAAgF;AAChF,eAAO,MAAM,gCAAgC,+BAA+B,CAAC;AAC7E;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,oCAAoC,CAAC;AAChF,0FAA0F;AAC1F,eAAO,MAAM,2BAA2B,uCAAuC,CAAC;AAChF,uFAAuF;AACvF,eAAO,MAAM,0BAA0B,gCAAgC,CAAC;AACxE;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,6BAA6B,CAAC;AAElE,wEAAwE;AACxE,eAAO,MAAM,sBAAsB,EAAE,WAAW,CAAC,MAAM,CAMrD,CAAC;AAEH,iIAAiI;AACjI,MAAM,MAAM,wBAAwB,GAAG,YAAY,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;AAE/F;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,IAAI,EAAE,wBAAwB,CAAC;IAC/B,sFAAsF;IACtF,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,mEAAmE;IACnE,KAAK,EAAE,MAAM,CAAC;IACd,0EAA0E;IAC1E,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,+FAA+F;AAC/F,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACzD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,OAAO,GAAG,OAAO,CAGnE;AAED,uFAAuF;AACvF,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAO5F;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,oBAAoB,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAWjG"}

package/dist/queries/verify-own-holds.js

@@ -1,94 +0,0 @@
-// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: packages/daemon/src/queries/delivery-gate-state.test.ts,
-//   packages/daemon/src/spawn/review-hold-park.test.ts,
-//   packages/daemon/src/verify/parked-shortfall-reuse.test.ts,
-//   packages/daemon/src/verify/verification-engine.test.ts
-// PINNED-BY-END
-/**
- * Verify's OWN holds: the gate_state guards verify itself writes, and what a
- * verify PASS supersedes.
- *
- * A pass at the same status (a delivery that never left verify: a released
- * park, an awaited model) must drop these, or the stale hold outlives the
- * verdict that judged the same targets. Measured 2026-09-23: four deliveries
- * passed every tick with `verify_shortfall_unclearable_claim` still in
- * `blocking`, so no done route would take them. Operator, external and
- * commit-verdict holds are NOT verify's and are never cleared here.
- *
- * A LEAF, deliberately: it imports nothing, so the gate-state vocabulary
- * (queries/delivery-gate-state.ts) can name the model-unavailable detail from
- * here without a cycle, and the pure functions are typed structurally over the
- * keys they touch.
- *
- * @module queries/verify-own-holds
- */
-/** gate_state guard name a deterministic verification failure reports under. */
-export const DETERMINISTIC_VERIFICATION_GUARD = 'deterministic_verification';
-/**
- * gate_state guard name a verify-SHORTFALL reconciliation hold reports under.
- * Distinct from the deterministic guard: a shortfall hold means the declared
- * desired effect was not realized by the diff, NOT that a shell command failed.
- */
-export const SHORTFALL_RECONCILIATION_GUARD = 'verify_shortfall_reconciliation';
-/** gate_state guard name for an unclearable-CLAIM shortfall hold (a modelling defect). */
-export const UNCLEARABLE_SHORTFALL_GUARD = 'verify_shortfall_unclearable_claim';
-/** gate_state guard name for a verify EVIDENCE-UNAVAILABLE (instrument-fault) hold. */
-export const EVIDENCE_UNAVAILABLE_GUARD = 'verify_evidence_unavailable';
-/**
- * gate_state guard name for a verify whose reconciliation could not RUN: the
- * model was not reached (rate limit, auth, timeout, spawn). Not a verdict about
- * the work and not a fault in the evidence -- the judge was absent. The delivery
- * is held in verify, awaited, and re-judged on a later tick.
- */
-export const MODEL_UNAVAILABLE_GUARD = 'verify_model_unavailable';
-/** The guards VERIFY ITSELF writes, and so a verify PASS supersedes. */
-export const VERIFY_OWN_HOLD_GUARDS = new Set([
-    DETERMINISTIC_VERIFICATION_GUARD,
-    SHORTFALL_RECONCILIATION_GUARD,
-    UNCLEARABLE_SHORTFALL_GUARD,
-    EVIDENCE_UNAVAILABLE_GUARD,
-    MODEL_UNAVAILABLE_GUARD,
-]);
-/**
- * Whether a gate_state carries the awaited-judge hold (its reconciliation could
- * not run). Read by the review park: a delivery awaiting the model is held work,
- * exactly like one awaiting a gate verdict -- a review that ran over it would
- * approve a reconciliation that never happened. Defensive over the JSONB. Pure.
- */
-export function hasModelUnavailableHold(gateState) {
-    return typeof gateState === 'object' && gateState !== null
-        && gateState.modelUnavailable != null;
-}
-/** Whether a gate_state carries any guard or detail that verify itself wrote. Pure. */
-export function hasVerifyOwnHold(gateState) {
-    if (!gateState)
-        return false;
-    if ((gateState.blocking ?? []).some((b) => VERIFY_OWN_HOLD_GUARDS.has(b.guardName)))
-        return true;
-    return gateState.verification !== undefined
-        || gateState.shortfallReconciliation !== undefined
-        || gateState.evidenceUnavailable !== undefined
-        || gateState.modelUnavailable !== undefined;
-}
-/**
- * The gate_state with verify's OWN holds dropped -- what a verify PASS
- * supersedes (VERIFY_OWN_HOLD_GUARDS and their detail keys). Every other key
- * (operator, external and commit-verdict holds, the recorded targets, the
- * history) is preserved; whether what remains is an empty clear is the
- * caller's to decide (delivery-gate-state.ts clearVerificationHistory does).
- * Pure.
- */
-export function clearVerifyOwnHolds(gateState) {
-    if (!gateState)
-        return null;
-    const next = {
-        ...gateState,
-        blocking: (gateState.blocking ?? []).filter((b) => !VERIFY_OWN_HOLD_GUARDS.has(b.guardName)),
-    };
-    delete next.verification;
-    delete next.shortfallReconciliation;
-    delete next.evidenceUnavailable;
-    delete next.modelUnavailable;
-    return next;
-}
-//# sourceMappingURL=verify-own-holds.js.map

package/dist/queries/verify-own-holds.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"verify-own-holds.js","sourceRoot":"","sources":["../../src/queries/verify-own-holds.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,sEAAsE;AACtE,wDAAwD;AACxD,+DAA+D;AAC/D,2DAA2D;AAC3D,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;GAiBG;AAEH,gFAAgF;AAChF,MAAM,CAAC,MAAM,gCAAgC,GAAG,4BAA4B,CAAC;AAC7E;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,iCAAiC,CAAC;AAChF,0FAA0F;AAC1F,MAAM,CAAC,MAAM,2BAA2B,GAAG,oCAAoC,CAAC;AAChF,uFAAuF;AACvF,MAAM,CAAC,MAAM,0BAA0B,GAAG,6BAA6B,CAAC;AACxE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,0BAA0B,CAAC;AAElE,wEAAwE;AACxE,MAAM,CAAC,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC;IACjE,gCAAgC;IAChC,8BAA8B;IAC9B,2BAA2B;IAC3B,0BAA0B;IAC1B,uBAAuB;CACxB,CAAC,CAAC;AAiCH;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAkB;IACxD,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI;WACpD,SAA4C,CAAC,gBAAgB,IAAI,IAAI,CAAC;AAC9E,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,gBAAgB,CAAC,SAAkD;IACjF,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACjG,OAAO,SAAS,CAAC,YAAY,KAAK,SAAS;WACtC,SAAS,CAAC,uBAAuB,KAAK,SAAS;WAC/C,SAAS,CAAC,mBAAmB,KAAK,SAAS;WAC3C,SAAS,CAAC,gBAAgB,KAAK,SAAS,CAAC;AAChD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAiC,SAAmB;IACrF,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,IAAI,GAAM;QACd,GAAG,SAAS;QACZ,QAAQ,EAAE,CAAC,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;KAC7F,CAAC;IACF,OAAO,IAAI,CAAC,YAAY,CAAC;IACzB,OAAO,IAAI,CAAC,uBAAuB,CAAC;IACpC,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAChC,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC7B,OAAO,IAAI,CAAC;AACd,CAAC"}