@telora/daemon 0.22.97 → 0.22.131

package/dist/verify/commit-verdict-record.js

@@ -0,0 +1,297 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/completion/mid-flight-merge-gate.test.ts,
+//   packages/daemon/src/completion/review-exit-verdict-gate.test.ts,
+//   packages/daemon/src/completion/teardown-merge-gate.test.ts,
+//   packages/daemon/src/focus/listener-product-poll.test.ts,
+//   packages/daemon/src/integration/delivery-gate-write-interleaving.test.ts,
+//   packages/daemon/src/integration/explicit-gate-identity-unreadable.test.ts,
+//   packages/daemon/src/integration/explicit-gate-outcome-restart.test.ts,
+//   packages/daemon/src/integration/explicit-verdict-departure-during-removal.test.ts,
+//   packages/daemon/src/integration/explicit-verdict-invalidation-restart.test.ts,
+//   packages/daemon/src/integration/explicit-verdict-reuse.test.ts,
+//   packages/daemon/src/integration/focus-commit-verdict-scenario.test.ts,
+//   packages/daemon/src/integration/review-rework-resume-verdict.test.ts,
+//   packages/daemon/src/integration/verification-rework-resume-verdict.test.ts,
+//   packages/daemon/src/merge/resolved-conflict-merge-gate.test.ts,
+//   packages/daemon/src/spawn/prompt-assembly-resume-verdict.test.ts,
+//   packages/daemon/src/verify/commit-gate-configured.test.ts,
+//   packages/daemon/src/verify/commit-verdict-record.test.ts,
+//   packages/daemon/src/verify/gate-verdict-source.test.ts,
+//   packages/daemon/src/verify/verification-commit-sharing.test.ts
+// PINNED-BY-END
+/**
+ * The deterministic gate verdict for a focus commit, recorded durably.
+ *
+ * Every delivery on a focus is judged on the same focus-branch HEAD, and a gate
+ * on an unchanged tree renders the same verdict -- so the verdict belongs to the
+ * COMMIT, not to whichever delivery's dispatch happened to run it. Before this
+ * record only a failed sha was durable (per delivery, gate_state
+ * verificationHistory.failedAtSha) and a pass was merely the absence of one, so a
+ * sibling delivery, a status round trip, or a daemon restart at an already-judged
+ * commit paid for the whole gate again.
+ *
+ * One file per (product, focus, sha, gate) under the global state dir, written
+ * atomically (temp + rename) so a reader never sees a torn record. A verdict
+ * under one command or timeout says nothing about another, and one commit can
+ * carry verdicts of several gates (a sibling's explicit command beside the
+ * default-on gate), so no gate's record overwrites another's. A reader that names
+ * a gate gets only that gate's verdict -- what every routing decision does; one
+ * that names none (the team-facing verdict summary) gets the newest recorded for
+ * the commit. A record written before files were keyed by gate is still read, and
+ * still only for the gate it carries.
+ *
+ * What is NOT a verdict, and so is never written: a run killed by its timeout,
+ * a run that could not get a checkout (or whose installs moved mid-run), a run
+ * whose config was unresolvable (nothing ran), a run the attribution routed to
+ * instrument-fault re-work (the gate could not attribute it), and any run with no
+ * judged commit. Those leave the commit unjudged, so the next tick asks again.
+ *
+ * @module commit-verdict-record
+ */
+import { createHash } from 'node:crypto';
+import { mkdirSync, readdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { basename, resolve } from 'node:path';
+import { resolveGlobalStateDir } from '../shell/daemon-process.js';
+import { judgedFailedSha } from '../queries/delivery-gate-state.js';
+import { DEFAULT_VERIFICATION_TIMEOUT_MS } from './verification-deterministic.js';
+import { createLogger } from '../shell/log.js';
+const log = createLogger({ module: 'verification' });
+function verdictDir() {
+    return resolve(resolveGlobalStateDir(), 'verification-verdicts');
+}
+/**
+ * The record file for a (product, focus, sha, gate); without a gate, the gate-less
+ * file records were written to before they were keyed by gate. `dir` defaults to
+ * the global state dir. Exported for tests.
+ */
+export function commitVerdictPath(productId, focusId, sha, dir = verdictDir(), gate) {
+    const base = `${productId}-${focusId}-${sha}`;
+    return resolve(dir, `${gate ? `${base}-${gateKey(gate)}` : base}.json`.replace(/[^a-zA-Z0-9._-]/g, '_'));
+}
+/** A gate's key in a record file name: its command + timeout, hashed. */
+function gateKey(gate) {
+    return createHash('sha256').update(JSON.stringify([gate.command, gate.timeoutMs])).digest('hex').slice(0, 12);
+}
+const SHA_RE = /^[0-9a-f]{7,64}$/i;
+function isStringArray(value) {
+    return Array.isArray(value) && value.every((s) => typeof s === 'string');
+}
+function optionalString(value) {
+    return typeof value === 'string' ? value : undefined;
+}
+/** Validate a parsed record; null when it is not a well-formed verdict. */
+function parseVerdict(raw) {
+    if (typeof raw !== 'object' || raw === null)
+        return null;
+    const r = raw;
+    const gate = r.gate;
+    if (typeof r.productId !== 'string' || typeof r.focusId !== 'string' || typeof r.judgedDeliveryId !== 'string')
+        return null;
+    if (typeof r.sha !== 'string' || !SHA_RE.test(r.sha))
+        return null;
+    if (r.outcome !== 'passed' && r.outcome !== 'failed')
+        return null;
+    if (typeof gate?.command !== 'string' || typeof gate.timeoutMs !== 'number')
+        return null;
+    if (typeof r.recordedAt !== 'string')
+        return null;
+    const rationale = optionalString(r.rationale);
+    const failedStage = optionalString(r.failedStage);
+    return {
+        productId: r.productId,
+        focusId: r.focusId,
+        sha: r.sha,
+        outcome: r.outcome,
+        gate: { command: gate.command, timeoutMs: gate.timeoutMs },
+        exitCode: typeof r.exitCode === 'number' ? r.exitCode : null,
+        judgedDeliveryId: r.judgedDeliveryId,
+        recordedAt: r.recordedAt,
+        ...(rationale !== undefined ? { rationale } : {}),
+        ...(failedStage !== undefined ? { failedStage } : {}),
+        ...(isStringArray(r.preExistingStages) ? { preExistingStages: r.preExistingStages } : {}),
+        ...(isStringArray(r.newFailures) ? { newFailures: r.newFailures } : {}),
+        ...(isStringArray(r.preExisting) ? { preExisting: r.preExisting } : {}),
+        ...(typeof r.logPath === 'string' ? { logPath: r.logPath } : {}),
+        ...(typeof r.stdoutTail === 'string' ? { stdoutTail: r.stdoutTail } : {}),
+        ...(typeof r.stderrTail === 'string' ? { stderrTail: r.stderrTail } : {}),
+        ...(typeof r.appliedConfig === 'object' && r.appliedConfig !== null
+            ? { appliedConfig: r.appliedConfig }
+            : {}),
+    };
+}
+/**
+ * The recorded verdict for a focus commit, or null on a miss, an unreadable or
+ * malformed file, or a record for another commit. With `gate`: only a verdict
+ * rendered under that gate. Without: the newest verdict recorded for the commit
+ * under any gate.
+ */
+export function readCommitVerdict(productId, focusId, sha, opts = {}) {
+    const dir = opts.dir ?? verdictDir();
+    const gateless = commitVerdictPath(productId, focusId, sha, dir);
+    const paths = opts.gate
+        ? [commitVerdictPath(productId, focusId, sha, dir, opts.gate), gateless]
+        : [gateless, ...gateKeyedPaths(gateless, dir)];
+    let newest = null;
+    for (const path of paths) {
+        const parsed = readVerdictFile(path);
+        if (!parsed || parsed.productId !== productId || parsed.focusId !== focusId || parsed.sha !== sha)
+            continue;
+        if (opts.gate && (parsed.gate.command !== opts.gate.command || parsed.gate.timeoutMs !== opts.gate.timeoutMs))
+            continue;
+        if (opts.gate)
+            return parsed;
+        if (newest === null || parsed.recordedAt > newest.recordedAt)
+            newest = parsed;
+    }
+    return newest;
+}
+/** A parsed record file, or null when it is missing, unreadable, or malformed. */
+function readVerdictFile(path) {
+    try {
+        return parseVerdict(JSON.parse(readFileSync(path, 'utf8')));
+    }
+    catch {
+        return null;
+    }
+}
+/** Every gate-keyed record file of the commit whose gate-less record file is `gateless`. */
+function gateKeyedPaths(gateless, dir) {
+    const prefix = `${basename(gateless, '.json')}-`;
+    try {
+        return readdirSync(dir).filter((name) => name.startsWith(prefix) && name.endsWith('.json')).map((name) => resolve(dir, name));
+    }
+    catch {
+        return [];
+    }
+}
+/** Write a verdict atomically. Best-effort: returns false (and logs) when the write failed. */
+export function writeCommitVerdict(verdict, dir = verdictDir()) {
+    const path = commitVerdictPath(verdict.productId, verdict.focusId, verdict.sha, dir, verdict.gate);
+    const tmp = `${path}.${process.pid}.tmp`;
+    try {
+        mkdirSync(dir, { recursive: true });
+        writeFileSync(tmp, JSON.stringify(verdict, null, 2), { mode: 0o600 });
+        renameSync(tmp, path);
+        return true;
+    }
+    catch (err) {
+        log.warn(`[verification] failed to record the verdict for ${verdict.focusId}@${verdict.sha.slice(0, 8)}:`, err.message);
+        return false;
+    }
+}
+/**
+ * Build the verdict a finished deterministic run renders for its commit, or null
+ * when the run rendered none (see the module header). `instrumentFault` is true
+ * when attribution routed the run to instrument-fault re-work. Pure.
+ */
+export function buildCommitVerdict(subject, result, instrumentFault, now = new Date()) {
+    if (instrumentFault || result.timedOut || result.checkoutUnavailable || result.configUnresolved)
+        return null;
+    const sha = result.outcome === 'failed'
+        ? judgedFailedSha(result)
+        : result.outcome === 'passed' && result.verifiedSha && SHA_RE.test(result.verifiedSha) ? result.verifiedSha : null;
+    if (!sha || (result.outcome !== 'passed' && result.outcome !== 'failed'))
+        return null;
+    return {
+        productId: subject.productId,
+        focusId: subject.focusId,
+        sha,
+        outcome: result.outcome,
+        gate: { command: subject.gate.command, timeoutMs: subject.gate.timeoutMs },
+        exitCode: typeof result.exitCode === 'number' ? result.exitCode : null,
+        judgedDeliveryId: subject.deliveryId,
+        recordedAt: now.toISOString(),
+        ...pickCarried(result),
+    };
+}
+/** The result fields a verdict carries forward to the deliveries that reuse it. */
+function pickCarried(result) {
+    return {
+        ...(result.rationale !== undefined ? { rationale: result.rationale } : {}),
+        ...(result.failedStage !== undefined ? { failedStage: result.failedStage } : {}),
+        ...(result.preExistingStages ? { preExistingStages: result.preExistingStages } : {}),
+        ...(result.newFailures ? { newFailures: result.newFailures } : {}),
+        ...(result.preExisting ? { preExisting: result.preExisting } : {}),
+        ...(result.logPath !== undefined ? { logPath: result.logPath } : {}),
+        ...(result.stdoutTail !== undefined ? { stdoutTail: result.stdoutTail } : {}),
+        ...(result.stderrTail !== undefined ? { stderrTail: result.stderrTail } : {}),
+        ...(result.appliedConfig ? { appliedConfig: result.appliedConfig } : {}),
+    };
+}
+/**
+ * The gate a verification carries: the command + timeout on its config -- a
+ * missing or non-positive timeout is the strategy default, exactly as a run
+ * applies it -- or null when it carries no command. It keys an explicit row's
+ * verdict, and a default-on candidate's only where that candidate runs in place;
+ * a default-on run from a checkout of the judged commit is keyed by the gate it
+ * applies there (verify/judged-commit-gate.ts).
+ */
+export function commitVerdictGateOf(v) {
+    const cfg = v.verificationConfig ?? {};
+    if (typeof cfg.command !== 'string')
+        return null;
+    const timeoutMs = typeof cfg.timeoutMs === 'number' && cfg.timeoutMs > 0 ? cfg.timeoutMs : DEFAULT_VERIFICATION_TIMEOUT_MS;
+    return { command: cfg.command, timeoutMs };
+}
+/**
+ * The identity of the gate an EXPLICIT-METHOD row renders its verdict under: its
+ * method and what that method applies -- a deterministic row's command +
+ * normalized timeout (commitVerdictGateOf), any other method's whole config.
+ * Hashed, so it rides on gate_state; key order in the config does not change it.
+ * Two rows that apply the same gate share a key; a changed method, command,
+ * timeout or inspection config does not (verify/explicit-gate-outcome.ts). Pure.
+ */
+export function explicitGateKeyOf(method, config) {
+    const applied = method === 'deterministic' ? commitVerdictGateOf({ verificationConfig: config }) : config;
+    return createHash('sha256').update(canonicalJson([method, applied])).digest('hex').slice(0, 16);
+}
+/** JSON with every object's keys sorted, so equal values serialize equally. Pure. */
+function canonicalJson(value) {
+    if (Array.isArray(value))
+        return `[${value.map(canonicalJson).join(',')}]`;
+    if (typeof value === 'object' && value !== null) {
+        const record = value;
+        return `{${Object.keys(record).sort().map((k) => `${JSON.stringify(k)}:${canonicalJson(record[k])}`).join(',')}}`;
+    }
+    return JSON.stringify(value) ?? 'null';
+}
+/**
+ * Record the verdict a deterministic run rendered for its commit, keyed by the
+ * gate the run APPLIED (result.appliedConfig -- for a default-on candidate,
+ * re-resolved from the checkout it ran), else by the gate the verification
+ * carries. A no-op without a recorder, without a product + focus to key it by, or
+ * when the run rendered no verdict.
+ */
+export function recordCommitVerdictFor(v, result, instrumentFault, record) {
+    const applied = result.appliedConfig;
+    const gate = applied ? { command: applied.command, timeoutMs: applied.timeoutMs } : commitVerdictGateOf(v);
+    if (!record || !v.productId || !v.focusId || !gate)
+        return;
+    const verdict = buildCommitVerdict({ productId: v.productId, focusId: v.focusId, deliveryId: v.deliveryId, gate }, result, instrumentFault);
+    if (verdict)
+        record(verdict);
+}
+/**
+ * The StrategyResult a delivery judged on an already-judged commit takes instead
+ * of running the gate: the recorded outcome with its attribution, never a
+ * timeout or unavailable flag (a record is only ever written for a real verdict).
+ */
+export function strategyResultFromVerdict(verdict) {
+    const { rationale, failedStage, preExistingStages, newFailures, preExisting, logPath, stdoutTail, stderrTail, appliedConfig } = verdict;
+    return {
+        outcome: verdict.outcome,
+        exitCode: verdict.exitCode,
+        verifiedSha: verdict.sha,
+        rationale: `reused the verdict recorded for ${verdict.sha.slice(0, 8)} at ${verdict.recordedAt}`
+            + (rationale ? `: ${rationale}` : ''),
+        ...(failedStage !== undefined ? { failedStage } : {}),
+        ...(preExistingStages ? { preExistingStages } : {}),
+        ...(newFailures ? { newFailures } : {}),
+        ...(preExisting ? { preExisting } : {}),
+        ...(logPath !== undefined ? { logPath } : {}),
+        ...(stdoutTail !== undefined ? { stdoutTail } : {}),
+        ...(stderrTail !== undefined ? { stderrTail } : {}),
+        ...(appliedConfig ? { appliedConfig } : {}),
+    };
+}
+//# sourceMappingURL=commit-verdict-record.js.map

package/dist/verify/commit-verdict-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commit-verdict-record.js","sourceRoot":"","sources":["../../src/verify/commit-verdict-record.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,2EAA2E;AAC3E,qEAAqE;AACrE,gEAAgE;AAChE,6DAA6D;AAC7D,8EAA8E;AAC9E,+EAA+E;AAC/E,2EAA2E;AAC3E,uFAAuF;AACvF,mFAAmF;AACnF,oEAAoE;AACpE,2EAA2E;AAC3E,0EAA0E;AAC1E,gFAAgF;AAChF,oEAAoE;AACpE,sEAAsE;AACtE,+DAA+D;AAC/D,8DAA8D;AAC9D,4DAA4D;AAC5D,mEAAmE;AACnE,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1F,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,+BAA+B,EAAuB,MAAM,iCAAiC,CAAC;AAEvG,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAwCrD,SAAS,UAAU;IACjB,OAAO,OAAO,CAAC,qBAAqB,EAAE,EAAE,uBAAuB,CAAC,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,SAAiB,EACjB,OAAe,EACf,GAAW,EACX,MAAc,UAAU,EAAE,EAC1B,IAAwB;IAExB,MAAM,IAAI,GAAG,GAAG,SAAS,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;IAC9C,OAAO,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,CAAC;AAC3G,CAAC;AAED,yEAAyE;AACzE,SAAS,OAAO,CAAC,IAAuB;IACtC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAChH,CAAC;AAED,MAAM,MAAM,GAAG,mBAAmB,CAAC;AAEnC,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,2EAA2E;AAC3E,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,IAAI,GAAG,CAAC,CAAC,IAA2C,CAAC;IAC3D,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,gBAAgB,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC5H,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClE,IAAI,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAClE,IAAI,OAAO,IAAI,EAAE,OAAO,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzF,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,SAAS,GAAG,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAClD,OAAO;QACL,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE;QAC1D,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;QAC5D,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;QACpC,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,CAAC,aAAa,KAAK,IAAI;YACjE,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAA6D,EAAE;YACpF,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,SAAiB,EACjB,OAAe,EACf,GAAW,EACX,OAAmD,EAAE;IAErD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,UAAU,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI;QACrB,CAAC,CAAC,CAAC,iBAAiB,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC;QACxE,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;IACjD,IAAI,MAAM,GAAyB,IAAI,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG;YAAE,SAAS;QAC5G,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,SAAS;QACxH,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,MAAM,CAAC;QAC7B,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU;YAAE,MAAM,GAAG,MAAM,CAAC;IAChF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kFAAkF;AAClF,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,SAAS,cAAc,CAAC,QAAgB,EAAE,GAAW;IACnD,MAAM,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC;IACjD,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAChI,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,kBAAkB,CAAC,OAAsB,EAAE,MAAc,UAAU,EAAE;IACnF,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACnG,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACzC,IAAI,CAAC;QACH,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,mDAAmD,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QACnI,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAA6B,EAC7B,MAAsB,EACtB,eAAwB,EACxB,MAAY,IAAI,IAAI,EAAE;IAEtB,IAAI,eAAe,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,mBAAmB,IAAI,MAAM,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC;IAC7G,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,KAAK,QAAQ;QACrC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC;QACzB,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IACrH,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACtF,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG;QACH,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE;QAC1E,QAAQ,EAAE,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;QACtE,gBAAgB,EAAE,OAAO,CAAC,UAAU;QACpC,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE;QAC7B,GAAG,WAAW,CAAC,MAAM,CAAC;KACvB,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,SAAS,WAAW,CAAC,MAAsB;IACzC,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzE,CAAC;AACJ,CAAC;AAQD;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,CAAkD;IACpF,MAAM,GAAG,GAAG,CAAC,CAAC,kBAAkB,IAAI,EAAE,CAAC;IACvC,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,SAAS,GAAG,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,+BAA+B,CAAC;IAC3H,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC;AAC7C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,MAAsC;IACtF,MAAM,OAAO,GAAG,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,mBAAmB,CAAC,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1G,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClG,CAAC;AAED,qFAAqF;AACrF,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACpH,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC;AACzC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,CAA2F,EAC3F,MAAsB,EACtB,eAAwB,EACxB,MAAyC;IAEzC,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAC3G,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI;QAAE,OAAO;IAC3D,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;IAC5I,IAAI,OAAO;QAAE,MAAM,CAAC,OAAO,CAAC,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAsB;IAC9D,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,iBAAiB,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IACxI,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,WAAW,EAAE,OAAO,CAAC,GAAG;QACxB,SAAS,EAAE,mCAAmC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,OAAO,CAAC,UAAU,EAAE;cAC5F,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC;AACJ,CAAC"}

package/dist/verify/explicit-gate-outcome.d.ts

@@ -0,0 +1,161 @@
+/**
+ * The verdict an EXPLICIT-METHOD verification run rendered for its delivery, kept
+ * where a daemon restart cannot lose it, and read by the verify routing it gates.
+ *
+ * An explicit-method run may write no per-commit verdict record: an in-place run
+ * judges no commit and an ai_inspection writes none. Its recorded outcome is then
+ * its gate verdict (completion/review-exit-verdict-gate.ts). The in-process
+ * registry (verify/gate-run-registry.ts) holds it, but a restart clears that
+ * registry, and the delivery row's own verification columns cannot carry the whole
+ * verdict: the durable row names the method and records a pass, but the edge
+ * records verification_outcome with no judged commit and resets a failure to
+ * null. So from the row alone, after a restart, a failure read as pending and a
+ * pass applied to whatever commit was judged.
+ *
+ * So each explicit run's terminal outcome, with the commit it applies to (null
+ * when it judged none), is also written to the delivery's gate_state under
+ * verificationHistory.explicitOutcome (queries/delivery-gate-state.ts) -- the
+ * history every clearing writer already carries forward. No migration and no edge
+ * change: gate_state is already the daemon's durable per-delivery record. A run
+ * that rendered no verdict removes it.
+ *
+ * A verdict also belongs to the GATE that rendered it. The edge lets an operator
+ * change a row's method or config without resetting its outcome or this history,
+ * so a pass gate A rendered at commit H would otherwise read as a pass for gate B
+ * at H, which never ran. Both records keep the key of the gate the run applied
+ * (commit-verdict-record.ts explicitGateKeyOf), and a reader that names the
+ * delivery's current gate (verify/commit-gate-configured.ts) takes only a verdict
+ * rendered under it; the explicit re-arm scan runs gate B instead.
+ *
+ * Invalidate first. The in-process registry forgets the previous run's verdict the
+ * moment a replacement run is selected; the durable record must forget it before
+ * that run can start. Otherwise a restart while the run waits on the verification
+ * semaphore or runs -- or a verdict write after it that fails -- exposes the older
+ * verdict as the latest, and a stale pass approves a review the replacement may
+ * fail. So the tick removes the record (invalidateExplicitGateOutcome) for every
+ * explicit candidate it selects, before any of them waits
+ * (verify/verification-commit-sharing.ts), and a candidate whose removal did not
+ * land is not started that tick. An explicit DETERMINISTIC candidate whose focus
+ * HEAD a per-commit verdict under its own gate already judges is the exception: no
+ * run replaces anything at selection, so the removal is deferred to its dispatch
+ * and made there only when that dispatch is about to route a verdict -- the
+ * per-commit one it takes in place of a run, then recorded here for that commit and
+ * gate key, or, finding none after all, its own run's (refused, it routes nothing
+ * and starts nothing). The delivery can leave verify while that removal awaits its
+ * row write: the removal itself refuses one it finds done or cancelled, and the
+ * dispatch re-reads the status once the removal lands, so one that moved anywhere
+ * else outside verify is routed nothing either. A reused failure already fed back
+ * routes nothing, so it removes nothing and its record stands. ai_inspection and
+ * behavioral rows record
+ * no per-commit verdict, so theirs is always removed at selection. Until the
+ * replacement's own write lands, the durable state reads "no verdict": routing
+ * holds, and a restarted daemon selects the row again -- the pending queue lists
+ * it, or the explicit re-arm scan finds a row pass with no record of its run.
+ *
+ * Read: this process's own knowledge first -- a verdict it recorded, or a
+ * selection of the row since, which forgets the run before it -- else the durable
+ * record on the gate_state the caller read. Routing after a restart therefore
+ * consumes the verdict actually rendered and never depends on the registry. The
+ * row's own verification_outcome pass names no commit, so it approves nothing:
+ * where neither knows the run, the explicit re-arm scan (verify/explicit-rearm.ts)
+ * selects the row again, and that run's record binds the verdict to its commit.
+ *
+ * Direction of error: the removal fails closed -- no replacement run starts over a
+ * verdict it could not remove, and the next tick asks again -- while the verdict
+ * write after the run is best-effort: a failed write logs and leaves "no verdict"
+ * (the removal already landed), never the older record, so routing holds until a
+ * later run records one. A recorded verdict can only hold a done route or let
+ * re-work route: a failure holds done, and a pass applies only to the commit it
+ * judged -- or, when it judged none, to the delivery, exactly as the in-process
+ * record always has.
+ *
+ * Both writers own the record, its run id included, and only they change it. Each
+ * reads the row and writes it in the delivery's serialized write turn
+ * (queries/delivery-write-discipline.ts, via queries/deliveries.ts
+ * rewriteDeliveryGateStateAtOwnStatus), stamps only its own key over that FRESH
+ * gate_state, and writes at the fresh status -- nothing to a delivery that is done
+ * or cancelled. So a hold written after their read is never erased and a status
+ * never moves back; and every other gate_state writer that goes through the single
+ * writer sends the row's record, never one its own earlier read carried, so it
+ * never resurrects a removed verdict.
+ *
+ * A stale writer the discipline does not reach cannot bring it back either: a
+ * gate_state write that carries the history of a row read before the removal,
+ * outside this process's serialized turn, writes the older verdict back after it.
+ * So every removal first names a fresh run id in a host-local ledger
+ * (verify/explicit-run-ledger.ts): the verdict its dispatch routes -- run or reused
+ * -- is recorded with that id, a run a later removal superseded records nothing,
+ * and a durable record is a verdict only while its id is the current one -- carried
+ * back, it reads as no verdict.
+ *
+ * @module verify/explicit-gate-outcome
+ */
+import { type DeliveryGateRowIo } from '../queries/deliveries.js';
+import { type RecordedExplicitOutcome, type RecordedGateOutcome } from './gate-run-registry.js';
+/** Injected row IO for the durable write (the real row read and physical write by default). */
+export interface ExplicitGateOutcomeWriteDeps extends DeliveryGateRowIo {
+    now: () => string;
+    /** Name `runId` the delivery's current explicit run in the ledger; throws when that cannot be written. */
+    beginRun: (deliveryId: string, runId: string) => void;
+    /** Whether `runId` is still the delivery's current explicit run. */
+    isCurrentRun: (deliveryId: string, runId: string) => boolean;
+}
+/**
+ * Record an explicit-method run's verdict on its delivery's gate_state (see the
+ * module header): the verdict it rendered under the gate it applied (`gateKey`),
+ * as run `runId` (the id its dispatch named; undefined for a run none named), or
+ * no record when it rendered none. Stamped over the FRESH row at the row's OWN
+ * status in one serialized write turn, so the gate-only write never moves the
+ * delivery and keeps whatever else the row holds. Nothing is written when there is
+ * neither a verdict nor a record to remove, for a delivery that is done or
+ * cancelled, or for a run a later removal superseded -- asked inside that same
+ * turn, so a supersession named while this write waited for it is seen.
+ * Best-effort: never throws. Returns whether a write landed.
+ */
+export declare function persistExplicitGateOutcome(deliveryId: string, result: {
+    outcome: string;
+    verifiedSha?: string;
+}, gateKey: string, runId: string | undefined, deps?: Partial<ExplicitGateOutcomeWriteDeps>): Promise<boolean>;
+/**
+ * Durably forget the verdict the delivery's previous explicit run rendered, before
+ * a replacement verdict is routed (see the module header): `runId`, the
+ * replacement, is first named the delivery's current run -- which voids every
+ * older record, wherever a writer carries it -- then the record is removed from the
+ * FRESH row at the row's OWN status in one serialized write turn, so the gate-only
+ * write never moves the delivery and keeps a hold written before it. Nothing is
+ * written to the row when there is no record to remove, or for a delivery that is
+ * not found or stopped cycling (done or cancelled). Never throws. Returns whether
+ * the replacement may be routed: true once the durable state reads "no verdict" for
+ * a delivery still cycling. False refuses it: the run could not be named, the row
+ * could not be read, or the write failed -- the older verdict may still stand -- or
+ * the delivery is not found or stopped cycling, which no verdict is routed to (its
+ * run was named first, so a record it keeps reads as no verdict). A delivery that
+ * moved to a status that still cycles (verify_failed, coding) has its record removed
+ * at that status and resolves true: the dispatch re-reads the status once this
+ * lands, and that read refuses it (verify/verification-commit-sharing.ts).
+ */
+export declare function invalidateExplicitGateOutcome(deliveryId: string, runId: string, deps?: Partial<ExplicitGateOutcomeWriteDeps>): Promise<boolean>;
+/**
+ * The explicit-method verdict to read for the delivery, whatever commit it applies
+ * to: this process's own knowledge, else the durable record on `gateState` while
+ * the run that recorded it is the delivery's current one; null when neither holds
+ * one (no run recorded, the latest run rendered none, or a later run superseded it).
+ */
+export declare function readExplicitGateOutcomeRecord(deliveryId: string, gateState: unknown): RecordedExplicitOutcome | null;
+/**
+ * The verdict an explicit-method run rendered for the delivery when it applies to
+ * `sha` -- the run judged that commit, or judged none -- under `gateKey`, else
+ * null. `gateState` is the delivery's gate_state as the caller read it. A null
+ * `gateKey` names no explicit gate (the row names no method), so no verdict
+ * applies; an undefined one (the delivery's gate could not be read) takes a
+ * verdict rendered under any gate.
+ */
+export declare function readDeliveryGateOutcome(deliveryId: string, sha: string | null, gateState?: unknown, gateKey?: string | null): RecordedGateOutcome | null;
+/**
+ * Whether an explicit-method run rendered a verdict for the delivery, in this
+ * process or on `gateState`, whatever commit it applies to. A terminal explicit
+ * row leaves daemon_get_pending_verifications, so this is what still says the
+ * delivery is gated by its own run (verify/commit-gate-configured.ts).
+ */
+export declare function hasRecordedExplicitGateOutcome(deliveryId: string, gateState?: unknown): boolean;
+//# sourceMappingURL=explicit-gate-outcome.d.ts.map

package/dist/verify/explicit-gate-outcome.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"explicit-gate-outcome.d.ts","sourceRoot":"","sources":["../../src/verify/explicit-gate-outcome.ts"],"names":[],"mappings":"AAWA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2FG;AAEH,OAAO,EAAuC,KAAK,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAMvG,OAAO,EAGL,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACzB,MAAM,wBAAwB,CAAC;AAMhC,+FAA+F;AAC/F,MAAM,WAAW,4BAA6B,SAAQ,iBAAiB;IACrE,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,0GAA0G;IAC1G,QAAQ,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACtD,oEAAoE;IACpE,YAAY,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;CAC9D;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,0BAA0B,CAC9C,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,EACjD,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,IAAI,GAAE,OAAO,CAAC,4BAA4B,CAAM,GAC/C,OAAO,CAAC,OAAO,CAAC,CAqBlB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,6BAA6B,CACjD,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,IAAI,GAAE,OAAO,CAAC,4BAA4B,CAAM,GAC/C,OAAO,CAAC,OAAO,CAAC,CAmBlB;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,uBAAuB,GAAG,IAAI,CAKpH;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,GAAG,IAAI,EAClB,SAAS,CAAC,EAAE,OAAO,EACnB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,GACtB,mBAAmB,GAAG,IAAI,CAI5B;AAED;;;;;GAKG;AACH,wBAAgB,8BAA8B,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,OAAO,GAAG,OAAO,CAG/F"}