@telora/daemon 0.21.83 → 0.21.134

package/dist/ci/ci-status.d.ts

@@ -25,6 +25,7 @@
  * @module ci-status
  */
 import type { DaemonConfig } from '../types/index.js';
+import { type WaitReachability } from '../delivery/wait-reachability.js';
 /**
  * Normalized CI run status for a SHA.
  *   - green   -- a CI run for this SHA completed successfully.
@@ -43,6 +44,19 @@ export interface CiMergeGateDecision {
     status: CiRunStatus;
     /** Human-readable reason (logged; surfaced in the session exit suffix). */
     reason: string;
+    /**
+     * Reachability of the HELD wait: can the awaited CI condition still fire?
+     * Populated only for a hold (proceed=false) that a caller has classified with
+     * the merged sha via {@link classifyCiMergeWait}; absent on the pure
+     * status-only decision from {@link resolveCiMergeGate}. `reachable:false` marks
+     * the incident's trap -- a settled non-green result on an UNCHANGED sha that
+     * cannot self-clear without a NEW commit, so holding for it is a stall, not
+     * patience. `reachable:true` marks a run still in flight (the CI runner can
+     * still finish it).
+     */
+    reachable?: boolean;
+    /** The reachability reason (from the wait-reachability classifier), when set. */
+    reachabilityReason?: string;
 }
 /**
  * Pure merge-gate decision: should integration->main proceed given the merged
@@ -62,28 +76,66 @@ export interface CiMergeGateDecision {
  * a non-green (or absent) status for the merged SHA.
  */
 export declare function resolveCiMergeGate(status: CiRunStatus): CiMergeGateDecision;
+/**
+ * Classify whether a HELD CI merge wait can still fire, given the merged SHA.
+ * This is the reachability distinction the plain status-only gate cannot make:
+ * the merge gate correctly HOLDS on pending / red / unknown, but only some of
+ * those waits can still be satisfied without new input.
+ *
+ *   - pending -> REACHABLE: a run is in flight; the CI runner (another actor)
+ *     can still finish it and turn the SHA green.
+ *   - red     -> UNREACHABLE: a settled failure recorded for THIS sha. It never
+ *     re-evaluates for the same commit (refs/ci-status/<sha> is immutable per
+ *     sha), so waiting for it to "turn green" cannot succeed without a NEW
+ *     commit. This is the 2026-08-17 "CI-red result auto-resolving" trap: a
+ *     stall that reads as patience.
+ *   - unknown -> REACHABLE (conservative): no status could be determined, so a
+ *     run could still appear. We do NOT declare an unknown wait dead -- only a
+ *     recorded non-green RESULT is a static fact.
+ *   - green   -> not held; classified REACHABLE for totality (never reached on a
+ *     hold path).
+ *
+ * Pure. Reuses the shared wait-reachability classifier so the CI hold speaks the
+ * same vocabulary as every other wait.
+ */
+export declare function classifyCiMergeWait(status: CiRunStatus, sha: string): WaitReachability;
 /**
  * Classify a git-native CI status from the set of ci-status ref names published
  * for a SHA. The STATE is encoded in the ref NAME (immutable per-SHA), so no
  * object content read is needed. Pure -- the caller supplies the ref names from a
  * scoped `git ls-remote` / fetch.
  *
- * MOST-RECENT-RUN-WINS. The publisher encodes run order in the ref PATH
- * (`refs/ci-status/<sha>/<runNumber>/<state>`), so a later GREEN run's ref
- * outranks an earlier FAILURE ref for the same sha. This fixes the "a failure
- * ref outranks a success ref, forever" trap: ref names carried no order, so a
- * sha that once published a failure (an infra blip, or an evicted run) stayed
- * red permanently even after a real green run of the same sha. The order comes
- * from the workflow, never inferred by this reader.
+ * COMPLETED-GREEN-WINS across runs. The publisher encodes run order in the ref
+ * PATH (`refs/ci-status/<sha>/<runNumber>/<state>`) and publishes `success` ONLY
+ * when the whole suite (ci AND e2e) completed green. A completed green run is
+ * therefore unforgeable proof the SHA's tree is sound: a genuinely broken tree
+ * can never publish green, and a run destroyed mid-suite can never reach a green
+ * e2e result. So among the distinct runs of one sha, ANY completed green run
+ * outranks a red run of the same sha -- the red is the environmental casualty
+ * (an evicted run, or one whose Postgres another overlapping run force-removed
+ * mid-suite), not the tree.
+ *
+ * This REPLACES the earlier most-recent-run-wins rule, which the 2026-08-18
+ * shared-runner incident disproved: run 3838's live database was force-removed
+ * by an overlapping run 3837, so 3838 published a failure -- and because the
+ * DESTROYED run carried the HIGHER run number, "most recent wins" let its red
+ * pin a sound sha red. Run-id order did not even match start order there (3838
+ * started before 3837), so "most recent run" was never reliably most-recent.
+ * Completed-green does not depend on run-number order at all.
  *
- * FAIL-CLOSED throughout: an empty set / unrecognized suffix -> 'unknown'
- * (holds); among the highest run number, RED wins on a tie (the rare same-run
- * re-run that published both states resolves to red, never a false green).
+ * FAIL-CLOSED throughout: an empty set / unrecognized suffix / only-pending ->
+ * 'unknown'/'pending' (holds -- absent or ambiguous-without-a-completed-green
+ * evidence never passes). Within a SINGLE run, RED still wins a green/red tie
+ * (the rare same-run re-run that published both states resolves that run to red,
+ * never a false green); a sha with NO green run anywhere resolves to red, so a
+ * truly broken tree is never masked. The order/verdict comes from the workflow,
+ * never inferred by this reader.
  *
  * LEGACY refs (`refs/ci-status/<sha>/<state>`, no run number) carry no order; if
  * ONLY legacy refs exist we fall back to the original fail-closed precedence
  * (failure outranks success outranks pending), preserving prior behavior for
- * shas published before the run-ordered scheme deployed.
+ * shas published before the run-ordered scheme deployed. Any ordered ref takes
+ * precedence over legacy refs for the same sha.
  */
 export declare function classifyGitNativeCiStatus(refNames: readonly string[]): CiRunStatus;
 /** Parameters passed to a CI status reader. */

package/dist/ci/ci-status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ci-status.d.ts","sourceRoot":"","sources":["../../src/ci/ci-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD;;;;;;;;GAQG;AACH,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,SAAS,GAAG,KAAK,GAAG,SAAS,CAAC;AAElE,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,2DAA2D;IAC3D,OAAO,EAAE,OAAO,CAAC;IACjB,gDAAgD;IAChD,MAAM,EAAE,WAAW,CAAC;IACpB,2EAA2E;IAC3E,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,GAAG,mBAAmB,CAY3E;AA8BD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,WAAW,CAuClF;AAED,+CAA+C;AAC/C,MAAM,WAAW,kBAAkB;IACjC,gFAAgF;IAChF,GAAG,EAAE,MAAM,CAAC;IACZ,6DAA6D;IAC7D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,+EAA+E;IAC/E,MAAM,EAAE,YAAY,CAAC;CACtB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,kBAAkB,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;AAElF;;;;;;;;;GASG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,KAAK,MAAM,EAAE,CAAC;AAEhF;;;;GAIG;AACH,8EAA8E;AAC9E,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;AAEzD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,WAAW,EAAE,oBAAoB,EAAE,OAAO,GAAG,cAAc,CAIvG;AAED,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,iBAAiB,GAAG,cAAc,CAWvF"}
+{"version":3,"file":"ci-status.d.ts","sourceRoot":"","sources":["../../src/ci/ci-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAIL,KAAK,gBAAgB,EACtB,MAAM,kCAAkC,CAAC;AAE1C;;;;;;;;GAQG;AACH,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,SAAS,GAAG,KAAK,GAAG,SAAS,CAAC;AAElE,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,2DAA2D;IAC3D,OAAO,EAAE,OAAO,CAAC;IACjB,gDAAgD;IAChD,MAAM,EAAE,WAAW,CAAC;IACpB,2EAA2E;IAC3E,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;;OASG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,iFAAiF;IACjF,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,GAAG,mBAAmB,CAY3E;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAUtF;AA8BD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,WAAW,CAuDlF;AAED,+CAA+C;AAC/C,MAAM,WAAW,kBAAkB;IACjC,gFAAgF;IAChF,GAAG,EAAE,MAAM,CAAC;IACZ,6DAA6D;IAC7D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,+EAA+E;IAC/E,MAAM,EAAE,YAAY,CAAC;CACtB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,kBAAkB,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;AAElF;;;;;;;;;GASG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,KAAK,MAAM,EAAE,CAAC;AAEhF;;;;GAIG;AACH,8EAA8E;AAC9E,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;AAEzD;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,WAAW,EAAE,oBAAoB,EAAE,OAAO,GAAG,cAAc,CAIvG;AAED,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,iBAAiB,GAAG,cAAc,CAWvF"}

package/dist/ci/ci-status.js

@@ -24,6 +24,7 @@
  *
  * @module ci-status
  */
+import { classifyWaitReachability, ciRunPendingWait, recordedCiResultWait, } from '../delivery/wait-reachability.js';
 /**
  * Pure merge-gate decision: should integration->main proceed given the merged
  * SHA's CI status? FAIL-CLOSED (Jeremy decision 2026-07-05): only an explicit
@@ -54,6 +55,39 @@ export function resolveCiMergeGate(status) {
             return { proceed: false, status: 'unknown', reason: 'CI status unavailable for the merged SHA -- holding (fail-closed: unknown != green)' };
     }
 }
+/**
+ * Classify whether a HELD CI merge wait can still fire, given the merged SHA.
+ * This is the reachability distinction the plain status-only gate cannot make:
+ * the merge gate correctly HOLDS on pending / red / unknown, but only some of
+ * those waits can still be satisfied without new input.
+ *
+ *   - pending -> REACHABLE: a run is in flight; the CI runner (another actor)
+ *     can still finish it and turn the SHA green.
+ *   - red     -> UNREACHABLE: a settled failure recorded for THIS sha. It never
+ *     re-evaluates for the same commit (refs/ci-status/<sha> is immutable per
+ *     sha), so waiting for it to "turn green" cannot succeed without a NEW
+ *     commit. This is the 2026-08-17 "CI-red result auto-resolving" trap: a
+ *     stall that reads as patience.
+ *   - unknown -> REACHABLE (conservative): no status could be determined, so a
+ *     run could still appear. We do NOT declare an unknown wait dead -- only a
+ *     recorded non-green RESULT is a static fact.
+ *   - green   -> not held; classified REACHABLE for totality (never reached on a
+ *     hold path).
+ *
+ * Pure. Reuses the shared wait-reachability classifier so the CI hold speaks the
+ * same vocabulary as every other wait.
+ */
+export function classifyCiMergeWait(status, sha) {
+    switch (status) {
+        case 'red':
+            return classifyWaitReachability(recordedCiResultWait(sha, 'red'));
+        case 'pending':
+        case 'unknown':
+        case 'green':
+        default:
+            return classifyWaitReachability(ciRunPendingWait(sha));
+    }
+}
 /** The recognized state a ci-status ref suffix encodes, or null if unrecognized. */
 function ciStateFromRefSuffix(ref) {
     if (ref.endsWith('/failure') || ref.endsWith('/error') || ref.endsWith('/red'))
@@ -89,26 +123,42 @@ function ciRunOrderFromRef(ref) {
  * object content read is needed. Pure -- the caller supplies the ref names from a
  * scoped `git ls-remote` / fetch.
  *
- * MOST-RECENT-RUN-WINS. The publisher encodes run order in the ref PATH
- * (`refs/ci-status/<sha>/<runNumber>/<state>`), so a later GREEN run's ref
- * outranks an earlier FAILURE ref for the same sha. This fixes the "a failure
- * ref outranks a success ref, forever" trap: ref names carried no order, so a
- * sha that once published a failure (an infra blip, or an evicted run) stayed
- * red permanently even after a real green run of the same sha. The order comes
- * from the workflow, never inferred by this reader.
+ * COMPLETED-GREEN-WINS across runs. The publisher encodes run order in the ref
+ * PATH (`refs/ci-status/<sha>/<runNumber>/<state>`) and publishes `success` ONLY
+ * when the whole suite (ci AND e2e) completed green. A completed green run is
+ * therefore unforgeable proof the SHA's tree is sound: a genuinely broken tree
+ * can never publish green, and a run destroyed mid-suite can never reach a green
+ * e2e result. So among the distinct runs of one sha, ANY completed green run
+ * outranks a red run of the same sha -- the red is the environmental casualty
+ * (an evicted run, or one whose Postgres another overlapping run force-removed
+ * mid-suite), not the tree.
  *
- * FAIL-CLOSED throughout: an empty set / unrecognized suffix -> 'unknown'
- * (holds); among the highest run number, RED wins on a tie (the rare same-run
- * re-run that published both states resolves to red, never a false green).
+ * This REPLACES the earlier most-recent-run-wins rule, which the 2026-08-18
+ * shared-runner incident disproved: run 3838's live database was force-removed
+ * by an overlapping run 3837, so 3838 published a failure -- and because the
+ * DESTROYED run carried the HIGHER run number, "most recent wins" let its red
+ * pin a sound sha red. Run-id order did not even match start order there (3838
+ * started before 3837), so "most recent run" was never reliably most-recent.
+ * Completed-green does not depend on run-number order at all.
+ *
+ * FAIL-CLOSED throughout: an empty set / unrecognized suffix / only-pending ->
+ * 'unknown'/'pending' (holds -- absent or ambiguous-without-a-completed-green
+ * evidence never passes). Within a SINGLE run, RED still wins a green/red tie
+ * (the rare same-run re-run that published both states resolves that run to red,
+ * never a false green); a sha with NO green run anywhere resolves to red, so a
+ * truly broken tree is never masked. The order/verdict comes from the workflow,
+ * never inferred by this reader.
  *
  * LEGACY refs (`refs/ci-status/<sha>/<state>`, no run number) carry no order; if
  * ONLY legacy refs exist we fall back to the original fail-closed precedence
  * (failure outranks success outranks pending), preserving prior behavior for
- * shas published before the run-ordered scheme deployed.
+ * shas published before the run-ordered scheme deployed. Any ordered ref takes
+ * precedence over legacy refs for the same sha.
  */
 export function classifyGitNativeCiStatus(refNames) {
-    let bestOrder = -1;
-    const statesAtBest = new Set();
+    // Collect the published states per run number so each run resolves to one
+    // verdict (red wins a same-run tie) before the cross-run comparison.
+    const statesByRun = new Map();
     let sawLegacyRed = false;
     let sawLegacyGreen = false;
     let sawLegacyPending = false;
@@ -127,22 +177,39 @@ export function classifyGitNativeCiStatus(refNames) {
                 sawLegacyPending = true;
             continue;
         }
-        if (order > bestOrder) {
-            bestOrder = order;
-            statesAtBest.clear();
-            statesAtBest.add(state);
-        }
-        else if (order === bestOrder) {
-            statesAtBest.add(state);
+        let set = statesByRun.get(order);
+        if (!set) {
+            set = new Set();
+            statesByRun.set(order, set);
         }
+        set.add(state);
     }
-    // Most-recent ordered run decides (red wins a same-run tie, fail-closed).
-    if (bestOrder >= 0) {
-        if (statesAtBest.has('red'))
-            return 'red';
-        if (statesAtBest.has('green'))
-            return 'green';
-        if (statesAtBest.has('pending'))
+    if (statesByRun.size > 0) {
+        // Resolve each run to a single verdict (red wins a same-run tie, fail-closed),
+        // then apply completed-green-wins across runs.
+        let anyGreen = false;
+        let anyRed = false;
+        let anyPending = false;
+        for (const set of statesByRun.values()) {
+            const runVerdict = set.has('red')
+                ? 'red'
+                : set.has('green')
+                    ? 'green'
+                    : set.has('pending')
+                        ? 'pending'
+                        : 'unknown';
+            if (runVerdict === 'green')
+                anyGreen = true;
+            else if (runVerdict === 'red')
+                anyRed = true;
+            else if (runVerdict === 'pending')
+                anyPending = true;
+        }
+        if (anyGreen)
+            return 'green'; // a completed green run proves the tree sound
+        if (anyRed)
+            return 'red'; // no green anywhere -> a real gate red holds
+        if (anyPending)
             return 'pending';
         return 'unknown';
     }

package/dist/ci/ci-status.js.map

@@ -1 +1 @@
-{"version":3,"file":"ci-status.js","sourceRoot":"","sources":["../../src/ci/ci-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAyBH;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAmB;IACpD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,OAAO;YACV,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;QAC1E,KAAK,SAAS;YACZ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,4EAA4E,EAAE,CAAC;QAC1H,KAAK,KAAK;YACR,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,wFAAwF,EAAE,CAAC;QACtI,KAAK,SAAS,CAAC;QACf;YACE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,qFAAqF,EAAE,CAAC;IAChJ,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,SAAS,oBAAoB,CAAC,GAAW;IACvC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7F,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,OAAO,CAAC;IAClG,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IACtG,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,KAAK,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,yBAAyB,CAAC,QAA2B;IACnE,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC;IACnB,MAAM,YAAY,GAAG,IAAI,GAAG,EAAe,CAAC;IAC5C,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAE7B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,IAAI,KAAK,KAAK,KAAK;gBAAE,YAAY,GAAG,IAAI,CAAC;iBACpC,IAAI,KAAK,KAAK,OAAO;gBAAE,cAAc,GAAG,IAAI,CAAC;;gBAC7C,gBAAgB,GAAG,IAAI,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;YACtB,SAAS,GAAG,KAAK,CAAC;YAClB,YAAY,CAAC,KAAK,EAAE,CAAC;YACrB,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACnB,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1C,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,OAAO,CAAC;QAC9C,IAAI,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAClD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,yDAAyD;IACzD,IAAI,YAAY;QAAE,OAAO,KAAK,CAAC;IAC/B,IAAI,cAAc;QAAE,OAAO,OAAO,CAAC;IACnC,IAAI,gBAAgB;QAAE,OAAO,SAAS,CAAC;IACvC,OAAO,SAAS,CAAC;AACnB,CAAC;AAyCD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAmB,EAAE,oBAA6B;IACrF,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,oBAAoB;QAAE,OAAO,MAAM,CAAC;IAC7D,IAAI,MAAM,KAAK,OAAO,IAAI,oBAAoB;QAAE,OAAO,SAAS,CAAC;IACjE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,MAAyB;IACrE,OAAO,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE;QAC/B,IAAI,IAAI,GAAa,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;YACrE,IAAI,GAAG,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,yBAAyB,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"ci-status.js","sourceRoot":"","sources":["../../src/ci/ci-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGH,OAAO,EACL,wBAAwB,EACxB,gBAAgB,EAChB,oBAAoB,GAErB,MAAM,kCAAkC,CAAC;AAoC1C;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAmB;IACpD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,OAAO;YACV,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;QAC1E,KAAK,SAAS;YACZ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,4EAA4E,EAAE,CAAC;QAC1H,KAAK,KAAK;YACR,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,wFAAwF,EAAE,CAAC;QACtI,KAAK,SAAS,CAAC;QACf;YACE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,qFAAqF,EAAE,CAAC;IAChJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAmB,EAAE,GAAW;IAClE,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,KAAK;YACR,OAAO,wBAAwB,CAAC,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QACpE,KAAK,SAAS,CAAC;QACf,KAAK,SAAS,CAAC;QACf,KAAK,OAAO,CAAC;QACb;YACE,OAAO,wBAAwB,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,SAAS,oBAAoB,CAAC,GAAW;IACvC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7F,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,OAAO,CAAC;IAClG,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IACtG,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,KAAK,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAM,UAAU,yBAAyB,CAAC,QAA2B;IACnE,0EAA0E;IAC1E,qEAAqE;IACrE,MAAM,WAAW,GAAG,IAAI,GAAG,EAA4B,CAAC;IACxD,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAE7B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,IAAI,KAAK,KAAK,KAAK;gBAAE,YAAY,GAAG,IAAI,CAAC;iBACpC,IAAI,KAAK,KAAK,OAAO;gBAAE,cAAc,GAAG,IAAI,CAAC;;gBAC7C,gBAAgB,GAAG,IAAI,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,IAAI,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,GAAG,IAAI,GAAG,EAAe,CAAC;YAC7B,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,WAAW,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACzB,+EAA+E;QAC/E,+CAA+C;QAC/C,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,MAAM,UAAU,GAAgB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;gBAC5C,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;oBAChB,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;wBAClB,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,SAAS,CAAC;YAClB,IAAI,UAAU,KAAK,OAAO;gBAAE,QAAQ,GAAG,IAAI,CAAC;iBACvC,IAAI,UAAU,KAAK,KAAK;gBAAE,MAAM,GAAG,IAAI,CAAC;iBACxC,IAAI,UAAU,KAAK,SAAS;gBAAE,UAAU,GAAG,IAAI,CAAC;QACvD,CAAC;QACD,IAAI,QAAQ;YAAE,OAAO,OAAO,CAAC,CAAC,8CAA8C;QAC5E,IAAI,MAAM;YAAE,OAAO,KAAK,CAAC,CAAC,6CAA6C;QACvE,IAAI,UAAU;YAAE,OAAO,SAAS,CAAC;QACjC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,yDAAyD;IACzD,IAAI,YAAY;QAAE,OAAO,KAAK,CAAC;IAC/B,IAAI,cAAc;QAAE,OAAO,OAAO,CAAC;IACnC,IAAI,gBAAgB;QAAE,OAAO,SAAS,CAAC;IACvC,OAAO,SAAS,CAAC;AACnB,CAAC;AAyCD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAmB,EAAE,oBAA6B;IACrF,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,oBAAoB;QAAE,OAAO,MAAM,CAAC;IAC7D,IAAI,MAAM,KAAK,OAAO,IAAI,oBAAoB;QAAE,OAAO,SAAS,CAAC;IACjE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,MAAyB;IACrE,OAAO,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE;QAC/B,IAAI,IAAI,GAAa,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;YACrE,IAAI,GAAG,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,yBAAyB,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC,CAAC;AACJ,CAAC"}

package/dist/completion/coverage-drift-state.d.ts

@@ -14,10 +14,37 @@
  * the exact state it would approve). First drift arms a full-pass re-review (no
  * escalation); a second consecutive drift files ONE needs_operator escalation
  * (deduped in the DB by kind+focus). Cleared on a coverage-complete exit and on
- * the coverage-escalation re-arm edge. In-memory (a restart resets to a fresh
- * respawn allowance -- the safe direction; it never over-escalates).
+ * the coverage-escalation re-arm edge.
+ *
+ * DURABLE: the count is a spent budget toward the review_coverage_incomplete
+ * escalation, persisted to product_focuses.below_coverage_drift_count so the
+ * second drift is still reached when a daemon re-exec falls between the two --
+ * "a spent budget stays spent" (TEL-2). recordBelowCoverageDrift /
+ * resetCoverageDriftState write through; hydrateBelowCoverageDriftCount restores
+ * it on boot. (Mutate ONLY through those functions so the write-through holds --
+ * the raw Map export remains for the read/reset call sites.)
  */
 export declare const belowCoverageDriftCounts: Map<string, number>;
+/**
+ * Durable write-through seam for the below-coverage drift count. Registered once
+ * at boot (setCoverageDriftPersister); called best-effort (fire-and-forget).
+ * Unset in tests -> pure in-memory.
+ */
+export type CoverageDriftPersister = (focusId: string, count: number) => void;
+/** Register (or clear, with null) the durable write-through persister at boot. */
+export declare function setCoverageDriftPersister(fn: CoverageDriftPersister | null): void;
+/**
+ * Increment a focus's consecutive below-coverage drift streak by one, write it
+ * through durably, and return the new streak. The single mutation path for the
+ * increment so the durable column cannot drift from the in-memory Map.
+ */
+export declare function recordBelowCoverageDrift(focusId: string): number;
+/**
+ * Restore a focus's below-coverage drift count from its persisted column, the
+ * first time the daemon sees the focus after a (re-)start. Non-clobbering +
+ * first-sight-only; skips a focus with no persisted streak.
+ */
+export declare function hydrateBelowCoverageDriftCount(focusId: string, count: number): void;
 /**
  * Focuses whose NEXT review must be a full pass (drift was detected, so the
  * prior coverage cannot be trusted incrementally). Consumed + cleared by the

package/dist/completion/coverage-drift-state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coverage-drift-state.d.ts","sourceRoot":"","sources":["../../src/completion/coverage-drift-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,qBAA4B,CAAC;AAElE;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,aAAoB,CAAC;AAE5D;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAG7D;AAED,wDAAwD;AACxD,wBAAgB,iCAAiC,IAAI,IAAI,CAGxD"}
+{"version":3,"file":"coverage-drift-state.d.ts","sourceRoot":"","sources":["../../src/completion/coverage-drift-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,wBAAwB,qBAA4B,CAAC;AAElE;;;;GAIG;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;AAI9E,kFAAkF;AAClF,wBAAgB,yBAAyB,CAAC,EAAE,EAAE,sBAAsB,GAAG,IAAI,GAAG,IAAI,CAEjF;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAKhE;AAED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAInF;AAED;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,aAAoB,CAAC;AAE5D;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAO7D;AAED,wDAAwD;AACxD,wBAAgB,iCAAiC,IAAI,IAAI,CAGxD"}

package/dist/completion/coverage-drift-state.js

@@ -14,10 +14,45 @@
  * the exact state it would approve). First drift arms a full-pass re-review (no
  * escalation); a second consecutive drift files ONE needs_operator escalation
  * (deduped in the DB by kind+focus). Cleared on a coverage-complete exit and on
- * the coverage-escalation re-arm edge. In-memory (a restart resets to a fresh
- * respawn allowance -- the safe direction; it never over-escalates).
+ * the coverage-escalation re-arm edge.
+ *
+ * DURABLE: the count is a spent budget toward the review_coverage_incomplete
+ * escalation, persisted to product_focuses.below_coverage_drift_count so the
+ * second drift is still reached when a daemon re-exec falls between the two --
+ * "a spent budget stays spent" (TEL-2). recordBelowCoverageDrift /
+ * resetCoverageDriftState write through; hydrateBelowCoverageDriftCount restores
+ * it on boot. (Mutate ONLY through those functions so the write-through holds --
+ * the raw Map export remains for the read/reset call sites.)
  */
 export const belowCoverageDriftCounts = new Map();
+let coveragePersister = null;
+/** Register (or clear, with null) the durable write-through persister at boot. */
+export function setCoverageDriftPersister(fn) {
+    coveragePersister = fn;
+}
+/**
+ * Increment a focus's consecutive below-coverage drift streak by one, write it
+ * through durably, and return the new streak. The single mutation path for the
+ * increment so the durable column cannot drift from the in-memory Map.
+ */
+export function recordBelowCoverageDrift(focusId) {
+    const streak = (belowCoverageDriftCounts.get(focusId) ?? 0) + 1;
+    belowCoverageDriftCounts.set(focusId, streak);
+    coveragePersister?.(focusId, streak);
+    return streak;
+}
+/**
+ * Restore a focus's below-coverage drift count from its persisted column, the
+ * first time the daemon sees the focus after a (re-)start. Non-clobbering +
+ * first-sight-only; skips a focus with no persisted streak.
+ */
+export function hydrateBelowCoverageDriftCount(focusId, count) {
+    if (belowCoverageDriftCounts.has(focusId))
+        return; // in-memory wins during a run
+    if (count <= 0)
+        return; // no streak to restore
+    belowCoverageDriftCounts.set(focusId, count);
+}
 /**
  * Focuses whose NEXT review must be a full pass (drift was detected, so the
  * prior coverage cannot be trusted incrementally). Consumed + cleared by the
@@ -35,8 +70,13 @@ export const forceFullPassReviewFocuses = new Set();
  * mirrors resetDeliveryAdvancementGuard's role for the team_failure re-arm.
  */
 export function resetCoverageDriftState(focusId) {
+    const hadStreak = (belowCoverageDriftCounts.get(focusId) ?? 0) > 0;
     belowCoverageDriftCounts.delete(focusId);
     forceFullPassReviewFocuses.delete(focusId);
+    // Write the cleared budget through -- but only when it stood above 0, to avoid
+    // a needless DB write on every routed exit / re-arm (the streak is usually 0).
+    if (hadStreak)
+        coveragePersister?.(focusId, 0);
 }
 /** Test reset hook for the in-memory drift trackers. */
 export function __resetCoverageDriftStateForTests() {

package/dist/completion/coverage-drift-state.js.map

@@ -1 +1 @@
-{"version":3,"file":"coverage-drift-state.js","sourceRoot":"","sources":["../../src/completion/coverage-drift-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,GAAG,EAAkB,CAAC;AAElE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,GAAG,EAAU,CAAC;AAE5D;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,wBAAwB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzC,0BAA0B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,iCAAiC;IAC/C,wBAAwB,CAAC,KAAK,EAAE,CAAC;IACjC,0BAA0B,CAAC,KAAK,EAAE,CAAC;AACrC,CAAC"}
+{"version":3,"file":"coverage-drift-state.js","sourceRoot":"","sources":["../../src/completion/coverage-drift-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,GAAG,EAAkB,CAAC;AASlE,IAAI,iBAAiB,GAAkC,IAAI,CAAC;AAE5D,kFAAkF;AAClF,MAAM,UAAU,yBAAyB,CAAC,EAAiC;IACzE,iBAAiB,GAAG,EAAE,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAAe;IACtD,MAAM,MAAM,GAAG,CAAC,wBAAwB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAChE,wBAAwB,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9C,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAAC,OAAe,EAAE,KAAa;IAC3E,IAAI,wBAAwB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,8BAA8B;IACjF,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,CAAC,uBAAuB;IAC/C,wBAAwB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,GAAG,EAAU,CAAC;AAE5D;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,MAAM,SAAS,GAAG,CAAC,wBAAwB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACnE,wBAAwB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzC,0BAA0B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3C,+EAA+E;IAC/E,+EAA+E;IAC/E,IAAI,SAAS;QAAE,iBAAiB,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,iCAAiC;IAC/C,wBAAwB,CAAC,KAAK,EAAE,CAAC;IACjC,0BAA0B,CAAC,KAAK,EAAE,CAAC;AACrC,CAAC"}

package/dist/completion/coverage-stabilized.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Close half for the review_coverage_incomplete spawn block (delivery 7, Task 2).
+ *
+ * applyRespawnGuard parks EVERY spawn (coding AND review) while a
+ * review_coverage_incomplete escalation is open. The drift-streak breaker files
+ * it precisely because the focus branch kept advancing DURING each review pass,
+ * so a clean review never covered the exact state it would approve. That creates
+ * a deadlock: with review spawns blocked, no review can run to complete coverage,
+ * so the escalation can never clear at the review-exit site.
+ *
+ * The clearing condition is SPAWN-INDEPENDENT and distinct from delivery
+ * advancement (Task 1's signal): the branch has STABILIZED. The escalation
+ * records the branch tip at filing (metadata.current_tip). When the focus branch
+ * tip has not moved since -- no new commits landed -- a re-review can now cover
+ * the exact state, so the daemon resolves the escalation itself. applyRespawnGuard
+ * then permits a review spawn; if the branch has in fact re-drifted, the next
+ * review re-files the escalation, and the whole cycle is bounded by the existing
+ * review_cycle_cap. No human act.
+ *
+ * Pure decision (isCoverageBranchStable) + a thin reconcile whose git read,
+ * escalation list, and resolve are injected so it is unit-testable with no real
+ * git or DB.
+ */
+import { listOpenFocusEscalationsOfKind, markEscalationResolved as defaultMarkEscalationResolved } from '../queries/issues.js';
+import { resolveRef as defaultResolveRef } from '../git/index.js';
+/**
+ * Pure decision: has the focus branch STABILIZED at the tip recorded when the
+ * coverage-incomplete escalation was filed? True only when BOTH tips are known
+ * and equal (no commits landed since filing). A missing recorded tip (a legacy
+ * filing, or a null live read) is NOT stable -- the hold is kept, so a re-review
+ * is never armed over an unknown/moving branch. Exported for direct unit testing.
+ */
+export declare function isCoverageBranchStable(recordedTip: string | null | undefined, liveTip: string | null): boolean;
+export interface CoverageStabilizedDeps {
+    /** List the focus's open review_coverage_incomplete rows (id + metadata). */
+    listOpen: typeof listOpenFocusEscalationsOfKind;
+    /** Resolve the focus branch ref to its live tip SHA (null when unreadable). */
+    resolveRef: typeof defaultResolveRef;
+    /** Resolve a single escalation row (the close-half write). */
+    markEscalationResolved: typeof defaultMarkEscalationResolved;
+}
+export interface CoverageStabilizedContext {
+    focusId: string;
+    focusName: string;
+    /** Pinned focus branch identity (product_focuses.branch_name), or null. */
+    branchName: string | null;
+    /** Product repo path -- the branch ref lives in its git dir (worktrees share it). */
+    repoPath: string;
+}
+/**
+ * Reconcile ONE focus's open review_coverage_incomplete hold: resolve it iff the
+ * focus branch has stabilized at the tip recorded at filing. Best-effort: any
+ * failure is logged and swallowed so the caller's cascade pass is never blocked.
+ * Returns the number of holds resolved (0 or 1 in practice -- the kind is
+ * cause-key deduped to one open row per focus).
+ */
+export declare function reconcileCoverageIncompleteHold(ctx: CoverageStabilizedContext, deps?: CoverageStabilizedDeps): Promise<number>;
+//# sourceMappingURL=coverage-stabilized.d.ts.map

package/dist/completion/coverage-stabilized.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coverage-stabilized.d.ts","sourceRoot":"","sources":["../../src/completion/coverage-stabilized.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,8BAA8B,EAAE,sBAAsB,IAAI,6BAA6B,EAA8C,MAAM,sBAAsB,CAAC;AAC3K,OAAO,EAAE,UAAU,IAAI,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAKlE;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACtC,OAAO,EAAE,MAAM,GAAG,IAAI,GACrB,OAAO,CAET;AAED,MAAM,WAAW,sBAAsB;IACrC,6EAA6E;IAC7E,QAAQ,EAAE,OAAO,8BAA8B,CAAC;IAChD,+EAA+E;IAC/E,UAAU,EAAE,OAAO,iBAAiB,CAAC;IACrC,8DAA8D;IAC9D,sBAAsB,EAAE,OAAO,6BAA6B,CAAC;CAC9D;AAQD,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,qFAAqF;IACrF,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAsB,+BAA+B,CACnD,GAAG,EAAE,yBAAyB,EAC9B,IAAI,GAAE,sBAAoC,GACzC,OAAO,CAAC,MAAM,CAAC,CAkCjB"}

package/dist/completion/coverage-stabilized.js

@@ -0,0 +1,84 @@
+/**
+ * Close half for the review_coverage_incomplete spawn block (delivery 7, Task 2).
+ *
+ * applyRespawnGuard parks EVERY spawn (coding AND review) while a
+ * review_coverage_incomplete escalation is open. The drift-streak breaker files
+ * it precisely because the focus branch kept advancing DURING each review pass,
+ * so a clean review never covered the exact state it would approve. That creates
+ * a deadlock: with review spawns blocked, no review can run to complete coverage,
+ * so the escalation can never clear at the review-exit site.
+ *
+ * The clearing condition is SPAWN-INDEPENDENT and distinct from delivery
+ * advancement (Task 1's signal): the branch has STABILIZED. The escalation
+ * records the branch tip at filing (metadata.current_tip). When the focus branch
+ * tip has not moved since -- no new commits landed -- a re-review can now cover
+ * the exact state, so the daemon resolves the escalation itself. applyRespawnGuard
+ * then permits a review spawn; if the branch has in fact re-drifted, the next
+ * review re-files the escalation, and the whole cycle is bounded by the existing
+ * review_cycle_cap. No human act.
+ *
+ * Pure decision (isCoverageBranchStable) + a thin reconcile whose git read,
+ * escalation list, and resolve are injected so it is unit-testable with no real
+ * git or DB.
+ */
+import { listOpenFocusEscalationsOfKind, markEscalationResolved as defaultMarkEscalationResolved, REVIEW_COVERAGE_INCOMPLETE_ESCALATION_KIND } from '../queries/issues.js';
+import { resolveRef as defaultResolveRef } from '../git/index.js';
+import { createLogger } from '../shell/log.js';
+const log = createLogger({ module: 'focus-executor' });
+/**
+ * Pure decision: has the focus branch STABILIZED at the tip recorded when the
+ * coverage-incomplete escalation was filed? True only when BOTH tips are known
+ * and equal (no commits landed since filing). A missing recorded tip (a legacy
+ * filing, or a null live read) is NOT stable -- the hold is kept, so a re-review
+ * is never armed over an unknown/moving branch. Exported for direct unit testing.
+ */
+export function isCoverageBranchStable(recordedTip, liveTip) {
+    return !!recordedTip && !!liveTip && recordedTip === liveTip;
+}
+const defaultDeps = {
+    listOpen: listOpenFocusEscalationsOfKind,
+    resolveRef: defaultResolveRef,
+    markEscalationResolved: defaultMarkEscalationResolved,
+};
+/**
+ * Reconcile ONE focus's open review_coverage_incomplete hold: resolve it iff the
+ * focus branch has stabilized at the tip recorded at filing. Best-effort: any
+ * failure is logged and swallowed so the caller's cascade pass is never blocked.
+ * Returns the number of holds resolved (0 or 1 in practice -- the kind is
+ * cause-key deduped to one open row per focus).
+ */
+export async function reconcileCoverageIncompleteHold(ctx, deps = defaultDeps) {
+    if (!ctx.branchName)
+        return 0; // no pinned branch identity -> nothing to compare
+    let open;
+    try {
+        open = await deps.listOpen(ctx.focusId, REVIEW_COVERAGE_INCOMPLETE_ESCALATION_KIND);
+    }
+    catch (err) {
+        log.warn(`[coverage-stabilized] list failed for "${ctx.focusName}": ${err.message}`);
+        return 0;
+    }
+    if (open.length === 0)
+        return 0;
+    const liveTip = deps.resolveRef(ctx.repoPath, ctx.branchName);
+    let resolved = 0;
+    for (const row of open) {
+        const recordedTip = row.metadata?.current_tip ?? null;
+        if (!isCoverageBranchStable(recordedTip, liveTip))
+            continue;
+        try {
+            await deps.markEscalationResolved(row.id, 'Auto-resolved by the daemon: the focus branch stabilized at the tip recorded when coverage-incomplete ' +
+                'was filed (no commits since), so a re-review can now complete coverage -- the spawn block cleared.');
+            resolved++;
+        }
+        catch (err) {
+            log.warn(`[coverage-stabilized] resolve failed for escalation ${row.id} on "${ctx.focusName}": ${err.message}`);
+        }
+    }
+    if (resolved > 0) {
+        log.info(`[coverage-stabilized] Resolved ${resolved} review_coverage_incomplete hold(s) for "${ctx.focusName}" ` +
+            `-- branch stabilized at ${liveTip?.slice(0, 12)}; review spawns unblocked with no human act.`);
+    }
+    return resolved;
+}
+//# sourceMappingURL=coverage-stabilized.js.map

package/dist/completion/coverage-stabilized.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coverage-stabilized.js","sourceRoot":"","sources":["../../src/completion/coverage-stabilized.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,8BAA8B,EAAE,sBAAsB,IAAI,6BAA6B,EAAE,0CAA0C,EAAE,MAAM,sBAAsB,CAAC;AAC3K,OAAO,EAAE,UAAU,IAAI,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAEvD;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,WAAsC,EACtC,OAAsB;IAEtB,OAAO,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,OAAO,IAAI,WAAW,KAAK,OAAO,CAAC;AAC/D,CAAC;AAWD,MAAM,WAAW,GAA2B;IAC1C,QAAQ,EAAE,8BAA8B;IACxC,UAAU,EAAE,iBAAiB;IAC7B,sBAAsB,EAAE,6BAA6B;CACtD,CAAC;AAWF;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,GAA8B,EAC9B,OAA+B,WAAW;IAE1C,IAAI,CAAC,GAAG,CAAC,UAAU;QAAE,OAAO,CAAC,CAAC,CAAC,kDAAkD;IACjF,IAAI,IAAqE,CAAC;IAC1E,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,0CAA0C,CAAC,CAAC;IACtF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,0CAA0C,GAAG,CAAC,SAAS,MAAO,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAChG,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAEhC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9D,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,WAAW,GAAI,GAAG,CAAC,QAAQ,EAAE,WAAyC,IAAI,IAAI,CAAC;QACrF,IAAI,CAAC,sBAAsB,CAAC,WAAW,EAAE,OAAO,CAAC;YAAE,SAAS;QAC5D,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,sBAAsB,CAC/B,GAAG,CAAC,EAAE,EACN,wGAAwG;gBACtG,oGAAoG,CACvG,CAAC;YACF,QAAQ,EAAE,CAAC;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,uDAAuD,GAAG,CAAC,EAAE,QAAQ,GAAG,CAAC,SAAS,MAAO,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7H,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjB,GAAG,CAAC,IAAI,CACN,kCAAkC,QAAQ,4CAA4C,GAAG,CAAC,SAAS,IAAI;YACvG,2BAA2B,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,8CAA8C,CAC/F,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/completion/delivery-advancement-guard.d.ts

@@ -70,6 +70,27 @@ export interface DeliveryAdvancementDecision {
     noAdvancementCycles: number;
     thresholdReached: boolean;
 }
+/**
+ * Durable write-through seam for the cross-respawn no-progress state. Registered
+ * once at daemon boot (setDeliveryAdvancementPersister); called best-effort
+ * (fire-and-forget) whenever the state changes, and with null when the guard is
+ * reset for a focus. Unset in tests -> the guard stays pure in-memory. This is
+ * what makes a spent no-advancement budget survive the auto-updater's re-exec
+ * (module-scope state alone reset noAdvancementCycles to 0 every restart, handing
+ * a focus about to trip its team_failure halt a fresh budget).
+ */
+export type DeliveryAdvancementPersister = (focusId: string, state: DeliveryAdvancementState | null) => void;
+/** Register (or clear, with null) the durable write-through persister at boot. */
+export declare function setDeliveryAdvancementPersister(fn: DeliveryAdvancementPersister | null): void;
+/**
+ * Restore a focus's no-progress watchdog state from its persisted column, the
+ * FIRST time the daemon sees the focus after a (re-)start. Non-clobbering: a
+ * state already tracked in memory this run wins (hydrate never overwrites a live
+ * cycle). Restoring the SNAPSHOT alongside the counter is essential -- a bare
+ * counter would rebase to 0 on the first post-restart cycle for lack of a prior
+ * to compare against, silently forgiving the streak.
+ */
+export declare function hydrateDeliveryAdvancementState(focusId: string, state: DeliveryAdvancementState | null): void;
 export declare function takeDeliveryAdvancementSnapshot(deliveries: Pick<FocusDeliveryInfo, 'id' | 'executionStatus'>[], issues?: Pick<FocusIssueInfo, 'id' | 'status'>[], focusHeadSha?: string | null): DeliveryAdvancementSnapshot;
 export declare function deliveryAdvancementSnapshotsEqual(a: DeliveryAdvancementSnapshot, b: DeliveryAdvancementSnapshot): boolean;
 export declare function recordDeliveryAdvancementCycle(focusId: string, deliveries: Pick<FocusDeliveryInfo, 'id' | 'executionStatus'>[], issues: Pick<FocusIssueInfo, 'id' | 'status'>[], focusHeadSha: string | null, threshold: number, 

package/dist/completion/delivery-advancement-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delivery-advancement-guard.d.ts","sourceRoot":"","sources":["../../src/completion/delivery-advancement-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAE3E,MAAM,WAAW,2BAA2B;IAC1C;iFAC6E;IAC7E,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC;mEAC+D;IAC/D,gBAAgB,EAAE,MAAM,CAAC;IACzB;+DAC2D;IAC3D,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,2BAA2B,CAAC;IACtC,mBAAmB,EAAE,MAAM,CAAC;IAC5B;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,EAAE,OAAO,CAAC;IAClB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAiBD,wBAAgB,+BAA+B,CAC7C,UAAU,EAAE,IAAI,CAAC,iBAAiB,EAAE,IAAI,GAAG,iBAAiB,CAAC,EAAE,EAC/D,MAAM,GAAE,IAAI,CAAC,cAAc,EAAE,IAAI,GAAG,QAAQ,CAAC,EAAO,EACpD,YAAY,GAAE,MAAM,GAAG,IAAW,GACjC,2BAA2B,CAU7B;AAED,wBAAgB,iCAAiC,CAC/C,CAAC,EAAE,2BAA2B,EAC9B,CAAC,EAAE,2BAA2B,GAC7B,OAAO,CAaT;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,IAAI,CAAC,iBAAiB,EAAE,IAAI,GAAG,iBAAiB,CAAC,EAAE,EAC/D,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,GAAG,QAAQ,CAAC,EAAE,EAC/C,YAAY,EAAE,MAAM,GAAG,IAAI,EAC3B,SAAS,EAAE,MAAM;AACjB,+EAA+E;AAC/E,KAAK,GAAE,MAAmB;AAC1B;;;;;GAKG;AACH,OAAO,SAAI,GACV,2BAA2B,CAqC7B;AAED,wBAAgB,6BAA6B,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAMpE"}
+{"version":3,"file":"delivery-advancement-guard.d.ts","sourceRoot":"","sources":["../../src/completion/delivery-advancement-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAE3E,MAAM,WAAW,2BAA2B;IAC1C;iFAC6E;IAC7E,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC;mEAC+D;IAC/D,gBAAgB,EAAE,MAAM,CAAC;IACzB;+DAC2D;IAC3D,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,2BAA2B,CAAC;IACtC,mBAAmB,EAAE,MAAM,CAAC;IAC5B;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,EAAE,OAAO,CAAC;IAClB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAID;;;;;;;;GAQG;AACH,MAAM,MAAM,4BAA4B,GAAG,CACzC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,wBAAwB,GAAG,IAAI,KACnC,IAAI,CAAC;AAIV,kFAAkF;AAClF,wBAAgB,+BAA+B,CAAC,EAAE,EAAE,4BAA4B,GAAG,IAAI,GAAG,IAAI,CAE7F;AAQD;;;;;;;GAOG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,wBAAwB,GAAG,IAAI,GACrC,IAAI,CAIN;AAeD,wBAAgB,+BAA+B,CAC7C,UAAU,EAAE,IAAI,CAAC,iBAAiB,EAAE,IAAI,GAAG,iBAAiB,CAAC,EAAE,EAC/D,MAAM,GAAE,IAAI,CAAC,cAAc,EAAE,IAAI,GAAG,QAAQ,CAAC,EAAO,EACpD,YAAY,GAAE,MAAM,GAAG,IAAW,GACjC,2BAA2B,CAU7B;AAED,wBAAgB,iCAAiC,CAC/C,CAAC,EAAE,2BAA2B,EAC9B,CAAC,EAAE,2BAA2B,GAC7B,OAAO,CAaT;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,IAAI,CAAC,iBAAiB,EAAE,IAAI,GAAG,iBAAiB,CAAC,EAAE,EAC/D,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,GAAG,QAAQ,CAAC,EAAE,EAC/C,YAAY,EAAE,MAAM,GAAG,IAAI,EAC3B,SAAS,EAAE,MAAM;AACjB,+EAA+E;AAC/E,KAAK,GAAE,MAAmB;AAC1B;;;;;GAKG;AACH,OAAO,SAAI,GACV,2BAA2B,CAqC7B;AAED,wBAAgB,6BAA6B,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CASpE"}