@miller-tech/uap 2.16.6 → 2.19.5

package/dist/mission/ledger.js

@@ -0,0 +1,294 @@
+/**
+ * Mission ledger service — typed operations over the mission database.
+ *
+ * The ledger is the durable goal layer: a mission's acceptance criteria are
+ * FROZEN at creation (sha256) and only change through an explicit, recorded
+ * replan. Attempt history feeds the struggle metric; failed attempts seed
+ * approval-gated salvage proposals.
+ */
+import { createHash } from 'crypto';
+import { MissionDatabase, getMissionDbPath } from './database.js';
+/** sha256 of the trimmed acceptance text — the freeze-time hash. */
+export function hashAcceptance(acceptance) {
+    return createHash('sha256').update(acceptance.trim()).digest('hex');
+}
+/**
+ * Exponential relaunch backoff (minutes): 15, 30, 60, ... capped at one day.
+ * A crash-looping mission must not burn cycles every poll — the same lesson
+ * as the systemd start-rate limiter: back off, don't hammer.
+ */
+export function relaunchBackoffMinutes(relaunchCount) {
+    return Math.min(15 * 2 ** relaunchCount, 1440);
+}
+function rowToMission(r) {
+    return {
+        id: r.id,
+        goal: r.goal,
+        acceptance: r.acceptance,
+        acceptanceHash: r.acceptance_hash,
+        status: r.status,
+        ...(r.preset_id !== null ? { presetId: r.preset_id } : {}),
+        ...(r.latest_run_id !== null ? { latestRunId: r.latest_run_id } : {}),
+        launchCount: r.launch_count,
+        relaunchCount: r.relaunch_count,
+        ...(r.last_launch_at !== null ? { lastLaunchAt: r.last_launch_at } : {}),
+        ...(r.launch_pid !== null ? { launchPid: r.launch_pid } : {}),
+        createdAt: r.created_at,
+        updatedAt: r.updated_at,
+    };
+}
+function rowToAttempt(r) {
+    return {
+        id: r.id,
+        missionId: r.mission_id,
+        ...(r.run_id !== null ? { runId: r.run_id } : {}),
+        ...(r.task_ref !== null ? { taskRef: r.task_ref } : {}),
+        outcome: r.outcome,
+        ...(r.summary !== null ? { summary: r.summary } : {}),
+        ...(r.observed_at !== null ? { observedAt: r.observed_at } : {}),
+        createdAt: r.created_at,
+    };
+}
+function rowToSalvage(r) {
+    return {
+        id: r.id,
+        missionId: r.mission_id,
+        ...(r.from_attempt_id !== null ? { fromAttemptId: r.from_attempt_id } : {}),
+        ...(r.task_ref !== null ? { taskRef: r.task_ref } : {}),
+        proposal: r.proposal,
+        status: r.status,
+        createdAt: r.created_at,
+        ...(r.decided_at !== null ? { decidedAt: r.decided_at } : {}),
+    };
+}
+function rowToRevision(r) {
+    return {
+        id: r.id,
+        missionId: r.mission_id,
+        priorAcceptance: r.prior_acceptance,
+        priorHash: r.prior_hash,
+        reason: r.reason,
+        createdAt: r.created_at,
+    };
+}
+/** Open (or reuse) the mission database for a project root. PURE-ish: no writes. */
+export function openMissionDb(projectRoot) {
+    return MissionDatabase.getInstance(getMissionDbPath(projectRoot)).getDatabase();
+}
+/** Test seam: reset the singleton so a new path is honored. */
+export function resetMissionDb() {
+    MissionDatabase.resetInstance();
+}
+/** Create a mission with frozen acceptance criteria. */
+export function createMission(db, input) {
+    const now = new Date().toISOString();
+    const hash = hashAcceptance(input.acceptance);
+    const info = db
+        .prepare(`INSERT INTO missions (goal, acceptance, acceptance_hash, status, preset_id, created_at, updated_at)
+       VALUES (?, ?, ?, 'active', ?, ?, ?)`)
+        .run(input.goal, input.acceptance, hash, input.presetId ?? null, now, now);
+    return getMission(db, Number(info.lastInsertRowid));
+}
+export function getMission(db, id) {
+    const row = db
+        .prepare('SELECT * FROM missions WHERE id = ?')
+        .get(id);
+    if (!row)
+        throw new Error(`mission #${id} not found`);
+    return rowToMission(row);
+}
+export function listMissions(db, opts = {}) {
+    const rows = opts.status
+        ? db
+            .prepare('SELECT * FROM missions WHERE status = ? ORDER BY id DESC LIMIT ?')
+            .all(opts.status, opts.limit ?? 100)
+        : db
+            .prepare('SELECT * FROM missions ORDER BY id DESC LIMIT ?')
+            .all(opts.limit ?? 100);
+    return rows.map(rowToMission);
+}
+export function setMissionStatus(db, id, status) {
+    const info = db
+        .prepare('UPDATE missions SET status = ?, updated_at = ? WHERE id = ?')
+        .run(status, new Date().toISOString(), id);
+    return info.changes > 0;
+}
+/**
+ * Explicit replan: supersede the frozen acceptance criteria. The prior text
+ * and hash move to the revisions history — never a silent change. The run
+ * link and backoff counters RESET: the prior run embeds the OLD criteria, so
+ * resuming it could deliver against superseded acceptance. The next poll
+ * launches a fresh run under the new criteria (new marker, new pid).
+ */
+export function replanAcceptance(db, id, newAcceptance, reason) {
+    const mission = getMission(db, id);
+    const now = new Date().toISOString();
+    const tx = db.transaction(() => {
+        db.prepare(`INSERT INTO acceptance_revisions (mission_id, prior_acceptance, prior_hash, reason, created_at)
+       VALUES (?, ?, ?, ?, ?)`).run(id, mission.acceptance, mission.acceptanceHash, reason, now);
+        db.prepare(`UPDATE missions
+       SET acceptance = ?, acceptance_hash = ?, latest_run_id = NULL, launch_pid = NULL,
+           relaunch_count = 0, updated_at = ?
+       WHERE id = ?`).run(newAcceptance, hashAcceptance(newAcceptance), now, id);
+    });
+    tx();
+    return getMission(db, id);
+}
+/** Does `acceptance` match the mission's frozen criteria? (merge-gate hook). */
+export function verifyAcceptanceHash(db, id, acceptance) {
+    const row = db
+        .prepare('SELECT acceptance_hash FROM missions WHERE id = ?')
+        .get(id);
+    return row !== undefined && row.acceptance_hash === hashAcceptance(acceptance);
+}
+export function listAcceptanceRevisions(db, missionId) {
+    const rows = db
+        .prepare('SELECT * FROM acceptance_revisions WHERE mission_id = ? ORDER BY id DESC')
+        .all(missionId);
+    return rows.map(rowToRevision);
+}
+/**
+ * How recent a claim blocks another: two concurrent cycles (daemon poll +
+ * `uap mission create --launch`) must not both spawn. The conditional UPDATE
+ * below makes the claim atomic; this window (not the 10-min decision grace)
+ * is the anti-race guard.
+ */
+export const LAUNCH_CLAIM_MS = 60_000;
+/**
+ * Atomically claim the right to launch/resume. Returns the launch stamp when
+ * this cycle WON the claim, null when another cycle launched within the
+ * window (the caller must NOT spawn). Single-statement conditional update —
+ * no read-then-write race. `nowMs` is the poll cycle's clock (injected for
+ * tests; decisions and claims must share one timeline).
+ */
+export function claimLaunch(db, id, kind, nowMs = Date.now()) {
+    const now = new Date(nowMs).toISOString();
+    const cutoff = new Date(nowMs - LAUNCH_CLAIM_MS).toISOString();
+    const info = kind === 'fresh'
+        ? db
+            .prepare(`UPDATE missions
+             SET launch_count = launch_count + 1, last_launch_at = ?, updated_at = ?
+             WHERE id = ? AND (last_launch_at IS NULL OR last_launch_at <= ?)`)
+            .run(now, now, id, cutoff)
+        : db
+            .prepare(`UPDATE missions
+             SET launch_count = launch_count + 1, relaunch_count = relaunch_count + 1,
+                 last_launch_at = ?, updated_at = ?
+             WHERE id = ? AND (last_launch_at IS NULL OR last_launch_at <= ?)`)
+            .run(now, now, id, cutoff);
+    return info.changes > 0 ? now : null;
+}
+/**
+ * Record the pid of the launch we spawned, guarded by OUR claim stamp so a
+ * concurrent winner's stamp is never overwritten.
+ */
+export function setLaunchPid(db, id, stamp, pid) {
+    db.prepare('UPDATE missions SET launch_pid = ?, updated_at = ? WHERE id = ? AND last_launch_at = ?').run(pid, new Date().toISOString(), id, stamp);
+}
+/**
+ * Link a discovered deliver run to the mission WITHOUT counting a launch:
+ * the poll cycle finds the run the mission's own launch created (by its
+ * embedded `mission:#<id>` marker) and records the linkage.
+ */
+export function linkRun(db, id, runId) {
+    const info = db
+        .prepare('UPDATE missions SET latest_run_id = ?, updated_at = ? WHERE id = ?')
+        .run(runId, new Date().toISOString(), id);
+    return info.changes > 0;
+}
+/**
+ * Record an attempt outcome.
+ *
+ * Rows tied to a RUN dedupe on (mission, run, outcome, taskRef, observedAt):
+ * a poll cycle that re-observes the SAME terminal run state (same
+ * updatedAt/exit time) cannot double-count it, while a genuinely NEW event
+ * for the same run (a resumed run failing again, a later exit) accumulates
+ * into the struggle metric. Without observedAt in the key, a crash-looping
+ * run could contribute at most one 'failed' row ever and never reach the
+ * struggle threshold (code review P1). Whole-mission notes (no runId) are
+ * never deduped: each occurrence is a distinct event.
+ */
+export function recordAttempt(db, input) {
+    if (input.runId) {
+        const dup = db
+            .prepare(`SELECT 1 FROM mission_attempts
+         WHERE mission_id = ? AND outcome = ? AND run_id = ?
+           AND ifnull(task_ref, '') = ifnull(?, '')
+           AND ifnull(observed_at, '') = ifnull(?, '')`)
+            .get(input.missionId, input.outcome, input.runId, input.taskRef ?? null, input.observedAt ?? null);
+        if (dup)
+            return;
+    }
+    db.prepare(`INSERT INTO mission_attempts (mission_id, run_id, task_ref, outcome, summary, observed_at, created_at)
+     VALUES (?, ?, ?, ?, ?, ?, ?)`).run(input.missionId, input.runId ?? null, input.taskRef ?? null, input.outcome, input.summary ?? null, input.observedAt ?? null, new Date().toISOString());
+}
+export function listAttempts(db, missionId) {
+    const rows = db
+        .prepare('SELECT * FROM mission_attempts WHERE mission_id = ? ORDER BY id')
+        .all(missionId);
+    return rows.map(rowToAttempt);
+}
+/** Struggle metric: failed attempts, whole-mission (no taskRef) or per ref. */
+export function failedAttemptCount(db, missionId, taskRef) {
+    const row = taskRef
+        ? db
+            .prepare(`SELECT COUNT(*) AS n FROM mission_attempts
+           WHERE mission_id = ? AND outcome = 'failed' AND task_ref = ?`)
+            .get(missionId, taskRef)
+        : db
+            .prepare(`SELECT COUNT(*) AS n FROM mission_attempts
+           WHERE mission_id = ? AND outcome IN ('failed', 'interrupted')`)
+            .get(missionId);
+    return row.n;
+}
+export function proposeSalvage(db, input) {
+    const now = new Date().toISOString();
+    const info = db
+        .prepare(`INSERT INTO salvage_proposals (mission_id, from_attempt_id, task_ref, proposal, status, created_at)
+       VALUES (?, ?, ?, ?, 'proposed', ?)`)
+        .run(input.missionId, input.fromAttemptId ?? null, input.taskRef ?? null, input.proposal, now);
+    const row = db
+        .prepare('SELECT * FROM salvage_proposals WHERE id = ?')
+        .get(Number(info.lastInsertRowid));
+    return rowToSalvage(row);
+}
+/** True when an OPEN proposal already cites the same attempt (dedupe). */
+export function hasOpenSalvageForAttempt(db, missionId, attemptId) {
+    if (attemptId === undefined)
+        return false;
+    const row = db
+        .prepare(`SELECT 1 FROM salvage_proposals
+       WHERE mission_id = ? AND from_attempt_id = ? AND status = 'proposed'`)
+        .get(missionId, attemptId);
+    return row !== undefined;
+}
+export function decideSalvage(db, id, status) {
+    const info = db
+        .prepare('UPDATE salvage_proposals SET status = ?, decided_at = ? WHERE id = ?')
+        .run(status, new Date().toISOString(), id);
+    if (info.changes === 0)
+        throw new Error(`salvage proposal #${id} not found`);
+    const row = db.prepare('SELECT * FROM salvage_proposals WHERE id = ?').get(id);
+    return rowToSalvage(row);
+}
+export function listSalvage(db, opts = {}) {
+    // One fixed, fully literal statement per filter combination — nothing is
+    // ever assembled at runtime, and all values are bound parameters.
+    const rows = opts.missionId !== undefined && opts.status !== undefined
+        ? db
+            .prepare('SELECT * FROM salvage_proposals WHERE mission_id = ? AND status = ? ORDER BY id DESC LIMIT 200')
+            .all(opts.missionId, opts.status)
+        : opts.missionId !== undefined
+            ? db
+                .prepare('SELECT * FROM salvage_proposals WHERE mission_id = ? ORDER BY id DESC LIMIT 200')
+                .all(opts.missionId)
+            : opts.status !== undefined
+                ? db
+                    .prepare('SELECT * FROM salvage_proposals WHERE status = ? ORDER BY id DESC LIMIT 200')
+                    .all(opts.status)
+                : db
+                    .prepare('SELECT * FROM salvage_proposals ORDER BY id DESC LIMIT 200')
+                    .all();
+    return rows.map(rowToSalvage);
+}
+//# sourceMappingURL=ledger.js.map

package/dist/mission/ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.js","sourceRoot":"","sources":["../../src/mission/ledger.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAWlE,oEAAoE;AACpE,MAAM,UAAU,cAAc,CAAC,UAAkB;IAC/C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,aAAqB;IAC1D,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,IAAI,aAAa,EAAE,IAAI,CAAC,CAAC;AACjD,CAAC;AAiDD,SAAS,YAAY,CAAC,CAAa;IACjC,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,cAAc,EAAE,CAAC,CAAC,eAAe;QACjC,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,GAAG,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,CAAC,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,WAAW,EAAE,CAAC,CAAC,YAAY;QAC3B,aAAa,EAAE,CAAC,CAAC,cAAc;QAC/B,GAAG,CAAC,CAAC,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,SAAS,EAAE,CAAC,CAAC,UAAU;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,CAAa;IACjC,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,SAAS,EAAE,CAAC,CAAC,UAAU;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,CAAa;IACjC,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,GAAG,CAAC,CAAC,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,GAAG,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,CAAc;IACnC,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,eAAe,EAAE,CAAC,CAAC,gBAAgB;QACnC,SAAS,EAAE,CAAC,CAAC,UAAU;QACvB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,SAAS,EAAE,CAAC,CAAC,UAAU;KACxB,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,aAAa,CAAC,WAAmB;IAC/C,OAAO,eAAe,CAAC,WAAW,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAClF,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,cAAc;IAC5B,eAAe,CAAC,aAAa,EAAE,CAAC;AAClC,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,aAAa,CAC3B,EAAqB,EACrB,KAA8D;IAE9D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CACN;2CACqC,CACtC;SACA,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC7E,OAAO,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,EAAqB,EAAE,EAAU;IAC1D,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CAAC,qCAAqC,CAAC;SAC9C,GAAG,CAAC,EAAE,CAA2B,CAAC;IACrC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;IACtD,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,EAAqB,EACrB,OAAmD,EAAE;IAErD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM;QACtB,CAAC,CAAC,EAAE;aACC,OAAO,CAAC,kEAAkE,CAAC;aAC3E,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,IAAI,GAAG,CAAiB;QACxD,CAAC,CAAC,EAAE;aACC,OAAO,CAAC,iDAAiD,CAAC;aAC1D,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,CAAiB,CAAC;IAC9C,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAqB,EAAE,EAAU,EAAE,MAAqB;IACvF,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CAAC,6DAA6D,CAAC;SACtE,GAAG,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,EAAqB,EACrB,EAAU,EACV,aAAqB,EACrB,MAAc;IAEd,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QAC7B,EAAE,CAAC,OAAO,CACR;8BACwB,CACzB,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QACnE,EAAE,CAAC,OAAO,CACR;;;oBAGc,CACf,CAAC,GAAG,CAAC,aAAa,EAAE,cAAc,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IACH,EAAE,EAAE,CAAC;IACL,OAAO,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,oBAAoB,CAAC,EAAqB,EAAE,EAAU,EAAE,UAAkB;IACxF,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CAAC,mDAAmD,CAAC;SAC5D,GAAG,CAAC,EAAE,CAA4C,CAAC;IACtD,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,eAAe,KAAK,cAAc,CAAC,UAAU,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,EAAqB,EAAE,SAAiB;IAC9E,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CAAC,0EAA0E,CAAC;SACnF,GAAG,CAAC,SAAS,CAAkB,CAAC;IACnC,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;AACjC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AAEtC;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CACzB,EAAqB,EACrB,EAAU,EACV,IAAwB,EACxB,QAAgB,IAAI,CAAC,GAAG,EAAE;IAE1B,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,GAAG,eAAe,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/D,MAAM,IAAI,GACR,IAAI,KAAK,OAAO;QACd,CAAC,CAAC,EAAE;aACC,OAAO,CACN;;8EAEkE,CACnE;aACA,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC;QAC9B,CAAC,CAAC,EAAE;aACC,OAAO,CACN;;;8EAGkE,CACnE;aACA,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,EAAqB,EAAE,EAAU,EAAE,KAAa,EAAE,GAAW;IACxF,EAAE,CAAC,OAAO,CAAC,wFAAwF,CAAC,CAAC,GAAG,CACtG,GAAG,EACH,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EACxB,EAAE,EACF,KAAK,CACN,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,EAAqB,EAAE,EAAU,EAAE,KAAa;IACtE,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CAAC,oEAAoE,CAAC;SAC7E,GAAG,CAAC,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,aAAa,CAC3B,EAAqB,EACrB,KAQC;IAED,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,GAAG,GAAG,EAAE;aACX,OAAO,CACN;;;uDAG+C,CAChD;aACA,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC;QACrG,IAAI,GAAG;YAAE,OAAO;IAClB,CAAC;IACD,EAAE,CAAC,OAAO,CACR;kCAC8B,CAC/B,CAAC,GAAG,CACH,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,KAAK,IAAI,IAAI,EACnB,KAAK,CAAC,OAAO,IAAI,IAAI,EACrB,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,OAAO,IAAI,IAAI,EACrB,KAAK,CAAC,UAAU,IAAI,IAAI,EACxB,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CACzB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,EAAqB,EAAE,SAAiB;IACnE,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CAAC,iEAAiE,CAAC;SAC1E,GAAG,CAAC,SAAS,CAAiB,CAAC;IAClC,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAChC,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,kBAAkB,CAChC,EAAqB,EACrB,SAAiB,EACjB,OAAgB;IAEhB,MAAM,GAAG,GAAG,OAAO;QACjB,CAAC,CAAC,EAAE;aACC,OAAO,CACN;wEAC8D,CAC/D;aACA,GAAG,CAAC,SAAS,EAAE,OAAO,CAAkB;QAC7C,CAAC,CAAC,EAAE;aACC,OAAO,CACN;yEAC+D,CAChE;aACA,GAAG,CAAC,SAAS,CAAkB,CAAC;IACvC,OAAO,GAAG,CAAC,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,EAAqB,EACrB,KAKC;IAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CACN;0CACoC,CACrC;SACA,GAAG,CACF,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,aAAa,IAAI,IAAI,EAC3B,KAAK,CAAC,OAAO,IAAI,IAAI,EACrB,KAAK,CAAC,QAAQ,EACd,GAAG,CACJ,CAAC;IACJ,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CAAC,8CAA8C,CAAC;SACvD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAe,CAAC;IACnD,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,wBAAwB,CACtC,EAAqB,EACrB,SAAiB,EACjB,SAAkB;IAElB,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CACN;4EACsE,CACvE;SACA,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC7B,OAAO,GAAG,KAAK,SAAS,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,EAAqB,EACrB,EAAU,EACV,MAA+B;IAE/B,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CAAC,sEAAsE,CAAC;SAC/E,GAAG,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7C,IAAI,IAAI,CAAC,OAAO,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,EAAE,YAAY,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC,GAAG,CAAC,EAAE,CAAe,CAAC;IAC7F,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,EAAqB,EACrB,OAAuD,EAAE;IAEzD,yEAAyE;IACzE,kEAAkE;IAClE,MAAM,IAAI,GACR,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QACvD,CAAC,CAAE,EAAE;aACA,OAAO,CACN,gGAAgG,CACjG;aACA,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAkB;QACtD,CAAC,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS;YAC5B,CAAC,CAAE,EAAE;iBACA,OAAO,CACN,iFAAiF,CAClF;iBACA,GAAG,CAAC,IAAI,CAAC,SAAS,CAAkB;YACzC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS;gBACzB,CAAC,CAAE,EAAE;qBACA,OAAO,CACN,6EAA6E,CAC9E;qBACA,GAAG,CAAC,IAAI,CAAC,MAAM,CAAkB;gBACtC,CAAC,CAAE,EAAE;qBACA,OAAO,CAAC,4DAA4D,CAAC;qBACrE,GAAG,EAAmB,CAAC;IACpC,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAChC,CAAC"}

package/dist/mission/poll-cycle.d.ts

@@ -0,0 +1,73 @@
+/**
+ * Poll-cycle decision core (PURE — unit-tested, no I/O).
+ *
+ * One orchestrator poll asks, per active mission: given the mission's ledger
+ * state and its latest durable run, what should happen RIGHT NOW? The
+ * executor (poll-executor.ts) applies the returned actions through injected
+ * seams, so this module stays testable without models, daemons, or databases.
+ *
+ * The decision table (Choir's poll loop, UAP's primitives):
+ *   no run            → launch a fresh deliver run for the goal
+ *   run running, pid alive   → one supervisor cycle (watch, don't drive)
+ *   run running, pid gone    → the process died without marking the run:
+ *                               record interrupted, salvage, relaunch
+ *   run interrupted/failed   → record, salvage, relaunch (with backoff)
+ *   run delivered     → close the mission
+ * A relaunch only fires after the exponential backoff elapses, so a
+ * crash-looping mission waits instead of hammering the machine.
+ */
+import type { DeliverRunState } from '../delivery/run-state.js';
+import type { Mission } from '../types/mission.js';
+/** Failed/interrupted attempts before salvage proposes an escalation too. */
+export declare const STRUGGLE_THRESHOLD = 3;
+/**
+ * Grace window after a fresh launch: `uap deliver` needs time to register its
+ * durable run state. Within the window a mission with no run is "launch in
+ * flight", not "launch again" — without this the next poll double-launches.
+ */
+export declare const LAUNCH_GRACE_MS: number;
+export type PollAction = {
+    kind: 'supervise';
+    runId: string;
+} | {
+    kind: 'relaunch';
+    runId: string;
+} | {
+    kind: 'launch';
+} | {
+    kind: 'close-delivered';
+    runId: string;
+} | {
+    kind: 'salvage-proposal';
+    summary: string;
+    escalate: boolean;
+} | {
+    kind: 'wait-backoff';
+    minutes: number;
+    reason: string;
+} | {
+    kind: 'none';
+    reason: string;
+};
+export interface PollView {
+    mission: Mission;
+    /** Latest durable run attached to the mission (null = never launched). */
+    run: DeliverRunState | null;
+    /** Is the run's owning pid still alive? (ignored when run is null). */
+    runPidAlive: boolean;
+    /** Struggle metric: failed/interrupted attempts recorded so far. */
+    failedAttempts: number;
+    /** ms since the mission's last launch (0 when never launched). */
+    sinceLastLaunchMs: number;
+}
+/**
+ * Backoff still owed for this mission right now (0 = free to relaunch).
+ *
+ * The FIRST relaunch is immediate — an interrupted run resuming cleanly is
+ * the common healthy case, not a crash loop. Backoff then doubles per
+ * relaunch: 15 min after one resume, 30 after two, and so on.
+ */
+export declare function backoffRemainingMs(view: PollView): number;
+/** Decide what the orchestrator should do for one active mission. PURE. */
+export declare function decideMissionActions(view: PollView): PollAction[];
+//# sourceMappingURL=poll-cycle.d.ts.map

package/dist/mission/poll-cycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"poll-cycle.d.ts","sourceRoot":"","sources":["../../src/mission/poll-cycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAGnD,6EAA6E;AAC7E,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAEpC;;;;GAIG;AACH,eAAO,MAAM,eAAe,QAAc,CAAC;AAE3C,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,GAChE;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAErC,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,0EAA0E;IAC1E,GAAG,EAAE,eAAe,GAAG,IAAI,CAAC;IAC5B,uEAAuE;IACvE,WAAW,EAAE,OAAO,CAAC;IACrB,oEAAoE;IACpE,cAAc,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAIzD;AAUD,2EAA2E;AAC3E,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,QAAQ,GAAG,UAAU,EAAE,CAgCjE"}

package/dist/mission/poll-cycle.js

@@ -0,0 +1,100 @@
+/**
+ * Poll-cycle decision core (PURE — unit-tested, no I/O).
+ *
+ * One orchestrator poll asks, per active mission: given the mission's ledger
+ * state and its latest durable run, what should happen RIGHT NOW? The
+ * executor (poll-executor.ts) applies the returned actions through injected
+ * seams, so this module stays testable without models, daemons, or databases.
+ *
+ * The decision table (Choir's poll loop, UAP's primitives):
+ *   no run            → launch a fresh deliver run for the goal
+ *   run running, pid alive   → one supervisor cycle (watch, don't drive)
+ *   run running, pid gone    → the process died without marking the run:
+ *                               record interrupted, salvage, relaunch
+ *   run interrupted/failed   → record, salvage, relaunch (with backoff)
+ *   run delivered     → close the mission
+ * A relaunch only fires after the exponential backoff elapses, so a
+ * crash-looping mission waits instead of hammering the machine.
+ */
+import { relaunchBackoffMinutes } from './ledger.js';
+/** Failed/interrupted attempts before salvage proposes an escalation too. */
+export const STRUGGLE_THRESHOLD = 3;
+/**
+ * Grace window after a fresh launch: `uap deliver` needs time to register its
+ * durable run state. Within the window a mission with no run is "launch in
+ * flight", not "launch again" — without this the next poll double-launches.
+ */
+export const LAUNCH_GRACE_MS = 10 * 60_000;
+/**
+ * Backoff still owed for this mission right now (0 = free to relaunch).
+ *
+ * The FIRST relaunch is immediate — an interrupted run resuming cleanly is
+ * the common healthy case, not a crash loop. Backoff then doubles per
+ * relaunch: 15 min after one resume, 30 after two, and so on.
+ */
+export function backoffRemainingMs(view) {
+    if (view.mission.relaunchCount === 0)
+        return 0;
+    const owed = relaunchBackoffMinutes(view.mission.relaunchCount - 1) * 60_000;
+    return Math.max(0, owed - view.sinceLastLaunchMs);
+}
+function salvageSummary(view, outcome) {
+    return (`run ${view.run?.runId ?? '?'} ${outcome}` +
+        (view.run?.exit?.reason ? ` — ${view.run.exit.reason}` : '') +
+        `; ${view.failedAttempts} failed attempt(s) so far`);
+}
+/** Decide what the orchestrator should do for one active mission. PURE. */
+export function decideMissionActions(view) {
+    if (view.mission.status !== 'active') {
+        return [{ kind: 'none', reason: `mission is ${view.mission.status}` }];
+    }
+    if (view.run === null) {
+        if (view.mission.lastLaunchAt && view.sinceLastLaunchMs < LAUNCH_GRACE_MS) {
+            return [
+                {
+                    kind: 'wait-backoff',
+                    minutes: Math.ceil((LAUNCH_GRACE_MS - view.sinceLastLaunchMs) / 60_000),
+                    reason: 'fresh launch in flight — run state not yet registered',
+                },
+            ];
+        }
+        return [{ kind: 'launch' }];
+    }
+    const escalate = view.failedAttempts >= STRUGGLE_THRESHOLD;
+    const backoff = backoffRemainingMs(view);
+    switch (view.run.status) {
+        case 'running':
+            if (view.runPidAlive) {
+                return [{ kind: 'supervise', runId: view.run.runId }];
+            }
+            // 'running' with a dead pid is a crash that never got to mark itself.
+            return terminal(view, 'interrupted', backoff, escalate, 'owner pid is gone');
+        case 'interrupted':
+            return terminal(view, 'interrupted', backoff, escalate, 'run interrupted');
+        case 'failed':
+            return terminal(view, 'failed', backoff, escalate, 'run failed');
+        case 'delivered':
+            return [{ kind: 'close-delivered', runId: view.run.runId }];
+    }
+}
+function terminal(view, outcome, backoffMs, escalate, reason) {
+    const actions = [
+        {
+            kind: 'salvage-proposal',
+            summary: salvageSummary(view, outcome),
+            escalate,
+        },
+    ];
+    if (backoffMs > 0) {
+        actions.push({
+            kind: 'wait-backoff',
+            minutes: Math.ceil(backoffMs / 60_000),
+            reason: `${reason}; backoff after ${view.mission.relaunchCount} relaunch(es)`,
+        });
+    }
+    else {
+        actions.push({ kind: 'relaunch', runId: view.run?.runId ?? '' });
+    }
+    return actions;
+}
+//# sourceMappingURL=poll-cycle.js.map

package/dist/mission/poll-cycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"poll-cycle.js","sourceRoot":"","sources":["../../src/mission/poll-cycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAErD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAEpC;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,MAAM,CAAC;AAuB3C;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAc;IAC/C,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC;IAC7E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,cAAc,CAAC,IAAc,EAAE,OAAiC;IACvE,OAAO,CACL,OAAO,IAAI,CAAC,GAAG,EAAE,KAAK,IAAI,GAAG,IAAI,OAAO,EAAE;QAC1C,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,KAAK,IAAI,CAAC,cAAc,2BAA2B,CACpD,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,oBAAoB,CAAC,IAAc;IACjD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC,iBAAiB,GAAG,eAAe,EAAE,CAAC;YAC1E,OAAO;gBACL;oBACE,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,eAAe,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAAC;oBACvE,MAAM,EAAE,uDAAuD;iBAChE;aACF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,IAAI,kBAAkB,CAAC;IAC3D,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzC,QAAQ,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QACxB,KAAK,SAAS;YACZ,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,sEAAsE;YACtE,OAAO,QAAQ,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QAC/E,KAAK,aAAa;YAChB,OAAO,QAAQ,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC;QAC7E,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QACnE,KAAK,WAAW;YACd,OAAO,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CACf,IAAc,EACd,OAAiC,EACjC,SAAiB,EACjB,QAAiB,EACjB,MAAc;IAEd,MAAM,OAAO,GAAiB;QAC5B;YACE,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC;YACtC,QAAQ;SACT;KACF,CAAC;IACF,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;YACtC,MAAM,EAAE,GAAG,MAAM,mBAAmB,IAAI,CAAC,OAAO,CAAC,aAAa,eAAe;SAC9E,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/mission/poll-executor.d.ts

@@ -0,0 +1,91 @@
+/**
+ * Poll-cycle executor — applies decideMissionActions through injectable seams.
+ *
+ * Production seams: ledger + run-state stores (real), runSupervisor (once
+ * mode), spawnDeliverRun (detached, deliver-detach's discipline: own session,
+ * stdio to a file, never a pipe). Tests inject stubs, so the orchestration
+ * logic runs without models or databases.
+ *
+ * Run linkage is PROVENANCE-CHECKED (security review P1): a discovered run
+ * only links to its mission when its instruction carries the mission's
+ * marker (which embeds the acceptance hash, so a replan cannot relink old
+ * runs) AND its pid matches the pid the orchestrator itself spawned. A
+ * planted run-state file cannot know the future child pid, so it can never
+ * steer the daemon. The launch claim (ledger.claimLaunch) makes concurrent
+ * cycles (daemon + `create --launch`) atomic: only one spawns.
+ */
+import { type DeliverRunState } from '../delivery/run-state.js';
+import type { Mission } from '../types/mission.js';
+/** signal-0 liveness probe; EPERM means alive but not ours. */
+export declare function pidAlive(pid: number | undefined): boolean;
+/** A launch the executor performed. */
+export interface SpawnResult {
+    pid: number;
+}
+export interface PollSeams {
+    /** Launch a fresh deliver run for a mission goal. */
+    launchDeliver: (input: {
+        projectRoot: string;
+        instruction: string;
+        presetId?: string;
+    }) => SpawnResult | null;
+    /** Resume an interrupted/failed durable run. */
+    resumeDeliver: (input: {
+        projectRoot: string;
+        runId: string;
+    }) => SpawnResult | null;
+    /** One supervisor cycle over a live run; returns the action taken (or error note). */
+    superviseOnce: (input: {
+        projectRoot: string;
+        runId: string;
+    }) => Promise<string | null>;
+    /** Post a note to the collaboration board (best-effort, never throws). */
+    postBoardNote: (text: string) => void;
+}
+/** Where detached orch-launched runs stream their output. */
+export declare function orchLogPath(projectRoot: string, stamp: string): string;
+/**
+ * Spawn a detached `uap deliver …` process (own session, stdio to a file) so
+ * the mission outlives the poll cycle and any daemon restart. Returns null
+ * when the CLI entrypoint cannot be resolved — the caller records nothing.
+ */
+export declare function spawnDeliverRun(args: {
+    projectRoot: string;
+    deliverArgs: string[];
+    stamp: string;
+}): SpawnResult | null;
+/**
+ * The mission marker links a deliver run back to its owning mission. The
+ * acceptance-hash slice makes it replan-scoped: after a replan the hash
+ * changes, so discovery can never relink a run that embeds the OLD criteria
+ * — and goal text that merely mentions another mission's marker cannot
+ * collide (code review P2).
+ */
+export declare function missionMarker(mission: Mission): string;
+/**
+ * The mission's acceptance criteria travel inside the instruction text. The
+ * marker prefix also guarantees the argv token can never start with `-`, so
+ * commander cannot misread it as a flag.
+ */
+export declare function missionInstruction(mission: Mission): string;
+export declare function defaultSeams(): PollSeams;
+/** One line summarizing a poll cycle for logs and the --json output. */
+export interface PollMissionReport {
+    missionId: number;
+    actions: string[];
+    notes: string[];
+}
+/**
+ * Find the durable run a fresh launch created. PROVENANCE-CHECKED (security
+ * review P1): the run must carry this mission's marker (replan-scoped via
+ * the acceptance-hash slice), its pid must match the pid the orchestrator
+ * spawned (a planted state file cannot know a future child pid), and it must
+ * have been created at/after the launch. Status is not filtered — a short
+ * mission can deliver inside one poll interval and must still be linked.
+ */
+export declare function discoverRunForMission(projectRoot: string, mission: Mission): DeliverRunState | null;
+/** Run ONE poll cycle over active missions. Returns per-mission reports. */
+export declare function runPollCycle(projectRoot: string, seams?: PollSeams, nowMs?: number, opts?: {
+    missionIds?: number[];
+}): Promise<PollMissionReport[]>;
+//# sourceMappingURL=poll-executor.d.ts.map

package/dist/mission/poll-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"poll-executor.d.ts","sourceRoot":"","sources":["../../src/mission/poll-executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAMH,OAAO,EAA0B,KAAK,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAmBxF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAEnD,+DAA+D;AAC/D,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAQzD;AAED,uCAAuC;AACvC,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,SAAS;IACxB,qDAAqD;IACrD,aAAa,EAAE,CAAC,KAAK,EAAE;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,KAAK,WAAW,GAAG,IAAI,CAAC;IACzB,gDAAgD;IAChD,aAAa,EAAE,CAAC,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,WAAW,GAAG,IAAI,CAAC;IACrF,sFAAsF;IACtF,aAAa,EAAE,CAAC,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzF,0EAA0E;IAC1E,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACvC;AAED,6DAA6D;AAC7D,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,WAAW,GAAG,IAAI,CAyBrB;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAEtD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAE3D;AAED,wBAAgB,YAAY,IAAI,SAAS,CA0CxC;AAED,wEAAwE;AACxE,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAmBD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,OAAO,GACf,eAAe,GAAG,IAAI,CAaxB;AA8ID,4EAA4E;AAC5E,wBAAsB,YAAY,CAChC,WAAW,EAAE,MAAM,EACnB,KAAK,GAAE,SAA0B,EACjC,KAAK,GAAE,MAAmB,EAC1B,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;CAAO,GACnC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CA4B9B"}