@telora/daemon 0.17.59 → 0.17.70

package/dist/delivery-reconciler-apply.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Activation layer for the single-writer delivery reconciler.
+ *
+ * Delivery 4 of the Delivery Execution Pathway Consolidation focus (reality-tree
+ * injection #10). This is the step that makes the pure reconciler
+ * (delivery-reconciler.ts) the DECISION AUTHORITY for every daemon
+ * execution_status write, with the two safety properties the focus method
+ * (characterize -> shadow -> flip, reversible) requires:
+ *
+ *   1. Runtime self-check (replaces the manual prod shadow-observation gate).
+ *      Each write site still computes what the legacy ("old path") logic would
+ *      have written; `resolveReconciledWrite` compares that to the reconciler's
+ *      target and logs `[reconciler-divergence]` on any mismatch. The retained
+ *      legacy computation is exactly what lets prod self-verify the reconciler
+ *      against the prior behavior for one release -- no maintenance-window or
+ *      manual shadow observation needed.
+ *
+ *   2. Reversibility. A single switch, `TELORA_RECONCILER_WRITE`, DEFAULT-ON,
+ *      selects whose decision is WRITTEN: ON -> the reconciler; OFF -> the
+ *      retained legacy target. Flip to '0'/'off'/'false'/'no' (and restart) to
+ *      revert instantly; the whole consolidation also reverts as one merge.
+ *
+ * Why activation is safe (suite stays green by construction): the reconciler was
+ * built (Delivery 3) to MIRROR the live writers and proven so by the Delivery 2
+ * parity tests. So in every characterized case `result.target === legacyTarget`
+ * -- the write is byte-identical and the characterization suite stays green. The
+ * self-check exists to catch any UN-characterized prod case where they differ.
+ *
+ * The single shared "issues are done" predicate (areDeliveryIssuesDone) and the
+ * agreed terminal set live in delivery-reconciler.ts. The agreed set is
+ * {Done, Verified, In Review} (OPEN = {To Do, In Progress, Blocked}); the
+ * divergent Postgres literal-Done predicate is removed in Delivery 5.
+ */
+import { type ReconcileInput, type ReconcileResult } from './delivery-reconciler.js';
+import type { ExecutionStatus } from '@telora/daemon-core';
+/** Reversibility switch. DEFAULT-ON (opt-out), unlike the shadow's opt-in flag. */
+export declare const RECONCILER_WRITE_ENV = "TELORA_RECONCILER_WRITE";
+/**
+ * Whether the reconciler's decision is the one WRITTEN. DEFAULT-ON: unset / ''
+ * / any value other than the explicit off-tokens enables it. Only
+ * '0'/'off'/'false'/'no' (case-insensitive) revert to writing the legacy target.
+ *
+ * This mirrors the opt-OUT semantics of shouldRunLoop (undefined/'' -> on,
+ * '0' -> off) rather than the shadow harness's opt-IN, because the reconciler is
+ * the intended default writer after this delivery -- reverting is the exception.
+ */
+export declare function reconcilerWriteEnabled(env?: NodeJS.ProcessEnv): boolean;
+export interface ReconciledWriteDecision {
+    /**
+     * The status the caller should WRITE: the reconciler's target when the switch
+     * is ON (default), otherwise the retained legacy target.
+     */
+    target: ExecutionStatus;
+    /** The reconciler's computed result -- always present, regardless of the switch. */
+    result: ReconcileResult;
+    /** Whether the reconciler's target differs from the legacy target. */
+    diverged: boolean;
+    /** Whether the reconciler's decision is the one being written (the switch state). */
+    reconcilerAuthoritative: boolean;
+}
+export interface ResolveReconciledWriteParams {
+    /** Short site label for the divergence log (e.g. 'auto-advance', 'completion'). */
+    site: string;
+    deliveryId: string;
+    deliveryName: string;
+    /** The full signal for the reconciler. currentStatus is the status at THIS step. */
+    input: ReconcileInput;
+    /** What the legacy/old-path code decided to write for this same step. */
+    legacyTarget: ExecutionStatus;
+}
+export interface ReconciledWriteDeps {
+    /** Divergence sink. Defaults to console.log; injected in tests for capture. */
+    log?: (message: string) => void;
+    /** Switch state. Defaults to reconcilerWriteEnabled(); injected in tests. */
+    writeEnabled?: () => boolean;
+}
+/**
+ * Decide what status to write for one transition step, with the runtime
+ * self-check. Single-step: callers that walk multiple steps in one pass
+ * (e.g. queued -> coding -> verify) call this once per actual write, keying
+ * `input.currentStatus` + `legacyTarget` to that step, so the reconciler's
+ * single-step decision and the legacy step correspond 1:1.
+ */
+export declare function resolveReconciledWrite(params: ResolveReconciledWriteParams, deps?: ReconciledWriteDeps): ReconciledWriteDecision;
+//# sourceMappingURL=delivery-reconciler-apply.d.ts.map

package/dist/delivery-reconciler-apply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-reconciler-apply.d.ts","sourceRoot":"","sources":["../src/delivery-reconciler-apply.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,eAAe,EACrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,mFAAmF;AACnF,eAAO,MAAM,oBAAoB,4BAA4B,CAAC;AAE9D;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAMpF;AAED,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,MAAM,EAAE,eAAe,CAAC;IACxB,oFAAoF;IACpF,MAAM,EAAE,eAAe,CAAC;IACxB,sEAAsE;IACtE,QAAQ,EAAE,OAAO,CAAC;IAClB,qFAAqF;IACrF,uBAAuB,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,4BAA4B;IAC3C,mFAAmF;IACnF,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,KAAK,EAAE,cAAc,CAAC;IACtB,yEAAyE;IACzE,YAAY,EAAE,eAAe,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IAClC,+EAA+E;IAC/E,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,6EAA6E;IAC7E,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC;CAC9B;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,4BAA4B,EACpC,IAAI,GAAE,mBAAwB,GAC7B,uBAAuB,CAsBzB"}

package/dist/delivery-reconciler-apply.js

@@ -0,0 +1,80 @@
+/**
+ * Activation layer for the single-writer delivery reconciler.
+ *
+ * Delivery 4 of the Delivery Execution Pathway Consolidation focus (reality-tree
+ * injection #10). This is the step that makes the pure reconciler
+ * (delivery-reconciler.ts) the DECISION AUTHORITY for every daemon
+ * execution_status write, with the two safety properties the focus method
+ * (characterize -> shadow -> flip, reversible) requires:
+ *
+ *   1. Runtime self-check (replaces the manual prod shadow-observation gate).
+ *      Each write site still computes what the legacy ("old path") logic would
+ *      have written; `resolveReconciledWrite` compares that to the reconciler's
+ *      target and logs `[reconciler-divergence]` on any mismatch. The retained
+ *      legacy computation is exactly what lets prod self-verify the reconciler
+ *      against the prior behavior for one release -- no maintenance-window or
+ *      manual shadow observation needed.
+ *
+ *   2. Reversibility. A single switch, `TELORA_RECONCILER_WRITE`, DEFAULT-ON,
+ *      selects whose decision is WRITTEN: ON -> the reconciler; OFF -> the
+ *      retained legacy target. Flip to '0'/'off'/'false'/'no' (and restart) to
+ *      revert instantly; the whole consolidation also reverts as one merge.
+ *
+ * Why activation is safe (suite stays green by construction): the reconciler was
+ * built (Delivery 3) to MIRROR the live writers and proven so by the Delivery 2
+ * parity tests. So in every characterized case `result.target === legacyTarget`
+ * -- the write is byte-identical and the characterization suite stays green. The
+ * self-check exists to catch any UN-characterized prod case where they differ.
+ *
+ * The single shared "issues are done" predicate (areDeliveryIssuesDone) and the
+ * agreed terminal set live in delivery-reconciler.ts. The agreed set is
+ * {Done, Verified, In Review} (OPEN = {To Do, In Progress, Blocked}); the
+ * divergent Postgres literal-Done predicate is removed in Delivery 5.
+ */
+import { reconcileDeliveryStatus, } from './delivery-reconciler.js';
+/** Reversibility switch. DEFAULT-ON (opt-out), unlike the shadow's opt-in flag. */
+export const RECONCILER_WRITE_ENV = 'TELORA_RECONCILER_WRITE';
+/**
+ * Whether the reconciler's decision is the one WRITTEN. DEFAULT-ON: unset / ''
+ * / any value other than the explicit off-tokens enables it. Only
+ * '0'/'off'/'false'/'no' (case-insensitive) revert to writing the legacy target.
+ *
+ * This mirrors the opt-OUT semantics of shouldRunLoop (undefined/'' -> on,
+ * '0' -> off) rather than the shadow harness's opt-IN, because the reconciler is
+ * the intended default writer after this delivery -- reverting is the exception.
+ */
+export function reconcilerWriteEnabled(env = process.env) {
+    const raw = env[RECONCILER_WRITE_ENV];
+    if (raw === undefined)
+        return true;
+    const v = raw.trim().toLowerCase();
+    if (v === '')
+        return true;
+    return !['0', 'off', 'false', 'no'].includes(v);
+}
+/**
+ * Decide what status to write for one transition step, with the runtime
+ * self-check. Single-step: callers that walk multiple steps in one pass
+ * (e.g. queued -> coding -> verify) call this once per actual write, keying
+ * `input.currentStatus` + `legacyTarget` to that step, so the reconciler's
+ * single-step decision and the legacy step correspond 1:1.
+ */
+export function resolveReconciledWrite(params, deps = {}) {
+    const log = deps.log ?? ((m) => console.log(m));
+    const writeEnabled = (deps.writeEnabled ?? reconcilerWriteEnabled)();
+    const result = reconcileDeliveryStatus(params.input);
+    const diverged = result.target !== params.legacyTarget;
+    if (diverged) {
+        log(`[reconciler-divergence] site=${params.site} delivery=${params.deliveryId} ` +
+            `("${params.deliveryName}") legacy=${params.legacyTarget} ` +
+            `reconciled=${result.target} canonical=${result.canonical} ` +
+            `reason="${result.reason}"`);
+    }
+    return {
+        target: writeEnabled ? result.target : params.legacyTarget,
+        result,
+        diverged,
+        reconcilerAuthoritative: writeEnabled,
+    };
+}
+//# sourceMappingURL=delivery-reconciler-apply.js.map

package/dist/delivery-reconciler-apply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-reconciler-apply.js","sourceRoot":"","sources":["../src/delivery-reconciler-apply.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EACL,uBAAuB,GAGxB,MAAM,0BAA0B,CAAC;AAGlC,mFAAmF;AACnF,MAAM,CAAC,MAAM,oBAAoB,GAAG,yBAAyB,CAAC;AAE9D;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACzE,MAAM,GAAG,GAAG,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACtC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnC,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC1B,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAkCD;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAoC,EACpC,OAA4B,EAAE;IAE9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,sBAAsB,CAAC,EAAE,CAAC;IAErE,MAAM,MAAM,GAAG,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,YAAY,CAAC;IAEvD,IAAI,QAAQ,EAAE,CAAC;QACb,GAAG,CACD,gCAAgC,MAAM,CAAC,IAAI,aAAa,MAAM,CAAC,UAAU,GAAG;YAC1E,KAAK,MAAM,CAAC,YAAY,aAAa,MAAM,CAAC,YAAY,GAAG;YAC3D,cAAc,MAAM,CAAC,MAAM,cAAc,MAAM,CAAC,SAAS,GAAG;YAC5D,WAAW,MAAM,CAAC,MAAM,GAAG,CAC9B,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY;QAC1D,MAAM;QACN,QAAQ;QACR,uBAAuB,EAAE,YAAY;KACtC,CAAC;AACJ,CAAC"}

package/dist/delivery-reconciler-shadow.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Shadow harness for the single-writer delivery reconciler.
+ *
+ * Delivery 3 (single-writer reconciler, shadow mode) of the Delivery Execution
+ * Pathway Consolidation focus (reality-tree injection #10). De-risking method:
+ * characterize -> SHADOW -> flip one transition at a time. This is the shadow
+ * step.
+ *
+ * On each poll, for every active focus's deliveries, this gathers the live
+ * signal (issue rollup, worktree-committed flag), runs the PURE
+ * reconcileDeliveryStatus(), compares its computed target to the delivery's
+ * LIVE execution_status, and LOGS every divergence. It makes ZERO writes to
+ * execution_status -- there is no status writer in its dependency surface by
+ * construction. When divergence holds steady at zero, the reconciler is safe to
+ * flip into the write path one transition at a time (Delivery 4).
+ *
+ * Default-OFF: unlike the focus/verification loops (opt-OUT via shouldRunLoop),
+ * the shadow is opt-IN. It runs only when TELORA_RECONCILER_SHADOW is a truthy
+ * value ('1'/'true'/etc); unset / '' / '0' keep it a no-op, so wiring it into
+ * the live poll changes nothing until an operator deliberately enables it.
+ *
+ * Poll-time signal note: at poll time there is no exiting review session, so the
+ * harness supplies a conservative review state (a verify delivery with no open
+ * work stays in verify -- matching what the live poll does; verify->done is
+ * driven by the review-exit path, not the poll). The transitions the shadow
+ * meaningfully exercises at poll time are the issue-rollup-driven ones
+ * (queued/coding/verify_failed) and verify->verify_failed on open work.
+ */
+import type { DaemonConfig } from './types.js';
+import { getActiveFocuses, getDeliveryIssues } from './supabase.js';
+import { getFocusDeliveries } from './queries/focuses.js';
+import { getFocusWorktree } from './focus-worktree-state.js';
+import { worktreeHasUncommittedChanges } from './worktree-safety.js';
+/** Opt-in flag name. Default-OFF (only a truthy value enables the shadow). */
+export declare const RECONCILER_SHADOW_ENV = "TELORA_RECONCILER_SHADOW";
+/** Default-off opt-in: only '1'/'true'/'yes'/'on' (case-insensitive) enable. */
+export declare function reconcilerShadowEnabled(env?: NodeJS.ProcessEnv): boolean;
+/**
+ * Injectable collaborators. The surface is READ-ONLY by design: there is NO
+ * status-writer dependency, which is the structural guarantee that the shadow
+ * cannot mutate execution_status.
+ */
+export interface ReconcilerShadowDeps {
+    isEnabled: () => boolean;
+    getActiveFocuses: typeof getActiveFocuses;
+    getFocusDeliveries: typeof getFocusDeliveries;
+    getDeliveryIssues: typeof getDeliveryIssues;
+    getFocusWorktree: typeof getFocusWorktree;
+    worktreeHasUncommittedChanges: typeof worktreeHasUncommittedChanges;
+    /** Divergence sink. Defaults to console.log; injected in tests for capture. */
+    log: (message: string) => void;
+}
+export interface ReconcilerShadowSummary {
+    /** Whether the shadow actually ran (false when the flag is off). */
+    ran: boolean;
+    /** Number of deliveries whose live status was compared. */
+    checked: number;
+    /** Number where the reconciled target differed from the live status. */
+    divergences: number;
+}
+/**
+ * Run one shadow pass for a (product-scoped) config. Reads only; never writes.
+ */
+export declare function runReconcilerShadow(config: DaemonConfig, deps?: ReconcilerShadowDeps): Promise<ReconcilerShadowSummary>;
+//# sourceMappingURL=delivery-reconciler-shadow.d.ts.map

package/dist/delivery-reconciler-shadow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-reconciler-shadow.d.ts","sourceRoot":"","sources":["../src/delivery-reconciler-shadow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AAKrE,8EAA8E;AAC9E,eAAO,MAAM,qBAAqB,6BAA6B,CAAC;AAEhE,gFAAgF;AAChF,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAIrF;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,OAAO,CAAC;IACzB,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,iBAAiB,EAAE,OAAO,iBAAiB,CAAC;IAC5C,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,6BAA6B,EAAE,OAAO,6BAA6B,CAAC;IACpE,+EAA+E;IAC/E,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AAYD,MAAM,WAAW,uBAAuB;IACtC,oEAAoE;IACpE,GAAG,EAAE,OAAO,CAAC;IACb,2DAA2D;IAC3D,OAAO,EAAE,MAAM,CAAC;IAChB,wEAAwE;IACxE,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,YAAY,EACpB,IAAI,GAAE,oBAAkC,GACvC,OAAO,CAAC,uBAAuB,CAAC,CA4ElC"}

package/dist/delivery-reconciler-shadow.js

@@ -0,0 +1,127 @@
+/**
+ * Shadow harness for the single-writer delivery reconciler.
+ *
+ * Delivery 3 (single-writer reconciler, shadow mode) of the Delivery Execution
+ * Pathway Consolidation focus (reality-tree injection #10). De-risking method:
+ * characterize -> SHADOW -> flip one transition at a time. This is the shadow
+ * step.
+ *
+ * On each poll, for every active focus's deliveries, this gathers the live
+ * signal (issue rollup, worktree-committed flag), runs the PURE
+ * reconcileDeliveryStatus(), compares its computed target to the delivery's
+ * LIVE execution_status, and LOGS every divergence. It makes ZERO writes to
+ * execution_status -- there is no status writer in its dependency surface by
+ * construction. When divergence holds steady at zero, the reconciler is safe to
+ * flip into the write path one transition at a time (Delivery 4).
+ *
+ * Default-OFF: unlike the focus/verification loops (opt-OUT via shouldRunLoop),
+ * the shadow is opt-IN. It runs only when TELORA_RECONCILER_SHADOW is a truthy
+ * value ('1'/'true'/etc); unset / '' / '0' keep it a no-op, so wiring it into
+ * the live poll changes nothing until an operator deliberately enables it.
+ *
+ * Poll-time signal note: at poll time there is no exiting review session, so the
+ * harness supplies a conservative review state (a verify delivery with no open
+ * work stays in verify -- matching what the live poll does; verify->done is
+ * driven by the review-exit path, not the poll). The transitions the shadow
+ * meaningfully exercises at poll time are the issue-rollup-driven ones
+ * (queued/coding/verify_failed) and verify->verify_failed on open work.
+ */
+import { getActiveFocuses, getDeliveryIssues } from './supabase.js';
+import { getFocusDeliveries } from './queries/focuses.js';
+import { getFocusWorktree } from './focus-worktree-state.js';
+import { worktreeHasUncommittedChanges } from './worktree-safety.js';
+import { reconcileDeliveryStatus } from './delivery-reconciler.js';
+import { isExecutionStatus } from '@telora/daemon-core';
+/** Opt-in flag name. Default-OFF (only a truthy value enables the shadow). */
+export const RECONCILER_SHADOW_ENV = 'TELORA_RECONCILER_SHADOW';
+/** Default-off opt-in: only '1'/'true'/'yes'/'on' (case-insensitive) enable. */
+export function reconcilerShadowEnabled(env = process.env) {
+    const raw = env[RECONCILER_SHADOW_ENV];
+    if (raw === undefined)
+        return false;
+    return ['1', 'true', 'yes', 'on'].includes(raw.trim().toLowerCase());
+}
+const defaultDeps = {
+    isEnabled: () => reconcilerShadowEnabled(),
+    getActiveFocuses,
+    getFocusDeliveries,
+    getDeliveryIssues,
+    getFocusWorktree,
+    worktreeHasUncommittedChanges,
+    log: (m) => console.log(m),
+};
+/**
+ * Run one shadow pass for a (product-scoped) config. Reads only; never writes.
+ */
+export async function runReconcilerShadow(config, deps = defaultDeps) {
+    if (!deps.isEnabled()) {
+        return { ran: false, checked: 0, divergences: 0 };
+    }
+    let checked = 0;
+    let divergences = 0;
+    let focuses;
+    try {
+        focuses = await deps.getActiveFocuses(config.organizationId, config.productId);
+    }
+    catch (err) {
+        deps.log(`[reconciler-shadow] failed to fetch active focuses: ${err.message}`);
+        return { ran: true, checked, divergences };
+    }
+    for (const focus of focuses) {
+        const reviewRequested = !!focus.review_requested_at;
+        let deliveries;
+        try {
+            deliveries = await deps.getFocusDeliveries(focus.focus_id);
+        }
+        catch (err) {
+            deps.log(`[reconciler-shadow] failed to fetch deliveries for focus ${focus.focus_id}: ${err.message}`);
+            continue;
+        }
+        // Resolve the worktree-committed signal once per focus (one worktree per focus).
+        const worktree = deps.getFocusWorktree(focus.focus_id);
+        let worktreeCommitted = true; // no worktree => nothing uncommitted can block (matches the advance precheck)
+        if (worktree) {
+            try {
+                worktreeCommitted = !deps.worktreeHasUncommittedChanges(worktree.worktreePath);
+            }
+            catch {
+                // Best-effort: a git failure should not break the shadow; assume committed.
+                worktreeCommitted = true;
+            }
+        }
+        for (const delivery of deliveries) {
+            const liveStatus = delivery.executionStatus ?? '';
+            if (!isExecutionStatus(liveStatus))
+                continue;
+            let issues;
+            try {
+                issues = await deps.getDeliveryIssues(delivery.id);
+            }
+            catch (err) {
+                deps.log(`[reconciler-shadow] failed to fetch issues for delivery ${delivery.id}: ${err.message}`);
+                continue;
+            }
+            const result = reconcileDeliveryStatus({
+                currentStatus: liveStatus,
+                issues: issues.map(i => ({ status: i.status, issueType: i.issueType })),
+                gitState: { worktreeCommitted },
+                guardVerdict: null,
+                // Poll-time review state: conservative. verify with no open work stays
+                // verify (verify->done is review-exit-driven, not poll-driven).
+                reviewState: { reviewRequested, reportExists: false, sessionType: 'coding', succeeded: false },
+            });
+            checked++;
+            if (result.changed) {
+                divergences++;
+                deps.log(`[reconciler-shadow] DIVERGENCE delivery=${delivery.id} ("${delivery.name}") ` +
+                    `live=${liveStatus} reconciled=${result.target} ` +
+                    `canonical=${result.canonical} reason="${result.reason}" (no write performed)`);
+            }
+        }
+    }
+    if (checked > 0) {
+        deps.log(`[reconciler-shadow] pass complete: ${checked} deliveries checked, ${divergences} divergence(s), 0 writes`);
+    }
+    return { ran: true, checked, divergences };
+}
+//# sourceMappingURL=delivery-reconciler-shadow.js.map

package/dist/delivery-reconciler-shadow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-reconciler-shadow.js","sourceRoot":"","sources":["../src/delivery-reconciler-shadow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAGxD,8EAA8E;AAC9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,0BAA0B,CAAC;AAEhE,gFAAgF;AAChF,MAAM,UAAU,uBAAuB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC1E,MAAM,GAAG,GAAG,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACvC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AACvE,CAAC;AAkBD,MAAM,WAAW,GAAyB;IACxC,SAAS,EAAE,GAAG,EAAE,CAAC,uBAAuB,EAAE;IAC1C,gBAAgB;IAChB,kBAAkB;IAClB,iBAAiB;IACjB,gBAAgB;IAChB,6BAA6B;IAC7B,GAAG,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;CACnC,CAAC;AAWF;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAoB,EACpB,OAA6B,WAAW;IAExC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACtB,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IACpD,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACjF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,CAAC,uDAAwD,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1F,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAC7C,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;QACpD,IAAI,UAAU,CAAC;QACf,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,4DAA4D,KAAK,CAAC,QAAQ,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAClH,SAAS;QACX,CAAC;QAED,iFAAiF;QACjF,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,iBAAiB,GAAG,IAAI,CAAC,CAAC,8EAA8E;QAC5G,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC;gBACH,iBAAiB,GAAG,CAAC,IAAI,CAAC,6BAA6B,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YACjF,CAAC;YAAC,MAAM,CAAC;gBACP,4EAA4E;gBAC5E,iBAAiB,GAAG,IAAI,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,QAAQ,CAAC,eAAe,IAAI,EAAE,CAAC;YAClD,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC;gBAAE,SAAS;YAE7C,IAAI,MAAM,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CAAC,2DAA2D,QAAQ,CAAC,EAAE,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC9G,SAAS;YACX,CAAC;YAED,MAAM,MAAM,GAAG,uBAAuB,CAAC;gBACrC,aAAa,EAAE,UAA6B;gBAC5C,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;gBACvE,QAAQ,EAAE,EAAE,iBAAiB,EAAE;gBAC/B,YAAY,EAAE,IAAI;gBAClB,uEAAuE;gBACvE,gEAAgE;gBAChE,WAAW,EAAE,EAAE,eAAe,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE;aAC/F,CAAC,CAAC;YAEH,OAAO,EAAE,CAAC;YACV,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,WAAW,EAAE,CAAC;gBACd,IAAI,CAAC,GAAG,CACN,2CAA2C,QAAQ,CAAC,EAAE,MAAM,QAAQ,CAAC,IAAI,KAAK;oBAC9E,QAAQ,UAAU,eAAe,MAAM,CAAC,MAAM,GAAG;oBACjD,aAAa,MAAM,CAAC,SAAS,YAAY,MAAM,CAAC,MAAM,wBAAwB,CAC/E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,IAAI,CAAC,GAAG,CAAC,sCAAsC,OAAO,wBAAwB,WAAW,0BAA0B,CAAC,CAAC;IACvH,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAC7C,CAAC"}

package/dist/delivery-reconciler.d.ts

@@ -0,0 +1,133 @@
+/**
+ * Single-writer delivery reconciler (PURE).
+ *
+ * Delivery 3 of the Delivery Execution Pathway Consolidation focus
+ * (reality-tree injection #10: "Delivery execution_status has exactly one
+ * writer -- the daemon reconciler; every transition flows through it").
+ *
+ * This module is the consolidation's center of gravity: ONE pure function that
+ * computes the single next execution_status the daemon should write, plus ONE
+ * shared "issues are done" predicate that replaces the divergent copies spread
+ * across the live writers (advanceDeliveryStage / advanceDeliveryStatuses /
+ * runReviewExitHandler / checkDeliveryAutoAdvance / checkVerifyDeliveriesForOpenIssues).
+ *
+ * It is deliberately PURE -- no I/O, no supabase, no git. Callers gather the
+ * signal (issues, worktree-committed flag, guard verdict, review state) and
+ * pass it in; the reconciler only computes. This is what makes it
+ * shadow-testable: run it alongside the live path, compare its target to the
+ * live status, log divergence, write nothing (see delivery-reconciler-shadow.ts).
+ *
+ * The behavior here MIRRORS the CURRENT live writers as pinned by the
+ * Delivery 2 characterization suite
+ * (__tests__/delivery-state-machine-characterization.test.ts). It characterizes
+ * what the system does today, not an idealized target -- the shadow phase exists
+ * precisely to prove parity before any cutover.
+ *
+ * The coding -> queued re-queue edge (open work at team exit -> re-queue) is
+ * present in EXECUTION_STATUS_TRANSITIONS as of the D5 cleanup. `result.canonical`
+ * flags transitions NOT in the canonical map; the coding -> queued edge now
+ * resolves to `canonical=true`.
+ */
+import type { ExecutionStatus } from '@telora/daemon-core';
+/** Minimal issue shape the reconciler needs. */
+export interface ReconcilerIssue {
+    status: string;
+    issueType: string;
+}
+/** Git-safety signal: the irreducible worktree-commit gate. */
+export interface ReconcilerGitState {
+    /**
+     * Whether the focus worktree has NO uncommitted changes. The daemon is the
+     * only place this can be checked (Postgres has no git), which is the core
+     * reason the daemon -- not a PG trigger -- must own the coding -> verify write.
+     * When false, an otherwise-ready coding delivery is HELD in coding.
+     */
+    worktreeCommitted: boolean;
+}
+/** Verify-gate verdict (from the guard engine). null = no guard evaluated. */
+export interface ReconcilerGuardVerdict {
+    /** True when a hard guard blocked the transition -> delivery pauses. */
+    blocked: boolean;
+}
+/** Review-window signal used to route verify -> done. */
+export interface ReconcilerReviewState {
+    /** Whether the focus currently has review_requested_at set. */
+    reviewRequested: boolean;
+    /** Whether an explicit focus_reviews report exists for the review session. */
+    reportExists: boolean;
+    /** The exiting session's type. */
+    sessionType: 'coding' | 'review';
+    /** Whether that session exited successfully. */
+    succeeded: boolean;
+}
+export interface ReconcileInput {
+    currentStatus: ExecutionStatus;
+    issues: ReadonlyArray<ReconcilerIssue>;
+    gitState: ReconcilerGitState;
+    guardVerdict?: ReconcilerGuardVerdict | null;
+    reviewState?: ReconcilerReviewState | null;
+}
+export interface ReconcileResult {
+    /** The execution_status the daemon should write (equal to currentStatus when no change). */
+    target: ExecutionStatus;
+    /** Whether target differs from currentStatus. */
+    changed: boolean;
+    /** Human-readable rationale (for shadow divergence logs + debugging). */
+    reason: string;
+    /**
+     * Whether (currentStatus -> target) is present in the canonical
+     * EXECUTION_STATUS_TRANSITIONS map. Always true for a no-op (stay). False
+     * flags a live-vs-canonical gap (notably coding -> queued); see the module
+     * header.
+     */
+    canonical: boolean;
+}
+/**
+ * THE shared "issues are done" predicate. A delivery's work is done when none
+ * of its work issues (Tasks/Bugs, excluding Context Groups) are in an OPEN
+ * status. OPEN = {To Do, In Progress, Blocked}; 'In Review' and 'Verified' are
+ * terminal here -- this is the daemon predicate, deliberately chosen as the
+ * single source of truth over the Postgres auto_close predicate (which requires
+ * every issue to be literally 'Done'). A delivery with zero work issues is
+ * vacuously done.
+ *
+ * Replaces the previously-divergent inline copies in advanceDeliveryStatuses
+ * (`!TERMINAL_ISSUE_STATUSES.has`), listener-auto-advance (`OPEN_ISSUE_STATUSES`),
+ * and review-exit (`ACTIVE_WORK_STATUSES`) -- all three sets have identical
+ * membership; this names the predicate once.
+ */
+export declare function areDeliveryIssuesDone(issues: ReadonlyArray<ReconcilerIssue>): boolean;
+/** Whether the delivery has at least one work issue (Task/Bug). */
+export declare function hasWorkIssues(issues: ReadonlyArray<ReconcilerIssue>): boolean;
+/**
+ * Whether any work issue is in an OPEN (active) status. This is the routing
+ * signal for verify -> verify_failed (open work on a verify delivery) and the
+ * coding/verify_failed re-queue (open work re-queues). Mirror image of
+ * areDeliveryIssuesDone for deliveries that have work.
+ */
+export declare function hasOpenWork(issues: ReadonlyArray<ReconcilerIssue>): boolean;
+/** Whether any work issue is actively In Progress -- the queued -> coding driver. */
+export declare function hasActiveWork(issues: ReadonlyArray<ReconcilerIssue>): boolean;
+/**
+ * Compute the single next execution_status for a delivery from its full signal.
+ *
+ * Faithful to the current live writers (Delivery 2 characterization):
+ *   - queued  : has work + all done -> coding (step toward verify);
+ *               has work + active   -> coding (work started);
+ *               otherwise            -> stay (scoping gate / not started).
+ *   - coding  : open work           -> queued (re-queue);
+ *               all done + uncommitted worktree -> stay coding (git-safety gate);
+ *               all done + committed + guard blocked -> paused;
+ *               all done + committed -> verify.
+ *   - verify  : open work           -> verify_failed;
+ *               guard blocked        -> paused;
+ *               report exists        -> done;
+ *               clean review session -> done (auto-approve);
+ *               otherwise            -> stay verify (awaiting review outcome).
+ *   - verify_failed : open work      -> queued (re-queue);
+ *                     all done       -> coding (re-iterate).
+ *   - draft/planning/paused/done/cancelled : stay (out of reconciler scope;
+ *               paused is cleared by a human re-queue, terminal states are final).
+ */
+export declare function reconcileDeliveryStatus(input: ReconcileInput): ReconcileResult;
+//# sourceMappingURL=delivery-reconciler.d.ts.map

package/dist/delivery-reconciler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-reconciler.d.ts","sourceRoot":"","sources":["../src/delivery-reconciler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,gDAAgD;AAChD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,+DAA+D;AAC/D,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,8EAA8E;AAC9E,MAAM,WAAW,sBAAsB;IACrC,wEAAwE;IACxE,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,yDAAyD;AACzD,MAAM,WAAW,qBAAqB;IACpC,+DAA+D;IAC/D,eAAe,EAAE,OAAO,CAAC;IACzB,8EAA8E;IAC9E,YAAY,EAAE,OAAO,CAAC;IACtB,kCAAkC;IAClC,WAAW,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACjC,gDAAgD;IAChD,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,eAAe,CAAC;IAC/B,MAAM,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC;IACvC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,YAAY,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC7C,WAAW,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAAC;CAC5C;AAED,MAAM,WAAW,eAAe;IAC9B,4FAA4F;IAC5F,MAAM,EAAE,eAAe,CAAC;IACxB,iDAAiD;IACjD,OAAO,EAAE,OAAO,CAAC;IACjB,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,SAAS,EAAE,OAAO,CAAC;CACpB;AAID;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,aAAa,CAAC,eAAe,CAAC,GAAG,OAAO,CAIrF;AAED,mEAAmE;AACnE,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,eAAe,CAAC,GAAG,OAAO,CAE7E;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,eAAe,CAAC,GAAG,OAAO,CAE3E;AAED,qFAAqF;AACrF,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,eAAe,CAAC,GAAG,OAAO,CAE7E;AAcD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,cAAc,GAAG,eAAe,CA8D9E"}