@telora/daemon 0.22.85 → 0.22.91

package/dist/update/version-check.js

@@ -1,106 +1,74 @@
 // PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
 // Pinned by: packages/daemon/src/drift/staleness-signal.test.ts,
-//   packages/daemon/src/update/version-check.test.ts
+//   packages/daemon/src/shell/heartbeat-version-lag.test.ts, packages/daemon/src/update/version-check.test.ts
 // PINNED-BY-END
 /**
- * Non-blocking npm registry version check.
+ * Non-blocking npm registry version check, and the daemon's declared update
+ * channel.
  *
- * Checks if a newer version of @telora/daemon is available on the public
- * registry the package is actually installed from. Fails open on any error --
- * a registry outage never prevents startup or normal operation -- but logs a
- * warn line so a broken update path produces a signal instead of silent rot.
+ * The daemon updates from ONE channel: the public npmjs registry infra
+ * publishes releases to, overridable only by TELORA_REGISTRY_URL. The version
+ * check reads that channel, every install pins the @telora scope to it, and the
+ * staleness sensor / heartbeat attribute readings to it -- the host's ~/.npmrc
+ * (Gitea-scoped on the daemon hosts, for development tooling) never decides where
+ * @telora/daemon comes from.
+ *
+ * The check fails open on any error -- a registry outage never prevents startup
+ * or normal operation -- but logs a warn line so a broken update path produces a
+ * signal instead of silent rot.
  */
-import { execFileSync } from 'node:child_process';
+import { loadEnvConfig } from '@telora/daemon-core';
 import { createLogger } from '../shell/log.js';
 const log = createLogger({ module: 'auto-update' });
 const CHECK_TIMEOUT_MS = 5000;
-const SCOPE_REGISTRY_KEY = '@telora:registry';
-const DEFAULT_REGISTRY_KEY = 'registry';
-const NPMJS_FALLBACK = 'https://registry.npmjs.org/';
-/**
- * Read a single npm config value via `npm config get <key>`.
- *
- * Returns a trimmed http(s) URL, or null when npm is unavailable, the key is
- * unset (npm prints an empty line or the literal "undefined"/"null"), or the
- * value is not an http(s) URL. Fails soft so a host without `npm` on PATH still
- * resolves through the fallback chain rather than throwing.
- */
-export function readNpmConfigValue(key) {
-    try {
-        const out = execFileSync('npm', ['config', 'get', key], {
-            encoding: 'utf-8',
-            timeout: 5000,
-            stdio: ['ignore', 'pipe', 'ignore'],
-        }).trim();
-        if (!out || out === 'undefined' || out === 'null')
-            return null;
-        if (!/^https?:\/\//i.test(out))
-            return null;
-        return out;
-    }
-    catch {
-        return null;
-    }
-}
+/** The public npmjs registry: the release channel infra publishes @telora/daemon to. */
+export const NPMJS_RELEASE_REGISTRY = 'https://registry.npmjs.org/';
 /**
- * Resolve the registry URL the update check should target, so the CHECK asks npm
- * the same question the INSTALL resolves. `self-update.ts` runs
- * `npm install -g @telora/daemon@latest`, which resolves the @telora scope from
- * npm config (~/.npmrc -> Gitea on the daemon hosts); a check that targeted a
- * different registry would be blind to a Gitea-only publish -- the exact failure
- * this focus exists to close.
+ * Resolve the daemon's update channel: TELORA_REGISTRY_URL when set (trimmed; a
+ * blank value is unset), otherwise the npmjs release registry.
  *
- * Resolution order:
- *   1. TELORA_REGISTRY_URL when EXPLICITLY set in the environment -> override.
- *      Read straight from `env` (NOT through loadEnvConfig, whose typed default
- *      would make an unset var indistinguishable from an explicit npmjs choice).
- *   2. `npm config get @telora:registry` -> the scope registry the installer uses.
- *   3. `npm config get registry` -> npm's configured default registry.
- *   4. the public npmjs registry -> last-resort fallback (npm absent / unset).
+ * npm config is deliberately NOT consulted. The daemon hosts scope @telora to the
+ * Gitea development registry in ~/.npmrc, and inheriting that made running
+ * daemons track unreleased development builds. Check and install must still
+ * agree on ONE registry (a check=npmjs / install=Gitea split once made
+ * Gitea-only publishes invisible), so both resolve through this function: the
+ * check fetches from it and every install pins `--@telora:registry=` to it
+ * ({@link scopedInstallArgs}).
  *
- * Pure over injected deps; {@link getRegistryUrl} binds the real env + npm reader.
+ * Read on every call (not memoized): the env can change between calls in tests,
+ * and resolution is a cheap parse with no shell-out.
  */
-export function resolveRegistryUrl(deps) {
-    const override = deps.env.TELORA_REGISTRY_URL;
-    if (typeof override === 'string' && override.trim().length > 0) {
-        return override.trim();
-    }
-    return (deps.npmConfigGet(SCOPE_REGISTRY_KEY) ??
-        deps.npmConfigGet(DEFAULT_REGISTRY_KEY) ??
-        NPMJS_FALLBACK);
+export function resolveUpdateChannelUrl(env = process.env) {
+    const configured = loadEnvConfig(env).TELORA_REGISTRY_URL.trim();
+    return configured.length > 0 ? configured : NPMJS_RELEASE_REGISTRY;
 }
 /**
- * The registry `npm install -g @telora/daemon@latest` ACTUALLY resolves: npm
- * config (@telora scope, then default), ignoring the TELORA_REGISTRY_URL CHECK
- * override -- the installer reads ~/.npmrc, never that env var. This is the
- * registry a version reading must be ATTRIBUTABLE to for its agreement to count:
- * an operator who points the check elsewhere (override) has not changed where
- * an install lands, so a reading from the override registry cannot certify the
- * installed version is current.
+ * The npm argv that installs `target` from `channel`, pinning ONLY the @telora
+ * scope (`--@telora:registry=<channel>`). Never a global `--registry`: that would
+ * send every non-@telora dependency to the channel host too, and against a wrong
+ * host/port npm hangs in SYN-SENT with no output.
  */
-export function resolveInstallRegistryUrl(npmConfigGet = readNpmConfigValue) {
-    return resolveRegistryUrl({ env: {}, npmConfigGet });
+export function scopedInstallArgs(target, channel) {
+    return ['install', '-g', `--@telora:registry=${channel}`, target];
+}
+/** The same install as {@link scopedInstallArgs}, rendered as a command a human can run. */
+export function scopedInstallCommand(target, channel) {
+    return ['npm', ...scopedInstallArgs(target, channel)].join(' ');
 }
 function normalizeRegistry(url) {
     return url.trim().replace(/\/+$/, '').toLowerCase();
 }
 /**
  * True when a reading taken from `readingRegistry` can be ATTRIBUTED to the
- * registry npm resolves for an install (`installRegistry`) -- only then does the
- * agreement/lag it reports count. A null/absent reading registry (legacy cache,
- * unstamped) is unattributable, and so is a reading from a different registry
- * than the installer resolves. Trailing-slash / case insensitive.
+ * update channel (`channelRegistry`) -- only then does the agreement/lag it
+ * reports count. A null/absent reading registry (legacy cache, unstamped) is
+ * unattributable, and so is a reading from any other registry (e.g. a cache
+ * stamped with the Gitea URL). Trailing-slash / case insensitive.
  */
-export function isReadingAttributable(readingRegistry, installRegistry) {
+export function isReadingAttributable(readingRegistry, channelRegistry) {
     if (!readingRegistry)
         return false;
-    return normalizeRegistry(readingRegistry) === normalizeRegistry(installRegistry);
-}
-function getRegistryUrl() {
-    // Read the LIVE environment + npm config on every call (the update check can
-    // run long after startup, and tests mutate the env between calls) rather than
-    // a memoized startup snapshot.
-    return resolveRegistryUrl({ env: process.env, npmConfigGet: readNpmConfigValue });
+    return normalizeRegistry(readingRegistry) === normalizeRegistry(channelRegistry);
 }
 /**
  * Parse a semver string's numeric major.minor.patch core, ignoring any
@@ -166,8 +134,9 @@ export function versionDistance(running, newest) {
  * resolved registry URL so a broken update path is observable in the daemon log.
  */
 export async function checkForUpdates(currentVersion, packageName = '@telora/daemon') {
-    const registryUrl = getRegistryUrl();
+    let registryUrl = '(unresolved update channel)';
     try {
+        registryUrl = resolveUpdateChannelUrl();
         const base = registryUrl.endsWith('/') ? registryUrl : registryUrl + '/';
         // Scoped package names use URL-encoded slash in the npm protocol
         const encodedName = packageName.replace('/', '%2F');

package/dist/update/version-check.js.map

@@ -1 +1 @@
-{"version":3,"file":"version-check.js","sourceRoot":"","sources":["../../src/update/version-check.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,iEAAiE;AACjE,qDAAqD;AACrD,gBAAgB;AAEhB;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;AAGpD,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAgB9B,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAC9C,MAAM,oBAAoB,GAAG,UAAU,CAAC;AACxC,MAAM,cAAc,GAAG,6BAA6B,CAAC;AAErD;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE;YACtD,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAC/D,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5C,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAQD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAA4B;IAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAC9C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/D,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IACD,OAAO,CACL,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC;QACrC,IAAI,CAAC,YAAY,CAAC,oBAAoB,CAAC;QACvC,cAAc,CACf,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CACvC,eAA+C,kBAAkB;IAEjE,OAAO,kBAAkB,CAAC,EAAE,GAAG,EAAE,EAAuB,EAAE,YAAY,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACtD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,eAA0C,EAAE,eAAuB;IACvG,IAAI,CAAC,eAAe;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,iBAAiB,CAAC,eAAe,CAAC,KAAK,iBAAiB,CAAC,eAAe,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,cAAc;IACrB,6EAA6E;IAC7E,8EAA8E;IAC9E,+BAA+B;IAC/B,OAAO,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE,kBAAkB,EAAE,CAAC,CAAC;AACpF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACf,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,OAAe;IAC/D,MAAM,CAAC,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,CAAC,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,KAAK,OAAO,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7B,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IAChC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AASD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,MAAc;IAC7D,MAAM,CAAC,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACtD,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;KAChC,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,cAAsB,EAAE,WAAW,GAAG,gBAAgB;IAC1F,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,GAAG,GAAG,CAAC;QACzE,iEAAiE;QACjE,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,GAAG,IAAI,GAAG,WAAW,EAAE,CAAC;QAEpC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,gBAAgB,CAAC,CAAC;QAEvE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;aACxC,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,GAAG,CAAC,IAAI,CACN,gDAAgD,WAAW,kBAAkB,QAAQ,CAAC,MAAM,QAAQ,WAAW,EAAE,CAClH,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAElC,CAAC;YACF,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;YAEhD,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,GAAG,CAAC,IAAI,CACN,qEAAqE,WAAW,gBAAgB,WAAW,EAAE,CAC9G,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YAED,2EAA2E;YAC3E,yEAAyE;YACzE,6EAA6E;YAC7E,6DAA6D;YAC7D,GAAG,CAAC,IAAI,CACN,gCAAgC,WAAW,YAAY,aAAa,iBAAiB,WAAW,cAAc,cAAc,GAAG,CAChI,CAAC;YAEF,OAAO;gBACL,aAAa;gBACb,eAAe,EAAE,cAAc,CAAC,aAAa,EAAE,cAAc,CAAC;gBAC9D,WAAW;aACZ,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wEAAwE;QACxE,2EAA2E;QAC3E,2BAA2B;QAC3B,GAAG,CAAC,IAAI,CACN,sDAAsD,WAAW,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACzH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"version-check.js","sourceRoot":"","sources":["../../src/update/version-check.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,iEAAiE;AACjE,8GAA8G;AAC9G,gBAAgB;AAEhB;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;AAGpD,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAgB9B,wFAAwF;AACxF,MAAM,CAAC,MAAM,sBAAsB,GAAG,6BAA6B,CAAC;AAEpE;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC1E,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC;IACjE,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,sBAAsB,CAAC;AACrE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,OAAe;IAC/D,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,sBAAsB,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;AACpE,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,OAAe;IAClE,OAAO,CAAC,KAAK,EAAE,GAAG,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACtD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,eAA0C,EAAE,eAAuB;IACvG,IAAI,CAAC,eAAe;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,iBAAiB,CAAC,eAAe,CAAC,KAAK,iBAAiB,CAAC,eAAe,CAAC,CAAC;AACnF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACf,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,OAAe;IAC/D,MAAM,CAAC,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,CAAC,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,KAAK,OAAO,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7B,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IAChC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AASD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,MAAc;IAC7D,MAAM,CAAC,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACtD,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;KAChC,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,cAAsB,EAAE,WAAW,GAAG,gBAAgB;IAC1F,IAAI,WAAW,GAAG,6BAA6B,CAAC;IAChD,IAAI,CAAC;QACH,WAAW,GAAG,uBAAuB,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,GAAG,GAAG,CAAC;QACzE,iEAAiE;QACjE,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,GAAG,IAAI,GAAG,WAAW,EAAE,CAAC;QAEpC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,gBAAgB,CAAC,CAAC;QAEvE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;aACxC,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,GAAG,CAAC,IAAI,CACN,gDAAgD,WAAW,kBAAkB,QAAQ,CAAC,MAAM,QAAQ,WAAW,EAAE,CAClH,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAElC,CAAC;YACF,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;YAEhD,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,GAAG,CAAC,IAAI,CACN,qEAAqE,WAAW,gBAAgB,WAAW,EAAE,CAC9G,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YAED,2EAA2E;YAC3E,yEAAyE;YACzE,6EAA6E;YAC7E,6DAA6D;YAC7D,GAAG,CAAC,IAAI,CACN,gCAAgC,WAAW,YAAY,aAAa,iBAAiB,WAAW,cAAc,cAAc,GAAG,CAChI,CAAC;YAEF,OAAO;gBACL,aAAa;gBACb,eAAe,EAAE,cAAc,CAAC,aAAa,EAAE,cAAc,CAAC;gBAC9D,WAAW;aACZ,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wEAAwE;QACxE,2EAA2E;QAC3E,2BAA2B;QAC3B,GAAG,CAAC,IAAI,CACN,sDAAsD,WAAW,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACzH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/verify/failure-signature.d.ts

@@ -0,0 +1,91 @@
+import { type VerificationSignatureRun } from '../queries/delivery-gate-state.js';
+/** Stage label when failing tests were parsed but no npm script header names a stage. */
+export declare const UNNAMED_STAGE_LABEL = "failing-tests";
+/**
+ * Normalize ONE output line so two runs of the same failure compare equal:
+ * strips ANSI, replaces the run's cwd, uuids, ISO timestamps, clock times, tmp
+ * paths, hex shas and durations with placeholders, then every remaining digit run
+ * with '#' (line counts, over-by deltas, pids, versions), collapsing whitespace.
+ * Pure -- exported for direct testing.
+ */
+export declare function normalizeVolatileDetail(line: string, cwd?: string | null): string;
+/** Where the failing stage's own output begins, and the stage's label. */
+export interface FailingStage {
+    /** "<package> <script>" with the version stripped (volatile across deliveries). */
+    label: string;
+    /** Index of the first line after the failing stage's header. */
+    detailStart: number;
+}
+/**
+ * Locate the failing npm script in a gate log (see the module doc for why the
+ * LAST header names it). Null when the log carries no npm script header at all.
+ * Pure -- exported for direct testing.
+ */
+export declare function locateFailingStage(lines: readonly string[]): FailingStage | null;
+export interface FailureSignatureInput {
+    /** The run's output: the full verification log when available, else the captured tails. */
+    logText: string;
+    /** Failing-test ids that GATE the rejection (baseline-attributed new failures, or all parsed). */
+    failingTests?: readonly string[];
+}
+/**
+ * Derive the failure signature "<stage>#<hash>" of a rejected verify run.
+ *
+ * The hash covers the failing stage's normalized detail: the gating failing-test
+ * ids when there are any (so a test stage is keyed on WHICH tests fail, not on
+ * the ok-lines of whatever tests the targeted selector picked), otherwise the
+ * stage's own output lines. Detail lines are normalized (normalizeVolatileDetail),
+ * de-duplicated and sorted, so volatile values and interleaving order never make
+ * one failure look like two. A different stage -- or the same stage failing on a
+ * different file, function, claim or test -- yields a different signature.
+ *
+ * Null when underivable: an empty log, or one with neither an npm script header
+ * nor a parseable failing test. Pure -- no I/O.
+ */
+export declare function deriveFailureSignature(input: FailureSignatureInput): string | null;
+/**
+ * Advance the run-length record by one rejection. A signature equal to the prior
+ * run's increments `consecutive`; a different one resets it to 1; a null
+ * (underivable) signature records 0 -- an unknown failure never counts as a
+ * repeat, and the next known signature starts a fresh run. Bounded by
+ * construction: one current + one previous signature, never a history. Pure.
+ */
+export declare function advanceSignatureRun(prior: VerificationSignatureRun | null, signature: string | null): VerificationSignatureRun;
+/**
+ * The signature run recorded on a delivery's LATEST deterministic rejection
+ * (gate_state.verification), or null when none is usable: no verification
+ * detail (a guard-only, shortfall or evidence-unavailable gate_state), a legacy
+ * row written before signatures existed, or an underivable (null) signature.
+ * The stall detector falls back to the iteration cap on null. Pure.
+ */
+export declare function readRecordedSignatureRun(gateState: unknown): {
+    signature: string;
+    consecutive: number;
+} | null;
+/** The slice of a verify StrategyResult the signature reads its text from. */
+export interface VerificationLogSource {
+    logPath?: string;
+    stdoutTail?: string;
+    stderrTail?: string;
+}
+/** The full verification log when it exists on disk, else the captured tails. */
+export declare function readVerificationLogText(source: VerificationLogSource): string;
+/** Injected I/O for stamping a signature onto a rejection; the default reads the real log. */
+export interface FailureSignatureDeps {
+    readLogText: (source: VerificationLogSource) => string;
+}
+export declare const defaultFailureSignatureDeps: () => FailureSignatureDeps;
+/**
+ * Compute the signature fields a rejection's gate_state.verification carries.
+ * The run extends the one recorded on the delivery's PRIOR gate_state, whether
+ * live or carried forward across the coding -> verify advance
+ * (readVerificationHistory). Best-effort: an unreadable log yields a null
+ * signature, so consecutive is 0 and the detector falls back to the iteration
+ * cap. A prior gate_state with no usable run counts as none. A signature fault
+ * must never block the rejection write.
+ */
+export declare function computeFailureSignatureRecord(deliveryId: string, source: VerificationLogSource, failingTests: readonly string[], priorGateState: unknown, deps: FailureSignatureDeps): {
+    failureSignature: string | null;
+    signatureRun: VerificationSignatureRun;
+};
+//# sourceMappingURL=failure-signature.d.ts.map

package/dist/verify/failure-signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"failure-signature.d.ts","sourceRoot":"","sources":["../../src/verify/failure-signature.ts"],"names":[],"mappings":"AAoDA,OAAO,EAGL,KAAK,wBAAwB,EAC9B,MAAM,mCAAmC,CAAC;AAK3C,yFAAyF;AACzF,eAAO,MAAM,mBAAmB,kBAAkB,CAAC;AAyBnD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,GAAG,IAAW,GAAG,MAAM,CAavF;AAED,0EAA0E;AAC1E,MAAM,WAAW,YAAY;IAC3B,mFAAmF;IACnF,KAAK,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,YAAY,GAAG,IAAI,CAoBhF;AAED,MAAM,WAAW,qBAAqB;IACpC,2FAA2F;IAC3F,OAAO,EAAE,MAAM,CAAC;IAChB,kGAAkG;IAClG,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,qBAAqB,GAAG,MAAM,GAAG,IAAI,CAkBlF;AAMD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,wBAAwB,GAAG,IAAI,EACtC,SAAS,EAAE,MAAM,GAAG,IAAI,GACvB,wBAAwB,CAO1B;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,OAAO,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAS9G;AAMD,8EAA8E;AAC9E,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,iFAAiF;AACjF,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,qBAAqB,GAAG,MAAM,CAS7E;AAED,8FAA8F;AAC9F,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,CAAC,MAAM,EAAE,qBAAqB,KAAK,MAAM,CAAC;CACxD;AAED,eAAO,MAAM,2BAA2B,QAAO,oBAE7C,CAAC;AAEH;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAC3C,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,qBAAqB,EAC7B,YAAY,EAAE,SAAS,MAAM,EAAE,EAC/B,cAAc,EAAE,OAAO,EACvB,IAAI,EAAE,oBAAoB,GACzB;IAAE,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,YAAY,EAAE,wBAAwB,CAAA;CAAE,CAS7E"}

package/dist/verify/failure-signature.js

@@ -0,0 +1,233 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/integration/verification-history-round-trip.test.ts,
+//   packages/daemon/src/verify/failure-signature.test.ts, packages/daemon/src/verify/stall-detectors.test.ts,
+//   packages/daemon/src/verify/verification-feedback.test.ts
+// PINNED-BY-END
+/**
+ * Failure SIGNATURE of a rejected deterministic verify run, and the run-length
+ * record that tells a delivery failing IDENTICALLY from one CONVERGING.
+ *
+ * iteration_count counts rejections; it cannot say whether they were the SAME
+ * rejection. Delivery e8e8fa15 (2026-09-11) ran 16 cycles through verify:gate and
+ * failed a DIFFERENT stage each time -- types drift, then daemon-file-size, then
+ * daemon-function-size, then lint:counted-claims -- every fix correct, each one
+ * uncovering the next gate. A count-keyed stall detector read that as "will not
+ * converge". A signature is the discriminator: which stage failed and what it
+ * said, with the detail that varies between two runs of the SAME failure
+ * (timestamps, durations, line and over-by counts, tmp paths, pids, shas, the
+ * package version in npm's script header) normalized away.
+ *
+ * Three parts:
+ *   1. deriveFailureSignature -- PURE: log text (+ the gating failing-test ids)
+ *      -> "<stage>#<detail-hash>", or null when underivable.
+ *   2. advanceSignatureRun -- PURE: prior run + this signature -> the bounded
+ *      run-length record (reset on change, +1 on repeat; a null signature never
+ *      counts as a repeat).
+ *   3. The PRIOR run's home: gate_state, and nothing else. The rejection stamps
+ *      the run on gate_state.verification. The stall detector reads it there,
+ *      from the delivery row it already has. Between two rejections the delivery
+ *      walks verify_failed -> queued -> coding -> verify, and every writer that
+ *      clears or replaces the gate on the way (above all the guard-pass coding ->
+ *      verify advance) carries the run forward under
+ *      gate_state.verificationHistory (queries/delivery-gate-state.ts
+ *      carryVerificationHistory). The next rejection reads it back off its prior
+ *      gate_state (computeFailureSignatureRecord). A verify pass resets it
+ *      (clearVerificationHistory).
+ *
+ * Stage location: npm 10 prints NO "Lifecycle script failed" line for a nested
+ * npm-run failure, only the "> <pkg>@<version> <script>" header of every script
+ * it starts. verify:gate chains its stages with &&, so nothing starts after the
+ * failing script and the LAST header in the log names it. When an older npm's
+ * "Lifecycle script ... failed" line is present, its first (innermost) occurrence
+ * wins. Known imprecision: a stage that itself spawns an npm script
+ * (check:types-drift -> gen:types:ephemeral) is labelled by the nested script --
+ * stable across repeats, so the discriminator still holds.
+ *
+ * @module verify/failure-signature
+ */
+import { createHash } from 'node:crypto';
+import { existsSync, readFileSync } from 'node:fs';
+import { createLogger } from '../shell/log.js';
+import { parseSignatureRun, readVerificationHistory, } from '../queries/delivery-gate-state.js';
+import { parseFailingTests } from './verification-failure-parser.js';
+const log = createLogger({ module: 'verification' });
+/** Stage label when failing tests were parsed but no npm script header names a stage. */
+export const UNNAMED_STAGE_LABEL = 'failing-tests';
+const STAGE_LABEL_MAX_CHARS = 120;
+const DETAIL_HASH_CHARS = 12;
+/** ANSI CSI/SGR sequences, built from a char code so no control char sits in a regex literal. */
+const ANSI_RE = new RegExp(`${String.fromCharCode(27)}\\[[0-9;?]*[A-Za-z]`, 'g');
+const UUID_RE = /\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\b/gi;
+const ISO_TS_RE = /\b\d{4}-\d{2}-\d{2}[T ]\d{2}:\d{2}(?::\d{2}(?:[.,]\d+)?)?(?:Z|[+-]\d{2}:?\d{2})?/g;
+const CLOCK_RE = /\b\d{1,2}:\d{2}:\d{2}(?:\.\d+)?\b/g;
+const TMP_PATH_RE = /(?:\/private)?\/(?:tmp|var\/tmp|var\/folders)\/[^\s'"`),;]+/g;
+/** Lowercase hex runs holding at least one letter AND one digit (git shas, hex ids). */
+const HEX_SHA_RE = /\b(?=[0-9a-f]*[a-f])(?=[0-9a-f]*\d)[0-9a-f]{7,64}\b/g;
+const DURATION_RE = /\b\d+(?:\.\d+)?\s?(?:ms|ns|s|secs?|seconds?|m|mins?|minutes?|h|hrs?|hours?)\b/g;
+const DIGITS_RE = /\d+/g;
+/** npm's per-script header: "> <name>@<version> <script>" (name may be scoped). */
+const NPM_HEADER_RE = /^> ((?:@[^\s@/]+\/)?[^\s@]+)@\S+ (\S+)\s*$/;
+/** npm 7-9 innermost-failure line (npm 10 omits it for nested runs). */
+const NPM_LIFECYCLE_FAILED_RE = /^npm (?:error|ERR!) Lifecycle script `([^`]+)` failed/;
+/** npm / gate chrome lines -- never failure detail. */
+const CHROME_RE = /^(?:npm (?:error|ERR!|warn|WARN|notice)\b|> |TELORA_GATE_COMPLETE:)/;
+/** The "(cwd: <path>)" line runDeterministicStrategy writes at the top of every log. */
+const CWD_HEADER_RE = /^\(cwd: (.+)\)$/m;
+/**
+ * Normalize ONE output line so two runs of the same failure compare equal:
+ * strips ANSI, replaces the run's cwd, uuids, ISO timestamps, clock times, tmp
+ * paths, hex shas and durations with placeholders, then every remaining digit run
+ * with '#' (line counts, over-by deltas, pids, versions), collapsing whitespace.
+ * Pure -- exported for direct testing.
+ */
+export function normalizeVolatileDetail(line, cwd = null) {
+    let s = line.replace(ANSI_RE, '');
+    if (cwd)
+        s = s.split(cwd).join('<cwd>');
+    return s
+        .replace(UUID_RE, '<uuid>')
+        .replace(ISO_TS_RE, '<ts>')
+        .replace(CLOCK_RE, '<time>')
+        .replace(TMP_PATH_RE, '<tmp>')
+        .replace(HEX_SHA_RE, '<sha>')
+        .replace(DURATION_RE, '<dur>')
+        .replace(DIGITS_RE, '#')
+        .replace(/\s+/g, ' ')
+        .trim();
+}
+/**
+ * Locate the failing npm script in a gate log (see the module doc for why the
+ * LAST header names it). Null when the log carries no npm script header at all.
+ * Pure -- exported for direct testing.
+ */
+export function locateFailingStage(lines) {
+    const headers = [];
+    let lifecycle = null;
+    for (let index = 0; index < lines.length; index++) {
+        const line = lines[index];
+        const header = NPM_HEADER_RE.exec(line);
+        if (header)
+            headers.push({ index, name: header[1], script: header[2] });
+        const failed = lifecycle === null ? NPM_LIFECYCLE_FAILED_RE.exec(line) : null;
+        if (failed)
+            lifecycle = { script: failed[1], index };
+    }
+    const label = (name, script) => `${name} ${script}`.slice(0, STAGE_LABEL_MAX_CHARS);
+    if (lifecycle !== null) {
+        const failedAt = lifecycle;
+        const owner = headers.filter((h) => h.index < failedAt.index && h.script === failedAt.script).pop();
+        return owner
+            ? { label: label(owner.name, owner.script), detailStart: owner.index + 1 }
+            : { label: failedAt.script.slice(0, STAGE_LABEL_MAX_CHARS), detailStart: 0 };
+    }
+    const last = headers[headers.length - 1];
+    return last ? { label: label(last.name, last.script), detailStart: last.index + 1 } : null;
+}
+/**
+ * Derive the failure signature "<stage>#<hash>" of a rejected verify run.
+ *
+ * The hash covers the failing stage's normalized detail: the gating failing-test
+ * ids when there are any (so a test stage is keyed on WHICH tests fail, not on
+ * the ok-lines of whatever tests the targeted selector picked), otherwise the
+ * stage's own output lines. Detail lines are normalized (normalizeVolatileDetail),
+ * de-duplicated and sorted, so volatile values and interleaving order never make
+ * one failure look like two. A different stage -- or the same stage failing on a
+ * different file, function, claim or test -- yields a different signature.
+ *
+ * Null when underivable: an empty log, or one with neither an npm script header
+ * nor a parseable failing test. Pure -- no I/O.
+ */
+export function deriveFailureSignature(input) {
+    const text = typeof input.logText === 'string' ? input.logText.replace(ANSI_RE, '') : '';
+    if (text.trim().length === 0)
+        return null;
+    const cwd = CWD_HEADER_RE.exec(text)?.[1] ?? null;
+    const lines = text.split(/\r?\n/);
+    const stage = locateFailingStage(lines);
+    const segment = lines.slice(stage?.detailStart ?? 0);
+    const tests = input.failingTests && input.failingTests.length > 0
+        ? [...input.failingTests]
+        : [...parseFailingTests(segment.join('\n'))];
+    if (stage === null && tests.length === 0)
+        return null;
+    const rawDetail = tests.length > 0 ? tests : segment.filter((line) => !CHROME_RE.test(line));
+    const detail = [...new Set(rawDetail.map((line) => normalizeVolatileDetail(line, cwd)).filter((line) => line.length > 0))].sort();
+    const hash = createHash('sha256').update(detail.join('\n')).digest('hex').slice(0, DETAIL_HASH_CHARS);
+    return `${stage?.label ?? UNNAMED_STAGE_LABEL}#${hash}`;
+}
+// ---------------------------------------------------------------------------
+// Run-length record
+// ---------------------------------------------------------------------------
+/**
+ * Advance the run-length record by one rejection. A signature equal to the prior
+ * run's increments `consecutive`; a different one resets it to 1; a null
+ * (underivable) signature records 0 -- an unknown failure never counts as a
+ * repeat, and the next known signature starts a fresh run. Bounded by
+ * construction: one current + one previous signature, never a history. Pure.
+ */
+export function advanceSignatureRun(prior, signature) {
+    const previousSignature = prior?.signature ?? null;
+    if (signature === null)
+        return { signature: null, previousSignature, consecutive: 0 };
+    const consecutive = prior && prior.signature === signature && prior.consecutive >= 1
+        ? prior.consecutive + 1
+        : 1;
+    return { signature, previousSignature, consecutive };
+}
+/**
+ * The signature run recorded on a delivery's LATEST deterministic rejection
+ * (gate_state.verification), or null when none is usable: no verification
+ * detail (a guard-only, shortfall or evidence-unavailable gate_state), a legacy
+ * row written before signatures existed, or an underivable (null) signature.
+ * The stall detector falls back to the iteration cap on null. Pure.
+ */
+export function readRecordedSignatureRun(gateState) {
+    if (gateState == null || typeof gateState !== 'object')
+        return null;
+    const verification = gateState.verification;
+    if (verification == null || typeof verification !== 'object')
+        return null;
+    const v = verification;
+    if (typeof v.failureSignature !== 'string' || v.failureSignature.length === 0)
+        return null;
+    const run = parseSignatureRun(v.signatureRun);
+    if (!run || run.signature !== v.failureSignature || run.consecutive < 1)
+        return null;
+    return { signature: run.signature, consecutive: run.consecutive };
+}
+/** The full verification log when it exists on disk, else the captured tails. */
+export function readVerificationLogText(source) {
+    if (source.logPath && existsSync(source.logPath)) {
+        try {
+            return readFileSync(source.logPath, 'utf8');
+        }
+        catch (err) {
+            log.debug('verification log unreadable; using tails', { error: String(err?.message ?? err) });
+        }
+    }
+    return `${source.stdoutTail ?? ''}\n${source.stderrTail ?? ''}`;
+}
+export const defaultFailureSignatureDeps = () => ({
+    readLogText: readVerificationLogText,
+});
+/**
+ * Compute the signature fields a rejection's gate_state.verification carries.
+ * The run extends the one recorded on the delivery's PRIOR gate_state, whether
+ * live or carried forward across the coding -> verify advance
+ * (readVerificationHistory). Best-effort: an unreadable log yields a null
+ * signature, so consecutive is 0 and the detector falls back to the iteration
+ * cap. A prior gate_state with no usable run counts as none. A signature fault
+ * must never block the rejection write.
+ */
+export function computeFailureSignatureRecord(deliveryId, source, failingTests, priorGateState, deps) {
+    let failureSignature = null;
+    try {
+        failureSignature = deriveFailureSignature({ logText: deps.readLogText(source), failingTests });
+    }
+    catch (err) {
+        log.warn(`failure signature derivation failed for delivery ${deliveryId}:`, err.message);
+    }
+    const prior = readVerificationHistory(priorGateState).signatureRun ?? null;
+    return { failureSignature, signatureRun: advanceSignatureRun(prior, failureSignature) };
+}
+//# sourceMappingURL=failure-signature.js.map

package/dist/verify/failure-signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"failure-signature.js","sourceRoot":"","sources":["../../src/verify/failure-signature.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,sFAAsF;AACtF,8GAA8G;AAC9G,6DAA6D;AAC7D,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EACL,iBAAiB,EACjB,uBAAuB,GAExB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAErE,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAErD,yFAAyF;AACzF,MAAM,CAAC,MAAM,mBAAmB,GAAG,eAAe,CAAC;AAEnD,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,iGAAiG;AACjG,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;AACjF,MAAM,OAAO,GAAG,oEAAoE,CAAC;AACrF,MAAM,SAAS,GAAG,mFAAmF,CAAC;AACtG,MAAM,QAAQ,GAAG,oCAAoC,CAAC;AACtD,MAAM,WAAW,GAAG,8DAA8D,CAAC;AACnF,wFAAwF;AACxF,MAAM,UAAU,GAAG,sDAAsD,CAAC;AAC1E,MAAM,WAAW,GAAG,gFAAgF,CAAC;AACrG,MAAM,SAAS,GAAG,MAAM,CAAC;AAEzB,mFAAmF;AACnF,MAAM,aAAa,GAAG,4CAA4C,CAAC;AACnE,wEAAwE;AACxE,MAAM,uBAAuB,GAAG,uDAAuD,CAAC;AACxF,uDAAuD;AACvD,MAAM,SAAS,GAAG,qEAAqE,CAAC;AACxF,wFAAwF;AACxF,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAEzC;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAY,EAAE,MAAqB,IAAI;IAC7E,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAClC,IAAI,GAAG;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO,CAAC;SACL,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC;SAC1B,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;SAC1B,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC;SAC3B,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC;SAC7B,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC;SAC5B,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC;SAC7B,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;AACZ,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAwB;IACzD,MAAM,OAAO,GAA2D,EAAE,CAAC;IAC3E,IAAI,SAAS,GAA6C,IAAI,CAAC;IAC/D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxE,MAAM,MAAM,GAA2B,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtG,IAAI,MAAM;YAAE,SAAS,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;IACvD,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,MAAc,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;IACpG,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,SAAS,CAAC;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC;QACpG,OAAO,KAAK;YACV,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE;YAC1E,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IACjF,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7F,CAAC;AASD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAA4B;IACjE,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,IAAI,CAAC,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAC/D,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC;QACzB,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CACxB,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAC9F,CAAC,CAAC,IAAI,EAAE,CAAC;IACV,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACtG,OAAO,GAAG,KAAK,EAAE,KAAK,IAAI,mBAAmB,IAAI,IAAI,EAAE,CAAC;AAC1D,CAAC;AAED,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAsC,EACtC,SAAwB;IAExB,MAAM,iBAAiB,GAAG,KAAK,EAAE,SAAS,IAAI,IAAI,CAAC;IACnD,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IACtF,MAAM,WAAW,GAAG,KAAK,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC;QAClF,CAAC,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC;QACvB,CAAC,CAAC,CAAC,CAAC;IACN,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,WAAW,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,SAAkB;IACzD,IAAI,SAAS,IAAI,IAAI,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACpE,MAAM,YAAY,GAAI,SAAwC,CAAC,YAAY,CAAC;IAC5E,IAAI,YAAY,IAAI,IAAI,IAAI,OAAO,YAAY,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1E,MAAM,CAAC,GAAG,YAAsE,CAAC;IACjF,IAAI,OAAO,CAAC,CAAC,gBAAgB,KAAK,QAAQ,IAAI,CAAC,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3F,MAAM,GAAG,GAAG,iBAAiB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,KAAK,CAAC,CAAC,gBAAgB,IAAI,GAAG,CAAC,WAAW,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;AACpE,CAAC;AAaD,iFAAiF;AACjF,MAAM,UAAU,uBAAuB,CAAC,MAA6B;IACnE,IAAI,MAAM,CAAC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,0CAA0C,EAAE,EAAE,KAAK,EAAE,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IACD,OAAO,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,KAAK,MAAM,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;AAClE,CAAC;AAOD,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAyB,EAAE,CAAC,CAAC;IACtE,WAAW,EAAE,uBAAuB;CACrC,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,UAAU,6BAA6B,CAC3C,UAAkB,EAClB,MAA6B,EAC7B,YAA+B,EAC/B,cAAuB,EACvB,IAA0B;IAE1B,IAAI,gBAAgB,GAAkB,IAAI,CAAC;IAC3C,IAAI,CAAC;QACH,gBAAgB,GAAG,sBAAsB,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;IACjG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,oDAAoD,UAAU,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,KAAK,GAAG,uBAAuB,CAAC,cAAc,CAAC,CAAC,YAAY,IAAI,IAAI,CAAC;IAC3E,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAAE,CAAC;AAC1F,CAAC"}

package/dist/verify/shortfall-repeat.d.ts

@@ -18,14 +18,14 @@
  * that count reaches the threshold, the caller diagnoses a DEFECT IN THE CLAIM
  * (a modelling act for a human) instead of charging the team another re-work.
  *
- * SELF-CONTAINED / mock-safe: this module imports only a TYPE from the gate-state
- * vocabulary (erased at build) and NO daemon-core VALUE, so it never drags the
- * daemon-core mock-loader chain into a test. It is pure and deterministic --
- * tested directly, no DB.
+ * SELF-CONTAINED and mock-safe: this module imports only the gate-state vocabulary,
+ * which itself imports nothing, and NO daemon-core VALUE. It never drags the
+ * daemon-core mock-loader chain into a test. It is pure and deterministic, tested
+ * directly with no DB.
  *
  * @module verify/shortfall-repeat
  */
-import type { DeliveryGateState } from '../queries/delivery-gate-state.js';
+import { type DeliveryGateState } from '../queries/delivery-gate-state.js';
 import type { TargetShortfall } from './verify-restatement.js';
 /** The persisted repeat state carried in gate_state (shortfallReconciliation.repeat). */
 export interface ShortfallRepeat {
@@ -67,10 +67,13 @@ export declare const UNCLEARABLE_SHORTFALL_REPEAT_THRESHOLD = 3;
  */
 export declare function shortfallSignature(shortfalls: readonly TargetShortfall[]): string;
 /**
- * Read the repeat state persisted on a delivery's gate_state by the previous
- * shortfall iteration. Defensive over the loosely-typed `repeat` slot: returns
- * null when the field is absent or malformed (a first shortfall, or a legacy row
- * written before this field existed).
+ * Read the repeat state the previous shortfall iteration left on a delivery's
+ * gate_state. It is either LIVE (`shortfallReconciliation.repeat`, the gate is
+ * still that shortfall) or CARRIED forward under `verificationHistory` after the
+ * guard-pass coding -> verify advance cleared the gate. Before the carry
+ * existed, that clear wiped the record and every count restarted at 1.
+ * Defensive over the loosely typed slot: returns null when the record is absent
+ * or malformed (a first shortfall, a verify pass reset it, or a legacy row).
  */
 export declare function readPriorRepeat(priorGateState: DeliveryGateState | null | undefined): ShortfallRepeat | null;
 /**

package/dist/verify/shortfall-repeat.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shortfall-repeat.d.ts","sourceRoot":"","sources":["../../src/verify/shortfall-repeat.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE/D,yFAAyF;AACzF,MAAM,WAAW,eAAe;IAC9B,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,sCAAsC,IAAI,CAAC;AAMxD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,SAAS,eAAe,EAAE,GAAG,MAAM,CAKjF;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,cAAc,EAAE,iBAAiB,GAAG,IAAI,GAAG,SAAS,GAAG,eAAe,GAAG,IAAI,CAW5G;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACrC,cAAc,EAAE,iBAAiB,GAAG,IAAI,GAAG,SAAS,EACpD,UAAU,EAAE,SAAS,eAAe,EAAE,EACtC,SAAS,GAAE,MAA+C,GACzD;IAAE,MAAM,EAAE,eAAe,CAAC;IAAC,WAAW,EAAE,OAAO,CAAA;CAAE,CAKnD"}
+{"version":3,"file":"shortfall-repeat.d.ts","sourceRoot":"","sources":["../../src/verify/shortfall-repeat.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAA2B,KAAK,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AACpG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE/D,yFAAyF;AACzF,MAAM,WAAW,eAAe;IAC9B,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,sCAAsC,IAAI,CAAC;AAMxD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,SAAS,eAAe,EAAE,GAAG,MAAM,CAKjF;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,cAAc,EAAE,iBAAiB,GAAG,IAAI,GAAG,SAAS,GAAG,eAAe,GAAG,IAAI,CAE5G;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACrC,cAAc,EAAE,iBAAiB,GAAG,IAAI,GAAG,SAAS,EACpD,UAAU,EAAE,SAAS,eAAe,EAAE,EACtC,SAAS,GAAE,MAA+C,GACzD;IAAE,MAAM,EAAE,eAAe,CAAC;IAAC,WAAW,EAAE,OAAO,CAAA;CAAE,CAKnD"}