@telora/daemon 0.22.85 → 0.22.91

package/build-info.json

@@ -1,6 +1,6 @@
 {
-  "commitSha": "4dbe9ac08",
-  "builtAt": "2026-09-12T22:47:37.560Z",
+  "commitSha": "21c04539d",
+  "builtAt": "2026-09-13T21:01:40.572Z",
   "expectedMigrations": [
     "20250829113330_create_org_nodes_table.sql",
     "20250829113402_fix_function_security_search_path.sql",
@@ -785,6 +785,7 @@
     "20260909203246_review_complete_stamps_reviewed_through_sha.sql",
     "20260911015223_add_created_by_session_id_to_issues.sql",
     "20260911215819_org_default_pass_models.sql",
-    "20260911232237_org_default_pass_models_setter.sql"
+    "20260911232237_org_default_pass_models_setter.sql",
+    "20260913005752_agent_escalations_resolution_class_floor.sql"
   ]
 }

package/dist/backends/index.d.ts

@@ -2,6 +2,6 @@ export { type AgentBackend, type AgentSpawnContext, type AgentResumeContext, typ
 export { DEFAULT_BACKEND_ID, registerBackend, getBackend, hasBackend, listBackends, _resetRegistry, } from './registry.js';
 export { claudeBackend } from './claude/claude-backend.js';
 export { codexBackend } from './codex/codex-backend.js';
-export { resolveBackend, type EnginePass, type EngineOverride, type EngineSource, type ResolvedEngine, type ResolveBackendArgs, } from './resolve.js';
+export { resolveBackend, formatEngineSource, formatEngineLog, type EnginePass, type EngineOverride, type EngineSource, type ResolvedEngine, type ResolveBackendArgs, } from './resolve.js';
 export { probeAllBackends, _resetAvailabilityCache, type BackendAvailabilityReport, } from './availability.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/backends/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/backends/index.ts"],"names":[],"mappings":"AA8BA,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,GACzB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,UAAU,EACV,UAAU,EACV,YAAY,EACZ,cAAc,GACf,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,OAAO,EACL,cAAc,EACd,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,kBAAkB,GACxB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,KAAK,yBAAyB,GAC/B,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/backends/index.ts"],"names":[],"mappings":"AA8BA,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,GACzB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,UAAU,EACV,UAAU,EACV,YAAY,EACZ,cAAc,GACf,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,kBAAkB,GACxB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,KAAK,yBAAyB,GAC/B,MAAM,mBAAmB,CAAC"}

package/dist/backends/index.js

@@ -27,6 +27,6 @@ registerBackend(codexBackend);
 export { DEFAULT_BACKEND_ID, registerBackend, getBackend, hasBackend, listBackends, _resetRegistry, } from './registry.js';
 export { claudeBackend } from './claude/claude-backend.js';
 export { codexBackend } from './codex/codex-backend.js';
-export { resolveBackend, } from './resolve.js';
+export { resolveBackend, formatEngineSource, formatEngineLog, } from './resolve.js';
 export { probeAllBackends, _resetAvailabilityCache, } from './availability.js';
 //# sourceMappingURL=index.js.map

package/dist/backends/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/backends/index.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,iEAAiE;AACjE,+DAA+D;AAC/D,0DAA0D;AAC1D,uEAAuE;AACvE,+DAA+D;AAC/D,6DAA6D;AAC7D,+DAA+D;AAC/D,4DAA4D;AAC5D,0DAA0D;AAC1D,oEAAoE;AACpE,gBAAgB;AAEhB;;;;;GAKG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,6EAA6E;AAC7E,8EAA8E;AAC9E,6DAA6D;AAC7D,eAAe,CAAC,aAAa,CAAC,CAAC;AAC/B,eAAe,CAAC,YAAY,CAAC,CAAC;AAS9B,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,UAAU,EACV,UAAU,EACV,YAAY,EACZ,cAAc,GACf,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,OAAO,EACL,cAAc,GAMf,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,gBAAgB,EAChB,uBAAuB,GAExB,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/backends/index.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,iEAAiE;AACjE,+DAA+D;AAC/D,0DAA0D;AAC1D,uEAAuE;AACvE,+DAA+D;AAC/D,6DAA6D;AAC7D,+DAA+D;AAC/D,4DAA4D;AAC5D,0DAA0D;AAC1D,oEAAoE;AACpE,gBAAgB;AAEhB;;;;;GAKG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,6EAA6E;AAC7E,8EAA8E;AAC9E,6DAA6D;AAC7D,eAAe,CAAC,aAAa,CAAC,CAAC;AAC/B,eAAe,CAAC,YAAY,CAAC,CAAC;AAS9B,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,UAAU,EACV,UAAU,EACV,YAAY,EACZ,cAAc,GACf,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,eAAe,GAMhB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,gBAAgB,EAChB,uBAAuB,GAExB,MAAM,mBAAmB,CAAC"}

package/dist/backends/resolve.d.ts

@@ -1,3 +1,4 @@
+import { type PassModelSource, type ResolvedPassModel } from '@telora/daemon-core';
 /** A spawn "pass" -- the coding vs review lineage. */
 export type EnginePass = 'coding' | 'review';
 /** Per-focus engine override: an engine id per pass; absent/null = inherit. */
@@ -10,6 +11,10 @@ export type EngineSource = 'focus-override' | 'stage-directive' | 'product-defau
 export interface ResolvedEngine {
     engineId: string;
     source: EngineSource;
+    /** Set only when source is 'model-implied': the model-ladder layer that selected it. */
+    modelLayer?: PassModelSource;
+    /** Set only when source is 'model-implied': the selected model that implied the engine. */
+    model?: string;
 }
 export interface ResolveBackendArgs {
     /** Per-focus override map (null/absent = inherit the stage/product/org default). */
@@ -27,18 +32,42 @@ export interface ResolveBackendArgs {
     /** Org-level default engine id (null/absent = the global default). */
     orgDefault?: string | null;
     /**
-     * The effective per-pass model resolved for this spawn (the five-layer
-     * precedence result). When NO engine is pinned by any layer (focus / stage /
-     * product / org), the engine is DERIVED from this model -- so an MCP-set
-     * gpt-5.6-terra review resolves to codex instead of the Claude default. Null =
-     * no model, no derivation. An explicitly-pinned engine always wins over it.
+     * The pass's resolved model AND the model-ladder layer it came from
+     * (`resolvePassModel`'s result). Its layer is compared against the engine
+     * ladder's layer by resolvePassEngine. Null/absent = no model selected; the
+     * engine ladder alone decides.
      */
-    resolvedModel?: string | null;
+    resolvedModel?: ResolvedPassModel | null;
+    /**
+     * The resolved workflow's builtin flag -- ranks a stage-directive engine pin
+     * (org-authored above the org default, builtin below it). Unknown = builtin.
+     */
+    workflowIsBuiltin?: boolean | null;
+    /**
+     * True when this pass selects a local model (focus local_model_overrides[pass]
+     * or the stage directive's localModel). Holds a codex ladder engine against
+     * the cloud model axis so local-model routing is unchanged.
+     */
+    localModelSelected?: boolean;
 }
 /**
  * Resolve the engine id (and its source) for a spawn pass. Pure + deterministic.
- * Precedence is single-sourced in `model-resolution.resolveEngineId`; this wraps
- * it with the never-spawn-on-an-unregistered-engine guard.
+ * Engine-ladder precedence is single-sourced in `model-resolution.resolveEngineId`
+ * and the cross-axis rule in daemon-core `resolvePassEngine`; this wraps them
+ * with the local-model hold and the never-spawn-on-an-unregistered-engine guard.
  */
 export declare function resolveBackend(args: ResolveBackendArgs): ResolvedEngine;
+/**
+ * The source label for the spawn engine log line. Names the winning layer: an
+ * engine-ladder result reads as its layer (`org-default`); a model-implied engine
+ * names the model-ladder layer and the model that selected it
+ * (`model-implied from org-default, model "gpt-5.6-sol"`). Pure.
+ */
+export declare function formatEngineSource(resolved: ResolvedEngine): string;
+/** The no-invisible-cascading spawn engine log line for a pass. Pure. */
+export declare function formatEngineLog(args: {
+    focusName: string;
+    enginePass: EnginePass;
+    resolvedEngine: ResolvedEngine;
+}): string;
 //# sourceMappingURL=resolve.d.ts.map

package/dist/backends/resolve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/backends/resolve.ts"],"names":[],"mappings":"AAsCA,sDAAsD;AACtD,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE7C,+EAA+E;AAC/E,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,2DAA2D;AAC3D,MAAM,MAAM,YAAY,GACpB,gBAAgB,GAChB,iBAAiB,GACjB,iBAAiB,GACjB,aAAa,GACb,eAAe,GACf,SAAS,GACT,UAAU,CAAC;AAEf,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,oFAAoF;IACpF,aAAa,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IACtC,8BAA8B;IAC9B,IAAI,EAAE,UAAU,CAAC;IACjB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,6EAA6E;IAC7E,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,kBAAkB,GAAG,cAAc,CA+BvE"}
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/backends/resolve.ts"],"names":[],"mappings":"AA+CA,OAAO,EAAqB,KAAK,eAAe,EAAE,KAAK,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAMtG,sDAAsD;AACtD,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE7C,+EAA+E;AAC/E,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,2DAA2D;AAC3D,MAAM,MAAM,YAAY,GACpB,gBAAgB,GAChB,iBAAiB,GACjB,iBAAiB,GACjB,aAAa,GACb,eAAe,GACf,SAAS,GACT,UAAU,CAAC;AAEf,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,wFAAwF;IACxF,UAAU,CAAC,EAAE,eAAe,CAAC;IAC7B,2FAA2F;IAC3F,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,oFAAoF;IACpF,aAAa,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IACtC,8BAA8B;IAC9B,IAAI,EAAE,UAAU,CAAC;IACjB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,6EAA6E;IAC7E,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACzC;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACnC;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,kBAAkB,GAAG,cAAc,CA+BvE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,CAKnE;AAED,yEAAyE;AACzE,wBAAgB,eAAe,CAAC,IAAI,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,UAAU,CAAC;IAAC,cAAc,EAAE,cAAc,CAAA;CAAE,GAAG,MAAM,CAG3H"}

package/dist/backends/resolve.js

@@ -5,63 +5,97 @@
  * Per-spawn engine resolution -- the single place the daemon decides WHICH
  * engine a spawn runs on.
  *
- * Selection is one knob (the engine) with a default + one override layer,
- * most-specific wins, resolution always logged (the no-invisible-cascading
- * principle). Mirrors the centralization of `shouldRunLoop()` in
- * focus-engine.ts: one exported pure function, no side effects, easy to test.
+ * A pass has two selection axes: the ENGINE ladder and the MODEL ladder. Both
+ * are resolved elsewhere and reconciled here, resolution always logged (the
+ * no-invisible-cascading principle). Mirrors the centralization of
+ * `shouldRunLoop()` in focus-engine.ts: one exported pure function, no side
+ * effects, easy to test.
  *
- * Resolution order for a pass (coding | review), most-specific wins:
+ * Engine ladder for a pass (coding | review), most-specific wins -- single-sourced
+ * in `model-resolution.resolveEngineId`:
  *   1. per-focus override for that pass   (focusOverride[pass], if a truthy id)
  *   2. workflow stage directive engine    (stageOverride, if a truthy id)
  *   3. per-product default                (productDefault, if a truthy id)
  *   4. org-level default                  (orgDefault, if a truthy id)
  *   5. the global default                 (DEFAULT_BACKEND_ID = 'claude')
  *
- * The Focus > Workflow head mirrors the cloud-model and local-model axes; the
- * precedence itself is single-sourced in `model-resolution.resolveEngineId`,
- * which this function wraps with the registered-backend guard. The engine axis
- * keeps the product -> org -> global tail the other two axes do not have.
+ * Cross-axis rule -- single-sourced in `@telora/daemon-core` resolvePassEngine: a
+ * selected model whose engine is known wins when its layer is AT LEAST AS
+ * SPECIFIC as the engine ladder's winning layer (focus-override >
+ * org-authored-stage > org-default > product-default > builtin-stage > default).
+ * So an org default gpt-5.6-sol review runs on codex even when the org or
+ * product default engine is claude, and a bare engine choice decides only when
+ * no model is selected at or above its layer. `isEngineAvailable` here is
+ * registration (hasBackend), not the install probe: a model-implied engine whose
+ * CLI is missing on this host fails its spawn loudly instead of silently running
+ * another model.
+ *
+ * Local-model hold: a pass that selects a LOCAL model (focus
+ * local_model_overrides[pass] / stage localModel) routes through codex. When the
+ * engine ladder already resolved codex for it, a cloud model (e.g. a Claude id on
+ * the focus) must not flip the engine back to claude and strand the local route,
+ * so the model axis is not consulted.
  *
  * Guard: a resolved id that is not a registered backend (typo, or an engine the
- * host lacks) falls back to the default rather than spawning on a bogus engine.
- * With no override and no org default, this returns 'claude' -- behavior parity.
+ * host lacks) falls back to the default rather than spawning on a bogus engine;
+ * a model-implied engine that is not registered is ignored (the ladder stands).
+ * With no override, no org default, and no model, this returns 'claude'.
  */
 import { DEFAULT_BACKEND_ID, hasBackend } from './registry.js';
 import { resolveEngineId } from '../shell/model-resolution.js';
-import { modelImpliesEngine } from '@telora/daemon-core';
+import { resolvePassEngine } from '@telora/daemon-core';
 import { createLogger } from '../shell/log.js';
 const log = createLogger({ module: 'engine' });
 /**
  * Resolve the engine id (and its source) for a spawn pass. Pure + deterministic.
- * Precedence is single-sourced in `model-resolution.resolveEngineId`; this wraps
- * it with the never-spawn-on-an-unregistered-engine guard.
+ * Engine-ladder precedence is single-sourced in `model-resolution.resolveEngineId`
+ * and the cross-axis rule in daemon-core `resolvePassEngine`; this wraps them
+ * with the local-model hold and the never-spawn-on-an-unregistered-engine guard.
  */
 export function resolveBackend(args) {
-    const { engineId: candidate, source } = resolveEngineId({
+    const ladder = resolveEngineId({
         focusOverrideEngine: args.focusOverride?.[args.pass],
         stageDirectiveEngine: args.stageOverride,
         productDefault: args.productDefault,
         orgDefault: args.orgDefault,
         globalDefault: DEFAULT_BACKEND_ID,
     });
-    // Derive the engine from the resolved model ONLY when no layer pinned an
-    // engine (source 'default' => globalDefault). A model that implies a
-    // registered engine wins over the bare global default, so a focus/org/stage
-    // that selects gpt-5.6-terra with no engine override runs on codex. An
-    // explicitly-pinned engine (any non-'default' source) is untouched -- this
-    // preserves engine behavior for an org that set default_coding_engine.
-    if (source === 'default' && args.resolvedModel) {
-        const implied = modelImpliesEngine(args.resolvedModel);
-        if (implied && hasBackend(implied)) {
-            return { engineId: implied, source: 'model-implied' };
+    const localModelHoldsCodex = args.localModelSelected === true && ladder.engineId === 'codex';
+    if (args.resolvedModel && !localModelHoldsCodex) {
+        const decided = resolvePassEngine({
+            model: args.resolvedModel,
+            engine: ladder,
+            workflowIsBuiltin: args.workflowIsBuiltin,
+            isEngineAvailable: hasBackend,
+        });
+        if (decided.source === 'model-implied') {
+            return { engineId: decided.engineId, source: 'model-implied', modelLayer: decided.layer, model: decided.model };
         }
     }
     // Never spawn on an unregistered engine -- fall back to the global default.
-    if (!hasBackend(candidate) && candidate !== DEFAULT_BACKEND_ID) {
-        log.warn(`[engine] Resolved engine "${candidate}" (source: ${source}) is not a registered backend; ` +
+    if (!hasBackend(ladder.engineId) && ladder.engineId !== DEFAULT_BACKEND_ID) {
+        log.warn(`[engine] Resolved engine "${ladder.engineId}" (source: ${ladder.source}) is not a registered backend; ` +
             `falling back to "${DEFAULT_BACKEND_ID}".`);
         return { engineId: DEFAULT_BACKEND_ID, source: 'fallback' };
     }
-    return { engineId: candidate, source };
+    return { engineId: ladder.engineId, source: ladder.source };
+}
+/**
+ * The source label for the spawn engine log line. Names the winning layer: an
+ * engine-ladder result reads as its layer (`org-default`); a model-implied engine
+ * names the model-ladder layer and the model that selected it
+ * (`model-implied from org-default, model "gpt-5.6-sol"`). Pure.
+ */
+export function formatEngineSource(resolved) {
+    if (resolved.source !== 'model-implied')
+        return resolved.source;
+    const layer = resolved.modelLayer ? ` from ${resolved.modelLayer}` : '';
+    const model = resolved.model ? `, model "${resolved.model}"` : '';
+    return `model-implied${layer}${model}`;
+}
+/** The no-invisible-cascading spawn engine log line for a pass. Pure. */
+export function formatEngineLog(args) {
+    return `[focus-executor] Engine for "${args.focusName}" pass=${args.enginePass}: ` +
+        `${args.resolvedEngine.engineId} (source: ${formatEngineSource(args.resolvedEngine)})`;
 }
 //# sourceMappingURL=resolve.js.map

package/dist/backends/resolve.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../src/backends/resolve.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,0FAA0F;AAC1F,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;AAoD/C;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAwB;IACrD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC;QACtD,mBAAmB,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;QACpD,oBAAoB,EAAE,IAAI,CAAC,aAAa;QACxC,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,aAAa,EAAE,kBAAkB;KAClC,CAAC,CAAC;IAEH,yEAAyE;IACzE,qEAAqE;IACrE,4EAA4E;IAC5E,uEAAuE;IACvE,2EAA2E;IAC3E,uEAAuE;IACvE,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACvD,IAAI,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QACxD,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,SAAS,KAAK,kBAAkB,EAAE,CAAC;QAC/D,GAAG,CAAC,IAAI,CACN,6BAA6B,SAAS,cAAc,MAAM,iCAAiC;YAC3F,oBAAoB,kBAAkB,IAAI,CAC3C,CAAC;QACF,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC9D,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AACzC,CAAC"}
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../src/backends/resolve.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,0FAA0F;AAC1F,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAgD,MAAM,qBAAqB,CAAC;AACtG,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;AAkE/C;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAwB;IACrD,MAAM,MAAM,GAAG,eAAe,CAAC;QAC7B,mBAAmB,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;QACpD,oBAAoB,EAAE,IAAI,CAAC,aAAa;QACxC,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,aAAa,EAAE,kBAAkB;KAClC,CAAC,CAAC;IAEH,MAAM,oBAAoB,GAAG,IAAI,CAAC,kBAAkB,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC7F,IAAI,IAAI,CAAC,aAAa,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,iBAAiB,CAAC;YAChC,KAAK,EAAE,IAAI,CAAC,aAAa;YACzB,MAAM,EAAE,MAAM;YACd,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,iBAAiB,EAAE,UAAU;SAC9B,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;YACvC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAClH,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,kBAAkB,EAAE,CAAC;QAC3E,GAAG,CAAC,IAAI,CACN,6BAA6B,MAAM,CAAC,QAAQ,cAAc,MAAM,CAAC,MAAM,iCAAiC;YACxG,oBAAoB,kBAAkB,IAAI,CAC3C,CAAC;QACF,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC9D,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;AAC9D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAwB;IACzD,IAAI,QAAQ,CAAC,MAAM,KAAK,eAAe;QAAE,OAAO,QAAQ,CAAC,MAAM,CAAC;IAChE,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,OAAO,gBAAgB,KAAK,GAAG,KAAK,EAAE,CAAC;AACzC,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,eAAe,CAAC,IAAmF;IACjH,OAAO,gCAAgC,IAAI,CAAC,SAAS,UAAU,IAAI,CAAC,UAAU,IAAI;QAChF,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,aAAa,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC;AAC3F,CAAC"}

package/dist/ci/ci-escalation.d.ts

@@ -1,3 +1,5 @@
+import { createEscalation } from '../queries/escalations.js';
+import { NO_HUMAN_ACT, type HumanAct } from '../queries/filing-observation.js';
 export declare const CD_PUSH_FAILED_KIND = "cd_push_failed";
 /**
  * Returns true when a CD push escalation should be filed for `result`.
@@ -15,6 +17,18 @@ export declare function shouldFileCdPushEscalation(pushToRemote: boolean, result
     success: boolean;
     error?: string;
 }): boolean;
+/**
+ * Pure: the act only a human can perform for a CD push failure, or NO_HUMAN_ACT.
+ *
+ * Branch protection, the daemon host's git credential, and the host checkout's
+ * remote configuration all live outside the repo and outside any agent session,
+ * so each names a specific act. Every other push failure (non-fast-forward, a
+ * network blip, an unrecognized error) is retry / rebase work the machine owns:
+ * NO_HUMAN_ACT, so the filing chokepoint files it as an observation. Policy is
+ * checked before auth because a protection refusal commonly also prints
+ * "Permission denied".
+ */
+export declare function cdPushHumanAct(pushError: string): HumanAct | typeof NO_HUMAN_ACT;
 export interface CdPushEscalationParams {
     organizationId: string;
     sessionId: string;
@@ -27,5 +41,7 @@ export interface CdPushEscalationParams {
  * File a `cd_push_failed` escalation. Best-effort — swallow the failure
  * so the caller's finally/cleanup path isn't disrupted by a logging hiccup.
  */
-export declare function fileCdPushEscalation(params: CdPushEscalationParams): Promise<void>;
+export declare function fileCdPushEscalation(params: CdPushEscalationParams, deps?: {
+    createEscalation: typeof createEscalation;
+}): Promise<void>;
 //# sourceMappingURL=ci-escalation.d.ts.map

package/dist/ci/ci-escalation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ci-escalation.d.ts","sourceRoot":"","sources":["../../src/ci/ci-escalation.ts"],"names":[],"mappings":"AAoBA,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AAEpD;;;;;;;;;;;GAWG;AACH,wBAAgB,0BAA0B,CACxC,YAAY,EAAE,OAAO,EACrB,MAAM,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3C,OAAO,CAET;AAED,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,sBAAsB,GAC7B,OAAO,CAAC,IAAI,CAAC,CAoCf"}
+{"version":3,"file":"ci-escalation.d.ts","sourceRoot":"","sources":["../../src/ci/ci-escalation.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,KAAK,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAM/E,eAAO,MAAM,mBAAmB,mBAAmB,CAAC;AAEpD;;;;;;;;;;;GAWG;AACH,wBAAgB,0BAA0B,CACxC,YAAY,EAAE,OAAO,EACrB,MAAM,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3C,OAAO,CAET;AAaD;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,QAAQ,GAAG,OAAO,YAAY,CA0BhF;AAED,MAAM,WAAW,sBAAsB;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,sBAAsB,EAC9B,IAAI,GAAE;IAAE,gBAAgB,EAAE,OAAO,gBAAgB,CAAA;CAAyB,GACzE,OAAO,CAAC,IAAI,CAAC,CAsCf"}

package/dist/ci/ci-escalation.js

@@ -8,9 +8,14 @@
  * the push fails for any reason — no remote configured, auth failure,
  * non-fast-forward, network — the failure must surface as a visible
  * escalation rather than disappearing into the log.
+ *
+ * Routing: the filing reaches a human only when the push error names an act no
+ * agent session can perform (cdPushHumanAct). Otherwise it is filed as an
+ * observation the machine owns (see queries/filing-observation.ts).
  */
 import { ESCALATION_REASONS, ESCALATION_DISPOSITIONS } from '@telora/daemon-core';
 import { createEscalation } from '../queries/escalations.js';
+import { NO_HUMAN_ACT } from '../queries/filing-observation.js';
 import { createLogger } from '../shell/log.js';
 const log = createLogger({ module: 'CD' });
 export const CD_PUSH_FAILED_KIND = 'cd_push_failed';
@@ -29,20 +34,63 @@ export const CD_PUSH_FAILED_KIND = 'cd_push_failed';
 export function shouldFileCdPushEscalation(pushToRemote, result) {
     return pushToRemote && !result.success && !!result.error && /push/i.test(result.error);
 }
+/** The remote refused the push by POLICY (branch protection / a server-side hook). */
+const PUSH_REFUSED_BY_POLICY_RE = /protected branch|branch \S+ is protected|branch protection|GH006|pre-receive hook declined|not allowed to push/i;
+/** The remote refused the push by IDENTITY (the daemon host's credential). */
+const PUSH_REFUSED_BY_AUTH_RE = /permission denied|authentication failed|could not read (?:username|password)|access denied|publickey|invalid credentials|not authorized|\b40[13]\b/i;
+/** There is no remote to push to at all. */
+const PUSH_NO_REMOTE_RE = /no origin remote configured/i;
+/**
+ * Pure: the act only a human can perform for a CD push failure, or NO_HUMAN_ACT.
+ *
+ * Branch protection, the daemon host's git credential, and the host checkout's
+ * remote configuration all live outside the repo and outside any agent session,
+ * so each names a specific act. Every other push failure (non-fast-forward, a
+ * network blip, an unrecognized error) is retry / rebase work the machine owns:
+ * NO_HUMAN_ACT, so the filing chokepoint files it as an observation. Policy is
+ * checked before auth because a protection refusal commonly also prints
+ * "Permission denied".
+ */
+export function cdPushHumanAct(pushError) {
+    if (PUSH_REFUSED_BY_POLICY_RE.test(pushError)) {
+        return {
+            kind: 'unreachable_capability',
+            act: "Allow the daemon's CD push to main through the remote's branch protection " +
+                '(or turn off cd.enabled for this product) -- the remote refused the push by policy.',
+        };
+    }
+    if (PUSH_REFUSED_BY_AUTH_RE.test(pushError)) {
+        return {
+            kind: 'unreachable_capability',
+            act: "Grant the daemon host's git credential push access to main on the remote -- " +
+                'the push was rejected as unauthenticated or unauthorized.',
+        };
+    }
+    if (PUSH_NO_REMOTE_RE.test(pushError)) {
+        return {
+            kind: 'unreachable_capability',
+            act: "Configure an origin remote for this repository's checkout on the daemon host " +
+                '(or turn off cd.enabled for this product) -- CD has no remote to push to.',
+        };
+    }
+    return NO_HUMAN_ACT;
+}
 /**
  * File a `cd_push_failed` escalation. Best-effort — swallow the failure
  * so the caller's finally/cleanup path isn't disrupted by a logging hiccup.
  */
-export async function fileCdPushEscalation(params) {
+export async function fileCdPushEscalation(params, deps = { createEscalation }) {
     const { organizationId, sessionId, focusId, focusName, integrationBranch, pushError } = params;
     try {
-        await createEscalation({
+        await deps.createEscalation({
             organizationId,
             sessionId,
             issueId: null,
             reasonType: ESCALATION_REASONS.ERROR_ENCOUNTERED,
-            // Operator triage: auth / branch protection / network at the remote.
             disposition: ESCALATION_DISPOSITIONS.NEEDS_OPERATOR,
+            // A named act only for a remote-policy / credential / remote-config refusal;
+            // any other push failure is machine retry work (observation).
+            humanAct: cdPushHumanAct(pushError),
             anchor: { focusId, branch: integrationBranch },
             description: `CD push to remote failed after merging ${integrationBranch} into main.\n\n` +
                 `**Focus:** ${focusName}\n` +

package/dist/ci/ci-escalation.js.map

@@ -1 +1 @@
-{"version":3,"file":"ci-escalation.js","sourceRoot":"","sources":["../../src/ci/ci-escalation.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,0DAA0D;AAC1D,gBAAgB;AAEhB;;;;;;;GAOG;AAEH,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAG3C,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AAEpD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,0BAA0B,CACxC,YAAqB,EACrB,MAA4C;IAE5C,OAAO,YAAY,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzF,CAAC;AAWD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAA8B;IAE9B,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAC/F,IAAI,CAAC;QACH,MAAM,gBAAgB,CAAC;YACrB,cAAc;YACd,SAAS;YACT,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,kBAAkB,CAAC,iBAAiB;YAChD,qEAAqE;YACrE,WAAW,EAAE,uBAAuB,CAAC,cAAc;YACnD,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE;YAC9C,WAAW,EACT,0CAA0C,iBAAiB,iBAAiB;gBAC5E,cAAc,SAAS,IAAI;gBAC3B,iBAAiB,OAAO,IAAI;gBAC5B,cAAc,SAAS,MAAM;gBAC7B,oFAAoF;gBACpF,6DAA6D;YAC/D,YAAY,EAAE,+CAA+C;YAC7D,UAAU,EACR,uEAAuE;gBACvE,0DAA0D;YAC5D,cAAc,EAAE,mBAAmB;YACnC,2EAA2E;YAC3E,QAAQ,EAAE;gBACR,kBAAkB,EAAE,iBAAiB;gBACrC,UAAU,EAAE,SAAS;aACtB;SACF,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,6CAA6C,OAAO,MAAM,SAAS,IAAI,CAAC,CAAC;IACpF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CACN,2DAA2D,OAAO,GAAG,EACpE,GAAa,CAAC,OAAO,CACvB,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"ci-escalation.js","sourceRoot":"","sources":["../../src/ci/ci-escalation.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,0DAA0D;AAC1D,gBAAgB;AAEhB;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAiB,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAG3C,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AAEpD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,0BAA0B,CACxC,YAAqB,EACrB,MAA4C;IAE5C,OAAO,YAAY,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzF,CAAC;AAED,sFAAsF;AACtF,MAAM,yBAAyB,GAC7B,iHAAiH,CAAC;AAEpH,8EAA8E;AAC9E,MAAM,uBAAuB,GAC3B,qJAAqJ,CAAC;AAExJ,4CAA4C;AAC5C,MAAM,iBAAiB,GAAG,8BAA8B,CAAC;AAEzD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,IAAI,yBAAyB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9C,OAAO;YACL,IAAI,EAAE,wBAAwB;YAC9B,GAAG,EACD,4EAA4E;gBAC5E,qFAAqF;SACxF,CAAC;IACJ,CAAC;IACD,IAAI,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5C,OAAO;YACL,IAAI,EAAE,wBAAwB;YAC9B,GAAG,EACD,8EAA8E;gBAC9E,2DAA2D;SAC9D,CAAC;IACJ,CAAC;IACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,OAAO;YACL,IAAI,EAAE,wBAAwB;YAC9B,GAAG,EACD,+EAA+E;gBAC/E,2EAA2E;SAC9E,CAAC;IACJ,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAWD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAA8B,EAC9B,OAAsD,EAAE,gBAAgB,EAAE;IAE1E,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAC/F,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,gBAAgB,CAAC;YAC1B,cAAc;YACd,SAAS;YACT,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,kBAAkB,CAAC,iBAAiB;YAChD,WAAW,EAAE,uBAAuB,CAAC,cAAc;YACnD,6EAA6E;YAC7E,8DAA8D;YAC9D,QAAQ,EAAE,cAAc,CAAC,SAAS,CAAC;YACnC,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE;YAC9C,WAAW,EACT,0CAA0C,iBAAiB,iBAAiB;gBAC5E,cAAc,SAAS,IAAI;gBAC3B,iBAAiB,OAAO,IAAI;gBAC5B,cAAc,SAAS,MAAM;gBAC7B,oFAAoF;gBACpF,6DAA6D;YAC/D,YAAY,EAAE,+CAA+C;YAC7D,UAAU,EACR,uEAAuE;gBACvE,0DAA0D;YAC5D,cAAc,EAAE,mBAAmB;YACnC,2EAA2E;YAC3E,QAAQ,EAAE;gBACR,kBAAkB,EAAE,iBAAiB;gBACrC,UAAU,EAAE,SAAS;aACtB;SACF,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,6CAA6C,OAAO,MAAM,SAAS,IAAI,CAAC,CAAC;IACpF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CACN,2DAA2D,OAAO,GAAG,EACpE,GAAa,CAAC,OAAO,CACvB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/ci/ci-red-attribution.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Attribution of a red integration run to the focus (and delivery) whose merge
+ * INTRODUCED the red tip -- or to nobody, when that cannot be determined.
+ *
+ * The red run's anchor is what the ci_run_red filing routes to and what the
+ * incident reducer groups it under, so a WRONG anchor is worse than none: it
+ * rides the fix into an unrelated focus's coding pass and correlates the red
+ * with that focus's unrelated symptoms. Hence the rule: attribute only when the
+ * tip's introduced work resolves to exactly ONE focus; otherwise return the
+ * unattributed anchor and let the caller file branch-only. There is no "any
+ * active focus" fallback -- that fallback was a guess.
+ *
+ * Which commits did the tip introduce? For a non-merge tip, the tip itself (its
+ * own `Telora-Delivery` trailer). For a MERGE tip, the commits reachable from the
+ * tip and not from its INTEGRATION-SIDE parent. Git records the branch a merge was
+ * made ON as the first parent, and integration receives merges in two shapes:
+ *   - a merge made ON integration (mergeToIntegration's `--no-ff` "Merge agent
+ *     work", the main->integration sync): ^1 is integration, the work is ^2's side.
+ *   - a MERGE-BACK made on a focus branch (`git merge origin/integration`) that
+ *     integration then FAST-FORWARDED to (mergeToIntegration tries `--ff-only`
+ *     first): ^1 is the FOCUS branch, ^2 is the old integration tip, and the work
+ *     is ^1's side.
+ * The merge-back shape is the common one (38 of 43 merge tips on integration from
+ * 2026-08-20 to 2026-09-12), and the former resolver walked `^1...tip` for it --
+ * i.e. the OTHER foci's integration commits the focus had just merged back -- so
+ * a red run was attributed to whichever focus last merged before the one that
+ * turned it red (e.g. tip d58280129 resolved to the migration-gate focus's
+ * 094e94351 instead of its own 4cf454a73). The merge-back shape is recognized by
+ * git's default merge subject naming the integration branch as the merged-in ref.
+ *
+ * Best-effort: any git/DB failure degrades to the unattributed anchor, never throws.
+ *
+ * @module ci-red-attribution
+ */
+import type { DaemonConfig } from '../types/index.js';
+/** The anchor a red integration run is filed against. Both null = branch-only. */
+export interface CiRedRunAnchor {
+    focusId: string | null;
+    /** Set only when the introduced work of the attributed focus is ONE delivery. */
+    deliveryId: string | null;
+}
+/** The branch-only anchor: the red run could not be attributed to one focus. */
+export declare const UNATTRIBUTED_RED_RUN: Readonly<CiRedRunAnchor>;
+/** Injected IO for red-run attribution: git reads + the delivery->focus DB lookup. */
+export interface RedRunAttributionDeps {
+    /** The commit's raw `Telora-Delivery` trailer value ('' when absent). */
+    readTrailer: (repoPath: string, sha: string) => string;
+    /** The commit's parent shas, in order (empty on failure). */
+    readParents: (repoPath: string, sha: string) => string[];
+    /** The commit's subject line ('' on failure). */
+    readSubject: (repoPath: string, sha: string) => string;
+    /** `git rev-list <range>` (empty on failure). */
+    listCommits: (repoPath: string, range: string) => string[];
+    /** delivery id -> owning focus id (null when unknown). */
+    focusForDelivery: (deliveryId: string) => Promise<string | null>;
+}
+export declare function readCommitParents(repoPath: string, sha: string): string[];
+export declare function readCommitSubject(repoPath: string, sha: string): string;
+/**
+ * Whether a merge commit's subject is git's default message for merging the
+ * INTEGRATION branch in (`Merge branch 'integration' ...` / `Merge
+ * remote-tracking branch 'origin/integration' ...`) -- the merge-back shape,
+ * whose SECOND parent is the integration side. PURE.
+ */
+export declare function mergedInIntegration(subject: string, integrationBranch: string): boolean;
+/**
+ * The integration-side parent of a merge tip: ^2 for a merge-back that integration
+ * fast-forwarded to, ^1 otherwise. Null for a non-merge. PURE.
+ */
+export declare function integrationSideParent(parents: readonly string[], subject: string, integrationBranch: string): string | null;
+/**
+ * Decide the anchor from the deliveries the tip introduced (delivery -> owning
+ * focus, null when unknown). Exactly one focus -> that focus, plus the delivery
+ * when it is the only one of that focus; zero or several foci -> unattributed.
+ * A delivery whose focus is unknown is ignored rather than guessed at. PURE.
+ */
+export declare function decideRedRunAnchor(focusByDelivery: ReadonlyMap<string, string | null>): CiRedRunAnchor;
+/**
+ * Resolve the anchor for a red run on `sha` (the integration tip). Order: (1) the
+ * tip's own trailer; (2) for a merge tip, the deliveries of the commits it
+ * introduced relative to its integration-side parent. Unattributable -> the
+ * branch-only anchor (never a fallback focus).
+ */
+export declare function resolveRedRunAnchor(config: DaemonConfig, sha: string, deps?: RedRunAttributionDeps): Promise<CiRedRunAnchor>;
+//# sourceMappingURL=ci-red-attribution.d.ts.map

package/dist/ci/ci-red-attribution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-red-attribution.d.ts","sourceRoot":"","sources":["../../src/ci/ci-red-attribution.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAQtD,kFAAkF;AAClF,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,iFAAiF;IACjF,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,gFAAgF;AAChF,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,cAAc,CAAsD,CAAC;AAEjH,sFAAsF;AACtF,MAAM,WAAW,qBAAqB;IACpC,yEAAyE;IACzE,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;IACvD,6DAA6D;IAC7D,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;IACzD,iDAAiD;IACjD,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;IACvD,iDAAiD;IACjD,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;IAC3D,0DAA0D;IAC1D,gBAAgB,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAClE;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAIzE;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAGvE;AAsBD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,GAAG,OAAO,CAKvF;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,OAAO,EAAE,MAAM,EACf,iBAAiB,EAAE,MAAM,GACxB,MAAM,GAAG,IAAI,CAGf;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,GAAG,cAAc,CAQtG;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,qBAAmC,GACxC,OAAO,CAAC,cAAc,CAAC,CAwBzB"}

package/dist/ci/ci-red-attribution.js

@@ -0,0 +1,108 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/ci/ci-owning-focus-resolve.test.ts
+// PINNED-BY-END
+import { runGitSync } from '../git/exec.js';
+import { getDeliveryContext } from '../queries/deliveries.js';
+import { readDeliveryTrailer, listRangeCommits } from '../resolvers/shared/git-diff.js';
+import { createLogger } from '../shell/log.js';
+const log = createLogger({ module: 'ci-red-attribution' });
+/** The branch-only anchor: the red run could not be attributed to one focus. */
+export const UNATTRIBUTED_RED_RUN = Object.freeze({ focusId: null, deliveryId: null });
+export function readCommitParents(repoPath, sha) {
+    const result = runGitSync(['rev-list', '--parents', '-n', '1', `${sha}^{commit}`], repoPath);
+    if (!result.success)
+        return [];
+    return result.output.trim().split(/\s+/).filter((p) => p !== '').slice(1);
+}
+export function readCommitSubject(repoPath, sha) {
+    const result = runGitSync(['show', '-s', '--format=%s', `${sha}^{commit}`], repoPath);
+    return result.success ? result.output.trim() : '';
+}
+const defaultDeps = {
+    readTrailer: readDeliveryTrailer,
+    readParents: readCommitParents,
+    readSubject: readCommitSubject,
+    listCommits: listRangeCommits,
+    focusForDelivery: async (deliveryId) => (await getDeliveryContext(deliveryId))?.focus?.id ?? null,
+};
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+/** A trailer value that names a delivery (the `none` sentinel and junk do not). */
+function asDeliveryId(trailer) {
+    const value = trailer.trim();
+    return UUID_RE.test(value) ? value : null;
+}
+function escapeRegExp(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+/**
+ * Whether a merge commit's subject is git's default message for merging the
+ * INTEGRATION branch in (`Merge branch 'integration' ...` / `Merge
+ * remote-tracking branch 'origin/integration' ...`) -- the merge-back shape,
+ * whose SECOND parent is the integration side. PURE.
+ */
+export function mergedInIntegration(subject, integrationBranch) {
+    const branch = escapeRegExp(integrationBranch);
+    // The ref prefix is a REMOTE name, so it is allowed only in the remote-tracking
+    // form; a local `Merge branch 'agent/integration'` is some other branch.
+    return new RegExp(`^Merge (?:remote-tracking branch '[^'/]+/${branch}'|branch '${branch}')`).test(subject);
+}
+/**
+ * The integration-side parent of a merge tip: ^2 for a merge-back that integration
+ * fast-forwarded to, ^1 otherwise. Null for a non-merge. PURE.
+ */
+export function integrationSideParent(parents, subject, integrationBranch) {
+    if (parents.length < 2)
+        return null;
+    return (mergedInIntegration(subject, integrationBranch) ? parents[1] : parents[0]) ?? null;
+}
+/**
+ * Decide the anchor from the deliveries the tip introduced (delivery -> owning
+ * focus, null when unknown). Exactly one focus -> that focus, plus the delivery
+ * when it is the only one of that focus; zero or several foci -> unattributed.
+ * A delivery whose focus is unknown is ignored rather than guessed at. PURE.
+ */
+export function decideRedRunAnchor(focusByDelivery) {
+    const foci = new Set();
+    for (const focusId of focusByDelivery.values())
+        if (focusId)
+            foci.add(focusId);
+    if (foci.size !== 1)
+        return { ...UNATTRIBUTED_RED_RUN };
+    const [focusId] = [...foci];
+    if (!focusId)
+        return { ...UNATTRIBUTED_RED_RUN };
+    const deliveries = [...focusByDelivery].filter(([, f]) => f === focusId).map(([d]) => d);
+    return { focusId, deliveryId: deliveries.length === 1 ? (deliveries[0] ?? null) : null };
+}
+/**
+ * Resolve the anchor for a red run on `sha` (the integration tip). Order: (1) the
+ * tip's own trailer; (2) for a merge tip, the deliveries of the commits it
+ * introduced relative to its integration-side parent. Unattributable -> the
+ * branch-only anchor (never a fallback focus).
+ */
+export async function resolveRedRunAnchor(config, sha, deps = defaultDeps) {
+    try {
+        const own = asDeliveryId(deps.readTrailer(config.repoPath, sha));
+        if (own) {
+            const focusId = await deps.focusForDelivery(own);
+            if (focusId)
+                return { focusId, deliveryId: own };
+        }
+        const base = integrationSideParent(deps.readParents(config.repoPath, sha), deps.readSubject(config.repoPath, sha), config.integrationBranch);
+        if (!base)
+            return { ...UNATTRIBUTED_RED_RUN };
+        const focusByDelivery = new Map();
+        for (const commit of deps.listCommits(config.repoPath, `${base}..${sha}`)) {
+            const deliveryId = asDeliveryId(deps.readTrailer(config.repoPath, commit));
+            if (!deliveryId || focusByDelivery.has(deliveryId))
+                continue;
+            focusByDelivery.set(deliveryId, await deps.focusForDelivery(deliveryId));
+        }
+        return decideRedRunAnchor(focusByDelivery);
+    }
+    catch (err) {
+        log.debug(`red-run attribution failed for ${sha.slice(0, 12)}: ${err.message}`);
+        return { ...UNATTRIBUTED_RED_RUN };
+    }
+}
+//# sourceMappingURL=ci-red-attribution.js.map

package/dist/ci/ci-red-attribution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ci-red-attribution.js","sourceRoot":"","sources":["../../src/ci/ci-red-attribution.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,oEAAoE;AACpE,gBAAgB;AAsChB,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACxF,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;AAS3D,gFAAgF;AAChF,MAAM,CAAC,MAAM,oBAAoB,GAA6B,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;AAgBjH,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,GAAW;IAC7D,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,GAAG,WAAW,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC7F,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,GAAW;IAC7D,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,GAAG,WAAW,CAAC,EAAE,QAAQ,CAAC,CAAC;IACtF,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,WAAW,GAA0B;IACzC,WAAW,EAAE,mBAAmB;IAChC,WAAW,EAAE,iBAAiB;IAC9B,WAAW,EAAE,iBAAiB;IAC9B,WAAW,EAAE,gBAAgB;IAC7B,gBAAgB,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,IAAI;CAClG,CAAC;AAEF,MAAM,OAAO,GAAG,iEAAiE,CAAC;AAElF,mFAAmF;AACnF,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,iBAAyB;IAC5E,MAAM,MAAM,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC;IAC/C,gFAAgF;IAChF,yEAAyE;IACzE,OAAO,IAAI,MAAM,CAAC,4CAA4C,MAAM,aAAa,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC7G,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAA0B,EAC1B,OAAe,EACf,iBAAyB;IAEzB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,CAAC,mBAAmB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC7F,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,eAAmD;IACpF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,OAAO,IAAI,eAAe,CAAC,MAAM,EAAE;QAAE,IAAI,OAAO;YAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/E,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,GAAG,oBAAoB,EAAE,CAAC;IACxD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,GAAG,oBAAoB,EAAE,CAAC;IACjD,MAAM,UAAU,GAAG,CAAC,GAAG,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACzF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3F,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAoB,EACpB,GAAW,EACX,OAA8B,WAAW;IAEzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;QACjE,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACjD,IAAI,OAAO;gBAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;QACnD,CAAC;QACD,MAAM,IAAI,GAAG,qBAAqB,CAChC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,EACtC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,EACtC,MAAM,CAAC,iBAAiB,CACzB,CAAC;QACF,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,GAAG,oBAAoB,EAAE,CAAC;QAC9C,MAAM,eAAe,GAAG,IAAI,GAAG,EAAyB,CAAC;QACzD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,IAAI,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC;YAC1E,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;YAC3E,IAAI,CAAC,UAAU,IAAI,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC;gBAAE,SAAS;YAC7D,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,kBAAkB,CAAC,eAAe,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CAAC,kCAAkC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3F,OAAO,EAAE,GAAG,oBAAoB,EAAE,CAAC;IACrC,CAAC;AACH,CAAC"}