@telora/daemon 0.20.19 → 0.20.28

package/dist/resolvers/shared/audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../../src/resolvers/shared/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAWH;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAUrF"}
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../../src/resolvers/shared/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH;;;;;;;;;;;GAWG;AACH,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAOrF"}

package/dist/resolvers/shared/audit.js

@@ -8,18 +8,23 @@
  * If no prior audit exists or the lookup fails, the resolvers fall back
  * to "all since focus start" (no lower bound).
  */
-import { callApi } from '../../queries/shared.js';
+import { getRecentAuditRun } from '../../queries/audit-runs.js';
 /**
  * Best-effort cycle window. Returns the previous cycle's completed_at as
  * the lower bound for "things that happened in the current cycle". Null
  * means "no prior cycle, include everything since focus start". Failures
  * fall back to null so a missing audit_runs table or transient API error
  * does not blank out the resolver output.
+ *
+ * The snake_case -> camelCase transform lives in getRecentAuditRun (the API
+ * returns the Supabase row verbatim -- neither successResponse nor callApi
+ * maps keys). Reading `completedAt` off the raw response here always yielded
+ * undefined, so this window silently never narrowed.
  */
 export async function getAuditCycleLowerBound(focusId) {
     try {
-        const result = await callApi('daemon_get_recent_audit_run_for_focus', { focusId });
-        return result.auditRun?.completedAt ?? null;
+        const run = await getRecentAuditRun(focusId);
+        return run?.completedAt ?? null;
     }
     catch {
         return null;

package/dist/resolvers/shared/audit.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../src/resolvers/shared/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AASlD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAe;IAC3D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,uCAAuC,EACvC,EAAE,OAAO,EAAE,CACZ,CAAC;QACF,OAAO,MAAM,CAAC,QAAQ,EAAE,WAAW,IAAI,IAAI,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../src/resolvers/shared/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAEhE;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAe;IAC3D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC7C,OAAO,GAAG,EAAE,WAAW,IAAI,IAAI,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/resolvers/shared/git-diff.d.ts

@@ -11,4 +11,17 @@ export declare function getGitDiff(worktreePath: string, baseBranch: string): st
  * Get a summary of files changed in a diff (for truncation header).
  */
 export declare function getDiffStatSummary(worktreePath: string, baseBranch: string): string;
+/**
+ * List the files changed between the base branch and HEAD (name-only).
+ * Returns an empty array on failure (missing worktree / bad range).
+ */
+export declare function getChangedFiles(worktreePath: string, baseBranch: string): string[];
+/**
+ * Count commits on HEAD that are not reachable from the base branch
+ * (`git rev-list --count base..HEAD`). This is the delivery's own commit
+ * count relative to the integration base -- distinct from the diff, which
+ * can be empty even when commits exist if it is resolved in the wrong
+ * worktree. Returns 0 on failure so callers treat "unknown" as "no commits".
+ */
+export declare function getCommitsAhead(worktreePath: string, baseBranch: string): number;
 //# sourceMappingURL=git-diff.d.ts.map

package/dist/resolvers/shared/git-diff.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"git-diff.d.ts","sourceRoot":"","sources":["../../../src/resolvers/shared/git-diff.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,eAAO,MAAM,cAAc,QAAY,CAAC;AAExC;;;GAGG;AACH,wBAAgB,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAU3E;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CASnF"}
+{"version":3,"file":"git-diff.d.ts","sourceRoot":"","sources":["../../../src/resolvers/shared/git-diff.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,eAAO,MAAM,cAAc,QAAY,CAAC;AAExC;;;GAGG;AACH,wBAAgB,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAU3E;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CASnF;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,CAUlF;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAWhF"}

package/dist/resolvers/shared/git-diff.js

@@ -27,4 +27,34 @@ export function getDiffStatSummary(worktreePath, baseBranch) {
         return '';
     }
 }
+/**
+ * List the files changed between the base branch and HEAD (name-only).
+ * Returns an empty array on failure (missing worktree / bad range).
+ */
+export function getChangedFiles(worktreePath, baseBranch) {
+    try {
+        const out = execSync(`git diff --name-only ${baseBranch}...HEAD`, { cwd: worktreePath, maxBuffer: 1024 * 1024, encoding: 'utf-8' });
+        return out.split('\n').map((l) => l.trim()).filter((l) => l !== '');
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Count commits on HEAD that are not reachable from the base branch
+ * (`git rev-list --count base..HEAD`). This is the delivery's own commit
+ * count relative to the integration base -- distinct from the diff, which
+ * can be empty even when commits exist if it is resolved in the wrong
+ * worktree. Returns 0 on failure so callers treat "unknown" as "no commits".
+ */
+export function getCommitsAhead(worktreePath, baseBranch) {
+    try {
+        const out = execSync(`git rev-list --count ${baseBranch}..HEAD`, { cwd: worktreePath, maxBuffer: 1024 * 1024, encoding: 'utf-8' });
+        const n = Number.parseInt(out.trim(), 10);
+        return Number.isFinite(n) && n > 0 ? n : 0;
+    }
+    catch {
+        return 0;
+    }
+}
 //# sourceMappingURL=git-diff.js.map

package/dist/resolvers/shared/git-diff.js.map

@@ -1 +1 @@
-{"version":3,"file":"git-diff.js","sourceRoot":"","sources":["../../../src/resolvers/shared/git-diff.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,uCAAuC;AAEhF;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,YAAoB,EAAE,UAAkB;IACjE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CACnB,YAAY,UAAU,SAAS,EAC/B,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CACtE,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,YAAoB,EAAE,UAAkB;IACzE,IAAI,CAAC;QACH,OAAO,QAAQ,CACb,mBAAmB,UAAU,SAAS,EACtC,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CACjE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}
+{"version":3,"file":"git-diff.js","sourceRoot":"","sources":["../../../src/resolvers/shared/git-diff.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,uCAAuC;AAEhF;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,YAAoB,EAAE,UAAkB;IACjE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CACnB,YAAY,UAAU,SAAS,EAC/B,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CACtE,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,YAAoB,EAAE,UAAkB;IACzE,IAAI,CAAC;QACH,OAAO,QAAQ,CACb,mBAAmB,UAAU,SAAS,EACtC,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CACjE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,YAAoB,EAAE,UAAkB;IACtE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAClB,wBAAwB,UAAU,SAAS,EAC3C,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CACjE,CAAC;QACF,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,YAAoB,EAAE,UAAkB;IACtE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAClB,wBAAwB,UAAU,QAAQ,EAC1C,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CACjE,CAAC;QACF,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC"}

package/dist/spawn/review-role-fallback.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Review-spawn reviewer-role fallback.
+ *
+ * When a coding team completes, the auto_terminate_focus_team() Postgres trigger
+ * nulls product_focuses.assigned_agent_role_id -- correct team-lifecycle
+ * shutdown (the Play/queue toggle cleared). But a review is a SECOND team that
+ * must spawn AFTER that completion, and the pending review directive it left
+ * behind still needs a role to spawn under. With assigned_agent_role_id null,
+ * the listener's pending-spawn path used to skip the queued review directive
+ * every poll, and the directive-executor suppressed re-firing (an equivalent
+ * directive is "already queued") -- a review that can never spawn, spin-logging
+ * until review_window_stalled escalates to a human at ~6h.
+ *
+ * This module holds the prevent-at-source decision: for a REVIEW directive with
+ * a null role, resolve a layered reviewer-role fallback (the org's seeded
+ * Developer role) and spawn. It mirrors nexus intake's resolveIntakeRoleLayered
+ * (the org's seeded 'Developer' role is the zero-config fallback). The fallback
+ * is scoped STRICTLY to review spawns: a null role on a CODING spawn is the
+ * intended off-state and must NOT auto-spawn. Defense-in-depth: if even the
+ * fallback resolves nothing, the caller clears the pending directive so it stops
+ * spin-logging and lets the stall detector escalate promptly.
+ */
+import type { AgentRole } from '../types/session.js';
+/**
+ * Name of the org's auto-seeded, full-codebase agent role used as the reviewer
+ * fallback. Every organization gets one on creation (migration
+ * seed_default_agent_roles: 'Developer'). Mirrors nexus intake's
+ * DEFAULT_INTAKE_ROLE_NAME so review-spawn and intake-spawn share the same
+ * zero-config fallback identity.
+ */
+export declare const DEFAULT_REVIEWER_ROLE_NAME = "Developer";
+/**
+ * What to do with a pending spawn directive whose focus has a null
+ * assigned_agent_role_id.
+ *
+ *   - skip:  a CODING directive (or no directive) -- the intended off-state
+ *            (Play/queue toggle cleared). Never auto-spawn.
+ *   - spawn: a REVIEW directive with a resolved fallback role -- spawn the
+ *            review team under it.
+ *   - clear: a REVIEW directive with NO resolvable fallback role -- drop the
+ *            directive so the stranded-review re-fire suppression cannot spin
+ *            forever; review_window_stalled remains the escalation path.
+ */
+export type NullRoleSpawnDecision = {
+    action: 'skip';
+} | {
+    action: 'spawn';
+    role: AgentRole;
+} | {
+    action: 'clear';
+};
+/**
+ * Resolve the org's seeded Developer role from an already-loaded roles
+ * collection (the listener keeps every org agent role in memory). Returns the
+ * first role named DEFAULT_REVIEWER_ROLE_NAME, or undefined when the org has no
+ * seeded Developer role (the degenerate case the 'clear' decision handles).
+ *
+ * Pure and exported for unit testing.
+ */
+export declare function resolveReviewerFallbackRole(roles: Iterable<AgentRole>): AgentRole | undefined;
+/**
+ * Decide what to do with a null-role pending spawn directive.
+ *
+ * The layered fallback applies ONLY to review directives; a coding directive
+ * with a null role is the intended off-state and is always skipped. A review
+ * directive spawns under the fallback role when one resolves, else clears.
+ *
+ * Pure and exported for unit testing (peer of resolveReviewerFallbackRole).
+ */
+export declare function decideNullRoleSpawn(input: {
+    sessionType: 'coding' | 'review' | undefined;
+    fallbackRole: AgentRole | undefined;
+}): NullRoleSpawnDecision;
+//# sourceMappingURL=review-role-fallback.d.ts.map

package/dist/spawn/review-role-fallback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-role-fallback.d.ts","sourceRoot":"","sources":["../../src/spawn/review-role-fallback.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAErD;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,cAAc,CAAC;AAEtD;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,qBAAqB,GAC7B;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAClB;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GACpC;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC;AAExB;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,GACzB,SAAS,GAAG,SAAS,CAKvB;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,WAAW,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC7C,YAAY,EAAE,SAAS,GAAG,SAAS,CAAC;CACrC,GAAG,qBAAqB,CAIxB"}

package/dist/spawn/review-role-fallback.js

@@ -0,0 +1,62 @@
+/**
+ * Review-spawn reviewer-role fallback.
+ *
+ * When a coding team completes, the auto_terminate_focus_team() Postgres trigger
+ * nulls product_focuses.assigned_agent_role_id -- correct team-lifecycle
+ * shutdown (the Play/queue toggle cleared). But a review is a SECOND team that
+ * must spawn AFTER that completion, and the pending review directive it left
+ * behind still needs a role to spawn under. With assigned_agent_role_id null,
+ * the listener's pending-spawn path used to skip the queued review directive
+ * every poll, and the directive-executor suppressed re-firing (an equivalent
+ * directive is "already queued") -- a review that can never spawn, spin-logging
+ * until review_window_stalled escalates to a human at ~6h.
+ *
+ * This module holds the prevent-at-source decision: for a REVIEW directive with
+ * a null role, resolve a layered reviewer-role fallback (the org's seeded
+ * Developer role) and spawn. It mirrors nexus intake's resolveIntakeRoleLayered
+ * (the org's seeded 'Developer' role is the zero-config fallback). The fallback
+ * is scoped STRICTLY to review spawns: a null role on a CODING spawn is the
+ * intended off-state and must NOT auto-spawn. Defense-in-depth: if even the
+ * fallback resolves nothing, the caller clears the pending directive so it stops
+ * spin-logging and lets the stall detector escalate promptly.
+ */
+/**
+ * Name of the org's auto-seeded, full-codebase agent role used as the reviewer
+ * fallback. Every organization gets one on creation (migration
+ * seed_default_agent_roles: 'Developer'). Mirrors nexus intake's
+ * DEFAULT_INTAKE_ROLE_NAME so review-spawn and intake-spawn share the same
+ * zero-config fallback identity.
+ */
+export const DEFAULT_REVIEWER_ROLE_NAME = 'Developer';
+/**
+ * Resolve the org's seeded Developer role from an already-loaded roles
+ * collection (the listener keeps every org agent role in memory). Returns the
+ * first role named DEFAULT_REVIEWER_ROLE_NAME, or undefined when the org has no
+ * seeded Developer role (the degenerate case the 'clear' decision handles).
+ *
+ * Pure and exported for unit testing.
+ */
+export function resolveReviewerFallbackRole(roles) {
+    for (const role of roles) {
+        if (role.name === DEFAULT_REVIEWER_ROLE_NAME)
+            return role;
+    }
+    return undefined;
+}
+/**
+ * Decide what to do with a null-role pending spawn directive.
+ *
+ * The layered fallback applies ONLY to review directives; a coding directive
+ * with a null role is the intended off-state and is always skipped. A review
+ * directive spawns under the fallback role when one resolves, else clears.
+ *
+ * Pure and exported for unit testing (peer of resolveReviewerFallbackRole).
+ */
+export function decideNullRoleSpawn(input) {
+    if (input.sessionType !== 'review')
+        return { action: 'skip' };
+    if (input.fallbackRole)
+        return { action: 'spawn', role: input.fallbackRole };
+    return { action: 'clear' };
+}
+//# sourceMappingURL=review-role-fallback.js.map

package/dist/spawn/review-role-fallback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-role-fallback.js","sourceRoot":"","sources":["../../src/spawn/review-role-fallback.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,WAAW,CAAC;AAmBtD;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAA0B;IAE1B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,KAAK,0BAA0B;YAAE,OAAO,IAAI,CAAC;IAC5D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAGnC;IACC,IAAI,KAAK,CAAC,WAAW,KAAK,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9D,IAAI,KAAK,CAAC,YAAY;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;IAC7E,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC"}

package/dist/unified-shell-status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"unified-shell-status.d.ts","sourceRoot":"","sources":["../src/unified-shell-status.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAU5F;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,aAAa,EACrB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,EAAE,CAmBV;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,CA8DnG;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CA6BrE"}
+{"version":3,"file":"unified-shell-status.d.ts","sourceRoot":"","sources":["../src/unified-shell-status.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAU5F;;;;;;;;;GASG;AACH,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,aAAa,EACrB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,EAAE,CAuBV;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,QAAQ,CAAC,EAAE,gBAAgB,GAAG,IAAI,CA8DnG;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CA6BrE"}

package/dist/unified-shell-status.js

@@ -23,7 +23,11 @@ export function formatVerificationPostureLines(config, env = process.env) {
     const { defaultVerification, products } = resolveVerificationCarriage(config.rawFileConfig, config.base.products ?? []);
     return products.map((p) => {
         // Per-product override wins; else the global block (mirrors configForProduct).
-        const scoped = { defaultVerification: p.defaultVerification ?? defaultVerification };
+        // repoPath carries the repo-committed telora.verify.json layer below both.
+        const scoped = {
+            defaultVerification: p.defaultVerification ?? defaultVerification,
+            repoPath: p.repoPath,
+        };
         const posture = deriveVerificationPosture(scoped, env);
         const label = productLabel(p);
         if (posture === 'configured') {

package/dist/unified-shell-status.js.map

@@ -1 +1 @@
-{"version":3,"file":"unified-shell-status.js","sourceRoot":"","sources":["../src/unified-shell-status.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACjG,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;AAG7D;;;;;;;;;GASG;AACH,MAAM,UAAU,8BAA8B,CAC5C,MAAqB,EACrB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,GAAG,2BAA2B,CACnE,MAAM,CAAC,aAAa,EACpB,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAC3B,CAAC;IACF,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,+EAA+E;QAC/E,MAAM,MAAM,GAAG,EAAE,mBAAmB,EAAE,CAAC,CAAC,mBAAmB,IAAI,mBAAmB,EAAE,CAAC;QACrF,MAAM,OAAO,GAAG,yBAAyB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,0BAA0B,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACzD,OAAO,YAAY,KAAK,iBAAiB,QAAQ,CAAC,OAAO,GAAG,CAAC;QAC/D,CAAC;QACD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;YAC3B,OAAO,YAAY,KAAK,uCAAuC,CAAC;QAClE,CAAC;QACD,OAAO,YAAY,KAAK,oDAAoD,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAA0B,EAAE,QAA2B;IAC3F,GAAG,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAC5C,GAAG,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5D,GAAG,CAAC,IAAI,CAAC,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAChC,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IAErD,gCAAgC;IAChC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACxC,GAAG,CAAC,IAAI,CAAC,mBAAmB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;QAC7D,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,IAAI,CAAC,KAAK,MAAM,KAAK,KAAK,QAAQ,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;YACxB,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YAC9C,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBACvE,GAAG,CAAC,IAAI,CAAC,OAAO,MAAM,KAAK,KAAK,UAAU,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,IAAI,aAAa,CAAC,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,wBAAwB,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,IAAI,CAAC,uBAAuB,SAAS,CAAC,qBAAqB,EAAE,CAAC,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,uBAAuB,SAAS,CAAC,eAAe,EAAE,CAAC,CAAC;QAE7D,gCAAgC;QAChC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC/B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACrB,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;oBACtB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;wBACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;4BAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC;iCAC1D,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;iCACrC,IAAI,CAAC,KAAK,CAAC,CAAC;4BACf,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;wBAC7B,CAAC;6BAAM,CAAC;4BACN,GAAG,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;wBACpC,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACvD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC;gBACjE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;oBACtB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;wBAC7B,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACrC,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAqB;IAC7D,GAAG,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC1C,GAAG,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,WAAW,EAAE,CAAC,CAAC;IAClE,GAAG,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAClF,GAAG,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,WAAW,EAAE,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC5C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CAAC,eAAe,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,WAAW,EAAE,CAAC,CAAC;QAClE,GAAG,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,QAAQ,EAAE,CAAC,CAAC;IAC1E,GAAG,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC;IAClE,GAAG,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,OAAO,IAAI,CAAC,CAAC;IAC5E,GAAG,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IAC/E,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,EAAE,CAAC,WAAW,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;QACtE,GAAG,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,EAAE,CAAC,iBAAiB,IAAI,aAAa,CAAC,EAAE,CAAC,CAAC;QACpF,GAAG,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,EAAE,CAAC,gBAAgB,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,8EAA8E;IAC9E,sBAAsB;IACtB,MAAM,OAAO,GAAG,wBAAwB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC/D,GAAG,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;AACzE,CAAC"}
+{"version":3,"file":"unified-shell-status.js","sourceRoot":"","sources":["../src/unified-shell-status.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACjG,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;AAG7D;;;;;;;;;GASG;AACH,MAAM,UAAU,8BAA8B,CAC5C,MAAqB,EACrB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,GAAG,2BAA2B,CACnE,MAAM,CAAC,aAAa,EACpB,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAC3B,CAAC;IACF,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,+EAA+E;QAC/E,2EAA2E;QAC3E,MAAM,MAAM,GAAG;YACb,mBAAmB,EAAE,CAAC,CAAC,mBAAmB,IAAI,mBAAmB;YACjE,QAAQ,EAAE,CAAC,CAAC,QAAQ;SACrB,CAAC;QACF,MAAM,OAAO,GAAG,yBAAyB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,0BAA0B,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACzD,OAAO,YAAY,KAAK,iBAAiB,QAAQ,CAAC,OAAO,GAAG,CAAC;QAC/D,CAAC;QACD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;YAC3B,OAAO,YAAY,KAAK,uCAAuC,CAAC;QAClE,CAAC;QACD,OAAO,YAAY,KAAK,oDAAoD,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAA0B,EAAE,QAA2B;IAC3F,GAAG,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAC5C,GAAG,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5D,GAAG,CAAC,IAAI,CAAC,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAChC,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IAErD,gCAAgC;IAChC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACxC,GAAG,CAAC,IAAI,CAAC,mBAAmB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;QAC7D,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,IAAI,CAAC,KAAK,MAAM,KAAK,KAAK,QAAQ,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;YACxB,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YAC9C,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBACvE,GAAG,CAAC,IAAI,CAAC,OAAO,MAAM,KAAK,KAAK,UAAU,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,IAAI,aAAa,CAAC,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,wBAAwB,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;QAC3D,GAAG,CAAC,IAAI,CAAC,uBAAuB,SAAS,CAAC,qBAAqB,EAAE,CAAC,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,uBAAuB,SAAS,CAAC,eAAe,EAAE,CAAC,CAAC;QAE7D,gCAAgC;QAChC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC/B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACrB,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;oBACtB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;wBACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;4BAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC;iCAC1D,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;iCACrC,IAAI,CAAC,KAAK,CAAC,CAAC;4BACf,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;wBAC7B,CAAC;6BAAM,CAAC;4BACN,GAAG,CAAC,IAAI,CAAC,SAAS,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;wBACpC,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACvD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC;gBACjE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;oBACtB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;wBAC7B,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACrC,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAqB;IAC7D,GAAG,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC1C,GAAG,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,WAAW,EAAE,CAAC,CAAC;IAClE,GAAG,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAClF,GAAG,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,WAAW,EAAE,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC5C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CAAC,eAAe,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,WAAW,EAAE,CAAC,CAAC;QAClE,GAAG,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,QAAQ,EAAE,CAAC,CAAC;IAC1E,GAAG,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC;IAClE,GAAG,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,OAAO,IAAI,CAAC,CAAC;IAC5E,GAAG,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IAC/E,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,EAAE,CAAC,WAAW,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;QACtE,GAAG,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,EAAE,CAAC,iBAAiB,IAAI,aAAa,CAAC,EAAE,CAAC,CAAC;QACpF,GAAG,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,EAAE,CAAC,gBAAgB,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,8EAA8E;IAC9E,sBAAsB;IACtB,MAAM,OAAO,GAAG,wBAAwB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC/D,GAAG,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;AACzE,CAAC"}

package/dist/verification-config.d.ts

@@ -6,11 +6,21 @@
  * it the DEFAULT for every delivery entering verify, using a config-default
  * command run daemon-side at the coding->verify edge.
  *
- * Resolution precedence (env > file > typed default), mirroring how
- * resolveTelemetryConfig / resolveLacunaConfig work in the daemon:
- *   - command:      TELORA_DEFAULT_VERIFY_COMMAND    > config.defaultVerification.command    > '' (disabled)
- *   - timeoutMs:    TELORA_DEFAULT_VERIFY_TIMEOUT_MS > config.defaultVerification.timeoutMs   > 30 min
- *   - maxConcurrent:TELORA_DEFAULT_VERIFY_MAX_CONCURRENT > config.defaultVerification.maxConcurrent > 1
+ * Resolution precedence (env > operator file > repo manifest > typed default),
+ * mirroring how resolveTelemetryConfig / resolveLacunaConfig work in the daemon:
+ *   - command:      TELORA_DEFAULT_VERIFY_COMMAND    > config.defaultVerification.command    > telora.verify.json > '' (disabled)
+ *   - timeoutMs:    TELORA_DEFAULT_VERIFY_TIMEOUT_MS > config.defaultVerification.timeoutMs   > telora.verify.json > 30 min
+ *   - maxConcurrent:TELORA_DEFAULT_VERIFY_MAX_CONCURRENT > config.defaultVerification.maxConcurrent > telora.verify.json > 1
+ *
+ * The repo-manifest layer (`telora.verify.json`, see verification-manifest.ts)
+ * is what lets a REPO declare its own gate: the two layers above it are both
+ * per-workstation and untracked (`.gitignore:72` ignores `.telora/` wholesale;
+ * cli/verify-setup.ts:218 writes to ~/.telora/daemon.json), so without it no PR
+ * could arm the gate and a fresh clone was ungated by construction.
+ *
+ * The seam stays OPT-IN: a repo shipping no manifest still resolves to ''
+ * (disabled). No default command is ever hard-coded here -- the daemon manages
+ * products that have no whole-repo verification command at all.
  *
  * The env knobs are read directly from `process.env` here rather than through
  * daemon-core's env-config Zod index: daemon-core is a registry-installed
@@ -21,6 +31,7 @@
  * @module verification-config
  */
 import type { DaemonConfig, DefaultVerificationConfig } from './types.js';
+import { type VerifyManifestReader } from './verification-manifest.js';
 /** Default timeout for the default-on deterministic run: 30 min (full build+test sweep). */
 export declare const DEFAULT_VERIFY_TIMEOUT_MS: number;
 /** Default max concurrent daemon-side verification runs. */
@@ -43,17 +54,52 @@ export interface ResolvedDefaultVerification {
     enabled: boolean;
 }
 /**
- * Resolve the default-on verification config from env > file(config) > default.
+ * The config slice these resolvers need: the (already per-product-selected)
+ * verification block, plus the product's repo root so the repo-manifest layer
+ * can be read.
+ *
+ * `repoPath` is OPTIONAL rather than picked from DaemonConfig (where it is
+ * required) so that callers holding only a scoped `{ defaultVerification }`
+ * still typecheck; a missing repoPath simply means "no repo manifest layer".
+ * A product-scoped config always carries it -- `configForProduct`
+ * (config.ts:351) sets `repoPath` per product -- so the real daemon paths get
+ * the manifest layer for free.
+ */
+export type VerificationConfigScope = Pick<DaemonConfig, 'defaultVerification'> & {
+    /** Product repo root; the manifest is read from `<repoPath>/telora.verify.json`. */
+    repoPath?: string;
+};
+/**
+ * Resolve the default-on verification config from
+ * env > operator file > repo manifest > typed default.
+ *
+ * Pure w.r.t. its inputs: env is injectable, and the repo-manifest read is
+ * injected via `readManifest` rather than touching fs inside this resolver, so
+ * the whole precedence chain is assertable without a real repo.
+ *
+ * Env values are parsed by daemon-core's loadEnvConfig, so an invalid numeric
+ * value fails loudly at daemon startup (naming the var) instead of silently
+ * degrading mid-tick. A malformed repo manifest fails the same way (naming the
+ * file) -- see verification-manifest.ts for why that is never degraded to
+ * "disabled".
+ *
+ * The manifest is read whenever a repoPath is present, regardless of which
+ * layer ultimately wins, so a broken repo declaration surfaces even on a
+ * workstation whose env/operator file happens to override it.
  *
- * Pure w.r.t. its inputs (env is injectable for tests). Env values are parsed
- * by daemon-core's loadEnvConfig, so an invalid numeric value fails loudly at
- * daemon startup (naming the var) instead of silently degrading mid-tick.
+ * One asymmetry worth naming: an operator's explicit `declined: true` marker
+ * SUPPRESSES the repo-manifest command. The marker is a recorded operator
+ * decision to gate on AI review only, and the operator file outranks the repo
+ * manifest -- so a repo declaring a command cannot silently overturn it. Env
+ * still wins over both (an explicit env command beats a stale decline marker,
+ * unchanged).
  */
-export declare function resolveDefaultVerification(config: Pick<DaemonConfig, 'defaultVerification'>, env?: NodeJS.ProcessEnv): ResolvedDefaultVerification;
+export declare function resolveDefaultVerification(config: VerificationConfigScope, env?: NodeJS.ProcessEnv, readManifest?: VerifyManifestReader): ResolvedDefaultVerification;
 /**
  * Declarative verification posture, derived at read time from config (never a
  * filed event, so it cannot spam and self-clears once configured):
- *  - `configured`   -- a non-empty verification command resolves (env or file).
+ *  - `configured`   -- a non-empty verification command resolves (env, operator
+ *                      file, or the repo's committed `telora.verify.json`).
  *  - `declined`     -- no command resolves AND an explicit review-only decline
  *                      marker is recorded. Deliveries gate on AI review only,
  *                      by deliberate decision (not a gap).
@@ -68,13 +114,15 @@ export type VerificationPosture = 'configured' | 'declined' | 'unconfigured';
  * escalation/side-effect path -- posture is declarative state, surfaced on
  * ambient read surfaces, never a filed escalation. Callers pass a product-scoped
  * config (from `configForProduct`) so `config.defaultVerification` is already the
- * selected per-product-or-global block.
+ * selected per-product-or-global block and `repoPath` points at that product's
+ * repo -- which is what lets a repo-manifest-only command read `configured`.
  *
  * An explicitly resolved command wins over the decline marker: an operator who
  * sets a command (via env or file) has configured verification regardless of a
- * stale `declined` flag.
+ * stale `declined` flag. The marker still suppresses the repo manifest (the
+ * operator file outranks it), so `declined: true` keeps reading `declined`.
  */
-export declare function deriveVerificationPosture(config: Pick<DaemonConfig, 'defaultVerification'>, env?: NodeJS.ProcessEnv): VerificationPosture;
+export declare function deriveVerificationPosture(config: VerificationConfigScope, env?: NodeJS.ProcessEnv, readManifest?: VerifyManifestReader): VerificationPosture;
 /** Structured posture for one product, published for app consumption. */
 export interface ProductVerificationPosture {
     posture: VerificationPosture;
@@ -92,6 +140,7 @@ export interface ProductVerificationPosture {
  */
 export declare function buildProductPostureMap(products: ReadonlyArray<{
     id: string;
+    repoPath?: string;
     defaultVerification?: DefaultVerificationConfig;
-}>, globalBlock: DefaultVerificationConfig | undefined, env?: NodeJS.ProcessEnv): Record<string, ProductVerificationPosture>;
+}>, globalBlock: DefaultVerificationConfig | undefined, env?: NodeJS.ProcessEnv, readManifest?: VerifyManifestReader): Record<string, ProductVerificationPosture>;
 //# sourceMappingURL=verification-config.d.ts.map

package/dist/verification-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verification-config.d.ts","sourceRoot":"","sources":["../src/verification-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAG1E,4FAA4F;AAC5F,eAAO,MAAM,yBAAyB,QAAiB,CAAC;AAExD,4DAA4D;AAC5D,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAE/C,2DAA2D;AAC3D,eAAO,MAAM,UAAU;;;;CAIb,CAAC;AAEX;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,qBAAqB,CAAC,EACjD,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,2BAA2B,CA0B7B;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,mBAAmB,GAAG,YAAY,GAAG,UAAU,GAAG,cAAc,CAAC;AAE7E;;;;;;;;;;;;GAYG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,qBAAqB,CAAC,EACjD,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,mBAAmB,CAKrB;AAED,yEAAyE;AACzE,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,mBAAmB,CAAC;IAC7B,yEAAyE;IACzE,OAAO,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,aAAa,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,mBAAmB,CAAC,EAAE,yBAAyB,CAAA;CAAE,CAAC,EACxF,WAAW,EAAE,yBAAyB,GAAG,SAAS,EAClD,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAY5C"}
+{"version":3,"file":"verification-config.d.ts","sourceRoot":"","sources":["../src/verification-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAE1E,OAAO,EAAsB,KAAK,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAE3F,4FAA4F;AAC5F,eAAO,MAAM,yBAAyB,QAAiB,CAAC;AAExD,4DAA4D;AAC5D,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAE/C,2DAA2D;AAC3D,eAAO,MAAM,UAAU;;;;CAIb,CAAC;AAEX;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,uBAAuB,GAAG,IAAI,CAAC,YAAY,EAAE,qBAAqB,CAAC,GAAG;IAChF,oFAAoF;IACpF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,uBAAuB,EAC/B,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,YAAY,GAAE,oBAAyC,GACtD,2BAA2B,CAmC7B;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,mBAAmB,GAAG,YAAY,GAAG,UAAU,GAAG,cAAc,CAAC;AAE7E;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,uBAAuB,EAC/B,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,YAAY,GAAE,oBAAyC,GACtD,mBAAmB,CAKrB;AAED,yEAAyE;AACzE,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,mBAAmB,CAAC;IAC7B,yEAAyE;IACzE,OAAO,EAAE,MAAM,CAAC;IAChB,+EAA+E;IAC/E,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,aAAa,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,mBAAmB,CAAC,EAAE,yBAAyB,CAAA;CAAE,CAAC,EAC3G,WAAW,EAAE,yBAAyB,GAAG,SAAS,EAClD,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,YAAY,GAAE,oBAAyC,GACtD,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAiB5C"}

package/dist/verification-config.js

@@ -6,11 +6,21 @@
  * it the DEFAULT for every delivery entering verify, using a config-default
  * command run daemon-side at the coding->verify edge.
  *
- * Resolution precedence (env > file > typed default), mirroring how
- * resolveTelemetryConfig / resolveLacunaConfig work in the daemon:
- *   - command:      TELORA_DEFAULT_VERIFY_COMMAND    > config.defaultVerification.command    > '' (disabled)
- *   - timeoutMs:    TELORA_DEFAULT_VERIFY_TIMEOUT_MS > config.defaultVerification.timeoutMs   > 30 min
- *   - maxConcurrent:TELORA_DEFAULT_VERIFY_MAX_CONCURRENT > config.defaultVerification.maxConcurrent > 1
+ * Resolution precedence (env > operator file > repo manifest > typed default),
+ * mirroring how resolveTelemetryConfig / resolveLacunaConfig work in the daemon:
+ *   - command:      TELORA_DEFAULT_VERIFY_COMMAND    > config.defaultVerification.command    > telora.verify.json > '' (disabled)
+ *   - timeoutMs:    TELORA_DEFAULT_VERIFY_TIMEOUT_MS > config.defaultVerification.timeoutMs   > telora.verify.json > 30 min
+ *   - maxConcurrent:TELORA_DEFAULT_VERIFY_MAX_CONCURRENT > config.defaultVerification.maxConcurrent > telora.verify.json > 1
+ *
+ * The repo-manifest layer (`telora.verify.json`, see verification-manifest.ts)
+ * is what lets a REPO declare its own gate: the two layers above it are both
+ * per-workstation and untracked (`.gitignore:72` ignores `.telora/` wholesale;
+ * cli/verify-setup.ts:218 writes to ~/.telora/daemon.json), so without it no PR
+ * could arm the gate and a fresh clone was ungated by construction.
+ *
+ * The seam stays OPT-IN: a repo shipping no manifest still resolves to ''
+ * (disabled). No default command is ever hard-coded here -- the daemon manages
+ * products that have no whole-repo verification command at all.
  *
  * The env knobs are read directly from `process.env` here rather than through
  * daemon-core's env-config Zod index: daemon-core is a registry-installed
@@ -21,6 +31,7 @@
  * @module verification-config
  */
 import { loadEnvConfig } from '@telora/daemon-core';
+import { readVerifyManifest } from './verification-manifest.js';
 /** Default timeout for the default-on deterministic run: 30 min (full build+test sweep). */
 export const DEFAULT_VERIFY_TIMEOUT_MS = 30 * 60 * 1000;
 /** Default max concurrent daemon-side verification runs. */
@@ -32,24 +43,51 @@ export const VERIFY_ENV = {
     MAX_CONCURRENT: 'TELORA_DEFAULT_VERIFY_MAX_CONCURRENT',
 };
 /**
- * Resolve the default-on verification config from env > file(config) > default.
+ * Resolve the default-on verification config from
+ * env > operator file > repo manifest > typed default.
+ *
+ * Pure w.r.t. its inputs: env is injectable, and the repo-manifest read is
+ * injected via `readManifest` rather than touching fs inside this resolver, so
+ * the whole precedence chain is assertable without a real repo.
  *
- * Pure w.r.t. its inputs (env is injectable for tests). Env values are parsed
- * by daemon-core's loadEnvConfig, so an invalid numeric value fails loudly at
- * daemon startup (naming the var) instead of silently degrading mid-tick.
+ * Env values are parsed by daemon-core's loadEnvConfig, so an invalid numeric
+ * value fails loudly at daemon startup (naming the var) instead of silently
+ * degrading mid-tick. A malformed repo manifest fails the same way (naming the
+ * file) -- see verification-manifest.ts for why that is never degraded to
+ * "disabled".
+ *
+ * The manifest is read whenever a repoPath is present, regardless of which
+ * layer ultimately wins, so a broken repo declaration surfaces even on a
+ * workstation whose env/operator file happens to override it.
+ *
+ * One asymmetry worth naming: an operator's explicit `declined: true` marker
+ * SUPPRESSES the repo-manifest command. The marker is a recorded operator
+ * decision to gate on AI review only, and the operator file outranks the repo
+ * manifest -- so a repo declaring a command cannot silently overturn it. Env
+ * still wins over both (an explicit env command beats a stale decline marker,
+ * unchanged).
  */
-export function resolveDefaultVerification(config, env = process.env) {
+export function resolveDefaultVerification(config, env = process.env, readManifest = readVerifyManifest) {
     const file = config.defaultVerification;
     const envCfg = loadEnvConfig(env);
+    const manifest = readManifest(config.repoPath);
     const envCommand = envCfg.TELORA_DEFAULT_VERIFY_COMMAND;
-    const command = envCommand !== undefined && envCommand.trim() !== ''
-        ? envCommand
-        : (typeof file?.command === 'string' ? file.command : '');
+    const fileCommand = typeof file?.command === 'string' && file.command.trim() !== ''
+        ? file.command
+        : undefined;
+    // An explicit operator decline outranks the repo manifest (see docstring).
+    const manifestCommand = file?.declined === true ? undefined : manifest?.command;
+    const command = (envCommand !== undefined && envCommand.trim() !== '' ? envCommand : undefined)
+        ?? fileCommand
+        ?? manifestCommand
+        ?? '';
     const timeoutMs = envCfg.TELORA_DEFAULT_VERIFY_TIMEOUT_MS
         ?? (typeof file?.timeoutMs === 'number' && file.timeoutMs > 0 ? file.timeoutMs : undefined)
+        ?? manifest?.timeoutMs
         ?? DEFAULT_VERIFY_TIMEOUT_MS;
     const maxConcurrent = envCfg.TELORA_DEFAULT_VERIFY_MAX_CONCURRENT
         ?? (typeof file?.maxConcurrent === 'number' && file.maxConcurrent > 0 ? file.maxConcurrent : undefined)
+        ?? manifest?.maxConcurrent
         ?? DEFAULT_VERIFY_MAX_CONCURRENT;
     return {
         command,
@@ -65,14 +103,16 @@ export function resolveDefaultVerification(config, env = process.env) {
  * escalation/side-effect path -- posture is declarative state, surfaced on
  * ambient read surfaces, never a filed escalation. Callers pass a product-scoped
  * config (from `configForProduct`) so `config.defaultVerification` is already the
- * selected per-product-or-global block.
+ * selected per-product-or-global block and `repoPath` points at that product's
+ * repo -- which is what lets a repo-manifest-only command read `configured`.
  *
  * An explicitly resolved command wins over the decline marker: an operator who
  * sets a command (via env or file) has configured verification regardless of a
- * stale `declined` flag.
+ * stale `declined` flag. The marker still suppresses the repo manifest (the
+ * operator file outranks it), so `declined: true` keeps reading `declined`.
  */
-export function deriveVerificationPosture(config, env = process.env) {
-    const resolved = resolveDefaultVerification(config, env);
+export function deriveVerificationPosture(config, env = process.env, readManifest = readVerifyManifest) {
+    const resolved = resolveDefaultVerification(config, env, readManifest);
     if (resolved.enabled)
         return 'configured';
     if (config.defaultVerification?.declined === true)
@@ -86,13 +126,18 @@ export function deriveVerificationPosture(config, env = process.env) {
  * formatVerificationPostureLines, used to PUBLISH posture (e.g. in the daemon
  * heartbeat metadata) for the web app to read. Never files an escalation.
  */
-export function buildProductPostureMap(products, globalBlock, env = process.env) {
+export function buildProductPostureMap(products, globalBlock, env = process.env, readManifest = readVerifyManifest) {
     const map = {};
     for (const p of products) {
-        const scoped = { defaultVerification: p.defaultVerification ?? globalBlock };
-        const resolved = resolveDefaultVerification(scoped, env);
+        // repoPath is carried through so each product's own committed manifest is
+        // the layer below its operator block (mirrors configForProduct).
+        const scoped = {
+            defaultVerification: p.defaultVerification ?? globalBlock,
+            ...(p.repoPath !== undefined ? { repoPath: p.repoPath } : {}),
+        };
+        const resolved = resolveDefaultVerification(scoped, env, readManifest);
         map[p.id] = {
-            posture: deriveVerificationPosture(scoped, env),
+            posture: deriveVerificationPosture(scoped, env, readManifest),
             command: resolved.command,
             timeoutMs: resolved.timeoutMs,
         };

package/dist/verification-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"verification-config.js","sourceRoot":"","sources":["../src/verification-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,4FAA4F;AAC5F,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAExD,4DAA4D;AAC5D,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAE/C,2DAA2D;AAC3D,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,OAAO,EAAE,+BAA+B;IACxC,UAAU,EAAE,kCAAkC;IAC9C,cAAc,EAAE,sCAAsC;CAC9C,CAAC;AAcX;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAiD,EACjD,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,IAAI,GAAG,MAAM,CAAC,mBAAmB,CAAC;IACxC,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAElC,MAAM,UAAU,GAAG,MAAM,CAAC,6BAA6B,CAAC;IACxD,MAAM,OAAO,GACX,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE;QAClD,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAE9D,MAAM,SAAS,GACb,MAAM,CAAC,gCAAgC;WACpC,CAAC,OAAO,IAAI,EAAE,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;WACxF,yBAAyB,CAAC;IAE/B,MAAM,aAAa,GACjB,MAAM,CAAC,oCAAoC;WACxC,CAAC,OAAO,IAAI,EAAE,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;WACpG,6BAA6B,CAAC;IAEnC,OAAO;QACL,OAAO;QACP,SAAS;QACT,aAAa;QACb,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;KACnC,CAAC;AACJ,CAAC;AAcD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAAiD,EACjD,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,QAAQ,GAAG,0BAA0B,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACzD,IAAI,QAAQ,CAAC,OAAO;QAAE,OAAO,YAAY,CAAC;IAC1C,IAAI,MAAM,CAAC,mBAAmB,EAAE,QAAQ,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC;IACrE,OAAO,cAAc,CAAC;AACxB,CAAC;AAWD;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAwF,EACxF,WAAkD,EAClD,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,GAAG,GAA+C,EAAE,CAAC;IAC3D,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,EAAE,mBAAmB,EAAE,CAAC,CAAC,mBAAmB,IAAI,WAAW,EAAE,CAAC;QAC7E,MAAM,QAAQ,GAAG,0BAA0B,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACzD,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG;YACV,OAAO,EAAE,yBAAyB,CAAC,MAAM,EAAE,GAAG,CAAC;YAC/C,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"verification-config.js","sourceRoot":"","sources":["../src/verification-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAA6B,MAAM,4BAA4B,CAAC;AAE3F,4FAA4F;AAC5F,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAExD,4DAA4D;AAC5D,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAE/C,2DAA2D;AAC3D,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,OAAO,EAAE,+BAA+B;IACxC,UAAU,EAAE,kCAAkC;IAC9C,cAAc,EAAE,sCAAsC;CAC9C,CAAC;AA+BX;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAA+B,EAC/B,MAAyB,OAAO,CAAC,GAAG,EACpC,eAAqC,kBAAkB;IAEvD,MAAM,IAAI,GAAG,MAAM,CAAC,mBAAmB,CAAC;IACxC,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAE/C,MAAM,UAAU,GAAG,MAAM,CAAC,6BAA6B,CAAC;IACxD,MAAM,WAAW,GAAG,OAAO,IAAI,EAAE,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;QACjF,CAAC,CAAC,IAAI,CAAC,OAAO;QACd,CAAC,CAAC,SAAS,CAAC;IACd,2EAA2E;IAC3E,MAAM,eAAe,GAAG,IAAI,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC;IAChF,MAAM,OAAO,GACX,CAAC,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;WAC5E,WAAW;WACX,eAAe;WACf,EAAE,CAAC;IAER,MAAM,SAAS,GACb,MAAM,CAAC,gCAAgC;WACpC,CAAC,OAAO,IAAI,EAAE,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;WACxF,QAAQ,EAAE,SAAS;WACnB,yBAAyB,CAAC;IAE/B,MAAM,aAAa,GACjB,MAAM,CAAC,oCAAoC;WACxC,CAAC,OAAO,IAAI,EAAE,aAAa,KAAK,QAAQ,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;WACpG,QAAQ,EAAE,aAAa;WACvB,6BAA6B,CAAC;IAEnC,OAAO;QACL,OAAO;QACP,SAAS;QACT,aAAa;QACb,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;KACnC,CAAC;AACJ,CAAC;AAeD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAA+B,EAC/B,MAAyB,OAAO,CAAC,GAAG,EACpC,eAAqC,kBAAkB;IAEvD,MAAM,QAAQ,GAAG,0BAA0B,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;IACvE,IAAI,QAAQ,CAAC,OAAO;QAAE,OAAO,YAAY,CAAC;IAC1C,IAAI,MAAM,CAAC,mBAAmB,EAAE,QAAQ,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC;IACrE,OAAO,cAAc,CAAC;AACxB,CAAC;AAWD;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAA2G,EAC3G,WAAkD,EAClD,MAAyB,OAAO,CAAC,GAAG,EACpC,eAAqC,kBAAkB;IAEvD,MAAM,GAAG,GAA+C,EAAE,CAAC;IAC3D,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,0EAA0E;QAC1E,iEAAiE;QACjE,MAAM,MAAM,GAA4B;YACtC,mBAAmB,EAAE,CAAC,CAAC,mBAAmB,IAAI,WAAW;YACzD,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC;QACF,MAAM,QAAQ,GAAG,0BAA0B,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;QACvE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG;YACV,OAAO,EAAE,yBAAyB,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,CAAC;YAC7D,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}