@telora/daemon 0.24.8 → 0.24.10

package/dist/testing/fixtures/vitest-failure-log.js.map

@@ -1 +1 @@
-{"version":3,"file":"vitest-failure-log.js","sourceRoot":"","sources":["../../../src/testing/fixtures/vitest-failure-log.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,yFAAyF;AACzF,8EAA8E;AAC9E,yEAAyE;AACzE,yEAAyE;AACzE,gBAAgB;AAEhB;;;;;;GAMG;AAEH,4FAA4F;AAC5F,MAAM,UAAU,gBAAgB,CAAC,GAAsB;IACrD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,wDAAwD,CAAC;IACtF,OAAO;QACL,wBAAwB,GAAG,CAAC,MAAM,UAAU;QAC5C,EAAE;QACF,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,EAAE,2CAA2C,EAAE,EAAE,CAAC,CAAC;QACzF,2BAA2B;QAC3B,gBAAgB,GAAG,CAAC,MAAM,YAAY,GAAG,CAAC,MAAM,GAAG;QACnD,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}
+{"version":3,"file":"vitest-failure-log.js","sourceRoot":"","sources":["../../../src/testing/fixtures/vitest-failure-log.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,yFAAyF;AACzF,iEAAiE;AACjE,8EAA8E;AAC9E,yEAAyE;AACzE,yEAAyE;AACzE,gBAAgB;AAEhB;;;;;;GAMG;AAEH,4FAA4F;AAC5F,MAAM,UAAU,gBAAgB,CAAC,GAAsB;IACrD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,wDAAwD,CAAC;IACtF,OAAO;QACL,wBAAwB,GAAG,CAAC,MAAM,UAAU;QAC5C,EAAE;QACF,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,EAAE,2CAA2C,EAAE,EAAE,CAAC,CAAC;QACzF,2BAA2B;QAC3B,gBAAgB,GAAG,CAAC,MAAM,YAAY,GAAG,CAAC,MAAM,GAAG;QACnD,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/verify/ci-gate/ci-gate-dispatch.d.ts

@@ -0,0 +1,93 @@
+import { type GateRunSpec, type GateRunVerdict, type PublishedGateLog, type PublishedGateStatus } from '../../ci/gate-ref.js';
+import type { PendingVerification } from '../../queries/verification/verification.js';
+import type { StrategyResult } from '../deterministic-gate/verification-deterministic.js';
+import { type VerifyBoundaryEnvDeps } from '../deterministic-gate/verification-boundary-env.js';
+import type { AppliedVerificationConfig, VerificationConfigScope } from '../gate-config/verification-config.js';
+import type { JudgedCommitManifest, JudgedCommitRead } from '../run-selection/verification-default-on.js';
+import type { FileEscalationInput } from '../../nexus/file-escalation.js';
+import type { CiGateWaitStore } from './ci-gate-wait-record.js';
+/** Past the gate's own timeout, how long a handed-over run may sit with no verdict before it is re-pushed (once). */
+export declare const CI_GATE_QUEUE_MARGIN_MS: number;
+/** A visible CI-run registration no dispatch has touched for this long is ended. */
+export declare const CI_GATE_REGISTRATION_STALE_MS: number;
+/** The machine kind of the one filing a held CI gate run makes. */
+export declare const CI_GATE_NO_VERDICT_KIND = "verify_ci_gate_no_verdict";
+/** The CI-run gate's own seams; production binds the git IO of ci/gate-ref.ts and the durable wait record. */
+export interface CiGateDeps {
+    /** The config a default-on run applies at the judged commit (verify/gate-config/judged-commit-gate.ts), or null. */
+    appliedConfigAt: (source: VerificationConfigScope, read: JudgedCommitManifest) => AppliedVerificationConfig | null;
+    /** The verdict CI published for (sha, key) on the product's origin; fail-closed. */
+    readVerdict: (repoPath: string, sha: string, key: string) => GateRunVerdict;
+    /** Every status CI published for (sha, key), each run on its own ([] when unreadable). */
+    listStatus: (repoPath: string, sha: string, key: string) => PublishedGateStatus[];
+    /** The log and exit facts a published run points at; null when unreadable. */
+    readLog: (repoPath: string, published: PublishedGateStatus) => PublishedGateLog | null;
+    /**
+     * Hand a run to CI (spec + gate branch, one push); false on any git failure.
+     * `harnessFrom`: for a run at another commit than the judged HEAD, the commit
+     * whose gate job and script ride along (ci/gate-ref.ts buildHarnessCommit).
+     */
+    pushRun: (repoPath: string, spec: GateRunSpec, harnessFrom?: string) => boolean;
+    waits: CiGateWaitStore;
+    /** Where a fetched CI log is kept, so the log readers find it by path. */
+    logDir: () => string;
+    now: () => number;
+    /** Resolve after `ms`: the wait between reads of an awaited re-run's status (verify/ci-gate/ci-gate-reruns.ts). */
+    sleep: (ms: number) => Promise<void>;
+    /** How long an awaited re-run waits between reads of its published status. */
+    pollIntervalMs: number;
+}
+/** What {@link stepCiGate} reads beyond its own seams. */
+export type CiGateStepDeps = VerifyBoundaryEnvDeps & {
+    ciGate: CiGateDeps;
+    /** The product's repo path, for a candidate that carries none (an explicit row). */
+    resolveCwd: (productId: string | null) => string;
+    readJudgedCommitManifest: (focusId: string) => JudgedCommitRead | null;
+    fileEscalation: (input: FileEscalationInput) => Promise<void>;
+    organizationId: string;
+};
+/** A candidate whose gate runs on CI: what it applies at the judged commit, and where it pushes from. */
+export interface CiGateRun {
+    productId: string;
+    focusId: string;
+    repoPath: string;
+    sha: string;
+    applied: AppliedVerificationConfig;
+    key: string;
+}
+/**
+ * The CI-run gate a candidate takes, or null when its gate runs on the host: a
+ * deterministic candidate -- default-on, or an explicit-method row -- on a focus
+ * whose judged commit's manifest names CI as the gate runner. The runner is the
+ * PRODUCT's declaration, so it binds every deterministic gate judged at that
+ * commit: a default-on candidate applies the config resolved at the judged commit,
+ * an explicit row its own command and timeout (the gate its verdict is keyed by).
+ * Pure over `deps`.
+ */
+export declare function ciGateRunOf(v: PendingVerification, deps: Pick<CiGateStepDeps, 'ciGate' | 'readJudgedCommitManifest' | 'resolveCwd'>): CiGateRun | null;
+/** One step's outcome: a verdict CI rendered (to judge and record), or a wait (nothing to route). */
+export type CiGateStep = {
+    kind: 'verdict';
+    result: StrategyResult;
+} | {
+    kind: 'waiting';
+    why: string;
+};
+/** The bounded wait for one run: the gate's own timeout plus the queue margin. */
+export declare function ciGateWaitWindowMs(applied: Pick<AppliedVerificationConfig, 'timeoutMs'>): number;
+/** Test seam: forget every visible run. */
+export declare function __resetCiGateRunsForTests(): void;
+/**
+ * The StrategyResult a published run renders: its outcome and exit, the commit it
+ * judged, the config it applied, and its log -- kept on disk (logPath) and its
+ * tail inline -- so every log reader treats it as a local run's. A red whose log
+ * cannot be fetched still renders red: the readers then find only the rationale,
+ * and the gate's own blindness rules (a failure naming nothing) apply to it.
+ */
+export declare function resultFromPublished(run: CiGateRun, status: 'green' | 'red', published: PublishedGateStatus, fetched: PublishedGateLog | null, logPath: string | null): StrategyResult;
+/**
+ * Take one step of the CI-run gate for `run` (module doc). Never throws for a
+ * normal miss: anything unreadable is a wait.
+ */
+export declare function stepCiGate(v: PendingVerification, run: CiGateRun, deps: CiGateStepDeps): Promise<CiGateStep>;
+//# sourceMappingURL=ci-gate-dispatch.d.ts.map

package/dist/verify/ci-gate/ci-gate-dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-gate-dispatch.d.ts","sourceRoot":"","sources":["../../../src/verify/ci-gate/ci-gate-dispatch.ts"],"names":[],"mappings":"AA+DA,OAAO,EAIL,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AACtF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qDAAqD,CAAC;AAE1F,OAAO,EAA4B,KAAK,qBAAqB,EAAE,MAAM,oDAAoD,CAAC;AAE1H,OAAO,KAAK,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,uCAAuC,CAAC;AAChH,OAAO,KAAK,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,6CAA6C,CAAC;AAG1G,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,KAAK,EAAc,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAK5E,qHAAqH;AACrH,eAAO,MAAM,uBAAuB,QAAiB,CAAC;AAEtD,oFAAoF;AACpF,eAAO,MAAM,6BAA6B,QAAiB,CAAC;AAE5D,mEAAmE;AACnE,eAAO,MAAM,uBAAuB,8BAA8B,CAAC;AAKnE,8GAA8G;AAC9G,MAAM,WAAW,UAAU;IACzB,oHAAoH;IACpH,eAAe,EAAE,CAAC,MAAM,EAAE,uBAAuB,EAAE,IAAI,EAAE,oBAAoB,KAAK,yBAAyB,GAAG,IAAI,CAAC;IACnH,oFAAoF;IACpF,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,cAAc,CAAC;IAC5E,0FAA0F;IAC1F,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,mBAAmB,EAAE,CAAC;IAClF,8EAA8E;IAC9E,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,mBAAmB,KAAK,gBAAgB,GAAG,IAAI,CAAC;IACvF;;;;OAIG;IACH,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;IAChF,KAAK,EAAE,eAAe,CAAC;IACvB,0EAA0E;IAC1E,MAAM,EAAE,MAAM,MAAM,CAAC;IACrB,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,mHAAmH;IACnH,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,8EAA8E;IAC9E,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,0DAA0D;AAC1D,MAAM,MAAM,cAAc,GAAG,qBAAqB,GAAG;IACnD,MAAM,EAAE,UAAU,CAAC;IACnB,oFAAoF;IACpF,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,KAAK,MAAM,CAAC;IACjD,wBAAwB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,gBAAgB,GAAG,IAAI,CAAC;IACvE,cAAc,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,yGAAyG;AACzG,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,yBAAyB,CAAC;IACnC,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CACzB,CAAC,EAAE,mBAAmB,EACtB,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,GAAG,0BAA0B,GAAG,YAAY,CAAC,GAC/E,SAAS,GAAG,IAAI,CAWlB;AAQD,qGAAqG;AACrG,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,cAAc,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAErC,kFAAkF;AAClF,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,yBAAyB,EAAE,WAAW,CAAC,GAAG,MAAM,CAEhG;AA8CD,2CAA2C;AAC3C,wBAAgB,yBAAyB,IAAI,IAAI,CAEhD;AAoBD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,SAAS,EACd,MAAM,EAAE,OAAO,GAAG,KAAK,EACvB,SAAS,EAAE,mBAAmB,EAC9B,OAAO,EAAE,gBAAgB,GAAG,IAAI,EAChC,OAAO,EAAE,MAAM,GAAG,IAAI,GACrB,cAAc,CAgBhB;AA6FD;;;GAGG;AACH,wBAAsB,UAAU,CAAC,CAAC,EAAE,mBAAmB,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC,CAgClH"}

package/dist/verify/ci-gate/ci-gate-dispatch.js

@@ -0,0 +1,304 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/verify/ci-gate/ci-gate-dispatch.test.ts,
+//   packages/daemon/src/verify/ci-gate/ci-gate-reruns.test.ts
+// PINNED-BY-END
+/**
+ * The per-HEAD gate, run on CI instead of the daemon host.
+ *
+ * A product whose telora.verify.json AT THE JUDGED COMMIT says
+ * `"gateRunner": "ci"` gets no gate process on the host: no checkout, no
+ * verification-semaphore slot, no command. In their place, each dispatch of a
+ * default-on candidate takes ONE step of a small state machine
+ * ({@link stepCiGate}), keyed by the judged commit and the gate the run would
+ * apply there (its command + timeout -- the same key the per-commit verdict
+ * record uses):
+ *
+ *   verdict published  -> CI's verdict for (sha, gate) is read back
+ *                         (ci/gate-ref.ts); a red's log is fetched and kept
+ *                         where the log readers find it. The result is judged
+ *                         and recorded into the SAME per-(focus, sha, gate)
+ *                         verdict record a local run writes
+ *                         (verify/engine/verification-commit-sharing.ts), so the
+ *                         review request, re-work routing, the gate-verdict
+ *                         prompt section and the dashboard read it unchanged.
+ *   nothing handed yet -> push the commit to the focus's gate branch with the
+ *                         run's spec (command, timeout, the verify boundary env),
+ *                         and stamp the wait durably (ci-gate-wait-record.ts).
+ *   waiting            -> nothing, until the bounded window has passed with no
+ *                         verdict; then the run is RE-PUSHED once (so CI sees a
+ *                         fresh push), and after a second window the delivery
+ *                         simply holds and the hold is SURFACED once (one
+ *                         agent_resolvable filing). A missing verdict is CI's
+ *                         fault, never the focus's re-work; and it never reads as
+ *                         passed: no verdict is recorded, so every reader of the
+ *                         commit's verdict still finds none.
+ *
+ * A run CI ended by its timeout, whose log rendered no verdict either
+ * (verify/deterministic-gate/timed-out-rendered-verdict.ts), is no verdict too:
+ * it is re-pushed once at once, and a second such run holds.
+ *
+ * VISIBLE WHILE IT WAITS. A handed-over run is registered on the gate-run
+ * registry as RUNNING at its commit, for as long as the dispatch keeps finding it
+ * waiting (verify/gate-verdicts/gate-run-registry.ts) -- the gate is running, on
+ * a runner -- so the heartbeat publishes it as a running gate, and the review
+ * exit and the done route wait for its verdict exactly as for a local run. The
+ * registration ends when the verdict is read, when the focus's next run replaces
+ * it, or by itself once no dispatch has touched it for
+ * {@link CI_GATE_REGISTRATION_STALE_MS} (the delivery left verify, or the focus
+ * stopped awaiting its gate) -- a timer, so an abandoned wait never holds a
+ * delivery's routing for the life of the process.
+ *
+ * A red is then handled as a local red is -- the same-commit flake retry and
+ * attribution against the focus base -- with every run that asks for sent to CI
+ * as well (verify/ci-gate/ci-gate-reruns.ts), from the log CI published.
+ *
+ * Why: docs/runbook-verify-gate-in-ci.md.
+ *
+ * @module verify/ci-gate/ci-gate-dispatch
+ */
+import { mkdirSync, writeFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { ESCALATION_DISPOSITIONS, ESCALATION_REASONS } from '@telora/daemon-core';
+import { buildGateRunSpec, gateBranchForFocus, gateRunKey, } from '../../ci/gate-ref.js';
+import { judgeTimedOutRun } from '../deterministic-gate/timed-out-rendered-verdict.js';
+import { resolveVerifyBoundaryEnv } from '../deterministic-gate/verification-boundary-env.js';
+import { gateRunsOnCi } from '../gate-config/verification-manifest.js';
+import { registerGateRun } from '../gate-verdicts/gate-run-registry.js';
+import { commitVerdictGateOf } from '../gate-verdicts/commit-verdict-record.js';
+import { createLogger } from '../../log/daemon-log.js';
+const log = createLogger({ module: 'verification' });
+/** Past the gate's own timeout, how long a handed-over run may sit with no verdict before it is re-pushed (once). */
+export const CI_GATE_QUEUE_MARGIN_MS = 60 * 60 * 1000;
+/** A visible CI-run registration no dispatch has touched for this long is ended. */
+export const CI_GATE_REGISTRATION_STALE_MS = 10 * 60 * 1000;
+/** The machine kind of the one filing a held CI gate run makes. */
+export const CI_GATE_NO_VERDICT_KIND = 'verify_ci_gate_no_verdict';
+/** Chars of the CI log kept inline on the result (the whole log is in the file logPath names). */
+const LOG_TAIL_CHARS = 4000;
+/**
+ * The CI-run gate a candidate takes, or null when its gate runs on the host: a
+ * deterministic candidate -- default-on, or an explicit-method row -- on a focus
+ * whose judged commit's manifest names CI as the gate runner. The runner is the
+ * PRODUCT's declaration, so it binds every deterministic gate judged at that
+ * commit: a default-on candidate applies the config resolved at the judged commit,
+ * an explicit row its own command and timeout (the gate its verdict is keyed by).
+ * Pure over `deps`.
+ */
+export function ciGateRunOf(v, deps) {
+    if (v.verificationMethod !== 'deterministic' || !v.focusId || !v.productId)
+        return null;
+    const read = deps.readJudgedCommitManifest(v.focusId);
+    if (read === null || 'unreadable' in read || !gateRunsOnCi(read.manifest))
+        return null;
+    const applied = v.defaultOnSource ? deps.ciGate.appliedConfigAt(v.defaultOnSource, read) : explicitRowConfig(v);
+    if (applied === null)
+        return null;
+    const repoPath = v.defaultOnSource?.repoPath ?? deps.resolveCwd(v.productId);
+    if (!repoPath) {
+        log.warn(`[verification] ci-gate: delivery ${v.deliveryId} names CI as its gate runner but its product has no repoPath to push from; it holds`);
+    }
+    return { productId: v.productId, focusId: v.focusId, repoPath: repoPath ?? '', sha: read.sha, applied, key: gateRunKey(applied) };
+}
+/** An explicit row's own gate as a run applies it (its command; its timeout, else the strategy default); null with no command. */
+function explicitRowConfig(v) {
+    const gate = commitVerdictGateOf(v);
+    return gate ? { ...gate, timeoutSource: 'the delivery\'s own verification config' } : null;
+}
+/** The bounded wait for one run: the gate's own timeout plus the queue margin. */
+export function ciGateWaitWindowMs(applied) {
+    return applied.timeoutMs + CI_GATE_QUEUE_MARGIN_MS;
+}
+const visibleRuns = new Map();
+/** (Re)arm the run's expiry: it ends itself unless a dispatch touches it again in time. Never keeps the process alive. */
+function armExpiry(focusId) {
+    const timer = setTimeout(() => endVisible(focusId), CI_GATE_REGISTRATION_STALE_MS);
+    timer.unref();
+    return timer;
+}
+/** Keep the focus's handed-over run registered as running at its commit (module doc). */
+function showWaiting(run, deliveryId) {
+    const current = visibleRuns.get(run.focusId);
+    if (current && current.sha === run.sha && current.key === run.key) {
+        clearTimeout(current.expiry);
+        current.expiry = armExpiry(run.focusId);
+        return;
+    }
+    if (current)
+        endVisible(run.focusId);
+    const registration = registerGateRun({ deliveryId, focusId: run.focusId, explicit: false });
+    registration.start({ sha: run.sha, timeoutMs: ciGateWaitWindowMs(run.applied) });
+    visibleRuns.set(run.focusId, { sha: run.sha, key: run.key, registration, expiry: armExpiry(run.focusId) });
+}
+/** The focus's handed-over run rendered its verdict, was replaced, or went untouched: it is no longer running. */
+function endVisible(focusId) {
+    const run = visibleRuns.get(focusId);
+    if (!run)
+        return;
+    clearTimeout(run.expiry);
+    run.registration.end();
+    visibleRuns.delete(focusId);
+}
+/** Test seam: forget every visible run. */
+export function __resetCiGateRunsForTests() {
+    for (const focusId of [...visibleRuns.keys()])
+        endVisible(focusId);
+}
+// ---------------------------------------------------------------------------
+// The step
+// ---------------------------------------------------------------------------
+/** Keep a fetched CI log on disk, where readVerificationLogText and the stage readers find it; null when it cannot be written. */
+function keepLog(run, published, text, deps) {
+    try {
+        const dir = deps.logDir();
+        mkdirSync(dir, { recursive: true });
+        const path = resolve(dir, `ci-gate-${run.focusId}-${run.sha.slice(0, 12)}-${run.key}-run${published.runNumber}.log`);
+        writeFileSync(path, text, { mode: 0o600 });
+        return path;
+    }
+    catch (err) {
+        log.warn(`[verification] ci-gate: could not keep the CI log of ${published.ref}:`, err.message);
+        return null;
+    }
+}
+/**
+ * The StrategyResult a published run renders: its outcome and exit, the commit it
+ * judged, the config it applied, and its log -- kept on disk (logPath) and its
+ * tail inline -- so every log reader treats it as a local run's. A red whose log
+ * cannot be fetched still renders red: the readers then find only the rationale,
+ * and the gate's own blindness rules (a failure naming nothing) apply to it.
+ */
+export function resultFromPublished(run, status, published, fetched, logPath) {
+    const passed = status === 'green';
+    const exitCode = fetched?.result?.exitCode ?? (passed ? 0 : 1);
+    const tail = fetched ? fetched.log.slice(-LOG_TAIL_CHARS) : undefined;
+    return {
+        outcome: passed ? 'passed' : 'failed',
+        rationale: `CI gate run #${published.runNumber} of ${run.sha.slice(0, 8)} ${passed ? 'passed (exit 0)' : `failed (exit ${exitCode})`} `
+            + `-- published as ${published.ref}`,
+        exitCode,
+        verifiedSha: run.sha,
+        appliedConfig: run.applied,
+        ...(fetched?.result?.timedOut ? { timedOut: true } : {}),
+        ...(tail !== undefined ? { stdoutTail: tail } : {}),
+        ...(logPath !== null ? { logPath } : {}),
+        publishedLogRef: published.ref,
+    };
+}
+/** Read the verdict CI published for the run; a 'verdict' step, or null when there is none to take. */
+function readPublished(run, deps) {
+    const verdict = deps.readVerdict(run.repoPath, run.sha, run.key);
+    if ((verdict.status !== 'green' && verdict.status !== 'red') || verdict.decidedBy === null)
+        return null;
+    const published = verdict.decidedBy;
+    const fetched = verdict.status === 'red' ? deps.readLog(run.repoPath, published) : null;
+    if (verdict.status === 'red' && fetched === null) {
+        log.warn(`[verification] ci-gate: the log of ${published.ref} could not be fetched; the red routes on its exit alone`);
+    }
+    const logPath = fetched ? keepLog(run, published, fetched.log, deps) : null;
+    const raw = resultFromPublished(run, verdict.status, published, fetched, logPath);
+    if (raw.timedOut !== true)
+        return { result: raw, timedOutUnrendered: false };
+    // CI ended the run at its timeout: a completed pass or named failing tests in its log are still a verdict.
+    const judged = judgeTimedOutRun(raw, run.applied.command, fetched?.log ?? '');
+    return { result: judged, timedOutUnrendered: judged.timedOut === true };
+}
+/** Hand the run to CI: its spec, carrying the verify boundary the local run would have handed the command. */
+async function handOver(v, run, deps) {
+    const env = await resolveVerifyBoundaryEnv(deps, v);
+    const spec = buildGateRunSpec({
+        purpose: 'gate', focusId: run.focusId, sha: run.sha, command: run.applied.command, timeoutMs: run.applied.timeoutMs, env,
+    });
+    return run.repoPath !== '' && deps.ciGate.pushRun(run.repoPath, spec);
+}
+function filingFor(run, wait, organizationId) {
+    return {
+        organizationId,
+        focusId: run.focusId,
+        productId: run.productId,
+        reason: `The per-HEAD gate of focus commit ${run.sha} runs on CI (telora.verify.json "gateRunner": "ci"), and CI has published `
+            + `no verdict for it under gate key ${run.key} (\`${run.applied.command}\`), even after one re-push of ${gateBranchForFocus(run.focusId)}. `
+            + 'The delivery holds in verify: no verdict is ever assumed. Check that the product\'s CI runs the gate job for that branch '
+            + `(docs/runbook-verify-gate-in-ci.md) and that its runners are up; diagnose with \`ci-logs\`.`,
+        reasonType: ESCALATION_REASONS.ERROR_ENCOUNTERED,
+        disposition: ESCALATION_DISPOSITIONS.AGENT_RESOLVABLE,
+        kind: CI_GATE_NO_VERDICT_KIND,
+        details: { sha: run.sha, key: run.key, command: run.applied.command, pushedAt: new Date(wait.pushedAt).toISOString(), repushedAt: wait.repushedAt ? new Date(wait.repushedAt).toISOString() : null },
+    };
+}
+/** A handed-over run with no verdict yet: re-push it once past its window, then hold and surface once (module doc). */
+async function waitForVerdict(v, run, wait, deps, repushNow) {
+    const now = deps.ciGate.now();
+    const since = wait.repushedAt ?? wait.pushedAt;
+    const window = ciGateWaitWindowMs(run.applied);
+    if (!repushNow && now - since < window)
+        return { kind: 'waiting', why: `CI gate run of ${run.sha.slice(0, 8)} handed over ${Math.round((now - wait.pushedAt) / 60000)} min ago; no verdict yet` };
+    if (wait.repushedAt === undefined) {
+        const pushed = await handOver(v, run, deps);
+        if (pushed)
+            deps.ciGate.waits.write({ ...wait, repushedAt: now });
+        log.warn(`[verification] ci-gate: focus ${run.focusId} commit ${run.sha.slice(0, 8)}: CI published no verdict `
+            + `${repushNow ? '(its run timed out without rendering one)' : `within ${Math.round(window / 60000)} min`} -- `
+            + `${pushed ? 're-pushed once so CI sees a fresh push' : 'the re-push failed; retried next tick'}`);
+        return { kind: 'waiting', why: pushed ? 're-pushed once for a missing verdict' : 're-push failed' };
+    }
+    if (wait.surfacedAt === undefined) {
+        try {
+            await deps.fileEscalation(filingFor(run, wait, deps.organizationId));
+            deps.ciGate.waits.write({ ...wait, surfacedAt: now });
+        }
+        catch (err) {
+            log.warn(`[verification] ci-gate: failed to surface the held CI gate run of ${run.focusId}@${run.sha.slice(0, 8)}:`, err.message);
+        }
+    }
+    return { kind: 'waiting', why: 'held: CI published no verdict even after a re-push (surfaced)' };
+}
+/**
+ * Whether another gate of the same commit holds the focus's one gate branch: a
+ * handed-over run under another key (an explicit row's own command beside the
+ * default-on gate) with no verdict yet and inside its windows. Pushing now would
+ * supersede it -- its job would publish nothing -- and the two would take turns
+ * replacing each other forever; so this one waits its turn. A run of an older
+ * commit never holds a newer one.
+ */
+function sharesBranchWithOtherGate(run, wait, deps, now) {
+    if (wait === null || wait.sha !== run.sha || wait.key === run.key)
+        return false;
+    const other = deps.readVerdict(run.repoPath, wait.sha, wait.key);
+    if (other.status === 'green' || other.status === 'red')
+        return false;
+    return now - (wait.repushedAt ?? wait.pushedAt) < 2 * ciGateWaitWindowMs(run.applied);
+}
+/**
+ * Take one step of the CI-run gate for `run` (module doc). Never throws for a
+ * normal miss: anything unreadable is a wait.
+ */
+export async function stepCiGate(v, run, deps) {
+    const now = deps.ciGate.now();
+    const published = readPublished(run, deps.ciGate);
+    const wait = deps.ciGate.waits.read(run.productId, run.focusId);
+    const current = wait !== null && wait.sha === run.sha && wait.key === run.key ? wait : null;
+    if (published !== null && !published.timedOutUnrendered) {
+        endVisible(run.focusId);
+        log.info(`[verification] ci-gate: delivery "${v.deliveryName}" (${v.deliveryId}) -- CI's '${published.result.outcome}' verdict for `
+            + `${run.sha.slice(0, 8)} is read back; it is judged and recorded as the commit's gate verdict (no gate process on this host)`);
+        return { kind: 'verdict', result: published.result };
+    }
+    if (current === null && sharesBranchWithOtherGate(run, wait, deps.ciGate, now)) {
+        return { kind: 'waiting', why: `another gate of ${run.sha.slice(0, 8)} is on CI on this focus's gate branch` };
+    }
+    if (current === null) {
+        const pushed = await handOver(v, run, deps);
+        if (!pushed) {
+            log.warn(`[verification] ci-gate: could not push ${run.sha.slice(0, 8)} to ${gateBranchForFocus(run.focusId)} for delivery ${v.deliveryId}; retried next tick`);
+            return { kind: 'waiting', why: 'the push to the gate branch failed' };
+        }
+        deps.ciGate.waits.write({ productId: run.productId, focusId: run.focusId, sha: run.sha, key: run.key, deliveryId: v.deliveryId, pushedAt: now });
+        showWaiting(run, v.deliveryId);
+        log.info(`[verification] ci-gate: delivery "${v.deliveryName}" (${v.deliveryId}) -- handed focus commit ${run.sha.slice(0, 8)} to CI on `
+            + `${gateBranchForFocus(run.focusId)} (gate key ${run.key}); the delivery waits on the CI gate`);
+        return { kind: 'waiting', why: 'handed to CI' };
+    }
+    showWaiting(run, v.deliveryId);
+    return waitForVerdict(v, run, current, deps, published?.timedOutUnrendered === true && current.repushedAt === undefined);
+}
+//# sourceMappingURL=ci-gate-dispatch.js.map

package/dist/verify/ci-gate/ci-gate-dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-gate-dispatch.js","sourceRoot":"","sources":["../../../src/verify/ci-gate/ci-gate-dispatch.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,0EAA0E;AAC1E,8DAA8D;AAC9D,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AAEH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,UAAU,GAKX,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,qDAAqD,CAAC;AACvF,OAAO,EAAE,wBAAwB,EAA8B,MAAM,oDAAoD,CAAC;AAC1H,OAAO,EAAE,YAAY,EAAE,MAAM,yCAAyC,CAAC;AAGvE,OAAO,EAAE,eAAe,EAA4B,MAAM,uCAAuC,CAAC;AAClG,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAGhF,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAErD,qHAAqH;AACrH,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtD,oFAAoF;AACpF,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE5D,mEAAmE;AACnE,MAAM,CAAC,MAAM,uBAAuB,GAAG,2BAA2B,CAAC;AAEnE,kGAAkG;AAClG,MAAM,cAAc,GAAG,IAAI,CAAC;AAgD5B;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CACzB,CAAsB,EACtB,IAAgF;IAEhF,IAAI,CAAC,CAAC,kBAAkB,KAAK,eAAe,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IACxF,MAAM,IAAI,GAAG,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,IAAI,KAAK,IAAI,IAAI,YAAY,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACvF,MAAM,OAAO,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAChH,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,QAAQ,GAAG,CAAC,CAAC,eAAe,EAAE,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC7E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC,UAAU,qFAAqF,CAAC,CAAC;IAClJ,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;AACpI,CAAC;AAED,kIAAkI;AAClI,SAAS,iBAAiB,CAAC,CAAsB;IAC/C,MAAM,IAAI,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,yCAAyC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7F,CAAC;AAOD,kFAAkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,OAAqD;IACtF,OAAO,OAAO,CAAC,SAAS,GAAG,uBAAuB,CAAC;AACrD,CAAC;AAcD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAsB,CAAC;AAElD,0HAA0H;AAC1H,SAAS,SAAS,CAAC,OAAe;IAChC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,6BAA6B,CAAC,CAAC;IACnF,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,OAAO,KAAK,CAAC;AACf,CAAC;AAED,yFAAyF;AACzF,SAAS,WAAW,CAAC,GAAc,EAAE,UAAkB;IACrD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,OAAO,IAAI,OAAO,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,EAAE,CAAC;QAClE,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO;IACT,CAAC;IACD,IAAI,OAAO;QAAE,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,eAAe,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5F,YAAY,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjF,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC7G,CAAC;AAED,kHAAkH;AAClH,SAAS,UAAU,CAAC,OAAe;IACjC,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,GAAG;QAAE,OAAO;IACjB,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,GAAG,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC;IACvB,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,yBAAyB;IACvC,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;QAAE,UAAU,CAAC,OAAO,CAAC,CAAC;AACrE,CAAC;AAED,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E,kIAAkI;AAClI,SAAS,OAAO,CAAC,GAAc,EAAE,SAA8B,EAAE,IAAY,EAAE,IAAgB;IAC7F,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,WAAW,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,OAAO,SAAS,CAAC,SAAS,MAAM,CAAC,CAAC;QACrH,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,wDAAwD,SAAS,CAAC,GAAG,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QAC3G,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAc,EACd,MAAuB,EACvB,SAA8B,EAC9B,OAAgC,EAChC,OAAsB;IAEtB,MAAM,MAAM,GAAG,MAAM,KAAK,OAAO,CAAC;IAClC,MAAM,QAAQ,GAAG,OAAO,EAAE,MAAM,EAAE,QAAQ,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;QACrC,SAAS,EAAE,gBAAgB,SAAS,CAAC,SAAS,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,gBAAgB,QAAQ,GAAG,GAAG;cACnI,mBAAmB,SAAS,CAAC,GAAG,EAAE;QACtC,QAAQ;QACR,WAAW,EAAE,GAAG,CAAC,GAAG;QACpB,aAAa,EAAE,GAAG,CAAC,OAAO;QAC1B,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,eAAe,EAAE,SAAS,CAAC,GAAG;KAC/B,CAAC;AACJ,CAAC;AAED,uGAAuG;AACvG,SAAS,aAAa,CAAC,GAAc,EAAE,IAAgB;IACrD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;IACjE,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACxG,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxF,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACjD,GAAG,CAAC,IAAI,CAAC,sCAAsC,SAAS,CAAC,GAAG,yDAAyD,CAAC,CAAC;IACzH,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,MAAM,GAAG,GAAG,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAClF,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC;IAC7E,2GAA2G;IAC3G,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IAC9E,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;AAC1E,CAAC;AAED,8GAA8G;AAC9G,KAAK,UAAU,QAAQ,CAAC,CAAsB,EAAE,GAAc,EAAE,IAAoB;IAClF,MAAM,GAAG,GAAG,MAAM,wBAAwB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,gBAAgB,CAAC;QAC5B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG;KACzH,CAAC,CAAC;IACH,OAAO,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,SAAS,CAAC,GAAc,EAAE,IAAgB,EAAE,cAAsB;IACzE,OAAO;QACL,cAAc;QACd,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,MAAM,EACJ,qCAAqC,GAAG,CAAC,GAAG,4EAA4E;cACtH,oCAAoC,GAAG,CAAC,GAAG,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,kCAAkC,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI;cAC1I,2HAA2H;cAC3H,6FAA6F;QACjG,UAAU,EAAE,kBAAkB,CAAC,iBAAiB;QAChD,WAAW,EAAE,uBAAuB,CAAC,gBAAgB;QACrD,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;KACrM,CAAC;AACJ,CAAC;AAED,uHAAuH;AACvH,KAAK,UAAU,cAAc,CAC3B,CAAsB,EACtB,GAAc,EACd,IAAgB,EAChB,IAAoB,EACpB,SAAkB;IAElB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC;IAC/C,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC,SAAS,IAAI,GAAG,GAAG,KAAK,GAAG,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,kBAAkB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,0BAA0B,EAAE,CAAC;IAClM,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAI,MAAM;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QAClE,GAAG,CAAC,IAAI,CACN,iCAAiC,GAAG,CAAC,OAAO,WAAW,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,4BAA4B;cACpG,GAAG,SAAS,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,MAAM;cAC7G,GAAG,MAAM,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,uCAAuC,EAAE,CACnG,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,sCAAsC,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC;IACtG,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;YACrE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,qEAAqE,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QAC/I,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,+DAA+D,EAAE,CAAC;AACnG,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,yBAAyB,CAAC,GAAc,EAAE,IAAuB,EAAE,IAAgB,EAAE,GAAW;IACvG,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IAChF,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACrE,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACxF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,CAAsB,EAAE,GAAc,EAAE,IAAoB;IAC3F,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;IAC9B,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5F,IAAI,SAAS,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,CAAC;QACxD,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxB,GAAG,CAAC,IAAI,CACN,qCAAqC,CAAC,CAAC,YAAY,MAAM,CAAC,CAAC,UAAU,cAAc,SAAS,CAAC,MAAM,CAAC,OAAO,gBAAgB;cACzH,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,sGAAsG,CAC/H,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,IAAI,yBAAyB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;QAC/E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,mBAAmB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,uCAAuC,EAAE,CAAC;IACjH,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,IAAI,CAAC,0CAA0C,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,UAAU,qBAAqB,CAAC,CAAC;YAChK,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,oCAAoC,EAAE,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;QACjJ,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;QAC/B,GAAG,CAAC,IAAI,CACN,qCAAqC,CAAC,CAAC,YAAY,MAAM,CAAC,CAAC,UAAU,4BAA4B,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY;cAC9H,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,GAAG,CAAC,GAAG,sCAAsC,CAChG,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC;IAClD,CAAC;IACD,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;IAC/B,OAAO,cAAc,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,kBAAkB,KAAK,IAAI,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC;AAC3H,CAAC"}

package/dist/verify/ci-gate/ci-gate-reruns.d.ts

@@ -0,0 +1,51 @@
+import { type GateRunSpec, type PublishedGateLog, type PublishedGateStatus } from '../../ci/gate-ref.js';
+import type { PendingVerification } from '../../queries/verification/verification.js';
+import type { OpenBaselineBuilder } from '../attribution/verification-baseline.js';
+import type { FailingTestRerunner } from '../failing-test-rerun/failing-test-rerunner.js';
+import type { StageContinuationRunner } from '../engine/verification-deps.js';
+import type { CiGateDeps, CiGateRun } from './ci-gate-dispatch.js';
+/** Past a re-run's own timeout, how long it may wait for a runner before it is no verdict. */
+export declare const CI_RERUN_QUEUE_MARGIN_MS: number;
+/** How long an awaited re-run waits between reads of its published status (production). */
+export declare const CI_GATE_POLL_INTERVAL_MS = 20000;
+/** What a re-run's await reads: the CI gate's seams (its push, its reads, its clock and its poll wait). */
+export interface CiRerunDeps {
+    ciGate: CiGateDeps;
+}
+/** A re-run CI rendered: its state, the run that published it, and its log (null when the log could not be fetched). */
+export interface CiRerunResult {
+    status: 'green' | 'red';
+    published: PublishedGateStatus;
+    fetched: PublishedGateLog | null;
+}
+/**
+ * Hand `spec` to CI and wait for the verdict of a run published after the
+ * hand-over (module doc). Null when the push failed or no such verdict arrived
+ * within the bound.
+ */
+export declare function awaitCiRun(run: CiGateRun, spec: GateRunSpec, deps: CiRerunDeps): Promise<CiRerunResult | null>;
+/** Which candidates' gate runs on CI (ci-gate-dispatch.ts ciGateRunOf, bound over the verification context). */
+export type CiGateRunResolver = (v: PendingVerification) => CiGateRun | null;
+/**
+ * The same-commit re-run of named failing test files: on CI for a CI-run gate
+ * (the gate's declared `rerunCommand`, rendered over `files`, at `sha`), else the
+ * local runner. A commit that is no longer the one the CI gate judges, or a gate
+ * that declares no re-run command, renders no verdict, as locally.
+ */
+export declare function ciAwareFailingTestRerun(local: FailingTestRerunner, ciRunOf: CiGateRunResolver, deps: CiRerunDeps): FailingTestRerunner;
+/**
+ * The continuation of gate stages a red cut short, at the commit the red was
+ * rendered at: on CI for a CI-run gate, else the local runner. Its applied config
+ * names the continuation itself, as the local continuation's row does.
+ */
+export declare function ciAwareStageContinuation(local: StageContinuationRunner, ciRunOf: CiGateRunResolver, deps: CiRerunDeps): StageContinuationRunner;
+/**
+ * The base checkout attribution opens, for a CI-run gate: no checkout on the
+ * host -- each command the measurement runs at the base (the gate, a continuation
+ * of it, or the failing files alone) is a CI run at the base commit, its log the
+ * run's output. A base CI cannot run renders no output: the run THROWS, which the
+ * measurement reports as an unavailable base and attribution as no baseline, so
+ * every red gates and nothing is cached for that base.
+ */
+export declare function ciOpenBaselineBuilder(run: CiGateRun, deps: CiRerunDeps): OpenBaselineBuilder;
+//# sourceMappingURL=ci-gate-reruns.d.ts.map

package/dist/verify/ci-gate/ci-gate-reruns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-gate-reruns.d.ts","sourceRoot":"","sources":["../../../src/verify/ci-gate/ci-gate-reruns.ts"],"names":[],"mappings":"AAwCA,OAAO,EAA6D,KAAK,WAAW,EAAE,KAAK,gBAAgB,EAAE,KAAK,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AACpK,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AAItF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAEnF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gDAAgD,CAAC;AAC1F,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAKnE,8FAA8F;AAC9F,eAAO,MAAM,wBAAwB,QAAiB,CAAC;AAEvD,2FAA2F;AAC3F,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAK/C,2GAA2G;AAC3G,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,UAAU,CAAC;CACpB;AAED,wHAAwH;AACxH,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,OAAO,GAAG,KAAK,CAAC;IACxB,SAAS,EAAE,mBAAmB,CAAC;IAC/B,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAAC;CAClC;AAOD;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAoBpH;AA2CD,gHAAgH;AAChH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,EAAE,mBAAmB,KAAK,SAAS,GAAG,IAAI,CAAC;AAE7E;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,WAAW,GAAG,mBAAmB,CAiBtI;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,uBAAuB,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,WAAW,GAAG,uBAAuB,CAc/I;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,GAAG,mBAAmB,CAY5F"}