wicked-crew 0.5.0 → 0.7.0

package/dist/qe/gate-events.js

@@ -0,0 +1,168 @@
+/**
+ * Opt-in consumption of the QE gate's wicked-bus events.
+ *
+ * The QE pipeline announces gate results on the bus — the wire contract the
+ * retired wicked-testing package's `lib/gate.mjs` established and garden's qe
+ * skills now emit (Phase 6c kept these event names and payload fields STABLE
+ * by decision — only the emitters' `domain` stamp rebranded to `qe`):
+ *
+ *   wicked.qe.gate.passed | wicked.qe.gate.failed | wicked.qe.gate.conditional
+ *     payload (8 canonical fields): run_id, context, gate_verdict, exit_code,
+ *     verdict_summary, mode, completed_at, scenario_count
+ *     idempotency key: `qe:gate.result:{context}:{sha256(run_id)[0:16]}:0`
+ *   wicked.qe.deploy.completed
+ *     payload: run_id, project_id (emitted alongside a PASS)
+ *
+ * Consumption is OPT-IN behind crew's existing bus seam (like `--bus-db` /
+ * `WICKED_BUS_EXEC`): when armed, a durable wicked-bus subscriber folds each
+ * event into this in-memory cache so acceptance reads see gate results the
+ * moment they happen; when the bus is absent, nothing here runs and the
+ * acceptance route's lazy ledger read is the (always-correct) fallback. The
+ * cache is a freshness signal — the ledger stays the system of record for the
+ * gate decision, so a lost or replayed event can never flip a verdict.
+ */
+/** The gate-result event types (the old gate.mjs wire contract, verbatim). */
+export const QE_GATE_EVENT_TYPES = [
+    'wicked.qe.gate.passed',
+    'wicked.qe.gate.failed',
+    'wicked.qe.gate.conditional',
+];
+/** The cross-product deploy signal emitted alongside a PASS. */
+export const QE_DEPLOY_EVENT_TYPE = 'wicked.qe.deploy.completed';
+/**
+ * One durable-subscription filter covering both families above
+ * (`prefix.**` = one or more remaining segments in wicked-bus filter grammar).
+ */
+export const QE_BUS_FILTER = 'wicked.qe.**';
+/** Subscriber identity on the bus (registration + cursor resume key). */
+export const QE_BUS_PLUGIN = 'wicked-crew';
+function str(v) {
+    return typeof v === 'string' ? v : null;
+}
+function num(v) {
+    return typeof v === 'number' && Number.isFinite(v) ? v : null;
+}
+/**
+ * Latest-gate-result cache, keyed by QE run id and by context.
+ *
+ * At-least-once delivery means the same logical event may arrive more than
+ * once; folding is idempotent by construction (same event ⇒ same entry). No
+ * eviction: entries are one small record per QE run/context and the daemon is
+ * local-first — a restart simply starts empty and the ledger read covers it.
+ */
+export class QeGateCache {
+    byRun = new Map();
+    byContext = new Map();
+    latestEntry;
+    /**
+     * Fold one bus event. Returns `true` when the event was a recognized
+     * `wicked.qe.*` gate/deploy frame and was cached; unknown types are ignored
+     * (the durable filter is a prefix, so future qe events pass through here).
+     */
+    ingest(eventType, payload, observedAt = new Date().toISOString()) {
+        const isGate = QE_GATE_EVENT_TYPES.includes(eventType);
+        const isDeploy = eventType === QE_DEPLOY_EVENT_TYPE;
+        if (!isGate && !isDeploy)
+            return false;
+        if (typeof payload !== 'object' || payload === null)
+            return false;
+        const p = payload;
+        const runId = str(p['run_id']);
+        if (runId === null)
+            return false; // both contracts require run_id
+        const entry = {
+            eventType,
+            runId,
+            // Gate events carry `context`; the deploy signal spells it `project_id`.
+            context: str(p['context']) ?? str(p['project_id']),
+            gateVerdict: isGate ? str(p['gate_verdict']) : null,
+            exitCode: isGate ? num(p['exit_code']) : null,
+            verdictSummary: isGate ? str(p['verdict_summary']) : null,
+            mode: isGate ? str(p['mode']) : null,
+            completedAt: isGate ? str(p['completed_at']) : null,
+            scenarioCount: isGate ? num(p['scenario_count']) : null,
+            observedAt,
+        };
+        // The deploy signal must not shadow the gate result it accompanies: for the
+        // same run, a gate event always wins the byRun/byContext slots; the deploy
+        // frame only fills them when no gate result was seen (e.g. cursor_init
+        // 'latest' catching the tail of an emission pair).
+        const existing = this.byRun.get(runId);
+        if (!(isDeploy && existing !== undefined && existing.gateVerdict !== null)) {
+            this.byRun.set(runId, entry);
+            if (entry.context !== null)
+                this.byContext.set(entry.context, entry);
+        }
+        this.latestEntry = entry;
+        return true;
+    }
+    /** The latest cached result for a QE run id. */
+    forRun(runId) {
+        return this.byRun.get(runId);
+    }
+    /** The latest cached result for a context (QE project id). */
+    forContext(context) {
+        return this.byContext.get(context);
+    }
+    /** The most recently observed event, whatever it was keyed by. */
+    latest() {
+        return this.latestEntry;
+    }
+    /** Number of distinct QE runs with a cached result (diagnostics / tests). */
+    size() {
+        return this.byRun.size;
+    }
+}
+/**
+ * Start the durable `wicked.qe.**` subscriber and fold events into `cache`.
+ *
+ * Graceful degradation, matching how other wicked consumers subscribe
+ * (wicked-brain's memory subscriber): wicked-bus is dynamically imported, and
+ * a missing package / unopenable db returns `null` instead of throwing — the
+ * caller opted in, so the degradation is LOGGED, but a daemon must still boot
+ * on a machine whose bus is broken (acceptance falls back to lazy ledger
+ * reads, which never needed the bus).
+ *
+ * `cursor_init: 'latest'`: the cache is a live freshness signal, not history —
+ * replaying an old bus backlog into it would let a stale event masquerade as
+ * fresh. History belongs to the ledger.
+ */
+export async function startQeGateSubscriber(cache, opts = {}) {
+    const log = opts.log ?? ((m) => console.error(m));
+    let bus;
+    try {
+        bus = await import('wicked-bus');
+    }
+    catch (err) {
+        log(`[qe-gate-events] wicked-bus is not importable — gate events disabled, acceptance stays on lazy ledger reads: ${err instanceof Error ? err.message : String(err)}`);
+        return null;
+    }
+    let db;
+    try {
+        db = bus.openDb(opts.dbPath !== undefined ? { db_path: opts.dbPath } : {});
+    }
+    catch (err) {
+        log(`[qe-gate-events] could not open the bus db${opts.dbPath !== undefined ? ` at ${opts.dbPath}` : ''} — gate events disabled: ${err instanceof Error ? err.message : String(err)}`);
+        return null;
+    }
+    const sub = bus.subscribe({
+        db,
+        plugin: QE_BUS_PLUGIN,
+        filter: QE_BUS_FILTER,
+        cursor_init: 'latest',
+        pollIntervalMs: opts.pollIntervalMs ?? 5000,
+        // The handler only folds into an in-memory map; a retry loop or DLQ entry
+        // for it would be noise. It never throws by construction.
+        maxRetries: 0,
+        handler: (event) => {
+            cache.ingest(event.event_type, event.payload);
+        },
+        onError: (err, event) => {
+            log(`[qe-gate-events] handler error on event ${String(event?.event_id ?? '?')}: ${err.message}`);
+        },
+    });
+    return {
+        stop: () => sub.stop(),
+    };
+}
+//# sourceMappingURL=gate-events.js.map

package/dist/qe/gate-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-events.js","sourceRoot":"","sources":["../../src/qe/gate-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,uBAAuB;IACvB,uBAAuB;IACvB,4BAA4B;CACpB,CAAC;AAEX,gEAAgE;AAChE,MAAM,CAAC,MAAM,oBAAoB,GAAG,4BAA4B,CAAC;AAEjE;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,cAAc,CAAC;AAE5C,yEAAyE;AACzE,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,CAAC;AAoB3C,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1C,CAAC;AAED,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,WAAW;IACL,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAC5C,SAAS,GAAG,IAAI,GAAG,EAA4B,CAAC;IACzD,WAAW,CAA+B;IAElD;;;;OAIG;IACH,MAAM,CAAC,SAAiB,EAAE,OAAgB,EAAE,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC/E,MAAM,MAAM,GAAI,mBAAyC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,SAAS,KAAK,oBAAoB,CAAC;QACpD,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QACvC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAClE,MAAM,CAAC,GAAG,OAAkC,CAAC;QAC7C,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC,CAAC,gCAAgC;QAElE,MAAM,KAAK,GAAqB;YAC9B,SAAS;YACT,KAAK;YACL,yEAAyE;YACzE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YAClD,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YACnD,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YAC7C,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YACzD,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YACpC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YACnD,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YACvD,UAAU;SACX,CAAC;QAEF,4EAA4E;QAC5E,2EAA2E;QAC3E,uEAAuE;QACvE,mDAAmD;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC,QAAQ,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,WAAW,KAAK,IAAI,CAAC,EAAE,CAAC;YAC3E,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC7B,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;gBAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gDAAgD;IAChD,MAAM,CAAC,KAAa;QAClB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,8DAA8D;IAC9D,UAAU,CAAC,OAAe;QACxB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,kEAAkE;IAClE,MAAM;QACJ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,6EAA6E;IAC7E,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;CACF;AAqBD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAkB,EAClB,OAAgC,EAAE;IAElC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAE1D,IAAI,GAAgC,CAAC;IACrC,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CACD,gHACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,EAAW,CAAC;IAChB,IAAI,CAAC;QACH,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CACD,6CAA6C,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,4BAChG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,EAAE,CACH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC;QACxB,EAAE;QACF,MAAM,EAAE,aAAa;QACrB,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE,QAAQ;QACrB,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI;QAC3C,0EAA0E;QAC1E,0DAA0D;QAC1D,UAAU,EAAE,CAAC;QACb,OAAO,EAAE,CAAC,KAAe,EAAE,EAAE;YAC3B,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,EAAE,CAAC,GAAU,EAAE,KAAgB,EAAE,EAAE;YACxC,GAAG,CACD,2CAA2C,MAAM,CAAC,KAAK,EAAE,QAAQ,IAAI,GAAG,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE,CAC5F,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE;KACvB,CAAC;AACJ,CAAC"}

package/dist/qe/ledger.d.ts

@@ -0,0 +1,100 @@
+/**
+ * Read-only view over a repo's QE evidence ledger (wicked-ledger).
+ *
+ * The ledger is the data contract between the QE pipeline (wicked-garden's qe
+ * skills, formerly the retired wicked-testing package) and the acceptance gate
+ * this daemon owns: a DomainStore rooted at `<repo>/.wicked-qe/` (legacy
+ * `<repo>/.wicked-testing/` — see qeLedgerRoot) holding `runs` and
+ * `verdicts`, plus the public evidence manifest at
+ * `<root>/evidence/<run-id>/manifest.json`. This module reads that state
+ * through the wicked-ledger package API (public entry, no deep imports) and
+ * never writes a domain record — the QE pipeline is the only writer.
+ *
+ * ONE deliberate mutation is allowed: `rebuildIndex()`, which regenerates the
+ * store's DERIVED SQLite index from the canonical JSON files when the two
+ * disagree (see `readAcceptanceState`). Canonical JSON is authoritative by the
+ * ledger's own schema contract; the index is a cache, and rebuilding a cache
+ * is not a write to the ledger's record of what happened.
+ */
+import type { EvidenceManifest, RunRecord, VerdictRecord } from 'wicked-ledger';
+/**
+ * The ledger root directory name under a repo root.
+ *
+ * Phase 6c (the wicked-testing retirement) renamed the wire contract to
+ * `.wicked-qe`; `.wicked-testing` is the legacy dirname repos written by the
+ * retired package (and pre-6c garden qe skills) still carry. Resolution is
+ * dual-read and mirrors wicked-ledger's `resolveLedgerRoot`: the new name
+ * wins, an existing legacy root is honored, fresh repos get the new name.
+ */
+export declare const DEFAULT_QE_LEDGER_DIRNAME = ".wicked-qe";
+export declare const LEGACY_QE_LEDGER_DIRNAME = ".wicked-testing";
+/** The configured ledger dir name: `WICKED_QE_LEDGER_DIR` env override, else the default. */
+export declare function qeLedgerDirName(): string;
+/**
+ * Absolute ledger root for a repo (dual-read, Phase 6c).
+ *
+ * An explicit `WICKED_QE_LEDGER_DIR` pins the dirname exactly — the operator
+ * is driving, no fallback probing. Otherwise: `<repo>/.wicked-qe` when it
+ * exists; else an existing legacy `<repo>/.wicked-testing` (that ledger keeps
+ * its root — a store must never split across two dirs); else `.wicked-qe`.
+ */
+export declare function qeLedgerRoot(repoRoot: string): string;
+/**
+ * The acceptance-relevant slice of a repo's ledger.
+ *
+ * `found: false` means the repo has no ledger at all (the dir is absent) —
+ * a distinct fact from "a ledger with no verdicts", and the gate treats both
+ * as a deny with different reasons. `error` carries a read-layer failure
+ * (store threw); it is never set on an ordinary empty ledger.
+ */
+export interface QeAcceptanceState {
+    /** Absolute ledger root that was read (or probed). */
+    root: string;
+    /** Whether the ledger root exists on disk. */
+    found: boolean;
+    /** The QE run the verdict belongs to, when resolvable. */
+    run: RunRecord | null;
+    /** The governing verdict row — newest first, the ledger's system of record. */
+    verdict: VerdictRecord | null;
+    /** The public evidence manifest for that run, when present and parseable. */
+    manifest: EvidenceManifest | null;
+    /** Absolute path the manifest was read from (null when absent). */
+    manifestPath: string | null;
+    /** Read-layer failure detail (store open/read threw). */
+    error?: string;
+}
+/**
+ * Read the ledger's current acceptance state for a repo.
+ *
+ * The newest verdict row governs (`opts.qeRunId` narrows to one QE run's
+ * newest verdict instead). The verdicts TABLE is the system of record — the
+ * manifest is the public artifact built from it at run finalization, returned
+ * here as display evidence, never as a gate input: a run can legitimately be
+ * re-reviewed after its manifest was built, and the newer verdict row wins.
+ *
+ * Index-drift healing: the store is dual-write (canonical JSON + a derived
+ * SQLite index) and a writer that degraded to JSON-only leaves the index
+ * behind. When the index answers "no verdicts" but canonical verdict files
+ * exist, the index is provably stale, so it is rebuilt from JSON once and
+ * re-read — otherwise a ledger full of evidence would read as "missing
+ * evidence ⇒ deny", a wrong answer in the honest direction but still wrong.
+ */
+export declare function readAcceptanceState(repoRoot: string, opts?: {
+    qeRunId?: string;
+}): Promise<QeAcceptanceState>;
+/** The summary of a manifest the acceptance route serves (never the full artifact list). */
+export interface QeManifestSummary {
+    manifestVersion: string;
+    runId: string;
+    scenarioName: string | null;
+    status: string;
+    artifactCount: number;
+    verdict: {
+        value: string;
+        reviewer: string;
+        recordedAt: string | null;
+    };
+}
+/** Reduce a manifest to the route's summary shape. */
+export declare function summarizeManifest(manifest: EvidenceManifest): QeManifestSummary;
+//# sourceMappingURL=ledger.d.ts.map

package/dist/qe/ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.d.ts","sourceRoot":"","sources":["../../src/qe/ledger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAMH,OAAO,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEhF;;;;;;;;GAQG;AACH,eAAO,MAAM,yBAAyB,eAAe,CAAC;AACtD,eAAO,MAAM,wBAAwB,oBAAoB,CAAC;AAE1D,6FAA6F;AAC7F,wBAAgB,eAAe,IAAI,MAAM,CAGxC;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAQrD;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,KAAK,EAAE,OAAO,CAAC;IACf,0DAA0D;IAC1D,GAAG,EAAE,SAAS,GAAG,IAAI,CAAC;IACtB,+EAA+E;IAC/E,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,6EAA6E;IAC7E,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAClC,mEAAmE;IACnE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAaD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CAqC5B;AAgBD,4FAA4F;AAC5F,MAAM,WAAW,iBAAiB;IAChC,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CACzE;AAED,sDAAsD;AACtD,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,iBAAiB,CAa/E"}

package/dist/qe/ledger.js

@@ -0,0 +1,154 @@
+/**
+ * Read-only view over a repo's QE evidence ledger (wicked-ledger).
+ *
+ * The ledger is the data contract between the QE pipeline (wicked-garden's qe
+ * skills, formerly the retired wicked-testing package) and the acceptance gate
+ * this daemon owns: a DomainStore rooted at `<repo>/.wicked-qe/` (legacy
+ * `<repo>/.wicked-testing/` — see qeLedgerRoot) holding `runs` and
+ * `verdicts`, plus the public evidence manifest at
+ * `<root>/evidence/<run-id>/manifest.json`. This module reads that state
+ * through the wicked-ledger package API (public entry, no deep imports) and
+ * never writes a domain record — the QE pipeline is the only writer.
+ *
+ * ONE deliberate mutation is allowed: `rebuildIndex()`, which regenerates the
+ * store's DERIVED SQLite index from the canonical JSON files when the two
+ * disagree (see `readAcceptanceState`). Canonical JSON is authoritative by the
+ * ledger's own schema contract; the index is a cache, and rebuilding a cache
+ * is not a write to the ledger's record of what happened.
+ */
+import { existsSync, readdirSync } from 'node:fs';
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { createDomainStore } from 'wicked-ledger';
+/**
+ * The ledger root directory name under a repo root.
+ *
+ * Phase 6c (the wicked-testing retirement) renamed the wire contract to
+ * `.wicked-qe`; `.wicked-testing` is the legacy dirname repos written by the
+ * retired package (and pre-6c garden qe skills) still carry. Resolution is
+ * dual-read and mirrors wicked-ledger's `resolveLedgerRoot`: the new name
+ * wins, an existing legacy root is honored, fresh repos get the new name.
+ */
+export const DEFAULT_QE_LEDGER_DIRNAME = '.wicked-qe';
+export const LEGACY_QE_LEDGER_DIRNAME = '.wicked-testing';
+/** The configured ledger dir name: `WICKED_QE_LEDGER_DIR` env override, else the default. */
+export function qeLedgerDirName() {
+    const env = process.env['WICKED_QE_LEDGER_DIR']?.trim();
+    return env !== undefined && env !== '' ? env : DEFAULT_QE_LEDGER_DIRNAME;
+}
+/**
+ * Absolute ledger root for a repo (dual-read, Phase 6c).
+ *
+ * An explicit `WICKED_QE_LEDGER_DIR` pins the dirname exactly — the operator
+ * is driving, no fallback probing. Otherwise: `<repo>/.wicked-qe` when it
+ * exists; else an existing legacy `<repo>/.wicked-testing` (that ledger keeps
+ * its root — a store must never split across two dirs); else `.wicked-qe`.
+ */
+export function qeLedgerRoot(repoRoot) {
+    const env = process.env['WICKED_QE_LEDGER_DIR']?.trim();
+    if (env !== undefined && env !== '')
+        return join(repoRoot, env);
+    const current = join(repoRoot, DEFAULT_QE_LEDGER_DIRNAME);
+    if (existsSync(current))
+        return current;
+    const legacy = join(repoRoot, LEGACY_QE_LEDGER_DIRNAME);
+    if (existsSync(legacy))
+        return legacy;
+    return current;
+}
+/** True when the canonical JSON dir for a table has at least one record file. */
+function hasCanonicalRows(root, table) {
+    try {
+        return readdirSync(join(root, table)).some((f) => f.endsWith('.json') && !f.includes('.tmp.'));
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Read the ledger's current acceptance state for a repo.
+ *
+ * The newest verdict row governs (`opts.qeRunId` narrows to one QE run's
+ * newest verdict instead). The verdicts TABLE is the system of record — the
+ * manifest is the public artifact built from it at run finalization, returned
+ * here as display evidence, never as a gate input: a run can legitimately be
+ * re-reviewed after its manifest was built, and the newer verdict row wins.
+ *
+ * Index-drift healing: the store is dual-write (canonical JSON + a derived
+ * SQLite index) and a writer that degraded to JSON-only leaves the index
+ * behind. When the index answers "no verdicts" but canonical verdict files
+ * exist, the index is provably stale, so it is rebuilt from JSON once and
+ * re-read — otherwise a ledger full of evidence would read as "missing
+ * evidence ⇒ deny", a wrong answer in the honest direction but still wrong.
+ */
+export async function readAcceptanceState(repoRoot, opts) {
+    const root = qeLedgerRoot(repoRoot);
+    const state = {
+        root,
+        found: false,
+        run: null,
+        verdict: null,
+        manifest: null,
+        manifestPath: null,
+    };
+    // Probe before opening: createDomainStore CREATES its root when absent, and
+    // a read must not install an empty ledger into a repo that never had one.
+    if (!existsSync(root))
+        return state;
+    state.found = true;
+    try {
+        const store = createDomainStore({ root });
+        const filter = opts?.qeRunId !== undefined ? { run_id: opts.qeRunId } : undefined;
+        let verdicts = store.list('verdicts', filter);
+        if (verdicts.length === 0 && store.mode === 'sqlite+json' && hasCanonicalRows(root, 'verdicts')) {
+            store.rebuildIndex();
+            verdicts = store.list('verdicts', filter);
+        }
+        const verdict = verdicts[0] ?? null;
+        state.verdict = verdict;
+        if (verdict !== null) {
+            state.run = store.get('runs', verdict.run_id);
+            state.manifestPath = join(root, 'evidence', verdict.run_id, 'manifest.json');
+            state.manifest = await readManifest(state.manifestPath);
+        }
+    }
+    catch (err) {
+        // A ledger that exists but cannot be read is NOT "no evidence" — the gate
+        // still denies (deny-dominates), but the reason must name the read failure
+        // so an operator fixes the store instead of hunting for a missing run.
+        state.error = err instanceof Error ? err.message : String(err);
+    }
+    return state;
+}
+/** Parse the public manifest, or null when absent/malformed (display evidence only). */
+async function readManifest(path) {
+    try {
+        const raw = await readFile(path, 'utf8');
+        const parsed = JSON.parse(raw);
+        // Minimal shape check — enough to know this is a manifest and not stray JSON.
+        if (typeof parsed !== 'object' || parsed === null)
+            return null;
+        if (typeof parsed.run_id !== 'string' || typeof parsed.manifest_version !== 'string')
+            return null;
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+/** Reduce a manifest to the route's summary shape. */
+export function summarizeManifest(manifest) {
+    return {
+        manifestVersion: manifest.manifest_version,
+        runId: manifest.run_id,
+        scenarioName: typeof manifest.scenario_name === 'string' ? manifest.scenario_name : null,
+        status: manifest.status,
+        artifactCount: Array.isArray(manifest.artifacts) ? manifest.artifacts.length : 0,
+        verdict: {
+            value: manifest.verdict?.value ?? 'INCONCLUSIVE',
+            reviewer: manifest.verdict?.reviewer ?? '',
+            recordedAt: manifest.verdict?.recorded_at ?? null,
+        },
+    };
+}
+//# sourceMappingURL=ledger.js.map

package/dist/qe/ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.js","sourceRoot":"","sources":["../../src/qe/ledger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAGlD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,YAAY,CAAC;AACtD,MAAM,CAAC,MAAM,wBAAwB,GAAG,iBAAiB,CAAC;AAE1D,6FAA6F;AAC7F,MAAM,UAAU,eAAe;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,CAAC;IACxD,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,yBAAyB,CAAC;AAC3E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,IAAI,EAAE,CAAC;IACxD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;IAC1D,IAAI,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;IACxD,IAAI,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACtC,OAAO,OAAO,CAAC;AACjB,CAAC;AA2BD,iFAAiF;AACjF,SAAS,gBAAgB,CAAC,IAAY,EAAE,KAAa;IACnD,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CACxC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CACnD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,QAAgB,EAChB,IAA2B;IAE3B,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,KAAK,GAAsB;QAC/B,IAAI;QACJ,KAAK,EAAE,KAAK;QACZ,GAAG,EAAE,IAAI;QACT,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,IAAI;KACnB,CAAC;IACF,4EAA4E;IAC5E,0EAA0E;IAC1E,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;IAEnB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,iBAAiB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAClF,IAAI,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC;YAChG,KAAK,CAAC,YAAY,EAAE,CAAC;YACrB,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QACpC,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QACxB,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC9C,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;YAC7E,KAAK,CAAC,QAAQ,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,0EAA0E;QAC1E,2EAA2E;QAC3E,uEAAuE;QACvE,KAAK,CAAC,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wFAAwF;AACxF,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;QACnD,8EAA8E;QAC9E,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC/D,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,gBAAgB,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClG,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAYD,sDAAsD;AACtD,MAAM,UAAU,iBAAiB,CAAC,QAA0B;IAC1D,OAAO;QACL,eAAe,EAAE,QAAQ,CAAC,gBAAgB;QAC1C,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,YAAY,EAAE,OAAO,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI;QACxF,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAChF,OAAO,EAAE;YACP,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,IAAI,cAAc;YAChD,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE;YAC1C,UAAU,EAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,IAAI,IAAI;SAClD;KACF,CAAC;AACJ,CAAC"}