@telora/daemon 0.22.245 → 0.22.289

package/dist/queries/org-config/embedding-config.js

@@ -0,0 +1,61 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/queries/org-config/embedding-config.test.ts
+// PINNED-BY-END
+/**
+ * Organization embedding-config read.
+ *
+ * Resolves the org's pluggable, OpenAI-compatible embedding endpoint (base URL,
+ * model, dimension) from the SINGLE source of truth -- the
+ * `get_organization_embedding_config` RPC -- which the edge runtime reads too.
+ * The daemon reaches it through the `daemon_get_organization_embedding_config`
+ * edge action (same product-api mechanism every other daemon query uses; the
+ * daemon has no direct Supabase client).
+ *
+ * The RPC returns a TABLE (array of one row): the org's configured row, else the
+ * OpenAI defaults filled server-side. This boundary takes the first row and maps
+ * the snake_case DB columns (base_url/model/dimension) to camelCase
+ * (baseUrl/model/dimension). The bearer key is NOT returned here -- it is a
+ * service-role-only secret fetched on a separate authenticated path, never on
+ * these coordinates.
+ *
+ * Fail-open: on an empty result OR any error (action not yet wired, network,
+ * validation), this falls back to the OpenAI defaults so callers always get a
+ * usable config rather than failing. The daemon does not embed yet -- this is
+ * only the typed read seam; the first consumer lands in a later delivery.
+ */
+import { callApiValidated } from '../api-client/shared.js';
+import { OrganizationEmbeddingConfigResponseSchema } from '../wire-schemas/schemas.js';
+/**
+ * OpenAI defaults. Mirror the RPC's server-side defaults so the daemon and the
+ * edge runtime agree even when this path falls back.
+ */
+export const DEFAULT_EMBEDDING_CONFIG = {
+    baseUrl: 'https://api.openai.com/v1',
+    model: 'text-embedding-3-small',
+    dimension: 1536,
+};
+/**
+ * Read the org's embedding endpoint config from the single-source RPC.
+ *
+ * Always resolves to a usable config: on an empty RPC result or ANY error it
+ * returns {@link DEFAULT_EMBEDDING_CONFIG} rather than throwing.
+ */
+export async function getOrganizationEmbeddingConfig(organizationId) {
+    try {
+        const result = await callApiValidated('daemon_get_organization_embedding_config', OrganizationEmbeddingConfigResponseSchema, { organizationId });
+        const row = result.config[0];
+        if (!row)
+            return { ...DEFAULT_EMBEDDING_CONFIG };
+        return {
+            baseUrl: row.base_url,
+            model: row.model,
+            dimension: row.dimension,
+        };
+    }
+    catch {
+        // Fail-open: action not yet wired, network failure, or validation miss --
+        // callers always get a usable config.
+        return { ...DEFAULT_EMBEDDING_CONFIG };
+    }
+}
+//# sourceMappingURL=embedding-config.js.map

package/dist/queries/org-config/embedding-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"embedding-config.js","sourceRoot":"","sources":["../../../src/queries/org-config/embedding-config.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,6EAA6E;AAC7E,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,yCAAyC,EAAE,MAAM,4BAA4B,CAAC;AASvF;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAgC;IACnE,OAAO,EAAE,2BAA2B;IACpC,KAAK,EAAE,wBAAwB;IAC/B,SAAS,EAAE,IAAI;CAChB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,cAAsB;IAEtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,0CAA0C,EAC1C,yCAAyC,EACzC,EAAE,cAAc,EAAE,CACnB,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,GAAG,wBAAwB,EAAE,CAAC;QACjD,OAAO;YACL,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,sCAAsC;QACtC,OAAO,EAAE,GAAG,wBAAwB,EAAE,CAAC;IACzC,CAAC;AACH,CAAC"}

package/dist/queries/org-config/local-models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-models.d.ts","sourceRoot":"","sources":["../../../src/queries/org-config/local-models.ts"],"names":[],"mappings":"AAwBA,0DAA0D;AAC1D,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;;;;;;;OAOG;IACH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAkB/F;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAOtF;AAED,sDAAsD;AACtD,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAsB,2BAA2B,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAOtF;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAE5D;AAED,6DAA6D;AAC7D,wBAAsB,uBAAuB,CAAC,MAAM,EAAE;IACpD,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,IAAI,CAAC,CAOhB"}

package/dist/queries/org-config/local-models.js

@@ -0,0 +1,75 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/focus/decide-local-model-routing.test.ts,
+//   packages/daemon/src/focus/focus-executor-characterization.test.ts,
+//   packages/daemon/src/focus/resolve-local-model-config.test.ts,
+//   packages/daemon/src/focus/should-swap-for-pass.test.ts,
+//   packages/daemon/src/host-control/host-control-single-gpu-conflict.test.ts
+// PINNED-BY-END
+/**
+ * Local model registry queries.
+ *
+ * The daemon resolves a per-pass localModelOverride ref (a local_models row id)
+ * to non-secret connection coordinates at spawn. The bearer key VALUE is
+ * stored in Telora (service-role-only) and fetched separately via
+ * getLocalModelSecret on the daemon's authenticated path -- no host env var.
+ */
+import { callApi, callApiValidated } from '../api-client/shared.js';
+import { LocalModelResponseSchema, LocalModelSecretResponseSchema, PendingDiscoveryRequestsResponseSchema, } from '../wire-schemas/schemas-local-model.js';
+/**
+ * Resolve a local_models row by id to its coordinates, org-scoped server-side.
+ * Returns null when the id is unknown in the org (the caller falls back to
+ * engine-default behavior rather than failing the spawn).
+ */
+export async function getLocalModel(localModelId) {
+    const result = await callApiValidated('daemon_get_local_model', LocalModelResponseSchema, { localModelId });
+    const m = result.localModel;
+    if (!m)
+        return null;
+    return {
+        id: m.id,
+        name: m.name,
+        baseUrl: m.baseUrl,
+        model: m.model,
+        wireApi: m.wireApi ?? null,
+        engine: m.engine ?? null,
+        modelSizeMb: m.modelSizeMb ?? null,
+        nativeContext: m.nativeContext ?? null,
+    };
+}
+/**
+ * Resolve a local model's bearer key VALUE from Telora (D8), org-scoped
+ * server-side. Returns null when no secret is configured -- the caller fails
+ * closed rather than spawning unauthenticated. The value is fetched only on the
+ * daemon's tracker-authenticated path and never persisted on disk by the daemon.
+ */
+export async function getLocalModelSecret(localModelId) {
+    const result = await callApiValidated('daemon_get_local_model_secret', LocalModelSecretResponseSchema, { localModelId });
+    return result.apiKey ?? null;
+}
+/**
+ * Atomically claim the org's pending discovery requests (pending -> processing)
+ * and return them. The status flip server-side is the claim, so a later poll
+ * never re-fetches the same request.
+ */
+export async function getPendingDiscoveryRequests() {
+    const result = await callApiValidated('daemon_get_pending_discovery_requests', PendingDiscoveryRequestsResponseSchema, {});
+    return result.requests.map((r) => ({ id: r.id, baseUrl: r.baseUrl, apiKey: r.apiKey ?? null }));
+}
+/**
+ * Prune the org's terminal (loaded/error) discovery rows older than ~1 day
+ * (TEL-9). Org-scoped server-side by the tracker; takes no params. Best-effort
+ * housekeeping -- callers ignore the returned `{ deleted }` body.
+ */
+export async function pruneDiscoveryRequests() {
+    await callApi('daemon_prune_discovery_requests', {});
+}
+/** Write back the outcome of a claimed discovery request. */
+export async function resolveDiscoveryRequest(params) {
+    await callApi('daemon_resolve_discovery_request', {
+        discoveryRequestId: params.id,
+        status: params.status,
+        ...(params.discoveredModels ? { discoveredModels: params.discoveredModels } : {}),
+        ...(params.error ? { error: params.error } : {}),
+    });
+}
+//# sourceMappingURL=local-models.js.map

package/dist/queries/org-config/local-models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-models.js","sourceRoot":"","sources":["../../../src/queries/org-config/local-models.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,2EAA2E;AAC3E,uEAAuE;AACvE,kEAAkE;AAClE,4DAA4D;AAC5D,8EAA8E;AAC9E,gBAAgB;AAEhB;;;;;;;GAOG;AAEH,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EACL,wBAAwB,EACxB,8BAA8B,EAC9B,sCAAsC,GACvC,MAAM,wCAAwC,CAAC;AAsBhD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,YAAoB;IACtD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,wBAAwB,EACxB,wBAAwB,EACxB,EAAE,YAAY,EAAE,CACjB,CAAC;IACF,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC;IAC5B,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;QAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI;QACxB,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;QAClC,aAAa,EAAE,CAAC,CAAC,aAAa,IAAI,IAAI;KACvC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,YAAoB;IAC5D,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,+BAA+B,EAC/B,8BAA8B,EAC9B,EAAE,YAAY,EAAE,CACjB,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC;AAC/B,CAAC;AAaD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B;IAC/C,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,uCAAuC,EACvC,sCAAsC,EACtC,EAAE,CACH,CAAC;IACF,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;AAClG,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,MAAM,OAAO,CAAC,iCAAiC,EAAE,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,MAK7C;IACC,MAAM,OAAO,CAAC,kCAAkC,EAAE;QAChD,kBAAkB,EAAE,MAAM,CAAC,EAAE;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjD,CAAC,CAAC;AACL,CAAC"}

package/dist/queries/org-config/products.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"products.d.ts","sourceRoot":"","sources":["../../../src/queries/org-config/products.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,kBAAkB,EAAE,CAAC;CACtC;AAID;;;;GAIG;AACH,wBAAsB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAqB5F"}

package/dist/queries/org-config/products.js

@@ -0,0 +1,33 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/focus/heartbeat-per-product-branch-status.test.ts
+// PINNED-BY-END
+/**
+ * Product-level queries for the daemon.
+ */
+import { callApi } from '../api-client/shared.js';
+const DEFAULT_BRANCH_MONITORS = [{ ref: 'origin/main', label: 'O' }];
+/**
+ * Fetch the branch configuration for a product.
+ * Returns mainBranch and branchMonitors from the product record.
+ * Falls back to defaults if the product has no branch config or on error.
+ */
+export async function getProductBranchConfig(productId) {
+    try {
+        const result = await callApi('get', { productId });
+        const product = result.product ?? {};
+        const mainBranch = typeof product.mainBranch === 'string' ? product.mainBranch : 'main';
+        let branchMonitors = DEFAULT_BRANCH_MONITORS;
+        if (Array.isArray(product.branchMonitors) && product.branchMonitors.length > 0) {
+            const validated = product.branchMonitors.filter((m) => typeof m === 'object' && m !== null &&
+                typeof m.ref === 'string' &&
+                typeof m.label === 'string');
+            if (validated.length > 0)
+                branchMonitors = validated;
+        }
+        return { mainBranch, branchMonitors };
+    }
+    catch {
+        return { mainBranch: 'main', branchMonitors: DEFAULT_BRANCH_MONITORS };
+    }
+}
+//# sourceMappingURL=products.js.map

package/dist/queries/org-config/products.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"products.js","sourceRoot":"","sources":["../../../src/queries/org-config/products.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,mFAAmF;AACnF,gBAAgB;AAEhB;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAYlD,MAAM,uBAAuB,GAAyB,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;AAE3F;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,SAAiB;IAC5D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAuC,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACzF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;QACxF,IAAI,cAAc,GAAG,uBAAuB,CAAC;QAE7C,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/E,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAC7C,CAAC,CAAU,EAA2B,EAAE,CACtC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;gBACnC,OAAQ,CAA6B,CAAC,GAAG,KAAK,QAAQ;gBACtD,OAAQ,CAA6B,CAAC,KAAK,KAAK,QAAQ,CAC3D,CAAC;YACF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;gBAAE,cAAc,GAAG,SAAS,CAAC;QACvD,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,uBAAuB,EAAE,CAAC;IACzE,CAAC;AACH,CAAC"}

package/dist/queries/org-config/roles.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Agent role queries.
+ */
+import type { AgentRole } from '../../types/index.js';
+/**
+ * Fetch all agent roles for the organization.
+ */
+export declare function getAgentRoles(_organizationId: string): Promise<AgentRole[]>;
+/**
+ * Fetch a specific agent role.
+ */
+export declare function getAgentRole(roleId: string): Promise<AgentRole | null>;
+//# sourceMappingURL=roles.d.ts.map

package/dist/queries/org-config/roles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles.d.ts","sourceRoot":"","sources":["../../../src/queries/org-config/roles.ts"],"names":[],"mappings":"AAIA;;GAEG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAoBtD;;GAEG;AACH,wBAAsB,aAAa,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAOjF;AAED;;GAEG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAc5E"}

package/dist/queries/org-config/roles.js

@@ -0,0 +1,40 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: none -- no test imports this module directly (baselined; see lint:pinned-by)
+// PINNED-BY-END
+import { callApiValidated } from '../api-client/shared.js';
+import { createTransform } from '@telora/daemon-core';
+import { AgentRolesResponseSchema, AgentRoleResponseSchema } from '../wire-schemas/schemas.js';
+const transformRoleFromApi = createTransform({
+    id: 'id',
+    organization_id: 'organizationId',
+    name: 'name',
+    description: 'description',
+    allowed_file_patterns: { from: 'allowedFilePatterns', default: [] },
+    allowed_tools: { from: 'allowedTools', default: [] },
+    system_prompt_template: 'systemPromptTemplate',
+    color: 'color',
+    icon: 'icon',
+});
+/**
+ * Fetch all agent roles for the organization.
+ */
+export async function getAgentRoles(_organizationId) {
+    const result = await callApiValidated('agent_role_list', AgentRolesResponseSchema, { detail: 'full' });
+    return result.roles.map(transformRoleFromApi);
+}
+/**
+ * Fetch a specific agent role.
+ */
+export async function getAgentRole(roleId) {
+    try {
+        const result = await callApiValidated('daemon_get_agent_role', AgentRoleResponseSchema, { roleId });
+        return transformRoleFromApi(result.role);
+    }
+    catch (error) {
+        if (error.message?.includes('not found')) {
+            return null;
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=roles.js.map

package/dist/queries/org-config/roles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles.js","sourceRoot":"","sources":["../../../src/queries/org-config/roles.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,0FAA0F;AAC1F,gBAAgB;AAOhB,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAsB,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAKnH,MAAM,oBAAoB,GAAG,eAAe,CAA0B;IACpE,EAAE,EAAE,IAAI;IACR,eAAe,EAAE,gBAAgB;IACjC,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,aAAa;IAC1B,qBAAqB,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,EAAc,EAAE;IAC/E,aAAa,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,EAAc,EAAE;IAChE,sBAAsB,EAAE,sBAAsB;IAC9C,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;CACb,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,eAAuB;IACzD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,iBAAiB,EACjB,wBAAwB,EACxB,EAAE,MAAM,EAAE,MAAM,EAAE,CACnB,CAAC;IACF,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;AAChD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc;IAC/C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACnC,uBAAuB,EACvB,uBAAuB,EACvB,EAAE,MAAM,EAAE,CACX,CAAC;QACF,OAAO,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/queries/org-config/starter-repo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"starter-repo.d.ts","sourceRoot":"","sources":["../../../src/queries/org-config/starter-repo.ts"],"names":[],"mappings":"AAkBA,2EAA2E;AAC3E,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,GAAG,EAAE,MAAM,CAAC;CACb;AASD;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAYxC"}

package/dist/queries/org-config/starter-repo.js

@@ -0,0 +1,35 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: none -- no test imports this module directly (baselined; see lint:pinned-by)
+// PINNED-BY-END
+/**
+ * Thin callApi wrapper for starter-repo data.
+ *
+ * A starter repo is the org-scoped library entry the factory clones at product
+ * genesis instead of scaffolding from zero. The genesis path (git/genesis.ts)
+ * reads a starter's coordinates here to clone its pinned ref.
+ *
+ * The product-api `starter_repo_get` handler already camelCases the row
+ * (transformStarterRepo), so this wrapper re-shapes the response into the narrow
+ * coordinates the genesis path consumes and drops fields it does not need.
+ */
+import { callApi } from '../api-client/shared.js';
+/**
+ * Load a starter repo's clone coordinates by id. Returns null when the starter
+ * is missing or lacks a gitUrl/ref (an unclonable row) so the caller can fall
+ * back to the empty-repo genesis path rather than throwing.
+ */
+export async function loadStarterRepo(starterRepoId) {
+    const body = await callApi('starter_repo_get', {
+        starterRepoId,
+    });
+    const sr = body.starterRepo;
+    if (!sr?.gitUrl || !sr?.ref)
+        return null;
+    return {
+        id: sr.id,
+        name: sr.name ?? '',
+        gitUrl: sr.gitUrl,
+        ref: sr.ref,
+    };
+}
+//# sourceMappingURL=starter-repo.js.map

package/dist/queries/org-config/starter-repo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"starter-repo.js","sourceRoot":"","sources":["../../../src/queries/org-config/starter-repo.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,0FAA0F;AAC1F,gBAAgB;AAEhB;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAmBlD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,aAAqB;IAErB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAkC,kBAAkB,EAAE;QAC9E,aAAa;KACd,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC;IAC5B,IAAI,CAAC,EAAE,EAAE,MAAM,IAAI,CAAC,EAAE,EAAE,GAAG;QAAE,OAAO,IAAI,CAAC;IACzC,OAAO;QACL,EAAE,EAAE,EAAE,CAAC,EAAE;QACT,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,EAAE;QACnB,MAAM,EAAE,EAAE,CAAC,MAAM;QACjB,GAAG,EAAE,EAAE,CAAC,GAAG;KACZ,CAAC;AACJ,CAAC"}

package/dist/queries/prd/prd.d.ts

@@ -0,0 +1,208 @@
+export interface PrtNode {
+    id: string;
+    prdId: string;
+    nodeType: 'goal' | 'obstacle' | 'overcome';
+    status: 'open' | 'cleared';
+    /**
+     * Advisory clearance-predicate data that still lives on the DB row. The
+     * per-obstacle deterministic clearance gate that consumed it was retired (it
+     * was a redundant second verify altitude), so the controller no longer reads
+     * this; typed `unknown` to keep it carried without re-introducing the engine.
+     */
+    clearancePredicate: unknown;
+    focusId: string | null;
+    /** The node assertion text (goal/obstacle/overcome statement). May be ''. */
+    statement: string;
+    /**
+     * `prd_prt_nodes.phases` -- the delivery-phases an OVERCOME capability was
+     * authored with (the MCP authoring gate requires >=2, which is what proves
+     * the overcome is capability-sized rather than delivery-sized). JSONB, and
+     * only overcome nodes populate it by convention, so it is typed `unknown`:
+     * the one consumer (`prd/scoping-prompt.ts` `readPhases`) narrows it to the
+     * strings it can render rather than trusting the column's shape. OPTIONAL:
+     * a node literal that predates it (every goal/obstacle, and every test
+     * fixture) reads as "no phases authored" rather than failing to compile.
+     */
+    phases?: unknown;
+}
+export interface PrtEdge {
+    id: string;
+    fromNodeId: string;
+    toNodeId: string;
+    edgeType: 'prerequisite' | 'overcomes';
+    /**
+     * The pathway this edge is specific to, or null/undefined when the edge is
+     * SHARED across all pathways (prd_prt_edges.pathway_id; NULL = shared). Lets
+     * the viability oracle scope to a given pathway: an edge tagged to a different
+     * pathway is out of scope. Optional so existing edge literals (tests) that
+     * predate pathway tagging read as shared.
+     */
+    pathwayId?: string | null;
+}
+export interface Prd {
+    id: string;
+    productId: string;
+    status: string;
+    title: string;
+    /** The pathway currently committed (locked) for this PRD, or null if none. */
+    committedPathId: string | null;
+    /**
+     * The PRD "Play": the agent role the controller arms frontier foci with, or
+     * null if the PRD is paused (mirrors product_focuses.assigned_agent_role_id).
+     * Set = run all frontier foci; null = no foci arm. This is the per-entity
+     * signal that replaced the global TELORA_PRD_ARM_ROLE_ID env var.
+     */
+    assignedAgentRoleId: string | null;
+    /**
+     * The starter repo the factory clones at product genesis, or null when the
+     * PRD selects no starter. Read by the genesis path (git/genesis.ts) to decide
+     * whether an empty product repo is seeded from a polished starter instead of
+     * an empty initial commit (focus 80ecc233).
+     */
+    starterRepoId: string | null;
+}
+/** A held alternative pathway under a PRD (option / committed / abandoned). */
+export interface Pathway {
+    id: string;
+    prdId: string;
+    status: 'option' | 'committed' | 'abandoned';
+    name: string;
+}
+/** List active PRDs for a product (prd_list returns { items }). */
+export declare function loadActivePrds(productId: string): Promise<Prd[]>;
+/**
+ * True when the product has a starter-selecting PRD that is NOT active yet
+ * (status 'draft'). The genesis path reads only ACTIVE PRDs, so a draft
+ * selection is invisible to it -- but writing an empty placeholder genesis
+ * commit while such a selection is pending would give the repo history and the
+ * greenfield guard would then refuse to seed once the PRD activates. The
+ * initial-commit path consults this to DEFER the placeholder instead of
+ * foreclosing genesis (focus 80ecc233).
+ */
+export declare function hasPendingStarterSelection(productId: string): Promise<boolean>;
+/**
+ * List done PRDs for a product (prd_list returns { items }).
+ *
+ * The controller's per-tick self-heal only runs over ACTIVE PRDs
+ * (loadActivePrds filters status='active'); a PRD that reached done under an
+ * earlier daemon -- before the completion-limbo self-heal existed -- can leave
+ * materialized foci stranded status=active with no path to convergence, because
+ * a done PRD is never re-ticked. This feeds the done-PRD limbo sweep so those
+ * pre-existing stranded foci still finalize without an operator data fix.
+ */
+export declare function loadDonePrds(productId: string): Promise<Prd[]>;
+/**
+ * Load a PRD's full PRT graph. prd_get returns { prd: { ...prd, nodes, edges } }.
+ */
+export declare function loadPrtGraph(prdId: string): Promise<{
+    nodes: PrtNode[];
+    edges: PrtEdge[];
+}>;
+/**
+ * Materialize an overcome into a focus. prd_overcome_materialize returns
+ * { focus, nodeId } where focus is a raw product_focuses row (snake_case id).
+ */
+export declare function materializeOvercome(nodeId: string): Promise<{
+    focusId: string;
+}>;
+/**
+ * Arm a focus via the existing queue toggle (focus_update sets
+ * assigned_agent_role_id). The fields wrapper matches the focus_update handler.
+ *
+ * THIS CALL CAN BE REFUSED, DETERMINISTICALLY. The arm edge
+ * (`stamp_focus_arm_baseline()`) raises when the arm would cover no stated
+ * effect; the handler answers 400 + `code: 'arm_criteria_required'`. The RULING
+ * on retrying it, pinned by `queries/prd/prd-arm-refusal-not-retried.test.ts`:
+ *
+ *   A deterministic 400 is ALREADY non-retryable and stays on `callApi`.
+ *   `classifyHttpStatus` puts 400 in NON_RETRYABLE_HTTP_STATUSES, so the
+ *   ApiError carries isRetryable=false and `withRetry` rethrows on the FIRST
+ *   attempt -- no backoff sleep, no second write of a refusal the database
+ *   will refuse identically. Nothing here needs an exemption.
+ *
+ *   It is NOT moved to `callApiOnce` to dodge the circuit breaker either. The
+ *   breaker counts CONSECUTIVE failures per concern and any success resets the
+ *   count, and this action's concern ('delivery', the general-purpose
+ *   fallback) is the same one the arm-readiness read immediately preceding
+ *   EVERY arm succeeds on (`getFocusDeliveries` + the injection-bundle read).
+ *   So a refused arm can never be the 5th consecutive failure that opens it --
+ *   while a genuinely failing API still trips the breaker as it should, which
+ *   `callApiOnce` would have given up.
+ */
+export declare function armFocus(focusId: string, agentRoleId: string): Promise<void>;
+/** Mark a PRT node cleared (prd_prt_node_update param is nodeId). */
+export declare function markNodeCleared(nodeId: string): Promise<void>;
+/**
+ * Finalize a completed frontier focus to status=complete via the sanctioned
+ * PRD-path crossing. focus.status is human-owned (focus_update +
+ * daemon_update_focus_status both refuse status writes), so this goes through
+ * the dedicated prd_frontier_focus_finalize action, which only finalizes a
+ * focus that is PRD-materialized (anchored to an overcome node) -- keeping the
+ * invariant intact for human-authored foci. Idempotent server-side.
+ */
+export declare function finalizeFrontierFocus(focusId: string): Promise<void>;
+/**
+ * Mark a PRD done (prd_update param is prdId).
+ *
+ * Reaching done is a PROPAGATING transition: alongside status='done' it also
+ * nulls assignedAgentRoleId so the PRD "Play" reads off on a finished
+ * milestone -- making `done => Play off` an invariant, symmetric with how a
+ * completed focus clears its role. Without this the toggle keeps reading armed
+ * on a done PRD (functionally inert -- loadActivePrds filters status='active'
+ * so the controller never re-ticks it -- but the human-facing signal would lie
+ * about machine state). The server prd_update handler accepts
+ * assignedAgentRoleId=null as the pause/unarm write (mirrors the telora_prd
+ * tool's Play contract).
+ */
+export declare function markPrdDone(prdId: string): Promise<void>;
+/**
+ * List the held pathways for a PRD (prd_pathway_list returns { items }).
+ * Pathways are the alternative approaches the controller switches between on
+ * divergence; one is committed (locked) at a time.
+ */
+export declare function loadPathways(prdId: string): Promise<Pathway[]>;
+/**
+ * Commit (lock) a pathway for a PRD. Re-points which pathway is committed --
+ * NO revert: this never undoes work already done on a prior pathway.
+ */
+export declare function commitPathway(prdId: string, pathwayId: string): Promise<void>;
+/**
+ * Resolve the PRD a focus belongs to, if any. A focus materialized from a PRD
+ * overcome node carries back-reference data the controller exposes via
+ * prd_context_for_focus (items: { focusId, prd: { id, title }, overcome }).
+ * Returns the parent PRD id, or null when the focus was not materialized by a
+ * PRD (an ordinary focus). Used to decide whether to push milestone context
+ * into a spawned focus team.
+ */
+export declare function findPrdIdForFocus(focusId: string): Promise<string | null>;
+/**
+ * The milestone-context view of a PRD: the narrow controller-facing `Prd`
+ * fields PLUS the rich milestone-intent fields (goal / expansion / vision
+ * snapshot) that the prd.context assembly resolver renders into a focus/steward
+ * prompt. Kept separate from `Prd` so the hot controller path stays lean.
+ */
+export interface PrdDetail {
+    id: string;
+    productId: string;
+    status: string;
+    title: string;
+    goal: string | null;
+    expansion: string | null;
+    visionSnapshot: string | null;
+    committedPathId: string | null;
+    assignedAgentRoleId: string | null;
+}
+/**
+ * Load a PRD's full milestone-context bundle: the rich PRD fields plus its PRT
+ * nodes, edges, and pathways, in one prd_get call. Feeds the prd.context
+ * resolver (milestone facts + frontier state). prd_get returns
+ * { prd: { ...prd, nodes, edges, pathways } } -- transformPrd already camelCases
+ * goal/expansion/visionSnapshot, so we re-shape into the narrow detail type.
+ */
+export declare function loadPrdDetail(prdId: string): Promise<{
+    prd: PrdDetail;
+    nodes: PrtNode[];
+    edges: PrtEdge[];
+    pathways: Pathway[];
+}>;
+//# sourceMappingURL=prd.d.ts.map

package/dist/queries/prd/prd.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prd.d.ts","sourceRoot":"","sources":["../../../src/queries/prd/prd.ts"],"names":[],"mappings":"AAgCA,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU,CAAC;IAC3C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B;;;;;OAKG;IACH,kBAAkB,EAAE,OAAO,CAAC;IAC5B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,6EAA6E;IAC7E,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;;;;OASG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,cAAc,GAAG,WAAW,CAAC;IACvC;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,GAAG;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;;;;;OAKG;IACH,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;;;;;OAKG;IACH,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,+EAA+E;AAC/E,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,QAAQ,GAAG,WAAW,GAAG,WAAW,CAAC;IAC7C,IAAI,EAAE,MAAM,CAAC;CACd;AAoFD,mEAAmE;AACnE,wBAAsB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAMtE;AAED;;;;;;;;GAQG;AACH,wBAAsB,0BAA0B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAMpF;AAED;;;;;;;;;GASG;AACH,wBAAsB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAMpE;AAED;;GAEG;AACH,wBAAsB,YAAY,CAChC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAAC,KAAK,EAAE,OAAO,EAAE,CAAA;CAAE,CAAC,CAUjD;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAStF;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKlF;AAED,qEAAqE;AACrE,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEnE;AAED;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE1E;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE9D;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAKpE;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEnF;AAED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAM/E;AAED;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAQD;;;;;;GAMG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1D,GAAG,EAAE,SAAS,CAAC;IACf,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,QAAQ,EAAE,OAAO,EAAE,CAAC;CACrB,CAAC,CAyBD"}