@telora/daemon 0.19.43 → 0.19.74

package/build-info.json

@@ -1,6 +1,6 @@
 {
-  "commitSha": "388d1a80c",
-  "builtAt": "2026-07-04T01:23:08.132Z",
+  "commitSha": "e47879d1b",
+  "builtAt": "2026-07-05T20:47:13.669Z",
   "expectedMigrations": [
     "20250829113330_create_org_nodes_table.sql",
     "20250829113402_fix_function_security_search_path.sql",
@@ -705,6 +705,11 @@
     "20260702183805_station_distillation_directives.sql",
     "20260703154029_code_metrics_intent_aligned_churn.sql",
     "20260703165250_retarget_execution_observation_deposit_to_building.sql",
-    "20260703170927_agentless_stage_explicit_and_fail_loud_append.sql"
+    "20260703170927_agentless_stage_explicit_and_fail_loud_append.sql",
+    "20260704001953_add_focus_audit_origin.sql",
+    "20260704023738_pin_testing_standard_into_coding_directive.sql",
+    "20260705131710_neutralize_retired_guard_types.sql",
+    "20260705162613_add_reviewed_through_sha.sql",
+    "20260705165637_add_review_cycle_count.sql"
   ]
 }

package/dist/assembly-engine.d.ts

@@ -23,6 +23,15 @@ export interface AssemblyContext {
      * param (e.g. prd.context(prdId=...)) overrides it when present.
      */
     prdId?: string;
+    /**
+     * Override for the git.diff_against_base base ref. When set, the diff is
+     * computed against this ref instead of the integration branch. The review
+     * resume path sets it to the focus's review coverage watermark
+     * (reviewed_through_sha) so a resumed reviewer sees only the incremental
+     * delta since the last completed coverage (watermark..tip) rather than the
+     * full branch diff. Absent for every other caller -> integration base.
+     */
+    diffBaseOverride?: string;
 }
 /** A resolver function that hydrates a source reference into markdown. */
 export type SourceResolver = (context: AssemblyContext, params: Record<string, string>) => Promise<string>;

package/dist/assembly-engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assembly-engine.d.ts","sourceRoot":"","sources":["../src/assembly-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,8DAA8D;AAC9D,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,YAAY,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,0EAA0E;AAC1E,MAAM,MAAM,cAAc,GAAG,CAC3B,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC,MAAM,CAAC,CAAC;AAErB;;;;;;;;;GASG;AACH,MAAM,WAAW,qBAAqB;IACpC,oFAAoF;IACpF,SAAS,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;IAChB,gFAAgF;IAChF,SAAS,EAAE,MAAM,CAAC;IAClB,kFAAkF;IAClF,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,qFAAqF;AACrF,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,OAAO,EAAE,MAAM,CAAC;IAChB,oDAAoD;IACpD,QAAQ,EAAE,qBAAqB,EAAE,CAAC;CACnC;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAExD;AAKD,0DAA0D;AAC1D,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,IAAI,CAEzF;AAED,+CAA+C;AAC/C,wBAAgB,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAE1E;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,IAAI,MAAM,EAAE,CAErD;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAelG;AAED;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EAAE,EAChB,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,MAAM,CAAC,CAGjB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,iCAAiC,CACrD,MAAM,EAAE,MAAM,EAAE,EAChB,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,gBAAgB,CAAC,CA0D3B"}
+{"version":3,"file":"assembly-engine.d.ts","sourceRoot":"","sources":["../src/assembly-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,8DAA8D;AAC9D,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,YAAY,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,0EAA0E;AAC1E,MAAM,MAAM,cAAc,GAAG,CAC3B,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC,MAAM,CAAC,CAAC;AAErB;;;;;;;;;GASG;AACH,MAAM,WAAW,qBAAqB;IACpC,oFAAoF;IACpF,SAAS,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;IAChB,gFAAgF;IAChF,SAAS,EAAE,MAAM,CAAC;IAClB,kFAAkF;IAClF,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,qFAAqF;AACrF,MAAM,WAAW,gBAAgB;IAC/B,+EAA+E;IAC/E,OAAO,EAAE,MAAM,CAAC;IAChB,oDAAoD;IACpD,QAAQ,EAAE,qBAAqB,EAAE,CAAC;CACnC;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAExD;AAKD,0DAA0D;AAC1D,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,IAAI,CAEzF;AAED,+CAA+C;AAC/C,wBAAgB,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAE1E;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,IAAI,MAAM,EAAE,CAErD;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAelG;AAED;;;;;;;;GAQG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EAAE,EAChB,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,MAAM,CAAC,CAGjB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,iCAAiC,CACrD,MAAM,EAAE,MAAM,EAAE,EAChB,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,gBAAgB,CAAC,CA0D3B"}

package/dist/assembly-engine.js.map

@@ -1 +1 @@
-{"version":3,"file":"assembly-engine.js","sourceRoot":"","sources":["../src/assembly-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAyDH;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,OAAO,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,+BAA+B;AAC/B,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA0B,CAAC;AAE3D,0DAA0D;AAC1D,MAAM,UAAU,sBAAsB,CAAC,UAAkB,EAAE,QAAwB;IACjF,gBAAgB,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;AAC7C,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,WAAW,CAAC,UAAkB;IAC5C,OAAO,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO,CAAC,GAAG,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACrD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACvC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACxD,IAAI,GAAG,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACtB,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACnC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAgB,EAChB,OAAwB;IAExB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,iCAAiC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,MAAgB,EAChB,OAAwB;IAExB,kEAAkE;IAClE,yEAAyE;IACzE,wEAAwE;IACxE,wEAAwE;IACxE,kEAAkE;IAClE,uDAAuD;IACvD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,gBAAgB,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,wEAAwE;YACxE,yEAAyE;YACzE,oEAAoE,CACrE,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAE7C,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE5C,yEAAyE;QACzE,yEAAyE;QACzE,uEAAuE;QACvE,IAAI,WAAW,GAAG,EAAE,CAAC;QAErB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,WAAW,GAAG,uCAAuC,IAAI,OAAO,CAAC;YACjE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,6DAA6D,IAAI,GAAG,CAAC,CAAC;QACrF,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAChD,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC9B,WAAW,GAAG,OAAO,CAAC;oBACtB,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,GAAI,GAAa,CAAC,OAAO,CAAC;gBACvC,WAAW,GAAG,qCAAqC,GAAG,MAAM,OAAO,MAAM,CAAC;gBAC1E,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC3B,OAAO,CAAC,IAAI,CAAC,+CAA+C,GAAG,MAAM,OAAO,EAAE,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC;QACrC,QAAQ,CAAC,IAAI,CAAC;YACZ,SAAS,EAAE,GAAG;YACd,OAAO;YACP,SAAS;YACT,eAAe,EAAE,cAAc,CAAC,SAAS,CAAC;SAC3C,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,CAAC;IACf,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC;AACtD,CAAC"}
+{"version":3,"file":"assembly-engine.js","sourceRoot":"","sources":["../src/assembly-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAkEH;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,OAAO,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,+BAA+B;AAC/B,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA0B,CAAC;AAE3D,0DAA0D;AAC1D,MAAM,UAAU,sBAAsB,CAAC,UAAkB,EAAE,QAAwB;IACjF,gBAAgB,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;AAC7C,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,WAAW,CAAC,UAAkB;IAC5C,OAAO,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO,CAAC,GAAG,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACrD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACvC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACxD,IAAI,GAAG,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACtB,CAAC;QACH,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACnC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAgB,EAChB,OAAwB;IAExB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,iCAAiC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,MAAgB,EAChB,OAAwB;IAExB,kEAAkE;IAClE,yEAAyE;IACzE,wEAAwE;IACxE,wEAAwE;IACxE,kEAAkE;IAClE,uDAAuD;IACvD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,gBAAgB,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CACb,wEAAwE;YACxE,yEAAyE;YACzE,oEAAoE,CACrE,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAE7C,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE5C,yEAAyE;QACzE,yEAAyE;QACzE,uEAAuE;QACvE,IAAI,WAAW,GAAG,EAAE,CAAC;QAErB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,WAAW,GAAG,uCAAuC,IAAI,OAAO,CAAC;YACjE,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,6DAA6D,IAAI,GAAG,CAAC,CAAC;QACrF,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAChD,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC9B,WAAW,GAAG,OAAO,CAAC;oBACtB,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,GAAI,GAAa,CAAC,OAAO,CAAC;gBACvC,WAAW,GAAG,qCAAqC,GAAG,MAAM,OAAO,MAAM,CAAC;gBAC1E,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC3B,OAAO,CAAC,IAAI,CAAC,+CAA+C,GAAG,MAAM,OAAO,EAAE,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC;QACrC,QAAQ,CAAC,IAAI,CAAC;YACZ,SAAS,EAAE,GAAG;YACd,OAAO;YACP,SAAS;YACT,eAAe,EAAE,cAAc,CAAC,SAAS,CAAC;SAC3C,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,CAAC;IACf,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC;AACtD,CAAC"}

package/dist/audit-hooks.js

@@ -6,7 +6,7 @@
  */
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';
-import { runGitSync } from './git-types.js';
+import { runGitSync } from './git/index.js';
 import { buildClaudeSettings, mergeClaudeSettings } from './templates/claude-settings.js';
 import { ensureCodexConfigIgnoredInWorktree } from './worktree.js';
 const CODEX_READ_ONLY_BLOCK_START = '# BEGIN TELORA CODEX READ-ONLY';

package/dist/audit-shape.d.ts

@@ -0,0 +1,103 @@
+/**
+ * Discovery-only audit-shape determination (injection #7).
+ *
+ * PURE, dependency-free (no `@telora/daemon-core`, no I/O). The daemon's
+ * discovery-only handling was gated strictly on `product_focuses.read_only
+ * ===true`; when read_only is silently absent an audit focus stalls. These two
+ * predicates add the SECOND, structural signal so a flag-absent audit focus is
+ * still handled correctly.
+ *
+ * This lives in its own module (rather than in delivery-reconciler.ts) precisely
+ * because it must be importable WITHOUT pulling the reconciler's `@telora/daemon
+ * -core` dependency -- listener-auto-advance.ts and completion/event.ts import it
+ * directly, and several tests mock the reconciler-apply chain to avoid the fragile
+ * bare-specifier daemon-core resolution under tsx. delivery-reconciler.ts
+ * re-exports this surface for back-compat.
+ */
+/**
+ * The structural signal an audit/discovery delivery presents, independent of the
+ * `read_only` phase flag. Belt-and-suspenders for injection #7: when a focus IS
+ * an audit but `read_only` is silently absent, this second signal still yields
+ * correct discovery-only treatment instead of a stall or premature execution.
+ */
+export interface DiscoveryOnlySignal {
+    /**
+     * The focus's `read_only` audit-phase flag as the daemon sees it. The PRIMARY
+     * signal; `true` alone yields discovery-only. Note the daemon coerces a DB null
+     * to `false`, so `false` here means "false OR absent" -- which is exactly why
+     * the second signal below cannot key on read_only-null.
+     */
+    focusReadOnly: boolean;
+    /**
+     * Immutable provenance: the focus was authored as an audit (audit playbook, or
+     * an ad-hoc read-only create). Unlike read_only it is NEVER flipped, so it
+     * survives read_only being lost after creation. Absent on legacy/backends that
+     * predate the column -> `false` -> second signal does not fire (safe default).
+     */
+    focusAuditOrigin: boolean;
+    /**
+     * Whether the human ratification gate has been crossed (product_focuses
+     * .ratified_at is set). This is the execute-phase discriminator that keeps the
+     * second signal from misfiring on a RATIFIED audit focus: after ratification
+     * read_only=false and the released remediation deliveries are (briefly)
+     * injection-anchored + issue-less before the team scopes them -- and those must
+     * be SCOPED and executed, not auto-terminaled. A set ratified_at suppresses the
+     * second signal so the audit-origin marker never contradicts a legitimate
+     * execute-phase read_only=false.
+     */
+    focusRatified: boolean;
+    /** Whether the delivery is anchored to a reality-tree injection. */
+    injectionAnchored: boolean;
+    /** Whether the delivery carries at least one Task/Bug work issue. */
+    hasWorkIssues: boolean;
+}
+/**
+ * Focus-level audit-phase predicate: the focus is in the audit/read-only phase
+ * either explicitly (`read_only===true`) OR structurally (audit-origin AND the
+ * human ratify gate has NOT been crossed). This is the second signal at FOCUS
+ * grain -- shared by the discovery-only delivery decision below and the
+ * no-progress guard's planning-delivery exemption (completion/event.ts), so both
+ * treat a flag-absent audit focus identically to an explicit read_only one.
+ *
+ * Does NOT fork read_only: it never contradicts an explicit read_only=true, and
+ * a set `ratifiedAt` (execute-phase crossing) makes it fall back to read_only
+ * alone -- so a ratified audit focus (read_only=false) reads as NOT audit-phase.
+ */
+export declare function isAuditPhaseFocus(focus: {
+    readOnly: boolean;
+    auditOrigin: boolean;
+    ratified: boolean;
+}): boolean;
+/**
+ * Convenience over `isAuditPhaseFocus` for the RAW focus-row shape the queries
+ * return (snake_case, nullable). Coerces `read_only`/`audit_origin` (DB null ->
+ * false) and reads `ratified_at != null` as the execute-phase discriminator.
+ * Used at the spawn sites (listener.ts) so a flag-absent audit focus spawns
+ * read-only -- installReadOnlyAuditGuards engages and the team is not driven into
+ * scoping/write/commit ahead of ratification (TEL-3; 2f253da6 does not reproduce).
+ */
+export declare function isAuditPhaseFocusRow(focus: {
+    read_only?: boolean | null;
+    audit_origin?: boolean | null;
+    ratified_at?: string | null;
+}): boolean;
+/**
+ * Resolve whether a delivery is DISCOVERY-ONLY from the two-signal set.
+ *
+ * Signal 1 (primary, unchanged): `focusReadOnly === true` -- the explicit audit
+ * phase. Discovery-only regardless of shape.
+ *
+ * Signal 2 (structural, injection #7): an audit-origin, NOT-yet-ratified focus
+ * (isAuditPhaseFocus) whose delivery is injection-anchored and issue-less. This
+ * degrades gracefully when read_only is absent, WITHOUT forking read_only:
+ *   - it never contradicts an explicit read_only=true (signal 1 already fired);
+ *   - `focusRatified` defers to the human execute-phase crossing, so a ratified
+ *     (read_only=false) audit focus's unscoped remediation deliveries are NOT
+ *     swept to terminal;
+ *   - it requires `focusAuditOrigin`, so a NORMAL execution focus's transiently
+ *     issue-less injection-anchored delivery still holds at the scoping gate.
+ *
+ * Pure and exported for unit testing.
+ */
+export declare function isDiscoveryOnlyDelivery(signal: DiscoveryOnlySignal): boolean;
+//# sourceMappingURL=audit-shape.d.ts.map

package/dist/audit-shape.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-shape.d.ts","sourceRoot":"","sources":["../src/audit-shape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;;OAKG;IACH,aAAa,EAAE,OAAO,CAAC;IACvB;;;;;OAKG;IACH,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;;;;;;;;OASG;IACH,aAAa,EAAE,OAAO,CAAC;IACvB,oEAAoE;IACpE,iBAAiB,EAAE,OAAO,CAAC;IAC3B,qEAAqE;IACrE,aAAa,EAAE,OAAO,CAAC;CACxB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;IACrB,QAAQ,EAAE,OAAO,CAAC;CACnB,GAAG,OAAO,CAGV;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,SAAS,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3B,YAAY,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,GAAG,OAAO,CAMV;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAc5E"}

package/dist/audit-shape.js

@@ -0,0 +1,81 @@
+/**
+ * Discovery-only audit-shape determination (injection #7).
+ *
+ * PURE, dependency-free (no `@telora/daemon-core`, no I/O). The daemon's
+ * discovery-only handling was gated strictly on `product_focuses.read_only
+ * ===true`; when read_only is silently absent an audit focus stalls. These two
+ * predicates add the SECOND, structural signal so a flag-absent audit focus is
+ * still handled correctly.
+ *
+ * This lives in its own module (rather than in delivery-reconciler.ts) precisely
+ * because it must be importable WITHOUT pulling the reconciler's `@telora/daemon
+ * -core` dependency -- listener-auto-advance.ts and completion/event.ts import it
+ * directly, and several tests mock the reconciler-apply chain to avoid the fragile
+ * bare-specifier daemon-core resolution under tsx. delivery-reconciler.ts
+ * re-exports this surface for back-compat.
+ */
+/**
+ * Focus-level audit-phase predicate: the focus is in the audit/read-only phase
+ * either explicitly (`read_only===true`) OR structurally (audit-origin AND the
+ * human ratify gate has NOT been crossed). This is the second signal at FOCUS
+ * grain -- shared by the discovery-only delivery decision below and the
+ * no-progress guard's planning-delivery exemption (completion/event.ts), so both
+ * treat a flag-absent audit focus identically to an explicit read_only one.
+ *
+ * Does NOT fork read_only: it never contradicts an explicit read_only=true, and
+ * a set `ratifiedAt` (execute-phase crossing) makes it fall back to read_only
+ * alone -- so a ratified audit focus (read_only=false) reads as NOT audit-phase.
+ */
+export function isAuditPhaseFocus(focus) {
+    if (focus.readOnly === true)
+        return true;
+    return focus.auditOrigin === true && !focus.ratified;
+}
+/**
+ * Convenience over `isAuditPhaseFocus` for the RAW focus-row shape the queries
+ * return (snake_case, nullable). Coerces `read_only`/`audit_origin` (DB null ->
+ * false) and reads `ratified_at != null` as the execute-phase discriminator.
+ * Used at the spawn sites (listener.ts) so a flag-absent audit focus spawns
+ * read-only -- installReadOnlyAuditGuards engages and the team is not driven into
+ * scoping/write/commit ahead of ratification (TEL-3; 2f253da6 does not reproduce).
+ */
+export function isAuditPhaseFocusRow(focus) {
+    return isAuditPhaseFocus({
+        readOnly: focus.read_only === true,
+        auditOrigin: focus.audit_origin === true,
+        ratified: focus.ratified_at != null,
+    });
+}
+/**
+ * Resolve whether a delivery is DISCOVERY-ONLY from the two-signal set.
+ *
+ * Signal 1 (primary, unchanged): `focusReadOnly === true` -- the explicit audit
+ * phase. Discovery-only regardless of shape.
+ *
+ * Signal 2 (structural, injection #7): an audit-origin, NOT-yet-ratified focus
+ * (isAuditPhaseFocus) whose delivery is injection-anchored and issue-less. This
+ * degrades gracefully when read_only is absent, WITHOUT forking read_only:
+ *   - it never contradicts an explicit read_only=true (signal 1 already fired);
+ *   - `focusRatified` defers to the human execute-phase crossing, so a ratified
+ *     (read_only=false) audit focus's unscoped remediation deliveries are NOT
+ *     swept to terminal;
+ *   - it requires `focusAuditOrigin`, so a NORMAL execution focus's transiently
+ *     issue-less injection-anchored delivery still holds at the scoping gate.
+ *
+ * Pure and exported for unit testing.
+ */
+export function isDiscoveryOnlyDelivery(signal) {
+    if (!isAuditPhaseFocus({
+        readOnly: signal.focusReadOnly,
+        auditOrigin: signal.focusAuditOrigin,
+        ratified: signal.focusRatified,
+    })) {
+        return false;
+    }
+    // read_only===true is discovery-only regardless of delivery shape (signal 1).
+    if (signal.focusReadOnly === true)
+        return true;
+    // Structural signal 2 additionally requires the audit shape on the delivery.
+    return signal.injectionAnchored && !signal.hasWorkIssues;
+}
+//# sourceMappingURL=audit-shape.js.map

package/dist/audit-shape.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-shape.js","sourceRoot":"","sources":["../src/audit-shape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAwCH;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAIjC;IACC,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACzC,OAAO,KAAK,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;AACvD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAIpC;IACC,OAAO,iBAAiB,CAAC;QACvB,QAAQ,EAAE,KAAK,CAAC,SAAS,KAAK,IAAI;QAClC,WAAW,EAAE,KAAK,CAAC,YAAY,KAAK,IAAI;QACxC,QAAQ,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;KACpC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAA2B;IACjE,IACE,CAAC,iBAAiB,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC,aAAa;QAC9B,WAAW,EAAE,MAAM,CAAC,gBAAgB;QACpC,QAAQ,EAAE,MAAM,CAAC,aAAa;KAC/B,CAAC,EACF,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,8EAA8E;IAC9E,IAAI,MAAM,CAAC,aAAa,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/C,6EAA6E;IAC7E,OAAO,MAAM,CAAC,iBAAiB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;AAC3D,CAAC"}

package/dist/branch-status.js

@@ -8,8 +8,8 @@
  *
  * Results ride in the heartbeat metadata field (no new tables).
  */
-import { runGitSync } from './git-types.js';
-import { getDefaultBranch } from './git-branch.js';
+import { runGitSync } from './git/index.js';
+import { getDefaultBranch } from './git/index.js';
 import { getAllFocusWorktrees } from './focus-worktree-state.js';
 import { getActiveTeams } from './focus-team-state.js';
 /** Short timeout for git commands to avoid blocking the heartbeat. */

package/dist/branch-status.js.map

@@ -1 +1 @@
-{"version":3,"file":"branch-status.js","sourceRoot":"","sources":["../src/branch-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAGvD,sEAAsE;AACtE,MAAM,4BAA4B,GAAG,KAAK,CAAC;AAE3C;;;;GAIG;AACH,IAAI,yBAAyB,GAAmC,IAAI,CAAC;AAErE;;;;GAIG;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAA6B,CAAC;AAEjE;;;GAGG;AACH,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAA8B,CAAC;AAEnE,gDAAgD;AAChD,MAAM,UAAU,sBAAsB;IACpC,yBAAyB,GAAG,IAAI,CAAC;IACjC,mBAAmB,CAAC,KAAK,EAAE,CAAC;IAC5B,oBAAoB,CAAC,KAAK,EAAE,CAAC;AAC/B,CAAC;AAyCD,wEAAwE;AAExE,MAAM,OAAO,GAAG,EAAE,SAAS,EAAE,4BAA4B,EAAE,CAAC;AAE5D;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW,EAAE,QAAkB;IAC/E,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACrC,IAAI,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACvC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,wEAAwE;AAExE;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAoB,EAAE,OAA6B;IACrF,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAAC;IAC/C,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,OAAO,EAAE,cAAc,EAAE,MAAM;QAC9C,CAAC,CAAC,OAAO,CAAC,cAAc;QACxB,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,UAAU,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAElD,oEAAoE;IACpE,IAAI,WAAW,GAAmC,IAAI,CAAC;IACvD,IAAI,CAAC;QACH,+CAA+C;QAC/C,MAAM,QAAQ,GAAG,UAAU,CACzB,CAAC,WAAW,EAAE,UAAU,EAAE,iBAAiB,CAAC,EAC5C,QAAQ,EACR,OAAO,CACR,CAAC;QACF,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrB,yEAAyE;YACzE,wEAAwE;YACxE,MAAM,WAAW,GAAG,YAAY,CAAC,iBAAiB,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;YAChF,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC;YAEzE,IAAI,WAAW,KAAK,IAAI,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBAChD,0EAA0E;gBAC1E,WAAW,GAAG,yBAAyB,CAAC;YAC1C,CAAC;iBAAM,CAAC;gBACN,IAAI,MAAM,GAAiB,OAAO,CAAC;gBACnC,IAAI,WAAW,GAAG,CAAC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;oBACtC,MAAM,GAAG,UAAU,CAAC,CAAC,gDAAgD;gBACvE,CAAC;qBAAM,IAAI,WAAW,GAAG,CAAC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;oBAC7C,MAAM,GAAG,OAAO,CAAC;gBACnB,CAAC;gBAED,WAAW,GAAG;oBACZ,MAAM,EAAE,iBAAiB;oBACzB,MAAM;oBACN,WAAW;oBACX,UAAU;iBACX,CAAC;gBACF,yBAAyB,GAAG,WAAW,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;QACxD,WAAW,GAAG,yBAAyB,CAAC;IAC1C,CAAC;IAED,mEAAmE;IACnE,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,UAAU,CACzB,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,EACtC,QAAQ,EACR,OAAO,CACR,CAAC;YACF,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACrB,0EAA0E;gBAC1E,+EAA+E;gBAC/E,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;gBAC1E,+DAA+D;gBAC/D,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAEnE,IAAI,WAAW,KAAK,IAAI,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;oBAChD,4CAA4C;oBAC5C,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBACrD,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1G,CAAC;qBAAM,CAAC;oBACN,MAAM,KAAK,GAAuB;wBAChC,GAAG,EAAE,OAAO,CAAC,GAAG;wBAChB,KAAK,EAAE,OAAO,CAAC,KAAK;wBACpB,WAAW;wBACX,UAAU;qBACX,CAAC;oBACF,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;oBAC7C,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,4EAA4E;gBAC5E,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACrD,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1G,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;YAC1E,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACrD,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;IAED,+DAA+D;IAC/D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACtD,KAAK,MAAM,SAAS,IAAI,oBAAoB,CAAC,IAAI,EAAE,EAAE,CAAC;QACpD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,oBAAoB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,MAAM,SAAS,GAAG,oBAAoB,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAE/B,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,SAAS,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,UAAU,CAC3B,CAAC,WAAW,EAAE,MAAM,CAAC,EACrB,IAAI,CAAC,YAAY,EACjB,OAAO,CACR,CAAC;YACF,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBACxB,qDAAqD;gBACrD,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAChD,IAAI,MAAM;oBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACjC,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC;YAElC,MAAM,kBAAkB,GAAG,YAAY,CACrC,IAAI,CAAC,UAAU,EACf,iBAAiB,EACjB,QAAQ,EACR,IAAI,CACL,CAAC;YACF,MAAM,iBAAiB,GAAG,YAAY,CACpC,iBAAiB,EACjB,IAAI,CAAC,UAAU,EACf,QAAQ,CACT,CAAC;YAEF,IAAI,kBAAkB,KAAK,IAAI,IAAI,iBAAiB,KAAK,IAAI,EAAE,CAAC;gBAC9D,wDAAwD;gBACxD,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAChD,IAAI,MAAM;oBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACjC,SAAS;YACX,CAAC;YAED,mDAAmD;YACnD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAChC,MAAM,aAAa,GAAG,IAAI,EAAE,sBAAsB,KAAK,IAAI,CAAC;YAE5D,IAAI,MAAM,GAAiB,OAAO,CAAC;YACnC,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,GAAG,UAAU,CAAC;YACtB,CAAC;iBAAM,IAAI,kBAAkB,GAAG,CAAC,EAAE,CAAC;gBAClC,MAAM,GAAG,OAAO,CAAC;YACnB,CAAC;YAED,MAAM,KAAK,GAAsB;gBAC/B,OAAO;gBACP,MAAM,EAAE,IAAI,CAAC,UAAU;gBACvB,OAAO;gBACP,MAAM;gBACN,kBAAkB;gBAClB,iBAAiB;aAClB,CAAC;YACF,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACxC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;YACrD,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAChD,IAAI,MAAM;gBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,yDAAyD;IACzD,KAAK,MAAM,QAAQ,IAAI,mBAAmB,CAAC,IAAI,EAAE,EAAE,CAAC;QAClD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC3C,CAAC"}
+{"version":3,"file":"branch-status.js","sourceRoot":"","sources":["../src/branch-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAGvD,sEAAsE;AACtE,MAAM,4BAA4B,GAAG,KAAK,CAAC;AAE3C;;;;GAIG;AACH,IAAI,yBAAyB,GAAmC,IAAI,CAAC;AAErE;;;;GAIG;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAA6B,CAAC;AAEjE;;;GAGG;AACH,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAA8B,CAAC;AAEnE,gDAAgD;AAChD,MAAM,UAAU,sBAAsB;IACpC,yBAAyB,GAAG,IAAI,CAAC;IACjC,mBAAmB,CAAC,KAAK,EAAE,CAAC;IAC5B,oBAAoB,CAAC,KAAK,EAAE,CAAC;AAC/B,CAAC;AAyCD,wEAAwE;AAExE,MAAM,OAAO,GAAG,EAAE,SAAS,EAAE,4BAA4B,EAAE,CAAC;AAE5D;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW,EAAE,QAAkB;IAC/E,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACrC,IAAI,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACvC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,wEAAwE;AAExE;;;;;;;;;GASG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAoB,EAAE,OAA6B;IACrF,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAAC;IAC/C,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,OAAO,EAAE,cAAc,EAAE,MAAM;QAC9C,CAAC,CAAC,OAAO,CAAC,cAAc;QACxB,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,UAAU,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAElD,oEAAoE;IACpE,IAAI,WAAW,GAAmC,IAAI,CAAC;IACvD,IAAI,CAAC;QACH,+CAA+C;QAC/C,MAAM,QAAQ,GAAG,UAAU,CACzB,CAAC,WAAW,EAAE,UAAU,EAAE,iBAAiB,CAAC,EAC5C,QAAQ,EACR,OAAO,CACR,CAAC;QACF,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrB,yEAAyE;YACzE,wEAAwE;YACxE,MAAM,WAAW,GAAG,YAAY,CAAC,iBAAiB,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;YAChF,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC;YAEzE,IAAI,WAAW,KAAK,IAAI,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBAChD,0EAA0E;gBAC1E,WAAW,GAAG,yBAAyB,CAAC;YAC1C,CAAC;iBAAM,CAAC;gBACN,IAAI,MAAM,GAAiB,OAAO,CAAC;gBACnC,IAAI,WAAW,GAAG,CAAC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;oBACtC,MAAM,GAAG,UAAU,CAAC,CAAC,gDAAgD;gBACvE,CAAC;qBAAM,IAAI,WAAW,GAAG,CAAC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;oBAC7C,MAAM,GAAG,OAAO,CAAC;gBACnB,CAAC;gBAED,WAAW,GAAG;oBACZ,MAAM,EAAE,iBAAiB;oBACzB,MAAM;oBACN,WAAW;oBACX,UAAU;iBACX,CAAC;gBACF,yBAAyB,GAAG,WAAW,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;QACxD,WAAW,GAAG,yBAAyB,CAAC;IAC1C,CAAC;IAED,mEAAmE;IACnE,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,UAAU,CACzB,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,EACtC,QAAQ,EACR,OAAO,CACR,CAAC;YACF,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACrB,0EAA0E;gBAC1E,+EAA+E;gBAC/E,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;gBAC1E,+DAA+D;gBAC/D,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAEnE,IAAI,WAAW,KAAK,IAAI,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;oBAChD,4CAA4C;oBAC5C,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBACrD,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1G,CAAC;qBAAM,CAAC;oBACN,MAAM,KAAK,GAAuB;wBAChC,GAAG,EAAE,OAAO,CAAC,GAAG;wBAChB,KAAK,EAAE,OAAO,CAAC,KAAK;wBACpB,WAAW;wBACX,UAAU;qBACX,CAAC;oBACF,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;oBAC7C,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,4EAA4E;gBAC5E,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACrD,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1G,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;YAC1E,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACrD,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;IAED,+DAA+D;IAC/D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACtD,KAAK,MAAM,SAAS,IAAI,oBAAoB,CAAC,IAAI,EAAE,EAAE,CAAC;QACpD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,oBAAoB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,MAAM,SAAS,GAAG,oBAAoB,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAE/B,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,SAAS,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,UAAU,CAC3B,CAAC,WAAW,EAAE,MAAM,CAAC,EACrB,IAAI,CAAC,YAAY,EACjB,OAAO,CACR,CAAC;YACF,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBACxB,qDAAqD;gBACrD,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAChD,IAAI,MAAM;oBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACjC,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC;YAElC,MAAM,kBAAkB,GAAG,YAAY,CACrC,IAAI,CAAC,UAAU,EACf,iBAAiB,EACjB,QAAQ,EACR,IAAI,CACL,CAAC;YACF,MAAM,iBAAiB,GAAG,YAAY,CACpC,iBAAiB,EACjB,IAAI,CAAC,UAAU,EACf,QAAQ,CACT,CAAC;YAEF,IAAI,kBAAkB,KAAK,IAAI,IAAI,iBAAiB,KAAK,IAAI,EAAE,CAAC;gBAC9D,wDAAwD;gBACxD,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAChD,IAAI,MAAM;oBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACjC,SAAS;YACX,CAAC;YAED,mDAAmD;YACnD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAChC,MAAM,aAAa,GAAG,IAAI,EAAE,sBAAsB,KAAK,IAAI,CAAC;YAE5D,IAAI,MAAM,GAAiB,OAAO,CAAC;YACnC,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,GAAG,UAAU,CAAC;YACtB,CAAC;iBAAM,IAAI,kBAAkB,GAAG,CAAC,EAAE,CAAC;gBAClC,MAAM,GAAG,OAAO,CAAC;YACnB,CAAC;YAED,MAAM,KAAK,GAAsB;gBAC/B,OAAO;gBACP,MAAM,EAAE,IAAI,CAAC,UAAU;gBACvB,OAAO;gBACP,MAAM;gBACN,kBAAkB;gBAClB,iBAAiB;aAClB,CAAC;YACF,mBAAmB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACxC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;YACrD,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAChD,IAAI,MAAM;gBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,yDAAyD;IACzD,KAAK,MAAM,QAAQ,IAAI,mBAAmB,CAAC,IAAI,EAAE,EAAE,CAAC;QAClD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC3C,CAAC"}

package/dist/ci-sensor-loop.d.ts

@@ -0,0 +1,47 @@
+/**
+ * CI-result sensor loop (Reconnect CI to the loop, TEL-3).
+ *
+ * A red CI run on integration used to have NO receiver -- it evaporated. This
+ * loop makes a failing run SIGNAL: per product, it reads the integration tip's
+ * git-native CI status (refs/ci-status/<sha>) via the daemon's existing
+ * git-over-SSH channel and, on RED, files exactly one open `ci_run_red`
+ * needs_operator escalation carrying the run reference (the failing SHA). When a
+ * LATER run on integration goes green, it resolves the open escalation. Pure
+ * decision (decideCiSensorAction in ci-status.ts) + injected IO so the loop is
+ * unit-testable without a live remote or DB.
+ *
+ * Registered in LOOP_REGISTRY under the opt-out guard TELORA_CI_SENSOR_LOOP.
+ * Consumes the same fail-closed CiStatusReader the green-wait (TEL-2) uses.
+ *
+ * @module ci-sensor-loop
+ */
+import type { DaemonConfig } from './types.js';
+import { type CiStatusReader } from './ci-status.js';
+/** escalation_kind for a red CI run on integration. */
+export declare const CI_RUN_RED_ESCALATION_KIND = "ci_run_red";
+/** Injected IO for the sensor tick. Defaults reach for the real implementations. */
+export interface CiSensorDeps {
+    getCiStatus: CiStatusReader;
+    resolveIntegrationTip: (config: DaemonConfig) => string | null;
+    hasOpenCiRedEscalation: (productId: string) => Promise<boolean>;
+    fileCiRedEscalation: (params: {
+        organizationId: string;
+        productId: string;
+        sha: string;
+        branch: string;
+    }) => Promise<void>;
+    resolveCiRedEscalations: (productId: string) => Promise<number>;
+}
+export interface CiSensorTickCounts {
+    productsChecked: number;
+    escalationsFiled: number;
+    escalationsResolved: number;
+}
+/**
+ * One CI-result sensor tick over every configured product. Per product: resolve
+ * the remote integration tip, read its CI status (fail-closed), and file/resolve
+ * the ci_run_red escalation per the pure decision. Best-effort per product -- a
+ * failure on one product never aborts the others.
+ */
+export declare function runCiSensorTick(config: DaemonConfig, deps?: CiSensorDeps): Promise<CiSensorTickCounts>;
+//# sourceMappingURL=ci-sensor-loop.d.ts.map

package/dist/ci-sensor-loop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-sensor-loop.d.ts","sourceRoot":"","sources":["../src/ci-sensor-loop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,OAAO,EAAuD,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAM1G,uDAAuD;AACvD,eAAO,MAAM,0BAA0B,eAAe,CAAC;AAiEvD,oFAAoF;AACpF,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,cAAc,CAAC;IAC5B,qBAAqB,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,MAAM,GAAG,IAAI,CAAC;IAC/D,sBAAsB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAChE,mBAAmB,EAAE,CAAC,MAAM,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3H,uBAAuB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACjE;AAUD,MAAM,WAAW,kBAAkB;IACjC,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,YAAY,EACpB,IAAI,GAAE,YAA0B,GAC/B,OAAO,CAAC,kBAAkB,CAAC,CAwB7B"}

package/dist/ci-sensor-loop.js

@@ -0,0 +1,116 @@
+/**
+ * CI-result sensor loop (Reconnect CI to the loop, TEL-3).
+ *
+ * A red CI run on integration used to have NO receiver -- it evaporated. This
+ * loop makes a failing run SIGNAL: per product, it reads the integration tip's
+ * git-native CI status (refs/ci-status/<sha>) via the daemon's existing
+ * git-over-SSH channel and, on RED, files exactly one open `ci_run_red`
+ * needs_operator escalation carrying the run reference (the failing SHA). When a
+ * LATER run on integration goes green, it resolves the open escalation. Pure
+ * decision (decideCiSensorAction in ci-status.ts) + injected IO so the loop is
+ * unit-testable without a live remote or DB.
+ *
+ * Registered in LOOP_REGISTRY under the opt-out guard TELORA_CI_SENSOR_LOOP.
+ * Consumes the same fail-closed CiStatusReader the green-wait (TEL-2) uses.
+ *
+ * @module ci-sensor-loop
+ */
+import { configForProduct } from './config.js';
+import { decideCiSensorAction, createGitNativeCiStatusReader } from './ci-status.js';
+import { listCiStatusRefs, resolveRemoteIntegrationTip } from './ci-status-git.js';
+import { createEscalation, markEscalationResolved } from './queries/issues.js';
+import { callApi } from './queries/shared.js';
+import { ESCALATION_REASONS, ESCALATION_DISPOSITIONS } from '@telora/daemon-core';
+/** escalation_kind for a red CI run on integration. */
+export const CI_RUN_RED_ESCALATION_KIND = 'ci_run_red';
+const OPEN_STATUSES = new Set(['pending', 'in_review']);
+function isOpenCiRedForProduct(e, productId) {
+    if (e.status && !OPEN_STATUSES.has(e.status))
+        return false;
+    if (e.escalationKind !== CI_RUN_RED_ESCALATION_KIND)
+        return false;
+    const meta = e.metadata ?? null;
+    return e.productId === productId || meta?.productId === productId;
+}
+async function defaultHasOpenCiRedEscalation(productId) {
+    const result = await callApi('escalation_list', {
+        fields: { statuses: ['pending', 'in_review'] },
+        limit: 500,
+    });
+    return (result.escalations ?? []).some((e) => isOpenCiRedForProduct(e, productId));
+}
+async function defaultResolveCiRedEscalations(productId) {
+    const result = await callApi('escalation_list', {
+        fields: { statuses: ['pending', 'in_review'] },
+        limit: 500,
+    });
+    const open = (result.escalations ?? []).filter((e) => isOpenCiRedForProduct(e, productId));
+    let resolved = 0;
+    for (const e of open) {
+        try {
+            await markEscalationResolved(e.id, 'Auto-resolved by the daemon: a later CI run on integration went green.');
+            resolved++;
+        }
+        catch (err) {
+            console.warn(`[ci-sensor] Failed to resolve ci_run_red escalation ${e.id}: ${err.message}`);
+        }
+    }
+    return resolved;
+}
+async function defaultFileCiRedEscalation(params) {
+    await createEscalation({
+        organizationId: params.organizationId,
+        issueId: null,
+        reasonType: ESCALATION_REASONS.ERROR_ENCOUNTERED,
+        disposition: ESCALATION_DISPOSITIONS.NEEDS_OPERATOR,
+        productId: params.productId,
+        escalationKind: CI_RUN_RED_ESCALATION_KIND,
+        description: `CI is RED on the integration branch (${params.branch}) at ${params.sha.slice(0, 12)}. ` +
+            `The clean-environment instrument is failing, so integration->main merges are held ` +
+            `(fail-closed green-wait). Run reference: commit ${params.sha}. An operator must fix ` +
+            `the failing run; this escalation auto-resolves when a later integration run goes green.`,
+        metadata: { sha: params.sha, branch: params.branch, product_id: params.productId },
+    });
+}
+const defaultDeps = {
+    getCiStatus: createGitNativeCiStatusReader(listCiStatusRefs),
+    resolveIntegrationTip: resolveRemoteIntegrationTip,
+    hasOpenCiRedEscalation: defaultHasOpenCiRedEscalation,
+    fileCiRedEscalation: defaultFileCiRedEscalation,
+    resolveCiRedEscalations: defaultResolveCiRedEscalations,
+};
+/**
+ * One CI-result sensor tick over every configured product. Per product: resolve
+ * the remote integration tip, read its CI status (fail-closed), and file/resolve
+ * the ci_run_red escalation per the pure decision. Best-effort per product -- a
+ * failure on one product never aborts the others.
+ */
+export async function runCiSensorTick(config, deps = defaultDeps) {
+    const counts = { productsChecked: 0, escalationsFiled: 0, escalationsResolved: 0 };
+    for (const product of config.products) {
+        const pc = configForProduct(config, product);
+        try {
+            const sha = deps.resolveIntegrationTip(pc);
+            if (!sha)
+                continue;
+            counts.productsChecked++;
+            const status = await deps.getCiStatus({ sha, integrationBranch: pc.integrationBranch, config: pc });
+            const hasOpen = await deps.hasOpenCiRedEscalation(pc.productId);
+            const action = decideCiSensorAction(status, hasOpen);
+            if (action === 'file') {
+                await deps.fileCiRedEscalation({ organizationId: pc.organizationId, productId: pc.productId, sha, branch: pc.integrationBranch });
+                counts.escalationsFiled++;
+                console.warn(`[ci-sensor] ci_run_red escalation filed for product ${pc.productId} (integration @ ${sha.slice(0, 12)}).`);
+            }
+            else if (action === 'resolve') {
+                counts.escalationsResolved += await deps.resolveCiRedEscalations(pc.productId);
+                console.log(`[ci-sensor] integration green for product ${pc.productId} -- resolved open ci_run_red escalation(s).`);
+            }
+        }
+        catch (err) {
+            console.warn(`[ci-sensor] tick failed for product ${product.id}: ${err.message}`);
+        }
+    }
+    return counts;
+}
+//# sourceMappingURL=ci-sensor-loop.js.map

package/dist/ci-sensor-loop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-sensor-loop.js","sourceRoot":"","sources":["../src/ci-sensor-loop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,6BAA6B,EAAuB,MAAM,gBAAgB,CAAC;AAC1G,OAAO,EAAE,gBAAgB,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAElF,uDAAuD;AACvD,MAAM,CAAC,MAAM,0BAA0B,GAAG,YAAY,CAAC;AAWvD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;AAExD,SAAS,qBAAqB,CAAC,CAAkB,EAAE,SAAiB;IAClE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,IAAI,CAAC,CAAC,cAAc,KAAK,0BAA0B;QAAE,OAAO,KAAK,CAAC;IAClE,MAAM,IAAI,GAAI,CAAC,CAAC,QAA2C,IAAI,IAAI,CAAC;IACpE,OAAO,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,EAAE,SAAS,KAAK,SAAS,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,6BAA6B,CAAC,SAAiB;IAC5D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAqC,iBAAiB,EAAE;QAClF,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE;QAC9C,KAAK,EAAE,GAAG;KACX,CAAC,CAAC;IACH,OAAO,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,KAAK,UAAU,8BAA8B,CAAC,SAAiB;IAC7D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAqC,iBAAiB,EAAE;QAClF,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE;QAC9C,KAAK,EAAE,GAAG;KACX,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IAC3F,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,sBAAsB,CAAC,CAAC,CAAC,EAAE,EAAE,wEAAwE,CAAC,CAAC;YAC7G,QAAQ,EAAE,CAAC;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC,EAAE,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,MAEzC;IACC,MAAM,gBAAgB,CAAC;QACrB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,kBAAkB,CAAC,iBAAiB;QAChD,WAAW,EAAE,uBAAuB,CAAC,cAAc;QACnD,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,cAAc,EAAE,0BAA0B;QAC1C,WAAW,EACT,wCAAwC,MAAM,CAAC,MAAM,QAAQ,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI;YACxF,oFAAoF;YACpF,mDAAmD,MAAM,CAAC,GAAG,yBAAyB;YACtF,yFAAyF;QAC3F,QAAQ,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE;KACnF,CAAC,CAAC;AACL,CAAC;AAWD,MAAM,WAAW,GAAiB;IAChC,WAAW,EAAE,6BAA6B,CAAC,gBAAgB,CAAC;IAC5D,qBAAqB,EAAE,2BAA2B;IAClD,sBAAsB,EAAE,6BAA6B;IACrD,mBAAmB,EAAE,0BAA0B;IAC/C,uBAAuB,EAAE,8BAA8B;CACxD,CAAC;AAQF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAoB,EACpB,OAAqB,WAAW;IAEhC,MAAM,MAAM,GAAuB,EAAE,eAAe,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC;IACvG,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;YAC3C,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,MAAM,CAAC,eAAe,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;YACpG,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;YAChE,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACrD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,MAAM,IAAI,CAAC,mBAAmB,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC;gBAClI,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAC1B,OAAO,CAAC,IAAI,CAAC,uDAAuD,EAAE,CAAC,SAAS,mBAAmB,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YAC3H,CAAC;iBAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,CAAC,mBAAmB,IAAI,MAAM,IAAI,CAAC,uBAAuB,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC/E,OAAO,CAAC,GAAG,CAAC,6CAA6C,EAAE,CAAC,SAAS,6CAA6C,CAAC,CAAC;YACtH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,uCAAuC,OAAO,CAAC,EAAE,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/ci-status-git.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Git-native CI status reader plumbing (Reconnect CI to the loop).
+ *
+ * The concrete side of the credential-free CI status transport (Jeremy decision
+ * 2026-07-05): CI publishes immutable per-SHA refs `refs/ci-status/<sha>/<state>`
+ * using the runner's own ephemeral token; the daemon READS them over its existing
+ * git-over-SSH channel with a scoped, read-only `git ls-remote` -- no API token,
+ * no broad fetch, disjoint from `refs/heads/*` (branch-sync-neutral), writes
+ * nothing locally. Fail-closed: any error / absent ref -> 'unknown' -> the merge
+ * gate holds.
+ *
+ * The pure classifier + reader factory live in ci-status.ts; this module holds
+ * the git IO and the opt-out knob, so ci-status.ts stays dependency-light and
+ * unit-testable.
+ *
+ * @module ci-status-git
+ */
+import type { DaemonConfig } from './types.js';
+import { type CiStatusReader } from './ci-status.js';
+/** The per-SHA CI status ref namespace. State is encoded in the ref name. */
+export declare const CI_STATUS_REF_PREFIX = "refs/ci-status";
+/**
+ * List the published `refs/ci-status/<sha>/<state>` ref names for a SHA on the
+ * remote, via a scoped read-only `git ls-remote origin <ref> <ref> <ref>`. Only
+ * the three known state refs for this exact SHA are queried -- a disjoint,
+ * bounded namespace that can never touch branches. Returns the matched ref names
+ * (e.g. `refs/ci-status/<sha>/success`); [] on any git failure (fail-closed).
+ */
+export declare function listCiStatusRefs(sha: string, config: DaemonConfig): string[];
+/**
+ * Resolve the REMOTE integration branch tip SHA via a scoped read-only
+ * `git ls-remote origin refs/heads/<integrationBranch>`. This is the SHA CI last
+ * ran against on integration -- what the CI-result sensor checks. Returns null on
+ * any git failure or when the ref is absent (the sensor then does nothing).
+ */
+export declare function resolveRemoteIntegrationTip(config: DaemonConfig): string | null;
+/**
+ * Whether the CI green-wait is engaged. Opt-OUT (default ON): the canonical
+ * declaration lives in daemon-core env-config.ts (TELORA_CI_MERGE_WAIT); read
+ * here directly from process.env (same registry-published-daemon-core reason as
+ * stall-detector-config.ts). '0' disables; unset/'' /anything else -> enabled.
+ * Off => the merge gate is skipped entirely (pre-reconnection behavior), which is
+ * the safe fallback if the CI ref-publish step is not yet deployed.
+ */
+export declare function ciMergeWaitEnabled(env?: NodeJS.ProcessEnv): boolean;
+/**
+ * Resolve the CI status reader to inject into the integration->main merge gate:
+ * the git-native reader when the green-wait is enabled, else undefined (gate
+ * skipped -> merge proceeds as before). The reader is fail-closed by construction.
+ */
+export declare function resolveCiStatusReader(env?: NodeJS.ProcessEnv): CiStatusReader | undefined;
+//# sourceMappingURL=ci-status-git.d.ts.map

package/dist/ci-status-git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-status-git.d.ts","sourceRoot":"","sources":["../src/ci-status-git.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,gBAAgB,CAAC;AAExB,6EAA6E;AAC7E,eAAO,MAAM,oBAAoB,mBAAmB,CAAC;AAKrD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,MAAM,EAAE,CAc5E;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,GAAG,IAAI,CAS/E;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAEhF;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,cAAc,GAAG,SAAS,CAGtG"}

package/dist/ci-status-git.js

@@ -0,0 +1,86 @@
+/**
+ * Git-native CI status reader plumbing (Reconnect CI to the loop).
+ *
+ * The concrete side of the credential-free CI status transport (Jeremy decision
+ * 2026-07-05): CI publishes immutable per-SHA refs `refs/ci-status/<sha>/<state>`
+ * using the runner's own ephemeral token; the daemon READS them over its existing
+ * git-over-SSH channel with a scoped, read-only `git ls-remote` -- no API token,
+ * no broad fetch, disjoint from `refs/heads/*` (branch-sync-neutral), writes
+ * nothing locally. Fail-closed: any error / absent ref -> 'unknown' -> the merge
+ * gate holds.
+ *
+ * The pure classifier + reader factory live in ci-status.ts; this module holds
+ * the git IO and the opt-out knob, so ci-status.ts stays dependency-light and
+ * unit-testable.
+ *
+ * @module ci-status-git
+ */
+import { runGitSync } from './git.js';
+import { createGitNativeCiStatusReader, } from './ci-status.js';
+/** The per-SHA CI status ref namespace. State is encoded in the ref name. */
+export const CI_STATUS_REF_PREFIX = 'refs/ci-status';
+/** The recognized states CI publishes (one immutable ref per completed run). */
+const CI_STATUS_STATES = ['success', 'failure', 'pending'];
+/**
+ * List the published `refs/ci-status/<sha>/<state>` ref names for a SHA on the
+ * remote, via a scoped read-only `git ls-remote origin <ref> <ref> <ref>`. Only
+ * the three known state refs for this exact SHA are queried -- a disjoint,
+ * bounded namespace that can never touch branches. Returns the matched ref names
+ * (e.g. `refs/ci-status/<sha>/success`); [] on any git failure (fail-closed).
+ */
+export function listCiStatusRefs(sha, config) {
+    const refs = CI_STATUS_STATES.map(s => `${CI_STATUS_REF_PREFIX}/${sha}/${s}`);
+    const result = runGitSync(['ls-remote', 'origin', ...refs], config.repoPath);
+    if (!result.output)
+        return [];
+    // ls-remote lines: "<objectsha>\t<refname>". Extract the ref names.
+    return result.output
+        .split('\n')
+        .map(line => line.trim())
+        .filter(Boolean)
+        .map(line => {
+        const tab = line.indexOf('\t');
+        return tab === -1 ? '' : line.slice(tab + 1).trim();
+    })
+        .filter(ref => ref.startsWith(`${CI_STATUS_REF_PREFIX}/${sha}/`));
+}
+/**
+ * Resolve the REMOTE integration branch tip SHA via a scoped read-only
+ * `git ls-remote origin refs/heads/<integrationBranch>`. This is the SHA CI last
+ * ran against on integration -- what the CI-result sensor checks. Returns null on
+ * any git failure or when the ref is absent (the sensor then does nothing).
+ */
+export function resolveRemoteIntegrationTip(config) {
+    const ref = `refs/heads/${config.integrationBranch}`;
+    const result = runGitSync(['ls-remote', 'origin', ref], config.repoPath);
+    if (!result.output)
+        return null;
+    const firstLine = result.output.split('\n').map(l => l.trim()).filter(Boolean)[0];
+    if (!firstLine)
+        return null;
+    const tab = firstLine.indexOf('\t');
+    const sha = tab === -1 ? '' : firstLine.slice(0, tab).trim();
+    return /^[0-9a-f]{7,40}$/.test(sha) ? sha : null;
+}
+/**
+ * Whether the CI green-wait is engaged. Opt-OUT (default ON): the canonical
+ * declaration lives in daemon-core env-config.ts (TELORA_CI_MERGE_WAIT); read
+ * here directly from process.env (same registry-published-daemon-core reason as
+ * stall-detector-config.ts). '0' disables; unset/'' /anything else -> enabled.
+ * Off => the merge gate is skipped entirely (pre-reconnection behavior), which is
+ * the safe fallback if the CI ref-publish step is not yet deployed.
+ */
+export function ciMergeWaitEnabled(env = process.env) {
+    return env.TELORA_CI_MERGE_WAIT !== '0';
+}
+/**
+ * Resolve the CI status reader to inject into the integration->main merge gate:
+ * the git-native reader when the green-wait is enabled, else undefined (gate
+ * skipped -> merge proceeds as before). The reader is fail-closed by construction.
+ */
+export function resolveCiStatusReader(env = process.env) {
+    if (!ciMergeWaitEnabled(env))
+        return undefined;
+    return createGitNativeCiStatusReader(listCiStatusRefs);
+}
+//# sourceMappingURL=ci-status-git.js.map