@jungjaehoon/mama-os 0.22.0 → 0.23.0

package/dist/operator/worker-run.js

@@ -0,0 +1,64 @@
+"use strict";
+/**
+ * workerRun - the operator's worker primitive (plan: owner-console v6 S0-T1).
+ *
+ * A worker is NOT a standing agent identity and NOT a delegate/native-Task
+ * subagent: it is a briefed, FRESH-session lane run - the same substrate the
+ * report lane already uses (LaneManager serialization, loud failure, result
+ * returned to the caller, gateway calls audited).
+ *
+ * CALLER CONTRACT (deadlock seal):
+ * - Callers must be HOST CODE running OUTSIDE any lane (scheduler ticks,
+ *   work-order consumers, forwarder hooks).
+ * - NEVER call workerRun from inside an active lane run (an LLM run's tool
+ *   handler, a report run, another worker): the parent holds its global lane
+ *   slot for its whole duration, so a nested awaited lane run can queue
+ *   behind its own parent forever.
+ *
+ * Concurrency: same-kind runs serialize on the `operator:worker:<kind>`
+ * session lane; ALL operator work (reports + workers) serializes on the
+ * 'operator' global lane, which is separate from chat 'main' so long worker
+ * runs never block owner replies.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildWorkerSessionKey = buildWorkerSessionKey;
+exports.workerRun = workerRun;
+const KIND_PATTERN = /^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/;
+function buildWorkerSessionKey(kind) {
+    return `operator:worker:${kind}`;
+}
+/**
+ * Run a briefed worker on its own operator lane and return its output.
+ * Throws loudly on invalid input, runner failure, or an empty response -
+ * a worker never ends silently.
+ */
+async function workerRun(runner, { kind, brief, input, runOptions }) {
+    if (!KIND_PATTERN.test(kind)) {
+        throw new Error(`[worker-run] invalid worker kind "${kind}" (expected kebab-case)`);
+    }
+    if (!brief.trim()) {
+        throw new Error(`[worker-run] empty brief for worker kind "${kind}"`);
+    }
+    if (!input.trim()) {
+        throw new Error(`[worker-run] empty input for worker kind "${kind}"`);
+    }
+    const prompt = `${brief.trim()}\n\n---\n\nWork order:\n${input.trim()}`;
+    const result = await runner.runWithContent([{ type: 'text', text: prompt }], {
+        // runOptions FIRST: identity fields below always win (plan E7/G3).
+        ...(runOptions ?? {}),
+        sessionKey: buildWorkerSessionKey(kind),
+        // freshSession pool reset keys on source+channelId (agent-loop.ts) -
+        // both MUST be explicit per call or another lane's pool entry gets reset.
+        source: 'operator',
+        channelId: `worker:${kind}`,
+        // Workers are stateless: continuity lives in the brief + artifacts,
+        // never in session accumulation (owner principle: session = cache).
+        freshSession: true,
+    });
+    const response = result.response?.trim();
+    if (!response) {
+        throw new Error(`[worker-run] worker "${kind}" returned an empty response`);
+    }
+    return response;
+}
+//# sourceMappingURL=worker-run.js.map

package/dist/operator/worker-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-run.js","sourceRoot":"","sources":["../../src/operator/worker-run.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;AAwCH,sDAEC;AAOD,8BAkCC;AA7CD,MAAM,YAAY,GAAG,iCAAiC,CAAC;AAEvD,SAAgB,qBAAqB,CAAC,IAAY;IAChD,OAAO,mBAAmB,IAAI,EAAE,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,SAAS,CAC7B,MAAoB,EACpB,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAkB;IAElD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,yBAAyB,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,6CAA6C,IAAI,GAAG,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,6CAA6C,IAAI,GAAG,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,2BAA2B,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;IAExE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE;QAC3E,mEAAmE;QACnE,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;QACrB,UAAU,EAAE,qBAAqB,CAAC,IAAI,CAAC;QACvC,qEAAqE;QACrE,0EAA0E;QAC1E,MAAM,EAAE,UAAU;QAClB,SAAS,EAAE,UAAU,IAAI,EAAE;QAC3B,oEAAoE;QACpE,oEAAoE;QACpE,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,8BAA8B,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/operator/workorder-consumer.d.ts

@@ -0,0 +1,118 @@
+/**
+ * WorkOrderConsumer - the single host-code consumer of system workorders
+ * (Stage 2, plan S2-T3).
+ *
+ * A dedicated interval timer (60s default) claims pending workorders from the
+ * TaskLedger and runs each through workerRun on the operator lane. It runs
+ * UNCONDITIONALLY of MAMA_TRIGGER_LOOP (the publishers are unconditional, so
+ * coupling consumption to an opt-in loop would strand every workorder - plan
+ * A1 BLOCKER), gated only by MAMA_STAGE2_WORKORDERS=shadow|on.
+ *
+ * Serial consumption: one claim at a time, awaited to completion, with a tick
+ * re-entrancy guard (a 260s board run spans 4+ ticks - overlapping ticks skip,
+ * plan G4). Blocking bound = the runner's per-request timeout x maxTurns; no
+ * consumer-level watchdog (plan N2).
+ *
+ * Failure policy (plan G5/M4): failWorkOrder marks the row, then per-kind
+ * maxAttempts decides requeue (fresh row, attempts+1, same occurrence key)
+ * vs retries-exhausted (owner alarm, deduped per kind). Boot recovery routes
+ * stale in_progress claims (crash artifacts) through the SAME policy, with a
+ * separate stale-claim alarm.
+ *
+ * Completion hooks (plan E3/E4): per-kind before/after seams re-home the
+ * post-run host effects the legacy closures owned (board bracket
+ * verification, promotion event re-emission, wiki noUpdate reading). Hook
+ * errors are LOUD but never fail a completed run (observe, never block).
+ */
+import type { WorkOrderKind, WorkOrderRecord, EnqueueWorkOrderInput } from './task-ledger.js';
+import { type WorkerRunner } from './worker-run.js';
+export interface WorkOrderLedgerPort {
+    claimNextWorkOrder(): WorkOrderRecord | null;
+    completeWorkOrder(id: number): void;
+    failWorkOrder(id: number, reason: string): void;
+    /** Atomic fail+replacement (retry) - one transaction (PR bot round). */
+    requeueWorkOrder(wo: WorkOrderRecord, reason: string): WorkOrderRecord;
+    enqueueWorkOrder(order: EnqueueWorkOrderInput): WorkOrderRecord;
+    listStaleClaims(): WorkOrderRecord[];
+    countPendingWorkOrders(): number;
+}
+/** Active owner alarm channel (telegram via the ops sink; may be unconfigured). */
+export interface OpsAlarmSink {
+    configured: boolean;
+    send(line: string): Promise<void>;
+}
+export interface WorkOrderHook {
+    /** Bracket 'before' state (e.g. verifier snapshot at claim time). */
+    before?: (wo: WorkOrderRecord) => unknown;
+    /** Post-run effects (verification, event re-emission, outcome reading). */
+    after?: (wo: WorkOrderRecord, response: string, beforeState: unknown) => void;
+}
+export interface WorkOrderConsumerEvent {
+    type: 'complete' | 'failed' | 'requeued' | 'exhausted' | 'stale-claim';
+    workKind: WorkOrderKind;
+    workOrderId: number;
+    reason?: string;
+}
+export interface WorkOrderConsumerDeps {
+    ledger: WorkOrderLedgerPort;
+    runner: WorkerRunner;
+    /** null = brief missing -> the workorder fails loudly (never a silent skip). */
+    loadBrief: (kind: WorkOrderKind) => string | null;
+    /** Passive owner surface (AgentNoticeQueue via MessageRouter accessor). */
+    noticeOwner: (summary: string) => void;
+    opsAlarm: OpsAlarmSink;
+    /** Telemetry seam (agent_activity / eventBus) - optional. */
+    onEvent?: (event: WorkOrderConsumerEvent) => void;
+    /**
+     * Per-order extra run options (Stage-2 shadow: the board capture-publisher
+     * override). A THROW here fails the order loudly - at shadow, a missing
+     * capture publisher must never fall through to a live publish (plan T4 AC).
+     */
+    runOptionsFor?: (wo: WorkOrderRecord) => Record<string, unknown> | undefined;
+    log?: (line: string) => void;
+    tickMs?: number;
+    now?: () => number;
+}
+/** Per-kind retry budget: attempts start at 1; board/promotion self-heal on
+ *  the next publish cycle, wiki events do not re-fire so it retries once. */
+export declare const WORKORDER_MAX_ATTEMPTS: Record<WorkOrderKind, number>;
+export declare class WorkOrderConsumer {
+    private readonly deps;
+    private readonly hooks;
+    private readonly lastAlarmAt;
+    private timer;
+    private consuming;
+    private activeTick;
+    constructor(deps: WorkOrderConsumerDeps);
+    registerHook(kind: WorkOrderKind, hook: WorkOrderHook): void;
+    /**
+     * Boot recovery (plan C4/M4): in_progress system rows are crash artifacts
+     * (single serial consumer). Each routes through the SAME failure policy
+     * (a crashed wiki batch requeues once; board/promotion do not), plus a
+     * separate stale-claim alarm.
+     */
+    bootRecover(): void;
+    start(): void;
+    isStarted(): boolean;
+    /** Graceful: awaits an in-flight tick so shutdown does not race the
+     *  operator-DB close into "database is not open" noise (review m4). */
+    stop(): Promise<void>;
+    /**
+     * Drain pending workorders serially: claim -> await -> next claim. Returns
+     * 'skipped' when a previous tick is still consuming (re-entrancy guard,
+     * plan G4) - long runs span multiple tick firings.
+     */
+    tick(): Promise<'drained' | 'skipped'>;
+    private runOne;
+    /**
+     * Failure policy layer (plan G5): mark failed, then requeue (attempts+1,
+     * fresh row, same occurrence key - the terminal row freed it) or declare
+     * retries-exhausted with an owner alarm.
+     */
+    private handleFailure;
+    /** Owner alarm: passive notice + active telegram, deduped per kind (6h). */
+    private alarm;
+    private emitEvent;
+    private log;
+}
+//# sourceMappingURL=workorder-consumer.d.ts.map

package/dist/operator/workorder-consumer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workorder-consumer.d.ts","sourceRoot":"","sources":["../../src/operator/workorder-consumer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAC9F,OAAO,EAAa,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/D,MAAM,WAAW,mBAAmB;IAClC,kBAAkB,IAAI,eAAe,GAAG,IAAI,CAAC;IAC7C,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAChD,wEAAwE;IACxE,gBAAgB,CAAC,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,GAAG,eAAe,CAAC;IACvE,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,eAAe,CAAC;IAChE,eAAe,IAAI,eAAe,EAAE,CAAC;IACrC,sBAAsB,IAAI,MAAM,CAAC;CAClC;AAED,mFAAmF;AACnF,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,OAAO,CAAC;IACpB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,aAAa;IAC5B,qEAAqE;IACrE,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,eAAe,KAAK,OAAO,CAAC;IAC1C,2EAA2E;IAC3E,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,KAAK,IAAI,CAAC;CAC/E;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,UAAU,GAAG,QAAQ,GAAG,UAAU,GAAG,WAAW,GAAG,aAAa,CAAC;IACvE,QAAQ,EAAE,aAAa,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,mBAAmB,CAAC;IAC5B,MAAM,EAAE,YAAY,CAAC;IACrB,gFAAgF;IAChF,SAAS,EAAE,CAAC,IAAI,EAAE,aAAa,KAAK,MAAM,GAAG,IAAI,CAAC;IAClD,2EAA2E;IAC3E,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACvC,QAAQ,EAAE,YAAY,CAAC;IACvB,6DAA6D;IAC7D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,sBAAsB,KAAK,IAAI,CAAC;IAClD;;;;OAIG;IACH,aAAa,CAAC,EAAE,CAAC,EAAE,EAAE,eAAe,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC7E,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED;6EAC6E;AAC7E,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAIhE,CAAC;AAKF,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAwB;IAC7C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA2C;IACjE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoC;IAChE,OAAO,CAAC,KAAK,CAA+B;IAC5C,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,UAAU,CAAiC;gBAEvC,IAAI,EAAE,qBAAqB;IAIvC,YAAY,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,GAAG,IAAI;IAO5D;;;;;OAKG;IACH,WAAW,IAAI,IAAI;IASnB,KAAK,IAAI,IAAI;IAkBb,SAAS,IAAI,OAAO;IAIpB;2EACuE;IACjE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAW3B;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;YAoB9B,MAAM;IA4DpB;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAwBrB,4EAA4E;IAC5E,OAAO,CAAC,KAAK;IAsBb,OAAO,CAAC,SAAS;IAQjB,OAAO,CAAC,GAAG;CAGZ"}

package/dist/operator/workorder-consumer.js

@@ -0,0 +1,248 @@
+"use strict";
+/**
+ * WorkOrderConsumer - the single host-code consumer of system workorders
+ * (Stage 2, plan S2-T3).
+ *
+ * A dedicated interval timer (60s default) claims pending workorders from the
+ * TaskLedger and runs each through workerRun on the operator lane. It runs
+ * UNCONDITIONALLY of MAMA_TRIGGER_LOOP (the publishers are unconditional, so
+ * coupling consumption to an opt-in loop would strand every workorder - plan
+ * A1 BLOCKER), gated only by MAMA_STAGE2_WORKORDERS=shadow|on.
+ *
+ * Serial consumption: one claim at a time, awaited to completion, with a tick
+ * re-entrancy guard (a 260s board run spans 4+ ticks - overlapping ticks skip,
+ * plan G4). Blocking bound = the runner's per-request timeout x maxTurns; no
+ * consumer-level watchdog (plan N2).
+ *
+ * Failure policy (plan G5/M4): failWorkOrder marks the row, then per-kind
+ * maxAttempts decides requeue (fresh row, attempts+1, same occurrence key)
+ * vs retries-exhausted (owner alarm, deduped per kind). Boot recovery routes
+ * stale in_progress claims (crash artifacts) through the SAME policy, with a
+ * separate stale-claim alarm.
+ *
+ * Completion hooks (plan E3/E4): per-kind before/after seams re-home the
+ * post-run host effects the legacy closures owned (board bracket
+ * verification, promotion event re-emission, wiki noUpdate reading). Hook
+ * errors are LOUD but never fail a completed run (observe, never block).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkOrderConsumer = exports.WORKORDER_MAX_ATTEMPTS = void 0;
+const worker_run_js_1 = require("./worker-run.js");
+/** Per-kind retry budget: attempts start at 1; board/promotion self-heal on
+ *  the next publish cycle, wiki events do not re-fire so it retries once. */
+exports.WORKORDER_MAX_ATTEMPTS = {
+    board: 1,
+    wiki: 2,
+    'memory-curation': 1,
+};
+const DEFAULT_TICK_MS = 60_000;
+const ALARM_DEDUP_MS = 6 * 60 * 60 * 1000;
+class WorkOrderConsumer {
+    deps;
+    hooks = new Map();
+    lastAlarmAt = new Map();
+    timer = null;
+    consuming = false;
+    activeTick = null;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    registerHook(kind, hook) {
+        if (this.hooks.has(kind)) {
+            throw new Error(`[workorder-consumer] hook for '${kind}' already registered`);
+        }
+        this.hooks.set(kind, hook);
+    }
+    /**
+     * Boot recovery (plan C4/M4): in_progress system rows are crash artifacts
+     * (single serial consumer). Each routes through the SAME failure policy
+     * (a crashed wiki batch requeues once; board/promotion do not), plus a
+     * separate stale-claim alarm.
+     */
+    bootRecover() {
+        for (const wo of this.deps.ledger.listStaleClaims()) {
+            this.log(`[workorder-consumer] stale claim recovered: ${wo.workKind}#${wo.id}`);
+            this.emitEvent({ type: 'stale-claim', workKind: wo.workKind, workOrderId: wo.id });
+            this.alarm(wo.workKind, `workorder ${wo.workKind}#${wo.id} stale claim (daemon crash?)`);
+            this.handleFailure(wo, 'stale-claim');
+        }
+    }
+    start() {
+        if (this.timer) {
+            throw new Error('[workorder-consumer] already started');
+        }
+        const tickMs = this.deps.tickMs ?? DEFAULT_TICK_MS;
+        this.timer = setInterval(() => {
+            // Only track a REAL tick: during a long run subsequent firings resolve
+            // 'skipped' instantly and would OVERWRITE activeTick - stop() would
+            // then await the skipped promise while the true tick still runs and
+            // the DB closes under it (round-2 review N1).
+            if (!this.consuming) {
+                this.activeTick = this.tick();
+            }
+        }, tickMs);
+        this.timer.unref?.();
+        this.log(`[workorder-consumer] started (tick every ${tickMs}ms)`);
+    }
+    isStarted() {
+        return this.timer !== null;
+    }
+    /** Graceful: awaits an in-flight tick so shutdown does not race the
+     *  operator-DB close into "database is not open" noise (review m4). */
+    async stop() {
+        if (this.timer) {
+            clearInterval(this.timer);
+            this.timer = null;
+        }
+        if (this.activeTick) {
+            await this.activeTick.catch(() => { });
+            this.activeTick = null;
+        }
+    }
+    /**
+     * Drain pending workorders serially: claim -> await -> next claim. Returns
+     * 'skipped' when a previous tick is still consuming (re-entrancy guard,
+     * plan G4) - long runs span multiple tick firings.
+     */
+    async tick() {
+        if (this.consuming)
+            return 'skipped';
+        this.consuming = true;
+        try {
+            // Drain is BOUNDED by the pending count at tick start: a row requeued
+            // by this tick's failure policy waits for the NEXT tick (natural
+            // backoff - otherwise a failing order retries in a tight loop).
+            let remaining = this.deps.ledger.countPendingWorkOrders();
+            while (remaining > 0) {
+                const wo = this.deps.ledger.claimNextWorkOrder();
+                if (!wo)
+                    break;
+                await this.runOne(wo);
+                remaining--;
+            }
+            return 'drained';
+        }
+        finally {
+            this.consuming = false;
+        }
+    }
+    async runOne(wo) {
+        let brief;
+        try {
+            brief = this.deps.loadBrief(wo.workKind);
+        }
+        catch (err) {
+            // I/O errors (permissions etc.) must fail THIS order, not abort the
+            // whole tick with a stranded claim (PR bot round).
+            this.handleFailure(wo, `brief-load-failed: ${errMessage(err)}`);
+            return;
+        }
+        if (!brief || !brief.trim()) {
+            this.log(`[workorder-consumer] brief missing for '${wo.workKind}' - failing #${wo.id}`);
+            this.handleFailure(wo, 'brief-missing');
+            return;
+        }
+        const hook = this.hooks.get(wo.workKind);
+        let beforeState;
+        if (hook?.before) {
+            try {
+                beforeState = hook.before(wo);
+            }
+            catch (err) {
+                // A broken before-hook must not strand the claim: fail the order loudly.
+                this.handleFailure(wo, `before-hook: ${errMessage(err)}`);
+                return;
+            }
+        }
+        let response;
+        try {
+            response = await (0, worker_run_js_1.workerRun)(this.deps.runner, {
+                kind: wo.workKind,
+                brief,
+                input: JSON.stringify(wo.payload),
+                // Inside the try: a runOptionsFor throw (e.g. shadow capture publisher
+                // missing) fails the order instead of running with the live publisher.
+                runOptions: this.deps.runOptionsFor?.(wo),
+            });
+        }
+        catch (err) {
+            this.handleFailure(wo, errMessage(err));
+            return;
+        }
+        if (hook?.after) {
+            try {
+                hook.after(wo, response, beforeState);
+            }
+            catch (err) {
+                // Observe, never block: a verification/emission failure is loud but
+                // does not fail a run that completed.
+                this.log(`[workorder-consumer] after-hook error (${wo.workKind}#${wo.id}): ${errMessage(err)}`);
+            }
+        }
+        this.deps.ledger.completeWorkOrder(wo.id);
+        this.emitEvent({ type: 'complete', workKind: wo.workKind, workOrderId: wo.id });
+        this.log(`[workorder-consumer] completed ${wo.workKind}#${wo.id}`);
+    }
+    /**
+     * Failure policy layer (plan G5): mark failed, then requeue (attempts+1,
+     * fresh row, same occurrence key - the terminal row freed it) or declare
+     * retries-exhausted with an owner alarm.
+     */
+    handleFailure(wo, reason) {
+        const maxAttempts = exports.WORKORDER_MAX_ATTEMPTS[wo.workKind];
+        if (wo.payload.attempts < maxAttempts) {
+            // Atomic fail+requeue (PR bot round): a crash between separate fail and
+            // enqueue calls would silently lose the retry.
+            const requeued = this.deps.ledger.requeueWorkOrder(wo, reason);
+            this.emitEvent({ type: 'failed', workKind: wo.workKind, workOrderId: wo.id, reason });
+            this.emitEvent({ type: 'requeued', workKind: wo.workKind, workOrderId: requeued.id });
+            this.log(`[workorder-consumer] failed ${wo.workKind}#${wo.id} (${reason}) -> requeued #${requeued.id} (attempt ${wo.payload.attempts + 1}/${maxAttempts})`);
+            return;
+        }
+        this.deps.ledger.failWorkOrder(wo.id, reason);
+        this.emitEvent({ type: 'failed', workKind: wo.workKind, workOrderId: wo.id, reason });
+        this.log(`[workorder-consumer] failed ${wo.workKind}#${wo.id}: ${reason}`);
+        this.emitEvent({ type: 'exhausted', workKind: wo.workKind, workOrderId: wo.id, reason });
+        this.alarm(wo.workKind, `workorder ${wo.workKind}#${wo.id} retries exhausted (${wo.payload.attempts}/${maxAttempts}): ${reason}`);
+    }
+    /** Owner alarm: passive notice + active telegram, deduped per kind (6h). */
+    alarm(kind, message) {
+        const now = this.deps.now?.() ?? Date.now();
+        const last = this.lastAlarmAt.get(kind);
+        if (last !== undefined && now - last < ALARM_DEDUP_MS) {
+            this.log(`[workorder-consumer] alarm deduped (${kind}): ${message}`);
+            return;
+        }
+        this.lastAlarmAt.set(kind, now);
+        try {
+            this.deps.noticeOwner(message);
+        }
+        catch (err) {
+            this.log(`[workorder-consumer] notice enqueue failed: ${errMessage(err)}`);
+        }
+        if (this.deps.opsAlarm.configured) {
+            void this.deps.opsAlarm.send(`⚠️ ${message}`).catch((err) => {
+                this.log(`[workorder-consumer] active alarm send failed: ${errMessage(err)}`);
+            });
+        }
+        else {
+            this.log(`[workorder-consumer] active alarm unconfigured - log-only: ${message}`);
+        }
+    }
+    emitEvent(event) {
+        try {
+            this.deps.onEvent?.(event);
+        }
+        catch {
+            /* telemetry only */
+        }
+    }
+    log(line) {
+        (this.deps.log ?? console.log)(line);
+    }
+}
+exports.WorkOrderConsumer = WorkOrderConsumer;
+function errMessage(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+//# sourceMappingURL=workorder-consumer.js.map

package/dist/operator/workorder-consumer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workorder-consumer.js","sourceRoot":"","sources":["../../src/operator/workorder-consumer.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;;;AAGH,mDAA+D;AAsD/D;6EAC6E;AAChE,QAAA,sBAAsB,GAAkC;IACnE,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,iBAAiB,EAAE,CAAC;CACrB,CAAC;AAEF,MAAM,eAAe,GAAG,MAAM,CAAC;AAC/B,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE1C,MAAa,iBAAiB;IACX,IAAI,CAAwB;IAC5B,KAAK,GAAG,IAAI,GAAG,EAAgC,CAAC;IAChD,WAAW,GAAG,IAAI,GAAG,EAAyB,CAAC;IACxD,KAAK,GAA0B,IAAI,CAAC;IACpC,SAAS,GAAG,KAAK,CAAC;IAClB,UAAU,GAA4B,IAAI,CAAC;IAEnD,YAAY,IAA2B;QACrC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,YAAY,CAAC,IAAmB,EAAE,IAAmB;QACnD,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,sBAAsB,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED;;;;;OAKG;IACH,WAAW;QACT,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE,CAAC;YACpD,IAAI,CAAC,GAAG,CAAC,+CAA+C,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAChF,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACnF,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,8BAA8B,CAAC,CAAC;YACzF,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC;QACnD,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,uEAAuE;YACvE,oEAAoE;YACpE,oEAAoE;YACpE,8CAA8C;YAC9C,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,CAAC;QACH,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QACrB,IAAI,CAAC,GAAG,CAAC,4CAA4C,MAAM,KAAK,CAAC,CAAC;IACpE,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC;IAC7B,CAAC;IAED;2EACuE;IACvE,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACtC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC;QACrC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC;YACH,sEAAsE;YACtE,iEAAiE;YACjE,gEAAgE;YAChE,IAAI,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;YAC1D,OAAO,SAAS,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;gBACjD,IAAI,CAAC,EAAE;oBAAE,MAAM;gBACf,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACtB,SAAS,EAAE,CAAC;YACd,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACzB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,EAAmB;QACtC,IAAI,KAAoB,CAAC;QACzB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oEAAoE;YACpE,mDAAmD;YACnD,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,sBAAsB,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,CAAC,2CAA2C,EAAE,CAAC,QAAQ,gBAAgB,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACxF,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,WAAoB,CAAC;QACzB,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAChC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,yEAAyE;gBACzE,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,gBAAgB,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC1D,OAAO;YACT,CAAC;QACH,CAAC;QAED,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAA,yBAAS,EAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAC3C,IAAI,EAAE,EAAE,CAAC,QAAQ;gBACjB,KAAK;gBACL,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,CAAC;gBACjC,uEAAuE;gBACvE,uEAAuE;gBACvE,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,EAAE,CAAC;aAC1C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QAED,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;YACxC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,oEAAoE;gBACpE,sCAAsC;gBACtC,IAAI,CAAC,GAAG,CACN,0CAA0C,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC,GAAG,CAAC,EAAE,CACtF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC,GAAG,CAAC,kCAAkC,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACrE,CAAC;IAED;;;;OAIG;IACK,aAAa,CAAC,EAAmB,EAAE,MAAc;QACvD,MAAM,WAAW,GAAG,8BAAsB,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,GAAG,WAAW,EAAE,CAAC;YACtC,wEAAwE;YACxE,+CAA+C;YAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC/D,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACtF,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YACtF,IAAI,CAAC,GAAG,CACN,+BAA+B,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,KAAK,MAAM,kBAAkB,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,IAAI,WAAW,GAAG,CAClJ,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACtF,IAAI,CAAC,GAAG,CAAC,+BAA+B,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACzF,IAAI,CAAC,KAAK,CACR,EAAE,CAAC,QAAQ,EACX,aAAa,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,uBAAuB,EAAE,CAAC,OAAO,CAAC,QAAQ,IAAI,WAAW,MAAM,MAAM,EAAE,CACzG,CAAC;IACJ,CAAC;IAED,4EAA4E;IACpE,KAAK,CAAC,IAAmB,EAAE,OAAe;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,GAAG,IAAI,GAAG,cAAc,EAAE,CAAC;YACtD,IAAI,CAAC,GAAG,CAAC,uCAAuC,IAAI,MAAM,OAAO,EAAE,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,+CAA+C,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YAClC,KAAK,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC1D,IAAI,CAAC,GAAG,CAAC,kDAAkD,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChF,CAAC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,8DAA8D,OAAO,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,KAA6B;QAC7C,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;IACH,CAAC;IAEO,GAAG,CAAC,IAAY;QACtB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;CACF;AAzND,8CAyNC;AAED,SAAS,UAAU,CAAC,GAAY;IAC9B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC"}

package/dist/operator/workorder-hooks.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Extracted, testable pieces of the Stage-2 per-kind completion hooks
+ * (plan S2-T3; extraction demanded by implementation review round 1 - the
+ * hook bodies lived in registerApiRoutes closures where nothing could prove
+ * them, which is the green-test-trap class the plan bans).
+ *
+ * - buildWorkerTraceQueries: the G1 re-keyed verifier trace queries. Worker
+ *   runs log gateway_tool_call rows with the worker's identity, NOT
+ *   agent_id='dashboard-agent'; the ONLY schema-supported key is the details
+ *   JSON (agent_activity has no channel_id column) - hence json_extract.
+ * - buildPromotionAfterHook: the PROMOTED <n> parse + event re-emission that
+ *   keeps the memory:promoted -> wiki ingress chain alive (plan E4/R7).
+ * - buildWikiAfterHook: outcome reading only.
+ */
+import type { SQLiteDatabase } from '../sqlite.js';
+import type { WorkOrderRecord } from './task-ledger.js';
+export interface WorkerTraceQueries {
+    getTraceMaxId: () => number;
+    countObligatedTraceRowsSince: (maxId: number) => number;
+}
+export declare function buildWorkerTraceQueries(sessionsDb: SQLiteDatabase | undefined, workerChannelId: string): WorkerTraceQueries;
+export interface PromotionHookEvents {
+    emitAgentAction: (action: 'promoted' | 'no_update', target: string) => void;
+    emitMemoryPromoted: (saved: number) => void;
+    log?: (line: string) => void;
+}
+/** The wiki ingress chain's second link: losing this parse severs memory:promoted. */
+export declare function buildPromotionAfterHook(events: PromotionHookEvents): (wo: WorkOrderRecord, response: string) => void;
+export declare function buildWikiAfterHook(log: (line: string) => void): (wo: WorkOrderRecord, response: string) => void;
+//# sourceMappingURL=workorder-hooks.d.ts.map

package/dist/operator/workorder-hooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workorder-hooks.d.ts","sourceRoot":"","sources":["../../src/operator/workorder-hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAIxD,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,MAAM,CAAC;IAC5B,4BAA4B,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;CACzD;AAED,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,cAAc,GAAG,SAAS,EACtC,eAAe,EAAE,MAAM,GACtB,kBAAkB,CA0BpB;AAED,MAAM,WAAW,mBAAmB;IAClC,eAAe,EAAE,CAAC,MAAM,EAAE,UAAU,GAAG,WAAW,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5E,kBAAkB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5C,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,sFAAsF;AACtF,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,mBAAmB,GAC1B,CAAC,EAAE,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAcjD;AAED,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAC1B,CAAC,EAAE,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAQjD"}

package/dist/operator/workorder-hooks.js

@@ -0,0 +1,70 @@
+"use strict";
+/**
+ * Extracted, testable pieces of the Stage-2 per-kind completion hooks
+ * (plan S2-T3; extraction demanded by implementation review round 1 - the
+ * hook bodies lived in registerApiRoutes closures where nothing could prove
+ * them, which is the green-test-trap class the plan bans).
+ *
+ * - buildWorkerTraceQueries: the G1 re-keyed verifier trace queries. Worker
+ *   runs log gateway_tool_call rows with the worker's identity, NOT
+ *   agent_id='dashboard-agent'; the ONLY schema-supported key is the details
+ *   JSON (agent_activity has no channel_id column) - hence json_extract.
+ * - buildPromotionAfterHook: the PROMOTED <n> parse + event re-emission that
+ *   keeps the memory:promoted -> wiki ingress chain alive (plan E4/R7).
+ * - buildWikiAfterHook: outcome reading only.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildWorkerTraceQueries = buildWorkerTraceQueries;
+exports.buildPromotionAfterHook = buildPromotionAfterHook;
+exports.buildWikiAfterHook = buildWikiAfterHook;
+const action_verifier_js_1 = require("./action-verifier.js");
+const TRACE_TOOL_LIST = action_verifier_js_1.OBLIGATED_TOOLS.map((t) => `'${t}'`).join(',');
+function buildWorkerTraceQueries(sessionsDb, workerChannelId) {
+    return {
+        getTraceMaxId: () => {
+            if (!sessionsDb)
+                return 0;
+            const row = sessionsDb
+                .prepare(`SELECT MAX(id) AS max_id FROM agent_activity
+           WHERE type = 'gateway_tool_call'
+             AND json_extract(details, '$.channel_id') = ?`)
+                .get(workerChannelId);
+            return row.max_id ?? 0;
+        },
+        countObligatedTraceRowsSince: (maxId) => {
+            if (!sessionsDb)
+                return 0;
+            const row = sessionsDb
+                .prepare(`SELECT COUNT(*) AS n FROM agent_activity
+           WHERE type = 'gateway_tool_call'
+             AND json_extract(details, '$.channel_id') = ?
+             AND id > ? AND (normalized_tool_name IN (${TRACE_TOOL_LIST}) OR input_summary IN (${TRACE_TOOL_LIST}))`)
+                .get(workerChannelId, maxId);
+            return row.n;
+        },
+    };
+}
+/** The wiki ingress chain's second link: losing this parse severs memory:promoted. */
+function buildPromotionAfterHook(events) {
+    return (_wo, response) => {
+        const promotedMatch = response.match(/PROMOTED\s+(\d+)/);
+        const saved = promotedMatch ? Number(promotedMatch[1]) : 0;
+        const noUpdate = response.includes('NO_UPDATE');
+        events.emitAgentAction(noUpdate || saved === 0 ? 'no_update' : 'promoted', `promotion run: ${saved} saved`);
+        if (saved > 0) {
+            events.emitMemoryPromoted(saved);
+            events.log?.(`[stage2] promotion worker: promoted ${saved} durable judgments`);
+        }
+    };
+}
+function buildWikiAfterHook(log) {
+    return (_wo, response) => {
+        if (response.includes('NO_UPDATE')) {
+            log('[stage2] wiki worker: no changes detected');
+        }
+        else {
+            log('[stage2] wiki worker: compilation complete');
+        }
+    };
+}
+//# sourceMappingURL=workorder-hooks.js.map

package/dist/operator/workorder-hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workorder-hooks.js","sourceRoot":"","sources":["../../src/operator/workorder-hooks.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;AAaH,0DA6BC;AASD,0DAgBC;AAED,gDAUC;AA5ED,6DAAuD;AAGvD,MAAM,eAAe,GAAG,oCAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAOvE,SAAgB,uBAAuB,CACrC,UAAsC,EACtC,eAAuB;IAEvB,OAAO;QACL,aAAa,EAAE,GAAG,EAAE;YAClB,IAAI,CAAC,UAAU;gBAAE,OAAO,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,UAAU;iBACnB,OAAO,CACN;;2DAEiD,CAClD;iBACA,GAAG,CAAC,eAAe,CAA8B,CAAC;YACrD,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;QACzB,CAAC;QACD,4BAA4B,EAAE,CAAC,KAAa,EAAE,EAAE;YAC9C,IAAI,CAAC,UAAU;gBAAE,OAAO,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,UAAU;iBACnB,OAAO,CACN;;;wDAG8C,eAAe,0BAA0B,eAAe,IAAI,CAC3G;iBACA,GAAG,CAAC,eAAe,EAAE,KAAK,CAAkB,CAAC;YAChD,OAAO,GAAG,CAAC,CAAC,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAQD,sFAAsF;AACtF,SAAgB,uBAAuB,CACrC,MAA2B;IAE3B,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE;QACvB,MAAM,aAAa,GAAG,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,CAAC,eAAe,CACpB,QAAQ,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,EAClD,kBAAkB,KAAK,QAAQ,CAChC,CAAC;QACF,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,CAAC,GAAG,EAAE,CAAC,uCAAuC,KAAK,oBAAoB,CAAC,CAAC;QACjF,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAgB,kBAAkB,CAChC,GAA2B;IAE3B,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE;QACvB,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,2CAA2C,CAAC,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,4CAA4C,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/operator/workorder-publishers.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Stage-2 publisher gate: pure decision + key/payload contracts for converting
+ * the three system-agent run paths (dashboard/wiki/promotion) and the
+ * reconcile leg into workorder enqueues.
+ *
+ * The gate decision is a PURE function (plan E5) so every flag x kind combo is
+ * unit-testable outside the api-routes-init closures. The wiring sites call
+ * resolvePublishAction and act on 'legacy' | 'enqueue' | 'both'.
+ *
+ * Flag: MAMA_STAGE2_WORKORDERS=off|shadow|on (tri-state; deliberate deviation
+ * from the repo's `=== '1'` convention - documented in configuration-options).
+ *   off    - legacy direct runs (current behavior)
+ *   shadow - board ONLY dual-runs: legacy keeps publishing live AND the same
+ *            occurrence is enqueued for the capture consumer. wiki/promotion
+ *            stay pure legacy - their side effects (Obsidian writes, mama_save)
+ *            have no capture seam and must never double-execute (plan B1/C2).
+ *   on     - all three kinds (and the reconcile leg) enqueue; legacy stops.
+ *
+ * Plan: docs/superpowers/plans/2026-07-18-stage2-workorder-ownership.md S2-T2
+ */
+import type { WorkOrderKind } from './task-ledger.js';
+export declare const STAGE2_FLAG_ENV = "MAMA_STAGE2_WORKORDERS";
+export declare const STAGE2_FLAGS: readonly ["off", "shadow", "on"];
+export type Stage2Flag = (typeof STAGE2_FLAGS)[number];
+export type PublishAction = 'legacy' | 'enqueue' | 'both';
+/**
+ * Parse the tri-state flag. Absent/empty -> 'off'. Any other value is a
+ * misconfiguration and throws at boot (no-fallback: a typo silently reverting
+ * to legacy would mask a believed-active migration).
+ */
+export declare function readStage2Flag(env?: NodeJS.ProcessEnv): Stage2Flag;
+/** Pure gate decision for the three scheduled/boot/manual run paths. */
+export declare function resolvePublishAction(flag: Stage2Flag, kind: WorkOrderKind): PublishAction;
+/**
+ * The reconcile leg converts at 'on' ONLY (plan: shadow/off keep the legacy
+ * bracket-verified path; its verification moves to the consumer hook at 'on').
+ */
+export declare function resolveReconcileAction(flag: Stage2Flag): 'legacy' | 'enqueue';
+export declare function boardFullKey(now: number): string;
+/** Manual/forced orders get their own key (plan M2): a forced refresh must
+ *  never dedup against a pending scheduled FULL that lacks force. */
+export declare function boardManualKey(now: number): string;
+export declare function boardReconcileKey(channelKey: string, now: number): string;
+export declare function wikiBatchKey(trigger: string, now: number): string;
+export declare function promotionKey(now: number): string;
+export declare function promotionManualKey(now: number): string;
+export interface BoardPayload {
+    mode: 'full' | 'reconcile';
+    /** Owner-forced refresh: brief must publish even on NO_UPDATE. */
+    force?: boolean;
+    channelKey?: string;
+    deltaLines?: string[];
+}
+export interface WikiPayload {
+    batchId: string;
+    /** Trigger provenance; the run does its own novelty check, events carry no content. */
+    events: string[];
+}
+export interface PromotionPayload {
+    scheduledAt: string;
+}
+/**
+ * Validate a payload at enqueue time. Unknown fields are rejected LOUDLY -
+ * a misspelled field silently dropped would surface as a wrong run later.
+ * (`attempts` is ledger-managed and allowed everywhere.)
+ */
+export declare function validateWorkOrderPayload(kind: WorkOrderKind, payload: Record<string, unknown>): void;
+//# sourceMappingURL=workorder-publishers.d.ts.map

package/dist/operator/workorder-publishers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workorder-publishers.d.ts","sourceRoot":"","sources":["../../src/operator/workorder-publishers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,eAAO,MAAM,eAAe,2BAA2B,CAAC;AAExD,eAAO,MAAM,YAAY,kCAAmC,CAAC;AAC7D,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;AAE1D;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,UAAU,CAS/E;AAED,wEAAwE;AACxE,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,GAAG,aAAa,CAKzF;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,UAAU,GAAG,QAAQ,GAAG,SAAS,CAE7E;AAUD,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED;qEACqE;AACrE,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAElD;AAED,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAOzE;AAED,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAEjE;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEtD;AAID,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAC3B,kEAAkE;IAClE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,uFAAuF;IACvF,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;CACrB;AAQD;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,IAAI,CA2CN"}