zelari-code 2.46.1 → 2.48.0

package/dist/cli/kraken/candidateRegistry.js

@@ -91,6 +91,19 @@ export function getLastVerifyToolTrace() {
     const trace = g.__zelariVerifyToolTrace;
     return trace ? [...trace] : null;
 }
+/**
+ * K1.3: publish the raw tool executions of the latest verify tentacle on
+ * the per-turn channel independently of `setKrakenCheckResults` — so the
+ * auto-verify PASS-floor (≥ 1 captured tool execution) is observable even
+ * when no `selected` verdict ran this turn (no required-checks path).
+ *
+ * The existing channel `__zelariVerifyToolTrace` is reused; no new global.
+ * The argument may be empty (clears the slot to null) or any bounded ring.
+ */
+export function setLastVerifyToolTrace(trace) {
+    const g = globalThis;
+    g.__zelariVerifyToolTrace = trace.length > 0 ? [...trace] : null;
+}
 /**
  * Passed-check counter (Fase 7): how many required checks carry an explicit
  * `pass`. `unknown` NEVER counts — a degraded observation is not proof

package/dist/cli/kraken/candidateRegistry.js.map

@@ -1 +1 @@
-{"version":3,"file":"candidateRegistry.js","sourceRoot":"","sources":["../../../src/cli/kraken/candidateRegistry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AA6CH,wEAAwE;AACxE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAEtC,uEAAuE;AACvE,MAAM,UAAU,wBAAwB;IACtC,OAAO,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,GAAG,CAAC;AACrD,CAAC;AAeD,SAAS,KAAK;IACZ,MAAM,CAAC,GAAG,UAAwC,CAAC;IACnD,IAAI,CAAC,CAAC,CAAC,wBAAwB;QAAE,CAAC,CAAC,wBAAwB,GAAG,EAAE,CAAC;IACjE,OAAO,CAAC,CAAC,wBAAwB,CAAC;AACpC,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,qBAAqB;IACnC,MAAM,CAAC,GAAG,UAAwC,CAAC;IACnD,CAAC,CAAC,wBAAwB,GAAG,EAAE,CAAC;IAChC,CAAC,CAAC,uBAAuB,GAAG,IAAI,CAAC;IACjC,CAAC,CAAC,0BAA0B,GAAG,IAAI,CAAC;IACpC,CAAC,CAAC,uBAAuB,GAAG,IAAI,CAAC;AACnC,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,kBAAkB,CAAC,OAA+B;IAChE,MAAM,CAAC,GAAG,UAAwC,CAAC;IACnD,CAAC,CAAC,uBAAuB,GAAG,OAAO,CAAC;AACtC,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,kBAAkB;IAChC,MAAM,CAAC,GAAG,UAAwC,CAAC;IACnD,OAAO,CAAC,CAAC,uBAAuB,IAAI,IAAI,CAAC;AAC3C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,EAAE,CAAC;IACzD,OAAO,OAAO,CAAC,cAAc,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAA4B,EAC5B,SAAwC;IAExC,MAAM,CAAC,GAAG,UAAwC,CAAC;IACnD,CAAC,CAAC,0BAA0B,GAAG,OAAO,CAAC;IACvC,yEAAyE;IACzE,4EAA4E;IAC5E,CAAC,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,CAAC,GAAG,UAAwC,CAAC;IACnD,MAAM,OAAO,GAAG,CAAC,CAAC,0BAA0B,CAAC;IAC7C,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,CAAC,GAAG,UAAwC,CAAC;IACnD,MAAM,KAAK,GAAG,CAAC,CAAC,uBAAuB,CAAC;IACxC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,OAAO,GAAG,qBAAqB,EAAE,CAAC;IACxC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;AAC3D,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,gBAAgB;IAC9B,OAAO,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC,MAAM,CAAC;IACzB,IAAI,CAAC,IAAI,oBAAoB,EAAE,CAAC;QAC9B,OAAO;YACL,KAAK,EACH,gCAAgC,oBAAoB,KAAK;gBACzD,2DAA2D;SAC9D,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,WAAW,GAAG,oBAAoB,CAAC;AACzC,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAE3C;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IAC5C,IAAI,IAAI,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,KAAK,GAAG,IAAI,EAAE,CAAC;QAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;IACtD,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IAChE,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,iBAAiB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG;SAC5E,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAC7D,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,QAAQ,GAAwB,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC/D,CAAC,CAAC,GAAG,CAAC,QAAQ;aACT,MAAM,CAAC,CAAC,CAAC,EAAgC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC;aAChF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YACjD,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YACjD,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,IAAI;SAC9B,CAAC,CAAC;aACF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;QAC7C,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,KAAK,GAAa,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;QAC9C,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;QACpF,CAAC,CAAC,EAAE,CAAC;IACP,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE;YACN,UAAU,EAAE,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;YAC3E,QAAQ;YACR,KAAK;YACL,mBAAmB,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;SACtD;KACF,CAAC;AACJ,CAAC;AAQD,MAAM,UAAU,iBAAiB,CAAC,KAA4B;IAC5D,MAAM,SAAS,GAAG,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,MAAM,GAAG,CAAC,EAAoB,CAAC;IAC3F,KAAK,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,yEAAyE;IACzE,+DAA+D;IAC/D,2EAA2E;IAC3E,+EAA+E;IAC/E,8EAA8E;IAC9E,2EAA2E;IAC3E,aAAa;IACb,8EAA8E;IAC9E,oBAAoB;IACpB,GAAG;IACH,6DAA6D;IAC7D,iBAAiB;IACjB,8FAA8F;IAC9F,MAAM;IACN,4CAA4C;IAC5C,GAAG;IACH,qBAAqB;CACtB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,uDAAuD;AACvD,MAAM,UAAU,qBAAqB,CAAC,KAAa,EAAE,GAAG,GAAG,oBAAoB;IAC7E,OAAO,sBAAsB,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AACtG,CAAC"}
+{"version":3,"file":"candidateRegistry.js","sourceRoot":"","sources":["../../../src/cli/kraken/candidateRegistry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AA6CH,wEAAwE;AACxE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAEtC,uEAAuE;AACvE,MAAM,UAAU,wBAAwB;IACtC,OAAO,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,GAAG,CAAC;AACrD,CAAC;AAeD,SAAS,KAAK;IACZ,MAAM,CAAC,GAAG,UAAwC,CAAC;IACnD,IAAI,CAAC,CAAC,CAAC,wBAAwB;QAAE,CAAC,CAAC,wBAAwB,GAAG,EAAE,CAAC;IACjE,OAAO,CAAC,CAAC,wBAAwB,CAAC;AACpC,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,qBAAqB;IACnC,MAAM,CAAC,GAAG,UAAwC,CAAC;IACnD,CAAC,CAAC,wBAAwB,GAAG,EAAE,CAAC;IAChC,CAAC,CAAC,uBAAuB,GAAG,IAAI,CAAC;IACjC,CAAC,CAAC,0BAA0B,GAAG,IAAI,CAAC;IACpC,CAAC,CAAC,uBAAuB,GAAG,IAAI,CAAC;AACnC,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,kBAAkB,CAAC,OAA+B;IAChE,MAAM,CAAC,GAAG,UAAwC,CAAC;IACnD,CAAC,CAAC,uBAAuB,GAAG,OAAO,CAAC;AACtC,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,kBAAkB;IAChC,MAAM,CAAC,GAAG,UAAwC,CAAC;IACnD,OAAO,CAAC,CAAC,uBAAuB,IAAI,IAAI,CAAC;AAC3C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,EAAE,CAAC;IACzD,OAAO,OAAO,CAAC,cAAc,CAAC;AAChC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAA4B,EAC5B,SAAwC;IAExC,MAAM,CAAC,GAAG,UAAwC,CAAC;IACnD,CAAC,CAAC,0BAA0B,GAAG,OAAO,CAAC;IACvC,yEAAyE;IACzE,4EAA4E;IAC5E,CAAC,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,CAAC,GAAG,UAAwC,CAAC;IACnD,MAAM,OAAO,GAAG,CAAC,CAAC,0BAA0B,CAAC;IAC7C,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB;IACpC,MAAM,CAAC,GAAG,UAAwC,CAAC;IACnD,MAAM,KAAK,GAAG,CAAC,CAAC,uBAAuB,CAAC;IACxC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACnC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAmC;IACxE,MAAM,CAAC,GAAG,UAAwC,CAAC;IACnD,CAAC,CAAC,uBAAuB,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACnE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,OAAO,GAAG,qBAAqB,EAAE,CAAC;IACxC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;AAC3D,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,gBAAgB;IAC9B,OAAO,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC,MAAM,CAAC;IACzB,IAAI,CAAC,IAAI,oBAAoB,EAAE,CAAC;QAC9B,OAAO;YACL,KAAK,EACH,gCAAgC,oBAAoB,KAAK;gBACzD,2DAA2D;SAC9D,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,WAAW,GAAG,oBAAoB,CAAC;AACzC,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAE3C;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IAC5C,IAAI,IAAI,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,KAAK,GAAG,IAAI,EAAE,CAAC;QAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;IACtD,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IAChE,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,iBAAiB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG;SAC5E,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAC7D,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,QAAQ,GAAwB,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC/D,CAAC,CAAC,GAAG,CAAC,QAAQ;aACT,MAAM,CAAC,CAAC,CAAC,EAAgC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC;aAChF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACX,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YACjD,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YACjD,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,IAAI;SAC9B,CAAC,CAAC;aACF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;QAC7C,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,KAAK,GAAa,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;QAC9C,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;QACpF,CAAC,CAAC,EAAE,CAAC;IACP,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE;YACN,UAAU,EAAE,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;YAC3E,QAAQ;YACR,KAAK;YACL,mBAAmB,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;SACtD;KACF,CAAC;AACJ,CAAC;AAQD,MAAM,UAAU,iBAAiB,CAAC,KAA4B;IAC5D,MAAM,SAAS,GAAG,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,MAAM,GAAG,CAAC,EAAoB,CAAC;IAC3F,KAAK,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,yEAAyE;IACzE,+DAA+D;IAC/D,2EAA2E;IAC3E,+EAA+E;IAC/E,8EAA8E;IAC9E,2EAA2E;IAC3E,aAAa;IACb,8EAA8E;IAC9E,oBAAoB;IACpB,GAAG;IACH,6DAA6D;IAC7D,iBAAiB;IACjB,8FAA8F;IAC9F,MAAM;IACN,4CAA4C;IAC5C,GAAG;IACH,qBAAqB;CACtB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,uDAAuD;AACvD,MAAM,UAAU,qBAAqB,CAAC,KAAa,EAAE,GAAG,GAAG,oBAAoB;IAC7E,OAAO,sBAAsB,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AACtG,CAAC"}

package/dist/cli/kraken/executor.js

@@ -55,7 +55,9 @@ import { isAstSupported, parseFileSymbolsDiag } from '../ast/engine.js';
 import { calculateCost } from '../modelPricing.js';
 import { aggregate, REPUTATION_MIN_SAMPLE, reputationRecordFromNodeRun, } from './modelReputation.js';
 // t30 (§17): spawn-ROI gate — deterministic score, threshold parsing and the
-// duplication-risk heuristic; the veto itself lives in this class (fail-open).
+// duplication-risk heuristic; the veto itself lives in this class and is
+// fail-CLOSED on an internal error (K3.2: defer + `roi_gate_error`, never
+// spawn).
 import { computeSpawnScore, duplicationRiskFor, parseRoiThreshold, shouldSpawn, } from './spawnRoi.js';
 import { appendRecord, DEFAULT_MAX_RECORDS, loadRecords, pruneStore, resolveReputationStorePath, } from './reputationStore.js';
 import { setReputationSource } from './verifierRouting.js';
@@ -406,6 +408,16 @@ export class KrakenGraphExecutor {
     /** Set once the run has been cancelled: stops admission, retries and fixes. */
     aborted = false;
     fixCounter = 0;
+    /**
+     * F12 (K2.4): set once any tentacle in this run reports a worktree-creation
+     * failure (it fell back to the SHARED parent tree). Latched for the rest of
+     * the run — deliberately NOT cleared: the P2.C rescue path admits
+     * overlapping writers in parallel ONLY because they are worktree-isolated,
+     * so once isolation is known-broken those rescues stop and overlapping
+     * writers serialize (P2.A deferral). There is no safe mid-run boundary at
+     * which to assume isolation recovered.
+     */
+    worktreeFallbackSeen = false;
     constructor(opts) {
         this.deps = opts.taskToolDeps;
         this.parentCwd = opts.parentCwd;
@@ -535,6 +547,8 @@ export class KrakenGraphExecutor {
         // graph to always shrink monotonically (fix-node spawns grow it).
         const maxIterations = Math.max(64, graph.nodes.size * 8);
         let iterations = 0;
+        /** Why the loop broke early — the drain reports it on what it abandons. */
+        let stopReason = 'abort';
         /** Node id → its running tentacle. One entry per in-flight node. */
         const inFlight = new Map();
         startKrakenGraphLive(graph);
@@ -547,6 +561,10 @@ export class KrakenGraphExecutor {
                     detail: `exceeded ${maxIterations} scheduling iterations without settling`,
                     ok: false,
                 });
+                stopReason = 'max-iterations';
+                // K3.1 (F14): the work still in flight is exactly what we are breaking
+                // OUT of waiting for — tell it to stop before the drain waits on it.
+                this.cancelRun();
                 break;
             }
             if (this.aborted && inFlight.size === 0)
@@ -603,15 +621,13 @@ export class KrakenGraphExecutor {
         // The loop can break with work still in flight (iteration cap, or a
         // cancellation whose tentacles have not unwound yet). Let those settle
         // rather than returning a summary while they are still writing, and
-        // record what they produced.
-        if (inFlight.size > 0) {
-            for (const { id, res } of await Promise.all(inFlight.values())) {
-                const node = graph.nodes.get(id);
-                if (node)
-                    await this.applyResultWithReask(graph, node, res);
-            }
-            inFlight.clear();
-        }
+        // record what they produced — but under K3.1's BOUNDED drain, because the
+        // tentacle that made the loop break is precisely the one that may never
+        // settle on its own.
+        const abandonedNodeIds = await this.drainInFlight(graph, inFlight, {
+            reason: stopReason,
+            timeoutMs: this.cancelGraceMs ?? resolveCancelGraceMs(),
+        });
         // A cancelled run leaves nodes that never started: `skipped` says exactly
         // that, and lets the graph settle so a summary can be returned.
         if (this.aborted) {
@@ -709,6 +725,7 @@ export class KrakenGraphExecutor {
             counts: countByStatus(graph),
             durationsMs: Object.fromEntries(this.durationsMs),
             cancelled: this.aborted,
+            abandonedNodeIds,
             unresolvedFindings: [...this.unresolved],
             ...(backtest ? { backtest } : {}),
         };
@@ -730,6 +747,120 @@ export class KrakenGraphExecutor {
         for (const controller of this.nodeControllers.values())
             controller.abort();
     }
+    /**
+     * K3.1 (F14): settle the work still in flight when the scheduling loop breaks
+     * early — the iteration cap, or a cancellation whose tentacles have not
+     * unwound yet.
+     *
+     * This used to be a bare `Promise.all(inFlight)`, i.e. an UNBOUNDED wait: a
+     * tentacle stuck on a provider call that never yields hung `execute()`
+     * forever, so the cap that exists to escape the stall never produced a
+     * summary at all — and nothing had even told the stuck tentacle to stop. The
+     * order here is the point: cancel FIRST (a tentacle cannot unwind if nobody
+     * asked it to), then let the run settle inside one shared deadline, the same
+     * `cancelGraceMs` {@link withNodeTimeout} grants a cancelled run. What
+     * settles in that window is recorded exactly as the loop would have recorded
+     * it; what is still running when the deadline fires is a leftover, marked
+     * terminal here so no summary is ever emitted with a node still `running`.
+     *
+     * @returns the ids abandoned at the deadline (empty for a clean drain).
+     */
+    async drainInFlight(graph, inFlight, opts) {
+        if (inFlight.size === 0)
+            return [];
+        // Idempotent: reaches the AbortController of every node we are about to
+        // stop waiting for.
+        this.cancelRun();
+        // ONE timer for the whole drain (not one per node), so the total wait is
+        // bounded by `timeoutMs`. Unref'd like `graphTimer` — a cancellation grace
+        // must never be what keeps the process alive.
+        const DRAIN_TIMED_OUT = Symbol('drain-timeout');
+        /**
+         * True when this drained entry holds the deadline sentinel instead of a
+         * settled node. (A plain `v !== DRAIN_TIMED_OUT` does not narrow here: the
+         * raced value is typed `SettledNode | symbol`, and TS will not subtract a
+         * unique symbol from the `symbol` member.)
+         */
+        const hitDeadline = (v) => v === DRAIN_TIMED_OUT;
+        let timer;
+        const deadline = new Promise((resolve) => {
+            timer = setTimeout(() => resolve(DRAIN_TIMED_OUT), opts.timeoutMs);
+            timer.unref?.();
+        });
+        const drained = await Promise.all([...inFlight].map(async ([id, promise]) => ({
+            id,
+            outcome: await Promise.race([promise, deadline]),
+        }))).finally(() => {
+            if (timer)
+                clearTimeout(timer);
+        });
+        inFlight.clear();
+        const abandoned = [];
+        for (const { id, outcome } of drained) {
+            const node = graph.nodes.get(id);
+            if (!hitDeadline(outcome)) {
+                // Unwound inside the grace: an ordinary outcome, applied through the
+                // usual path. `applyResult` refuses to retry or spawn repairs because
+                // the run is aborted by now — right for a run that is stopping.
+                if (node)
+                    await this.applyResultWithReask(graph, node, outcome.res);
+                continue;
+            }
+            abandoned.push(id);
+            if (!node)
+                continue;
+            const error = `abandoned after drain (${opts.reason}): tentacle did not stop within ` +
+                `${opts.timeoutMs}ms of being cancelled`;
+            node.status = 'error';
+            node.error = error;
+            // Same terminal bookkeeping as any other node that ends in `error`: the
+            // radio tail, the workbench graph tab and the digest must all stop
+            // showing it as running.
+            this.radio('node_end', {
+                description: node.label,
+                agent: node.kind,
+                detail: `abandoned after drain (${opts.reason})`,
+                ok: false,
+            });
+            this.wb?.markEnd(node.id, {
+                status: 'error',
+                error,
+                durationMs: this.durationsMs.get(node.id),
+            });
+        }
+        if (abandoned.length > 0) {
+            this.radio('progress', {
+                description: 'in-flight drain',
+                detail: `drain timed out after ${opts.timeoutMs}ms (${opts.reason}) — ` +
+                    `${abandoned.length} abandoned: ${abandoned.join(', ')}`,
+                ok: false,
+            });
+            this.wb?.logEvent(`drain: ${abandoned.length} node(s) did not stop within ${opts.timeoutMs}ms ` +
+                `(${opts.reason}) — abandoned: ${abandoned.join(', ')}`);
+        }
+        return abandoned;
+    }
+    /**
+     * F12 (K2.4): a tentacle reported a worktree-creation failure and is now
+     * writing into the shared parent tree. Latch {@link worktreeFallbackSeen} so
+     * {@link admit} stops rescuing overlapping writers via worktree isolation
+     * (they would no longer be actually isolated), and record the degradation
+     * once on the radio + workbench.
+     */
+    noteWorktreeFallback(info) {
+        if (this.worktreeFallbackSeen)
+            return;
+        this.worktreeFallbackSeen = true;
+        const where = info.nodeId !== undefined ? ` [${info.nodeId}]` : '';
+        this.radio('progress', {
+            description: 'worktree fallback',
+            detail: `worktree creation failed (mode=${info.mode})${where} — run degraded to ` +
+                `serial admission: overlapping writers now defer for the rest of the run` +
+                (info.reason ? ` — ${info.reason}` : ''),
+            ok: false,
+        });
+        this.wb?.logEvent(`worktree fallback${where} — worktree creation failed (mode=${info.mode}); degrading to serial admission (overlapping writers defer for the rest of the run)`);
+    }
     /**
      * Pick the ready nodes that may start right now: parallel-safe against every
      * node already running AND against each other, within the concurrency cap.
@@ -798,6 +929,7 @@ export class KrakenGraphExecutor {
                     this.deps.allowWorktree !== false
                     ? worktreeSchedulingDecision(node, racing, process.env, {
                         caseInsensitive: this.ownershipCaseFolding,
+                        sharedTreeDegraded: this.worktreeFallbackSeen,
                     })
                     : undefined;
                 if (decision && decision.mode === 'parallel-worktree') {
@@ -847,6 +979,7 @@ export class KrakenGraphExecutor {
                 if (!verdict)
                     continue;
                 const isolatable = worktreeMode === 'auto' &&
+                    !this.worktreeFallbackSeen &&
                     isWorktreeCapableKind(node.kind) &&
                     !this.reworks.has(node.id) && // a rework edits an EXISTING worktree
                     this.deps.allowWorktree !== false;
@@ -887,15 +1020,17 @@ export class KrakenGraphExecutor {
         // value. Runs AFTER ownership arbitration and both rescues, so it can only
         // shrink the final spawn list; a node scoring below the threshold goes
         // back the deferred path (stays READY, re-offered next round — never
-        // failed) with a `node_roi_vetoed` radio trail. Fail-open: any error
-        // inside the gate spawns the batch (see roiGate).
+        // failed) with a `node_roi_vetoed` radio trail. Fail-CLOSED (K3.2/I3): an error
+        // inside the gate defers the batch with a `roi_gate_error` radio (see roiGate).
         return (await this.roiGate([...admitted, ...rescued, ...semAdmitted], running)).spawn;
     }
     /**
      * P2.F: resolve the ROI gate's reputation source once per run — the
-     * injected fixture when given, else the repo's t29 store. Fail-open: a
+     * injected fixture when given, else the repo's t29 store. A
      * missing/corrupt store already degrades to [] inside loadRecords, and an
-     * unexpected error is swallowed the same way ("no history").
+     * unexpected error is swallowed the same way ("no history"). Either way the
+     * gate sees an unknown node and scores the sane defaults — K3.2 vetoes gate
+     * ERRORS only; missing data still spawns.
      */
     async roiReputationRecords() {
         if (this.roiReputation !== null)
@@ -950,9 +1085,11 @@ export class KrakenGraphExecutor {
      * ZELARI_KRAKEN_ROI_THRESHOLD (raw env string parsed per admit — invalid ⇒
      * default) and returns the survivors. Vetoed nodes are NOT failed: they are
      * simply not returned, so they stay READY and are re-offered next round,
-     * each with a `node_roi_vetoed` radio trail. Fail-open twice over: an error
-     * while scoring ONE node spawns that node, and an error that escapes the
-     * loop spawns the whole batch — the gate must never break a run.
+     * each with a `node_roi_vetoed` radio trail. Fail-CLOSED (K3.2/I3) twice
+     * over: an internal error while scoring ONE node defers that node, and an
+     * error that escapes the loop defers the whole batch — the gate must never
+     * break a run, but it never lets an unvetted batch through either: every
+     * gate failure fires a loud `roi_gate_error` radio.
      */
     async roiGate(spawnList, running) {
         const spawn = [];
@@ -986,16 +1123,50 @@ export class KrakenGraphExecutor {
                     });
                     this.wb?.logEvent(`roi-vetoed ${node.id} "${node.label}" — spawnScore ${pinned} < ${threshold} (${score.rationaleCode}); deferred, not failed`);
                 }
-                catch {
-                    spawn.push(node); // per-node fail-open
+                catch (err) {
+                    // K3.2 (F15/I3): fail-CLOSED. An internal gate error is a veto, not
+                    // a spawn: the node goes back the deferred path (stays READY,
+                    // re-offered next round, never failed) and the failure is loud.
+                    vetoed.push(node);
+                    this.roiGateErrorRadio([node], err, threshold);
                 }
             }
         }
-        catch {
-            return { spawn: [...spawnList], vetoed: [] }; // whole-gate fail-open
+        catch (err) {
+            // K3.2 (F15/I3): fail-CLOSED for the whole batch. An internal error
+            // must never hand the original spawnList back as survivors, whatever
+            // partial verdicts the loop reached before it threw.
+            this.roiGateErrorRadio(spawnList, err);
+            return { spawn: [], vetoed: [...spawnList] };
         }
         return { spawn, vetoed };
     }
+    /**
+     * K3.2 (F15/I3): the ROI gate refused to spawn because of an INTERNAL error
+     * (throwing score seam, unreadable reputation, whole-batch escape). Loud by
+     * design and never silent: one `roi_gate_error` radio event plus a workbench
+     * line, so a gate that never clears stays visible instead of reading as an
+     * ordinary deferral. `deferred` is the node (or whole batch) pushed back the
+     * READY / deferred path — nothing here fails a node.
+     */
+    roiGateErrorRadio(deferred, err, threshold = null) {
+        const reason = err instanceof Error ? err.message : String(err);
+        const only = deferred.length === 1 ? deferred[0] : undefined;
+        this.radio('roi_gate_error', {
+            description: only ? only.label : `roi gate (${deferred.length} node(s))`,
+            ...(only ? { agent: only.kind, nodeId: only.id } : {}),
+            ...(threshold !== null ? { threshold } : {}),
+            detail: only
+                ? `roi gate error: ${reason} — ${only.id} stays READY (not failed), never spawned`
+                : `roi gate error: ${reason} — deferred ${deferred.length} node(s) [${deferred
+                    .map((n) => n.id)
+                    .join(', ')}], nothing spawned`,
+            ok: false,
+        });
+        this.wb?.logEvent(only
+            ? `roi-gate-error ${only.id} "${only.label}" — ${reason}; deferred, not failed`
+            : `roi-gate-error — ${reason}; deferred ${deferred.length} node(s); nothing spawned`);
+    }
     /**
      * P2.B: may `node` (held by P2.A/P2.C arbitration) run alongside the racing
      * writers because BOTH sides declare disjoint symbol ownership? Only a pair
@@ -1095,7 +1266,13 @@ export class KrakenGraphExecutor {
             // `allowWorktree: false` is what actually stops a rework from opening
             // its own worktree: creation is driven by the agent kind ('general')
             // inside runTentacle, not by anything the executor passes per-call.
-            deps: isRework ? { ...this.deps, allowWorktree: false } : this.deps,
+            deps: {
+                ...this.deps,
+                // F12 (K2.4): latch a worktree-creation failure so the rest of the
+                // run's admission policy degrades (see noteWorktreeFallback).
+                onWorktreeFallback: (info) => this.noteWorktreeFallback(info),
+                ...(isRework ? { allowWorktree: false } : {}),
+            },
             args: {
                 description: node.label,
                 prompt: upstream ? `${node.prompt}\n${upstream}` : node.prompt,
@@ -1294,6 +1471,7 @@ export class KrakenGraphExecutor {
             try {
                 result = await this.mergeFn(handle, {
                     message: `kraken: merge ${graph.nodes.get(depId)?.label ?? depId}`.slice(0, 200),
+                    sessionId: this.sessionId,
                 });
             }
             catch (err) {