@telora/daemon 0.21.26 → 0.21.81

package/dist/ci-sensor-loop.js

@@ -1,243 +0,0 @@
-/**
- * CI-result sensor loop (Reconnect CI to the loop, TEL-3; machine-receiver
- * routing from the focus "A red CI run must mint work, not an inbox line").
- *
- * A red CI run on integration used to have NO receiver -- it evaporated. This
- * loop makes a failing run SIGNAL: per product, it reads the integration tip's
- * git-native CI status (refs/ci-status/<sha>) via the daemon's existing
- * git-over-SSH channel and, on RED, files exactly one open `ci_run_red`
- * escalation. When a LATER run on integration goes green, it resolves the open
- * escalation. Pure decision (decideCiSensorAction in ci-status.ts) + injected IO
- * so the loop is unit-testable without a live remote or DB.
- *
- * The filing is a MACHINE receiver, not a human inbox line. Fixing a failing
- * lint/typecheck/test/build gate is CODING work, so the filing carries
- * disposition `agent_resolvable` (hidden from the operator inbox) anchored to a
- * FOCUS, so the daemon's focus-scoped agent_resolvable pickup
- * (reconcileAgentResolvableForFocus) rides it into that focus's next CODING pass
- * to be resolved. The ONLY path from here to a `needs_operator` filing is the
- * existing 24h agent_resolvable promotion backstop, after the machine has had
- * spawn cycles to clear it and has not -- never a direct operator filing.
- *
- * Anchor choice (decided, reversible): the tip's OWNING focus, resolved from the
- * tip commit's `Telora-Delivery` trailer -> delivery -> focus; falling back to
- * any currently-active focus for the product (a CI-gate fix is cross-cutting, so
- * any armed team can take it). If NO focus is armed at all there is no coding
- * pass to route the fix to, so the tick files nothing and retries next tick --
- * the fail-closed integration->main merge gate (resolveCiMergeGate, which reads
- * the git ref independently of this escalation) still holds main out on the red,
- * so nothing merges while the signal waits for a team. The recorded alternative,
- * a standing per-product "CI health" focus, would remove the fallback heuristic
- * but is a larger change (new focus lifecycle) and can replace this later with
- * no data migration.
- *
- * The cause key is BRANCH-scoped (queries/cause-key.ciRunRedCauseKey): successive
- * red tips carrying the same unfixed breakage collapse onto ONE open filing
- * instead of minting one per tip.
- *
- * Registered in LOOP_REGISTRY under the opt-out guard TELORA_CI_SENSOR_LOOP.
- * Consumes the same fail-closed CiStatusReader the green-wait (TEL-2) uses.
- *
- * @module ci-sensor-loop
- */
-import { configForProduct } from './config.js';
-import { decideCiSensorAction, createGitNativeCiStatusReader } from './ci-status.js';
-import { listCiStatusRefs, resolveRemoteIntegrationTip } from './ci-status-git.js';
-import { createEscalation, markEscalationResolved } from './queries/issues.js';
-import { getDeliveryContext, getActiveFocuses } from './queries/deliveries.js';
-import { readDeliveryTrailer } from './resolvers/shared/git-diff.js';
-import { callApi } from './queries/shared.js';
-import { ciRunRedCauseKey } from './queries/cause-key.js';
-import { ESCALATION_REASONS, ESCALATION_DISPOSITIONS } from '@telora/daemon-core';
-import { createLogger } from './log.js';
-const log = createLogger({ module: 'ci-sensor' });
-/** escalation_kind for a red CI run on integration. */
-export const CI_RUN_RED_ESCALATION_KIND = 'ci_run_red';
-const OPEN_STATUSES = new Set(['pending', 'in_review']);
-/** Statuses whose cause_key suppresses a re-file: open (idempotency) + dismissed (memory). */
-const SUPPRESSING_STATUSES = new Set(['pending', 'in_review', 'dismissed']);
-function isOpenCiRedForProduct(e, productId) {
-    if (e.status && !OPEN_STATUSES.has(e.status))
-        return false;
-    if (e.escalationKind !== CI_RUN_RED_ESCALATION_KIND)
-        return false;
-    const meta = e.metadata ?? null;
-    return e.productId === productId || meta?.productId === productId;
-}
-/**
- * Whether a re-file for THIS red sha must be suppressed. Two ways it is:
- *   - an OPEN or DISMISSED row already carries the same cause key (sha+branch) --
- *     the cause-keyed path with DISMISSAL MEMORY. This is what fixes the incident
- *     where an operator dismissed a ci_run_red for a sha and the daemon re-filed
- *     the SAME sha on the next scan: a dismissed cause_key now keeps it silent
- *     until a NEW sha (a different cause key) goes red.
- *   - a legacy OPEN product+kind row with no cause_key exists (deployment-window
- *     back-compat for rows filed before this change).
- *
- * A new sha yields a different cause key with no matching open/dismissed row and
- * re-files; a later green run resolves the open row via resolveCiRedEscalations.
- */
-/**
- * Pure suppression predicate over already-fetched rows. A re-file for this red
- * sha is suppressed when an open/dismissed row carries the same cause key
- * (dismissal memory), or a legacy open product+kind row exists. Exported for
- * direct unit testing (no callApi mocking needed).
- */
-export function isCiRedRefileSuppressed(rows, params) {
-    // Branch-scoped: one open ci_run_red per red integration branch. Successive
-    // red tips (different sha, same branch) suppress onto the open filing.
-    const causeKey = ciRunRedCauseKey(params.branch);
-    return rows.some((e) => {
-        // A cause-key match suppresses only for OPEN or DISMISSED rows -- 'resolved'
-        // is excluded so a recurrence of the same sha after a green resolve re-files.
-        if (SUPPRESSING_STATUSES.has(e.status ?? '')) {
-            const meta = e.metadata ?? null;
-            if (typeof meta?.cause_key === 'string' && meta.cause_key === causeKey)
-                return true;
-        }
-        // Legacy back-compat: an OPEN product+kind row with no cause_key still suppresses.
-        return isOpenCiRedForProduct(e, params.productId);
-    });
-}
-async function defaultHasOpenCiRedEscalation(params) {
-    const result = await callApi('escalation_list', {
-        // Include 'dismissed' so a dismissed cause key keeps the same sha silent.
-        fields: { statuses: ['pending', 'in_review', 'dismissed'] },
-        limit: 500,
-    });
-    return isCiRedRefileSuppressed(result.escalations ?? [], params);
-}
-async function defaultResolveCiRedEscalations(productId) {
-    const result = await callApi('escalation_list', {
-        fields: { statuses: ['pending', 'in_review'] },
-        limit: 500,
-    });
-    const open = (result.escalations ?? []).filter((e) => isOpenCiRedForProduct(e, productId));
-    let resolved = 0;
-    for (const e of open) {
-        try {
-            await markEscalationResolved(e.id, 'Auto-resolved by the daemon: a later CI run on integration went green.');
-            resolved++;
-        }
-        catch (err) {
-            log.warn(`Failed to resolve ci_run_red escalation ${e.id}: ${err.message}`);
-        }
-    }
-    return resolved;
-}
-async function defaultFileCiRedEscalation(params) {
-    await createEscalation({
-        organizationId: params.organizationId,
-        issueId: null,
-        reasonType: ESCALATION_REASONS.ERROR_ENCOUNTERED,
-        // Fixing a failing CI gate is CODING work: file it as machine-routable
-        // (hidden from the operator inbox) and anchor it to a focus so the daemon's
-        // focus-scoped agent_resolvable pickup rides it into that focus's next
-        // coding pass. A needs_operator filing only ever comes from the 24h
-        // promotion backstop, after the machine has failed to clear it.
-        disposition: ESCALATION_DISPOSITIONS.AGENT_RESOLVABLE,
-        productId: params.productId,
-        focusId: params.focusId,
-        escalationKind: CI_RUN_RED_ESCALATION_KIND,
-        description: `CI is RED on the integration branch (${params.branch}) at ${params.sha.slice(0, 12)}. ` +
-            `The clean-environment instrument is failing, so integration->main merges are held ` +
-            `(fail-closed green-wait). Run reference: commit ${params.sha}. Fixing the failing ` +
-            `gate is coding work: reproduce it in the worktree (the CI 'ci' job's gate block) ` +
-            `and fix it. This filing auto-resolves when a later integration run goes green; if ` +
-            `the machine cannot clear it, the 24h agent_resolvable promotion backstop surfaces ` +
-            `it to an operator.`,
-        // cause_key (branch) collapses successive red tips onto one open filing and
-        // keeps the branch silent while it is already signalled; a green resolves it.
-        metadata: {
-            sha: params.sha,
-            branch: params.branch,
-            product_id: params.productId,
-            focus_id: params.focusId,
-            cause_key: ciRunRedCauseKey(params.branch),
-        },
-    });
-}
-/**
- * Resolve the focus a red integration run's fix should be routed to. Primary:
- * the tip commit's OWNING focus, via its `Telora-Delivery` trailer -> delivery ->
- * focus. Fallback: any currently-active focus for the product (a CI-gate fix is
- * cross-cutting, so any armed team can take it). Returns null when neither
- * resolves -- there is no coding pass to route the fix to, so the caller files
- * nothing and retries next tick (the fail-closed merge gate still holds main).
- * Best-effort: any git/DB failure degrades to null, never throws.
- */
-async function defaultResolveOwningFocus(config, sha) {
-    try {
-        const deliveryId = readDeliveryTrailer(config.repoPath, sha);
-        if (deliveryId) {
-            const ctx = await getDeliveryContext(deliveryId);
-            if (ctx?.focus?.id)
-                return ctx.focus.id;
-        }
-    }
-    catch (err) {
-        log.debug(`owning-focus trailer resolution failed for ${sha.slice(0, 12)}: ${err.message}`);
-    }
-    try {
-        const active = await getActiveFocuses(config.organizationId, config.productId);
-        return active[0]?.focus_id ?? null;
-    }
-    catch (err) {
-        log.debug(`active-focus fallback failed for product ${config.productId}: ${err.message}`);
-        return null;
-    }
-}
-const defaultDeps = {
-    getCiStatus: createGitNativeCiStatusReader(listCiStatusRefs),
-    resolveIntegrationTip: resolveRemoteIntegrationTip,
-    resolveOwningFocus: defaultResolveOwningFocus,
-    hasOpenCiRedEscalation: defaultHasOpenCiRedEscalation,
-    fileCiRedEscalation: defaultFileCiRedEscalation,
-    resolveCiRedEscalations: defaultResolveCiRedEscalations,
-};
-/**
- * One CI-result sensor tick over every configured product. Per product: resolve
- * the remote integration tip, read its CI status (fail-closed), and file/resolve
- * the ci_run_red escalation per the pure decision. Best-effort per product -- a
- * failure on one product never aborts the others.
- */
-export async function runCiSensorTick(config, deps = defaultDeps) {
-    const counts = { productsChecked: 0, escalationsFiled: 0, escalationsResolved: 0 };
-    for (const product of config.products) {
-        const pc = configForProduct(config, product);
-        try {
-            const sha = deps.resolveIntegrationTip(pc);
-            if (!sha)
-                continue;
-            counts.productsChecked++;
-            const status = await deps.getCiStatus({ sha, integrationBranch: pc.integrationBranch, config: pc });
-            const hasOpen = await deps.hasOpenCiRedEscalation({ productId: pc.productId, sha, branch: pc.integrationBranch });
-            const action = decideCiSensorAction(status, hasOpen);
-            if (action === 'file') {
-                const focusId = await deps.resolveOwningFocus(pc, sha);
-                if (!focusId) {
-                    // No armed focus to route the fix to. File nothing and retry next
-                    // tick -- the fail-closed merge gate still holds main out on the red,
-                    // so nothing merges while the signal waits for a team. Filing an
-                    // unanchored agent_resolvable would be invisible forever (never
-                    // ridden, never promoted); a direct needs_operator is exactly the
-                    // inbox line this focus removes.
-                    log.warn(`CI red on ${pc.integrationBranch} @ ${sha.slice(0, 12)} but no armed focus to route the fix to; holding (merge gate still fail-closed), will retry.`);
-                    continue;
-                }
-                await deps.fileCiRedEscalation({ organizationId: pc.organizationId, productId: pc.productId, focusId, sha, branch: pc.integrationBranch });
-                counts.escalationsFiled++;
-                log.warn(`ci_run_red (agent_resolvable) filed for product ${pc.productId}, focus ${focusId.slice(0, 8)} (integration @ ${sha.slice(0, 12)}).`);
-            }
-            else if (action === 'resolve') {
-                counts.escalationsResolved += await deps.resolveCiRedEscalations(pc.productId);
-                log.info(`integration green for product ${pc.productId} -- resolved open ci_run_red escalation(s).`);
-            }
-        }
-        catch (err) {
-            log.warn(`tick failed for product ${product.id}: ${err.message}`);
-        }
-    }
-    return counts;
-}
-//# sourceMappingURL=ci-sensor-loop.js.map

package/dist/ci-sensor-loop.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ci-sensor-loop.js","sourceRoot":"","sources":["../src/ci-sensor-loop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,6BAA6B,EAAuB,MAAM,gBAAgB,CAAC;AAC1G,OAAO,EAAE,gBAAgB,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAExC,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;AAGlD,uDAAuD;AACvD,MAAM,CAAC,MAAM,0BAA0B,GAAG,YAAY,CAAC;AAWvD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;AACxD,8FAA8F;AAC9F,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;AAE5E,SAAS,qBAAqB,CAAC,CAAkB,EAAE,SAAiB;IAClE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,IAAI,CAAC,CAAC,cAAc,KAAK,0BAA0B;QAAE,OAAO,KAAK,CAAC;IAClE,MAAM,IAAI,GAAI,CAAC,CAAC,QAA2C,IAAI,IAAI,CAAC;IACpE,OAAO,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,EAAE,SAAS,KAAK,SAAS,CAAC;AACpE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAgC,EAChC,MAA0D;IAE1D,4EAA4E;IAC5E,uEAAuE;IACvE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACrB,6EAA6E;QAC7E,8EAA8E;QAC9E,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAI,CAAC,CAAC,QAA2C,IAAI,IAAI,CAAC;YACpE,IAAI,OAAO,IAAI,EAAE,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;QACtF,CAAC;QACD,mFAAmF;QACnF,OAAO,qBAAqB,CAAC,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,6BAA6B,CAAC,MAE5C;IACC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAqC,iBAAiB,EAAE;QAClF,0EAA0E;QAC1E,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE;QAC3D,KAAK,EAAE,GAAG;KACX,CAAC,CAAC;IACH,OAAO,uBAAuB,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;AACnE,CAAC;AAED,KAAK,UAAU,8BAA8B,CAAC,SAAiB;IAC7D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAqC,iBAAiB,EAAE;QAClF,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE;QAC9C,KAAK,EAAE,GAAG;KACX,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IAC3F,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,sBAAsB,CAAC,CAAC,CAAC,EAAE,EAAE,wEAAwE,CAAC,CAAC;YAC7G,QAAQ,EAAE,CAAC;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC,EAAE,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAC,MAEzC;IACC,MAAM,gBAAgB,CAAC;QACrB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,kBAAkB,CAAC,iBAAiB;QAChD,uEAAuE;QACvE,4EAA4E;QAC5E,uEAAuE;QACvE,oEAAoE;QACpE,gEAAgE;QAChE,WAAW,EAAE,uBAAuB,CAAC,gBAAgB;QACrD,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,cAAc,EAAE,0BAA0B;QAC1C,WAAW,EACT,wCAAwC,MAAM,CAAC,MAAM,QAAQ,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI;YACxF,oFAAoF;YACpF,mDAAmD,MAAM,CAAC,GAAG,uBAAuB;YACpF,mFAAmF;YACnF,oFAAoF;YACpF,oFAAoF;YACpF,oBAAoB;QACtB,4EAA4E;QAC5E,8EAA8E;QAC9E,QAAQ,EAAE;YACR,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,QAAQ,EAAE,MAAM,CAAC,OAAO;YACxB,SAAS,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;SAC3C;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,yBAAyB,CAAC,MAAoB,EAAE,GAAW;IACxE,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC7D,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;YACjD,IAAI,GAAG,EAAE,KAAK,EAAE,EAAE;gBAAE,OAAO,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,8CAA8C,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACzG,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/E,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,IAAI,IAAI,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,4CAA4C,MAAM,CAAC,SAAS,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACrG,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAaD,MAAM,WAAW,GAAiB;IAChC,WAAW,EAAE,6BAA6B,CAAC,gBAAgB,CAAC;IAC5D,qBAAqB,EAAE,2BAA2B;IAClD,kBAAkB,EAAE,yBAAyB;IAC7C,sBAAsB,EAAE,6BAA6B;IACrD,mBAAmB,EAAE,0BAA0B;IAC/C,uBAAuB,EAAE,8BAA8B;CACxD,CAAC;AAQF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAoB,EACpB,OAAqB,WAAW;IAEhC,MAAM,MAAM,GAAuB,EAAE,eAAe,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,mBAAmB,EAAE,CAAC,EAAE,CAAC;IACvG,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;YAC3C,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,MAAM,CAAC,eAAe,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;YACpG,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC;YAClH,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACrD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;gBACvD,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,kEAAkE;oBAClE,sEAAsE;oBACtE,iEAAiE;oBACjE,gEAAgE;oBAChE,kEAAkE;oBAClE,iCAAiC;oBACjC,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,iBAAiB,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,8FAA8F,CAAC,CAAC;oBAChK,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,CAAC,mBAAmB,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC;gBAC3I,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAC1B,GAAG,CAAC,IAAI,CAAC,mDAAmD,EAAE,CAAC,SAAS,WAAW,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,mBAAmB,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YACjJ,CAAC;iBAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,CAAC,mBAAmB,IAAI,MAAM,IAAI,CAAC,uBAAuB,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC/E,GAAG,CAAC,IAAI,CAAC,iCAAiC,EAAE,CAAC,SAAS,6CAA6C,CAAC,CAAC;YACvG,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,2BAA2B,OAAO,CAAC,EAAE,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/ci-status-git.d.ts

@@ -1,53 +0,0 @@
-/**
- * Git-native CI status reader plumbing (Reconnect CI to the loop).
- *
- * The concrete side of the credential-free CI status transport (Jeremy decision
- * 2026-07-05): CI publishes immutable per-SHA refs `refs/ci-status/<sha>/<state>`
- * using the runner's own ephemeral token; the daemon READS them over its existing
- * git-over-SSH channel with a scoped, read-only `git ls-remote` -- no API token,
- * no broad fetch, disjoint from `refs/heads/*` (branch-sync-neutral), writes
- * nothing locally. Fail-closed: any error / absent ref -> 'unknown' -> the merge
- * gate holds.
- *
- * The pure classifier + reader factory live in ci-status.ts; this module holds
- * the git IO and the opt-out knob, so ci-status.ts stays dependency-light and
- * unit-testable.
- *
- * @module ci-status-git
- */
-import type { DaemonConfig } from './types.js';
-import { type CiStatusReader } from './ci-status.js';
-/** The per-SHA CI status ref namespace. State is encoded in the ref name. */
-export declare const CI_STATUS_REF_PREFIX = "refs/ci-status";
-/**
- * List the published ci-status ref names for a SHA on the remote, via a scoped
- * read-only `git ls-remote origin <pattern>`. TWO glob depths are queried so both
- * schemes are seen: the new run-ordered refs `refs/ci-status/<sha>/<run>/<state>`
- * AND legacy `refs/ci-status/<sha>/<state>` -- each bounded to THIS sha's
- * namespace, disjoint from `refs/heads/*` (branch-sync-neutral), and re-checked
- * client-side with the prefix filter below. Returns the matched ref names; [] on
- * any git failure (fail-closed -> classifies to 'unknown' -> holds).
- */
-export declare function listCiStatusRefs(sha: string, config: DaemonConfig): string[];
-/**
- * Resolve the REMOTE integration branch tip SHA via a scoped read-only
- * `git ls-remote origin refs/heads/<integrationBranch>`. This is the SHA CI last
- * ran against on integration -- what the CI-result sensor checks. Returns null on
- * any git failure or when the ref is absent (the sensor then does nothing).
- */
-export declare function resolveRemoteIntegrationTip(config: DaemonConfig): string | null;
-/**
- * Whether the CI green-wait is engaged. Opt-OUT (default ON, loop-gate
- * semantics: '0' disables; unset/''/anything else -> enabled). Declared and
- * parsed in daemon-core env-config.ts (TELORA_CI_MERGE_WAIT). Off => the merge
- * gate is skipped entirely (pre-reconnection behavior), which is the safe
- * fallback if the CI ref-publish step is not yet deployed.
- */
-export declare function ciMergeWaitEnabled(env?: NodeJS.ProcessEnv): boolean;
-/**
- * Resolve the CI status reader to inject into the integration->main merge gate:
- * the git-native reader when the green-wait is enabled, else undefined (gate
- * skipped -> merge proceeds as before). The reader is fail-closed by construction.
- */
-export declare function resolveCiStatusReader(env?: NodeJS.ProcessEnv): CiStatusReader | undefined;
-//# sourceMappingURL=ci-status-git.d.ts.map

package/dist/ci-status-git.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ci-status-git.d.ts","sourceRoot":"","sources":["../src/ci-status-git.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAEL,KAAK,cAAc,EACpB,MAAM,gBAAgB,CAAC;AAGxB,6EAA6E;AAC7E,eAAO,MAAM,oBAAoB,mBAAmB,CAAC;AAErD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,MAAM,EAAE,CAiB5E;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,GAAG,IAAI,CAS/E;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAEhF;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,cAAc,GAAG,SAAS,CAGtG"}

package/dist/ci-status-git.js

@@ -1,89 +0,0 @@
-/**
- * Git-native CI status reader plumbing (Reconnect CI to the loop).
- *
- * The concrete side of the credential-free CI status transport (Jeremy decision
- * 2026-07-05): CI publishes immutable per-SHA refs `refs/ci-status/<sha>/<state>`
- * using the runner's own ephemeral token; the daemon READS them over its existing
- * git-over-SSH channel with a scoped, read-only `git ls-remote` -- no API token,
- * no broad fetch, disjoint from `refs/heads/*` (branch-sync-neutral), writes
- * nothing locally. Fail-closed: any error / absent ref -> 'unknown' -> the merge
- * gate holds.
- *
- * The pure classifier + reader factory live in ci-status.ts; this module holds
- * the git IO and the opt-out knob, so ci-status.ts stays dependency-light and
- * unit-testable.
- *
- * @module ci-status-git
- */
-import { runGitSync } from './git.js';
-import { createGitNativeCiStatusReader, } from './ci-status.js';
-import { loadEnvConfig } from '@telora/daemon-core';
-/** The per-SHA CI status ref namespace. State is encoded in the ref name. */
-export const CI_STATUS_REF_PREFIX = 'refs/ci-status';
-/**
- * List the published ci-status ref names for a SHA on the remote, via a scoped
- * read-only `git ls-remote origin <pattern>`. TWO glob depths are queried so both
- * schemes are seen: the new run-ordered refs `refs/ci-status/<sha>/<run>/<state>`
- * AND legacy `refs/ci-status/<sha>/<state>` -- each bounded to THIS sha's
- * namespace, disjoint from `refs/heads/*` (branch-sync-neutral), and re-checked
- * client-side with the prefix filter below. Returns the matched ref names; [] on
- * any git failure (fail-closed -> classifies to 'unknown' -> holds).
- */
-export function listCiStatusRefs(sha, config) {
-    const patterns = [
-        `${CI_STATUS_REF_PREFIX}/${sha}/*`,
-        `${CI_STATUS_REF_PREFIX}/${sha}/*/*`,
-    ];
-    const result = runGitSync(['ls-remote', 'origin', ...patterns], config.repoPath);
-    if (!result.output)
-        return [];
-    // ls-remote lines: "<objectsha>\t<refname>". Extract the ref names.
-    return result.output
-        .split('\n')
-        .map(line => line.trim())
-        .filter(Boolean)
-        .map(line => {
-        const tab = line.indexOf('\t');
-        return tab === -1 ? '' : line.slice(tab + 1).trim();
-    })
-        .filter(ref => ref.startsWith(`${CI_STATUS_REF_PREFIX}/${sha}/`));
-}
-/**
- * Resolve the REMOTE integration branch tip SHA via a scoped read-only
- * `git ls-remote origin refs/heads/<integrationBranch>`. This is the SHA CI last
- * ran against on integration -- what the CI-result sensor checks. Returns null on
- * any git failure or when the ref is absent (the sensor then does nothing).
- */
-export function resolveRemoteIntegrationTip(config) {
-    const ref = `refs/heads/${config.integrationBranch}`;
-    const result = runGitSync(['ls-remote', 'origin', ref], config.repoPath);
-    if (!result.output)
-        return null;
-    const firstLine = result.output.split('\n').map(l => l.trim()).filter(Boolean)[0];
-    if (!firstLine)
-        return null;
-    const tab = firstLine.indexOf('\t');
-    const sha = tab === -1 ? '' : firstLine.slice(0, tab).trim();
-    return /^[0-9a-f]{7,40}$/.test(sha) ? sha : null;
-}
-/**
- * Whether the CI green-wait is engaged. Opt-OUT (default ON, loop-gate
- * semantics: '0' disables; unset/''/anything else -> enabled). Declared and
- * parsed in daemon-core env-config.ts (TELORA_CI_MERGE_WAIT). Off => the merge
- * gate is skipped entirely (pre-reconnection behavior), which is the safe
- * fallback if the CI ref-publish step is not yet deployed.
- */
-export function ciMergeWaitEnabled(env = process.env) {
-    return loadEnvConfig(env).TELORA_CI_MERGE_WAIT;
-}
-/**
- * Resolve the CI status reader to inject into the integration->main merge gate:
- * the git-native reader when the green-wait is enabled, else undefined (gate
- * skipped -> merge proceeds as before). The reader is fail-closed by construction.
- */
-export function resolveCiStatusReader(env = process.env) {
-    if (!ciMergeWaitEnabled(env))
-        return undefined;
-    return createGitNativeCiStatusReader(listCiStatusRefs);
-}
-//# sourceMappingURL=ci-status-git.js.map

package/dist/ci-status-git.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ci-status-git.js","sourceRoot":"","sources":["../src/ci-status-git.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEtC,OAAO,EACL,6BAA6B,GAE9B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAErD;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,MAAoB;IAChE,MAAM,QAAQ,GAAG;QACf,GAAG,oBAAoB,IAAI,GAAG,IAAI;QAClC,GAAG,oBAAoB,IAAI,GAAG,MAAM;KACrC,CAAC;IACF,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjF,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAC9B,oEAAoE;IACpE,OAAO,MAAM,CAAC,MAAM;SACjB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SACxB,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,IAAI,CAAC,EAAE;QACV,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,CAAC,CAAC;SACD,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,oBAAoB,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC;AACtE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAAoB;IAC9D,MAAM,GAAG,GAAG,cAAc,MAAM,CAAC,iBAAiB,EAAE,CAAC;IACrD,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzE,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7D,OAAO,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACrE,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACxE,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,OAAO,6BAA6B,CAAC,gBAAgB,CAAC,CAAC;AACzD,CAAC"}

package/dist/ci-status.d.ts

@@ -1,137 +0,0 @@
-/**
- * CI run-status model + merge-gate decision -- Review Gate Hardening (Reconnect
- * CI to the loop).
- *
- * CI is the loop's only clean-environment instrument. The f1 defect merged three
- * integration->main waves while `npm ci` was structurally broken because the
- * daemon never waited on a green CI run. This module owns the SOURCE-AGNOSTIC
- * pieces of the reconnection:
- *   - `CiRunStatus`: the normalized status a SHA's CI run can be in. Every
- *     concrete source (Gitea commit-status API, a git-notes status the CI
- *     workflow writes, ...) maps onto this enum, so the decision + sensor logic
- *     below never depend on which source is wired.
- *   - `resolveCiMergeGate`: the pure integration->main merge decision (green ->
- *     proceed, pending/red -> hold, unknown -> proceed). This is the AC's
- *     test-target for the green-wait.
- *   - `CiStatusReader`: the injected seam that READS a SHA's status. Its concrete
- *     implementation (the credential-dependent Gitea call) is deliberately NOT
- *     here -- it is provided by the caller. With no reader configured, the gate
- *     never activates and the merge proceeds exactly as before (safe default).
- *
- * Keeping this module pure + reader-injected means the decision and sensor logic
- * are fully unit-testable without a live registry, and the one part that needs an
- * infra/credential decision (the concrete reader) is a single, isolated seam.
- *
- * @module ci-status
- */
-import type { DaemonConfig } from './types.js';
-/**
- * Normalized CI run status for a SHA.
- *   - green   -- a CI run for this SHA completed successfully.
- *   - pending -- a run exists but has not finished (queued / running).
- *   - red     -- a run for this SHA finished failed.
- *   - unknown -- no status could be determined (no run found, no reader
- *                configured, or the source was unreachable). Treated as
- *                non-blocking so a missing/unavailable signal never wedges merges.
- */
-export type CiRunStatus = 'green' | 'pending' | 'red' | 'unknown';
-/** The integration->main merge-gate decision derived from a SHA's CI status. */
-export interface CiMergeGateDecision {
-    /** Whether the integration->main merge may proceed now. */
-    proceed: boolean;
-    /** The status the decision was derived from. */
-    status: CiRunStatus;
-    /** Human-readable reason (logged; surfaced in the session exit suffix). */
-    reason: string;
-}
-/**
- * Pure merge-gate decision: should integration->main proceed given the merged
- * SHA's CI status? FAIL-CLOSED (Jeremy decision 2026-07-05): only an explicit
- * green proceeds; everything else HOLDS.
- *
- *   green   -> proceed (the clean-environment instrument is satisfied).
- *   pending -> HOLD (a run is in flight; wait for it to finish before merging).
- *   red     -> HOLD (do not merge a red SHA to main).
- *   unknown -> HOLD (no determinable green status == not green; a missing or
- *              unreadable status ref must not let an unverified SHA reach main).
- *
- * NOTE: this fail-closed model only engages when a CI status READER is wired
- * into the merge path. With no reader configured the merge path SKIPS the gate
- * entirely (runCiMergeToMain), so a focus with CI enabled but no status source
- * is unaffected -- the fail-closed hold applies once a reader exists and reports
- * a non-green (or absent) status for the merged SHA.
- */
-export declare function resolveCiMergeGate(status: CiRunStatus): CiMergeGateDecision;
-/**
- * Classify a git-native CI status from the set of ci-status ref names published
- * for a SHA. The STATE is encoded in the ref NAME (immutable per-SHA), so no
- * object content read is needed. Pure -- the caller supplies the ref names from a
- * scoped `git ls-remote` / fetch.
- *
- * MOST-RECENT-RUN-WINS. The publisher encodes run order in the ref PATH
- * (`refs/ci-status/<sha>/<runNumber>/<state>`), so a later GREEN run's ref
- * outranks an earlier FAILURE ref for the same sha. This fixes the "a failure
- * ref outranks a success ref, forever" trap: ref names carried no order, so a
- * sha that once published a failure (an infra blip, or an evicted run) stayed
- * red permanently even after a real green run of the same sha. The order comes
- * from the workflow, never inferred by this reader.
- *
- * FAIL-CLOSED throughout: an empty set / unrecognized suffix -> 'unknown'
- * (holds); among the highest run number, RED wins on a tie (the rare same-run
- * re-run that published both states resolves to red, never a false green).
- *
- * LEGACY refs (`refs/ci-status/<sha>/<state>`, no run number) carry no order; if
- * ONLY legacy refs exist we fall back to the original fail-closed precedence
- * (failure outranks success outranks pending), preserving prior behavior for
- * shas published before the run-ordered scheme deployed.
- */
-export declare function classifyGitNativeCiStatus(refNames: readonly string[]): CiRunStatus;
-/** Parameters passed to a CI status reader. */
-export interface CiStatusReadParams {
-    /** The SHA whose CI run status to read (the integration tip about to merge). */
-    sha: string;
-    /** The integration branch name (the ref CI runs against). */
-    integrationBranch: string;
-    /** Product-scoped daemon config (repoPath, remotes, per-product CI config). */
-    config: DaemonConfig;
-}
-/**
- * Injected seam that reads a SHA's normalized CI run status. The concrete
- * implementation -- a Gitea commit-status / actions-run API call, or a read of a
- * status the CI workflow published over git -- is provided by the caller and is
- * the ONE part gated on the infra/credential decision. A reader that cannot
- * determine a status returns 'unknown' (never throws for a normal miss).
- */
-export type CiStatusReader = (params: CiStatusReadParams) => Promise<CiRunStatus>;
-/**
- * Read the published `refs/ci-status/<sha>/<state>` ref names for a SHA from the
- * remote, over the daemon's existing git-over-SSH channel. Scoped + branch-sync-
- * neutral BY CONSTRUCTION: it queries ONLY the disjoint `refs/ci-status/*`
- * namespace (never `refs/heads/*`), writes nothing locally (ls-remote is a
- * read-only remote query -- no FETCH_HEAD, no local ref update), so it cannot
- * move integration/main or perturb the merge-back. Returns [] on any git error
- * (fail-closed -> classifies to 'unknown' -> holds). Injected so the reader is
- * unit-testable without a live remote.
- */
-export type CiStatusRefLister = (sha: string, config: DaemonConfig) => string[];
-/**
- * Build the git-native CI status reader. Composes the scoped ref lister with the
- * pure classifier. FAIL-CLOSED throughout: any git failure or absent ref yields
- * 'unknown', which the merge gate holds on.
- */
-/** The action the CI-result sensor should take for the integration branch. */
-export type CiSensorAction = 'file' | 'resolve' | 'none';
-/**
- * Pure CI-result sensor decision: given the integration tip's CI status and
- * whether an open ci_run_red escalation already exists, decide whether to file a
- * new escalation, resolve the open one, or do nothing.
- *
- *   red   + no open  -> 'file'    (a failing run becomes signal, once).
- *   green + open     -> 'resolve' (the branch recovered; close the escalation).
- *   otherwise        -> 'none'    (red+open: already signalled; pending/unknown:
- *                                  nothing actionable -- do NOT resolve on
- *                                  unknown, that would hide an unresolved red).
- */
-export declare function decideCiSensorAction(status: CiRunStatus, hasOpenRedEscalation: boolean): CiSensorAction;
-export declare function createGitNativeCiStatusReader(lister: CiStatusRefLister): CiStatusReader;
-//# sourceMappingURL=ci-status.d.ts.map

package/dist/ci-status.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ci-status.d.ts","sourceRoot":"","sources":["../src/ci-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C;;;;;;;;GAQG;AACH,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,SAAS,GAAG,KAAK,GAAG,SAAS,CAAC;AAElE,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,2DAA2D;IAC3D,OAAO,EAAE,OAAO,CAAC;IACjB,gDAAgD;IAChD,MAAM,EAAE,WAAW,CAAC;IACpB,2EAA2E;IAC3E,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,GAAG,mBAAmB,CAY3E;AA8BD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,WAAW,CAuClF;AAED,+CAA+C;AAC/C,MAAM,WAAW,kBAAkB;IACjC,gFAAgF;IAChF,GAAG,EAAE,MAAM,CAAC;IACZ,6DAA6D;IAC7D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,+EAA+E;IAC/E,MAAM,EAAE,YAAY,CAAC;CACtB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,kBAAkB,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;AAElF;;;;;;;;;GASG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,KAAK,MAAM,EAAE,CAAC;AAEhF;;;;GAIG;AACH,8EAA8E;AAC9E,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;AAEzD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,WAAW,EAAE,oBAAoB,EAAE,OAAO,GAAG,cAAc,CAIvG;AAED,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,iBAAiB,GAAG,cAAc,CAWvF"}

package/dist/ci-status.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ci-status.js","sourceRoot":"","sources":["../src/ci-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAyBH;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAmB;IACpD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,OAAO;YACV,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;QAC1E,KAAK,SAAS;YACZ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,4EAA4E,EAAE,CAAC;QAC1H,KAAK,KAAK;YACR,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,wFAAwF,EAAE,CAAC;QACtI,KAAK,SAAS,CAAC;QACf;YACE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,qFAAqF,EAAE,CAAC;IAChJ,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,SAAS,oBAAoB,CAAC,GAAW;IACvC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7F,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,OAAO,CAAC;IAClG,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IACtG,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,KAAK,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,yBAAyB,CAAC,QAA2B;IACnE,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC;IACnB,MAAM,YAAY,GAAG,IAAI,GAAG,EAAe,CAAC;IAC5C,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAE7B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,IAAI,KAAK,KAAK,KAAK;gBAAE,YAAY,GAAG,IAAI,CAAC;iBACpC,IAAI,KAAK,KAAK,OAAO;gBAAE,cAAc,GAAG,IAAI,CAAC;;gBAC7C,gBAAgB,GAAG,IAAI,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;YACtB,SAAS,GAAG,KAAK,CAAC;YAClB,YAAY,CAAC,KAAK,EAAE,CAAC;YACrB,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACnB,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1C,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,OAAO,CAAC;QAC9C,IAAI,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAClD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,yDAAyD;IACzD,IAAI,YAAY;QAAE,OAAO,KAAK,CAAC;IAC/B,IAAI,cAAc;QAAE,OAAO,OAAO,CAAC;IACnC,IAAI,gBAAgB;QAAE,OAAO,SAAS,CAAC;IACvC,OAAO,SAAS,CAAC;AACnB,CAAC;AAyCD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAmB,EAAE,oBAA6B;IACrF,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,oBAAoB;QAAE,OAAO,MAAM,CAAC;IAC7D,IAAI,MAAM,KAAK,OAAO,IAAI,oBAAoB;QAAE,OAAO,SAAS,CAAC;IACjE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,MAAyB;IACrE,OAAO,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE;QAC/B,IAAI,IAAI,GAAa,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;YACrE,IAAI,GAAG,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,yBAAyB,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC,CAAC;AACJ,CAAC"}

package/dist/circuit-wedge-watcher.d.ts

@@ -1,48 +0,0 @@
-/**
- * Wedged-circuit watcher (Daemon Resilience Hardening, injection #13).
- *
- * Periodically inspects the control-plane circuit breakers and, when one has
- * been held open past a threshold, emits an error-severity health event naming
- * the wedged circuit. Without this signal the daemon can sit silently idle --
- * exactly the 2026-05-28 incident, where a control-plane circuit stayed open
- * ~2h and no team could spawn, with nothing surfacing the cause to the operator.
- *
- * Open-duration is tracked here (by sampling getState()) rather than inside the
- * breaker, so the watcher depends only on the already-published CircuitBreaker
- * surface and all new logic lives in the daemon package.
- */
-import type { CircuitBreaker } from '@telora/daemon-core';
-import { type ConcernClass } from './queries/shared.js';
-export interface WedgeTracking {
-    /** concern -> timestamp (ms) it was first observed continuously open. */
-    openSince: Map<string, number>;
-    /** concern -> wedge already reported for the current open episode. */
-    reported: Set<string>;
-}
-export declare function createWedgeTracking(): WedgeTracking;
-/**
- * Inspect control-plane breakers and return the concerns NEWLY detected as
- * wedged (open continuously >= thresholdMs and not yet reported this episode).
- *
- * Pure with respect to `now` (injectable clock) and `tracking` (caller-owned
- * state), so it is unit-testable with a simulated clock and a real
- * CircuitBreaker. Fires once per wedge episode; a recovery (breaker closes)
- * clears the tracking so a later wedge re-fires.
- */
-export declare function detectWedgedControlPlaneCircuits(breakers: Record<string, CircuitBreaker>, concernClass: Record<string, ConcernClass>, thresholdMs: number, tracking: WedgeTracking, now?: number): string[];
-/**
- * Emit an error-severity health event for each newly-wedged concern. The event
- * flows into heartbeat metadata for dashboard visibility (the operator signal).
- */
-export declare function emitWedgedCircuitHealthEvents(concerns: string[]): void;
-/**
- * Start the periodic wedged-circuit watcher. Idempotent-ish: a prior timer is
- * cleared first. The interval body is wrapped by safeInterval so a throw cannot
- * crash the process.
- */
-export declare function startCircuitWedgeWatcher(opts?: {
-    thresholdMs?: number;
-    intervalMs?: number;
-}): void;
-export declare function stopCircuitWedgeWatcher(): void;
-//# sourceMappingURL=circuit-wedge-watcher.d.ts.map

package/dist/circuit-wedge-watcher.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"circuit-wedge-watcher.d.ts","sourceRoot":"","sources":["../src/circuit-wedge-watcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,EAAwC,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAO9F,MAAM,WAAW,aAAa;IAC5B,yEAAyE;IACzE,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,sEAAsE;IACtE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACvB;AAED,wBAAgB,mBAAmB,IAAI,aAAa,CAEnD;AAED;;;;;;;;GAQG;AACH,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,EACxC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,EAC1C,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,aAAa,EACvB,GAAG,GAAE,MAAmB,GACvB,MAAM,EAAE,CAuBV;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAYtE;AAKD;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAkBnG;AAED,wBAAgB,uBAAuB,IAAI,IAAI,CAK9C"}