@telora/daemon 0.20.78 → 0.20.89

package/dist/queries/delivery-gate-state.d.ts

@@ -0,0 +1,192 @@
+/**
+ * The shape of `org_nodes.gate_state` on a delivery row, plus the per-origin
+ * detail records that hang off it.
+ *
+ * Split out of `queries/deliveries.ts` (which holds the API calls) because these
+ * are the vocabulary of the verify gate, not of any one query: the verification
+ * engine, the feedback/re-work path, the operator- and external-hold gates, and
+ * the stall detectors all read and write them. Keeping them here lets those
+ * modules depend on the gate's vocabulary without pulling in the query layer.
+ *
+ * The one rule that shapes every type below: each way the gate can hold a
+ * delivery gets its OWN key. A shell-command failure (`verification`), a
+ * declared-vs-achieved gap (`shortfallReconciliation`), an unvouchable evidence
+ * bundle (`evidenceUnavailable`), an operator hold, and an external dependency
+ * are distinct facts about distinct things, and a reader must be able to tell
+ * "the gate was blind" from "the work fell short" without inspecting fields.
+ *
+ * Re-exported from `queries/deliveries.ts`, so both import paths resolve.
+ *
+ * @module queries/delivery-gate-state
+ */
+/**
+ * Detail attached to gate_state when a daemon-side deterministic verification
+ * run fails. Carries the failing-test names (parsed from the run output) and a
+ * pointer to the persistent full-log file so the feedback loop -- dashboard
+ * "Waiting on", live-session inject, and the requeue/respawn prompt -- can
+ * surface WHAT failed and WHERE to read it, without a cold re-run.
+ */
+export interface VerificationFailureDetail {
+    /**
+     * Failing-test ids that GATE this delivery. When baseline-diff attribution ran,
+     * these are the NEW failures the focus introduced; otherwise all parsed failures.
+     */
+    failingTests: string[];
+    /**
+     * Failing tests that pre-exist on the focus base -- recorded, non-blocking
+     * (they do not gate the focus). Absent when attribution did not run.
+     */
+    preExisting?: string[];
+    /** Absolute path to the persistent full-log file, or null when none was written. */
+    logPath: string | null;
+    /** Process exit code of the failed run, or null. */
+    exitCode: number | null;
+    /** ISO timestamp of the failing run. */
+    failedAt: string;
+}
+/**
+ * Detail attached to gate_state when the verify-shortfall RECONCILIATION (not a
+ * deterministic shell run) holds the flip: the achieved outcome fell short of
+ * the declared desired effect for one or more targeted nodes. Distinct from
+ * VerificationFailureDetail on purpose -- a shortfall hold has no exitCode /
+ * failingTests (the deterministic check may well have passed), it has a
+ * declared-vs-achieved gap. Keeping it under its own key prevents a reader from
+ * seeing a passed:false deterministic_verification whose exitCode is 0.
+ */
+export interface ShortfallReconciliationDetail {
+    /** ISO timestamp of the reconciliation that held the gate. */
+    heldAt: string;
+    /** The per-target declared/achieved/reason gaps that withheld the flip. */
+    shortfalls: Array<{
+        nodeId: string;
+        declared: string;
+        achieved: string;
+        reason: string;
+        /** The diff evidence grounding the shortfall, when the judge cited one. */
+        diffCitation?: string;
+    }>;
+}
+/**
+ * Detail attached to gate_state when the verify path could NOT vouch for the
+ * evidence it was handed -- an INSTRUMENT FAULT, not a verdict about the work.
+ * Two flavours, both BLIND:
+ *   - EMPTY   : no diff / changed-files / inspection finding at all.
+ *   - INCOMPLETE (half-blind): a non-empty bundle whose resolved diff range does
+ *     NOT cover the delivery's recorded commit set, so a verdict would judge the
+ *     work against only part of it. `coverage` is populated in this case.
+ * Distinct from VerificationFailureDetail (a shell command failed) and from
+ * ShortfallReconciliationDetail (the work fell short of intent): here the
+ * reconciliation cannot see the whole delivery, so it must not render any
+ * verdict. The delivery is held in `verify` (never routed to verify_failed, so
+ * no iteration is consumed) and a first-occurrence escalation names the fault.
+ */
+export interface EvidenceUnavailableDetail {
+    /** ISO timestamp the instrument-fault hold was recorded. */
+    heldAt: string;
+    /** Which evidence slots were empty (named, so the hold describes the fault, not the work). */
+    missing: string[];
+    /**
+     * Commits the delivery branch is ahead of the integration base. 0 => the
+     * branch already merged / did no work; > 0 => a broken diff MEASUREMENT
+     * (commits present but the diff resolved empty). Carried for operator triage.
+     */
+    commitsAhead: number;
+    /**
+     * Populated for a HALF-BLIND (incomplete) hold: the resolved range covered
+     * only `covered` of the delivery's `recorded` commits. Absent for a plain
+     * empty-bundle hold, so the empty case is byte-unchanged.
+     */
+    coverage?: {
+        /** How many commits the durable record (focus_merges.commit_shas) names. */
+        recorded: number;
+        /** How many of those the resolved diff range actually covered. */
+        covered: number;
+    };
+}
+/**
+ * Shape written into product_deliveries.gate_state when guard evaluation
+ * blocks a stage transition. Cleared (set to null) when guards pass.
+ *
+ * `verification` is populated when the block is a daemon-side deterministic
+ * verification failure (Harness-Owned Delivery Verification), carrying the
+ * failing tests + log path for the feedback loop; absent for guard-only gates.
+ *
+ * `shortfallReconciliation` is populated when the block is a verify-shortfall
+ * reconciliation hold (declared-vs-achieved gap), NOT a deterministic run; the
+ * two are mutually exclusive origins and never share the deterministic guard.
+ */
+export interface DeliveryGateState {
+    blocking: Array<{
+        guardName: string;
+        passed: boolean;
+    }>;
+    warnings: Array<{
+        guardName: string;
+        passed: boolean;
+    }>;
+    evaluatedAt: string;
+    verification?: VerificationFailureDetail;
+    shortfallReconciliation?: ShortfallReconciliationDetail;
+    /**
+     * Populated when the verify path was handed no evidence it could judge the
+     * work against (an instrument fault). Kept under its own key -- never
+     * conflated with `verification` (a shell failure) or `shortfallReconciliation`
+     * (a work shortfall) -- so a reader can tell "the gate was blind" from "the
+     * work fell short". The blocking guard is `verify_evidence_unavailable`.
+     */
+    evidenceUnavailable?: EvidenceUnavailableDetail;
+    /**
+     * Undisposed shortfall drift proposal ids holding this delivery in verify.
+     *
+     * Kept OUT of `blocking` on purpose: that array is guard-verdict data
+     * (guardName + passed), and a shortfall hold is not a guard. Synthesizing a
+     * fake guardName to smuggle the ids through would make `blocking` lie about
+     * what a guard is. `formatGateBlockers` is the single place that merges the
+     * two for display.
+     *
+     * Absent for guard-only gates. Written by the review-exit shortfall hold and
+     * cleared, like the rest of gate_state, when the delivery finally routes.
+     */
+    shortfallProposalIds?: string[];
+    /**
+     * The open operator-blocked escalation (disposition needs_operator /
+     * external_wait, any kind) holding this delivery in verify. Written by the
+     * operator-hold gate (operator-hold.ts) so the board can name what the
+     * delivery is waiting on without a second escalation being filed; cleared,
+     * like the rest of gate_state, when the delivery finally routes. When the hold
+     * read itself failed (fail-closed), escalationId is null and readFailed is
+     * true -- the delivery is still held, just without a specific escalation to
+     * name. Like shortfallProposalIds, kept OUT of `blocking` (a hold is not a
+     * guard verdict).
+     */
+    operatorHold?: {
+        escalationId: string | null;
+        escalationKind: string | null;
+        disposition: string | null;
+        readFailed?: boolean;
+    };
+    /**
+     * An irreducibly-external dependency holding this delivery in verify, carried
+     * as durable STATE rather than an agent_escalations row (external-hold.ts).
+     * The blocking condition and what would clear it live here, attached to the
+     * delivery they block; the hold clears by re-evaluating that condition (a
+     * re-read of reality), not by a human resolving an inbox item. Kept OUT of
+     * `blocking` for the same reason as operatorHold/shortfallProposalIds: a hold
+     * is not a guard verdict. Cleared, like the rest of gate_state, when the
+     * delivery finally routes.
+     */
+    externalHold?: ExternalHoldState;
+}
+/**
+ * The durable external-hold state on a delivery's gate_state. Distinct from an
+ * agent_escalations row: an external dependency is state, not an inbox event.
+ */
+export interface ExternalHoldState {
+    /** What is blocking -- the irreducibly-external dependency. */
+    condition: string;
+    /** The condition that, when re-read as true, clears the hold. */
+    clearsWhen: string;
+    /** ISO timestamp the hold was declared. */
+    declaredAt: string;
+}
+//# sourceMappingURL=delivery-gate-state.d.ts.map

package/dist/queries/delivery-gate-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-gate-state.d.ts","sourceRoot":"","sources":["../../src/queries/delivery-gate-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH;;;;;;GAMG;AACH,MAAM,WAAW,yBAAyB;IACxC;;;OAGG;IACH,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,oFAAoF;IACpF,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,oDAAoD;IACpD,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,6BAA6B;IAC5C,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,UAAU,EAAE,KAAK,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,2EAA2E;QAC3E,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC,CAAC;CACJ;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,yBAAyB;IACxC,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,8FAA8F;IAC9F,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB;;;;OAIG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,QAAQ,CAAC,EAAE;QACT,4EAA4E;QAC5E,QAAQ,EAAE,MAAM,CAAC;QACjB,kEAAkE;QAClE,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACxD,QAAQ,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACxD,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,yBAAyB,CAAC;IACzC,uBAAuB,CAAC,EAAE,6BAA6B,CAAC;IACxD;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,yBAAyB,CAAC;IAChD;;;;;;;;;;;OAWG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC;;;;;;;;;;OAUG;IACH,YAAY,CAAC,EAAE;QACb,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,UAAU,CAAC,EAAE,OAAO,CAAC;KACtB,CAAC;IACF;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,iBAAiB,CAAC;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,+DAA+D;IAC/D,SAAS,EAAE,MAAM,CAAC;IAClB,iEAAiE;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,UAAU,EAAE,MAAM,CAAC;CACpB"}

package/dist/queries/delivery-gate-state.js

@@ -0,0 +1,23 @@
+/**
+ * The shape of `org_nodes.gate_state` on a delivery row, plus the per-origin
+ * detail records that hang off it.
+ *
+ * Split out of `queries/deliveries.ts` (which holds the API calls) because these
+ * are the vocabulary of the verify gate, not of any one query: the verification
+ * engine, the feedback/re-work path, the operator- and external-hold gates, and
+ * the stall detectors all read and write them. Keeping them here lets those
+ * modules depend on the gate's vocabulary without pulling in the query layer.
+ *
+ * The one rule that shapes every type below: each way the gate can hold a
+ * delivery gets its OWN key. A shell-command failure (`verification`), a
+ * declared-vs-achieved gap (`shortfallReconciliation`), an unvouchable evidence
+ * bundle (`evidenceUnavailable`), an operator hold, and an external dependency
+ * are distinct facts about distinct things, and a reader must be able to tell
+ * "the gate was blind" from "the work fell short" without inspecting fields.
+ *
+ * Re-exported from `queries/deliveries.ts`, so both import paths resolve.
+ *
+ * @module queries/delivery-gate-state
+ */
+export {};
+//# sourceMappingURL=delivery-gate-state.js.map

package/dist/queries/delivery-gate-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-gate-state.js","sourceRoot":"","sources":["../../src/queries/delivery-gate-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG"}

package/dist/queries/holds.d.ts

@@ -11,9 +11,11 @@
  *     question the daemon reads back to the asking agent. Fails OPEN at its
  *     call site.
  *
- * Plus SELF_REPORT_STALL_HOLD_KINDS: the kinds that are machine-filed alarms
- * ABOUT a delivery's own cycling, excluded from the operator predicate so an
- * alarm cannot constitute the condition it reports.
+ * Plus two exclusion families the operator predicate drops: SELF_REPORT_STALL_HOLD_KINDS
+ * (machine-filed alarms ABOUT a delivery's own cycling, so an alarm cannot
+ * constitute the condition it reports) and REFUSED_OPERATOR_HOLD_KINDS (kinds that
+ * name no human-only act -- refused at their filing surface and routed to bounded
+ * re-work; a legacy row must not hold a delivery out of done).
  *
  * Extracted from queries/issues.ts to keep that file under the daemon
  * file-size limit -- the self-referential-alarm fix pushed it to 844. Bodies
@@ -58,28 +60,39 @@ export declare const OPERATOR_HOLD_DISPOSITIONS: readonly string[];
  * silence it, and resolving one let the detector file the next on the following
  * tick.
  *
- * ENUMERATION -- every machine-filed, delivery-anchored needs_operator kind, and
- * whether it is a genuine hold or a self-referential stall alarm. The exclusion
- * criterion is narrow and precise: exclude a kind IFF (a) it re-arms while the
- * delivery is non-terminal AND (b) its ONLY silencing is the delivery reaching
- * the terminal state the hold blocks. A kind that describes external reality an
- * operator must change, or that is filed once and silenced by operator
- * resolution, is a GENUINE hold and stays.
+ * ENUMERATION -- every machine-filed, delivery-anchored needs_operator kind,
+ * tested against ONE governing rule ("A hold must name a human act", 2026-07-28):
+ * does the kind name a specific act ONLY a human can perform? A kind that names
+ * one is a GENUINE hold and stays. A kind that names none must NOT hold a
+ * delivery out of done: it is refused at its filing surface and routed into the
+ * machine's own bounded re-work path, and any legacy row is EXCLUDED from this
+ * predicate. (This rule GOVERNS -- it supersedes the older fixpoint-only test,
+ * which read a kind's legitimacy from its re-arm behaviour; the two disagreed on
+ * verify_evidence_unavailable and this rule is the one that wins.) The parallel
+ * self-referential-alarm exclusion still applies too: an alarm ABOUT a delivery's
+ * own cycling cannot constitute the hold it reports.
  *
  *   verify_gate_unclearable (stall-detectors.ts) -- SELF-REFERENTIAL. Trigger
  *     (iteration_count) is monotonic and re-arms every tick while non-terminal;
- *     silenced only by done/cancelled, which the hold blocks. EXCLUDE.
- *   verify_evidence_unavailable (verification-feedback.ts) -- self-REPORT of an
- *     instrument fault, but filed ONCE per delivery (idempotent, never re-armed)
- *     and silenced by operator resolution, not by `done`. It also already holds
- *     the delivery via its OWN gate_state.blocking guard, so it does not lean on
- *     this predicate. Not a fixpoint -> KEEP as a hold.
- *   schema_drift_blocked (listener-auto-advance.ts) -- operator must apply a
- *     migration (external reality). KEEP.
+ *     silenced only by done/cancelled, which the hold blocks. It IS the sole
+ *     surviving human residue of the bounded re-work cap, and it names a human
+ *     act (an operator must decide the unclearable delivery's fate), so it holds
+ *     -- but it must not hold ITSELF, hence the exclusion below. EXCLUDE from the
+ *     predicate for its own delivery (SELF_REPORT_STALL_HOLD_KINDS).
+ *   verify_evidence_unavailable (verification-feedback.ts) -- NAMES NO HUMAN ACT.
+ *     Its ask was "fix the diff range / confirm the merge / clear the delivery" --
+ *     the gate reporting its own BLINDNESS, not work an operator must do. As of
+ *     "A hold must name a human act" it is refused at the filing surface (nothing
+ *     files it; the empty-bundle path re-enters bounded verify_failed re-work in
+ *     verification-engine/feedback) and any legacy open row is EXCLUDED here
+ *     (REFUSED_OPERATOR_HOLD_KINDS) so it cannot hold a delivery out of done.
+ *     REFUSED + ROUTED, no longer a hold.
+ *   schema_drift_blocked (listener-auto-advance.ts) -- an operator must apply a
+ *     migration (a human-only act on external reality). KEEP.
  *   advance_blocked (delivery-advance-block.ts) -- dirty worktree / lockfile
- *     state an operator or agent must resolve. KEEP.
+ *     state an operator or agent must resolve on the host. KEEP.
  *   cd_push_failed (ci-escalation.ts) / ci_run_red (ci-sensor-loop.ts) --
- *     external CI/CD state. KEEP.
+ *     external CI/CD state a human must act on. KEEP.
  *   propagation_stale (staleness-sensor.ts) -- external propagation state. KEEP.
  *
  * (Focus-anchored kinds -- merge_conflict, merge_refused_dirty,
@@ -94,6 +107,25 @@ export declare const OPERATOR_HOLD_DISPOSITIONS: readonly string[];
  * with stall-detectors.VERIFY_GATE_UNCLEARABLE_KIND and the DB CHECK.
  */
 export declare const SELF_REPORT_STALL_HOLD_KINDS: readonly string[];
+/**
+ * escalation_kind discriminators that are REFUSED at their filing surface and
+ * routed into the machine's own bounded re-work path because they NAME NO ACT
+ * ONLY A HUMAN CAN PERFORM ("A hold must name a human act", 2026-07-28). Nothing
+ * files these anymore, but a LEGACY row opened before the filing refusal deployed
+ * must not hold its delivery out of done -- so it is excluded from the
+ * operator-hold predicate here, and the delivery clears itself via re-work
+ * instead of parking on a human inbox.
+ *
+ *   verify_evidence_unavailable -- the verify gate reporting its own blindness
+ *     (empty judgeable bundle). Its ask named no human-only act; the empty-bundle
+ *     path now re-enters bounded verify_failed re-work (verification-feedback.ts
+ *     requeueEvidenceUnavailableAsRework), and verify_gate_unclearable (the
+ *     iteration cap) is the sole surviving human residue.
+ *
+ * Daemon-local string literal for the same node:test module-mock-loader reason as
+ * SELF_REPORT_STALL_HOLD_KINDS / OPERATOR_HOLD_DISPOSITIONS above.
+ */
+export declare const REFUSED_OPERATOR_HOLD_KINDS: readonly string[];
 /** The open operator-hold escalation a delivery is blocked on (for gate_state). */
 export interface OperatorHoldEscalation {
     id: string;
@@ -135,43 +167,4 @@ export declare function findOpenOperatorHoldForDelivery(deliveryId: string, focu
  * only need to know whether the hold exists (not which escalation it is).
  */
 export declare function hasOpenOperatorHoldForDelivery(deliveryId: string, focusId?: string): Promise<boolean>;
-/**
- * The escalation dispositions that mean "a human must STEER before this team's
- * work can proceed": needs_intent (scope/direction/priority) and
- * needs_clarification (ambiguity to resolve). These are exactly the two the
- * escalation tool documents as answerable via the `answer` field -- a DIRECTED
- * question the daemon reads back to the asking agent, distinct from the
- * operator-hold dispositions (needs_operator / external_wait, a blocked-on-reality
- * signal) and agent_resolvable (no human at all).
- *
- * Daemon-local literals for the same reason as OPERATOR_HOLD_DISPOSITIONS above:
- * a bare `@telora/*` value import in a query module pulled into a mocked
- * node:test fails to resolve under the module-mock loader. The canonical enum is
- * packages/daemon-core/src/disposition.ts and the DB CHECK on
- * agent_escalations.disposition is the real constraint; these strings must stay
- * in sync with it.
- */
-export declare const DIRECTED_HOLD_DISPOSITIONS: readonly string[];
-/**
- * Returns the OPEN (pending|in_review) DIRECTED-hold escalation anchored to the
- * given delivery, or null when none is open. Disposition-keyed sibling of
- * findOpenOperatorHoldForDelivery, keyed on DIRECTED_HOLD_DISPOSITIONS
- * (needs_intent / needs_clarification) instead of the operator-hold set.
- *
- * This is the vocabulary the completion-event no-progress guard previously
- * lacked: a team parked on its own unanswered directed question could not be
- * told apart from a team that has stalled, so the scope-coverage guard counted
- * the wait as no-progress, re-engaged the team (real model spend), and
- * eventually filed a team_failure ON TOP of the question.
- *
- * FAIL DIRECTION IS THE OPPOSITE of findOpenOperatorHoldForDelivery. The
- * operator-hold gate's CALLER fails CLOSED (a lookup error => held) because a
- * missed hold lets an operator-blocked delivery reach done. HERE the consuming
- * guard must fail OPEN: a lookup error must NOT suppress a genuine stall
- * escalation, so the caller treats an error as "not blocked". This function
- * still reports what it finds and THROWS on a hard API error; the fail-open
- * decision lives at the call site (completion/event-phases.computeCompletionFacts),
- * which catches and defaults to not-blocked.
- */
-export declare function findOpenDirectedHoldForDelivery(deliveryId: string, focusId?: string): Promise<OperatorHoldEscalation | null>;
 //# sourceMappingURL=holds.d.ts.map

package/dist/queries/holds.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"holds.d.ts","sourceRoot":"","sources":["../../src/queries/holds.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH,yEAAyE;AACzE,eAAO,MAAM,wBAAwB,EAAE,WAAW,CAAC,MAAM,CAAqC,CAAC;AAE/F;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,0BAA0B,EAAE,SAAS,MAAM,EAGvD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,eAAO,MAAM,4BAA4B,EAAE,SAAS,MAAM,EAEzD,CAAC;AAEF,mFAAmF;AACnF,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAsB,+BAA+B,CACnD,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CASxC;AAED;;;GAGG;AACH,wBAAsB,8BAA8B,CAClD,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,CAAC,CAElB;AAED;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,0BAA0B,EAAE,SAAS,MAAM,EAGvD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,+BAA+B,CACnD,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAExC"}
+{"version":3,"file":"holds.d.ts","sourceRoot":"","sources":["../../src/queries/holds.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,yEAAyE;AACzE,eAAO,MAAM,wBAAwB,EAAE,WAAW,CAAC,MAAM,CAAqC,CAAC;AAE/F;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,0BAA0B,EAAE,SAAS,MAAM,EAGvD,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AACH,eAAO,MAAM,4BAA4B,EAAE,SAAS,MAAM,EAEzD,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,2BAA2B,EAAE,SAAS,MAAM,EAExD,CAAC;AAEF,mFAAmF;AACnF,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAsB,+BAA+B,CACnD,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAWxC;AAED;;;GAGG;AACH,wBAAsB,8BAA8B,CAClD,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,CAAC,CAElB"}

package/dist/queries/holds.js

@@ -11,9 +11,11 @@
  *     question the daemon reads back to the asking agent. Fails OPEN at its
  *     call site.
  *
- * Plus SELF_REPORT_STALL_HOLD_KINDS: the kinds that are machine-filed alarms
- * ABOUT a delivery's own cycling, excluded from the operator predicate so an
- * alarm cannot constitute the condition it reports.
+ * Plus two exclusion families the operator predicate drops: SELF_REPORT_STALL_HOLD_KINDS
+ * (machine-filed alarms ABOUT a delivery's own cycling, so an alarm cannot
+ * constitute the condition it reports) and REFUSED_OPERATOR_HOLD_KINDS (kinds that
+ * name no human-only act -- refused at their filing surface and routed to bounded
+ * re-work; a legacy row must not hold a delivery out of done).
  *
  * Extracted from queries/issues.ts to keep that file under the daemon
  * file-size limit -- the self-referential-alarm fix pushed it to 844. Bodies
@@ -62,28 +64,39 @@ export const OPERATOR_HOLD_DISPOSITIONS = [
  * silence it, and resolving one let the detector file the next on the following
  * tick.
  *
- * ENUMERATION -- every machine-filed, delivery-anchored needs_operator kind, and
- * whether it is a genuine hold or a self-referential stall alarm. The exclusion
- * criterion is narrow and precise: exclude a kind IFF (a) it re-arms while the
- * delivery is non-terminal AND (b) its ONLY silencing is the delivery reaching
- * the terminal state the hold blocks. A kind that describes external reality an
- * operator must change, or that is filed once and silenced by operator
- * resolution, is a GENUINE hold and stays.
+ * ENUMERATION -- every machine-filed, delivery-anchored needs_operator kind,
+ * tested against ONE governing rule ("A hold must name a human act", 2026-07-28):
+ * does the kind name a specific act ONLY a human can perform? A kind that names
+ * one is a GENUINE hold and stays. A kind that names none must NOT hold a
+ * delivery out of done: it is refused at its filing surface and routed into the
+ * machine's own bounded re-work path, and any legacy row is EXCLUDED from this
+ * predicate. (This rule GOVERNS -- it supersedes the older fixpoint-only test,
+ * which read a kind's legitimacy from its re-arm behaviour; the two disagreed on
+ * verify_evidence_unavailable and this rule is the one that wins.) The parallel
+ * self-referential-alarm exclusion still applies too: an alarm ABOUT a delivery's
+ * own cycling cannot constitute the hold it reports.
  *
  *   verify_gate_unclearable (stall-detectors.ts) -- SELF-REFERENTIAL. Trigger
  *     (iteration_count) is monotonic and re-arms every tick while non-terminal;
- *     silenced only by done/cancelled, which the hold blocks. EXCLUDE.
- *   verify_evidence_unavailable (verification-feedback.ts) -- self-REPORT of an
- *     instrument fault, but filed ONCE per delivery (idempotent, never re-armed)
- *     and silenced by operator resolution, not by `done`. It also already holds
- *     the delivery via its OWN gate_state.blocking guard, so it does not lean on
- *     this predicate. Not a fixpoint -> KEEP as a hold.
- *   schema_drift_blocked (listener-auto-advance.ts) -- operator must apply a
- *     migration (external reality). KEEP.
+ *     silenced only by done/cancelled, which the hold blocks. It IS the sole
+ *     surviving human residue of the bounded re-work cap, and it names a human
+ *     act (an operator must decide the unclearable delivery's fate), so it holds
+ *     -- but it must not hold ITSELF, hence the exclusion below. EXCLUDE from the
+ *     predicate for its own delivery (SELF_REPORT_STALL_HOLD_KINDS).
+ *   verify_evidence_unavailable (verification-feedback.ts) -- NAMES NO HUMAN ACT.
+ *     Its ask was "fix the diff range / confirm the merge / clear the delivery" --
+ *     the gate reporting its own BLINDNESS, not work an operator must do. As of
+ *     "A hold must name a human act" it is refused at the filing surface (nothing
+ *     files it; the empty-bundle path re-enters bounded verify_failed re-work in
+ *     verification-engine/feedback) and any legacy open row is EXCLUDED here
+ *     (REFUSED_OPERATOR_HOLD_KINDS) so it cannot hold a delivery out of done.
+ *     REFUSED + ROUTED, no longer a hold.
+ *   schema_drift_blocked (listener-auto-advance.ts) -- an operator must apply a
+ *     migration (a human-only act on external reality). KEEP.
  *   advance_blocked (delivery-advance-block.ts) -- dirty worktree / lockfile
- *     state an operator or agent must resolve. KEEP.
+ *     state an operator or agent must resolve on the host. KEEP.
  *   cd_push_failed (ci-escalation.ts) / ci_run_red (ci-sensor-loop.ts) --
- *     external CI/CD state. KEEP.
+ *     external CI/CD state a human must act on. KEEP.
  *   propagation_stale (staleness-sensor.ts) -- external propagation state. KEEP.
  *
  * (Focus-anchored kinds -- merge_conflict, merge_refused_dirty,
@@ -100,6 +113,27 @@ export const OPERATOR_HOLD_DISPOSITIONS = [
 export const SELF_REPORT_STALL_HOLD_KINDS = [
     'verify_gate_unclearable',
 ];
+/**
+ * escalation_kind discriminators that are REFUSED at their filing surface and
+ * routed into the machine's own bounded re-work path because they NAME NO ACT
+ * ONLY A HUMAN CAN PERFORM ("A hold must name a human act", 2026-07-28). Nothing
+ * files these anymore, but a LEGACY row opened before the filing refusal deployed
+ * must not hold its delivery out of done -- so it is excluded from the
+ * operator-hold predicate here, and the delivery clears itself via re-work
+ * instead of parking on a human inbox.
+ *
+ *   verify_evidence_unavailable -- the verify gate reporting its own blindness
+ *     (empty judgeable bundle). Its ask named no human-only act; the empty-bundle
+ *     path now re-enters bounded verify_failed re-work (verification-feedback.ts
+ *     requeueEvidenceUnavailableAsRework), and verify_gate_unclearable (the
+ *     iteration cap) is the sole surviving human residue.
+ *
+ * Daemon-local string literal for the same node:test module-mock-loader reason as
+ * SELF_REPORT_STALL_HOLD_KINDS / OPERATOR_HOLD_DISPOSITIONS above.
+ */
+export const REFUSED_OPERATOR_HOLD_KINDS = [
+    'verify_evidence_unavailable',
+];
 /**
  * Returns the OPEN (pending|in_review) operator-hold escalation anchored to the
  * given delivery, or null when none is open.
@@ -131,9 +165,11 @@ export const SELF_REPORT_STALL_HOLD_KINDS = [
  */
 export async function findOpenOperatorHoldForDelivery(deliveryId, focusId) {
     return findOpenHoldForDelivery(deliveryId, OPERATOR_HOLD_DISPOSITIONS, focusId, 
-    // A machine-filed alarm ABOUT this delivery's own cycling must not satisfy
-    // the predicate that holds it -- see SELF_REPORT_STALL_HOLD_KINDS.
-    new Set(SELF_REPORT_STALL_HOLD_KINDS));
+    // Two exclusions: (1) a machine-filed alarm ABOUT this delivery's own cycling
+    // must not satisfy the predicate that holds it (SELF_REPORT_STALL_HOLD_KINDS);
+    // (2) a kind that names no human-only act must not hold at all -- a legacy row
+    // is dropped and the delivery clears itself via re-work (REFUSED_OPERATOR_HOLD_KINDS).
+    new Set([...SELF_REPORT_STALL_HOLD_KINDS, ...REFUSED_OPERATOR_HOLD_KINDS]));
 }
 /**
  * Boolean convenience over findOpenOperatorHoldForDelivery for call sites that
@@ -142,53 +178,9 @@ export async function findOpenOperatorHoldForDelivery(deliveryId, focusId) {
 export async function hasOpenOperatorHoldForDelivery(deliveryId, focusId) {
     return (await findOpenOperatorHoldForDelivery(deliveryId, focusId)) !== null;
 }
-/**
- * The escalation dispositions that mean "a human must STEER before this team's
- * work can proceed": needs_intent (scope/direction/priority) and
- * needs_clarification (ambiguity to resolve). These are exactly the two the
- * escalation tool documents as answerable via the `answer` field -- a DIRECTED
- * question the daemon reads back to the asking agent, distinct from the
- * operator-hold dispositions (needs_operator / external_wait, a blocked-on-reality
- * signal) and agent_resolvable (no human at all).
- *
- * Daemon-local literals for the same reason as OPERATOR_HOLD_DISPOSITIONS above:
- * a bare `@telora/*` value import in a query module pulled into a mocked
- * node:test fails to resolve under the module-mock loader. The canonical enum is
- * packages/daemon-core/src/disposition.ts and the DB CHECK on
- * agent_escalations.disposition is the real constraint; these strings must stay
- * in sync with it.
- */
-export const DIRECTED_HOLD_DISPOSITIONS = [
-    'needs_intent',
-    'needs_clarification',
-];
-/**
- * Returns the OPEN (pending|in_review) DIRECTED-hold escalation anchored to the
- * given delivery, or null when none is open. Disposition-keyed sibling of
- * findOpenOperatorHoldForDelivery, keyed on DIRECTED_HOLD_DISPOSITIONS
- * (needs_intent / needs_clarification) instead of the operator-hold set.
- *
- * This is the vocabulary the completion-event no-progress guard previously
- * lacked: a team parked on its own unanswered directed question could not be
- * told apart from a team that has stalled, so the scope-coverage guard counted
- * the wait as no-progress, re-engaged the team (real model spend), and
- * eventually filed a team_failure ON TOP of the question.
- *
- * FAIL DIRECTION IS THE OPPOSITE of findOpenOperatorHoldForDelivery. The
- * operator-hold gate's CALLER fails CLOSED (a lookup error => held) because a
- * missed hold lets an operator-blocked delivery reach done. HERE the consuming
- * guard must fail OPEN: a lookup error must NOT suppress a genuine stall
- * escalation, so the caller treats an error as "not blocked". This function
- * still reports what it finds and THROWS on a hard API error; the fail-open
- * decision lives at the call site (completion/event-phases.computeCompletionFacts),
- * which catches and defaults to not-blocked.
- */
-export async function findOpenDirectedHoldForDelivery(deliveryId, focusId) {
-    return findOpenHoldForDelivery(deliveryId, DIRECTED_HOLD_DISPOSITIONS, focusId);
-}
 /**
  * Shared body for the disposition-keyed open-hold lookups
- * (findOpenOperatorHoldForDelivery / findOpenDirectedHoldForDelivery). Reads the
+ * (findOpenOperatorHoldForDelivery). Reads the
  * newest 500 open (pending|in_review) escalations -- narrowed server-side by
  * focusId when supplied, the same busy-org paging concern the sibling lookups
  * address -- and returns the first whose delivery matches (typed delivery_id

package/dist/queries/holds.js.map

@@ -1 +1 @@
-{"version":3,"file":"holds.js","sourceRoot":"","sources":["../../src/queries/holds.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEtC,yEAAyE;AACzE,MAAM,CAAC,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;AAE/F;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAsB;IAC3D,gBAAgB;IAChB,eAAe;CAChB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAsB;IAC7D,yBAAyB;CAC1B,CAAC;AASF;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,UAAkB,EAClB,OAAgB;IAEhB,OAAO,uBAAuB,CAC5B,UAAU,EACV,0BAA0B,EAC1B,OAAO;IACP,2EAA2E;IAC3E,mEAAmE;IACnE,IAAI,GAAG,CAAC,4BAA4B,CAAC,CACtC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,UAAkB,EAClB,OAAgB;IAEhB,OAAO,CAAC,MAAM,+BAA+B,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC;AAC/E,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAsB;IAC3D,cAAc;IACd,qBAAqB;CACtB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,UAAkB,EAClB,OAAgB;IAEhB,OAAO,uBAAuB,CAAC,UAAU,EAAE,0BAA0B,EAAE,OAAO,CAAC,CAAC;AAClF,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,KAAK,UAAU,uBAAuB,CACpC,UAAkB,EAClB,YAA+B,EAC/B,OAAgB,EAChB,YAAkC;IAElC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IACtC,MAAM,MAAM,GAA4B,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC;IAC/E,IAAI,OAAO;QAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,OAAO,CASzB,iBAAiB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAE9C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QACzC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,SAAS;QAClE,MAAM,IAAI,GAAI,CAAC,CAAC,QAA2C,IAAI,IAAI,CAAC;QACpE,MAAM,WAAW,GACf,CAAC,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1D,CAAC,OAAO,IAAI,EAAE,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,eAAe,GACnB,CAAC,CAAC,UAAU,KAAK,UAAU,IAAI,IAAI,EAAE,UAAU,KAAK,UAAU,CAAC;QACjE,IAAI,eAAe,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,GACR,CAAC,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC;gBAChE,CAAC,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,IAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAClE,uEAAuE;YACvE,IAAI,YAAY,IAAI,IAAI,KAAK,IAAI,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YACtE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,IAAI,IAAI,EAAE,WAAW,EAAE,CAAC;QAC7E,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"holds.js","sourceRoot":"","sources":["../../src/queries/holds.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEtC,yEAAyE;AACzE,MAAM,CAAC,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;AAE/F;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAsB;IAC3D,gBAAgB;IAChB,eAAe;CAChB,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAsB;IAC7D,yBAAyB;CAC1B,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAsB;IAC5D,6BAA6B;CAC9B,CAAC;AASF;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,UAAkB,EAClB,OAAgB;IAEhB,OAAO,uBAAuB,CAC5B,UAAU,EACV,0BAA0B,EAC1B,OAAO;IACP,8EAA8E;IAC9E,+EAA+E;IAC/E,+EAA+E;IAC/E,uFAAuF;IACvF,IAAI,GAAG,CAAC,CAAC,GAAG,4BAA4B,EAAE,GAAG,2BAA2B,CAAC,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,UAAkB,EAClB,OAAgB;IAEhB,OAAO,CAAC,MAAM,+BAA+B,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC;AAC/E,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,KAAK,UAAU,uBAAuB,CACpC,UAAkB,EAClB,YAA+B,EAC/B,OAAgB,EAChB,YAAkC;IAElC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IACtC,MAAM,MAAM,GAA4B,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC;IAC/E,IAAI,OAAO;QAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,OAAO,CASzB,iBAAiB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAE9C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;QACzC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,SAAS;QAClE,MAAM,IAAI,GAAI,CAAC,CAAC,QAA2C,IAAI,IAAI,CAAC;QACpE,MAAM,WAAW,GACf,CAAC,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1D,CAAC,OAAO,IAAI,EAAE,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,eAAe,GACnB,CAAC,CAAC,UAAU,KAAK,UAAU,IAAI,IAAI,EAAE,UAAU,KAAK,UAAU,CAAC;QACjE,IAAI,eAAe,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,GACR,CAAC,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC;gBAChE,CAAC,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,IAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAClE,uEAAuE;YACvE,IAAI,YAAY,IAAI,IAAI,KAAK,IAAI,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YACtE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,IAAI,IAAI,EAAE,WAAW,EAAE,CAAC;QAC7E,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/queries/issues.d.ts

@@ -147,8 +147,8 @@ export declare function hasOpenTeamFailureEscalation(focusId: string): Promise<b
  * polls files exactly one open escalation instead of one per tick.
  */
 export declare function hasOpenEscalationForDelivery(deliveryId: string, escalationKind: string): Promise<boolean>;
-import { OPERATOR_HOLD_DISPOSITIONS, SELF_REPORT_STALL_HOLD_KINDS, DIRECTED_HOLD_DISPOSITIONS, findOpenOperatorHoldForDelivery, hasOpenOperatorHoldForDelivery, findOpenDirectedHoldForDelivery, type OperatorHoldEscalation } from './holds.js';
-export { OPERATOR_HOLD_DISPOSITIONS, SELF_REPORT_STALL_HOLD_KINDS, DIRECTED_HOLD_DISPOSITIONS, findOpenOperatorHoldForDelivery, hasOpenOperatorHoldForDelivery, findOpenDirectedHoldForDelivery, };
+import { OPERATOR_HOLD_DISPOSITIONS, SELF_REPORT_STALL_HOLD_KINDS, REFUSED_OPERATOR_HOLD_KINDS, findOpenOperatorHoldForDelivery, hasOpenOperatorHoldForDelivery, type OperatorHoldEscalation } from './holds.js';
+export { OPERATOR_HOLD_DISPOSITIONS, SELF_REPORT_STALL_HOLD_KINDS, REFUSED_OPERATOR_HOLD_KINDS, findOpenOperatorHoldForDelivery, hasOpenOperatorHoldForDelivery, };
 export type { OperatorHoldEscalation };
 /**
  * escalation_kind discriminators for the two focus-merge worktree-dirty

package/dist/queries/issues.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"issues.d.ts","sourceRoot":"","sources":["../../src/queries/issues.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAIL,mBAAmB,EACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAqB,KAAK,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAkBvF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,KAAK,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEpD;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAO/E;AAED;;GAEG;AACH,wBAAsB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAOjF;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAYtF;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,uHAAuH;IACvH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,gBAAgB,CAAC;CAC3B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC;IAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAuB1C;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC3C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAqB3E;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,4BAA4B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAuBpF;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,4BAA4B,CAChD,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,OAAO,CAAC,CAsBlB;AAED,OAAO,EAEL,0BAA0B,EAC1B,4BAA4B,EAC5B,0BAA0B,EAC1B,+BAA+B,EAC/B,8BAA8B,EAC9B,+BAA+B,EAC/B,KAAK,sBAAsB,EAC5B,MAAM,YAAY,CAAC;AAIpB,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,0BAA0B,EAC1B,+BAA+B,EAC/B,8BAA8B,EAC9B,+BAA+B,GAChC,CAAC;AACF,YAAY,EAAE,sBAAsB,EAAE,CAAC;AAGvC;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,8BAA8B,mBAAmB,CAAC;AAC/D,eAAO,MAAM,mCAAmC,wBAAwB,CAAC;AAEzE;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,EAAE,SAAS,MAAM,EAI5D,CAAC;AA+CF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,8BAA8B,CAClD,OAAO,EAAE,MAAM,EACf,KAAK,GAAE,SAAS,MAAM,EAAoC,GACzD,OAAO,CAAC,OAAO,CAAC,CAOlB;AAED,gEAAgE;AAChE,eAAO,MAAM,4BAA4B,iBAAiB,CAAC;AAE3D;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,4BAA4B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAapF;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,OAAO,CAAC,CAalB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,mCAAmC,CACvD,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,eAAe,SAAuE,GACrF,OAAO,CAAC,MAAM,CAAC,CAmBjB;AAED,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,sEAAsE;AACtE,MAAM,WAAW,4BAA4B;IAC3C,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,SAAS,4BAA4B,EAAE,GAC5C,mBAAmB,EAAE,CAavB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,+BAA+B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAMrG;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,OAAO,CAAC,CAgBlB;AAED;;GAEG;AACH,wBAAsB,sBAAsB,CAC1C,YAAY,EAAE,MAAM,EACpB,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;GAEG;AACH,wBAAsB,WAAW,CAC/B,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,GACtB,OAAO,CAAC,MAAM,CAAC,CAejB"}
+{"version":3,"file":"issues.d.ts","sourceRoot":"","sources":["../../src/queries/issues.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAIL,mBAAmB,EACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAqB,KAAK,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAkBvF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,KAAK,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEpD;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAO/E;AAED;;GAEG;AACH,wBAAsB,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAOjF;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAYtF;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,uHAAuH;IACvH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,gBAAgB,CAAC;CAC3B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC;IAAE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAuB1C;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC3C;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAqB3E;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,4BAA4B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAuBpF;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,4BAA4B,CAChD,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,OAAO,CAAC,CAsBlB;AAED,OAAO,EAEL,0BAA0B,EAC1B,4BAA4B,EAC5B,2BAA2B,EAC3B,+BAA+B,EAC/B,8BAA8B,EAC9B,KAAK,sBAAsB,EAC5B,MAAM,YAAY,CAAC;AAIpB,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,2BAA2B,EAC3B,+BAA+B,EAC/B,8BAA8B,GAC/B,CAAC;AACF,YAAY,EAAE,sBAAsB,EAAE,CAAC;AAGvC;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,8BAA8B,mBAAmB,CAAC;AAC/D,eAAO,MAAM,mCAAmC,wBAAwB,CAAC;AAEzE;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,EAAE,SAAS,MAAM,EAI5D,CAAC;AA+CF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,8BAA8B,CAClD,OAAO,EAAE,MAAM,EACf,KAAK,GAAE,SAAS,MAAM,EAAoC,GACzD,OAAO,CAAC,OAAO,CAAC,CAOlB;AAED,gEAAgE;AAChE,eAAO,MAAM,4BAA4B,iBAAiB,CAAC;AAE3D;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,4BAA4B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAapF;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,MAAM,EACf,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,OAAO,CAAC,CAalB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,mCAAmC,CACvD,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,eAAe,SAAuE,GACrF,OAAO,CAAC,MAAM,CAAC,CAmBjB;AAED,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,sEAAsE;AACtE,MAAM,WAAW,4BAA4B;IAC3C,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,SAAS,4BAA4B,EAAE,GAC5C,mBAAmB,EAAE,CAavB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,+BAA+B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAMrG;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,OAAO,CAAC,CAgBlB;AAED;;GAEG;AACH,wBAAsB,sBAAsB,CAC1C,YAAY,EAAE,MAAM,EACpB,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,IAAI,CAAC,CAQf;AAED;;GAEG;AACH,wBAAsB,WAAW,CAC/B,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,GACtB,OAAO,CAAC,MAAM,CAAC,CAejB"}

package/dist/queries/issues.js

@@ -171,10 +171,10 @@ export async function hasOpenEscalationForDelivery(deliveryId, escalationKind) {
         return meta?.kind === escalationKind && meta?.deliveryId === deliveryId;
     });
 }
-import { OPEN_ESCALATION_STATUSES, OPERATOR_HOLD_DISPOSITIONS, SELF_REPORT_STALL_HOLD_KINDS, DIRECTED_HOLD_DISPOSITIONS, findOpenOperatorHoldForDelivery, hasOpenOperatorHoldForDelivery, findOpenDirectedHoldForDelivery, } from './holds.js';
+import { OPEN_ESCALATION_STATUSES, OPERATOR_HOLD_DISPOSITIONS, SELF_REPORT_STALL_HOLD_KINDS, REFUSED_OPERATOR_HOLD_KINDS, findOpenOperatorHoldForDelivery, hasOpenOperatorHoldForDelivery, } from './holds.js';
 // The delivery hold-lookup family moved to queries/holds.ts (file-size limit).
 // Re-exported here so every existing importer of queries/issues.js keeps working.
-export { OPERATOR_HOLD_DISPOSITIONS, SELF_REPORT_STALL_HOLD_KINDS, DIRECTED_HOLD_DISPOSITIONS, findOpenOperatorHoldForDelivery, hasOpenOperatorHoldForDelivery, findOpenDirectedHoldForDelivery, };
+export { OPERATOR_HOLD_DISPOSITIONS, SELF_REPORT_STALL_HOLD_KINDS, REFUSED_OPERATOR_HOLD_KINDS, findOpenOperatorHoldForDelivery, hasOpenOperatorHoldForDelivery, };
 /**
  * escalation_kind discriminators for the two focus-merge worktree-dirty
  * classes. Declared as daemon-local string constants (not imported from