@telora/daemon 0.22.245 → 0.22.290

package/dist/types/issue-status.js

@@ -0,0 +1,55 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/delivery/open-work-predicate-agreement.test.ts,
+//   packages/daemon/src/focus/churn-detection.test.ts,
+//   packages/daemon/src/shell/delivery-done-predicate-divergence.test.ts,
+//   packages/daemon/src/shell/verified-issue-sweep.test.ts
+// PINNED-BY-END
+/**
+ * Issue-status vocabulary: which issue statuses are open or terminal, and the
+ * work-issue / context-group split every completion check filters on.
+ */
+/**
+ * Issue statuses considered "open" (not yet resolved).
+ * Determines whether a delivery still has outstanding work.
+ * 'In Review' is intentionally excluded: it signals dev-complete and
+ * waiting for review-agent confirmation, not unresolved work.
+ *
+ * TWIN: supabase/functions/product-api/handlers/delivery-review-finding-gate.ts
+ * OPEN_FINDING_STATUSES is the edge-runtime copy of this set (the refusal of a
+ * delivery create while review-filed findings are open) and MUST agree with
+ * it; Deno cannot import this package. Change both or neither.
+ */
+export const OPEN_ISSUE_STATUSES = new Set(['To Do', 'In Progress', 'Blocked']);
+/**
+ * Issue statuses that are terminal -- the issue is resolved and requires no
+ * further action. Delivery completion checks use this to decide whether all
+ * work is done.
+ * - 'Verified': review agent confirmed the issue was addressed.
+ * - 'In Review': dev signalled completion; awaiting review-agent pass. Treated
+ *   as terminal so the delivery can close; swept to 'Done' at delivery close.
+ */
+export const TERMINAL_ISSUE_STATUSES = new Set(['Done', 'Verified', 'In Review']);
+/** The issue type string for context groups (reference material, not actionable work). */
+export const CONTEXT_GROUP_TYPE = 'Context Group';
+/** Filter issues to only actionable work (tasks and bugs, not context groups). */
+export function filterWorkIssues(issues) {
+    return issues.filter(i => i.issueType !== CONTEXT_GROUP_TYPE);
+}
+/** Filter issues to only context groups. */
+export function filterContextGroups(issues) {
+    return issues.filter(i => i.issueType === CONTEXT_GROUP_TYPE);
+}
+/**
+ * Return the IDs of work issues (Tasks/Bugs, not Context Groups) whose
+ * status is 'Verified' or 'In Review'. Called just before a delivery closes
+ * to collapse these into 'Done' for a clean terminal record.
+ * - 'Verified': review agent confirmed the fix.
+ * - 'In Review': dev signalled completion but review agent never ran; swept
+ *   to Done so the delivery can close without manual cleanup.
+ */
+export function planDeliveryCloseSweep(issues) {
+    return filterWorkIssues(issues)
+        .filter(i => i.status === 'Verified' || i.status === 'In Review')
+        .map(i => i.id);
+}
+//# sourceMappingURL=issue-status.js.map

package/dist/types/issue-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"issue-status.js","sourceRoot":"","sources":["../../src/types/issue-status.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,iFAAiF;AACjF,uDAAuD;AACvD,0EAA0E;AAC1E,2DAA2D;AAC3D,gBAAgB;AAEhB;;;GAGG;AAEH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;AAEhF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC;AAElF,0FAA0F;AAC1F,MAAM,CAAC,MAAM,kBAAkB,GAAG,eAAwB,CAAC;AAE3D,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAAkC,MAAW;IAC3E,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,kBAAkB,CAAC,CAAC;AAChE,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,mBAAmB,CAAkC,MAAW;IAC9E,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,kBAAkB,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAW;IAEX,OAAO,gBAAgB,CAAC,MAAM,CAAC;SAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC;SAChE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACpB,CAAC"}

package/dist/types/model-provider.d.ts

@@ -0,0 +1,12 @@
+/**
+ * The account a spawn's model calls are billed and limited against.
+ *  - anthropic: the claude backend (team spawns and every `claude --print` one-shot).
+ *  - openai:    the codex backend on a hosted model.
+ *  - local:     a local model (routed through codex, or any other non-hosted
+ *               engine). No hosted limit reaches it; nothing records here today.
+ *
+ * Declared in the types layer because FocusTeamState carries it; the
+ * per-provider rate-limit windows keyed by it live in daemon-state/provider-window.ts.
+ */
+export type ModelProvider = 'anthropic' | 'openai' | 'local';
+//# sourceMappingURL=model-provider.d.ts.map

package/dist/types/model-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-provider.d.ts","sourceRoot":"","sources":["../../src/types/model-provider.ts"],"names":[],"mappings":"AAIA;;;;;;;;;GASG;AACH,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,QAAQ,GAAG,OAAO,CAAC"}

package/dist/types/model-provider.js

@@ -0,0 +1,5 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/spawn/empty-directive-route.test.ts
+// PINNED-BY-END
+export {};
+//# sourceMappingURL=model-provider.js.map

package/dist/types/model-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-provider.js","sourceRoot":"","sources":["../../src/types/model-provider.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,qEAAqE;AACrE,gBAAgB"}

package/dist/types/session.d.ts

@@ -4,8 +4,6 @@
 import type { WriteStream } from 'node:fs';
 export type AgentSessionStatus = 'starting' | 'running' | 'completed' | 'failed' | 'cancelled' | 'stopped' | 'escalated';
 import type { ExitCategory } from './exit-category.js';
-export type { ExitCategory, TerminalSessionStatus } from './exit-category.js';
-export { EXIT_CATEGORIES, isExitCategory, TERMINAL_SESSION_STATUSES, isTerminalSessionStatus, } from './exit-category.js';
 /**
  * Agent role from database
  */

package/dist/types/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/types/session.ts"],"names":[],"mappings":"AAIA;;GAEG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,MAAM,MAAM,kBAAkB,GAC1B,UAAU,GACV,SAAS,GACT,WAAW,GACX,QAAQ,GAER,WAAW,GAKX,SAAS,GACT,WAAW,CAAC;AAUhB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,YAAY,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EACL,eAAe,EACf,cAAc,EACd,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAE5B;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAExB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,YAAY,GAAG,IAAI,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IAGjC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAGvB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IAMjC,gBAAgB,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAKhD,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAExB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAG7B,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAE3B,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAC1C,GAAG,EAAE,YAAY,GAAG,IAAI,CAAC;IACzB,GAAG,EAAE,YAAY,GAAG,IAAI,CAAC;CAC1B;AAED;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,eAAe,EAAE,WAAW,CAAC;IAC7B,YAAY,EAAE,WAAW,CAAC;IAC1B,WAAW,EAAE,WAAW,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/types/session.ts"],"names":[],"mappings":"AAIA;;GAEG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3C,MAAM,MAAM,kBAAkB,GAC1B,UAAU,GACV,SAAS,GACT,WAAW,GACX,QAAQ,GAER,WAAW,GAKX,SAAS,GACT,WAAW,CAAC;AAUhB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAExB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,YAAY,GAAG,IAAI,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IAGjC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAGvB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IAMjC,gBAAgB,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAKhD,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAExB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAG7B,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAE3B,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAC1C,GAAG,EAAE,YAAY,GAAG,IAAI,CAAC;IACzB,GAAG,EAAE,YAAY,GAAG,IAAI,CAAC;CAC1B;AAED;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,eAAe,EAAE,WAAW,CAAC;IAC7B,YAAY,EAAE,WAAW,CAAC;IAC1B,WAAW,EAAE,WAAW,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB"}

package/dist/types/session.js

@@ -1,5 +1,5 @@
 // PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
 // Pinned by: none -- no test imports this module directly (baselined; see lint:pinned-by)
 // PINNED-BY-END
-export { EXIT_CATEGORIES, isExitCategory, TERMINAL_SESSION_STATUSES, isTerminalSessionStatus, } from './exit-category.js';
+export {};
 //# sourceMappingURL=session.js.map

package/dist/types/session.js.map

@@ -1 +1 @@
-{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/types/session.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,0FAA0F;AAC1F,gBAAgB;AAiChB,OAAO,EACL,eAAe,EACf,cAAc,EACd,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/types/session.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,0FAA0F;AAC1F,gBAAgB"}

package/dist/types/shutdown-attribution.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Team-teardown vocabulary: why a team lead was asked to stop, and which daemon
+ * path asked.
+ *
+ * Declared here, below every runtime directory, because FocusTeamState carries
+ * both values and the types layer imports nothing above itself. The logic that
+ * derives an attribution and renders the exit line lives in
+ * daemon-state/shutdown-attribution.ts.
+ */
+/** The reason a daemon path stamped when it asked a team lead to stop. */
+export type TeamShutdownReason = 'work_complete' | 'no_actionable_work' | 'deactivated' | 'error' | 'user_stopped' | 'handoff' | 'teardown' | null;
+/** What the daemon knows about its own decision to end a team. */
+export interface ShutdownAttribution {
+    /** The reason the calling path stamped, when it stamped one. */
+    reason: TeamShutdownReason;
+    /** The daemon path that asked for the teardown: "<module>.ts:<line>". */
+    initiator: string;
+    /** When the teardown was requested -- so a stamp left by an earlier, abandoned attempt is visible as old. */
+    at: Date;
+}
+//# sourceMappingURL=shutdown-attribution.d.ts.map

package/dist/types/shutdown-attribution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shutdown-attribution.d.ts","sourceRoot":"","sources":["../../src/types/shutdown-attribution.ts"],"names":[],"mappings":"AAIA;;;;;;;;GAQG;AAEH,0EAA0E;AAC1E,MAAM,MAAM,kBAAkB,GAC1B,eAAe,GACf,oBAAoB,GACpB,aAAa,GACb,OAAO,GACP,cAAc,GACd,SAAS,GACT,UAAU,GACV,IAAI,CAAC;AAET,kEAAkE;AAClE,MAAM,WAAW,mBAAmB;IAClC,gEAAgE;IAChE,MAAM,EAAE,kBAAkB,CAAC;IAC3B,yEAAyE;IACzE,SAAS,EAAE,MAAM,CAAC;IAClB,6GAA6G;IAC7G,EAAE,EAAE,IAAI,CAAC;CACV"}

package/dist/types/shutdown-attribution.js

@@ -0,0 +1,5 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: none -- no test imports this module directly (baselined; see lint:pinned-by)
+// PINNED-BY-END
+export {};
+//# sourceMappingURL=shutdown-attribution.js.map

package/dist/types/shutdown-attribution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shutdown-attribution.js","sourceRoot":"","sources":["../../src/types/shutdown-attribution.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,0FAA0F;AAC1F,gBAAgB"}

package/dist/types/wire-contract.generated.d.ts

@@ -0,0 +1,59 @@
+/**
+ * GENERATED FILE -- DO NOT EDIT.
+ *
+ * Produced by `npm run gen:wire-contract` from the per-entity wire-contract
+ * manifest (scripts/wire-contract-manifest.json) -- the SINGLE declaration
+ * site for the cross-runtime entity wire contracts. Edit the manifest and
+ * regenerate; the drift gate (`npm run lint:wire-contract`) fails CI when
+ * this file differs from what generation would produce.
+ *
+ * @module types/wire-contract.generated
+ */
+import { z } from 'zod';
+/**
+ * Wire base for the delivery entity: every field the daemon's
+ * delivery response schemas carry, with its declared wire type.
+ * Consumers derive concrete shapes via .pick()/.extend(); per-shape
+ * narrowing (transforms, defaults, non-null tightening) stays at the
+ * consuming schema, never here.
+ */
+export declare const DeliveryWireBase: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    description: z.ZodNullable<z.ZodString>;
+    acceptanceCriteria: z.ZodNullable<z.ZodString>;
+    techContext: z.ZodNullable<z.ZodString>;
+    executionStatus: z.ZodNullable<z.ZodString>;
+    focusId: z.ZodNullable<z.ZodString>;
+    currentWorkflowStageId: z.ZodNullable<z.ZodString>;
+    assignedAgentRoleId: z.ZodNullable<z.ZodString>;
+    iterationCount: z.ZodNumber;
+    mergeCommitSha: z.ZodNullable<z.ZodString>;
+    gateState: z.ZodUnknown;
+    gitState: z.ZodNullable<z.ZodString>;
+    gitBranchName: z.ZodNullable<z.ZodString>;
+    priorityRank: z.ZodNullable<z.ZodNumber>;
+    injectionId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    stageDescription: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    updatedAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    verificationMethod: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    verificationConfig: z.ZodUnknown;
+    verificationOutcome: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    organizationId: z.ZodString;
+    productId: z.ZodNullable<z.ZodString>;
+    parentId: z.ZodNullable<z.ZodString>;
+    type: z.ZodString;
+    agentAssignedAt: z.ZodNullable<z.ZodString>;
+    agentRoleName: z.ZodString;
+    pipelineConfig: z.ZodUnknown;
+}, z.core.$strip>;
+/**
+ * Qualified-key aliases for the delivery shapes that use the
+ * <entity><Field> key convention (declared per-shape in the manifest's
+ * daemonShapes section).
+ */
+export declare const DeliveryWireQualified: z.ZodObject<{
+    deliveryId: z.ZodString;
+    deliveryName: z.ZodString;
+}, z.core.$strip>;
+//# sourceMappingURL=wire-contract.generated.d.ts.map

package/dist/types/wire-contract.generated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire-contract.generated.d.ts","sourceRoot":"","sources":["../../src/types/wire-contract.generated.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA6B3B,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,qBAAqB;;;iBAGhC,CAAC"}

package/dist/types/wire-contract.generated.js

@@ -0,0 +1,59 @@
+/**
+ * GENERATED FILE -- DO NOT EDIT.
+ *
+ * Produced by `npm run gen:wire-contract` from the per-entity wire-contract
+ * manifest (scripts/wire-contract-manifest.json) -- the SINGLE declaration
+ * site for the cross-runtime entity wire contracts. Edit the manifest and
+ * regenerate; the drift gate (`npm run lint:wire-contract`) fails CI when
+ * this file differs from what generation would produce.
+ *
+ * @module types/wire-contract.generated
+ */
+import { z } from 'zod';
+/**
+ * Wire base for the delivery entity: every field the daemon's
+ * delivery response schemas carry, with its declared wire type.
+ * Consumers derive concrete shapes via .pick()/.extend(); per-shape
+ * narrowing (transforms, defaults, non-null tightening) stays at the
+ * consuming schema, never here.
+ */
+export const DeliveryWireBase = z.object({
+    id: z.string(),
+    name: z.string(),
+    description: z.string().nullable(),
+    acceptanceCriteria: z.string().nullable(),
+    techContext: z.string().nullable(),
+    executionStatus: z.string().nullable(),
+    focusId: z.string().nullable(),
+    currentWorkflowStageId: z.string().nullable(),
+    assignedAgentRoleId: z.string().nullable(),
+    iterationCount: z.number(),
+    mergeCommitSha: z.string().nullable(),
+    gateState: z.unknown(),
+    gitState: z.string().nullable(),
+    gitBranchName: z.string().nullable(),
+    priorityRank: z.number().nullable(),
+    injectionId: z.string().nullish(),
+    stageDescription: z.string().nullish(),
+    updatedAt: z.string().nullish(),
+    verificationMethod: z.string().nullish(),
+    verificationConfig: z.unknown(),
+    verificationOutcome: z.string().nullish(),
+    organizationId: z.string(),
+    productId: z.string().nullable(),
+    parentId: z.string().nullable(),
+    type: z.string(),
+    agentAssignedAt: z.string().nullable(),
+    agentRoleName: z.string(),
+    pipelineConfig: z.unknown(),
+});
+/**
+ * Qualified-key aliases for the delivery shapes that use the
+ * <entity><Field> key convention (declared per-shape in the manifest's
+ * daemonShapes section).
+ */
+export const DeliveryWireQualified = z.object({
+    deliveryId: z.string(),
+    deliveryName: z.string(),
+});
+//# sourceMappingURL=wire-contract.generated.js.map

package/dist/types/wire-contract.generated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire-contract.generated.js","sourceRoot":"","sources":["../../src/types/wire-contract.generated.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7C,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IACjC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IACtC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IAC/B,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IACxC,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC/B,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IACzC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE;CAC5B,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;CACzB,CAAC,CAAC"}

package/dist/types/workflow.d.ts

@@ -1,16 +1,10 @@
 /**
- * Workflow, guard, and trigger types for the daemon.
+ * Workflow stage-directive and composite workflow types for the daemon.
  *
- * Shared workflow types (guards, triggers, evaluation results) are
- * re-exported from @telora/daemon-core where they are canonically defined.
- * Daemon-specific composite types (Workflow, ResolvedTransition) remain here.
+ * Shared workflow types (guards, triggers, evaluation results) are defined in
+ * @telora/daemon-core and imported from there. Daemon-specific types
+ * (StageDirective, Workflow, ResolvedTransition) are defined here.
  */
-export type { GuardEnforcement, TriggerEvent, TriggerActionType, WorkflowStage, WorkflowTransition, DecisionPath, WorkflowGuard, WorkflowTrigger, GuardConditionNode, ContextDirective, TriggerExecutionTarget, ConditionEvalResult, GuardEvalResult, TransitionGuardResult, TransitionEvaluationRecord, TransitionBlockRecord, EvaluationContext, } from '@telora/daemon-core';
-/**
- * Re-export EscalationReasonType from daemon-core for backward compatibility.
- * The canonical definition lives in @telora/daemon-core/escalation-types.
- */
-export type { EscalationReasonType } from '@telora/daemon-core';
 /**
  * Execution mode for a stage directive.
  *

package/dist/types/workflow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflow.d.ts","sourceRoot":"","sources":["../../src/types/workflow.ts"],"names":[],"mappings":"AAIA;;;;;;GAMG;AAGH,YAAY,EACV,gBAAgB,EAChB,YAAY,EACZ,iBAAiB,EACjB,aAAa,EACb,kBAAkB,EAClB,YAAY,EACZ,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,sBAAsB,EACtB,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,0BAA0B,EAC1B,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAE7B;;;GAGG;AACH,YAAY,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAMhE;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,sBAAsB,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;AAEjE,wDAAwD;AACxD,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,2CAA2C;AAC3C,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,sBAAsB,CAAC;IAClC,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB;;;;;;;;;;OAUG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,IAAI,CAAC;CACxC;AAMD,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE7G;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;CACpC;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,kBAAkB,CAAC;IAC/B,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,QAAQ,EAAE,eAAe,EAAE,CAAC;CAC7B"}
+{"version":3,"file":"workflow.d.ts","sourceRoot":"","sources":["../../src/types/workflow.ts"],"names":[],"mappings":"AAIA;;;;;;GAMG;AAMH;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,sBAAsB,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;AAEjE,wDAAwD;AACxD,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,2CAA2C;AAC3C,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,sBAAsB,CAAC;IAClC,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB;;;;;;;;;;OAUG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,IAAI,CAAC;CACxC;AAMD,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE7G;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;CACpC;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,kBAAkB,CAAC;IAC/B,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,QAAQ,EAAE,eAAe,EAAE,CAAC;CAC7B"}

package/dist/update/auto-update-idle.d.ts

@@ -3,21 +3,22 @@
  *
  * The auto-updater must restart the daemon only at a SAFE SEAM -- a focus-batch
  * boundary -- never in a transient gap between two deliveries inside a batch
- * that still holds in-memory coordination state. The original idle check was
- * process-level (activeClaudeProcesses === 0), which reads that between-delivery
- * gap as "idle" because the team lead process briefly exits. This module
- * replaces it with a focus-batch-safe definition:
+ * that still holds in-memory coordination state. A process-level check
+ * (activeClaudeProcesses === 0) would read that between-delivery gap as "idle"
+ * because the team lead process briefly exits, so idle is focus-batch-safe:
  *
  *   idle  <=>  no active focus team  AND  the focus queue is drained
  *
  * with a debounce so the signal must HOLD continuously before it counts. When
- * the updater deliberately drains intake to create a seam (delivery C), the
- * held-back queue is no longer counted against idle -- an optional
+ * the updater deliberately drains intake to create a seam, the
+ * held-back queue is not counted against idle -- an optional
  * `intakeDraining()` dep makes the deliberately-suppressed queue read as a
  * boundary so the pending update can apply.
  *
  * Both functions are pure / dependency-injected so they unit-test without a
  * running daemon.
+ *
+ * History: docs/daemon/history-platform.md (update/auto-update-idle.ts).
  */
 /** Dependencies for {@link isBatchSafeIdle}. */
 export interface BatchIdleDeps {
@@ -34,7 +35,7 @@ export interface BatchIdleDeps {
     intakeDraining?: () => boolean;
     /**
      * Optional: true when any focus worktree is currently held by an in-flight
-     * verify (focus/team-actionable-work.ts anyFocusUnderVerifyHold). A verify
+     * verify (worktree/verify-hold-facts.ts anyFocusUnderVerifyHold). A verify
      * runs as a spawned child that can last ~30 min, often with NO active team,
      * so a batch-safe seam that ignored it would let the updater restart the
      * daemon MID-VERIFY and kill the run. Reading the shared verify-hold
@@ -51,7 +52,7 @@ export interface BatchIdleDeps {
      * alone reads the queue as drained while a directive-originated team is about to
      * spawn. Counting it keeps the drain/auto-update seam from restarting the daemon
      * out from under a pending spawn -- the queued-directive set is an input the
-     * batch-safe idle predicate reads, not a queue only the listener can see.
+     * batch-safe idle predicate reads, not a queue only the focus poller can see.
      */
     pendingSpawnQueueDepth?: () => number;
 }
@@ -67,7 +68,8 @@ export type IdleGate = () => boolean;
  * Wrap a boolean predicate so it reads true only once the predicate has held
  * true CONTINUOUSLY for at least `debounceMs`. Any false reading resets the
  * timer, so a momentary busy blip inside what looks like an idle window
- * restarts the debounce. `now` is injectable for deterministic tests.
+ * restarts the debounce. `now` is the clock, REQUIRED: the shell binds the
+ * wall clock, a test binds a fake one.
  */
-export declare function createDebouncedIdleGate(predicate: () => boolean, debounceMs: number, now?: () => number): IdleGate;
+export declare function createDebouncedIdleGate(predicate: () => boolean, debounceMs: number, now: () => number): IdleGate;
 //# sourceMappingURL=auto-update-idle.d.ts.map

package/dist/update/auto-update-idle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auto-update-idle.d.ts","sourceRoot":"","sources":["../../src/update/auto-update-idle.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,gDAAgD;AAChD,MAAM,WAAW,aAAa;IAC5B,wEAAwE;IACxE,eAAe,EAAE,MAAM,MAAM,CAAC;IAC9B,6EAA6E;IAC7E,oBAAoB,EAAE,MAAM,MAAM,CAAC;IACnC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC;IAC/B;;;;;;;;;OASG;IACH,uBAAuB,CAAC,EAAE,MAAM,OAAO,CAAC;IACxC;;;;;;;;;OASG;IACH,sBAAsB,CAAC,EAAE,MAAM,MAAM,CAAC;CACvC;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAU5D;AAED,2EAA2E;AAC3E,MAAM,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC;AAErC;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,OAAO,EACxB,UAAU,EAAE,MAAM,EAClB,GAAG,GAAE,MAAM,MAAiB,GAC3B,QAAQ,CAaV"}
+{"version":3,"file":"auto-update-idle.d.ts","sourceRoot":"","sources":["../../src/update/auto-update-idle.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,gDAAgD;AAChD,MAAM,WAAW,aAAa;IAC5B,wEAAwE;IACxE,eAAe,EAAE,MAAM,MAAM,CAAC;IAC9B,6EAA6E;IAC7E,oBAAoB,EAAE,MAAM,MAAM,CAAC;IACnC;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC;IAC/B;;;;;;;;;OASG;IACH,uBAAuB,CAAC,EAAE,MAAM,OAAO,CAAC;IACxC;;;;;;;;;OASG;IACH,sBAAsB,CAAC,EAAE,MAAM,MAAM,CAAC;CACvC;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAU5D;AAED,2EAA2E;AAC3E,MAAM,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC;AAErC;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,OAAO,EACxB,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,MAAM,GAChB,QAAQ,CAaV"}

package/dist/update/auto-update-idle.js

@@ -1,6 +1,6 @@
 // PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: packages/daemon/src/focus/team-actionable-work.test.ts,
-//   packages/daemon/src/update/auto-update-idle.test.ts
+// Pinned by: packages/daemon/src/update/auto-update-idle.test.ts,
+//   packages/daemon/src/worktree/verify-hold-facts.test.ts
 // PINNED-BY-END
 /**
  * True when the daemon is at a focus-batch-safe seam: no active focus team and
@@ -25,9 +25,10 @@ export function isBatchSafeIdle(deps) {
  * Wrap a boolean predicate so it reads true only once the predicate has held
  * true CONTINUOUSLY for at least `debounceMs`. Any false reading resets the
  * timer, so a momentary busy blip inside what looks like an idle window
- * restarts the debounce. `now` is injectable for deterministic tests.
+ * restarts the debounce. `now` is the clock, REQUIRED: the shell binds the
+ * wall clock, a test binds a fake one.
  */
-export function createDebouncedIdleGate(predicate, debounceMs, now = Date.now) {
+export function createDebouncedIdleGate(predicate, debounceMs, now) {
     let trueSince = null;
     return () => {
         if (!predicate()) {

package/dist/update/auto-update-idle.js.map

@@ -1 +1 @@
-{"version":3,"file":"auto-update-idle.js","sourceRoot":"","sources":["../../src/update/auto-update-idle.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,qEAAqE;AACrE,wDAAwD;AACxD,gBAAgB;AA6DhB;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAmB;IACjD,IAAI,IAAI,CAAC,eAAe,EAAE,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,8EAA8E;IAC9E,8EAA8E;IAC9E,sEAAsE;IACtE,IAAI,IAAI,CAAC,uBAAuB,EAAE,EAAE;QAAE,OAAO,KAAK,CAAC;IACnD,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE;QAAE,OAAO,IAAI,CAAC;IACzC,0EAA0E;IAC1E,6EAA6E;IAC7E,OAAO,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;AAC3F,CAAC;AAKD;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,SAAwB,EACxB,UAAkB,EAClB,MAAoB,IAAI,CAAC,GAAG;IAE5B,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,OAAO,GAAG,EAAE;QACV,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACjB,SAAS,GAAG,IAAI,CAAC;YACjB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAChB,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,SAAS,GAAG,CAAC,CAAC;QAChB,CAAC;QACD,OAAO,CAAC,GAAG,SAAS,IAAI,UAAU,CAAC;IACrC,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"auto-update-idle.js","sourceRoot":"","sources":["../../src/update/auto-update-idle.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,kEAAkE;AAClE,2DAA2D;AAC3D,gBAAgB;AA8DhB;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAmB;IACjD,IAAI,IAAI,CAAC,eAAe,EAAE,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,8EAA8E;IAC9E,8EAA8E;IAC9E,sEAAsE;IACtE,IAAI,IAAI,CAAC,uBAAuB,EAAE,EAAE;QAAE,OAAO,KAAK,CAAC;IACnD,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE;QAAE,OAAO,IAAI,CAAC;IACzC,0EAA0E;IAC1E,6EAA6E;IAC7E,OAAO,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;AAC3F,CAAC;AAKD;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,SAAwB,EACxB,UAAkB,EAClB,GAAiB;IAEjB,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,OAAO,GAAG,EAAE;QACV,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACjB,SAAS,GAAG,IAAI,CAAC;YACjB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAChB,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,SAAS,GAAG,CAAC,CAAC;QAChB,CAAC;QACD,OAAO,CAAC,GAAG,SAAS,IAAI,UAAU,CAAC;IACrC,CAAC,CAAC;AACJ,CAAC"}

package/dist/update/auto-update.d.ts

@@ -13,7 +13,7 @@
  * When an update installs, the process exits with code 75 (restart-after-update);
  * a wrapper script / systemd RestartForceExitStatus=75 runs the new version.
  */
-import { type NpmRunner } from './self-update.js';
+import { type NpmInstallOptions } from './self-update.js';
 /** Exit code that signals "restart after self-update". */
 export declare const EXIT_CODE_UPDATE = 75;
 /**
@@ -81,7 +81,7 @@ export interface DecisionLogger {
     warn: (message: string) => void;
 }
 /**
- * Build the default {@link AutoUpdateDeps.onDecision} sink: it logs every
+ * Build a {@link AutoUpdateDeps.onDecision} logging sink: it logs every
  * actionable decision immediately (loud on failure), and throttles the
  * recurring steady-state decisions to at most one line per heartbeat window so
  * the log stays readable without ever going fully silent while the controller
@@ -91,9 +91,20 @@ export declare function createLoggingDecisionSink(opts: {
     logger: DecisionLogger;
     currentVersion: string;
     heartbeatMs?: number;
-    now?: () => number;
+    /** Clock the heartbeat window is measured on (REQUIRED; the shell binds the wall clock). */
+    now: () => number;
 }): (decision: UpdateDecision) => void;
-/** Dependencies for the update controller (all injectable for tests). */
+/**
+ * The production decision sink: {@link createLoggingDecisionSink} over this
+ * module's daemon logger, at the default heartbeat.
+ */
+export declare function createAutoUpdateLogSink(currentVersion: string, now: () => number): (decision: UpdateDecision) => void;
+/**
+ * Dependencies for the update controller. Every collaborator is REQUIRED: the
+ * unified shell (shell/unified-shell.ts) binds production once -- the
+ * scope-pinned installer, the wall clock, the intake-drain arm/release, the
+ * operator urgency read and the heartbeat-throttled logging sink.
+ */
 export interface AutoUpdateDeps {
     /** Current daemon version string (e.g., "0.10.48"). */
     currentVersion: string;
@@ -109,10 +120,10 @@ export interface AutoUpdateDeps {
     getCachedCandidateVersion: () => string | null;
     /** Called when an update is installed and the process should exit with 75. */
     onUpdateReady: () => void;
-    /** Performs the install. Defaults to {@link performSelfUpdate}; injected in tests. */
-    performUpdate?: (packageName: string) => Promise<boolean>;
-    /** Clock, injectable for tests. */
-    now?: () => number;
+    /** Performs the install (the shell binds {@link performSelfUpdate}). */
+    performUpdate: (packageName: string) => Promise<boolean>;
+    /** Clock. */
+    now: () => number;
     /**
      * Delivery C -- drain-at-boundary. When a newer cached version has been
      * pending this long (ms) while the daemon stays busy, intake is drained so the
@@ -120,31 +131,29 @@ export interface AutoUpdateDeps {
      * idle-edge behavior only).
      */
     stalenessThresholdMs?: number;
-    /** Arm intake drain. Defaults to {@link armDrainForUpdate}; injected in tests. */
-    armDrain?: () => void;
-    /** Release intake drain. Defaults to {@link releaseDrainForUpdate}; injected in tests. */
-    releaseDrain?: () => void;
+    /** Arm intake drain (the shell binds armDrainForUpdate). */
+    armDrain: () => void;
+    /** Release intake drain (the shell binds releaseDrainForUpdate). */
+    releaseDrain: () => void;
     /**
      * Delivery D -- gated urgent path. When this returns true AND a newer version
      * is cached, the update applies immediately (mid-batch) instead of waiting for
      * a safe seam. This is an explicit operator/publisher signal -- NEVER the
-     * loop's own judgment. Default: () => false (no autonomous interruption).
+     * loop's own judgment (the shell binds the operator env force).
      *
      * Minimal viable mechanism is an operator force (env var). A publisher-stamped
      * urgency flag read from version metadata is the heavier extension seam (not
      * implemented here): it would be OR-ed into this predicate.
      */
-    isUrgent?: () => boolean;
+    isUrgent: () => boolean;
     /**
      * Observability sink: called with the classified {@link UpdateDecision} on
      * EVERY tick, so the controller's activity leaves a durable trace and an
-     * absent trace identifies a controller that is not running. Defaults to a
-     * heartbeat-throttled logging sink ({@link createLoggingDecisionSink}).
-     * Injected in tests to assert the decision contract directly.
+     * absent trace identifies a controller that is not running. The shell binds
+     * a heartbeat-throttled logging sink ({@link createAutoUpdateLogSink}); tests
+     * bind their own to assert the decision contract directly.
      */
-    onDecision?: (decision: UpdateDecision) => void;
-    /** Steady-state heartbeat (ms) for the default logging sink. Default: {@link DEFAULT_DECISION_HEARTBEAT_MS}. */
-    decisionHeartbeatMs?: number;
+    onDecision: (decision: UpdateDecision) => void;
 }
 /** Options for {@link startAutoUpdateLoop}: controller deps + sampling cadence. */
 export interface AutoUpdateOptions extends AutoUpdateDeps {
@@ -154,9 +163,10 @@ export interface AutoUpdateOptions extends AutoUpdateDeps {
 /**
  * Install `<package>@latest` from the update channel via the shared scope-pinned
  * installer (`npm install -g --@telora:registry=<channel> <package>@latest`).
- * Returns true on success, false on failure. `runner` is a test seam.
+ * Returns true on success, false on failure. `install` (channel + npm runner)
+ * is bound by the caller: the shell binds the live channel and runNpm.
  */
-export declare function performSelfUpdate(packageName: string, runner?: NpmRunner): Promise<boolean>;
+export declare function performSelfUpdate(packageName: string, install: NpmInstallOptions): Promise<boolean>;
 /** A single-method update controller; one {@link UpdateController.tick} per cycle. */
 export interface UpdateController {
     /** Evaluate one cycle: sample idle, read the candidate, maybe install. */

package/dist/update/auto-update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auto-update.d.ts","sourceRoot":"","sources":["../../src/update/auto-update.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAwC,KAAK,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAQxF,0DAA0D;AAC1D,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAEnC;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,QAAS,CAAC;AAEjD;;;;;;;;;GASG;AACH,eAAO,MAAM,6BAA6B,UAAY,CAAC;AAEvD;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,oBAAoB,CAAA;CAAE,GACvF;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,WAAW,GAAG,QAAQ,CAAA;CAAE,GACxE;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,WAAW,GAAG,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACrF;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAErC,uFAAuF;AACvF,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,oGAAoG;IACpG,MAAM,EAAE,OAAO,CAAC;IAChB,iFAAiF;IACjF,SAAS,EAAE,MAAM,CAAC;CACnB;AAmBD,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,cAAc,EACxB,cAAc,EAAE,MAAM,GACrB,iBAAiB,CAqEnB;AAED,wFAAwF;AACxF,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,MAAM,EAAE,cAAc,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB,GAAG,CAAC,QAAQ,EAAE,cAAc,KAAK,IAAI,CAoBrC;AAED,yEAAyE;AACzE,MAAM,WAAW,cAAc;IAC7B,uDAAuD;IACvD,cAAc,EAAE,MAAM,CAAC;IACvB,oDAAoD;IACpD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,MAAM,EAAE,MAAM,OAAO,CAAC;IACtB;;;;OAIG;IACH,yBAAyB,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAC/C,8EAA8E;IAC9E,aAAa,EAAE,MAAM,IAAI,CAAC;IAC1B,sFAAsF;IACtF,aAAa,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,mCAAmC;IACnC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kFAAkF;IAClF,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IACtB,0FAA0F;IAC1F,YAAY,CAAC,EAAE,MAAM,IAAI,CAAC;IAC1B;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC;IACzB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,cAAc,KAAK,IAAI,CAAC;IAChD,gHAAgH;IAChH,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,mFAAmF;AACnF,MAAM,WAAW,iBAAkB,SAAQ,cAAc;IACvD,sFAAsF;IACtF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,CAE3F;AAED,sFAAsF;AACtF,MAAM,WAAW,gBAAgB;IAC/B,0EAA0E;IAC1E,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,cAAc,GAAG,gBAAgB,CAiI7E;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,IAAI,CA4BvE"}
+{"version":3,"file":"auto-update.d.ts","sourceRoot":"","sources":["../../src/update/auto-update.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAwC,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAYhG,0DAA0D;AAC1D,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAEnC;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,QAAS,CAAC;AAEjD;;;;;;;;;GASG;AACH,eAAO,MAAM,6BAA6B,UAAY,CAAC;AAEvD;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GACtB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,oBAAoB,CAAA;CAAE,GACvF;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,WAAW,GAAG,QAAQ,CAAA;CAAE,GACxE;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,WAAW,GAAG,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACrF;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAErC,uFAAuF;AACvF,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,oGAAoG;IACpG,MAAM,EAAE,OAAO,CAAC;IAChB,iFAAiF;IACjF,SAAS,EAAE,MAAM,CAAC;CACnB;AAmBD,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,cAAc,EACxB,cAAc,EAAE,MAAM,GACrB,iBAAiB,CAqEnB;AAED,wFAAwF;AACxF,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACjC;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,MAAM,EAAE,cAAc,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4FAA4F;IAC5F,GAAG,EAAE,MAAM,MAAM,CAAC;CACnB,GAAG,CAAC,QAAQ,EAAE,cAAc,KAAK,IAAI,CAoBrC;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,MAAM,GAAG,CAAC,QAAQ,EAAE,cAAc,KAAK,IAAI,CAErH;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,uDAAuD;IACvD,cAAc,EAAE,MAAM,CAAC;IACvB,oDAAoD;IACpD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,MAAM,EAAE,MAAM,OAAO,CAAC;IACtB;;;;OAIG;IACH,yBAAyB,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAC/C,8EAA8E;IAC9E,aAAa,EAAE,MAAM,IAAI,CAAC;IAC1B,wEAAwE;IACxE,aAAa,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,aAAa;IACb,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,IAAI,CAAC;IACrB,oEAAoE;IACpE,YAAY,EAAE,MAAM,IAAI,CAAC;IACzB;;;;;;;;;OASG;IACH,QAAQ,EAAE,MAAM,OAAO,CAAC;IACxB;;;;;;OAMG;IACH,UAAU,EAAE,CAAC,QAAQ,EAAE,cAAc,KAAK,IAAI,CAAC;CAChD;AAED,mFAAmF;AACnF,MAAM,WAAW,iBAAkB,SAAQ,cAAc;IACvD,sFAAsF;IACtF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,CAEnG;AAED,sFAAsF;AACtF,MAAM,WAAW,gBAAgB;IAC/B,0EAA0E;IAC1E,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,cAAc,GAAG,gBAAgB,CAyH7E;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,IAAI,CA4BvE"}

package/dist/update/auto-update.js

@@ -18,9 +18,8 @@
  * a wrapper script / systemd RestartForceExitStatus=75 runs the new version.
  */
 import { detectInstallMode, installNpmVersion } from './self-update.js';
-import { isNewerVersion, versionDistance, resolveUpdateChannelUrl, scopedInstallCommand } from './version-check.js';
-import { armDrainForUpdate, releaseDrainForUpdate } from '../shell/intake-control.js';
-import { createLogger } from '../shell/log.js';
+import { isNewerVersion, versionDistance, resolveUpdateChannelUrl, scopedInstallCommand, } from '../config/update-channel.js';
+import { createLogger } from '../log/daemon-log.js';
 const log = createLogger({ module: 'auto-update' });
 /** Exit code that signals "restart after self-update". */
 export const EXIT_CODE_UPDATE = 75;
@@ -125,14 +124,14 @@ export function describeUpdateDecision(decision, currentVersion) {
     }
 }
 /**
- * Build the default {@link AutoUpdateDeps.onDecision} sink: it logs every
+ * Build a {@link AutoUpdateDeps.onDecision} logging sink: it logs every
  * actionable decision immediately (loud on failure), and throttles the
  * recurring steady-state decisions to at most one line per heartbeat window so
  * the log stays readable without ever going fully silent while the controller
  * runs.
  */
 export function createLoggingDecisionSink(opts) {
-    const { logger, currentVersion, heartbeatMs = DEFAULT_DECISION_HEARTBEAT_MS, now = Date.now } = opts;
+    const { logger, currentVersion, heartbeatMs = DEFAULT_DECISION_HEARTBEAT_MS, now } = opts;
     let lastSteadySignature = null;
     let lastSteadyLoggedAt = Number.NEGATIVE_INFINITY;
     return (decision) => {
@@ -155,13 +154,21 @@ export function createLoggingDecisionSink(opts) {
             logger.info(described.message);
     };
 }
+/**
+ * The production decision sink: {@link createLoggingDecisionSink} over this
+ * module's daemon logger, at the default heartbeat.
+ */
+export function createAutoUpdateLogSink(currentVersion, now) {
+    return createLoggingDecisionSink({ logger: log, currentVersion, now });
+}
 /**
  * Install `<package>@latest` from the update channel via the shared scope-pinned
  * installer (`npm install -g --@telora:registry=<channel> <package>@latest`).
- * Returns true on success, false on failure. `runner` is a test seam.
+ * Returns true on success, false on failure. `install` (channel + npm runner)
+ * is bound by the caller: the shell binds the live channel and runNpm.
  */
-export function performSelfUpdate(packageName, runner) {
-    return installNpmVersion(`${packageName}@latest`, runner ? { runner } : {});
+export function performSelfUpdate(packageName, install) {
+    return installNpmVersion(`${packageName}@latest`, install);
 }
 /**
  * Build the safe-seam update controller.
@@ -177,12 +184,7 @@ export function performSelfUpdate(packageName, runner) {
  * re-arms only when the daemon leaves and re-enters the ready state.
  */
 export function createUpdateController(deps) {
-    const { currentVersion, packageName = '@telora/daemon', isIdle, getCachedCandidateVersion, onUpdateReady, performUpdate = performSelfUpdate, now = Date.now, stalenessThresholdMs = Number.POSITIVE_INFINITY, armDrain = armDrainForUpdate, releaseDrain = releaseDrainForUpdate, isUrgent = () => false, decisionHeartbeatMs = DEFAULT_DECISION_HEARTBEAT_MS, onDecision, } = deps;
-    // Observability sink: every tick emits exactly one classified decision here.
-    // Default logs (heartbeat-throttled) so activity is never fully silent; tests
-    // inject their own sink to assert the decision contract.
-    const emit = onDecision ??
-        createLoggingDecisionSink({ logger: log, currentVersion, heartbeatMs: decisionHeartbeatMs, now });
+    const { currentVersion, packageName = '@telora/daemon', isIdle, getCachedCandidateVersion, onUpdateReady, performUpdate, now, stalenessThresholdMs = Number.POSITIVE_INFINITY, armDrain, releaseDrain, isUrgent, onDecision: emit, } = deps;
     // True while the "ready to update" condition (idle + newer version) held on
     // the previous tick. The controller acts only on the false->true transition.
     let wasReady = false;