@telora/daemon 0.20.21 → 0.20.32

package/dist/drift-ratify-loop.js

@@ -1,161 +0,0 @@
-/**
- * Periodic drift auto-ratification tick.
- *
- * Lists `proposed` drift proposals per product, runs each through the
- * fail-closed policy in `drift-ratify-policy.ts`, and ratifies the ones the
- * daemon is sanctioned to ratify unattended. Proposals the policy routes to a
- * review session (`review_dispose`) or refuses to classify (`hold`) are left
- * in `proposed`, untouched.
- *
- * WHAT THIS CLOSES. Drift proposals pooled in `proposed` faster than a human
- * could ratify them, so the reality tree lagged observed reality and every
- * consumer of the graph (audit assembly, propose_injections, focus.context)
- * computed against a stale intent model. The ledger is unchanged -- this only
- * changes WHO ratifies. Ratified proposals still reach the graph exclusively
- * via the existing realign_crt phase (`applyRatifiedProposals`), which this
- * module does not touch.
- *
- * WHAT THIS MUST NEVER DO. Ratify an inward shortfall. That is the machine
- * rewriting a claim its own work failed to meet. The policy module owns that
- * decision; this tick owns only list -> classify -> ratify-the-safe-ones, and
- * deliberately contains no safe-kind rules of its own. If you find yourself
- * adding kind logic here, it belongs in drift-ratify-policy.ts.
- *
- * ACTOR STAMP. The tick calls `crt_drift_proposal_ratify` with no session id.
- * The edge handler resolves the actor from the caller's credential kind, so a
- * tracker-authenticated daemon call is recorded as `ratified_by_kind='system'`
- * with `ratified_by=NULL` automatically. Passing a session id would instead
- * stamp `review_session` -- that is the review-disposition path, not this one.
- *
- * Activation: opt-out via TELORA_DRIFT_RATIFY_LOOP=0. See `shouldRunLoop()` in
- * focus-engine.ts.
- *
- * @module drift-ratify-loop
- */
-import { loadEnvConfig } from '@telora/daemon-core';
-import { callApi as defaultCallApi } from './queries/shared.js';
-import { classifyDriftProposal } from './drift-ratify-policy.js';
-import { createLogger } from './log.js';
-const log = createLogger({ module: 'drift-ratify-loop' });
-/**
- * Per-product backoff for list failures, so a persistent server-side failure
- * does not retry-storm every tick. Module-level so the window survives across
- * `runDriftRatifyTick` calls within the daemon process. Keyed productId ->
- * earliest next-attempt epoch ms. Mirrors the drift-eval loop's window
- * (drift-eval-loop.ts:74) and complements the isolated 'drift' circuit breaker
- * in queries/shared.ts, which fails fast once the breaker opens.
- */
-const listBackoffUntil = new Map();
-/**
- * Resolve the per-product list-failure backoff window (ms).
- *
- * Deliberately REUSES TELORA_DRIFT_LIST_BACKOFF_MS rather than introducing a
- * knob of its own. The knob's meaning -- how long to back off a product after a
- * drift-list failure -- is exactly this loop's need, and both loops fail the
- * same way for the same reasons, so one operator dial covering both is coherent
- * rather than a conflation. It also keeps this loop free of any dependency on a
- * @telora/daemon-core republish: daemon-core is registry-installed, so a new
- * knob added to its source would be invisible to this package until it is
- * published and reinstalled. Injectable via deps for tests.
- */
-function defaultListBackoffMs() {
-    return loadEnvConfig().TELORA_DRIFT_LIST_BACKOFF_MS;
-}
-/** Test-only: clear the per-product list-failure backoff state. */
-export function __resetDriftRatifyBackoffForTesting() {
-    listBackoffUntil.clear();
-}
-function defaultDeps() {
-    return {
-        callApi: defaultCallApi,
-        now: () => Date.now(),
-        listBackoffMs: defaultListBackoffMs(),
-    };
-}
-/**
- * Run one auto-ratification tick across every product in the daemon config.
- *
- * Per-proposal failures are counted and skipped, never aborting the batch --
- * one unratifiable proposal must not strand the rest of the stream (mirrors
- * `applyRatifiedProposals`, realign-apply.ts:403-416).
- *
- * Returns counters useful for log lines and tests.
- */
-export async function runDriftRatifyTick(config, depOverrides = {}) {
-    const deps = { ...defaultDeps(), ...depOverrides };
-    const counts = {
-        productsScanned: 0,
-        productsSkipped: 0,
-        proposalsExamined: 0,
-        ratified: 0,
-        leftForReview: 0,
-        held: 0,
-        errors: 0,
-    };
-    for (const product of config.products) {
-        counts.productsScanned += 1;
-        // Skip a product still inside its list-failure backoff window.
-        const nowMs = deps.now();
-        const backoffUntil = listBackoffUntil.get(product.id) ?? 0;
-        if (nowMs < backoffUntil) {
-            counts.productsSkipped += 1;
-            continue;
-        }
-        let proposals;
-        try {
-            // NOTE: crt_drift_proposal_list cannot filter on proposed_metadata
-            // (drift-proposals.ts:78-119 supports focusId/productId/realityTreeId/
-            // status only), so the shortfall split is decided client-side by the
-            // policy below -- not by the query.
-            const list = await deps.callApi('crt_drift_proposal_list', {
-                productId: product.id,
-                status: 'proposed',
-            });
-            proposals = list.items ?? [];
-            // Success clears any prior backoff for this product.
-            listBackoffUntil.delete(product.id);
-        }
-        catch (err) {
-            counts.errors += 1;
-            listBackoffUntil.set(product.id, nowMs + deps.listBackoffMs);
-            log.warn(`[drift-ratify-loop] list failed for product ${product.id} (backing off ${deps.listBackoffMs}ms):`, err.message);
-            continue;
-        }
-        for (const proposal of proposals) {
-            counts.proposalsExamined += 1;
-            const { disposition, reason } = classifyDriftProposal({
-                proposalKind: proposal.proposalKind,
-                proposedMetadata: proposal.proposedMetadata,
-            });
-            if (disposition === 'review_dispose') {
-                // The bar-lowering channel. Left in `proposed` for an independent
-                // review session; this tick must not touch it.
-                counts.leftForReview += 1;
-                continue;
-            }
-            if (disposition === 'hold') {
-                // Fail-closed: unknown kind, malformed metadata, or an internally
-                // inconsistent row. Stays `proposed` so a human sees it.
-                counts.held += 1;
-                log.info(`[drift-ratify-loop] holding proposal ${proposal.id} (kind=${proposal.proposalKind}, reason=${reason})`);
-                continue;
-            }
-            try {
-                // No session id: the edge handler stamps ratified_by_kind='system' from
-                // the tracker credential. Ratified proposals reach the graph via the
-                // existing realign_crt phase; nothing here applies them.
-                await deps.callApi('crt_drift_proposal_ratify', { proposalId: proposal.id });
-                counts.ratified += 1;
-            }
-            catch (err) {
-                counts.errors += 1;
-                log.warn(`[drift-ratify-loop] ratify failed for proposal ${proposal.id} (${reason}):`, err.message);
-            }
-        }
-    }
-    if (counts.proposalsExamined > 0 || counts.errors > 0 || counts.productsSkipped > 0) {
-        log.info(`[drift-ratify-loop] tick: products=${counts.productsScanned} skipped=${counts.productsSkipped} examined=${counts.proposalsExamined} ratified=${counts.ratified} forReview=${counts.leftForReview} held=${counts.held} errors=${counts.errors}`);
-    }
-    return counts;
-}
-//# sourceMappingURL=drift-ratify-loop.js.map

package/dist/drift-ratify-loop.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"drift-ratify-loop.js","sourceRoot":"","sources":["../src/drift-ratify-loop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAC;AA2C1D;;;;;;;GAOG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEnD;;;;;;;;;;;GAWG;AACH,SAAS,oBAAoB;IAC3B,OAAO,aAAa,EAAE,CAAC,4BAA4B,CAAC;AACtD,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,mCAAmC;IACjD,gBAAgB,CAAC,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,WAAW;IAClB,OAAO;QACL,OAAO,EAAE,cAAc;QACvB,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;QACrB,aAAa,EAAE,oBAAoB,EAAE;KACtC,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAoB,EACpB,eAA6C,EAAE;IAE/C,MAAM,IAAI,GAAwB,EAAE,GAAG,WAAW,EAAE,EAAE,GAAG,YAAY,EAAE,CAAC;IACxE,MAAM,MAAM,GAA0B;QACpC,eAAe,EAAE,CAAC;QAClB,eAAe,EAAE,CAAC;QAClB,iBAAiB,EAAE,CAAC;QACpB,QAAQ,EAAE,CAAC;QACX,aAAa,EAAE,CAAC;QAChB,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC;KACV,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,CAAC,eAAe,IAAI,CAAC,CAAC;QAE5B,+DAA+D;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,KAAK,GAAG,YAAY,EAAE,CAAC;YACzB,MAAM,CAAC,eAAe,IAAI,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QAED,IAAI,SAA6B,CAAC;QAClC,IAAI,CAAC;YACH,mEAAmE;YACnE,uEAAuE;YACvE,qEAAqE;YACrE,oCAAoC;YACpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAe,yBAAyB,EAAE;gBACvE,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC;YACH,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAC7B,qDAAqD;YACrD,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;YACnB,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;YAC7D,GAAG,CAAC,IAAI,CACN,+CAA+C,OAAO,CAAC,EAAE,iBAAiB,IAAI,CAAC,aAAa,MAAM,EACjG,GAAa,CAAC,OAAO,CACvB,CAAC;YACF,SAAS;QACX,CAAC;QAED,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,MAAM,CAAC,iBAAiB,IAAI,CAAC,CAAC;YAE9B,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,qBAAqB,CAAC;gBACpD,YAAY,EAAE,QAAQ,CAAC,YAAY;gBACnC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;aAC5C,CAAC,CAAC;YAEH,IAAI,WAAW,KAAK,gBAAgB,EAAE,CAAC;gBACrC,kEAAkE;gBAClE,+CAA+C;gBAC/C,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC;gBAC1B,SAAS;YACX,CAAC;YAED,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;gBAC3B,kEAAkE;gBAClE,yDAAyD;gBACzD,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;gBACjB,GAAG,CAAC,IAAI,CACN,wCAAwC,QAAQ,CAAC,EAAE,UAAU,QAAQ,CAAC,YAAY,YAAY,MAAM,GAAG,CACxG,CAAC;gBACF,SAAS;YACX,CAAC;YAED,IAAI,CAAC;gBACH,wEAAwE;gBACxE,qEAAqE;gBACrE,yDAAyD;gBACzD,MAAM,IAAI,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC7E,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;YACvB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;gBACnB,GAAG,CAAC,IAAI,CACN,kDAAkD,QAAQ,CAAC,EAAE,KAAK,MAAM,IAAI,EAC3E,GAAa,CAAC,OAAO,CACvB,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,iBAAiB,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,IAAI,CACN,sCAAsC,MAAM,CAAC,eAAe,YAAY,MAAM,CAAC,eAAe,aAAa,MAAM,CAAC,iBAAiB,aAAa,MAAM,CAAC,QAAQ,cAAc,MAAM,CAAC,aAAa,SAAS,MAAM,CAAC,IAAI,WAAW,MAAM,CAAC,MAAM,EAAE,CAChP,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/negative-branch.d.ts

@@ -1,136 +0,0 @@
-/**
- * Negative-branch (negative branch reservation) generation helper.
- *
- * The INVERSE of `de-restatement.ts`. Where de-restatement turns a UDE into the
- * positive desired effect it becomes once an injection resolves it, this asks
- * the opposite question: what NEW undesired effects might this injection ITSELF
- * introduce? In Goldratt's Thinking Processes this is a "negative branch
- * reservation" -- a side effect the injection drags in that the clean recolor
- * never surfaces.
- *
- * Reuses the same model-invocation pattern as `de-restatement.ts` -- spawning
- * the `claude` CLI in print mode -- so there is NO new client or secret wiring.
- * A clean injection yields ZERO candidates (the model emits "NONE" -> []).
- *
- * The generated candidates are persisted as `crt_drift_proposals`
- * (`proposal_kind='add_node'`) carrying `sourceInjectionId` + `isNegativeBranch`
- * so a human ratifies/dismisses them: ratify -> the UDE is created and wired to
- * the injection (see realign-apply `handleAddNode`); dismiss -> no residue.
- *
- * @module negative-branch
- */
-import { type ChildProcess } from 'node:child_process';
-export interface NegativeBranchInputs {
-    /** The injection whose side effects we are probing. */
-    injectionStatement: string;
-    /** Optional UDE statements the injection targets, for context. */
-    targetUdeStatements?: string[];
-}
-interface SpawnOpts {
-    stdio: ['pipe', 'pipe', 'pipe'];
-}
-export interface NegativeBranchOptions {
-    /** Path to the `claude` CLI binary (default: 'claude'). */
-    claudeBin?: string;
-    /** Timeout in ms; defaults to 2 minutes. */
-    timeoutMs?: number;
-    /** Override spawn for tests. Defaults to node:child_process spawn. */
-    spawnFn?: (cmd: string, args: string[], opts: SpawnOpts) => ChildProcess;
-    /**
-     * Override the entire model invocation for tests -- bypasses spawning the
-     * CLI. Receives the system prompt and user message, returns the raw model
-     * text. When omitted, the default spawns the `claude` CLI in print mode.
-     */
-    invokeModel?: (systemPrompt: string, userMessage: string) => Promise<string>;
-}
-export declare const NEGATIVE_BRANCH_SYSTEM_PROMPT = "You author Goldratt \"negative branch reservations\" for a reality tree: the NEW undesirable effects that an injection might itself introduce.\n\nAn injection resolves one problem but can drag in fresh side effects. Your job is to surface those candidate new undesired effects (UDEs) so a human can decide whether they are real.\n\nRules:\n- Output ONE candidate undesired effect per line. No numbering, no bullets, no preamble, no commentary, no quotes.\n- Each line is a single concrete negative outcome the injection could cause -- a genuinely NEW problem, not a restatement of the problem the injection solves.\n- Be conservative: only list effects with a plausible causal link to the injection. Do NOT pad the list.\n- If the injection introduces no plausible new undesired effect, output exactly: NONE";
-/** Exposed as a function to mirror `de-restatement`'s shape. */
-export declare function buildNegativeBranchSystemPrompt(): string;
-/** Build the user message describing the injection (and any targeted UDEs). */
-export declare function buildNegativeBranchUserMessage(inputs: NegativeBranchInputs): string;
-/**
- * Parse raw model output into a list of candidate UDE statements.
- *
- * One candidate per line, trimmed, empties dropped. A lone "NONE" (case
- * insensitive, optionally with surrounding punctuation) yields an empty list.
- * Strips a leading bullet/number if the model added one despite the prompt.
- */
-export declare function parseNegativeBranchCandidates(raw: string): string[];
-/**
- * Build the argv for the claude CLI invocation. Exposed for tests.
- *
- * NOTE: must NOT include `--bare` -- that flag makes the CLI skip credential
- * loading, print "Not logged in" to stdout, and exit 1 (the negative-branch
- * pass died silently before it ran).
- */
-export declare function buildNegativeBranchCliArgs(systemPrompt: string): string[];
-/**
- * Generate candidate negative-branch UDE statements for an injection.
- *
- * Returns 0-N candidates. A clean injection (model outputs "NONE") yields [].
- * Throws only on model-invocation failure; callers catch and skip so a single
- * failure never aborts the surrounding loop.
- */
-export declare function generateNegativeBranches(inputs: NegativeBranchInputs, opts?: NegativeBranchOptions): Promise<string[]>;
-type CallApi = <T>(action: string, params?: Record<string, unknown>) => Promise<T>;
-export interface ProposeNegativeBranchesInputs {
-    /** The injection node these negative branches hang off. */
-    injectionNodeId: string;
-    /** The injection statement (the probe input). */
-    injectionStatement: string;
-    /** Reality tree the proposals belong to (required by the create action). */
-    realityTreeId: string;
-    /** Focus context for the proposal (optional but recommended). */
-    focusId?: string | null;
-    /** UDE statements the injection targets, for generation context. */
-    targetUdeStatements?: string[];
-}
-export interface ProposeNegativeBranchesDeps {
-    callApi?: CallApi;
-    /** Override generation for tests. Defaults to `generateNegativeBranches`. */
-    generate?: (inputs: NegativeBranchInputs, opts?: NegativeBranchOptions) => Promise<string[]>;
-    /** Options forwarded to the default generator (model/spawn overrides). */
-    generateOptions?: NegativeBranchOptions;
-    /**
-     * Injectable clock for the durable pass marker. Defaults to
-     * `() => new Date().toISOString()`. Tests pass a fixed value so the stamped
-     * timestamp is deterministic. Kept as a thunk (not a bare value) mirroring the
-     * module's other injectable-deps style. The clock is read AFTER generation +
-     * proposal creation complete and just BEFORE the stamp write -- i.e. the
-     * timestamp marks when the pass finished its work, immediately prior to
-     * persisting the marker (it cannot be read after the write resolves, since the
-     * value being written is what the write persists).
-     */
-    now?: () => string;
-}
-export interface ProposeNegativeBranchesResult {
-    /** Candidate statements the model produced. */
-    candidates: string[];
-    /** Drift-proposal ids successfully created (one per candidate). */
-    proposalIds: string[];
-    /** Per-candidate creation errors (creation failures do not abort the rest). */
-    errors: string[];
-    /**
-     * The ISO timestamp stamped onto the injection's
-     * `negative_branch_pass_ran_at` marker, or null if the stamp write failed.
-     * The pass having RUN (this being non-null) is what gates presentability --
-     * NOT whether `candidates` is empty. An empty candidate set with a set marker
-     * is the honest "ran clean" answer.
-     */
-    passRanAt: string | null;
-}
-/**
- * Run generation for an injection, then persist each candidate as a
- * ratify-able `add_node` drift proposal wired (via `sourceInjectionId`) to the
- * injection that introduces it. Idempotency / dedupe is a human concern --
- * proposals are surfaced, not auto-applied.
- *
- * A clean injection produces no candidates and creates no proposals -- but the
- * pass still COMPLETED, so the injection's `negative_branch_pass_ran_at` marker
- * is stamped regardless of candidate count (as long as generation did not
- * throw). That durable marker, not the candidate count, is what later gates
- * tree presentability: "ran clean" must be distinguishable from "never ran".
- */
-export declare function proposeNegativeBranchesForInjection(inputs: ProposeNegativeBranchesInputs, deps?: ProposeNegativeBranchesDeps): Promise<ProposeNegativeBranchesResult>;
-export {};
-//# sourceMappingURL=negative-branch.d.ts.map

package/dist/negative-branch.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"negative-branch.d.ts","sourceRoot":"","sources":["../src/negative-branch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAS,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAK9D,MAAM,WAAW,oBAAoB;IACnC,uDAAuD;IACvD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kEAAkE;IAClE,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;CAChC;AAED,UAAU,SAAS;IACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,qBAAqB;IACpC,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sEAAsE;IACtE,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,KAAK,YAAY,CAAC;IACzE;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CAC9E;AAID,eAAO,MAAM,6BAA6B,4yBAQ4C,CAAC;AAEvF,gEAAgE;AAChE,wBAAgB,+BAA+B,IAAI,MAAM,CAExD;AAED,+EAA+E;AAC/E,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,oBAAoB,GAAG,MAAM,CAYnF;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAqBnE;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CAOzE;AA0DD;;;;;;GAMG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,oBAAoB,EAC5B,IAAI,GAAE,qBAA0B,GAC/B,OAAO,CAAC,MAAM,EAAE,CAAC,CAMnB;AAMD,KAAK,OAAO,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;AAEnF,MAAM,WAAW,6BAA6B;IAC5C,2DAA2D;IAC3D,eAAe,EAAE,MAAM,CAAC;IACxB,iDAAiD;IACjD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,4EAA4E;IAC5E,aAAa,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,oEAAoE;IACpE,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,oBAAoB,EAAE,IAAI,CAAC,EAAE,qBAAqB,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7F,0EAA0E;IAC1E,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC;;;;;;;;;OASG;IACH,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,6BAA6B;IAC5C,+CAA+C;IAC/C,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,mEAAmE;IACnE,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,+EAA+E;IAC/E,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB;;;;;;OAMG;IACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,mCAAmC,CACvD,MAAM,EAAE,6BAA6B,EACrC,IAAI,GAAE,2BAAgC,GACrC,OAAO,CAAC,6BAA6B,CAAC,CA6ExC"}

package/dist/negative-branch.js

@@ -1,241 +0,0 @@
-/**
- * Negative-branch (negative branch reservation) generation helper.
- *
- * The INVERSE of `de-restatement.ts`. Where de-restatement turns a UDE into the
- * positive desired effect it becomes once an injection resolves it, this asks
- * the opposite question: what NEW undesired effects might this injection ITSELF
- * introduce? In Goldratt's Thinking Processes this is a "negative branch
- * reservation" -- a side effect the injection drags in that the clean recolor
- * never surfaces.
- *
- * Reuses the same model-invocation pattern as `de-restatement.ts` -- spawning
- * the `claude` CLI in print mode -- so there is NO new client or secret wiring.
- * A clean injection yields ZERO candidates (the model emits "NONE" -> []).
- *
- * The generated candidates are persisted as `crt_drift_proposals`
- * (`proposal_kind='add_node'`) carrying `sourceInjectionId` + `isNegativeBranch`
- * so a human ratifies/dismisses them: ratify -> the UDE is created and wired to
- * the injection (see realign-apply `handleAddNode`); dismiss -> no residue.
- *
- * @module negative-branch
- */
-import { spawn } from 'node:child_process';
-import { callApi as defaultCallApi } from './queries/shared.js';
-import { trackChildProcess } from './spawner/worker-registry.js';
-const DEFAULT_TIMEOUT_MS = 2 * 60 * 1000;
-export const NEGATIVE_BRANCH_SYSTEM_PROMPT = `You author Goldratt "negative branch reservations" for a reality tree: the NEW undesirable effects that an injection might itself introduce.
-
-An injection resolves one problem but can drag in fresh side effects. Your job is to surface those candidate new undesired effects (UDEs) so a human can decide whether they are real.
-
-Rules:
-- Output ONE candidate undesired effect per line. No numbering, no bullets, no preamble, no commentary, no quotes.
-- Each line is a single concrete negative outcome the injection could cause -- a genuinely NEW problem, not a restatement of the problem the injection solves.
-- Be conservative: only list effects with a plausible causal link to the injection. Do NOT pad the list.
-- If the injection introduces no plausible new undesired effect, output exactly: NONE`;
-/** Exposed as a function to mirror `de-restatement`'s shape. */
-export function buildNegativeBranchSystemPrompt() {
-    return NEGATIVE_BRANCH_SYSTEM_PROMPT;
-}
-/** Build the user message describing the injection (and any targeted UDEs). */
-export function buildNegativeBranchUserMessage(inputs) {
-    const parts = [`Injection:\n${inputs.injectionStatement}`];
-    const targets = (inputs.targetUdeStatements ?? []).filter((s) => s && s.trim() !== '');
-    if (targets.length > 0) {
-        parts.push(`Undesired effect(s) this injection resolves:\n${targets.map((s) => `- ${s}`).join('\n')}`);
-    }
-    parts.push('List the candidate NEW undesired effects this injection might itself introduce, one per line. If there are none, output exactly: NONE');
-    return parts.join('\n\n');
-}
-/**
- * Parse raw model output into a list of candidate UDE statements.
- *
- * One candidate per line, trimmed, empties dropped. A lone "NONE" (case
- * insensitive, optionally with surrounding punctuation) yields an empty list.
- * Strips a leading bullet/number if the model added one despite the prompt.
- */
-export function parseNegativeBranchCandidates(raw) {
-    let s = raw.trim();
-    // Strip code fences if the model wrapped the answer.
-    s = s.replace(/```[a-zA-Z]*\s*/g, '').replace(/```/g, '').trim();
-    if (s === '')
-        return [];
-    const lines = s.split('\n');
-    const out = [];
-    for (const rawLine of lines) {
-        let line = rawLine.trim();
-        if (line === '')
-            continue;
-        // Drop a leading bullet ("- ", "* ") or "1. " numbering.
-        line = line.replace(/^[-*]\s+/, '').replace(/^\d+[.)]\s+/, '').trim();
-        // Strip a single layer of surrounding quotes/backticks.
-        line = line.replace(/^["'`]+/, '').replace(/["'`]+$/, '').trim();
-        if (line === '')
-            continue;
-        // A standalone NONE sentinel means "no negative branches".
-        if (/^none[.!]?$/i.test(line))
-            continue;
-        out.push(line);
-    }
-    return out;
-}
-/**
- * Build the argv for the claude CLI invocation. Exposed for tests.
- *
- * NOTE: must NOT include `--bare` -- that flag makes the CLI skip credential
- * loading, print "Not logged in" to stdout, and exit 1 (the negative-branch
- * pass died silently before it ran).
- */
-export function buildNegativeBranchCliArgs(systemPrompt) {
-    return [
-        '--print',
-        '--output-format', 'text',
-        '--no-session-persistence',
-        '--system-prompt', systemPrompt,
-    ];
-}
-/** Default model invocation: spawn the `claude` CLI in print mode and return stdout. */
-function invokeClaudeCli(systemPrompt, userMessage, opts) {
-    const claudeBin = opts.claudeBin ?? 'claude';
-    const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-    const spawnFn = opts.spawnFn ?? ((cmd, args, sopts) => spawn(cmd, args, sopts));
-    const args = buildNegativeBranchCliArgs(systemPrompt);
-    return new Promise((resolve, reject) => {
-        let child;
-        try {
-            child = spawnFn(claudeBin, args, { stdio: ['pipe', 'pipe', 'pipe'] });
-        }
-        catch (err) {
-            reject(new Error(`negative-branch spawn failed: ${err.message}`));
-            return;
-        }
-        // Register so a graceful stop reaps this one-shot if it is still running.
-        trackChildProcess(child, 'negative-branch');
-        let stdout = '';
-        let stderr = '';
-        child.stdout?.on('data', (chunk) => { stdout += chunk.toString('utf8'); });
-        child.stderr?.on('data', (chunk) => { stderr += chunk.toString('utf8'); });
-        const timer = setTimeout(() => {
-            try {
-                child.kill('SIGKILL');
-            }
-            catch { /* ignore */ }
-        }, timeoutMs);
-        child.on('error', (err) => {
-            clearTimeout(timer);
-            reject(new Error(`negative-branch spawn error: ${err.message}`));
-        });
-        child.on('close', (code) => {
-            clearTimeout(timer);
-            if (code !== 0) {
-                reject(new Error(`negative-branch exited ${code}: ${stderr.slice(-2000)}`));
-                return;
-            }
-            resolve(stdout);
-        });
-        try {
-            child.stdin?.write(userMessage);
-            child.stdin?.end();
-        }
-        catch (err) {
-            clearTimeout(timer);
-            reject(new Error(`negative-branch stdin write failed: ${err.message}`));
-        }
-    });
-}
-/**
- * Generate candidate negative-branch UDE statements for an injection.
- *
- * Returns 0-N candidates. A clean injection (model outputs "NONE") yields [].
- * Throws only on model-invocation failure; callers catch and skip so a single
- * failure never aborts the surrounding loop.
- */
-export async function generateNegativeBranches(inputs, opts = {}) {
-    const systemPrompt = buildNegativeBranchSystemPrompt();
-    const userMessage = buildNegativeBranchUserMessage(inputs);
-    const invoke = opts.invokeModel ?? ((sys, msg) => invokeClaudeCli(sys, msg, opts));
-    const raw = await invoke(systemPrompt, userMessage);
-    return parseNegativeBranchCandidates(raw);
-}
-/**
- * Run generation for an injection, then persist each candidate as a
- * ratify-able `add_node` drift proposal wired (via `sourceInjectionId`) to the
- * injection that introduces it. Idempotency / dedupe is a human concern --
- * proposals are surfaced, not auto-applied.
- *
- * A clean injection produces no candidates and creates no proposals -- but the
- * pass still COMPLETED, so the injection's `negative_branch_pass_ran_at` marker
- * is stamped regardless of candidate count (as long as generation did not
- * throw). That durable marker, not the candidate count, is what later gates
- * tree presentability: "ran clean" must be distinguishable from "never ran".
- */
-export async function proposeNegativeBranchesForInjection(inputs, deps = {}) {
-    const callApi = deps.callApi ?? defaultCallApi;
-    const generate = deps.generate ?? generateNegativeBranches;
-    const now = deps.now ?? (() => new Date().toISOString());
-    // If generation throws, the pass did NOT complete -- the caller catches and
-    // the marker stays null so the injection remains a surfaced doubt (no stamp).
-    const candidates = await generate({
-        injectionStatement: inputs.injectionStatement,
-        targetUdeStatements: inputs.targetUdeStatements,
-    }, deps.generateOptions);
-    const proposalIds = [];
-    const errors = [];
-    for (const candidate of candidates) {
-        const params = {
-            realityTreeId: inputs.realityTreeId,
-            proposalKind: 'add_node',
-            observedState: 'injection introduces a new undesired effect',
-            proposedCorrection: candidate,
-            proposedMetadata: {
-                statement: candidate,
-                nodeType: 'undesired_effect',
-                viewScope: 'frt_only',
-                sourceInjectionId: inputs.injectionNodeId,
-                isNegativeBranch: true,
-            },
-        };
-        if (inputs.focusId)
-            params.focusId = inputs.focusId;
-        try {
-            const res = await callApi('crt_drift_proposal_create', params);
-            const id = res?.proposal?.id;
-            if (typeof id === 'string')
-                proposalIds.push(id);
-        }
-        catch (err) {
-            errors.push(`negative-branch proposal create failed: ${err.message}`);
-        }
-    }
-    // Generation completed (did not throw) -- stamp the durable per-injection
-    // marker so a clean (zero-candidate) pass leaves a trace. This is the whole
-    // point: presentability gates on a pass having RUN, never on the branch set
-    // being non-empty. Stamping is best-effort -- a write failure leaves the
-    // marker null (the injection re-runs next tick) but never aborts the result.
-    //
-    // RESIDUAL (documented, tolerated): the "RUN" signal is "generate() did not
-    // throw", so a DEGRADED model call that returns an empty body would be
-    // recorded as a clean pass (zero candidates, marker stamped) even though it
-    // surfaced nothing real. We accept this for two reasons: (1) the dominant
-    // silent-failure mode -- the `--bare` flag printing "Not logged in" and
-    // exiting 1 -- was removed (see buildNegativeBranchCliArgs), so a non-zero
-    // exit now throws and correctly leaves the marker null; and (2) a genuinely
-    // empty negative-branch set is the LEGITIMATE clean case this marker exists to
-    // record, and "did the model degrade vs honestly find nothing" is not
-    // mechanically separable here without a check that could itself be confidently
-    // wrong -- the negative-branch signal is deliberately advisory, not a hard
-    // gate, so a rare false-clean costs an advisory hint, never a blocked tree.
-    let passRanAt = null;
-    const stampedAt = now();
-    try {
-        await callApi('reality_tree_node_update', {
-            nodeId: inputs.injectionNodeId,
-            negativeBranchPassRanAt: stampedAt,
-        });
-        passRanAt = stampedAt;
-    }
-    catch (err) {
-        errors.push(`negative-branch pass-marker stamp failed: ${err.message}`);
-    }
-    return { candidates, proposalIds, errors, passRanAt };
-}
-//# sourceMappingURL=negative-branch.js.map

package/dist/negative-branch.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"negative-branch.js","sourceRoot":"","sources":["../src/negative-branch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAE9D,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AA4BjE,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEzC,MAAM,CAAC,MAAM,6BAA6B,GAAG;;;;;;;;sFAQyC,CAAC;AAEvF,gEAAgE;AAChE,MAAM,UAAU,+BAA+B;IAC7C,OAAO,6BAA6B,CAAC;AACvC,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,8BAA8B,CAAC,MAA4B;IACzE,MAAM,KAAK,GAAa,CAAC,eAAe,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAErE,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,iDAAiD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzG,CAAC;IAED,KAAK,CAAC,IAAI,CACR,uIAAuI,CACxI,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAAC,GAAW;IACvD,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACnB,qDAAqD;IACrD,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACjE,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAExB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,IAAI,KAAK,EAAE;YAAE,SAAS;QAC1B,yDAAyD;QACzD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtE,wDAAwD;QACxD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACjE,IAAI,IAAI,KAAK,EAAE;YAAE,SAAS;QAC1B,2DAA2D;QAC3D,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACxC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,YAAoB;IAC7D,OAAO;QACL,SAAS;QACT,iBAAiB,EAAE,MAAM;QACzB,0BAA0B;QAC1B,iBAAiB,EAAE,YAAY;KAChC,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,SAAS,eAAe,CACtB,YAAoB,EACpB,WAAmB,EACnB,IAA2B;IAE3B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC;IAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAEhF,MAAM,IAAI,GAAG,0BAA0B,CAAC,YAAY,CAAC,CAAC;IAEtD,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC7C,IAAI,KAAmB,CAAC;QACxB,IAAI,CAAC;YACH,KAAK,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAkC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC7E,OAAO;QACT,CAAC;QACD,0EAA0E;QAC1E,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;QAE5C,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEnF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACvD,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAiC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC5E,OAAO;YACT,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;YAChC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,IAAI,KAAK,CAAC,uCAAwC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACrF,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,MAA4B,EAC5B,OAA8B,EAAE;IAEhC,MAAM,YAAY,GAAG,+BAA+B,EAAE,CAAC;IACvD,MAAM,WAAW,GAAG,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IACnF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IACpD,OAAO,6BAA6B,CAAC,GAAG,CAAC,CAAC;AAC5C,CAAC;AAyDD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,MAAqC,EACrC,OAAoC,EAAE;IAEtC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,cAAc,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,wBAAwB,CAAC;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAEzD,4EAA4E;IAC5E,8EAA8E;IAC9E,MAAM,UAAU,GAAG,MAAM,QAAQ,CAC/B;QACE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;KAChD,EACD,IAAI,CAAC,eAAe,CACrB,CAAC;IAEF,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,MAAM,GAA4B;YACtC,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,YAAY,EAAE,UAAU;YACxB,aAAa,EAAE,6CAA6C;YAC5D,kBAAkB,EAAE,SAAS;YAC7B,gBAAgB,EAAE;gBAChB,SAAS,EAAE,SAAS;gBACpB,QAAQ,EAAE,kBAAkB;gBAC5B,SAAS,EAAE,UAAU;gBACrB,iBAAiB,EAAE,MAAM,CAAC,eAAe;gBACzC,gBAAgB,EAAE,IAAI;aACvB;SACF,CAAC;QACF,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAEpD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,2BAA2B,EAC3B,MAAM,CACP,CAAC;YACF,MAAM,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,EAAE,CAAC;YAC7B,IAAI,OAAO,EAAE,KAAK,QAAQ;gBAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,2CAA4C,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,yEAAyE;IACzE,6EAA6E;IAC7E,EAAE;IACF,4EAA4E;IAC5E,uEAAuE;IACvE,4EAA4E;IAC5E,0EAA0E;IAC1E,wEAAwE;IACxE,2EAA2E;IAC3E,4EAA4E;IAC5E,+EAA+E;IAC/E,sEAAsE;IACtE,+EAA+E;IAC/E,2EAA2E;IAC3E,4EAA4E;IAC5E,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,0BAA0B,EAAE;YACxC,MAAM,EAAE,MAAM,CAAC,eAAe;YAC9B,uBAAuB,EAAE,SAAS;SACnC,CAAC,CAAC;QACH,SAAS,GAAG,SAAS,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,6CAA8C,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AACxD,CAAC"}

package/dist/shortfall-disposition-config.d.ts

@@ -1,34 +0,0 @@
-/**
- * Threshold for the shortfall-disposition attempt bound.
- *
- * The CANONICAL declaration (Zod schema, ENV_VAR_METADATA entry, default,
- * description) lives in packages/daemon-core/src/env-config.ts, exactly like the
- * stall-detector thresholds in stall-detector-config.ts.
- *
- * It is read RAW here rather than through loadEnvConfig() for one reason:
- * @telora/daemon-core is REGISTRY-INSTALLED, not a workspace symlink, so
- * packages/daemon compiles and runs against the PUBLISHED dist. A field added to
- * daemon-core's source is invisible to loadEnvConfig() here until a publish
- * lands and the pin moves. This is the same registry-lag workaround
- * stall-detectors.ts documents for escalation kinds.
- *
- * The raw read is allowlisted in scripts/lint-config.json under "env-reads"
- * with that reason. WHEN daemon-core >0.2.69 IS PUBLISHED AND PINNED: delete the
- * allowlist entry and change this to
- * `loadEnvConfig().TELORA_SHORTFALL_DISPOSITION_ATTEMPT_CAP`.
- *
- * @module shortfall-disposition-config
- */
-/**
- * Max scoped disposition passes armed per focus before the daemon stops arming
- * and escalates instead.
- *
- * Invalid values (non-numeric, <= 0) fall back to the default rather than
- * disabling the bound: a zero or negative cap would escalate immediately on
- * every held focus, and a NaN would compare false forever and never escalate --
- * the permanent silent wait this bound exists to prevent. Once daemon-core is
- * republished, Zod's positiveInt does this validation at startup and fails loud,
- * which is strictly better; this is the interim.
- */
-export declare function resolveShortfallDispositionAttemptCap(env?: NodeJS.ProcessEnv): number;
-//# sourceMappingURL=shortfall-disposition-config.d.ts.map

package/dist/shortfall-disposition-config.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"shortfall-disposition-config.d.ts","sourceRoot":"","sources":["../src/shortfall-disposition-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAKH;;;;;;;;;;GAUG;AACH,wBAAgB,qCAAqC,CACnD,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAUR"}

package/dist/shortfall-disposition-config.js

@@ -1,46 +0,0 @@
-/**
- * Threshold for the shortfall-disposition attempt bound.
- *
- * The CANONICAL declaration (Zod schema, ENV_VAR_METADATA entry, default,
- * description) lives in packages/daemon-core/src/env-config.ts, exactly like the
- * stall-detector thresholds in stall-detector-config.ts.
- *
- * It is read RAW here rather than through loadEnvConfig() for one reason:
- * @telora/daemon-core is REGISTRY-INSTALLED, not a workspace symlink, so
- * packages/daemon compiles and runs against the PUBLISHED dist. A field added to
- * daemon-core's source is invisible to loadEnvConfig() here until a publish
- * lands and the pin moves. This is the same registry-lag workaround
- * stall-detectors.ts documents for escalation kinds.
- *
- * The raw read is allowlisted in scripts/lint-config.json under "env-reads"
- * with that reason. WHEN daemon-core >0.2.69 IS PUBLISHED AND PINNED: delete the
- * allowlist entry and change this to
- * `loadEnvConfig().TELORA_SHORTFALL_DISPOSITION_ATTEMPT_CAP`.
- *
- * @module shortfall-disposition-config
- */
-/** Must match the daemon-core default so the two cannot silently disagree. */
-const DEFAULT_SHORTFALL_DISPOSITION_ATTEMPT_CAP = 3;
-/**
- * Max scoped disposition passes armed per focus before the daemon stops arming
- * and escalates instead.
- *
- * Invalid values (non-numeric, <= 0) fall back to the default rather than
- * disabling the bound: a zero or negative cap would escalate immediately on
- * every held focus, and a NaN would compare false forever and never escalate --
- * the permanent silent wait this bound exists to prevent. Once daemon-core is
- * republished, Zod's positiveInt does this validation at startup and fails loud,
- * which is strictly better; this is the interim.
- */
-export function resolveShortfallDispositionAttemptCap(env = process.env) {
-    const raw = env.TELORA_SHORTFALL_DISPOSITION_ATTEMPT_CAP;
-    if (raw === undefined || raw.trim() === '') {
-        return DEFAULT_SHORTFALL_DISPOSITION_ATTEMPT_CAP;
-    }
-    const parsed = Number(raw);
-    if (!Number.isFinite(parsed) || !Number.isInteger(parsed) || parsed <= 0) {
-        return DEFAULT_SHORTFALL_DISPOSITION_ATTEMPT_CAP;
-    }
-    return parsed;
-}
-//# sourceMappingURL=shortfall-disposition-config.js.map

package/dist/shortfall-disposition-config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"shortfall-disposition-config.js","sourceRoot":"","sources":["../src/shortfall-disposition-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,8EAA8E;AAC9E,MAAM,yCAAyC,GAAG,CAAC,CAAC;AAEpD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qCAAqC,CACnD,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,GAAG,GAAG,GAAG,CAAC,wCAAwC,CAAC;IACzD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3C,OAAO,yCAAyC,CAAC;IACnD,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QACzE,OAAO,yCAAyC,CAAC;IACnD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}