patchwork-os 0.2.0-beta.9.canary.93 → 1.1.0-beta.1

package/dist/workers/runWorkerShadow.js

@@ -0,0 +1,323 @@
+import { readdirSync, readFileSync } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { MAX_PERSIST_LINES, RecipeRunLog } from "../runLog.js";
+import { classifyActionClass } from "./actionClass.js";
+import { backtestWorker, formatBacktestReport } from "./backtest.js";
+import { OutcomeStore, resolveOutcomeLogDir } from "./outcomeStore.js";
+import { WorkerShadowObserver, } from "./shadowObserver.js";
+import { buildShadowReport, formatShadowReport } from "./shadowReport.js";
+import { loadWorkersFromDir } from "./workerLoader.js";
+function readRuns(patchworkDir, recipeNames) {
+    try {
+        // Size the in-memory ring to the FULL disk retention (MAX_PERSIST_LINES), not
+        // the default 500. `query()` only ever scans the ring, so with the default
+        // cap a low-frequency worker's run is evicted once >500 unrelated runs land
+        // after it — even with a per-recipe filter (the filter is applied AFTER ring
+        // eviction). Matching the ring to the disk cap means worker evidence is
+        // bounded only by what the log actually retains, not by global run volume.
+        const log = new RecipeRunLog({
+            dir: patchworkDir,
+            memoryCap: MAX_PERSIST_LINES,
+        });
+        // Query FILTERED BY the worker recipes — NOT the global last-N window.
+        // `query({})` defaults to the 100 most-recent runs, so a low-frequency
+        // worker's evidence ages out behind unrelated high-frequency recipe traffic
+        // (this is exactly why the test-guardian dial read empty despite a real,
+        // correctly-executed run). Filtering means only same-recipe runs compete for
+        // the window. DEDUP the names first: two manifests can declare the same
+        // recipe, and an un-deduped flatMap would query it twice → ingest every run
+        // twice → double-count the dial's evidence (a dial-vs-gate divergence, since
+        // the live gate passes a single recipe name).
+        const names = recipeNames?.length
+            ? Array.from(new Set(recipeNames))
+            : undefined;
+        // `query` clamps limit to 500, but it now scans the full-history ring, so
+        // this is the 500 most-recent runs OF THIS RECIPE — ample per-worker, and no
+        // longer evictable by unrelated traffic.
+        const rows = names
+            ? names.flatMap((recipe) => log.query({ recipe, limit: 500 }))
+            : log.query({ limit: 500 });
+        return rows.map((r) => ({
+            recipeName: r.recipeName,
+            at: r.doneAt ?? r.startedAt ?? r.createdAt,
+            steps: (r.stepResults ?? []).map((s) => ({
+                tool: s.tool,
+                status: s.status,
+                haltReason: s.haltReason,
+                // Outcome attribution: carry the captured issue URL so ingestRun can
+                // look up the issue's disposition in the outcome store. Only present on
+                // github.create_issue steps (see yamlRunner.ts step output capture).
+                ...(s.output !== undefined && typeof s.output === "object"
+                    ? { output: s.output }
+                    : {}),
+            })),
+        }));
+    }
+    catch {
+        return [];
+    }
+}
+function readDecisions(ideDir) {
+    let files;
+    try {
+        files = readdirSync(ideDir).filter((f) => /^activity-.*\.jsonl$/.test(f));
+    }
+    catch {
+        return [];
+    }
+    const out = [];
+    for (const f of files) {
+        let text;
+        try {
+            text = readFileSync(path.join(ideDir, f), "utf-8");
+        }
+        catch {
+            continue;
+        }
+        for (const line of text.split("\n")) {
+            const t = line.trim();
+            // cheap pre-filter before the JSON.parse; an empty line never matches
+            if (!t.includes("approval_decision"))
+                continue;
+            let obj;
+            try {
+                obj = JSON.parse(t);
+            }
+            catch {
+                continue;
+            }
+            if (obj.event !== "approval_decision")
+                continue;
+            const md = (obj.metadata ?? {});
+            const decision = md.decision === "allow"
+                ? "allow"
+                : md.decision === "deny"
+                    ? "deny"
+                    : null;
+            if (typeof md.toolName !== "string" || !decision)
+                continue;
+            out.push({
+                toolName: md.toolName,
+                decision,
+                at: typeof obj.timestamp === "string"
+                    ? Date.parse(obj.timestamp) || 0
+                    : 0,
+                // Only present on worker-gate decisions (recipe runner path). Plain
+                // Claude-session MCP approvals have no recipeName; ingestDecision
+                // skips them so they don't inflate the ramp-vs-gate divergence count.
+                ...(typeof md.recipeName === "string" && {
+                    recipeName: md.recipeName,
+                }),
+            });
+        }
+    }
+    return out;
+}
+/**
+ * Structured shadow report — a read-only replay of the run + decision logs
+ * through the (worker × action-class) ramp. Backs both the CLI and the bridge
+ * `GET /workers/shadow` JSON endpoint. Pure aside from the log reads.
+ */
+export function getWorkerShadowData(opts = {}) {
+    const home = os.homedir();
+    const patchworkDir = opts.patchworkDir ?? path.join(home, ".patchwork");
+    const ideDir = opts.ideDir ?? path.join(home, ".claude", "ide");
+    const workersDir = opts.workersDir ?? path.join(patchworkDir, "workers");
+    const workers = loadWorkersFromDir(workersDir);
+    const runs = workers.length
+        ? readRuns(patchworkDir, workers.map((w) => w.recipe).filter((r) => !!r))
+        : [];
+    const decisions = workers.length ? readDecisions(ideDir) : [];
+    return {
+        // `now` drives durable-outcome labelling (recent non-reversible successes
+        // are withheld until they survive the durability window). Real Date.now() in
+        // production; tests inject opts.now.
+        workers: buildShadowReport(workers, runs, decisions, undefined, {
+            now: opts.now ?? Date.now(),
+            // The outcome log honors PATCHWORK_HOME (matching every write path) even
+            // though runs.jsonl above is read from `patchworkDir` — the two files can
+            // live in different roots. Resolving them the same way here would break
+            // the confirm loop on a PATCHWORK_HOME box (write one file, read another).
+            outcomeStore: new OutcomeStore(resolveOutcomeLogDir(opts.patchworkDir)),
+        }),
+        runsScanned: runs.length,
+        decisionsScanned: decisions.length,
+        workersDir,
+    };
+}
+/**
+ * Load the worker that owns `recipeName` (recipe === body) plus its earned-level
+ * store, replayed from the same run log the dial uses. Returns null when no
+ * worker owns the recipe (the common case — non-worker recipes are unaffected).
+ *
+ * This is the LIVE-gate entry: `workerGate.decideWorkerAction(worker, tool,
+ * params, store)` reads the returned store. It replays the run log on each call
+ * (recipe executions are infrequent); a future optimisation could cache it.
+ */
+export function loadWorkerTrustForRecipe(recipeName, opts = {}) {
+    const home = os.homedir();
+    const patchworkDir = opts.patchworkDir ?? path.join(home, ".patchwork");
+    const workersDir = opts.workersDir ?? path.join(patchworkDir, "workers");
+    const workers = loadWorkersFromDir(workersDir);
+    if (!workers.length)
+        return null;
+    // Same durable-outcome labelling as the dial (one source of truth): the live
+    // gate must not count a recent non-reversible success that could still be
+    // reverted. Real Date.now() in production; tests inject opts.now.
+    const observer = new WorkerShadowObserver(workers, {
+        now: opts.now ?? Date.now(),
+        outcomeStore: new OutcomeStore(resolveOutcomeLogDir(opts.patchworkDir)),
+    });
+    const worker = observer.workerForRecipe(recipeName);
+    if (!worker)
+        return null;
+    // Replay in ASCENDING timestamp order (review #1027 M2). The graduation
+    // dwell/hysteresis logic is order-sensitive: ingesting newest-first leaves
+    // `lastChangeAt` pinned to the most recent run so `dwellOk` never holds and
+    // risky classes never promote — the earned-L4 path would be unreachable and
+    // the gate would floor every compensable/irreversible class to L0 forever.
+    // This mirrors buildShadowReport (the dial), so the gate and dial agree.
+    // `recipeName` === the owning worker's recipe (workerForRecipe matched on it),
+    // so filter the replay to just this recipe's runs.
+    const runs = readRuns(patchworkDir, [recipeName]).sort((a, b) => a.at - b.at);
+    for (const run of runs)
+        observer.ingestRun(run);
+    return { worker, store: observer.levelStore };
+}
+export function runWorkerShadowReport(opts = {}) {
+    const data = getWorkerShadowData(opts);
+    if (data.workers.length === 0) {
+        return `No worker manifests found in ${data.workersDir}.\nAdd *.worker.yaml there (e.g. copy templates/workers/) and re-run.\n`;
+    }
+    return `${formatShadowReport(data.workers)}\n(scanned ${data.runsScanned} recipe runs, ${data.decisionsScanned} gate decisions · read-only)\n`;
+}
+/**
+ * Backtest each installed worker over its historical run log and print the
+ * divergence-calibration report (false-allow / false-gate). Read-only — the
+ * cold-start "what would this worker have done across N real actions, and where
+ * would it have diverged" artifact. See backtest.ts.
+ */
+export function runWorkerBacktest(opts = {}) {
+    const home = os.homedir();
+    const patchworkDir = opts.patchworkDir ?? path.join(home, ".patchwork");
+    const workersDir = opts.workersDir ?? path.join(patchworkDir, "workers");
+    const workers = loadWorkersFromDir(workersDir);
+    if (!workers.length) {
+        return `No worker manifests found in ${workersDir}.\nAdd *.worker.yaml there (e.g. copy templates/workers/) and re-run.\n`;
+    }
+    const lines = [
+        "Worker trust BACKTEST — divergence calibration (read-only)",
+        "  false-allow = ramp would auto-run a BAD action (over-trust, the risk)",
+        "  false-gate  = ramp would gate a GOOD action (over-caution, the cost)",
+        "",
+    ];
+    const outcomeStore = new OutcomeStore(resolveOutcomeLogDir(opts.patchworkDir));
+    for (const w of workers) {
+        if (!w.recipe)
+            continue;
+        const runs = readRuns(patchworkDir, [w.recipe]);
+        lines.push(formatBacktestReport(backtestWorker(w, runs, { outcomeStore })));
+    }
+    return lines.join("\n");
+}
+/**
+ * The CONFIRM QUEUE — every non-reversible filing (a URL a worker captured) that
+ * has NO operator disposition yet (`unknown` / no record). These are exactly the
+ * filings whose trust is WITHHELD until a human confirms or rejects them — the
+ * queue `patchwork outcomes confirm|reject` exists to drain, and the moat KPI
+ * (evidence latency) is the age of this queue. Read-only. Deduped by URL
+ * (most-recent filing wins), newest first. Confirmed/junk filings are excluded
+ * (already actioned); reversible actions are excluded (they never need
+ * confirmation — they earn trust on their own). In practice today only issue
+ * filings (`github.create_issue`) carry a captured URL.
+ */
+export function computePendingConfirmations(opts = {}) {
+    const home = os.homedir();
+    const patchworkDir = opts.patchworkDir ?? path.join(home, ".patchwork");
+    const workersDir = opts.workersDir ?? path.join(patchworkDir, "workers");
+    // Same PATCHWORK_HOME-aware resolver the write path uses (see slice #3), so
+    // the queue reflects exactly what a confirm would write.
+    const store = new OutcomeStore(resolveOutcomeLogDir(opts.patchworkDir));
+    const workers = loadWorkersFromDir(workersDir);
+    // Attribute each run to the FIRST worker declaring its recipe (mirrors the
+    // dial's first-match attribution), and read the run log ONCE over the union
+    // of recipe names — readRuns already dedups the names — rather than
+    // re-parsing the whole log per worker.
+    const workerForRecipe = new Map();
+    for (const w of workers) {
+        if (w.recipe && !workerForRecipe.has(w.recipe)) {
+            workerForRecipe.set(w.recipe, w);
+        }
+    }
+    const recipeNames = Array.from(workerForRecipe.keys());
+    if (recipeNames.length === 0)
+        return []; // no workers → nothing to attribute
+    const byUrl = new Map();
+    for (const run of readRuns(patchworkDir, recipeNames)) {
+        const w = workerForRecipe.get(run.recipeName);
+        if (!w)
+            continue;
+        for (const step of run.steps) {
+            if (!step.tool || step.status !== "ok")
+                continue;
+            const ac = classifyActionClass(step.tool);
+            if (ac.reversibility === "reversible")
+                continue; // never needs confirming
+            const out = step.output;
+            const url = out && typeof out.url === "string" ? out.url : null;
+            if (!url)
+                continue;
+            const title = out && typeof out.title === "string" && out.title.trim()
+                ? out.title
+                : undefined;
+            const disp = store.getDisposition(url);
+            if (disp === "confirmed" || disp === "junk")
+                continue; // already actioned
+            // unknown / no record → pending. Dedup by URL, keep the newest filing.
+            const prev = byUrl.get(url);
+            if (!prev || run.at > prev.filedAt) {
+                byUrl.set(url, {
+                    issueUrl: url,
+                    recipeName: run.recipeName,
+                    workerId: w.id,
+                    workerName: w.name,
+                    filedAt: run.at,
+                    classKey: ac.key,
+                    title,
+                });
+            }
+        }
+    }
+    return Array.from(byUrl.values()).sort((a, b) => b.filedAt - a.filedAt);
+}
+/** Human-readable confirm queue for `patchwork outcomes pending`. */
+export function formatPendingConfirmations(pending, now = Date.now()) {
+    if (pending.length === 0) {
+        return "No filings awaiting confirmation — every worker filing has an operator disposition.\n";
+    }
+    const rel = (at) => {
+        const ms = Math.max(0, now - at);
+        const h = Math.floor(ms / 3_600_000);
+        if (h < 1)
+            return "just now";
+        if (h < 24)
+            return `${h}h ago`;
+        return `${Math.floor(h / 24)}d ago`;
+    };
+    const lines = [
+        `${pending.length} filing(s) awaiting your confirmation (the confirm queue):`,
+        "",
+    ];
+    for (const p of pending) {
+        lines.push(p.title ? `  "${p.title}"` : `  ${p.issueUrl}`);
+        if (p.title)
+            lines.push(`    ${p.issueUrl}`);
+        lines.push(`    filed by ${p.workerName} (${p.recipeName}) · ${p.classKey} · ${rel(p.filedAt)}`);
+        lines.push(`    confirm: patchwork outcomes confirm ${p.issueUrl} --recipe ${p.recipeName} --class ${p.classKey}`);
+        lines.push(`    reject:  patchwork outcomes reject ${p.issueUrl} --recipe ${p.recipeName} --class ${p.classKey}`);
+        lines.push("");
+    }
+    return lines.join("\n");
+}
+//# sourceMappingURL=runWorkerShadow.js.map

package/dist/workers/runWorkerShadow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runWorkerShadow.js","sourceRoot":"","sources":["../../src/workers/runWorkerShadow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAGL,oBAAoB,GAErB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAG1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAsBvD,SAAS,QAAQ,CAAC,YAAoB,EAAE,WAAsB;IAC5D,IAAI,CAAC;QACH,8EAA8E;QAC9E,2EAA2E;QAC3E,4EAA4E;QAC5E,6EAA6E;QAC7E,wEAAwE;QACxE,2EAA2E;QAC3E,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;YAC3B,GAAG,EAAE,YAAY;YACjB,SAAS,EAAE,iBAAiB;SAC7B,CAAC,CAAC;QACH,uEAAuE;QACvE,uEAAuE;QACvE,4EAA4E;QAC5E,yEAAyE;QACzE,6EAA6E;QAC7E,wEAAwE;QACxE,4EAA4E;QAC5E,6EAA6E;QAC7E,8CAA8C;QAC9C,MAAM,KAAK,GAAG,WAAW,EAAE,MAAM;YAC/B,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;YAClC,CAAC,CAAC,SAAS,CAAC;QACd,0EAA0E;QAC1E,6EAA6E;QAC7E,yCAAyC;QACzC,MAAM,IAAI,GAAG,KAAK;YAChB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9D,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtB,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS;YAC1C,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvC,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,qEAAqE;gBACrE,wEAAwE;gBACxE,qEAAqE;gBACrE,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;oBACxD,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAiC,EAAE;oBACjD,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;SACJ,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACtB,sEAAsE;YACtE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;gBAAE,SAAS;YAC/C,IAAI,GAA4B,CAAC;YACjC,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,GAAG,CAAC,KAAK,KAAK,mBAAmB;gBAAE,SAAS;YAChD,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC;YAC3D,MAAM,QAAQ,GACZ,EAAE,CAAC,QAAQ,KAAK,OAAO;gBACrB,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,EAAE,CAAC,QAAQ,KAAK,MAAM;oBACtB,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,IAAI,CAAC;YACb,IAAI,OAAO,EAAE,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ;gBAAE,SAAS;YAC3D,GAAG,CAAC,IAAI,CAAC;gBACP,QAAQ,EAAE,EAAE,CAAC,QAAQ;gBACrB,QAAQ;gBACR,EAAE,EACA,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;oBAC/B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC;oBAChC,CAAC,CAAC,CAAC;gBACP,oEAAoE;gBACpE,kEAAkE;gBAClE,sEAAsE;gBACtE,GAAG,CAAC,OAAO,EAAE,CAAC,UAAU,KAAK,QAAQ,IAAI;oBACvC,UAAU,EAAE,EAAE,CAAC,UAAU;iBAC1B,CAAC;aACH,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAA4B,EAAE;IAE9B,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAEzE,MAAM,OAAO,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM;QACzB,CAAC,CAAC,QAAQ,CACN,YAAY,EACZ,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAC7D;QACH,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,OAAO;QACL,0EAA0E;QAC1E,6EAA6E;QAC7E,qCAAqC;QACrC,OAAO,EAAE,iBAAiB,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE;YAC9D,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;YAC3B,yEAAyE;YACzE,0EAA0E;YAC1E,wEAAwE;YACxE,2EAA2E;YAC3E,YAAY,EAAE,IAAI,YAAY,CAAC,oBAAoB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;SACxE,CAAC;QACF,WAAW,EAAE,IAAI,CAAC,MAAM;QACxB,gBAAgB,EAAE,SAAS,CAAC,MAAM;QAClC,UAAU;KACX,CAAC;AACJ,CAAC;AAQD;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CACtC,UAAkB,EAClB,OAA4B,EAAE;IAE9B,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAEzE,MAAM,OAAO,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACjC,6EAA6E;IAC7E,0EAA0E;IAC1E,kEAAkE;IAClE,MAAM,QAAQ,GAAG,IAAI,oBAAoB,CAAC,OAAO,EAAE;QACjD,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE;QAC3B,YAAY,EAAE,IAAI,YAAY,CAAC,oBAAoB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;KACxE,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,QAAQ,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,wEAAwE;IACxE,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,yEAAyE;IACzE,+EAA+E;IAC/E,mDAAmD;IACnD,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9E,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAChD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAA4B,EAAE;IAClE,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,gCAAgC,IAAI,CAAC,UAAU,yEAAyE,CAAC;IAClI,CAAC;IACD,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,WAAW,iBAAiB,IAAI,CAAC,gBAAgB,gCAAgC,CAAC;AACjJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAA4B,EAAE;IAC9D,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACpB,OAAO,gCAAgC,UAAU,yEAAyE,CAAC;IAC7H,CAAC;IACD,MAAM,KAAK,GAAa;QACtB,4DAA4D;QAC5D,yEAAyE;QACzE,wEAAwE;QACxE,EAAE;KACH,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,YAAY,CACnC,oBAAoB,CAAC,IAAI,CAAC,YAAY,CAAC,CACxC,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,CAAC,MAAM;YAAE,SAAS;QACxB,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAChD,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAsBD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAA4B,EAAE;IAE9B,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACxE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IACzE,4EAA4E;IAC5E,yDAAyD;IACzD,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,oBAAoB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC/C,2EAA2E;IAC3E,4EAA4E;IAC5E,oEAAoE;IACpE,uCAAuC;IACvC,MAAM,eAAe,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC1D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/C,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC,CAAC,oCAAoC;IAC7E,MAAM,KAAK,GAAG,IAAI,GAAG,EAA+B,CAAC;IACrD,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,CAAC;QACtD,MAAM,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI;gBAAE,SAAS;YACjD,MAAM,EAAE,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,EAAE,CAAC,aAAa,KAAK,YAAY;gBAAE,SAAS,CAAC,yBAAyB;YAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,MAA6C,CAAC;YAC/D,MAAM,GAAG,GACP,GAAG,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAG,CAAC,GAAc,CAAC,CAAC,CAAC,IAAI,CAAC;YAClE,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,MAAM,KAAK,GACT,GAAG,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE;gBACtD,CAAC,CAAE,GAAG,CAAC,KAAgB;gBACvB,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,IAAI,GAAG,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,MAAM;gBAAE,SAAS,CAAC,mBAAmB;YAC1E,uEAAuE;YACvE,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;gBACnC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;oBACb,QAAQ,EAAE,GAAG;oBACb,UAAU,EAAE,GAAG,CAAC,UAAU;oBAC1B,QAAQ,EAAE,CAAC,CAAC,EAAE;oBACd,UAAU,EAAE,CAAC,CAAC,IAAI;oBAClB,OAAO,EAAE,GAAG,CAAC,EAAE;oBACf,QAAQ,EAAE,EAAE,CAAC,GAAG;oBAChB,KAAK;iBACN,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;AAC1E,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,0BAA0B,CACxC,OAA8B,EAC9B,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,uFAAuF,CAAC;IACjG,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,EAAU,EAAU,EAAE;QACjC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,UAAU,CAAC;QAC7B,IAAI,CAAC,GAAG,EAAE;YAAE,OAAO,GAAG,CAAC,OAAO,CAAC;QAC/B,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC;IACtC,CAAC,CAAC;IACF,MAAM,KAAK,GAAG;QACZ,GAAG,OAAO,CAAC,MAAM,4DAA4D;QAC7E,EAAE;KACH,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,CAAC,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7C,KAAK,CAAC,IAAI,CACR,gBAAgB,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,OAAO,CAAC,CAAC,QAAQ,MAAM,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CACrF,CAAC;QACF,KAAK,CAAC,IAAI,CACR,2CAA2C,CAAC,CAAC,QAAQ,aAAa,CAAC,CAAC,UAAU,YAAY,CAAC,CAAC,QAAQ,EAAE,CACvG,CAAC;QACF,KAAK,CAAC,IAAI,CACR,0CAA0C,CAAC,CAAC,QAAQ,aAAa,CAAC,CAAC,UAAU,YAAY,CAAC,CAAC,QAAQ,EAAE,CACtG,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/workers/shadowGate.d.ts

@@ -0,0 +1,30 @@
+import type { TrustLevel } from "./trustLevel.js";
+import { type WorkerManifest } from "./worker.js";
+import type { WorkerLevelStore } from "./workerLevelStore.js";
+/**
+ * What the ramp WOULD decide for a worker's action — a PURE recommendation.
+ *
+ * v0 is shadow-only: this is NOT wired into the live approval gate
+ * (`evaluateInProcessGate`). Flipping the gate to obey the ramp is a deliberate,
+ * flag-gated phase-2 step, taken only after shadow data shows the ramp's
+ * decisions track reality. Until then this exists to log "ramp would bypass /
+ * gate did queue" and to drive the dial.
+ *
+ * The effective level drives two thresholds that mirror the live gate:
+ *   compensable at L2+ → bypass; irreversible at L4+ → bypass; else → queue.
+ * The full earned level (0–4) is reported for the dial. The effective level is
+ * `min(earned, autonomyCeiling)`, floored to 0 for actions outside the worker's
+ * domain — a worker has no standing trust on things it doesn't own.
+ */
+export interface ShadowDecision {
+    decision: "queue" | "bypass";
+    classKey: string;
+    owned: boolean;
+    /** Trust the worker has actually earned on this class (drives the dial). */
+    earnedLevel: TrustLevel;
+    autonomyCeiling: TrustLevel;
+    /** What the gate would operate at: min(earned, ceiling), 0 if not owned. */
+    effectiveLevel: TrustLevel;
+    reason: string;
+}
+export declare function recommend(worker: WorkerManifest, toolName: string, params: Record<string, unknown> | undefined, store: WorkerLevelStore): ShadowDecision;

package/dist/workers/shadowGate.js

@@ -0,0 +1,58 @@
+import { classifyActionClass } from "./actionClass.js";
+import { ownsAction } from "./worker.js";
+const COMPENSABLE_AUTONOMY_LEVEL = 2;
+const AUTONOMOUS_LEVEL = 4;
+export function recommend(worker, toolName, params, store) {
+    const ac = classifyActionClass(toolName, params);
+    const owned = ownsAction(worker, ac);
+    // Reversible actions always bypass — no trust threshold applies. Short-
+    // circuiting here prevents false divergence-log noise (the dial would
+    // otherwise compare against L4 and always report a "miss" for reads).
+    if (ac.reversibility === "reversible") {
+        const earnedLevel = (store.getState(worker.id, ac.key)?.level ??
+            0);
+        return {
+            decision: "bypass",
+            classKey: ac.key,
+            owned,
+            earnedLevel,
+            autonomyCeiling: worker.autonomyCeiling,
+            effectiveLevel: owned ? earnedLevel : 0,
+            reason: "reversible — flows un-gated regardless of earned level",
+        };
+    }
+    const earnedLevel = (store.getState(worker.id, ac.key)?.level ??
+        0);
+    let effectiveLevel = owned ? earnedLevel : 0;
+    if (effectiveLevel > worker.autonomyCeiling)
+        effectiveLevel = worker.autonomyCeiling;
+    const decision = ac.reversibility === "compensable"
+        ? effectiveLevel >= COMPENSABLE_AUTONOMY_LEVEL
+            ? "bypass"
+            : "queue"
+        : effectiveLevel >= AUTONOMOUS_LEVEL
+            ? "bypass"
+            : "queue";
+    const threshold = ac.reversibility === "compensable"
+        ? COMPENSABLE_AUTONOMY_LEVEL
+        : AUTONOMOUS_LEVEL;
+    let reason;
+    if (!owned)
+        reason = "outside-worker-domain";
+    else if (worker.autonomyCeiling < threshold)
+        reason = `capped-by-autonomy-ceiling (L${worker.autonomyCeiling} < L${threshold}, earned L${earnedLevel})`;
+    else if (decision === "bypass")
+        reason = `autonomous (earned L${effectiveLevel}, threshold L${threshold})`;
+    else
+        reason = `below-autonomy (effective L${effectiveLevel} < L${threshold})`;
+    return {
+        decision,
+        classKey: ac.key,
+        owned,
+        earnedLevel,
+        autonomyCeiling: worker.autonomyCeiling,
+        effectiveLevel,
+        reason,
+    };
+}
+//# sourceMappingURL=shadowGate.js.map

package/dist/workers/shadowGate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shadowGate.js","sourceRoot":"","sources":["../../src/workers/shadowGate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,OAAO,EAAE,UAAU,EAAuB,MAAM,aAAa,CAAC;AA+B9D,MAAM,0BAA0B,GAAG,CAAC,CAAC;AACrC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAE3B,MAAM,UAAU,SAAS,CACvB,MAAsB,EACtB,QAAgB,EAChB,MAA2C,EAC3C,KAAuB;IAEvB,MAAM,EAAE,GAAG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAErC,wEAAwE;IACxE,sEAAsE;IACtE,sEAAsE;IACtE,IAAI,EAAE,CAAC,aAAa,KAAK,YAAY,EAAE,CAAC;QACtC,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK;YAC3D,CAAC,CAAe,CAAC;QACnB,OAAO;YACL,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,EAAE,CAAC,GAAG;YAChB,KAAK;YACL,WAAW;YACX,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAE,CAAgB;YACvD,MAAM,EAAE,wDAAwD;SACjE,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK;QAC3D,CAAC,CAAe,CAAC;IAEnB,IAAI,cAAc,GAAe,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,IAAI,cAAc,GAAG,MAAM,CAAC,eAAe;QACzC,cAAc,GAAG,MAAM,CAAC,eAAe,CAAC;IAE1C,MAAM,QAAQ,GACZ,EAAE,CAAC,aAAa,KAAK,aAAa;QAChC,CAAC,CAAC,cAAc,IAAI,0BAA0B;YAC5C,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,OAAO;QACX,CAAC,CAAC,cAAc,IAAI,gBAAgB;YAClC,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,OAAO,CAAC;IAEhB,MAAM,SAAS,GACb,EAAE,CAAC,aAAa,KAAK,aAAa;QAChC,CAAC,CAAC,0BAA0B;QAC5B,CAAC,CAAC,gBAAgB,CAAC;IACvB,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC,KAAK;QAAE,MAAM,GAAG,uBAAuB,CAAC;SACxC,IAAI,MAAM,CAAC,eAAe,GAAG,SAAS;QACzC,MAAM,GAAG,gCAAgC,MAAM,CAAC,eAAe,OAAO,SAAS,aAAa,WAAW,GAAG,CAAC;SACxG,IAAI,QAAQ,KAAK,QAAQ;QAC5B,MAAM,GAAG,uBAAuB,cAAc,gBAAgB,SAAS,GAAG,CAAC;;QACxE,MAAM,GAAG,8BAA8B,cAAc,OAAO,SAAS,GAAG,CAAC;IAE9E,OAAO;QACL,QAAQ;QACR,QAAQ,EAAE,EAAE,CAAC,GAAG;QAChB,KAAK;QACL,WAAW;QACX,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,cAAc;QACd,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/workers/shadowObserver.d.ts

@@ -0,0 +1,165 @@
+import { type Reversibility } from "./actionClass.js";
+import { type GraduationConfig } from "./graduation.js";
+import type { OutcomeStore } from "./outcomeStore.js";
+import { type WorkerManifest } from "./worker.js";
+import { type AuditEvent, type BoardRow, WorkerLevelStore } from "./workerLevelStore.js";
+/**
+ * Read-only shadow logger. Consumes signals the bridge ALREADY persists —
+ * RecipeRunLog outcomes (the dial's evidence) and ActivityLog approval
+ * decisions (the live gate's actual calls) — and maintains the trust dial +
+ * a "what the ramp WOULD have decided vs what the gate DID" comparison. It
+ * never touches the live gate: the gate's own decision log IS the input, so
+ * this observes the live path with zero hot-path risk. (worker-ramp-v0, shadow)
+ */
+/** A recipe run, reduced to what the dial needs (maps from RecipeRun). */
+export interface RunRecord {
+    recipeName: string;
+    /** epoch ms */
+    at: number;
+    steps: Array<{
+        tool?: string;
+        status: "ok" | "skipped" | "error";
+        /** Persisted halt reason — used to tell a worker failure apart from a
+         * human approval decision (the latter is not trust evidence; see L2). */
+        haltReason?: string;
+        /**
+         * Captured tool output for outcome attribution. Only populated for
+         * github.create_issue steps (contains `{url, issueNumber}`). Used by
+         * ingestRun to look up the issue's eventual disposition in the outcome
+         * store so junk filings flip to good:false rather than counting as earned
+         * trust. See outcomeStore.ts.
+         */
+        output?: Record<string, unknown>;
+    }>;
+}
+/** A live gate decision (maps from an ActivityLog approval_decision row). */
+export interface DecisionRecord {
+    toolName: string;
+    /** the gate's actual verdict */
+    decision: "allow" | "deny";
+    at: number;
+    params?: Record<string, unknown>;
+    /** Present only on worker-gate decisions (recipe runner path). Absent on
+     * Claude-session MCP tool approvals — the shadow only counts worker-gate
+     * decisions so mixing in session approvals won't inflate divergences. */
+    recipeName?: string;
+}
+export interface Divergence {
+    classKey: string;
+    toolName: string;
+    ramp: "queue" | "bypass";
+    gate: "allow" | "deny";
+    at: number;
+    note: string;
+}
+export interface WorkerShadowReport {
+    workerId: string;
+    name: string;
+    autonomyCeiling: number;
+    /** Dial rows. `owned: false` = the worker performed this class but does not
+     * own it, so the live gate floors it to L0 regardless of accrued evidence. */
+    board: Array<BoardRow & {
+        owned: boolean;
+    }>;
+    events: AuditEvent[];
+    /** ramp-vs-gate comparison over attributable decisions */
+    compared: number;
+    agreed: number;
+    divergences: Divergence[];
+}
+/** Default durability window — a non-reversible success must survive this long
+ *  before it counts as earned trust. 24h is long enough to catch a revert /
+ *  close-as-junk / rollback, short enough that a genuinely-good action graduates
+ *  within a day. */
+export declare const DEFAULT_DURABILITY_WINDOW_MS: number;
+/**
+ * Durable-outcome label. `good = step.status:ok` is an OPTIMISTIC proxy: a PR
+ * that merged, an issue that filed — but a junk issue closed seconds later, or a
+ * commit reverted within the hour, "succeeded" at the moment yet is not earned
+ * trust. So a SUCCESS on a non-reversible (compensable/irreversible) action is
+ * "durable" — i.e. counts as evidence — only once it has survived the durability
+ * window. Reversible successes (undoable / re-runnable: reads, ledgered writes,
+ * local commits, CI) are always durable. Failures are unaffected (a failure is
+ * durable evidence of failure regardless of age).
+ *
+ * This only ever WITHHOLDS recent risky successes (reduces evidence → lower
+ * trust → more gating), so it never widens autonomy. See
+ * docs/worker-autonomy-policy-gate.md §3d.
+ */
+export declare function isDurableSuccess(reversibility: Reversibility, runAt: number, now: number, windowMs: number): boolean;
+/** A single step reduced to what the outcome fold needs. */
+type FoldStep = Pick<RunRecord["steps"][number], "tool" | "status" | "output">;
+/**
+ * The durable-outcome fold decision for one step — the SINGLE source of truth
+ * shared by the live/shadow dial (`WorkerShadowObserver.ingestRun`) and the
+ * cold-start backtest (`backtestWorker`), so the two can never drift on how an
+ * outcome is labelled. Returns either "withhold" (not evidence — a pending or
+ * unknown-disposition risky success) or "count as good/bad".
+ *
+ * Assumes the caller has already skipped no-tool / skipped / approval-rejected
+ * steps (those are non-evidence for reasons the caller owns). Semantics (the
+ * junk check runs BEFORE the durability window — a human rejection is durable
+ * evidence of failure the moment it lands, so it demotes instantly, like any
+ * outright failure; only confirmed/unknown successes wait out the window):
+ *   - failure (status ≠ ok)                    → count, good:false (durable evidence of failure)
+ *   - success, no `now`                        → count, good:true (back-compat status-only)
+ *   - success, non-reversible, junk (any age)  → count, good:false (human-rejected → demotes now)
+ *   - success, non-reversible, pre-window      → WITHHOLD (provisional; not yet durable)
+ *   - success, non-reversible, unknown/null    → WITHHOLD (unactioned ≠ correct; trust-by-neglect fix)
+ *   - success, otherwise (reversible / confirmed / no url / no store) → count, good:true
+ */
+export type FoldDecision = {
+    fold: false;
+} | {
+    fold: true;
+    good: boolean;
+};
+export declare function foldOutcome(step: FoldStep, runAt: number, opts: {
+    now?: number;
+    windowMs: number;
+    outcomeStore?: OutcomeStore;
+}): FoldDecision;
+export declare class WorkerShadowObserver {
+    private readonly store;
+    private readonly cfg;
+    private readonly workers;
+    private readonly compare;
+    /** Wall-clock supplied by the I/O entry (the observer stays pure — no
+     *  Date.now). When set, durable-outcome labelling is active; when undefined,
+     *  the prior status-only behaviour is preserved (back-compat for pure tests). */
+    private readonly now?;
+    private readonly durabilityWindowMs;
+    /** Optional outcome store — when present, junk issues flip good:false past
+     *  the durability window instead of counting as earned trust. */
+    private readonly outcomeStore?;
+    constructor(workers: WorkerManifest[], opts?: {
+        store?: WorkerLevelStore;
+        cfg?: GraduationConfig;
+        now?: number;
+        durabilityWindowMs?: number;
+        outcomeStore?: OutcomeStore;
+    });
+    /**
+     * The populated level store. Exposed so the LIVE worker-autonomy gate
+     * (`workerGate.decideWorkerAction`) can read the same earned levels this
+     * observer derives from the run log — one source of truth for the dial and
+     * the gate. Read-only intent; callers must not mutate.
+     */
+    get levelStore(): WorkerLevelStore;
+    /** The worker whose recipe body is `recipeName`, if any. */
+    workerForRecipe(recipeName: string): WorkerManifest | undefined;
+    /** Attribute a tool call to its SOLE owning worker (ambiguous → skip). */
+    private workerForAction;
+    /** Feed a recipe run's step outcomes into the owning worker's dial. */
+    ingestRun(run: RunRecord): void;
+    /** Compare what the ramp WOULD recommend (given the dial as of now) against
+     * the gate's actual decision. Read-only — records agreement + divergences.
+     *
+     * Only worker-gate decisions (those with a recipeName) are counted. Plain
+     * Claude-session MCP tool approvals share the same ActivityLog event type
+     * but have no recipeName — including them would inflate divergences with
+     * calls the worker gate never saw. */
+    ingestDecision(d: DecisionRecord): void;
+    report(): WorkerShadowReport[];
+}
+export {};