@openrig/cli 0.6.14 → 0.7.1

package/daemon/dist/domain/queue-pickup.d.ts

@@ -1,9 +1,11 @@
 export declare const PICKUP_STALL_THRESHOLD_KEY = "queue.pickup_stall_threshold_minutes";
 export declare const DEFAULT_PICKUP_STALL_THRESHOLD_MINUTES = 3;
 export interface PickupReceipt {
-    state: "unclaimed" | "working" | "stalled-after-claim" | "parked" | "terminal";
-    /** Present iff stalled or terminal: the named evidence replacing the manual cross-surface join. */
+    state: "unclaimed" | "working" | "needs-input" | "stalled-after-claim" | "parked" | "terminal";
+    /** Present when waiting for input, stalled or terminal: the named evidence replacing the manual cross-surface join. */
     evidence?: string;
+    /** needs-input only: the stall evidence this claim would read without the input wait. */
+    stall?: string;
 }
 /** Threshold, FRESH-READ per call (the terminal.status_bar precedent: a config flip applies
  *  to the next read, no restart). Fail-open to the default on any resolution error. */
@@ -17,6 +19,7 @@ export interface PickupFacts {
     lastMeaningfulAt?: string;
     activity?: string;
     needsInput?: number;
+    needsInputReason?: string | null;
     now?: Date;
     thresholdMinutes?: number;
 }

package/daemon/dist/domain/queue-pickup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"queue-pickup.d.ts","sourceRoot":"","sources":["../../src/domain/queue-pickup.ts"],"names":[],"mappings":"AAqBA,eAAO,MAAM,0BAA0B,yCAAyC,CAAC;AACjF,eAAO,MAAM,sCAAsC,IAAI,CAAC;AAExD,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,WAAW,GAAG,SAAS,GAAG,qBAAqB,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC/E,mGAAmG;IACnG,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAQD;uFACuF;AACvF,wBAAgB,6BAA6B,IAAI,MAAM,CAQtD;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACrC,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACzC,2FAA2F;IAC3F,oBAAoB,EAAE,MAAM,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;8FAC8F;AAC9F,wBAAgB,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,aAAa,CA0B9D;AAED;;4DAE4D;AAC5D,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,qBAAqB,CAAC;IAC5B,mFAAmF;IACnF,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB,GAAG,oBAAoB,GAAG,IAAI,CAQ9B"}
+{"version":3,"file":"queue-pickup.d.ts","sourceRoot":"","sources":["../../src/domain/queue-pickup.ts"],"names":[],"mappings":"AAwBA,eAAO,MAAM,0BAA0B,yCAAyC,CAAC;AACjF,eAAO,MAAM,sCAAsC,IAAI,CAAC;AAExD,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,WAAW,GAAG,SAAS,GAAG,aAAa,GAAG,qBAAqB,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC/F,uHAAuH;IACvH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yFAAyF;IACzF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAQD;uFACuF;AACvF,wBAAgB,6BAA6B,IAAI,MAAM,CAQtD;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACrC,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACzC,2FAA2F;IAC3F,oBAAoB,EAAE,MAAM,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;8FAC8F;AAC9F,wBAAgB,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,aAAa,CAU9D;AA8BD;;4DAE4D;AAC5D,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,qBAAqB,CAAC;IAC5B,mFAAmF;IACnF,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB,GAAG,oBAAoB,GAAG,IAAI,CAU9B"}

package/daemon/dist/domain/queue-pickup.js

@@ -12,6 +12,9 @@
 // derived separately. A CLOSED row is terminal: the stall timer answers "is a
 // claimant holding this obligation", and no obligation survives closure — a
 // done item must never contradict its own waiting.state with stalled-after-claim.
+// A claimed row whose owner reports outstanding input reads needs-input, with the reason, but the
+// input signal can outlive its prompt, so the stall that would otherwise be read rides along as
+// `stall` and recovery acts on it exactly as on stalled-after-claim.
 // Legacy callers without timestamps retain count semantics.
 // Queue-row last_heartbeat is formally superseded (2026-08-30, S24 F-14); readers remain
 // null-tolerant. Wiring reopens only for the 0.5.7 mechanized-pull turn-end hook that knows the in-flight row,
@@ -39,6 +42,18 @@ export function resolvePickupThresholdMinutes() {
 /** The ONE derivation rule — every projection surface (rowToItem, the pickup view lens, the
  *  S02 finding input) calls this same function, so the rule cannot drift between surfaces. */
 export function derivePickup(facts) {
+    const receipt = deriveClaimPickup(facts);
+    if (!facts.claimedAt || (facts.needsInput ?? 0) <= 0 || !["working", "stalled-after-claim"].includes(receipt.state))
+        return receipt;
+    return {
+        state: "needs-input",
+        evidence: facts.needsInputReason === "permission_request_unverified"
+            ? "owner may need input (not verified: permission_request_unverified)"
+            : facts.needsInputReason ? `owner needs input: ${facts.needsInputReason}` : "owner needs input",
+        ...(receipt.state === "stalled-after-claim" ? { stall: receipt.evidence } : {}),
+    };
+}
+function deriveClaimPickup(facts) {
     if (facts.state === "blocked")
         return { state: "parked" };
     if (CLOSED_PICKUP_STATES.includes(facts.state)) {
@@ -70,13 +85,15 @@ export function derivePickup(facts) {
     };
 }
 export function stalledPickupFinding(item) {
-    if (item.pickup?.state !== "stalled-after-claim")
+    const pickup = item.pickup;
+    const stall = pickup?.state === "stalled-after-claim" ? pickup.evidence ?? "" : pickup?.state === "needs-input" ? pickup.stall : undefined;
+    if (stall === undefined)
         return null;
     return {
         kind: "stalled-after-claim",
         target: item.destinationSession ?? "",
         qitemId: item.qitemId,
-        evidence: item.pickup.evidence ?? "",
+        evidence: pickup.state === "needs-input" ? `${stall}; ${pickup.evidence}` : stall,
     };
 }
 //# sourceMappingURL=queue-pickup.js.map

package/daemon/dist/domain/queue-pickup.js.map

@@ -1 +1 @@
-{"version":3,"file":"queue-pickup.js","sourceRoot":"","sources":["../../src/domain/queue-pickup.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,4FAA4F;AAC5F,wFAAwF;AACxF,6FAA6F;AAC7F,8FAA8F;AAC9F,qFAAqF;AACrF,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,+EAA+E;AAC/E,8EAA8E;AAC9E,4EAA4E;AAC5E,kFAAkF;AAClF,4DAA4D;AAC5D,yFAAyF;AACzF,+GAA+G;AAC/G,wGAAwG;AAExG,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAElE,MAAM,CAAC,MAAM,0BAA0B,GAAG,sCAAsC,CAAC;AACjF,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC;AAQxD;;;oEAGoE;AACpE,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,CAAU,CAAC;AAE7F;uFACuF;AACvF,MAAM,UAAU,6BAA6B;IAC3C,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,aAAa,EAAE,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC,KAAK,CAAC;QAC3E,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAChD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,sCAAsC,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,sCAAsC,CAAC;IAChD,CAAC;AACH,CAAC;AAeD;8FAC8F;AAC9F,MAAM,UAAU,YAAY,CAAC,KAAkB;IAC7C,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC1D,IAAK,oBAA0C,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACtE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IACpD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9C,+FAA+F;IAC/F,mFAAmF;IACnF,MAAM,mBAAmB,GACvB,CAAC,CAAC,KAAK,CAAC,aAAa,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC;IACvE,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,UAAU;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACnF,6EAA6E;IAC7E,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,oBAAoB,GAAG,CAAC,IAAI,mBAAmB,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACjI,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,6BAA6B,EAAE,CAAC,GAAG,MAAM,CAAC;IACzF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC9J,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC;IACrC,IAAI,KAAK,IAAI,WAAW;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACtD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC;IAC3C,OAAO;QACL,KAAK,EAAE,qBAAqB;QAC5B,QAAQ,EAAE,KAAK,CAAC,gBAAgB,KAAK,SAAS;YAC5C,CAAC,CAAC,WAAW,OAAO,8CAA8C;YAClE,CAAC,CAAC,kCAAkC,OAAO,wBAAwB,KAAK,CAAC,QAAQ,IAAI,SAAS,kCAAkC;KACnI,CAAC;AACJ,CAAC;AAaD,MAAM,UAAU,oBAAoB,CAAC,IAIpC;IACC,IAAI,IAAI,CAAC,MAAM,EAAE,KAAK,KAAK,qBAAqB;QAAE,OAAO,IAAI,CAAC;IAC9D,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,MAAM,EAAE,IAAI,CAAC,kBAAkB,IAAI,EAAE;QACrC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE;KACrC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"queue-pickup.js","sourceRoot":"","sources":["../../src/domain/queue-pickup.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,4FAA4F;AAC5F,wFAAwF;AACxF,6FAA6F;AAC7F,8FAA8F;AAC9F,qFAAqF;AACrF,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,+EAA+E;AAC/E,8EAA8E;AAC9E,4EAA4E;AAC5E,kFAAkF;AAClF,kGAAkG;AAClG,gGAAgG;AAChG,qEAAqE;AACrE,4DAA4D;AAC5D,yFAAyF;AACzF,+GAA+G;AAC/G,wGAAwG;AAExG,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAElE,MAAM,CAAC,MAAM,0BAA0B,GAAG,sCAAsC,CAAC;AACjF,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC;AAUxD;;;oEAGoE;AACpE,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,CAAU,CAAC;AAE7F;uFACuF;AACvF,MAAM,UAAU,6BAA6B;IAC3C,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,aAAa,EAAE,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAAC,KAAK,CAAC;QAC3E,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAChD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,sCAAsC,CAAC;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,sCAAsC,CAAC;IAChD,CAAC;AACH,CAAC;AAgBD;8FAC8F;AAC9F,MAAM,UAAU,YAAY,CAAC,KAAkB;IAC7C,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACpI,OAAO;QACL,KAAK,EAAE,aAAa;QACpB,QAAQ,EAAE,KAAK,CAAC,gBAAgB,KAAK,+BAA+B;YAClE,CAAC,CAAC,oEAAoE;YACtE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,sBAAsB,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,mBAAmB;QACjG,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,qBAAqB,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAkB;IAC3C,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC1D,IAAK,oBAA0C,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACtE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IACpD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC9C,+FAA+F;IAC/F,mFAAmF;IACnF,MAAM,mBAAmB,GACvB,CAAC,CAAC,KAAK,CAAC,aAAa,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC;IACvE,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,UAAU;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACnF,6EAA6E;IAC7E,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,oBAAoB,GAAG,CAAC,IAAI,mBAAmB,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACjI,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,6BAA6B,EAAE,CAAC,GAAG,MAAM,CAAC;IACzF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC9J,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC;IACrC,IAAI,KAAK,IAAI,WAAW;QAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACtD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC;IAC3C,OAAO;QACL,KAAK,EAAE,qBAAqB;QAC5B,QAAQ,EAAE,KAAK,CAAC,gBAAgB,KAAK,SAAS;YAC5C,CAAC,CAAC,WAAW,OAAO,8CAA8C;YAClE,CAAC,CAAC,kCAAkC,OAAO,wBAAwB,KAAK,CAAC,QAAQ,IAAI,SAAS,kCAAkC;KACnI,CAAC;AACJ,CAAC;AAaD,MAAM,UAAU,oBAAoB,CAAC,IAIpC;IACC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,KAAK,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,KAAK,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3I,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,MAAM,EAAE,IAAI,CAAC,kBAAkB,IAAI,EAAE;QACrC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,QAAQ,EAAE,MAAO,CAAC,KAAK,KAAK,aAAa,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,MAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK;KACpF,CAAC;AACJ,CAAC"}

package/daemon/dist/domain/queue-recovery.d.ts

@@ -3,7 +3,7 @@ import type Database from "better-sqlite3";
  * Both deadline and delivery detectors consult the same recovery disposition. */
 export declare const recoveryTag: (qitemId: string) => string;
 export declare function recoveryId(db: Database.Database, qitemId: string): string;
-export declare function findQueueRecovery(db: Database.Database, qitemId: string): {
+export declare function findQueueRecovery(db: Database.Database, qitemId: string, excludeTag?: string): {
     qitemId: string;
     state: string;
 } | null;

package/daemon/dist/domain/queue-recovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"queue-recovery.d.ts","sourceRoot":"","sources":["../../src/domain/queue-recovery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAI3C;iFACiF;AACjF,eAAO,MAAM,WAAW,GAAI,SAAS,MAAM,KAAG,MAAmC,CAAC;AAUlF,wBAAgB,UAAU,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEzE;AAOD,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAanH"}
+{"version":3,"file":"queue-recovery.d.ts","sourceRoot":"","sources":["../../src/domain/queue-recovery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAI3C;iFACiF;AACjF,eAAO,MAAM,WAAW,GAAI,SAAS,MAAM,KAAG,MAAmC,CAAC;AAUlF,wBAAgB,UAAU,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEzE;AAOD,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAcxI"}

package/daemon/dist/domain/queue-recovery.js

@@ -21,12 +21,13 @@ export function recoveryId(db, qitemId) {
  * planner read that small index instead of scanning and parsing every row. */
 const RECOVERY_TAG_ROWS = `(tags LIKE '%"recovery-for:%' OR tags LIKE '%\\%')`;
 const RECOVERY_ORDER = "ORDER BY CASE WHEN state IN ('pending','in-progress','blocked') THEN 0 ELSE 1 END, ts_updated DESC, qitem_id DESC LIMIT 1";
-export function findQueueRecovery(db, qitemId) {
+export function findQueueRecovery(db, qitemId, excludeTag) {
     const tag = recoveryTag(qitemId);
     const row = db.prepare(`SELECT qitem_id, state, ts_updated FROM queue_items
     WHERE ${RECOVERY_TAG_ROWS} AND json_valid(tags) AND EXISTS (SELECT 1 FROM json_each(tags) WHERE value = ?)
+    ${excludeTag ? "AND NOT EXISTS (SELECT 1 FROM json_each(tags) WHERE value = ?)" : ""}
     ${RECOVERY_ORDER}`)
-        .get(tag);
+        .get(...(excludeTag ? [tag, excludeTag] : [tag]));
     if (!row)
         return null;
     if (!["pending", "in-progress", "blocked"].includes(row.state)) {

package/daemon/dist/domain/queue-recovery.js.map

@@ -1 +1 @@
-{"version":3,"file":"queue-recovery.js","sourceRoot":"","sources":["../../src/domain/queue-recovery.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAE9D;iFACiF;AACjF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,gBAAgB,OAAO,EAAE,CAAC;AAClF,SAAS,aAAa,CAAC,EAAqB,EAAE,OAAe;IAC3D,0EAA0E;IAC1E,uEAAuE;IACvE,4EAA4E;IAC5E,oEAAoE;IACpE,2EAA2E;IAC3E,oCAAoC;IACpC,OAAQ,EAAE,CAAC,OAAO,CAAC,oJAAoJ,CAAC,CAAC,GAAG,CAAC,OAAO,CAAuC,EAAE,EAAE,IAAI,IAAI,CAAC;AAC1O,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,EAAqB,EAAE,OAAe;IAC/D,OAAO,kBAAkB,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,wBAAwB,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAC9L,CAAC;AACD;;;8EAG8E;AAC9E,MAAM,iBAAiB,GAAG,oDAAoD,CAAC;AAC/E,MAAM,cAAc,GAAG,2HAA2H,CAAC;AACnJ,MAAM,UAAU,iBAAiB,CAAC,EAAqB,EAAE,OAAe;IACtE,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC;YACb,iBAAiB;MACvB,cAAc,EAAE,CAAC;SAClB,GAAG,CAAC,GAAG,CAAwE,CAAC;IACnF,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,MAAM,OAAO,GAAG,wBAAwB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,wBAAwB,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC,OAAO,IAAI,WAAW,IAAI,OAAO,CAAC,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;IAC5N,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;AACrD,CAAC"}
+{"version":3,"file":"queue-recovery.js","sourceRoot":"","sources":["../../src/domain/queue-recovery.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAE9D;iFACiF;AACjF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,gBAAgB,OAAO,EAAE,CAAC;AAClF,SAAS,aAAa,CAAC,EAAqB,EAAE,OAAe;IAC3D,0EAA0E;IAC1E,uEAAuE;IACvE,4EAA4E;IAC5E,oEAAoE;IACpE,2EAA2E;IAC3E,oCAAoC;IACpC,OAAQ,EAAE,CAAC,OAAO,CAAC,oJAAoJ,CAAC,CAAC,GAAG,CAAC,OAAO,CAAuC,EAAE,EAAE,IAAI,IAAI,CAAC;AAC1O,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,EAAqB,EAAE,OAAe;IAC/D,OAAO,kBAAkB,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,wBAAwB,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAC9L,CAAC;AACD;;;8EAG8E;AAC9E,MAAM,iBAAiB,GAAG,oDAAoD,CAAC;AAC/E,MAAM,cAAc,GAAG,2HAA2H,CAAC;AACnJ,MAAM,UAAU,iBAAiB,CAAC,EAAqB,EAAE,OAAe,EAAE,UAAmB;IAC3F,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC;YACb,iBAAiB;MACvB,UAAU,CAAC,CAAC,CAAC,gEAAgE,CAAC,CAAC,CAAC,EAAE;MAClF,cAAc,EAAE,CAAC;SAClB,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAwE,CAAC;IAC3H,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,MAAM,OAAO,GAAG,wBAAwB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,wBAAwB,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,CAAC,OAAO,IAAI,WAAW,IAAI,OAAO,CAAC,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;IAC5N,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;AACrD,CAAC"}

package/daemon/dist/domain/queue-repository.d.ts

@@ -3,7 +3,8 @@ import type { EventBus } from "./event-bus.js";
 import { type LoadResult } from "./gateway/human-registry.js";
 import type { PersistedEvent } from "./types.js";
 import { QueueTransitionLog, type QueueTransition, type RecentQueueTransitionScope } from "./queue-transition-log.js";
-import { type OutboxHandler, type OutboxEntry } from "./outbox-handler.js";
+import { type OutboxHandler } from "./outbox-handler.js";
+import type { QueueWakeFacts } from "./draft-aware-delivery.js";
 import { type PickupReceipt } from "./queue-pickup.js";
 import { type WaitingView, type WaitingActivityReader } from "./queue-waiting.js";
 import { type ReplyToChoice } from "./reply-to-choice.js";
@@ -41,6 +42,9 @@ export declare function hasLiveHumanGate(item: {
     destinationSession: string;
     blockedOn: string | null;
 }): boolean;
+/** Who triggered a wake, which is its source at the seat's interruption level: an agent's create or handoff nudge, or
+ *  OpenRig's own scheduling on an agent's row (ladder retries, an auto-unpark, boot recovery, health re-presentation). */
+export type WakeTrigger = "agent" | "openrig";
 /** 0.5.1-53 Atom 1a — typed non-qitem gate blocker prefixes. A park may be gated on a fold / auth /
  *  external condition that is NOT a qitem and NOT a human seat; these prefixes make such a gate a
  *  first-class, compact-visible, downstream-classifiable blocker (the ruling detail rides a transition). */
@@ -77,6 +81,40 @@ export declare function presentedNudgeResult(wireResult: string | null, claimedA
 export declare function classifyNudgeFailure(lastNudgeResult: string | null | undefined): "permanent-topology" | "transient" | "unknown" | null;
 export declare const QUEUE_PRIORITIES: readonly ["routine", "urgent", "critical"];
 export type QueuePriority = (typeof QUEUE_PRIORITIES)[number];
+/** A decision made on a person's behalf by the agent that would otherwise have asked them, inside the decision room of
+ *  the mode they have on. Kept beside the person's own answers, never as one. */
+export interface DelegatedDecision {
+    applicationId: string;
+    modeName: string;
+    /** The mode's decision room as the person stated it, at the time of the decision. */
+    decisionRoom: {
+        words: string;
+        exclusions: string[];
+    };
+    decidedBy: string;
+    decidedAt: string;
+    /** Per question: what was asked, the options offered, and the option chosen. A row with no structured questions
+     *  records its subject as the question and the agent's choice as text. */
+    choices: Array<{
+        questionId: string | null;
+        question: string;
+        options: Array<{
+            id: string;
+            label: string;
+        }>;
+        chosen: string;
+    }>;
+    reason: string;
+    reversible: boolean;
+}
+export type RecordDelegatedDecisionResult = {
+    status: "recorded";
+    item: QueueItem;
+} | {
+    status: "refused";
+    reason: "schema" | "not-found" | "not-pending" | "not-a-decision" | "permission-prompt" | "person-answering" | "not-the-asking-agent" | "no-active-mode" | "mode-changed" | "no-decision-room" | "not-the-persons-mode" | "invalid-choice";
+    message: string;
+};
 export interface QueueItem {
     qitemId: string;
     tsCreated: string;
@@ -98,7 +136,7 @@ export interface QueueItem {
     deliveryFailureDetail?: string;
     tags: string[] | null;
     blockedOn: string | null;
-    /** S04 — the DERIVED pickup receipt (unclaimed/working/stalled-after-claim/parked/terminal).
+    /** S04 — the DERIVED pickup receipt (unclaimed/working/needs-input/stalled-after-claim/parked/terminal).
      *  Never stored: computed at projection time from state + claimed_at + the transition log
      *  + heartbeat; a closed row is terminal, never stalled. */
     pickup?: PickupReceipt;
@@ -121,6 +159,8 @@ export interface QueueItem {
     humanQuestions?: HumanQuestion[] | null;
     /** #193 — answers recorded from clicks, questionId → optionId; null until the first click. */
     humanAnswers?: HumanAnswers | null;
+    /** A decision made on the person's behalf inside their mode's decision room; never their own answer. */
+    delegatedDecision?: DelegatedDecision | null;
     /** Short human-readable subject; null for callers that omit it. */
     summary: string | null;
     /** OPR.0.4.4.19 FR-5 — pointer to the durable artifact a human judges
@@ -168,9 +208,9 @@ export interface QueueItem {
  */
 export interface QueueNudgeTransport {
     deliveryTarget?(session: string): import("./seat-delivery-guard.js").GuardTarget | null;
-    retentionTarget?(session: string): import("./seat-delivery-guard.js").GuardTarget | null;
+    retentionTarget?(session: string, input?: import("./seat-delivery-guard.js").AdmissionInput): import("./seat-delivery-guard.js").GuardTarget | null;
     draftAwareTarget?(session: string): import("./seat-delivery-guard.js").GuardTarget | null;
-    configureGuardedWakes?(applicable: (entries: readonly OutboxEntry[]) => boolean): void;
+    configureGuardedWakes?(applicable: (entries: readonly QueueWakeFacts[]) => boolean): void;
     send(sessionName: string, text: string, opts?: {
         verify?: boolean;
         stampISO?: string;
@@ -182,15 +222,17 @@ export interface QueueNudgeTransport {
     }): Promise<{
         ok: boolean;
         verified?: boolean;
+        sent?: boolean;
+        inputPhase?: "not_reached" | "attempted" | "written";
         error?: string;
         reason?: string;
         outcome?: string;
-        delivery?: {
-            state: string;
-        };
     }>;
 }
 export interface QueueCreateInput {
+    /** Internal: a row OpenRig creates itself (a sweep finding, a health notice, a mode-end notice) wakes as OpenRig's own
+     *  message at the destination's interruption level. Queue create and the cross-host forward never take it from a request. */
+    wakeTrigger?: WakeTrigger;
     qitemId?: string;
     sourceSession: string;
     destinationSession: string;
@@ -211,6 +253,9 @@ export interface QueueCreateInput {
     targetRepo?: string | null;
     /** Explicit human delivery intent; omission preserves legacy decisions. */
     humanIntent?: "decision" | "update" | null;
+    /** An ask to a person lands on Steering with no Slack alert; true also sends one alert, for something only they can do
+     *  or an approval whose wait costs now. Its classification is stored with the create, so nothing later re-decides it. */
+    humanAlert?: boolean;
     /** Explicit supplemental thread content, never an automatic split of the primary body. */
     humanDetail?: string | null;
     /** #96 — post this update into the named earlier qitem's Slack thread. Updates only; if
@@ -288,8 +333,9 @@ export interface QueueUpdateInput {
      * updatable AT THE PARK MOMENT (state=blocked with a human-seat blocker),
      * not create-only: `rig queue block --summary --evidence-ref` persists
      * them onto the EXISTING item so the attention query + Packet 2 read
-     * them. OPR.0.5.1 slice-51-06 D2: supplying them on a NON-park transition
-     * is REJECTED (QueueRepositoryError "summary_evidence_not_persistable")
+     * them. A done close also persists evidence_ref, so a finished row carries
+     * its artifact. OPR.0.5.1 slice-51-06 D2: supplying either where it can't
+     * be stored is REJECTED (QueueRepositoryError "summary_evidence_not_persistable")
      * before any mutation — not silently ignored — so a caller never believes
      * unpersistable metadata was saved.
      */
@@ -325,6 +371,8 @@ export interface QueueHandoffInput {
     /** P21 §4 era-stamp: the route passes `transport:v1` (fromSession derived from the transport
      *  header chokepoint). Threaded onto both the source-close and new-item transitions. */
     identityProvenance?: string | null;
+    /** As on create: a handoff to a person lands on Steering, and true also sends one Slack alert. */
+    humanAlert?: boolean;
 }
 /**
  * Like {@link QueueHandoffInput} but the source qitem is closed as `done`
@@ -355,6 +403,10 @@ export interface QueueListOptions {
     compact?: boolean;
     rig?: string;
     activeOnly?: boolean;
+    /** A handoff's successor: items whose handed_off_from is this qitem id. Exact match. */
+    handedOffFrom?: string;
+    /** Items updated at or after this time: an ISO-8601 UTC timestamp in the stored form (toISOString). */
+    updatedSince?: string;
 }
 /** The message a `--wake-after` park timer carries when its owner gives none. */
 export declare function defaultParkWakeMessage(qitemId: string): string;
@@ -419,7 +471,7 @@ export declare function hasLinkedSuccessor(db: Database.Database, sourceQitemId:
  * Phase A wires no-op; Phase B can plug in the rig registry to reject
  * phantom-rig destinations. POC compatibility: `qitem_id` shape preserved.
  */
-declare const COMPACT_ELIDED_FIELDS: readonly ["body", "evidenceRef", "humanDetail", "waiting", "chainOfRecord", "replyTo", "humanQuestions", "humanAnswers"];
+declare const COMPACT_ELIDED_FIELDS: readonly ["body", "evidenceRef", "humanDetail", "waiting", "chainOfRecord", "replyTo", "humanQuestions", "humanAnswers", "delegatedDecision"];
 /** A compact listing row: the elided fields are absent, not empty, and `fieldsElided` names them. */
 export type CompactQueueItem = Omit<QueueItem, (typeof COMPACT_ELIDED_FIELDS)[number] | "fieldsElided"> & {
     fieldsElided: Array<(typeof COMPACT_ELIDED_FIELDS)[number]>;
@@ -494,6 +546,7 @@ export declare class QueueRepository {
      *     fallback real code rather than a promise in a comment). */
     private outbox;
     private resolveOccupantGeneration?;
+    private readonly resolveSessionAddresses;
     private readonly wakeRepo;
     private watchdogJobsRepo;
     /** PL-007 Workspace Primitive — true when migration 038 has applied the
@@ -506,6 +559,7 @@ export declare class QueueRepository {
     private readonly hasHumanIntentColumn;
     private readonly hasReplyToColumn;
     private readonly hasHumanQuestionsColumn;
+    private readonly hasDelegatedDecisionColumn;
     private readonly hasEvidenceRefColumn;
     private readonly hasMintingGenColumn;
     private readonly hasClaimedGenColumn;
@@ -548,6 +602,7 @@ export declare class QueueRepository {
          * is omitted (never forged).
          */
         resolveOccupantGeneration?: (sessionName: string) => string | null;
+        resolveSessionAddresses?: (name: string) => string[];
         loadHumanRegistry?: () => LoadResult;
     });
     /** Startup attaches the generation-aware shared repository. Isolated domain
@@ -566,6 +621,9 @@ export declare class QueueRepository {
      */
     attachTransport(transport: QueueNudgeTransport): void;
     private currentWakeIntent;
+    /** A wake's source and urgency at the seat's level: the trigger decides the source; the row's priority (urgent or
+     *  critical) makes it urgent, marked by whoever created the row. */
+    private wakeAdmission;
     private classifyWakeResult;
     /**
      * W1 (transactional closure): attach the durable wake-intent store AFTER
@@ -594,7 +652,7 @@ export declare class QueueRepository {
      * `nudge:false` intends no wake ⇒ no intent. A missing outbox is enforced by the
      * guard (fail-closed, MF2), not silently skipped here.
      */
-    stageWakeIntent(successorQitemId: string, fromSession: string, toSession: string, identityProvenance: string | null, nudge: boolean | undefined): void;
+    stageWakeIntent(successorQitemId: string, fromSession: string, toSession: string, identityProvenance: string | null, nudge: boolean | undefined, trigger?: WakeTrigger): void;
     private recordWakeIntent;
     private stageAutoUnparkWakeIntent;
     private deliverWakeIntentAfterCommit;
@@ -614,69 +672,19 @@ export declare class QueueRepository {
      */
     assertTerminalClosureHasIntent(sourceQitemId: string, successorQitemId: string, nudge: boolean | undefined): void;
     /**
-     * W1-b: deliver ONE committed wake intent. MF3: CLAIM (pending→sending) before
-     * the external send, then finalize (sending→outcome) after — so overlapping
-     * drains send the wake exactly ONCE (the effect, not just the state), and a
-     * second drain of an already-claimed/resolved intent skips. Returns what
-     * happened for the drain's tally.
-     *
-     *   verified          → delivered
-     *   ok, unverified    → indeterminate   (ambiguous; never silently delivered/failed)
-     *   timeout (MF6)     → indeterminate   (may have landed — not a hard failure)
-     *   other not-ok/throw→ failed          (visible terminal state)
+     * Attempt a current committed notification. A live claim, known success or manual
+     * hold is left alone; failed/uncertain history permits another attempt. A recovery
+     * pass tracks its coalesced members only in memory so each is attempted once per pass.
      */
     private deliverWakeIntent;
-    /**
-     * W1-b: the post-commit delivery for a successor's wake, and the ONE shared
-     * staged-intent delivery path. When the durable intent store is present
-     * (production), deliver the just-committed intent — which CLAIMS and FINALIZES
-     * the row, so a later recovery sweep cannot send it a second time. When it is
-     * absent (test/bootstrap), fall back to the pre-W1 best-effort nudge so behavior
-     * is unchanged where there is no intent to make durable. Called AFTER the
-     * terminal transaction commits (reversed-never: a pane write must not join the
-     * db transaction).
-     *
-     * PUBLIC as of P34: every terminal-closing writer that stages an intent must
-     * deliver through THIS path rather than {@link maybeNudge}. `maybeNudge` sends
-     * WITHOUT claiming or finalizing, so a staged intent would remain `pending` and
-     * the startup recovery sweep would deliver the same wake AGAIN. One staged
-     * intent, one delivery, one finalized row.
-     *
-     * P34 correction: the no-outbox fallback above was documented here but never
-     * implemented — `deliverWakeIntent` simply returns "skipped" with no outbox
-     * attached, so the nudge vanished SILENTLY (a skip is not an error, so nothing
-     * surfaced it). The pre-W1 callers reached this path only after the MF2 guard
-     * had already proven an outbox was attached, which is why it never showed. P34
-     * routes writers here whose harnesses attach no outbox, so the fallback is now
-     * real code rather than a promise in a comment.
-     */
+    /** Deliver after the queue transaction commits, never from inside it. The shared
+     * intent path owns claims and outcomes; without an intent store use the legacy nudge. */
     deliverWakeForSuccessor(successorQitemId: string, destinationSession: string, nudge: boolean | undefined, sourceSession?: string): Promise<void>;
-    /**
-     * W1-b: the startup-recovery sweep. Delivers wake intents a crash left
-     * committed-but-undelivered (the terminal txn committed, the process died
-     * before the post-commit deliver). Pages in bounded batches and TERMINATES on
-     * a served short batch or on a no-progress round (a flapping transport marks
-     * rows failed = visible, so it still progresses) — never a silent cap, never a
-     * spin.
-     *
-     * MF6 (honest retry policy): the sweep retries ONLY `pending` rows — i.e. wake
-     * intents a crash left committed-but-undelivered. Terminal `failed` and
-     * `indeterminate` rows are NOT re-driven: a failed row would risk resurrecting
-     * a dead wake and an indeterminate one may already have landed (double-send).
-     * Both are left in a VISIBLE terminal state for out-of-band reconciliation. No
-     * periodic timer (out of scope, ruled); a bounded retry of failed rows is the
-     * NAMED residue, not a silent guarantee.
-     */
-    /**
-     * BLOCKING 1 (guard re-seal): the recovery-boundary reconciliation, called ONCE
-     * at startup (NOT inside the drain, which can be invoked concurrently). Moves any
-     * abandoned `sending` wake intents — a prior crashed process's claims — to
-     * `indeterminate`, WITHOUT re-sending: a claim left `sending` is ambiguous (the
-     * send may or may not have landed). Kept SEPARATE from drainPendingWakeIntents so
-     * an overlapping drain can never reconcile another drain's in-flight claim.
-     * Returns the count reconciled.
-     */
+    /** Once at startup, mark abandoned live claims unknown before recovery makes a
+     * new attempt. Never run inside a drain: another drain may still own a live send. */
     reconcileAbandonedWakeIntents(): number;
+    /** Recover current notifications once per pass. A snapshot horizon and seek cursor
+     * prevent new arrivals or persistent failures from making this pass unbounded. */
     drainPendingWakeIntents(): Promise<{
         delivered: number;
         indeterminate: number;
@@ -705,7 +713,10 @@ export declare class QueueRepository {
      * copies were deleted, refused at the seat boundary instead); this
      * site holds no copy of its own.
      */
-    maybeNudge(qitemId: string, destinationSession: string, nudgeOpt: boolean | undefined, sourceSession?: string, bodyOverride?: string): Promise<void>;
+    maybeNudge(qitemId: string, destinationSession: string, nudgeOpt: boolean | undefined, sourceSession?: string, bodyOverride?: string, trigger?: WakeTrigger): Promise<void>;
+    /** The following startup intent drain owns durable pending wakes. Legacy packets
+     * and overdue claimed work (not eligible for that drain) still use the nudge path. */
+    recoverLostNudge(qitemId: string, destinationSession: string, sourceSession?: string): Promise<void>;
     /**
      * W1 (transactional closure): the shared wake-send CORE. Builds the pane
      * envelope, sends with verify, and CLASSIFIES the transport result into the W1
@@ -720,6 +731,13 @@ export declare class QueueRepository {
      * delivered nor demoted to failed.
      */
     private performWakeSend;
+    /** First committed return of a direct ask, including pre-shared-ID Slack replies. */
+    getHumanAnswer(qitemId: string, actorSession: string): QueueItem | null;
+    /** The lookup and create's insert run synchronously before its first delivery await.
+     * Every new surface uses the same ID; old IDs and their original bodies remain intact. */
+    createHumanAnswer(input: QueueCreateInput & {
+        inboundReplyTo: string;
+    }): Promise<QueueItem>;
     create(input: QueueCreateInput): Promise<QueueItem & {
         /** Response-only: the retry's changed body was not written. Never stored on the row. */
         createWarning?: {
@@ -763,6 +781,11 @@ export declare class QueueRepository {
      * provides the atomic boundary).
      */
     private createInTransactionalContext;
+    /** humanAlert marks an ask to a person: a person by address or by the registry (a registered person may be addressed as
+     *  their seat), as the classifier reads it, and never an update. */
+    private assertHumanAlert;
+    /** A person by address or by the registry: a registered person may be addressed as their seat or an alias. */
+    isPersonAddress(destination: string): boolean;
     private validateReplyTo;
     /**
      * Transactional handoff: close the source qitem (state=done,
@@ -900,6 +923,8 @@ export declare class QueueRepository {
         persistedEvent: PersistedEvent;
         persistedEvents: PersistedEvent[];
     };
+    /** Notify subscribers of events persisted inside a caller's own transaction (updateWithinTransaction), after it commits. */
+    notifyCommitted(events: readonly PersistedEvent[]): void;
     /** Internal read-only audit pointer for non-state receipts. Never search past a state write. */
     retainedClaimBlocker(qitemId: string): string | undefined;
     /**
@@ -960,10 +985,12 @@ export declare class QueueRepository {
     /** The parked row an ordinary due park timer reminds about, when its reminder may share one message with other
      *  reminders due for the same seat in the same scheduler pass: a one-shot `--wake-after` timer serving exactly one
      *  live parked row, carrying its default message. Null keeps the reminder's own send: a custom message, a shared
-     *  or attached watchdog, a repeating wait and a provider-limit timer each deliver as before. */
+     *  or attached watchdog, a repeating wait and a provider-limit timer each deliver as before. The entry carries the
+     *  current park's recorded continuation, or null, for the wake's preview. */
     parkReminderDigestEntry(jobId: string, message: string): {
         qitemId: string;
         summary: string | null;
+        continuation: string | null;
     } | null;
     /** Called by the watchdog engine after the delivery attempt is durably
      *  audited. The queue transition records that attempt independently of
@@ -993,6 +1020,38 @@ export declare class QueueRepository {
         questionId: string;
         optionId: string;
     }): RecordHumanAnswerResult;
+    /**
+     * Record a decision made on the person's behalf, inside their mode's decision room, on the ask's own row. Only the
+     * agent that asked may record it, only on a pending decision to that person, and only while their mode has a stated
+     * decision room, read in the same transaction. A permission prompt or approval gate is never decided this way. It never writes humanAnswers or a
+     * human-decision-resolved notice: the person didn't answer. The ask is closed (done, no follow-on) so it isn't posted
+     * or re-offered, and the asking agent carries on with its choice.
+     */
+    recordDelegatedDecision(input: {
+        qitemId: string;
+        actorSession: string;
+        /** The application whose room the agent judged against (from reading the room); a different current one is refused. */
+        expectedApplicationId: string;
+        /** The person's active mode application, read inside this transaction (null: at desk). */
+        currentApplication: (entityId: string) => {
+            applicationId: string;
+            entityId: string;
+            modeName: string;
+            decisionRoom: {
+                words: string;
+                exclusions: string[];
+            } | null;
+        } | null;
+        choices: Array<{
+            questionId?: string | null;
+            chosen: string;
+        }>;
+        reason: string;
+        reversible: boolean;
+        now?: Date;
+    }): RecordDelegatedDecisionResult;
+    /** The decisions made on a person's behalf under one mode application, oldest first: for the account when they're back. */
+    delegatedDecisionsFor(applicationId: string): QueueItem[];
     getById(qitemId: string): QueueItem | null;
     /** #96 — the thread choice the daemon recorded before this replyTo update's first post;
      *  null = not yet chosen. Only an in-process daemon write counts: any HTTP write carries an
@@ -1071,6 +1130,8 @@ export declare class QueueRepository {
         destinationSession?: string;
         sourceSession?: string;
         targetRepo?: string;
+        handedOffFrom?: string;
+        updatedSince?: string;
     }): QueueItem[];
     /** The compact listings' columns: the shared set plus the summary, which is short and is what people search for. */
     private compactColumns;
@@ -1148,6 +1209,18 @@ export declare class QueueRepository {
      *  history, inactive episodes, never-posted and transport-failed all read false. Same derivation
      *  as deliveryOutcomeFor; it reads row fields, never the waiting view. */
     humanNotificationPostedThisEpisode(qitemId: string, listed?: ListedLedger): boolean;
+    /** The ask's own notification while it still binds its recipient. Only that notification does: create writes it in
+     *  state pending, to the destination of that moment. A park notice (its recipient is not retained), a resolution notice,
+     *  or a later destination change (routeToFallback opens no new episode) can't establish who has the ask now. */
+    private currentAskNotification;
+    /** True when this row is an ask to a person that's still theirs: its own create-time human-required notification, at
+     *  any level, not rerouted since. Every attention reader (listAttention, the list route, the Feed) uses this one
+     *  membership, whatever happened to its Slack post. */
+    isCurrentHumanAsk(qitemId: string, listed?: ListedLedger): boolean;
+    /** True when this row's current ask was placed on Steering without a Slack alert (human-required at RECORD) and is still
+     *  with that person (not rerouted): it waits on them there by design, like a posted ask, so it isn't stuck and nothing
+     *  re-offers it. */
+    humanAskWithoutAlert(qitemId: string, listed?: ListedLedger): boolean;
     /** owners: the row's owner notifications as ownerNotificationsForQitems gives them, when the caller read them. */
     private deliveryLedger;
     private receiptNotesStatement?;
@@ -1163,6 +1236,7 @@ export declare class QueueRepository {
     /** The grace window before a receiptless gateway-routed row honestly reads
      *  never-posted (the connector sweep cadence bounds normal posting latency). */
     static readonly NEVER_POSTED_WINDOW_MS = 120000;
+    /** Record one wake attempt. */
     recordNudgeAttempt(qitemId: string, result: string): void;
     /**
      * Where, in the row's `resolution`, the fallback line `routeToFallback` last wrote begins; null when it cannot be