@telora/daemon 0.23.29 → 0.23.46

package/dist/verify/attribution/rework-attribution.d.ts

@@ -1,96 +1,29 @@
-/**
- * Whose commits caused a failed gate verdict -- the delivery a rework Bug belongs on.
- *
- * Every delivery on a focus is judged on the same focus-branch HEAD, and one gate
- * run's verdict is SHARED by all of them (verify/engine/verification-commit-sharing.ts).
- * Sharing the verdict is sound: the gate ran on one tree and would render the same
- * answer for each. Fanning out the REWORK is not: one rework Bug PER delivery
- * sitting in verify would name a gate run most of those deliveries never made,
- * cost each a verify_failed re-entry, and spend a review cycle out of the focus's
- * arm budget (completion/review-cycle-budget/review-cycle-cap.ts) on a delivery that carries no
- * defect of its own.
- *
- * ONE branch-level red is ONE piece of open work. This module names its owner.
- *
- * THE RANGE. The suspects are the commits the failure could have come from: those
- * between the newest ancestor this gate judged GREEN (verify/gate-verdicts/judged-ancestor.ts --
- * the same bound the gate's own stages diff against) and the failed commit.
- * Everything at or before the green ancestor was covered by a run that PASSED on a
- * tree containing it. The gate that judged the failure is read off the failure's own
- * recorded verdict, so no caller has to resolve it.
- *
- * THE OWNER. Each commit in that range is attributed by its `Telora-Delivery`
- * trailer, through git's own trailer parse (git/review-window-commits.ts),
- * the same read the verify gate partitions evidence with. A sentinel, an
- * unattributed capture and a commit naming a delivery outside the focus own nothing.
- *
- * SEVERAL DELIVERIES MAY HAVE COMMITTED IN THAT RANGE, and one red is still one
- * work item, so the range names ONE owner: the delivery of the NEWEST commit in it.
- *
- * SAY WHAT THAT IS AND IS NOT. It is the newest SUSPECT, not a proof of cause. The
- * gate was GREEN at the base and the red is rendered at the tip, so every commit
- * between them is a candidate and the newest is the last change that could have
- * introduced it -- but nothing here reads the failing stage's output, so an older
- * commit in the range may well be the culprit. What the rule buys is that the choice
- * is DETERMINISTIC (git's own topological order, one read) and SINGLE. Two
- * alternatives lost: the failing stage's own files would be a stronger ground, but a
- * verdict records a stage NAME (`lint:all > lint --prefix packages/daemon`) and test
- * ids, which do not resolve to files in general; and "every delivery in the range" is
- * what this module exists to stop -- it re-creates the N-Bugs fan-out one bound later.
- * Being wrong here costs one delivery a re-entry it did not earn, while the branch is
- * red for all of them either way; being wrong by filing on all of them costs every
- * delivery one, plus a review cycle each out of the arm's budget.
- *
- * EVERY PATH ENDS AT EXACTLY ONE OWNER, including the ones that know least. The
- * acceptance rule is unconditional -- one failed verdict, one piece of open work --
- * so "we could not attribute this" is not licence to fan out again. The ladder, in
- * {@link selectReworkOwner} for a pass that knows its candidate set:
- *
- *   1. the newest commit in the range whose delivery is a candidate;
- *   2. the delivery whose dispatch RAN the gate (CommitVerdict.judgedDeliveryId) --
- *      one delivery, and the one that actually paid for the run;
- *   3. {@link unattributableOwner} of the candidates -- the lowest id, logged.
- *
- * Rung 3 is what makes the rule unconditional: an unreadable verdict, an unreadable
- * range, a focus whose worktree the daemon no longer holds -- each still names one
- * routable delivery, because a red must reach someone and every candidate is a
- * delivery sitting in verify on the red branch. It is a PURE FUNCTION OF THE
- * CANDIDATE SET, deliberately: an arbitrary owner is fine, an owner that depends on
- * who asked first is not.
- *
- * A PASS THAT ASKS ONE DELIVERY AT A TIME (verify/outcome-routing/verification-feedback.ts routes each
- * dispatch separately) therefore asks the SAME question rather than a weaker one: it
- * reads the focus's verify deliveries and applies rung 3 to that set, so every asker
- * -- this delivery, its siblings, the next poll, the first poll after a daemon
- * restart, and the per-focus filer acting on the same commit -- computes the same
- * single owner. It keeps no in-memory first-claim ledger, which would agree with
- * nothing after a restart and with the per-focus filer never. When the candidate
- * read itself fails, NOBODY files this poll: the filing is left owed and retried from
- * the commit's record (verify/outcome-routing/verification-rework-issue.ts retryOwedReworkIssue)
- * rather than guessed at, because a guess here is how one red becomes N Bugs.
- *
- * Direction of error: this module decides who is TOLD about a red, never whether the
- * red gates. A delivery that shares a failed verdict still takes that verdict, still
- * routes verify -> verify_failed, and still carries the failure on its gate_state.
- * What it does not carry is a work item describing a run it never made.
- *
- * WHAT THIS MODULE DOES NOT PROMISE. Its answer is a function of LIVE state -- the
- * focus's deliveries currently in verify -- and that set moves as deliveries are
- * routed, so the same failed commit can name a different owner at a later poll. That
- * is deliberate: a red whose first-named owner has already moved on must still reach
- * someone. It does mean "one red, one Bug" cannot rest on this module alone, and it
- * does not: the filing dedupes per COMMIT across the whole focus
- * (verify/outcome-routing/verification-rework-issue.ts), so a re-selection RE-ROUTES a red rather
- * than duplicating one.
- *
- * A leaf: git, the verdict record and the focus worktree map, nothing else.
- *
- * History: docs/daemon/history-verify.md (verify/attribution/rework-attribution.ts).
- *
- * @module verify/attribution/rework-attribution
- */
 import type { ReviewWindowCommit } from '../../git/review-window-commits.js';
 import type { CommitVerdict, CommitVerdictGate, CommitVerdictReader } from '../gate-verdicts/commit-verdict-record.js';
+/** The slice of a focus delivery the owner choice reads: its id and where it stands. */
+export interface ReworkDeliveryRow {
+    id: string;
+    executionStatus?: string | null;
+}
+/**
+ * The statuses a coding pass picks a delivery's open work up from where it stands,
+ * including the verify_failed -> coding -> verify walk the reconciler moves a
+ * delivery through in seconds. Rung 3 prefers them (module doc).
+ */
+export declare const LIVE_REWORK_OWNER_STATUSES: ReadonlySet<string>;
+/**
+ * The statuses an owner is RE-OPENED from to carry its Bug (the reconciler's
+ * gateReworkOpen fact): done -> verify_failed, paused -> queued.
+ */
+export declare const REOPENED_REWORK_OWNER_STATUSES: ReadonlySet<string>;
+/** Whether an owner in this status must be re-opened to carry its rework Bug. Pure. */
+export declare function reopensForRework(status: string | null | undefined): boolean;
+/**
+ * The ids of the deliveries that can own a rework Bug (module doc, THE
+ * CANDIDATES): every non-cancelled delivery but a draft or planning one. A row
+ * whose status was not read is not a candidate -- it cannot be routed. Pure.
+ */
+export declare function reworkOwnerCandidates(deliveries: readonly ReworkDeliveryRow[]): string[];
 /**
  * The attribution's collaborators, every one required; the production binding is
  * composition/verify-rework-context.ts buildReworkAttributionDeps.
@@ -108,11 +41,11 @@ export interface ReworkAttributionDeps {
     /** The non-merge commits in base..tip with their trailer attribution; null when git could not answer. */
     listWindow: (worktreePath: string, base: string, tip: string) => readonly ReviewWindowCommit[] | null;
     /**
-     * The focus's deliveries sitting in verify -- the candidate set an unattributable
-     * failure is settled over, so a pass that was handed one delivery can still ask the
-     * focus-wide question (module doc).
+     * The focus's deliveries, every status: which trailers are the focus's OWN, and --
+     * through {@link reworkOwnerCandidates} -- who can carry the Bug, so a pass that was
+     * handed one delivery can still ask the focus-wide question (module doc).
      */
-    listVerifyCandidates: (focusId: string) => Promise<readonly string[]>;
+    listFocusDeliveries: (focusId: string) => Promise<readonly ReworkDeliveryRow[]>;
 }
 /** The focus commit whose failure is being attributed. */
 export interface FailedCommit {
@@ -123,7 +56,7 @@ export interface FailedCommit {
 }
 /** Who owns a failed verdict, and how that was decided. */
 export interface FailureOwnership {
-    /** The deliveries whose own commits are in the judged range; empty when none is attributable. */
+    /** The focus's own deliveries whose commits are in the judged range; empty when none is attributable. */
     causingDeliveryIds: ReadonlySet<string>;
     /** Those deliveries in range order, NEWEST COMMIT FIRST -- the ranking the owner is taken from. */
     causingNewestFirst: readonly string[];
@@ -136,16 +69,19 @@ export interface FailureOwnership {
 }
 /**
  * Who a failed verdict belongs to (module doc), or null when its verdict cannot be
- * read -- the one answer that means "cannot tell". Never throws.
+ * read -- the one answer that means "cannot tell". Only commits trailered with a
+ * delivery in `ownDeliveryIds` -- the deliveries of the focus being judged -- are
+ * suspects; any other trailer (another focus's, brought in by an integration merge)
+ * owns nothing. Never throws.
  */
-export declare function resolveFailureOwnership(at: FailedCommit, deps: ReworkAttributionDeps): FailureOwnership | null;
+export declare function resolveFailureOwnership(at: FailedCommit, deps: ReworkAttributionDeps, ownDeliveryIds: ReadonlySet<string>): FailureOwnership | null;
 /**
- * The ONE delivery a failed verdict's rework belongs on, chosen from the
- * `candidates` a filing pass would otherwise fan out over (module doc). Null means
- * "cannot tell" -- the verdict itself was unreadable or is not a failure -- and the
- * caller files as it did before. Never throws.
+ * The ONE delivery a failed verdict's rework belongs on, chosen from the focus's
+ * `deliveries` (module doc): the candidates are its non-cancelled deliveries, and
+ * the range ranks only the focus's own trailers. Null only when every delivery of
+ * the focus is cancelled, draft or planning. Never throws.
  */
-export declare function selectReworkOwner(candidates: readonly string[], at: FailedCommit, deps: ReworkAttributionDeps): string | null;
+export declare function selectReworkOwner(deliveries: readonly ReworkDeliveryRow[], at: FailedCommit, deps: ReworkAttributionDeps): string | null;
 /**
  * Rung 3: the owner of a failure NOTHING attributes, over the candidates that could
  * carry it. The lowest id -- arbitrary on purpose, and a pure function of the set, so
@@ -153,14 +89,17 @@ export declare function selectReworkOwner(candidates: readonly string[], at: Fai
  * same one delivery. Null only when there is no candidate at all.
  */
 export declare function unattributableOwner(candidates: readonly string[]): string | null;
+/** What {@link resolveReworkOwner} answers: the owner and the status it stands in, none, or "cannot tell". */
+export type ReworkOwnerAnswer = ReworkDeliveryRow | null | 'unreadable';
 /**
- * Whether the rework Bug for `failedSha` belongs on `deliveryId` (module doc): it is
- * the ONE owner the range names -- the delivery of the newest commit in it, or, with
- * nothing attributable there, the delivery whose dispatch ran the gate. An unreadable
- * verdict names no owner from the commit, so the question is asked of the FOCUS
- * instead: the candidate set settles it by rung 3, identically for every asker and
- * across a restart. A candidate read that fails files nothing this poll (the retry
- * owns that case). Never throws.
+ * The ONE delivery the rework Bug for a failed commit belongs on, asked by a pass
+ * that holds ONE delivery of the focus (module doc): the SAME ladder
+ * {@link selectReworkOwner} runs for the per-focus filer, over the focus's deliveries
+ * read here, so every asker and both doors name one owner -- and the asker files on
+ * THAT delivery rather than declining, so an owner that will never ask (a done or
+ * paused one, a sibling in coding) still receives the Bug. A focus read that fails
+ * answers 'unreadable' and files nothing this poll (the retry owns that case): without
+ * it a foreign trailer cannot be told from an own one. Never throws.
  */
-export declare function deliveryOwnsFailure(deliveryId: string, at: FailedCommit, deps: ReworkAttributionDeps): Promise<boolean>;
+export declare function resolveReworkOwner(at: FailedCommit, deps: ReworkAttributionDeps): Promise<ReworkOwnerAnswer>;
 //# sourceMappingURL=rework-attribution.d.ts.map

package/dist/verify/attribution/rework-attribution.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rework-attribution.d.ts","sourceRoot":"","sources":["../../../src/verify/attribution/rework-attribution.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0FG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAKvH;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,2FAA2F;IAC3F,mBAAmB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACxD,4GAA4G;IAC5G,iBAAiB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,iBAAiB,KAAK,aAAa,GAAG,IAAI,CAAC;IACvH,yHAAyH;IACzH,iBAAiB,EAAE,CACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,iBAAiB,EACvB,EAAE,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,mBAAmB,CAAA;KAAE,KACjE,MAAM,GAAG,IAAI,CAAC;IACnB,yGAAyG;IACzG,UAAU,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,SAAS,kBAAkB,EAAE,GAAG,IAAI,CAAC;IACtG;;;;OAIG;IACH,oBAAoB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;CACvE;AAED,0DAA0D;AAC1D,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,GAAG,EAAE,MAAM,CAAC;CACb;AAED,2DAA2D;AAC3D,MAAM,WAAW,gBAAgB;IAC/B,iGAAiG;IACjG,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACxC,mGAAmG;IACnG,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,0FAA0F;IAC1F,gBAAgB,EAAE,MAAM,CAAC;IACzB,2GAA2G;IAC3G,gBAAgB,EAAE,MAAM,CAAC;IACzB,kHAAkH;IAClH,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,YAAY,EAChB,IAAI,EAAE,qBAAqB,GAC1B,gBAAgB,GAAG,IAAI,CAkBzB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,EAAE,EAAE,YAAY,EAChB,IAAI,EAAE,qBAAqB,GAC1B,MAAM,GAAG,IAAI,CAoBf;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAIhF;AA4BD;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,MAAM,EAClB,EAAE,EAAE,YAAY,EAChB,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,OAAO,CAAC,CAiBlB"}
+{"version":3,"file":"rework-attribution.d.ts","sourceRoot":"","sources":["../../../src/verify/attribution/rework-attribution.ts"],"names":[],"mappings":"AAyHA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAKvH,wFAAwF;AACxF,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,EAAE,WAAW,CAAC,MAAM,CAKzD,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,8BAA8B,EAAE,WAAW,CAAC,MAAM,CAG7D,CAAC;AAEH,uFAAuF;AACvF,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAE3E;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,SAAS,iBAAiB,EAAE,GAAG,MAAM,EAAE,CAIxF;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,2FAA2F;IAC3F,mBAAmB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACxD,4GAA4G;IAC5G,iBAAiB,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,iBAAiB,KAAK,aAAa,GAAG,IAAI,CAAC;IACvH,yHAAyH;IACzH,iBAAiB,EAAE,CACjB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,iBAAiB,EACvB,EAAE,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,mBAAmB,CAAA;KAAE,KACjE,MAAM,GAAG,IAAI,CAAC;IACnB,yGAAyG;IACzG,UAAU,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,SAAS,kBAAkB,EAAE,GAAG,IAAI,CAAC;IACtG;;;;OAIG;IACH,mBAAmB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAAC;CACjF;AAED,0DAA0D;AAC1D,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,GAAG,EAAE,MAAM,CAAC;CACb;AAED,2DAA2D;AAC3D,MAAM,WAAW,gBAAgB;IAC/B,yGAAyG;IACzG,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACxC,mGAAmG;IACnG,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,0FAA0F;IAC1F,gBAAgB,EAAE,MAAM,CAAC;IACzB,2GAA2G;IAC3G,gBAAgB,EAAE,MAAM,CAAC;IACzB,kHAAkH;IAClH,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,YAAY,EAChB,IAAI,EAAE,qBAAqB,EAC3B,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC,GAClC,gBAAgB,GAAG,IAAI,CAkBzB;AAiDD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,SAAS,iBAAiB,EAAE,EACxC,EAAE,EAAE,YAAY,EAChB,IAAI,EAAE,qBAAqB,GAC1B,MAAM,GAAG,IAAI,CAEf;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAIhF;AAoCD,8GAA8G;AAC9G,MAAM,MAAM,iBAAiB,GAAG,iBAAiB,GAAG,IAAI,GAAG,YAAY,CAAC;AAExE;;;;;;;;;GASG;AACH,wBAAsB,kBAAkB,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAgBlH"}

package/dist/verify/attribution/rework-attribution.js

@@ -1,15 +1,165 @@
 // PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
 // Pinned by: packages/daemon/src/integration/failed-verdict-review-exit-respawn-regression.test.ts,
+//   packages/daemon/src/integration/red-head-integration-merge-rework-regression.test.ts,
 //   packages/daemon/src/verify/attribution/rework-attribution.test.ts,
 //   packages/daemon/src/verify/outcome-routing/verification-rework-issue.test.ts
 // PINNED-BY-END
+/**
+ * Whose commits caused a failed gate verdict -- the delivery a rework Bug belongs on.
+ *
+ * Every delivery on a focus is judged on the same focus-branch HEAD, and one gate
+ * run's verdict is SHARED by all of them (verify/engine/verification-commit-sharing.ts).
+ * Sharing the verdict is sound: the gate ran on one tree and would render the same
+ * answer for each. Fanning out the REWORK is not: one rework Bug PER delivery
+ * sitting in verify would name a gate run most of those deliveries never made,
+ * cost each a verify_failed re-entry, and spend a review cycle out of the focus's
+ * arm budget (completion/review-cycle-budget/review-cycle-cap.ts) on a delivery that carries no
+ * defect of its own.
+ *
+ * ONE branch-level red is ONE piece of open work. This module names its owner.
+ *
+ * THE RANGE. The suspects are the commits the failure could have come from: those
+ * between the newest ancestor this gate judged GREEN (verify/gate-verdicts/judged-ancestor.ts --
+ * the same bound the gate's own stages diff against) and the failed commit.
+ * Everything at or before the green ancestor was covered by a run that PASSED on a
+ * tree containing it. The gate that judged the failure is read off the failure's own
+ * recorded verdict, so no caller has to resolve it.
+ *
+ * THE OWNER. Each commit in that range is attributed by its `Telora-Delivery`
+ * trailer, through git's own trailer parse (git/review-window-commits.ts),
+ * the same read the verify gate partitions evidence with. A sentinel, an
+ * unattributed capture and a commit naming a delivery outside the focus own nothing.
+ * That last one is ENFORCED, not assumed: the range is filtered to the deliveries of
+ * the focus being judged before it ranks anything. A focus branch that merged
+ * integration carries other foci's trailered commits in its judged range, and the
+ * newest of them is routinely another focus's; ranked, it would name an owner that
+ * never hears of the red while the focus's own delivery is told it does not carry it.
+ *
+ * SEVERAL DELIVERIES MAY HAVE COMMITTED IN THAT RANGE, and one red is still one
+ * work item, so the range names ONE owner: the delivery of the NEWEST commit in it.
+ *
+ * SAY WHAT THAT IS AND IS NOT. It is the newest SUSPECT, not a proof of cause. The
+ * gate was GREEN at the base and the red is rendered at the tip, so every commit
+ * between them is a candidate and the newest is the last change that could have
+ * introduced it -- but nothing here reads the failing stage's output, so an older
+ * commit in the range may well be the culprit. What the rule buys is that the choice
+ * is DETERMINISTIC (git's own topological order, one read) and SINGLE. Two
+ * alternatives lost: the failing stage's own files would be a stronger ground, but a
+ * verdict records a stage NAME (`lint:all > lint --prefix packages/daemon`) and test
+ * ids, which do not resolve to files in general; and "every delivery in the range" is
+ * what this module exists to stop -- it re-creates the N-Bugs fan-out one bound later.
+ * Being wrong here costs one delivery a re-entry it did not earn, while the branch is
+ * red for all of them either way; being wrong by filing on all of them costs every
+ * delivery one, plus a review cycle each out of the arm's budget.
+ *
+ * THE CANDIDATES are the focus's NON-CANCELLED deliveries, whatever status each
+ * holds at the instant of asking -- never only those in verify. The reconciler walks
+ * a delivery whose issues are all Done from verify_failed through coding back to
+ * verify within seconds (focus/focus-poller-auto-advance.ts), so a candidate set
+ * read mid-walk that held only verify deliveries would name nobody; and a red head
+ * whose own deliveries are all done or paused is still the focus's red. A done or
+ * paused owner is RE-OPENED with its Bug ({@link reopensForRework}; the reconciler's
+ * gateReworkOpen fact), so a coding pass picks the Bug up. Two kinds of delivery are
+ * not candidates: a cancelled one released its work, and a draft or planning one is
+ * recorded intent the running team cannot see -- a Bug there reaches nobody.
+ *
+ * EVERY PATH ENDS AT EXACTLY ONE OWNER, including the ones that know least. The
+ * acceptance rule is unconditional -- one failed verdict, one piece of open work --
+ * so "we could not attribute this" is not licence to fan out again. The ladder, in
+ * {@link selectReworkOwner}, over the focus's deliveries:
+ *
+ *   1. the newest commit in the range whose delivery is a candidate, whatever its
+ *      status (a done owner is re-opened, never skipped for a sibling);
+ *   2. the delivery whose dispatch RAN the gate (CommitVerdict.judgedDeliveryId) --
+ *      one delivery, and the one that actually paid for the run;
+ *   3. {@link unattributableOwner} of the candidates a coding pass already picks
+ *      work up from ({@link LIVE_REWORK_OWNER_STATUSES}), else of all of them --
+ *      the lowest id, logged.
+ *
+ * Rung 3 is what makes the rule unconditional: an unreadable verdict, an unreadable
+ * range, a focus whose worktree the daemon no longer holds -- each still names one
+ * routable delivery, because a red must reach someone and every candidate is a
+ * delivery of the red focus a coding pass picks up, or one re-opened for it. It is a PURE
+ * FUNCTION OF THE CANDIDATE SET, deliberately: an arbitrary owner is fine, an owner
+ * that depends on who asked first is not.
+ *
+ * A PASS THAT ASKS ONE DELIVERY AT A TIME (verify/outcome-routing/verification-feedback.ts routes each
+ * dispatch separately) therefore asks the SAME question rather than a weaker one:
+ * {@link resolveReworkOwner} reads the focus's deliveries and runs the same ladder
+ * over them, so every asker -- this delivery, its siblings, the next poll, the first
+ * poll after a daemon restart, and the per-focus filer acting on the same commit --
+ * computes the same single owner, and files on IT. It keeps no in-memory first-claim ledger, which
+ * would agree with nothing after a restart and with the per-focus filer never. When
+ * the focus read itself fails, NOBODY files this poll: the filing is left owed and
+ * retried from the commit's record (verify/outcome-routing/verification-rework-issue.ts
+ * retryOwedReworkIssue) rather than guessed at, because a guess here is how one red
+ * becomes N Bugs -- and without the focus's deliveries a foreign trailer cannot be
+ * told from an own one.
+ *
+ * Direction of error: this module decides who is TOLD about a red, never whether the
+ * red gates. A delivery that shares a failed verdict still takes that verdict, still
+ * routes verify -> verify_failed, and still carries the failure on its gate_state.
+ * What it does not carry is a work item describing a run it never made.
+ *
+ * WHAT THIS MODULE DOES NOT PROMISE. Its answer is a function of LIVE state -- the
+ * focus's deliveries and their statuses now -- and that set moves as deliveries are
+ * routed, so the same failed commit can name a different owner at a later poll. That
+ * is deliberate: a red whose first-named owner has already moved on must still reach
+ * someone. It does mean "one red, one Bug" cannot rest on this module alone, and it
+ * does not: the filing dedupes per COMMIT across the whole focus
+ * (verify/outcome-routing/verification-rework-issue.ts), so a re-selection RE-ROUTES a red rather
+ * than duplicating one.
+ *
+ * A leaf: git, the verdict record and the focus worktree map, nothing else.
+ *
+ * History: docs/daemon/history-verify.md (verify/attribution/rework-attribution.ts).
+ *
+ * @module verify/attribution/rework-attribution
+ */
+import { DELIVERY_STATUS } from '@telora/daemon-core';
 import { createLogger } from '../../log/daemon-log.js';
 const log = createLogger({ module: 'verification' });
+/**
+ * The statuses a coding pass picks a delivery's open work up from where it stands,
+ * including the verify_failed -> coding -> verify walk the reconciler moves a
+ * delivery through in seconds. Rung 3 prefers them (module doc).
+ */
+export const LIVE_REWORK_OWNER_STATUSES = new Set([
+    DELIVERY_STATUS.QUEUED,
+    DELIVERY_STATUS.CODING,
+    DELIVERY_STATUS.VERIFY,
+    DELIVERY_STATUS.VERIFY_FAILED,
+]);
+/**
+ * The statuses an owner is RE-OPENED from to carry its Bug (the reconciler's
+ * gateReworkOpen fact): done -> verify_failed, paused -> queued.
+ */
+export const REOPENED_REWORK_OWNER_STATUSES = new Set([
+    DELIVERY_STATUS.DONE,
+    DELIVERY_STATUS.PAUSED,
+]);
+/** Whether an owner in this status must be re-opened to carry its rework Bug. Pure. */
+export function reopensForRework(status) {
+    return REOPENED_REWORK_OWNER_STATUSES.has(status ?? '');
+}
+/**
+ * The ids of the deliveries that can own a rework Bug (module doc, THE
+ * CANDIDATES): every non-cancelled delivery but a draft or planning one. A row
+ * whose status was not read is not a candidate -- it cannot be routed. Pure.
+ */
+export function reworkOwnerCandidates(deliveries) {
+    return deliveries
+        .filter((d) => LIVE_REWORK_OWNER_STATUSES.has(d.executionStatus ?? '') || reopensForRework(d.executionStatus))
+        .map((d) => d.id);
+}
 /**
  * Who a failed verdict belongs to (module doc), or null when its verdict cannot be
- * read -- the one answer that means "cannot tell". Never throws.
+ * read -- the one answer that means "cannot tell". Only commits trailered with a
+ * delivery in `ownDeliveryIds` -- the deliveries of the focus being judged -- are
+ * suspects; any other trailer (another focus's, brought in by an integration merge)
+ * owns nothing. Never throws.
  */
-export function resolveFailureOwnership(at, deps) {
+export function resolveFailureOwnership(at, deps, ownDeliveryIds) {
     let verdict;
     try {
         verdict = deps.readCommitVerdict(at.productId, at.focusId, at.sha);
@@ -19,44 +169,60 @@ export function resolveFailureOwnership(at, deps) {
     }
     if (!verdict || verdict.outcome !== 'failed')
         return null;
-    const causing = readCausingSet(at, verdict.gate, deps);
+    const causing = readCausingSet(at, verdict.gate, deps, ownDeliveryIds);
     const newestFirst = causing ?? [];
     return {
         causingDeliveryIds: new Set(newestFirst),
         causingNewestFirst: newestFirst,
         judgedDeliveryId: verdict.judgedDeliveryId,
-        // ONE red, ONE work item: the newest commit in the range names the owner.
+        // ONE red, ONE work item: the newest own commit in the range names the owner.
         owningDeliveryId: newestFirst[0] ?? verdict.judgedDeliveryId,
         rangeRead: causing !== null,
     };
 }
-/**
- * The ONE delivery a failed verdict's rework belongs on, chosen from the
- * `candidates` a filing pass would otherwise fan out over (module doc). Null means
- * "cannot tell" -- the verdict itself was unreadable or is not a failure -- and the
- * caller files as it did before. Never throws.
- */
-export function selectReworkOwner(candidates, at, deps) {
-    const fallback = unattributableOwner(candidates);
-    // Nobody to tell: this pass has no verify delivery to carry the red.
+/** Rung 3's owner: the lowest id among the live candidates, else among all of them (module doc). Pure. */
+function fallbackOwner(deliveries, candidates) {
+    const eligible = new Set(candidates);
+    const live = deliveries.filter((d) => eligible.has(d.id) && LIVE_REWORK_OWNER_STATUSES.has(d.executionStatus ?? '')).map((d) => d.id);
+    return unattributableOwner(live) ?? unattributableOwner(candidates);
+}
+/** The ladder (module doc) over the focus's deliveries. Never throws. */
+function chooseReworkOwner(deliveries, at, deps) {
+    const candidates = reworkOwnerCandidates(deliveries);
+    const fallback = fallbackOwner(deliveries, candidates);
+    // Nobody to tell: every delivery of this focus is cancelled, draft or planning.
     if (fallback === null)
-        return null;
+        return { owner: null, why: 'no delivery of the focus can own it (every one is cancelled, draft or planning)' };
     const eligible = new Set(candidates);
-    const ownership = resolveFailureOwnership(at, deps);
+    const ownership = resolveFailureOwnership(at, deps, new Set(deliveries.map((d) => d.id)));
     if (ownership !== null) {
-        // Rung 1 -- the newest suspect this pass can actually tell.
+        // Rung 1 -- the newest own suspect, whatever its status (a done or paused one is re-opened).
         const attributed = ownership.causingNewestFirst.find((id) => eligible.has(id));
         if (attributed !== undefined)
-            return attributed;
+            return { owner: attributed, why: `the newest of the focus's commits in the judged range is ${attributed}'s` };
         // Rung 2 -- the delivery that paid for the run.
-        if (eligible.has(ownership.judgedDeliveryId))
-            return ownership.judgedDeliveryId;
+        if (eligible.has(ownership.judgedDeliveryId)) {
+            return {
+                owner: ownership.judgedDeliveryId,
+                why: `${ownership.rangeRead ? 'none of the focus\'s commits in the judged range is a candidate\'s' : 'the judged range could not be read'}, `
+                    + `so it stays with the delivery whose run rendered it (${ownership.judgedDeliveryId})`,
+            };
+        }
     }
     // Rung 3 -- unattributable, and still ONE owner: the rule does not relax here.
     log.info(`[verification] rework issue: the failed verdict for ${at.sha.slice(0, 12)} could not be attributed`
-        + `${ownership === null ? ' (its verdict was unreadable)' : ` to a delivery this pass can tell (owner: ${ownership.owningDeliveryId})`}`
+        + `${ownership === null ? ' (its verdict was unreadable)' : ` to a candidate delivery (owner: ${ownership.owningDeliveryId})`}`
         + ` -- it is carried by ${fallback} alone, not by every delivery on the red branch`);
-    return fallback;
+    return { owner: fallback, why: `nothing attributes it, so the focus's candidates (${candidates.join(', ')}) settle it on ${fallback}` };
+}
+/**
+ * The ONE delivery a failed verdict's rework belongs on, chosen from the focus's
+ * `deliveries` (module doc): the candidates are its non-cancelled deliveries, and
+ * the range ranks only the focus's own trailers. Null only when every delivery of
+ * the focus is cancelled, draft or planning. Never throws.
+ */
+export function selectReworkOwner(deliveries, at, deps) {
+    return chooseReworkOwner(deliveries, at, deps).owner;
 }
 /**
  * Rung 3: the owner of a failure NOTHING attributes, over the candidates that could
@@ -71,8 +237,12 @@ export function unattributableOwner(candidates) {
             lowest = id;
     return lowest;
 }
-/** The deliveries with a trailered commit in greenAncestor..failedSha, NEWEST FIRST; null when the range is unreadable. */
-function readCausingSet(at, gate, deps) {
+/**
+ * The focus's OWN deliveries with a trailered commit in greenAncestor..failedSha,
+ * NEWEST FIRST; null when the range is unreadable. A trailer naming a delivery
+ * outside `own` is skipped -- it ranks nothing, so it cannot displace an own suspect.
+ */
+function readCausingSet(at, gate, deps, own) {
     try {
         const worktreePath = deps.resolveWorktreePath(at.focusId);
         if (worktreePath === null)
@@ -90,9 +260,10 @@ function readCausingSet(at, gate, deps) {
         // listReviewWindowCommits answers newest first; the order IS the ranking.
         const causing = [];
         for (const c of commits) {
-            if (c.attribution.kind === 'delivery' && !causing.includes(c.attribution.deliveryId)) {
+            if (c.attribution.kind !== 'delivery' || !own.has(c.attribution.deliveryId))
+                continue;
+            if (!causing.includes(c.attribution.deliveryId))
                 causing.push(c.attribution.deliveryId);
-            }
         }
         return causing;
     }
@@ -101,56 +272,29 @@ function readCausingSet(at, gate, deps) {
     }
 }
 /**
- * Whether the rework Bug for `failedSha` belongs on `deliveryId` (module doc): it is
- * the ONE owner the range names -- the delivery of the newest commit in it, or, with
- * nothing attributable there, the delivery whose dispatch ran the gate. An unreadable
- * verdict names no owner from the commit, so the question is asked of the FOCUS
- * instead: the candidate set settles it by rung 3, identically for every asker and
- * across a restart. A candidate read that fails files nothing this poll (the retry
- * owns that case). Never throws.
+ * The ONE delivery the rework Bug for a failed commit belongs on, asked by a pass
+ * that holds ONE delivery of the focus (module doc): the SAME ladder
+ * {@link selectReworkOwner} runs for the per-focus filer, over the focus's deliveries
+ * read here, so every asker and both doors name one owner -- and the asker files on
+ * THAT delivery rather than declining, so an owner that will never ask (a done or
+ * paused one, a sibling in coding) still receives the Bug. A focus read that fails
+ * answers 'unreadable' and files nothing this poll (the retry owns that case): without
+ * it a foreign trailer cannot be told from an own one. Never throws.
  */
-export async function deliveryOwnsFailure(deliveryId, at, deps) {
-    const ownership = resolveFailureOwnership(at, deps);
-    if (ownership === null)
-        return await ownsUnattributable(deliveryId, at, deps);
-    const owns = deliveryId === ownership.owningDeliveryId;
-    if (!owns) {
-        const why = ownership.causingNewestFirst.length > 0
-            ? `the newest commit in the judged range is ${ownership.owningDeliveryId}'s`
-            : `${ownership.rangeRead ? 'no delivery\'s commits explain it' : 'it could not be attributed'}, so it stays with the `
-                + `delivery whose run rendered it (${ownership.judgedDeliveryId})`;
-        const alsoIn = ownership.causingNewestFirst.filter((id) => id !== ownership.owningDeliveryId);
-        log.info(`[verification] rework issue: delivery ${deliveryId} shares the failed verdict for ${at.sha.slice(0, 12)} but does not `
-            + `carry it -- ${why}`
-            + (alsoIn.length > 0 ? ` (also committed in that range: ${alsoIn.join(', ')})` : ''));
-    }
-    return owns;
-}
-/**
- * Rung 3 for a caller holding ONE delivery: read the focus's candidates and settle the
- * failure over them, so the answer is the set's, not the asker's (module doc). A read
- * that fails, or that does not list this delivery, DECLINES -- one poll of nobody,
- * which retryOwedReworkIssue retries -- rather than letting a sibling reading a
- * different set assume it owns the red too.
- */
-async function ownsUnattributable(deliveryId, at, deps) {
-    let candidates;
+export async function resolveReworkOwner(at, deps) {
+    let deliveries;
     try {
-        candidates = await deps.listVerifyCandidates(at.focusId);
+        deliveries = await deps.listFocusDeliveries(at.focusId);
     }
     catch (err) {
-        log.warn(`[verification] rework issue: the failed verdict for ${at.sha.slice(0, 12)} is unattributable and the focus's verify `
-            + `deliveries could not be read -- ${deliveryId} files nothing this poll (the owed filing is retried):`, err.message);
-        return false;
-    }
-    const owner = unattributableOwner(candidates);
-    if (owner !== deliveryId) {
-        log.info(`[verification] rework issue: delivery ${deliveryId} shares the failed verdict for ${at.sha.slice(0, 12)}, which `
-            + `nothing attributes -- the focus's verify set settles it on ${owner}`);
-        return false;
+        log.warn(`[verification] rework issue: the focus's deliveries could not be read to attribute the failed verdict for `
+            + `${at.sha.slice(0, 12)} -- nothing is filed this poll (the owed filing is retried):`, err.message);
+        return 'unreadable';
     }
-    log.info(`[verification] rework issue: the failed verdict for ${at.sha.slice(0, 12)} is unattributable -- of the focus's verify `
-        + `deliveries (${candidates.join(', ')}) it is carried by ${deliveryId} alone`);
-    return true;
+    const choice = chooseReworkOwner(deliveries, at, deps);
+    log.info(`[verification] rework issue: the failed verdict for ${at.sha.slice(0, 12)} belongs on ${choice.owner ?? 'nobody'} -- ${choice.why}`);
+    if (choice.owner === null)
+        return null;
+    return deliveries.find((d) => d.id === choice.owner) ?? null;
 }
 //# sourceMappingURL=rework-attribution.js.map

package/dist/verify/attribution/rework-attribution.js.map

@@ -1 +1 @@
-{"version":3,"file":"rework-attribution.js","sourceRoot":"","sources":["../../../src/verify/attribution/rework-attribution.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,oGAAoG;AACpG,uEAAuE;AACvE,iFAAiF;AACjF,gBAAgB;AAgGhB,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAmDrD;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,EAAgB,EAChB,IAA2B;IAE3B,IAAI,OAA6B,CAAC;IAClC,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,OAAO,IAAI,EAAE,CAAC;IAClC,OAAO;QACL,kBAAkB,EAAE,IAAI,GAAG,CAAC,WAAW,CAAC;QACxC,kBAAkB,EAAE,WAAW;QAC/B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,0EAA0E;QAC1E,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,gBAAgB;QAC5D,SAAS,EAAE,OAAO,KAAK,IAAI;KAC5B,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAA6B,EAC7B,EAAgB,EAChB,IAA2B;IAE3B,MAAM,QAAQ,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IACjD,qEAAqE;IACrE,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,uBAAuB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACpD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,4DAA4D;QAC5D,MAAM,UAAU,GAAG,SAAS,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/E,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,UAAU,CAAC;QAChD,gDAAgD;QAChD,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC;YAAE,OAAO,SAAS,CAAC,gBAAgB,CAAC;IAClF,CAAC;IACD,+EAA+E;IAC/E,GAAG,CAAC,IAAI,CACN,uDAAuD,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,0BAA0B;UAClG,GAAG,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,6CAA6C,SAAS,CAAC,gBAAgB,GAAG,EAAE;UACtI,wBAAwB,QAAQ,iDAAiD,CACpF,CAAC;IACF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAA6B;IAC/D,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,KAAK,MAAM,EAAE,IAAI,UAAU;QAAE,IAAI,MAAM,KAAK,IAAI,IAAI,EAAE,GAAG,MAAM;YAAE,MAAM,GAAG,EAAE,CAAC;IAC7E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,2HAA2H;AAC3H,SAAS,cAAc,CAAC,EAAgB,EAAE,IAAuB,EAAE,IAA2B;IAC5F,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,YAAY,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE;YAC1E,YAAY;YACZ,iBAAiB,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;SACtG,CAAC,CAAC;QACH,sFAAsF;QACtF,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QAC5D,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAClC,0EAA0E;QAC1E,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;gBACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,UAAkB,EAClB,EAAgB,EAChB,IAA2B;IAE3B,MAAM,SAAS,GAAG,uBAAuB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACpD,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,MAAM,kBAAkB,CAAC,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,UAAU,KAAK,SAAS,CAAC,gBAAgB,CAAC;IACvD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,GAAG,GAAG,SAAS,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC;YACjD,CAAC,CAAC,4CAA4C,SAAS,CAAC,gBAAgB,IAAI;YAC5E,CAAC,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,4BAA4B,yBAAyB;kBAClH,mCAAmC,SAAS,CAAC,gBAAgB,GAAG,CAAC;QACvE,MAAM,MAAM,GAAG,SAAS,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAC9F,GAAG,CAAC,IAAI,CACN,yCAAyC,UAAU,kCAAkC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB;cACtH,eAAe,GAAG,EAAE;cACpB,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,mCAAmC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CACrF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,kBAAkB,CAAC,UAAkB,EAAE,EAAgB,EAAE,IAA2B;IACjG,IAAI,UAA6B,CAAC;IAClC,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CACN,uDAAuD,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,4CAA4C;cACpH,mCAAmC,UAAU,wDAAwD,EACtG,GAAa,CAAC,OAAO,CACvB,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CACN,yCAAyC,UAAU,kCAAkC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU;cAChH,8DAA8D,KAAK,EAAE,CACxE,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,GAAG,CAAC,IAAI,CACN,uDAAuD,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,8CAA8C;UACtH,eAAe,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,UAAU,QAAQ,CAC/E,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"rework-attribution.js","sourceRoot":"","sources":["../../../src/verify/attribution/rework-attribution.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,oGAAoG;AACpG,0FAA0F;AAC1F,uEAAuE;AACvE,iFAAiF;AACjF,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+GG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAQrD;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAwB,IAAI,GAAG,CAAC;IACrE,eAAe,CAAC,MAAM;IACtB,eAAe,CAAC,MAAM;IACtB,eAAe,CAAC,MAAM;IACtB,eAAe,CAAC,aAAa;CAC9B,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAwB,IAAI,GAAG,CAAC;IACzE,eAAe,CAAC,IAAI;IACpB,eAAe,CAAC,MAAM;CACvB,CAAC,CAAC;AAEH,uFAAuF;AACvF,MAAM,UAAU,gBAAgB,CAAC,MAAiC;IAChE,OAAO,8BAA8B,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,UAAwC;IAC5E,OAAO,UAAU;SACd,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,IAAI,EAAE,CAAC,IAAI,gBAAgB,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;SAC7G,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACtB,CAAC;AAmDD;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,EAAgB,EAChB,IAA2B,EAC3B,cAAmC;IAEnC,IAAI,OAA6B,CAAC;IAClC,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,OAAO,GAAG,cAAc,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IACvE,MAAM,WAAW,GAAG,OAAO,IAAI,EAAE,CAAC;IAClC,OAAO;QACL,kBAAkB,EAAE,IAAI,GAAG,CAAC,WAAW,CAAC;QACxC,kBAAkB,EAAE,WAAW;QAC/B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,8EAA8E;QAC9E,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,gBAAgB;QAC5D,SAAS,EAAE,OAAO,KAAK,IAAI;KAC5B,CAAC;AACJ,CAAC;AAQD,0GAA0G;AAC1G,SAAS,aAAa,CAAC,UAAwC,EAAE,UAA6B;IAC5F,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACtI,OAAO,mBAAmB,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,UAAU,CAAC,CAAC;AACtE,CAAC;AAED,yEAAyE;AACzE,SAAS,iBAAiB,CACxB,UAAwC,EACxC,EAAgB,EAChB,IAA2B;IAE3B,MAAM,UAAU,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,aAAa,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACvD,gFAAgF;IAChF,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,iFAAiF,EAAE,CAAC;IACtI,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,uBAAuB,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1F,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,6FAA6F;QAC7F,MAAM,UAAU,GAAG,SAAS,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/E,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,4DAA4D,UAAU,IAAI,EAAE,CAAC;QAC5I,gDAAgD;QAChD,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC7C,OAAO;gBACL,KAAK,EAAE,SAAS,CAAC,gBAAgB;gBACjC,GAAG,EAAE,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,oEAAoE,CAAC,CAAC,CAAC,oCAAoC,IAAI;sBACzI,wDAAwD,SAAS,CAAC,gBAAgB,GAAG;aAC1F,CAAC;QACJ,CAAC;IACH,CAAC;IACD,+EAA+E;IAC/E,GAAG,CAAC,IAAI,CACN,uDAAuD,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,0BAA0B;UAClG,GAAG,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,oCAAoC,SAAS,CAAC,gBAAgB,GAAG,EAAE;UAC7H,wBAAwB,QAAQ,iDAAiD,CACpF,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,qDAAqD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,QAAQ,EAAE,EAAE,CAAC;AAC1I,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAAwC,EACxC,EAAgB,EAChB,IAA2B;IAE3B,OAAO,iBAAiB,CAAC,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC;AACvD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAA6B;IAC/D,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,KAAK,MAAM,EAAE,IAAI,UAAU;QAAE,IAAI,MAAM,KAAK,IAAI,IAAI,EAAE,GAAG,MAAM;YAAE,MAAM,GAAG,EAAE,CAAC;IAC7E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CACrB,EAAgB,EAChB,IAAuB,EACvB,IAA2B,EAC3B,GAAwB;IAExB,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,YAAY,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE;YAC1E,YAAY;YACZ,iBAAiB,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;SACtG,CAAC,CAAC;QACH,sFAAsF;QACtF,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QAC5D,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAClC,0EAA0E;QAC1E,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC;gBAAE,SAAS;YACtF,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAKD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAgB,EAAE,IAA2B;IACpF,IAAI,UAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CACN,4GAA4G;cAC1G,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,8DAA8D,EACrF,GAAa,CAAC,OAAO,CACvB,CAAC;QACF,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IACvD,GAAG,CAAC,IAAI,CAAC,uDAAuD,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,MAAM,CAAC,KAAK,IAAI,QAAQ,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/I,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;AAC/D,CAAC"}

package/dist/verify/gate-verdicts/commit-verdict-record.d.ts

@@ -58,6 +58,15 @@ export declare function readCommitVerdict(productId: string, focusId: string, sh
     gate?: CommitVerdictGate;
     dir?: string;
 }): CommitVerdict | null;
+/**
+ * Every verdict recorded for the focus, at every commit and under every gate
+ * (unordered; empty when the focus has none readable). Read from the record files
+ * themselves, so no history is walked -- a judged commit any number of commits
+ * behind HEAD, or rebased out of it, is still listed.
+ */
+export declare function listFocusVerdicts(productId: string, focusId: string, opts?: {
+    dir?: string;
+}): CommitVerdict[];
 /** Write a verdict atomically. Best-effort: returns false (and logs) when the write failed. */
 export declare function writeCommitVerdict(verdict: CommitVerdict, dir?: string): boolean;
 /**