@telora/daemon 0.22.91 → 0.22.104

package/dist/verify/verification-config.js

@@ -4,10 +4,11 @@
 //   packages/daemon/src/verify/verification-default-on.test.ts,
 //   packages/daemon/src/verify/verification-manifest.test.ts,
 //   packages/daemon/src/verify/verification-posture.test.ts,
+//   packages/daemon/src/verify/verification-run-config-source.test.ts,
 //   packages/daemon/src/verify/verification-tick-product-scoping.test.ts
 // PINNED-BY-END
 import { loadEnvConfig } from '@telora/daemon-core';
-import { readVerifyManifest } from './verification-manifest.js';
+import { readVerifyManifest, resolveVerifyManifestPath, VERIFY_MANIFEST_FILENAME, } from './verification-manifest.js';
 /** Default timeout for the default-on deterministic run: 30 min (full build+test sweep). */
 export const DEFAULT_VERIFY_TIMEOUT_MS = 30 * 60 * 1000;
 /** Default max concurrent daemon-side verification runs. */
@@ -18,6 +19,37 @@ export const VERIFY_ENV = {
     TIMEOUT_MS: 'TELORA_DEFAULT_VERIFY_TIMEOUT_MS',
     MAX_CONCURRENT: 'TELORA_DEFAULT_VERIFY_MAX_CONCURRENT',
 };
+/**
+ * A source as one human-readable label, the form every surface prints (gate
+ * state, escalations, `telora-daemon status`), so the same layer reads the same
+ * everywhere. A manifest names its absolute path, which also answers WHICH
+ * checkout's manifest applied. The `default` label names the typed timeout
+ * default: a defaulted command is '' (verification disabled), never printed.
+ */
+export function formatVerifyConfigSource(src) {
+    switch (src.layer) {
+        case 'env':
+            return `env ${src.envVar}`;
+        case 'daemon.json':
+            return 'daemon.json defaultVerification';
+        case 'manifest':
+            return src.path;
+        case 'manifest_fallback':
+            return `${src.path} (fallback: the verified commit ships no telora.verify.json)`;
+        case 'default':
+            return `default (${DEFAULT_VERIFY_TIMEOUT_MS}ms)`;
+        case 'delivery':
+            return 'delivery verification config';
+    }
+}
+/** The first layer that supplies a value, else the fallback -- precedence and provenance in one read. */
+function pickLayer(layers, fallback) {
+    for (const layer of layers) {
+        if (layer.value !== undefined)
+            return { value: layer.value, source: layer.source };
+    }
+    return fallback;
+}
 /**
  * Resolve the default-on verification config from
  * env > operator file > repo manifest > typed default.
@@ -53,23 +85,78 @@ export function resolveDefaultVerification(config, env = process.env, readManife
         : undefined;
     // An explicit operator decline outranks the repo manifest (see docstring).
     const manifestCommand = file?.declined === true ? undefined : manifest?.command;
-    const command = (envCommand !== undefined && envCommand.trim() !== '' ? envCommand : undefined)
-        ?? fileCommand
-        ?? manifestCommand
-        ?? '';
-    const timeoutMs = envCfg.TELORA_DEFAULT_VERIFY_TIMEOUT_MS
-        ?? (typeof file?.timeoutMs === 'number' && file.timeoutMs > 0 ? file.timeoutMs : undefined)
-        ?? manifest?.timeoutMs
-        ?? DEFAULT_VERIFY_TIMEOUT_MS;
+    const daemonJson = { layer: 'daemon.json' };
+    const manifestSource = {
+        layer: 'manifest',
+        path: config.repoPath !== undefined ? resolveVerifyManifestPath(config.repoPath) : VERIFY_MANIFEST_FILENAME,
+    };
+    const command = pickLayer([
+        { value: envCommand !== undefined && envCommand.trim() !== '' ? envCommand : undefined, source: { layer: 'env', envVar: VERIFY_ENV.COMMAND } },
+        { value: fileCommand, source: daemonJson },
+        { value: manifestCommand, source: manifestSource },
+    ], { value: '', source: { layer: 'default' } });
+    const timeoutMs = pickLayer([
+        { value: envCfg.TELORA_DEFAULT_VERIFY_TIMEOUT_MS, source: { layer: 'env', envVar: VERIFY_ENV.TIMEOUT_MS } },
+        { value: typeof file?.timeoutMs === 'number' && file.timeoutMs > 0 ? file.timeoutMs : undefined, source: daemonJson },
+        { value: manifest?.timeoutMs, source: manifestSource },
+    ], { value: DEFAULT_VERIFY_TIMEOUT_MS, source: { layer: 'default' } });
     const maxConcurrent = envCfg.TELORA_DEFAULT_VERIFY_MAX_CONCURRENT
         ?? (typeof file?.maxConcurrent === 'number' && file.maxConcurrent > 0 ? file.maxConcurrent : undefined)
         ?? manifest?.maxConcurrent
         ?? DEFAULT_VERIFY_MAX_CONCURRENT;
     return {
-        command,
-        timeoutMs,
+        command: command.value,
+        timeoutMs: timeoutMs.value,
         maxConcurrent,
-        enabled: command.trim().length > 0,
+        enabled: command.value.trim().length > 0,
+        sources: { command: command.source, timeoutMs: timeoutMs.source },
+    };
+}
+/**
+ * Resolve the command + timeout a deterministic run APPLIES, from the code it
+ * runs in: env > operator block > the manifest at `runPath` > the manifest at
+ * `source.repoPath` (recorded fallback) > typed default.
+ *
+ * The fallback is taken ONLY when the code at `runPath` ships no manifest, and
+ * it is recorded on the result (`manifestFallback`; `manifestPath` names the
+ * repoPath manifest, `verifiedManifestPath` where the verified code was read), so
+ * a value from another checkout is never applied silently. A MALFORMED manifest
+ * at `runPath` throws (readVerifyManifest names the file) and never falls back:
+ * the branch declared something unreadable, and substituting the operator
+ * checkout's value is exactly the silent swap this resolution removes.
+ */
+export function resolveAppliedVerificationConfig(source, runPath, env = process.env, readManifest = readVerifyManifest) {
+    const verifiedManifestPath = resolveVerifyManifestPath(runPath);
+    const read = { fallback: false };
+    const readVerifiedThenFallback = (path) => {
+        const own = readManifest(path);
+        if (own !== undefined) {
+            read.manifestPath = verifiedManifestPath;
+            return own;
+        }
+        if (!source.repoPath || resolveVerifyManifestPath(source.repoPath) === verifiedManifestPath)
+            return undefined;
+        const fallback = readManifest(source.repoPath);
+        if (fallback !== undefined) {
+            read.manifestPath = resolveVerifyManifestPath(source.repoPath);
+            read.fallback = true;
+        }
+        return fallback;
+    };
+    const resolved = resolveDefaultVerification({ defaultVerification: source.defaultVerification, repoPath: runPath }, env, readVerifiedThenFallback);
+    // The resolver named the manifest it was ASKED for (the verified checkout's);
+    // when the fallback answered instead, the label must name the repoPath manifest
+    // that actually supplied the timeout.
+    const timeoutSource = resolved.sources.timeoutMs.layer === 'manifest' && read.fallback && read.manifestPath !== undefined
+        ? { layer: 'manifest_fallback', path: read.manifestPath, verifiedPath: verifiedManifestPath }
+        : resolved.sources.timeoutMs;
+    return {
+        command: resolved.command,
+        timeoutMs: resolved.timeoutMs,
+        timeoutSource: formatVerifyConfigSource(timeoutSource),
+        verifiedManifestPath,
+        ...(read.manifestPath !== undefined ? { manifestPath: read.manifestPath } : {}),
+        ...(read.fallback ? { manifestFallback: true } : {}),
     };
 }
 /**
@@ -116,6 +203,7 @@ export function buildProductPostureMap(products, globalBlock, env = process.env,
             posture: deriveVerificationPosture(scoped, env, readManifest),
             command: resolved.command,
             timeoutMs: resolved.timeoutMs,
+            timeoutSource: formatVerifyConfigSource(resolved.sources.timeoutMs),
         };
     }
     return map;

package/dist/verify/verification-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"verification-config.js","sourceRoot":"","sources":["../../src/verify/verification-config.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,+EAA+E;AAC/E,wEAAwE;AACxE,gEAAgE;AAChE,8DAA8D;AAC9D,6DAA6D;AAC7D,yEAAyE;AACzE,gBAAgB;AAoChB,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAA6B,MAAM,4BAA4B,CAAC;AAE3F,4FAA4F;AAC5F,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAExD,4DAA4D;AAC5D,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAE/C,2DAA2D;AAC3D,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,OAAO,EAAE,+BAA+B;IACxC,UAAU,EAAE,kCAAkC;IAC9C,cAAc,EAAE,sCAAsC;CAC9C,CAAC;AA+BX;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAA+B,EAC/B,MAAyB,OAAO,CAAC,GAAG,EACpC,eAAqC,kBAAkB;IAEvD,MAAM,IAAI,GAAG,MAAM,CAAC,mBAAmB,CAAC;IACxC,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAE/C,MAAM,UAAU,GAAG,MAAM,CAAC,6BAA6B,CAAC;IACxD,MAAM,WAAW,GAAG,OAAO,IAAI,EAAE,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;QACjF,CAAC,CAAC,IAAI,CAAC,OAAO;QACd,CAAC,CAAC,SAAS,CAAC;IACd,2EAA2E;IAC3E,MAAM,eAAe,GAAG,IAAI,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC;IAChF,MAAM,OAAO,GACX,CAAC,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;WAC5E,WAAW;WACX,eAAe;WACf,EAAE,CAAC;IAER,MAAM,SAAS,GACb,MAAM,CAAC,gCAAgC;WACpC,CAAC,OAAO,IAAI,EAAE,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;WACxF,QAAQ,EAAE,SAAS;WACnB,yBAAyB,CAAC;IAE/B,MAAM,aAAa,GACjB,MAAM,CAAC,oCAAoC;WACxC,CAAC,OAAO,IAAI,EAAE,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;WACpG,QAAQ,EAAE,aAAa;WACvB,6BAA6B,CAAC;IAEnC,OAAO;QACL,OAAO;QACP,SAAS;QACT,aAAa;QACb,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;KACnC,CAAC;AACJ,CAAC;AAeD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAA+B,EAC/B,MAAyB,OAAO,CAAC,GAAG,EACpC,eAAqC,kBAAkB;IAEvD,MAAM,QAAQ,GAAG,0BAA0B,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;IACvE,IAAI,QAAQ,CAAC,OAAO;QAAE,OAAO,YAAY,CAAC;IAC1C,IAAI,MAAM,CAAC,mBAAmB,EAAE,QAAQ,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC;IACrE,OAAO,cAAc,CAAC;AACxB,CAAC;AAWD;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAA2G,EAC3G,WAAkD,EAClD,MAAyB,OAAO,CAAC,GAAG,EACpC,eAAqC,kBAAkB;IAEvD,MAAM,GAAG,GAA+C,EAAE,CAAC;IAC3D,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,0EAA0E;QAC1E,iEAAiE;QACjE,MAAM,MAAM,GAA4B;YACtC,mBAAmB,EAAE,CAAC,CAAC,mBAAmB,IAAI,WAAW;YACzD,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC;QACF,MAAM,QAAQ,GAAG,0BAA0B,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;QACvE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG;YACV,OAAO,EAAE,yBAAyB,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,CAAC;YAC7D,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"verification-config.js","sourceRoot":"","sources":["../../src/verify/verification-config.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,+EAA+E;AAC/E,wEAAwE;AACxE,gEAAgE;AAChE,8DAA8D;AAC9D,6DAA6D;AAC7D,uEAAuE;AACvE,yEAAyE;AACzE,gBAAgB;AAoDhB,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,wBAAwB,GAEzB,MAAM,4BAA4B,CAAC;AAGpC,4FAA4F;AAC5F,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAExD,4DAA4D;AAC5D,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAE/C,2DAA2D;AAC3D,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,OAAO,EAAE,+BAA+B;IACxC,UAAU,EAAE,kCAAkC;IAC9C,cAAc,EAAE,sCAAsC;CAC9C,CAAC;AAqBX;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAuB;IAC9D,QAAQ,GAAG,CAAC,KAAK,EAAE,CAAC;QAClB,KAAK,KAAK;YACR,OAAO,OAAO,GAAG,CAAC,MAAM,EAAE,CAAC;QAC7B,KAAK,aAAa;YAChB,OAAO,iCAAiC,CAAC;QAC3C,KAAK,UAAU;YACb,OAAO,GAAG,CAAC,IAAI,CAAC;QAClB,KAAK,mBAAmB;YACtB,OAAO,GAAG,GAAG,CAAC,IAAI,8DAA8D,CAAC;QACnF,KAAK,SAAS;YACZ,OAAO,YAAY,yBAAyB,KAAK,CAAC;QACpD,KAAK,UAAU;YACb,OAAO,8BAA8B,CAAC;IAC1C,CAAC;AACH,CAAC;AAsBD,yGAAyG;AACzG,SAAS,SAAS,CAChB,MAAwC,EACxC,QAAkD;IAElD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IACrF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAmBD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAA+B,EAC/B,MAAyB,OAAO,CAAC,GAAG,EACpC,eAAqC,kBAAkB;IAEvD,MAAM,IAAI,GAAG,MAAM,CAAC,mBAAmB,CAAC;IACxC,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAE/C,MAAM,UAAU,GAAG,MAAM,CAAC,6BAA6B,CAAC;IACxD,MAAM,WAAW,GAAG,OAAO,IAAI,EAAE,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;QACjF,CAAC,CAAC,IAAI,CAAC,OAAO;QACd,CAAC,CAAC,SAAS,CAAC;IACd,2EAA2E;IAC3E,MAAM,eAAe,GAAG,IAAI,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC;IAChF,MAAM,UAAU,GAAuB,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IAChE,MAAM,cAAc,GAAuB;QACzC,KAAK,EAAE,UAAU;QACjB,IAAI,EAAE,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,yBAAyB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,wBAAwB;KAC5G,CAAC;IACF,MAAM,OAAO,GAAG,SAAS,CAAS;QAChC,EAAE,KAAK,EAAE,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,OAAO,EAAE,EAAE;QAC9I,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE;QAC1C,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,cAAc,EAAE;KACnD,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAEhD,MAAM,SAAS,GAAG,SAAS,CAAS;QAClC,EAAE,KAAK,EAAE,MAAM,CAAC,gCAAgC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,UAAU,EAAE,EAAE;QAC3G,EAAE,KAAK,EAAE,OAAO,IAAI,EAAE,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE;QACrH,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE;KACvD,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAEvE,MAAM,aAAa,GACjB,MAAM,CAAC,oCAAoC;WACxC,CAAC,OAAO,IAAI,EAAE,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;WACpG,QAAQ,EAAE,aAAa;WACvB,6BAA6B,CAAC;IAEnC,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,KAAK;QACtB,SAAS,EAAE,SAAS,CAAC,KAAK;QAC1B,aAAa;QACb,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACxC,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,EAAE;KAClE,CAAC;AACJ,CAAC;AAKD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,gCAAgC,CAC9C,MAA+B,EAC/B,OAAe,EACf,MAAyB,OAAO,CAAC,GAAG,EACpC,eAAqC,kBAAkB;IAEvD,MAAM,oBAAoB,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,IAAI,GAAiD,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC/E,MAAM,wBAAwB,GAAyB,CAAC,IAAI,EAAE,EAAE;QAC9D,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC,YAAY,GAAG,oBAAoB,CAAC;YACzC,OAAO,GAAG,CAAC;QACb,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,yBAAyB,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,oBAAoB;YAAE,OAAO,SAAS,CAAC;QAC9G,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,YAAY,GAAG,yBAAyB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC/D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,0BAA0B,CACzC,EAAE,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,EAAE,QAAQ,EAAE,OAAO,EAAE,EACtE,GAAG,EACH,wBAAwB,CACzB,CAAC;IACF,8EAA8E;IAC9E,gFAAgF;IAChF,sCAAsC;IACtC,MAAM,aAAa,GACjB,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,KAAK,UAAU,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;QACjG,CAAC,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,oBAAoB,EAAE;QAC7F,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;IACjC,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,aAAa,EAAE,wBAAwB,CAAC,aAAa,CAAC;QACtD,oBAAoB;QACpB,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC;AACJ,CAAC;AAeD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAA+B,EAC/B,MAAyB,OAAO,CAAC,GAAG,EACpC,eAAqC,kBAAkB;IAEvD,MAAM,QAAQ,GAAG,0BAA0B,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;IACvE,IAAI,QAAQ,CAAC,OAAO;QAAE,OAAO,YAAY,CAAC;IAC1C,IAAI,MAAM,CAAC,mBAAmB,EAAE,QAAQ,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC;IACrE,OAAO,cAAc,CAAC;AACxB,CAAC;AAaD;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAA2G,EAC3G,WAAkD,EAClD,MAAyB,OAAO,CAAC,GAAG,EACpC,eAAqC,kBAAkB;IAEvD,MAAM,GAAG,GAA+C,EAAE,CAAC;IAC3D,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,0EAA0E;QAC1E,iEAAiE;QACjE,MAAM,MAAM,GAA4B;YACtC,mBAAmB,EAAE,CAAC,CAAC,mBAAmB,IAAI,WAAW;YACzD,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC;QACF,MAAM,QAAQ,GAAG,0BAA0B,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;QACvE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG;YACV,OAAO,EAAE,yBAAyB,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,CAAC;YAC7D,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,aAAa,EAAE,wBAAwB,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;SACpE,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/verify/verification-default-on.d.ts

@@ -18,6 +18,7 @@ import { type ProductEntry } from '@telora/daemon-core';
 import type { DaemonConfig } from '../types/index.js';
 import type { PendingVerification } from '../queries/verification.js';
 import { type ResolvedDefaultVerification } from './verification-config.js';
+import { type VerifyManifest, type VerifyManifestReader } from './verification-manifest.js';
 import type { getActiveFocuses } from '../queries/focus-discovery.js';
 import type { getFocusDeliveries } from '../queries/focuses.js';
 /**
@@ -28,6 +29,19 @@ import type { getFocusDeliveries } from '../queries/focuses.js';
 export interface DefaultOnScanDeps {
     getActiveFocuses: typeof getActiveFocuses;
     getFocusDeliveries: typeof getFocusDeliveries;
+    /**
+     * The focus worktree's current HEAD sha, read to keep a delivery whose verify
+     * FAILED from re-running on the same unchanged commit. A null read keeps a
+     * recorded failure suppressed: only a KNOWN different commit re-arms it.
+     */
+    resolveFocusHeadSha?: (focusId: string) => string | null;
+    /**
+     * The telora.verify.json the focus's judged commit (its worktree HEAD) ships,
+     * read when the product repoPath resolves no command; null when the focus has
+     * no worktree, `unreadable` when git could not answer. Defaults to a git read
+     * of that commit.
+     */
+    readJudgedCommitManifest?: (focusId: string) => JudgedCommitRead | null;
 }
 /**
  * Counting semaphore capping concurrent daemon-side verification runs.
@@ -74,11 +88,17 @@ export interface ProductVerificationScope {
     productConfig: DaemonConfig;
     /**
      * The resolved default-on config, or `undefined` when resolution FAILED (a
-     * malformed repo manifest). Undefined means "this product's default-on gate is
-     * off this tick" -- never "verification is disabled here", which is what a
-     * silent degrade to '' would have said.
+     * malformed repo manifest). Undefined means "the repoPath gate is off this
+     * tick" -- never "verification is disabled here", which is what a silent
+     * degrade to '' would have said.
      */
     resolved: ResolvedDefaultVerification | undefined;
+    /**
+     * Present only beside an undefined `resolved`: what the default-on scan runs
+     * with instead -- no command, so each delivery is armed by its judged commit
+     * alone. Absent when even that resolution failed.
+     */
+    judgedCommitOnly?: ResolvedDefaultVerification;
 }
 /**
  * Resolve the default-on verification config for every product, from each
@@ -100,12 +120,21 @@ export interface ProductVerificationScope {
  * product including healthy ones, so it is contained HERE: logged at ERROR
  * naming the product and the manifest path (every tick -- a persistent,
  * operator-visible state, never a debug line), and that product's `resolved`
- * comes back `undefined` so its default-on scan stays off while other products
- * keep gating. The product's EXPLICIT-method deliveries still verify: they carry
+ * comes back `undefined`: it contributes no cap while other products keep
+ * gating. The product's EXPLICIT-method deliveries still verify: they carry
  * their own command on the delivery row, so a repo-root manifest typo has no
  * bearing on them and must not disarm them.
+ *
+ * Nor does the typo disarm a branch that ships a working gate. repoPath is the
+ * operator's checkout, which may lag the code under verification, so the product
+ * is resolved again with that manifest set aside (`judgedCommitOnly`) and its
+ * scan still arms each delivery from the manifest its judged commit ships. That
+ * resolution carries no command even when env or daemon.json declare one: a
+ * delivery whose commit ships no manifest would fall back at dispatch to the
+ * broken repoPath file and fail on it, so until the file is fixed only
+ * branch-declared gates arm.
  */
-export declare function resolveProductVerificationScopes(config: DaemonConfig, resolve: (c: DaemonConfig) => ResolvedDefaultVerification): ProductVerificationScope[];
+export declare function resolveProductVerificationScopes(config: DaemonConfig, resolve: (c: DaemonConfig, readManifest?: VerifyManifestReader) => ResolvedDefaultVerification): ProductVerificationScope[];
 /**
  * Resolve the ONE daemon-wide concurrency cap for the shared semaphore.
  *
@@ -135,7 +164,7 @@ export declare function resolveProductVerificationScopes(config: DaemonConfig, r
  * conservative floor, not a stale limit from a previous tick.
  */
 export declare function resolveDaemonWideVerifyCap(scopes: readonly ProductVerificationScope[]): number;
-/** Test-only: reset the default-on re-run guard. */
+/** Test-only: reset the default-on re-run guards (status- and HEAD-keyed). */
 export declare function __resetDefaultOnGuardForTests(): void;
 /** Test-only: snapshot of the default-on re-run guard. */
 export declare function __getDefaultOnGuardForTests(): ReadonlySet<string>;
@@ -143,18 +172,80 @@ export declare function __getDefaultOnGuardForTests(): ReadonlySet<string>;
 export declare function markDefaultOnRan(deliveryId: string): void;
 /** Test-only alias for markDefaultOnRan. */
 export declare function __markDefaultOnRanForTests(deliveryId: string): void;
+/** The slice of a verification result {@link noteDefaultOnResult} reads. */
+export interface DefaultOnResultFacts {
+    outcome: string;
+    exitCode?: number | null;
+    timedOut?: boolean;
+    verifiedSha?: string;
+    checkoutUnavailable?: boolean;
+}
+/**
+ * Dispatch-result bookkeeping for a default-on run:
+ *  - no checkout could be made -> un-mark, so the next tick retries (the run
+ *    never happened; no verdict exists to guard);
+ *  - the gate command FAILED at a known sha (non-zero exit, not a timeout, final
+ *    outcome failed) -> record the sha so that commit is not re-verified;
+ *  - a pass -> forget any recorded failure.
+ */
+export declare function noteDefaultOnResult(deliveryId: string, result: DefaultOnResultFacts): void;
+/**
+ * What the commit a delivery is judged on declares in telora.verify.json, read
+ * from git AT that sha -- never the worktree's files, which may hold edits the
+ * verify never sees. No `manifest` and no `malformed` means the commit ships none.
+ */
+export interface JudgedCommitManifest {
+    sha: string;
+    /** Where the manifest sits in the focus worktree (the path a source label names). */
+    manifestPath: string;
+    manifest?: VerifyManifest;
+    /** The reader's error when the committed file exists but cannot be used. */
+    malformed?: string;
+}
+/**
+ * Git could not say what the judged commit ships (a failed rev-parse, ls-tree or
+ * show). That is neither "ships none" nor malformed -- it is no answer -- so it
+ * is never remembered: the next tick asks again.
+ */
+export interface JudgedCommitUnreadable {
+    unreadable: string;
+}
+export type JudgedCommitRead = JudgedCommitManifest | JudgedCommitUnreadable;
+type GitRun = (args: string[], cwd: string) => {
+    success: boolean;
+    output: string;
+    error?: string;
+};
+/**
+ * Build the judged-commit manifest reader over a focus -> worktree lookup. A file
+ * is immutable at a sha, so each worktree's last read is reused while its HEAD
+ * is unchanged rather than re-running git every tick. Only reads git answered
+ * are kept; an unreadable one is retried on the next call.
+ */
+export declare function buildJudgedCommitManifestReader(resolveWorktreePath?: (focusId: string) => string | null, runGit?: GitRun): (focusId: string) => JudgedCommitRead | null;
 /**
  * Discover deliveries that should receive a DEFAULT-ON deterministic run: in
  * `verify` status, anchored to an injection, with no explicit verification
  * method (so not already returned by getPendingVerifications), not in a
- * read-only audit focus (those are discovery-only and never run a suite), and
- * not already run this verify-entry (steady-state guard).
+ * read-only audit focus (those are discovery-only and never run a suite), not
+ * already run this verify-entry (steady-state guard), and not failed on the
+ * focus's unchanged HEAD (HEAD-keyed guard).
  *
  * Synthesizes a `deterministic` PendingVerification carrying the resolved
- * config-default command + timeout. Returns [] when the default-on path is
- * disabled (no command configured) so the feature is inert until opted in.
+ * config-default command + timeout and a `defaultOnSource` marker. Those values
+ * are PROVISIONAL -- resolved against the product repoPath, which may lag the
+ * branch -- and a run on a detached checkout re-resolves both from the verified
+ * code (verify/verification-checkout.ts).
+ *
+ * Arming does not wait on repoPath either. When no command resolves there, each
+ * delivery is armed from the telora.verify.json its judged commit ships
+ * (armFromJudgedCommit), so a branch that introduces the gate is verified on its
+ * next run. An operator's `declined` marker is the exception: it suppresses the
+ * repo manifest, and no branch overturns it. With no command anywhere the
+ * feature stays inert.
  *
  * `config` must be product-scoped (config.productId identifies the product).
  */
 export declare function collectDefaultOnVerifications(config: DaemonConfig, resolved: ResolvedDefaultVerification, explicitDeliveryIds: ReadonlySet<string>, deps: DefaultOnScanDeps): Promise<PendingVerification[]>;
+export {};
 //# sourceMappingURL=verification-default-on.d.ts.map

package/dist/verify/verification-default-on.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verification-default-on.d.ts","sourceRoot":"","sources":["../../src/verify/verification-default-on.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAiC,KAAK,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAG3G,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAMhE;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;CAC/C;AAMD;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;gBAErC,KAAK,EAAE,MAAM;IAKzB,mFAAmF;IACnF,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAavB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ9B,OAAO,IAAI,IAAI;IASf,2DAA2D;IAC3D,gBAAgB,IAAI,MAAM;CAG3B;AAED,8EAA8E;AAC9E,eAAO,MAAM,qBAAqB,uBAA+B,CAAC;AAElE,oDAAoD;AACpD,wBAAgB,kCAAkC,IAAI;IAAE,gBAAgB,IAAI,MAAM,CAAC;IAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAE9G;AAMD;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,YAAY,CAAC;IACtB,2FAA2F;IAC3F,aAAa,EAAE,YAAY,CAAC;IAC5B;;;;;OAKG;IACH,QAAQ,EAAE,2BAA2B,GAAG,SAAS,CAAC;CACnD;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,gCAAgC,CAC9C,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,CAAC,CAAC,EAAE,YAAY,KAAK,2BAA2B,GACxD,wBAAwB,EAAE,CAe5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,SAAS,wBAAwB,EAAE,GAC1C,MAAM,CAMR;AAmBD,oDAAoD;AACpD,wBAAgB,6BAA6B,IAAI,IAAI,CAEpD;AAED,0DAA0D;AAC1D,wBAAgB,2BAA2B,IAAI,WAAW,CAAC,MAAM,CAAC,CAEjE;AAED,oFAAoF;AACpF,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAEzD;AAED,4CAA4C;AAC5C,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAEnE;AAMD;;;;;;;;;;;;GAYG;AACH,wBAAsB,6BAA6B,CACjD,MAAM,EAAE,YAAY,EACpB,QAAQ,EAAE,2BAA2B,EACrC,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAAC,EACxC,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,mBAAmB,EAAE,CAAC,CA4DhC"}
+{"version":3,"file":"verification-default-on.d.ts","sourceRoot":"","sources":["../../src/verify/verification-default-on.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAGL,KAAK,2BAA2B,EACjC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAIL,KAAK,cAAc,EAEnB,KAAK,oBAAoB,EAC1B,MAAM,4BAA4B,CAAC;AAGpC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAehE;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACzD;;;;;OAKG;IACH,wBAAwB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,gBAAgB,GAAG,IAAI,CAAC;CACzE;AAMD;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,qBAAqB;IAChC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;gBAErC,KAAK,EAAE,MAAM;IAKzB,mFAAmF;IACnF,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAavB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ9B,OAAO,IAAI,IAAI;IASf,2DAA2D;IAC3D,gBAAgB,IAAI,MAAM;CAG3B;AAED,8EAA8E;AAC9E,eAAO,MAAM,qBAAqB,uBAA+B,CAAC;AAElE,oDAAoD;AACpD,wBAAgB,kCAAkC,IAAI;IAAE,gBAAgB,IAAI,MAAM,CAAC;IAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAE9G;AAMD;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,YAAY,CAAC;IACtB,2FAA2F;IAC3F,aAAa,EAAE,YAAY,CAAC;IAC5B;;;;;OAKG;IACH,QAAQ,EAAE,2BAA2B,GAAG,SAAS,CAAC;IAClD;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,2BAA2B,CAAC;CAChD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAgB,gCAAgC,CAC9C,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,EAAE,oBAAoB,KAAK,2BAA2B,GAC7F,wBAAwB,EAAE,CAe5B;AAsBD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,SAAS,wBAAwB,EAAE,GAC1C,MAAM,CAMR;AAoDD,8EAA8E;AAC9E,wBAAgB,6BAA6B,IAAI,IAAI,CAIpD;AAED,0DAA0D;AAC1D,wBAAgB,2BAA2B,IAAI,WAAW,CAAC,MAAM,CAAC,CAEjE;AAED,oFAAoF;AACpF,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAEzD;AAED,4CAA4C;AAC5C,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAEnE;AAED,4EAA4E;AAC5E,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAW1F;AAkCD;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,qFAAqF;IACrF,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,gBAAgB,GAAG,oBAAoB,GAAG,sBAAsB,CAAC;AAE7E,KAAK,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,KAAK;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAkCpG;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAC7C,mBAAmB,GAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAmE,EACtH,MAAM,GAAE,MAAmB,GAC1B,CAAC,OAAO,EAAE,MAAM,KAAK,gBAAgB,GAAG,IAAI,CAgB9C;AAgDD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,6BAA6B,CACjD,MAAM,EAAE,YAAY,EACpB,QAAQ,EAAE,2BAA2B,EACrC,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAAC,EACxC,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,mBAAmB,EAAE,CAAC,CA6EhC"}