@telora/daemon 0.22.245 → 0.22.290

package/dist/verify/attribution/verification-attribution-deps.d.ts

@@ -0,0 +1,32 @@
+import { type EvidenceLookup, type getRecordedCommitShasForMerge, type getAllRecordedCommitShasForFocus, type getRecordedPreMergeRefForMerge } from '../../queries/deliveries/deliveries.js';
+import type { VerificationDeps } from '../engine/verification-deps.js';
+import type { PendingVerification } from '../../queries/verification/verification.js';
+import type { TargetShortfall } from '../effect-reconciliation/verify-restatement.js';
+import type { MisattributedCommitsRecord } from '../../queries/delivery-gate-state/misattributed-commits-record.js';
+import { type MisattributedCommitsReadDeps } from './misattributed-commits-read.js';
+/** The focus's credits for a verification, read at most once per verification object. */
+export declare function buildCreditsReader(read: (focusId: string) => Promise<EvidenceLookup<ReadonlyMap<string, string>>>): (v: Pick<PendingVerification, 'focusId' | 'deliveryId'>) => Promise<EvidenceLookup<ReadonlyMap<string, string>>>;
+type AttributionEvidenceDeps = Pick<VerificationDeps, 'resolveRecordedCommitShas' | 'resolveRecordedPreMergeRef' | 'resolveRecordedBoundaryCommitShas' | 'resolveAttributionFailure' | 'resolveEvidenceInstrumentFault'>;
+type CwdOf = (v: PendingVerification) => string;
+type CreditsReader = ReturnType<typeof buildCreditsReader>;
+/** The durable-record reads the resolvers make; production binds the product-api queries (composition/verification-context.ts). */
+export interface AttributionRecordReads {
+    getAllRecordedCommitShasForFocus: typeof getAllRecordedCommitShasForFocus;
+    getRecordedCommitShasForMerge: typeof getRecordedCommitShasForMerge;
+    getRecordedPreMergeRefForMerge: typeof getRecordedPreMergeRefForMerge;
+    getFocusDeliveries: (focusId: string) => Promise<readonly unknown[]>;
+}
+/** The attribution evidence deps over a verification cwd resolver and a credits reader. */
+export declare function buildAttributionEvidenceDeps(resolveVerificationCwd: CwdOf, readCredits: CreditsReader, reads: AttributionRecordReads): AttributionEvidenceDeps;
+/** Names the unattributed commits a hold may be missing, for one verification. */
+export type MisattributedHoldAnnotator = (v: PendingVerification, shortfalls: readonly Pick<TargetShortfall, 'diffCitation'>[]) => Promise<MisattributedCommitsRecord | undefined>;
+/**
+ * The hold annotation over the SAME credits snapshot the verification's evidence
+ * was selected with: `readCredits` is keyed by the verification object, so the
+ * hold reads no second copy. A credit recorded mid-pass therefore cannot be
+ * absent from the evidence yet hide a commit from the hold note, or the reverse.
+ * An unreadable snapshot annotates with no credits, as the evidence was selected.
+ */
+export declare function buildMisattributedHoldAnnotator(resolveVerificationCwd: CwdOf, readCredits: CreditsReader, reads: Omit<MisattributedCommitsReadDeps, 'readAttributionOverrides'>): MisattributedHoldAnnotator;
+export {};
+//# sourceMappingURL=verification-attribution-deps.d.ts.map

package/dist/verify/attribution/verification-attribution-deps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-attribution-deps.d.ts","sourceRoot":"","sources":["../../../src/verify/attribution/verification-attribution-deps.ts"],"names":[],"mappings":"AA2BA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,6BAA6B,EAClC,KAAK,gCAAgC,EACrC,KAAK,8BAA8B,EACpC,MAAM,wCAAwC,CAAC;AAEhD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AACtF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gDAAgD,CAAC;AACtF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,mEAAmE,CAAC;AACpH,OAAO,EAA+B,KAAK,4BAA4B,EAAE,MAAM,iCAAiC,CAAC;AAKjH,yFAAyF;AACzF,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAC9E,CAAC,CAAC,EAAE,IAAI,CAAC,mBAAmB,EAAE,SAAS,GAAG,YAAY,CAAC,KAAK,OAAO,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAmBlH;AAMD,KAAK,uBAAuB,GAAG,IAAI,CACjC,gBAAgB,EACd,2BAA2B,GAAG,4BAA4B,GAAG,mCAAmC,GAChG,2BAA2B,GAAG,gCAAgC,CACjE,CAAC;AAEF,KAAK,KAAK,GAAG,CAAC,CAAC,EAAE,mBAAmB,KAAK,MAAM,CAAC;AAChD,KAAK,aAAa,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE3D,mIAAmI;AACnI,MAAM,WAAW,sBAAsB;IACrC,gCAAgC,EAAE,OAAO,gCAAgC,CAAC;IAC1E,6BAA6B,EAAE,OAAO,6BAA6B,CAAC;IACpE,8BAA8B,EAAE,OAAO,8BAA8B,CAAC;IACtE,kBAAkB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;CACtE;AAgJD,2FAA2F;AAC3F,wBAAgB,4BAA4B,CAC1C,sBAAsB,EAAE,KAAK,EAC7B,WAAW,EAAE,aAAa,EAC1B,KAAK,EAAE,sBAAsB,GAC5B,uBAAuB,CAQzB;AAED,kFAAkF;AAClF,MAAM,MAAM,0BAA0B,GAAG,CACvC,CAAC,EAAE,mBAAmB,EACtB,UAAU,EAAE,SAAS,IAAI,CAAC,eAAe,EAAE,cAAc,CAAC,EAAE,KACzD,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;AAErD;;;;;;GAMG;AACH,wBAAgB,+BAA+B,CAC7C,sBAAsB,EAAE,KAAK,EAC7B,WAAW,EAAE,aAAa,EAC1B,KAAK,EAAE,IAAI,CAAC,4BAA4B,EAAE,0BAA0B,CAAC,GACpE,0BAA0B,CAM5B"}

package/dist/verify/attribution/verification-attribution-deps.js

@@ -0,0 +1,220 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/verify/deterministic-gate/verification-boundary-env.test.ts,
+//   packages/daemon/src/verify/run-selection/credit-rearm.test.ts
+// PINNED-BY-END
+/**
+ * The verify deps that attribute a delivery's evidence from the durable record:
+ * its own commits across the focus's merge history, the pre-merge boundary, the
+ * total-attribution-failure check and the instrument-fault probe.
+ *
+ * Attribution is each commit's Telora-Delivery trailer, overridden by any commit
+ * credit recorded for the focus (commit_attributions): a merged commit whose
+ * trailer is wrong -- a daemon exit capture stamped `none` holding a delivery's
+ * implementation -- counts for the delivery it is
+ * credited to. Credits are read once per verification and passed into the pure
+ * selection functions (resolvers/shared/git-diff.ts).
+ *
+ * History: docs/daemon/history-verify.md (verify/attribution/verification-attribution-deps.ts).
+ */
+import { filterCommitsByDelivery, selectDeliveryCommitsAcrossBatches, batchHasDeliveryTrailer, batchHasUnattributedCommit, } from '../../resolvers/index.js';
+import { evidenceValueOr, } from '../../queries/deliveries/deliveries.js';
+import { recordedMergeShaForVerify as recordedMergeShaForVerifyImpl } from '../effect-reconciliation/verification-evidence.js';
+import { resolveMisattributedCommits } from './misattributed-commits-read.js';
+import { createLogger } from '../../log/daemon-log.js';
+const log = createLogger({ module: 'verification' });
+/** The focus's credits for a verification, read at most once per verification object. */
+export function buildCreditsReader(read) {
+    const cache = new WeakMap();
+    return (v) => {
+        if (!v.focusId)
+            return Promise.resolve({ state: 'empty' });
+        const cached = cache.get(v);
+        if (cached)
+            return cached;
+        const focusId = v.focusId;
+        const pending = read(focusId).then((lookup) => {
+            if (lookup.state === 'undetermined') {
+                log.warn(`[verification] commit credits unreadable for focus ${focusId.slice(0, 8)} (delivery ${v.deliveryId}): ` +
+                    `${lookup.reason} -- attributing by trailer only; a credited commit is not counted this run`);
+            }
+            return lookup;
+        });
+        cache.set(v, pending);
+        return pending;
+    };
+}
+function creditsOf(lookup) {
+    return lookup.state === 'found' ? lookup.value : undefined;
+}
+/** The delivery's own recorded commits, attributed by trailer or credit. */
+function recordedCommitShasResolver(resolveVerificationCwd, readCredits, reads) {
+    return async (v) => {
+        // Only look up the recorded commit set when the row records a merged-back
+        // git state with a merge sha (same gating as recordedMergeShaForVerify); an
+        // unmerged delivery has no focus_merges row and stays on the topology path.
+        const sha = recordedMergeShaForVerifyImpl(v);
+        if (!sha || !v.focusId)
+            return [];
+        const cwd = resolveVerificationCwd(v);
+        const credits = creditsOf(await readCredits(v));
+        // Attribute the delivery from ITS OWN commits across the focus's WHOLE
+        // merge history, not just the batch stamped on its row. The stamped sha
+        // names the batch merged in the delivery's session, which is NOT
+        // necessarily the batch that carried its own commits: a delivery whose work
+        // landed in an EARLIER batch (or split across batches) is filtered to zero
+        // by a single-row lookup, and on a fast-forward merge-back that leaves the
+        // gate blind on merged, CI-green work (2026-08-15, delivery 4ab18c49).
+        // Searching every batch by the per-commit Telora-Delivery trailer (or the
+        // commit's recorded credit) recovers the delivery's commits regardless of
+        // which batch its row points at. Only a `found` history is worth
+        // partitioning; `empty` / `undetermined` fall through to the single-row /
+        // legacy path, and an undetermined read is reported as an instrument fault
+        // SEPARATELY (resolveEvidenceInstrumentFault).
+        const batches = await reads.getAllRecordedCommitShasForFocus(v.focusId);
+        if (batches.state === 'found') {
+            const own = selectDeliveryCommitsAcrossBatches(cwd, batches.value, v.deliveryId, credits);
+            if (own !== null)
+                return own;
+        }
+        // Total-legacy focus (no attribution anywhere -> the history is
+        // un-partitionable), no history, or an undetermined read: preserve the
+        // single-row behavior and judge against the batch stamped on the row.
+        const batch = await reads.getRecordedCommitShasForMerge(v.focusId, sha);
+        return filterCommitsByDelivery(cwd, evidenceValueOr(batch, []), v.deliveryId, credits);
+    };
+}
+/** The recorded pre-merge boundary, withheld when the stamped batch holds none of the delivery's commits. */
+function recordedPreMergeRefResolver(resolveVerificationCwd, readCredits, reads) {
+    return async (v) => {
+        // Same gating as resolveRecordedCommitShas: a pre-merge boundary exists only
+        // for a merged-back row keyed by the recorded merge sha. The boundary is
+        // batch-level (shared across the batch) -- the fast-forward-safe FALLBACK
+        // source, used when the per-delivery commit set came back empty.
+        const sha = recordedMergeShaForVerifyImpl(v);
+        if (!sha || !v.focusId)
+            return null;
+        const cwd = resolveVerificationCwd(v);
+        const credits = creditsOf(await readCredits(v));
+        // But the boundary is only safe when the STAMPED batch actually carries
+        // THIS delivery's own commits. When the stamped batch holds NONE of them
+        // (its work is in another batch), <preMergeRef>...<stampedSha> would span a
+        // SIBLING delivery's work -- converting a blind gate into a confident WRONG
+        // verdict (tree node #19 / AC #4). Suppress the boundary in that case so the
+        // gate stays honestly blind and re-enters bounded re-work. An EMPTY stamped
+        // batch is exactly the fast-forward incident the boundary exists to cure
+        // (the per-delivery set came back empty) -- keep offering it there; a
+        // total-legacy (untrailered) batch also keeps it (no regression).
+        const batchShas = evidenceValueOr(await reads.getRecordedCommitShasForMerge(v.focusId, sha), []);
+        if (batchShas.length > 0 && batchHasDeliveryTrailer(cwd, batchShas, credits)) {
+            const own = filterCommitsByDelivery(cwd, batchShas, v.deliveryId, credits);
+            if (own.length === 0)
+                return null;
+        }
+        const ref = await reads.getRecordedPreMergeRefForMerge(v.focusId, sha);
+        return ref.state === 'found' ? ref.value : null;
+    };
+}
+/**
+ * The delivery's own commits in the STAMPED batch -- the batch whose pre-merge
+ * boundary resolveRecordedPreMergeRef hands. The boundary is batch-level, so the
+ * commit count that rides with it must be too: a delivery merged back in several
+ * batches has earlier commits BEHIND the latest batch's boundary by construction,
+ * and counting them (the whole-history set) made the selector refuse every such
+ * delivery as a laundered pass (2026-09-24: range 1, recorded 7).
+ */
+function recordedBoundaryCommitShasResolver(resolveVerificationCwd, readCredits, reads) {
+    return async (v) => {
+        const sha = recordedMergeShaForVerifyImpl(v);
+        if (!sha || !v.focusId)
+            return [];
+        const batch = evidenceValueOr(await reads.getRecordedCommitShasForMerge(v.focusId, sha), []);
+        return filterCommitsByDelivery(resolveVerificationCwd(v), batch, v.deliveryId, creditsOf(await readCredits(v)));
+    };
+}
+/** A total attribution failure: a batch with no delivery anchor and unattributed commits on a multi-delivery focus. */
+function attributionFailureResolver(resolveVerificationCwd, readCredits, reads) {
+    return async (v) => {
+        // TOTAL ATTRIBUTION FAILURE: a recorded batch that carries NO delivery anchor
+        // AND contains genuinely UNATTRIBUTED commits, on a focus with MORE THAN ONE
+        // delivery. filterCommitsByDelivery returns the whole batch for such a set
+        // (its legacy fallback), and coverage then reports complete because the range
+        // covers that whole set exactly -- so without this signal the gate would
+        // render a confident verdict against the combined sibling diff. A
+        // single-delivery focus is genuinely unpartitionable, so it is NOT a failure
+        // and keeps today's behavior.
+        const sha = recordedMergeShaForVerifyImpl(v);
+        if (!sha || !v.focusId)
+            return null;
+        const batchLookup = await reads.getRecordedCommitShasForMerge(v.focusId, sha);
+        // Only a `found` batch (query ran AND the row carries commits) can be a
+        // total-attribution failure. An `empty` batch has nothing to misattribute;
+        // an `undetermined` batch is a blind instrument, not a partition failure --
+        // reported distinctly via resolveEvidenceInstrumentFault, not here.
+        if (batchLookup.state !== 'found')
+            return null;
+        const batch = batchLookup.value;
+        const cwd = resolveVerificationCwd(v);
+        const credits = creditsOf(await readCredits(v));
+        if (batchHasDeliveryTrailer(cwd, batch, credits))
+            return null; // has a delivery to partition -> not a total failure
+        // No delivery anchor. A batch that is nonetheless COMPLETELY attributed --
+        // every commit an explicit non-delivery sentinel (daemon housekeeping) -- is
+        // fully accounted for, NOT a failure: the gate may render a verdict. Only a
+        // genuinely UNATTRIBUTED commit makes this the loud failure. The sentinel
+        // must never launder missing attribution into apparent completeness.
+        if (!batchHasUnattributedCommit(cwd, batch, credits))
+            return null; // all-sentinel -> complete, no failure
+        const deliveries = await reads.getFocusDeliveries(v.focusId);
+        if (deliveries.length <= 1)
+            return null; // genuine legacy single-delivery batch
+        return { batch: batch.length, deliveries: deliveries.length };
+    };
+}
+/**
+ * Probe whether the durable record could be READ at all. An `undetermined`
+ * lookup (an API unreachable) is the instrument fault the gate must report
+ * DISTINCTLY from an honest empty record: it names the seam so a blind gate is
+ * diagnosable, rather than collapsing "could not determine" into "there is
+ * nothing here". Gated identically to the commit-set lookup -- an unmerged
+ * delivery has no record to read and is not a fault.
+ */
+function evidenceInstrumentFaultResolver(readCredits, reads) {
+    return async (v) => {
+        const sha = recordedMergeShaForVerifyImpl(v);
+        if (!sha || !v.focusId)
+            return null;
+        const history = await reads.getAllRecordedCommitShasForFocus(v.focusId);
+        if (history.state === 'undetermined') {
+            return { seam: 'focus_merges (whole-history commit set)', reason: history.reason };
+        }
+        const credits = await readCredits(v);
+        if (credits.state === 'undetermined') {
+            return { seam: 'commit_attributions (recorded commit credits)', reason: credits.reason };
+        }
+        return null;
+    };
+}
+/** The attribution evidence deps over a verification cwd resolver and a credits reader. */
+export function buildAttributionEvidenceDeps(resolveVerificationCwd, readCredits, reads) {
+    return {
+        resolveRecordedCommitShas: recordedCommitShasResolver(resolveVerificationCwd, readCredits, reads),
+        resolveRecordedPreMergeRef: recordedPreMergeRefResolver(resolveVerificationCwd, readCredits, reads),
+        resolveRecordedBoundaryCommitShas: recordedBoundaryCommitShasResolver(resolveVerificationCwd, readCredits, reads),
+        resolveAttributionFailure: attributionFailureResolver(resolveVerificationCwd, readCredits, reads),
+        resolveEvidenceInstrumentFault: evidenceInstrumentFaultResolver(readCredits, reads),
+    };
+}
+/**
+ * The hold annotation over the SAME credits snapshot the verification's evidence
+ * was selected with: `readCredits` is keyed by the verification object, so the
+ * hold reads no second copy. A credit recorded mid-pass therefore cannot be
+ * absent from the evidence yet hide a commit from the hold note, or the reverse.
+ * An unreadable snapshot annotates with no credits, as the evidence was selected.
+ */
+export function buildMisattributedHoldAnnotator(resolveVerificationCwd, readCredits, reads) {
+    return async (v, shortfalls) => {
+        const snapshot = async () => evidenceValueOr(await readCredits(v), new Map());
+        return resolveMisattributedCommits(v, resolveVerificationCwd(v), shortfalls, { ...reads, readAttributionOverrides: snapshot });
+    };
+}
+//# sourceMappingURL=verification-attribution-deps.js.map

package/dist/verify/attribution/verification-attribution-deps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-attribution-deps.js","sourceRoot":"","sources":["../../../src/verify/attribution/verification-attribution-deps.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,8FAA8F;AAC9F,kEAAkE;AAClE,gBAAgB;AAEhB;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACL,uBAAuB,EACvB,kCAAkC,EAClC,uBAAuB,EACvB,0BAA0B,GAE3B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,eAAe,GAKhB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,yBAAyB,IAAI,6BAA6B,EAAE,MAAM,mDAAmD,CAAC;AAK/H,OAAO,EAAE,2BAA2B,EAAqC,MAAM,iCAAiC,CAAC;AACjH,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAErD,yFAAyF;AACzF,MAAM,UAAU,kBAAkB,CAChC,IAA+E;IAE/E,MAAM,KAAK,GAAG,IAAI,OAAO,EAAgE,CAAC;IAC1F,OAAO,CAAC,CAAC,EAAE,EAAE;QACX,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;QAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YAC5C,IAAI,MAAM,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;gBACpC,GAAG,CAAC,IAAI,CACN,sDAAsD,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,UAAU,KAAK;oBACxG,GAAG,MAAM,CAAC,MAAM,4EAA4E,CAC7F,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACtB,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,MAAmD;IACpE,OAAO,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAmBD,4EAA4E;AAC5E,SAAS,0BAA0B,CAAC,sBAA6B,EAAE,WAA0B,EAAE,KAA6B;IAC1H,OAAO,KAAK,EAAE,CAAC,EAAE,EAAE;QACjB,0EAA0E;QAC1E,4EAA4E;QAC5E,4EAA4E;QAC5E,MAAM,GAAG,GAAG,6BAA6B,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,sBAAsB,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,uEAAuE;QACvE,wEAAwE;QACxE,iEAAiE;QACjE,4EAA4E;QAC5E,2EAA2E;QAC3E,2EAA2E;QAC3E,uEAAuE;QACvE,0EAA0E;QAC1E,0EAA0E;QAC1E,iEAAiE;QACjE,0EAA0E;QAC1E,2EAA2E;QAC3E,+CAA+C;QAC/C,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACxE,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,kCAAkC,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAC1F,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO,GAAG,CAAC;QAC/B,CAAC;QACD,gEAAgE;QAChE,uEAAuE;QACvE,sEAAsE;QACtE,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACxE,OAAO,uBAAuB,CAAC,GAAG,EAAE,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACzF,CAAC,CAAC;AACJ,CAAC;AAED,6GAA6G;AAC7G,SAAS,2BAA2B,CAAC,sBAA6B,EAAE,WAA0B,EAAE,KAA6B;IAC3H,OAAO,KAAK,EAAE,CAAC,EAAE,EAAE;QACjB,6EAA6E;QAC7E,yEAAyE;QACzE,0EAA0E;QAC1E,iEAAiE;QACjE,MAAM,GAAG,GAAG,6BAA6B,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,GAAG,GAAG,sBAAsB,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,wEAAwE;QACxE,yEAAyE;QACzE,4EAA4E;QAC5E,4EAA4E;QAC5E,6EAA6E;QAC7E,4EAA4E;QAC5E,yEAAyE;QACzE,sEAAsE;QACtE,kEAAkE;QAClE,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QACjG,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,uBAAuB,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;YAC7E,MAAM,GAAG,GAAG,uBAAuB,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAC3E,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;QACpC,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvE,OAAO,GAAG,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,kCAAkC,CAAC,sBAA6B,EAAE,WAA0B,EAAE,KAA6B;IAClI,OAAO,KAAK,EAAE,CAAC,EAAE,EAAE;QACjB,MAAM,GAAG,GAAG,6BAA6B,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7F,OAAO,uBAAuB,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClH,CAAC,CAAC;AACJ,CAAC;AAED,uHAAuH;AACvH,SAAS,0BAA0B,CAAC,sBAA6B,EAAE,WAA0B,EAAE,KAA6B;IAC1H,OAAO,KAAK,EAAE,CAAC,EAAE,EAAE;QACjB,8EAA8E;QAC9E,6EAA6E;QAC7E,2EAA2E;QAC3E,8EAA8E;QAC9E,yEAAyE;QACzE,kEAAkE;QAClE,6EAA6E;QAC7E,8BAA8B;QAC9B,MAAM,GAAG,GAAG,6BAA6B,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC9E,wEAAwE;QACxE,2EAA2E;QAC3E,4EAA4E;QAC5E,oEAAoE;QACpE,IAAI,WAAW,CAAC,KAAK,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QAC/C,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;QAChC,MAAM,GAAG,GAAG,sBAAsB,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,IAAI,uBAAuB,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,qDAAqD;QACpH,2EAA2E;QAC3E,6EAA6E;QAC7E,4EAA4E;QAC5E,0EAA0E;QAC1E,qEAAqE;QACrE,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,uCAAuC;QAC1G,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,uCAAuC;QAChF,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;IAChE,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,+BAA+B,CAAC,WAA0B,EAAE,KAA6B;IAChG,OAAO,KAAK,EAAE,CAAC,EAAE,EAAE;QACjB,MAAM,GAAG,GAAG,6BAA6B,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACxE,IAAI,OAAO,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;YACrC,OAAO,EAAE,IAAI,EAAE,yCAAyC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACrF,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,OAAO,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;YACrC,OAAO,EAAE,IAAI,EAAE,+CAA+C,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QAC3F,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;AACJ,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,4BAA4B,CAC1C,sBAA6B,EAC7B,WAA0B,EAC1B,KAA6B;IAE7B,OAAO;QACL,yBAAyB,EAAE,0BAA0B,CAAC,sBAAsB,EAAE,WAAW,EAAE,KAAK,CAAC;QACjG,0BAA0B,EAAE,2BAA2B,CAAC,sBAAsB,EAAE,WAAW,EAAE,KAAK,CAAC;QACnG,iCAAiC,EAAE,kCAAkC,CAAC,sBAAsB,EAAE,WAAW,EAAE,KAAK,CAAC;QACjH,yBAAyB,EAAE,0BAA0B,CAAC,sBAAsB,EAAE,WAAW,EAAE,KAAK,CAAC;QACjG,8BAA8B,EAAE,+BAA+B,CAAC,WAAW,EAAE,KAAK,CAAC;KACpF,CAAC;AACJ,CAAC;AAQD;;;;;;GAMG;AACH,MAAM,UAAU,+BAA+B,CAC7C,sBAA6B,EAC7B,WAA0B,EAC1B,KAAqE;IAErE,OAAO,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE;QAC7B,MAAM,QAAQ,GAAG,KAAK,IAA0C,EAAE,CAChE,eAAe,CAAC,MAAM,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,GAAG,EAAkB,CAAC,CAAC;QACnE,OAAO,2BAA2B,CAAC,CAAC,EAAE,sBAAsB,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,GAAG,KAAK,EAAE,wBAAwB,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjI,CAAC,CAAC;AACJ,CAAC"}

package/dist/verify/attribution/verification-attribution.d.ts

@@ -0,0 +1,110 @@
+/**
+ * Attribution of a FAILED deterministic verify run: which red is the delivery's
+ * own, and which was already on the focus base.
+ *
+ * runVerificationForDelivery (verification-engine.ts) calls
+ * attributeDeterministicFailure for every failed deterministic run and routes the
+ * instrument-fault hold it returns. Shapes, in order:
+ *
+ *   1. TIMED OUT -- never attributed. A killed run's output parses to nothing
+ *      meaningful, so it routes to bounded instrument-fault re-work: a timeout is
+ *      never a verdict about the work.
+ *   2. BASE UNAVAILABLE -- the focus base resolved but could not be run this
+ *      tick (verify/attribution/verification-baseline-run.ts: an unprovisioned worktree, no
+ *      checkout, dependencies moved). No verdict: pending, retried.
+ *   2a. BASE INCOMPARABLE -- the focus changed its dependency install inputs since
+ *      the base (lockfiles, manifest install fields, install lifecycle scripts), so
+ *      the base could only be run under installs made from the focus's
+ *      inputs, where a red those installs cause would pass as the
+ *      base's. A retry would refuse the same way, so this IS a verdict: nothing is
+ *      demoted and every red is charged (naming the HEAD red stage when located).
+ *   3. STAGE-AWARE -- the HEAD log vouches for its gate stages
+ *      (verify/deterministic-gate/verification-gate-stages.ts). The red stage is judged against the
+ *      focus base's reds (judgeFailedStage): pre-existing only when the base failed
+ *      that very stage AND reports everything this run reports there -- the same
+ *      failing tests, or for a non-test red every diagnostic signature
+ *      (verify/attribution/verification-diagnostics.ts). A red the base shares is RECORDED
+ *      (preExistingStages), but the stages after it never ran at HEAD, and a stage
+ *      that did not run is never counted as passing: they are run as a
+ *      CONTINUATION at the same judged commit and judged in turn before any pass.
+ *      A red the base does not share fails the delivery naming the stage
+ *      (failedStage) and what is new in it. A continuation that times out, cannot
+ *      run, or runs at a different commit yields no pass.
+ *   4. FAILING-TEST IDS ONLY -- the gate's shape is unknown (no stage outcomes),
+ *      so attribution compares failing-test ids alone: all-pre-existing
+ *      ids demote to a pass, zero parsed ids are blind.
+ *
+ * Why a continuation rather than running every stage on its own: it costs nothing
+ * unless a pre-existing red actually occurred (a green run or a red of the
+ * delivery's own stays one gate run), it goes through the unchanged fixed-commit
+ * checkout path, and the base is still run at most once per (base sha,
+ * gate) -- the base measurement continues past each of ITS reds the same way, so
+ * a second, third... inherited red has a base outcome to be judged against. A
+ * stage the base never ran stays "did not run" there: its red at HEAD is charged,
+ * erring toward re-work, never toward a pass.
+ *
+ * History: docs/daemon/history-verify.md (verify/attribution/verification-attribution.ts).
+ *
+ * @module verify/attribution/verification-attribution
+ */
+import type { PendingVerification } from '../../queries/verification/verification.js';
+import type { EvidenceUnavailableDetail } from '../../queries/delivery-gate-state/delivery-gate-state.js';
+import { type StrategyResult } from '../deterministic-gate/verification-deterministic.js';
+import type { StageContinuationRunner, VerificationDeps } from '../engine/verification-deps.js';
+import type { BaseStageRecord } from './verification-baseline-run.js';
+import type { FixedCommitVerifyDeps, VerifyCheckout } from '../deterministic-gate/verification-checkout.js';
+/** An instrument-fault hold, minus the `heldAt` stamp the requeue path adds. */
+export type InstrumentFaultHold = Omit<EvidenceUnavailableDetail, 'heldAt'>;
+/**
+ * Attribute a FAILED deterministic run in place (outcome, rationale and the
+ * attribution fields of `result`) and return the instrument-fault hold it must
+ * route to, if any. An attribution that could not run leaves the run failed.
+ */
+export declare function attributeDeterministicFailure(v: PendingVerification, result: StrategyResult, deps: VerificationDeps): Promise<InstrumentFaultHold | null>;
+/** What a run reports for one red stage: its failing-test ids and its diagnostic signatures. */
+export interface StageEvidence {
+    failing: ReadonlySet<string>;
+    diagnostics: readonly string[];
+}
+/** The verdict on one red stage. */
+export type StageJudgment = {
+    kind: 'pre_existing';
+    preExisting: string[];
+} | {
+    kind: 'charged';
+    newFailures: string[];
+    preExisting: string[];
+    newDiagnostics: string[];
+    baseStatus: string;
+};
+/**
+ * Judge one red stage against the focus base. PRE-EXISTING only when the base
+ * failed that very stage AND reports everything this run reports there: with
+ * failing tests, every id this run parsed the base's red parsed too; without,
+ * the base's red parsed none either and covers every diagnostic signature this
+ * run's stage output carries, counted as a multiset. A red whose output yields no
+ * signature at all is charged (module doc of verify/attribution/verification-diagnostics.ts).
+ * A base with no stage outcomes matches nothing. Anything else is charged, saying
+ * why. Pure.
+ */
+export declare function judgeFailedStage(stage: string, head: StageEvidence, base: BaseStageRecord | null, baseFailing: ReadonlySet<string>): StageJudgment;
+/**
+ * The continuation runner's collaborators, bound at the composition root
+ * (composition/verify-checkout-context.ts); tests drive it without a real checkout.
+ */
+export interface StageContinuationSeams {
+    runAtFixedCommit: (deps: FixedCommitVerifyDeps, v: PendingVerification) => Promise<StrategyResult>;
+    createPinnedCheckout: (focusWorktreePath: string, checkoutKey: string, sha: string) => VerifyCheckout | null;
+}
+/**
+ * The continuation: the never-run segments, chained as the gate chained them,
+ * run through the same fixed-commit strategy as the HEAD run -- a detached checkout
+ * pinned to the HEAD run's verifiedSha (createPinnedVerifyCheckout), under the
+ * focus worktree's verify hold, with the timeout the HEAD run applied. The command
+ * is the gate's own steps, so it is never re-resolved from a manifest (the row
+ * carries no default-on source). The judge loop still requires the continuation's
+ * verifiedSha to equal the judged sha, so a checkout that stopped honouring the
+ * pin yields no verdict, never a verdict about another commit.
+ */
+export declare function buildDefaultStageContinuation(deps: FixedCommitVerifyDeps, seams: StageContinuationSeams): StageContinuationRunner;
+//# sourceMappingURL=verification-attribution.d.ts.map

package/dist/verify/attribution/verification-attribution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-attribution.d.ts","sourceRoot":"","sources":["../../../src/verify/attribution/verification-attribution.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AACtF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,0DAA0D,CAAC;AAC1G,OAAO,EAAmC,KAAK,cAAc,EAAE,MAAM,qDAAqD,CAAC;AAC3H,OAAO,KAAK,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAQhG,OAAO,KAAK,EAAE,eAAe,EAAgB,MAAM,gCAAgC,CAAC;AAYpF,OAAO,KAAK,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,gDAAgD,CAAC;AAK5G,gFAAgF;AAChF,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,yBAAyB,EAAE,QAAQ,CAAC,CAAC;AAE5E;;;;GAIG;AACH,wBAAsB,6BAA6B,CACjD,CAAC,EAAE,mBAAmB,EACtB,MAAM,EAAE,cAAc,EACtB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAsBrC;AA+DD,gGAAgG;AAChG,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7B,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CAChC;AAED,oCAAoC;AACpC,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAA;CAAE,GAC/C;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,cAAc,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AAIpH;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,aAAa,EACnB,IAAI,EAAE,eAAe,GAAG,IAAI,EAC5B,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,GAC/B,aAAa,CAQf;AAuND;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,gBAAgB,EAAE,CAAC,IAAI,EAAE,qBAAqB,EAAE,CAAC,EAAE,mBAAmB,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IACnG,oBAAoB,EAAE,CAAC,iBAAiB,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,cAAc,GAAG,IAAI,CAAC;CAC9G;AAED;;;;;;;;;GASG;AACH,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,sBAAsB,GAAG,uBAAuB,CAoBjI"}