@telora/daemon 0.22.97 → 0.22.131

package/dist/verify/verification-baseline-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-baseline-run.d.ts","sourceRoot":"","sources":["../../src/verify/verification-baseline-run.ts"],"names":[],"mappings":"AAmFA,OAAO,EAA8B,KAAK,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC7F,OAAO,EAA4B,KAAK,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAWzH;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,uCAAuC;AACvC,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,8DAA8D;IAC9D,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,4DAA4D;IAC5D,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,oFAAoF;AACpF,MAAM,WAAW,eAAe;IAC9B,yDAAyD;IACzD,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,iCAAiC;IACjC,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,sFAAsF;IACtF,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,uFAAuF;AACvF,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,sGAAsG;IACtG,MAAM,EAAE,eAAe,GAAG,IAAI,CAAC;CAChC;AAED,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,IAAI,CAAC;CACrB;AAED,wDAAwD;AACxD,MAAM,WAAW,gBAAgB;IAC/B,0EAA0E;IAC1E,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,iBAAiB,GAAG,MAAM,CAAC,CAAC;IAC9D,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0FAA0F;IAC1F,iBAAiB,CAAC,EAAE,MAAM,OAAO,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;CACtB;AAED,MAAM,MAAM,kBAAkB,GAAG,gBAAgB,GAAG,mBAAmB,CAAC;AAExE,eAAO,MAAM,qBAAqB,GAAI,OAAO,MAAM,KAAG,KAAK,IAAI,mBAA6C,CAAC;AAa7G;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAwB9G;AAWD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,GAAG,IAAI,GAAG,SAAS,CAQjF;AAMD,0EAA0E;AAC1E,KAAK,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,KAAK;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAiCpG;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GACxB;IAAE,UAAU,EAAE,IAAI,CAAA;CAAE,GACpB;IAAE,UAAU,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GACjE;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3B,0EAA0E;AAC1E,MAAM,MAAM,gBAAgB,GAAG,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;AAoG3F;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,iBAAiB,EAAE,MAAM,EACzB,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,MAAmB,EAC3B,YAAY,GAAE,gBAAiC,GAC9C,gBAAgB,CAqBlB;AA2BD,iGAAiG;AACjG,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAW3G;AAED,wGAAwG;AACxG,MAAM,WAAW,qBAAqB;IACpC,wBAAwB,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,KAAK,0BAA0B,CAAC;IACrF,oBAAoB,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,gBAAgB,CAAC;IACxF,cAAc,CAAC,EAAE,CAAC,iBAAiB,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,cAAc,GAAG,IAAI,CAAC;IACxG,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC7F,WAAW,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,MAAM,IAAI,CAAC;CACpD;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,iBAAiB,EAAE,MAAM,EACzB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,KAAK,GAAE,qBAA0B,GAChC,CAAC,OAAO,EAAE,MAAM,KAAK,kBAAkB,CA2BzC"}

package/dist/verify/verification-baseline-run.js

@@ -0,0 +1,386 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/integration/focus-commit-verdict-scenario.test.ts,
+//   packages/daemon/src/verify/verification-attribution.test.ts,
+//   packages/daemon/src/verify/verification-baseline-run.test.ts
+// PINNED-BY-END
+/**
+ * Measuring the focus base: a provisioned detached checkout at the base sha, the
+ * gate run there, and every red stage past the first measured too.
+ *
+ * Extracted from verification-baseline.ts, which owns the cache and the
+ * attribution orchestration; this module owns what one base measurement IS.
+ *
+ * The checkout carries the SAME readiness contract as the HEAD run
+ * (verify/verification-checkout.ts). A fresh `git worktree add` has no installed
+ * dependencies, and a nested package (packages/daemon, mcp/telora-products)
+ * resolves its node_modules only from its own ignored directory -- so a bare base
+ * checkout could not load eslint-import-resolver-typescript or tsx, and "base
+ * evidence" measured the checkout, not the base commit. The base checkout is
+ * therefore made off the PROVISIONED focus worktree (readWorktreeProvisioning
+ * must say ready), pinned to the base sha, with the focus worktree's node_modules
+ * mirrored in exactly as the HEAD checkout mirrors them, under a verify hold on
+ * the focus worktree so no install starts mid-run. An unready worktree, a
+ * checkout or mirror that cannot be made, a run that throws, or an install that
+ * moved the linked packages mid-run is EVIDENCE UNAVAILABLE: never a baseline
+ * verdict, never cached (the caller defers, and the next tick measures again).
+ *
+ * Dependency parity. Those mirrored installs were installed from the FOCUS
+ * worktree's lockfiles, so they stand for the base's only while the focus has
+ * not changed what an install reads. Were it measured anyway, a red the focus's
+ * own dependency change causes (a bumped tool version, a new resolver) would
+ * reproduce on base source under the focus's installs and be demoted as
+ * pre-existing. So before any checkout is made, every tracked install input
+ * (package-lock.json, npm-shrinkwrap.json, package.json, .npmrc, binding.gyp --
+ * at any depth, none under node_modules) is compared between the base sha and the
+ * focus worktree ({@link readBaseDependencyParity}), as install INTENT: a lockfile
+ * without the package's own name and version (a version bump installs nothing
+ * new, and this repo bumps a package version with most changes), a package.json's
+ * install-shaping fields and the lifecycle scripts an install RUNS (a
+ * `postinstall` and its kin write into the very node_modules the base borrows, so
+ * a red their side effects cause reproduces on base source too -- every other
+ * script is source, which the checkout pins to the base), an .npmrc or
+ * binding.gyp byte for byte. A lifecycle command's STRING is not the whole input,
+ * though: an unchanged `postinstall: node scripts/patch.cjs` whose script changed
+ * installs differently (TEL-9). So every file an install CONSUMES -- the scripts
+ * its lifecycle commands run and what they load, a native addon's sources -- is
+ * compared too, byte for byte, read from the install-input model the
+ * provisioning fingerprint reads (worktree/install-inputs.ts), on both the base
+ * and the focus worktree; a command the model cannot follow is a change. When
+ * they differ the base is INCOMPARABLE with the installs at hand. Retrying cannot change that for this base and worktree,
+ * so it is not deferred as missing evidence (which would re-run the gate every
+ * tick, forever): it is refused with `incomparable` set, never cached, demotes
+ * nothing, and every HEAD red is charged to the delivery
+ * (verify/verification-attribution.ts). A parity that cannot be READ (git fails)
+ * is plain evidence unavailable.
+ *
+ * Every red, not just the first. A gate run stops at its first red, so a base
+ * record of only that stage reads every later stage as "never ran on the base"
+ * -- and a head that inherits two reds would be charged for the second. The
+ * measurement runs the never-run stages as a CONTINUATION in the same checkout
+ * after each red, until the chain completes or a stage cannot be run (a
+ * continuation that times out or whose log vouches for nothing), recording each
+ * red's stage, failing-test ids and diagnostic signatures
+ * (verify/verification-diagnostics.ts). A stage that never ran on the base stays
+ * in `notRun`: never a pass, never pre-existing. All of it is one measurement per
+ * (base sha, gate), cached once.
+ *
+ * @module verify/verification-baseline-run
+ */
+import { execFileSync, spawn } from 'node:child_process';
+import { readFileSync } from 'node:fs';
+import { basename, join } from 'node:path';
+import { parseFailingTests } from './verification-failure-parser.js';
+import { MAX_STAGE_ROUNDS, continuationCommand, hasStageToContinue, parseContinuationStages, parseGateRunStages, } from './verification-gate-stages.js';
+import { diagnosticSignatures } from './verification-diagnostics.js';
+import { createPinnedVerifyCheckout } from './verification-checkout.js';
+import { readWorktreeProvisioning } from '../worktree/worktree-package-provisioning.js';
+import { acquireVerifyHold } from '../worktree/verify-interlock.js';
+import { INSTALL_LIFECYCLE_SCRIPTS, listInstallRoots, readInstallInputs, readWorktreeInstallTree, trackedInstallTree, } from '../worktree/install-inputs.js';
+import { runGitSync } from '../git/exec.js';
+export const isBaselineUnavailable = (value) => 'unavailable' in value;
+const asRunOutput = (run) => (typeof run === 'string' ? { output: run, exitCode: null, timedOut: false } : run);
+function redOf(stage, run, output, roots) {
+    return {
+        stage,
+        failingTests: [...parseFailingTests(output)].sort(),
+        diagnostics: diagnosticSignatures(run.failedStageOutput, roots),
+    };
+}
+/**
+ * Measure the base in `checkout` (module doc): the gate, then a continuation after
+ * each red until the chain completes or cannot be continued. A killed gate run
+ * vouches for no stages -- the last stage it started was cut off, not failed.
+ */
+export async function measureBaseline(checkout, gateCommand) {
+    const first = asRunOutput(await checkout.run(gateCommand));
+    const failing = new Set(parseFailingTests(first.output));
+    const parsed = first.timedOut ? null : parseGateRunStages(first.output, first.exitCode, gateCommand);
+    if (!parsed)
+        return { failingTests: [...failing].sort(), stages: null };
+    const roots = checkout.path ? [checkout.path] : [];
+    const stages = { ran: [...parsed.ran], failed: [], notRun: [...parsed.notRun] };
+    let run = parsed;
+    let output = first.output;
+    for (let round = 1; run.failedStage !== null; round++) {
+        stages.failed.push(redOf(run.failedStage, run, output, roots));
+        if (!hasStageToContinue(run) || round >= MAX_STAGE_ROUNDS)
+            break;
+        const next = asRunOutput(await checkout.run(continuationCommand(run.continuation)));
+        for (const id of parseFailingTests(next.output))
+            failing.add(id);
+        const continued = next.timedOut
+            ? null
+            : parseContinuationStages(next.output, next.exitCode, run.continuation, run.package);
+        if (!continued)
+            break; // the stages after this red stay "did not run"
+        stages.ran.push(...continued.ran);
+        stages.notRun = [...continued.notRun];
+        output = next.output;
+        run = continued;
+    }
+    return { failingTests: [...failing].sort(), stages };
+}
+const isStringArray = (value) => Array.isArray(value) && value.every((item) => typeof item === 'string');
+function readRed(value) {
+    if (value === null || typeof value !== 'object')
+        return undefined;
+    const { stage, failingTests, diagnostics } = value;
+    if (typeof stage !== 'string' || !isStringArray(failingTests) || !isStringArray(diagnostics))
+        return undefined;
+    return { stage, failingTests: [...failingTests], diagnostics: [...diagnostics] };
+}
+/**
+ * Validate a base stage record read back from a cache file: the record, null when
+ * the entry recorded that the base yielded none, or undefined when the value is
+ * not a record of this format (an old-format entry with a single `failedStage`
+ * and no diagnostics, or a corrupt one -- a cache miss).
+ */
+export function readBaseStages(value) {
+    if (value === null)
+        return null;
+    if (typeof value !== 'object')
+        return undefined;
+    const { ran, failed, notRun } = value;
+    if (!isStringArray(ran) || !isStringArray(notRun) || !Array.isArray(failed))
+        return undefined;
+    const reds = failed.map(readRed);
+    if (reds.some((red) => red === undefined))
+        return undefined;
+    return { ran: [...ran], failed: reds, notRun: [...notRun] };
+}
+/** The tracked files an install reads, at any depth, none under a node_modules segment. */
+const INSTALL_INPUT_PATHSPECS = [
+    ':(glob)**/package-lock.json',
+    ':(glob)**/npm-shrinkwrap.json',
+    ':(glob)**/package.json',
+    ':(glob)**/.npmrc',
+    ':(glob)**/binding.gyp',
+    ':(exclude,glob)**/node_modules/**',
+];
+/** The install inputs compared byte for byte (the rest are JSON, compared as intent). */
+const BYTE_FOR_BYTE_INPUTS = new Set(['.npmrc', 'binding.gyp']);
+/**
+ * The package.json fields that decide what an install puts in node_modules: the
+ * dependency fields; `bin` (and `directories.bin`, which npm reads as `bin`),
+ * because a workspace's or linked package's bins are linked into node_modules/.bin;
+ * `gypfile`, which switches the implicit `node-gyp rebuild` install npm gives a
+ * package with a binding.gyp; and `packageManager`, which picks the installer a
+ * corepack shim runs (another npm can lay out another tree from the same
+ * lockfile). Left out: fields that decide only WHETHER an install proceeds, never
+ * what it installs -- `engines`/`devEngines` (a mismatch warns, or fails under
+ * engine-strict, itself an .npmrc input) and `os`/`cpu`/`libc` (a mismatch fails
+ * a non-optional package). A change to one leaves either an unprovisioned
+ * worktree, which is never measured, or the same tree.
+ */
+const MANIFEST_INSTALL_FIELDS = [
+    'dependencies', 'devDependencies', 'optionalDependencies', 'peerDependencies', 'peerDependenciesMeta',
+    'bundleDependencies', 'bundledDependencies', 'overrides', 'workspaces', 'bin', 'gypfile', 'packageManager',
+];
+/** `git show <sha>:<path>`, with room for a whole lockfile (runGitSync's buffer is not sized for one). */
+const readCommitFile = (worktreePath, sha, path) => execFileSync('git', ['show', `${sha}:${path}`], {
+    cwd: worktreePath,
+    encoding: 'utf8',
+    maxBuffer: 256 * 1024 * 1024,
+    timeout: 60_000,
+    stdio: ['ignore', 'pipe', 'pipe'],
+});
+const isPlainObject = (value) => value !== null && typeof value === 'object' && !Array.isArray(value);
+/** An object without the package's own identity (name, version); anything else unchanged. */
+function withoutIdentity(value) {
+    if (!isPlainObject(value))
+        return value;
+    const copy = { ...value };
+    delete copy.name;
+    delete copy.version;
+    return copy;
+}
+/**
+ * What a package.json asks an install for: its install fields and install
+ * lifecycle scripts, or null when `scripts` or `directories` is not an object
+ * (not a manifest the projection can read, so a change).
+ */
+function manifestIntent(manifest) {
+    const { scripts = {}, directories = {} } = manifest;
+    if (!isPlainObject(scripts) || !isPlainObject(directories))
+        return null;
+    return JSON.stringify([
+        ...MANIFEST_INSTALL_FIELDS.map((field) => [field, manifest[field] ?? null]),
+        ['directories.bin', directories.bin ?? null],
+        ...INSTALL_LIFECYCLE_SCRIPTS.map((script) => [`scripts.${script}`, scripts[script] ?? null]),
+    ]);
+}
+/** What one install input asks an install for (module doc), or null when it cannot be read as one. */
+function installIntent(path, text) {
+    if (BYTE_FOR_BYTE_INPUTS.has(basename(path)))
+        return text;
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch {
+        return null;
+    }
+    if (!isPlainObject(parsed))
+        return null;
+    if (basename(path) === 'package.json')
+        return manifestIntent(parsed);
+    const lock = withoutIdentity(parsed);
+    if (isPlainObject(lock) && isPlainObject(lock.packages))
+        lock.packages = { ...lock.packages, '': withoutIdentity(lock.packages['']) };
+    return JSON.stringify(lock);
+}
+/**
+ * The consumed install inputs (worktree/install-inputs.ts) that differ between
+ * `baseSha` and the focus worktree: for every install root on either side, each
+ * file either side's install consumes that git reports changed, and the manifest
+ * of every input either side cannot follow (fail closed: a change, with its
+ * reason -- that root's consumed files are then not listed one by one).
+ * Unreadable when git cannot list a tree or read an input.
+ */
+function readConsumedInputChanges(focusWorktreePath, baseSha, runGit, readAtCommit) {
+    const base8 = baseSha.slice(0, 8);
+    const listed = runGit(['ls-tree', '-r', '-z', '--name-only', baseSha], focusWorktreePath);
+    const moved = runGit(['diff', '-z', '--name-only', '--no-renames', baseSha], focusWorktreePath);
+    const head = readWorktreeInstallTree(focusWorktreePath, runGit);
+    if (!listed.success || !moved.success || head === null) {
+        return { unreadable: `git could not list the tracked files of the focus worktree and its base ${base8}: ${listed.error || moved.error || 'ls-files failed'}` };
+    }
+    const base = trackedInstallTree(listed.output.split('\0'), (path) => Buffer.from(readAtCommit(focusWorktreePath, baseSha, path), 'utf8'));
+    const movedPaths = new Set(moved.output.split('\0'));
+    const changed = new Set();
+    const unresolvable = new Set();
+    for (const root of new Set([...listInstallRoots(base), ...listInstallRoots(head)])) {
+        let sides;
+        try {
+            sides = [readInstallInputs(base, root), readInstallInputs(head, root)];
+        }
+        catch (err) {
+            return { unreadable: `the install inputs of ${root || 'the repo root'} could not be read at both ${base8} and the focus worktree: ${err.message}` };
+        }
+        const unfollowed = sides.flatMap((inputs) => inputs.unresolvable);
+        for (const input of unfollowed) {
+            changed.add(input.manifest);
+            unresolvable.add(input.reason);
+        }
+        if (unfollowed.length > 0)
+            continue;
+        for (const path of sides.flatMap((inputs) => inputs.consumed))
+            if (movedPaths.has(path))
+                changed.add(path);
+    }
+    return { changed: [...changed], unresolvable: [...unresolvable].sort() };
+}
+/**
+ * Compare every tracked install input between `baseSha` and the focus worktree's
+ * working tree -- what its installs were provisioned from (module doc). A manifest
+ * added or removed since the base is a change; one modified on both sides is a
+ * change unless its install intent is equal (unparseable on either side is a
+ * change). Every file an install consumes is compared byte for byte, and an input
+ * the install-input model cannot follow is a change. Unreadable when git cannot
+ * list or read them.
+ */
+export function readBaseDependencyParity(focusWorktreePath, baseSha, runGit = runGitSync, readAtCommit = readCommitFile) {
+    const diff = runGit(['diff', '-z', '--name-status', '--no-renames', baseSha, '--', ...INSTALL_INPUT_PATHSPECS], focusWorktreePath);
+    if (!diff.success)
+        return { unreadable: `git diff of the install inputs against ${baseSha.slice(0, 8)} failed: ${diff.error || diff.output}` };
+    const tokens = diff.output.split('\0').filter((token) => token.length > 0);
+    const changed = new Set();
+    for (let index = 0; index + 1 < tokens.length; index += 2) {
+        const [status, path] = [tokens[index], tokens[index + 1]];
+        try {
+            const base = status === 'M' ? installIntent(path, readAtCommit(focusWorktreePath, baseSha, path)) : null;
+            const focus = status === 'M' ? installIntent(path, readFileSync(join(focusWorktreePath, path), 'utf8')) : null;
+            if (base === null || focus === null || base !== focus)
+                changed.add(path);
+        }
+        catch (err) {
+            return { unreadable: `${path} could not be read at both ${baseSha.slice(0, 8)} and the focus worktree: ${err.message}` };
+        }
+    }
+    const consumed = readConsumedInputChanges(focusWorktreePath, baseSha, runGit, readAtCommit);
+    if ('unreadable' in consumed)
+        return consumed;
+    for (const path of consumed.changed)
+        changed.add(path);
+    if (changed.size === 0)
+        return { comparable: true };
+    const unresolvable = consumed.unresolvable.length > 0 ? { unresolvable: consumed.unresolvable } : {};
+    return { comparable: false, changed: [...changed].sort(), ...unresolvable };
+}
+/** The refusal a base checkout returns when the installs at hand do not stand for the base's, else null. */
+function dependencyParityRefusal(parity, baseSha) {
+    const base = baseSha.slice(0, 8);
+    if ('unreadable' in parity) {
+        return {
+            unavailable: `the dependency install inputs of the focus base ${base} could not be compared with the focus worktree's `
+                + `(${parity.unreadable}), so whether its installs stand for the base's is unknown`,
+        };
+    }
+    if (parity.comparable)
+        return null;
+    const unfollowed = parity.unresolvable?.length
+        ? `; an install input that cannot be followed counts as changed: ${parity.unresolvable.join('; ')}`
+        : '';
+    return {
+        unavailable: `the focus changed dependency install inputs since the base ${base} (${parity.changed.join(', ')})${unfollowed}, so a base `
+            + 'checkout would borrow installs made from the focus\'s install inputs, not the base\'s, and a red those installs cause '
+            + 'could not be told apart from one already on the base',
+        incomparable: true,
+    };
+}
+// ---------------------------------------------------------------------------
+// The default base checkout
+// ---------------------------------------------------------------------------
+/** Spawn `sh -c command` in cwd and capture the FULL combined stdout+stderr and how it ended. */
+export function runShellCapture(command, cwd, timeoutMs) {
+    return new Promise((resolvePromise) => {
+        const child = spawn('sh', ['-c', command], { cwd, stdio: ['ignore', 'pipe', 'pipe'] });
+        let out = '';
+        let timedOut = false;
+        child.stdout?.on('data', (c) => { out += c.toString('utf8'); });
+        child.stderr?.on('data', (c) => { out += c.toString('utf8'); });
+        const timer = setTimeout(() => { timedOut = true; try {
+            child.kill('SIGKILL');
+        }
+        catch { /* ignore */ } }, timeoutMs);
+        child.on('error', () => { clearTimeout(timer); resolvePromise({ output: out, exitCode: null, timedOut }); });
+        child.on('close', (code) => { clearTimeout(timer); resolvePromise({ output: out, exitCode: code, timedOut }); });
+    });
+}
+/**
+ * The real base checkout (module doc): refused unless the focus worktree is
+ * provisioned and its install inputs match the base's; made off the focus
+ * worktree pinned to the base sha, its dependencies mirrored from the focus
+ * worktree; held against installs until disposed. `checkoutKey` names the
+ * directory (one per judged delivery, so two verifies never share it).
+ */
+export function buildDefaultOpenBaseline(focusWorktreePath, checkoutKey, timeoutMs, seams = {}) {
+    return (baseSha) => {
+        const provisioning = (seams.readWorktreeProvisioning ?? readWorktreeProvisioning)(focusWorktreePath);
+        if (!provisioning.ready) {
+            return {
+                unavailable: `the focus worktree is not provisioned (${provisioning.state}: ${provisioning.reason}), so a base `
+                    + 'checkout would measure missing dependencies, not the base commit',
+            };
+        }
+        const parity = (seams.readDependencyParity ?? readBaseDependencyParity)(focusWorktreePath, baseSha);
+        const refused = dependencyParityRefusal(parity, baseSha);
+        if (refused)
+            return refused;
+        const release = (seams.acquireHold ?? acquireVerifyHold)(focusWorktreePath);
+        const checkout = (seams.createCheckout ?? createPinnedVerifyCheckout)(focusWorktreePath, checkoutKey, baseSha);
+        if (!checkout || checkout.sha !== baseSha) {
+            checkout?.dispose();
+            release();
+            return { unavailable: `no provisioned detached checkout of the focus base ${baseSha.slice(0, 8)} could be made` };
+        }
+        const runCommand = seams.runCommand ?? runShellCapture;
+        return {
+            path: checkout.path,
+            run: (command) => runCommand(command, checkout.path, timeoutMs),
+            dependenciesMoved: checkout.dependenciesMoved,
+            dispose: () => { checkout.dispose(); release(); },
+        };
+    };
+}
+//# sourceMappingURL=verification-baseline-run.js.map

package/dist/verify/verification-baseline-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-baseline-run.js","sourceRoot":"","sources":["../../src/verify/verification-baseline-run.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,oFAAoF;AACpF,iEAAiE;AACjE,iEAAiE;AACjE,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8DG;AAEH,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAClB,uBAAuB,EACvB,kBAAkB,GAEnB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,0BAA0B,EAAuB,MAAM,4BAA4B,CAAC;AAC7F,OAAO,EAAE,wBAAwB,EAAmC,MAAM,8CAA8C,CAAC;AACzH,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EACL,yBAAyB,EACzB,gBAAgB,EAChB,iBAAiB,EACjB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAgE5C,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,KAAa,EAAgC,EAAE,CAAC,aAAa,IAAI,KAAK,CAAC;AAE7G,MAAM,WAAW,GAAG,CAAC,GAA+B,EAAqB,EAAE,CACzE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAErF,SAAS,KAAK,CAAC,KAAa,EAAE,GAAkB,EAAE,MAAc,EAAE,KAAwB;IACxF,OAAO;QACL,KAAK;QACL,YAAY,EAAE,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE;QACnD,WAAW,EAAE,oBAAoB,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,CAAC;KAChE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAA0B,EAAE,WAAmB;IACnF,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACrG,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,YAAY,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACxE,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,MAAM,MAAM,GAAoB,EAAE,GAAG,EAAE,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IACjG,IAAI,GAAG,GAAkB,MAAM,CAAC;IAChC,IAAI,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC1B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,WAAW,KAAK,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACtD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,gBAAgB;YAAE,MAAM;QACjE,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACpF,KAAK,MAAM,EAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjE,MAAM,SAAS,GAAyB,IAAI,CAAC,QAAQ;YACnD,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACvF,IAAI,CAAC,SAAS;YAAE,MAAM,CAAC,+CAA+C;QACtE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QACrB,GAAG,GAAG,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,KAAc,EAAqB,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;AAErI,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,KAAgC,CAAC;IAC9E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/G,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC;AACnF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,KAAgC,CAAC;IACjE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9F,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5D,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,MAAM,EAAE,IAAsB,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC;AAChF,CAAC;AASD,2FAA2F;AAC3F,MAAM,uBAAuB,GAAG;IAC9B,6BAA6B;IAC7B,+BAA+B;IAC/B,wBAAwB;IACxB,kBAAkB;IAClB,uBAAuB;IACvB,mCAAmC;CACpC,CAAC;AAEF,yFAAyF;AACzF,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;AAEhE;;;;;;;;;;;;GAYG;AACH,MAAM,uBAAuB,GAAG;IAC9B,cAAc,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,sBAAsB;IACrG,oBAAoB,EAAE,qBAAqB,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB;CAC3G,CAAC;AAeF,0GAA0G;AAC1G,MAAM,cAAc,GAAqB,CAAC,YAAY,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,EAAE;IACpH,GAAG,EAAE,YAAY;IACjB,QAAQ,EAAE,MAAM;IAChB,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;IAC5B,OAAO,EAAE,MAAM;IACf,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;CAClC,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,CAAC,KAAc,EAAoC,EAAE,CACzE,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEvE,6FAA6F;AAC7F,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,IAAI,GAA4B,EAAE,GAAG,KAAK,EAAE,CAAC;IACnD,OAAO,IAAI,CAAC,IAAI,CAAC;IACjB,OAAO,IAAI,CAAC,OAAO,CAAC;IACpB,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,QAAiC;IACvD,MAAM,EAAE,OAAO,GAAG,EAAE,EAAE,WAAW,GAAG,EAAE,EAAE,GAAG,QAAQ,CAAC;IACpD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IACxE,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;QAC3E,CAAC,iBAAiB,EAAE,WAAW,CAAC,GAAG,IAAI,IAAI,CAAC;QAC5C,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,MAAM,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;KAC7F,CAAC,CAAC;AACL,CAAC;AAED,sGAAsG;AACtG,SAAS,aAAa,CAAC,IAAY,EAAE,IAAY;IAC/C,IAAI,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,cAAc;QAAE,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACtI,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAKD;;;;;;;GAOG;AACH,SAAS,wBAAwB,CAC/B,iBAAyB,EACzB,OAAe,EACf,MAAc,EACd,YAA8B;IAE9B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAChG,MAAM,IAAI,GAAG,uBAAuB,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QACvD,OAAO,EAAE,UAAU,EAAE,2EAA2E,KAAK,KAAK,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,IAAI,iBAAiB,EAAE,EAAE,CAAC;IACjK,CAAC;IACD,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,iBAAiB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1I,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACH,KAAK,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACzE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,UAAU,EAAE,yBAAyB,IAAI,IAAI,eAAe,8BAA8B,KAAK,4BAA6B,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;QACjK,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAClE,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC5B,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QACpC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAE,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7G,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AAC3E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CACtC,iBAAyB,EACzB,OAAe,EACf,SAAiB,UAAU,EAC3B,eAAiC,cAAc;IAE/C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,uBAAuB,CAAC,EAAE,iBAAiB,CAAC,CAAC;IACnI,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,UAAU,EAAE,0CAA0C,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;IAC/I,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1D,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,YAAY,CAAC,iBAAiB,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACzG,MAAM,KAAK,GAAG,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/G,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,8BAA8B,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,4BAA6B,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;QACtI,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,wBAAwB,CAAC,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IAC5F,IAAI,YAAY,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9C,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACpD,MAAM,YAAY,GAAG,QAAQ,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACrG,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,YAAY,EAAE,CAAC;AAC9E,CAAC;AAED,4GAA4G;AAC5G,SAAS,uBAAuB,CAAC,MAAwB,EAAE,OAAe;IACxE,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjC,IAAI,YAAY,IAAI,MAAM,EAAE,CAAC;QAC3B,OAAO;YACL,WAAW,EAAE,mDAAmD,IAAI,mDAAmD;kBACnH,IAAI,MAAM,CAAC,UAAU,4DAA4D;SACtF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,EAAE,MAAM;QAC5C,CAAC,CAAC,iEAAiE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACnG,CAAC,CAAC,EAAE,CAAC;IACP,OAAO;QACL,WAAW,EAAE,8DAA8D,IAAI,KAAK,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,cAAc;cACrI,wHAAwH;cACxH,sDAAsD;QAC1D,YAAY,EAAE,IAAI;KACnB,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E,iGAAiG;AACjG,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,GAAW,EAAE,SAAiB;IAC7E,OAAO,IAAI,OAAO,CAAoB,CAAC,cAAc,EAAE,EAAE;QACvD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACvF,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACtH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7G,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnH,CAAC,CAAC,CAAC;AACL,CAAC;AAWD;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,iBAAyB,EACzB,WAAmB,EACnB,SAAiB,EACjB,QAA+B,EAAE;IAEjC,OAAO,CAAC,OAAO,EAAE,EAAE;QACjB,MAAM,YAAY,GAAG,CAAC,KAAK,CAAC,wBAAwB,IAAI,wBAAwB,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACrG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YACxB,OAAO;gBACL,WAAW,EAAE,0CAA0C,YAAY,CAAC,KAAK,KAAK,YAAY,CAAC,MAAM,eAAe;sBAC5G,kEAAkE;aACvE,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,oBAAoB,IAAI,wBAAwB,CAAC,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;QACpG,MAAM,OAAO,GAAG,uBAAuB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACzD,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAC5B,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,iBAAiB,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC5E,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,cAAc,IAAI,0BAA0B,CAAC,CAAC,iBAAiB,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAC/G,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;YAC1C,QAAQ,EAAE,OAAO,EAAE,CAAC;YACpB,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,WAAW,EAAE,sDAAsD,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACpH,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,eAAe,CAAC;QACvD,OAAO;YACL,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;YAC/D,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,OAAO,EAAE,GAAG,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;SAClD,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/verify/verification-baseline.d.ts

@@ -1,52 +1,112 @@
+import { type ParsedGateRun } from './verification-gate-stages.js';
+import { type BaseStageRecord, type BaselineOpenResult, type BaselineRecord, type BaselineUnavailable } from './verification-baseline-run.js';
 import type { DaemonConfig } from '../types/index.js';
 import type { PendingVerification } from '../queries/verification.js';
+export type { BaselineRecord, BaselineRunOutput, BaselineUnavailable } from './verification-baseline-run.js';
 /** Failing-test ids partitioned against the focus base. */
 export interface FailureClassification {
     /** In HEAD but not baseline -> the focus introduced these -> GATE. */
     newFailures: string[];
     /** In both HEAD and baseline -> pre-existing on the base -> recorded, non-blocking. */
     preExisting: string[];
+    /**
+     * Stage outcomes of both sides, when attribution resolved a baseline. The
+     * verify attribution (verify/verification-attribution.ts) judges the HEAD red
+     * stage against the base's; a null side is one whose log vouched for no stages,
+     * and a null base demotes nothing.
+     */
+    stages?: StagedAttribution;
+    /**
+     * Set when a base was resolvable but could not be MEASURED this tick (an
+     * unprovisioned worktree, no checkout, dependencies moved): the reason. Nothing
+     * is attributed against it -- the caller defers the verdict and retries.
+     */
+    baseUnavailable?: string;
+    /**
+     * Set when a base was resolvable but can never be measured comparably with the
+     * installs at hand -- the focus changed its dependency install inputs
+     * (verify/verification-baseline-run.ts): the reason. Nothing is demoted (every
+     * HEAD failure is in newFailures), and the caller charges every red rather than
+     * defer: a retry would refuse the same way.
+     */
+    baseIncomparable?: string;
+}
+/** Both sides of a stage-aware attribution. */
+export interface StagedAttribution {
+    /** The HEAD run's stages (with its continuation), or null when unparseable. */
+    head: ParsedGateRun | null;
+    /** The HEAD red stage's diagnostic signatures ([] when no stage red was located). */
+    headDiagnostics: string[];
+    /** The base's stage outcomes across its gate run and continuations, or null when its log vouched for none. */
+    base: BaseStageRecord | null;
+    /** Every failing-test id the base runs parsed. */
+    baseFailingTests: string[];
 }
 /**
  * Partition a HEAD failing-test set against the baseline failing-test set. Pure.
  * Sorted for stable output / comparison.
  */
 export declare function classifyFailures(headFailing: ReadonlySet<string>, baselineFailing: ReadonlySet<string>): FailureClassification;
-/** Cache file path for a (product, base SHA). Exported for tests. */
-export declare function baselineCachePath(productId: string, baseSha: string): string;
-/** Read the cached baseline failing-test set, or null on miss / unreadable. */
-export declare function readBaselineCache(productId: string, baseSha: string): string[] | null;
-/** Write the baseline failing-test set for a (product, base SHA). Best-effort. */
-export declare function writeBaselineCache(productId: string, baseSha: string, failingTests: string[]): void;
-/** Injected seams for getBaselineFailingSet (cache + baseline runner). */
+/**
+ * The gate a baseline ran: the command + timeout the HEAD run applied. A failing
+ * set measured under one gate says nothing about another -- a different command
+ * runs different checks, and a longer timeout can let a suite finish that a
+ * shorter one killed -- so it is part of the cache identity, not just the SHA.
+ */
+export interface BaselineGate {
+    command: string;
+    timeoutMs: number;
+}
+/** Cache file path for a (product, base SHA, gate). Exported for tests. */
+export declare function baselineCachePath(productId: string, baseSha: string, gate: BaselineGate): string;
+/**
+ * Read the cached baseline record, or null on miss / unreadable. The file records
+ * the gate it was run with and is re-checked against the one asked for, so an
+ * entry only ever answers for its own gate. An entry of an older format (no
+ * `stages` key, or stages recorded as a single red with no diagnostic signatures)
+ * is a MISS: it cannot answer which diagnostics each red carried, nor any red
+ * after the first, so the base is measured once more and the entry is rewritten.
+ */
+export declare function readBaselineCache(productId: string, baseSha: string, gate: BaselineGate): BaselineRecord | null;
+/** Write the baseline record for a (product, base SHA, gate). Best-effort. */
+export declare function writeBaselineCache(productId: string, baseSha: string, gate: BaselineGate, record: BaselineRecord): void;
+/** Injected seams for getBaselineRecord (cache + base checkout). */
 export interface BaselineDeps {
-    readCache: (productId: string, baseSha: string) => string[] | null;
-    writeCache: (productId: string, baseSha: string, failingTests: string[]) => void;
-    /** Run the verification command at the base SHA; returns the raw combined output. */
-    runBaseline: (baseSha: string) => Promise<string>;
+    readCache: (productId: string, baseSha: string, gate: BaselineGate) => BaselineRecord | null;
+    writeCache: (productId: string, baseSha: string, gate: BaselineGate, record: BaselineRecord) => void;
+    /** Open a checkout at the base SHA the gate's command (and its continuations) run in. */
+    openBaseline: (baseSha: string) => BaselineOpenResult | Promise<BaselineOpenResult>;
 }
 /**
- * Resolve the baseline failing-test set for a (product, base SHA): a cache hit
- * short-circuits (an unchanged SHA never re-runs the suite); a miss runs the
- * baseline once, parses, and caches.
+ * Resolve the baseline record for a (product, base SHA, gate): a cache hit
+ * short-circuits (an unchanged SHA under an unchanged gate is never measured
+ * again); a miss opens ONE base checkout, measures the gate and every red past
+ * the first in it (verify/verification-baseline-run.ts), and caches the record.
+ * A base that could not be measured -- no checkout, a run that threw, an install
+ * that moved its dependencies mid-run, or a checkout refused because the focus
+ * changed its dependency install inputs (`incomparable`) -- is returned as
+ * unavailable and NOT cached: another HEAD at the same base sha may leave them
+ * unchanged. `gate` must be the one the checkout runs.
  */
-export declare function getBaselineFailingSet(productId: string, baseSha: string, deps: BaselineDeps): Promise<Set<string>>;
+export declare function getBaselineRecord(productId: string, baseSha: string, gate: BaselineGate, deps: BaselineDeps): Promise<BaselineRecord | BaselineUnavailable>;
 /** Resolve the focus base = merge-base(integrationBranch, HEAD) in a worktree. Null on failure. */
 export declare function resolveFocusBaseSha(worktreePath: string, integrationBranch: string): string | null;
 /** Resolve the worktree HEAD sha. Null on failure. */
 export declare function resolveHeadSha(worktreePath: string): string | null;
-/**
- * Default baseline runner: create a detached worktree at the base SHA off the
- * product's main repo, run the command there, capture output, and remove the
- * worktree. Best-effort -- on any git failure returns '' (no baseline -> the
- * caller treats all HEAD failures as new, i.e. the pre-attribution gate).
- */
-export declare function buildDefaultRunBaseline(config: DaemonConfig, productId: string, command: string, timeoutMs: number): (baseSha: string) => Promise<string>;
 /** The slice of a StrategyResult attribution reads. */
 export interface AttributionInputResult {
     logPath?: string;
     stdoutTail?: string;
     stderrTail?: string;
+    /** The command + timeout the HEAD run applied (verify/verification-checkout.ts); the baseline runs the same. */
+    appliedConfig?: {
+        command: string;
+        timeoutMs: number;
+    };
+    /** True when no command ran (config unresolvable from the verified code): nothing to attribute. */
+    configUnresolved?: boolean;
+    /** The HEAD run's exit status; without it the HEAD log vouches for no stage outcomes. */
+    exitCode?: number | null;
 }
 /** Injected seams for attributeFailures. */
 export interface AttributionDeps {
@@ -55,7 +115,8 @@ export interface AttributionDeps {
     /** Resolve the HEAD sha of the focus worktree (to refuse a baseline == HEAD). */
     resolveHeadSha: (worktreePath: string) => string | null;
     integrationBranch: string;
-    getBaselineFailingSet: (productId: string, baseSha: string) => Promise<Set<string>>;
+    /** The base record at `baseSha`, measured off the focus worktree at `worktreePath`. */
+    getBaseline: (productId: string, baseSha: string, worktreePath: string) => Promise<BaselineRecord | BaselineUnavailable>;
     /** Resolve HEAD output: read the full log file when present, else the tails. */
     readHeadOutput: (result: AttributionInputResult) => string;
 }
@@ -63,18 +124,46 @@ export interface AttributionDeps {
  * Classify a failed HEAD run against the focus base. Returns null when no
  * baseline could be resolved (no worktree / no merge-base) -- the caller then
  * treats all HEAD failures as new (fail-closed toward gating, the behavior
- * before attribution existed).
+ * before attribution existed). A base that resolved but could not be measured
+ * returns a classification carrying `baseUnavailable` and nothing attributed.
  */
 export declare function attributeFailures(v: PendingVerification, result: AttributionInputResult, deps: AttributionDeps): Promise<FailureClassification | null>;
 /** Default HEAD-output reader: full log file when present, else the tails. */
 export declare function readHeadOutputDefault(result: AttributionInputResult): string;
+/**
+ * The command + timeout the baseline run applies: the HEAD run's applied config
+ * when the result carries one, else the verification row's. Both sides of the
+ * diff must run the SAME gate. A default-on HEAD run re-resolves its command +
+ * timeout from the verified checkout's manifest at dispatch, so sizing the
+ * baseline from the tick's provisional row config would kill a baseline the
+ * branch declared a longer timeout for -- and a killed baseline attributes
+ * nothing. Pure -- exported for testing.
+ */
+export declare function resolveBaselineRunConfig(v: Pick<PendingVerification, 'verificationConfig'>, result: AttributionInputResult): BaselineGate;
+/** Builds the base-checkout opener for one judgement: off `focusWorktreePath`, in directory `checkoutKey`, under `gate`. */
+export type OpenBaselineBuilder = (focusWorktreePath: string, checkoutKey: string, gate: BaselineGate) => (baseSha: string) => BaselineOpenResult | Promise<BaselineOpenResult>;
+/**
+ * The I/O the default attribution closure is wired to. Overridable so a test
+ * drives the REAL closure -- its config-unresolved guard and the gate it builds
+ * the base checkout with -- rather than the pure helpers beside it, which stay
+ * green if the closure stops calling them.
+ */
+export interface DefaultAttributionSeams {
+    resolveWorktreePath: AttributionDeps['resolveWorktreePath'];
+    resolveHeadSha: AttributionDeps['resolveHeadSha'];
+    readCache: BaselineDeps['readCache'];
+    writeCache: BaselineDeps['writeCache'];
+    buildOpenBaseline: OpenBaselineBuilder;
+    readHeadOutput: AttributionDeps['readHeadOutput'];
+}
 /**
  * Build the default `attributeFailures` closure: reads the focus-worktree cwd,
- * resolves the merge-base, runs (or reuses a cached) baseline at that SHA in a
- * detached worktree, and classifies HEAD failures against it. Returns null when
- * no baseline is resolvable (caller gates all failures).
+ * resolves the merge-base, measures (or reuses a cached measurement of) the base
+ * at that SHA in a provisioned detached checkout -- with the command + timeout the
+ * HEAD run applied -- and classifies HEAD failures against it. Returns null when
+ * no baseline is resolvable (caller gates all failures) or when no command ran.
  */
-export declare function buildDefaultAttributeFailures(config: DaemonConfig): (v: PendingVerification, result: AttributionInputResult) => Promise<FailureClassification | null>;
+export declare function buildDefaultAttributeFailures(config: DaemonConfig, overrides?: Partial<DefaultAttributionSeams>): (v: PendingVerification, result: AttributionInputResult) => Promise<FailureClassification | null>;
 /**
  * Build the default `resolveVerificationCwd`: the focus worktree (HEAD of the
  * focus branch) so the deterministic run measures the focus's changes, falling