@telora/daemon 0.22.245 → 0.22.290

package/dist/verify/gate-verdict-source.d.ts

@@ -1,68 +0,0 @@
-import { type GateVerdictSummary, type JudgedCommit } from '../queries/delivery-gate-state.js';
-import { type CommitVerdict } from './commit-verdict-record.js';
-/** The slice of a deterministic StrategyResult a verdict is derived from. */
-export interface GateRunVerdictSource {
-    outcome?: string;
-    exitCode?: number | null;
-    timedOut?: boolean;
-    checkoutUnavailable?: boolean;
-    configUnresolved?: boolean;
-    verifiedSha?: string;
-    failedStage?: string;
-    preExistingStages?: string[];
-}
-/** The commit a run judged (its well-formed verifiedSha), or null for a run that judged none. Pure. */
-export declare function judgedShaOfRun(run: Pick<GateRunVerdictSource, 'verifiedSha'>): string | null;
-/** The verdict a finished deterministic run rendered for its commit, or null when it rendered none. Pure. */
-export declare function gateVerdictFromRun(run: GateRunVerdictSource): GateVerdictSummary | null;
-/** The summary of a durable commit verdict. Pure. */
-export declare function gateVerdictFromCommitVerdict(verdict: CommitVerdict): GateVerdictSummary;
-/** Injected IO for the judged-commit read; the default reaches the record store. */
-export interface JudgedCommitVerdictDeps {
-    readVerdict: (productId: string, focusId: string, sha: string) => CommitVerdict | null;
-}
-/** Which judged commit to read: the exact sha a run judged, on its product + focus. */
-export interface JudgedCommitTarget {
-    productId?: string | null;
-    focusId?: string | null;
-    sha?: string | null;
-}
-/**
- * The recorded gate verdict for exactly the judged commit `target.sha`, or null
- * (no product/focus, no or malformed sha, no record). Never resolves HEAD and
- * never throws: a message that cannot read the verdict still goes out, just
- * without the section.
- */
-export declare function readJudgedCommitGateVerdict(target: JudgedCommitTarget, deps?: Partial<JudgedCommitVerdictDeps>): GateVerdictSummary | null;
-/**
- * The recorded verdict for the commit a re-work's run judged, through the
- * re-work's reader, or null when the run judged none (the reader is then not
- * asked: no sha is never "the HEAD").
- */
-export declare function readJudgedVerdictFor(d: {
-    readGateVerdict: (target: JudgedCommitTarget) => GateVerdictSummary | null;
-}, v: {
-    productId?: string | null;
-    focusId?: string | null;
-}, judgedSha: string | null): GateVerdictSummary | null;
-/** A focus delivery as the resume path reads it. */
-export interface JudgedDeliveryRow {
-    executionStatus?: string | null;
-    gateState?: unknown;
-}
-/**
- * The live (not done, not cancelled) delivery carrying the most recent judged
- * commit stamped on its gate_state, with that judged commit, or null when none
- * carries one. The delivery is what the resume resolves its own gate for. Pure.
- */
-export declare function latestJudgedDelivery<T extends JudgedDeliveryRow>(deliveries: readonly T[]): {
-    delivery: T;
-    judged: JudgedCommit;
-} | null;
-/**
- * The most recent judged commit stamped on a live delivery's gate_state
- * (latestJudgedDelivery), or null. What a resumed focus session is shown the
- * verdict for. Pure.
- */
-export declare function latestJudgedCommit(deliveries: readonly JudgedDeliveryRow[]): JudgedCommit | null;
-//# sourceMappingURL=gate-verdict-source.d.ts.map

package/dist/verify/gate-verdict-source.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gate-verdict-source.d.ts","sourceRoot":"","sources":["../../src/verify/gate-verdict-source.ts"],"names":[],"mappings":"AA4CA,OAAO,EAEL,KAAK,kBAAkB,EACvB,KAAK,YAAY,EAClB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAqB,KAAK,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAMnF,6EAA6E;AAC7E,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAMD,uGAAuG;AACvG,wBAAgB,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,oBAAoB,EAAE,aAAa,CAAC,GAAG,MAAM,GAAG,IAAI,CAG5F;AAED,6GAA6G;AAC7G,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,oBAAoB,GAAG,kBAAkB,GAAG,IAAI,CAiBvF;AAED,qDAAqD;AACrD,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,aAAa,GAAG,kBAAkB,CAOvF;AAED,oFAAoF;AACpF,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,aAAa,GAAG,IAAI,CAAC;CACxF;AAMD,uFAAuF;AACvF,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,kBAAkB,EAC1B,IAAI,GAAE,OAAO,CAAC,uBAAuB,CAAM,GAC1C,kBAAkB,GAAG,IAAI,CAW3B;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,CAAC,EAAE;IAAE,eAAe,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,kBAAkB,GAAG,IAAI,CAAA;CAAE,EACjF,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,EACzD,SAAS,EAAE,MAAM,GAAG,IAAI,GACvB,kBAAkB,GAAG,IAAI,CAE3B;AAED,oDAAoD;AACpD,MAAM,WAAW,iBAAiB;IAChC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAKD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,iBAAiB,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,GAAG;IAAE,QAAQ,EAAE,CAAC,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE,GAAG,IAAI,CAQxI;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,SAAS,iBAAiB,EAAE,GAAG,YAAY,GAAG,IAAI,CAEhG"}

package/dist/verify/gate-verdict-source.js

@@ -1,143 +0,0 @@
-// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: packages/daemon/src/verify/gate-verdict-source.test.ts,
-//   packages/daemon/src/verify/rework-judgment.test.ts,
-//   packages/daemon/src/verify/verification-feedback.test.ts,
-//   packages/daemon/src/verify/verify-evidence-unavailable.test.ts
-// PINNED-BY-END
-/**
- * Where the gate verdict a team is shown comes from.
- *
- * One shape (GateVerdictSummary), always for the commit a run JUDGED -- never
- * for whatever the focus worktree HEAD is when the message is built. Commit B can
- * land while commit A is being judged; a message about A that re-resolved HEAD
- * would omit A's verdict or report B's.
- *
- *   - the RUN in hand. The deterministic-failure feedback holds the StrategyResult
- *     and derives the verdict from it by the same rule the durable record uses
- *     (commit-verdict-record.buildCommitVerdict): no verdict for a timeout, an
- *     unavailable checkout, an unresolved config, or a run with no judged commit.
- *   - the durable RECORD for the judged sha. The shortfall and evidence-unavailable
- *     re-work are handed the sha of the run that judged them (judgedShaOfRun) and
- *     that run's own verdict (verify/rework-judgment.ts runVerdictOf); only a
- *     writer handed no run reads the record by exactly that sha.
- *   - the JUDGED COMMIT a re-work stamped. The resume delta holds no run, so it
- *     reads the judged commit the latest re-work stamped on a live delivery's
- *     gate_state (latestJudgedDelivery) -- a verification re-work's, or a
- *     verify_failed route for review-filed work (the review exit, or the live
- *     open-work pass; completion/review-exit-verdict-gate.ts). Every writer
- *     persists the delivery's OWN verdict beside that sha (a verification
- *     re-work: its run's; a review-filed route: its own-gate read), and the
- *     resume shows it. A stamp that carries none is resolved under THAT
- *     delivery's own gate (spawn/prompt-assembly.ts, through the review exit's
- *     own-gate reads), never by a gate-less record read: one commit can carry
- *     several gates' verdicts, and a sibling gate's must not answer. No judged
- *     sha, or no own-gate verdict for it, is no verdict: the message omits the
- *     section rather than guessing.
- *
- * Rendering lives in prompt-sections/gate-verdict-section.ts.
- *
- * @module gate-verdict-source
- */
-import { DELIVERY_STATUS } from '@telora/daemon-core';
-import { createLogger } from '../shell/log.js';
-import { readVerificationHistory, } from '../queries/delivery-gate-state.js';
-import { readCommitVerdict } from './commit-verdict-record.js';
-const log = createLogger({ module: 'verification' });
-const SHA_RE = /^[0-9a-f]{7,64}$/i;
-function carriedStages(stages) {
-    return stages && stages.length > 0 ? { preExistingStages: [...stages] } : {};
-}
-/** The commit a run judged (its well-formed verifiedSha), or null for a run that judged none. Pure. */
-export function judgedShaOfRun(run) {
-    const sha = run.verifiedSha;
-    return typeof sha === 'string' && SHA_RE.test(sha) ? sha : null;
-}
-/** The verdict a finished deterministic run rendered for its commit, or null when it rendered none. Pure. */
-export function gateVerdictFromRun(run) {
-    if (run.timedOut || run.checkoutUnavailable || run.configUnresolved)
-        return null;
-    const sha = judgedShaOfRun(run);
-    if (sha === null)
-        return null;
-    // Exit 0 is the gate command passing: the strategy never reports 'failed' at
-    // exit 0 itself, so a failed outcome at exit 0 was demoted AFTER the gate by a
-    // per-delivery check (the security verify-closed gate) -- not the commit's
-    // verdict. A non-zero exit whose reds all pre-exist was demoted to 'passed' by
-    // attribution, and that pass IS what the record holds for the commit.
-    const passed = run.exitCode === 0 || run.outcome === 'passed';
-    if (!passed && (run.outcome !== 'failed' || typeof run.exitCode !== 'number'))
-        return null;
-    return {
-        outcome: passed ? 'passed' : 'failed',
-        sha,
-        ...(!passed && run.failedStage ? { failedStage: run.failedStage } : {}),
-        ...carriedStages(run.preExistingStages),
-    };
-}
-/** The summary of a durable commit verdict. Pure. */
-export function gateVerdictFromCommitVerdict(verdict) {
-    return {
-        outcome: verdict.outcome,
-        sha: verdict.sha,
-        ...(verdict.outcome === 'failed' && verdict.failedStage ? { failedStage: verdict.failedStage } : {}),
-        ...carriedStages(verdict.preExistingStages),
-    };
-}
-const defaultJudgedCommitVerdictDeps = () => ({
-    readVerdict: (productId, focusId, sha) => readCommitVerdict(productId, focusId, sha),
-});
-/**
- * The recorded gate verdict for exactly the judged commit `target.sha`, or null
- * (no product/focus, no or malformed sha, no record). Never resolves HEAD and
- * never throws: a message that cannot read the verdict still goes out, just
- * without the section.
- */
-export function readJudgedCommitGateVerdict(target, deps = {}) {
-    const { productId, focusId, sha } = target;
-    if (!productId || !focusId || !sha || !SHA_RE.test(sha))
-        return null;
-    const d = { ...defaultJudgedCommitVerdictDeps(), ...deps };
-    try {
-        const verdict = d.readVerdict(productId, focusId, sha);
-        return verdict ? gateVerdictFromCommitVerdict(verdict) : null;
-    }
-    catch (err) {
-        log.debug(`[verification] judged-commit verdict read failed for ${focusId}@${sha.slice(0, 8)}:`, err.message);
-        return null;
-    }
-}
-/**
- * The recorded verdict for the commit a re-work's run judged, through the
- * re-work's reader, or null when the run judged none (the reader is then not
- * asked: no sha is never "the HEAD").
- */
-export function readJudgedVerdictFor(d, v, judgedSha) {
-    return judgedSha ? d.readGateVerdict({ productId: v.productId, focusId: v.focusId, sha: judgedSha }) : null;
-}
-/** Deliveries whose judgment no longer describes work a resumed team is doing. */
-const SETTLED_STATUSES = new Set([DELIVERY_STATUS.DONE, DELIVERY_STATUS.CANCELLED]);
-/**
- * The live (not done, not cancelled) delivery carrying the most recent judged
- * commit stamped on its gate_state, with that judged commit, or null when none
- * carries one. The delivery is what the resume resolves its own gate for. Pure.
- */
-export function latestJudgedDelivery(deliveries) {
-    let latest = null;
-    for (const delivery of deliveries) {
-        if (delivery.executionStatus && SETTLED_STATUSES.has(delivery.executionStatus))
-            continue;
-        const judged = readVerificationHistory(delivery.gateState).judgedCommit;
-        if (judged && (latest === null || judged.judgedAt > latest.judged.judgedAt))
-            latest = { delivery, judged };
-    }
-    return latest;
-}
-/**
- * The most recent judged commit stamped on a live delivery's gate_state
- * (latestJudgedDelivery), or null. What a resumed focus session is shown the
- * verdict for. Pure.
- */
-export function latestJudgedCommit(deliveries) {
-    return latestJudgedDelivery(deliveries)?.judged ?? null;
-}
-//# sourceMappingURL=gate-verdict-source.js.map

package/dist/verify/gate-verdict-source.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gate-verdict-source.js","sourceRoot":"","sources":["../../src/verify/gate-verdict-source.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,qEAAqE;AACrE,wDAAwD;AACxD,8DAA8D;AAC9D,mEAAmE;AACnE,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EACL,uBAAuB,GAGxB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAsB,MAAM,4BAA4B,CAAC;AAEnF,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAErD,MAAM,MAAM,GAAG,mBAAmB,CAAC;AAcnC,SAAS,aAAa,CAAC,MAAqC;IAC1D,OAAO,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/E,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,cAAc,CAAC,GAA8C;IAC3E,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,CAAC;IAC5B,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,kBAAkB,CAAC,GAAyB;IAC1D,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,mBAAmB,IAAI,GAAG,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC;IACjF,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9B,6EAA6E;IAC7E,+EAA+E;IAC/E,2EAA2E;IAC3E,+EAA+E;IAC/E,sEAAsE;IACtE,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC;IAC9D,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3F,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;QACrC,GAAG;QACH,GAAG,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,aAAa,CAAC,GAAG,CAAC,iBAAiB,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,4BAA4B,CAAC,OAAsB;IACjE,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpG,GAAG,aAAa,CAAC,OAAO,CAAC,iBAAiB,CAAC;KAC5C,CAAC;AACJ,CAAC;AAOD,MAAM,8BAA8B,GAAG,GAA4B,EAAE,CAAC,CAAC;IACrE,WAAW,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC;CACrF,CAAC,CAAC;AASH;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAA0B,EAC1B,OAAyC,EAAE;IAE3C,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;IAC3C,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,MAAM,CAAC,GAAG,EAAE,GAAG,8BAA8B,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,CAAC,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QACvD,OAAO,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,wDAAwD,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QACzH,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,CAAiF,EACjF,CAAyD,EACzD,SAAwB;IAExB,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9G,CAAC;AAQD,kFAAkF;AAClF,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;AAEzG;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAA8B,UAAwB;IACxF,IAAI,MAAM,GAAiD,IAAI,CAAC;IAChE,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,IAAI,QAAQ,CAAC,eAAe,IAAI,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC;YAAE,SAAS;QACzF,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,YAAY,CAAC;QACxE,IAAI,MAAM,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAE,MAAM,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC7G,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAwC;IACzE,OAAO,oBAAoB,CAAC,UAAU,CAAC,EAAE,MAAM,IAAI,IAAI,CAAC;AAC1D,CAAC"}

package/dist/verify/injection-stamp.d.ts

@@ -1,59 +0,0 @@
-import type { PendingVerification, VerificationOutcome } from '../queries/verification.js';
-import type { TargetRestatement } from './verify-restatement.js';
-import type { VerificationDeps } from './verification-deps.js';
-/** Ticks a ledgered stamp is re-attempted before only the durable safety nets remain. */
-export declare const MAX_STAMP_RETRIES = 10;
-/** Everything one injection stamp needs, as the passing run authored it. */
-export interface InjectionStamp {
-    restatements: TargetRestatement[];
-    evidence: string;
-    /**
-     * Targets that must NOT flip with the injection: operator-EXCUSED shortfall
-     * nodes, AND the post-arm targets the reconciliation RECORDED rather than
-     * judged. See `stampWithheldNodeIds`.
-     */
-    withheldNodeIds: readonly string[];
-    realityTreeId?: string;
-}
-/**
- * Everything this stamp must NOT promote: the operator-EXCUSED shortfall nodes
- * PLUS the targets the focus's arm did not cover.
- *
- * Both are the same act for the stamp even though they are different judgements
- * upstream. An EXCUSED node was judged and let go; a RECORDED one was never
- * judged at all -- the arm the human gave did not cover it, so the
- * reconciliation set it aside and it waits for the next arm
- * (verify/verify-restatement.ts narrowToArmCoverage). Neither may be flipped to
- * `desired_effect` by this verify, and the stamp has exactly one way to say so.
- *
- * WHY THE STAMP CARRIES IT AT ALL, given the verify door now reads the arm rule
- * itself (supabase/functions/product-api/handlers/reality-tree/verify-arm-coverage.ts):
- * that read FAILS OPEN. A focus row it cannot read withholds nothing, and the run that DID
- * reconcile is the one that knows which targets it declined to judge. Saying it
- * explicitly costs one array and is the only signal that survives a read the
- * edge could not make.
- *
- * Carried on the ledgered stamp like every other field, so the retries re-send
- * exactly what the run authored rather than a set recomputed later.
- *
- * `recordedTargetNodeIds` is null when NO reconciliation ran -- the run learned
- * nothing about coverage, so it withholds nothing on that account. Pure.
- */
-export declare function stampWithheldNodeIds(excusedNodeIds: readonly string[], recordedTargetNodeIds: readonly string[] | null): string[];
-type StampDeps = Pick<VerificationDeps, 'verifyInjection' | 'emitInwardDrift' | 'fileEscalation' | 'organizationId'>;
-/**
- * Stamp the injection of a delivery whose verify PASSED. Never throws and never
- * touches the verdict: a failure is logged, surfaced once, and ledgered for a
- * stamp-only retry. Returns whether the stamp landed.
- */
-export declare function stampPassedInjection(deps: StampDeps, v: PendingVerification, stamp: InjectionStamp): Promise<boolean>;
-/** A newly recorded verdict supersedes the delivery's ledgered stamp (module doc). */
-export declare function supersedeLedgeredStamp(deliveryId: string, outcome: VerificationOutcome): void;
-/** Re-attempt ONLY the ledgered stamps -- no suite, no verdict. Called once per verification tick. */
-export declare function retryLedgeredStamps(deps: StampDeps): Promise<void>;
-/** Test seam: the ledgered delivery ids. */
-export declare function __ledgeredStampsForTests(): string[];
-/** Test seam: empty the ledger. */
-export declare function __resetStampLedgerForTests(): void;
-export {};
-//# sourceMappingURL=injection-stamp.d.ts.map

package/dist/verify/injection-stamp.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"injection-stamp.d.ts","sourceRoot":"","sources":["../../src/verify/injection-stamp.ts"],"names":[],"mappings":"AAqCA,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAE3F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAK/D,yFAAyF;AACzF,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC,4EAA4E;AAC5E,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,iBAAiB,EAAE,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,SAAS,MAAM,EAAE,EACjC,qBAAqB,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GAC9C,MAAM,EAAE,CASV;AAWD,KAAK,SAAS,GAAG,IAAI,CAAC,gBAAgB,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,gBAAgB,GAAG,gBAAgB,CAAC,CAAC;AA8CrH;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,SAAS,EACf,CAAC,EAAE,mBAAmB,EACtB,KAAK,EAAE,cAAc,GACpB,OAAO,CAAC,OAAO,CAAC,CAgBlB;AAED,sFAAsF;AACtF,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAE7F;AAED,sGAAsG;AACtG,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBxE;AAED,4CAA4C;AAC5C,wBAAgB,wBAAwB,IAAI,MAAM,EAAE,CAEnD;AAED,mCAAmC;AACnC,wBAAgB,0BAA0B,IAAI,IAAI,CAEjD"}

package/dist/verify/injection-stamp.js

@@ -1,175 +0,0 @@
-// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: packages/daemon/src/verify/stamp-withholds-recorded-targets.test.ts,
-//   packages/daemon/src/verify/verification-commit-sharing.test.ts,
-//   packages/daemon/src/verify/verification-engine.test.ts
-// PINNED-BY-END
-/**
- * The injection stamp is a POST-VERDICT side effect, never part of the verdict.
- *
- * When a verify run passes a delivery anchored to an injection, the daemon
- * stamps that injection verified (the reality_tree_verify_injection compound op)
- * and surfaces any inward drift the reconciliation found. Before this module the
- * engine demoted the PASS to 'pending' whenever the stamp threw, which discarded
- * a rendered deterministic verdict and re-queued the whole suite on the same
- * HEAD -- 54 re-runs across 10 deliveries in a day, most of them on an injection
- * an earlier pass had already stamped.
- *
- * Now the verdict is recorded as rendered, whatever happens here:
- *   - the stamp is attempted once, in the run;
- *   - on failure it is logged, surfaced ONCE as a machine-lane observation (not
- *     as "no verdict"), and kept in a retry ledger;
- *   - each verification tick re-attempts ONLY the ledgered stamps -- never the
- *     suite -- with the same restatements and evidence the run authored, and
- *     emits the drift once a stamp lands;
- *   - a later verdict for the delivery supersedes its ledgered stamp: a newer
- *     pass stamps afresh, and a non-pass means the stamp no longer describes the
- *     delivery's work.
- * The ledger is in-process. After a restart (or once its attempts run out) the
- * stamp is still re-attempted by the durable safety nets, without the run's
- * restatements: the verify_linked_injection trigger on verify -> done
- * (guard/trigger-executor.ts) and the settle injection sweep
- * (completion/settle-injection-sweep.ts). So the tree does not stay unverified.
- *
- * @module verify/injection-stamp
- */
-import { ESCALATION_DISPOSITIONS, ESCALATION_REASONS } from '@telora/daemon-core';
-import { createLogger } from '../shell/log.js';
-const log = createLogger({ module: 'verification' });
-/** Ticks a ledgered stamp is re-attempted before only the durable safety nets remain. */
-export const MAX_STAMP_RETRIES = 10;
-/**
- * Everything this stamp must NOT promote: the operator-EXCUSED shortfall nodes
- * PLUS the targets the focus's arm did not cover.
- *
- * Both are the same act for the stamp even though they are different judgements
- * upstream. An EXCUSED node was judged and let go; a RECORDED one was never
- * judged at all -- the arm the human gave did not cover it, so the
- * reconciliation set it aside and it waits for the next arm
- * (verify/verify-restatement.ts narrowToArmCoverage). Neither may be flipped to
- * `desired_effect` by this verify, and the stamp has exactly one way to say so.
- *
- * WHY THE STAMP CARRIES IT AT ALL, given the verify door now reads the arm rule
- * itself (supabase/functions/product-api/handlers/reality-tree/verify-arm-coverage.ts):
- * that read FAILS OPEN. A focus row it cannot read withholds nothing, and the run that DID
- * reconcile is the one that knows which targets it declined to judge. Saying it
- * explicitly costs one array and is the only signal that survives a read the
- * edge could not make.
- *
- * Carried on the ledgered stamp like every other field, so the retries re-send
- * exactly what the run authored rather than a set recomputed later.
- *
- * `recordedTargetNodeIds` is null when NO reconciliation ran -- the run learned
- * nothing about coverage, so it withholds nothing on that account. Pure.
- */
-export function stampWithheldNodeIds(excusedNodeIds, recordedTargetNodeIds) {
-    const out = [];
-    const seen = new Set();
-    for (const id of [...excusedNodeIds, ...(recordedTargetNodeIds ?? [])]) {
-        if (id === '' || seen.has(id))
-            continue;
-        seen.add(id);
-        out.push(id);
-    }
-    return out;
-}
-/** Failed stamps awaiting a stamp-only retry, by delivery id. */
-const ledger = new Map();
-/** Attempt the stamp, then surface inward drift for what it flipped. Throws when the stamp does. */
-async function applyStamp(deps, v, stamp) {
-    await deps.verifyInjection(v.injectionNodeId, stamp.restatements, stamp.evidence, stamp.withheldNodeIds);
-    // INWARD drift (TEL-3/TEL-4): a target stamped legitimate_divergence is a tree
-    // CLAIM reality contradicted -- surfaced only after the flip landed, carrying the
-    // tree's ORIGINAL claim. Best-effort: a failure here must not undo the flip.
-    const diverged = stamp.restatements
-        .filter((r) => r.classification === 'legitimate_divergence')
-        .map((r) => ({
-        nodeId: r.nodeId,
-        classification: 'legitimate_divergence',
-        statement: r.statement,
-        originalClaim: r.originalClaim,
-        ...(r.divergenceReason ? { verifyDivergenceReason: r.divergenceReason } : {}),
-    }));
-    if (diverged.length === 0)
-        return;
-    try {
-        await deps.emitInwardDrift(v.injectionNodeId, diverged, stamp.realityTreeId);
-    }
-    catch (err) {
-        log.warn(`[verification] inward drift emit failed for ${v.injectionNodeId}:`, err.message);
-    }
-}
-/** Surface a stamp failure once, in the machine lane: the verdict stands, only the stamp is owed. */
-async function surfaceStampFailure(deps, v, message) {
-    try {
-        await deps.fileEscalation({
-            organizationId: deps.organizationId,
-            ...(v.focusId ? { focusId: v.focusId } : {}),
-            ...(v.productId ? { productId: v.productId } : {}),
-            reason: `Verify passed delivery "${v.deliveryName}" but stamping its injection ${v.injectionNodeId} failed: ${message}. ` +
-                'The passed verdict is recorded; the daemon retries only the stamp on later verification ticks, and the ' +
-                'verify -> done trigger and settle injection sweep re-attempt it after that.',
-            reasonType: ESCALATION_REASONS.ERROR_ENCOUNTERED,
-            disposition: ESCALATION_DISPOSITIONS.AGENT_RESOLVABLE,
-            kind: 'verify_injection_stamp_failed',
-            details: { delivery_id: v.deliveryId, injection_node_id: v.injectionNodeId, error: message },
-        });
-    }
-    catch (err) {
-        log.warn(`[verification] could not surface the injection stamp failure for delivery ${v.deliveryId}:`, err.message);
-    }
-}
-/**
- * Stamp the injection of a delivery whose verify PASSED. Never throws and never
- * touches the verdict: a failure is logged, surfaced once, and ledgered for a
- * stamp-only retry. Returns whether the stamp landed.
- */
-export async function stampPassedInjection(deps, v, stamp) {
-    try {
-        await applyStamp(deps, v, stamp);
-        ledger.delete(v.deliveryId);
-        return true;
-    }
-    catch (err) {
-        const message = err.message;
-        const alreadyLedgered = ledger.has(v.deliveryId);
-        ledger.set(v.deliveryId, { ...stamp, delivery: v, attempts: 0, lastError: message });
-        log.warn(`[verification] post-verdict side effect failed for delivery "${v.deliveryName}" (${v.deliveryId}): ` +
-            `injection stamp ${v.injectionNodeId}: ${message} -- the passed verdict stands; the stamp alone is retried`);
-        if (!alreadyLedgered)
-            await surfaceStampFailure(deps, v, message);
-        return false;
-    }
-}
-/** A newly recorded verdict supersedes the delivery's ledgered stamp (module doc). */
-export function supersedeLedgeredStamp(deliveryId, outcome) {
-    if (outcome !== 'pending')
-        ledger.delete(deliveryId);
-}
-/** Re-attempt ONLY the ledgered stamps -- no suite, no verdict. Called once per verification tick. */
-export async function retryLedgeredStamps(deps) {
-    for (const [deliveryId, entry] of [...ledger]) {
-        try {
-            await applyStamp(deps, entry.delivery, entry);
-            ledger.delete(deliveryId);
-            log.info(`[verification] injection stamp ${entry.delivery.injectionNodeId} for delivery ${deliveryId} landed on retry`);
-        }
-        catch (err) {
-            entry.attempts += 1;
-            entry.lastError = err.message;
-            if (entry.attempts < MAX_STAMP_RETRIES)
-                continue;
-            ledger.delete(deliveryId);
-            log.warn(`[verification] injection stamp ${entry.delivery.injectionNodeId} for delivery ${deliveryId} still failing after ` +
-                `${entry.attempts} retries (${entry.lastError}); left to the verify -> done trigger and the settle injection sweep`);
-        }
-    }
-}
-/** Test seam: the ledgered delivery ids. */
-export function __ledgeredStampsForTests() {
-    return [...ledger.keys()];
-}
-/** Test seam: empty the ledger. */
-export function __resetStampLedgerForTests() {
-    ledger.clear();
-}
-//# sourceMappingURL=injection-stamp.js.map

package/dist/verify/injection-stamp.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"injection-stamp.js","sourceRoot":"","sources":["../../src/verify/injection-stamp.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,kFAAkF;AAClF,oEAAoE;AACpE,2DAA2D;AAC3D,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAKlF,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAErD,yFAAyF;AACzF,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAepC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,oBAAoB,CAClC,cAAiC,EACjC,qBAA+C;IAE/C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,cAAc,EAAE,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACvE,IAAI,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QACxC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAQD,iEAAiE;AACjE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;AAIhD,oGAAoG;AACpG,KAAK,UAAU,UAAU,CAAC,IAAe,EAAE,CAAsB,EAAE,KAAqB;IACtF,MAAM,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IACzG,+EAA+E;IAC/E,kFAAkF;IAClF,6EAA6E;IAC7E,MAAM,QAAQ,GAAoB,KAAK,CAAC,YAAY;SACjD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,uBAAuB,CAAC;SAC3D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,cAAc,EAAE,uBAAuB;QACvC,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9E,CAAC,CAAC,CAAC;IACN,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAClC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,EAAE,QAAQ,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC,eAAe,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;IACxG,CAAC;AACH,CAAC;AAED,qGAAqG;AACrG,KAAK,UAAU,mBAAmB,CAAC,IAAe,EAAE,CAAsB,EAAE,OAAe;IACzF,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,cAAc,CAAC;YACxB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,MAAM,EACJ,2BAA2B,CAAC,CAAC,YAAY,gCAAgC,CAAC,CAAC,eAAe,YAAY,OAAO,IAAI;gBACjH,yGAAyG;gBACzG,6EAA6E;YAC/E,UAAU,EAAE,kBAAkB,CAAC,iBAAiB;YAChD,WAAW,EAAE,uBAAuB,CAAC,gBAAgB;YACrD,IAAI,EAAE,+BAA+B;YACrC,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,UAAU,EAAE,iBAAiB,EAAE,CAAC,CAAC,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE;SAC7F,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC,UAAU,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;IACjI,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAe,EACf,CAAsB,EACtB,KAAqB;IAErB,IAAI,CAAC;QACH,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAI,GAAa,CAAC,OAAO,CAAC;QACvC,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QACrF,GAAG,CAAC,IAAI,CACN,gEAAgE,CAAC,CAAC,YAAY,MAAM,CAAC,CAAC,UAAU,KAAK;YACrG,mBAAmB,CAAC,CAAC,eAAe,KAAK,OAAO,2DAA2D,CAC5G,CAAC;QACF,IAAI,CAAC,eAAe;YAAE,MAAM,mBAAmB,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;QAClE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,sBAAsB,CAAC,UAAkB,EAAE,OAA4B;IACrF,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AACvD,CAAC;AAED,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAe;IACvD,KAAK,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC9C,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC1B,GAAG,CAAC,IAAI,CAAC,kCAAkC,KAAK,CAAC,QAAQ,CAAC,eAAe,iBAAiB,UAAU,kBAAkB,CAAC,CAAC;QAC1H,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;YACpB,KAAK,CAAC,SAAS,GAAI,GAAa,CAAC,OAAO,CAAC;YACzC,IAAI,KAAK,CAAC,QAAQ,GAAG,iBAAiB;gBAAE,SAAS;YACjD,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC1B,GAAG,CAAC,IAAI,CACN,kCAAkC,KAAK,CAAC,QAAQ,CAAC,eAAe,iBAAiB,UAAU,uBAAuB;gBAClH,GAAG,KAAK,CAAC,QAAQ,aAAa,KAAK,CAAC,SAAS,sEAAsE,CACpH,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,wBAAwB;IACtC,OAAO,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED,mCAAmC;AACnC,MAAM,UAAU,0BAA0B;IACxC,MAAM,CAAC,KAAK,EAAE,CAAC;AACjB,CAAC"}

package/dist/verify/judged-ancestor.d.ts

@@ -1,41 +0,0 @@
-import type { CommitVerdict, CommitVerdictGate, CommitVerdictReader } from './commit-verdict-record.js';
-/** How many ancestors of the tip are searched for the newest judged one. */
-export declare const ANCESTOR_SEARCH_DEPTH = 200;
-/** Ancestors of `tip`, newest first, excluding `tip`; null when unreadable. */
-export type AncestorLister = (worktreePath: string, tip: string, depth: number) => string[] | null;
-export declare const defaultListAncestors: AncestorLister;
-/**
- * The newest ancestor of `tip` whose recorded verdict satisfies `accept`, with
- * that verdict; null when none does, or when the ancestors are unreadable.
- */
-export declare function findJudgedAncestor(productId: string, focusId: string, tip: string, gate: CommitVerdictGate, deps: {
-    worktreePath: string;
-    readCommitVerdict: CommitVerdictReader;
-    listAncestors?: AncestorLister;
-}, accept?: (verdict: CommitVerdict) => boolean): {
-    sha: string;
-    verdict: CommitVerdict;
-} | null;
-/**
- * The newest ancestor of `tip` this gate judged PASSING: the commit up to which
- * the gate's stages need not look. Null when none is found, which every caller
- * reads as "keep the base you already had".
- *
- * A FAILED verdict never anchors -- the walk continues past it to an older green
- * one. A failure says the tree was bad there, not that anything was covered.
- */
-export declare function findGreenAncestor(productId: string, focusId: string, tip: string, gate: CommitVerdictGate, deps: {
-    worktreePath: string;
-    readCommitVerdict: CommitVerdictReader;
-    listAncestors?: AncestorLister;
-}): string | null;
-/**
- * True when `maybeAncestor` is an ancestor of `descendant` (or the same commit).
- * Undetermined (`null`) when git cannot answer.
- *
- * Ancestry, never commit dates: every coding spawn rebases the focus worktree
- * (spawn/worktree-session.ts), so author and commit dates are shuffled relative
- * to branch order and would rank the two bases wrongly.
- */
-export declare function isAncestorOf(worktreePath: string, maybeAncestor: string, descendant: string): boolean | null;
-//# sourceMappingURL=judged-ancestor.d.ts.map

package/dist/verify/judged-ancestor.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"judged-ancestor.d.ts","sourceRoot":"","sources":["../../src/verify/judged-ancestor.ts"],"names":[],"mappings":"AA8CA,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAExG,4EAA4E;AAC5E,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAEzC,+EAA+E;AAC/E,MAAM,MAAM,cAAc,GAAG,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,EAAE,GAAG,IAAI,CAAC;AAEnG,eAAO,MAAM,oBAAoB,EAAE,cAIlC,CAAC;AAEF;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,iBAAiB,EACvB,IAAI,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,mBAAmB,CAAC;IAAC,aAAa,CAAC,EAAE,cAAc,CAAA;CAAE,EACtG,MAAM,GAAE,CAAC,OAAO,EAAE,aAAa,KAAK,OAAoB,GACvD;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,GAAG,IAAI,CAWhD;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,iBAAiB,EACvB,IAAI,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,mBAAmB,CAAC;IAAC,aAAa,CAAC,EAAE,cAAc,CAAA;CAAE,GACrG,MAAM,GAAG,IAAI,CAEf;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAU5G"}

package/dist/verify/judged-ancestor.js

@@ -1,101 +0,0 @@
-// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: packages/daemon/src/verify/judged-ancestor.test.ts
-// PINNED-BY-END
-/**
- * The newest ancestor of a commit that a gate run already judged -- and, for the
- * verify boundary, the newest one it judged GREEN.
- *
- * Two callers ask almost the same question of git and the per-commit verdict
- * record (verify/commit-verdict-record.ts), so the walk lives here once:
- *
- *   - verify/no-own-delta-verdict.ts asks for the newest JUDGED ancestor, to
- *     carry its verdict to a tip that adds nothing of the focus's own;
- *   - verify/verification-boundary-env.ts asks for the newest ancestor judged
- *     PASSING under the gate this run applies, to bound what the gate's own
- *     stages diff against.
- *
- * WHY A GREEN ANCESTOR IS THE RIGHT BOUNDARY. The gate's two expensive stages --
- * the conditional types-drift check and the targeted-test selection -- scope
- * themselves from a diff base. Taking that base from merge-base(HEAD,
- * integration) makes it the focus branch's CUMULATIVE delta, which only grows:
- * every area eventually crosses the "no precise pin map" line and widens to its
- * whole suite, so a per-delivery run ends up executing the daemon suite, the root
- * vitest suite, the mcp suite, the scripts self-tests and the deno functions
- * suite -- the last for a second time, having already run as the gate's first
- * stage. Measured on mars 2026-09-20: 76 files/22 min, 102/42, 101/28, 115/30 for
- * one delivery, against 5 min for a run with an empty delta.
- *
- * A green ancestor bounds it correctly rather than merely cheaply: everything up
- * to that commit was covered by a gate run that PASSED on a tree containing it,
- * so the delta from there is exactly what no green gate has covered. That is the
- * same rigor the selector already operates at (its pin map plus its widen rules),
- * applied to a smaller and more accurate input -- not a new approximation.
- *
- * Every failure is answered with null, and every caller reads null as "use the
- * base you would have used anyway". A base that is too OLD costs time; one that
- * is too NEW launders a pass. So the walk fails toward the older base, always:
- * an unreadable worktree, an unreadable rev-list, a verdict recorded under
- * another gate, and a FAILED verdict all decline to anchor.
- *
- * A leaf: git and the verdict reader, nothing else.
- *
- * @module verify/judged-ancestor
- */
-import { runGitSync } from '../git/types.js';
-/** How many ancestors of the tip are searched for the newest judged one. */
-export const ANCESTOR_SEARCH_DEPTH = 200;
-export const defaultListAncestors = (worktreePath, tip, depth) => {
-    const r = runGitSync(['rev-list', '--topo-order', `--max-count=${depth}`, '--skip=1', tip], worktreePath);
-    if (!r.success)
-        return null;
-    return r.output.split('\n').map((l) => l.trim()).filter((l) => l !== '');
-};
-/**
- * The newest ancestor of `tip` whose recorded verdict satisfies `accept`, with
- * that verdict; null when none does, or when the ancestors are unreadable.
- */
-export function findJudgedAncestor(productId, focusId, tip, gate, deps, accept = () => true) {
-    const ancestors = (deps.listAncestors ?? defaultListAncestors)(deps.worktreePath, tip, ANCESTOR_SEARCH_DEPTH);
-    if (!ancestors)
-        return null;
-    for (const sha of ancestors) {
-        const verdict = deps.readCommitVerdict(productId, focusId, sha, gate);
-        // A verdict under another gate reads as null here (the record is gate-keyed),
-        // so an unjudged ancestor and a differently-gated one are both simply walked
-        // past -- never taken as a boundary the gate did not actually establish.
-        if (verdict && accept(verdict))
-            return { sha, verdict };
-    }
-    return null;
-}
-/**
- * The newest ancestor of `tip` this gate judged PASSING: the commit up to which
- * the gate's stages need not look. Null when none is found, which every caller
- * reads as "keep the base you already had".
- *
- * A FAILED verdict never anchors -- the walk continues past it to an older green
- * one. A failure says the tree was bad there, not that anything was covered.
- */
-export function findGreenAncestor(productId, focusId, tip, gate, deps) {
-    return findJudgedAncestor(productId, focusId, tip, gate, deps, (v) => v.outcome === 'passed')?.sha ?? null;
-}
-/**
- * True when `maybeAncestor` is an ancestor of `descendant` (or the same commit).
- * Undetermined (`null`) when git cannot answer.
- *
- * Ancestry, never commit dates: every coding spawn rebases the focus worktree
- * (spawn/worktree-session.ts), so author and commit dates are shuffled relative
- * to branch order and would rank the two bases wrongly.
- */
-export function isAncestorOf(worktreePath, maybeAncestor, descendant) {
-    if (maybeAncestor === descendant)
-        return true;
-    const r = runGitSync(['merge-base', '--is-ancestor', maybeAncestor, descendant], worktreePath);
-    if (r.success)
-        return true;
-    // git exits 1 for "not an ancestor" and >1 for a real error; the runner
-    // collapses both to !success, so confirm the refs are readable before saying no.
-    const readable = [maybeAncestor, descendant].every((rev) => runGitSync(['rev-parse', '--verify', '--quiet', `${rev}^{commit}`], worktreePath).success);
-    return readable ? false : null;
-}
-//# sourceMappingURL=judged-ancestor.js.map

package/dist/verify/judged-ancestor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"judged-ancestor.js","sourceRoot":"","sources":["../../src/verify/judged-ancestor.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,gEAAgE;AAChE,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAG7C,4EAA4E;AAC5E,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAKzC,MAAM,CAAC,MAAM,oBAAoB,GAAmB,CAAC,YAAY,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;IAC/E,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,UAAU,EAAE,cAAc,EAAE,eAAe,KAAK,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC;IAC1G,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAC3E,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAiB,EACjB,OAAe,EACf,GAAW,EACX,IAAuB,EACvB,IAAsG,EACtG,SAA8C,GAAG,EAAE,CAAC,IAAI;IAExD,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,oBAAoB,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAC;IAC9G,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACtE,8EAA8E;QAC9E,6EAA6E;QAC7E,yEAAyE;QACzE,IAAI,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;IAC1D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,SAAiB,EACjB,OAAe,EACf,GAAW,EACX,IAAuB,EACvB,IAAsG;IAEtG,OAAO,kBAAkB,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC;AAC7G,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,YAAoB,EAAE,aAAqB,EAAE,UAAkB;IAC1F,IAAI,aAAa,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAC9C,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,UAAU,CAAC,EAAE,YAAY,CAAC,CAAC;IAC/F,IAAI,CAAC,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC3B,wEAAwE;IACxE,iFAAiF;IACjF,MAAM,QAAQ,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,KAAK,CAChD,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,GAAG,WAAW,CAAC,EAAE,YAAY,CAAC,CAAC,OAAO,CACnG,CAAC;IACF,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC"}

package/dist/verify/judged-commit-gate.d.ts

@@ -1,11 +0,0 @@
-import { type VerificationConfigScope } from './verification-config.js';
-import { type VerifyManifestReader } from './verification-manifest.js';
-import type { CommitVerdictGate } from './commit-verdict-record.js';
-import type { JudgedCommitManifest } from './verification-default-on.js';
-/**
- * The gate a default-on run applies at the judged commit `read` names (see the
- * module header), or null when that run would record no verdict. `source` is the
- * candidate's default-on source (its operator block and the product repoPath).
- */
-export declare function judgedCommitGate(source: VerificationConfigScope, read: JudgedCommitManifest, env?: NodeJS.ProcessEnv, readManifest?: VerifyManifestReader): CommitVerdictGate | null;
-//# sourceMappingURL=judged-commit-gate.d.ts.map