@telora/daemon 0.21.12 → 0.21.81

package/dist/shell/branch-status.d.ts

@@ -0,0 +1,97 @@
+/**
+ * Branch status computation for the three-tier git model.
+ *
+ * Computes health/ahead/behind status for:
+ *   1. Integration branch vs main
+ *   2. Each configured branch monitor (remote refs vs local main)
+ *   3. Each focus worktree vs integration
+ *
+ * Results ride in the heartbeat metadata field (no new tables).
+ *
+ * Multi-product: computeBranchStatus is called once per configured product
+ * with a product-scoped config (configForProduct). The focus worktree map
+ * spans all products, so this module scopes it by each entry's productId and
+ * runs git against the entry's own repoPath — evaluating a worktree against
+ * a repository that does not own it is unrepresentable here. All caches are
+ * keyed per product so one product's tick cannot evict another's state.
+ *
+ * Failure semantics (two distinct kinds, deliberately kept apart):
+ *   - TRANSIENT git failures (lock contention, mid-rebase, timeouts) fall
+ *     back to the last good cached status without raising anything — this
+ *     tolerance predates this module split and prevents UI flicker.
+ *   - PERMANENT failures (unknown revision, not a git repository, bad
+ *     object) mean the branch we believe exists cannot be resolved where we
+ *     looked: an attribution error, not contention. These are surfaced via
+ *     a healthEvent + error log (once per focus per daemon run) instead of
+ *     silently rendering identically to "no worktree". A worktree entry in
+ *     the map IS the claim that its branch should exist; a legitimately
+ *     deleted branch is removed from the map (removeFocusWorktree) before
+ *     ever being evaluated here, so ordinary deletions raise no events.
+ */
+import type { DaemonConfig } from '../types/index.js';
+import { runGitSync } from '../git/index.js';
+import { getDefaultBranch } from '../git/index.js';
+import { getAllFocusWorktrees } from '../focus/focus-worktree-state.js';
+import { getActiveTeams } from '../focus/focus-team-state.js';
+import { healthEvents } from './health-events.js';
+import type { BranchMonitorEntry } from '../queries/products.js';
+/** Reset all caches. Exported for tests only. */
+export declare function resetBranchStatusCache(): void;
+export type BranchHealth = 'clean' | 'dirty' | 'conflict';
+export interface IntegrationBranchStatus {
+    branch: string;
+    health: BranchHealth;
+    aheadOfMain: number;
+    behindMain: number;
+}
+export interface RemoteBranchStatus {
+    ref: string;
+    label: string;
+    aheadOfMain: number | null;
+    behindMain: number | null;
+}
+export interface FocusBranchStatus {
+    focusId: string;
+    branch: string;
+    headSha: string;
+    health: BranchHealth;
+    aheadOfIntegration: number;
+    behindIntegration: number;
+}
+export interface BranchStatusPayload {
+    integration: IntegrationBranchStatus | null;
+    remotes: RemoteBranchStatus[];
+    focuses: FocusBranchStatus[];
+}
+/** Options for configurable branch monitoring. */
+export interface BranchStatusOptions {
+    mainBranch?: string;
+    branchMonitors?: BranchMonitorEntry[];
+}
+/**
+ * The git/state functions computeBranchStatus reaches into, injectable for
+ * tests. Each defaults to the real import; a test supplies fakes through this
+ * seam instead of registering `mock.module` (which would poison the daemon-core
+ * loader -- see packages/daemon/CLAUDE.md). mock.fn spies are fine.
+ */
+export interface ComputeBranchStatusDeps {
+    runGitSync?: typeof runGitSync;
+    getDefaultBranch?: typeof getDefaultBranch;
+    getAllFocusWorktrees?: typeof getAllFocusWorktrees;
+    getActiveTeams?: typeof getActiveTeams;
+    emitHealthEvent?: typeof healthEvents.emit;
+}
+/**
+ * Compute branch status for all three tiers of ONE product.
+ *
+ * Safe to call from the heartbeat loop: uses short git timeouts
+ * and catches all errors so a single failure skips that entry
+ * rather than failing the entire heartbeat.
+ *
+ * @param config - Product-scoped daemon config (configForProduct); provides
+ *   productId, repoPath, integrationBranch. Only worktrees owned by
+ *   config.productId are evaluated, each against its own repoPath.
+ * @param options - Optional overrides for mainBranch and branchMonitors from the product record
+ */
+export declare function computeBranchStatus(config: DaemonConfig, options?: BranchStatusOptions, injectedDeps?: ComputeBranchStatusDeps): BranchStatusPayload;
+//# sourceMappingURL=branch-status.d.ts.map

package/dist/shell/branch-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"branch-status.d.ts","sourceRoot":"","sources":["../../src/shell/branch-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAsCjE,iDAAiD;AACjD,wBAAgB,sBAAsB,IAAI,IAAI,CAG7C;AAID,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,CAAC;AAE1D,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,YAAY,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,YAAY,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,uBAAuB,GAAG,IAAI,CAAC;IAC5C,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,OAAO,EAAE,iBAAiB,EAAE,CAAC;CAC9B;AAED,kDAAkD;AAClD,MAAM,WAAW,mBAAmB;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,kBAAkB,EAAE,CAAC;CACvC;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,UAAU,CAAC,EAAE,OAAO,UAAU,CAAC;IAC/B,gBAAgB,CAAC,EAAE,OAAO,gBAAgB,CAAC;IAC3C,oBAAoB,CAAC,EAAE,OAAO,oBAAoB,CAAC;IACnD,cAAc,CAAC,EAAE,OAAO,cAAc,CAAC;IACvC,eAAe,CAAC,EAAE,OAAO,YAAY,CAAC,IAAI,CAAC;CAC5C;AAiFD;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,mBAAmB,EAAE,YAAY,GAAE,uBAA4B,GAAG,mBAAmB,CAiNxJ"}

package/dist/shell/branch-status.js

@@ -0,0 +1,299 @@
+/**
+ * Branch status computation for the three-tier git model.
+ *
+ * Computes health/ahead/behind status for:
+ *   1. Integration branch vs main
+ *   2. Each configured branch monitor (remote refs vs local main)
+ *   3. Each focus worktree vs integration
+ *
+ * Results ride in the heartbeat metadata field (no new tables).
+ *
+ * Multi-product: computeBranchStatus is called once per configured product
+ * with a product-scoped config (configForProduct). The focus worktree map
+ * spans all products, so this module scopes it by each entry's productId and
+ * runs git against the entry's own repoPath — evaluating a worktree against
+ * a repository that does not own it is unrepresentable here. All caches are
+ * keyed per product so one product's tick cannot evict another's state.
+ *
+ * Failure semantics (two distinct kinds, deliberately kept apart):
+ *   - TRANSIENT git failures (lock contention, mid-rebase, timeouts) fall
+ *     back to the last good cached status without raising anything — this
+ *     tolerance predates this module split and prevents UI flicker.
+ *   - PERMANENT failures (unknown revision, not a git repository, bad
+ *     object) mean the branch we believe exists cannot be resolved where we
+ *     looked: an attribution error, not contention. These are surfaced via
+ *     a healthEvent + error log (once per focus per daemon run) instead of
+ *     silently rendering identically to "no worktree". A worktree entry in
+ *     the map IS the claim that its branch should exist; a legitimately
+ *     deleted branch is removed from the map (removeFocusWorktree) before
+ *     ever being evaluated here, so ordinary deletions raise no events.
+ */
+import { runGitSync } from '../git/index.js';
+import { getDefaultBranch } from '../git/index.js';
+import { getAllFocusWorktrees } from '../focus/focus-worktree-state.js';
+import { getActiveTeams } from '../focus/focus-team-state.js';
+import { healthEvents } from './health-events.js';
+import { createLogger } from './log.js';
+const log = createLogger({ module: 'branch-status' });
+/** Short timeout for git commands to avoid blocking the heartbeat. */
+const BRANCH_STATUS_GIT_TIMEOUT_MS = 5_000;
+const cachesByProduct = new Map();
+/**
+ * Focus IDs whose permanent-failure health event has already been emitted
+ * this daemon run — one event per focus, not one per heartbeat tick.
+ */
+const permanentFailureEmitted = new Set();
+function cacheForProduct(key) {
+    let cache = cachesByProduct.get(key);
+    if (!cache) {
+        cache = { integration: null, focus: new Map(), remote: new Map() };
+        cachesByProduct.set(key, cache);
+    }
+    return cache;
+}
+/** Reset all caches. Exported for tests only. */
+export function resetBranchStatusCache() {
+    cachesByProduct.clear();
+    permanentFailureEmitted.clear();
+}
+// ── Helpers ──────────────────────────────────────────────────────────
+const gitOpts = { timeoutMs: BRANCH_STATUS_GIT_TIMEOUT_MS };
+/**
+ * Git stderr patterns that mean the ref/repository itself is unresolvable —
+ * a permanent condition no retry will fix, as opposed to contention.
+ */
+const PERMANENT_GIT_FAILURE_RE = /unknown revision|bad revision|ambiguous argument|not a git repository|bad object|invalid ref/i;
+/**
+ * Count commits in A that are not in B: `git rev-list --count B..A`.
+ * Returns a null count on failure, classified as transient (git was busy —
+ * fall back to cached data) or permanent (the ref cannot resolve where we
+ * looked — an attribution error to surface, not to swallow).
+ *
+ * @param noMerges - When true, adds `--no-merges` to skip merge commits.
+ *   Useful for remote monitors where "Merge main into qa" commits are
+ *   noise — they don't represent new code in the remote branch.
+ */
+function revListCount(deps, refA, refB, cwd, noMerges) {
+    const args = ['rev-list', '--count'];
+    if (noMerges)
+        args.push('--no-merges');
+    args.push(`${refB}..${refA}`);
+    const result = deps.runGitSync(args, cwd, gitOpts);
+    if (!result.success) {
+        return PERMANENT_GIT_FAILURE_RE.test(result.error)
+            ? { count: null, failure: 'permanent', message: result.error }
+            : { count: null, failure: 'transient' };
+    }
+    const n = parseInt(result.output, 10);
+    return Number.isNaN(n) ? { count: null, failure: 'transient' } : { count: n };
+}
+/**
+ * Surface a permanent branch-resolution failure for a focus: error log plus
+ * a healthEvent (rides in heartbeat metadata), emitted once per focus per
+ * daemon run. This is the channel that distinguishes "could not determine"
+ * from "no worktree" — the payload entry falls back to cache (or is omitted),
+ * but the failure is never silent.
+ */
+function surfacePermanentFocusFailure(deps, focusId, branch, repoPath, productId, message) {
+    log.error(`Permanent branch-status failure for focus ${focusId}: ` +
+        `cannot resolve ${branch} in ${repoPath}: ${message}`);
+    if (permanentFailureEmitted.has(focusId))
+        return;
+    permanentFailureEmitted.add(focusId);
+    deps.emitHealthEvent({
+        severity: 'warn',
+        source: 'branch-status',
+        code: 'branch_status.attribution_error',
+        message: `Branch ${branch} for focus ${focusId} cannot be resolved in ${repoPath}: ${message}`,
+        productId,
+    });
+}
+// ── Main ─────────────────────────────────────────────────────────────
+/**
+ * Compute branch status for all three tiers of ONE product.
+ *
+ * Safe to call from the heartbeat loop: uses short git timeouts
+ * and catches all errors so a single failure skips that entry
+ * rather than failing the entire heartbeat.
+ *
+ * @param config - Product-scoped daemon config (configForProduct); provides
+ *   productId, repoPath, integrationBranch. Only worktrees owned by
+ *   config.productId are evaluated, each against its own repoPath.
+ * @param options - Optional overrides for mainBranch and branchMonitors from the product record
+ */
+export function computeBranchStatus(config, options, injectedDeps = {}) {
+    const deps = {
+        runGitSync: injectedDeps.runGitSync ?? runGitSync,
+        getDefaultBranch: injectedDeps.getDefaultBranch ?? getDefaultBranch,
+        getAllFocusWorktrees: injectedDeps.getAllFocusWorktrees ?? getAllFocusWorktrees,
+        getActiveTeams: injectedDeps.getActiveTeams ?? getActiveTeams,
+        emitHealthEvent: injectedDeps.emitHealthEvent ?? healthEvents.emit.bind(healthEvents),
+    };
+    const { repoPath, integrationBranch, productId } = config;
+    const cache = cacheForProduct(productId || repoPath);
+    const mainBranch = options?.mainBranch || deps.getDefaultBranch(repoPath);
+    const monitors = options?.branchMonitors?.length
+        ? options.branchMonitors
+        : [{ ref: `origin/${mainBranch}`, label: 'O' }];
+    // ── Integration branch status ────────────────────────────────────
+    let integration = null;
+    try {
+        // Verify the integration branch exists locally
+        const refCheck = deps.runGitSync(['rev-parse', '--verify', integrationBranch], repoPath, gitOpts);
+        if (refCheck.success) {
+            // --no-merges: "Merge main into integration" commits are sync artifacts,
+            // not new code. Without this, integration perpetually shows as "ahead".
+            const aheadOfMain = revListCount(deps, integrationBranch, mainBranch, repoPath, true);
+            const behindMain = revListCount(deps, mainBranch, integrationBranch, repoPath);
+            if (aheadOfMain.count === null || behindMain.count === null) {
+                // Transient git failure (lock contention, mid-rebase) — use cached status
+                integration = cache.integration;
+            }
+            else {
+                let health = 'clean';
+                if (aheadOfMain.count > 0 && behindMain.count > 0) {
+                    health = 'conflict'; // truly diverged — both directions have commits
+                }
+                else if (aheadOfMain.count > 0 || behindMain.count > 0) {
+                    health = 'dirty';
+                }
+                integration = {
+                    branch: integrationBranch,
+                    health,
+                    aheadOfMain: aheadOfMain.count,
+                    behindMain: behindMain.count,
+                };
+                cache.integration = integration;
+            }
+        }
+    }
+    catch {
+        // Non-fatal: use cached integration status if available
+        integration = cache.integration;
+    }
+    // ── Remote branch monitors ──────────────────────────────────────
+    const remotes = [];
+    for (const monitor of monitors) {
+        try {
+            const refCheck = deps.runGitSync(['rev-parse', '--verify', monitor.ref], repoPath, gitOpts);
+            if (refCheck.success) {
+                // aheadOfMain: non-merge commits in remote not in main (remote is ahead).
+                // --no-merges filters "Merge main into qa" artifacts that contain no new code.
+                const aheadOfMain = revListCount(deps, monitor.ref, mainBranch, repoPath, true);
+                // behindMain: commits in main not in remote (remote is behind)
+                const behindMain = revListCount(deps, mainBranch, monitor.ref, repoPath);
+                if (aheadOfMain.count === null || behindMain.count === null) {
+                    // Transient git failure — use cached status
+                    const cached = cache.remote.get(monitor.ref);
+                    remotes.push(cached ?? { ref: monitor.ref, label: monitor.label, aheadOfMain: null, behindMain: null });
+                }
+                else {
+                    const entry = {
+                        ref: monitor.ref,
+                        label: monitor.label,
+                        aheadOfMain: aheadOfMain.count,
+                        behindMain: behindMain.count,
+                    };
+                    cache.remote.set(monitor.ref, entry);
+                    remotes.push(entry);
+                }
+            }
+            else {
+                // Ref doesn't exist — use cached if available, otherwise emit grey sentinel
+                const cached = cache.remote.get(monitor.ref);
+                remotes.push(cached ?? { ref: monitor.ref, label: monitor.label, aheadOfMain: null, behindMain: null });
+            }
+        }
+        catch {
+            // Non-fatal: use cached status if available, otherwise emit grey sentinel
+            const cached = cache.remote.get(monitor.ref);
+            remotes.push(cached ?? { ref: monitor.ref, label: monitor.label, aheadOfMain: null, behindMain: null });
+        }
+    }
+    // Evict remote cache entries for monitors no longer configured
+    const monitorRefs = new Set(monitors.map(m => m.ref));
+    for (const cachedRef of cache.remote.keys()) {
+        if (!monitorRefs.has(cachedRef)) {
+            cache.remote.delete(cachedRef);
+        }
+    }
+    // ── Focus worktree statuses ───────────────────────────────────
+    const focuses = [];
+    const worktrees = deps.getAllFocusWorktrees();
+    const teams = deps.getActiveTeams();
+    const ownFocusIds = new Set();
+    for (const [focusId, info] of worktrees) {
+        // The worktree map is cross-product; only evaluate worktrees this
+        // product owns, and evaluate them against the entry's OWN repo.
+        if (info.productId !== productId)
+            continue;
+        ownFocusIds.add(focusId);
+        const focusRepoPath = info.repoPath || repoPath;
+        try {
+            const headResult = deps.runGitSync(['rev-parse', 'HEAD'], info.worktreePath, gitOpts);
+            if (!headResult.success) {
+                // Transient failure — use cached status if available
+                const cached = cache.focus.get(focusId);
+                if (cached)
+                    focuses.push(cached);
+                continue;
+            }
+            const headSha = headResult.output;
+            const aheadOfIntegration = revListCount(deps, info.branchName, integrationBranch, focusRepoPath, true);
+            const behindIntegration = revListCount(deps, integrationBranch, info.branchName, focusRepoPath);
+            if (aheadOfIntegration.count === null || behindIntegration.count === null) {
+                const permanent = aheadOfIntegration.failure === 'permanent' ? aheadOfIntegration :
+                    behindIntegration.failure === 'permanent' ? behindIntegration :
+                        null;
+                if (permanent) {
+                    // The branch this worktree entry claims exists cannot be resolved
+                    // in its own repository: an attribution error, not contention.
+                    surfacePermanentFocusFailure(deps, focusId, info.branchName, focusRepoPath, productId, permanent.message ?? 'unknown git error');
+                }
+                // Either way, fall back to cached status (transient tolerance for
+                // contention; last-known-good rather than a wrong fresh value for
+                // permanent failures — the healthEvent above carries the error).
+                const cached = cache.focus.get(focusId);
+                if (cached)
+                    focuses.push(cached);
+                continue;
+            }
+            // Check merge conflict flag from active team state
+            const team = teams.get(focusId);
+            const isConflicting = team?.resolvingMergeConflict === true;
+            let health = 'clean';
+            if (isConflicting) {
+                health = 'conflict';
+            }
+            else if (aheadOfIntegration.count > 0) {
+                health = 'dirty';
+            }
+            const entry = {
+                focusId,
+                branch: info.branchName,
+                headSha,
+                health,
+                aheadOfIntegration: aheadOfIntegration.count,
+                behindIntegration: behindIntegration.count,
+            };
+            cache.focus.set(focusId, entry);
+            focuses.push(entry);
+        }
+        catch {
+            // Transient failure — use cached status if available
+            const cached = cache.focus.get(focusId);
+            if (cached)
+                focuses.push(cached);
+        }
+    }
+    // Evict cache entries for THIS product's worktrees that no longer exist.
+    // (Other products' focuses never enter this cache — it is per-product.)
+    for (const cachedId of cache.focus.keys()) {
+        if (!ownFocusIds.has(cachedId)) {
+            cache.focus.delete(cachedId);
+            permanentFailureEmitted.delete(cachedId);
+        }
+    }
+    return { integration, remotes, focuses };
+}
+//# sourceMappingURL=branch-status.js.map

package/dist/shell/branch-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"branch-status.js","sourceRoot":"","sources":["../../src/shell/branch-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;AAEtD,sEAAsE;AACtE,MAAM,4BAA4B,GAAG,KAAK,CAAC;AAe3C,MAAM,eAAe,GAAG,IAAI,GAAG,EAA8B,CAAC;AAE9D;;;GAGG;AACH,MAAM,uBAAuB,GAAG,IAAI,GAAG,EAAU,CAAC;AAElD,SAAS,eAAe,CAAC,GAAW;IAClC,IAAI,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;QACnE,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,sBAAsB;IACpC,eAAe,CAAC,KAAK,EAAE,CAAC;IACxB,uBAAuB,CAAC,KAAK,EAAE,CAAC;AAClC,CAAC;AA0DD,wEAAwE;AAExE,MAAM,OAAO,GAAG,EAAE,SAAS,EAAE,4BAA4B,EAAE,CAAC;AAE5D;;;GAGG;AACH,MAAM,wBAAwB,GAC5B,+FAA+F,CAAC;AAUlG;;;;;;;;;GASG;AACH,SAAS,YAAY,CAAC,IAA8B,EAAE,IAAY,EAAE,IAAY,EAAE,GAAW,EAAE,QAAkB;IAC/G,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACrC,IAAI,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACvC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAChD,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE;YAC9D,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAC5C,CAAC;IACD,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAChF,CAAC;AAED;;;;;;GAMG;AACH,SAAS,4BAA4B,CACnC,IAA8B,EAC9B,OAAe,EACf,MAAc,EACd,QAAgB,EAChB,SAAiB,EACjB,OAAe;IAEf,GAAG,CAAC,KAAK,CACP,6CAA6C,OAAO,IAAI;QACxD,kBAAkB,MAAM,OAAO,QAAQ,KAAK,OAAO,EAAE,CACtD,CAAC;IACF,IAAI,uBAAuB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO;IACjD,uBAAuB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,CAAC,eAAe,CAAC;QACnB,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,eAAe;QACvB,IAAI,EAAE,iCAAiC;QACvC,OAAO,EACL,UAAU,MAAM,cAAc,OAAO,0BAA0B,QAAQ,KAAK,OAAO,EAAE;QACvF,SAAS;KACV,CAAC,CAAC;AACL,CAAC;AAED,wEAAwE;AAExE;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAoB,EAAE,OAA6B,EAAE,eAAwC,EAAE;IACjI,MAAM,IAAI,GAA6B;QACrC,UAAU,EAAE,YAAY,CAAC,UAAU,IAAI,UAAU;QACjD,gBAAgB,EAAE,YAAY,CAAC,gBAAgB,IAAI,gBAAgB;QACnE,oBAAoB,EAAE,YAAY,CAAC,oBAAoB,IAAI,oBAAoB;QAC/E,cAAc,EAAE,YAAY,CAAC,cAAc,IAAI,cAAc;QAC7D,eAAe,EAAE,YAAY,CAAC,eAAe,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;KACtF,CAAC;IACF,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAC1D,MAAM,KAAK,GAAG,eAAe,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,OAAO,EAAE,cAAc,EAAE,MAAM;QAC9C,CAAC,CAAC,OAAO,CAAC,cAAc;QACxB,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,UAAU,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAElD,oEAAoE;IACpE,IAAI,WAAW,GAAmC,IAAI,CAAC;IACvD,IAAI,CAAC;QACH,+CAA+C;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAC9B,CAAC,WAAW,EAAE,UAAU,EAAE,iBAAiB,CAAC,EAC5C,QAAQ,EACR,OAAO,CACR,CAAC;QACF,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACrB,yEAAyE;YACzE,wEAAwE;YACxE,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;YACtF,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC;YAE/E,IAAI,WAAW,CAAC,KAAK,KAAK,IAAI,IAAI,UAAU,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC5D,0EAA0E;gBAC1E,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,IAAI,MAAM,GAAiB,OAAO,CAAC;gBACnC,IAAI,WAAW,CAAC,KAAK,GAAG,CAAC,IAAI,UAAU,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;oBAClD,MAAM,GAAG,UAAU,CAAC,CAAC,gDAAgD;gBACvE,CAAC;qBAAM,IAAI,WAAW,CAAC,KAAK,GAAG,CAAC,IAAI,UAAU,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;oBACzD,MAAM,GAAG,OAAO,CAAC;gBACnB,CAAC;gBAED,WAAW,GAAG;oBACZ,MAAM,EAAE,iBAAiB;oBACzB,MAAM;oBACN,WAAW,EAAE,WAAW,CAAC,KAAK;oBAC9B,UAAU,EAAE,UAAU,CAAC,KAAK;iBAC7B,CAAC;gBACF,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wDAAwD;QACxD,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IAClC,CAAC;IAED,mEAAmE;IACnE,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAC9B,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,EACtC,QAAQ,EACR,OAAO,CACR,CAAC;YACF,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACrB,0EAA0E;gBAC1E,+EAA+E;gBAC/E,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;gBAChF,+DAA+D;gBAC/D,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAEzE,IAAI,WAAW,CAAC,KAAK,KAAK,IAAI,IAAI,UAAU,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;oBAC5D,4CAA4C;oBAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBAC7C,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1G,CAAC;qBAAM,CAAC;oBACN,MAAM,KAAK,GAAuB;wBAChC,GAAG,EAAE,OAAO,CAAC,GAAG;wBAChB,KAAK,EAAE,OAAO,CAAC,KAAK;wBACpB,WAAW,EAAE,WAAW,CAAC,KAAK;wBAC9B,UAAU,EAAE,UAAU,CAAC,KAAK;qBAC7B,CAAC;oBACF,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;oBACrC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,4EAA4E;gBAC5E,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC7C,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1G,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;YAC1E,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;IAED,+DAA+D;IAC/D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACtD,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;IACpC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IAEtC,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,SAAS,EAAE,CAAC;QACxC,kEAAkE;QAClE,gEAAgE;QAChE,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;YAAE,SAAS;QAC3C,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzB,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;QAEhD,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAChC,CAAC,WAAW,EAAE,MAAM,CAAC,EACrB,IAAI,CAAC,YAAY,EACjB,OAAO,CACR,CAAC;YACF,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBACxB,qDAAqD;gBACrD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACxC,IAAI,MAAM;oBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACjC,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC;YAElC,MAAM,kBAAkB,GAAG,YAAY,CACrC,IAAI,EACJ,IAAI,CAAC,UAAU,EACf,iBAAiB,EACjB,aAAa,EACb,IAAI,CACL,CAAC;YACF,MAAM,iBAAiB,GAAG,YAAY,CACpC,IAAI,EACJ,iBAAiB,EACjB,IAAI,CAAC,UAAU,EACf,aAAa,CACd,CAAC;YAEF,IAAI,kBAAkB,CAAC,KAAK,KAAK,IAAI,IAAI,iBAAiB,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC1E,MAAM,SAAS,GACb,kBAAkB,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;oBACjE,iBAAiB,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;wBAC/D,IAAI,CAAC;gBACP,IAAI,SAAS,EAAE,CAAC;oBACd,kEAAkE;oBAClE,+DAA+D;oBAC/D,4BAA4B,CAC1B,IAAI,EACJ,OAAO,EACP,IAAI,CAAC,UAAU,EACf,aAAa,EACb,SAAS,EACT,SAAS,CAAC,OAAO,IAAI,mBAAmB,CACzC,CAAC;gBACJ,CAAC;gBACD,kEAAkE;gBAClE,kEAAkE;gBAClE,iEAAiE;gBACjE,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACxC,IAAI,MAAM;oBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACjC,SAAS;YACX,CAAC;YAED,mDAAmD;YACnD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAChC,MAAM,aAAa,GAAG,IAAI,EAAE,sBAAsB,KAAK,IAAI,CAAC;YAE5D,IAAI,MAAM,GAAiB,OAAO,CAAC;YACnC,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,GAAG,UAAU,CAAC;YACtB,CAAC;iBAAM,IAAI,kBAAkB,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;gBACxC,MAAM,GAAG,OAAO,CAAC;YACnB,CAAC;YAED,MAAM,KAAK,GAAsB;gBAC/B,OAAO;gBACP,MAAM,EAAE,IAAI,CAAC,UAAU;gBACvB,OAAO;gBACP,MAAM;gBACN,kBAAkB,EAAE,kBAAkB,CAAC,KAAK;gBAC5C,iBAAiB,EAAE,iBAAiB,CAAC,KAAK;aAC3C,CAAC;YACF,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,qDAAqD;YACrD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxC,IAAI,MAAM;gBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,wEAAwE;IACxE,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC7B,uBAAuB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC3C,CAAC"}

package/dist/shell/circuit-wedge-watcher.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Wedged-circuit watcher (Daemon Resilience Hardening, injection #13).
+ *
+ * Periodically inspects the control-plane circuit breakers and, when one has
+ * been held open past a threshold, emits an error-severity health event naming
+ * the wedged circuit. Without this signal the daemon can sit silently idle --
+ * exactly the 2026-05-28 incident, where a control-plane circuit stayed open
+ * ~2h and no team could spawn, with nothing surfacing the cause to the operator.
+ *
+ * Open-duration is tracked here (by sampling getState()) rather than inside the
+ * breaker, so the watcher depends only on the already-published CircuitBreaker
+ * surface and all new logic lives in the daemon package.
+ */
+import type { CircuitBreaker } from '@telora/daemon-core';
+import { type ConcernClass } from '../queries/shared.js';
+export interface WedgeTracking {
+    /** concern -> timestamp (ms) it was first observed continuously open. */
+    openSince: Map<string, number>;
+    /** concern -> wedge already reported for the current open episode. */
+    reported: Set<string>;
+}
+export declare function createWedgeTracking(): WedgeTracking;
+/**
+ * Inspect control-plane breakers and return the concerns NEWLY detected as
+ * wedged (open continuously >= thresholdMs and not yet reported this episode).
+ *
+ * Pure with respect to `now` (injectable clock) and `tracking` (caller-owned
+ * state), so it is unit-testable with a simulated clock and a real
+ * CircuitBreaker. Fires once per wedge episode; a recovery (breaker closes)
+ * clears the tracking so a later wedge re-fires.
+ */
+export declare function detectWedgedControlPlaneCircuits(breakers: Record<string, CircuitBreaker>, concernClass: Record<string, ConcernClass>, thresholdMs: number, tracking: WedgeTracking, now?: number): string[];
+/**
+ * Emit an error-severity health event for each newly-wedged concern. The event
+ * flows into heartbeat metadata for dashboard visibility (the operator signal).
+ */
+export declare function emitWedgedCircuitHealthEvents(concerns: string[]): void;
+/**
+ * Start the periodic wedged-circuit watcher. Idempotent-ish: a prior timer is
+ * cleared first. The interval body is wrapped by safeInterval so a throw cannot
+ * crash the process.
+ */
+export declare function startCircuitWedgeWatcher(opts?: {
+    thresholdMs?: number;
+    intervalMs?: number;
+}): void;
+export declare function stopCircuitWedgeWatcher(): void;
+//# sourceMappingURL=circuit-wedge-watcher.d.ts.map

package/dist/shell/circuit-wedge-watcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"circuit-wedge-watcher.d.ts","sourceRoot":"","sources":["../../src/shell/circuit-wedge-watcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,EAAwC,KAAK,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAO/F,MAAM,WAAW,aAAa;IAC5B,yEAAyE;IACzE,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,sEAAsE;IACtE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACvB;AAED,wBAAgB,mBAAmB,IAAI,aAAa,CAEnD;AAED;;;;;;;;GAQG;AACH,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,EACxC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,EAC1C,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,aAAa,EACvB,GAAG,GAAE,MAAmB,GACvB,MAAM,EAAE,CAuBV;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAYtE;AAKD;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAkBnG;AAED,wBAAgB,uBAAuB,IAAI,IAAI,CAK9C"}

package/dist/shell/circuit-wedge-watcher.js

@@ -0,0 +1,94 @@
+/**
+ * Wedged-circuit watcher (Daemon Resilience Hardening, injection #13).
+ *
+ * Periodically inspects the control-plane circuit breakers and, when one has
+ * been held open past a threshold, emits an error-severity health event naming
+ * the wedged circuit. Without this signal the daemon can sit silently idle --
+ * exactly the 2026-05-28 incident, where a control-plane circuit stayed open
+ * ~2h and no team could spawn, with nothing surfacing the cause to the operator.
+ *
+ * Open-duration is tracked here (by sampling getState()) rather than inside the
+ * breaker, so the watcher depends only on the already-published CircuitBreaker
+ * surface and all new logic lives in the daemon package.
+ */
+import { healthEvents, safeInterval } from '@telora/daemon-core';
+import { getApiCircuitBreakers, CONCERN_CLASS } from '../queries/shared.js';
+/** Default: a control-plane circuit open continuously this long is "wedged". */
+const DEFAULT_WEDGE_THRESHOLD_MS = 120_000;
+/** Default polling cadence for the watcher. */
+const DEFAULT_CHECK_INTERVAL_MS = 30_000;
+export function createWedgeTracking() {
+    return { openSince: new Map(), reported: new Set() };
+}
+/**
+ * Inspect control-plane breakers and return the concerns NEWLY detected as
+ * wedged (open continuously >= thresholdMs and not yet reported this episode).
+ *
+ * Pure with respect to `now` (injectable clock) and `tracking` (caller-owned
+ * state), so it is unit-testable with a simulated clock and a real
+ * CircuitBreaker. Fires once per wedge episode; a recovery (breaker closes)
+ * clears the tracking so a later wedge re-fires.
+ */
+export function detectWedgedControlPlaneCircuits(breakers, concernClass, thresholdMs, tracking, now = Date.now()) {
+    const newlyWedged = [];
+    for (const [concern, breaker] of Object.entries(breakers)) {
+        if (concernClass[concern] !== 'control-plane')
+            continue;
+        const isOpen = breaker.getState() !== 'closed';
+        if (!isOpen) {
+            // Recovered (or never open): end the episode so a future wedge re-fires.
+            tracking.openSince.delete(concern);
+            tracking.reported.delete(concern);
+            continue;
+        }
+        if (!tracking.openSince.has(concern)) {
+            tracking.openSince.set(concern, now);
+        }
+        const openSince = tracking.openSince.get(concern) ?? now;
+        if (now - openSince >= thresholdMs && !tracking.reported.has(concern)) {
+            tracking.reported.add(concern);
+            newlyWedged.push(concern);
+        }
+    }
+    return newlyWedged;
+}
+/**
+ * Emit an error-severity health event for each newly-wedged concern. The event
+ * flows into heartbeat metadata for dashboard visibility (the operator signal).
+ */
+export function emitWedgedCircuitHealthEvents(concerns) {
+    for (const concern of concerns) {
+        healthEvents.emit({
+            severity: 'error',
+            source: `circuit:${concern}`,
+            code: 'circuit.wedged',
+            message: `Control-plane circuit '${concern}' has been open past the wedge threshold; ` +
+                `control-plane actions (e.g. session creation) are blocked. Investigate the ` +
+                `upstream failure or force-close all breakers (SIGUSR2).`,
+        });
+    }
+}
+let tracking = createWedgeTracking();
+let timer = null;
+/**
+ * Start the periodic wedged-circuit watcher. Idempotent-ish: a prior timer is
+ * cleared first. The interval body is wrapped by safeInterval so a throw cannot
+ * crash the process.
+ */
+export function startCircuitWedgeWatcher(opts) {
+    const thresholdMs = opts?.thresholdMs ?? DEFAULT_WEDGE_THRESHOLD_MS;
+    const intervalMs = opts?.intervalMs ?? DEFAULT_CHECK_INTERVAL_MS;
+    stopCircuitWedgeWatcher();
+    tracking = createWedgeTracking();
+    timer = safeInterval(() => {
+        const wedged = detectWedgedControlPlaneCircuits(getApiCircuitBreakers(), CONCERN_CLASS, thresholdMs, tracking);
+        emitWedgedCircuitHealthEvents(wedged);
+    }, intervalMs, 'circuit-wedge-watcher');
+}
+export function stopCircuitWedgeWatcher() {
+    if (timer) {
+        clearInterval(timer);
+        timer = null;
+    }
+}
+//# sourceMappingURL=circuit-wedge-watcher.js.map

package/dist/shell/circuit-wedge-watcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"circuit-wedge-watcher.js","sourceRoot":"","sources":["../../src/shell/circuit-wedge-watcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAqB,MAAM,sBAAsB,CAAC;AAE/F,gFAAgF;AAChF,MAAM,0BAA0B,GAAG,OAAO,CAAC;AAC3C,+CAA+C;AAC/C,MAAM,yBAAyB,GAAG,MAAM,CAAC;AASzC,MAAM,UAAU,mBAAmB;IACjC,OAAO,EAAE,SAAS,EAAE,IAAI,GAAG,EAAkB,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAU,EAAE,CAAC;AAC/E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gCAAgC,CAC9C,QAAwC,EACxC,YAA0C,EAC1C,WAAmB,EACnB,QAAuB,EACvB,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1D,IAAI,YAAY,CAAC,OAAO,CAAC,KAAK,eAAe;YAAE,SAAS;QAExD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,KAAK,QAAQ,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,yEAAyE;YACzE,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACnC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAClC,SAAS;QACX,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACrC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC;QACzD,IAAI,GAAG,GAAG,SAAS,IAAI,WAAW,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACtE,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC/B,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAAC,QAAkB;IAC9D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,YAAY,CAAC,IAAI,CAAC;YAChB,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,OAAO,EAAE;YAC5B,IAAI,EAAE,gBAAgB;YACtB,OAAO,EACL,0BAA0B,OAAO,4CAA4C;gBAC7E,6EAA6E;gBAC7E,yDAAyD;SAC5D,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,IAAI,QAAQ,GAAG,mBAAmB,EAAE,CAAC;AACrC,IAAI,KAAK,GAA0C,IAAI,CAAC;AAExD;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAoD;IAC3F,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,IAAI,0BAA0B,CAAC;IACpE,MAAM,UAAU,GAAG,IAAI,EAAE,UAAU,IAAI,yBAAyB,CAAC;IACjE,uBAAuB,EAAE,CAAC;IAC1B,QAAQ,GAAG,mBAAmB,EAAE,CAAC;IACjC,KAAK,GAAG,YAAY,CAClB,GAAG,EAAE;QACH,MAAM,MAAM,GAAG,gCAAgC,CAC7C,qBAAqB,EAAE,EACvB,aAAa,EACb,WAAW,EACX,QAAQ,CACT,CAAC;QACF,6BAA6B,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC,EACD,UAAU,EACV,uBAAuB,CACxB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,IAAI,KAAK,EAAE,CAAC;QACV,aAAa,CAAC,KAAK,CAAC,CAAC;QACrB,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;AACH,CAAC"}