@telora/daemon 0.22.245 → 0.22.290

package/dist/verify/stall-detectors.js

@@ -1,423 +0,0 @@
-// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: packages/daemon/src/focus/mark-team-executing.test.ts,
-//   packages/daemon/src/integration/unreviewed-settle-live-review-repro.test.ts,
-//   packages/daemon/src/queries/escalation-refusal.test.ts,
-//   packages/daemon/src/verify/idle-team-stall-detector.test.ts,
-//   packages/daemon/src/verify/oversized-stall-escalation-regression.test.ts,
-//   packages/daemon/src/verify/stall-detectors-clock-wiring.test.ts,
-//   packages/daemon/src/verify/stall-detectors.test.ts,
-//   packages/daemon/src/verify/team-outcome-stall-detector.test.ts,
-//   packages/daemon/src/verify/team-stall-reapers.test.ts,
-//   packages/daemon/src/verify/unreviewed-settle-detector.test.ts
-// PINNED-BY-END
-import { ESCALATION_REASONS, ESCALATION_DISPOSITIONS, withRetry, } from '@telora/daemon-core';
-import { fileEscalationIdempotent as defaultFileEscalationIdempotent, } from '../queries/escalation-suppression.js';
-import { deliveryGuardCauseKey } from '../queries/cause-key.js';
-import { NO_HUMAN_ACT } from '../queries/filing-observation.js';
-import { getActiveTeams, terminateTeam } from '../focus/focus-executor.js';
-import { getTeamLastActivityAt, getTeamErrorResultAt, getTeamLeadPid } from '../focus/focus-team-state.js';
-import { readTeamLastProgressAt } from '../completion/team-stillness.js';
-import { isProcessAlive } from '../spawn/liveness.js';
-import { clearReviewRequestedAt } from '../queries/focuses.js';
-import { buildVerifyGateStallEscalation, decideVerifyGateStall, VERIFY_GATE_STALL_REPEAT_THRESHOLD, } from './verify-gate-stall.js';
-import { resolveVerifyFailedCap, resolveReviewWindowStaleHours, resolveIdleTeamStallHours, resolveReviewLivenessWindowMinutes, resolveReviewSilenceDeadlineMinutes, } from './stall-detector-config.js';
-import { createLogger } from '../shell/log.js';
-const log = createLogger({ module: 'stall-detectors' });
-/**
- * escalation_kind discriminators for the two stall detectors. Declared as
- * daemon-local string constants (not imported from @telora/daemon-core's
- * ESCALATION_KINDS) on purpose: the daemon consumes the registry-PUBLISHED
- * daemon-core, so it cannot reference newly-added enum members until a build
- * that depends on a daemon-core publish carrying them. They ARE now in
- * daemon-core (ESCALATION_KINDS.VERIFY_GATE_UNCLEARABLE / .REVIEW_WINDOW_STALLED)
- * for other consumers, but the daemon keeps the local strings so this code does
- * not depend on publish ordering. The DB CHECK -- loosened by the
- * agent_escalations_kind_stall_detectors migration -- is the real constraint.
- */
-export const VERIFY_GATE_UNCLEARABLE_KIND = 'verify_gate_unclearable';
-export const REVIEW_WINDOW_STALLED_KIND = 'review_window_stalled';
-const defaultVerifyFailedCapDeps = {
-    fileEscalation: defaultFileEscalationIdempotent,
-};
-/**
- * Check ONE focus's ALREADY-FETCHED deliveries for a stalled verify gate
- * (decideVerifyGateStall: one failure signature held across consecutive
- * rejections, or -- with no signature recorded -- iteration_count over the cap,
- * both only while a guard is live-blocking), filing a verify_gate_unclearable
- * escalation (needs_operator) for each -- at most one open per delivery.
- * Operates on the deliveries the caller (runCascadeChecks) already loaded; it
- * does NOT fetch.
- */
-export async function checkVerifyFailedCapForFocus(ctx, deliveries, deps = defaultVerifyFailedCapDeps) {
-    const cap = deps.cap ?? resolveVerifyFailedCap();
-    const repeatThreshold = deps.repeatThreshold ?? VERIFY_GATE_STALL_REPEAT_THRESHOLD;
-    for (const delivery of deliveries) {
-        const stall = decideVerifyGateStall(delivery, cap, repeatThreshold);
-        if (!stall.stalled)
-            continue;
-        // The body asserts only what the evidence shows (the live blocking guard plus
-        // the repeated signature and its count, or -- fallback -- a count-only inference).
-        const text = buildVerifyGateStallEscalation(ctx, delivery, stall);
-        // Per-delivery cause key (guard-less): one open row per stuck delivery, and a
-        // dismissed one stays silent -- the cause is the delivery, not the guard name.
-        const causeKey = deliveryGuardCauseKey(VERIFY_GATE_UNCLEARABLE_KIND, delivery.id);
-        try {
-            const result = await withRetry(() => deps.fileEscalation({
-                causeKey,
-                organizationId: ctx.organizationId,
-                sessionId: '',
-                issueId: null,
-                reasonType: ESCALATION_REASONS.BLOCKED_BY_EXTERNAL,
-                disposition: ESCALATION_DISPOSITIONS.NEEDS_OPERATOR,
-                // A repeated signature (or the count fallback) names a failing gate
-                // condition; re-coding against its log is machine work. Whether the
-                // gate itself needs an authority change cannot be read from the
-                // signature, so the deciding agent names that act if it finds one.
-                humanAct: NO_HUMAN_ACT,
-                anchor: { deliveryId: delivery.id, focusId: ctx.focusId },
-                escalationKind: VERIFY_GATE_UNCLEARABLE_KIND,
-                description: text.description,
-                whatWasTried: text.whatWasTried,
-                helpNeeded: text.helpNeeded,
-                metadata: {
-                    cause: VERIFY_GATE_UNCLEARABLE_KIND,
-                    deliveryName: delivery.name,
-                    executionStatus: delivery.executionStatus,
-                    iterationCount: delivery.iterationCount ?? 0,
-                    cap,
-                    stallBasis: stall.basis,
-                    ...(stall.basis === 'repeated_signature'
-                        ? { failureSignature: stall.signature, consecutiveIdentical: stall.consecutive, repeatThreshold: stall.threshold }
-                        : {}),
-                    gateState: delivery.gateState ?? null,
-                },
-            }), { maxAttempts: 3, label: `escalation-verify-gate-unclearable-${delivery.id}` });
-            // A non-transient refusal was logged once at error level and surfaced by the
-            // chokepoint (queries/escalation-refusal.ts); it is not re-reported every tick.
-            if (result.filed) {
-                log.info(`[stall-detectors] Filed verify_gate_unclearable escalation for delivery "${delivery.name}" ` +
-                    `(${text.logSummary})`);
-            }
-        }
-        catch (err) {
-            log.warn(`[stall-detectors] verify-gate stall: failed to file escalation for delivery "${delivery.name}" (transient; retried next tick):`, err.message);
-        }
-    }
-}
-/** Focus IDs that currently have an active REVIEW team (live default). */
-export function activeReviewFocusIds() {
-    const ids = new Set();
-    for (const [focusId, team] of getActiveTeams()) {
-        if (team.sessionType === 'review')
-            ids.add(focusId);
-    }
-    return ids;
-}
-const defaultReviewWindowDeps = {
-    clearReviewWindow: clearReviewRequestedAt,
-    activeReviewFocusIds,
-    getReviewTeamLastActivityAt: getTeamLastActivityAt,
-    now: () => Date.now(),
-};
-/**
- * Pure decision: is a review GENUINELY active -- progressing, not merely present?
- *
- * Mere team presence is NOT liveness: a loop that respawns an idle review team
- * every few minutes always has a team present, so presence taken as "a review is
- * running" starves the very staleness escalation that exists to catch the loop.
- * A review counts as genuinely active only when a team is present AND its
- * per-team activity clock is fresh (last agent event within `livenessWindowMs`).
- *
- * A frozen clock (an idle-exiting respawn team) or a null clock (present but has
- * produced no event) is NOT genuinely active. Treating null as not-active is safe
- * because it only matters once review_requested_at is itself past the staleness
- * threshold (isReviewWindowStale gates on that first): a just-spawned review is
- * within the threshold and never trips, but a "review" that has produced zero
- * events for hours is exactly the wedge. Mirrors the sibling team-idle detector's
- * liveness-not-presence distinction. Exported for direct unit testing.
- */
-export function isReviewGenuinelyActive(hasReviewTeam, lastReviewActivityMs, nowMs, livenessWindowMs) {
-    if (!hasReviewTeam)
-        return false;
-    if (lastReviewActivityMs === null)
-        return false;
-    return nowMs - lastReviewActivityMs <= livenessWindowMs;
-}
-/**
- * Pure decision: is this focus's review window stale? True when a
- * review_requested_at exists, is older than `thresholdMs`, and NO review is
- * GENUINELY ACTIVE (progressing) on the focus. A completed review clears
- * review_requested_at, so a still-set timestamp older than the threshold with no
- * genuinely-active review means the review never ran, never finished, OR is stuck
- * in a respawn loop whose idle-exiting teams never progress. The second argument
- * is genuine liveness (isReviewGenuinelyActive), NOT mere team presence -- that is
- * what stops the loop's own respawns from masking the stale window. Exported for
- * direct unit testing.
- */
-export function isReviewWindowStale(reviewRequestedAt, reviewGenuinelyActive, nowMs, thresholdMs) {
-    if (!reviewRequestedAt)
-        return false;
-    if (reviewGenuinelyActive)
-        return false;
-    const requestedMs = Date.parse(reviewRequestedAt);
-    if (Number.isNaN(requestedMs))
-        return false;
-    return nowMs - requestedMs > thresholdMs;
-}
-/**
- * Pure decision: has the reviewer-SILENCE deadline expired? True when a review
- * window is open, a review team WENT LIVE (produced at least one agent event, so
- * `lastReviewActivityMs` is non-null), and that clock has since gone quiet for
- * longer than `silenceDeadlineMs`.
- *
- * This is the short, reviewer-relative deadline that closes the exact wedge this
- * focus exists to fix: a review session writes its verdicts and vanishes without
- * calling review_complete. isReviewWindowStale only clears after the ABSOLUTE
- * window age (TELORA_REVIEW_WINDOW_STALE_HOURS, default 6h) measured from
- * review_requested_at, so a reviewer that dies at minute 8 still parks the focus
- * for hours; this predicate keys the deadline off reviewer silence instead.
- *
- * A NULL clock is deliberately NOT stale here: it means the review team never
- * produced an event (never spawned / no activity yet). Closing that window would
- * cut off a reviewer that has not started -- that case stays owned by the review
- * hand-off cap and the absolute staleness backstop. Requiring a non-null clock is
- * the "went live then went silent" vs "never started" distinction. Exported for
- * direct unit testing.
- */
-export function isReviewWindowSilenceExpired(reviewRequestedAt, lastReviewActivityMs, nowMs, silenceDeadlineMs) {
-    if (!reviewRequestedAt)
-        return false;
-    if (lastReviewActivityMs === null)
-        return false;
-    return nowMs - lastReviewActivityMs > silenceDeadlineMs;
-}
-/**
- * Pure decision combining the two daemon-owned deadlines that close a review
- * window: the reviewer-SILENCE deadline (short, reviewer-relative -- a review that
- * WENT LIVE then fell quiet) and the ABSOLUTE window-age staleness backstop
- * (TELORA_REVIEW_WINDOW_STALE_HOURS from review_requested_at). Either closes the
- * window; the reason names which, so the log records WHY it closed. The silence
- * deadline is checked first so a reviewer that died mid-pass closes on the short
- * horizon rather than waiting out the 6h backstop. A genuinely-active review is
- * never closed (the explicit guard defends against a misconfigured silence
- * deadline shorter than the liveness window). Exported for unit testing.
- */
-export function decideReviewWindowClose(reviewRequestedAt, reviewGenuinelyActive, lastReviewActivityMs, nowMs, thresholdMs, silenceDeadlineMs) {
-    if (!reviewGenuinelyActive &&
-        isReviewWindowSilenceExpired(reviewRequestedAt, lastReviewActivityMs, nowMs, silenceDeadlineMs)) {
-        const quietMin = Math.floor((nowMs - lastReviewActivityMs) / 60_000);
-        return { close: true, reason: `reviewer silent ~${quietMin}m past silence deadline` };
-    }
-    if (isReviewWindowStale(reviewRequestedAt, reviewGenuinelyActive, nowMs, thresholdMs)) {
-        return { close: true, reason: 'window age past absolute staleness threshold' };
-    }
-    return { close: false, reason: '' };
-}
-/**
- * Check ONE focus for a stale review window and, when stale, CLEAR it -- the
- * daemon owns the clearing act (clearReviewRequestedAt), so it does not file a
- * needs_operator escalation that merely names the same operator MCP call
- * (`clearReviewRequest=true`) it could perform itself (TEL, delivery 7). The
- * caller (runCascadeChecks) passes the focus's review_requested_at, so this
- * rides the existing review-handling seam rather than fanning out its own scan.
- *
- * Why clearing is the right autonomous act: a stale window (threshold exceeded,
- * no genuinely-active review) means the review never ran or is stuck in a
- * respawn loop. focus-phase.ts returns 'reviewing' while review_requested_at is
- * set, so winding_down is unreachable until it clears. Clearing unblocks the
- * phase; if a review genuinely still needs to run, the normal auto-review path
- * re-opens the window -- self-healing on the same detector, never a human hold.
- */
-export async function checkReviewWindowStaleForFocus(ctx, reviewRequestedAt, deps = defaultReviewWindowDeps) {
-    const thresholdHours = deps.thresholdHours ?? resolveReviewWindowStaleHours();
-    const thresholdMs = thresholdHours * 3_600_000;
-    const nowMs = (deps.now ?? Date.now)();
-    const livenessWindowMs = (deps.livenessWindowMinutes ?? resolveReviewLivenessWindowMinutes()) * 60_000;
-    const silenceDeadlineMs = (deps.silenceDeadlineMinutes ?? resolveReviewSilenceDeadlineMinutes()) * 60_000;
-    // Liveness, not presence: a review suppresses the staleness escalation only
-    // when its team is present AND genuinely progressing (fresh activity clock).
-    // A respawn loop's idle-exiting teams are present but frozen, so they no longer
-    // mask a stale window -- the escape hatch the loop used to starve.
-    const hasReviewTeam = deps.activeReviewFocusIds().has(ctx.focusId);
-    const lastReviewActivityMs = deps.getReviewTeamLastActivityAt(ctx.focusId);
-    const reviewGenuinelyActive = isReviewGenuinelyActive(hasReviewTeam, lastReviewActivityMs, nowMs, livenessWindowMs);
-    // Two daemon-owned deadlines close the window: the short reviewer-SILENCE
-    // deadline (a review that went live then fell quiet -- the wedge where a
-    // reviewer writes verdicts and vanishes) and the ABSOLUTE window-age backstop.
-    const decision = decideReviewWindowClose(reviewRequestedAt, reviewGenuinelyActive, lastReviewActivityMs, nowMs, thresholdMs, silenceDeadlineMs);
-    if (!decision.close) {
-        return;
-    }
-    // Daemon-owned clear: perform the act the escalation used to merely name. An
-    // open window blocks the focus at 'reviewing' (focus-phase.ts) forever; the
-    // daemon clears review_requested_at itself so winding_down is reachable, with
-    // no operator act. The detection is exactly the clearing condition -- only the
-    // act was previously withheld.
-    const ageHours = Math.floor((nowMs - Date.parse(reviewRequestedAt)) / 3_600_000);
-    try {
-        await withRetry(() => deps.clearReviewWindow(ctx.focusId), { maxAttempts: 3, label: `clear-stale-review-window-${ctx.focusId}` });
-        log.info(`[stall-detectors] Cleared review window for focus "${ctx.focusName}" ` +
-            `(${decision.reason}; review_requested_at ~${ageHours}h old) -- ` +
-            `daemon-owned clear, no operator act required`);
-    }
-    catch (err) {
-        log.warn(`[stall-detectors] review-window: failed to clear stale window for focus "${ctx.focusName}":`, err.message);
-    }
-}
-/** Default: a focus is recoverable when its team is live and `executing`. */
-export function isTeamRecoverable(focusId) {
-    const team = getActiveTeams().get(focusId);
-    return team !== undefined && team.phase === 'executing';
-}
-const defaultIdleTeamStallDeps = {
-    getLastProgressAt: readTeamLastProgressAt,
-    isTeamRecoverable,
-    recoverTeam: (focusId) => terminateTeam(focusId, 'teardown'),
-    now: () => Date.now(),
-};
-/**
- * Pure decision: has this team's activity clock frozen past the threshold?
- *
- * False when no activity has been recorded yet (null) -- a team still
- * initializing has not stalled, it just has not produced its first event. The
- * gap is measured against the LAST agent event, not spawn, so a team that keeps
- * producing events never trips (its idle age stays under the threshold). The
- * observed park kept phase=executing while the last-activity clock stayed frozen
- * for 16h37m -- exactly what this predicate catches. Exported for direct unit
- * testing.
- */
-export function isTeamIdleStalled(lastActivityMs, nowMs, thresholdMs) {
-    if (lastActivityMs === null)
-        return false;
-    return nowMs - lastActivityMs > thresholdMs;
-}
-/**
- * Check ONE focus's team for an idle stall and RECOVER it (terminate so the
- * daemon's normal execution/release paths resume) when its last agent event is
- * older than the threshold. Reads the per-team last-activity clock the caller's
- * seam does not need to load.
- *
- * Files NO escalation: the ask -- recover the parked team -- names an act the
- * daemon performs itself, so this detector ACTS rather than routing a human an
- * item that can only wait ("A hold must name a human act"). A genuinely working
- * team is never recovered: its clock keeps advancing, so its idle age stays
- * under the threshold.
- */
-export function checkIdleTeamStallForFocus(ctx, overrides = {}) {
-    const deps = { ...defaultIdleTeamStallDeps, ...overrides };
-    if (!deps.isTeamRecoverable(ctx.focusId))
-        return;
-    const thresholdHours = deps.thresholdHours ?? resolveIdleTeamStallHours();
-    const thresholdMs = thresholdHours * 3_600_000;
-    const nowMs = (deps.now ?? Date.now)();
-    const lastProgressMs = deps.getLastProgressAt(ctx.focusId);
-    if (!isTeamIdleStalled(lastProgressMs, nowMs, thresholdMs))
-        return;
-    const idleHours = Math.floor((nowMs - lastProgressMs) / 3_600_000);
-    const recovered = deps.recoverTeam(ctx.focusId);
-    if (recovered) {
-        log.info(`[stall-detectors] Recovered idle-stalled team for focus "${ctx.focusName}" ` +
-            `(no agent event and no diff/HEAD/issue/status movement for ~${idleHours}h > ${thresholdHours}h): terminated so merge-back, ` +
-            `slot release, and delivery re-gating resume with no human action.`);
-    }
-    else {
-        log.warn(`[stall-detectors] idle-team: focus "${ctx.focusName}" is idle past threshold but ` +
-            `terminateTeam found no live team to recover (already torn down?).`);
-    }
-}
-// ── outcome + process liveness backstop (tracked teams) ────────────────────
-/**
- * Grace after a terminal-error outcome (or after a tracked team's PID vanishes)
- * before the outcome backstop recovers it. Deliberately MINUTES, not the hours
- * of the blind idle-team timer (TELORA_IDLE_TEAM_STALL_HOURS): this detector
- * fires only on POSITIVE evidence of death (an error result the session emitted,
- * or a dead lead PID), so it does not need the long window that protects a legit
- * long single tool call -- that call emits no error result and keeps a live PID,
- * so neither branch of isTeamOutcomeDead can touch it. The grace absorbs the
- * normal close-handler window (a just-exited process is reaped in ms) and any
- * momentary quiet right after an error before a re-engagement lands.
- */
-export const TEAM_OUTCOME_STALL_GRACE_MS = 5 * 60_000;
-/**
- * Pure decision: is this tracked team dead by its SESSION OUTCOME or PROCESS
- * STATE, rather than by the blind frozen clock?
- *
- * Two independent death signals, either of which (past the grace) means recover:
- *
- *  - ANNOUNCED death: the session emitted a terminal-error result (errorResultAt)
- *    and produced no agent activity since it (lastActivityMs frozen at or before
- *    errorResultAt). This is the observed incident: a 429 rejection emits an
- *    is_error result, then the child idles on stdin holding a LIVE pid -- every
- *    process-existence signal reports health while the session is done. Because
- *    recordTeamActivity fires on every agent_event (the error result included),
- *    a team that RECOVERS advances lastActivityMs past errorResultAt and is no
- *    longer "announced dead"; a team that stays quiet is.
- *
- *  - UNANNOUNCED death: the lead process is gone (leadPidAlive === false) AND the
- *    team has been quiet past the grace. A crash / OOM / SIGKILL emits no
- *    terminal result, so only the PID probe can see it. The quiet-past-grace
- *    guard keeps this from racing the normal close handler (which reaps a
- *    just-exited process within milliseconds) on a healthy exit.
- *
- * A team still initializing (no activity, no error result, live/unknown pid) is
- * NOT dead: errorResultAt is null and leadPidAlive is not false, so both branches
- * are false. Exported for direct unit testing.
- */
-export function isTeamOutcomeDead(args) {
-    const { errorResultAt, lastActivityMs, leadPidAlive, nowMs, graceMs } = args;
-    const announced = errorResultAt !== null &&
-        (lastActivityMs === null || lastActivityMs <= errorResultAt) &&
-        nowMs - errorResultAt > graceMs;
-    const quietPastGrace = lastActivityMs !== null && nowMs - lastActivityMs > graceMs;
-    const unannounced = leadPidAlive === false && quietPastGrace;
-    return announced || unannounced;
-}
-const defaultTeamOutcomeStallDeps = {
-    getErrorResultAt: getTeamErrorResultAt,
-    getLastActivityAt: getTeamLastActivityAt,
-    getLeadPidAlive: (focusId) => {
-        const pid = getTeamLeadPid(focusId);
-        return pid == null ? null : isProcessAlive(pid);
-    },
-    isTeamRecoverable,
-    recoverTeam: (focusId) => terminateTeam(focusId, 'teardown'),
-    now: () => Date.now(),
-};
-/**
- * Check ONE focus's tracked team against its session OUTCOME and PROCESS STATE,
- * and RECOVER it (terminate -> the daemon's normal release/merge-back/re-gate
- * paths resume) when it is dead by either signal past the grace -- the "better
- * signal that can act in minutes" the idle-team stall rationale calls for,
- * leaving the 3h blind timer as the last resort for deaths this cannot see.
- *
- * Rides the same per-focus cascade seam as checkIdleTeamStallForFocus and, like
- * it, files NO escalation: the ask -- recover the wedged team -- names an act the
- * daemon performs itself. A genuinely working team is untouched (see
- * isTeamOutcomeDead). Gated on isTeamRecoverable so a team already tearing down
- * is not re-terminated each pass.
- */
-export function checkTeamOutcomeStallForFocus(ctx, deps = defaultTeamOutcomeStallDeps) {
-    if (!deps.isTeamRecoverable(ctx.focusId))
-        return;
-    const graceMs = deps.graceMs ?? TEAM_OUTCOME_STALL_GRACE_MS;
-    const nowMs = (deps.now ?? Date.now)();
-    const errorResultAt = deps.getErrorResultAt(ctx.focusId);
-    const lastActivityMs = deps.getLastActivityAt(ctx.focusId);
-    const leadPidAlive = deps.getLeadPidAlive(ctx.focusId);
-    if (!isTeamOutcomeDead({ errorResultAt, lastActivityMs, leadPidAlive, nowMs, graceMs }))
-        return;
-    const reason = errorResultAt !== null && (lastActivityMs === null || lastActivityMs <= errorResultAt)
-        ? `terminal-error result with no activity since (announced death; pid may still be alive)`
-        : `lead process gone and quiet past grace (unannounced death: crash/OOM/SIGKILL)`;
-    const recovered = deps.recoverTeam(ctx.focusId);
-    if (recovered) {
-        log.warn(`[stall-detectors] Recovered outcome-dead team for focus "${ctx.focusName}" ` +
-            `(${reason}): terminated so slot release, merge-back, and delivery re-gating ` +
-            `resume in minutes -- no 3h wait, no operator kill.`);
-    }
-    else {
-        log.warn(`[stall-detectors] outcome-dead: focus "${ctx.focusName}" is outcome-dead but ` +
-            `terminateTeam found no live team to recover (already torn down?).`);
-    }
-}
-//# sourceMappingURL=stall-detectors.js.map

package/dist/verify/stall-detectors.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"stall-detectors.js","sourceRoot":"","sources":["../../src/verify/stall-detectors.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,oEAAoE;AACpE,iFAAiF;AACjF,4DAA4D;AAC5D,iEAAiE;AACjE,8EAA8E;AAC9E,qEAAqE;AACrE,wDAAwD;AACxD,oEAAoE;AACpE,2DAA2D;AAC3D,kEAAkE;AAClE,gBAAgB;AA8ChB,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,SAAS,GACV,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,wBAAwB,IAAI,+BAA+B,GAG5D,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC3G,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EACL,8BAA8B,EAC9B,qBAAqB,EACrB,kCAAkC,GACnC,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,sBAAsB,EACtB,6BAA6B,EAC7B,yBAAyB,EACzB,kCAAkC,EAClC,mCAAmC,GACpC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAGxD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,yBAAyB,CAAC;AACtE,MAAM,CAAC,MAAM,0BAA0B,GAAG,uBAAuB,CAAC;AAwBlE,MAAM,0BAA0B,GAAwB;IACtD,cAAc,EAAE,+BAA+B;CAChD,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,GAAsB,EACtB,UAA+B,EAC/B,OAA4B,0BAA0B;IAEtD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,sBAAsB,EAAE,CAAC;IACjD,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,kCAAkC,CAAC;IAEnF,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,qBAAqB,CAAC,QAAQ,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC;QACpE,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,SAAS;QAC7B,8EAA8E;QAC9E,mFAAmF;QACnF,MAAM,IAAI,GAAG,8BAA8B,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QAClE,8EAA8E;QAC9E,+EAA+E;QAC/E,MAAM,QAAQ,GAAG,qBAAqB,CAAC,4BAA4B,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAClF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC;gBACxB,QAAQ;gBACR,cAAc,EAAE,GAAG,CAAC,cAAc;gBAClC,SAAS,EAAE,EAAE;gBACb,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,kBAAkB,CAAC,mBAAmB;gBAClD,WAAW,EAAE,uBAAuB,CAAC,cAAc;gBACnD,oEAAoE;gBACpE,oEAAoE;gBACpE,gEAAgE;gBAChE,mEAAmE;gBACnE,QAAQ,EAAE,YAAY;gBACtB,MAAM,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;gBACzD,cAAc,EAAE,4BAA4B;gBAC5C,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,QAAQ,EAAE;oBACR,KAAK,EAAE,4BAA4B;oBACnC,YAAY,EAAE,QAAQ,CAAC,IAAI;oBAC3B,eAAe,EAAE,QAAQ,CAAC,eAAe;oBACzC,cAAc,EAAE,QAAQ,CAAC,cAAc,IAAI,CAAC;oBAC5C,GAAG;oBACH,UAAU,EAAE,KAAK,CAAC,KAAK;oBACvB,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,oBAAoB;wBACtC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,SAAS,EAAE,oBAAoB,EAAE,KAAK,CAAC,WAAW,EAAE,eAAe,EAAE,KAAK,CAAC,SAAS,EAAE;wBAClH,CAAC,CAAC,EAAE,CAAC;oBACP,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,IAAI;iBACtC;aACF,CAAC,EACF,EAAE,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,sCAAsC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAC/E,CAAC;YACF,6EAA6E;YAC7E,gFAAgF;YAChF,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,GAAG,CAAC,IAAI,CACN,4EAA4E,QAAQ,CAAC,IAAI,IAAI;oBAC7F,IAAI,IAAI,CAAC,UAAU,GAAG,CACvB,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CACN,gFAAgF,QAAQ,CAAC,IAAI,mCAAmC,EAC/H,GAAa,CAAC,OAAO,CACvB,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAiCD,0EAA0E;AAC1E,MAAM,UAAU,oBAAoB;IAClC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,cAAc,EAAE,EAAE,CAAC;QAC/C,IAAI,IAAI,CAAC,WAAW,KAAK,QAAQ;YAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,uBAAuB,GAAqB;IAChD,iBAAiB,EAAE,sBAAsB;IACzC,oBAAoB;IACpB,2BAA2B,EAAE,qBAAqB;IAClD,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;CACtB,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,uBAAuB,CACrC,aAAsB,EACtB,oBAAmC,EACnC,KAAa,EACb,gBAAwB;IAExB,IAAI,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,oBAAoB,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,KAAK,GAAG,oBAAoB,IAAI,gBAAgB,CAAC;AAC1D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CACjC,iBAAgC,EAChC,qBAA8B,EAC9B,KAAa,EACb,WAAmB;IAEnB,IAAI,CAAC,iBAAiB;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,qBAAqB;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,KAAK,GAAG,WAAW,GAAG,WAAW,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,4BAA4B,CAC1C,iBAAgC,EAChC,oBAAmC,EACnC,KAAa,EACb,iBAAyB;IAEzB,IAAI,CAAC,iBAAiB;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,oBAAoB,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,KAAK,GAAG,oBAAoB,GAAG,iBAAiB,CAAC;AAC1D,CAAC;AAQD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB,CACrC,iBAAgC,EAChC,qBAA8B,EAC9B,oBAAmC,EACnC,KAAa,EACb,WAAmB,EACnB,iBAAyB;IAEzB,IACE,CAAC,qBAAqB;QACtB,4BAA4B,CAAC,iBAAiB,EAAE,oBAAoB,EAAE,KAAK,EAAE,iBAAiB,CAAC,EAC/F,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAI,oBAA+B,CAAC,GAAG,MAAM,CAAC,CAAC;QACjF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,oBAAoB,QAAQ,yBAAyB,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,mBAAmB,CAAC,iBAAiB,EAAE,qBAAqB,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC;QACtF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC;IACjF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACtC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,GAAsB,EACtB,iBAAgC,EAChC,OAAyB,uBAAuB;IAEhD,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,6BAA6B,EAAE,CAAC;IAC9E,MAAM,WAAW,GAAG,cAAc,GAAG,SAAS,CAAC;IAC/C,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACvC,MAAM,gBAAgB,GACpB,CAAC,IAAI,CAAC,qBAAqB,IAAI,kCAAkC,EAAE,CAAC,GAAG,MAAM,CAAC;IAChF,MAAM,iBAAiB,GACrB,CAAC,IAAI,CAAC,sBAAsB,IAAI,mCAAmC,EAAE,CAAC,GAAG,MAAM,CAAC;IAElF,4EAA4E;IAC5E,6EAA6E;IAC7E,gFAAgF;IAChF,mEAAmE;IACnE,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnE,MAAM,oBAAoB,GAAG,IAAI,CAAC,2BAA2B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3E,MAAM,qBAAqB,GAAG,uBAAuB,CACnD,aAAa,EACb,oBAAoB,EACpB,KAAK,EACL,gBAAgB,CACjB,CAAC;IACF,0EAA0E;IAC1E,yEAAyE;IACzE,+EAA+E;IAC/E,MAAM,QAAQ,GAAG,uBAAuB,CACtC,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,KAAK,EACL,WAAW,EACX,iBAAiB,CAClB,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACpB,OAAO;IACT,CAAC;IACD,6EAA6E;IAC7E,4EAA4E;IAC5E,8EAA8E;IAC9E,+EAA+E;IAC/E,+BAA+B;IAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,iBAA2B,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IAC3F,IAAI,CAAC;QACH,MAAM,SAAS,CACb,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,EACzC,EAAE,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,6BAA6B,GAAG,CAAC,OAAO,EAAE,EAAE,CACtE,CAAC;QACF,GAAG,CAAC,IAAI,CACN,sDAAsD,GAAG,CAAC,SAAS,IAAI;YACvE,IAAI,QAAQ,CAAC,MAAM,0BAA0B,QAAQ,YAAY;YACjE,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CACN,4EAA4E,GAAG,CAAC,SAAS,IAAI,EAC5F,GAAa,CAAC,OAAO,CACvB,CAAC;IACJ,CAAC;AACH,CAAC;AAmCD,6EAA6E;AAC7E,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3C,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,CAAC;AAC1D,CAAC;AAED,MAAM,wBAAwB,GAAsB;IAClD,iBAAiB,EAAE,sBAAsB;IACzC,iBAAiB;IACjB,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC;IAC5D,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;CACtB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAC/B,cAA6B,EAC7B,KAAa,EACb,WAAmB;IAEnB,IAAI,cAAc,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,KAAK,GAAG,cAAc,GAAG,WAAW,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,0BAA0B,CACxC,GAAsB,EACtB,YAAwC,EAAE;IAE1C,MAAM,IAAI,GAAsB,EAAE,GAAG,wBAAwB,EAAE,GAAG,SAAS,EAAE,CAAC;IAC9E,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO;IAEjD,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,yBAAyB,EAAE,CAAC;IAC1E,MAAM,WAAW,GAAG,cAAc,GAAG,SAAS,CAAC;IAC/C,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAEvC,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,iBAAiB,CAAC,cAAc,EAAE,KAAK,EAAE,WAAW,CAAC;QAAE,OAAO;IAEnE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAI,cAAyB,CAAC,GAAG,SAAS,CAAC,CAAC;IAC/E,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,SAAS,EAAE,CAAC;QACd,GAAG,CAAC,IAAI,CACN,4DAA4D,GAAG,CAAC,SAAS,IAAI;YAC7E,+DAA+D,SAAS,OAAO,cAAc,gCAAgC;YAC7H,mEAAmE,CACpE,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CACN,uCAAuC,GAAG,CAAC,SAAS,+BAA+B;YACnF,mEAAmE,CACpE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,GAAG,MAAM,CAAC;AAEtD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAOjC;IACC,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAE7E,MAAM,SAAS,GACb,aAAa,KAAK,IAAI;QACtB,CAAC,cAAc,KAAK,IAAI,IAAI,cAAc,IAAI,aAAa,CAAC;QAC5D,KAAK,GAAG,aAAa,GAAG,OAAO,CAAC;IAElC,MAAM,cAAc,GAAG,cAAc,KAAK,IAAI,IAAI,KAAK,GAAG,cAAc,GAAG,OAAO,CAAC;IACnF,MAAM,WAAW,GAAG,YAAY,KAAK,KAAK,IAAI,cAAc,CAAC;IAE7D,OAAO,SAAS,IAAI,WAAW,CAAC;AAClC,CAAC;AAmBD,MAAM,2BAA2B,GAAyB;IACxD,gBAAgB,EAAE,oBAAoB;IACtC,iBAAiB,EAAE,qBAAqB;IACxC,eAAe,EAAE,CAAC,OAAO,EAAE,EAAE;QAC3B,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACpC,OAAO,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;IAClD,CAAC;IACD,iBAAiB;IACjB,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC;IAC5D,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;CACtB,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,6BAA6B,CAC3C,GAAsB,EACtB,OAA6B,2BAA2B;IAExD,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO;IAEjD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,2BAA2B,CAAC;IAC5D,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAEvC,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACzD,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAEvD,IAAI,CAAC,iBAAiB,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAAE,OAAO;IAEhG,MAAM,MAAM,GACV,aAAa,KAAK,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,IAAI,cAAc,IAAI,aAAa,CAAC;QACpF,CAAC,CAAC,wFAAwF;QAC1F,CAAC,CAAC,+EAA+E,CAAC;IAEtF,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,SAAS,EAAE,CAAC;QACd,GAAG,CAAC,IAAI,CACN,4DAA4D,GAAG,CAAC,SAAS,IAAI;YAC7E,IAAI,MAAM,oEAAoE;YAC9E,oDAAoD,CACrD,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CACN,0CAA0C,GAAG,CAAC,SAAS,wBAAwB;YAC/E,mEAAmE,CACpE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/verify/stalled-team-backstop.d.ts

@@ -1,49 +0,0 @@
-import { type FileEscalationIdempotentParams, type FileEscalationIdempotentResult } from '../queries/escalation-suppression.js';
-import { type FocusStallContext } from './stall-detectors.js';
-/**
- * Dependencies for the stalled-team backstop, injectable for tests. Defaults
- * read the per-team last-activity clock + recoverability gate, recover via the
- * same terminateTeam mechanism the other detectors use (so the normal close
- * path's wip-preserve runs and the governor slot is released), gate the acting
- * reap on the observe-only liveness badge NOT being demoted, and file the
- * team_failure escalation through the same cause-keyed idempotent gate.
- */
-export interface StalledTeamBackstopDeps {
-    /**
-     * When the team last showed progress by the ONE progress measure: its last
-     * agent event, or the last time the cascade pass saw its diff, HEAD, issues
-     * or delivery statuses move (completion/team-stillness.ts). Null while the
-     * team has produced no event yet.
-     */
-    getLastProgressAt: (focusId: string) => number | null;
-    isTeamRecoverable: (focusId: string) => boolean;
-    getLeadSessionId: (focusId: string) => string | null;
-    recoverTeam: (focusId: string) => boolean;
-    /**
-     * Whether the acting (destructive) reap is currently ALLOWED. Default:
-     * !isMechanismDemoted(LIVENESS_BADGE) -- the observe-only liveness badge's
-     * false-positive reading governs whether this reaper may kill (block-to-observe
-     * by a reading, the focus's own thesis). When false the firing is still
-     * recorded but no team is terminated -- the 3h blind idle timer remains.
-     */
-    isActingAllowed: () => boolean;
-    fileEscalation: (params: FileEscalationIdempotentParams) => Promise<FileEscalationIdempotentResult>;
-    /** Current epoch ms; injectable for tests. Defaults to Date.now. */
-    now?: () => number;
-    /** Override the backstop window (minutes) for tests; defaults to env-config. */
-    windowMinutes?: number;
-}
-/**
- * Pure decision: has this team's activity clock frozen past the BACKSTOP window
- * (shorter than the 3h blind idle timer)? False when no activity has been
- * recorded yet (a team still initializing has not stalled). Exported for direct
- * unit testing.
- */
-export declare function isStalledTeamBackstopEligible(lastActivityMs: number | null, nowMs: number, windowMs: number): boolean;
-/**
- * Check ONE focus's team for a stall and REAP it WITHOUT depending on the
- * completion event. A genuinely working team is never reaped: its clock keeps
- * advancing, so its idle age stays under the window.
- */
-export declare function checkStalledTeamBackstopForFocus(ctx: FocusStallContext, overrides?: Partial<StalledTeamBackstopDeps>): Promise<void>;
-//# sourceMappingURL=stalled-team-backstop.d.ts.map

package/dist/verify/stalled-team-backstop.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"stalled-team-backstop.d.ts","sourceRoot":"","sources":["../../src/verify/stalled-team-backstop.ts"],"names":[],"mappings":"AAoCA,OAAO,EAEL,KAAK,8BAA8B,EACnC,KAAK,8BAA8B,EACpC,MAAM,sCAAsC,CAAC;AAW9C,OAAO,EAAqB,KAAK,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAKjF;;;;;;;GAOG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;;;OAKG;IACH,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACtD,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IAChD,gBAAgB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACrD,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IAC1C;;;;;;OAMG;IACH,eAAe,EAAE,MAAM,OAAO,CAAC;IAC/B,cAAc,EAAE,CAAC,MAAM,EAAE,8BAA8B,KAAK,OAAO,CAAC,8BAA8B,CAAC,CAAC;IACpG,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,gFAAgF;IAChF,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAYD;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,cAAc,EAAE,MAAM,GAAG,IAAI,EAC7B,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACf,OAAO,CAGT;AAED;;;;GAIG;AACH,wBAAsB,gCAAgC,CACpD,GAAG,EAAE,iBAAiB,EACtB,SAAS,GAAE,OAAO,CAAC,uBAAuB,CAAM,GAC/C,OAAO,CAAC,IAAI,CAAC,CAsFf"}

package/dist/verify/stalled-team-backstop.js

@@ -1,135 +0,0 @@
-// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: packages/daemon/src/verify/stalled-team-backstop-detector.test.ts
-// PINNED-BY-END
-/**
- * Stalled-team backstop -- a completion-event-INDEPENDENT reap.
- *
- * Every mechanism that ends a stalled team from the completion handler runs only
- * when the detector's `complete` event fires. On 2026-09-07 a suppressed
- * `complete` (a leaked stdin-turn count) left a HEALTHY, idle lead holding a
- * focus and a governor slot for 43 minutes -- no stall escalation, no no-progress
- * cycle, no teardown -- until a human restarted the daemon. This backstop reads
- * liveness DIRECTLY (the per-team last-activity clock) so it holds whether the
- * completion event is suppressed, never fires, or is latched: it does not share
- * that event as a precondition.
- *
- * It fires between the two existing windows -- above the 5-min liveness-badge park
- * band (a legit park has resumed and been recorded FP by observeLivenessBadge
- * before this acts) and below the 3h blind idle-stall timer -- records a
- * STALLED_TEAM_REAP supervision firing (so its own true/false-positive rate is
- * readable, like the mechanisms it backstops), reaps via terminateTeam (whose
- * normal close path gives the same uncommitted-work preservation a
- * completion-handler teardown does), and files ONE idempotent team_failure so the
- * wedge is visible. "Stalled" is judged by the ONE progress measure
- * (completion/team-stillness.ts): no agent event AND no movement of the diff,
- * HEAD, issues or delivery statuses for the whole window. Extracted from stall-detectors.ts to keep that file under the
- * file-size floor.
- *
- * @module verify/stalled-team-backstop
- */
-import { ESCALATION_REASONS, ESCALATION_DISPOSITIONS, withRetry, } from '@telora/daemon-core';
-import { fileEscalationIdempotent as defaultFileEscalationIdempotent, } from '../queries/escalation-suppression.js';
-import { focusBlockageCauseKey } from '../queries/cause-key.js';
-import { recordFiring, isMechanismDemoted, markLatestFiringUnacted, SUPERVISION_MECHANISM, } from '../completion/supervision-firing-record.js';
-import { getActiveTeams, terminateTeam } from '../focus/focus-executor.js';
-import { readTeamLastProgressAt } from '../completion/team-stillness.js';
-import { resolveStalledTeamBackstopMinutes } from './stall-detector-config.js';
-import { isTeamRecoverable } from './stall-detectors.js';
-import { createLogger } from '../shell/log.js';
-const log = createLogger({ module: 'stall-detectors' });
-const defaultStalledTeamBackstopDeps = {
-    getLastProgressAt: readTeamLastProgressAt,
-    isTeamRecoverable,
-    getLeadSessionId: (focusId) => getActiveTeams().get(focusId)?.leadSessionId ?? null,
-    recoverTeam: (focusId) => terminateTeam(focusId, 'teardown'),
-    isActingAllowed: () => !isMechanismDemoted(SUPERVISION_MECHANISM.LIVENESS_BADGE),
-    fileEscalation: defaultFileEscalationIdempotent,
-    now: () => Date.now(),
-};
-/**
- * Pure decision: has this team's activity clock frozen past the BACKSTOP window
- * (shorter than the 3h blind idle timer)? False when no activity has been
- * recorded yet (a team still initializing has not stalled). Exported for direct
- * unit testing.
- */
-export function isStalledTeamBackstopEligible(lastActivityMs, nowMs, windowMs) {
-    if (lastActivityMs === null)
-        return false;
-    return nowMs - lastActivityMs > windowMs;
-}
-/**
- * Check ONE focus's team for a stall and REAP it WITHOUT depending on the
- * completion event. A genuinely working team is never reaped: its clock keeps
- * advancing, so its idle age stays under the window.
- */
-export async function checkStalledTeamBackstopForFocus(ctx, overrides = {}) {
-    const deps = { ...defaultStalledTeamBackstopDeps, ...overrides };
-    if (!deps.isTeamRecoverable(ctx.focusId))
-        return;
-    const windowMinutes = deps.windowMinutes ?? resolveStalledTeamBackstopMinutes();
-    const windowMs = windowMinutes * 60_000;
-    const nowMs = (deps.now ?? Date.now)();
-    const lastProgressMs = deps.getLastProgressAt(ctx.focusId);
-    if (!isStalledTeamBackstopEligible(lastProgressMs, nowMs, windowMs))
-        return;
-    const idleMinutes = Math.floor((nowMs - lastProgressMs) / 60_000);
-    // Record the firing whether or not we act -- the rate must be readable even
-    // when the mechanism is demoted to observe-only.
-    recordFiring({
-        mechanism: SUPERVISION_MECHANISM.STALLED_TEAM_REAP,
-        focusId: ctx.focusId,
-        predicted: `team wedged: executing but no progress (no agent event, no diff/HEAD/issue/status movement) for ~${idleMinutes}m ` +
-            `(> ${windowMinutes}m backstop), completion event not fired`,
-        now: nowMs,
-    });
-    // Block-to-observe by a reading: act only while the observe-only liveness badge
-    // has NOT been shown false-positive-heavy. When demoted, record and defer to
-    // the blind idle-stall timer -- and mark the firing UNACTED so the settle sweep
-    // cannot true-positive it by silence (which would launder the demotion).
-    if (!deps.isActingAllowed()) {
-        markLatestFiringUnacted(SUPERVISION_MECHANISM.STALLED_TEAM_REAP, ctx.focusId);
-        log.info(`[stall-detectors] stalled-team backstop OBSERVING focus "${ctx.focusName}" ` +
-            `(idle ~${idleMinutes}m > ${windowMinutes}m) -- liveness signal demoted to ` +
-            `observe-only; deferring to the blind idle-stall timer.`);
-        return;
-    }
-    const recovered = deps.recoverTeam(ctx.focusId);
-    if (!recovered) {
-        log.warn(`[stall-detectors] stalled-team backstop: focus "${ctx.focusName}" is idle past ` +
-            `the backstop window but terminateTeam found no live team to recover (already torn down?).`);
-        return;
-    }
-    log.warn(`[stall-detectors] Reaped stalled team for focus "${ctx.focusName}" (no agent event and no ` +
-        `diff/HEAD/issue/status movement for ~${idleMinutes}m > ${windowMinutes}m backstop) WITHOUT a completion event: ` +
-        `terminated so wip-preserve, slot release, and delivery re-gating resume; filing a ` +
-        `team_failure so the wedge is visible.`);
-    // File ONE team_failure escalation (idempotent by cause key -- at most one open
-    // row per focus). agent_resolvable so it does not block respawn and rides into
-    // the next spawn; the agent-resolvable promotion path escalates it to the
-    // operator only if it survives unresolved.
-    const causeKey = focusBlockageCauseKey('team_failure', ctx.focusId, 'stalled_team_reap');
-    try {
-        await withRetry(() => deps.fileEscalation({
-            causeKey,
-            organizationId: ctx.organizationId,
-            sessionId: deps.getLeadSessionId(ctx.focusId) ?? '',
-            issueId: null,
-            reasonType: ESCALATION_REASONS.BLOCKED_BY_EXTERNAL,
-            disposition: ESCALATION_DISPOSITIONS.AGENT_RESOLVABLE,
-            anchor: { focusId: ctx.focusId },
-            escalationKind: 'team_failure',
-            description: `Team for focus "${ctx.focusName}" showed no progress -- no agent event and no ` +
-                `worktree, HEAD, issue or delivery-status movement -- for ~${idleMinutes} ` +
-                `minutes (> ${windowMinutes}m backstop) while still holding the focus and a ` +
-                `governor slot, with no completion event. The daemon reaped it directly from the ` +
-                `poll loop (reading liveness, not the completion event), preserving its ` +
-                `uncommitted work and releasing its slot. If the underlying cause recurs the ` +
-                `incoming team will hit it again.`,
-        }), { maxAttempts: 3, label: `file-stalled-team-reap-${ctx.focusId}` });
-    }
-    catch (err) {
-        log.warn(`[stall-detectors] stalled-team backstop: failed to file team_failure for ` +
-            `"${ctx.focusName}":`, err.message);
-    }
-}
-//# sourceMappingURL=stalled-team-backstop.js.map

package/dist/verify/stalled-team-backstop.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"stalled-team-backstop.js","sourceRoot":"","sources":["../../src/verify/stalled-team-backstop.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,+EAA+E;AAC/E,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,SAAS,GACV,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,wBAAwB,IAAI,+BAA+B,GAG5D,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,iCAAiC,EAAE,MAAM,4BAA4B,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAA0B,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAoCxD,MAAM,8BAA8B,GAA4B;IAC9D,iBAAiB,EAAE,sBAAsB;IACzC,iBAAiB;IACjB,gBAAgB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,aAAa,IAAI,IAAI;IACnF,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC;IAC5D,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,cAAc,CAAC;IAChF,cAAc,EAAE,+BAA+B;IAC/C,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;CACtB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,cAA6B,EAC7B,KAAa,EACb,QAAgB;IAEhB,IAAI,cAAc,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,KAAK,GAAG,cAAc,GAAG,QAAQ,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,GAAsB,EACtB,YAA8C,EAAE;IAEhD,MAAM,IAAI,GAA4B,EAAE,GAAG,8BAA8B,EAAE,GAAG,SAAS,EAAE,CAAC;IAC1F,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO;IAEjD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,iCAAiC,EAAE,CAAC;IAChF,MAAM,QAAQ,GAAG,aAAa,GAAG,MAAM,CAAC;IACxC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACvC,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,6BAA6B,CAAC,cAAc,EAAE,KAAK,EAAE,QAAQ,CAAC;QAAE,OAAO;IAE5E,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAI,cAAyB,CAAC,GAAG,MAAM,CAAC,CAAC;IAE9E,4EAA4E;IAC5E,iDAAiD;IACjD,YAAY,CAAC;QACX,SAAS,EAAE,qBAAqB,CAAC,iBAAiB;QAClD,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,SAAS,EACP,oGAAoG,WAAW,IAAI;YACnH,MAAM,aAAa,yCAAyC;QAC9D,GAAG,EAAE,KAAK;KACX,CAAC,CAAC;IAEH,gFAAgF;IAChF,6EAA6E;IAC7E,gFAAgF;IAChF,yEAAyE;IACzE,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QAC5B,uBAAuB,CAAC,qBAAqB,CAAC,iBAAiB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC9E,GAAG,CAAC,IAAI,CACN,4DAA4D,GAAG,CAAC,SAAS,IAAI;YAC7E,UAAU,WAAW,OAAO,aAAa,mCAAmC;YAC5E,wDAAwD,CACzD,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,GAAG,CAAC,IAAI,CACN,mDAAmD,GAAG,CAAC,SAAS,iBAAiB;YACjF,2FAA2F,CAC5F,CAAC;QACF,OAAO;IACT,CAAC;IACD,GAAG,CAAC,IAAI,CACN,oDAAoD,GAAG,CAAC,SAAS,2BAA2B;QAC5F,wCAAwC,WAAW,OAAO,aAAa,0CAA0C;QACjH,oFAAoF;QACpF,uCAAuC,CACxC,CAAC;IAEF,gFAAgF;IAChF,+EAA+E;IAC/E,0EAA0E;IAC1E,2CAA2C;IAC3C,MAAM,QAAQ,GAAG,qBAAqB,CAAC,cAAc,EAAE,GAAG,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACzF,IAAI,CAAC;QACH,MAAM,SAAS,CACb,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC;YACxB,QAAQ;YACR,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE;YACnD,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,kBAAkB,CAAC,mBAAmB;YAClD,WAAW,EAAE,uBAAuB,CAAC,gBAAgB;YACrD,MAAM,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;YAChC,cAAc,EAAE,cAAc;YAC9B,WAAW,EACT,mBAAmB,GAAG,CAAC,SAAS,gDAAgD;gBAChF,6DAA6D,WAAW,GAAG;gBAC3E,cAAc,aAAa,kDAAkD;gBAC7E,kFAAkF;gBAClF,yEAAyE;gBACzE,8EAA8E;gBAC9E,kCAAkC;SACrC,CAAC,EACF,EAAE,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,0BAA0B,GAAG,CAAC,OAAO,EAAE,EAAE,CACnE,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CACN,2EAA2E;YAC3E,IAAI,GAAG,CAAC,SAAS,IAAI,EACpB,GAAa,CAAC,OAAO,CACvB,CAAC;IACJ,CAAC;AACH,CAAC"}