@telora/daemon 0.22.84 → 0.22.87

package/build-info.json

@@ -1,6 +1,6 @@
 {
-  "commitSha": "5c9fc3050",
-  "builtAt": "2026-09-12T21:33:19.492Z",
+  "commitSha": "3d97b05fa",
+  "builtAt": "2026-09-13T12:14:24.490Z",
   "expectedMigrations": [
     "20250829113330_create_org_nodes_table.sql",
     "20250829113402_fix_function_security_search_path.sql",
@@ -785,6 +785,7 @@
     "20260909203246_review_complete_stamps_reviewed_through_sha.sql",
     "20260911015223_add_created_by_session_id_to_issues.sql",
     "20260911215819_org_default_pass_models.sql",
-    "20260911232237_org_default_pass_models_setter.sql"
+    "20260911232237_org_default_pass_models_setter.sql",
+    "20260913005752_agent_escalations_resolution_class_floor.sql"
   ]
 }

package/dist/ci/ci-escalation.d.ts

@@ -1,3 +1,5 @@
+import { createEscalation } from '../queries/escalations.js';
+import { NO_HUMAN_ACT, type HumanAct } from '../queries/filing-observation.js';
 export declare const CD_PUSH_FAILED_KIND = "cd_push_failed";
 /**
  * Returns true when a CD push escalation should be filed for `result`.
@@ -15,6 +17,18 @@ export declare function shouldFileCdPushEscalation(pushToRemote: boolean, result
     success: boolean;
     error?: string;
 }): boolean;
+/**
+ * Pure: the act only a human can perform for a CD push failure, or NO_HUMAN_ACT.
+ *
+ * Branch protection, the daemon host's git credential, and the host checkout's
+ * remote configuration all live outside the repo and outside any agent session,
+ * so each names a specific act. Every other push failure (non-fast-forward, a
+ * network blip, an unrecognized error) is retry / rebase work the machine owns:
+ * NO_HUMAN_ACT, so the filing chokepoint files it as an observation. Policy is
+ * checked before auth because a protection refusal commonly also prints
+ * "Permission denied".
+ */
+export declare function cdPushHumanAct(pushError: string): HumanAct | typeof NO_HUMAN_ACT;
 export interface CdPushEscalationParams {
     organizationId: string;
     sessionId: string;
@@ -27,5 +41,7 @@ export interface CdPushEscalationParams {
  * File a `cd_push_failed` escalation. Best-effort — swallow the failure
  * so the caller's finally/cleanup path isn't disrupted by a logging hiccup.
  */
-export declare function fileCdPushEscalation(params: CdPushEscalationParams): Promise<void>;
+export declare function fileCdPushEscalation(params: CdPushEscalationParams, deps?: {
+    createEscalation: typeof createEscalation;
+}): Promise<void>;
 //# sourceMappingURL=ci-escalation.d.ts.map

package/dist/ci/ci-escalation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ci-escalation.d.ts","sourceRoot":"","sources":["../../src/ci/ci-escalation.ts"],"names":[],"mappings":"AAoBA,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AAEpD;;;;;;;;;;;GAWG;AACH,wBAAgB,0BAA0B,CACxC,YAAY,EAAE,OAAO,EACrB,MAAM,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3C,OAAO,CAET;AAED,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC,IAAI,CAAC,CAoCf"}
+{"version":3,"file":"ci-escalation.d.ts","sourceRoot":"","sources":["../../src/ci/ci-escalation.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,KAAK,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAM/E,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AAEpD;;;;;;;;;;;GAWG;AACH,wBAAgB,0BAA0B,CACxC,YAAY,EAAE,OAAO,EACrB,MAAM,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3C,OAAO,CAET;AAaD;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,QAAQ,GAAG,OAAO,YAAY,CA0BhF;AAED,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,sBAAsB,EAC9B,IAAI,GAAE;IAAE,gBAAgB,EAAE,OAAO,gBAAgB,CAAA;CAAyB,GACzE,OAAO,CAAC,IAAI,CAAC,CAsCf"}

package/dist/ci/ci-escalation.js

@@ -8,9 +8,14 @@
  * the push fails for any reason — no remote configured, auth failure,
  * non-fast-forward, network — the failure must surface as a visible
  * escalation rather than disappearing into the log.
+ *
+ * Routing: the filing reaches a human only when the push error names an act no
+ * agent session can perform (cdPushHumanAct). Otherwise it is filed as an
+ * observation the machine owns (see queries/filing-observation.ts).
  */
 import { ESCALATION_REASONS, ESCALATION_DISPOSITIONS } from '@telora/daemon-core';
 import { createEscalation } from '../queries/escalations.js';
+import { NO_HUMAN_ACT } from '../queries/filing-observation.js';
 import { createLogger } from '../shell/log.js';
 const log = createLogger({ module: 'CD' });
 export const CD_PUSH_FAILED_KIND = 'cd_push_failed';
@@ -29,20 +34,63 @@ export const CD_PUSH_FAILED_KIND = 'cd_push_failed';
 export function shouldFileCdPushEscalation(pushToRemote, result) {
     return pushToRemote && !result.success && !!result.error && /push/i.test(result.error);
 }
+/** The remote refused the push by POLICY (branch protection / a server-side hook). */
+const PUSH_REFUSED_BY_POLICY_RE = /protected branch|branch \S+ is protected|branch protection|GH006|pre-receive hook declined|not allowed to push/i;
+/** The remote refused the push by IDENTITY (the daemon host's credential). */
+const PUSH_REFUSED_BY_AUTH_RE = /permission denied|authentication failed|could not read (?:username|password)|access denied|publickey|invalid credentials|not authorized|\b40[13]\b/i;
+/** There is no remote to push to at all. */
+const PUSH_NO_REMOTE_RE = /no origin remote configured/i;
+/**
+ * Pure: the act only a human can perform for a CD push failure, or NO_HUMAN_ACT.
+ *
+ * Branch protection, the daemon host's git credential, and the host checkout's
+ * remote configuration all live outside the repo and outside any agent session,
+ * so each names a specific act. Every other push failure (non-fast-forward, a
+ * network blip, an unrecognized error) is retry / rebase work the machine owns:
+ * NO_HUMAN_ACT, so the filing chokepoint files it as an observation. Policy is
+ * checked before auth because a protection refusal commonly also prints
+ * "Permission denied".
+ */
+export function cdPushHumanAct(pushError) {
+    if (PUSH_REFUSED_BY_POLICY_RE.test(pushError)) {
+        return {
+            kind: 'unreachable_capability',
+            act: "Allow the daemon's CD push to main through the remote's branch protection " +
+                '(or turn off cd.enabled for this product) -- the remote refused the push by policy.',
+        };
+    }
+    if (PUSH_REFUSED_BY_AUTH_RE.test(pushError)) {
+        return {
+            kind: 'unreachable_capability',
+            act: "Grant the daemon host's git credential push access to main on the remote -- " +
+                'the push was rejected as unauthenticated or unauthorized.',
+        };
+    }
+    if (PUSH_NO_REMOTE_RE.test(pushError)) {
+        return {
+            kind: 'unreachable_capability',
+            act: "Configure an origin remote for this repository's checkout on the daemon host " +
+                '(or turn off cd.enabled for this product) -- CD has no remote to push to.',
+        };
+    }
+    return NO_HUMAN_ACT;
+}
 /**
  * File a `cd_push_failed` escalation. Best-effort — swallow the failure
  * so the caller's finally/cleanup path isn't disrupted by a logging hiccup.
  */
-export async function fileCdPushEscalation(params) {
+export async function fileCdPushEscalation(params, deps = { createEscalation }) {
     const { organizationId, sessionId, focusId, focusName, integrationBranch, pushError } = params;
     try {
-        await createEscalation({
+        await deps.createEscalation({
             organizationId,
             sessionId,
             issueId: null,
             reasonType: ESCALATION_REASONS.ERROR_ENCOUNTERED,
-            // Operator triage: auth / branch protection / network at the remote.
             disposition: ESCALATION_DISPOSITIONS.NEEDS_OPERATOR,
+            // A named act only for a remote-policy / credential / remote-config refusal;
+            // any other push failure is machine retry work (observation).
+            humanAct: cdPushHumanAct(pushError),
             anchor: { focusId, branch: integrationBranch },
             description: `CD push to remote failed after merging ${integrationBranch} into main.\n\n` +
                 `**Focus:** ${focusName}\n` +

package/dist/ci/ci-escalation.js.map

@@ -1 +1 @@
-{"version":3,"file":"ci-escalation.js","sourceRoot":"","sources":["../../src/ci/ci-escalation.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,0DAA0D;AAC1D,gBAAgB;AAEhB;;;;;;;GAOG;AAEH,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAG3C,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AAEpD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,0BAA0B,CACxC,YAAqB,EACrB,MAA4C;IAE5C,OAAO,YAAY,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzF,CAAC;AAWD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAA8B;IAE9B,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAC/F,IAAI,CAAC;QACH,MAAM,gBAAgB,CAAC;YACrB,cAAc;YACd,SAAS;YACT,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,kBAAkB,CAAC,iBAAiB;YAChD,qEAAqE;YACrE,WAAW,EAAE,uBAAuB,CAAC,cAAc;YACnD,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE;YAC9C,WAAW,EACT,0CAA0C,iBAAiB,iBAAiB;gBAC5E,cAAc,SAAS,IAAI;gBAC3B,iBAAiB,OAAO,IAAI;gBAC5B,cAAc,SAAS,MAAM;gBAC7B,oFAAoF;gBACpF,6DAA6D;YAC/D,YAAY,EAAE,+CAA+C;YAC7D,UAAU,EACR,uEAAuE;gBACvE,0DAA0D;YAC5D,cAAc,EAAE,mBAAmB;YACnC,2EAA2E;YAC3E,QAAQ,EAAE;gBACR,kBAAkB,EAAE,iBAAiB;gBACrC,UAAU,EAAE,SAAS;aACtB;SACF,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,6CAA6C,OAAO,MAAM,SAAS,IAAI,CAAC,CAAC;IACpF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CACN,2DAA2D,OAAO,GAAG,EACpE,GAAa,CAAC,OAAO,CACvB,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"ci-escalation.js","sourceRoot":"","sources":["../../src/ci/ci-escalation.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,0DAA0D;AAC1D,gBAAgB;AAEhB;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAiB,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAG3C,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AAEpD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,0BAA0B,CACxC,YAAqB,EACrB,MAA4C;IAE5C,OAAO,YAAY,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzF,CAAC;AAED,sFAAsF;AACtF,MAAM,yBAAyB,GAC7B,iHAAiH,CAAC;AAEpH,8EAA8E;AAC9E,MAAM,uBAAuB,GAC3B,qJAAqJ,CAAC;AAExJ,4CAA4C;AAC5C,MAAM,iBAAiB,GAAG,8BAA8B,CAAC;AAEzD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,IAAI,yBAAyB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9C,OAAO;YACL,IAAI,EAAE,wBAAwB;YAC9B,GAAG,EACD,4EAA4E;gBAC5E,qFAAqF;SACxF,CAAC;IACJ,CAAC;IACD,IAAI,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5C,OAAO;YACL,IAAI,EAAE,wBAAwB;YAC9B,GAAG,EACD,8EAA8E;gBAC9E,2DAA2D;SAC9D,CAAC;IACJ,CAAC;IACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,OAAO;YACL,IAAI,EAAE,wBAAwB;YAC9B,GAAG,EACD,+EAA+E;gBAC/E,2EAA2E;SAC9E,CAAC;IACJ,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAWD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAA8B,EAC9B,OAAsD,EAAE,gBAAgB,EAAE;IAE1E,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAC/F,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,gBAAgB,CAAC;YAC1B,cAAc;YACd,SAAS;YACT,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,kBAAkB,CAAC,iBAAiB;YAChD,WAAW,EAAE,uBAAuB,CAAC,cAAc;YACnD,6EAA6E;YAC7E,8DAA8D;YAC9D,QAAQ,EAAE,cAAc,CAAC,SAAS,CAAC;YACnC,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE;YAC9C,WAAW,EACT,0CAA0C,iBAAiB,iBAAiB;gBAC5E,cAAc,SAAS,IAAI;gBAC3B,iBAAiB,OAAO,IAAI;gBAC5B,cAAc,SAAS,MAAM;gBAC7B,oFAAoF;gBACpF,6DAA6D;YAC/D,YAAY,EAAE,+CAA+C;YAC7D,UAAU,EACR,uEAAuE;gBACvE,0DAA0D;YAC5D,cAAc,EAAE,mBAAmB;YACnC,2EAA2E;YAC3E,QAAQ,EAAE;gBACR,kBAAkB,EAAE,iBAAiB;gBACrC,UAAU,EAAE,SAAS;aACtB;SACF,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,6CAA6C,OAAO,MAAM,SAAS,IAAI,CAAC,CAAC;IACpF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CACN,2DAA2D,OAAO,GAAG,EACpE,GAAa,CAAC,OAAO,CACvB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/ci/ci-red-attribution.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Attribution of a red integration run to the focus (and delivery) whose merge
+ * INTRODUCED the red tip -- or to nobody, when that cannot be determined.
+ *
+ * The red run's anchor is what the ci_run_red filing routes to and what the
+ * incident reducer groups it under, so a WRONG anchor is worse than none: it
+ * rides the fix into an unrelated focus's coding pass and correlates the red
+ * with that focus's unrelated symptoms. Hence the rule: attribute only when the
+ * tip's introduced work resolves to exactly ONE focus; otherwise return the
+ * unattributed anchor and let the caller file branch-only. There is no "any
+ * active focus" fallback -- that fallback was a guess.
+ *
+ * Which commits did the tip introduce? For a non-merge tip, the tip itself (its
+ * own `Telora-Delivery` trailer). For a MERGE tip, the commits reachable from the
+ * tip and not from its INTEGRATION-SIDE parent. Git records the branch a merge was
+ * made ON as the first parent, and integration receives merges in two shapes:
+ *   - a merge made ON integration (mergeToIntegration's `--no-ff` "Merge agent
+ *     work", the main->integration sync): ^1 is integration, the work is ^2's side.
+ *   - a MERGE-BACK made on a focus branch (`git merge origin/integration`) that
+ *     integration then FAST-FORWARDED to (mergeToIntegration tries `--ff-only`
+ *     first): ^1 is the FOCUS branch, ^2 is the old integration tip, and the work
+ *     is ^1's side.
+ * The merge-back shape is the common one (38 of 43 merge tips on integration from
+ * 2026-08-20 to 2026-09-12), and the former resolver walked `^1...tip` for it --
+ * i.e. the OTHER foci's integration commits the focus had just merged back -- so
+ * a red run was attributed to whichever focus last merged before the one that
+ * turned it red (e.g. tip d58280129 resolved to the migration-gate focus's
+ * 094e94351 instead of its own 4cf454a73). The merge-back shape is recognized by
+ * git's default merge subject naming the integration branch as the merged-in ref.
+ *
+ * Best-effort: any git/DB failure degrades to the unattributed anchor, never throws.
+ *
+ * @module ci-red-attribution
+ */
+import type { DaemonConfig } from '../types/index.js';
+/** The anchor a red integration run is filed against. Both null = branch-only. */
+export interface CiRedRunAnchor {
+    focusId: string | null;
+    /** Set only when the introduced work of the attributed focus is ONE delivery. */
+    deliveryId: string | null;
+}
+/** The branch-only anchor: the red run could not be attributed to one focus. */
+export declare const UNATTRIBUTED_RED_RUN: Readonly<CiRedRunAnchor>;
+/** Injected IO for red-run attribution: git reads + the delivery->focus DB lookup. */
+export interface RedRunAttributionDeps {
+    /** The commit's raw `Telora-Delivery` trailer value ('' when absent). */
+    readTrailer: (repoPath: string, sha: string) => string;
+    /** The commit's parent shas, in order (empty on failure). */
+    readParents: (repoPath: string, sha: string) => string[];
+    /** The commit's subject line ('' on failure). */
+    readSubject: (repoPath: string, sha: string) => string;
+    /** `git rev-list <range>` (empty on failure). */
+    listCommits: (repoPath: string, range: string) => string[];
+    /** delivery id -> owning focus id (null when unknown). */
+    focusForDelivery: (deliveryId: string) => Promise<string | null>;
+}
+export declare function readCommitParents(repoPath: string, sha: string): string[];
+export declare function readCommitSubject(repoPath: string, sha: string): string;
+/**
+ * Whether a merge commit's subject is git's default message for merging the
+ * INTEGRATION branch in (`Merge branch 'integration' ...` / `Merge
+ * remote-tracking branch 'origin/integration' ...`) -- the merge-back shape,
+ * whose SECOND parent is the integration side. PURE.
+ */
+export declare function mergedInIntegration(subject: string, integrationBranch: string): boolean;
+/**
+ * The integration-side parent of a merge tip: ^2 for a merge-back that integration
+ * fast-forwarded to, ^1 otherwise. Null for a non-merge. PURE.
+ */
+export declare function integrationSideParent(parents: readonly string[], subject: string, integrationBranch: string): string | null;
+/**
+ * Decide the anchor from the deliveries the tip introduced (delivery -> owning
+ * focus, null when unknown). Exactly one focus -> that focus, plus the delivery
+ * when it is the only one of that focus; zero or several foci -> unattributed.
+ * A delivery whose focus is unknown is ignored rather than guessed at. PURE.
+ */
+export declare function decideRedRunAnchor(focusByDelivery: ReadonlyMap<string, string | null>): CiRedRunAnchor;
+/**
+ * Resolve the anchor for a red run on `sha` (the integration tip). Order: (1) the
+ * tip's own trailer; (2) for a merge tip, the deliveries of the commits it
+ * introduced relative to its integration-side parent. Unattributable -> the
+ * branch-only anchor (never a fallback focus).
+ */
+export declare function resolveRedRunAnchor(config: DaemonConfig, sha: string, deps?: RedRunAttributionDeps): Promise<CiRedRunAnchor>;
+//# sourceMappingURL=ci-red-attribution.d.ts.map

package/dist/ci/ci-red-attribution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-red-attribution.d.ts","sourceRoot":"","sources":["../../src/ci/ci-red-attribution.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAQtD,kFAAkF;AAClF,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,iFAAiF;IACjF,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,gFAAgF;AAChF,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,cAAc,CAAsD,CAAC;AAEjH,sFAAsF;AACtF,MAAM,WAAW,qBAAqB;IACpC,yEAAyE;IACzE,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;IACvD,6DAA6D;IAC7D,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;IACzD,iDAAiD;IACjD,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;IACvD,iDAAiD;IACjD,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;IAC3D,0DAA0D;IAC1D,gBAAgB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAClE;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAIzE;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAGvE;AAsBD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAKvF;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,OAAO,EAAE,MAAM,EACf,iBAAiB,EAAE,MAAM,GACxB,MAAM,GAAG,IAAI,CAGf;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,GAAG,cAAc,CAQtG;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,qBAAmC,GACxC,OAAO,CAAC,cAAc,CAAC,CAwBzB"}

package/dist/ci/ci-red-attribution.js

@@ -0,0 +1,108 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/ci/ci-owning-focus-resolve.test.ts
+// PINNED-BY-END
+import { runGitSync } from '../git/exec.js';
+import { getDeliveryContext } from '../queries/deliveries.js';
+import { readDeliveryTrailer, listRangeCommits } from '../resolvers/shared/git-diff.js';
+import { createLogger } from '../shell/log.js';
+const log = createLogger({ module: 'ci-red-attribution' });
+/** The branch-only anchor: the red run could not be attributed to one focus. */
+export const UNATTRIBUTED_RED_RUN = Object.freeze({ focusId: null, deliveryId: null });
+export function readCommitParents(repoPath, sha) {
+    const result = runGitSync(['rev-list', '--parents', '-n', '1', `${sha}^{commit}`], repoPath);
+    if (!result.success)
+        return [];
+    return result.output.trim().split(/\s+/).filter((p) => p !== '').slice(1);
+}
+export function readCommitSubject(repoPath, sha) {
+    const result = runGitSync(['show', '-s', '--format=%s', `${sha}^{commit}`], repoPath);
+    return result.success ? result.output.trim() : '';
+}
+const defaultDeps = {
+    readTrailer: readDeliveryTrailer,
+    readParents: readCommitParents,
+    readSubject: readCommitSubject,
+    listCommits: listRangeCommits,
+    focusForDelivery: async (deliveryId) => (await getDeliveryContext(deliveryId))?.focus?.id ?? null,
+};
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+/** A trailer value that names a delivery (the `none` sentinel and junk do not). */
+function asDeliveryId(trailer) {
+    const value = trailer.trim();
+    return UUID_RE.test(value) ? value : null;
+}
+function escapeRegExp(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+/**
+ * Whether a merge commit's subject is git's default message for merging the
+ * INTEGRATION branch in (`Merge branch 'integration' ...` / `Merge
+ * remote-tracking branch 'origin/integration' ...`) -- the merge-back shape,
+ * whose SECOND parent is the integration side. PURE.
+ */
+export function mergedInIntegration(subject, integrationBranch) {
+    const branch = escapeRegExp(integrationBranch);
+    // The ref prefix is a REMOTE name, so it is allowed only in the remote-tracking
+    // form; a local `Merge branch 'agent/integration'` is some other branch.
+    return new RegExp(`^Merge (?:remote-tracking branch '[^'/]+/${branch}'|branch '${branch}')`).test(subject);
+}
+/**
+ * The integration-side parent of a merge tip: ^2 for a merge-back that integration
+ * fast-forwarded to, ^1 otherwise. Null for a non-merge. PURE.
+ */
+export function integrationSideParent(parents, subject, integrationBranch) {
+    if (parents.length < 2)
+        return null;
+    return (mergedInIntegration(subject, integrationBranch) ? parents[1] : parents[0]) ?? null;
+}
+/**
+ * Decide the anchor from the deliveries the tip introduced (delivery -> owning
+ * focus, null when unknown). Exactly one focus -> that focus, plus the delivery
+ * when it is the only one of that focus; zero or several foci -> unattributed.
+ * A delivery whose focus is unknown is ignored rather than guessed at. PURE.
+ */
+export function decideRedRunAnchor(focusByDelivery) {
+    const foci = new Set();
+    for (const focusId of focusByDelivery.values())
+        if (focusId)
+            foci.add(focusId);
+    if (foci.size !== 1)
+        return { ...UNATTRIBUTED_RED_RUN };
+    const [focusId] = [...foci];
+    if (!focusId)
+        return { ...UNATTRIBUTED_RED_RUN };
+    const deliveries = [...focusByDelivery].filter(([, f]) => f === focusId).map(([d]) => d);
+    return { focusId, deliveryId: deliveries.length === 1 ? (deliveries[0] ?? null) : null };
+}
+/**
+ * Resolve the anchor for a red run on `sha` (the integration tip). Order: (1) the
+ * tip's own trailer; (2) for a merge tip, the deliveries of the commits it
+ * introduced relative to its integration-side parent. Unattributable -> the
+ * branch-only anchor (never a fallback focus).
+ */
+export async function resolveRedRunAnchor(config, sha, deps = defaultDeps) {
+    try {
+        const own = asDeliveryId(deps.readTrailer(config.repoPath, sha));
+        if (own) {
+            const focusId = await deps.focusForDelivery(own);
+            if (focusId)
+                return { focusId, deliveryId: own };
+        }
+        const base = integrationSideParent(deps.readParents(config.repoPath, sha), deps.readSubject(config.repoPath, sha), config.integrationBranch);
+        if (!base)
+            return { ...UNATTRIBUTED_RED_RUN };
+        const focusByDelivery = new Map();
+        for (const commit of deps.listCommits(config.repoPath, `${base}..${sha}`)) {
+            const deliveryId = asDeliveryId(deps.readTrailer(config.repoPath, commit));
+            if (!deliveryId || focusByDelivery.has(deliveryId))
+                continue;
+            focusByDelivery.set(deliveryId, await deps.focusForDelivery(deliveryId));
+        }
+        return decideRedRunAnchor(focusByDelivery);
+    }
+    catch (err) {
+        log.debug(`red-run attribution failed for ${sha.slice(0, 12)}: ${err.message}`);
+        return { ...UNATTRIBUTED_RED_RUN };
+    }
+}
+//# sourceMappingURL=ci-red-attribution.js.map

package/dist/ci/ci-red-attribution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-red-attribution.js","sourceRoot":"","sources":["../../src/ci/ci-red-attribution.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,oEAAoE;AACpE,gBAAgB;AAsChB,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACxF,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;AAS3D,gFAAgF;AAChF,MAAM,CAAC,MAAM,oBAAoB,GAA6B,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;AAgBjH,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,GAAW;IAC7D,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,GAAG,WAAW,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC7F,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,GAAW;IAC7D,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,GAAG,WAAW,CAAC,EAAE,QAAQ,CAAC,CAAC;IACtF,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,WAAW,GAA0B;IACzC,WAAW,EAAE,mBAAmB;IAChC,WAAW,EAAE,iBAAiB;IAC9B,WAAW,EAAE,iBAAiB;IAC9B,WAAW,EAAE,gBAAgB;IAC7B,gBAAgB,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,IAAI;CAClG,CAAC;AAEF,MAAM,OAAO,GAAG,iEAAiE,CAAC;AAElF,mFAAmF;AACnF,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,iBAAyB;IAC5E,MAAM,MAAM,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC;IAC/C,gFAAgF;IAChF,yEAAyE;IACzE,OAAO,IAAI,MAAM,CAAC,4CAA4C,MAAM,aAAa,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC7G,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAA0B,EAC1B,OAAe,EACf,iBAAyB;IAEzB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,CAAC,mBAAmB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC7F,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,eAAmD;IACpF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,OAAO,IAAI,eAAe,CAAC,MAAM,EAAE;QAAE,IAAI,OAAO;YAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/E,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,GAAG,oBAAoB,EAAE,CAAC;IACxD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,GAAG,oBAAoB,EAAE,CAAC;IACjD,MAAM,UAAU,GAAG,CAAC,GAAG,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACzF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3F,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAoB,EACpB,GAAW,EACX,OAA8B,WAAW;IAEzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;QACjE,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACjD,IAAI,OAAO;gBAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;QACnD,CAAC;QACD,MAAM,IAAI,GAAG,qBAAqB,CAChC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,EACtC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,EACtC,MAAM,CAAC,iBAAiB,CACzB,CAAC;QACF,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,GAAG,oBAAoB,EAAE,CAAC;QAC9C,MAAM,eAAe,GAAG,IAAI,GAAG,EAAyB,CAAC;QACzD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,IAAI,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC;YAC1E,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;YAC3E,IAAI,CAAC,UAAU,IAAI,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC;gBAAE,SAAS;YAC7D,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,kBAAkB,CAAC,eAAe,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,kCAAkC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3F,OAAO,EAAE,GAAG,oBAAoB,EAAE,CAAC;IACrC,CAAC;AACH,CAAC"}

package/dist/ci/ci-sensor-loop.d.ts

@@ -11,25 +11,28 @@
  * so the loop is unit-testable without a live remote or DB.
  *
  * The filing is a MACHINE receiver, not a human inbox line. Fixing a failing
- * lint/typecheck/test/build gate is CODING work, so the filing carries
- * disposition `agent_resolvable` (hidden from the operator inbox) anchored to a
- * FOCUS, so the daemon's focus-scoped agent_resolvable pickup
- * (reconcileAgentResolvableForFocus) rides it into that focus's next CODING pass
- * to be resolved. The ONLY path from here to a `needs_operator` filing is the
- * existing 24h agent_resolvable promotion backstop, after the machine has had
- * spawn cycles to clear it and has not -- never a direct operator filing.
+ * lint/typecheck/test/build gate is CODING work, so a focus-attributed filing
+ * carries disposition `agent_resolvable` (hidden from the operator inbox), and
+ * the daemon's focus-scoped pickup (reconcileAgentResolvableForFocus) rides it
+ * into that focus's next CODING pass. A BRANCH-ONLY filing (below) has no spawn
+ * to ride, so it is filed as a detector OBSERVATION (proposed needs_operator, no
+ * human act -- the fix is still coding work): with no focus anchor, the org-wide
+ * hand-off sweep (queries/agent-resolvable-promotion.ts) gives it to the routing
+ * decider agent on its next pass, and only that agent can make it human-facing.
+ * Neither path files a direct operator line (see ciRunRedEscalationParams).
  *
- * Anchor choice (decided, reversible): the tip's OWNING focus, resolved from the
- * tip commit's `Telora-Delivery` trailer -> delivery -> focus; falling back to
- * any currently-active focus for the product (a CI-gate fix is cross-cutting, so
- * any armed team can take it). If NO focus is armed at all there is no coding
- * pass to route the fix to, so the tick files nothing and retries next tick --
- * the fail-closed integration->main merge gate (resolveCiMergeGate, which reads
- * the git ref independently of this escalation) still holds main out on the red,
- * so nothing merges while the signal waits for a team. The recorded alternative,
- * a standing per-product "CI health" focus, would remove the fallback heuristic
- * but is a larger change (new focus lifecycle) and can replace this later with
- * no data migration.
+ * Anchor choice (decided, reversible): the focus -- and, when it is the only one,
+ * the delivery -- whose merge INTRODUCED the red tip (ci/ci-red-attribution.ts:
+ * the tip's own `Telora-Delivery` trailer, else the deliveries of the commits the
+ * merge brought onto integration, read against its integration-side parent). When
+ * that is not determinable (no attributable commit, or work from several foci)
+ * the filing anchors BRANCH-ONLY, with no focusId -- a wrong focus is worse than
+ * none, since it rides the fix into an unrelated team and correlates the red with
+ * that focus's unrelated symptoms. The former "any currently-active focus"
+ * fallback was that guess and is gone. A branch-only filing has no team to ride
+ * into, so the held merge gate is ALSO surfaced as a health event (TEL-6); the
+ * fail-closed integration->main merge gate (resolveCiMergeGate, which reads the
+ * git ref independently of this escalation) still holds main out on the red.
  *
  * The cause key is BRANCH-scoped (queries/cause-key.ciRunRedCauseKey): successive
  * red tips carrying the same unfixed breakage collapse onto ONE open filing
@@ -42,6 +45,9 @@
  */
 import type { DaemonConfig } from '../types/index.js';
 import { type CiStatusReader } from './ci-status.js';
+import { type CiRedRunAnchor } from './ci-red-attribution.js';
+import { type CreateEscalationParams } from '../queries/escalations.js';
+import { type CallApiDeps } from '../queries/shared.js';
 /** Health-event code for a red integration run that has no team to route to. */
 export declare const MERGE_HELD_NO_RECEIVER_CODE = "merge.held_no_receiver";
 /** Test-only: clear the held-gate dedup state. */
@@ -93,18 +99,25 @@ export declare function ciRunRedEscalationDescription(params: {
     sha: string;
     branch: string;
 }): string;
+/** Params a ci_run_red filing is built from. focusId/deliveryId null = branch-only. */
+export interface CiRedFilingParams {
+    organizationId: string;
+    productId: string;
+    focusId: string | null;
+    deliveryId: string | null;
+    sha: string;
+    branch: string;
+}
 /**
  * Structured metadata for a ci_run_red filing: the cause-key routing fields, the
- * posture it sets and that posture's termination condition, PLUS the self-
- * contained `diagnosis` route (see ciLogDiagnosisRoute) so a team inheriting the
- * escalation later reads the same log route the original filing carried. Pure and
- * exported so the metadata contract is unit-testable without mocking createEscalation.
+ * attributed anchor (focus_id / delivery_id, null when branch-only), the posture
+ * it sets and that posture's termination condition, PLUS the self-contained
+ * `diagnosis` route (see ciLogDiagnosisRoute) so a team inheriting the escalation
+ * later reads the same log route the original filing carried. Pure and exported
+ * so the metadata contract is unit-testable without mocking createEscalation.
  */
-export declare function ciRunRedEscalationMetadata(params: {
-    sha: string;
-    branch: string;
-    productId: string;
-    focusId: string;
+export declare function ciRunRedEscalationMetadata(params: Omit<CiRedFilingParams, 'organizationId' | 'deliveryId'> & {
+    deliveryId?: string | null;
 }): Record<string, unknown>;
 /** Minimal open-escalation row shape the sensor's dedup / resolve reads. */
 interface CiEscalationRow {
@@ -115,23 +128,31 @@ interface CiEscalationRow {
     metadata?: Record<string, unknown> | null;
 }
 /**
- * Whether a re-file for THIS red sha must be suppressed. Two ways it is:
- *   - an OPEN or DISMISSED row already carries the same cause key (sha+branch) --
- *     the cause-keyed path with DISMISSAL MEMORY. This is what fixes the incident
- *     where an operator dismissed a ci_run_red for a sha and the daemon re-filed
- *     the SAME sha on the next scan: a dismissed cause_key now keeps it silent
- *     until a NEW sha (a different cause key) goes red.
- *   - a legacy OPEN product+kind row with no cause_key exists (deployment-window
- *     back-compat for rows filed before this change).
- *
- * A new sha yields a different cause key with no matching open/dismissed row and
- * re-files; a later green run resolves the open row via resolveCiRedEscalations.
+ * An OPEN ci_run_red row for this product, including the two HAND-OFF rows that
+ * stand in for one:
+ *  - a routing decider's human-facing filing (MCP escalate with sourceCauseKey):
+ *    kind agent_filed, carrying metadata.original_cause_key `ci_run_red::...` and
+ *    metadata.originalEscalationId but NO originalKind;
+ *  - a historic promotion-backstop refile (the daemon no longer files these):
+ *    re-kinded agent_resolvable_promoted, carrying metadata.originalKind.
+ * A row's originalKind, when it carries one, is authoritative for its origin; the
+ * original_cause_key prefix decides only for a row without it (the decider's).
+ * Covering both lets a later green resolve the human-facing row too (no stale
+ * inbox item once the red cleared), and keeps an open one suppressing a fresh
+ * branch-only observation. Exported for direct unit testing.
  */
+export declare function isOpenCiRedForProduct(e: CiEscalationRow, productId: string): boolean;
 /**
  * Pure suppression predicate over already-fetched rows. A re-file for this red
- * sha is suppressed when an open/dismissed row carries the same cause key
- * (dismissal memory), or a legacy open product+kind row exists. Exported for
- * direct unit testing (no callApi mocking needed).
+ * sha is suppressed when an OPEN or DISMISSED row carries the same cause key
+ * (dismissal memory: an operator-dismissed branch stays silent until a new
+ * breakage resolves and re-reds it), an OPEN row carries it as a live absorbed
+ * symptom (the filing would only be "already carried" by the incident reducer --
+ * and a green tick must still see it open, so resolve-on-green retires it), or a
+ * legacy OPEN product+kind row with no cause_key exists (deployment-window
+ * back-compat). A later green run resolves the open row via
+ * resolveCiRedEscalations. Exported for direct unit testing (no callApi mocking
+ * needed).
  */
 export declare function isCiRedRefileSuppressed(rows: readonly CiEscalationRow[], params: {
     productId: string;
@@ -139,57 +160,40 @@ export declare function isCiRedRefileSuppressed(rows: readonly CiEscalationRow[]
     branch: string;
 }): boolean;
 /**
- * Resolve the focus a red integration run's fix should be routed to. Primary:
- * the tip commit's OWNING focus, via its `Telora-Delivery` trailer -> delivery ->
- * focus. When the tip is a MERGE commit it carries no trailer of its own -- so
- * before giving up, walk the commits the merge introduced (its own work is
- * `<sha>^1...<sha>`) and resolve the owning focus from the first commit that DOES
- * carry a trailer. Only then fall back to any currently-active focus for the
- * product (a CI-gate fix is cross-cutting, so any armed team can take it). Returns
- * null when nothing resolves -- there is no coding pass to route the fix to, so
- * the caller files nothing and retries next tick (the fail-closed merge gate
- * still holds main). Best-effort: any git/DB failure degrades to null, never throws.
+ * Resolve-on-green (the production resolveCiRedEscalations): resolve the product's
+ * open ci_run_red rows (and the hand-off rows standing in for one: a routing decider's
+ * human-facing filing, a historic promoted refile) auto_swept, then retire a ci_run_red
+ * absorbed as a symptom onto another open row of the product (incident contract
+ * rule 6), over the same read. Best-effort per row. Exported with a callApi seam
+ * for tests.
  */
+export declare function defaultResolveCiRedEscalations(productId: string, deps?: CallApiDeps): Promise<number>;
 /**
- * Injected IO for owning-focus resolution -- git reads + DB lookups, so the
- * pure walk order is unit-testable over a real merge without mocking the module.
- */
-export interface OwningFocusResolverDeps {
-    readTrailer: (repoPath: string, sha: string) => string;
-    resolveMergeRange: (repoPath: string, sha: string) => string | null;
-    listCommits: (repoPath: string, range: string) => string[];
-    /** delivery id -> owning focus id (null when unknown). */
-    focusForDelivery: (deliveryId: string) => Promise<string | null>;
-    /** first currently-active focus id for the product (null when none). */
-    firstActiveFocus: (config: DaemonConfig) => Promise<string | null>;
-}
-/**
- * Resolve the focus a red run's fix routes to. Order: (1) the tip's own
- * `Telora-Delivery` trailer; (2) when the tip is a MERGE (no own trailer), the
- * owning focus of the first trailered commit the merge introduced; (3) fallback
- * to any active focus. The arbitrary-active-focus fallback is reached ONLY when
- * no attributable commit exists at all. Best-effort: any git/DB failure degrades
- * to the fallback / null, never throws.
+ * The ci_run_red filing. Pure and exported so its routing is unit-testable (the
+ * poll-loop tests inject a mock fileCiRedEscalation).
+ *
+ *  - Focus-attributed: agent_resolvable. Fixing a failing CI gate is CODING work;
+ *    the focus whose merge turned integration red carries it into its next coding
+ *    pass (the focus-scoped agent_resolvable pickup).
+ *  - Branch-only: a plain agent_resolvable row reaches no spawn and is never
+ *    promoted, so the red would sit invisible while the merge gate holds main. It
+ *    is proposed needs_operator with an explicit NO_HUMAN_ACT (the fix is still
+ *    coding work, not a human act), so the filing chokepoint files it as a
+ *    detector OBSERVATION, which the anchorless promotion sweep surfaces next pass.
  */
-export declare function resolveOwningFocus(config: DaemonConfig, sha: string, deps?: OwningFocusResolverDeps): Promise<string | null>;
+export declare function ciRunRedEscalationParams(params: CiRedFilingParams): CreateEscalationParams;
 /** Injected IO for the sensor tick. Defaults reach for the real implementations. */
 export interface CiSensorDeps {
     getCiStatus: CiStatusReader;
     resolveIntegrationTip: (config: DaemonConfig) => string | null;
-    /** Resolve the focus a red run's fix routes to (tip-owner, fallback active). */
-    resolveOwningFocus: (config: DaemonConfig, sha: string) => Promise<string | null>;
+    /** Attribute a red run to the focus/delivery whose merge introduced it (branch-only when not determinable). */
+    resolveRedRunAnchor: (config: DaemonConfig, sha: string) => Promise<CiRedRunAnchor>;
     hasOpenCiRedEscalation: (params: {
         productId: string;
         sha: string;
         branch: string;
     }) => Promise<boolean>;
-    fileCiRedEscalation: (params: {
-        organizationId: string;
-        productId: string;
-        focusId: string;
-        sha: string;
-        branch: string;
-    }) => Promise<void>;
+    fileCiRedEscalation: (params: CiRedFilingParams) => Promise<void>;
     resolveCiRedEscalations: (productId: string) => Promise<number>;
 }
 export interface CiSensorTickCounts {

package/dist/ci/ci-sensor-loop.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ci-sensor-loop.d.ts","sourceRoot":"","sources":["../../src/ci/ci-sensor-loop.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,OAAO,EAAuD,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAa1G,gFAAgF;AAChF,eAAO,MAAM,2BAA2B,2BAA2B,CAAC;AAUpE,kDAAkD;AAClD,wBAAgB,kCAAkC,IAAI,IAAI,CAEzD;AAGD,uDAAuD;AACvD,eAAO,MAAM,0BAA0B,eAAe,CAAC;AAEvD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB,sBAAsB,CAAC;AACtD,eAAO,MAAM,6BAA6B,wBAAwB,CAAC;AAEnE,qEAAqE;AACrE,eAAO,MAAM,kBAAkB,qBAAqB,CAAC;AAErD,sEAAsE;AACtE,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,mBAAmB,CAQhF;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,MAAM,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAiB7F;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE;IACjD,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;CACjE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAW1B;AAED,4EAA4E;AAC5E,UAAU,eAAe;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC3C;AAaD;;;;;;;;;;;;GAYG;AACH;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,SAAS,eAAe,EAAE,EAChC,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACzD,OAAO,CAcT;AAwDD;;;;;;;;;;;GAWG;AACH;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;IACvD,iBAAiB,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACpE,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;IAC3D,0DAA0D;IAC1D,gBAAgB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACjE,wEAAwE;IACxE,gBAAgB,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CACpE;AAWD;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,uBAAwD,GAC7D,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA4BxB;AAMD,oFAAoF;AACpF,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,cAAc,CAAC;IAC5B,qBAAqB,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,MAAM,GAAG,IAAI,CAAC;IAC/D,gFAAgF;IAChF,kBAAkB,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAClF,sBAAsB,EAAE,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzG,mBAAmB,EAAE,CAAC,MAAM,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5I,uBAAuB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACjE;AAWD,MAAM,WAAW,kBAAkB;IACjC,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,iFAAiF;IACjF,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,YAAY,EACpB,IAAI,GAAE,YAA0B,GAC/B,OAAO,CAAC,kBAAkB,CAAC,CAmE7B"}
+{"version":3,"file":"ci-sensor-loop.d.ts","sourceRoot":"","sources":["../../src/ci/ci-sensor-loop.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,OAAO,EAAuD,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAE1G,OAAO,EAAuB,KAAK,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACnF,OAAO,EAAoE,KAAK,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAG1I,OAAO,EAAW,KAAK,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAOjE,gFAAgF;AAChF,eAAO,MAAM,2BAA2B,2BAA2B,CAAC;AAUpE,kDAAkD;AAClD,wBAAgB,kCAAkC,IAAI,IAAI,CAEzD;AAGD,uDAAuD;AACvD,eAAO,MAAM,0BAA0B,eAAe,CAAC;AAEvD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,kBAAkB,sBAAsB,CAAC;AACtD,eAAO,MAAM,6BAA6B,wBAAwB,CAAC;AAEnE,qEAAqE;AACrE,eAAO,MAAM,kBAAkB,qBAAqB,CAAC;AAErD,sEAAsE;AACtE,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,mBAAmB,CAQhF;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,MAAM,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAiB7F;AAED,uFAAuF;AACvF,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,IAAI,CAAC,iBAAiB,EAAE,gBAAgB,GAAG,YAAY,CAAC,GAAG;IAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAChG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAYzB;AAED,4EAA4E;AAC5E,UAAU,eAAe;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC3C;AASD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAUpF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,SAAS,eAAe,EAAE,EAChC,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACzD,OAAO,CAkBT;AAaD;;;;;;;GAOG;AACH,wBAAsB,8BAA8B,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAkB/G;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,iBAAiB,GAAG,sBAAsB,CAqB1F;AAMD,oFAAoF;AACpF,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,cAAc,CAAC;IAC5B,qBAAqB,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,MAAM,GAAG,IAAI,CAAC;IAC/D,+GAA+G;IAC/G,mBAAmB,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IACpF,sBAAsB,EAAE,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACzG,mBAAmB,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,uBAAuB,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACjE;AAWD,MAAM,WAAW,kBAAkB;IACjC,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,iFAAiF;IACjF,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAwBD;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,YAAY,EACpB,IAAI,GAAE,YAA0B,GAC/B,OAAO,CAAC,kBAAkB,CAAC,CAkD7B"}