@telora/daemon 0.22.239 → 0.22.289

package/dist/supervision/incident-correlation.js

@@ -0,0 +1,320 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/supervision/incident-correlation.test.ts
+// PINNED-BY-END
+import { appendSymptom, computeCauseKey, incidentKey, INBOUND_NOTIFICATION_KINDS, INCIDENT_SYMPTOM_ACT_MAX, INCIDENT_SYMPTOM_CAP, } from '../queries/escalations/cause-key.js';
+import { conditionHead, readHumanAct, readObservation } from '../queries/escalations/filing-observation.js';
+import { INCIDENT_OPEN_STATUSES, incidentRowMeta, isOpenIncidentRow, readClearedSymptoms, readIncidentKey, readSymptoms, symptomAnswersForKind, } from '../queries/escalations/incident-record.js';
+/**
+ * Kinds whose OWN open row is read BY KIND as a HOLD, released by a kind-keyed
+ * close-half: team_failure (the respawn guard), review_coverage_incomplete (the
+ * respawn guard, any disposition), review_handoff_exhausted (the state cascade's
+ * breaker hold). Absorbing one into another row would
+ * silently drop the hold, and absorbing another condition into one would be
+ * closed by the hold's own close-half -- so they never correlate in either
+ * direction (their rows still carry the shared incident_key).
+ */
+export const INCIDENT_HOLD_KINDS = new Set([
+    'team_failure',
+    'review_coverage_incomplete',
+    'review_handoff_exhausted',
+]);
+/**
+ * Kinds that must stand as their OWN row: the condition is read as a record of
+ * its own, and folded into another row it is not read at all. verify_judge_incurable
+ * is a verify hold that makes no model call until its input changes
+ * (verify/outcome-routing/verification-model-unavailable-hold.ts); absorbed into a
+ * row already open on the focus, the operator could not tell why it stopped.
+ */
+export const INCIDENT_STANDALONE_KINDS = new Set([
+    'verify_judge_incurable',
+]);
+/** Pure: whether a kind never correlates, in either direction (contract rule 4). */
+function kindNeverCorrelates(kind) {
+    return kind !== null && (INCIDENT_HOLD_KINDS.has(kind) || INCIDENT_STANDALONE_KINDS.has(kind));
+}
+function nonBlankString(value) {
+    return typeof value === 'string' && value.trim() !== '' ? value : null;
+}
+/**
+ * Pure: the branch a filing is about, read from what the site already carries --
+ * anchor.branch (merge + stuck-branch filings), then metadata.branch_name
+ * (stuck_focus_branch), then metadata.branch (ci_run_red).
+ */
+export function filingBranch(input) {
+    const meta = input.metadata ?? null;
+    return nonBlankString(input.anchor?.branch) ?? nonBlankString(meta?.branch_name) ?? nonBlankString(meta?.branch);
+}
+/**
+ * Pure: the incident key a filing is stamped with. An inbound notification kind
+ * never joins an incident. An incident_key already in the filing's metadata wins
+ * (a filing that carries its source's key forward); otherwise the key is
+ * derived from the RESOLVED provenance (delivery -> focus -> branch|product).
+ */
+export function resolveFilingIncidentKey(input, provenance) {
+    const kind = input.escalationKind ?? null;
+    if (kind && INBOUND_NOTIFICATION_KINDS.has(kind))
+        return null;
+    const carried = readIncidentKey(input.metadata);
+    if (carried)
+        return carried;
+    return incidentKey({
+        deliveryId: provenance.deliveryId,
+        focusId: provenance.focusId,
+        branch: filingBranch(input),
+        productId: provenance.productId,
+    }, kind);
+}
+/** Pure: a proposed act bounded for a symptom (INCIDENT_SYMPTOM_ACT_MAX), or null when none was proposed. */
+function symptomProposedAct(act) {
+    if (!act)
+        return null;
+    if (act.act.length <= INCIDENT_SYMPTOM_ACT_MAX)
+        return act;
+    return { kind: act.kind, act: `${act.act.slice(0, INCIDENT_SYMPTOM_ACT_MAX - 3)}...` };
+}
+/**
+ * Pure: one filing's observation as an incident symptom. A filing with no
+ * metadata.cause_key (a direct createEscalation site) gets a deterministic
+ * kind-scoped stand-in, so a re-observation maps to the same symptom. The routed
+ * observation's proposed disposition AND proposed human act ride on the symptom, so
+ * neither is lost when the filing attaches to another row: every absorbed
+ * detector's proposal reaches the routing decider, not only the opener's. A
+ * metadata.human_act is carried too, but the daemon chokepoint never writes one, so
+ * no daemon filing's symptom has it.
+ */
+export function filingSymptom(input, key, observedAt) {
+    const causeKey = nonBlankString(input.metadata?.cause_key) ??
+        computeCauseKey(input.escalationKind ?? 'unkeyed', { incident: key });
+    const act = readHumanAct(input.metadata?.human_act);
+    const observation = readObservation(input.metadata);
+    const proposed = observation?.proposed_disposition;
+    const proposedAct = symptomProposedAct(observation?.proposed_human_act);
+    return {
+        cause_key: causeKey,
+        escalation_kind: input.escalationKind ?? null,
+        head: conditionHead(input.description),
+        observed_at: observedAt,
+        ...(act ? { human_act: act } : {}),
+        ...(proposed ? { proposed_disposition: proposed } : {}),
+        ...(proposedAct ? { proposed_human_act: proposedAct } : {}),
+    };
+}
+/**
+ * Pure: stamp a filing's metadata with its incident key and append its own
+ * symptom to whatever symptoms it already carries (none for a fresh row, so the
+ * opener is the first entry; a carried list otherwise).
+ * A null key leaves the metadata untouched.
+ */
+export function stampIncidentMetadata(input, key, observedAt) {
+    if (!key)
+        return input.metadata;
+    return {
+        ...(input.metadata ?? {}),
+        incident_key: key,
+        symptoms: appendSymptom(readSymptoms(input.metadata), filingSymptom(input, key, observedAt)),
+    };
+}
+function rowKind(row) {
+    return nonBlankString(row.escalationKind) ?? nonBlankString(incidentRowMeta(row)?.kind);
+}
+/** Pure: the machine discriminator a fileEscalation filing carries in place of an escalation_kind. */
+function machineDiscriminator(metadata) {
+    return nonBlankString(metadata?.machine_discriminator);
+}
+/** Pure: the cause keys recorded as symptoms on an OPEN row (idempotency survives correlation). */
+export function openRowSymptomCauseKeys(row) {
+    return isOpenIncidentRow(row) ? readSymptoms(incidentRowMeta(row)).map((s) => s.cause_key) : [];
+}
+/** Pure: whether a filing may correlate at all (contract rule 4). */
+export function filingMayCorrelate(input) {
+    if (kindNeverCorrelates(nonBlankString(input.escalationKind)))
+        return false;
+    if (kindNeverCorrelates(machineDiscriminator(input.metadata)))
+        return false;
+    return nonBlankString(input.targetProductId) === null;
+}
+/**
+ * Pure: the OPEN row of incident `key` in the filing's lane (contract rule 1), or
+ * null. Lane = the SENT disposition (null and undefined are one lane). Hold-kind
+ * and standalone-kind rows are never a target. Among several, the oldest wins (createdAt ascending;
+ * rows without one keep list order, which escalation_list returns newest-first, so
+ * a later entry is older).
+ */
+export function findLaneIncidentRow(rows, key, disposition) {
+    let best = null;
+    for (const [index, row] of rows.entries()) {
+        if (!isOpenIncidentRow(row) || readIncidentKey(incidentRowMeta(row)) !== key)
+            continue;
+        if ((row.disposition ?? null) !== (disposition ?? null))
+            continue;
+        if (kindNeverCorrelates(rowKind(row)) || kindNeverCorrelates(machineDiscriminator(incidentRowMeta(row))))
+            continue;
+        const candidate = { row, index };
+        if (best === null || isOlderCandidate(candidate, best))
+            best = candidate;
+    }
+    return best?.row ?? null;
+}
+function isOlderCandidate(a, b) {
+    const createdA = a.row.createdAt ?? null;
+    const createdB = b.row.createdAt ?? null;
+    if (createdA && createdB && createdA !== createdB)
+        return createdA < createdB;
+    return a.index > b.index;
+}
+/** Pure: whether a row already carries `causeKey` -- its own, its original, or a symptom's. */
+export function rowCarriesCause(row, causeKey) {
+    const meta = incidentRowMeta(row);
+    if (meta?.cause_key === causeKey || meta?.original_cause_key === causeKey)
+        return true;
+    return readSymptoms(meta).some((s) => s.cause_key === causeKey);
+}
+/** The default correlation I/O over a callApi (escalation_list + escalation_update). */
+export function incidentIoOver(call) {
+    return {
+        listOpenRows: async ({ focusId }) => {
+            const res = await call('escalation_list', {
+                fields: { statuses: INCIDENT_OPEN_STATUSES, ...(focusId ? { focusId } : {}) },
+                limit: 500,
+            });
+            return res?.escalations ?? [];
+        },
+        updateMetadata: async (escalationId, metadata) => {
+            await call('escalation_update', { escalationId, fields: { metadata } });
+        },
+    };
+}
+/**
+ * Correlate one filing onto its incident (the contract in the module header):
+ * attach to the open lane row, report a re-observed cause, or tell the chokepoint
+ * to file the row. Never throws -- a failed read or write degrades to open_row /
+ * attach_failed, and the chokepoint files the row.
+ */
+export async function correlateFiling(input, io) {
+    const openRow = { outcome: 'open_row', incidentRowId: null, note: null, warn: false };
+    if (!filingMayCorrelate(input.filing))
+        return openRow;
+    let rows;
+    try {
+        rows = await io.listOpenRows(input.focusId ? { focusId: input.focusId } : {});
+    }
+    catch (err) {
+        return { ...openRow, note: `Incident read for ${input.key} failed; filing its own row: ${err.message}`, warn: true };
+    }
+    const row = findLaneIncidentRow(rows, input.key, input.disposition);
+    if (!row)
+        return openRow;
+    const symptom = filingSymptom(input.filing, input.key, input.observedAt);
+    const where = `incident ${input.key} (escalation ${row.id})`;
+    if (rowCarriesCause(row, symptom.cause_key)) {
+        return { outcome: 'already_carried', incidentRowId: row.id, note: `"${symptom.cause_key}" is already carried by ${where}; nothing filed`, warn: false };
+    }
+    try {
+        await io.updateMetadata(row.id, { symptoms: appendSymptom(readSymptoms(incidentRowMeta(row)), symptom) });
+        return { outcome: 'attached', incidentRowId: row.id, note: `Correlated "${symptom.cause_key}" onto ${where}`, warn: false };
+    }
+    catch (err) {
+        return { outcome: 'attach_failed', incidentRowId: row.id, note: `Attach to ${where} failed; filing its own row: ${err.message}`, warn: true };
+    }
+}
+/**
+ * Pure: the cause keys that are a row's OWN -- its metadata.cause_key, a hand-off
+ * row's original_cause_key, and the kind-scoped stand-in its opening symptom got
+ * when filed without a cause key (filingSymptom). Never retired by retirement.
+ */
+export function rowOwnCauseKeys(row) {
+    const meta = incidentRowMeta(row);
+    const own = new Set();
+    for (const k of [meta?.cause_key, meta?.original_cause_key].map(nonBlankString))
+        if (k)
+            own.add(k);
+    const key = readIncidentKey(meta);
+    if (key) {
+        own.add(computeCauseKey(nonBlankString(row.escalationKind) ?? 'unkeyed', { incident: key }));
+        own.add(computeCauseKey(rowKind(row) ?? 'unkeyed', { incident: key }));
+    }
+    return own;
+}
+function rowInClearingScope(row, scope) {
+    if (!scope.focusId && !scope.productId)
+        return false;
+    const meta = incidentRowMeta(row);
+    if (scope.focusId && row.focusId !== scope.focusId && meta?.focusId !== scope.focusId)
+        return false;
+    if (!scope.productId)
+        return true;
+    return row.productId === scope.productId || meta?.productId === scope.productId || meta?.product_id === scope.productId;
+}
+function symptomMatchesClearing(symptom, clearing) {
+    if (clearing.causeKeys?.includes(symptom.cause_key))
+        return true;
+    return (clearing.kinds ?? []).some((kind) => symptomAnswersForKind(symptom, kind));
+}
+/**
+ * Pure: the metadata patch that retires a clearing's matching absorbed symptoms from
+ * one row -- the remaining metadata.symptoms plus metadata.cleared_symptoms with each
+ * retired one appended (de-duped by cause key, newest kept, bounded to
+ * INCIDENT_SYMPTOM_CAP) -- or null when the row is closed, out of scope, or carries
+ * nothing to retire. The row's own opening symptom is never retired.
+ */
+export function symptomRetirementPatch(row, clearing, clearedAt) {
+    if (!isOpenIncidentRow(row) || !rowInClearingScope(row, clearing.scope))
+        return null;
+    const meta = incidentRowMeta(row);
+    const own = rowOwnCauseKeys(row);
+    const symptoms = readSymptoms(meta);
+    const retired = symptoms.filter((s) => !own.has(s.cause_key) && symptomMatchesClearing(s, clearing));
+    if (retired.length === 0)
+        return null;
+    const retiredKeys = new Set(retired.map((s) => s.cause_key));
+    const cleared = [
+        ...readClearedSymptoms(meta).filter((c) => !retiredKeys.has(c.cause_key)),
+        ...retired.map((s) => ({ cause_key: s.cause_key, escalation_kind: s.escalation_kind, cleared_at: clearedAt, resolution_class: clearing.resolutionClass })),
+    ];
+    return {
+        symptoms: symptoms.filter((s) => !retiredKeys.has(s.cause_key)),
+        cleared_symptoms: cleared.slice(Math.max(0, cleared.length - INCIDENT_SYMPTOM_CAP)),
+    };
+}
+/**
+ * Retire a clearing's matching absorbed symptoms from the OPEN rows in its scope
+ * (contract rule 6). `rows` reuses rows the close-half already read for the scope
+ * (no second read); omitted, the open rows are read, narrowed by scope.focusId.
+ * `skipIds` are the close-half's own rows (being resolved, not rewritten). A clearing
+ * of hold kinds only reads nothing -- a hold kind is never absorbed (rule 4).
+ * Best-effort and never throws: a failed read or write becomes a warning and the
+ * pass continues. The write reads-then-writes like an attach (not atomic).
+ */
+export async function retireClearedSymptoms(clearing, io, opts = {}) {
+    const outcome = { retired: 0, warnings: [] };
+    const absorbable = (clearing.kinds ?? []).some((k) => !INCIDENT_HOLD_KINDS.has(k)) || (clearing.causeKeys ?? []).length > 0;
+    if (!absorbable || (!clearing.scope.focusId && !clearing.scope.productId))
+        return outcome;
+    let rows;
+    try {
+        rows = opts.rows ?? (await io.listOpenRows(clearing.scope.focusId ? { focusId: clearing.scope.focusId } : {}));
+    }
+    catch (err) {
+        outcome.warnings.push(`Symptom retirement read failed; absorbed symptoms left in place: ${err.message}`);
+        return outcome;
+    }
+    const skip = new Set(opts.skipIds ?? []);
+    const clearedAt = opts.clearedAt ?? new Date().toISOString();
+    for (const row of rows) {
+        if (skip.has(row.id))
+            continue;
+        const patch = symptomRetirementPatch(row, clearing, clearedAt);
+        if (!patch)
+            continue;
+        const count = readSymptoms(incidentRowMeta(row)).length - patch.symptoms.length;
+        try {
+            await io.updateMetadata(row.id, { ...patch });
+            outcome.retired += count;
+        }
+        catch (err) {
+            outcome.warnings.push(`Retiring ${count} cleared symptom(s) from escalation ${row.id} failed: ${err.message}`);
+        }
+    }
+    return outcome;
+}
+//# sourceMappingURL=incident-correlation.js.map

package/dist/supervision/incident-correlation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"incident-correlation.js","sourceRoot":"","sources":["../../src/supervision/incident-correlation.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,0EAA0E;AAC1E,gBAAgB;AAqEhB,OAAO,EACL,aAAa,EACb,eAAe,EACf,WAAW,EACX,0BAA0B,EAC1B,wBAAwB,EACxB,oBAAoB,GAErB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,eAAe,EAAiB,MAAM,8CAA8C,CAAC;AAE3H,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,YAAY,EACZ,qBAAqB,GAGtB,MAAM,2CAA2C,CAAC;AAEnD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAC;IAC9D,cAAc;IACd,4BAA4B;IAC5B,0BAA0B;CAC3B,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAwB,IAAI,GAAG,CAAC;IACpE,wBAAwB;CACzB,CAAC,CAAC;AAEH,oFAAoF;AACpF,SAAS,mBAAmB,CAAC,IAAmB;IAC9C,OAAO,IAAI,KAAK,IAAI,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,yBAAyB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AACjG,CAAC;AAkBD,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,KAAuD;IAClF,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC;IACpC,OAAO,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACnH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAA0B,EAAE,UAA8B;IACjG,MAAM,IAAI,GAAG,KAAK,CAAC,cAAc,IAAI,IAAI,CAAC;IAC1C,IAAI,IAAI,IAAI,0BAA0B,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,OAAO,WAAW,CAChB;QACE,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC;QAC3B,SAAS,EAAE,UAAU,CAAC,SAAS;KAChC,EACD,IAAI,CACL,CAAC;AACJ,CAAC;AAED,6GAA6G;AAC7G,SAAS,kBAAkB,CAAC,GAAyB;IACnD,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,wBAAwB;QAAE,OAAO,GAAG,CAAC;IAC3D,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,wBAAwB,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;AACzF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAC,KAA0B,EAAE,GAAW,EAAE,UAAkB;IACvF,MAAM,QAAQ,GACZ,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC;QACzC,eAAe,CAAC,KAAK,CAAC,cAAc,IAAI,SAAS,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,WAAW,EAAE,oBAAoB,CAAC;IACnD,MAAM,WAAW,GAAG,kBAAkB,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;IACxE,OAAO;QACL,SAAS,EAAE,QAAQ;QACnB,eAAe,EAAE,KAAK,CAAC,cAAc,IAAI,IAAI;QAC7C,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC;QACtC,WAAW,EAAE,UAAU;QACvB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAA0B,EAC1B,GAAkB,EAClB,UAAkB;IAElB,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC,QAAQ,CAAC;IAChC,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;QACzB,YAAY,EAAE,GAAG;QACjB,QAAQ,EAAE,aAAa,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;KAC7F,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,GAAgB;IAC/B,OAAO,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,cAAc,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;AAC1F,CAAC;AAED,sGAAsG;AACtG,SAAS,oBAAoB,CAAC,QAAoD;IAChF,OAAO,cAAc,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;AACzD,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,uBAAuB,CAAC,GAAgB;IACtD,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAClG,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,kBAAkB,CAAC,KAAmF;IACpH,IAAI,mBAAmB,CAAC,cAAc,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5E,IAAI,mBAAmB,CAAC,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5E,OAAO,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,IAAI,CAAC;AACxD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAA4B,EAC5B,GAAW,EACX,WAAsC;IAEtC,IAAI,IAAI,GAA+C,IAAI,CAAC;IAC5D,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;YAAE,SAAS;QACvF,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC;YAAE,SAAS;QAClE,IAAI,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,mBAAmB,CAAC,oBAAoB,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,SAAS;QACnH,MAAM,SAAS,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QACjC,IAAI,IAAI,KAAK,IAAI,IAAI,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC;YAAE,IAAI,GAAG,SAAS,CAAC;IAC3E,CAAC;IACD,OAAO,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC;AAC3B,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAsC,EAAE,CAAsC;IACtG,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC;IACzC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC;IACzC,IAAI,QAAQ,IAAI,QAAQ,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,QAAQ,GAAG,QAAQ,CAAC;IAC9E,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;AAC3B,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,eAAe,CAAC,GAAgB,EAAE,QAAgB;IAChE,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,IAAI,EAAE,SAAS,KAAK,QAAQ,IAAI,IAAI,EAAE,kBAAkB,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvF,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC;AAClE,CAAC;AAUD,wFAAwF;AACxF,MAAM,UAAU,cAAc,CAAC,IAAa;IAC1C,OAAO;QACL,YAAY,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YAClC,MAAM,GAAG,GAAG,MAAM,IAAI,CAA8C,iBAAiB,EAAE;gBACrF,MAAM,EAAE,EAAE,QAAQ,EAAE,sBAAsB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;gBAC7E,KAAK,EAAE,GAAG;aACX,CAAC,CAAC;YACH,OAAO,GAAG,EAAE,WAAW,IAAI,EAAE,CAAC;QAChC,CAAC;QACD,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE;YAC/C,MAAM,IAAI,CAAC,mBAAmB,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC1E,CAAC;KACF,CAAC;AACJ,CAAC;AAyBD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAA+B,EAAE,EAAoB;IACzF,MAAM,OAAO,GAAwB,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC3G,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,OAAO,CAAC;IACtD,IAAI,IAAmB,CAAC;IACxB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAChF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,qBAAqB,KAAK,CAAC,GAAG,gCAAiC,GAAa,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAClI,CAAC;IACD,MAAM,GAAG,GAAG,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IACpE,IAAI,CAAC,GAAG;QAAE,OAAO,OAAO,CAAC;IACzB,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,YAAY,KAAK,CAAC,GAAG,gBAAgB,GAAG,CAAC,EAAE,GAAG,CAAC;IAC7D,IAAI,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5C,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,SAAS,2BAA2B,KAAK,iBAAiB,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC1J,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,YAAY,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QAC1G,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,eAAe,OAAO,CAAC,SAAS,UAAU,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC9H,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,aAAa,KAAK,gCAAiC,GAAa,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC3J,CAAC;AACH,CAAC;AAoBD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAgB;IAC9C,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC;QAAE,IAAI,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACnG,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,GAAG,EAAE,CAAC;QACR,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAC7F,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,SAAS,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAgB,EAAE,KAA+B;IAC3E,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IACrD,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,KAAK,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,IAAI,EAAE,OAAO,KAAK,KAAK,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IACpG,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAClC,OAAO,GAAG,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,IAAI,EAAE,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,IAAI,EAAE,UAAU,KAAK,KAAK,CAAC,SAAS,CAAC;AAC1H,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAwB,EAAE,QAAyB;IACjF,IAAI,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,OAAO,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;AACrF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAAgB,EAChB,QAAyB,EACzB,SAAiB;IAEjB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,sBAAsB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IACrG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG;QACd,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACzE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,EAAE,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAC;KAC3J,CAAC;IACF,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC/D,gBAAgB,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,GAAG,oBAAoB,CAAC,CAAC;KACpF,CAAC;AACJ,CAAC;AAQD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAAyB,EACzB,EAAoB,EACpB,OAA2F,EAAE;IAE7F,MAAM,OAAO,GAA6B,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACvE,MAAM,UAAU,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5H,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,OAAO,OAAO,CAAC;IAC1F,IAAI,IAA4B,CAAC;IACjC,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,oEAAqE,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACpH,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAC/B,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,KAAK,GAAG,YAAY,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAChF,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;YAC9C,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,KAAK,uCAAuC,GAAG,CAAC,EAAE,YAAa,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5H,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/supervision/live-arm-facts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-arm-facts.d.ts","sourceRoot":"","sources":["../../src/supervision/live-arm-facts.ts"],"names":[],"mappings":"AAmCA,OAAO,EAAyB,KAAK,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAEhF;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAIpE"}

package/dist/supervision/live-arm-facts.js

@@ -0,0 +1,48 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/directive/directive-assembly-arm-facts.test.ts,
+//   packages/daemon/src/supervision/live-arm-facts.test.ts
+// PINNED-BY-END
+/**
+ * The arm facts of whichever team is LIVE on a focus right now.
+ *
+ * WHY THIS EXISTS. The record/queue rule has to bind at every door that hands a
+ * delivery to a running team, and one of those doors -- the stage directive's
+ * assembly recipe -- is reached through a chain that carries no team identity:
+ * `checkDirectives` / `resolveDirectiveOrFallback` pass only
+ * `(config, focusId, directive, worktreePath)` into
+ * `directive/directive-assembly.ts`, and the resolvers below it see only an
+ * `AssemblyContext`. Threading arm facts down every one of those call sites
+ * would mean a new parameter on four callers that have no business knowing about
+ * arming -- and a fifth caller added later would silently omit it, which is
+ * exactly the failure this rule exists to stop.
+ *
+ * So the lookup is done ONCE, here, from the fact that already answers the
+ * question: a `FocusTeamState` exists only while a team is live, and a team is
+ * live only on an armed focus (`supervision/null-role-spawn.ts` `focusMayRunTeam`
+ * makes a null role inert on every spawn path). The team state therefore IS the
+ * live arm -- role id, read-only flag, and the arm baseline the spawn stamped
+ * onto it -- with no extra read and no risk of reading a DIFFERENT arm than the
+ * one the running team was spawned under.
+ *
+ * FAIL-CLOSED DEFAULT. No live team => null => `isRecordedNewIntent` answers
+ * `false` for every delivery, i.e. everything is visible. Nothing is hidden on a
+ * guess.
+ *
+ * History: docs/daemon/history-team-lifecycle.md (supervision/live-arm-facts.ts).
+ */
+import { getActiveTeams } from '../daemon-state/focus-team-state.js';
+import { armFactsFromTeamState } from './recorded-new-intent.js';
+/**
+ * The arm facts for `focusId`, or null when no team is live on it.
+ *
+ * Null is the fail-closed answer: callers pass it straight to
+ * `isRecordedNewIntent` / `deliveriesVisibleToArm`, which treat absent arm facts
+ * as "nothing can be proved recorded".
+ */
+export function armFactsForLiveTeam(focusId) {
+    const teamState = getActiveTeams().get(focusId);
+    if (!teamState)
+        return null;
+    return armFactsFromTeamState(teamState);
+}
+//# sourceMappingURL=live-arm-facts.js.map

package/dist/supervision/live-arm-facts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-arm-facts.js","sourceRoot":"","sources":["../../src/supervision/live-arm-facts.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,iFAAiF;AACjF,2DAA2D;AAC3D,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAiB,MAAM,0BAA0B,CAAC;AAEhF;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,MAAM,SAAS,GAAG,cAAc,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,qBAAqB,CAAC,SAAS,CAAC,CAAC;AAC1C,CAAC"}

package/dist/supervision/loop-refusal-observation.d.ts

@@ -0,0 +1,57 @@
+/**
+ * A daemon background loop refused on every call reaches the machine lane.
+ *
+ * Background loops catch a refused API call, log a warning and try again next
+ * tick; this tracker is what reads whether a loop ever succeeds.
+ * History: docs/daemon/history-platform.md (supervision/loop-refusal-observation.ts).
+ *
+ * This tracker counts, per (loop, API action), consecutive refused attempts with
+ * no success between them. A loop reports ONE attempt per tick (drift
+ * evaluation) or per call (the transition-guard read). At the declared
+ * threshold it files exactly one agent_resolvable observation, cause-keyed on
+ * (loop, action), naming the loop, the action and the most recent refusal; the
+ * next success on that (loop, action) resolves it. A daemon restart forgets the
+ * counts but not the observation: the first success per key in a process
+ * resolves any observation a previous process left open.
+ *
+ * The observation carries no escalation_kind: its cause key identifies it, and a
+ * new kind would need a CHECK migration that couples daemon rollout to schema.
+ *
+ * Reporting never throws into the loop -- a filing, list or resolve failure is
+ * logged and retried on the next report. A tracker takes its I/O whole; the
+ * daemon-wide tracker and its I/O are bound at the composition root
+ * (composition/loop-refusal-context.ts).
+ */
+import type { IncidentRow } from '../queries/escalations/incident-record.js';
+import type { FileEscalationIdempotentParams, FileEscalationIdempotentResult } from './escalation-suppression.js';
+/** Consecutive refused attempts, with no success between, that file the observation. */
+export declare const LOOP_REFUSAL_THRESHOLD = 3;
+/** The cause-key kind every loop-refusal observation carries. */
+export declare const LOOP_REFUSAL_CAUSE_KIND = "background_loop_refused";
+/** What a background loop reports about each attempt at an API action. */
+export interface LoopRefusalReporter {
+    recordSuccess(loop: string, action: string): Promise<void>;
+    recordRefusal(loop: string, action: string, message: string): Promise<void>;
+}
+/** A tracker's I/O and threshold, all required (production: composition/loop-refusal-context.ts). */
+export interface LoopRefusalDeps {
+    fileObservation: (params: FileEscalationIdempotentParams) => Promise<FileEscalationIdempotentResult>;
+    listOpenEscalations: () => Promise<IncidentRow[]>;
+    resolveEscalation: (escalationId: string, notes: string) => Promise<void>;
+    /** The daemon's organization, read when an observation is filed. */
+    organizationId: () => string | Promise<string>;
+    threshold: number;
+}
+/** The cause key of the observation for one (loop, action). */
+export declare function loopRefusalCauseKey(loop: string, action: string): string;
+export declare class LoopRefusalTracker implements LoopRefusalReporter {
+    private readonly io;
+    private readonly states;
+    private readonly queues;
+    constructor(io: LoopRefusalDeps);
+    recordSuccess(loop: string, action: string): Promise<void>;
+    recordRefusal(loop: string, action: string, message: string): Promise<void>;
+    /** Run one report for a key after the previous one, never rejecting. */
+    private serialize;
+}
+//# sourceMappingURL=loop-refusal-observation.d.ts.map

package/dist/supervision/loop-refusal-observation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loop-refusal-observation.d.ts","sourceRoot":"","sources":["../../src/supervision/loop-refusal-observation.ts"],"names":[],"mappings":"AAOA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2CAA2C,CAAC;AAC7E,OAAO,KAAK,EACV,8BAA8B,EAC9B,8BAA8B,EAC/B,MAAM,6BAA6B,CAAC;AAOrC,wFAAwF;AACxF,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC,iEAAiE;AACjE,eAAO,MAAM,uBAAuB,4BAA4B,CAAC;AAKjE,0EAA0E;AAC1E,MAAM,WAAW,mBAAmB;IAClC,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7E;AAED,qGAAqG;AACrG,MAAM,WAAW,eAAe;IAC9B,eAAe,EAAE,CAAC,MAAM,EAAE,8BAA8B,KAAK,OAAO,CAAC,8BAA8B,CAAC,CAAC;IACrG,mBAAmB,EAAE,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAClD,iBAAiB,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,oEAAoE;IACpE,cAAc,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,+DAA+D;AAC/D,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAExE;AAWD,qBAAa,kBAAmB,YAAW,mBAAmB;IAIhD,OAAO,CAAC,QAAQ,CAAC,EAAE;IAH/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+B;IACtD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;gBAE9B,EAAE,EAAE,eAAe;IAEhD,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiB1D,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAY3E,wEAAwE;IACxE,OAAO,CAAC,SAAS;CAgBlB"}

package/dist/supervision/loop-refusal-observation.js

@@ -0,0 +1,92 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/directive/builtin-transition-trigger.test.ts,
+//   packages/daemon/src/directive/phase-sync-refusal.test.ts,
+//   packages/daemon/src/drift/drift-eval-loop.test.ts,
+//   packages/daemon/src/supervision/loop-refusal-observation.test.ts
+// PINNED-BY-END
+import { DISPOSITION_AGENT_RESOLVABLE } from '../queries/escalations/escalation-dispositions.js';
+import { computeCauseKey } from '../queries/escalations/cause-key.js';
+import { createLogger } from '../log/daemon-log.js';
+const log = createLogger({ module: 'loop-refusal' });
+/** Consecutive refused attempts, with no success between, that file the observation. */
+export const LOOP_REFUSAL_THRESHOLD = 3;
+/** The cause-key kind every loop-refusal observation carries. */
+export const LOOP_REFUSAL_CAUSE_KIND = 'background_loop_refused';
+/** Longest refusal message carried into the observation. */
+const MAX_REFUSAL_MESSAGE = 500;
+/** The cause key of the observation for one (loop, action). */
+export function loopRefusalCauseKey(loop, action) {
+    return computeCauseKey(LOOP_REFUSAL_CAUSE_KIND, { loop, action });
+}
+export class LoopRefusalTracker {
+    io;
+    states = new Map();
+    queues = new Map();
+    constructor(io) {
+        this.io = io;
+    }
+    recordSuccess(loop, action) {
+        return this.serialize(loop, action, async (state, key) => {
+            state.consecutive = 0;
+            state.filed = false;
+            if (!state.mayBeOpen)
+                return;
+            const io = this.io;
+            const open = (await io.listOpenEscalations()).filter((row) => row.metadata?.cause_key === key);
+            for (const row of open) {
+                await io.resolveEscalation(row.id, `Auto-resolved by the daemon: the "${loop}" loop's ${action} call succeeded again.`);
+            }
+            state.mayBeOpen = false;
+        });
+    }
+    recordRefusal(loop, action, message) {
+        return this.serialize(loop, action, async (state, key) => {
+            state.consecutive += 1;
+            state.lastRefusal = message.slice(0, MAX_REFUSAL_MESSAGE);
+            if (state.filed || state.consecutive < this.io.threshold)
+                return;
+            const io = this.io;
+            await io.fileObservation(buildObservation(loop, action, key, state, await io.organizationId()));
+            state.filed = true;
+            state.mayBeOpen = true;
+        });
+    }
+    /** Run one report for a key after the previous one, never rejecting. */
+    serialize(loop, action, work) {
+        const key = loopRefusalCauseKey(loop, action);
+        let state = this.states.get(key);
+        if (!state) {
+            state = { consecutive: 0, lastRefusal: '', filed: false, mayBeOpen: true };
+            this.states.set(key, state);
+        }
+        const current = state;
+        const next = (this.queues.get(key) ?? Promise.resolve())
+            .then(() => work(current, key))
+            .catch((err) => {
+            log.warn(`[loop-refusal] reporting for loop "${loop}" (${action}) failed: ${err.message}`);
+        });
+        this.queues.set(key, next);
+        return next;
+    }
+}
+function buildObservation(loop, action, causeKey, state, organizationId) {
+    return {
+        causeKey,
+        organizationId,
+        issueId: null,
+        reasonType: 'error_encountered',
+        disposition: DISPOSITION_AGENT_RESOLVABLE,
+        description: `Daemon background loop "${loop}" has been refused on ${state.consecutive} consecutive attempts at ` +
+            `${action} with no success in between. Most recent refusal: ${state.lastRefusal}`,
+        whatWasTried: 'The loop logged each refusal as a warning and retried on its next attempt; nothing else acted on it.',
+        helpNeeded: `Find why ${action} refuses the "${loop}" loop (the refusal above carries the API's reason) and fix the ` +
+            `caller or the handler. This observation closes itself when the loop's next ${action} call succeeds.`,
+        metadata: {
+            loop,
+            api_action: action,
+            last_refusal: state.lastRefusal,
+            consecutive_refusals: state.consecutive,
+        },
+    };
+}
+//# sourceMappingURL=loop-refusal-observation.js.map

package/dist/supervision/loop-refusal-observation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loop-refusal-observation.js","sourceRoot":"","sources":["../../src/supervision/loop-refusal-observation.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,+EAA+E;AAC/E,8DAA8D;AAC9D,uDAAuD;AACvD,qEAAqE;AACrE,gBAAgB;AAgChB,OAAO,EAAE,4BAA4B,EAAE,MAAM,mDAAmD,CAAC;AACjG,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAErD,wFAAwF;AACxF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAExC,iEAAiE;AACjE,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AAEjE,4DAA4D;AAC5D,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAkBhC,+DAA+D;AAC/D,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,MAAc;IAC9D,OAAO,eAAe,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AACpE,CAAC;AAWD,MAAM,OAAO,kBAAkB;IAIA;IAHZ,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IACrC,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAE3D,YAA6B,EAAmB;QAAnB,OAAE,GAAF,EAAE,CAAiB;IAAG,CAAC;IAEpD,aAAa,CAAC,IAAY,EAAE,MAAc;QACxC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACvD,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC;YACtB,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;YACpB,IAAI,CAAC,KAAK,CAAC,SAAS;gBAAE,OAAO;YAC7B,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,KAAK,GAAG,CAAC,CAAC;YAC/F,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,EAAE,CAAC,iBAAiB,CACxB,GAAG,CAAC,EAAE,EACN,qCAAqC,IAAI,YAAY,MAAM,wBAAwB,CACpF,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,IAAY,EAAE,MAAc,EAAE,OAAe;QACzD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACvD,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC;YACvB,KAAK,CAAC,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;YAC1D,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,SAAS;gBAAE,OAAO;YACjE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;YACnB,MAAM,EAAE,CAAC,eAAe,CAAC,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;YAChG,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;YACnB,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,wEAAwE;IAChE,SAAS,CAAC,IAAY,EAAE,MAAc,EAAE,IAAqD;QACnG,MAAM,GAAG,GAAG,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;YAC3E,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC;QACtB,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;aACrD,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;aAC9B,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YACtB,GAAG,CAAC,IAAI,CAAC,sCAAsC,IAAI,MAAM,MAAM,aAAc,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACxG,CAAC,CAAC,CAAC;QACL,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,SAAS,gBAAgB,CACvB,IAAY,EACZ,MAAc,EACd,QAAgB,EAChB,KAAe,EACf,cAAsB;IAEtB,OAAO;QACL,QAAQ;QACR,cAAc;QACd,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,mBAAmB;QAC/B,WAAW,EAAE,4BAA4B;QACzC,WAAW,EACT,2BAA2B,IAAI,yBAAyB,KAAK,CAAC,WAAW,2BAA2B;YACpG,GAAG,MAAM,qDAAqD,KAAK,CAAC,WAAW,EAAE;QACnF,YAAY,EAAE,sGAAsG;QACpH,UAAU,EACR,YAAY,MAAM,iBAAiB,IAAI,kEAAkE;YACzG,8EAA8E,MAAM,iBAAiB;QACvG,QAAQ,EAAE;YACR,IAAI;YACJ,UAAU,EAAE,MAAM;YAClB,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,oBAAoB,EAAE,KAAK,CAAC,WAAW;SACxC;KACF,CAAC;AACJ,CAAC"}

package/dist/supervision/null-role-spawn.d.ts

@@ -0,0 +1,79 @@
+/**
+ * The single authority for whether a focus may run a team: a non-null assigned
+ * agent role. A null role is inert whatever the arm history, the directive
+ * origin, or an operator stop. Consulted by every module that asks "may this
+ * focus run a team?" so no two modules can disagree from the same row.
+ *
+ * A type predicate (`is string`) so a caller that gates on it narrows the role
+ * to a non-null string in the may-run branch without a second check.
+ *
+ * Pure and exported for unit testing.
+ */
+export declare function focusMayRunTeam(assignedAgentRoleId: string | null | undefined): assignedAgentRoleId is string;
+/**
+ * What to do with a pending spawn directive whose focus has a null
+ * assigned_agent_role_id. A null role never spawns, so there is no `spawn`
+ * outcome -- only:
+ *
+ *   - skip:   an OPERATOR STOP (product_focuses.operator_stopped_at set). The
+ *             human pulled the Play toggle to halt the focus; the directive is
+ *             dropped quietly (not carried to resume). Authoritative -- it is
+ *             its own suppression, distinct from a refusal.
+ *   - refuse: any other null role -- a lifecycle clear (auto_terminate_focus_team
+ *             cleared the arm at completion) or a never-armed focus. The directive
+ *             is REFUSED and the refusal RECORDED (dropped so it cannot re-fire
+ *             under a substituted role, and logged). The focus stays un-armed with
+ *             no team until a human arms it.
+ */
+export type NullRoleSpawnDecision = {
+    action: 'skip';
+} | {
+    action: 'refuse';
+};
+/**
+ * Decide what to do with a null-role pending spawn directive. A null role NEVER
+ * spawns; the only question is whether this is an authoritative operator stop
+ * (drop quietly) or a refusal to record. Independent of the directive's
+ * sessionType and of the focus's arm history -- the arm-gate is unconditional.
+ *
+ * Pure and exported for unit testing.
+ */
+export declare function decideNullRoleSpawn(input: {
+    /**
+     * Whether an operator has stopped this focus (product_focuses.
+     * operator_stopped_at is set). An operator stop is an authoritative halt: the
+     * directive is dropped as a stop suppression rather than recorded as a refusal.
+     * A null role WITHOUT an operator stop is a lifecycle clear or a never-armed
+     * focus (an API unarm also sets operator_stopped_at -- see
+     * product-api focus crud), so `false` here means "refuse and record".
+     */
+    operatorStopped: boolean;
+}): NullRoleSpawnDecision;
+/**
+ * Re-announce floor for the null-role refusal warning. The warning is emitted on
+ * entry and then AT MOST once per this interval while the block persists -- long
+ * enough that an inert focus does not spin-log every 30s poll, short enough that
+ * a block that persists keeps surfacing in the log for as long as it lasts. 30
+ * minutes.
+ */
+export declare const NULL_ROLE_SKIP_REANNOUNCE_FLOOR_MS: number;
+/**
+ * Rate-limited re-announce gate for the null-role refusal warning. The focus poller
+ * holds a Map of focus id -> last-announce timestamp (ms) for the current
+ * continuous blocked episode; this mutates it and returns whether to emit the
+ * warning now:
+ *
+ *   - focus never announced this episode -> record `nowMs` and return true
+ *     (warn on entry).
+ *   - last announced >= `floorMs` ago -> record `nowMs` and return true
+ *     (re-announce: the block persists, keep surfacing it).
+ *   - last announced < `floorMs` ago -> return false (suppress the repeat).
+ *
+ * The focus poller removes the focus from the map when it resumes (role assigned or
+ * focus leaves the active set), so a later re-entry warns immediately again.
+ * `nowMs`/`floorMs` are injectable so the decision is deterministic under test.
+ * Pure w.r.t. its inputs (Map + clock in, boolean out) and exported for unit
+ * testing without standing up the poll loop.
+ */
+export declare function shouldWarnNullRoleSkip(lastAnnouncedAt: Map<string, number>, focusId: string, nowMs?: number, floorMs?: number): boolean;
+//# sourceMappingURL=null-role-spawn.d.ts.map

package/dist/supervision/null-role-spawn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"null-role-spawn.d.ts","sourceRoot":"","sources":["../../src/supervision/null-role-spawn.ts"],"names":[],"mappings":"AAqCA;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,mBAAmB,IAAI,MAAM,CAG7G;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,qBAAqB,GAC7B;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAClB;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,CAAC;AAEzB;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC;;;;;;;OAOG;IACH,eAAe,EAAE,OAAO,CAAC;CAC1B,GAAG,qBAAqB,CAExB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,kCAAkC,QAAc,CAAC;AAE9D;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,sBAAsB,CACpC,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EACpC,OAAO,EAAE,MAAM,EACf,KAAK,GAAE,MAAmB,EAC1B,OAAO,GAAE,MAA2C,GACnD,OAAO,CAKT"}