@telora/daemon 0.22.181 → 0.22.189

package/dist/prd/frontier-arming.js

@@ -0,0 +1,315 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/prd/prd-frontier-arming.test.ts
+// PINNED-BY-END
+import { readFocusArmReadiness } from './arm-readiness.js';
+import { classifyArmFailure, clearArmRefusal, recordArmRefusal, } from './arm-refusal.js';
+import { buildPrdScopingPrompt, readPhases } from './scoping-prompt.js';
+import { createLogger } from '../shell/log.js';
+const log = createLogger({ module: 'prd-controller' });
+/**
+ * How long an in-flight scoping run is believed before a replacement is
+ * spawned (20 minutes).
+ *
+ * MUST be strictly greater than the shared spawn's kill timeout
+ * (SCOPING_AGENT_TIMEOUT_MS, 15m) plus its SIGKILL grace (10s), or a healthy
+ * long-running agent is double-spawned right as it finishes. Same relation
+ * nexus intake holds between DEFAULT_INTAKE_STALE_MS and its timeout; the
+ * window exists here for the case the exit callback never fires at all (a
+ * daemon that was restarted mid-run leaves no ledger entry, and one that lost
+ * the child leaves an entry nothing will ever close).
+ */
+export const PRD_SCOPING_STALE_MS = 20 * 60 * 1000;
+/**
+ * Scoping attempts per focus per process. A scoping agent is a full Claude Code
+ * process; a focus whose scoping keeps producing nothing must stop costing one
+ * every tick. At the budget the focus is HELD un-scoped -- logged, not
+ * escalated -- and a daemon restart is what grants further attempts, exactly as
+ * a new arm is what grants further review cycles.
+ */
+export const PRD_SCOPING_MAX_ATTEMPTS = 3;
+/**
+ * Process-lifetime scoping ledger (focusId -> run). Injected via deps for
+ * tests; defaults here. A restart resets it, which is safe: the scoping agent's
+ * own marker-in-the-focus-description guard makes a re-run extend the existing
+ * tree rather than author a second one.
+ */
+const scopingRunsDefault = new Map();
+/**
+ * The decision, PURE.
+ *
+ * Reading order matters and is the contract:
+ *  - An in-flight run OWNS the focus. We never arm underneath a running scoping
+ *    agent, however ready the focus already looks: the agent is still writing,
+ *    and an arm fixes its covered set at whatever exists mid-write. Past the
+ *    staleness window the run is presumed lost and replaced.
+ *  - A run that exited CLEAN and left a focus that states its future is the
+ *    only path to an arm through this ledger.
+ *  - Any other exit re-tries while the attempt budget lasts. Once the budget is
+ *    spent the tree itself decides: ready -> arm (the bar is met, however messy
+ *    the run that got there), not ready -> hold. A spent budget must never
+ *    strand a focus that IS scoped.
+ *  - No run at all, and ready: arm. This is the restart / human-scoped case --
+ *    the focus states its future and no agent of ours is writing to it; the
+ *    tree is the evidence, not our in-memory ledger.
+ */
+export function decidePrdFrontierAction(input) {
+    const { ready, run, nowMs, staleMs, maxAttempts } = input;
+    if (!run) {
+        return ready ? 'arm' : 'spawn_scoping';
+    }
+    if (run.status === 'in_flight') {
+        return nowMs - run.startedMs >= staleMs ? 'spawn_scoping' : 'await_scoping';
+    }
+    const exhausted = run.attempts >= maxAttempts;
+    if (ready && (run.status === 'exited_clean' || exhausted)) {
+        return 'arm';
+    }
+    return exhausted ? 'hold_unscoped' : 'spawn_scoping';
+}
+function outcome(action, armRefused = false) {
+    return {
+        action,
+        armed: action === 'arm' && !armRefused,
+        scopingSpawned: action === 'spawn_scoping',
+        heldUnscoped: action === 'hold_unscoped',
+        armRefused,
+    };
+}
+/** The readiness answer used when the read is deliberately skipped. */
+const NOT_READ = {
+    ready: false,
+    reason: 'a scoping run is in flight; readiness not read',
+    readyDeliveryIds: [],
+};
+/** The PRD's goal statement, from its goal node(s). Pure. */
+export function readPrdGoal(nodes) {
+    const statements = nodes
+        .filter((n) => n.nodeType === 'goal')
+        .map((n) => n.statement.trim())
+        .filter((s) => s.length > 0);
+    return statements.length > 0 ? statements.join('\n') : null;
+}
+/**
+ * Spawn one scoping agent for `focusId` and record the run.
+ *
+ * The ledger entry is written BEFORE the spawn so a slow or failed spawn cannot
+ * re-fire on the next tick (the same ordering nexus intake uses with its
+ * `intake_scoping_started_at` stamp). The exit callback only writes back if the
+ * ledger still holds THIS run: a later spawn replaced it, and a stale exit must
+ * not reopen a window that already moved on.
+ */
+async function spawnScopingFor(node, focusId, prd, prdGoal, deps, nowMs) {
+    const runs = deps.prdScopingRuns ?? scopingRunsDefault;
+    const previous = runs.get(focusId);
+    const run = {
+        focusId,
+        nodeId: node.id,
+        status: 'in_flight',
+        attempts: (previous?.attempts ?? 0) + 1,
+        startedMs: nowMs,
+        lastExitCode: null,
+    };
+    runs.set(focusId, run);
+    const prompt = buildPrdScopingPrompt({
+        focusId,
+        overcomeNodeId: node.id,
+        overcomeStatement: node.statement,
+        phases: readPhases(node),
+        prdId: prd.id,
+        prdTitle: prd.title,
+        prdGoal,
+    });
+    if (!deps.spawnPrdScopingAgent) {
+        // No spawner wired (a caller that opted out). The run is recorded so the
+        // attempt budget still bounds the tick, and the focus stays un-armed --
+        // never armed-by-default, which is the behaviour this module removed.
+        log.warn(`[prd-controller] focus ${focusId} (overcome ${node.id}) needs scoping but no scoping ` +
+            'spawner is wired -- leaving it UN-ARMED');
+        run.status = 'exited_failed';
+        return;
+    }
+    try {
+        await deps.spawnPrdScopingAgent({
+            focusId,
+            nodeId: node.id,
+            prompt,
+            onExit: (code) => {
+                if (runs.get(focusId) !== run)
+                    return; // superseded by a later run
+                run.status = code === 0 ? 'exited_clean' : 'exited_failed';
+                run.lastExitCode = code;
+            },
+        });
+        log.info(`[prd-controller] scoping agent requested for focus ${focusId} (overcome ${node.id}, ` +
+            `attempt ${run.attempts}/${deps.prdScopingMaxAttempts ?? PRD_SCOPING_MAX_ATTEMPTS}) -- ` +
+            'the focus stays UN-ARMED until it states the future it asks for');
+    }
+    catch (err) {
+        // The spawn never started: close the run so the next tick re-tries rather
+        // than waiting out the staleness window on a process that does not exist.
+        run.status = 'exited_failed';
+        log.warn(`[prd-controller] failed to spawn the scoping agent for focus ${focusId}: ${err.message}`);
+    }
+}
+/**
+ * Arm the focus -- and survive a write that refuses.
+ *
+ * Returns true when the arm LANDED, false when it was refused (or failed). It
+ * never throws: an arm the database refuses is a handled outcome, not the end
+ * of the tick. The three things it does on a refusal are the whole contract:
+ *   1. the focus is left materialized and UN-ARMED -- nothing is rolled back,
+ *      nothing is latched off, and the next frontier tick re-attempts it;
+ *   2. the refusal CODE and the NODE LIST the database wrote are recorded on
+ *      the focus, where an operator reads them (prd/arm-refusal.ts explains why
+ *      there and not only in the log);
+ *   3. the caller continues, so a second frontier focus in the same tick is
+ *      still advanced.
+ * No escalation is filed: the fix is a restatement on a tree node, and the
+ * scoping agent this module re-spawns is the actor that writes it.
+ *
+ * A SUCCESSFUL arm CLEARS the record, the same way a successful integration
+ * sync clears its conflict artifact -- the condition is gone, so the note goes
+ * with it.
+ */
+async function armOrRecordRefusal(args) {
+    const { node, focusId, prd, roleId, readiness, deps, nowMs } = args;
+    try {
+        await deps.armFocus(focusId, roleId);
+    }
+    catch (err) {
+        const failure = classifyArmFailure(err);
+        log.warn(`[prd-controller] the arm of focus ${focusId} (overcome ${node.id}) was REFUSED ` +
+            `[${failure.code ?? 'no code'}]: ${failure.detail} -- the focus stays materialized and ` +
+            'UN-ARMED; the frontier re-attempts it on a later tick');
+        // The live recorder never throws (prd/arm-refusal.ts); the seam is
+        // injectable, so the contract is enforced HERE rather than assumed. A
+        // record is the operator's view of a waiting state, not a step in the tick:
+        // losing it must never turn a survived refusal back into a lost tick.
+        try {
+            await (deps.recordArmRefusal ?? recordArmRefusal)({
+                focusId,
+                nodeId: node.id,
+                prdId: prd.id,
+                prdTitle: prd.title,
+                failure,
+                readinessReason: readiness.reason,
+                observedAt: new Date(nowMs).toISOString(),
+            });
+        }
+        catch (recordErr) {
+            log.warn(`[prd-controller] could not record the refused arm of focus ${focusId}: ` +
+                `${recordErr.message}`);
+        }
+        return false;
+    }
+    log.info(`[prd-controller] armed focus ${focusId} (overcome ${node.id}): ${readiness.reason}`);
+    try {
+        await (deps.clearArmRefusal ?? clearArmRefusal)(focusId);
+    }
+    catch (clearErr) {
+        // A stale record on a focus that IS armed is a stale note, not a wedge.
+        log.debug(`[prd-controller] could not clear the arm-refusal record for focus ${focusId}: ` +
+            `${clearErr.message}`);
+    }
+    return true;
+}
+/**
+ * Advance ONE materialized frontier focus by one act. Never throws for an
+ * ordinary not-yet-scoped focus, nor for an arm the write refuses; never files
+ * an escalation.
+ */
+export async function advancePrdFrontierFocus(args) {
+    const { node, focusId, prd, prdGoal, roleId, deps } = args;
+    const runs = deps.prdScopingRuns ?? scopingRunsDefault;
+    const nowMs = deps.nowMs?.() ?? Date.now();
+    const staleMs = deps.prdScopingStaleMs ?? PRD_SCOPING_STALE_MS;
+    const maxAttempts = deps.prdScopingMaxAttempts ?? PRD_SCOPING_MAX_ATTEMPTS;
+    const run = runs.get(focusId);
+    // Skip the readiness read entirely while a run owns the focus: it cannot
+    // change the decision, and it costs two API calls per frontier focus per tick.
+    const awaiting = run?.status === 'in_flight' && nowMs - run.startedMs < staleMs;
+    const readiness = awaiting
+        ? NOT_READ
+        : await (deps.loadFocusArmReadiness ?? readFocusArmReadiness)(focusId);
+    const action = decidePrdFrontierAction({ ready: readiness.ready, run, nowMs, staleMs, maxAttempts });
+    let armRefused = false;
+    switch (action) {
+        case 'arm':
+            armRefused = !(await armOrRecordRefusal({
+                node, focusId, prd, roleId, readiness, deps, nowMs,
+            }));
+            break;
+        case 'spawn_scoping':
+            if (run && run.status !== 'in_flight') {
+                // A scoping run ENDED and the focus still does not state its future.
+                // Name the reason -- this is the whole diagnosis of a frontier that is
+                // not advancing, and it must not require reading the agent's transcript.
+                log.warn(`[prd-controller] focus ${focusId} (overcome ${node.id}) is NOT armable after a ` +
+                    `scoping run (${run.status}, exit ${run.lastExitCode ?? '?'}): ${readiness.reason} -- re-scoping`);
+            }
+            await spawnScopingFor(node, focusId, prd, prdGoal, deps, nowMs);
+            break;
+        case 'await_scoping':
+            log.debug(`[prd-controller] focus ${focusId} is being scoped; not arming this tick`);
+            break;
+        case 'hold_unscoped':
+            // LOUD, but not an escalation: the frontier recomputes every tick and a
+            // restart grants a fresh attempt budget.
+            log.warn(`[prd-controller] focus ${focusId} (overcome ${node.id}) stays UN-ARMED after ` +
+                `${run?.attempts ?? 0} scoping attempt(s): ${readiness.reason}`);
+            break;
+    }
+    return outcome(action, armRefused);
+}
+/**
+ * Walk the frontier: materialize what has no focus yet, then advance every
+ * materialized frontier focus by one act.
+ *
+ * A newly materialized focus is advanced in the SAME tick -- which, for a focus
+ * that has nothing in it, is the scoping spawn. It is never the arm: a focus
+ * created microseconds ago holds no delivery, so readiness cannot be true.
+ */
+export async function runFrontierArmingPass(args) {
+    const { prd, nodes, needsMaterialize, needsArm, roleId, deps } = args;
+    const result = {
+        materialized: 0, armed: 0, skippedNoRole: 0, scopingSpawned: 0, heldUnscoped: 0,
+        armRefused: 0,
+    };
+    const prdGoal = readPrdGoal(nodes);
+    const tally = (o) => {
+        if (o.armed)
+            result.armed += 1;
+        if (o.scopingSpawned)
+            result.scopingSpawned += 1;
+        if (o.heldUnscoped)
+            result.heldUnscoped += 1;
+        if (o.armRefused)
+            result.armRefused += 1;
+    };
+    for (const node of needsMaterialize) {
+        // Do NOT materialize a frontier overcome until the PRD is Played (roleId
+        // resolves): materialize mints the focus born status='active', so creating
+        // it before the Play commit would light up an active, unarmable focus.
+        if (!roleId) {
+            result.skippedNoRole += 1;
+            continue;
+        }
+        const { focusId } = await deps.materializeOvercome(node.id);
+        // Carry the new anchor on the in-memory node so this tick's consumers (and
+        // the advance below) see a consistent view.
+        node.focusId = focusId;
+        result.materialized += 1;
+        tally(await advancePrdFrontierFocus({ node, focusId, prd, prdGoal, roleId, deps }));
+    }
+    for (const node of needsArm) {
+        if (node.focusId === null)
+            continue;
+        if (!roleId) {
+            result.skippedNoRole += 1;
+            continue;
+        }
+        tally(await advancePrdFrontierFocus({ node, focusId: node.focusId, prd, prdGoal, roleId, deps }));
+    }
+    return result;
+}
+//# sourceMappingURL=frontier-arming.js.map

package/dist/prd/frontier-arming.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontier-arming.js","sourceRoot":"","sources":["../../src/prd/frontier-arming.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,iEAAiE;AACjE,gBAAgB;AAoDhB,OAAO,EAAE,qBAAqB,EAA0B,MAAM,oBAAoB,CAAC;AACnF,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAEvD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEnD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAyB,CAAC;AAK5D;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAMvC;IACC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;IAC1D,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC;IACzC,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAC/B,OAAO,KAAK,GAAG,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC;IAC9E,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,IAAI,WAAW,CAAC;IAC9C,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,cAAc,IAAI,SAAS,CAAC,EAAE,CAAC;QAC1D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC;AACvD,CAAC;AAkBD,SAAS,OAAO,CAAC,MAAyB,EAAE,UAAU,GAAG,KAAK;IAC5D,OAAO;QACL,MAAM;QACN,KAAK,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC,UAAU;QACtC,cAAc,EAAE,MAAM,KAAK,eAAe;QAC1C,YAAY,EAAE,MAAM,KAAK,eAAe;QACxC,UAAU;KACX,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,MAAM,QAAQ,GAAsB;IAClC,KAAK,EAAE,KAAK;IACZ,MAAM,EAAE,gDAAgD;IACxD,gBAAgB,EAAE,EAAE;CACrB,CAAC;AAEF,6DAA6D;AAC7D,MAAM,UAAU,WAAW,CAAC,KAAgB;IAC1C,MAAM,UAAU,GAAG,KAAK;SACrB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC;SACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;SAC9B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/B,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,eAAe,CAC5B,IAAa,EACb,OAAe,EACf,GAAQ,EACR,OAAsB,EACtB,IAAuB,EACvB,KAAa;IAEb,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,IAAI,kBAAkB,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,GAAG,GAAkB;QACzB,OAAO;QACP,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,MAAM,EAAE,WAAW;QACnB,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC;QACvC,SAAS,EAAE,KAAK;QAChB,YAAY,EAAE,IAAI;KACnB,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAEvB,MAAM,MAAM,GAAG,qBAAqB,CAAC;QACnC,OAAO;QACP,cAAc,EAAE,IAAI,CAAC,EAAE;QACvB,iBAAiB,EAAE,IAAI,CAAC,SAAS;QACjC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC;QACxB,KAAK,EAAE,GAAG,CAAC,EAAE;QACb,QAAQ,EAAE,GAAG,CAAC,KAAK;QACnB,OAAO;KACR,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC/B,yEAAyE;QACzE,wEAAwE;QACxE,sEAAsE;QACtE,GAAG,CAAC,IAAI,CACN,0BAA0B,OAAO,cAAc,IAAI,CAAC,EAAE,iCAAiC;YACrF,yCAAyC,CAC5C,CAAC;QACF,GAAG,CAAC,MAAM,GAAG,eAAe,CAAC;QAC7B,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,oBAAoB,CAAC;YAC9B,OAAO;YACP,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,MAAM;YACN,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBACf,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,GAAG;oBAAE,OAAO,CAAC,4BAA4B;gBACnE,GAAG,CAAC,MAAM,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC;gBAC3D,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;YAC1B,CAAC;SACF,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CACN,sDAAsD,OAAO,cAAc,IAAI,CAAC,EAAE,IAAI;YACpF,WAAW,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,qBAAqB,IAAI,wBAAwB,OAAO;YACxF,iEAAiE,CACpE,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,0EAA0E;QAC1E,0EAA0E;QAC1E,GAAG,CAAC,MAAM,GAAG,eAAe,CAAC;QAC7B,GAAG,CAAC,IAAI,CACN,gEAAgE,OAAO,KAAM,GAAa,CAAC,OAAO,EAAE,CACrG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,KAAK,UAAU,kBAAkB,CAAC,IAQjC;IACC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IACpE,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACxC,GAAG,CAAC,IAAI,CACN,qCAAqC,OAAO,cAAc,IAAI,CAAC,EAAE,gBAAgB;YAC/E,IAAI,OAAO,CAAC,IAAI,IAAI,SAAS,MAAM,OAAO,CAAC,MAAM,uCAAuC;YACxF,uDAAuD,CAC1D,CAAC;QACF,mEAAmE;QACnE,sEAAsE;QACtE,4EAA4E;QAC5E,sEAAsE;QACtE,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,CAAC;gBAChD,OAAO;gBACP,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,KAAK,EAAE,GAAG,CAAC,EAAE;gBACb,QAAQ,EAAE,GAAG,CAAC,KAAK;gBACnB,OAAO;gBACP,eAAe,EAAE,SAAS,CAAC,MAAM;gBACjC,UAAU,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;aAC1C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;YACnB,GAAG,CAAC,IAAI,CACN,8DAA8D,OAAO,IAAI;gBACvE,GAAI,SAAmB,CAAC,OAAO,EAAE,CACpC,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,GAAG,CAAC,IAAI,CACN,gCAAgC,OAAO,cAAc,IAAI,CAAC,EAAE,MAAM,SAAS,CAAC,MAAM,EAAE,CACrF,CAAC;IACF,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,QAAQ,EAAE,CAAC;QAClB,wEAAwE;QACxE,GAAG,CAAC,KAAK,CACP,qEAAqE,OAAO,IAAI;YAC9E,GAAI,QAAkB,CAAC,OAAO,EAAE,CACnC,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAO7C;IACC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,IAAI,kBAAkB,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,IAAI,oBAAoB,CAAC;IAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,qBAAqB,IAAI,wBAAwB,CAAC;IAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAE9B,yEAAyE;IACzE,+EAA+E;IAC/E,MAAM,QAAQ,GAAG,GAAG,EAAE,MAAM,KAAK,WAAW,IAAI,KAAK,GAAG,GAAG,CAAC,SAAS,GAAG,OAAO,CAAC;IAChF,MAAM,SAAS,GAAG,QAAQ;QACxB,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,IAAI,qBAAqB,CAAC,CAAC,OAAO,CAAC,CAAC;IAEzE,MAAM,MAAM,GAAG,uBAAuB,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IAErG,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,KAAK;YACR,UAAU,GAAG,CAAC,CAAC,MAAM,kBAAkB,CAAC;gBACtC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK;aACnD,CAAC,CAAC,CAAC;YACJ,MAAM;QACR,KAAK,eAAe;YAClB,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBACtC,qEAAqE;gBACrE,uEAAuE;gBACvE,yEAAyE;gBACzE,GAAG,CAAC,IAAI,CACN,0BAA0B,OAAO,cAAc,IAAI,CAAC,EAAE,2BAA2B;oBAC/E,gBAAgB,GAAG,CAAC,MAAM,UAAU,GAAG,CAAC,YAAY,IAAI,GAAG,MAAM,SAAS,CAAC,MAAM,gBAAgB,CACpG,CAAC;YACJ,CAAC;YACD,MAAM,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAChE,MAAM;QACR,KAAK,eAAe;YAClB,GAAG,CAAC,KAAK,CAAC,0BAA0B,OAAO,wCAAwC,CAAC,CAAC;YACrF,MAAM;QACR,KAAK,eAAe;YAClB,wEAAwE;YACxE,yCAAyC;YACzC,GAAG,CAAC,IAAI,CACN,0BAA0B,OAAO,cAAc,IAAI,CAAC,EAAE,yBAAyB;gBAC7E,GAAG,GAAG,EAAE,QAAQ,IAAI,CAAC,wBAAwB,SAAS,CAAC,MAAM,EAAE,CAClE,CAAC;YACF,MAAM;IACV,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AACrC,CAAC;AAaD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAO3C;IACC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;IACtE,MAAM,MAAM,GAA6B;QACvC,YAAY,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC;QAC/E,UAAU,EAAE,CAAC;KACd,CAAC;IACF,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAEnC,MAAM,KAAK,GAAG,CAAC,CAAyB,EAAQ,EAAE;QAChD,IAAI,CAAC,CAAC,KAAK;YAAE,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,CAAC,cAAc;YAAE,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,CAAC,YAAY;YAAE,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,CAAC,UAAU;YAAE,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,yEAAyE;QACzE,2EAA2E;QAC3E,uEAAuE;QACvE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5D,2EAA2E;QAC3E,4CAA4C;QAC5C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC;QACzB,KAAK,CAAC,MAAM,uBAAuB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtF,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;YAAE,SAAS;QACpC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,KAAK,CAAC,MAAM,uBAAuB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACpG,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/prd/index.d.ts

@@ -4,8 +4,12 @@
  * Consumers import from `./prd/index.js`.
  *
  * Modules:
- * - controller.ts     -- PRD-lifecycle controller tick (frontier arming, done sweep)
+ * - controller.ts     -- PRD-lifecycle controller tick (frontier walk, done sweep)
  * - frontier.ts       -- PRT frontier computation
+ * - frontier-arming.ts-- the frontier's three acts: materialize, scope, arm
+ * - scoping-prompt.ts -- the PURE prompt the one-shot PRD scoping agent is seeded with
+ * - arm-readiness.ts  -- "is this focus scoped enough to arm?" (the gate on the arm)
+ * - arm-refusal.ts    -- surviving an arm the WRITE refuses (classify + record it)
  * - viability.ts      -- pathway viability check
  * - divergence.ts     -- divergence detection + surviving-path selection
  * - focus-pushdown.ts -- focus-milestone context pushdown
@@ -17,10 +21,15 @@
  * duplicate-name ambiguity.
  */
 export * from './frontier.js';
+export * from './frontier-arming.js';
+export * from './scoping-prompt.js';
+export * from './arm-readiness.js';
+export * from './arm-refusal.js';
 export * from './viability.js';
 export * from './divergence.js';
 export * from './focus-pushdown.js';
 export * from './steward.js';
 export { STEWARD_CADENCE_MS, PRD_DONE_SWEEP_ABANDONED, DONE_SWEEP_MAX_ATTEMPTS, resolveArmRoleIdFromPrd, computeCompletedFocusIds, runPrdControllerTick, selfHealDonePrdFoci, runDonePrdSweepForProduct, runPrdControllerTickAll, } from './controller.js';
 export type { PrdControllerDeps, PrdControllerTickResult, PrdControllerTickAllResult, } from './controller.js';
+export type { PrdScopingRun, PrdScopingSpawnInput } from './controller-shared.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/prd/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/prd/index.ts"],"names":[],"mappings":"AAYA;;;;;;;;;;;;;;;;;GAiBG;AAEH,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,cAAc,CAAC;AAE7B,OAAO,EACL,kBAAkB,EAClB,wBAAwB,EACxB,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,iBAAiB,EACjB,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/prd/index.ts"],"names":[],"mappings":"AAYA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,cAAc,CAAC;AAE7B,OAAO,EACL,kBAAkB,EAClB,wBAAwB,EACxB,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,iBAAiB,EACjB,uBAAuB,EACvB,0BAA0B,GAC3B,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/prd/index.js

@@ -15,8 +15,12 @@
  * Consumers import from `./prd/index.js`.
  *
  * Modules:
- * - controller.ts     -- PRD-lifecycle controller tick (frontier arming, done sweep)
+ * - controller.ts     -- PRD-lifecycle controller tick (frontier walk, done sweep)
  * - frontier.ts       -- PRT frontier computation
+ * - frontier-arming.ts-- the frontier's three acts: materialize, scope, arm
+ * - scoping-prompt.ts -- the PURE prompt the one-shot PRD scoping agent is seeded with
+ * - arm-readiness.ts  -- "is this focus scoped enough to arm?" (the gate on the arm)
+ * - arm-refusal.ts    -- surviving an arm the WRITE refuses (classify + record it)
  * - viability.ts      -- pathway viability check
  * - divergence.ts     -- divergence detection + surviving-path selection
  * - focus-pushdown.ts -- focus-milestone context pushdown
@@ -28,6 +32,10 @@
  * duplicate-name ambiguity.
  */
 export * from './frontier.js';
+export * from './frontier-arming.js';
+export * from './scoping-prompt.js';
+export * from './arm-readiness.js';
+export * from './arm-refusal.js';
 export * from './viability.js';
 export * from './divergence.js';
 export * from './focus-pushdown.js';

package/dist/prd/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/prd/index.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,sEAAsE;AACtE,sEAAsE;AACtE,uEAAuE;AACvE,+DAA+D;AAC/D,uEAAuE;AACvE,8DAA8D;AAC9D,4GAA4G;AAC5G,wGAAwG;AACxG,gDAAgD;AAChD,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;GAiBG;AAEH,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,cAAc,CAAC;AAE7B,OAAO,EACL,kBAAkB,EAClB,wBAAwB,EACxB,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/prd/index.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,sEAAsE;AACtE,sEAAsE;AACtE,uEAAuE;AACvE,+DAA+D;AAC/D,uEAAuE;AACvE,8DAA8D;AAC9D,4GAA4G;AAC5G,wGAAwG;AACxG,gDAAgD;AAChD,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,cAAc,CAAC;AAE7B,OAAO,EACL,kBAAkB,EAClB,wBAAwB,EACxB,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,iBAAiB,CAAC"}

package/dist/prd/scoping-prompt.d.ts

@@ -0,0 +1,68 @@
+/**
+ * The PRD frontier's scoping prompt -- PURE.
+ *
+ * A frontier overcome materializes into a focus that has NOTHING in it: no
+ * reality tree, no injections, no deliveries. Arming it in that state asks a
+ * human's go-signal to cover an empty set of effects, which is the defect this
+ * module exists to remove (see `docs/DECISIONS.md` 2026-09-20, "An arm covers
+ * what was agreed": what an arm covers is fixed AT THE ARM, so an arm placed
+ * before the tree covers zero effects forever and every delivery scoped
+ * afterwards rests at `planning` until someone re-arms).
+ *
+ * So the controller spawns a one-shot scoping agent FIRST and arms LATER. This
+ * builder is what that agent is seeded with. It is a pure string function,
+ * mirroring `nexus/intake-spawn.ts` `buildIntakeScopingPrompt`, so what the
+ * agent is told is unit-testable without spawning a process -- the four
+ * instructions that make the later arm meaningful (build the tree, declare a
+ * restatement on every target, anchor one planning delivery per injection, do
+ * NOT arm) are pinned by a test rather than trusted to prose review.
+ *
+ * THE PROMPT SAYS "DO NOT ARM" ON PURPOSE. The agent COULD set the focus's
+ * assignedAgentRoleId itself -- nothing refuses it. Arming is a human
+ * go-signal, and on the PRD path the human's go-signal is the PRD's Play; the
+ * controller holds that signal and spends it only once the focus states the
+ * future it covers. An agent that armed itself would spend the human's signal
+ * on its own half-finished work.
+ */
+import type { PrtNode } from '../queries/prd.js';
+/**
+ * The stable marker the scoping agent writes into the focus description.
+ *
+ * Mirrors intake's marker-in-the-description idempotency guard: a re-spawned
+ * agent (a crashed prior run, a daemon restart) finds it and EXTENDS what is
+ * already there instead of authoring a second tree over the top of the first.
+ * The controller's own in-flight guard is its scoping-run ledger
+ * (`prd/frontier-arming.ts`); this marker is the AGENT's guard, for the window
+ * the ledger cannot see across (a restart).
+ */
+export declare function prdScopingMarker(overcomeNodeId: string): string;
+/** What the PRD scoping agent is seeded with. */
+export interface PrdScopingPromptInput {
+    /** The focus materialized from the overcome -- it already exists. */
+    focusId: string;
+    /** The overcome node this focus materialized from. */
+    overcomeNodeId: string;
+    /** The overcome statement: the capability this focus must deliver. */
+    overcomeStatement: string;
+    /** The delivery-phases the overcome was authored with (>=2 by the authoring gate). */
+    phases: string[];
+    prdId: string;
+    /** The PRD (milestone) title. */
+    prdTitle: string;
+    /** The PRD's goal -- the goal node's statement, or null when unreadable. */
+    prdGoal: string | null;
+}
+/**
+ * Read an overcome node's authored phases.
+ *
+ * `prd_prt_nodes.phases` is JSONB and only overcome nodes populate it (by
+ * convention, not by constraint), so anything at all can be in the column. This
+ * keeps the strings and drops the rest rather than rendering `[object Object]`
+ * into a prompt.
+ */
+export declare function readPhases(node: Pick<PrtNode, 'phases'>): string[];
+/**
+ * Build the PRD scoping prompt. PURE -- no I/O, no clock, no randomness.
+ */
+export declare function buildPrdScopingPrompt(input: PrdScopingPromptInput): string;
+//# sourceMappingURL=scoping-prompt.d.ts.map

package/dist/prd/scoping-prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoping-prompt.d.ts","sourceRoot":"","sources":["../../src/prd/scoping-prompt.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAEjD;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,iDAAiD;AACjD,MAAM,WAAW,qBAAqB;IACpC,qEAAqE;IACrE,OAAO,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,cAAc,EAAE,MAAM,CAAC;IACvB,sEAAsE;IACtE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,sFAAsF;IACtF,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,4EAA4E;IAC5E,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,MAAM,EAAE,CAMlE;AAaD;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,qBAAqB,GAAG,MAAM,CAuC1E"}

package/dist/prd/scoping-prompt.js

@@ -0,0 +1,86 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/prd/prd-scoping-prompt.test.ts
+// PINNED-BY-END
+/**
+ * The stable marker the scoping agent writes into the focus description.
+ *
+ * Mirrors intake's marker-in-the-description idempotency guard: a re-spawned
+ * agent (a crashed prior run, a daemon restart) finds it and EXTENDS what is
+ * already there instead of authoring a second tree over the top of the first.
+ * The controller's own in-flight guard is its scoping-run ledger
+ * (`prd/frontier-arming.ts`); this marker is the AGENT's guard, for the window
+ * the ledger cannot see across (a restart).
+ */
+export function prdScopingMarker(overcomeNodeId) {
+    return `PRD overcome scoping: ${overcomeNodeId}`;
+}
+/**
+ * Read an overcome node's authored phases.
+ *
+ * `prd_prt_nodes.phases` is JSONB and only overcome nodes populate it (by
+ * convention, not by constraint), so anything at all can be in the column. This
+ * keeps the strings and drops the rest rather than rendering `[object Object]`
+ * into a prompt.
+ */
+export function readPhases(node) {
+    if (!Array.isArray(node.phases))
+        return [];
+    return node.phases
+        .filter((p) => typeof p === 'string')
+        .map((p) => p.trim())
+        .filter((p) => p.length > 0);
+}
+/** The phases block, or an explicit statement that none were authored. */
+function renderPhases(phases) {
+    if (phases.length === 0) {
+        return [
+            '_No phases were authored on this overcome._ Decompose the capability yourself:',
+            'name the phases the work naturally has, then anchor one delivery per phase.',
+        ];
+    }
+    return phases.map((phase, i) => `${i + 1}. ${phase}`);
+}
+/**
+ * Build the PRD scoping prompt. PURE -- no I/O, no clock, no randomness.
+ */
+export function buildPrdScopingPrompt(input) {
+    const marker = prdScopingMarker(input.overcomeNodeId);
+    const statement = input.overcomeStatement.trim() || '(no overcome statement authored)';
+    return [
+        `You are the PRD-frontier SCOPING agent for a milestone capability that has just been materialized into a focus.`,
+        `Your SOLE job is to make that focus STATE THE FUTURE IT ASKS FOR -- a reality tree and injection-anchored deliveries -- then exit.`,
+        `You author intent + structure via the telora_* MCP tools only -- you write NO application code here.`,
+        ``,
+        `## The milestone`,
+        `- PRD: ${input.prdTitle} (prdId ${input.prdId})`,
+        `- PRD goal: ${input.prdGoal?.trim() || '(no goal node statement available -- read the PRD with telora_prd get)'}`,
+        `- The focus description carries the Vision this milestone derives from; read it first.`,
+        ``,
+        `## The capability to scope (the overcome statement -- this focus's whole target)`,
+        statement,
+        ``,
+        `## The delivery-phases this capability was authored with`,
+        ...renderPhases(input.phases),
+        ``,
+        `## The focus (it ALREADY EXISTS -- do not create another)`,
+        `- focusId: ${input.focusId}`,
+        `- It is UN-ARMED, and it must still be un-armed when you exit.`,
+        ``,
+        `## IDEMPOTENCY (read first -- a previous scoping run for this overcome may have crashed)`,
+        `telora_product_focus get (focusId = ${input.focusId}) and check whether its description carries the marker "${marker}".`,
+        `- If it DOES, a prior run got part-way. EXTEND what exists -- reuse the tree, add only the missing injections/deliveries. Do NOT author a second tree.`,
+        `- If it does NOT, start at step 1 and make sure step 1 writes the marker.`,
+        ``,
+        `## Steps (do these in order, verifying each with a follow-up read)`,
+        `1. telora_product_focus update -- append the marker line "${marker}" verbatim to the focus description, so a re-spawned run can find your work.`,
+        `2. telora_reality_tree create on the focus, then author the CRT: the undesired effects that exist today because this capability is missing, and the causal edges between them.`,
+        `3. Author the FRT: for EVERY node an injection will target, DECLARE A RESTATEMENT -- the frt_statement saying what that node reads as once the work lands. A target with no frt_statement states no future, and an arm that covers it covers nothing checkable. Use telora_reality_tree_node (frtStatement + frtNodeType) on each target.`,
+        `4. Author the injections: one per phase of the capability above. Each injection must draw a \`targets\` edge to the node(s) it flips.`,
+        `5. telora_product_delivery create -- ONE delivery per injection, each anchored to its injection (injectionNodeId) and created with executionStatus "planning". One injection, one delivery: the pairing is what lets a later arm say which effects it covers. Carry a workFacing label ("outward" for new ground, "inward" for improving existing ground).`,
+        `6. Verify your own work before exiting: re-read the focus's deliveries and confirm EVERY one is anchored to an injection, and that every node those injections target carries an frt_statement. The controller arms this focus only when that is true -- if it is not, your run leaves the focus un-armed and the work is re-scoped.`,
+        `7. Stop. Do NOT arm the focus (do NOT set assignedAgentRoleId), do NOT set any delivery to "queued", and do NOT begin implementing. Arming is the human go-signal the PRD's Play holds; the daemon spends it on the next tick once the focus states its future.`,
+        ``,
+        `Refer to focuses/deliveries/issues by title in any prose, never by UUID. Follow CLAUDE.md.`,
+    ].join('\n');
+}
+//# sourceMappingURL=scoping-prompt.js.map

package/dist/prd/scoping-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoping-prompt.js","sourceRoot":"","sources":["../../src/prd/scoping-prompt.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,gEAAgE;AAChE,gBAAgB;AA+BhB;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,cAAsB;IACrD,OAAO,yBAAyB,cAAc,EAAE,CAAC;AACnD,CAAC;AAmBD;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,IAA6B;IACtD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3C,OAAO,IAAI,CAAC,MAAM;SACf,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;SACjD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,0EAA0E;AAC1E,SAAS,YAAY,CAAC,MAAgB;IACpC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,gFAAgF;YAChF,6EAA6E;SAC9E,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;AACxD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAA4B;IAChE,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,kCAAkC,CAAC;IACvF,OAAO;QACL,iHAAiH;QACjH,oIAAoI;QACpI,sGAAsG;QACtG,EAAE;QACF,kBAAkB;QAClB,UAAU,KAAK,CAAC,QAAQ,WAAW,KAAK,CAAC,KAAK,GAAG;QACjD,eAAe,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,wEAAwE,EAAE;QAClH,wFAAwF;QACxF,EAAE;QACF,kFAAkF;QAClF,SAAS;QACT,EAAE;QACF,0DAA0D;QAC1D,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC;QAC7B,EAAE;QACF,2DAA2D;QAC3D,cAAc,KAAK,CAAC,OAAO,EAAE;QAC7B,gEAAgE;QAChE,EAAE;QACF,0FAA0F;QAC1F,uCAAuC,KAAK,CAAC,OAAO,2DAA2D,MAAM,IAAI;QACzH,wJAAwJ;QACxJ,2EAA2E;QAC3E,EAAE;QACF,oEAAoE;QACpE,6DAA6D,MAAM,8EAA8E;QACjJ,gLAAgL;QAChL,2UAA2U;QAC3U,uIAAuI;QACvI,4VAA4V;QAC5V,sUAAsU;QACtU,iQAAiQ;QACjQ,EAAE;QACF,4FAA4F;KAC7F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/prompt/prompt-contradictions.d.ts

@@ -20,12 +20,20 @@
  *      ..."), are correct and are not flagged.
  *   3. "database trigger" as the mechanism for queued->coding -- migration
  *      20260614172757 removed that trigger; the reconciler owns the edge.
+ *   4. a scope-WIDENING mandate ("Create new deliveries via ...", "Do not ask
+ *      for permission to rescope", the Scoping Mandate / Rescoping sections)
+ *      delivered in the SAME prompt as the Review-Defect Remediation framing.
+ *      No delivery is created in answer to a review finding (operator ruling
+ *      2026-09-22); a prompt that both forbids and mandates it forbids nothing.
+ *      The framework builders withhold the scoping sections from a remediation
+ *      or review pass (team-prompt-base.ts buildScopingSectionsForPass); this
+ *      class pins that the pairing never returns.
  *
  * This module is the single scanner both the section-builder output and the
  * seeded directive text are checked against (see prompt-contradictions.test.ts).
  * It is pure and dependency-free so it can scan any string.
  */
-export type ContradictionKind = 'action-suffixed-tool' | 'advancement-mandate' | 'database-trigger';
+export type ContradictionKind = 'action-suffixed-tool' | 'advancement-mandate' | 'database-trigger' | 'scope-widening-in-remediation';
 export interface Contradiction {
     kind: ContradictionKind;
     /** The exact offending substring. */
@@ -44,6 +52,17 @@ export interface Contradiction {
 export declare const ACTION_SUFFIXED_TOOL_RE: RegExp;
 /** "database trigger" as a mechanism claim. */
 export declare const DATABASE_TRIGGER_RE: RegExp;
+/** The heading of the remediation framing (persona-sections.ts). */
+export declare const REMEDIATION_FRAMING_HEADING = "### Review-Defect Remediation";
+/**
+ * Scope-widening mandate phrases (prompt-sections/scoping-sections.ts): the
+ * delivery-CREATING sentences a pass with `mayCreateDeliveries: false` is not
+ * handed. Deliberately NOT the section headings ("### Scoping Mandate",
+ * "### Rescoping and Splitting Deliveries"): those sections reach every pass
+ * for their issue-creation, criteria and escalation rules. Any of these
+ * phrases in the same text as REMEDIATION_FRAMING_HEADING is class 4.
+ */
+export declare const SCOPE_WIDENING_PHRASES: readonly string[];
 /**
  * Scan a string for spawn-prompt contradictions. Returns one Contradiction per
  * offending occurrence (empty array = clean). Order: tool names, then

package/dist/prompt/prompt-contradictions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prompt-contradictions.d.ts","sourceRoot":"","sources":["../../src/prompt/prompt-contradictions.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,MAAM,MAAM,iBAAiB,GACzB,sBAAsB,GACtB,qBAAqB,GACrB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,iBAAiB,CAAC;IACxB,qCAAqC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,QAC+E,CAAC;AAEpH,+CAA+C;AAC/C,eAAO,MAAM,mBAAmB,QAA2B,CAAC;AAiC5D;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,EAAE,CA+BnE;AAUD,wEAAwE;AACxE,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,CAKnF"}
+{"version":3,"file":"prompt-contradictions.d.ts","sourceRoot":"","sources":["../../src/prompt/prompt-contradictions.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,MAAM,MAAM,iBAAiB,GACzB,sBAAsB,GACtB,qBAAqB,GACrB,kBAAkB,GAClB,+BAA+B,CAAC;AAEpC,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,iBAAiB,CAAC;IACxB,qCAAqC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,QAC+E,CAAC;AAEpH,+CAA+C;AAC/C,eAAO,MAAM,mBAAmB,QAA2B,CAAC;AAE5D,oEAAoE;AACpE,eAAO,MAAM,2BAA2B,kCAAkC,CAAC;AAE3E;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAKnD,CAAC;AAiCF;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,EAAE,CAiCnE;AA4BD,wEAAwE;AACxE,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,CAKnF"}