@openrig/cli 0.4.3 → 0.4.6

package/daemon/dist/domain/workflow-deadline.d.ts

@@ -0,0 +1,74 @@
+export interface DeadlineInstanceView {
+    instanceId: string;
+    status: string;
+    currentFrontier: string[];
+    currentStepId: string | null;
+}
+export interface DeadlinePacketView {
+    qitemId: string;
+    state: string;
+    destinationSession: string;
+    tsCreated: string;
+    claimedAt: string | null;
+    closureRequiredAt: string | null;
+}
+/**
+ * THE single threshold home (arch gate-leg ruling: EXPORTED, documented
+ * as the one place this number lives — WF-5's class-(b) stuck/overdue
+ * thresholds bind to this constant by ruling; they never redefine it).
+ *
+ * Derivation: the shipped routine-tier SLA (TIER_SLA_SECONDS.routine =
+ * 4h in hot-potato-enforcer.ts — module-private there, so the value is
+ * restated rather than imported; the derivation is this sentence).
+ * Workflow step packets carry tier "mode2" with no SLA entry, so this
+ * constant is the effective deadline for both unclaimed anchors and
+ * the claimed-null-deadline anchor.
+ */
+export declare const WORKFLOW_STEP_STUCK_THRESHOLD_SECONDS: number;
+export type WorkflowStepDeadlineState = "healthy" | "overdue-claimed" | "overdue-unclaimed";
+export interface WorkflowStepDeadlineEvidence {
+    instanceId: string;
+    /** The instance's durable current step binding (may be null pre-R2). */
+    stepId: string | null;
+    packetId: string;
+    ownerSession: string;
+    packetState: string;
+    /** Which anchor classified this packet (the JSDoc classification). */
+    anchor: "closure_required_at" | "claimed_at" | "created_at";
+    /** ISO timestamp the anchor points at (deadline or anchor start). */
+    anchorAt: string;
+    /** Seconds past the effective deadline (>= 0 when overdue). */
+    overdueBySeconds: number;
+    /** Age of the packet since creation, seconds. */
+    ageSeconds: number;
+    /** claimed_at when the row still carries it (sub-states 1/2). */
+    claimedAt: string | null;
+}
+export interface WorkflowDeadlineVerdict {
+    state: WorkflowStepDeadlineState;
+    /** Present iff state != healthy. */
+    evidence: WorkflowStepDeadlineEvidence | null;
+}
+/**
+ * Evaluate one instance's frontier against the deadline model. Pure:
+ * (instance, packets, now) -> verdict. `packets` are the queue rows
+ * for instance.currentFrontier (missing rows are ignored — a frontier
+ * id that no longer resolves is a different corruption class, guarded
+ * elsewhere).
+ *
+ * Only `active` and `waiting` instances can be overdue; terminal
+ * instances are always healthy (nothing to nudge).
+ */
+export declare function evaluateStepDeadline(instance: DeadlineInstanceView, packets: Array<DeadlinePacketView | null | undefined>, now: Date): WorkflowDeadlineVerdict;
+/**
+ * FR-6 (G4) helper: the max_hops comparison, structured against an
+ * EFFECTIVE BASELINE (arch N1 ruling). v1 pins baseline = 0
+ * (MAX_HOPS_BASELINE_V1); WF-5 FR-4's resume later amends the baseline
+ * so each redrive gets one bounded window — this helper is the seam,
+ * never hard-welded to lifetime-total.
+ *
+ * Returns true when executing ONE MORE hop would exceed the guard.
+ */
+export declare const MAX_HOPS_BASELINE_V1 = 0;
+export declare function exceedsMaxHops(hopCount: number, baseline: number, maxHops: number | undefined): boolean;
+//# sourceMappingURL=workflow-deadline.d.ts.map

package/daemon/dist/domain/workflow-deadline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-deadline.d.ts","sourceRoot":"","sources":["../../src/domain/workflow-deadline.ts"],"names":[],"mappings":"AAwDA,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,kBAAkB,EAAE,MAAM,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,qCAAqC,QAAc,CAAC;AAEjE,MAAM,MAAM,yBAAyB,GACjC,SAAS,GACT,iBAAiB,GACjB,mBAAmB,CAAC;AAExB,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,MAAM,EAAE,qBAAqB,GAAG,YAAY,GAAG,YAAY,CAAC;IAC5D,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;IACjB,+DAA+D;IAC/D,gBAAgB,EAAE,MAAM,CAAC;IACzB,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,iEAAiE;IACjE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,yBAAyB,CAAC;IACjC,oCAAoC;IACpC,QAAQ,EAAE,4BAA4B,GAAG,IAAI,CAAC;CAC/C;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,oBAAoB,EAC9B,OAAO,EAAE,KAAK,CAAC,kBAAkB,GAAG,IAAI,GAAG,SAAS,CAAC,EACrD,GAAG,EAAE,IAAI,GACR,uBAAuB,CAuDzB;AA6BD;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAEtC,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,OAAO,CAST"}

package/daemon/dist/domain/workflow-deadline.js

@@ -0,0 +1,165 @@
+// OPR.0.4.6.WF1 FR-2: the step-deadline evaluator (pure).
+//
+// Closes G1 — the 0.4.3 dead-seat class: before this slice a dead or
+// compacted seat parked a workflow step forever because NO deadline
+// existed anywhere in the workflow domain. This evaluator derives a
+// stuck/overdue verdict for an instance from queue mechanics the
+// system already records — it introduces NO new clock, NO new stored
+// state, and NO queue-layer change.
+//
+// STUCK IS DERIVED STATE, NEVER STORED (ACK plan commit 2): every
+// caller (keepalive policy, boot sweep, list/show/trace surfaces)
+// recomputes the verdict from (instance, frontier packets, now); a
+// normal re-projection therefore self-clears the stuck marker (the
+// FR-2 AC) and nothing can go stale. BR-1 holds: this evaluator is
+// consumed by observability + nudge paths ONLY — never by a routing
+// decision.
+//
+// THE ANCHOR CLASSIFICATION (arch gate-leg ruling + third-state note,
+// Rev-1; extended by the mode2-tier source discovery, flagged to arch
+// 2026-07-06):
+//
+//   1. CLAIMED with a deadline — state=in-progress and
+//      closure_required_at set (computed only at claim,
+//      queue-repository.ts:858-870). Anchor = closure_required_at.
+//      NOTE: workflow step packets ship with tier "mode2", which has
+//      no TIER_SLA_SECONDS entry, so TODAY this sub-state is empty for
+//      workflow packets — kept because it is the honest anchor the
+//      moment tiers change, and the evaluator must never silently
+//      ignore a real closure_required_at.
+//   2. CLAIMED with NO deadline — state=in-progress,
+//      closure_required_at NULL (the mode2 reality). Anchor =
+//      claimed_at + WORKFLOW_STEP_STUCK_THRESHOLD_SECONDS.
+//   3. NEVER-CLAIMED — state=pending, never claimed (the
+//      dead-seat-BEFORE-claim / lost-nudge case: the projector creates
+//      the next packet PENDING in-txn and nudges only post-commit, so
+//      a dead owner leaves it unclaimed forever). Anchor =
+//      created_at + threshold.
+//   4. UNCLAIMED-AFTER-CLAIM (the arch third state) — state=pending
+//      after an unclaim, which NULLs claimed_at AND
+//      closure_required_at (queue-repository.ts:908-917), making the
+//      row indistinguishable from never-claimed. Anchor = created_at +
+//      threshold — deliberately INCLUDING the elapsed claimed period,
+//      so the packet may surface overdue immediately after unclaim.
+//      That direction is safe (early nudge noise beats silent parking;
+//      BR-4 — nothing blocks). Claim history remains recoverable via
+//      queue_transitions; callers that render evidence may enrich from
+//      there.
+//
+// A `blocked` frontier packet (a waiting park) is HEALTHY here: the
+// park is an honest recorded state and waiting instances are already
+// keepalive-eligible; park-duration policy is WF-5's lane.
+/**
+ * THE single threshold home (arch gate-leg ruling: EXPORTED, documented
+ * as the one place this number lives — WF-5's class-(b) stuck/overdue
+ * thresholds bind to this constant by ruling; they never redefine it).
+ *
+ * Derivation: the shipped routine-tier SLA (TIER_SLA_SECONDS.routine =
+ * 4h in hot-potato-enforcer.ts — module-private there, so the value is
+ * restated rather than imported; the derivation is this sentence).
+ * Workflow step packets carry tier "mode2" with no SLA entry, so this
+ * constant is the effective deadline for both unclaimed anchors and
+ * the claimed-null-deadline anchor.
+ */
+export const WORKFLOW_STEP_STUCK_THRESHOLD_SECONDS = 4 * 60 * 60;
+/**
+ * Evaluate one instance's frontier against the deadline model. Pure:
+ * (instance, packets, now) -> verdict. `packets` are the queue rows
+ * for instance.currentFrontier (missing rows are ignored — a frontier
+ * id that no longer resolves is a different corruption class, guarded
+ * elsewhere).
+ *
+ * Only `active` and `waiting` instances can be overdue; terminal
+ * instances are always healthy (nothing to nudge).
+ */
+export function evaluateStepDeadline(instance, packets, now) {
+    if (instance.status !== "active" && instance.status !== "waiting") {
+        return { state: "healthy", evidence: null };
+    }
+    const nowMs = now.getTime();
+    const thresholdMs = WORKFLOW_STEP_STUCK_THRESHOLD_SECONDS * 1000;
+    for (const packet of packets) {
+        if (!packet)
+            continue;
+        if (!instance.currentFrontier.includes(packet.qitemId))
+            continue;
+        if (packet.state === "in-progress") {
+            // Sub-states 1 + 2: claimed.
+            const deadlineMs = packet.closureRequiredAt
+                ? new Date(packet.closureRequiredAt).getTime()
+                : packet.claimedAt
+                    ? new Date(packet.claimedAt).getTime() + thresholdMs
+                    : new Date(packet.tsCreated).getTime() + thresholdMs;
+            if (nowMs >= deadlineMs) {
+                return {
+                    state: "overdue-claimed",
+                    evidence: buildEvidence(instance, packet, nowMs, {
+                        anchor: packet.closureRequiredAt
+                            ? "closure_required_at"
+                            : packet.claimedAt
+                                ? "claimed_at"
+                                : "created_at",
+                        anchorAt: packet.closureRequiredAt ??
+                            packet.claimedAt ??
+                            packet.tsCreated,
+                        deadlineMs,
+                    }),
+                };
+            }
+        }
+        else if (packet.state === "pending") {
+            // Sub-states 3 + 4: never-claimed OR unclaimed-after-claim
+            // (indistinguishable at the row after unclaim NULLs claimed_at;
+            // both deliberately anchor on created_at).
+            const deadlineMs = new Date(packet.tsCreated).getTime() + thresholdMs;
+            if (nowMs >= deadlineMs) {
+                return {
+                    state: "overdue-unclaimed",
+                    evidence: buildEvidence(instance, packet, nowMs, {
+                        anchor: "created_at",
+                        anchorAt: packet.tsCreated,
+                        deadlineMs,
+                    }),
+                };
+            }
+        }
+        // `blocked` (waiting park) and any closed state on the frontier:
+        // healthy by classification.
+    }
+    return { state: "healthy", evidence: null };
+}
+function buildEvidence(instance, packet, nowMs, input) {
+    return {
+        instanceId: instance.instanceId,
+        stepId: instance.currentStepId,
+        packetId: packet.qitemId,
+        ownerSession: packet.destinationSession,
+        packetState: packet.state,
+        anchor: input.anchor,
+        anchorAt: input.anchorAt,
+        overdueBySeconds: Math.max(0, Math.floor((nowMs - input.deadlineMs) / 1000)),
+        ageSeconds: Math.max(0, Math.floor((nowMs - new Date(packet.tsCreated).getTime()) / 1000)),
+        claimedAt: packet.claimedAt,
+    };
+}
+/**
+ * FR-6 (G4) helper: the max_hops comparison, structured against an
+ * EFFECTIVE BASELINE (arch N1 ruling). v1 pins baseline = 0
+ * (MAX_HOPS_BASELINE_V1); WF-5 FR-4's resume later amends the baseline
+ * so each redrive gets one bounded window — this helper is the seam,
+ * never hard-welded to lifetime-total.
+ *
+ * Returns true when executing ONE MORE hop would exceed the guard.
+ */
+export const MAX_HOPS_BASELINE_V1 = 0;
+export function exceedsMaxHops(hopCount, baseline, maxHops) {
+    // Guard blocker 2 hardening: only an ENFORCEABLE guard compares.
+    // The parser rejects malformed values going forward; this check
+    // protects against pre-fix cached spec_json blobs (a string would
+    // silently never trip; a null would coerce to 0 and ALWAYS trip).
+    if (typeof maxHops !== "number" || !Number.isInteger(maxHops) || maxHops < 1) {
+        return false;
+    }
+    return hopCount + 1 - baseline > maxHops;
+}
+//# sourceMappingURL=workflow-deadline.js.map

package/daemon/dist/domain/workflow-deadline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-deadline.js","sourceRoot":"","sources":["../../src/domain/workflow-deadline.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,EAAE;AACF,qEAAqE;AACrE,oEAAoE;AACpE,oEAAoE;AACpE,iEAAiE;AACjE,qEAAqE;AACrE,oCAAoC;AACpC,EAAE;AACF,kEAAkE;AAClE,kEAAkE;AAClE,mEAAmE;AACnE,mEAAmE;AACnE,mEAAmE;AACnE,oEAAoE;AACpE,YAAY;AACZ,EAAE;AACF,sEAAsE;AACtE,sEAAsE;AACtE,eAAe;AACf,EAAE;AACF,uDAAuD;AACvD,wDAAwD;AACxD,mEAAmE;AACnE,qEAAqE;AACrE,uEAAuE;AACvE,mEAAmE;AACnE,kEAAkE;AAClE,0CAA0C;AAC1C,qDAAqD;AACrD,8DAA8D;AAC9D,2DAA2D;AAC3D,yDAAyD;AACzD,uEAAuE;AACvE,sEAAsE;AACtE,2DAA2D;AAC3D,+BAA+B;AAC/B,oEAAoE;AACpE,oDAAoD;AACpD,qEAAqE;AACrE,uEAAuE;AACvE,sEAAsE;AACtE,oEAAoE;AACpE,uEAAuE;AACvE,qEAAqE;AACrE,uEAAuE;AACvE,cAAc;AACd,EAAE;AACF,oEAAoE;AACpE,qEAAqE;AACrE,2DAA2D;AAsB3D;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;AAgCjE;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAA8B,EAC9B,OAAqD,EACrD,GAAS;IAET,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC9C,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;IAC5B,MAAM,WAAW,GAAG,qCAAqC,GAAG,IAAI,CAAC;IAEjE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,SAAS;QAEjE,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;YACnC,6BAA6B;YAC7B,MAAM,UAAU,GAAG,MAAM,CAAC,iBAAiB;gBACzC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE;gBAC9C,CAAC,CAAC,MAAM,CAAC,SAAS;oBAChB,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,WAAW;oBACpD,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,WAAW,CAAC;YACzD,IAAI,KAAK,IAAI,UAAU,EAAE,CAAC;gBACxB,OAAO;oBACL,KAAK,EAAE,iBAAiB;oBACxB,QAAQ,EAAE,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE;wBAC/C,MAAM,EAAE,MAAM,CAAC,iBAAiB;4BAC9B,CAAC,CAAC,qBAAqB;4BACvB,CAAC,CAAC,MAAM,CAAC,SAAS;gCAChB,CAAC,CAAC,YAAY;gCACd,CAAC,CAAC,YAAY;wBAClB,QAAQ,EACN,MAAM,CAAC,iBAAiB;4BACxB,MAAM,CAAC,SAAS;4BAChB,MAAM,CAAC,SAAS;wBAClB,UAAU;qBACX,CAAC;iBACH,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACtC,2DAA2D;YAC3D,gEAAgE;YAChE,2CAA2C;YAC3C,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,WAAW,CAAC;YACtE,IAAI,KAAK,IAAI,UAAU,EAAE,CAAC;gBACxB,OAAO;oBACL,KAAK,EAAE,mBAAmB;oBAC1B,QAAQ,EAAE,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE;wBAC/C,MAAM,EAAE,YAAY;wBACpB,QAAQ,EAAE,MAAM,CAAC,SAAS;wBAC1B,UAAU;qBACX,CAAC;iBACH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,iEAAiE;QACjE,6BAA6B;IAC/B,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,aAAa,CACpB,QAA8B,EAC9B,MAA0B,EAC1B,KAAa,EACb,KAIC;IAED,OAAO;QACL,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,MAAM,EAAE,QAAQ,CAAC,aAAa;QAC9B,QAAQ,EAAE,MAAM,CAAC,OAAO;QACxB,YAAY,EAAE,MAAM,CAAC,kBAAkB;QACvC,WAAW,EAAE,MAAM,CAAC,KAAK;QACzB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;QAC5E,UAAU,EAAE,IAAI,CAAC,GAAG,CAClB,CAAC,EACD,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAClE;QACD,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAEtC,MAAM,UAAU,cAAc,CAC5B,QAAgB,EAChB,QAAgB,EAChB,OAA2B;IAE3B,iEAAiE;IACjE,gEAAgE;IAChE,kEAAkE;IAClE,kEAAkE;IAClE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAC7E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,GAAG,CAAC,GAAG,QAAQ,GAAG,OAAO,CAAC;AAC3C,CAAC"}

package/daemon/dist/domain/workflow-exception-escalation.d.ts

@@ -0,0 +1,33 @@
+import type Database from "better-sqlite3";
+import type { QueueRepository } from "./queue-repository.js";
+import type { WorkflowDeadlineVerdict } from "./workflow-deadline.js";
+import { type WorkflowExceptionClass } from "./workflow-exception.js";
+import type { ExceptionRoute } from "./workflow-exception-router.js";
+export interface EnsureStuckExceptionInput {
+    workflowName: string;
+    workflowVersion: string;
+    /** The session recorded as the item's source (the instance creator —
+     *  a real, validated session; the detector is machinery, not a seat). */
+    createdBySession: string;
+    verdict: WorkflowDeadlineVerdict;
+}
+export interface EnsureStuckExceptionResult {
+    outcome: "skipped-healthy" | "deduped" | "created";
+    qitemId?: string;
+}
+export type EnsureStuckExceptionItem = (input: EnsureStuckExceptionInput) => Promise<EnsureStuckExceptionResult>;
+export interface StuckExceptionDeps {
+    db: Database.Database;
+    queueRepo: QueueRepository;
+    /** The maturity-dial resolution for a cached spec (runtime-owned —
+     *  spec lookup + the shipped role resolution live there). null =
+     *  spec not cached; the never-lost fallback applies.
+     *  OPR.0.4.6.FAC1 (arch Q3): boundRig = the stuck instance's bound
+     *  rig (read from workflow_instances at detection time) so the
+     *  orchestrator-role dial position resolves capability-aware. */
+    resolveRoute: (workflowName: string, workflowVersion: string, exceptionClass: WorkflowExceptionClass, boundRig?: string | null) => ExceptionRoute | null;
+    humanFallbackSeat?: string;
+    log?: (line: string) => void;
+}
+export declare function makeEnsureStuckExceptionItem(deps: StuckExceptionDeps): EnsureStuckExceptionItem;
+//# sourceMappingURL=workflow-exception-escalation.d.ts.map

package/daemon/dist/domain/workflow-exception-escalation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-exception-escalation.d.ts","sourceRoot":"","sources":["../../src/domain/workflow-exception-escalation.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAGL,KAAK,sBAAsB,EAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAErE,MAAM,WAAW,yBAAyB;IACxC,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB;6EACyE;IACzE,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,uBAAuB,CAAC;CAClC;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,iBAAiB,GAAG,SAAS,GAAG,SAAS,CAAC;IACnD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,wBAAwB,GAAG,CACrC,KAAK,EAAE,yBAAyB,KAC7B,OAAO,CAAC,0BAA0B,CAAC,CAAC;AAEzC,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,SAAS,EAAE,eAAe,CAAC;IAC3B;;;;;qEAKiE;IACjE,YAAY,EAAE,CACZ,YAAY,EAAE,MAAM,EACpB,eAAe,EAAE,MAAM,EACvB,cAAc,EAAE,sBAAsB,EACtC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,KACrB,cAAc,GAAG,IAAI,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,kBAAkB,GAAG,wBAAwB,CAwF/F"}

package/daemon/dist/domain/workflow-exception-escalation.js

@@ -0,0 +1,104 @@
+// OPR.0.4.6.WF5 FR-2 class (b): detection-time exception items for
+// STUCK/OVERDUE instances.
+//
+// Class (b) has NO state-change transaction to ride — the item is created
+// AT DETECTION TIME by the sweep/keepalive evaluation, and its never-lost
+// guarantee is WF-1's crash-surviving sweep: re-detection re-creates a
+// missed item on the next pass (P2 cleanup honored: no same-txn claim is
+// made or implemented here).
+//
+// DEDUP (the occurrence contract): exactly ONE OPEN item per
+// (instance, step, class, occurrence) — the occurrence key is the overdue
+// packet id named by the WF-1 evaluator's evidence. Re-detections of the
+// same unresolved episode find the open item by TAG QUERY (never summary
+// parsing) and re-nudge it instead of minting a duplicate. A resolved/
+// closed item with the episode still live is a MISSED item — the next
+// detection re-creates it (the sweep guarantee), keeping exactly one
+// OPEN item per occurrence at all times.
+//
+// The policy shape is untouched (X5 stands: PolicyEvaluation remains
+// send|skip|terminal) — the keepalive calls this injected helper as a
+// side effect of its EXISTING evaluation; the sweep likewise. Injection
+// at startup per the validateRig precedent.
+import { classifyDeadlineVerdict, workflowExceptionTags, } from "./workflow-exception.js";
+export function makeEnsureStuckExceptionItem(deps) {
+    const log = deps.log ?? (() => { });
+    const fallbackSeat = deps.humanFallbackSeat ?? "human@host";
+    return async (input) => {
+        const exception = classifyDeadlineVerdict(input.workflowName, input.verdict);
+        if (!exception)
+            return { outcome: "skipped-healthy" };
+        // Dedup by tag query against OPEN states only (pending | in-progress
+        // | blocked): one open item per occurrence; a closed item with the
+        // episode still live is missed and gets re-created.
+        const open = deps.db
+            .prepare(`SELECT qitem_id, destination_session FROM queue_items
+         WHERE state IN ('pending','in-progress','blocked')
+           AND tags LIKE ? AND tags LIKE ?`)
+            .get(`%"occurrence:${exception.identity.occurrenceKey}"%`, `%"exception:stuck_overdue"%`);
+        if (open) {
+            // Re-detection of the same unresolved episode: re-nudge the ONE
+            // item (best-effort — the durable item is the guarantee).
+            await deps.queueRepo.maybeNudge(open.qitem_id, open.destination_session, undefined);
+            return { outcome: "deduped", qitemId: open.qitem_id };
+        }
+        // OPR.0.4.6.FAC1 (arch Q3): each exception item is a FRESH routing
+        // decision at its own detection moment — read the stuck instance's
+        // bound rig NOW (defensive to a pre-052 fixture db: absent column
+        // reads as unbound, the shipped behavior).
+        let detectionBoundRig = null;
+        const stuckInstanceId = exception.deadlineEvidence?.instanceId;
+        if (stuckInstanceId) {
+            try {
+                const row = deps.db
+                    .prepare(`SELECT bound_rig FROM workflow_instances WHERE instance_id = ?`)
+                    .get(stuckInstanceId);
+                detectionBoundRig = row?.bound_rig ?? null;
+            }
+            catch {
+                detectionBoundRig = null;
+            }
+        }
+        const route = deps.resolveRoute(input.workflowName, input.workflowVersion, "stuck_overdue", detectionBoundRig) ?? {
+            position: "fallback",
+            destinationSession: fallbackSeat,
+            tier: "human-gate",
+            humanRouted: true,
+            resolvedVia: "engine-default",
+        };
+        const e = exception.deadlineEvidence;
+        const evidenceRef = `rig workflow trace ${e.instanceId}`;
+        const body = `WORKFLOW EXCEPTION (stuck_overdue)\n` +
+            `workflow: ${input.workflowName} v${input.workflowVersion}\n` +
+            `instance: ${e.instanceId}\n` +
+            `step: ${e.stepId ?? "(unbound)"} — packet ${e.packetId} held by ${e.ownerSession} (${e.packetState})\n` +
+            `deadline: ${e.overdueBySeconds}s past the ${e.anchor} anchor (${e.anchorAt}); packet age ${e.ageSeconds}s\n` +
+            `reason: ${exception.reason}\n` +
+            `evidence: ${evidenceRef}\n` +
+            `resolve: re-nudge/replace the owner per the WF-1 dead-seat mechanics (the step re-projects and the flow continues from this step); this item clears when the instance leaves the exception state.`;
+        const createItem = (destination, tier) => deps.queueRepo.create({
+            sourceSession: input.createdBySession,
+            destinationSession: destination,
+            body,
+            priority: "urgent",
+            tier,
+            tags: workflowExceptionTags(exception.identity),
+            summary: exception.reason,
+            evidenceRef,
+        });
+        let created;
+        try {
+            created = await createItem(route.destinationSession, route.tier);
+        }
+        catch {
+            // THE NEVER-LOST WRITE-GATE FALLBACK (same contract as class (a)):
+            // a gate-rejected routed destination re-routes human@host rather
+            // than losing the exception. A failure of THIS create is a real
+            // storage error and propagates to the caller's non-fatal handling.
+            created = await createItem(fallbackSeat, "human-gate");
+        }
+        log(`workflow exception: stuck_overdue item ${created.qitemId} created for instance ${e.instanceId} (step ${e.stepId ?? "?"}, ${route.position})`);
+        return { outcome: "created", qitemId: created.qitemId };
+    };
+}
+//# sourceMappingURL=workflow-exception-escalation.js.map

package/daemon/dist/domain/workflow-exception-escalation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-exception-escalation.js","sourceRoot":"","sources":["../../src/domain/workflow-exception-escalation.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,2BAA2B;AAC3B,EAAE;AACF,0EAA0E;AAC1E,0EAA0E;AAC1E,uEAAuE;AACvE,yEAAyE;AACzE,6BAA6B;AAC7B,EAAE;AACF,6DAA6D;AAC7D,0EAA0E;AAC1E,yEAAyE;AACzE,yEAAyE;AACzE,uEAAuE;AACvE,sEAAsE;AACtE,qEAAqE;AACrE,yCAAyC;AACzC,EAAE;AACF,qEAAqE;AACrE,sEAAsE;AACtE,wEAAwE;AACxE,4CAA4C;AAK5C,OAAO,EACL,uBAAuB,EACvB,qBAAqB,GAEtB,MAAM,yBAAyB,CAAC;AAwCjC,MAAM,UAAU,4BAA4B,CAAC,IAAwB;IACnE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,IAAI,YAAY,CAAC;IAC5D,OAAO,KAAK,EAAE,KAAgC,EAAuC,EAAE;QACrF,MAAM,SAAS,GAAG,uBAAuB,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7E,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;QAEtD,qEAAqE;QACrE,mEAAmE;QACnE,oDAAoD;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE;aACjB,OAAO,CACN;;2CAEmC,CACpC;aACA,GAAG,CACF,gBAAgB,SAAS,CAAC,QAAQ,CAAC,aAAa,IAAI,EACpD,6BAA6B,CACmC,CAAC;QACrE,IAAI,IAAI,EAAE,CAAC;YACT,gEAAgE;YAChE,0DAA0D;YAC1D,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;YACpF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxD,CAAC;QAED,mEAAmE;QACnE,mEAAmE;QACnE,kEAAkE;QAClE,2CAA2C;QAC3C,IAAI,iBAAiB,GAAkB,IAAI,CAAC;QAC5C,MAAM,eAAe,GAAG,SAAS,CAAC,gBAAgB,EAAE,UAAU,CAAC;QAC/D,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;qBAChB,OAAO,CAAC,gEAAgE,CAAC;qBACzE,GAAG,CAAC,eAAe,CAA6C,CAAC;gBACpE,iBAAiB,GAAG,GAAG,EAAE,SAAS,IAAI,IAAI,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB,GAAG,IAAI,CAAC;YAC3B,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GACT,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,eAAe,EAAE,eAAe,EAAE,iBAAiB,CAAC,IAAI;YAClG,QAAQ,EAAE,UAAmB;YAC7B,kBAAkB,EAAE,YAAY;YAChC,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,IAAI;YACjB,WAAW,EAAE,gBAAyB;SACvC,CAAC;QACJ,MAAM,CAAC,GAAG,SAAS,CAAC,gBAAiB,CAAC;QACtC,MAAM,WAAW,GAAG,sBAAsB,CAAC,CAAC,UAAU,EAAE,CAAC;QACzD,MAAM,IAAI,GACR,sCAAsC;YACtC,aAAa,KAAK,CAAC,YAAY,KAAK,KAAK,CAAC,eAAe,IAAI;YAC7D,aAAa,CAAC,CAAC,UAAU,IAAI;YAC7B,SAAS,CAAC,CAAC,MAAM,IAAI,WAAW,aAAa,CAAC,CAAC,QAAQ,YAAY,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,WAAW,KAAK;YACxG,aAAa,CAAC,CAAC,gBAAgB,cAAc,CAAC,CAAC,MAAM,YAAY,CAAC,CAAC,QAAQ,iBAAiB,CAAC,CAAC,UAAU,KAAK;YAC7G,WAAW,SAAS,CAAC,MAAM,IAAI;YAC/B,aAAa,WAAW,IAAI;YAC5B,mMAAmM,CAAC;QACtM,MAAM,UAAU,GAAG,CAAC,WAAmB,EAAE,IAAY,EAAE,EAAE,CACvD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YACpB,aAAa,EAAE,KAAK,CAAC,gBAAgB;YACrC,kBAAkB,EAAE,WAAW;YAC/B,IAAI;YACJ,QAAQ,EAAE,QAAQ;YAClB,IAAI;YACJ,IAAI,EAAE,qBAAqB,CAAC,SAAS,CAAC,QAAQ,CAAC;YAC/C,OAAO,EAAE,SAAS,CAAC,MAAM;YACzB,WAAW;SACZ,CAAC,CAAC;QACL,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,kBAAkB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;YACnE,iEAAiE;YACjE,gEAAgE;YAChE,mEAAmE;YACnE,OAAO,GAAG,MAAM,UAAU,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QACzD,CAAC;QACD,GAAG,CACD,0CAA0C,OAAO,CAAC,OAAO,yBAAyB,CAAC,CAAC,UAAU,UAAU,CAAC,CAAC,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC,QAAQ,GAAG,CAC9I,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;IAC1D,CAAC,CAAC;AACJ,CAAC"}

package/daemon/dist/domain/workflow-exception-router.d.ts

@@ -0,0 +1,33 @@
+import type { WorkflowExceptionClass } from "./workflow-exception.js";
+import type { WorkflowExceptionDialPosition, WorkflowSpec } from "./workflow-types.js";
+/** The ordinary workflow-packet tier (the shipped default the attention
+ *  union deliberately does NOT match on). */
+export declare const WORKFLOW_EXCEPTION_ORCHESTRATOR_TIER = "mode2";
+/** The human-routed tier — the attention union's first leg. */
+export declare const WORKFLOW_EXCEPTION_HUMAN_TIER = "human-gate";
+export interface ExceptionRouteInput {
+    exceptionClass: WorkflowExceptionClass;
+    spec: Pick<WorkflowSpec, "exception_routing" | "roles">;
+    /** The host-level dial default (settings `workflow.exception_routing`),
+     *  read by the caller; null = key unset. */
+    hostDialDefault: WorkflowExceptionDialPosition | null;
+    /** The shipped role→preferred_targets resolution, wrapped by the caller
+     *  (workflow-runtime owns runtime matching). null = unresolvable. */
+    resolveRoleTarget: (roleName: string) => string | null;
+    /** The honest never-lost fallback seat (human@<host> form). */
+    humanFallbackSeat: string;
+}
+export interface ExceptionRoute {
+    /** Where the chain landed. `fallback` = orchestrator position whose
+     *  role target did not resolve (still never lost). */
+    position: "orchestrator" | "human_only" | "fallback";
+    destinationSession: string;
+    /** THE TIER SPLIT — human-gate iff humanRouted. */
+    tier: string;
+    humanRouted: boolean;
+    /** Which chain link decided the position (recorded in item evidence —
+     *  the dial walks assert it). */
+    resolvedVia: "class-intrinsic" | "class-declared" | "workflow-declared" | "host-default" | "engine-default";
+}
+export declare function resolveExceptionRoute(input: ExceptionRouteInput): ExceptionRoute;
+//# sourceMappingURL=workflow-exception-router.d.ts.map

package/daemon/dist/domain/workflow-exception-router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-exception-router.d.ts","sourceRoot":"","sources":["../../src/domain/workflow-exception-router.ts"],"names":[],"mappings":"AAkCA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,KAAK,EAAE,6BAA6B,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEvF;6CAC6C;AAC7C,eAAO,MAAM,oCAAoC,UAAU,CAAC;AAC5D,+DAA+D;AAC/D,eAAO,MAAM,6BAA6B,eAAe,CAAC;AAE1D,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,sBAAsB,CAAC;IACvC,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,mBAAmB,GAAG,OAAO,CAAC,CAAC;IACxD;gDAC4C;IAC5C,eAAe,EAAE,6BAA6B,GAAG,IAAI,CAAC;IACtD;yEACqE;IACrE,iBAAiB,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACvD,+DAA+D;IAC/D,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC7B;0DACsD;IACtD,QAAQ,EAAE,cAAc,GAAG,YAAY,GAAG,UAAU,CAAC;IACrD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,OAAO,CAAC;IACrB;qCACiC;IACjC,WAAW,EAAE,iBAAiB,GAAG,gBAAgB,GAAG,mBAAmB,GAAG,cAAc,GAAG,gBAAgB,CAAC;CAC7G;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,mBAAmB,GAAG,cAAc,CAsDhF"}

package/daemon/dist/domain/workflow-exception-router.js

@@ -0,0 +1,96 @@
+// OPR.0.4.6.WF5 FR-2: the maturity dial — exception ROUTING (v1.3 founder
+// inversion). CLASSIFICATION ≠ ROUTING: workflow-exception.ts detects;
+// this module maps class → target, deterministically.
+//
+// THE DIAL CHAIN (arch-ruled, in order):
+//   1. the spec's declared per-CLASS position   (exception_routing.classes)
+//   2. the spec's declared per-WORKFLOW default (exception_routing.default)
+//   3. the host-level dial default              (settings key
+//      `workflow.exception_routing` — the MH-1 dynamic-key pattern;
+//      READ BY THE CALLER and passed in: this module stays pure)
+//   4. absent everywhere → ORCHESTRATOR-FIRST (the v1.3 engine default)
+//
+// Position → target:
+//   orchestrator → the spec-declared orchestrator role, resolved through
+//     the SAME shipped role→preferred_targets mechanism step owners use
+//     (caller passes the resolver — no new resolution machinery, no
+//     binding-layer dependency). Unresolvable → THE NEVER-LOST FALLBACK:
+//     the human seat (an exception NEVER fails to route).
+//   human_only → the human seat FIRST, and it GATES there (the
+//     orchestrator never auto-acts). Class (c) is intrinsically
+//     human-only — its WF-2-compiled park IS the item; FR-2 mints no
+//     second one, so class (c) never reaches item creation here.
+//
+// THE TIER SPLIT (arch re-rule sharpening; guard's fence): the shipped
+// attention union matches ON TIER regardless of destination, so
+// `tier='human-gate'` rides ONLY human-routed positions (human_only ·
+// the fallback · class-c); an orchestrator-routed item carries the
+// ordinary workflow tier. The shape splits HERE, in this module — the
+// shipped attention predicate is never edited by this slice.
+//
+// Dial semantics: same recorded state + same config = same target, every
+// time. A dial change applies to FUTURE items only — resolution runs
+// exactly once, at item creation; nothing re-routes live items.
+/** The ordinary workflow-packet tier (the shipped default the attention
+ *  union deliberately does NOT match on). */
+export const WORKFLOW_EXCEPTION_ORCHESTRATOR_TIER = "mode2";
+/** The human-routed tier — the attention union's first leg. */
+export const WORKFLOW_EXCEPTION_HUMAN_TIER = "human-gate";
+export function resolveExceptionRoute(input) {
+    // Class (c) is intrinsically human-only by its nature (a human decision
+    // IS the exception); the dial cannot re-point it.
+    let position;
+    let resolvedVia;
+    const routing = input.spec.exception_routing;
+    if (input.exceptionClass === "human_gate_trip") {
+        position = "human_only";
+        resolvedVia = "class-intrinsic";
+    }
+    else if (routing?.classes?.[input.exceptionClass]) {
+        position = routing.classes[input.exceptionClass];
+        resolvedVia = "class-declared";
+    }
+    else if (routing?.default) {
+        position = routing.default;
+        resolvedVia = "workflow-declared";
+    }
+    else if (input.hostDialDefault) {
+        position = input.hostDialDefault;
+        resolvedVia = "host-default";
+    }
+    else {
+        position = "orchestrator";
+        resolvedVia = "engine-default";
+    }
+    if (position === "human_only") {
+        return {
+            position: "human_only",
+            destinationSession: input.humanFallbackSeat,
+            tier: WORKFLOW_EXCEPTION_HUMAN_TIER,
+            humanRouted: true,
+            resolvedVia,
+        };
+    }
+    // orchestrator position: resolve the declared orchestrator role via the
+    // shipped mechanism; unresolvable (no role declared, role unknown, or
+    // no target) = the never-lost human fallback.
+    const roleName = routing?.orchestrator_role;
+    const target = roleName ? input.resolveRoleTarget(roleName) : null;
+    if (!target) {
+        return {
+            position: "fallback",
+            destinationSession: input.humanFallbackSeat,
+            tier: WORKFLOW_EXCEPTION_HUMAN_TIER,
+            humanRouted: true,
+            resolvedVia,
+        };
+    }
+    return {
+        position: "orchestrator",
+        destinationSession: target,
+        tier: WORKFLOW_EXCEPTION_ORCHESTRATOR_TIER,
+        humanRouted: false,
+        resolvedVia,
+    };
+}
+//# sourceMappingURL=workflow-exception-router.js.map

package/daemon/dist/domain/workflow-exception-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-exception-router.js","sourceRoot":"","sources":["../../src/domain/workflow-exception-router.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,uEAAuE;AACvE,sDAAsD;AACtD,EAAE;AACF,yCAAyC;AACzC,4EAA4E;AAC5E,4EAA4E;AAC5E,8DAA8D;AAC9D,oEAAoE;AACpE,iEAAiE;AACjE,wEAAwE;AACxE,EAAE;AACF,qBAAqB;AACrB,yEAAyE;AACzE,wEAAwE;AACxE,oEAAoE;AACpE,yEAAyE;AACzE,0DAA0D;AAC1D,+DAA+D;AAC/D,gEAAgE;AAChE,qEAAqE;AACrE,iEAAiE;AACjE,EAAE;AACF,uEAAuE;AACvE,gEAAgE;AAChE,sEAAsE;AACtE,mEAAmE;AACnE,sEAAsE;AACtE,6DAA6D;AAC7D,EAAE;AACF,yEAAyE;AACzE,qEAAqE;AACrE,gEAAgE;AAKhE;6CAC6C;AAC7C,MAAM,CAAC,MAAM,oCAAoC,GAAG,OAAO,CAAC;AAC5D,+DAA+D;AAC/D,MAAM,CAAC,MAAM,6BAA6B,GAAG,YAAY,CAAC;AA4B1D,MAAM,UAAU,qBAAqB,CAAC,KAA0B;IAC9D,wEAAwE;IACxE,kDAAkD;IAClD,IAAI,QAAuC,CAAC;IAC5C,IAAI,WAA0C,CAAC;IAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC;IAC7C,IAAI,KAAK,CAAC,cAAc,KAAK,iBAAiB,EAAE,CAAC;QAC/C,QAAQ,GAAG,YAAY,CAAC;QACxB,WAAW,GAAG,iBAAiB,CAAC;IAClC,CAAC;SAAM,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;QACpD,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAE,CAAC;QAClD,WAAW,GAAG,gBAAgB,CAAC;IACjC,CAAC;SAAM,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;QAC5B,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;QAC3B,WAAW,GAAG,mBAAmB,CAAC;IACpC,CAAC;SAAM,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QACjC,QAAQ,GAAG,KAAK,CAAC,eAAe,CAAC;QACjC,WAAW,GAAG,cAAc,CAAC;IAC/B,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,cAAc,CAAC;QAC1B,WAAW,GAAG,gBAAgB,CAAC;IACjC,CAAC;IAED,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC9B,OAAO;YACL,QAAQ,EAAE,YAAY;YACtB,kBAAkB,EAAE,KAAK,CAAC,iBAAiB;YAC3C,IAAI,EAAE,6BAA6B;YACnC,WAAW,EAAE,IAAI;YACjB,WAAW;SACZ,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,sEAAsE;IACtE,8CAA8C;IAC9C,MAAM,QAAQ,GAAG,OAAO,EAAE,iBAAiB,CAAC;IAC5C,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,QAAQ,EAAE,UAAU;YACpB,kBAAkB,EAAE,KAAK,CAAC,iBAAiB;YAC3C,IAAI,EAAE,6BAA6B;YACnC,WAAW,EAAE,IAAI;YACjB,WAAW;SACZ,CAAC;IACJ,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,cAAc;QACxB,kBAAkB,EAAE,MAAM;QAC1B,IAAI,EAAE,oCAAoC;QAC1C,WAAW,EAAE,KAAK;QAClB,WAAW;KACZ,CAAC;AACJ,CAAC"}

package/daemon/dist/domain/workflow-exception.d.ts

@@ -0,0 +1,90 @@
+import type { WorkflowDeadlineVerdict, WorkflowStepDeadlineEvidence } from "./workflow-deadline.js";
+import type { WorkflowInstance } from "./workflow-types.js";
+export declare const WORKFLOW_EXCEPTION_CLASSES: readonly ["unmapped_failed", "stuck_overdue", "human_gate_trip"];
+export type WorkflowExceptionClass = (typeof WORKFLOW_EXCEPTION_CLASSES)[number];
+/**
+ * THE OCCURRENCE DEFINITION (the single home — every dedup and
+ * new-occurrence rule reads from this sentence): one occurrence is one
+ * (instance, step, class) failure EPISODE, keyed by the recorded qitem id
+ * of the packet that embodies the episode — re-detections of the same
+ * unresolved episode share the key and dedupe into ONE item; resolve+resume
+ * closes the occurrence, and any later episode of the same step carries a
+ * NEW packet id and is therefore a NEW occurrence, never absorbed by the
+ * resolved past.
+ *
+ * The key is a RECORDED FACT (arch cell-2 ruling: identity = structured
+ * tags; a column stays delivery's option — not taken):
+ *   (a) the frontier packet whose failed close felled the instance
+ *   (b) the overdue packet named by the deadline evaluator's evidence
+ *   (c) the compiled gate packet parked on the human
+ */
+export interface WorkflowExceptionIdentity {
+    workflowName: string;
+    instanceId: string;
+    /** Nullable only for class (a) on a pre-R2 row with no trail context. */
+    stepId: string | null;
+    exceptionClass: WorkflowExceptionClass;
+    /** The recorded packet id of this episode — see the occurrence JSDoc. */
+    occurrenceKey: string;
+}
+export interface WorkflowException {
+    identity: WorkflowExceptionIdentity;
+    /** Plain-language, evidence-bearing reason (rides the item's summary). */
+    reason: string;
+    /** Class-(b) carries the evaluator's evidence verbatim; (a)/(c) null. */
+    deadlineEvidence: WorkflowStepDeadlineEvidence | null;
+}
+/** The minimal recorded-state view class (a) classifies over. Callers pass
+ *  the failed close's recorded facts (trail row / lastContinuationDecision);
+ *  this module never queries. */
+export interface FailedInstanceView {
+    instance: Pick<WorkflowInstance, "instanceId" | "workflowName" | "status" | "currentStepId" | "lastContinuationDecision">;
+    /** The step that closed failed (trail.step_id of the failing close). */
+    failedStepId: string | null;
+    /** The packet whose failed close felled the instance (trail.prior_qitem_id). */
+    failedPacketId: string;
+    /** The recorded failure note if any (resultNote / event reason). */
+    failureReason: string | null;
+}
+/**
+ * Class (a): unmapped_failed. Pure: same view → same classification,
+ * replayed N times. A non-failed instance NEVER classifies (the mapped-
+ * failed negative: branch-routed failures keep status=active and are
+ * deterministic remediation, not exceptions).
+ */
+export declare function classifyFailedInstance(view: FailedInstanceView): WorkflowException | null;
+/**
+ * Class (b): stuck_overdue. CONSUMES the WF-1 evaluator's verdict verbatim
+ * (rail: the single threshold home classifies; this function only lifts a
+ * non-healthy verdict into the exception shape). Healthy → null.
+ */
+export declare function classifyDeadlineVerdict(workflowName: string, verdict: WorkflowDeadlineVerdict): WorkflowException | null;
+/** The recorded facts of a gate reach — the compiled kind is WF-2's
+ *  recorded output, not a re-derivation. */
+export interface GateTripView {
+    workflowName: string;
+    instanceId: string;
+    gatedStepId: string;
+    /** GateCompileResult.kind — "human" | "handler-role". */
+    gateKind: "human" | "handler-role";
+    /** The compiled gate packet's qitem id. */
+    gatePacketId: string;
+    /** The human seat the packet parks on (null for handler-role). */
+    parkOn: string | null;
+}
+/**
+ * Class (c): human_gate_trip — HUMAN-target gates only. THE HANDLER-ROLE
+ * NEGATIVE lives here: a handler-role gate returns null (a deterministic
+ * handoff, not an exception; the (a)/(b) backstop covers the handler's own
+ * step). Class (c) is intrinsically human-only at the dial.
+ */
+export declare function classifyGateTrip(view: GateTripView): WorkflowException | null;
+/** Tag prefixes: `workflow:`/`instance:` extend the SHIPPED stamp
+ *  (workflow-runtime.ts / workflow-projector.ts already emit them);
+ *  `step:`/`exception:`/`occurrence:` are WF-5's additions (arch cell 2).
+ *  FR-2 dedup and FR-3 cross-channel one-count JOIN on these BY QUERY —
+ *  never by summary parsing. */
+export declare function workflowExceptionTags(identity: WorkflowExceptionIdentity): string[];
+/** The query key for within-occurrence dedup: one item per this tuple. */
+export declare function occurrenceDedupKey(identity: WorkflowExceptionIdentity): string;
+//# sourceMappingURL=workflow-exception.d.ts.map

package/daemon/dist/domain/workflow-exception.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-exception.d.ts","sourceRoot":"","sources":["../../src/domain/workflow-exception.ts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AACpG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAE5D,eAAO,MAAM,0BAA0B,kEAI7B,CAAC;AACX,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,yBAAyB;IACxC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,cAAc,EAAE,sBAAsB,CAAC;IACvC,yEAAyE;IACzE,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,yBAAyB,CAAC;IACpC,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;IACf,yEAAyE;IACzE,gBAAgB,EAAE,4BAA4B,GAAG,IAAI,CAAC;CACvD;AAED;;iCAEiC;AACjC,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,IAAI,CACZ,gBAAgB,EAChB,YAAY,GAAG,cAAc,GAAG,QAAQ,GAAG,eAAe,GAAG,0BAA0B,CACxF,CAAC;IACF,wEAAwE;IACxE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gFAAgF;IAChF,cAAc,EAAE,MAAM,CAAC;IACvB,oEAAoE;IACpE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,kBAAkB,GAAG,iBAAiB,GAAG,IAAI,CAezF;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,uBAAuB,GAC/B,iBAAiB,GAAG,IAAI,CAgB1B;AAED;4CAC4C;AAC5C,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,yDAAyD;IACzD,QAAQ,EAAE,OAAO,GAAG,cAAc,CAAC;IACnC,2CAA2C;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB,kEAAkE;IAClE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,YAAY,GAAG,iBAAiB,GAAG,IAAI,CAc7E;AAED;;;;gCAIgC;AAChC,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,yBAAyB,GAAG,MAAM,EAAE,CAUnF;AAED,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,yBAAyB,GAAG,MAAM,CAE9E"}