@telora/daemon 0.22.289 → 0.22.293

package/dist/verify/gate-verdicts/gate-run-registry.d.ts

@@ -12,7 +12,27 @@
  *     Once a run's detached checkout exists it names the commit it judges, so a
  *     wait keyed on one commit is not held by a run judging another; until then a
  *     registration may judge any commit on its focus (a dispatch reads HEAD only
- *     when it starts).
+ *     when it starts). A run also carries what the heartbeat's focus activity
+ *     record publishes about it: while it is queued, what it waits on -- the
+ *     daemon-wide verification semaphore, or its focus worktree's verify
+ *     interlock (another verify holds the worktree) and whom that hold judges;
+ *     once it runs, the commit, the timeout and the start of its command.
+ *
+ * QUEUED UNTIL THE COMMAND STARTS. Holding a verification-semaphore slot is not
+ * running: after the slot is taken the dispatch still re-reads the delivery's
+ * status, looks for a verdict it can reuse, waits its turn on its focus, makes the
+ * checkout and resolves the config and boundary -- any of which may end the
+ * dispatch with no command run at all (a reused verdict never runs one). Nor is it
+ * waiting for a slot: the moment the slot is taken the registration says
+ * `preflight` (verify/engine/verification-engine.ts) -- it holds its slot and is
+ * preparing the run -- and it stays queued on that cause through all of the
+ * above. It turns running in ONE step immediately before the deterministic
+ * command is spawned ({@link startGateRunOf}, called by
+ * verify/deterministic-gate/verification-checkout.ts), which fixes the commit, the timeout
+ * and startedAt together: a running run never publishes a commit or timeout it
+ * has not yet chosen, and never runs without a commit -- a run with no judged
+ * commit is not started at all. ai_inspection and behavioral runs start no
+ * deterministic command and never turn running.
  *   - the outcome an EXPLICIT-METHOD run last recorded for its delivery. Such a run
  *     may execute in place or render a non-deterministic verdict, and neither
  *     writes a per-commit verdict record (verify/gate-verdicts/commit-verdict-record.ts), so its
@@ -32,10 +52,11 @@
  * (verify/gate-verdicts/explicit-gate-outcome.ts), which is what routing reads after a restart,
  * when this process has seen no explicit run for the delivery.
  *
- * A leaf with no imports.
+ * A leaf with no runtime imports.
  *
  * @module verify/gate-verdicts/gate-run-registry
  */
+import type { GateQueueWait } from '@telora/daemon-core';
 /** A candidate the verification tick selected. */
 export interface GateRunSelection {
     deliveryId: string;
@@ -43,12 +64,48 @@ export interface GateRunSelection {
     /** An explicit-method row: its run supersedes the outcome the delivery's previous run recorded. */
     explicit: boolean;
 }
-/** The handle a selection is ended through. Idempotent. */
+/**
+ * Why a queued run has not started. The semaphore wait names no run ahead (the
+ * reader names the run holding the slot); an interlock wait names the verify
+ * holding the worktree, when the hold names the delivery it judges; a preflight
+ * run holds its slot and waits on nothing ahead of it.
+ */
+export type GateRunWait = {
+    on: Extract<GateQueueWait, 'verification_semaphore' | 'preflight'>;
+} | {
+    on: Extract<GateQueueWait, 'worktree_interlock'>;
+    aheadFocusId: string | null;
+    aheadDeliveryId: string | null;
+};
+/**
+ * What a run is judging the moment its command starts, fixed together (module
+ * header). The commit is required: a run path that cannot name the commit it
+ * judges does not start its command (verify/deterministic-gate/verification-checkout.ts).
+ */
+export interface GateRunStart {
+    sha: string;
+    timeoutMs: number;
+}
+/** The handle a selection is started and ended through. start and end are idempotent. */
 export interface GateRunRegistration {
+    /** The run's command is starting now, judging `facts` (queued -> running, in one step). */
+    start: (facts: GateRunStart) => void;
     end: () => void;
+    /** Why the still-queued run has not started now (a selection starts out waiting on the semaphore). */
+    waitOn: (wait: GateRunWait) => void;
 }
 /** The outcome kept for an explicit-method delivery. */
 export type RecordedGateOutcome = 'passed' | 'failed';
+/** A selected, unfinished gate run as the heartbeat reads it (focus/focus-activity-gate.ts). */
+export interface GateRunView {
+    deliveryId: string;
+    focusId: string | null;
+    sha: string | null;
+    selectedAt: number;
+    startedAt: number | null;
+    timeoutMs: number | null;
+    wait: GateRunWait;
+}
 /** A verdict an explicit-method run rendered, the commit it applies to (null: it judged none, so it applies to any), and its gate. */
 export interface RecordedExplicitOutcome {
     outcome: RecordedGateOutcome;
@@ -60,6 +117,20 @@ export interface RecordedExplicitOutcome {
 export declare function registerGateRun(selection: GateRunSelection): GateRunRegistration;
 /** Name the commit a selected run judges (its detached checkout's sha). A no-op when the delivery has no selected run. */
 export declare function noteGateRunCommit(deliveryId: string, sha: string): void;
+/** Bind a candidate to the registration its selection made, so the run path can start exactly that run. */
+export declare function bindGateRunCandidate(candidate: object, registration: GateRunRegistration): void;
+/**
+ * The candidate's command is starting now, judging `facts`: its registration turns
+ * running (module header). A no-op for a candidate no tick selected.
+ */
+export declare function startGateRunOf(candidate: object, facts: GateRunStart): void;
+/**
+ * Every selected, unfinished gate run, in selection order -- queued ones
+ * (startedAt null) and running ones. In-process facts only: nothing here is
+ * written to the database; the heartbeat publishes them as the focus activity
+ * record and a run drops out the moment its registration ends.
+ */
+export declare function gateRunSnapshot(): GateRunView[];
 /**
  * Whether a selected, unfinished gate run on the focus may judge `sha`: one that
  * names that commit, or one that names none yet. A null `sha` (a judged commit

package/dist/verify/gate-verdicts/gate-run-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gate-run-registry.d.ts","sourceRoot":"","sources":["../../../src/verify/gate-verdicts/gate-run-registry.ts"],"names":[],"mappings":"AAsBA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,kDAAkD;AAClD,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,mGAAmG;IACnG,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,2DAA2D;AAC3D,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,IAAI,CAAC;CACjB;AAED,wDAAwD;AACxD,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAStD,sIAAsI;AACtI,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,mBAAmB,CAAC;IAC7B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,qIAAqI;IACrI,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAQD,8FAA8F;AAC9F,wBAAgB,eAAe,CAAC,SAAS,EAAE,gBAAgB,GAAG,mBAAmB,CAShF;AAED,0HAA0H;AAC1H,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAIvE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAK9E;AAED,2IAA2I;AAC3I,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAK7D;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,uBAAuB,GAAG,IAAI,CAKzI;AAKD,iHAAiH;AACjH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAExE;AAED,8EAA8E;AAC9E,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAErE;AAED,6HAA6H;AAC7H,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAEvI;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,uBAAuB,GAAG,IAAI,GAAG,SAAS,CAE1G;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,mBAAmB,GAAG,IAAI,CAI1G;AAED,iEAAiE;AACjE,wBAAgB,8BAA8B,IAAI,IAAI,CAGrD"}
+{"version":3,"file":"gate-run-registry.d.ts","sourceRoot":"","sources":["../../../src/verify/gate-verdicts/gate-run-registry.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,kDAAkD;AAClD,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,mGAAmG;IACnG,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GACnB;IAAE,EAAE,EAAE,OAAO,CAAC,aAAa,EAAE,wBAAwB,GAAG,WAAW,CAAC,CAAA;CAAE,GACtE;IAAE,EAAE,EAAE,OAAO,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC;IAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAItH;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,yFAAyF;AACzF,MAAM,WAAW,mBAAmB;IAClC,2FAA2F;IAC3F,KAAK,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,CAAC;IACrC,GAAG,EAAE,MAAM,IAAI,CAAC;IAChB,sGAAsG;IACtG,MAAM,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;CACrC;AAED,wDAAwD;AACxD,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAiBtD,gGAAgG;AAChG,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,EAAE,WAAW,CAAC;CACnB;AAED,sIAAsI;AACtI,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,mBAAmB,CAAC;IAC7B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,qIAAqI;IACrI,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAQD,8FAA8F;AAC9F,wBAAgB,eAAe,CAAC,SAAS,EAAE,gBAAgB,GAAG,mBAAmB,CAqBhF;AAED,0HAA0H;AAC1H,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAIvE;AAKD,2GAA2G;AAC3G,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,mBAAmB,GAAG,IAAI,CAE/F;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,IAAI,CAE3E;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,IAAI,WAAW,EAAE,CAK/C;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAK9E;AAED,2IAA2I;AAC3I,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAK7D;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,uBAAuB,GAAG,IAAI,CAKzI;AAKD,iHAAiH;AACjH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAExE;AAED,8EAA8E;AAC9E,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAErE;AAED,6HAA6H;AAC7H,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAEvI;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,UAAU,EAAE,MAAM,GAAG,uBAAuB,GAAG,IAAI,GAAG,SAAS,CAE1G;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,mBAAmB,GAAG,IAAI,CAI1G;AAED,iEAAiE;AACjE,wBAAgB,8BAA8B,IAAI,IAAI,CAGrD"}

package/dist/verify/gate-verdicts/gate-run-registry.js

@@ -1,38 +1,34 @@
 // PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: packages/daemon/src/completion/review-exit-holds/commit-verdict-release.test.ts,
-//   packages/daemon/src/focus/focus-poller-product-poll.test.ts,
-//   packages/daemon/src/focus/verify-routing-passes.test.ts,
-//   packages/daemon/src/integration/delivery-gate-write-interleaving.test.ts,
-//   packages/daemon/src/integration/explicit-gate-identity-unreadable.test.ts,
-//   packages/daemon/src/integration/explicit-gate-outcome-restart.test.ts,
-//   packages/daemon/src/integration/explicit-verdict-departure-during-removal.test.ts,
-//   packages/daemon/src/integration/explicit-verdict-invalidation-restart.test.ts,
-//   packages/daemon/src/integration/explicit-verdict-reuse.test.ts,
-//   packages/daemon/src/integration/focus-commit-verdict-scenario.test.ts,
-//   packages/daemon/src/integration/held-route-pull-dispatch.test.ts,
-//   packages/daemon/src/integration/review-rework-resume-verdict.test.ts,
-//   packages/daemon/src/integration/review-verdict-ruling-release.test.ts,
-//   packages/daemon/src/integration/shortfall-ruling-disposes-proposals-regression.test.ts,
-//   packages/daemon/src/integration/shortfall-ruling-release.test.ts,
-//   packages/daemon/src/verify/engine/verification-commit-sharing.test.ts,
-//   packages/daemon/src/verify/gate-verdicts/explicit-run-ledger.test.ts,
-//   packages/daemon/src/verify/run-selection/commit-verdict-pull.test.ts,
-//   packages/daemon/src/verify/shortfalls/shortfall-rulings.test.ts
+// Pinned by: 22 tests -- run: npm run gen:pinned-by -- --list packages/daemon/src/verify/gate-verdicts/gate-run-registry.ts
 // PINNED-BY-END
+const SEMAPHORE_WAIT = { on: 'verification_semaphore' };
 const SHA_RE = /^[0-9a-f]{7,64}$/i;
 const selectedRuns = new Set();
 /** Per delivery this process has seen an explicit run for: its verdict, or null for "no verdict" (see the module header). */
 const explicitOutcomes = new Map();
 /** Register a candidate the tick selected; end the registration when its dispatch settles. */
 export function registerGateRun(selection) {
-    const run = { deliveryId: selection.deliveryId, focusId: selection.focusId, sha: null };
+    const run = {
+        deliveryId: selection.deliveryId, focusId: selection.focusId, sha: null, selectedAt: Date.now(), startedAt: null,
+        timeoutMs: null, wait: SEMAPHORE_WAIT,
+    };
     selectedRuns.add(run);
     if (selection.explicit)
         explicitOutcomes.set(selection.deliveryId, null);
     return {
+        start: ({ sha, timeoutMs }) => {
+            if (run.startedAt !== null)
+                return;
+            run.sha = sha;
+            run.timeoutMs = timeoutMs;
+            run.startedAt = Date.now();
+        },
         end: () => {
             selectedRuns.delete(run);
         },
+        waitOn: (wait) => {
+            run.wait = wait;
+        },
     };
 }
 /** Name the commit a selected run judges (its detached checkout's sha). A no-op when the delivery has no selected run. */
@@ -42,6 +38,31 @@ export function noteGateRunCommit(deliveryId, sha) {
             run.sha = sha;
     }
 }
+/** The registration each dispatched candidate was selected under, keyed by the candidate itself. */
+const candidateRegistrations = new WeakMap();
+/** Bind a candidate to the registration its selection made, so the run path can start exactly that run. */
+export function bindGateRunCandidate(candidate, registration) {
+    candidateRegistrations.set(candidate, registration);
+}
+/**
+ * The candidate's command is starting now, judging `facts`: its registration turns
+ * running (module header). A no-op for a candidate no tick selected.
+ */
+export function startGateRunOf(candidate, facts) {
+    candidateRegistrations.get(candidate)?.start(facts);
+}
+/**
+ * Every selected, unfinished gate run, in selection order -- queued ones
+ * (startedAt null) and running ones. In-process facts only: nothing here is
+ * written to the database; the heartbeat publishes them as the focus activity
+ * record and a run drops out the moment its registration ends.
+ */
+export function gateRunSnapshot() {
+    return [...selectedRuns].map((r) => ({
+        deliveryId: r.deliveryId, focusId: r.focusId, sha: r.sha, selectedAt: r.selectedAt, startedAt: r.startedAt,
+        timeoutMs: r.timeoutMs, wait: r.wait,
+    }));
+}
 /**
  * Whether a selected, unfinished gate run on the focus may judge `sha`: one that
  * names that commit, or one that names none yet. A null `sha` (a judged commit

package/dist/verify/gate-verdicts/gate-run-registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"gate-run-registry.js","sourceRoot":"","sources":["../../../src/verify/gate-verdicts/gate-run-registry.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,8FAA8F;AAC9F,iEAAiE;AACjE,6DAA6D;AAC7D,8EAA8E;AAC9E,+EAA+E;AAC/E,2EAA2E;AAC3E,uFAAuF;AACvF,mFAAmF;AACnF,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,0EAA0E;AAC1E,2EAA2E;AAC3E,4FAA4F;AAC5F,sEAAsE;AACtE,2EAA2E;AAC3E,0EAA0E;AAC1E,0EAA0E;AAC1E,oEAAoE;AACpE,gBAAgB;AAwEhB,MAAM,MAAM,GAAG,mBAAmB,CAAC;AAEnC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAe,CAAC;AAC5C,6HAA6H;AAC7H,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA0C,CAAC;AAE3E,8FAA8F;AAC9F,MAAM,UAAU,eAAe,CAAC,SAA2B;IACzD,MAAM,GAAG,GAAgB,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACrG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,SAAS,CAAC,QAAQ;QAAE,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACzE,OAAO;QACL,GAAG,EAAE,GAAG,EAAE;YACR,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,0HAA0H;AAC1H,MAAM,UAAU,iBAAiB,CAAC,UAAkB,EAAE,GAAW;IAC/D,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,GAAG,CAAC,UAAU,KAAK,UAAU;YAAE,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC;IACnD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,GAAkB;IACnE,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACpG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2IAA2I;AAC3I,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,GAAG,CAAC,UAAU,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAiD,EAAE,OAAgB;IACvG,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC3B,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC9D,MAAM,GAAG,GAAG,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IAClH,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACzE,CAAC;AAED,0IAA0I;AAC1I,MAAM,cAAc,GAAG,IAAI,OAAO,EAAkB,CAAC;AAErD,iHAAiH;AACjH,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,KAAa;IAChE,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,SAAiB;IAC/C,OAAO,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AACvC,CAAC;AAED,6HAA6H;AAC7H,MAAM,UAAU,yBAAyB,CAAC,UAAkB,EAAE,MAAiD,EAAE,OAAgB;IAC/H,gBAAgB,CAAC,GAAG,CAAC,UAAU,EAAE,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,UAAkB;IAC5D,OAAO,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAkB,EAAE,GAAkB;IAC5E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO,QAAQ,CAAC,GAAG,KAAK,IAAI,IAAI,QAAQ,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACjF,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,8BAA8B;IAC5C,YAAY,CAAC,KAAK,EAAE,CAAC;IACrB,gBAAgB,CAAC,KAAK,EAAE,CAAC;AAC3B,CAAC"}
+{"version":3,"file":"gate-run-registry.js","sourceRoot":"","sources":["../../../src/verify/gate-verdicts/gate-run-registry.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,4HAA4H;AAC5H,gBAAgB;AAiFhB,MAAM,cAAc,GAAgB,EAAE,EAAE,EAAE,wBAAwB,EAAE,CAAC;AA0DrE,MAAM,MAAM,GAAG,mBAAmB,CAAC;AAEnC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAe,CAAC;AAC5C,6HAA6H;AAC7H,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA0C,CAAC;AAE3E,8FAA8F;AAC9F,MAAM,UAAU,eAAe,CAAC,SAA2B;IACzD,MAAM,GAAG,GAAgB;QACvB,UAAU,EAAE,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI;QAChH,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc;KACtC,CAAC;IACF,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,SAAS,CAAC,QAAQ;QAAE,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACzE,OAAO;QACL,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE;YAC5B,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI;gBAAE,OAAO;YACnC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC;YACd,GAAG,CAAC,SAAS,GAAG,SAAS,CAAC;YAC1B,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,CAAC;QACD,GAAG,EAAE,GAAG,EAAE;YACR,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACf,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,0HAA0H;AAC1H,MAAM,UAAU,iBAAiB,CAAC,UAAkB,EAAE,GAAW;IAC/D,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,GAAG,CAAC,UAAU,KAAK,UAAU;YAAE,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC;IACnD,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,MAAM,sBAAsB,GAAG,IAAI,OAAO,EAA+B,CAAC;AAE1E,2GAA2G;AAC3G,MAAM,UAAU,oBAAoB,CAAC,SAAiB,EAAE,YAAiC;IACvF,sBAAsB,CAAC,GAAG,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,KAAmB;IACnE,sBAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,CAAC,GAAG,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnC,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;QAC1G,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;KACrC,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,GAAkB;IACnE,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACpG,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2IAA2I;AAC3I,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,GAAG,CAAC,UAAU,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAiD,EAAE,OAAgB;IACvG,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAC3B,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC9D,MAAM,GAAG,GAAG,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IAClH,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACzE,CAAC;AAED,0IAA0I;AAC1I,MAAM,cAAc,GAAG,IAAI,OAAO,EAAkB,CAAC;AAErD,iHAAiH;AACjH,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,KAAa;IAChE,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,SAAiB;IAC/C,OAAO,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AACvC,CAAC;AAED,6HAA6H;AAC7H,MAAM,UAAU,yBAAyB,CAAC,UAAkB,EAAE,MAAiD,EAAE,OAAgB;IAC/H,gBAAgB,CAAC,GAAG,CAAC,UAAU,EAAE,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,UAAkB;IAC5D,OAAO,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAkB,EAAE,GAAkB;IAC5E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO,QAAQ,CAAC,GAAG,KAAK,IAAI,IAAI,QAAQ,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACjF,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,8BAA8B;IAC5C,YAAY,CAAC,KAAK,EAAE,CAAC;IACrB,gBAAgB,CAAC,KAAK,EAAE,CAAC;AAC3B,CAAC"}

package/dist/verify/install-probe/in-repo-publish.d.ts

@@ -0,0 +1,154 @@
+/**
+ * Publish an in-repo @telora version a focus branch needs, from the branch itself.
+ *
+ * A focus branch that adds exports to an in-repo @telora package (daemon-core,
+ * mcp-products) must raise its consumers' range to a version that only /sync
+ * publishes, after merge to main. The clean-install probe then fails the
+ * branch's verify deliveries on a version nothing will publish until the branch
+ * merges -- which it cannot while verify holds. This module closes that loop:
+ * build and publish the version from the focus worktree under the `pending` dist-tag,
+ * regenerate the consumers' lockfiles, and commit them on the branch with the
+ * delivery's Telora-Delivery trailer. /sync still owns `latest` and the
+ * post-merge release; it adopts a pending version rather than bumping past it.
+ *
+ * It publishes ONLY when every failure the probe saw is such a version:
+ *   - every non-passing package is resolution_failed (a registry outage is not
+ *     published around),
+ *   - npm named what it could not resolve for each (an unattributed failure is
+ *     not guessed at),
+ *   - every name is an in-repo @telora package (IN_REPO_PUBLISHABLE), and
+ *   - the version each asks for is exactly the one on disk in the worktree.
+ * Anything else is declined with a note, and the probe keeps its verdict.
+ *
+ * A published version is irreversible, so it is built only from COMMITTED
+ * bytes. The build, pack and publish run in a detached checkout of the probed
+ * commit (InRepoPublishDeps.checkoutCommit), never in the live worktree a
+ * sibling may be editing: an edit made mid-build cannot reach the tarball, and
+ * neither can a dirty input outside the package directory (the daemon's publish
+ * stamps supabase/migrations into build-info.json). While a target's source or
+ * a consumer's manifest is uncommitted the publish is deferred as well
+ * (dirtyPublishInputs) -- that version is not final yet.
+ *
+ * Pure orchestration: every npm and git act runs through InRepoPublishDeps,
+ * bound at the composition root (composition/verify-probe-context.ts).
+ *
+ * History: docs/daemon/history-team-lifecycle.md (verify/install-probe/in-repo-publish.ts).
+ *
+ * @module in-repo-publish
+ */
+import type { InstallProbeResult } from './install-probe.js';
+/**
+ * The dist-tag a branch-published version carries. NEVER `latest`: a daemon
+ * host or developer installing `@telora/<pkg>` without a version must keep
+ * getting what /sync released from main.
+ */
+export declare const PENDING_DIST_TAG = "pending";
+/**
+ * The in-repo @telora packages the daemon may publish, in DEPENDENCY ORDER: a
+ * consumer is never published before a dependency it needs from the same pass.
+ */
+export declare const IN_REPO_PUBLISHABLE: ReadonlyArray<{
+    name: string;
+    dir: string;
+}>;
+/** One version to publish from the worktree. */
+export interface PublishTarget {
+    name: string;
+    /** Repo-relative package dir. */
+    dir: string;
+    version: string;
+}
+/** What to do about a failed probe. */
+export type InRepoPublishPlan = {
+    kind: 'publish';
+    publish: PublishTarget[];
+    relock: string[];
+} | {
+    kind: 'decline';
+    reason: string;
+};
+/**
+ * Decide whether a failed probe is ONLY unpublished in-repo versions, and if so
+ * what to publish (dependency order) and which package dirs to re-lock. Pure.
+ *
+ * `workspaceVersion(dir)` reads the `version` of `<worktree>/<dir>/package.json`
+ * (null when absent or unreadable).
+ */
+export declare function planInRepoPublish(result: InstallProbeResult, workspaceVersion: (dir: string) => string | null): InRepoPublishPlan;
+/**
+ * The `npm publish` argv for a branch-published version. The dist-tag is fixed
+ * here and nowhere else, so no caller can publish a branch version as `latest`.
+ */
+export declare function publishArgs(): string[];
+/** The lockfile regeneration argv, run in the consumer's own directory. */
+export declare function relockArgs(): string[];
+/** Injected IO. */
+export interface InRepoPublishDeps {
+    /** `version` from `<worktreePath>/<dir>/package.json`, or null. */
+    readWorkspaceVersion: (worktreePath: string, dir: string) => string | null;
+    /**
+     * A detached checkout of commit `sha` of the worktree's repository, with the
+     * worktree's installed dependencies reachable, to build from. `release`
+     * removes it. Null when it could not be made.
+     */
+    checkoutCommit: (worktreePath: string, sha: string) => {
+        root: string;
+        release: () => void;
+    } | null;
+    /** Run `npm <args>` in `cwd`; exit code (null if it could not start) + combined output. */
+    runNpm: (cwd: string, args: string[]) => Promise<{
+        exitCode: number | null;
+        output: string;
+    }>;
+    /** Repo-relative paths with uncommitted changes, or null when git could not say. */
+    uncommittedPaths: (worktreePath: string) => string[] | null;
+    /**
+     * Commit exactly `paths` with `message` and a `Telora-Delivery: <deliveryId>`
+     * trailer. Returns the new HEAD sha, or null when git made no commit.
+     */
+    commitPaths: (worktreePath: string, paths: string[], message: string, deliveryId: string) => string | null;
+}
+/** What the daemon did about a failed probe. `note` goes on the gate entry. */
+export type InRepoPublishOutcome = 
+/** Published; `sha` is the lockfile commit, null when no lockfile changed. Re-probe. */
+{
+    kind: 'resolved';
+    sha: string | null;
+    published: PublishTarget[];
+    note: string;
+} | {
+    kind: 'declined';
+    note: string;
+}
+/** Nothing done: the publish's inputs are uncommitted right now. Retry on a later tick. */
+ | {
+    kind: 'deferred';
+    note: string;
+} | {
+    kind: 'failed';
+    note: string;
+};
+/**
+ * The uncommitted paths that would make a publish ship content branch HEAD does
+ * not hold. A published version is irreversible (/sync cannot replace it), so
+ * it is built only from committed inputs: nothing under a publish target's
+ * directory (its source, manifest, build config) and no consumer manifest,
+ * lockfile or .npmrc the re-lock reads may be dirty. Pure.
+ */
+export declare function dirtyPublishInputs(plan: {
+    publish: PublishTarget[];
+    relock: string[];
+}, dirty: readonly string[]): string[];
+/**
+ * Publish, re-lock and commit, when the plan says the failure is only
+ * unpublished in-repo versions. Never throws for an npm or git failure: each is
+ * an outcome with a note naming the step and npm's own words (a host with no
+ * registry credentials reads as `could not publish ...: ENEEDAUTH`).
+ */
+export declare function publishAroundUnpublished(input: {
+    worktreePath: string;
+    headSha: string;
+    result: InstallProbeResult;
+    deliveryId: string;
+}, deps: InRepoPublishDeps): Promise<InRepoPublishOutcome>;
+//# sourceMappingURL=in-repo-publish.d.ts.map

package/dist/verify/install-probe/in-repo-publish.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-repo-publish.d.ts","sourceRoot":"","sources":["../../../src/verify/install-probe/in-repo-publish.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAG7D;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,YAAY,CAAC;AAE1C;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,aAAa,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAI5E,CAAC;AAEF,gDAAgD;AAChD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,uCAAuC;AACvC,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,aAAa,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,GAC/D;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAExC;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,kBAAkB,EAC1B,gBAAgB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,GAC/C,iBAAiB,CA2CnB;AAED;;;GAGG;AACH,wBAAgB,WAAW,IAAI,MAAM,EAAE,CAEtC;AAED,2EAA2E;AAC3E,wBAAgB,UAAU,IAAI,MAAM,EAAE,CAErC;AAKD,mBAAmB;AACnB,MAAM,WAAW,iBAAiB;IAChC,mEAAmE;IACnE,oBAAoB,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAC3E;;;;OAIG;IACH,cAAc,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IACpG,2FAA2F;IAC3F,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9F,oFAAoF;IACpF,gBAAgB,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,MAAM,EAAE,GAAG,IAAI,CAAC;IAC5D;;;OAGG;IACH,WAAW,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CAC5G;AAED,+EAA+E;AAC/E,MAAM,MAAM,oBAAoB;AAC9B,wFAAwF;AACtF;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,EAAE,aAAa,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAClF;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AACpC,2FAA2F;GACzF;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAIrC;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAK3H;AAaD;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,EAChG,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,oBAAoB,CAAC,CAkC/B"}

package/dist/verify/install-probe/in-repo-publish.js

@@ -0,0 +1,183 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/integration/in-repo-publish-branch.test.ts,
+//   packages/daemon/src/verify/install-probe/in-repo-publish.test.ts
+// PINNED-BY-END
+import { formatUnresolved, pinnedVersion } from './npm-unresolved.js';
+/**
+ * The dist-tag a branch-published version carries. NEVER `latest`: a daemon
+ * host or developer installing `@telora/<pkg>` without a version must keep
+ * getting what /sync released from main.
+ */
+export const PENDING_DIST_TAG = 'pending';
+/**
+ * The in-repo @telora packages the daemon may publish, in DEPENDENCY ORDER: a
+ * consumer is never published before a dependency it needs from the same pass.
+ */
+export const IN_REPO_PUBLISHABLE = [
+    { name: '@telora/daemon-core', dir: 'packages/daemon-core' },
+    { name: '@telora/mcp-products', dir: 'mcp/telora-products' },
+    { name: '@telora/daemon', dir: 'packages/daemon' },
+];
+/**
+ * Decide whether a failed probe is ONLY unpublished in-repo versions, and if so
+ * what to publish (dependency order) and which package dirs to re-lock. Pure.
+ *
+ * `workspaceVersion(dir)` reads the `version` of `<worktree>/<dir>/package.json`
+ * (null when absent or unreadable).
+ */
+export function planInRepoPublish(result, workspaceVersion) {
+    if (result.verdict !== 'failed')
+        return { kind: 'decline', reason: 'the probe did not fail' };
+    const failing = result.packages.filter(p => p.outcome !== 'pass');
+    const unreachable = failing.filter(p => p.outcome === 'registry_unreachable');
+    if (unreachable.length > 0) {
+        return {
+            kind: 'decline',
+            reason: `not published around: the registry was unreachable for ${unreachable.map(p => p.packageDir).join(', ')}`,
+        };
+    }
+    const wanted = new Map();
+    for (const pkg of failing) {
+        const unresolved = pkg.unresolved ?? [];
+        if (unresolved.length === 0) {
+            return { kind: 'decline', reason: `not published around: npm named no package it could not resolve for ${pkg.packageDir}` };
+        }
+        for (const u of unresolved) {
+            const label = formatUnresolved(u);
+            const inRepo = IN_REPO_PUBLISHABLE.find(p => p.name === u.name);
+            if (!inRepo)
+                return { kind: 'decline', reason: `not published around: ${label} is not an in-repo @telora package` };
+            const version = pinnedVersion(u.spec);
+            if (!version)
+                return { kind: 'decline', reason: `not published around: ${label} does not name one version` };
+            const onDisk = workspaceVersion(inRepo.dir);
+            if (onDisk !== version) {
+                return {
+                    kind: 'decline',
+                    reason: `not published around: ${label} does not exist on disk (${inRepo.dir} is ${onDisk ?? 'unreadable'})`,
+                };
+            }
+            const prior = wanted.get(u.name);
+            if (prior && prior.version !== version) {
+                return { kind: 'decline', reason: `not published around: ${u.name} is asked for at ${prior.version} and ${version}` };
+            }
+            wanted.set(u.name, { name: u.name, dir: inRepo.dir, version });
+        }
+    }
+    const publish = IN_REPO_PUBLISHABLE.flatMap(p => {
+        const t = wanted.get(p.name);
+        return t ? [t] : [];
+    });
+    return { kind: 'publish', publish, relock: failing.map(p => p.packageDir) };
+}
+/**
+ * The `npm publish` argv for a branch-published version. The dist-tag is fixed
+ * here and nowhere else, so no caller can publish a branch version as `latest`.
+ */
+export function publishArgs() {
+    return ['publish', '--tag', PENDING_DIST_TAG];
+}
+/** The lockfile regeneration argv, run in the consumer's own directory. */
+export function relockArgs() {
+    return ['install', '--package-lock-only', '--ignore-scripts', '--prefer-online', '--no-audit', '--no-fund'];
+}
+/** npm's answers that mean the version is already in the registry (a retry after a partial pass). */
+const ALREADY_PUBLISHED = /E409|EPUBLISHCONFLICT|cannot publish over|previously published|already exists/i;
+/**
+ * The uncommitted paths that would make a publish ship content branch HEAD does
+ * not hold. A published version is irreversible (/sync cannot replace it), so
+ * it is built only from committed inputs: nothing under a publish target's
+ * directory (its source, manifest, build config) and no consumer manifest,
+ * lockfile or .npmrc the re-lock reads may be dirty. Pure.
+ */
+export function dirtyPublishInputs(plan, dirty) {
+    const underTarget = (p) => plan.publish.some(t => p.startsWith(`${t.dir}/`));
+    const consumerInputs = new Set(plan.relock.flatMap(dir => ['package.json', 'package-lock.json', '.npmrc'].map(f => (dir === '.' ? f : `${dir}/${f}`))));
+    return dirty.filter(p => underTarget(p) || consumerInputs.has(p));
+}
+const joinPath = (worktreePath, dir) => (dir === '.' ? worktreePath : `${worktreePath}/${dir}`);
+const lockfilePath = (dir) => (dir === '.' ? 'package-lock.json' : `${dir}/package-lock.json`);
+const label = (t) => `${t.name}@${t.version}`;
+/** First line of npm output that reads as an error, for a one-line note. */
+function npmErrorLine(output) {
+    const lines = output.split('\n').map(l => l.trim()).filter(Boolean);
+    const code = lines.find(l => /\bcode\s+E[A-Z0-9]+/.test(l));
+    return (code ?? lines.find(l => /error|ERR!/i.test(l)) ?? lines[lines.length - 1] ?? 'no output').slice(0, 200);
+}
+/**
+ * Publish, re-lock and commit, when the plan says the failure is only
+ * unpublished in-repo versions. Never throws for an npm or git failure: each is
+ * an outcome with a note naming the step and npm's own words (a host with no
+ * registry credentials reads as `could not publish ...: ENEEDAUTH`).
+ */
+export async function publishAroundUnpublished(input, deps) {
+    const { worktreePath, headSha, result, deliveryId } = input;
+    const plan = planInRepoPublish(result, dir => deps.readWorkspaceVersion(worktreePath, dir));
+    if (plan.kind === 'decline')
+        return { kind: 'declined', note: plan.reason };
+    const lockfiles = plan.relock.map(lockfilePath);
+    const dirty = deps.uncommittedPaths(worktreePath);
+    if (dirty === null)
+        return { kind: 'deferred', note: 'could not read the focus worktree status; nothing published' };
+    const blocking = dirtyPublishInputs(plan, dirty);
+    if (blocking.length > 0) {
+        const shown = blocking.slice(0, 5).join(', ') + (blocking.length > 5 ? ` (+${blocking.length - 5} more)` : '');
+        return { kind: 'deferred', note: `nothing published: uncommitted publish inputs in the focus worktree: ${shown}` };
+    }
+    const failure = await publishFromCommit(worktreePath, headSha, plan, deps);
+    if (failure)
+        return failure;
+    for (const dir of plan.relock) {
+        const r = await deps.runNpm(joinPath(worktreePath, dir), relockArgs());
+        if (r.exitCode !== 0) {
+            return { kind: 'failed', note: `published ${plan.publish.map(label).join(', ')}; could not re-lock ${dir}: ${npmErrorLine(r.output)}` };
+        }
+    }
+    const published = plan.publish.map(label).join(', ');
+    const note = `daemon published ${published} under ${PENDING_DIST_TAG} and locked it`;
+    const relocked = deps.uncommittedPaths(worktreePath)?.filter(p => lockfiles.includes(p)) ?? null;
+    if (relocked === null)
+        return { kind: 'failed', note: `published ${published}; could not read the regenerated lockfiles' status` };
+    // Lockfiles that already named the version need no commit: the publish alone resolves them.
+    if (relocked.length === 0)
+        return { kind: 'resolved', sha: null, published: plan.publish, note };
+    const message = `chore(deps): lock ${published} published under the ${PENDING_DIST_TAG} tag`;
+    const sha = deps.commitPaths(worktreePath, relocked, message, deliveryId);
+    if (!sha)
+        return { kind: 'failed', note: `published ${published}; git refused the lockfile commit (${relocked.join(', ')})` };
+    return { kind: 'resolved', sha, published: plan.publish, note };
+}
+/**
+ * Build and publish each target from a detached checkout of `headSha`, in
+ * dependency order. Returns the outcome that stopped it, or null when every
+ * target is in the registry.
+ */
+async function publishFromCommit(worktreePath, headSha, plan, deps) {
+    const snapshot = deps.checkoutCommit(worktreePath, headSha);
+    if (!snapshot)
+        return { kind: 'deferred', note: `nothing published: could not check out ${headSha.slice(0, 12)} to build from` };
+    try {
+        for (const target of plan.publish) {
+            const committed = deps.readWorkspaceVersion(snapshot.root, target.dir);
+            if (committed !== target.version) {
+                return { kind: 'deferred', note: `nothing published: ${headSha.slice(0, 12)} holds ${target.dir} at ${committed ?? 'no version'}, not ${target.version}` };
+            }
+            const cwd = joinPath(snapshot.root, target.dir);
+            for (const args of [['run', 'clean', '--if-present'], ['run', 'build']]) {
+                const r = await deps.runNpm(cwd, args);
+                if (r.exitCode !== 0) {
+                    return { kind: 'failed', note: `could not build ${label(target)} (npm ${args.join(' ')}): ${npmErrorLine(r.output)}` };
+                }
+            }
+            const pub = await deps.runNpm(cwd, publishArgs());
+            if (pub.exitCode !== 0 && !ALREADY_PUBLISHED.test(pub.output)) {
+                return { kind: 'failed', note: `could not publish ${label(target)} under ${PENDING_DIST_TAG}: ${npmErrorLine(pub.output)}` };
+            }
+        }
+        return null;
+    }
+    finally {
+        snapshot.release();
+    }
+}
+//# sourceMappingURL=in-repo-publish.js.map

package/dist/verify/install-probe/in-repo-publish.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-repo-publish.js","sourceRoot":"","sources":["../../../src/verify/install-probe/in-repo-publish.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,6EAA6E;AAC7E,qEAAqE;AACrE,gBAAgB;AA0ChB,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEtE;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAAC;AAE1C;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAiD;IAC/E,EAAE,IAAI,EAAE,qBAAqB,EAAE,GAAG,EAAE,sBAAsB,EAAE;IAC5D,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,qBAAqB,EAAE;IAC5D,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,iBAAiB,EAAE;CACnD,CAAC;AAeF;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAA0B,EAC1B,gBAAgD;IAEhD,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IAC9F,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,sBAAsB,CAAC,CAAC;IAC9E,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,0DAA0D,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAClH,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;QACxC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,uEAAuE,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC;QAC9H,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;YAClC,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;YAChE,IAAI,CAAC,MAAM;gBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,yBAAyB,KAAK,oCAAoC,EAAE,CAAC;YACpH,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,yBAAyB,KAAK,4BAA4B,EAAE,CAAC;YAC7G,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5C,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;gBACvB,OAAO;oBACL,IAAI,EAAE,SAAS;oBACf,MAAM,EAAE,yBAAyB,KAAK,4BAA4B,MAAM,CAAC,GAAG,OAAO,MAAM,IAAI,YAAY,GAAG;iBAC7G,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;gBACvC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,yBAAyB,CAAC,CAAC,IAAI,oBAAoB,KAAK,CAAC,OAAO,QAAQ,OAAO,EAAE,EAAE,CAAC;YACxH,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QAC9C,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC7B,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW;IACzB,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;AAChD,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,UAAU;IACxB,OAAO,CAAC,SAAS,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;AAC9G,CAAC;AAED,qGAAqG;AACrG,MAAM,iBAAiB,GAAG,gFAAgF,CAAC;AAkC3G;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAoD,EAAE,KAAwB;IAC/G,MAAM,WAAW,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACrF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CACvD,CAAC,cAAc,EAAE,mBAAmB,EAAE,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChG,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,YAAoB,EAAE,GAAW,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,YAAY,IAAI,GAAG,EAAE,CAAC,CAAC;AAChH,MAAM,YAAY,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,GAAG,GAAG,oBAAoB,CAAC,CAAC;AACvG,MAAM,KAAK,GAAG,CAAC,CAAgB,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;AAE7D,4EAA4E;AAC5E,SAAS,YAAY,CAAC,MAAc;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAClH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,KAAgG,EAChG,IAAuB;IAEvB,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IAC5D,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC;IAC5F,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IAE5E,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,6DAA6D,EAAE,CAAC;IACrH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACjD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/G,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,wEAAwE,KAAK,EAAE,EAAE,CAAC;IACrH,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3E,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAE5B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,GAAG,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QAC1I,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,oBAAoB,SAAS,UAAU,gBAAgB,gBAAgB,CAAC;IACrF,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACjG,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,SAAS,oDAAoD,EAAE,CAAC;IACnI,4FAA4F;IAC5F,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;IACjG,MAAM,OAAO,GAAG,qBAAqB,SAAS,wBAAwB,gBAAgB,MAAM,CAAC;IAC7F,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAC1E,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,SAAS,sCAAsC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9H,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAC9B,YAAoB,EACpB,OAAe,EACf,IAAiB,EACjB,IAAuB;IAEvB,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC5D,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,0CAA0C,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,EAAE,CAAC;IACjI,IAAI,CAAC;QACH,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,SAAS,GAAG,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YACvE,IAAI,SAAS,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,sBAAsB,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,MAAM,CAAC,GAAG,OAAO,SAAS,IAAI,YAAY,SAAS,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YAC7J,CAAC;YACD,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YAChD,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;gBACxE,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACvC,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;oBACrB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,mBAAmB,KAAK,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACzH,CAAC;YACH,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;YAClD,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,KAAK,CAAC,MAAM,CAAC,UAAU,gBAAgB,KAAK,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAC/H,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/verify/install-probe/install-probe-tick.d.ts

@@ -24,16 +24,25 @@ import type { DaemonConfig } from '../../types/index.js';
 import type { getActiveFocuses } from '../../queries/focuses/focus-discovery.js';
 import type { getFocusDeliveries } from '../../queries/focuses/focuses.js';
 import { type DeliveryGateState } from '../../queries/delivery-gate-state/delivery-gate-state.js';
+import type { InstallProbeDetail } from '../../queries/delivery-gate-state/delivery-gate-holds.js';
 import { type InstallProbeResult } from './install-probe.js';
+import type { InRepoPublishOutcome } from './in-repo-publish.js';
 /** The gate_state guard name the probe reports under. */
 export declare const INSTALL_PROBE_GUARD = "clean_install_probe";
 /**
  * Build the gate_state entry for a probe result. resolution_failed -> a blocking
- * condition (holds/surfaces on "Waiting on"); unverifiable (registry unreachable)
+ * condition (holds/surfaces on "Waiting on", naming what npm could not resolve
+ * under `installProbe`); unverifiable (registry unreachable)
  * -> a non-blocking WARNING (probe infra, not a delivery failure); pass/skipped
  * -> null (clear any prior probe gate). Pure -- exported for testing.
  */
-export declare function probeGateState(result: InstallProbeResult, evaluatedAt: string): DeliveryGateState | null;
+export declare function probeGateState(result: InstallProbeResult, evaluatedAt: string, note?: string): DeliveryGateState | null;
+/**
+ * What a failed probe waits on: each package@spec npm named, per probed package,
+ * and the packages whose failure named none. `note` records what the daemon did
+ * about it (install-probe/in-repo-publish.ts). Pure -- exported for testing.
+ */
+export declare function installProbeDetail(result: InstallProbeResult, note?: string): InstallProbeDetail;
 /**
  * The probe's production gate_state write: WITHOUT changing execution_status
  * (stays verify) or logging a transition. Passing the same status is idempotent;
@@ -53,6 +62,18 @@ export interface InstallProbeTickDeps {
     runProbe: (changedFiles: string[], repoPath: string) => Promise<InstallProbeResult>;
     writeGateState: (deliveryId: string, gateState: DeliveryGateState | null, organizationId: string) => Promise<void>;
     now: () => string;
+    /**
+     * Close a failure that is ONLY unpublished in-repo @telora versions: publish
+     * them under the pending tag and commit the regenerated lockfiles
+     * (in-repo-publish.ts), built from the probed commit `headSha`. Absent, a
+     * failed probe just blocks.
+     */
+    publishAround?: (input: {
+        worktreePath: string;
+        headSha: string;
+        result: InstallProbeResult;
+        deliveryId: string;
+    }) => Promise<InRepoPublishOutcome>;
 }
 /** Test hook to reset the cache. */
 export declare function __resetInstallProbeCacheForTests(): void;