@telora/daemon 0.22.245 → 0.22.290

package/dist/verify/gate-verdicts/gate-run-registry.d.ts

@@ -0,0 +1,176 @@
+/**
+ * The gate runs a routing decision can still wait on, held in process.
+ *
+ * Two facts the review exit and the live open-work pass read before they route a
+ * verify delivery on review evidence alone (completion/review-exit-holds/review-exit-verdict-gate.ts):
+ *
+ *   - which gate runs are SELECTED BUT NOT FINISHED, per focus. The verification
+ *     tick registers every candidate the moment it selects it -- before the run
+ *     waits on the shared verification semaphore behind another focus's gate --
+ *     and ends the registration when its dispatch settles, however it settles
+ *     (a verdict, a timeout, no checkout, a delivery that left verify, a throw).
+ *     Once a run's detached checkout exists it names the commit it judges, so a
+ *     wait keyed on one commit is not held by a run judging another; until then a
+ *     registration may judge any commit on its focus (a dispatch reads HEAD only
+ *     when it starts). A run also carries what the heartbeat's focus activity
+ *     record publishes about it: while it is queued, what it waits on -- the
+ *     daemon-wide verification semaphore, or its focus worktree's verify
+ *     interlock (another verify holds the worktree) and whom that hold judges;
+ *     once it runs, the commit, the timeout and the start of its command.
+ *
+ * QUEUED UNTIL THE COMMAND STARTS. Holding a verification-semaphore slot is not
+ * running: after the slot is taken the dispatch still re-reads the delivery's
+ * status, looks for a verdict it can reuse, waits its turn on its focus, makes the
+ * checkout and resolves the config and boundary -- any of which may end the
+ * dispatch with no command run at all (a reused verdict never runs one). Nor is it
+ * waiting for a slot: the moment the slot is taken the registration says
+ * `preflight` (verify/engine/verification-engine.ts) -- it holds its slot and is
+ * preparing the run -- and it stays queued on that cause through all of the
+ * above. It turns running in ONE step immediately before the deterministic
+ * command is spawned ({@link startGateRunOf}, called by
+ * verify/deterministic-gate/verification-checkout.ts), which fixes the commit, the timeout
+ * and startedAt together: a running run never publishes a commit or timeout it
+ * has not yet chosen, and never runs without a commit -- a run with no judged
+ * commit is not started at all. ai_inspection and behavioral runs start no
+ * deterministic command and never turn running.
+ *   - the outcome an EXPLICIT-METHOD run last recorded for its delivery. Such a run
+ *     may execute in place or render a non-deterministic verdict, and neither
+ *     writes a per-commit verdict record (verify/gate-verdicts/commit-verdict-record.ts), so its
+ *     recorded outcome is its gate verdict: a pass or a failure, at the commit it
+ *     judged, or for the delivery when it judged none. A run that rendered no
+ *     verdict leaves none, and a new selection of the delivery forgets the outcome
+ *     of the run before it -- both are remembered as "no verdict", so the durable
+ *     copy of an older outcome is not read in their place. The tick also removes
+ *     that durable copy before the selected run can start
+ *     (verify/engine/verification-commit-sharing.ts), so a restart reads "no verdict" too.
+ *
+ * The selected runs are in process on purpose. A daemon restart abandons every
+ * selected run, and an abandoned run renders no verdict, so after a restart
+ * nothing waits on one: a toward-intent route is never stranded behind a verdict
+ * no process will render. The explicit outcomes here are only the in-process fast
+ * path: each is also written to the delivery's gate_state
+ * (verify/gate-verdicts/explicit-gate-outcome.ts), which is what routing reads after a restart,
+ * when this process has seen no explicit run for the delivery.
+ *
+ * A leaf with no runtime imports.
+ *
+ * @module verify/gate-verdicts/gate-run-registry
+ */
+import type { GateQueueWait } from '@telora/daemon-core';
+/** A candidate the verification tick selected. */
+export interface GateRunSelection {
+    deliveryId: string;
+    focusId: string | null;
+    /** An explicit-method row: its run supersedes the outcome the delivery's previous run recorded. */
+    explicit: boolean;
+}
+/**
+ * Why a queued run has not started. The semaphore wait names no run ahead (the
+ * reader names the run holding the slot); an interlock wait names the verify
+ * holding the worktree, when the hold names the delivery it judges; a preflight
+ * run holds its slot and waits on nothing ahead of it.
+ */
+export type GateRunWait = {
+    on: Extract<GateQueueWait, 'verification_semaphore' | 'preflight'>;
+} | {
+    on: Extract<GateQueueWait, 'worktree_interlock'>;
+    aheadFocusId: string | null;
+    aheadDeliveryId: string | null;
+};
+/**
+ * What a run is judging the moment its command starts, fixed together (module
+ * header). The commit is required: a run path that cannot name the commit it
+ * judges does not start its command (verify/deterministic-gate/verification-checkout.ts).
+ */
+export interface GateRunStart {
+    sha: string;
+    timeoutMs: number;
+}
+/** The handle a selection is started and ended through. start and end are idempotent. */
+export interface GateRunRegistration {
+    /** The run's command is starting now, judging `facts` (queued -> running, in one step). */
+    start: (facts: GateRunStart) => void;
+    end: () => void;
+    /** Why the still-queued run has not started now (a selection starts out waiting on the semaphore). */
+    waitOn: (wait: GateRunWait) => void;
+}
+/** The outcome kept for an explicit-method delivery. */
+export type RecordedGateOutcome = 'passed' | 'failed';
+/** A selected, unfinished gate run as the heartbeat reads it (focus/focus-activity-gate.ts). */
+export interface GateRunView {
+    deliveryId: string;
+    focusId: string | null;
+    sha: string | null;
+    selectedAt: number;
+    startedAt: number | null;
+    timeoutMs: number | null;
+    wait: GateRunWait;
+}
+/** A verdict an explicit-method run rendered, the commit it applies to (null: it judged none, so it applies to any), and its gate. */
+export interface RecordedExplicitOutcome {
+    outcome: RecordedGateOutcome;
+    sha: string | null;
+    /** The gate the run applied (verify/gate-verdicts/commit-verdict-record.ts explicitGateKeyOf); absent on a record that kept none. */
+    gateKey?: string;
+}
+/** Register a candidate the tick selected; end the registration when its dispatch settles. */
+export declare function registerGateRun(selection: GateRunSelection): GateRunRegistration;
+/** Name the commit a selected run judges (its detached checkout's sha). A no-op when the delivery has no selected run. */
+export declare function noteGateRunCommit(deliveryId: string, sha: string): void;
+/** Bind a candidate to the registration its selection made, so the run path can start exactly that run. */
+export declare function bindGateRunCandidate(candidate: object, registration: GateRunRegistration): void;
+/**
+ * The candidate's command is starting now, judging `facts`: its registration turns
+ * running (module header). A no-op for a candidate no tick selected.
+ */
+export declare function startGateRunOf(candidate: object, facts: GateRunStart): void;
+/**
+ * Every selected, unfinished gate run, in selection order -- queued ones
+ * (startedAt null) and running ones. In-process facts only: nothing here is
+ * written to the database; the heartbeat publishes them as the focus activity
+ * record and a run drops out the moment its registration ends.
+ */
+export declare function gateRunSnapshot(): GateRunView[];
+/**
+ * Whether a selected, unfinished gate run on the focus may judge `sha`: one that
+ * names that commit, or one that names none yet. A null `sha` (a judged commit
+ * nobody could read) matches every run on the focus.
+ */
+export declare function hasPendingGateRun(focusId: string, sha: string | null): boolean;
+/** Whether a gate run for the delivery is selected and not yet finished (verify/run-selection/explicit-rearm.ts selects no second one). */
+export declare function isGateRunSelected(deliveryId: string): boolean;
+/**
+ * The verdict a run's result renders: a pass or a failure, at its judged commit
+ * when that is a well-formed sha, else for no commit, under the gate the run
+ * applied (`gateKey`); null for any other outcome (no verdict). The one rule the
+ * in-process record and the durable one (verify/gate-verdicts/explicit-gate-outcome.ts) both
+ * apply. Pure.
+ */
+export declare function explicitGateOutcomeOf(result: {
+    outcome: string;
+    verifiedSha?: string;
+}, gateKey?: string): RecordedExplicitOutcome | null;
+/** Note the run id a selected explicit candidate's selection named, so its verdict is recorded as that run's. */
+export declare function noteExplicitRunId(candidate: object, runId: string): void;
+/** The run id the candidate's selection named, or undefined when none did. */
+export declare function explicitRunIdOf(candidate: object): string | undefined;
+/** Record the outcome an explicit-method run rendered under the gate it applied (see the module header for what is kept). */
+export declare function recordExplicitGateOutcome(deliveryId: string, result: {
+    outcome: string;
+    verifiedSha?: string;
+}, gateKey?: string): void;
+/**
+ * What this process knows about the delivery's explicit-method verdict: the
+ * verdict its latest run rendered, null for "no verdict" (a selection since, or a
+ * run that rendered none), or undefined when this process has seen no explicit run
+ * for the delivery -- the durable record is then the one to read.
+ */
+export declare function readLiveExplicitGateOutcome(deliveryId: string): RecordedExplicitOutcome | null | undefined;
+/**
+ * The outcome an explicit-method run recorded for the delivery in this process when
+ * it applies to `sha` -- the run judged that commit, or judged none -- else null.
+ */
+export declare function readExplicitGateOutcome(deliveryId: string, sha: string | null): RecordedGateOutcome | null;
+/** Test seam: forget every selected run and recorded outcome. */
+export declare function __resetGateRunRegistryForTests(): void;
+//# sourceMappingURL=gate-run-registry.d.ts.map

package/dist/verify/gate-verdicts/gate-run-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-run-registry.d.ts","sourceRoot":"","sources":["../../../src/verify/gate-verdicts/gate-run-registry.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,kDAAkD;AAClD,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,mGAAmG;IACnG,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GACnB;IAAE,EAAE,EAAE,OAAO,CAAC,aAAa,EAAE,wBAAwB,GAAG,WAAW,CAAC,CAAA;CAAE,GACtE;IAAE,EAAE,EAAE,OAAO,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC;IAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAItH;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,yFAAyF;AACzF,MAAM,WAAW,mBAAmB;IAClC,2FAA2F;IAC3F,KAAK,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;IACrC,GAAG,EAAE,MAAM,IAAI,CAAC;IAChB,sGAAsG;IACtG,MAAM,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;CACrC;AAED,wDAAwD;AACxD,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAiBtD,gGAAgG;AAChG,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,EAAE,WAAW,CAAC;CACnB;AAED,sIAAsI;AACtI,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,mBAAmB,CAAC;IAC7B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,qIAAqI;IACrI,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAQD,8FAA8F;AAC9F,wBAAgB,eAAe,CAAC,SAAS,EAAE,gBAAgB,GAAG,mBAAmB,CAqBhF;AAED,0HAA0H;AAC1H,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAIvE;AAKD,2GAA2G;AAC3G,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,mBAAmB,GAAG,IAAI,CAE/F;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,IAAI,CAE3E;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,IAAI,WAAW,EAAE,CAK/C;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAK9E;AAED,2IAA2I;AAC3I,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAK7D;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,uBAAuB,GAAG,IAAI,CAKzI;AAKD,iHAAiH;AACjH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAExE;AAED,8EAA8E;AAC9E,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAErE;AAED,6HAA6H;AAC7H,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAEvI;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,uBAAuB,GAAG,IAAI,GAAG,SAAS,CAE1G;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,mBAAmB,GAAG,IAAI,CAI1G;AAED,iEAAiE;AACjE,wBAAgB,8BAA8B,IAAI,IAAI,CAGrD"}

package/dist/verify/gate-verdicts/gate-run-registry.js

@@ -0,0 +1,138 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: 22 tests -- run: npm run gen:pinned-by -- --list packages/daemon/src/verify/gate-verdicts/gate-run-registry.ts
+// PINNED-BY-END
+const SEMAPHORE_WAIT = { on: 'verification_semaphore' };
+const SHA_RE = /^[0-9a-f]{7,64}$/i;
+const selectedRuns = new Set();
+/** Per delivery this process has seen an explicit run for: its verdict, or null for "no verdict" (see the module header). */
+const explicitOutcomes = new Map();
+/** Register a candidate the tick selected; end the registration when its dispatch settles. */
+export function registerGateRun(selection) {
+    const run = {
+        deliveryId: selection.deliveryId, focusId: selection.focusId, sha: null, selectedAt: Date.now(), startedAt: null,
+        timeoutMs: null, wait: SEMAPHORE_WAIT,
+    };
+    selectedRuns.add(run);
+    if (selection.explicit)
+        explicitOutcomes.set(selection.deliveryId, null);
+    return {
+        start: ({ sha, timeoutMs }) => {
+            if (run.startedAt !== null)
+                return;
+            run.sha = sha;
+            run.timeoutMs = timeoutMs;
+            run.startedAt = Date.now();
+        },
+        end: () => {
+            selectedRuns.delete(run);
+        },
+        waitOn: (wait) => {
+            run.wait = wait;
+        },
+    };
+}
+/** Name the commit a selected run judges (its detached checkout's sha). A no-op when the delivery has no selected run. */
+export function noteGateRunCommit(deliveryId, sha) {
+    for (const run of selectedRuns) {
+        if (run.deliveryId === deliveryId)
+            run.sha = sha;
+    }
+}
+/** The registration each dispatched candidate was selected under, keyed by the candidate itself. */
+const candidateRegistrations = new WeakMap();
+/** Bind a candidate to the registration its selection made, so the run path can start exactly that run. */
+export function bindGateRunCandidate(candidate, registration) {
+    candidateRegistrations.set(candidate, registration);
+}
+/**
+ * The candidate's command is starting now, judging `facts`: its registration turns
+ * running (module header). A no-op for a candidate no tick selected.
+ */
+export function startGateRunOf(candidate, facts) {
+    candidateRegistrations.get(candidate)?.start(facts);
+}
+/**
+ * Every selected, unfinished gate run, in selection order -- queued ones
+ * (startedAt null) and running ones. In-process facts only: nothing here is
+ * written to the database; the heartbeat publishes them as the focus activity
+ * record and a run drops out the moment its registration ends.
+ */
+export function gateRunSnapshot() {
+    return [...selectedRuns].map((r) => ({
+        deliveryId: r.deliveryId, focusId: r.focusId, sha: r.sha, selectedAt: r.selectedAt, startedAt: r.startedAt,
+        timeoutMs: r.timeoutMs, wait: r.wait,
+    }));
+}
+/**
+ * Whether a selected, unfinished gate run on the focus may judge `sha`: one that
+ * names that commit, or one that names none yet. A null `sha` (a judged commit
+ * nobody could read) matches every run on the focus.
+ */
+export function hasPendingGateRun(focusId, sha) {
+    for (const run of selectedRuns) {
+        if (run.focusId === focusId && (run.sha === null || sha === null || run.sha === sha))
+            return true;
+    }
+    return false;
+}
+/** Whether a gate run for the delivery is selected and not yet finished (verify/run-selection/explicit-rearm.ts selects no second one). */
+export function isGateRunSelected(deliveryId) {
+    for (const run of selectedRuns) {
+        if (run.deliveryId === deliveryId)
+            return true;
+    }
+    return false;
+}
+/**
+ * The verdict a run's result renders: a pass or a failure, at its judged commit
+ * when that is a well-formed sha, else for no commit, under the gate the run
+ * applied (`gateKey`); null for any other outcome (no verdict). The one rule the
+ * in-process record and the durable one (verify/gate-verdicts/explicit-gate-outcome.ts) both
+ * apply. Pure.
+ */
+export function explicitGateOutcomeOf(result, gateKey) {
+    const { outcome } = result;
+    if (outcome !== 'passed' && outcome !== 'failed')
+        return null;
+    const sha = typeof result.verifiedSha === 'string' && SHA_RE.test(result.verifiedSha) ? result.verifiedSha : null;
+    return { outcome, sha, ...(gateKey !== undefined ? { gateKey } : {}) };
+}
+/** The run id each selected explicit candidate was named (verify/gate-verdicts/explicit-run-ledger.ts), keyed by the candidate itself. */
+const explicitRunIds = new WeakMap();
+/** Note the run id a selected explicit candidate's selection named, so its verdict is recorded as that run's. */
+export function noteExplicitRunId(candidate, runId) {
+    explicitRunIds.set(candidate, runId);
+}
+/** The run id the candidate's selection named, or undefined when none did. */
+export function explicitRunIdOf(candidate) {
+    return explicitRunIds.get(candidate);
+}
+/** Record the outcome an explicit-method run rendered under the gate it applied (see the module header for what is kept). */
+export function recordExplicitGateOutcome(deliveryId, result, gateKey) {
+    explicitOutcomes.set(deliveryId, explicitGateOutcomeOf(result, gateKey));
+}
+/**
+ * What this process knows about the delivery's explicit-method verdict: the
+ * verdict its latest run rendered, null for "no verdict" (a selection since, or a
+ * run that rendered none), or undefined when this process has seen no explicit run
+ * for the delivery -- the durable record is then the one to read.
+ */
+export function readLiveExplicitGateOutcome(deliveryId) {
+    return explicitOutcomes.get(deliveryId);
+}
+/**
+ * The outcome an explicit-method run recorded for the delivery in this process when
+ * it applies to `sha` -- the run judged that commit, or judged none -- else null.
+ */
+export function readExplicitGateOutcome(deliveryId, sha) {
+    const recorded = explicitOutcomes.get(deliveryId);
+    if (!recorded)
+        return null;
+    return recorded.sha === null || recorded.sha === sha ? recorded.outcome : null;
+}
+/** Test seam: forget every selected run and recorded outcome. */
+export function __resetGateRunRegistryForTests() {
+    selectedRuns.clear();
+    explicitOutcomes.clear();
+}
+//# sourceMappingURL=gate-run-registry.js.map

package/dist/verify/gate-verdicts/gate-run-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-run-registry.js","sourceRoot":"","sources":["../../../src/verify/gate-verdicts/gate-run-registry.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,4HAA4H;AAC5H,gBAAgB;AAiFhB,MAAM,cAAc,GAAgB,EAAE,EAAE,EAAE,wBAAwB,EAAE,CAAC;AA0DrE,MAAM,MAAM,GAAG,mBAAmB,CAAC;AAEnC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAe,CAAC;AAC5C,6HAA6H;AAC7H,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA0C,CAAC;AAE3E,8FAA8F;AAC9F,MAAM,UAAU,eAAe,CAAC,SAA2B;IACzD,MAAM,GAAG,GAAgB;QACvB,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI;QAChH,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc;KACtC,CAAC;IACF,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,SAAS,CAAC,QAAQ;QAAE,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACzE,OAAO;QACL,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE;YAC5B,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI;gBAAE,OAAO;YACnC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC;YACd,GAAG,CAAC,SAAS,GAAG,SAAS,CAAC;YAC1B,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,CAAC;QACD,GAAG,EAAE,GAAG,EAAE;YACR,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACf,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,0HAA0H;AAC1H,MAAM,UAAU,iBAAiB,CAAC,UAAkB,EAAE,GAAW;IAC/D,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,GAAG,CAAC,UAAU,KAAK,UAAU;YAAE,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC;IACnD,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,MAAM,sBAAsB,GAAG,IAAI,OAAO,EAA+B,CAAC;AAE1E,2GAA2G;AAC3G,MAAM,UAAU,oBAAoB,CAAC,SAAiB,EAAE,YAAiC;IACvF,sBAAsB,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,KAAmB;IACnE,sBAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,CAAC,GAAG,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnC,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;QAC1G,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;KACrC,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,GAAkB;IACnE,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACpG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2IAA2I;AAC3I,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,GAAG,CAAC,UAAU,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAiD,EAAE,OAAgB;IACvG,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC3B,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC9D,MAAM,GAAG,GAAG,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IAClH,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACzE,CAAC;AAED,0IAA0I;AAC1I,MAAM,cAAc,GAAG,IAAI,OAAO,EAAkB,CAAC;AAErD,iHAAiH;AACjH,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,KAAa;IAChE,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,SAAiB;IAC/C,OAAO,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AACvC,CAAC;AAED,6HAA6H;AAC7H,MAAM,UAAU,yBAAyB,CAAC,UAAkB,EAAE,MAAiD,EAAE,OAAgB;IAC/H,gBAAgB,CAAC,GAAG,CAAC,UAAU,EAAE,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,UAAkB;IAC5D,OAAO,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAkB,EAAE,GAAkB;IAC5E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO,QAAQ,CAAC,GAAG,KAAK,IAAI,IAAI,QAAQ,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACjF,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,8BAA8B;IAC5C,YAAY,CAAC,KAAK,EAAE,CAAC;IACrB,gBAAgB,CAAC,KAAK,EAAE,CAAC;AAC3B,CAAC"}

package/dist/verify/gate-verdicts/gate-verdict-source.d.ts

@@ -0,0 +1,68 @@
+import { type GateVerdictSummary, type JudgedCommit } from '../../queries/delivery-gate-state/delivery-gate-state.js';
+import type { CommitVerdict } from './commit-verdict-record.js';
+/** The slice of a deterministic StrategyResult a verdict is derived from. */
+export interface GateRunVerdictSource {
+    outcome?: string;
+    exitCode?: number | null;
+    timedOut?: boolean;
+    checkoutUnavailable?: boolean;
+    configUnresolved?: boolean;
+    verifiedSha?: string;
+    failedStage?: string;
+    preExistingStages?: string[];
+}
+/** The commit a run judged (its well-formed verifiedSha), or null for a run that judged none. Pure. */
+export declare function judgedShaOfRun(run: Pick<GateRunVerdictSource, 'verifiedSha'>): string | null;
+/** The verdict a finished deterministic run rendered for its commit, or null when it rendered none. Pure. */
+export declare function gateVerdictFromRun(run: GateRunVerdictSource): GateVerdictSummary | null;
+/** The summary of a durable commit verdict. Pure. */
+export declare function gateVerdictFromCommitVerdict(verdict: CommitVerdict): GateVerdictSummary;
+/** Injected IO for the judged-commit read; production binds the commit-verdict record store. */
+export interface JudgedCommitVerdictDeps {
+    readVerdict: (productId: string, focusId: string, sha: string) => CommitVerdict | null;
+}
+/** Which judged commit to read: the exact sha a run judged, on its product + focus. */
+export interface JudgedCommitTarget {
+    productId?: string | null;
+    focusId?: string | null;
+    sha?: string | null;
+}
+/**
+ * The recorded gate verdict for exactly the judged commit `target.sha`, or null
+ * (no product/focus, no or malformed sha, no record). Never resolves HEAD and
+ * never throws: a message that cannot read the verdict still goes out, just
+ * without the section.
+ */
+export declare function readJudgedCommitGateVerdict(target: JudgedCommitTarget, d: JudgedCommitVerdictDeps): GateVerdictSummary | null;
+/**
+ * The recorded verdict for the commit a re-work's run judged, through the
+ * re-work's reader, or null when the run judged none (the reader is then not
+ * asked: no sha is never "the HEAD").
+ */
+export declare function readJudgedVerdictFor(d: {
+    readGateVerdict: (target: JudgedCommitTarget) => GateVerdictSummary | null;
+}, v: {
+    productId?: string | null;
+    focusId?: string | null;
+}, judgedSha: string | null): GateVerdictSummary | null;
+/** A focus delivery as the resume path reads it. */
+export interface JudgedDeliveryRow {
+    executionStatus?: string | null;
+    gateState?: unknown;
+}
+/**
+ * The live (not done, not cancelled) delivery carrying the most recent judged
+ * commit stamped on its gate_state, with that judged commit, or null when none
+ * carries one. The delivery is what the resume resolves its own gate for. Pure.
+ */
+export declare function latestJudgedDelivery<T extends JudgedDeliveryRow>(deliveries: readonly T[]): {
+    delivery: T;
+    judged: JudgedCommit;
+} | null;
+/**
+ * The most recent judged commit stamped on a live delivery's gate_state
+ * (latestJudgedDelivery), or null. What a resumed focus session is shown the
+ * verdict for. Pure.
+ */
+export declare function latestJudgedCommit(deliveries: readonly JudgedDeliveryRow[]): JudgedCommit | null;
+//# sourceMappingURL=gate-verdict-source.d.ts.map

package/dist/verify/gate-verdicts/gate-verdict-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-verdict-source.d.ts","sourceRoot":"","sources":["../../../src/verify/gate-verdicts/gate-verdict-source.ts"],"names":[],"mappings":"AA4CA,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,YAAY,EAClB,MAAM,0DAA0D,CAAC;AAClE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAMhE,6EAA6E;AAC7E,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAMD,uGAAuG;AACvG,wBAAgB,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,oBAAoB,EAAE,aAAa,CAAC,GAAG,MAAM,GAAG,IAAI,CAG5F;AAED,6GAA6G;AAC7G,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,oBAAoB,GAAG,kBAAkB,GAAG,IAAI,CAiBvF;AAED,qDAAqD;AACrD,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,aAAa,GAAG,kBAAkB,CAOvF;AAED,gGAAgG;AAChG,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,aAAa,GAAG,IAAI,CAAC;CACxF;AAED,uFAAuF;AACvF,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,kBAAkB,EAC1B,CAAC,EAAE,uBAAuB,GACzB,kBAAkB,GAAG,IAAI,CAU3B;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,CAAC,EAAE;IAAE,eAAe,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,kBAAkB,GAAG,IAAI,CAAA;CAAE,EACjF,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,EACzD,SAAS,EAAE,MAAM,GAAG,IAAI,GACvB,kBAAkB,GAAG,IAAI,CAE3B;AAED,oDAAoD;AACpD,MAAM,WAAW,iBAAiB;IAChC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAKD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,iBAAiB,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,GAAG;IAAE,QAAQ,EAAE,CAAC,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE,GAAG,IAAI,CAQxI;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,SAAS,iBAAiB,EAAE,GAAG,YAAY,GAAG,IAAI,CAEhG"}

package/dist/verify/gate-verdicts/gate-verdict-source.js

@@ -0,0 +1,138 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/verify/gate-verdicts/gate-verdict-source.test.ts,
+//   packages/daemon/src/verify/outcome-routing/rework-judgment.test.ts,
+//   packages/daemon/src/verify/outcome-routing/verification-feedback.test.ts,
+//   packages/daemon/src/verify/outcome-routing/verify-evidence-unavailable.test.ts
+// PINNED-BY-END
+/**
+ * Where the gate verdict a team is shown comes from.
+ *
+ * One shape (GateVerdictSummary), always for the commit a run JUDGED -- never
+ * for whatever the focus worktree HEAD is when the message is built. Commit B can
+ * land while commit A is being judged; a message about A that re-resolved HEAD
+ * would omit A's verdict or report B's.
+ *
+ *   - the RUN in hand. The deterministic-failure feedback holds the StrategyResult
+ *     and derives the verdict from it by the same rule the durable record uses
+ *     (commit-verdict-record.buildCommitVerdict): no verdict for a timeout, an
+ *     unavailable checkout, an unresolved config, or a run with no judged commit.
+ *   - the durable RECORD for the judged sha. The shortfall and evidence-unavailable
+ *     re-work are handed the sha of the run that judged them (judgedShaOfRun) and
+ *     that run's own verdict (verify/outcome-routing/rework-judgment.ts runVerdictOf); only a
+ *     writer handed no run reads the record by exactly that sha.
+ *   - the JUDGED COMMIT a re-work stamped. The resume delta holds no run, so it
+ *     reads the judged commit the latest re-work stamped on a live delivery's
+ *     gate_state (latestJudgedDelivery) -- a verification re-work's, or a
+ *     verify_failed route for review-filed work (the review exit, or the live
+ *     open-work pass; completion/review-exit-holds/review-exit-verdict-gate.ts). Every writer
+ *     persists the delivery's OWN verdict beside that sha (a verification
+ *     re-work: its run's; a review-filed route: its own-gate read), and the
+ *     resume shows it. A stamp that carries none is resolved under THAT
+ *     delivery's own gate (spawn/prompt-assembly.ts, through the review exit's
+ *     own-gate reads), never by a gate-less record read: one commit can carry
+ *     several gates' verdicts, and a sibling gate's must not answer. No judged
+ *     sha, or no own-gate verdict for it, is no verdict: the message omits the
+ *     section rather than guessing.
+ *
+ * Rendering lives in prompt-sections/gate-verdict-section.ts.
+ *
+ * @module gate-verdict-source
+ */
+import { DELIVERY_STATUS } from '@telora/daemon-core';
+import { createLogger } from '../../log/daemon-log.js';
+import { readVerificationHistory, } from '../../queries/delivery-gate-state/delivery-gate-state.js';
+const log = createLogger({ module: 'verification' });
+const SHA_RE = /^[0-9a-f]{7,64}$/i;
+function carriedStages(stages) {
+    return stages && stages.length > 0 ? { preExistingStages: [...stages] } : {};
+}
+/** The commit a run judged (its well-formed verifiedSha), or null for a run that judged none. Pure. */
+export function judgedShaOfRun(run) {
+    const sha = run.verifiedSha;
+    return typeof sha === 'string' && SHA_RE.test(sha) ? sha : null;
+}
+/** The verdict a finished deterministic run rendered for its commit, or null when it rendered none. Pure. */
+export function gateVerdictFromRun(run) {
+    if (run.timedOut || run.checkoutUnavailable || run.configUnresolved)
+        return null;
+    const sha = judgedShaOfRun(run);
+    if (sha === null)
+        return null;
+    // Exit 0 is the gate command passing: the strategy never reports 'failed' at
+    // exit 0 itself, so a failed outcome at exit 0 was demoted AFTER the gate by a
+    // per-delivery check (the security verify-closed gate) -- not the commit's
+    // verdict. A non-zero exit whose reds all pre-exist was demoted to 'passed' by
+    // attribution, and that pass IS what the record holds for the commit.
+    const passed = run.exitCode === 0 || run.outcome === 'passed';
+    if (!passed && (run.outcome !== 'failed' || typeof run.exitCode !== 'number'))
+        return null;
+    return {
+        outcome: passed ? 'passed' : 'failed',
+        sha,
+        ...(!passed && run.failedStage ? { failedStage: run.failedStage } : {}),
+        ...carriedStages(run.preExistingStages),
+    };
+}
+/** The summary of a durable commit verdict. Pure. */
+export function gateVerdictFromCommitVerdict(verdict) {
+    return {
+        outcome: verdict.outcome,
+        sha: verdict.sha,
+        ...(verdict.outcome === 'failed' && verdict.failedStage ? { failedStage: verdict.failedStage } : {}),
+        ...carriedStages(verdict.preExistingStages),
+    };
+}
+/**
+ * The recorded gate verdict for exactly the judged commit `target.sha`, or null
+ * (no product/focus, no or malformed sha, no record). Never resolves HEAD and
+ * never throws: a message that cannot read the verdict still goes out, just
+ * without the section.
+ */
+export function readJudgedCommitGateVerdict(target, d) {
+    const { productId, focusId, sha } = target;
+    if (!productId || !focusId || !sha || !SHA_RE.test(sha))
+        return null;
+    try {
+        const verdict = d.readVerdict(productId, focusId, sha);
+        return verdict ? gateVerdictFromCommitVerdict(verdict) : null;
+    }
+    catch (err) {
+        log.debug(`[verification] judged-commit verdict read failed for ${focusId}@${sha.slice(0, 8)}:`, err.message);
+        return null;
+    }
+}
+/**
+ * The recorded verdict for the commit a re-work's run judged, through the
+ * re-work's reader, or null when the run judged none (the reader is then not
+ * asked: no sha is never "the HEAD").
+ */
+export function readJudgedVerdictFor(d, v, judgedSha) {
+    return judgedSha ? d.readGateVerdict({ productId: v.productId, focusId: v.focusId, sha: judgedSha }) : null;
+}
+/** Deliveries whose judgment no longer describes work a resumed team is doing. */
+const SETTLED_STATUSES = new Set([DELIVERY_STATUS.DONE, DELIVERY_STATUS.CANCELLED]);
+/**
+ * The live (not done, not cancelled) delivery carrying the most recent judged
+ * commit stamped on its gate_state, with that judged commit, or null when none
+ * carries one. The delivery is what the resume resolves its own gate for. Pure.
+ */
+export function latestJudgedDelivery(deliveries) {
+    let latest = null;
+    for (const delivery of deliveries) {
+        if (delivery.executionStatus && SETTLED_STATUSES.has(delivery.executionStatus))
+            continue;
+        const judged = readVerificationHistory(delivery.gateState).judgedCommit;
+        if (judged && (latest === null || judged.judgedAt > latest.judged.judgedAt))
+            latest = { delivery, judged };
+    }
+    return latest;
+}
+/**
+ * The most recent judged commit stamped on a live delivery's gate_state
+ * (latestJudgedDelivery), or null. What a resumed focus session is shown the
+ * verdict for. Pure.
+ */
+export function latestJudgedCommit(deliveries) {
+    return latestJudgedDelivery(deliveries)?.judged ?? null;
+}
+//# sourceMappingURL=gate-verdict-source.js.map

package/dist/verify/gate-verdicts/gate-verdict-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-verdict-source.js","sourceRoot":"","sources":["../../../src/verify/gate-verdicts/gate-verdict-source.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,mFAAmF;AACnF,wEAAwE;AACxE,8EAA8E;AAC9E,mFAAmF;AACnF,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EACL,uBAAuB,GAGxB,MAAM,0DAA0D,CAAC;AAGlE,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAErD,MAAM,MAAM,GAAG,mBAAmB,CAAC;AAcnC,SAAS,aAAa,CAAC,MAAqC;IAC1D,OAAO,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/E,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,cAAc,CAAC,GAA8C;IAC3E,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,CAAC;IAC5B,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,kBAAkB,CAAC,GAAyB;IAC1D,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,mBAAmB,IAAI,GAAG,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC;IACjF,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,6EAA6E;IAC7E,+EAA+E;IAC/E,2EAA2E;IAC3E,+EAA+E;IAC/E,sEAAsE;IACtE,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC;IAC9D,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3F,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;QACrC,GAAG;QACH,GAAG,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,aAAa,CAAC,GAAG,CAAC,iBAAiB,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,4BAA4B,CAAC,OAAsB;IACjE,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpG,GAAG,aAAa,CAAC,OAAO,CAAC,iBAAiB,CAAC;KAC5C,CAAC;AACJ,CAAC;AAcD;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAA0B,EAC1B,CAA0B;IAE1B,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;IAC3C,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,CAAC,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACvD,OAAO,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,wDAAwD,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QACzH,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,CAAiF,EACjF,CAAyD,EACzD,SAAwB;IAExB,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9G,CAAC;AAQD,kFAAkF;AAClF,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;AAEzG;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAA8B,UAAwB;IACxF,IAAI,MAAM,GAAiD,IAAI,CAAC;IAChE,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,IAAI,QAAQ,CAAC,eAAe,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC;YAAE,SAAS;QACzF,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC;QACxE,IAAI,MAAM,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAE,MAAM,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC7G,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAwC;IACzE,OAAO,oBAAoB,CAAC,UAAU,CAAC,EAAE,MAAM,IAAI,IAAI,CAAC;AAC1D,CAAC"}

package/dist/verify/gate-verdicts/judged-ancestor.d.ts

@@ -0,0 +1,42 @@
+import type { CommitVerdict, CommitVerdictGate, CommitVerdictReader } from './commit-verdict-record.js';
+/** How many ancestors of the tip are searched for the newest judged one. */
+export declare const ANCESTOR_SEARCH_DEPTH = 200;
+/** Ancestors of `tip`, newest first, excluding `tip`; null when unreadable. */
+export type AncestorLister = (worktreePath: string, tip: string, depth: number) => string[] | null;
+/** The production lister: git rev-list in the worktree. Bound at the composition root. */
+export declare const listAncestorsWithGit: AncestorLister;
+/**
+ * The newest ancestor of `tip` whose recorded verdict satisfies `accept`, with
+ * that verdict; null when none does, or when the ancestors are unreadable.
+ */
+export declare function findJudgedAncestor(productId: string, focusId: string, tip: string, gate: CommitVerdictGate, deps: {
+    worktreePath: string;
+    readCommitVerdict: CommitVerdictReader;
+    listAncestors: AncestorLister;
+}, accept: (verdict: CommitVerdict) => boolean): {
+    sha: string;
+    verdict: CommitVerdict;
+} | null;
+/**
+ * The newest ancestor of `tip` this gate judged PASSING: the commit up to which
+ * the gate's stages need not look. Null when none is found, which every caller
+ * reads as "keep the base you already had".
+ *
+ * A FAILED verdict never anchors -- the walk continues past it to an older green
+ * one. A failure says the tree was bad there, not that anything was covered.
+ */
+export declare function findGreenAncestor(productId: string, focusId: string, tip: string, gate: CommitVerdictGate, deps: {
+    worktreePath: string;
+    readCommitVerdict: CommitVerdictReader;
+    listAncestors: AncestorLister;
+}): string | null;
+/**
+ * True when `maybeAncestor` is an ancestor of `descendant` (or the same commit).
+ * Undetermined (`null`) when git cannot answer.
+ *
+ * Ancestry, never commit dates: every coding spawn rebases the focus worktree
+ * (spawn/worktree-session.ts), so author and commit dates are shuffled relative
+ * to branch order and would rank the two bases wrongly.
+ */
+export declare function isAncestorOf(worktreePath: string, maybeAncestor: string, descendant: string): boolean | null;
+//# sourceMappingURL=judged-ancestor.d.ts.map

package/dist/verify/gate-verdicts/judged-ancestor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"judged-ancestor.d.ts","sourceRoot":"","sources":["../../../src/verify/gate-verdicts/judged-ancestor.ts"],"names":[],"mappings":"AAgDA,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAExG,4EAA4E;AAC5E,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAEzC,+EAA+E;AAC/E,MAAM,MAAM,cAAc,GAAG,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,EAAE,GAAG,IAAI,CAAC;AAEnG,0FAA0F;AAC1F,eAAO,MAAM,oBAAoB,EAAE,cAIlC,CAAC;AAEF;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,iBAAiB,EACvB,IAAI,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,mBAAmB,CAAC;IAAC,aAAa,EAAE,cAAc,CAAA;CAAE,EACrG,MAAM,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,GAC1C;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,GAAG,IAAI,CAWhD;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,iBAAiB,EACvB,IAAI,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,mBAAmB,CAAC;IAAC,aAAa,EAAE,cAAc,CAAA;CAAE,GACpG,MAAM,GAAG,IAAI,CAEf;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAU5G"}