@telora/daemon 0.22.97 → 0.22.131

package/dist/verify/rework-judgment.js

@@ -0,0 +1,54 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/verify/rework-judgment.test.ts
+// PINNED-BY-END
+/**
+ * What a verification re-work stamps as the delivery's judged commit: the commit
+ * its run judged, and THAT run's own verdict persisted beside it.
+ *
+ * A run is selected under the delivery's own gate, so the verdict it rendered
+ * (gateVerdictFromRun, by the rule the durable per-commit record uses) is the
+ * delivery's own-gate verdict for the commit. Persisting it beside the sha is what
+ * lets the resume (spawn/prompt-assembly.ts) show it without reading any record.
+ * A stamp that carries none -- the run rendered no verdict (a timeout, an
+ * unavailable checkout, an instrument fault), or a legacy stamp -- is resolved
+ * there under the delivery's own gate, never by a gate-less record read.
+ *
+ * The deterministic-failure, shortfall and evidence-unavailable re-work writers
+ * share it (verify/verification-feedback.ts,
+ * verify/verification-evidence-unavailable-feedback.ts); extracted so
+ * verification-feedback.ts stays under the daemon 800-line cap.
+ *
+ * @module verify/rework-judgment
+ */
+import { stampJudgedCommit } from '../queries/delivery-gate-state.js';
+import { gateVerdictFromRun, readJudgedVerdictFor, } from './gate-verdict-source.js';
+/**
+ * The verdict a finished run rendered for its commit, or null when it rendered
+ * none. `instrumentFault` is true when attribution routed the run to
+ * instrument-fault re-work, which records no verdict for the commit
+ * (commit-verdict-record.buildCommitVerdict), so none is shown for it either. Pure.
+ */
+export function runVerdictOf(run, instrumentFault) {
+    return instrumentFault ? null : gateVerdictFromRun(run);
+}
+/**
+ * `gateState` with its judged commit replaced by the run's, and the run's own
+ * verdict persisted beside it when it is a verdict for that commit
+ * (stampJudgedCommit). Never a record read. Pure.
+ */
+export function stampReworkJudgment(gateState, judgment, judgedAt) {
+    return stampJudgedCommit(gateState, judgment.judgedSha ?? null, judgedAt, judgment.runVerdict ?? null);
+}
+/**
+ * The verdict a re-work DETAIL carries (the live inject, and the listing a
+ * respawned team reads): the run's own verdict whenever the writer was handed the
+ * run -- null included, since a run that rendered none has none to show -- else
+ * the recorded verdict for exactly the judged commit through the writer's reader.
+ * No judged sha asks nothing.
+ */
+export function reworkDetailVerdict(d, v, judgment) {
+    if (judgment.runVerdict !== undefined)
+        return judgment.runVerdict;
+    return readJudgedVerdictFor(d, v, judgment.judgedSha ?? null);
+}
+//# sourceMappingURL=rework-judgment.js.map

package/dist/verify/rework-judgment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rework-judgment.js","sourceRoot":"","sources":["../../src/verify/rework-judgment.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,gEAAgE;AAChE,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,iBAAiB,EAAmD,MAAM,mCAAmC,CAAC;AACvH,OAAO,EACL,kBAAkB,EAClB,oBAAoB,GAGrB,MAAM,0BAA0B,CAAC;AAalC;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,GAAyB,EAAE,eAAwB;IAC9E,OAAO,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAA4B,EAAE,QAA2B,EAAE,QAAgB;IAC7G,OAAO,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC;AACzG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,CAAiF,EACjF,CAAyD,EACzD,QAA2B;IAE3B,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC,UAAU,CAAC;IAClE,OAAO,oBAAoB,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;AAChE,CAAC"}

package/dist/verify/verification-attribution.d.ts

@@ -0,0 +1,105 @@
+/**
+ * Attribution of a FAILED deterministic verify run: which red is the delivery's
+ * own, and which was already on the focus base.
+ *
+ * Extracted from verification-engine.ts (runVerificationForDelivery calls
+ * attributeDeterministicFailure for every failed deterministic run and routes the
+ * instrument-fault hold it returns). Shapes, in order:
+ *
+ *   1. TIMED OUT -- never attributed. A killed run's output parses to nothing
+ *      meaningful, so it routes to bounded instrument-fault re-work: a timeout is
+ *      never a verdict about the work.
+ *   2. BASE UNAVAILABLE -- the focus base resolved but could not be measured this
+ *      tick (verify/verification-baseline-run.ts: an unprovisioned worktree, no
+ *      checkout, dependencies moved). No verdict: pending, retried.
+ *   2a. BASE INCOMPARABLE -- the focus changed its dependency install inputs since
+ *      the base (lockfiles, manifest install fields, install lifecycle scripts), so
+ *      the base could only be measured under installs made from the focus's
+ *      inputs, where a red those installs cause would pass as the
+ *      base's. A retry would refuse the same way, so this IS a verdict: nothing is
+ *      demoted and every red is charged (naming the HEAD red stage when located).
+ *   3. STAGE-AWARE -- the HEAD log vouches for its gate stages
+ *      (verify/verification-gate-stages.ts). The red stage is judged against the
+ *      focus base's reds (judgeFailedStage): pre-existing only when the base failed
+ *      that very stage AND reports everything this run reports there -- the same
+ *      failing tests, or for a non-test red every diagnostic signature
+ *      (verify/verification-diagnostics.ts). A red the base shares is RECORDED
+ *      (preExistingStages), but the stages after it never ran at HEAD, and a stage
+ *      that did not run is never counted as passing: they are run as a
+ *      CONTINUATION at the same judged commit and judged in turn before any pass.
+ *      A red the base does not share fails the delivery naming the stage
+ *      (failedStage) and what is new in it. A continuation that times out, cannot
+ *      run, or runs at a different commit yields no pass.
+ *   4. FAILING-TEST IDS ONLY -- the gate's shape is unknown (no stage outcomes),
+ *      so attribution behaves exactly as before stages existed: all-pre-existing
+ *      ids demote to a pass, zero parsed ids are blind.
+ *
+ * Why a continuation rather than running every stage on its own: it costs nothing
+ * unless a pre-existing red actually occurred (a green run or a red of the
+ * delivery's own stays one gate run), it goes through the unchanged fixed-commit
+ * checkout path, and the base is still measured at most once per (base sha,
+ * gate) -- the base measurement continues past each of ITS reds the same way, so
+ * a second, third... inherited red has a base outcome to be judged against. A
+ * stage the base never ran stays "did not run" there: its red at HEAD is charged,
+ * erring toward re-work, never toward a pass.
+ *
+ * @module verify/verification-attribution
+ */
+import type { PendingVerification } from '../queries/verification.js';
+import type { EvidenceUnavailableDetail } from '../queries/delivery-gate-state.js';
+import { type StrategyResult } from './verification-deterministic.js';
+import type { StageContinuationRunner, VerificationDeps } from './verification-deps.js';
+import type { BaseStageRecord } from './verification-baseline-run.js';
+import { type FixedCommitVerifyDeps, type VerifyCheckout } from './verification-checkout.js';
+/** An instrument-fault hold, minus the `heldAt` stamp the requeue path adds. */
+export type InstrumentFaultHold = Omit<EvidenceUnavailableDetail, 'heldAt'>;
+/**
+ * Attribute a FAILED deterministic run in place (outcome, rationale and the
+ * attribution fields of `result`) and return the instrument-fault hold it must
+ * route to, if any. An attribution that could not run leaves the run failed.
+ */
+export declare function attributeDeterministicFailure(v: PendingVerification, result: StrategyResult, deps: VerificationDeps): Promise<InstrumentFaultHold | null>;
+/** What a run reports for one red stage: its failing-test ids and its diagnostic signatures. */
+export interface StageEvidence {
+    failing: ReadonlySet<string>;
+    diagnostics: readonly string[];
+}
+/** The verdict on one red stage. */
+export type StageJudgment = {
+    kind: 'pre_existing';
+    preExisting: string[];
+} | {
+    kind: 'charged';
+    newFailures: string[];
+    preExisting: string[];
+    newDiagnostics: string[];
+    baseStatus: string;
+};
+/**
+ * Judge one red stage against the focus base. PRE-EXISTING only when the base
+ * failed that very stage AND reports everything this run reports there: with
+ * failing tests, every id this run parsed the base's red parsed too; without,
+ * the base's red parsed none either and covers every diagnostic signature this
+ * run's stage output carries, counted as a multiset. A red whose output yields no
+ * signature at all is charged (module doc of verify/verification-diagnostics.ts).
+ * A base with no stage outcomes matches nothing. Anything else is charged, saying
+ * why. Pure.
+ */
+export declare function judgeFailedStage(stage: string, head: StageEvidence, base: BaseStageRecord | null, baseFailing: ReadonlySet<string>): StageJudgment;
+/** Seams of the default continuation runner (tests drive it without a real checkout). */
+export interface StageContinuationSeams {
+    runAtFixedCommit?: (deps: FixedCommitVerifyDeps, v: PendingVerification) => Promise<StrategyResult>;
+    createPinnedCheckout?: (focusWorktreePath: string, checkoutKey: string, sha: string) => VerifyCheckout | null;
+}
+/**
+ * The real continuation: the never-run segments, chained as the gate chained them,
+ * run through the same fixed-commit strategy as the HEAD run -- a detached checkout
+ * pinned to the HEAD run's verifiedSha (createPinnedVerifyCheckout), under the
+ * focus worktree's verify hold, with the timeout the HEAD run applied. The command
+ * is the gate's own steps, so it is never re-resolved from a manifest (the row
+ * carries no default-on source). The judge loop still requires the continuation's
+ * verifiedSha to equal the judged sha, so a checkout that stopped honouring the
+ * pin yields no verdict, never a verdict about another commit.
+ */
+export declare function buildDefaultStageContinuation(deps: VerificationDeps, seams?: StageContinuationSeams): StageContinuationRunner;
+//# sourceMappingURL=verification-attribution.d.ts.map

package/dist/verify/verification-attribution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-attribution.d.ts","sourceRoot":"","sources":["../../src/verify/verification-attribution.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AACnF,OAAO,EAAmC,KAAK,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACvG,OAAO,KAAK,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAQxF,OAAO,KAAK,EAAE,eAAe,EAAgB,MAAM,gCAAgC,CAAC;AAYpF,OAAO,EAGL,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACpB,MAAM,4BAA4B,CAAC;AAKpC,gFAAgF;AAChF,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,yBAAyB,EAAE,QAAQ,CAAC,CAAC;AAE5E;;;;GAIG;AACH,wBAAsB,6BAA6B,CACjD,CAAC,EAAE,mBAAmB,EACtB,MAAM,EAAE,cAAc,EACtB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAuBrC;AA+DD,gGAAgG;AAChG,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7B,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CAChC;AAED,oCAAoC;AACpC,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAA;CAAE,GAC/C;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAC;IAAC,cAAc,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AAIpH;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,aAAa,EACnB,IAAI,EAAE,eAAe,GAAG,IAAI,EAC5B,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,GAC/B,aAAa,CAQf;AAuND,yFAAyF;AACzF,MAAM,WAAW,sBAAsB;IACrC,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,qBAAqB,EAAE,CAAC,EAAE,mBAAmB,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IACpG,oBAAoB,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,cAAc,GAAG,IAAI,CAAC;CAC/G;AAED;;;;;;;;;GASG;AACH,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,gBAAgB,EAAE,KAAK,GAAE,sBAA2B,GAAG,uBAAuB,CAqBjI"}

package/dist/verify/verification-attribution.js

@@ -0,0 +1,322 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/verify/verification-attribution.test.ts
+// PINNED-BY-END
+import { DEFAULT_VERIFICATION_TIMEOUT_MS } from './verification-deterministic.js';
+import { applyAttribution, classifyFailures, readHeadOutputDefault, } from './verification-baseline.js';
+import { parseFailingTests } from './verification-failure-parser.js';
+import { MAX_STAGE_ROUNDS, continuationCommand, hasStageToContinue, parseContinuationStages, } from './verification-gate-stages.js';
+import { describeDiagnostics, diagnosticSignatures, logCwdRoots, uncoveredDiagnostics } from './verification-diagnostics.js';
+import { buildTimeoutFaultHold } from './verification-timeout-fault.js';
+import { createPinnedVerifyCheckout, runDeterministicAtFixedCommit, } from './verification-checkout.js';
+import { createLogger } from '../shell/log.js';
+const log = createLogger({ module: 'verification' });
+/**
+ * Attribute a FAILED deterministic run in place (outcome, rationale and the
+ * attribution fields of `result`) and return the instrument-fault hold it must
+ * route to, if any. An attribution that could not run leaves the run failed.
+ */
+export async function attributeDeterministicFailure(v, result, deps) {
+    if (result.timedOut) {
+        log.warn(`[verification] deterministic run timed out for delivery ${v.deliveryId} -- ` +
+            `routing to bounded instrument-fault re-work (not a pass)`);
+        return buildTimeoutFaultHold(result);
+    }
+    if (!deps.attributeFailures)
+        return null;
+    try {
+        const classification = await deps.attributeFailures(v, result);
+        if (!classification)
+            return null; // no baseline resolvable: every HEAD red gates
+        if (classification.baseUnavailable !== undefined)
+            return deferForUnavailableBase(v, result, classification.baseUnavailable);
+        if (classification.baseIncomparable !== undefined)
+            return chargeIncomparableBase(v, result, classification, classification.baseIncomparable);
+        const staged = classification.stages;
+        if (staged?.head && staged.head.failedStage !== null) {
+            return await judgeStagedFailure(v, result, classification, { ...staged, head: staged.head }, deps);
+        }
+        return applyIdAttribution(v, result, classification);
+    }
+    catch (err) {
+        log.warn(`[verification] baseline attribution failed for delivery ${v.deliveryId}:`, err.message);
+        return null;
+    }
+}
+/** Failing-test-id attribution (the gate's stages unknown): the behaviour before stages existed. */
+function applyIdAttribution(v, result, classification) {
+    const attributed = applyAttribution(v.deliveryId, classification);
+    result.newFailures = attributed.newFailures;
+    result.preExisting = attributed.preExisting;
+    result.rationale = attributed.rationale;
+    if (attributed.outcome === 'blind') {
+        // Exited non-zero but zero parseable failing ids: the gate cannot attribute
+        // the failure. Keep the run FAILED (never a differential pass) and route it
+        // to the bounded instrument-fault re-work path.
+        result.outcome = 'failed';
+        log.warn(`[verification] ${attributed.rationale} (delivery ${v.deliveryId}) -- routing to bounded instrument-fault re-work`);
+        return blindHold(result.exitCode);
+    }
+    result.outcome = attributed.outcome;
+    if (attributed.log)
+        log.info(attributed.log);
+    return null;
+}
+function blindHold(exitCode) {
+    return {
+        missing: ['attributable failing-test ids (deterministic run exited non-zero, parsed zero)'],
+        commitsAhead: 0,
+        deterministicFault: { kind: 'blind_zero_parse', exitCode: exitCode ?? null },
+    };
+}
+/** The base could not be measured this tick: no verdict either way, retried. */
+function deferForUnavailableBase(v, result, reason) {
+    result.outcome = 'pending';
+    result.checkoutUnavailable = true;
+    result.rationale =
+        `the deterministic check failed at ${shortSha(result.verifiedSha)}, but the focus base could not be measured to ` +
+            `attribute the red (${reason}) -- base evidence unavailable, not a verdict; retried next tick`;
+    log.warn(`[verification] ${result.rationale} (delivery ${v.deliveryId})`);
+    return null;
+}
+/**
+ * The base can never be measured comparably with the installs at hand (the focus
+ * changed its dependency install inputs): a verdict, not a deferral -- a retry
+ * would refuse the same way. Nothing is demoted; every red is charged, naming the
+ * HEAD red stage when the log located one.
+ */
+function chargeIncomparableBase(v, result, classification, reason) {
+    const stage = classification.stages?.head?.failedStage ?? null;
+    result.outcome = 'failed';
+    if (stage !== null)
+        result.failedStage = stage;
+    result.newFailures = [...classification.newFailures, ...classification.preExisting].sort();
+    result.preExisting = [];
+    result.rationale =
+        `deterministic check failed${stage !== null ? ` at stage "${stage}"` : ''} at ${shortSha(result.verifiedSha)}, and no red ` +
+            `can be attributed to the focus base: ${reason} -- every red is charged to the delivery`;
+    log.warn(`[verification] ${result.rationale} (delivery ${v.deliveryId})`);
+    return null;
+}
+/**
+ * Judge one red stage against the focus base. PRE-EXISTING only when the base
+ * failed that very stage AND reports everything this run reports there: with
+ * failing tests, every id this run parsed the base's red parsed too; without,
+ * the base's red parsed none either and covers every diagnostic signature this
+ * run's stage output carries, counted as a multiset. A red whose output yields no
+ * signature at all is charged (module doc of verify/verification-diagnostics.ts).
+ * A base with no stage outcomes matches nothing. Anything else is charged, saying
+ * why. Pure.
+ */
+export function judgeFailedStage(stage, head, base, baseFailing) {
+    const red = base?.failed.find((candidate) => candidate.stage === stage) ?? null;
+    const { newFailures, preExisting } = classifyFailures(head.failing, red ? new Set(red.failingTests) : baseFailing);
+    const verdict = red
+        ? judgeSharedRed(red, head, newFailures.length)
+        : { kind: 'charged', newDiagnostics: [], baseStatus: describeUnsharedStage(stage, base) };
+    if (verdict.kind === 'pre_existing')
+        return { kind: 'pre_existing', preExisting };
+    return { kind: 'charged', newFailures, preExisting, newDiagnostics: verdict.newDiagnostics, baseStatus: verdict.baseStatus };
+}
+const ALSO_FAILS = 'the stage also fails on the focus base';
+function judgeSharedRed(red, head, newCount) {
+    const charged = (baseStatus, newDiagnostics = []) => ({ kind: 'charged', newDiagnostics, baseStatus });
+    if (head.failing.size > 0) {
+        return newCount === 0 ? { kind: 'pre_existing' } : charged(`${ALSO_FAILS}, but not with these failing tests`);
+    }
+    if (red.failingTests.length > 0)
+        return charged(`${ALSO_FAILS}, but with failing tests this run did not report`);
+    if (head.diagnostics.length === 0) {
+        return charged(`${ALSO_FAILS}, but this run's stage output carries no diagnostic to compare with the base's, so the red cannot be shown to be the base's`);
+    }
+    const uncovered = uncoveredDiagnostics(head.diagnostics, red.diagnostics);
+    if (uncovered.length === 0)
+        return { kind: 'pre_existing' };
+    return charged(`${ALSO_FAILS}, but this run reports ${uncovered.length} diagnostic(s) the base does not: ${describeDiagnostics(uncovered)}`, uncovered);
+}
+function describeUnsharedStage(stage, base) {
+    if (base === null)
+        return 'the focus base run yielded no stage outcomes to compare against, so the red is charged';
+    if (base.ran.includes(stage))
+        return 'the stage passes on the focus base';
+    if (base.notRun.includes(stage)) {
+        const lastRed = base.failed[base.failed.length - 1]?.stage ?? 'an earlier stage';
+        return `the stage never ran on the focus base (it could not be measured past its red at "${lastRed}")`;
+    }
+    return 'the stage does not run on the focus base';
+}
+async function judgeStagedFailure(v, result, classification, staged, deps) {
+    const runContinuation = deps.runStageContinuation ?? buildDefaultStageContinuation(deps);
+    const baseFailing = new Set(staged.baseFailingTests);
+    const record = { stages: [], tests: new Set() };
+    let run = staged.head;
+    let evidence = {
+        failing: new Set([...classification.newFailures, ...classification.preExisting]),
+        diagnostics: staged.headDiagnostics,
+    };
+    for (let round = 0; round < MAX_STAGE_ROUNDS && run.failedStage !== null; round++) {
+        const stage = run.failedStage;
+        const judged = judgeFailedStage(stage, evidence, staged.base, baseFailing);
+        if (judged.kind === 'charged')
+            return chargeStage(result, stage, judged, record);
+        record.stages.push(stage);
+        for (const id of judged.preExisting)
+            record.tests.add(id);
+        if (!hasStageToContinue(run))
+            return passDifferentially(v, result, record, 'no gate stage follows them');
+        if (!result.verifiedSha)
+            return unjudgeableRemainder(v, result, record, 'the run recorded no judged commit');
+        const continued = await runContinuationSafely(runContinuation, v, run.continuation, result);
+        const step = settleContinuation(v, result, continued, run, record);
+        if (step.kind === 'settled')
+            return step.hold;
+        run = step.run;
+        evidence = step.evidence;
+    }
+    return unjudgeableRemainder(v, result, record, 'the continuation did not settle');
+}
+/** Read a continuation's result: a terminal verdict, or its own red stage to judge next. */
+function settleContinuation(v, result, continued, from, record) {
+    const sameCommit = continued.verifiedSha !== undefined && continued.verifiedSha === result.verifiedSha;
+    if (continued.outcome === 'passed' && sameCommit) {
+        return settled(passDifferentially(v, result, record, `every gate stage after them ran green at ${shortSha(result.verifiedSha)}`));
+    }
+    if (continued.timedOut) {
+        adoptEvidence(result, continued);
+        result.outcome = 'failed';
+        result.timedOut = true;
+        recordPreExisting(result, record);
+        result.rationale = `${continued.rationale ?? 'the continuation timed out'} -- the gate stages after the pre-existing ` +
+            `red(s) in ${quoteStages(record.stages)} were killed before completing, so they were never judged (not a pass)`;
+        log.warn(`[verification] ${result.rationale} (delivery ${v.deliveryId})`);
+        return settled(buildTimeoutFaultHold(continued));
+    }
+    if (continued.outcome !== 'failed' || !sameCommit)
+        return settled(deferRemainder(v, result, record, continued));
+    adoptEvidence(result, continued);
+    const text = readHeadOutputDefault(continued);
+    const failing = parseFailingTests(text);
+    const next = parseContinuationStages(text, continued.exitCode, from.continuation, from.package);
+    if (next && next.failedStage !== null) {
+        return { kind: 'staged', run: next, evidence: { failing, diagnostics: diagnosticSignatures(next.failedStageOutput, logCwdRoots(text)) } };
+    }
+    return settled(chargeUnlocated(v, result, record, failing));
+}
+const settled = (hold) => ({ kind: 'settled', hold });
+async function runContinuationSafely(run, v, segments, head) {
+    try {
+        return await run(v, segments, head);
+    }
+    catch (err) {
+        return { outcome: 'pending', rationale: `the continuation run threw: ${err.message}`, checkoutUnavailable: true };
+    }
+}
+// ---------------------------------------------------------------------------
+// Terminal verdicts (each writes the result it names)
+// ---------------------------------------------------------------------------
+function chargeStage(result, stage, judged, record) {
+    result.outcome = 'failed';
+    result.failedStage = stage;
+    result.newFailures = judged.newFailures;
+    result.preExisting = [...new Set([...record.tests, ...judged.preExisting])].sort();
+    if (record.stages.length > 0)
+        result.preExistingStages = [...record.stages];
+    result.rationale =
+        `deterministic check failed at stage "${stage}": ${judged.baseStatus}` +
+            (judged.newFailures.length > 0 ? `; ${judged.newFailures.length} NEW failing test(s) vs focus base` : '') +
+            (record.stages.length > 0 ? `; pre-existing base red(s) recorded, non-blocking: ${quoteStages(record.stages)}` : '');
+    return null;
+}
+function passDifferentially(v, result, record, after) {
+    result.outcome = 'passed';
+    delete result.failedStage;
+    result.newFailures = [];
+    recordPreExisting(result, record);
+    result.rationale =
+        `deterministic check exited non-zero only on red(s) that fail the same way on the focus base -- ` +
+            `${quoteStages(record.stages)} (recorded, non-blocking); ${after} (differential pass)`;
+    log.info(`[verification] delivery ${v.deliveryId}: pre-existing base red(s) in ${quoteStages(record.stages)} ` +
+        `recorded, non-blocking; ${after} (differential pass)`);
+    return null;
+}
+/** The continuation failed at a stage its log does not identify: charged, or blind when it parsed no ids. */
+function chargeUnlocated(v, result, record, failing) {
+    result.outcome = 'failed';
+    recordPreExisting(result, record);
+    const after = `the gate stages run after the pre-existing red(s) in ${quoteStages(record.stages)}`;
+    if (failing.size === 0) {
+        result.rationale = `${after} exited non-zero at a stage the log does not identify and parsed zero failing-test ids -- ` +
+            'the gate cannot attribute the failure (instrument fault, not a differential pass)';
+        log.warn(`[verification] ${result.rationale} (delivery ${v.deliveryId}) -- routing to bounded instrument-fault re-work`);
+        return blindHold(result.exitCode);
+    }
+    // No base red is located for these tests, so none of them can be excused by it.
+    result.newFailures = [...failing].sort();
+    result.rationale = `deterministic check failed: ${after} report ${failing.size} failing test(s) at a stage the log does not identify`;
+    return null;
+}
+/** The stages after a pre-existing red could not be run at the judged commit this tick: no verdict, retried. */
+function deferRemainder(v, result, record, continued) {
+    result.outcome = 'pending';
+    result.checkoutUnavailable = true;
+    recordPreExisting(result, record);
+    result.rationale =
+        `the red(s) in ${quoteStages(record.stages)} fail the same way on the focus base, but the gate stages after them ` +
+            `could not be run at ${shortSha(result.verifiedSha)} (${continued.rationale ?? continued.outcome}) -- not a pass; retried next tick`;
+    log.warn(`[verification] ${result.rationale} (delivery ${v.deliveryId})`);
+    return null;
+}
+/** The stages after a pre-existing red can never be run for this result: the gate is blind to them. */
+function unjudgeableRemainder(v, result, record, why) {
+    result.outcome = 'failed';
+    recordPreExisting(result, record);
+    result.rationale =
+        `the red(s) in ${quoteStages(record.stages)} fail the same way on the focus base, but the gate stages after them ` +
+            `cannot be judged (${why}) -- the gate is blind to them, not the work passing`;
+    log.warn(`[verification] ${result.rationale} (delivery ${v.deliveryId}) -- routing to bounded instrument-fault re-work`);
+    return { missing: [`the gate stages after the pre-existing red(s) in ${quoteStages(record.stages)} (${why})`], commitsAhead: 0 };
+}
+function recordPreExisting(result, record) {
+    result.preExistingStages = [...record.stages];
+    result.preExisting = [...record.tests].sort();
+}
+/** The continuation rendered the verdict, so its log, tails and exit status are the evidence feedback points at. */
+function adoptEvidence(result, continued) {
+    result.logPath = continued.logPath;
+    result.stdoutTail = continued.stdoutTail;
+    result.stderrTail = continued.stderrTail;
+    result.exitCode = continued.exitCode;
+    result.runnerSummary = continued.runnerSummary;
+}
+const quoteStages = (stages) => stages.map((stage) => `"${stage}"`).join(', ');
+const shortSha = (sha) => (sha ? sha.slice(0, 8) : 'the judged commit');
+/**
+ * The real continuation: the never-run segments, chained as the gate chained them,
+ * run through the same fixed-commit strategy as the HEAD run -- a detached checkout
+ * pinned to the HEAD run's verifiedSha (createPinnedVerifyCheckout), under the
+ * focus worktree's verify hold, with the timeout the HEAD run applied. The command
+ * is the gate's own steps, so it is never re-resolved from a manifest (the row
+ * carries no default-on source). The judge loop still requires the continuation's
+ * verifiedSha to equal the judged sha, so a checkout that stopped honouring the
+ * pin yields no verdict, never a verdict about another commit.
+ */
+export function buildDefaultStageContinuation(deps, seams = {}) {
+    const runAtFixedCommit = seams.runAtFixedCommit ?? runDeterministicAtFixedCommit;
+    const createPinned = seams.createPinnedCheckout ?? createPinnedVerifyCheckout;
+    return async (v, segments, head) => {
+        const sha = head.verifiedSha;
+        if (!sha)
+            return { outcome: 'pending', rationale: 'no judged commit to continue the gate at', checkoutUnavailable: true };
+        const applied = head.appliedConfig;
+        const row = {
+            ...v,
+            verificationConfig: {
+                command: continuationCommand(segments),
+                timeoutMs: applied?.timeoutMs ?? DEFAULT_VERIFICATION_TIMEOUT_MS,
+                ...(applied ? { timeoutSource: applied.timeoutSource } : {}),
+            },
+        };
+        delete row.defaultOnSource;
+        return runAtFixedCommit({ ...deps, createVerifyCheckout: (worktreePath, key) => createPinned(worktreePath, `${key}-continuation`, sha) }, row);
+    };
+}
+//# sourceMappingURL=verification-attribution.js.map

package/dist/verify/verification-attribution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-attribution.js","sourceRoot":"","sources":["../../src/verify/verification-attribution.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,yEAAyE;AACzE,gBAAgB;AAoDhB,OAAO,EAAE,+BAA+B,EAAuB,MAAM,iCAAiC,CAAC;AAEvG,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,GAGtB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAClB,uBAAuB,GAGxB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC7H,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EACL,0BAA0B,EAC1B,6BAA6B,GAG9B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAKrD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,CAAsB,EACtB,MAAsB,EACtB,IAAsB;IAEtB,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,GAAG,CAAC,IAAI,CACN,2DAA2D,CAAC,CAAC,UAAU,MAAM;YAC7E,0DAA0D,CAC3D,CAAC;QACF,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,iBAAiB;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,cAAc;YAAE,OAAO,IAAI,CAAC,CAAC,+CAA+C;QACjF,IAAI,cAAc,CAAC,eAAe,KAAK,SAAS;YAAE,OAAO,uBAAuB,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,eAAe,CAAC,CAAC;QAC5H,IAAI,cAAc,CAAC,gBAAgB,KAAK,SAAS;YAAE,OAAO,sBAAsB,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,CAAC,gBAAgB,CAAC,CAAC;QAC7I,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;QACrC,IAAI,MAAM,EAAE,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YACrD,OAAO,MAAM,kBAAkB,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QACrG,CAAC;QACD,OAAO,kBAAkB,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC,UAAU,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QAC7G,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,SAAS,kBAAkB,CAAC,CAAsB,EAAE,MAAsB,EAAE,cAAqC;IAC/G,MAAM,UAAU,GAAG,gBAAgB,CAAC,CAAC,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IAClE,MAAM,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;IAC5C,MAAM,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;IAC5C,MAAM,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;IACxC,IAAI,UAAU,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QACnC,4EAA4E;QAC5E,4EAA4E;QAC5E,gDAAgD;QAChD,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC;QAC1B,GAAG,CAAC,IAAI,CAAC,kBAAkB,UAAU,CAAC,SAAS,cAAc,CAAC,CAAC,UAAU,kDAAkD,CAAC,CAAC;QAC7H,OAAO,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;IACpC,IAAI,UAAU,CAAC,GAAG;QAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,QAAmC;IACpD,OAAO;QACL,OAAO,EAAE,CAAC,gFAAgF,CAAC;QAC3F,YAAY,EAAE,CAAC;QACf,kBAAkB,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,IAAI,IAAI,EAAE;KAC7E,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,SAAS,uBAAuB,CAAC,CAAsB,EAAE,MAAsB,EAAE,MAAc;IAC7F,MAAM,CAAC,OAAO,GAAG,SAAS,CAAC;IAC3B,MAAM,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAClC,MAAM,CAAC,SAAS;QACd,qCAAqC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,gDAAgD;YACjH,sBAAsB,MAAM,kEAAkE,CAAC;IACjG,GAAG,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,SAAS,cAAc,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;IAC1E,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAAC,CAAsB,EAAE,MAAsB,EAAE,cAAqC,EAAE,MAAc;IACnI,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,IAAI,IAAI,CAAC;IAC/D,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC;IAC1B,IAAI,KAAK,KAAK,IAAI;QAAE,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC;IAC/C,MAAM,CAAC,WAAW,GAAG,CAAC,GAAG,cAAc,CAAC,WAAW,EAAE,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3F,MAAM,CAAC,WAAW,GAAG,EAAE,CAAC;IACxB,MAAM,CAAC,SAAS;QACd,6BAA6B,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,eAAe;YAC3H,wCAAwC,MAAM,0CAA0C,CAAC;IAC3F,GAAG,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,SAAS,cAAc,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;IAC1E,OAAO,IAAI,CAAC;AACd,CAAC;AAmBD;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAa,EACb,IAAmB,EACnB,IAA4B,EAC5B,WAAgC;IAEhC,MAAM,GAAG,GAAG,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC;IAChF,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACnH,MAAM,OAAO,GAAqB,GAAG;QACnC,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC;QAC/C,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,EAAE,EAAE,UAAU,EAAE,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;IAC5F,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC;IAClF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;AAC/H,CAAC;AAED,MAAM,UAAU,GAAG,wCAAwC,CAAC;AAE5D,SAAS,cAAc,CAAC,GAAiB,EAAE,IAAmB,EAAE,QAAgB;IAC9E,MAAM,OAAO,GAAG,CAAC,UAAkB,EAAE,iBAA2B,EAAE,EAAoB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC;IAC3I,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,UAAU,oCAAoC,CAAC,CAAC;IAChH,CAAC;IACD,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC,GAAG,UAAU,kDAAkD,CAAC,CAAC;IACjH,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,OAAO,CAAC,GAAG,UAAU,6HAA6H,CAAC,CAAC;IAC7J,CAAC;IACD,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;IAC1E,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAC5D,OAAO,OAAO,CAAC,GAAG,UAAU,0BAA0B,SAAS,CAAC,MAAM,qCAAqC,mBAAmB,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;AAC1J,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa,EAAE,IAA4B;IACxE,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,wFAAwF,CAAC;IACnH,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,oCAAoC,CAAC;IAC1E,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,KAAK,IAAI,kBAAkB,CAAC;QACjF,OAAO,oFAAoF,OAAO,IAAI,CAAC;IACzG,CAAC;IACD,OAAO,0CAA0C,CAAC;AACpD,CAAC;AAgBD,KAAK,UAAU,kBAAkB,CAC/B,CAAsB,EACtB,MAAsB,EACtB,cAAqC,EACrC,MAAmD,EACnD,IAAsB;IAEtB,MAAM,eAAe,GAAG,IAAI,CAAC,oBAAoB,IAAI,6BAA6B,CAAC,IAAI,CAAC,CAAC;IACzF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACrD,MAAM,MAAM,GAAsB,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;IACnE,IAAI,GAAG,GAAkB,MAAM,CAAC,IAAI,CAAC;IACrC,IAAI,QAAQ,GAAkB;QAC5B,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,cAAc,CAAC,WAAW,EAAE,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;QAChF,WAAW,EAAE,MAAM,CAAC,eAAe;KACpC,CAAC;IACF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,gBAAgB,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAClF,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,CAAC;QAC9B,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC3E,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACjF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,WAAW;YAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC;YAAE,OAAO,kBAAkB,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,4BAA4B,CAAC,CAAC;QACzG,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,OAAO,oBAAoB,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,mCAAmC,CAAC,CAAC;QAC7G,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,eAAe,EAAE,CAAC,EAAE,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC5F,MAAM,IAAI,GAAG,kBAAkB,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACnE,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC;QAC9C,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACf,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC3B,CAAC;IACD,OAAO,oBAAoB,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,iCAAiC,CAAC,CAAC;AACpF,CAAC;AAED,4FAA4F;AAC5F,SAAS,kBAAkB,CACzB,CAAsB,EACtB,MAAsB,EACtB,SAAyB,EACzB,IAAmB,EACnB,MAAyB;IAEzB,MAAM,UAAU,GAAG,SAAS,CAAC,WAAW,KAAK,SAAS,IAAI,SAAS,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CAAC;IACvG,IAAI,SAAS,CAAC,OAAO,KAAK,QAAQ,IAAI,UAAU,EAAE,CAAC;QACjD,OAAO,OAAO,CAAC,kBAAkB,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,4CAA4C,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IACpI,CAAC;IACD,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;QACvB,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACjC,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC;QAC1B,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClC,MAAM,CAAC,SAAS,GAAG,GAAG,SAAS,CAAC,SAAS,IAAI,4BAA4B,6CAA6C;YACpH,aAAa,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,wEAAwE,CAAC;QAClH,GAAG,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,SAAS,cAAc,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;QAC1E,OAAO,OAAO,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,SAAS,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,UAAU;QAAE,OAAO,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IAChH,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,uBAAuB,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAChG,IAAI,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,oBAAoB,CAAC,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;IAC5I,CAAC;IACD,OAAO,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,IAAgC,EAAoB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAEpG,KAAK,UAAU,qBAAqB,CAClC,GAA4B,EAC5B,CAAsB,EACtB,QAAgC,EAChC,IAAoB;IAEpB,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,+BAAgC,GAAa,CAAC,OAAO,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC;IAC/H,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,sDAAsD;AACtD,8EAA8E;AAE9E,SAAS,WAAW,CAAC,MAAsB,EAAE,KAAa,EAAE,MAAmD,EAAE,MAAyB;IACxI,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC;IAC1B,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACxC,MAAM,CAAC,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnF,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,iBAAiB,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5E,MAAM,CAAC,SAAS;QACd,wCAAwC,KAAK,MAAM,MAAM,CAAC,UAAU,EAAE;YACtE,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,WAAW,CAAC,MAAM,oCAAoC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,sDAAsD,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACvH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAsB,EAAE,MAAsB,EAAE,MAAyB,EAAE,KAAa;IAClH,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC;IAC1B,OAAO,MAAM,CAAC,WAAW,CAAC;IAC1B,MAAM,CAAC,WAAW,GAAG,EAAE,CAAC;IACxB,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,MAAM,CAAC,SAAS;QACd,iGAAiG;YACjG,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,8BAA8B,KAAK,sBAAsB,CAAC;IACzF,GAAG,CAAC,IAAI,CACN,2BAA2B,CAAC,CAAC,UAAU,iCAAiC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG;QACrG,2BAA2B,KAAK,sBAAsB,CACvD,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6GAA6G;AAC7G,SAAS,eAAe,CAAC,CAAsB,EAAE,MAAsB,EAAE,MAAyB,EAAE,OAA4B;IAC9H,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC;IAC1B,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,wDAAwD,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IACnG,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,SAAS,GAAG,GAAG,KAAK,4FAA4F;YACrH,mFAAmF,CAAC;QACtF,GAAG,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,SAAS,cAAc,CAAC,CAAC,UAAU,kDAAkD,CAAC,CAAC;QACzH,OAAO,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IACD,gFAAgF;IAChF,MAAM,CAAC,WAAW,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,CAAC,SAAS,GAAG,+BAA+B,KAAK,WAAW,OAAO,CAAC,IAAI,uDAAuD,CAAC;IACtI,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gHAAgH;AAChH,SAAS,cAAc,CAAC,CAAsB,EAAE,MAAsB,EAAE,MAAyB,EAAE,SAAyB;IAC1H,MAAM,CAAC,OAAO,GAAG,SAAS,CAAC;IAC3B,MAAM,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAClC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,MAAM,CAAC,SAAS;QACd,iBAAiB,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,uEAAuE;YAClH,uBAAuB,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC,SAAS,IAAI,SAAS,CAAC,OAAO,oCAAoC,CAAC;IACvI,GAAG,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,SAAS,cAAc,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;IAC1E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uGAAuG;AACvG,SAAS,oBAAoB,CAAC,CAAsB,EAAE,MAAsB,EAAE,MAAyB,EAAE,GAAW;IAClH,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC;IAC1B,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,MAAM,CAAC,SAAS;QACd,iBAAiB,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,uEAAuE;YAClH,qBAAqB,GAAG,sDAAsD,CAAC;IACjF,GAAG,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,SAAS,cAAc,CAAC,CAAC,UAAU,kDAAkD,CAAC,CAAC;IACzH,OAAO,EAAE,OAAO,EAAE,CAAC,oDAAoD,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;AACnI,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAsB,EAAE,MAAyB;IAC1E,MAAM,CAAC,iBAAiB,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,CAAC,WAAW,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;AAChD,CAAC;AAED,oHAAoH;AACpH,SAAS,aAAa,CAAC,MAAsB,EAAE,SAAyB;IACtE,MAAM,CAAC,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;IACnC,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC;IACzC,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC;IACzC,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;IACrC,MAAM,CAAC,aAAa,GAAG,SAAS,CAAC,aAAa,CAAC;AACjD,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,MAAyB,EAAU,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1G,MAAM,QAAQ,GAAG,CAAC,GAAuB,EAAU,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;AAYpG;;;;;;;;;GASG;AACH,MAAM,UAAU,6BAA6B,CAAC,IAAsB,EAAE,QAAgC,EAAE;IACtG,MAAM,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,IAAI,6BAA6B,CAAC;IACjF,MAAM,YAAY,GAAG,KAAK,CAAC,oBAAoB,IAAI,0BAA0B,CAAC;IAC9E,OAAO,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC;QAC7B,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,0CAA0C,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC;QAC1H,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC;QACnC,MAAM,GAAG,GAAwB;YAC/B,GAAG,CAAC;YACJ,kBAAkB,EAAE;gBAClB,OAAO,EAAE,mBAAmB,CAAC,QAAQ,CAAC;gBACtC,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,+BAA+B;gBAChE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7D;SACF,CAAC;QACF,OAAO,GAAG,CAAC,eAAe,CAAC;QAC3B,OAAO,gBAAgB,CACrB,EAAE,GAAG,IAAI,EAAE,oBAAoB,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,GAAG,GAAG,eAAe,EAAE,GAAG,CAAC,EAAE,EAChH,GAAG,CACJ,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/verify/verification-baseline-run.d.ts

@@ -0,0 +1,123 @@
+import { type VerifyCheckout } from './verification-checkout.js';
+import { type WorktreeProvisioningStatus } from '../worktree/worktree-package-provisioning.js';
+/**
+ * A base run's output and how it ended. A runner that returns only the output
+ * string reports no exit status, so its stage outcomes are unknown: stage reds
+ * are then never demoted, while failing-test ids still parse.
+ */
+export interface BaselineRunOutput {
+    output: string;
+    exitCode: number | null;
+    timedOut: boolean;
+}
+/** One red stage the base measured. */
+export interface BaseStageRed {
+    stage: string;
+    /** The failing-test ids of the run that ended at this red. */
+    failingTests: string[];
+    /** The red's diagnostic signatures (a multiset, sorted). */
+    diagnostics: string[];
+}
+/** What the base did, stage by stage, across the gate run and its continuations. */
+export interface BaseStageRecord {
+    /** Stages that ran green, in the order they finished. */
+    ran: string[];
+    /** Every red stage, in order. */
+    failed: BaseStageRed[];
+    /** Stages the base never ran: after a red the measurement could not continue past. */
+    notRun: string[];
+}
+/** What one base measurement recorded: its failing-test ids and its stage outcomes. */
+export interface BaselineRecord {
+    failingTests: string[];
+    /** Null when the base gate run's log vouched for no stage outcomes (it then demotes no stage red). */
+    stages: BaseStageRecord | null;
+}
+/** No base evidence could be taken this time: never a verdict, never cached. */
+export interface BaselineUnavailable {
+    unavailable: string;
+    /**
+     * Set when the base can never be measured comparably with the installs at hand
+     * (the focus changed its dependency install inputs -- module doc): retrying
+     * would refuse the same way, so nothing is demoted and every HEAD red is
+     * charged rather than deferred.
+     */
+    incomparable?: true;
+}
+/** A base checkout the measurement runs commands in. */
+export interface BaselineCheckout {
+    /** Run one command (the gate, then each continuation) in the checkout. */
+    run: (command: string) => Promise<BaselineRunOutput | string>;
+    /** The checkout's absolute path, stripped from diagnostics. */
+    path?: string;
+    /** True when an install moved the linked dependency trees since the checkout was made. */
+    dependenciesMoved?: () => boolean;
+    dispose?: () => void;
+}
+export type BaselineOpenResult = BaselineCheckout | BaselineUnavailable;
+export declare const isBaselineUnavailable: (value: object) => value is BaselineUnavailable;
+/**
+ * Measure the base in `checkout` (module doc): the gate, then a continuation after
+ * each red until the chain completes or cannot be continued. A killed gate run
+ * vouches for no stages -- the last stage it started was cut off, not failed.
+ */
+export declare function measureBaseline(checkout: BaselineCheckout, gateCommand: string): Promise<BaselineRecord>;
+/**
+ * Validate a base stage record read back from a cache file: the record, null when
+ * the entry recorded that the base yielded none, or undefined when the value is
+ * not a record of this format (an old-format entry with a single `failedStage`
+ * and no diagnostics, or a corrupt one -- a cache miss).
+ */
+export declare function readBaseStages(value: unknown): BaseStageRecord | null | undefined;
+/** Git result slice the parity read uses (structural over runGitSync). */
+type GitRun = (args: string[], cwd: string) => {
+    success: boolean;
+    output: string;
+    error?: string;
+};
+/**
+ * Whether the focus worktree's installs stand for the base's: yes, no (naming what
+ * changed, and why each input the install-input model could not follow counts as
+ * a change), or unknown.
+ */
+export type DependencyParity = {
+    comparable: true;
+} | {
+    comparable: false;
+    changed: string[];
+    unresolvable?: string[];
+} | {
+    unreadable: string;
+};
+/** Reads a tracked file's content at a commit; throws when git cannot. */
+export type CommitFileReader = (worktreePath: string, sha: string, path: string) => string;
+/**
+ * Compare every tracked install input between `baseSha` and the focus worktree's
+ * working tree -- what its installs were provisioned from (module doc). A manifest
+ * added or removed since the base is a change; one modified on both sides is a
+ * change unless its install intent is equal (unparseable on either side is a
+ * change). Every file an install consumes is compared byte for byte, and an input
+ * the install-input model cannot follow is a change. Unreadable when git cannot
+ * list or read them.
+ */
+export declare function readBaseDependencyParity(focusWorktreePath: string, baseSha: string, runGit?: GitRun, readAtCommit?: CommitFileReader): DependencyParity;
+/** Spawn `sh -c command` in cwd and capture the FULL combined stdout+stderr and how it ended. */
+export declare function runShellCapture(command: string, cwd: string, timeoutMs: number): Promise<BaselineRunOutput>;
+/** Seams of the default base checkout (tests inject provisioning, dependency parity and the runner). */
+export interface BaselineCheckoutSeams {
+    readWorktreeProvisioning?: (focusWorktreePath: string) => WorktreeProvisioningStatus;
+    readDependencyParity?: (focusWorktreePath: string, baseSha: string) => DependencyParity;
+    createCheckout?: (focusWorktreePath: string, checkoutKey: string, sha: string) => VerifyCheckout | null;
+    runCommand?: (command: string, cwd: string, timeoutMs: number) => Promise<BaselineRunOutput>;
+    acquireHold?: (worktreePath: string) => () => void;
+}
+/**
+ * The real base checkout (module doc): refused unless the focus worktree is
+ * provisioned and its install inputs match the base's; made off the focus
+ * worktree pinned to the base sha, its dependencies mirrored from the focus
+ * worktree; held against installs until disposed. `checkoutKey` names the
+ * directory (one per judged delivery, so two verifies never share it).
+ */
+export declare function buildDefaultOpenBaseline(focusWorktreePath: string, checkoutKey: string, timeoutMs: number, seams?: BaselineCheckoutSeams): (baseSha: string) => BaselineOpenResult;
+export {};
+//# sourceMappingURL=verification-baseline-run.d.ts.map