@telora/daemon 0.21.98 → 0.21.144

package/build-info.json

@@ -1,6 +1,6 @@
 {
-  "commitSha": "f200ca5c0",
-  "builtAt": "2026-08-19T10:09:45.494Z",
+  "commitSha": "ba30420ae",
+  "builtAt": "2026-08-20T15:04:43.120Z",
   "expectedMigrations": [
     "20250829113330_create_org_nodes_table.sql",
     "20250829113402_fix_function_security_search_path.sql",
@@ -757,6 +757,9 @@
     "20260818164401_add_review_handoff_count.sql",
     "20260818164402_agent_escalations_kind_review_handoff_exhausted.sql",
     "20260818164403_agent_escalations_kind_respawn_cycle_exhausted.sql",
-    "20260818201246_agent_escalations_kind_restore_promoted_add_propagation_stale.sql"
+    "20260818201246_agent_escalations_kind_restore_promoted_add_propagation_stale.sql",
+    "20260819164725_iteration_count_exempt_instrument_fault.sql",
+    "20260819183306_add_durable_spawn_cooldown_columns.sql",
+    "20260819191559_add_durable_advancement_and_coverage_bounds.sql"
   ]
 }

package/dist/audit/audit-hooks.d.ts

@@ -13,6 +13,111 @@
  * `installExecutionWorktreeGuards` is the single entry point that applies the
  * right set for a worktree given its read-only flag.
  */
+import type { GitResult } from '../git/index.js';
+/**
+ * The git-runner seam. Defaults to the real `runGitSync`; tests inject a fake
+ * to drive the (otherwise hard-to-provoke) `extensions.worktreeConfig` /
+ * `--worktree` write-failure branches deterministically and to observe that no
+ * shared `core.hooksPath` write is ever attempted on any path.
+ */
+type GitRunner = (args: string[], cwd: string) => GitResult;
+/**
+ * Point THIS worktree's git hooks at its own `.telora-hooks/` dir, scoped so it
+ * cannot depend on -- or govern -- any OTHER worktree of the same repository.
+ *
+ * A plain `git config core.hooksPath ...` writes the SHARED `.git/config`
+ * (verified 2026-08-18 on git 2.47.3: a value set from a linked worktree reads
+ * back from the main checkout), so one focus's ephemeral worktree would govern
+ * hook execution for the whole repo -- and when that worktree is removed, git
+ * runs NO hooks anywhere and the attribution guard silently disappears. Instead
+ * we enable `extensions.worktreeConfig` (repo-global, idempotent) and write
+ * core.hooksPath with `git config --worktree`, so each worktree carries its own
+ * hooksPath and another worktree's create/reuse/removal cannot touch it.
+ *
+ * We NEVER write a shared `core.hooksPath` -- not even as a fallback. That write
+ * is the exact defect the migration/verification siblings exist to undo, and a
+ * fallback here would let the next provisioning cycle re-damage a repo the
+ * migration just repaired. So this fails CLOSED: if per-worktree scoping cannot
+ * be established (worktreeConfig will not enable, or the `--worktree` write
+ * fails), the repo's shared config is left untouched and this worktree simply
+ * runs WITHOUT the attribution guard.
+ *
+ * The enforcement self-check runs on EVERY path (there is no early return before
+ * it): on a failed path it finds the guard is not in effect and logs the loud
+ * "failing OPEN" WARN, which is how an unguarded worktree is reported.
+ */
+export declare function configureWorktreeHooksPath(worktreePath: string, hooksDir: string, runGit?: GitRunner): void;
+/**
+ * Migrate away a stale, daemon-written SHARED `core.hooksPath` that a pre-0.21.62
+ * daemon wrote pointing into a daemon worktree's `.telora-hooks` dir -- an
+ * ephemeral agent worktree under `.telora/worktrees/`, or the persistent merge
+ * worktree under `.telora/merge-worktree/`.
+ *
+ * `f629f3e63` (2026-08-18) switched new writes to per-worktree config
+ * (`git config --worktree`, see configureWorktreeHooksPath), fixing the CAUSE but
+ * leaving every already-damaged repo damaged: nothing unsets the stale shared
+ * value. That value is the single cause of both faces of the defect --
+ *   - while the worktree it names still exists, the guard is wrongly enforced in
+ *     the MAIN checkout (where it was never meant to apply); and
+ *   - once that worktree is deleted, git resolves a dangling hooksPath and runs
+ *     NO hooks anywhere, so the attribution guard silently disappears.
+ * Removing the stale shared value resolves both.
+ *
+ * Conservative about ownership. We read the SHARED value SPECIFICALLY via
+ * `git config --local --get core.hooksPath` (which reads `.git/config` and
+ * EXCLUDES the per-worktree `config.worktree` scope) -- NOT the plain
+ * `git config --get`, which layers worktree config on top and could report (and
+ * then delete) a live per-worktree value. We act only when that shared value
+ * carries the daemon's own hooks-dir SIGNATURE -- a `.telora-hooks` directory
+ * inside this repo's `.telora/` tree (under `.telora/worktrees/` for an ephemeral
+ * agent worktree, or `.telora/merge-worktree/` for the persistent merge worktree).
+ * Recognising by that signature, not by an agent-worktree path prefix, is what
+ * reaches the persistent merge worktree's value. A `core.hooksPath` pointing
+ * anywhere else (husky, lefthook, a hand-rolled setup, or a non-hooks path under
+ * `.telora/`) is left strictly alone; we err toward leaving it.
+ *
+ * The unset applies whether or not the pointed-at directory still exists: an
+ * alive-but-stale path is exactly the wrongful-enforcement face and must also be
+ * cleared. Per-worktree (`--worktree`) values the current code writes are never
+ * touched -- `--local` does not read or write that scope. Idempotent: a repo with
+ * no matching shared value is a no-op.
+ *
+ * Returns the removed value (for logging/tests) or null when nothing was cleared.
+ */
+export declare function migrateStaleSharedHooksPath(repoPath: string): {
+    removed: string | null;
+};
+/** How a repo's EFFECTIVE core.hooksPath resolves, from the checkout it runs in. */
+export type RepoHookEnforcementState = 'unset' | 'dangling' | 'enforced';
+/**
+ * Classify the git-hook enforcement state a repo is actually IN, evaluated from
+ * the checkout `repoPath` names -- not the state just written at worktree
+ * provisioning (that is `verifyHookEnforcementInEffect`).
+ *
+ * This closes the blind spot that let a silent fail-open survive the fix written
+ * to prevent silent fail-open: `verifyHookEnforcementInEffect` only ever inspects
+ * a worktree the daemon just configured, so the one place enforcement is silently
+ * absent -- the main checkout that inherited a stale shared value -- is the one
+ * place it never looks.
+ *
+ * Reads the EFFECTIVE value with `git config --get core.hooksPath` (worktree
+ * config layered over shared -- what git will actually use in this directory), so
+ * it must be run in the directory whose state you want to judge (the main
+ * checkout, to see what the main checkout inherits).
+ *
+ *   - unset     -> no core.hooksPath configured. This is the CORRECT steady state
+ *                  for a main checkout after the stale-value migration; NOT a
+ *                  fault, no warning.
+ *   - dangling  -> configured but the directory does not exist. git runs NO hooks
+ *                  here: the attribution guard is failing OPEN. Logged as a loud
+ *                  WARN naming the repo, the resolved path, and the consequence.
+ *   - enforced  -> configured and the directory exists (live enforcement). Fine.
+ *
+ * Files NO escalation for any state: this is observable repo state the daemon
+ * resolves itself via migrateStaleSharedHooksPath (config gaps are state, not
+ * escalations).
+ */
+export declare function checkRepoHookEnforcementState(repoPath: string): RepoHookEnforcementState;
 /**
  * Install a pre-commit hook in a worktree that blocks all commits.
  * Used for read-only audit sessions.
@@ -90,12 +195,21 @@ export declare function installReadOnlyAuditGuards(worktreePath: string): void;
  *     would wrongly PASS such a voided commit; this does not.
  *   - A trailing `Co-Authored-By:` (or any other trailer) in the same block
  *     still parses, so the commit PASSES -- the 2026-08-13 failure mode.
- *   - The value must be a well-formed UUID (8-4-4-4-12 hex); a malformed or
- *     truncated id FAILS.
+ *   - The value must be a well-formed UUID (8-4-4-4-12 hex) OR the explicit
+ *     non-delivery sentinel `Telora-Delivery: none` (NON_DELIVERY_SENTINEL,
+ *     matched case-insensitively); a malformed or truncated id FAILS, and a
+ *     sentinel voided into the body FAILS like any other voided value.
+ *
+ * The sentinel lets a genuinely delivery-less commit (daemon housekeeping, or
+ * any commit an agent cannot attribute to a delivery) declare itself as such
+ * rather than being forced to borrow a real delivery id -- which would falsely
+ * attribute that work to the borrowed delivery's verify evidence. It is a
+ * trailer VALUE, not a bypass: a sentinel commit is still labelled, so the
+ * verify gate's partition stays total (see NON_DELIVERY_SENTINEL in git-diff).
  *
- * The failure message names the missing trailer and prints the exact line +
- * the mandated `git commit --trailer` form, so an agent self-corrects without
- * escalating.
+ * The failure message names the missing trailer, the sentinel escape for a
+ * non-delivery commit, and the exact `git commit --trailer` forms, so an agent
+ * self-corrects without escalating or borrowing an id.
  *
  * The hook lives in the SAME `.telora-hooks/` directory as any audit
  * `pre-commit` hook, because `core.hooksPath` is a single value -- git runs
@@ -124,4 +238,5 @@ export declare function installDeliveryTrailerCommitMsgHook(worktreePath: string
  * read-only guarantee.
  */
 export declare function installExecutionWorktreeGuards(worktreePath: string, readOnly: boolean): void;
+export {};
 //# sourceMappingURL=audit-hooks.d.ts.map

package/dist/audit/audit-hooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-hooks.d.ts","sourceRoot":"","sources":["../../src/audit/audit-hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AA4EH;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAmCpE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAgB,wBAAwB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CA0BnE;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CA8BpE;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAIrE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAgB,mCAAmC,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAuE9E;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,8BAA8B,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,IAAI,CAK5F"}
+{"version":3,"file":"audit-hooks.d.ts","sourceRoot":"","sources":["../../src/audit/audit-hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAYjD;;;;;GAKG;AACH,KAAK,SAAS,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,KAAK,SAAS,CAAC;AAE5D;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,0BAA0B,CACxC,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,EAChB,MAAM,GAAE,SAAsB,GAC7B,IAAI,CAsBN;AA2BD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CA8CxF;AAED,oFAAoF;AACpF,MAAM,MAAM,wBAAwB,GAAG,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC;AAEzE;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,MAAM,GAAG,wBAAwB,CAiBxF;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAmCpE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAgB,wBAAwB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CA0BnE;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CA8BpE;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAIrE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,wBAAgB,mCAAmC,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAyF9E;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,8BAA8B,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,IAAI,CAK5F"}

package/dist/audit/audit-hooks.js

@@ -14,8 +14,9 @@
  * right set for a worktree given its read-only flag.
  */
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
-import { join } from 'node:path';
+import { basename, isAbsolute, join, resolve } from 'node:path';
 import { runGitSync } from '../git/index.js';
+import { NON_DELIVERY_SENTINEL } from '../resolvers/shared/git-diff.js';
 import { buildClaudeSettings, mergeClaudeSettings } from '../templates/claude-settings.js';
 import { ensureCodexConfigIgnoredInWorktree } from '../worktree/provision.js';
 import { createLogger } from '../shell/log.js';
@@ -35,27 +36,37 @@ const CODEX_READ_ONLY_BLOCK_END = '# END TELORA CODEX READ-ONLY';
  * core.hooksPath with `git config --worktree`, so each worktree carries its own
  * hooksPath and another worktree's create/reuse/removal cannot touch it.
  *
- * After writing, verifies the scoping is actually in effect and logs a loud WARN
- * if it is not -- a guard must never fail OPEN in silence.
+ * We NEVER write a shared `core.hooksPath` -- not even as a fallback. That write
+ * is the exact defect the migration/verification siblings exist to undo, and a
+ * fallback here would let the next provisioning cycle re-damage a repo the
+ * migration just repaired. So this fails CLOSED: if per-worktree scoping cannot
+ * be established (worktreeConfig will not enable, or the `--worktree` write
+ * fails), the repo's shared config is left untouched and this worktree simply
+ * runs WITHOUT the attribution guard.
+ *
+ * The enforcement self-check runs on EVERY path (there is no early return before
+ * it): on a failed path it finds the guard is not in effect and logs the loud
+ * "failing OPEN" WARN, which is how an unguarded worktree is reported.
  */
-function configureWorktreeHooksPath(worktreePath, hooksDir) {
+export function configureWorktreeHooksPath(worktreePath, hooksDir, runGit = runGitSync) {
     // extensions.worktreeConfig must be enabled before `git config --worktree`
     // will accept a write; enabling it is repo-global and idempotent.
-    const enable = runGitSync(['config', 'extensions.worktreeConfig', 'true'], worktreePath);
+    const enable = runGit(['config', 'extensions.worktreeConfig', 'true'], worktreePath);
     if (!enable.success) {
         log.warn(`[audit-hooks] Could not enable extensions.worktreeConfig for ${worktreePath}: ` +
-            `${enable.error}. Falling back to shared core.hooksPath (repo-global) -- ` +
-            `hook enforcement may leak across worktrees.`);
-        runGitSync(['config', 'core.hooksPath', hooksDir], worktreePath);
-        return;
+            `${enable.error}. NOT writing a shared core.hooksPath (that would leak across ` +
+            `worktrees and undo the stale-value migration); this worktree will run WITHOUT ` +
+            `the attribution guard. Shared config left untouched.`);
     }
-    const set = runGitSync(['config', '--worktree', 'core.hooksPath', hooksDir], worktreePath);
-    if (!set.success) {
-        log.warn(`[audit-hooks] Could not set per-worktree core.hooksPath for ${worktreePath}: ` +
-            `${set.error}. Falling back to shared core.hooksPath.`);
-        runGitSync(['config', 'core.hooksPath', hooksDir], worktreePath);
+    else {
+        const set = runGit(['config', '--worktree', 'core.hooksPath', hooksDir], worktreePath);
+        if (!set.success) {
+            log.warn(`[audit-hooks] Could not set per-worktree core.hooksPath for ${worktreePath}: ` +
+                `${set.error}. NOT falling back to a shared core.hooksPath; this worktree will ` +
+                `run WITHOUT the attribution guard. Shared config left untouched.`);
+        }
     }
-    verifyHookEnforcementInEffect(worktreePath, hooksDir);
+    verifyHookEnforcementInEffect(worktreePath, hooksDir, runGit);
 }
 /**
  * Confirm the commit-msg guard is actually in force for a worktree: its resolved
@@ -63,8 +74,8 @@ function configureWorktreeHooksPath(worktreePath, hooksDir) {
  * exists there. When enforcement is EXPECTED but not in effect, log a loud WARN
  * -- the guard must not fail open unnoticed.
  */
-function verifyHookEnforcementInEffect(worktreePath, hooksDir) {
-    const resolved = runGitSync(['config', '--get', 'core.hooksPath'], worktreePath);
+function verifyHookEnforcementInEffect(worktreePath, hooksDir, runGit = runGitSync) {
+    const resolved = runGit(['config', '--get', 'core.hooksPath'], worktreePath);
     const resolvedPath = resolved.success ? resolved.output.trim() : '';
     const hookFile = join(hooksDir, 'commit-msg');
     const hookPresent = existsSync(hookFile);
@@ -75,6 +86,128 @@ function verifyHookEnforcementInEffect(worktreePath, hooksDir) {
             `commits in this worktree are not being checked.`);
     }
 }
+/**
+ * Migrate away a stale, daemon-written SHARED `core.hooksPath` that a pre-0.21.62
+ * daemon wrote pointing into a daemon worktree's `.telora-hooks` dir -- an
+ * ephemeral agent worktree under `.telora/worktrees/`, or the persistent merge
+ * worktree under `.telora/merge-worktree/`.
+ *
+ * `f629f3e63` (2026-08-18) switched new writes to per-worktree config
+ * (`git config --worktree`, see configureWorktreeHooksPath), fixing the CAUSE but
+ * leaving every already-damaged repo damaged: nothing unsets the stale shared
+ * value. That value is the single cause of both faces of the defect --
+ *   - while the worktree it names still exists, the guard is wrongly enforced in
+ *     the MAIN checkout (where it was never meant to apply); and
+ *   - once that worktree is deleted, git resolves a dangling hooksPath and runs
+ *     NO hooks anywhere, so the attribution guard silently disappears.
+ * Removing the stale shared value resolves both.
+ *
+ * Conservative about ownership. We read the SHARED value SPECIFICALLY via
+ * `git config --local --get core.hooksPath` (which reads `.git/config` and
+ * EXCLUDES the per-worktree `config.worktree` scope) -- NOT the plain
+ * `git config --get`, which layers worktree config on top and could report (and
+ * then delete) a live per-worktree value. We act only when that shared value
+ * carries the daemon's own hooks-dir SIGNATURE -- a `.telora-hooks` directory
+ * inside this repo's `.telora/` tree (under `.telora/worktrees/` for an ephemeral
+ * agent worktree, or `.telora/merge-worktree/` for the persistent merge worktree).
+ * Recognising by that signature, not by an agent-worktree path prefix, is what
+ * reaches the persistent merge worktree's value. A `core.hooksPath` pointing
+ * anywhere else (husky, lefthook, a hand-rolled setup, or a non-hooks path under
+ * `.telora/`) is left strictly alone; we err toward leaving it.
+ *
+ * The unset applies whether or not the pointed-at directory still exists: an
+ * alive-but-stale path is exactly the wrongful-enforcement face and must also be
+ * cleared. Per-worktree (`--worktree`) values the current code writes are never
+ * touched -- `--local` does not read or write that scope. Idempotent: a repo with
+ * no matching shared value is a no-op.
+ *
+ * Returns the removed value (for logging/tests) or null when nothing was cleared.
+ */
+export function migrateStaleSharedHooksPath(repoPath) {
+    // Read the SHARED value only. `--local` targets `.git/config` and never the
+    // per-worktree `config.worktree`, so a live `--worktree` value cannot be seen
+    // (or clobbered) here.
+    const read = runGitSync(['config', '--local', '--get', 'core.hooksPath'], repoPath);
+    if (!read.success) {
+        // Not set in the shared scope (git exits non-zero) -- nothing to migrate.
+        return { removed: null };
+    }
+    const value = read.output.trim();
+    if (!value)
+        return { removed: null };
+    // Resolve the value to an absolute path (git may have stored a relative one)
+    // and require it to carry the daemon's own hooks-dir SIGNATURE: a `.telora-hooks`
+    // directory inside THIS repo's `.telora/` tree. That recognises a daemon write
+    // wherever the worktree lives -- an ephemeral agent worktree
+    // (`.telora/worktrees/<name>/.telora-hooks`) OR the persistent merge worktree
+    // (`.telora/merge-worktree/.telora-hooks`), which the daemon configures the same
+    // way. Matching the `.telora-hooks` signature rather than the `.telora/worktrees/`
+    // path PREFIX is what reaches the merge-worktree value; because that worktree
+    // persists, its stale shared value would otherwise never resolve itself.
+    // Anything else is foreign (husky, lefthook, a hand-rolled setup, or a non-hooks
+    // path under `.telora/`); leave it alone.
+    const resolvedValue = isAbsolute(value) ? resolve(value) : resolve(repoPath, value);
+    const teloraRoot = resolve(repoPath, '.telora');
+    const underTelora = resolvedValue === teloraRoot || resolvedValue.startsWith(teloraRoot + '/');
+    const isDaemonHooksDir = underTelora && basename(resolvedValue) === '.telora-hooks';
+    if (!isDaemonHooksDir) {
+        return { removed: null };
+    }
+    const unset = runGitSync(['config', '--local', '--unset', 'core.hooksPath'], repoPath);
+    if (!unset.success) {
+        log.warn(`[audit-hooks] Failed to unset stale shared core.hooksPath='${value}' in ${repoPath}: ` +
+            `${unset.error}. The stale value remains and the guard may still misfire in the main checkout.`);
+        return { removed: null };
+    }
+    log.info(`[audit-hooks] Unset stale shared core.hooksPath='${value}' in ${repoPath}: it pointed inside ` +
+        `.telora/worktrees/ (a pre-0.21.62 daemon write). The main checkout no longer inherits a ` +
+        `dangling/leaked hooks path.`);
+    return { removed: value };
+}
+/**
+ * Classify the git-hook enforcement state a repo is actually IN, evaluated from
+ * the checkout `repoPath` names -- not the state just written at worktree
+ * provisioning (that is `verifyHookEnforcementInEffect`).
+ *
+ * This closes the blind spot that let a silent fail-open survive the fix written
+ * to prevent silent fail-open: `verifyHookEnforcementInEffect` only ever inspects
+ * a worktree the daemon just configured, so the one place enforcement is silently
+ * absent -- the main checkout that inherited a stale shared value -- is the one
+ * place it never looks.
+ *
+ * Reads the EFFECTIVE value with `git config --get core.hooksPath` (worktree
+ * config layered over shared -- what git will actually use in this directory), so
+ * it must be run in the directory whose state you want to judge (the main
+ * checkout, to see what the main checkout inherits).
+ *
+ *   - unset     -> no core.hooksPath configured. This is the CORRECT steady state
+ *                  for a main checkout after the stale-value migration; NOT a
+ *                  fault, no warning.
+ *   - dangling  -> configured but the directory does not exist. git runs NO hooks
+ *                  here: the attribution guard is failing OPEN. Logged as a loud
+ *                  WARN naming the repo, the resolved path, and the consequence.
+ *   - enforced  -> configured and the directory exists (live enforcement). Fine.
+ *
+ * Files NO escalation for any state: this is observable repo state the daemon
+ * resolves itself via migrateStaleSharedHooksPath (config gaps are state, not
+ * escalations).
+ */
+export function checkRepoHookEnforcementState(repoPath) {
+    const resolved = runGitSync(['config', '--get', 'core.hooksPath'], repoPath);
+    const resolvedPath = resolved.success ? resolved.output.trim() : '';
+    if (!resolvedPath) {
+        return 'unset';
+    }
+    const absPath = isAbsolute(resolvedPath) ? resolvedPath : resolve(repoPath, resolvedPath);
+    if (!existsSync(absPath)) {
+        log.warn(`[audit-hooks] Hook enforcement is failing OPEN in ${repoPath}: resolved ` +
+            `core.hooksPath='${resolvedPath}' points at a directory that does not exist, so git runs ` +
+            `NO hooks here and the attribution guard is not running. ` +
+            `(The stale-shared-value migration clears this when the value points inside .telora/worktrees/.)`);
+        return 'dangling';
+    }
+    return 'enforced';
+}
 /**
  * Install a pre-commit hook in a worktree that blocks all commits.
  * Used for read-only audit sessions.
@@ -236,12 +369,21 @@ export function installReadOnlyAuditGuards(worktreePath) {
  *     would wrongly PASS such a voided commit; this does not.
  *   - A trailing `Co-Authored-By:` (or any other trailer) in the same block
  *     still parses, so the commit PASSES -- the 2026-08-13 failure mode.
- *   - The value must be a well-formed UUID (8-4-4-4-12 hex); a malformed or
- *     truncated id FAILS.
+ *   - The value must be a well-formed UUID (8-4-4-4-12 hex) OR the explicit
+ *     non-delivery sentinel `Telora-Delivery: none` (NON_DELIVERY_SENTINEL,
+ *     matched case-insensitively); a malformed or truncated id FAILS, and a
+ *     sentinel voided into the body FAILS like any other voided value.
  *
- * The failure message names the missing trailer and prints the exact line +
- * the mandated `git commit --trailer` form, so an agent self-corrects without
- * escalating.
+ * The sentinel lets a genuinely delivery-less commit (daemon housekeeping, or
+ * any commit an agent cannot attribute to a delivery) declare itself as such
+ * rather than being forced to borrow a real delivery id -- which would falsely
+ * attribute that work to the borrowed delivery's verify evidence. It is a
+ * trailer VALUE, not a bypass: a sentinel commit is still labelled, so the
+ * verify gate's partition stays total (see NON_DELIVERY_SENTINEL in git-diff).
+ *
+ * The failure message names the missing trailer, the sentinel escape for a
+ * non-delivery commit, and the exact `git commit --trailer` forms, so an agent
+ * self-corrects without escalating or borrowing an id.
  *
  * The hook lives in the SAME `.telora-hooks/` directory as any audit
  * `pre-commit` hook, because `core.hooksPath` is a single value -- git runs
@@ -282,32 +424,50 @@ export function installDeliveryTrailerCommitMsgHook(worktreePath) {
         '  | grep -i \'^Telora-Delivery:\' | head -n1 | sed \'s/^[^:]*:[[:space:]]*//\' | tr -d \'[:space:]\')"',
         '',
         'uuid_re=\'^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$\'',
+        `sentinel_lc='${NON_DELIVERY_SENTINEL.toLowerCase()}'`,
         '',
-        'if [[ ! "$value" =~ $uuid_re ]]; then',
-        '  echo "" >&2',
-        '  echo "========================================================" >&2',
-        '  echo "  COMMIT REFUSED: missing Telora-Delivery trailer" >&2',
-        '  echo "========================================================" >&2',
-        '  echo "" >&2',
-        '  echo "  Every commit must carry a well-formed delivery trailer:" >&2',
-        '  echo "" >&2',
-        '  echo "      Telora-Delivery: <deliveryId>" >&2',
-        '  echo "" >&2',
-        '  echo "  Add it as a git TRAILER (not a body line) so an appended" >&2',
-        '  echo "  Co-Authored-By cannot void it:" >&2',
-        '  echo "" >&2',
-        '  echo "      git commit --trailer \\"Telora-Delivery: <deliveryId>\\" -m \\"<subject>\\"" >&2',
-        '  echo "" >&2',
-        '  echo "  To fix the commit you just attempted:" >&2',
-        '  echo "" >&2',
-        '  echo "      git commit --amend --no-edit --trailer \\"Telora-Delivery: <deliveryId>\\"" >&2',
-        '  echo "" >&2',
-        '  echo "========================================================" >&2',
-        '  echo "" >&2',
-        '  exit 1',
+        '# Accept either a well-formed delivery UUID or the explicit non-delivery',
+        '# sentinel (`Telora-Delivery: none`, matched case-insensitively like the',
+        '# trailer key). A sentinel commit declares itself delivery-less but is still',
+        "# a LABELLED commit git's trailer parser reads back, so the verify gate's",
+        '# partition stays total. Everything else is refused -- including a sentinel',
+        '# voided into the commit BODY, which git does not parse, so $value is empty.',
+        'value_lc="$(printf %s "$value" | tr \'[:upper:]\' \'[:lower:]\')"',
+        'if [[ "$value" =~ $uuid_re || "$value_lc" == "$sentinel_lc" ]]; then',
+        '  exit 0',
         'fi',
         '',
-        'exit 0',
+        'echo "" >&2',
+        'echo "========================================================" >&2',
+        'echo "  COMMIT REFUSED: missing Telora-Delivery trailer" >&2',
+        'echo "========================================================" >&2',
+        'echo "" >&2',
+        'echo "  Every commit must carry a well-formed delivery trailer:" >&2',
+        'echo "" >&2',
+        'echo "      Telora-Delivery: <deliveryId>" >&2',
+        'echo "" >&2',
+        'echo "  Add it as a git TRAILER (not a body line) so an appended" >&2',
+        'echo "  Co-Authored-By cannot void it:" >&2',
+        'echo "" >&2',
+        'echo "      git commit --trailer \\"Telora-Delivery: <deliveryId>\\" -m \\"<subject>\\"" >&2',
+        'echo "" >&2',
+        'echo "  To fix the commit you just attempted:" >&2',
+        'echo "" >&2',
+        'echo "      git commit --amend --no-edit --trailer \\"Telora-Delivery: <deliveryId>\\"" >&2',
+        'echo "" >&2',
+        'echo "  If this commit genuinely belongs to NO delivery (daemon" >&2',
+        'echo "  housekeeping, or work you cannot attribute to one), do NOT" >&2',
+        'echo "  borrow a real delivery id: that FALSELY ATTRIBUTES this work to" >&2',
+        'echo "  that delivery, partitioning its verify-gate evidence to include" >&2',
+        'echo "  commits that are not its own. Declare it delivery-less instead:" >&2',
+        'echo "" >&2',
+        `echo "      git commit --trailer \\"Telora-Delivery: ${NON_DELIVERY_SENTINEL}\\" -m \\"<subject>\\"" >&2`,
+        'echo "" >&2',
+        'echo "  (Merge commits are exempt by shape and need no trailer.)" >&2',
+        'echo "" >&2',
+        'echo "========================================================" >&2',
+        'echo "" >&2',
+        'exit 1',
         '',
     ].join('\n');
     const hookPath = join(hooksDir, 'commit-msg');

package/dist/audit/audit-hooks.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit-hooks.js","sourceRoot":"","sources":["../../src/audit/audit-hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC3F,OAAO,EAAE,kCAAkC,EAAE,MAAM,0BAA0B,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;AAGpD,MAAM,2BAA2B,GAAG,gCAAgC,CAAC;AACrE,MAAM,yBAAyB,GAAG,8BAA8B,CAAC;AAEjE;;;;;;;;;;;;;;;GAeG;AACH,SAAS,0BAA0B,CAAC,YAAoB,EAAE,QAAgB;IACxE,2EAA2E;IAC3E,kEAAkE;IAClE,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,QAAQ,EAAE,2BAA2B,EAAE,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC;IACzF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,GAAG,CAAC,IAAI,CACN,gEAAgE,YAAY,IAAI;YAC9E,GAAG,MAAM,CAAC,KAAK,2DAA2D;YAC1E,6CAA6C,CAChD,CAAC;QACF,UAAU,CAAC,CAAC,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC;QACjE,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,gBAAgB,EAAE,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC;IAC3F,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACjB,GAAG,CAAC,IAAI,CACN,+DAA+D,YAAY,IAAI;YAC7E,GAAG,GAAG,CAAC,KAAK,0CAA0C,CACzD,CAAC;QACF,UAAU,CAAC,CAAC,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC;IACnE,CAAC;IACD,6BAA6B,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,SAAS,6BAA6B,CAAC,YAAoB,EAAE,QAAgB;IAC3E,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,YAAY,CAAC,CAAC;IACjF,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,YAAY,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QAC9C,GAAG,CAAC,IAAI,CACN,uDAAuD,YAAY,IAAI;YACrE,4BAA4B,YAAY,gBAAgB,QAAQ,MAAM;YACtE,sBAAsB,WAAW,6CAA6C;YAC9E,iDAAiD,CACpD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,YAAoB;IAC5D,sDAAsD;IACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,UAAU,GAAG;QACjB,aAAa;QACb,SAAS;QACT,iEAAiE;QACjE,kCAAkC;QAClC,iEAAiE;QACjE,SAAS;QACT,wDAAwD;QACxD,0CAA0C;QAC1C,SAAS;QACT,sCAAsC;QACtC,iDAAiD;QACjD,oDAAoD;QACpD,iDAAiD;QACjD,SAAS;QACT,iEAAiE;QACjE,SAAS;QACT,QAAQ;QACR,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC9C,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAErD,4EAA4E;IAC5E,kEAAkE;IAClE,+BAA+B;IAC/B,0BAA0B,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,wBAAwB,CAAC,YAAoB;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAEhD,IAAI,QAAQ,GAAmC,IAAI,CAAC;IACpD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;YAC/D,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnE,QAAQ,GAAG,MAAiC,CAAC;YAC/C,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,0EAA0E;YAC1E,uDAAuD;YACvD,GAAG,CAAC,IAAI,CACN,0BAA0B,YAAY,0DAA0D;gBAC9F,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACxD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,mBAAmB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtF,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CAAC,YAAoB;IAC5D,kCAAkC,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjF,MAAM,KAAK,GAAG;QACZ,2BAA2B;QAC3B,4DAA4D;QAC5D,wDAAwD;QACxD,EAAE;QACF,2CAA2C;QAC3C,qBAAqB;QACrB,uCAAuC;QACvC,EAAE;QACF,wCAAwC;QACxC,iBAAiB;QACjB,yBAAyB;KAC1B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,aAAa,GAAG,IAAI,MAAM,CAC9B,GAAG,2BAA2B,aAAa,yBAAyB,MAAM,EAC1E,GAAG,CACJ,CAAC;IACF,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACtE,MAAM,SAAS,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,aAAa,CAAC,UAAU,EAAE,GAAG,eAAe,GAAG,SAAS,GAAG,KAAK,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACzF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,YAAoB;IAC7D,yBAAyB,CAAC,YAAY,CAAC,CAAC;IACxC,wBAAwB,CAAC,YAAY,CAAC,CAAC;IACvC,yBAAyB,CAAC,YAAY,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,mCAAmC,CAAC,YAAoB;IACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,UAAU,GAAG;QACjB,aAAa;QACb,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,GAAG;QACH,gFAAgF;QAChF,+EAA+E;QAC/E,eAAe;QACf,EAAE;QACF,2EAA2E;QAC3E,4EAA4E;QAC5E,iFAAiF;QACjF,gFAAgF;QAChF,kFAAkF;QAClF,uEAAuE;QACvE,kFAAkF;QAClF,+DAA+D;QAC/D,UAAU;QACV,IAAI;QACJ,EAAE;QACF,0EAA0E;QAC1E,4EAA4E;QAC5E,4EAA4E;QAC5E,oEAAoE;QACpE,wGAAwG;QACxG,EAAE;QACF,2FAA2F;QAC3F,EAAE;QACF,uCAAuC;QACvC,eAAe;QACf,uEAAuE;QACvE,gEAAgE;QAChE,uEAAuE;QACvE,eAAe;QACf,wEAAwE;QACxE,eAAe;QACf,kDAAkD;QAClD,eAAe;QACf,yEAAyE;QACzE,+CAA+C;QAC/C,eAAe;QACf,gGAAgG;QAChG,eAAe;QACf,sDAAsD;QACtD,eAAe;QACf,+FAA+F;QAC/F,eAAe;QACf,uEAAuE;QACvE,eAAe;QACf,UAAU;QACV,IAAI;QACJ,EAAE;QACF,QAAQ;QACR,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC9C,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAErD,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E,mCAAmC;IACnC,0BAA0B,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,8BAA8B,CAAC,YAAoB,EAAE,QAAiB;IACpF,mCAAmC,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,QAAQ,EAAE,CAAC;QACb,0BAA0B,CAAC,YAAY,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC"}
+{"version":3,"file":"audit-hooks.js","sourceRoot":"","sources":["../../src/audit/audit-hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC3F,OAAO,EAAE,kCAAkC,EAAE,MAAM,0BAA0B,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;AAGpD,MAAM,2BAA2B,GAAG,gCAAgC,CAAC;AACrE,MAAM,yBAAyB,GAAG,8BAA8B,CAAC;AAUjE;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,0BAA0B,CACxC,YAAoB,EACpB,QAAgB,EAChB,SAAoB,UAAU;IAE9B,2EAA2E;IAC3E,kEAAkE;IAClE,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,QAAQ,EAAE,2BAA2B,EAAE,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC;IACrF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,GAAG,CAAC,IAAI,CACN,gEAAgE,YAAY,IAAI;YAC9E,GAAG,MAAM,CAAC,KAAK,gEAAgE;YAC/E,gFAAgF;YAChF,sDAAsD,CACzD,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,gBAAgB,EAAE,QAAQ,CAAC,EAAE,YAAY,CAAC,CAAC;QACvF,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACjB,GAAG,CAAC,IAAI,CACN,+DAA+D,YAAY,IAAI;gBAC7E,GAAG,GAAG,CAAC,KAAK,oEAAoE;gBAChF,kEAAkE,CACrE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,6BAA6B,CAAC,YAAY,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AAChE,CAAC;AAED;;;;;GAKG;AACH,SAAS,6BAA6B,CACpC,YAAoB,EACpB,QAAgB,EAChB,SAAoB,UAAU;IAE9B,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,YAAY,CAAC,CAAC;IAC7E,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,YAAY,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QAC9C,GAAG,CAAC,IAAI,CACN,uDAAuD,YAAY,IAAI;YACrE,4BAA4B,YAAY,gBAAgB,QAAQ,MAAM;YACtE,sBAAsB,WAAW,6CAA6C;YAC9E,iDAAiD,CACpD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAM,UAAU,2BAA2B,CAAC,QAAgB;IAC1D,4EAA4E;IAC5E,8EAA8E;IAC9E,uBAAuB;IACvB,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpF,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,0EAA0E;QAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAErC,6EAA6E;IAC7E,kFAAkF;IAClF,+EAA+E;IAC/E,6DAA6D;IAC7D,8EAA8E;IAC9E,iFAAiF;IACjF,mFAAmF;IACnF,8EAA8E;IAC9E,yEAAyE;IACzE,iFAAiF;IACjF,0CAA0C;IAC1C,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACpF,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAChD,MAAM,WAAW,GACf,aAAa,KAAK,UAAU,IAAI,aAAa,CAAC,UAAU,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC;IAC7E,MAAM,gBAAgB,GAAG,WAAW,IAAI,QAAQ,CAAC,aAAa,CAAC,KAAK,eAAe,CAAC;IACpF,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,gBAAgB,CAAC,EAAE,QAAQ,CAAC,CAAC;IACvF,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACnB,GAAG,CAAC,IAAI,CACN,8DAA8D,KAAK,QAAQ,QAAQ,IAAI;YACrF,GAAG,KAAK,CAAC,KAAK,iFAAiF,CAClG,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,GAAG,CAAC,IAAI,CACN,oDAAoD,KAAK,QAAQ,QAAQ,sBAAsB;QAC7F,0FAA0F;QAC1F,6BAA6B,CAChC,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAKD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,6BAA6B,CAAC,QAAgB;IAC5D,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC7E,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,OAAO,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC1F,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CACN,qDAAqD,QAAQ,aAAa;YACxE,mBAAmB,YAAY,2DAA2D;YAC1F,0DAA0D;YAC1D,iGAAiG,CACpG,CAAC;QACF,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,YAAoB;IAC5D,sDAAsD;IACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,UAAU,GAAG;QACjB,aAAa;QACb,SAAS;QACT,iEAAiE;QACjE,kCAAkC;QAClC,iEAAiE;QACjE,SAAS;QACT,wDAAwD;QACxD,0CAA0C;QAC1C,SAAS;QACT,sCAAsC;QACtC,iDAAiD;QACjD,oDAAoD;QACpD,iDAAiD;QACjD,SAAS;QACT,iEAAiE;QACjE,SAAS;QACT,QAAQ;QACR,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC9C,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAErD,4EAA4E;IAC5E,kEAAkE;IAClE,+BAA+B;IAC/B,0BAA0B,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,wBAAwB,CAAC,YAAoB;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAEhD,IAAI,QAAQ,GAAmC,IAAI,CAAC;IACpD,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;YAC/D,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnE,QAAQ,GAAG,MAAiC,CAAC;YAC/C,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,0EAA0E;YAC1E,uDAAuD;YACvD,GAAG,CAAC,IAAI,CACN,0BAA0B,YAAY,0DAA0D;gBAC9F,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACxD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,mBAAmB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtF,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACtE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CAAC,YAAoB;IAC5D,kCAAkC,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACjF,MAAM,KAAK,GAAG;QACZ,2BAA2B;QAC3B,4DAA4D;QAC5D,wDAAwD;QACxD,EAAE;QACF,2CAA2C;QAC3C,qBAAqB;QACrB,uCAAuC;QACvC,EAAE;QACF,wCAAwC;QACxC,iBAAiB;QACjB,yBAAyB;KAC1B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,aAAa,GAAG,IAAI,MAAM,CAC9B,GAAG,2BAA2B,aAAa,yBAAyB,MAAM,EAC1E,GAAG,CACJ,CAAC;IACF,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACtE,MAAM,SAAS,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,aAAa,CAAC,UAAU,EAAE,GAAG,eAAe,GAAG,SAAS,GAAG,KAAK,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACzF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,YAAoB;IAC7D,yBAAyB,CAAC,YAAY,CAAC,CAAC;IACxC,wBAAwB,CAAC,YAAY,CAAC,CAAC;IACvC,yBAAyB,CAAC,YAAY,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,MAAM,UAAU,mCAAmC,CAAC,YAAoB;IACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,UAAU,GAAG;QACjB,aAAa;QACb,4EAA4E;QAC5E,4EAA4E;QAC5E,4EAA4E;QAC5E,GAAG;QACH,gFAAgF;QAChF,+EAA+E;QAC/E,eAAe;QACf,EAAE;QACF,2EAA2E;QAC3E,4EAA4E;QAC5E,iFAAiF;QACjF,gFAAgF;QAChF,kFAAkF;QAClF,uEAAuE;QACvE,kFAAkF;QAClF,+DAA+D;QAC/D,UAAU;QACV,IAAI;QACJ,EAAE;QACF,0EAA0E;QAC1E,4EAA4E;QAC5E,4EAA4E;QAC5E,oEAAoE;QACpE,wGAAwG;QACxG,EAAE;QACF,2FAA2F;QAC3F,gBAAgB,qBAAqB,CAAC,WAAW,EAAE,GAAG;QACtD,EAAE;QACF,0EAA0E;QAC1E,0EAA0E;QAC1E,8EAA8E;QAC9E,2EAA2E;QAC3E,6EAA6E;QAC7E,8EAA8E;QAC9E,mEAAmE;QACnE,sEAAsE;QACtE,UAAU;QACV,IAAI;QACJ,EAAE;QACF,aAAa;QACb,qEAAqE;QACrE,8DAA8D;QAC9D,qEAAqE;QACrE,aAAa;QACb,sEAAsE;QACtE,aAAa;QACb,gDAAgD;QAChD,aAAa;QACb,uEAAuE;QACvE,6CAA6C;QAC7C,aAAa;QACb,8FAA8F;QAC9F,aAAa;QACb,oDAAoD;QACpD,aAAa;QACb,6FAA6F;QAC7F,aAAa;QACb,sEAAsE;QACtE,yEAAyE;QACzE,8EAA8E;QAC9E,8EAA8E;QAC9E,8EAA8E;QAC9E,aAAa;QACb,wDAAwD,qBAAqB,6BAA6B;QAC1G,aAAa;QACb,uEAAuE;QACvE,aAAa;QACb,qEAAqE;QACrE,aAAa;QACb,QAAQ;QACR,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAC9C,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAErD,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E,mCAAmC;IACnC,0BAA0B,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,8BAA8B,CAAC,YAAoB,EAAE,QAAiB;IACpF,mCAAmC,CAAC,YAAY,CAAC,CAAC;IAClD,IAAI,QAAQ,EAAE,CAAC;QACb,0BAA0B,CAAC,YAAY,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC"}

package/dist/ci/ci-escalation.js

@@ -7,7 +7,7 @@
  * escalation rather than disappearing into the log.
  */
 import { ESCALATION_REASONS, ESCALATION_DISPOSITIONS } from '@telora/daemon-core';
-import { createEscalation } from '../queries/issues.js';
+import { createEscalation } from '../queries/escalations.js';
 import { createLogger } from '../shell/log.js';
 const log = createLogger({ module: 'CD' });
 export const CD_PUSH_FAILED_KIND = 'cd_push_failed';

package/dist/ci/ci-escalation.js.map

@@ -1 +1 @@
-{"version":3,"file":"ci-escalation.js","sourceRoot":"","sources":["../../src/ci/ci-escalation.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAG3C,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AAEpD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,0BAA0B,CACxC,YAAqB,EACrB,MAA4C;IAE5C,OAAO,YAAY,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzF,CAAC;AAWD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAA8B;IAE9B,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAC/F,IAAI,CAAC;QACH,MAAM,gBAAgB,CAAC;YACrB,cAAc;YACd,SAAS;YACT,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,kBAAkB,CAAC,iBAAiB;YAChD,qEAAqE;YACrE,WAAW,EAAE,uBAAuB,CAAC,cAAc;YACnD,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE;YAC9C,WAAW,EACT,0CAA0C,iBAAiB,iBAAiB;gBAC5E,cAAc,SAAS,IAAI;gBAC3B,iBAAiB,OAAO,IAAI;gBAC5B,cAAc,SAAS,MAAM;gBAC7B,oFAAoF;gBACpF,6DAA6D;YAC/D,YAAY,EAAE,+CAA+C;YAC7D,UAAU,EACR,uEAAuE;gBACvE,0DAA0D;YAC5D,cAAc,EAAE,mBAAmB;YACnC,2EAA2E;YAC3E,QAAQ,EAAE;gBACR,kBAAkB,EAAE,iBAAiB;gBACrC,UAAU,EAAE,SAAS;aACtB;SACF,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,6CAA6C,OAAO,MAAM,SAAS,IAAI,CAAC,CAAC;IACpF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CACN,2DAA2D,OAAO,GAAG,EACpE,GAAa,CAAC,OAAO,CACvB,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"ci-escalation.js","sourceRoot":"","sources":["../../src/ci/ci-escalation.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAG3C,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AAEpD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,0BAA0B,CACxC,YAAqB,EACrB,MAA4C;IAE5C,OAAO,YAAY,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzF,CAAC;AAWD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAA8B;IAE9B,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAC/F,IAAI,CAAC;QACH,MAAM,gBAAgB,CAAC;YACrB,cAAc;YACd,SAAS;YACT,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,kBAAkB,CAAC,iBAAiB;YAChD,qEAAqE;YACrE,WAAW,EAAE,uBAAuB,CAAC,cAAc;YACnD,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE;YAC9C,WAAW,EACT,0CAA0C,iBAAiB,iBAAiB;gBAC5E,cAAc,SAAS,IAAI;gBAC3B,iBAAiB,OAAO,IAAI;gBAC5B,cAAc,SAAS,MAAM;gBAC7B,oFAAoF;gBACpF,6DAA6D;YAC/D,YAAY,EAAE,+CAA+C;YAC7D,UAAU,EACR,uEAAuE;gBACvE,0DAA0D;YAC5D,cAAc,EAAE,mBAAmB;YACnC,2EAA2E;YAC3E,QAAQ,EAAE;gBACR,kBAAkB,EAAE,iBAAiB;gBACrC,UAAU,EAAE,SAAS;aACtB;SACF,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,6CAA6C,OAAO,MAAM,SAAS,IAAI,CAAC,CAAC;IACpF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CACN,2DAA2D,OAAO,GAAG,EACpE,GAAa,CAAC,OAAO,CACvB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/ci/ci-sensor-loop.d.ts

@@ -42,8 +42,36 @@
  */
 import type { DaemonConfig } from '../types/index.js';
 import { type CiStatusReader } from './ci-status.js';
+/** Health-event code for a red integration run that has no team to route to. */
+export declare const MERGE_HELD_NO_RECEIVER_CODE = "merge.held_no_receiver";
+/** Test-only: clear the held-gate dedup state. */
+export declare function __resetCiSensorHealthStateForTests(): void;
 /** escalation_kind for a red CI run on integration. */
 export declare const CI_RUN_RED_ESCALATION_KIND = "ci_run_red";
+/**
+ * The working posture a ci_run_red filing sets ("CI green is priority one until
+ * the red clears") and the condition under which that posture ENDS. Recorded as
+ * structured metadata on the filing so a team INHERITING the escalation can tell,
+ * from the escalation itself and not only its prose, whether the obligation still
+ * binds. The exit is the escalation's own resolution: when a later integration
+ * run goes green, defaultResolveCiRedEscalations marks the row resolved -- the
+ * SAME event that ends the posture. A machine-written obligation with no exit is
+ * the defect this carries the fix for (cf. "Every daemon-written state has an
+ * exit or names a human act").
+ */
+export declare const CI_RUN_RED_POSTURE = "ci_green_priority";
+export declare const CI_RUN_RED_POSTURE_TERMINATES = "escalation_resolved";
+/**
+ * Structured metadata for a ci_run_red filing: the cause-key routing fields PLUS
+ * the posture it sets and that posture's termination condition. Pure and
+ * exported so the metadata contract is unit-testable without mocking createEscalation.
+ */
+export declare function ciRunRedEscalationMetadata(params: {
+    sha: string;
+    branch: string;
+    productId: string;
+    focusId: string;
+}): Record<string, unknown>;
 /** Minimal open-escalation row shape the sensor's dedup / resolve reads. */
 interface CiEscalationRow {
     id: string;
@@ -134,6 +162,8 @@ export interface CiSensorTickCounts {
     productsChecked: number;
     escalationsFiled: number;
     escalationsResolved: number;
+    /** Red integration runs surfaced as a held-merge-gate health event this tick. */
+    heldGatesSurfaced: number;
 }
 /**
  * One CI-result sensor tick over every configured product. Per product: resolve

package/dist/ci/ci-sensor-loop.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ci-sensor-loop.d.ts","sourceRoot":"","sources":["../../src/ci/ci-sensor-loop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,OAAO,EAAuD,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAa1G,uDAAuD;AACvD,eAAO,MAAM,0BAA0B,eAAe,CAAC;AAEvD,4EAA4E;AAC5E,UAAU,eAAe;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC3C;AAaD;;;;;;;;;;;;GAYG;AACH;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,SAAS,eAAe,EAAE,EAChC,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACzD,OAAO,CAcT;AAmED;;;;;;;;;;;GAWG;AACH;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;IACvD,iBAAiB,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACpE,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;IAC3D,0DAA0D;IAC1D,gBAAgB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACjE,wEAAwE;IACxE,gBAAgB,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CACpE;AAWD;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,uBAAwD,GAC7D,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA4BxB;AAMD,oFAAoF;AACpF,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,cAAc,CAAC;IAC5B,qBAAqB,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,MAAM,GAAG,IAAI,CAAC;IAC/D,gFAAgF;IAChF,kBAAkB,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAClF,sBAAsB,EAAE,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzG,mBAAmB,EAAE,CAAC,MAAM,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5I,uBAAuB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACjE;AAWD,MAAM,WAAW,kBAAkB;IACjC,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,YAAY,EACpB,IAAI,GAAE,YAA0B,GAC/B,OAAO,CAAC,kBAAkB,CAAC,CAmC7B"}
+{"version":3,"file":"ci-sensor-loop.d.ts","sourceRoot":"","sources":["../../src/ci/ci-sensor-loop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,OAAO,EAAuD,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAa1G,gFAAgF;AAChF,eAAO,MAAM,2BAA2B,2BAA2B,CAAC;AAUpE,kDAAkD;AAClD,wBAAgB,kCAAkC,IAAI,IAAI,CAEzD;AAGD,uDAAuD;AACvD,eAAO,MAAM,0BAA0B,eAAe,CAAC;AAEvD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB,sBAAsB,CAAC;AACtD,eAAO,MAAM,6BAA6B,wBAAwB,CAAC;AAEnE;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE;IACjD,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;CACjE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAU1B;AAED,4EAA4E;AAC5E,UAAU,eAAe;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC3C;AAaD;;;;;;;;;;;;GAYG;AACH;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,SAAS,eAAe,EAAE,EAChC,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACzD,OAAO,CAcT;AA+DD;;;;;;;;;;;GAWG;AACH;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;IACvD,iBAAiB,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACpE,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;IAC3D,0DAA0D;IAC1D,gBAAgB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACjE,wEAAwE;IACxE,gBAAgB,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CACpE;AAWD;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,uBAAwD,GAC7D,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA4BxB;AAMD,oFAAoF;AACpF,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,cAAc,CAAC;IAC5B,qBAAqB,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,MAAM,GAAG,IAAI,CAAC;IAC/D,gFAAgF;IAChF,kBAAkB,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAClF,sBAAsB,EAAE,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzG,mBAAmB,EAAE,CAAC,MAAM,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5I,uBAAuB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACjE;AAWD,MAAM,WAAW,kBAAkB;IACjC,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,iFAAiF;IACjF,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,YAAY,EACpB,IAAI,GAAE,YAA0B,GAC/B,OAAO,CAAC,kBAAkB,CAAC,CAmE7B"}