@adhdev/mesh-shared 1.0.82-rc.35 → 1.0.82-rc.37

package/dist/launch-defaults.d.ts

@@ -20,6 +20,8 @@ export interface LaunchDefaultEntry extends LaunchDefaultSelection {
     revision: number;
     setBy: 'owner' | 'assistant';
     setAt: number;
+    /** Ordered quota-failover alternatives (<= 3, distinct providers). Absent = none. */
+    fallback?: LaunchDefaultSelection[];
 }
 export interface LaunchDefaultChange {
     at: number;

package/dist/mesh-tool-names.d.ts

@@ -18,10 +18,10 @@
  * Order mirrors mcp-server `ALL_MESH_TOOLS` for easy visual diffing, but the consistency
  * checks are set-based (order-insensitive).
  */
-export declare const CANONICAL_MESH_TOOL_NAMES: readonly ["mesh_status", "mesh_route_preview", "mesh_list_nodes", "mesh_enqueue_batch", "mesh_enqueue_task", "mesh_view_queue", "mesh_queue_cancel", "mesh_queue_requeue", "mesh_queue_revise", "mesh_send_task", "mesh_read_chat", "mesh_read_debug", "mesh_read_terminal", "mesh_send_keys", "mesh_launch_session", "mesh_git_status", "mesh_read_node_logs", "mesh_fast_forward_node", "mesh_restart_daemon", "mesh_checkpoint", "mesh_approve", "mesh_answer_question", "mesh_list_pending_approvals", "mesh_create", "mesh_add_node", "mesh_reattach_source_parent", "mesh_attach_remote", "mesh_clone_node", "mesh_remove_node", "mesh_cleanup_worktree_nodes", "mesh_refine_node", "mesh_refine_batch", "mesh_config", "mesh_init", "mesh_cleanup_sessions", "mesh_task_history", "mesh_ledger_query", "mesh_note", "mesh_reconcile_ledger", "mesh_mission_upsert", "mesh_mission_list", "mesh_review_inbox", "mesh_node_slots", "driver_list", "driver_describe", "artifact_list", "artifact_read", "artifact_register"];
+export declare const CANONICAL_MESH_TOOL_NAMES: readonly ["mesh_status", "mesh_route_preview", "mesh_list_nodes", "mesh_enqueue_batch", "mesh_enqueue_task", "mesh_view_queue", "mesh_queue_cancel", "mesh_direct_cancel", "mesh_queue_requeue", "mesh_queue_revise", "mesh_send_task", "mesh_read_chat", "mesh_read_debug", "mesh_read_terminal", "mesh_send_keys", "mesh_launch_session", "mesh_git_status", "mesh_read_node_logs", "mesh_fast_forward_node", "mesh_restart_daemon", "mesh_checkpoint", "mesh_approve", "mesh_answer_question", "mesh_list_pending_approvals", "mesh_create", "mesh_add_node", "mesh_reattach_source_parent", "mesh_attach_remote", "mesh_clone_node", "mesh_remove_node", "mesh_retry_node_bootstrap", "mesh_cleanup_worktree_nodes", "mesh_refine_node", "mesh_refine_batch", "mesh_config", "mesh_init", "mesh_cleanup_sessions", "mesh_task_history", "mesh_ledger_query", "mesh_note", "mesh_reconcile_ledger", "mesh_mission_upsert", "mesh_mission_list", "mesh_mission_git_eval", "mesh_release_upsert", "mesh_release_scope", "mesh_release_list", "mesh_release_record_deploy", "mesh_release_changelog_draft", "mesh_review_inbox", "mesh_node_slots", "driver_list", "driver_describe", "artifact_list", "artifact_read", "artifact_register"];
 export type CanonicalMeshToolName = typeof CANONICAL_MESH_TOOL_NAMES[number];
 /** The count the `NN tools` barrel doc comments and consistency test assert against. */
-export declare const CANONICAL_MESH_TOOL_COUNT: 48;
+export declare const CANONICAL_MESH_TOOL_COUNT: 56;
 /**
  * Tool names retired by the 2026-09-26 tool-surface consolidation (60 → 48).
  * Every capability behind them is still reachable: each retired name maps to the

package/dist/mission-git-state.d.ts

@@ -0,0 +1,83 @@
+/**
+ * mission-git-state — types and the pure aggregation for "did this mission's
+ * referenced commits/branches land on the default branch?"
+ * (docs/design/2026-11-01-mission-git-refs.md §3).
+ *
+ * The facts come from the daemon opening git objects itself (never from
+ * commit-message text, branch-name similarity or worker prose). `landed` means
+ * ONLY "the referenced changes are on the base"; it never implies live
+ * acceptance, mission completion or that remaining items are done, and it is
+ * never used to change a mission's status.
+ *
+ * Dependency-free leaf: plain data in, plain data out.
+ */
+/** Per-ref verdict. `unknown` is never folded into `not_contained` nor promoted to `contained_*`. */
+export declare const MISSION_REF_GIT_STATUSES: readonly ["contained_ancestor", "contained_patch_equivalent", "not_contained", "unknown"];
+export type MissionRefGitStatus = typeof MISSION_REF_GIT_STATUSES[number];
+/** How a contained verdict was reached. */
+export declare const MISSION_REF_GIT_METHODS: readonly ["ancestry", "cherry", "residual_patch"];
+export type MissionRefGitMethod = typeof MISSION_REF_GIT_METHODS[number];
+/** Mission-level projection. */
+export declare const MISSION_GIT_STATES: readonly ["no_refs", "landed", "partial", "not_landed", "unknown"];
+export type MissionGitStateValue = typeof MISSION_GIT_STATES[number];
+export declare function isMissionRefContained(status: MissionRefGitStatus): boolean;
+/** Why a ref is `unknown` (detail.unknownReason). Free-form strings are tolerated on read. */
+export type MissionRefUnknownReason = 'object_missing' | 'shallow' | 'undeterminable' | 'base_missing' | 'branch_not_found' | 'base_branch_ref' | 'gitlink_undeterminable' | 'merge_tree_failed' | 'node_offline' | 'no_repo' | 'budget' | 'not_a_git_ref';
+export interface MissionRefGitDetail {
+    reasonCode?: string;
+    unknownReason?: MissionRefUnknownReason | string;
+    /** `modified_since_landing_possible`: main later touched the same lines — shown as a hint, not a verdict. */
+    note?: string;
+    nodeId?: string;
+    residualPatchId?: string;
+    ahead?: number;
+    behind?: number;
+}
+/** One stored per-ref evaluation (a row of `mesh_mission_ref_evals`). */
+export interface MissionRefGitEval {
+    itemId: string;
+    /** `kind:repo:value` (normalized, lower-case SHA). */
+    refKey: string;
+    kind: 'commit' | 'branch';
+    value: string;
+    repo?: string;
+    /** Branch refs: the SHA the name resolved to at first evaluation (re-evaluation keeps using it). */
+    pinnedSha?: string;
+    baseRef: string;
+    baseSha?: string;
+    status: MissionRefGitStatus;
+    method?: MissionRefGitMethod;
+    detail?: MissionRefGitDetail;
+    evaluatedAt: string;
+}
+export interface MissionGitState {
+    missionId: string;
+    state: MissionGitStateValue;
+    /** `partial` only: some refs were `unknown` (not just `not_contained`). */
+    partialUnknown: boolean;
+    counts: {
+        total: number;
+        contained: number;
+        notContained: number;
+        unknown: number;
+    };
+    /** Base the newest evaluation compared against. */
+    baseRef?: string;
+    baseSha?: string;
+    /** Oldest `evaluatedAt` among the refs (the freshness floor). */
+    evaluatedAt?: string;
+    /** True when no row exists yet / the rows are older than the TTL — a refresh was (or can be) triggered. */
+    stale: boolean;
+    refs: MissionRefGitEval[];
+}
+/**
+ * Aggregate per-ref statuses (design §3.3):
+ *  - none → `no_refs`; all contained → `landed`; some contained → `partial`
+ *    (`partialUnknown` when any of the rest is `unknown`);
+ *  - none contained: all `not_contained` → `not_landed`, otherwise `unknown`.
+ */
+export declare function aggregateMissionGitState(statuses: readonly MissionRefGitStatus[]): {
+    state: MissionGitStateValue;
+    partialUnknown: boolean;
+    counts: MissionGitState['counts'];
+};

package/dist/mission-items.d.ts

@@ -14,9 +14,9 @@
  */
 export declare const MISSION_ITEM_KINDS: readonly ["remaining", "live_check", "decision", "evidence"];
 export type MissionItemKind = typeof MISSION_ITEM_KINDS[number];
-export declare const MISSION_ITEM_STATES: readonly ["open", "done", "dropped", "moved", "answered", "expired", "withdrawn", "superseded"];
+export declare const MISSION_ITEM_STATES: readonly ["open", "done", "failed", "dropped", "moved", "answered", "expired", "withdrawn", "superseded"];
 export type MissionItemState = typeof MISSION_ITEM_STATES[number];
-/** States a coordinator/worker may SET through items_update, per kind. `answered`/`expired` are daemon-owned. */
+/** States a coordinator/worker may SET through items_update, per kind. `answered`/`expired`/`failed` (owner live-check verdict) are daemon-owned. */
 export declare const COORDINATOR_SETTABLE_ITEM_STATES: Readonly<Record<MissionItemKind, readonly MissionItemState[]>>;
 export declare const MISSION_OUTCOMES: readonly ["merged", "verified_live", "superseded", "not_needed", "owner_abandoned", "unspecified"];
 export type MissionOutcome = typeof MISSION_OUTCOMES[number];

package/dist/node-facts.d.ts

@@ -234,6 +234,24 @@ export interface MeshNodeFacts {
      * Booleans keyed by provider type only — no free text, no credentials.
      */
     providerEnablement?: Record<string, MeshNodeFactsProviderEnablement>;
+    /**
+     * The reporting machine's stored quota RESERVE (daemon-core
+     * `ADHDevConfig.quotaReserve`, sparse, ≤ 2 KB, migration audit trail
+     * stripped): the "how much quota to leave for the person" bar that the
+     * coordinator's launch gate applies to THIS machine's snapshots.
+     * ★ABSENT means "this node did not tell us" (older daemon) and resolves to
+     * the code defaults — the same fail-open direction as before the field
+     * existed. Percentages, durations and hashed account keys only; no free
+     * text, no emails. Resolve with daemon-core `resolveQuotaReserve`; never
+     * read its fields directly.
+     */
+    quotaReserve?: {
+        version: 1;
+        defaults?: Record<string, number>;
+        pools?: Record<string, Record<string, number>>;
+        accounts?: Record<string, Record<string, Record<string, number>>>;
+        updatedAt?: string;
+    };
     /** Future fields ride through opaquely — do not enumerate them in relays. */
     [extra: string]: unknown;
 }

package/dist/release.d.ts

@@ -0,0 +1,90 @@
+/**
+ * release — types, limits and pure helpers for release objects
+ * (docs/design/2026-11-01-release-objects.md).
+ *
+ * A release is a mesh-scoped entity that groups MISSIONS (explicit membership) and records
+ * deploy facts. It is distinct from the vendor release stamp (a build channel stamp) and
+ * from `.adhdev/preview-deploy.json` (the per-checkout deploy record it snapshots).
+ * Membership is only ever created by an explicit call; git evaluation and deploy heads
+ * produce suggestions, never members. Dependency-free leaf.
+ */
+export declare const MESH_RELEASE_CHANNELS: readonly ["preview", "stable"];
+export type MeshReleaseChannel = typeof MESH_RELEASE_CHANNELS[number];
+export declare function isMeshReleaseChannel(value: unknown): value is MeshReleaseChannel;
+export declare const MESH_RELEASE_STATUSES: readonly ["planned", "frozen", "deployed", "verified", "superseded", "cancelled"];
+export type ReleaseStatus = typeof MESH_RELEASE_STATUSES[number];
+export declare function isReleaseStatus(value: unknown): value is ReleaseStatus;
+export declare const RELEASE_MEMBER_STATES: readonly ["member", "moved_out", "removed"];
+export type ReleaseMemberState = typeof RELEASE_MEMBER_STATES[number];
+/** Who may write release membership. The daemon never adds a member on its own. */
+export declare const RELEASE_ACTORS: readonly ["coordinator", "owner", "assistant", "script"];
+export type ReleaseActor = typeof RELEASE_ACTORS[number];
+export declare const RELEASE_EVENT_TYPES: readonly ["created", "status_changed", "scope_added", "scope_moved", "scope_removed", "deploy_recorded", "changelog_drafted", "changelog_applied"];
+export type ReleaseEventType = typeof RELEASE_EVENT_TYPES[number];
+/** Mission-side events recorded when membership changes (so the mission history shows it). */
+export declare const MISSION_RELEASE_EVENT_TYPES: readonly ["release_attached", "release_moved", "release_detached"];
+export declare const RELEASE_LIMITS: {
+    readonly name: 80;
+    readonly note: 500;
+    /** `mesh_missions.release_note`: one user/operator-visible sentence. */
+    readonly releaseNote: 400;
+    readonly missionsPerCall: 100;
+    readonly changelogEntries: 300;
+};
+/** Deploy targets snapshot (a copy of `.adhdev/preview-deploy.json` `targets`). */
+export interface ReleaseDeployTarget {
+    commit?: string;
+    deployedAt?: string;
+    previewVersion?: string;
+    [key: string]: unknown;
+}
+export type ReleaseTargets = Partial<Record<'npm' | 'server' | 'web', ReleaseDeployTarget>> & Record<string, ReleaseDeployTarget | undefined>;
+export declare const CHANGELOG_SECTIONS: readonly ["Added", "Fixed", "Changed"];
+export type ChangelogSection = typeof CHANGELOG_SECTIONS[number];
+export interface ChangelogDraftEntry {
+    missionId: string;
+    /** `<!-- m:<id8> -->` — the idempotency marker `--apply` writes after the line. */
+    marker: string;
+    section: ChangelogSection;
+    /** The sentence that would be written to CHANGELOG.md. */
+    text: string;
+    source: 'release_note' | 'summary';
+    /** True when `text` is not user-facing wording yet (carries the needs-wording marker). */
+    needsWording?: boolean;
+    /** Evidence kept in the draft JSON only; never written to CHANGELOG.md. */
+    evidence?: {
+        gitState?: string;
+        outcome?: string;
+        shas?: string[];
+    };
+    /** Non-blocking lint warnings (internal ids / wave numbers / forbidden phrases). */
+    lint?: string[];
+}
+export interface ChangelogDraftExcluded {
+    missionId: string;
+    reason: string;
+}
+export interface ChangelogDraft {
+    generatedAt: string;
+    entries: ChangelogDraftEntry[];
+    /** Member missions without a `release_note` (target 0 at deploy time). */
+    needsNote: string[];
+    excluded: ChangelogDraftExcluded[];
+    /** Member missions whose refs are not confirmed on the default branch (`not_landed` / `unknown`). */
+    warnings: Array<{
+        missionId: string;
+        gitState: string;
+        message: string;
+    }>;
+    appliedAt?: string;
+}
+export declare const NEEDS_WORDING_MARKER = "[needs user-facing wording]";
+/** Marker that makes `--apply` idempotent: one per mission entry inside CHANGELOG.md. */
+export declare function changelogMissionMarker(missionId: string): string;
+/** Default section for an entry; `[Fixed]`/`[Added]`/`[Changed]` prefixes on the note pin it. */
+export declare function classifyChangelogSection(text: string, hint?: string): {
+    section: ChangelogSection;
+    text: string;
+};
+/** Phrases that must not reach a public CHANGELOG (internal waves, rc numbering, ids). Warning-only. */
+export declare function lintChangelogText(text: string): string[];

package/dist/session-launch.d.ts

@@ -41,6 +41,13 @@ export interface ModelSelection {
     /** Last value the provider itself reported (statusline, native history). */
     observed?: string;
     observedAt?: number;
+    /**
+     * The provider SILENTLY substituted another model for the requested one
+     * (antigravity: `model X is not recognized … Using "Y" instead`). `observed`
+     * then holds the model actually running. P2P/launch-record only — the
+     * server path never carries it (see the content boundary above).
+     */
+    fallback?: boolean;
     /** Every value change in order. The last entry is the value in force. */
     history: ModelSelectionHistoryEntry[];
 }

package/dist/turn-ipc-mission.d.ts

@@ -39,6 +39,8 @@ export interface MissionUpsertRequest {
      */
     structured?: boolean;
     summary?: string;
+    /** One user/operator-visible sentence for the release CHANGELOG draft (design 2026-11-01-release-objects L5). `''` clears. */
+    releaseNote?: string;
     outcome?: string;
     outcomeReason?: string;
     /** Mission id open items move to when this call closes the mission (default: the carry-over mission). */
@@ -57,6 +59,7 @@ export interface MeshMissionOpenItemCountsWire {
 /** Structured-missions fields (only with `structured: true` on the request). */
 export interface MeshMissionStructuredWire {
     summary?: string;
+    releaseNote?: string;
     outcome?: string;
     outcomeReason?: string;
     version?: number;
@@ -157,6 +160,7 @@ export interface MissionListSummaryVerboseWire {
     closeCandidateEmittedAt?: string | null;
     /** Structured lists only. */
     summary?: string;
+    releaseNote?: string;
     outcome?: string;
     outcomeReason?: string;
     version?: number;
@@ -183,6 +187,7 @@ export interface MissionListSummarySlimWire {
     closeCandidateEmittedAt?: string | null;
     /** Structured lists only. */
     summary?: string;
+    releaseNote?: string;
     outcome?: string;
     outcomeReason?: string;
     version?: number;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adhdev/mesh-shared",
-  "version": "1.0.82-rc.35",
+  "version": "1.0.82-rc.37",
   "description": "ADHDev mesh-shared — pure mesh/git status normalizers shared by daemon-core and web-core",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/assistant-protocol.ts

@@ -27,6 +27,7 @@ export const ASSISTANT_TOOLS = [
     'project_attach_remote',
     'discover_repos',
     'memory',
+    'memory_search',
     'skill_view',
     'skill_manage',
     'project_note',
@@ -38,6 +39,7 @@ export const ASSISTANT_TOOLS = [
     'artifact_read',
     'decision_answer',
     'decision_request',
+    'session_control',
 ] as const
 
 export type AssistantTool = typeof ASSISTANT_TOOLS[number]
@@ -66,6 +68,8 @@ export const ASSISTANT_VERB = {
     projectAttachRemote: 'assistant_project_attach_remote',
     discoverRepos: 'assistant_discover_repos',
     memory: 'assistant_memory',
+    /** Pull-only FTS search over the archive tier (memory design 2026-11-01 §3.4). */
+    memorySearch: 'assistant_memory_search',
     skillView: 'assistant_skill_view',
     skillManage: 'assistant_skill_manage',
     projectNote: 'assistant_project_note',
@@ -77,6 +81,8 @@ export const ASSISTANT_VERB = {
     decisionAnswer: 'assistant_decision_answer',
     /** Register a plain-text question a coordinator put to the owner as a decision item (§5.2). */
     decisionRequest: 'assistant_decision_request',
+    /** Stop / restart / switch the provider of a coordinator, worker or the assistant session (handoff design 2026-11-01 §4). */
+    sessionControl: 'assistant_session_control',
     // assistant-side daemon verbs without a tool of the same name
     launch: 'launch_assistant',
     pendingRelays: 'assistant_pending_relays',
@@ -84,6 +90,12 @@ export const ASSISTANT_VERB = {
     stagedResolve: 'assistant_staged_resolve',
     storeAdmin: 'assistant_store_admin',
     importSkills: 'assistant_import_skills',
+    /** Owner skill list (attach/view counts, save proposals, recent skill metrics); reads move no counter. */
+    skillsList: 'assistant_skills_list',
+    /** Owner: what the assistant remembered recently, with undo handles (memory design §3.2). */
+    memoryDigest: 'assistant_memory_digest',
+    /** Owner: reverse one remembered write or one batch (memory design §3.2). Never an assistant tool. */
+    memoryUndo: 'assistant_memory_undo',
     /** Projects the assistant is following (open relay threads) — list / stop following. */
     threads: 'assistant_threads',
     threadClose: 'assistant_thread_close',
@@ -106,6 +118,7 @@ export const ASSISTANT_TOOL_VERBS: Readonly<Record<AssistantTool, AssistantVerb>
     project_attach_remote: ASSISTANT_VERB.projectAttachRemote,
     discover_repos: ASSISTANT_VERB.discoverRepos,
     memory: ASSISTANT_VERB.memory,
+    memory_search: ASSISTANT_VERB.memorySearch,
     skill_view: ASSISTANT_VERB.skillView,
     skill_manage: ASSISTANT_VERB.skillManage,
     project_note: ASSISTANT_VERB.projectNote,
@@ -115,6 +128,7 @@ export const ASSISTANT_TOOL_VERBS: Readonly<Record<AssistantTool, AssistantVerb>
     artifact_read: ASSISTANT_VERB.artifactRead,
     decision_answer: ASSISTANT_VERB.decisionAnswer,
     decision_request: ASSISTANT_VERB.decisionRequest,
+    session_control: ASSISTANT_VERB.sessionControl,
 }
 
 /**
@@ -123,7 +137,7 @@ export const ASSISTANT_TOOL_VERBS: Readonly<Record<AssistantTool, AssistantVerb>
  * because they cause effects (a coordinator message or launch, a new
  * project), and MCP clients use readOnlyHint to skip confirmation.
  */
-export const ASSISTANT_WRITE_TOOLS: readonly AssistantTool[] = ['project_watch', 'assistant_action', 'memory', 'skill_manage', 'project_note', 'project_send', 'project_add', 'project_attach_remote', 'launch_defaults_set', 'decision_answer', 'decision_request']
+export const ASSISTANT_WRITE_TOOLS: readonly AssistantTool[] = ['project_watch', 'assistant_action', 'memory', 'skill_manage', 'project_note', 'project_send', 'project_add', 'project_attach_remote', 'launch_defaults_set', 'decision_answer', 'decision_request', 'session_control']
 
 /** Owner-only verbs: never reachable from the assistant's MCP server (no `ipc`). */
 export const ASSISTANT_OWNER_VERBS: readonly AssistantVerb[] = [
@@ -131,12 +145,16 @@ export const ASSISTANT_OWNER_VERBS: readonly AssistantVerb[] = [
     ASSISTANT_VERB.stagedResolve,
     ASSISTANT_VERB.storeAdmin,
     ASSISTANT_VERB.importSkills,
+    ASSISTANT_VERB.skillsList,
+    ASSISTANT_VERB.memoryDigest,
+    ASSISTANT_VERB.memoryUndo,
     ASSISTANT_VERB.threadClose,
 ]
 
 /** The only assistant verbs accepted while an idle review turn is open (§4.10.7). */
 export const ASSISTANT_REVIEW_TURN_VERBS: readonly AssistantVerb[] = [
     ASSISTANT_VERB.memory,
+    ASSISTANT_VERB.memorySearch,
     ASSISTANT_VERB.skillView,
     ASSISTANT_VERB.skillManage,
     ASSISTANT_VERB.projectNote,

package/src/index.ts

@@ -42,6 +42,8 @@ export * from './turn-ipc'
 export * from './path-ownership'
 export * from './mission-brief'
 export * from './mission-items'
+export * from './mission-git-state'
+export * from './release'
 export * from './decision-push-relay'
 export * from './keyed-doc-delta'
 export * from './provider-approval'

package/src/launch-defaults.ts

@@ -24,6 +24,8 @@ export interface LaunchDefaultEntry extends LaunchDefaultSelection {
     revision: number;
     setBy: 'owner' | 'assistant';
     setAt: number;
+    /** Ordered quota-failover alternatives (<= 3, distinct providers). Absent = none. */
+    fallback?: LaunchDefaultSelection[];
 }
 export interface LaunchDefaultChange {
     at: number;

package/src/mesh-tool-names.ts

@@ -27,6 +27,7 @@ export const CANONICAL_MESH_TOOL_NAMES = [
     'mesh_enqueue_task',
     'mesh_view_queue',
     'mesh_queue_cancel',
+    'mesh_direct_cancel',
     'mesh_queue_requeue',
     'mesh_queue_revise',
     'mesh_send_task',
@@ -49,6 +50,7 @@ export const CANONICAL_MESH_TOOL_NAMES = [
     'mesh_attach_remote',
     'mesh_clone_node',
     'mesh_remove_node',
+    'mesh_retry_node_bootstrap',
     'mesh_cleanup_worktree_nodes',
     'mesh_refine_node',
     'mesh_refine_batch',
@@ -65,6 +67,12 @@ export const CANONICAL_MESH_TOOL_NAMES = [
     'mesh_reconcile_ledger',
     'mesh_mission_upsert',
     'mesh_mission_list',
+    'mesh_mission_git_eval',
+    'mesh_release_upsert',
+    'mesh_release_scope',
+    'mesh_release_list',
+    'mesh_release_record_deploy',
+    'mesh_release_changelog_draft',
     'mesh_review_inbox',
     'mesh_node_slots',
     'driver_list',

package/src/mission-git-state.ts

@@ -0,0 +1,112 @@
+/**
+ * mission-git-state — types and the pure aggregation for "did this mission's
+ * referenced commits/branches land on the default branch?"
+ * (docs/design/2026-11-01-mission-git-refs.md §3).
+ *
+ * The facts come from the daemon opening git objects itself (never from
+ * commit-message text, branch-name similarity or worker prose). `landed` means
+ * ONLY "the referenced changes are on the base"; it never implies live
+ * acceptance, mission completion or that remaining items are done, and it is
+ * never used to change a mission's status.
+ *
+ * Dependency-free leaf: plain data in, plain data out.
+ */
+
+/** Per-ref verdict. `unknown` is never folded into `not_contained` nor promoted to `contained_*`. */
+export const MISSION_REF_GIT_STATUSES = ['contained_ancestor', 'contained_patch_equivalent', 'not_contained', 'unknown'] as const
+export type MissionRefGitStatus = typeof MISSION_REF_GIT_STATUSES[number]
+
+/** How a contained verdict was reached. */
+export const MISSION_REF_GIT_METHODS = ['ancestry', 'cherry', 'residual_patch'] as const
+export type MissionRefGitMethod = typeof MISSION_REF_GIT_METHODS[number]
+
+/** Mission-level projection. */
+export const MISSION_GIT_STATES = ['no_refs', 'landed', 'partial', 'not_landed', 'unknown'] as const
+export type MissionGitStateValue = typeof MISSION_GIT_STATES[number]
+
+export function isMissionRefContained(status: MissionRefGitStatus): boolean {
+    return status === 'contained_ancestor' || status === 'contained_patch_equivalent'
+}
+
+/** Why a ref is `unknown` (detail.unknownReason). Free-form strings are tolerated on read. */
+export type MissionRefUnknownReason =
+    | 'object_missing'
+    | 'shallow'
+    | 'undeterminable'
+    | 'base_missing'
+    | 'branch_not_found'
+    | 'base_branch_ref'
+    | 'gitlink_undeterminable'
+    | 'merge_tree_failed'
+    | 'node_offline'
+    | 'no_repo'
+    | 'budget'
+    | 'not_a_git_ref'
+
+export interface MissionRefGitDetail {
+    reasonCode?: string
+    unknownReason?: MissionRefUnknownReason | string
+    /** `modified_since_landing_possible`: main later touched the same lines — shown as a hint, not a verdict. */
+    note?: string
+    nodeId?: string
+    residualPatchId?: string
+    ahead?: number
+    behind?: number
+}
+
+/** One stored per-ref evaluation (a row of `mesh_mission_ref_evals`). */
+export interface MissionRefGitEval {
+    itemId: string
+    /** `kind:repo:value` (normalized, lower-case SHA). */
+    refKey: string
+    kind: 'commit' | 'branch'
+    value: string
+    repo?: string
+    /** Branch refs: the SHA the name resolved to at first evaluation (re-evaluation keeps using it). */
+    pinnedSha?: string
+    baseRef: string
+    baseSha?: string
+    status: MissionRefGitStatus
+    method?: MissionRefGitMethod
+    detail?: MissionRefGitDetail
+    evaluatedAt: string
+}
+
+export interface MissionGitState {
+    missionId: string
+    state: MissionGitStateValue
+    /** `partial` only: some refs were `unknown` (not just `not_contained`). */
+    partialUnknown: boolean
+    counts: { total: number; contained: number; notContained: number; unknown: number }
+    /** Base the newest evaluation compared against. */
+    baseRef?: string
+    baseSha?: string
+    /** Oldest `evaluatedAt` among the refs (the freshness floor). */
+    evaluatedAt?: string
+    /** True when no row exists yet / the rows are older than the TTL — a refresh was (or can be) triggered. */
+    stale: boolean
+    refs: MissionRefGitEval[]
+}
+
+/**
+ * Aggregate per-ref statuses (design §3.3):
+ *  - none → `no_refs`; all contained → `landed`; some contained → `partial`
+ *    (`partialUnknown` when any of the rest is `unknown`);
+ *  - none contained: all `not_contained` → `not_landed`, otherwise `unknown`.
+ */
+export function aggregateMissionGitState(statuses: readonly MissionRefGitStatus[]): {
+    state: MissionGitStateValue
+    partialUnknown: boolean
+    counts: MissionGitState['counts']
+} {
+    const total = statuses.length
+    const contained = statuses.filter(isMissionRefContained).length
+    const notContained = statuses.filter(s => s === 'not_contained').length
+    const unknown = statuses.filter(s => s === 'unknown').length
+    const counts = { total, contained, notContained, unknown }
+    if (total === 0) return { state: 'no_refs', partialUnknown: false, counts }
+    if (contained === total) return { state: 'landed', partialUnknown: false, counts }
+    if (contained > 0) return { state: 'partial', partialUnknown: unknown > 0, counts }
+    if (notContained === total) return { state: 'not_landed', partialUnknown: false, counts }
+    return { state: 'unknown', partialUnknown: false, counts }
+}

package/src/mission-items.ts

@@ -16,10 +16,10 @@
 export const MISSION_ITEM_KINDS = ['remaining', 'live_check', 'decision', 'evidence'] as const
 export type MissionItemKind = typeof MISSION_ITEM_KINDS[number]
 
-export const MISSION_ITEM_STATES = ['open', 'done', 'dropped', 'moved', 'answered', 'expired', 'withdrawn', 'superseded'] as const
+export const MISSION_ITEM_STATES = ['open', 'done', 'failed', 'dropped', 'moved', 'answered', 'expired', 'withdrawn', 'superseded'] as const
 export type MissionItemState = typeof MISSION_ITEM_STATES[number]
 
-/** States a coordinator/worker may SET through items_update, per kind. `answered`/`expired` are daemon-owned. */
+/** States a coordinator/worker may SET through items_update, per kind. `answered`/`expired`/`failed` (owner live-check verdict) are daemon-owned. */
 export const COORDINATOR_SETTABLE_ITEM_STATES: Readonly<Record<MissionItemKind, readonly MissionItemState[]>> = {
     remaining: ['open', 'done', 'dropped'],
     live_check: ['open', 'done', 'dropped'],

package/src/node-facts.ts

@@ -234,6 +234,24 @@ export interface MeshNodeFacts {
      * Booleans keyed by provider type only — no free text, no credentials.
      */
     providerEnablement?: Record<string, MeshNodeFactsProviderEnablement>
+    /**
+     * The reporting machine's stored quota RESERVE (daemon-core
+     * `ADHDevConfig.quotaReserve`, sparse, ≤ 2 KB, migration audit trail
+     * stripped): the "how much quota to leave for the person" bar that the
+     * coordinator's launch gate applies to THIS machine's snapshots.
+     * ★ABSENT means "this node did not tell us" (older daemon) and resolves to
+     * the code defaults — the same fail-open direction as before the field
+     * existed. Percentages, durations and hashed account keys only; no free
+     * text, no emails. Resolve with daemon-core `resolveQuotaReserve`; never
+     * read its fields directly.
+     */
+    quotaReserve?: {
+        version: 1
+        defaults?: Record<string, number>
+        pools?: Record<string, Record<string, number>>
+        accounts?: Record<string, Record<string, Record<string, number>>>
+        updatedAt?: string
+    }
     /** Future fields ride through opaquely — do not enumerate them in relays. */
     [extra: string]: unknown
 }