@telora/daemon 0.21.83 → 0.21.134

package/dist/delivery/delivery-reconciler-apply.d.ts

@@ -1,85 +1,127 @@
 /**
- * Activation layer for the single-writer delivery reconciler.
+ * Thin decision seam over the pure delivery reconciler.
  *
- * Delivery 4 of the Delivery Execution Pathway Consolidation focus (reality-tree
- * injection #10). This is the step that makes the pure reconciler
- * (delivery-reconciler.ts) the DECISION AUTHORITY for every daemon
- * execution_status write, with the two safety properties the focus method
- * (characterize -> shadow -> flip, reversible) requires:
+ * The pure reconciler (delivery-reconciler.ts) is the DECISION AUTHORITY for
+ * every daemon execution_status write. `resolveReconciledWrite` is the single
+ * entry point the write sites call to turn a `ReconcileInput` into the status to
+ * write; the caller then routes that status through `updateDeliveryStatus` (the
+ * sole physical writer).
  *
- *   1. Runtime self-check (replaces the manual prod shadow-observation gate).
- *      Each write site still computes what the legacy ("old path") logic would
- *      have written; `resolveReconciledWrite` compares that to the reconciler's
- *      target and logs `[reconciler-divergence]` on any mismatch. The retained
- *      legacy computation is exactly what lets prod self-verify the reconciler
- *      against the prior behavior for one release -- no maintenance-window or
- *      manual shadow observation needed.
- *
- *   2. Reversibility. A single switch, `TELORA_RECONCILER_WRITE`, DEFAULT-ON,
- *      selects whose decision is WRITTEN: ON -> the reconciler; OFF -> the
- *      retained legacy target. Flip to '0'/'off'/'false'/'no' (and restart) to
- *      revert instantly; the whole consolidation also reverts as one merge.
- *
- * Why activation is safe (suite stays green by construction): the reconciler was
- * built (Delivery 3) to MIRROR the live writers and proven so by the Delivery 2
- * parity tests. So in every characterized case `result.target === legacyTarget`
- * -- the write is byte-identical and the characterization suite stays green. The
- * self-check exists to catch any UN-characterized prod case where they differ.
+ * HISTORY (retired): this module was once an activation layer that ran the
+ * reconciler in SHADOW alongside a retained "legacy" per-site computation,
+ * logged `[reconciler-divergence]` on any mismatch, and gated the write behind a
+ * default-on `TELORA_RECONCILER_WRITE` kill switch (ON -> reconciler, OFF ->
+ * legacy target). The characterize -> shadow -> flip migration is complete: the
+ * reconciler has been the authoritative writer with zero divergence, so the
+ * legacy computation, the divergence log, and the kill switch have all been
+ * retired. The reconciler's target IS the write; there is no second path to
+ * compare it against.
  *
  * The single shared "issues are done" predicate (areDeliveryIssuesDone) and the
- * agreed terminal set live in delivery-reconciler.ts. The agreed set is
- * {Done, Verified, In Review} (OPEN = {To Do, In Progress, Blocked}); the
- * divergent Postgres literal-Done predicate is removed in Delivery 5.
+ * agreed terminal set live in delivery-reconciler.ts.
  */
-import { type ReconcileInput, type ReconcileResult } from './delivery-reconciler.js';
+import { type ReconcileInput, type ReconcileResult, type ReconcilerIssue } from './delivery-reconciler.js';
 import type { ExecutionStatus } from '@telora/daemon-core';
-/** Reversibility switch. DEFAULT-ON (opt-out), unlike the shadow's opt-in flag. */
-export declare const RECONCILER_WRITE_ENV = "TELORA_RECONCILER_WRITE";
-/**
- * Whether the reconciler's decision is the one WRITTEN. DEFAULT-ON: unset / ''
- * / any value other than the explicit off-tokens enables it. Only
- * '0'/'off'/'false'/'no' (case-insensitive) revert to writing the legacy target.
- *
- * This mirrors the opt-OUT semantics of shouldRunLoop (undefined/'' -> on,
- * '0' -> off) rather than the shadow harness's opt-IN, because the reconciler is
- * the intended default writer after this delivery -- reverting is the exception.
- */
-export declare function reconcilerWriteEnabled(env?: NodeJS.ProcessEnv): boolean;
+import type { DeliveryGateState, updateDeliveryStatus } from '../queries/deliveries.js';
 export interface ReconciledWriteDecision {
-    /**
-     * The status the caller should WRITE: the reconciler's target when the switch
-     * is ON (default), otherwise the retained legacy target.
-     */
+    /** The status the caller should WRITE (the reconciler's target). */
     target: ExecutionStatus;
-    /** The reconciler's computed result -- always present, regardless of the switch. */
+    /** The reconciler's full computed result (canonical + reason), for logging/debug. */
     result: ReconcileResult;
-    /** Whether the reconciler's target differs from the legacy target. */
-    diverged: boolean;
-    /** Whether the reconciler's decision is the one being written (the switch state). */
-    reconcilerAuthoritative: boolean;
 }
 export interface ResolveReconciledWriteParams {
-    /** Short site label for the divergence log (e.g. 'auto-advance', 'completion'). */
-    site: string;
-    deliveryId: string;
-    deliveryName: string;
     /** The full signal for the reconciler. currentStatus is the status at THIS step. */
     input: ReconcileInput;
-    /** What the legacy/old-path code decided to write for this same step. */
-    legacyTarget: ExecutionStatus;
 }
-export interface ReconciledWriteDeps {
-    /** Divergence sink. Defaults to console.log; injected in tests for capture. */
-    log?: (message: string) => void;
-    /** Switch state. Defaults to reconcilerWriteEnabled(); injected in tests. */
-    writeEnabled?: () => boolean;
+/**
+ * Decide what status to write for one transition step. Single-step: callers that
+ * walk multiple steps in one pass (e.g. queued -> coding -> verify) call this
+ * once per actual write, keying `input.currentStatus` to that step, so the
+ * reconciler's single-step decision corresponds 1:1 to each write.
+ */
+export declare function resolveReconciledWrite(params: ResolveReconciledWriteParams): ReconciledWriteDecision;
+/**
+ * The reconciler input for the WORK-START crossing (queued -> coding the moment a
+ * work issue is In Progress). This exact input is built identically at all three
+ * work-start sites -- the live poll tick (listener-auto-advance.checkDeliveryWorkStart),
+ * the teamless auto-advance queued step (listener-auto-advance.checkDeliveryAutoAdvance),
+ * and the team-exit completion path (completion/status-advance-phase) -- so it has
+ * ONE definition here. A queued delivery is not git-touching to cross, so the
+ * worktree is treated as committed; there is no guard or review signal at this edge.
+ */
+export declare function workStartReconcileInput(issues: readonly ReconcilerIssue[]): ReconcileInput;
+/**
+ * The reconciler input for a RECONCILER-DRIVEN advance step -- the daemon walks a
+ * `coding` / `queued` / `verify_failed` delivery forward and the reconciler
+ * decides the target. This is the SINGLE construction site for that input, shared
+ * by the team path (delivery-lifecycle.advanceDeliveryStage) and the teamless path
+ * (listener-auto-advance), so "which fields the reconciler sees at an advance" has
+ * ONE definition rather than a hand-spelled object at each call site.
+ *
+ * `guardVerdict` is a REQUIRED argument on purpose (TEL-1: "measure the inputs at
+ * a single site ... so bypassing a measurement requires removing it"): a caller
+ * cannot OMIT it and silently get an unmeasured guard. Passing `null` is the
+ * EXPLICIT, reviewable choice made only at edges that genuinely have no guard
+ * (queued->coding; the verify_failed->queued re-queue). At the coding->verify edge
+ * the caller passes the MEASURED verdict (delivery-lifecycle's measureGuard /
+ * listener-auto-advance's measureGuardAtAdvance) -- the same measurement on both
+ * paths (the D6 parity invariant). gitState is committed BY CONTRACT
+ * (ensureWorktreeCommittedBeforeAdvance runs before this input is built) and there
+ * is no review signal at these edges (verify->done review routing is a separate
+ * path).
+ */
+export declare function advanceReconcileInput(params: {
+    currentStatus: ExecutionStatus;
+    issues: readonly ReconcilerIssue[];
+    guardVerdict: {
+        blocked: boolean;
+    } | null;
+    discoveryOnly?: boolean;
+}): ReconcileInput;
+/** The write callback shape the step applier needs (matches queries/deliveries.updateDeliveryStatus). */
+export type UpdateDeliveryStatusFn = typeof updateDeliveryStatus;
+export interface ApplyReconciledStepParams {
+    deliveryId: string;
+    /** The delivery's current status; the reconciler decides the step FROM here. */
+    fromStatus: ExecutionStatus;
+    input: ReconcileInput;
+    /** The workflow stages, to resolve the target status's stage id. */
+    stages: ReadonlyArray<{
+        id: string;
+        name: string;
+    }>;
+    organizationId: string;
+    /** gate_state to write with the transition (default: leave untouched). */
+    gateState?: DeliveryGateState | null;
+    /**
+     * When true, DO NOT write if the target status has no matching workflow stage
+     * (the completion path warns and leaves the delivery put in that case). When
+     * false (default), write regardless -- the target's stage id is best-effort
+     * (the live poll-tick path always writes the reconciler target). This flag is
+     * how one primitive reproduces both sites' stage-not-found behavior exactly.
+     */
+    requireStageToWrite?: boolean;
+}
+export interface ApplyReconciledStepResult {
+    /** The reconciler's target for this step. */
+    target: ExecutionStatus;
+    /** True when the reconciler moved off fromStatus (a crossing is due). */
+    changed: boolean;
+    /** True when a status write was actually issued. */
+    written: boolean;
+    /** The resolved stage for the target, if the workflow names one. */
+    stageId: string | undefined;
+    /** False when `changed` but the target has no matching workflow stage. */
+    stageFound: boolean;
 }
 /**
- * Decide what status to write for one transition step, with the runtime
- * self-check. Single-step: callers that walk multiple steps in one pass
- * (e.g. queued -> coding -> verify) call this once per actual write, keying
- * `input.currentStatus` + `legacyTarget` to that step, so the reconciler's
- * single-step decision and the legacy step correspond 1:1.
+ * Reconcile ONE transition step and write it through the single physical writer
+ * (updateDeliveryStatus), keyed on `fromStatus`. Shared by the poll-tick and
+ * team-exit advancement paths so the reconcile -> find-stage -> write mechanic
+ * has one definition; callers keep their own logging / teamState bookkeeping,
+ * driven by the returned {changed, written, stageFound, target}. Never writes a
+ * no-op (target === fromStatus). See `requireStageToWrite` for the stage-missing
+ * behavior each caller selects.
  */
-export declare function resolveReconciledWrite(params: ResolveReconciledWriteParams, deps?: ReconciledWriteDeps): ReconciledWriteDecision;
+export declare function applyReconciledStep(update: UpdateDeliveryStatusFn, params: ApplyReconciledStepParams): Promise<ApplyReconciledStepResult>;
 //# sourceMappingURL=delivery-reconciler-apply.d.ts.map

package/dist/delivery/delivery-reconciler-apply.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delivery-reconciler-apply.d.ts","sourceRoot":"","sources":["../../src/delivery/delivery-reconciler-apply.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,eAAe,EACrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAO3D,mFAAmF;AACnF,eAAO,MAAM,oBAAoB,4BAA4B,CAAC;AAE9D;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAEpF;AAED,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,MAAM,EAAE,eAAe,CAAC;IACxB,oFAAoF;IACpF,MAAM,EAAE,eAAe,CAAC;IACxB,sEAAsE;IACtE,QAAQ,EAAE,OAAO,CAAC;IAClB,qFAAqF;IACrF,uBAAuB,EAAE,OAAO,CAAC;CAClC;AAED,MAAM,WAAW,4BAA4B;IAC3C,mFAAmF;IACnF,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,oFAAoF;IACpF,KAAK,EAAE,cAAc,CAAC;IACtB,yEAAyE;IACzE,YAAY,EAAE,eAAe,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IAClC,+EAA+E;IAC/E,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,6EAA6E;IAC7E,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC;CAC9B;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,4BAA4B,EACpC,IAAI,GAAE,mBAAwB,GAC7B,uBAAuB,CAsBzB"}
+{"version":3,"file":"delivery-reconciler-apply.d.ts","sourceRoot":"","sources":["../../src/delivery/delivery-reconciler-apply.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,eAAe,EACrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAExF,MAAM,WAAW,uBAAuB;IACtC,oEAAoE;IACpE,MAAM,EAAE,eAAe,CAAC;IACxB,qFAAqF;IACrF,MAAM,EAAE,eAAe,CAAC;CACzB;AAED,MAAM,WAAW,4BAA4B;IAC3C,oFAAoF;IACpF,KAAK,EAAE,cAAc,CAAC;CACvB;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,4BAA4B,GACnC,uBAAuB,CAGzB;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,GAAG,cAAc,CAQ1F;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,aAAa,EAAE,eAAe,CAAC;IAC/B,MAAM,EAAE,SAAS,eAAe,EAAE,CAAC;IACnC,YAAY,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;IAC1C,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,GAAG,cAAc,CASjB;AAED,yGAAyG;AACzG,MAAM,MAAM,sBAAsB,GAAG,OAAO,oBAAoB,CAAC;AAEjE,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,UAAU,EAAE,eAAe,CAAC;IAC5B,KAAK,EAAE,cAAc,CAAC;IACtB,oEAAoE;IACpE,MAAM,EAAE,aAAa,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,cAAc,EAAE,MAAM,CAAC;IACvB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACrC;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,yBAAyB;IACxC,6CAA6C;IAC7C,MAAM,EAAE,eAAe,CAAC;IACxB,yEAAyE;IACzE,OAAO,EAAE,OAAO,CAAC;IACjB,oDAAoD;IACpD,OAAO,EAAE,OAAO,CAAC;IACjB,oEAAoE;IACpE,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,0EAA0E;IAC1E,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,sBAAsB,EAC9B,MAAM,EAAE,yBAAyB,GAChC,OAAO,CAAC,yBAAyB,CAAC,CAkBpC"}

package/dist/delivery/delivery-reconciler-apply.js

@@ -1,77 +1,103 @@
 /**
- * Activation layer for the single-writer delivery reconciler.
+ * Thin decision seam over the pure delivery reconciler.
  *
- * Delivery 4 of the Delivery Execution Pathway Consolidation focus (reality-tree
- * injection #10). This is the step that makes the pure reconciler
- * (delivery-reconciler.ts) the DECISION AUTHORITY for every daemon
- * execution_status write, with the two safety properties the focus method
- * (characterize -> shadow -> flip, reversible) requires:
+ * The pure reconciler (delivery-reconciler.ts) is the DECISION AUTHORITY for
+ * every daemon execution_status write. `resolveReconciledWrite` is the single
+ * entry point the write sites call to turn a `ReconcileInput` into the status to
+ * write; the caller then routes that status through `updateDeliveryStatus` (the
+ * sole physical writer).
  *
- *   1. Runtime self-check (replaces the manual prod shadow-observation gate).
- *      Each write site still computes what the legacy ("old path") logic would
- *      have written; `resolveReconciledWrite` compares that to the reconciler's
- *      target and logs `[reconciler-divergence]` on any mismatch. The retained
- *      legacy computation is exactly what lets prod self-verify the reconciler
- *      against the prior behavior for one release -- no maintenance-window or
- *      manual shadow observation needed.
- *
- *   2. Reversibility. A single switch, `TELORA_RECONCILER_WRITE`, DEFAULT-ON,
- *      selects whose decision is WRITTEN: ON -> the reconciler; OFF -> the
- *      retained legacy target. Flip to '0'/'off'/'false'/'no' (and restart) to
- *      revert instantly; the whole consolidation also reverts as one merge.
- *
- * Why activation is safe (suite stays green by construction): the reconciler was
- * built (Delivery 3) to MIRROR the live writers and proven so by the Delivery 2
- * parity tests. So in every characterized case `result.target === legacyTarget`
- * -- the write is byte-identical and the characterization suite stays green. The
- * self-check exists to catch any UN-characterized prod case where they differ.
+ * HISTORY (retired): this module was once an activation layer that ran the
+ * reconciler in SHADOW alongside a retained "legacy" per-site computation,
+ * logged `[reconciler-divergence]` on any mismatch, and gated the write behind a
+ * default-on `TELORA_RECONCILER_WRITE` kill switch (ON -> reconciler, OFF ->
+ * legacy target). The characterize -> shadow -> flip migration is complete: the
+ * reconciler has been the authoritative writer with zero divergence, so the
+ * legacy computation, the divergence log, and the kill switch have all been
+ * retired. The reconciler's target IS the write; there is no second path to
+ * compare it against.
  *
  * The single shared "issues are done" predicate (areDeliveryIssuesDone) and the
- * agreed terminal set live in delivery-reconciler.ts. The agreed set is
- * {Done, Verified, In Review} (OPEN = {To Do, In Progress, Blocked}); the
- * divergent Postgres literal-Done predicate is removed in Delivery 5.
+ * agreed terminal set live in delivery-reconciler.ts.
  */
 import { reconcileDeliveryStatus, } from './delivery-reconciler.js';
-import { createLogger } from '../shell/log.js';
-import { loadEnvConfig } from '@telora/daemon-core';
-const dlog = createLogger({ module: 'delivery-reconciler-apply' });
-/** Reversibility switch. DEFAULT-ON (opt-out), unlike the shadow's opt-in flag. */
-export const RECONCILER_WRITE_ENV = 'TELORA_RECONCILER_WRITE';
 /**
- * Whether the reconciler's decision is the one WRITTEN. DEFAULT-ON: unset / ''
- * / any value other than the explicit off-tokens enables it. Only
- * '0'/'off'/'false'/'no' (case-insensitive) revert to writing the legacy target.
- *
- * This mirrors the opt-OUT semantics of shouldRunLoop (undefined/'' -> on,
- * '0' -> off) rather than the shadow harness's opt-IN, because the reconciler is
- * the intended default writer after this delivery -- reverting is the exception.
+ * Decide what status to write for one transition step. Single-step: callers that
+ * walk multiple steps in one pass (e.g. queued -> coding -> verify) call this
+ * once per actual write, keying `input.currentStatus` to that step, so the
+ * reconciler's single-step decision corresponds 1:1 to each write.
  */
-export function reconcilerWriteEnabled(env = process.env) {
-    return loadEnvConfig(env).TELORA_RECONCILER_WRITE;
+export function resolveReconciledWrite(params) {
+    const result = reconcileDeliveryStatus(params.input);
+    return { target: result.target, result };
 }
 /**
- * Decide what status to write for one transition step, with the runtime
- * self-check. Single-step: callers that walk multiple steps in one pass
- * (e.g. queued -> coding -> verify) call this once per actual write, keying
- * `input.currentStatus` + `legacyTarget` to that step, so the reconciler's
- * single-step decision and the legacy step correspond 1:1.
+ * The reconciler input for the WORK-START crossing (queued -> coding the moment a
+ * work issue is In Progress). This exact input is built identically at all three
+ * work-start sites -- the live poll tick (listener-auto-advance.checkDeliveryWorkStart),
+ * the teamless auto-advance queued step (listener-auto-advance.checkDeliveryAutoAdvance),
+ * and the team-exit completion path (completion/status-advance-phase) -- so it has
+ * ONE definition here. A queued delivery is not git-touching to cross, so the
+ * worktree is treated as committed; there is no guard or review signal at this edge.
  */
-export function resolveReconciledWrite(params, deps = {}) {
-    const log = deps.log ?? ((m) => dlog.info(m));
-    const writeEnabled = (deps.writeEnabled ?? reconcilerWriteEnabled)();
-    const result = reconcileDeliveryStatus(params.input);
-    const diverged = result.target !== params.legacyTarget;
-    if (diverged) {
-        log(`[reconciler-divergence] site=${params.site} delivery=${params.deliveryId} ` +
-            `("${params.deliveryName}") legacy=${params.legacyTarget} ` +
-            `reconciled=${result.target} canonical=${result.canonical} ` +
-            `reason="${result.reason}"`);
-    }
+export function workStartReconcileInput(issues) {
     return {
-        target: writeEnabled ? result.target : params.legacyTarget,
-        result,
-        diverged,
-        reconcilerAuthoritative: writeEnabled,
+        currentStatus: 'queued',
+        issues: issues.map((i) => ({ status: i.status, issueType: i.issueType })),
+        gitState: { worktreeCommitted: true },
+        guardVerdict: null,
+        reviewState: null,
     };
 }
+/**
+ * The reconciler input for a RECONCILER-DRIVEN advance step -- the daemon walks a
+ * `coding` / `queued` / `verify_failed` delivery forward and the reconciler
+ * decides the target. This is the SINGLE construction site for that input, shared
+ * by the team path (delivery-lifecycle.advanceDeliveryStage) and the teamless path
+ * (listener-auto-advance), so "which fields the reconciler sees at an advance" has
+ * ONE definition rather than a hand-spelled object at each call site.
+ *
+ * `guardVerdict` is a REQUIRED argument on purpose (TEL-1: "measure the inputs at
+ * a single site ... so bypassing a measurement requires removing it"): a caller
+ * cannot OMIT it and silently get an unmeasured guard. Passing `null` is the
+ * EXPLICIT, reviewable choice made only at edges that genuinely have no guard
+ * (queued->coding; the verify_failed->queued re-queue). At the coding->verify edge
+ * the caller passes the MEASURED verdict (delivery-lifecycle's measureGuard /
+ * listener-auto-advance's measureGuardAtAdvance) -- the same measurement on both
+ * paths (the D6 parity invariant). gitState is committed BY CONTRACT
+ * (ensureWorktreeCommittedBeforeAdvance runs before this input is built) and there
+ * is no review signal at these edges (verify->done review routing is a separate
+ * path).
+ */
+export function advanceReconcileInput(params) {
+    return {
+        currentStatus: params.currentStatus,
+        issues: params.issues.map((i) => ({ status: i.status, issueType: i.issueType })),
+        gitState: { worktreeCommitted: true },
+        guardVerdict: params.guardVerdict,
+        reviewState: null,
+        ...(params.discoveryOnly !== undefined ? { discoveryOnly: params.discoveryOnly } : {}),
+    };
+}
+/**
+ * Reconcile ONE transition step and write it through the single physical writer
+ * (updateDeliveryStatus), keyed on `fromStatus`. Shared by the poll-tick and
+ * team-exit advancement paths so the reconcile -> find-stage -> write mechanic
+ * has one definition; callers keep their own logging / teamState bookkeeping,
+ * driven by the returned {changed, written, stageFound, target}. Never writes a
+ * no-op (target === fromStatus). See `requireStageToWrite` for the stage-missing
+ * behavior each caller selects.
+ */
+export async function applyReconciledStep(update, params) {
+    const { target } = resolveReconciledWrite({ input: params.input });
+    if (target === params.fromStatus) {
+        return { target, changed: false, written: false, stageId: undefined, stageFound: false };
+    }
+    const stage = params.stages.find((s) => s.name === target);
+    if (params.requireStageToWrite && !stage) {
+        return { target, changed: true, written: false, stageId: undefined, stageFound: false };
+    }
+    await update(params.deliveryId, target, stage?.id, params.gateState, undefined, { organizationId: params.organizationId, fromStatus: params.fromStatus });
+    return { target, changed: true, written: true, stageId: stage?.id, stageFound: !!stage };
+}
 //# sourceMappingURL=delivery-reconciler-apply.js.map

package/dist/delivery/delivery-reconciler-apply.js.map

@@ -1 +1 @@
-{"version":3,"file":"delivery-reconciler-apply.js","sourceRoot":"","sources":["../../src/delivery/delivery-reconciler-apply.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EACL,uBAAuB,GAGxB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC,CAAC;AAGnE,mFAAmF;AACnF,MAAM,CAAC,MAAM,oBAAoB,GAAG,yBAAyB,CAAC;AAE9D;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACzE,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,uBAAuB,CAAC;AACpD,CAAC;AAkCD;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAoC,EACpC,OAA4B,EAAE;IAE9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,MAAM,YAAY,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,sBAAsB,CAAC,EAAE,CAAC;IAErE,MAAM,MAAM,GAAG,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,YAAY,CAAC;IAEvD,IAAI,QAAQ,EAAE,CAAC;QACb,GAAG,CACD,gCAAgC,MAAM,CAAC,IAAI,aAAa,MAAM,CAAC,UAAU,GAAG;YAC1E,KAAK,MAAM,CAAC,YAAY,aAAa,MAAM,CAAC,YAAY,GAAG;YAC3D,cAAc,MAAM,CAAC,MAAM,cAAc,MAAM,CAAC,SAAS,GAAG;YAC5D,WAAW,MAAM,CAAC,MAAM,GAAG,CAC9B,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY;QAC1D,MAAM;QACN,QAAQ;QACR,uBAAuB,EAAE,YAAY;KACtC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"delivery-reconciler-apply.js","sourceRoot":"","sources":["../../src/delivery/delivery-reconciler-apply.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EACL,uBAAuB,GAIxB,MAAM,0BAA0B,CAAC;AAgBlC;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAoC;IAEpC,MAAM,MAAM,GAAG,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;AAC3C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAkC;IACxE,OAAO;QACL,aAAa,EAAE,QAAQ;QACvB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QACzE,QAAQ,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE;QACrC,YAAY,EAAE,IAAI;QAClB,WAAW,EAAE,IAAI;KAClB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAKrC;IACC,OAAO;QACL,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAChF,QAAQ,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE;QACrC,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,WAAW,EAAE,IAAI;QACjB,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvF,CAAC;AACJ,CAAC;AAsCD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAA8B,EAC9B,MAAiC;IAEjC,MAAM,EAAE,MAAM,EAAE,GAAG,sBAAsB,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACnE,IAAI,MAAM,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC3F,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,mBAAmB,IAAI,CAAC,KAAK,EAAE,CAAC;QACzC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC1F,CAAC;IACD,MAAM,MAAM,CACV,MAAM,CAAC,UAAU,EACjB,MAAM,EACN,KAAK,EAAE,EAAE,EACT,MAAM,CAAC,SAAS,EAChB,SAAS,EACT,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CACzE,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;AAC3F,CAAC"}

package/dist/delivery/delivery-reconciler.d.ts

@@ -210,8 +210,13 @@ export { isAuditPhaseFocus, isDiscoveryOnlyDelivery, type DiscoveryOnlySignal, }
  *               otherwise            -> stay verify (awaiting review outcome).
  *   - verify_failed : open work      -> queued (re-queue);
  *                     all done       -> coding (re-iterate).
- *   - draft/planning/paused/done/cancelled : stay (out of reconciler scope;
- *               paused is cleared by a human re-queue, terminal states are final).
+ *   - paused  : blocking guard cleared on re-eval (guardVerdict not blocked)
+ *                                    -> queued (daemon-traversable revival; the
+ *                                       normal walk re-drives and re-hits the gate);
+ *               otherwise (guard still blocks / no re-eval) -> stay paused
+ *                                    (named human-act hold, watchdog-surfaced).
+ *   - draft/planning/done/cancelled : stay (out of reconciler scope;
+ *               terminal states are final, draft/planning await scoping).
  */
 export declare function reconcileDeliveryStatus(input: ReconcileInput): ReconcileResult;
 //# sourceMappingURL=delivery-reconciler.d.ts.map

package/dist/delivery/delivery-reconciler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delivery-reconciler.d.ts","sourceRoot":"","sources":["../../src/delivery/delivery-reconciler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,gDAAgD;AAChD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,+DAA+D;AAC/D,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,8EAA8E;AAC9E,MAAM,WAAW,sBAAsB;IACrC,wEAAwE;IACxE,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,yDAAyD;AACzD,MAAM,WAAW,qBAAqB;IACpC,+DAA+D;IAC/D,eAAe,EAAE,OAAO,CAAC;IACzB,8EAA8E;IAC9E,YAAY,EAAE,OAAO,CAAC;IACtB,kCAAkC;IAClC,WAAW,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACjC,gDAAgD;IAChD,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,EAAE,UAAU,GAAG,YAAY,GAAG,IAAI,CAAC;IAC3C;;;;;;;;;;;;;;OAcG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,eAAe,CAAC;IAC/B,MAAM,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC;IACvC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,YAAY,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC7C,WAAW,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC3C;;;;;;;;;;;;;OAaG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,4FAA4F;IAC5F,MAAM,EAAE,eAAe,CAAC;IACxB,iDAAiD;IACjD,OAAO,EAAE,OAAO,CAAC;IACjB,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,SAAS,EAAE,OAAO,CAAC;CACpB;AAID;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,aAAa,CAAC,eAAe,CAAC,GAAG,OAAO,CAIrF;AAED,mEAAmE;AACnE,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,eAAe,CAAC,GAAG,OAAO,CAE7E;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,eAAe,CAAC,GAAG,OAAO,CAE3E;AAED,qFAAqF;AACrF,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,eAAe,CAAC,GAAG,OAAO,CAE7E;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,aAAa,CAAC,eAAe,CAAC,GAAG,OAAO,CAGnF;AAOD,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,KAAK,mBAAmB,GACzB,MAAM,yBAAyB,CAAC;AAcjC;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,cAAc,GAAG,eAAe,CAiH9E"}
+{"version":3,"file":"delivery-reconciler.d.ts","sourceRoot":"","sources":["../../src/delivery/delivery-reconciler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,gDAAgD;AAChD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,+DAA+D;AAC/D,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,8EAA8E;AAC9E,MAAM,WAAW,sBAAsB;IACrC,wEAAwE;IACxE,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,yDAAyD;AACzD,MAAM,WAAW,qBAAqB;IACpC,+DAA+D;IAC/D,eAAe,EAAE,OAAO,CAAC;IACzB,8EAA8E;IAC9E,YAAY,EAAE,OAAO,CAAC;IACtB,kCAAkC;IAClC,WAAW,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACjC,gDAAgD;IAChD,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,EAAE,UAAU,GAAG,YAAY,GAAG,IAAI,CAAC;IAC3C;;;;;;;;;;;;;;OAcG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,eAAe,CAAC;IAC/B,MAAM,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC;IACvC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,YAAY,CAAC,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC7C,WAAW,CAAC,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC3C;;;;;;;;;;;;;OAaG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,4FAA4F;IAC5F,MAAM,EAAE,eAAe,CAAC;IACxB,iDAAiD;IACjD,OAAO,EAAE,OAAO,CAAC;IACjB,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,SAAS,EAAE,OAAO,CAAC;CACpB;AAID;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,aAAa,CAAC,eAAe,CAAC,GAAG,OAAO,CAIrF;AAED,mEAAmE;AACnE,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,eAAe,CAAC,GAAG,OAAO,CAE7E;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,eAAe,CAAC,GAAG,OAAO,CAE3E;AAED,qFAAqF;AACrF,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,eAAe,CAAC,GAAG,OAAO,CAE7E;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,aAAa,CAAC,eAAe,CAAC,GAAG,OAAO,CAGnF;AAOD,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,KAAK,mBAAmB,GACzB,MAAM,yBAAyB,CAAC;AAcjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,cAAc,GAAG,eAAe,CA0I9E"}

package/dist/delivery/delivery-reconciler.js

@@ -134,8 +134,13 @@ function result(currentStatus, target, reason) {
  *               otherwise            -> stay verify (awaiting review outcome).
  *   - verify_failed : open work      -> queued (re-queue);
  *                     all done       -> coding (re-iterate).
- *   - draft/planning/paused/done/cancelled : stay (out of reconciler scope;
- *               paused is cleared by a human re-queue, terminal states are final).
+ *   - paused  : blocking guard cleared on re-eval (guardVerdict not blocked)
+ *                                    -> queued (daemon-traversable revival; the
+ *                                       normal walk re-drives and re-hits the gate);
+ *               otherwise (guard still blocks / no re-eval) -> stay paused
+ *                                    (named human-act hold, watchdog-surfaced).
+ *   - draft/planning/done/cancelled : stay (out of reconciler scope;
+ *               terminal states are final, draft/planning await scoping).
  */
 export function reconcileDeliveryStatus(input) {
     const { currentStatus, issues, gitState, guardVerdict, reviewState, discoveryOnly } = input;
@@ -239,9 +244,33 @@ export function reconcileDeliveryStatus(input) {
             }
             return result(currentStatus, DELIVERY_STATUS.CODING, 'verify_failed, work done -> coding (re-iterate)');
         }
-        // draft / planning / paused / done / cancelled: not driven by the
-        // issue-rollup reconciler. paused is cleared by a human re-queue;
-        // terminal states are final.
+        case DELIVERY_STATUS.PAUSED: {
+            // A pause is a guard BLOCK on a transition (coding->verify or
+            // verify->done), never a terminal state. The daemon owns its exit: a
+            // paused-delivery consumer re-evaluates the SAME blocking guard each tick
+            // and passes the fresh verdict here. When the guard has CLEARED
+            // (guardVerdict present and not blocked), the delivery revives to `queued`
+            // -- the canonical, origin-independent revival edge
+            // (EXECUTION_STATUS_TRANSITIONS: paused -> queued) -- and the normal walk
+            // (queued -> coding -> verify -> done) re-drives it, re-hitting the same
+            // gates. This is the daemon-traversable exit that keeps an armed focus
+            // from waiting on a human re-queue (2026-07-28 ruling: decide-and-record).
+            //
+            // It is the REVERSIBLE choice by construction: revival only fires once the
+            // gate has cleared, so the delivery cannot immediately re-pause, and the
+            // daemon never OVERRIDES an unclear gate (the irreversible act reserved for
+            // the human `override` decision path). Absent a re-evaluated verdict
+            // (guardVerdict null -- no consumer ran) the delivery STAYS paused: the
+            // named human-act hold in gate_state / the block's `override` decision path
+            // is the human arm, surfaced by the wedge watchdog. So a bare paused is
+            // never left with no consumer, and a paused is never revived on stale signal.
+            if (guardVerdict && !guardVerdict.blocked) {
+                return result(currentStatus, DELIVERY_STATUS.QUEUED, 'blocking guard cleared on re-eval -> revive paused to queued (daemon-traversable exit; normal walk re-drives)');
+            }
+            return result(currentStatus, DELIVERY_STATUS.PAUSED, 'guard still blocks or no re-eval -> stay paused (named human-act hold, watchdog-surfaced)');
+        }
+        // draft / planning / done / cancelled: not driven by the issue-rollup
+        // reconciler. Terminal states are final; draft/planning await scoping.
         default:
             return result(currentStatus, currentStatus, `status '${currentStatus}' is not reconciler-driven -> stay`);
     }

package/dist/delivery/delivery-reconciler.js.map

@@ -1 +1 @@
-{"version":3,"file":"delivery-reconciler.js","sourceRoot":"","sources":["../../src/delivery/delivery-reconciler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAoHzE,wEAAwE;AAExE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAsC;IAC1E,MAAM,IAAI,GAAG,gBAAgB,CAAC,CAAC,GAAG,MAAM,CAAsB,CAAC,CAAC;IAChE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,aAAa,CAAC,MAAsC;IAClE,OAAO,gBAAgB,CAAC,CAAC,GAAG,MAAM,CAAsB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,MAAsC;IAChE,OAAO,gBAAgB,CAAC,CAAC,GAAG,MAAM,CAAsB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AACzG,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,aAAa,CAAC,MAAsC;IAClE,OAAO,gBAAgB,CAAC,CAAC,GAAG,MAAM,CAAsB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC;AAClG,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAsC;IACxE,OAAO,gBAAgB,CAAC,CAAC,GAAG,MAAM,CAAsB,CAAC;SACtD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;AACnE,CAAC;AAED,wEAAwE;AACxE,iFAAiF;AACjF,8EAA8E;AAC9E,gFAAgF;AAChF,0EAA0E;AAC1E,OAAO,EACL,iBAAiB,EACjB,uBAAuB,GAExB,MAAM,yBAAyB,CAAC;AAEjC,wEAAwE;AAExE,SAAS,MAAM,CAAC,aAA8B,EAAE,MAAuB,EAAE,MAAc;IACrF,MAAM,OAAO,GAAG,MAAM,KAAK,aAAa,CAAC;IACzC,OAAO;QACL,MAAM;QACN,OAAO;QACP,MAAM;QACN,SAAS,EAAE,CAAC,OAAO,IAAI,iBAAiB,CAAC,aAAa,EAAE,MAAM,CAAC;KAChE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAqB;IAC3D,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IAC5F,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAEtC,QAAQ,aAAa,EAAE,CAAC;QACtB,KAAK,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,sEAAsE;gBACtE,oEAAoE;gBACpE,IAAI,aAAa,EAAE,CAAC;oBAClB,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,yEAAyE,CAAC,CAAC;gBAClI,CAAC;gBACD,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,gDAAgD,CAAC,CAAC;YACzG,CAAC;YACD,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,kEAAkE,CAAC,CAAC;YAC3H,CAAC;YACD,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;YACrF,CAAC;YACD,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;QAC1F,CAAC;QAED,KAAK,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5B,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;YACxF,CAAC;YACD,yEAAyE;YACzE,kEAAkE;YAClE,0EAA0E;YAC1E,2EAA2E;YAC3E,4EAA4E;YAC5E,2EAA2E;YAC3E,2EAA2E;YAC3E,sEAAsE;YACtE,4EAA4E;YAC5E,+CAA+C;YAC/C,IAAI,CAAC,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;gBAC/B,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,iGAAiG,CAAC,CAAC;YAC1J,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;gBAChC,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,uFAAuF,CAAC,CAAC;YAChJ,CAAC;YACD,IAAI,YAAY,EAAE,OAAO,EAAE,CAAC;gBAC1B,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,wCAAwC,CAAC,CAAC;YACjG,CAAC;YACD,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,8CAA8C,CAAC,CAAC;QACvG,CAAC;QAED,KAAK,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5B,yEAAyE;YACzE,wEAAwE;YACxE,uEAAuE;YACvE,yEAAyE;YACzE,+DAA+D;YAC/D,IAAI,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChC,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,aAAa,EAAE,0DAA0D,CAAC,CAAC;YAC1H,CAAC;YACD,IAAI,YAAY,EAAE,OAAO,EAAE,CAAC;gBAC1B,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,qCAAqC,CAAC,CAAC;YAC9F,CAAC;YACD,2EAA2E;YAC3E,qEAAqE;YACrE,gDAAgD;YAChD,IAAI,aAAa,EAAE,CAAC;gBAClB,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,IAAI,EAAE,qDAAqD,CAAC,CAAC;YAC5G,CAAC;YACD,0EAA0E;YAC1E,wEAAwE;YACxE,sEAAsE;YACtE,yEAAyE;YACzE,qEAAqE;YACrE,2EAA2E;YAC3E,6EAA6E;YAC7E,IAAI,WAAW,EAAE,OAAO,KAAK,YAAY,EAAE,CAAC;gBAC1C,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,aAAa,EAAE,8FAA8F,CAAC,CAAC;YAC9J,CAAC;YACD,IAAI,WAAW,EAAE,YAAY,EAAE,CAAC;gBAC9B,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,IAAI,EAAE,wCAAwC,CAAC,CAAC;YAC/F,CAAC;YACD,IAAI,WAAW,EAAE,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;gBACnE,sEAAsE;gBACtE,sEAAsE;gBACtE,wEAAwE;gBACxE,wEAAwE;gBACxE,uEAAuE;gBACvE,uEAAuE;gBACvE,kEAAkE;gBAClE,qEAAqE;gBACrE,WAAW;gBACX,IAAI,WAAW,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;oBACpC,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,aAAa,EAAE,iGAAiG,CAAC,CAAC;gBACjK,CAAC;gBACD,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,IAAI,EAAE,wDAAwD,CAAC,CAAC;YAC/G,CAAC;YACD,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,sDAAsD,CAAC,CAAC;QAC/G,CAAC;QAED,KAAK,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC;YACnC,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,0CAA0C,CAAC,CAAC;YACnG,CAAC;YACD,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,iDAAiD,CAAC,CAAC;QAC1G,CAAC;QAED,kEAAkE;QAClE,kEAAkE;QAClE,6BAA6B;QAC7B;YACE,OAAO,MAAM,CAAC,aAAa,EAAE,aAAa,EAAE,WAAW,aAAa,oCAAoC,CAAC,CAAC;IAC9G,CAAC;AACH,CAAC"}
+{"version":3,"file":"delivery-reconciler.js","sourceRoot":"","sources":["../../src/delivery/delivery-reconciler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAoHzE,wEAAwE;AAExE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAsC;IAC1E,MAAM,IAAI,GAAG,gBAAgB,CAAC,CAAC,GAAG,MAAM,CAAsB,CAAC,CAAC;IAChE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,aAAa,CAAC,MAAsC;IAClE,OAAO,gBAAgB,CAAC,CAAC,GAAG,MAAM,CAAsB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,MAAsC;IAChE,OAAO,gBAAgB,CAAC,CAAC,GAAG,MAAM,CAAsB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AACzG,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,aAAa,CAAC,MAAsC;IAClE,OAAO,gBAAgB,CAAC,CAAC,GAAG,MAAM,CAAsB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC;AAClG,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAsC;IACxE,OAAO,gBAAgB,CAAC,CAAC,GAAG,MAAM,CAAsB,CAAC;SACtD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;AACnE,CAAC;AAED,wEAAwE;AACxE,iFAAiF;AACjF,8EAA8E;AAC9E,gFAAgF;AAChF,0EAA0E;AAC1E,OAAO,EACL,iBAAiB,EACjB,uBAAuB,GAExB,MAAM,yBAAyB,CAAC;AAEjC,wEAAwE;AAExE,SAAS,MAAM,CAAC,aAA8B,EAAE,MAAuB,EAAE,MAAc;IACrF,MAAM,OAAO,GAAG,MAAM,KAAK,aAAa,CAAC;IACzC,OAAO;QACL,MAAM;QACN,OAAO;QACP,MAAM;QACN,SAAS,EAAE,CAAC,OAAO,IAAI,iBAAiB,CAAC,aAAa,EAAE,MAAM,CAAC;KAChE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAqB;IAC3D,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IAC5F,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAEtC,QAAQ,aAAa,EAAE,CAAC;QACtB,KAAK,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,sEAAsE;gBACtE,oEAAoE;gBACpE,IAAI,aAAa,EAAE,CAAC;oBAClB,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,yEAAyE,CAAC,CAAC;gBAClI,CAAC;gBACD,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,gDAAgD,CAAC,CAAC;YACzG,CAAC;YACD,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,kEAAkE,CAAC,CAAC;YAC3H,CAAC;YACD,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;YACrF,CAAC;YACD,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,iCAAiC,CAAC,CAAC;QAC1F,CAAC;QAED,KAAK,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5B,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;YACxF,CAAC;YACD,yEAAyE;YACzE,kEAAkE;YAClE,0EAA0E;YAC1E,2EAA2E;YAC3E,4EAA4E;YAC5E,2EAA2E;YAC3E,2EAA2E;YAC3E,sEAAsE;YACtE,4EAA4E;YAC5E,+CAA+C;YAC/C,IAAI,CAAC,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;gBAC/B,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,iGAAiG,CAAC,CAAC;YAC1J,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;gBAChC,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,uFAAuF,CAAC,CAAC;YAChJ,CAAC;YACD,IAAI,YAAY,EAAE,OAAO,EAAE,CAAC;gBAC1B,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,wCAAwC,CAAC,CAAC;YACjG,CAAC;YACD,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,8CAA8C,CAAC,CAAC;QACvG,CAAC;QAED,KAAK,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5B,yEAAyE;YACzE,wEAAwE;YACxE,uEAAuE;YACvE,yEAAyE;YACzE,+DAA+D;YAC/D,IAAI,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;gBAChC,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,aAAa,EAAE,0DAA0D,CAAC,CAAC;YAC1H,CAAC;YACD,IAAI,YAAY,EAAE,OAAO,EAAE,CAAC;gBAC1B,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,qCAAqC,CAAC,CAAC;YAC9F,CAAC;YACD,2EAA2E;YAC3E,qEAAqE;YACrE,gDAAgD;YAChD,IAAI,aAAa,EAAE,CAAC;gBAClB,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,IAAI,EAAE,qDAAqD,CAAC,CAAC;YAC5G,CAAC;YACD,0EAA0E;YAC1E,wEAAwE;YACxE,sEAAsE;YACtE,yEAAyE;YACzE,qEAAqE;YACrE,2EAA2E;YAC3E,6EAA6E;YAC7E,IAAI,WAAW,EAAE,OAAO,KAAK,YAAY,EAAE,CAAC;gBAC1C,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,aAAa,EAAE,8FAA8F,CAAC,CAAC;YAC9J,CAAC;YACD,IAAI,WAAW,EAAE,YAAY,EAAE,CAAC;gBAC9B,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,IAAI,EAAE,wCAAwC,CAAC,CAAC;YAC/F,CAAC;YACD,IAAI,WAAW,EAAE,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;gBACnE,sEAAsE;gBACtE,sEAAsE;gBACtE,wEAAwE;gBACxE,wEAAwE;gBACxE,uEAAuE;gBACvE,uEAAuE;gBACvE,kEAAkE;gBAClE,qEAAqE;gBACrE,WAAW;gBACX,IAAI,WAAW,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;oBACpC,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,aAAa,EAAE,iGAAiG,CAAC,CAAC;gBACjK,CAAC;gBACD,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,IAAI,EAAE,wDAAwD,CAAC,CAAC;YAC/G,CAAC;YACD,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,sDAAsD,CAAC,CAAC;QAC/G,CAAC;QAED,KAAK,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC;YACnC,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,0CAA0C,CAAC,CAAC;YACnG,CAAC;YACD,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,iDAAiD,CAAC,CAAC;QAC1G,CAAC;QAED,KAAK,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5B,8DAA8D;YAC9D,qEAAqE;YACrE,0EAA0E;YAC1E,gEAAgE;YAChE,2EAA2E;YAC3E,oDAAoD;YACpD,0EAA0E;YAC1E,yEAAyE;YACzE,uEAAuE;YACvE,2EAA2E;YAC3E,EAAE;YACF,2EAA2E;YAC3E,yEAAyE;YACzE,4EAA4E;YAC5E,qEAAqE;YACrE,wEAAwE;YACxE,4EAA4E;YAC5E,wEAAwE;YACxE,8EAA8E;YAC9E,IAAI,YAAY,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;gBAC1C,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,+GAA+G,CAAC,CAAC;YACxK,CAAC;YACD,OAAO,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,MAAM,EAAE,2FAA2F,CAAC,CAAC;QACpJ,CAAC;QAED,sEAAsE;QACtE,uEAAuE;QACvE;YACE,OAAO,MAAM,CAAC,aAAa,EAAE,aAAa,EAAE,WAAW,aAAa,oCAAoC,CAAC,CAAC;IAC9G,CAAC;AACH,CAAC"}

package/dist/delivery/external-hold-surface.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Operator-visible surfacing for a STALE reference-less external hold (TEL-5,
+ * delivery 2).
+ *
+ * A reference-less external hold has nothing for the daemon to re-read, so it can
+ * never self-clear; once it sits past the staleness age bound (decided by
+ * external-hold.ts isReferenceLessHoldStale) it withholds the delivery from done
+ * -- and the focus from winding_down -- indefinitely. It is NOT an inbox question
+ * the daemon can answer, so it is surfaced as durable operator-visible STATE (a
+ * health event, deduped per delivery), naming that a human must re-declare it
+ * with a clearing reference or clear it.
+ *
+ * Lives in its own module (not external-hold.ts) because it needs the
+ * @telora/daemon-core `healthEvents` VALUE import, which external-hold.ts must
+ * avoid: that module is pulled into listener tests under the node:test
+ * module-mock loader, where a bare `@telora/*` value specifier mis-resolves.
+ */
+import type { ExternalHoldState } from '../queries/deliveries.js';
+/** Health-event code for a reference-less external hold held past the age bound. */
+export declare const EXTERNAL_HOLD_REFERENCE_LESS_STALE_CODE = "external_hold.reference_less_stale";
+/** Test-only: clear the dedup state. */
+export declare function __resetExternalHoldSurfaceForTests(): void;
+/**
+ * Surface (or clear) the stale reference-less signal for one delivery.
+ *
+ * Call after every resolveExternalHold. When `staleReferenceLess` is true, emit
+ * the health event once per delivery. When it is false (hold cleared, gained a
+ * reference, or still within the bound), drop the dedup entry so a later staleness
+ * re-surfaces cleanly, and pair a resolution so the operator view clears.
+ */
+export declare function surfaceStaleReferenceLessExternalHold(deliveryId: string, deliveryName: string, staleReferenceLess: boolean, hold: Pick<ExternalHoldState, 'condition' | 'clearsWhen' | 'declaredAt'> | null): void;
+//# sourceMappingURL=external-hold-surface.d.ts.map

package/dist/delivery/external-hold-surface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-hold-surface.d.ts","sourceRoot":"","sources":["../../src/delivery/external-hold-surface.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAKlE,oFAAoF;AACpF,eAAO,MAAM,uCAAuC,uCAAuC,CAAC;AAU5F,wCAAwC;AACxC,wBAAgB,kCAAkC,IAAI,IAAI,CAEzD;AAED;;;;;;;GAOG;AACH,wBAAgB,qCAAqC,CACnD,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,kBAAkB,EAAE,OAAO,EAC3B,IAAI,EAAE,IAAI,CAAC,iBAAiB,EAAE,WAAW,GAAG,YAAY,GAAG,YAAY,CAAC,GAAG,IAAI,GAC9E,IAAI,CA2BN"}

package/dist/delivery/external-hold-surface.js

@@ -0,0 +1,67 @@
+/**
+ * Operator-visible surfacing for a STALE reference-less external hold (TEL-5,
+ * delivery 2).
+ *
+ * A reference-less external hold has nothing for the daemon to re-read, so it can
+ * never self-clear; once it sits past the staleness age bound (decided by
+ * external-hold.ts isReferenceLessHoldStale) it withholds the delivery from done
+ * -- and the focus from winding_down -- indefinitely. It is NOT an inbox question
+ * the daemon can answer, so it is surfaced as durable operator-visible STATE (a
+ * health event, deduped per delivery), naming that a human must re-declare it
+ * with a clearing reference or clear it.
+ *
+ * Lives in its own module (not external-hold.ts) because it needs the
+ * @telora/daemon-core `healthEvents` VALUE import, which external-hold.ts must
+ * avoid: that module is pulled into listener tests under the node:test
+ * module-mock loader, where a bare `@telora/*` value specifier mis-resolves.
+ */
+import { healthEvents } from '@telora/daemon-core';
+import { createLogger } from '../shell/log.js';
+const log = createLogger({ module: 'external-hold' });
+/** Health-event code for a reference-less external hold held past the age bound. */
+export const EXTERNAL_HOLD_REFERENCE_LESS_STALE_CODE = 'external_hold.reference_less_stale';
+/**
+ * Deliveries already surfaced as holding a stale reference-less external hold, so
+ * the event fires once per delivery instead of every verify->done evaluation.
+ * Cleared for a delivery when its hold clears (surfaceStaleReferenceLessExternalHold
+ * is called with held=false). Module-level so it persists across ticks.
+ */
+const surfacedStaleHolds = new Set();
+/** Test-only: clear the dedup state. */
+export function __resetExternalHoldSurfaceForTests() {
+    surfacedStaleHolds.clear();
+}
+/**
+ * Surface (or clear) the stale reference-less signal for one delivery.
+ *
+ * Call after every resolveExternalHold. When `staleReferenceLess` is true, emit
+ * the health event once per delivery. When it is false (hold cleared, gained a
+ * reference, or still within the bound), drop the dedup entry so a later staleness
+ * re-surfaces cleanly, and pair a resolution so the operator view clears.
+ */
+export function surfaceStaleReferenceLessExternalHold(deliveryId, deliveryName, staleReferenceLess, hold) {
+    if (staleReferenceLess && hold) {
+        if (surfacedStaleHolds.has(deliveryId))
+            return;
+        surfacedStaleHolds.add(deliveryId);
+        log.warn(`[external-hold] Delivery "${deliveryName}" (${deliveryId}) has a REFERENCE-LESS external ` +
+            `hold held since ${hold.declaredAt} with no machine-readable clearing reference -- it cannot ` +
+            `self-clear; surfacing as ${EXTERNAL_HOLD_REFERENCE_LESS_STALE_CODE}.`);
+        healthEvents.emit({
+            severity: 'error',
+            source: `delivery:${deliveryId}`,
+            code: EXTERNAL_HOLD_REFERENCE_LESS_STALE_CODE,
+            message: `Delivery "${deliveryName}" is held out of done by a reference-less external hold ` +
+                `("${hold.condition}"; clears when: ${hold.clearsWhen}) declared ${hold.declaredAt}. It has no ` +
+                `re-readable clearing reference, so the daemon cannot self-clear it -- re-declare the hold with ` +
+                `a clearing reference, or clear it, so the delivery (and its focus) can reach done.`,
+        });
+        return;
+    }
+    // Not stale (or not held / gained a reference): drop the dedup entry so a future
+    // staleness re-surfaces, and pair a resolution.
+    if (surfacedStaleHolds.delete(deliveryId)) {
+        healthEvents.resolveByCode(EXTERNAL_HOLD_REFERENCE_LESS_STALE_CODE);
+    }
+}
+//# sourceMappingURL=external-hold-surface.js.map