@telora/daemon 0.23.1 → 0.23.5

package/dist/tower/tower-admission.d.ts

@@ -0,0 +1,91 @@
+/**
+ * Spawn admission through the tower: what the spawn passes ask before they
+ * start a coding or review team for an armed focus.
+ *
+ * THE RULE (docs/runbook-tower.md):
+ *   off      -- the tower is not consulted; spawning is exactly as before it.
+ *   observe  -- the verdict is read and never obeyed; a spawn decision enforce
+ *               would have made differently is LOGGED (focus, verdict, the
+ *               decision taken), so an operator judges the verdicts on real
+ *               foci before enforcing.
+ *   enforce  -- a holding verdict that is FRESH holds the spawn.
+ *
+ * FAIL OPEN. Only an available, holding verdict ever holds, and only while
+ * this daemon's tower pass for the focus's product is standing
+ * (tower-pass-standing.ts): a pass that failed, or has not yet succeeded,
+ * leaves every verdict of that product unobeyed at once. A verdict that is
+ * missing, malformed, older than the bounded age or written under an earlier
+ * arm is no verdict (daemon-core readTowerVerdict). Either way the focus
+ * spawns as it would with the tower off, and the daemon says so. Admission fails open while
+ * the merge gates fail closed because the failures are not symmetric: a wrongly
+ * blocked merge is visible (a held delivery, a red gate), a wrongly held spawn
+ * is SILENT (a focus that simply never runs).
+ *
+ * The decision is pure (decideTowerAdmission); noteTowerAdmission logs it and
+ * records the focus's spawn intent once the spawn gate's final action is known.
+ */
+import { type TowerMode, type TowerVerdictReading } from '@telora/daemon-core';
+import { type SpawnIntentSource } from './tower-spawn-intent.js';
+import type { TowerPassStanding } from './tower-pass-standing.js';
+/** The focus row fields admission reads (ready and active focus rows both carry them). */
+export interface TowerAdmissionFocus {
+    focus_id: string;
+    focus_name: string;
+    product_id?: string | null;
+    agent_assigned_at?: string | null;
+    tower_verdict?: unknown;
+}
+export interface TowerAdmission {
+    mode: TowerMode;
+    /** The spawn is held (enforce + an available holding verdict). */
+    holds: boolean;
+    /** What enforce would do with this verdict: hold. */
+    enforceWouldHold: boolean;
+    /** The verdict as read; null in off mode (the tower is not consulted). */
+    reading: TowerVerdictReading | null;
+    /** The product's pass is not standing: every verdict is unobeyed (fail open). Null when it stands. */
+    passNotStanding: Exclude<TowerPassStanding, 'ok'> | null;
+}
+/** What admission reads of the tower each pass (the spawn passes' deps; composition/spawn-pass-deps.ts). */
+export interface TowerAdmissionDeps {
+    /** TELORA_TOWER_MODE. */
+    mode: () => TowerMode;
+    /** This daemon's pass standing for a product (tower-pass-standing.ts). */
+    passStanding: (productId: string | null | undefined) => TowerPassStanding;
+}
+export declare function decideTowerAdmission(focus: TowerAdmissionFocus, tower: TowerAdmissionDeps, nowMs: number): TowerAdmission;
+/** The outcome the spawn gate reached for a focus, after the tower was consulted. */
+export type TowerGateOutcome = 'spawn' | 'tower_hold' | 'capacity' | 'not_wanting';
+/** The line a decision produces, or null when it is not worth a line. Exported for tests. */
+export declare function towerAdmissionMessage(focus: TowerAdmissionFocus, admission: TowerAdmission, outcome: TowerGateOutcome): string | null;
+/**
+ * Log the admission (once per distinct line) and record the focus's spawn
+ * intent for the tower's next pass. Never throws: admission bookkeeping must
+ * not cost a spawn.
+ */
+export declare function noteTowerAdmission(focus: TowerAdmissionFocus, admission: TowerAdmission, outcome: TowerGateOutcome, nowMs?: number, source?: SpawnIntentSource): void;
+/**
+ * The order the spawn pass offers ready foci to the host governor: in enforce,
+ * focus rank order (lowest priority_rank first, stable); otherwise the order the
+ * API returned them, exactly as before the tower.
+ */
+export declare function orderForTower<T extends {
+    priority_rank?: number | null;
+}>(foci: readonly T[], mode: TowerMode): T[];
+/**
+ * A spawn pass's offer: opens the pass's demand record over every focus it
+ * offers (tower-spawn-intent.ts beginSpawnIntentPass -- a focus some earlier
+ * gate stops is committed as not wanting) and returns them in orderForTower's
+ * order. The pass's runner commits it (focus/focus-poller-spawn.ts).
+ */
+export declare function offerForTower<T extends {
+    priority_rank?: number | null;
+}>(source: SpawnIntentSource, foci: readonly T[], idOf: (f: T) => string, mode: TowerMode): T[];
+/**
+ * The pending-spawn pass's tower check (a queued directive -- e.g. a review --
+ * on an armed focus): consulted after the cooldown and before the host cap,
+ * exactly where the ready pass consults it. True = held; the directive stays
+ * queued.
+ */
+export declare function pendingSpawnHeldByTower(focus: TowerAdmissionFocus, atHostCapacity: boolean, tower: TowerAdmissionDeps, nowMs: number): boolean;
+//# sourceMappingURL=tower-admission.d.ts.map

package/dist/tower/tower-admission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tower-admission.d.ts","sourceRoot":"","sources":["../../src/tower/tower-admission.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAKL,KAAK,SAAS,EACd,KAAK,mBAAmB,EACzB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAA2C,KAAK,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC1G,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAIlE,0FAA0F;AAC1F,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,SAAS,CAAC;IAChB,kEAAkE;IAClE,KAAK,EAAE,OAAO,CAAC;IACf,qDAAqD;IACrD,gBAAgB,EAAE,OAAO,CAAC;IAC1B,0EAA0E;IAC1E,OAAO,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACpC,sGAAsG;IACtG,eAAe,EAAE,OAAO,CAAC,iBAAiB,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC;CAC1D;AAED,4GAA4G;AAC5G,MAAM,WAAW,kBAAkB;IACjC,yBAAyB;IACzB,IAAI,EAAE,MAAM,SAAS,CAAC;IACtB,0EAA0E;IAC1E,YAAY,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,KAAK,iBAAiB,CAAC;CAC3E;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,GAAG,cAAc,CAQzH;AAED,qFAAqF;AACrF,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,YAAY,GAAG,UAAU,GAAG,aAAa,CAAC;AAYnF,6FAA6F;AAC7F,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,gBAAgB,GAAG,MAAM,GAAG,IAAI,CAsBrI;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,mBAAmB,EAC1B,SAAS,EAAE,cAAc,EACzB,OAAO,EAAE,gBAAgB,EACzB,KAAK,GAAE,MAAmB,EAC1B,MAAM,GAAE,iBAA2B,GAClC,IAAI,CAWN;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS;IAAE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,GAAG,CAAC,EAAE,CAInH;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS;IAAE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,EACvE,MAAM,EAAE,iBAAiB,EACzB,IAAI,EAAE,SAAS,CAAC,EAAE,EAClB,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,MAAM,EACtB,IAAI,EAAE,SAAS,GACd,CAAC,EAAE,CAGL;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,mBAAmB,EAC1B,cAAc,EAAE,OAAO,EACvB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,MAAM,GACZ,OAAO,CAIT"}

package/dist/tower/tower-admission.js

@@ -0,0 +1,137 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/tower/tower-pass.test.ts
+// PINNED-BY-END
+/**
+ * Spawn admission through the tower: what the spawn passes ask before they
+ * start a coding or review team for an armed focus.
+ *
+ * THE RULE (docs/runbook-tower.md):
+ *   off      -- the tower is not consulted; spawning is exactly as before it.
+ *   observe  -- the verdict is read and never obeyed; a spawn decision enforce
+ *               would have made differently is LOGGED (focus, verdict, the
+ *               decision taken), so an operator judges the verdicts on real
+ *               foci before enforcing.
+ *   enforce  -- a holding verdict that is FRESH holds the spawn.
+ *
+ * FAIL OPEN. Only an available, holding verdict ever holds, and only while
+ * this daemon's tower pass for the focus's product is standing
+ * (tower-pass-standing.ts): a pass that failed, or has not yet succeeded,
+ * leaves every verdict of that product unobeyed at once. A verdict that is
+ * missing, malformed, older than the bounded age or written under an earlier
+ * arm is no verdict (daemon-core readTowerVerdict). Either way the focus
+ * spawns as it would with the tower off, and the daemon says so. Admission fails open while
+ * the merge gates fail closed because the failures are not symmetric: a wrongly
+ * blocked merge is visible (a held delivery, a red gate), a wrongly held spawn
+ * is SILENT (a focus that simply never runs).
+ *
+ * The decision is pure (decideTowerAdmission); noteTowerAdmission logs it and
+ * records the focus's spawn intent once the spawn gate's final action is known.
+ */
+import { describeTowerHold, describeTowerUnavailable, readTowerVerdict, towerReadingHolds, } from '@telora/daemon-core';
+import { createLogger } from '../log/daemon-log.js';
+import { beginSpawnIntentPass, recordSpawnIntent } from './tower-spawn-intent.js';
+const log = createLogger({ module: 'tower' });
+export function decideTowerAdmission(focus, tower, nowMs) {
+    const mode = tower.mode();
+    if (mode === 'off')
+        return { mode, holds: false, enforceWouldHold: false, reading: null, passNotStanding: null };
+    const reading = readTowerVerdict(focus.tower_verdict ?? null, { armedAt: focus.agent_assigned_at ?? null }, nowMs);
+    const standing = tower.passStanding(focus.product_id);
+    if (standing !== 'ok')
+        return { mode, holds: false, enforceWouldHold: false, reading, passNotStanding: standing };
+    const enforceWouldHold = towerReadingHolds(reading);
+    return { mode, holds: mode === 'enforce' && enforceWouldHold, enforceWouldHold, reading, passNotStanding: null };
+}
+/** One log line per focus per distinct message (a held focus is not re-logged every poll). */
+const lastLogged = new Map();
+function logOnce(focusId, message, level) {
+    if (lastLogged.get(focusId) === message)
+        return;
+    lastLogged.set(focusId, message);
+    if (level === 'warn')
+        log.warn(message);
+    else
+        log.info(message);
+}
+/** The line a decision produces, or null when it is not worth a line. Exported for tests. */
+export function towerAdmissionMessage(focus, admission, outcome) {
+    const { reading } = admission;
+    if (!reading || outcome === 'not_wanting')
+        return null;
+    const name = `"${focus.focus_name}" (${focus.focus_id.slice(0, 8)})`;
+    if (admission.passNotStanding) {
+        if (admission.mode !== 'enforce')
+            return null;
+        const why = admission.passNotStanding === 'failed' ? 'its product\'s tower pass failed' : 'its product\'s tower pass has not succeeded yet';
+        return `[tower] ${name}: ${why} -- failing open, spawning as with the tower off`;
+    }
+    if (reading.status === 'unavailable') {
+        if (admission.mode !== 'enforce')
+            return null;
+        return `[tower] ${name}: ${describeTowerUnavailable(reading.why)} -- failing open, spawning as with the tower off`;
+    }
+    const v = reading.verdict;
+    if (v.state !== 'holding')
+        return null;
+    const why = `${describeTowerHold(v)} since ${v.since}`;
+    if (outcome === 'tower_hold')
+        return `[tower] holding ${name}: ${why}`;
+    if (admission.mode === 'observe') {
+        const taken = outcome === 'spawn' ? 'spawned' : 'left waiting for a host slot';
+        return `[tower] observe: enforce would hold ${name} (${why}); decision taken: ${taken}`;
+    }
+    return null;
+}
+/**
+ * Log the admission (once per distinct line) and record the focus's spawn
+ * intent for the tower's next pass. Never throws: admission bookkeeping must
+ * not cost a spawn.
+ */
+export function noteTowerAdmission(focus, admission, outcome, nowMs = Date.now(), source = 'ready') {
+    try {
+        // Open demand only: a spawned focus's demand is met (its team holds the slot).
+        recordSpawnIntent(focus.focus_id, outcome === 'tower_hold' || outcome === 'capacity', nowMs, source);
+        const message = towerAdmissionMessage(focus, admission, outcome);
+        const failingOpen = admission.passNotStanding !== null || admission.reading?.status === 'unavailable';
+        if (message)
+            logOnce(focus.focus_id, message, failingOpen ? 'warn' : 'info');
+        else
+            lastLogged.delete(focus.focus_id);
+    }
+    catch {
+        // Bookkeeping only.
+    }
+}
+/**
+ * The order the spawn pass offers ready foci to the host governor: in enforce,
+ * focus rank order (lowest priority_rank first, stable); otherwise the order the
+ * API returned them, exactly as before the tower.
+ */
+export function orderForTower(foci, mode) {
+    if (mode !== 'enforce')
+        return [...foci];
+    const rank = (f) => f.priority_rank ?? Number.MAX_SAFE_INTEGER;
+    return [...foci].map((f, i) => ({ f, i })).sort((a, b) => rank(a.f) - rank(b.f) || a.i - b.i).map((x) => x.f);
+}
+/**
+ * A spawn pass's offer: opens the pass's demand record over every focus it
+ * offers (tower-spawn-intent.ts beginSpawnIntentPass -- a focus some earlier
+ * gate stops is committed as not wanting) and returns them in orderForTower's
+ * order. The pass's runner commits it (focus/focus-poller-spawn.ts).
+ */
+export function offerForTower(source, foci, idOf, mode) {
+    beginSpawnIntentPass(source, foci.map(idOf));
+    return orderForTower(foci, mode);
+}
+/**
+ * The pending-spawn pass's tower check (a queued directive -- e.g. a review --
+ * on an armed focus): consulted after the cooldown and before the host cap,
+ * exactly where the ready pass consults it. True = held; the directive stays
+ * queued.
+ */
+export function pendingSpawnHeldByTower(focus, atHostCapacity, tower, nowMs) {
+    const admission = decideTowerAdmission(focus, tower, nowMs);
+    noteTowerAdmission(focus, admission, admission.holds ? 'tower_hold' : atHostCapacity ? 'capacity' : 'spawn', nowMs, 'pending');
+    return admission.holds;
+}
+//# sourceMappingURL=tower-admission.js.map

package/dist/tower/tower-admission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tower-admission.js","sourceRoot":"","sources":["../../src/tower/tower-admission.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,0DAA0D;AAC1D,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,gBAAgB,EAChB,iBAAiB,GAGlB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAA0B,MAAM,yBAAyB,CAAC;AAG1G,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AA+B9C,MAAM,UAAU,oBAAoB,CAAC,KAA0B,EAAE,KAAyB,EAAE,KAAa;IACvG,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;IACjH,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,aAAa,IAAI,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,iBAAiB,IAAI,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IACnH,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC;IAClH,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACpD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,SAAS,IAAI,gBAAgB,EAAE,gBAAgB,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;AACnH,CAAC;AAKD,8FAA8F;AAC9F,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE7C,SAAS,OAAO,CAAC,OAAe,EAAE,OAAe,EAAE,KAAsB;IACvE,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,OAAO;QAAE,OAAO;IAChD,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACjC,IAAI,KAAK,KAAK,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;;QACnC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACzB,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,qBAAqB,CAAC,KAA0B,EAAE,SAAyB,EAAE,OAAyB;IACpH,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC;IAC9B,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,UAAU,MAAM,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;IACrE,IAAI,SAAS,CAAC,eAAe,EAAE,CAAC;QAC9B,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAC9C,MAAM,GAAG,GAAG,SAAS,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,iDAAiD,CAAC;QAC5I,OAAO,WAAW,IAAI,KAAK,GAAG,kDAAkD,CAAC;IACnF,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACrC,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAC9C,OAAO,WAAW,IAAI,KAAK,wBAAwB,CAAC,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC;IACrH,CAAC;IACD,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAC1B,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,GAAG,GAAG,GAAG,iBAAiB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC;IACvD,IAAI,OAAO,KAAK,YAAY;QAAE,OAAO,mBAAmB,IAAI,KAAK,GAAG,EAAE,CAAC;IACvE,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,8BAA8B,CAAC;QAC/E,OAAO,uCAAuC,IAAI,KAAK,GAAG,sBAAsB,KAAK,EAAE,CAAC;IAC1F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAA0B,EAC1B,SAAyB,EACzB,OAAyB,EACzB,QAAgB,IAAI,CAAC,GAAG,EAAE,EAC1B,SAA4B,OAAO;IAEnC,IAAI,CAAC;QACH,+EAA+E;QAC/E,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,KAAK,YAAY,IAAI,OAAO,KAAK,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACrG,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACjE,MAAM,WAAW,GAAG,SAAS,CAAC,eAAe,KAAK,IAAI,IAAI,SAAS,CAAC,OAAO,EAAE,MAAM,KAAK,aAAa,CAAC;QACtG,IAAI,OAAO;YAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;;YACxE,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,oBAAoB;IACtB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAA8C,IAAkB,EAAE,IAAe;IAC5G,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,CAAC,CAAI,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,IAAI,MAAM,CAAC,gBAAgB,CAAC;IAClE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAChH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAyB,EACzB,IAAkB,EAClB,IAAsB,EACtB,IAAe;IAEf,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7C,OAAO,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACnC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAA0B,EAC1B,cAAuB,EACvB,KAAyB,EACzB,KAAa;IAEb,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC5D,kBAAkB,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAC/H,OAAO,SAAS,CAAC,KAAK,CAAC;AACzB,CAAC"}

package/dist/tower/tower-graph.d.ts

@@ -0,0 +1,23 @@
+/**
+ * The tower graph, judged for one product's pass: which armed foci wait on an
+ * unlanded depends_on predecessor, which are joined by an excludes edge to
+ * which other foci, and which cannot be judged at all.
+ *
+ *   depends_on (from -> to): `to` waits until `from` has LANDED
+ *     (tower/focus-landed.ts, the definition the PRD frontier shares). A
+ *     predecessor that has definitely not landed holds the successor with
+ *     `waits_on`; one whose landed state git could not answer -- with none
+ *     definitely unlanded -- leaves the successor UNAVAILABLE (no verdict, fail
+ *     open), never holding.
+ *   excludes (a <-> b): each side lists the other with the edge's evidence;
+ *     tower-verdicts.ts holds whichever is reached second while the first runs or
+ *     is cleared.
+ *
+ * Git is read only for a predecessor whose deliveries say it could have landed.
+ */
+import type { FocusBranchContainment } from '../git/focus-branch-containment.js';
+import type { TowerProductState } from '../queries/tower/tower-state.js';
+import type { TowerComputeInput } from './tower-verdicts.js';
+export type TowerGraphInputs = Pick<TowerComputeInput, 'waitsOn' | 'excludes' | 'unavailableFocusIds'>;
+export declare function judgeTowerGraph(state: Pick<TowerProductState, 'foci' | 'edges' | 'graphFoci'>, containmentOf: (focus: TowerProductState['graphFoci'][number]) => FocusBranchContainment): TowerGraphInputs;
+//# sourceMappingURL=tower-graph.d.ts.map

package/dist/tower/tower-graph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tower-graph.d.ts","sourceRoot":"","sources":["../../src/tower/tower-graph.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAEzE,OAAO,KAAK,EAA4C,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAEvG,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,iBAAiB,EAAE,SAAS,GAAG,UAAU,GAAG,qBAAqB,CAAC,CAAC;AAEvG,wBAAgB,eAAe,CAC7B,KAAK,EAAE,IAAI,CAAC,iBAAiB,EAAE,MAAM,GAAG,OAAO,GAAG,WAAW,CAAC,EAC9D,aAAa,EAAE,CAAC,KAAK,EAAE,iBAAiB,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,sBAAsB,GACvF,gBAAgB,CA0ClB"}

package/dist/tower/tower-graph.js

@@ -0,0 +1,53 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/tower/focus-landed.test.ts, packages/daemon/src/tower/tower-pass.test.ts,
+//   packages/daemon/src/tower/tower-state-ingestion.test.ts
+// PINNED-BY-END
+import { judgeFocusLanded } from './focus-landed.js';
+export function judgeTowerGraph(state, containmentOf) {
+    const info = new Map(state.graphFoci.map((f) => [f.focusId, f]));
+    const landedCache = new Map();
+    const landed = (focusId) => {
+        const cached = landedCache.get(focusId);
+        if (cached)
+            return cached;
+        const f = info.get(focusId);
+        let result;
+        if (!f)
+            result = 'unknown';
+        else if (judgeFocusLanded(f.deliveryStatuses, 'contained') !== 'landed')
+            result = 'not_landed';
+        else
+            result = judgeFocusLanded(f.deliveryStatuses, containmentOf(f));
+        landedCache.set(focusId, result);
+        return result;
+    };
+    const nameOf = (focusId) => info.get(focusId)?.focusName ?? focusId.slice(0, 8);
+    const waitsOn = new Map();
+    const excludes = new Map();
+    const unavailableFocusIds = new Set();
+    const armed = new Set(state.foci.map((f) => f.focusId));
+    for (const focusId of armed) {
+        const predecessors = state.edges
+            .filter((e) => e.kind === 'depends_on' && e.toFocusId === focusId)
+            .map((e) => e.fromFocusId)
+            .sort((a, b) => nameOf(a).localeCompare(nameOf(b)));
+        const unlanded = predecessors.find((p) => landed(p) === 'not_landed');
+        if (unlanded)
+            waitsOn.set(focusId, { focusId: unlanded, focusName: nameOf(unlanded) });
+        else if (predecessors.some((p) => landed(p) === 'unknown'))
+            unavailableFocusIds.add(focusId);
+    }
+    for (const e of state.edges) {
+        if (e.kind !== 'excludes')
+            continue;
+        const add = (self, other) => {
+            const list = excludes.get(self) ?? [];
+            list.push({ otherFocusId: other, otherFocusName: nameOf(other), evidence: e.evidence });
+            excludes.set(self, list);
+        };
+        add(e.fromFocusId, e.toFocusId);
+        add(e.toFocusId, e.fromFocusId);
+    }
+    return { waitsOn, excludes, unavailableFocusIds };
+}
+//# sourceMappingURL=tower-graph.js.map

package/dist/tower/tower-graph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tower-graph.js","sourceRoot":"","sources":["../../src/tower/tower-graph.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,2GAA2G;AAC3G,4DAA4D;AAC5D,gBAAgB;AAsBhB,OAAO,EAAE,gBAAgB,EAAoB,MAAM,mBAAmB,CAAC;AAKvE,MAAM,UAAU,eAAe,CAC7B,KAA8D,EAC9D,aAAwF;IAExF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAuB,CAAC;IACnD,MAAM,MAAM,GAAG,CAAC,OAAe,EAAe,EAAE;QAC9C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,MAAmB,CAAC;QACxB,IAAI,CAAC,CAAC;YAAE,MAAM,GAAG,SAAS,CAAC;aACtB,IAAI,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,EAAE,WAAW,CAAC,KAAK,QAAQ;YAAE,MAAM,GAAG,YAAY,CAAC;;YAC1F,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAExF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC5D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA4B,CAAC;IACrD,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAExD,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK;aAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC;aACjE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;aACzB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC;QACtE,IAAI,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;aAClF,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;YAAE,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/F,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU;YAAE,SAAS;QACpC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,EAAE;YAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YACxF,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3B,CAAC,CAAC;QACF,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;QAChC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAC;AACpD,CAAC"}

package/dist/tower/tower-heartbeat-status.d.ts

@@ -0,0 +1,28 @@
+/**
+ * The tower's status per product, published on the daemon heartbeat as
+ * `metadata.tower` ({ [productId]: { mode, pass } }; product-scoped,
+ * docs/heartbeat-metadata-audit.md) -- what the dashboard needs to say whether
+ * the product's tower is running at all:
+ *
+ *   mode -- TELORA_TOWER_MODE on this daemon. `off`: there is no tower; the
+ *           dashboard shows no tower line.
+ *   pass -- this daemon's pass standing for the product (tower-pass-standing.ts).
+ *           Anything but `ok` means admission fails open on every focus of the
+ *           product, whatever verdicts they carry -- the dashboard says so even
+ *           when NO focus carries a verdict (the all-missing case after a start
+ *           or a failed pass).
+ *
+ * Pure over its reads; bound at the composition root
+ * (composition/runtime-heartbeat-context.ts).
+ */
+import type { TowerAdmissionDeps } from './tower-admission.js';
+import type { TowerPassStanding } from './tower-pass-standing.js';
+import type { TowerMode } from '@telora/daemon-core';
+export interface TowerHeartbeatStatus {
+    mode: TowerMode;
+    pass: TowerPassStanding;
+}
+export declare function buildTowerStatusByProduct(products: ReadonlyArray<{
+    id: string;
+}>, tower: TowerAdmissionDeps): Record<string, TowerHeartbeatStatus>;
+//# sourceMappingURL=tower-heartbeat-status.d.ts.map

package/dist/tower/tower-heartbeat-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tower-heartbeat-status.d.ts","sourceRoot":"","sources":["../../src/tower/tower-heartbeat-status.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAErD,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,SAAS,CAAC;IAChB,IAAI,EAAE,iBAAiB,CAAC;CACzB;AAED,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,aAAa,CAAC;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,EACvC,KAAK,EAAE,kBAAkB,GACxB,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAKtC"}

package/dist/tower/tower-heartbeat-status.js

@@ -0,0 +1,11 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/tower/tower-heartbeat-status.test.ts
+// PINNED-BY-END
+export function buildTowerStatusByProduct(products, tower) {
+    const mode = tower.mode();
+    const out = {};
+    for (const p of products)
+        out[p.id] = { mode, pass: tower.passStanding(p.id) };
+    return out;
+}
+//# sourceMappingURL=tower-heartbeat-status.js.map

package/dist/tower/tower-heartbeat-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tower-heartbeat-status.js","sourceRoot":"","sources":["../../src/tower/tower-heartbeat-status.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,sEAAsE;AACtE,gBAAgB;AA6BhB,MAAM,UAAU,yBAAyB,CACvC,QAAuC,EACvC,KAAyB;IAEzB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1B,MAAM,GAAG,GAAyC,EAAE,CAAC;IACrD,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC/E,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/tower/tower-mode.d.ts

@@ -0,0 +1,9 @@
+/**
+ * The tower's rollout mode, TELORA_TOWER_MODE (declared, typed and validated in
+ * @telora/daemon-core env-config.ts): off | observe | enforce, default observe.
+ * See docs/runbook-tower.md for what each mode does and how a host moves from
+ * observe to enforce.
+ */
+import { type TowerMode } from '@telora/daemon-core';
+export declare function resolveTowerMode(env?: NodeJS.ProcessEnv): TowerMode;
+//# sourceMappingURL=tower-mode.d.ts.map

package/dist/tower/tower-mode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tower-mode.d.ts","sourceRoot":"","sources":["../../src/tower/tower-mode.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AAEH,OAAO,EAA8B,KAAK,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEjF,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,SAAS,CAIhF"}

package/dist/tower/tower-mode.js

@@ -0,0 +1,16 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/tower/tower-production-pass.test.ts
+// PINNED-BY-END
+/**
+ * The tower's rollout mode, TELORA_TOWER_MODE (declared, typed and validated in
+ * @telora/daemon-core env-config.ts): off | observe | enforce, default observe.
+ * See docs/runbook-tower.md for what each mode does and how a host moves from
+ * observe to enforce.
+ */
+import { isTowerMode, loadEnvConfig } from '@telora/daemon-core';
+export function resolveTowerMode(env = process.env) {
+    // env-config validates the value; the guard narrows its inferred string type.
+    const mode = loadEnvConfig(env).TELORA_TOWER_MODE;
+    return isTowerMode(mode) ? mode : 'observe';
+}
+//# sourceMappingURL=tower-mode.js.map

package/dist/tower/tower-mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tower-mode.js","sourceRoot":"","sources":["../../src/tower/tower-mode.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,qEAAqE;AACrE,gBAAgB;AAEhB;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,aAAa,EAAkB,MAAM,qBAAqB,CAAC;AAEjF,MAAM,UAAU,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,8EAA8E;IAC9E,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC;IAClD,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC"}

package/dist/tower/tower-pass-standing.d.ts

@@ -0,0 +1,8 @@
+export type TowerPassStanding = 'ok' | 'failed' | 'not_run';
+/** Record one product pass's outcome (tower-pass.ts runTowerPass). */
+export declare function recordTowerPassOutcome(productId: string, ok: boolean, nowMs?: number): void;
+/** The product's pass standing now. A focus with no product cannot be judged: not_run. */
+export declare function towerPassStanding(productId: string | null | undefined, nowMs?: number): TowerPassStanding;
+/** Test-only reset. */
+export declare function resetTowerPassStanding(): void;
+//# sourceMappingURL=tower-pass-standing.d.ts.map

package/dist/tower/tower-pass-standing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tower-pass-standing.d.ts","sourceRoot":"","sources":["../../src/tower/tower-pass-standing.ts"],"names":[],"mappings":"AAgCA,MAAM,MAAM,iBAAiB,GAAG,IAAI,GAAG,QAAQ,GAAG,SAAS,CAAC;AAI5D,sEAAsE;AACtE,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,GAAE,MAAmB,GAAG,IAAI,CAEvG;AAED,0FAA0F;AAC1F,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,KAAK,GAAE,MAAmB,GAAG,iBAAiB,CAMrH;AAED,uBAAuB;AACvB,wBAAgB,sBAAsB,IAAI,IAAI,CAE7C"}

package/dist/tower/tower-pass-standing.js

@@ -0,0 +1,50 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/tower/tower-entrypoints.test.ts,
+//   packages/daemon/src/tower/tower-heartbeat-status.test.ts, packages/daemon/src/tower/tower-pass.test.ts,
+//   packages/daemon/src/tower/tower-prd-arm.test.ts,
+//   packages/daemon/src/tower/tower-ready-row-ingestion.test.ts,
+//   packages/daemon/src/tower/tower-spawn-modes.test.ts
+// PINNED-BY-END
+/**
+ * Whether this daemon's tower pass for a product is STANDING -- the condition
+ * under which admission may obey a stored verdict at all.
+ *
+ * A stored verdict was written by some pass; it is only as good as the pass
+ * that keeps confirming it. When this process's most recent pass for the
+ * product failed -- or no pass for it has succeeded yet -- a still-fresh
+ * holding verdict in the database is a leftover, not a decision: admission
+ * fails open on it IMMEDIATELY (tower-admission.ts), rather than enforcing it
+ * until it ages out of the freshness bound. Another product's standing is
+ * untouched.
+ *
+ *   ok       -- the most recent pass for the product succeeded, within the
+ *               freshness bound (TOWER_VERDICT_MAX_AGE_MS).
+ *   failed   -- the most recent pass for the product threw.
+ *   not_run  -- no pass for the product has succeeded within the bound (daemon
+ *               start before the first pass, or a pass that stopped running).
+ *
+ * A leaf: in-process state, written by tower-pass.ts and read by admission
+ * through the spawn passes' deps (composition/spawn-pass-deps.ts).
+ */
+import { TOWER_VERDICT_MAX_AGE_MS } from '@telora/daemon-core';
+const lastOutcome = new Map();
+/** Record one product pass's outcome (tower-pass.ts runTowerPass). */
+export function recordTowerPassOutcome(productId, ok, nowMs = Date.now()) {
+    lastOutcome.set(productId, { ok, atMs: nowMs });
+}
+/** The product's pass standing now. A focus with no product cannot be judged: not_run. */
+export function towerPassStanding(productId, nowMs = Date.now()) {
+    if (!productId)
+        return 'not_run';
+    const last = lastOutcome.get(productId);
+    if (!last)
+        return 'not_run';
+    if (!last.ok)
+        return 'failed';
+    return nowMs - last.atMs > TOWER_VERDICT_MAX_AGE_MS ? 'not_run' : 'ok';
+}
+/** Test-only reset. */
+export function resetTowerPassStanding() {
+    lastOutcome.clear();
+}
+//# sourceMappingURL=tower-pass-standing.js.map

package/dist/tower/tower-pass-standing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tower-pass-standing.js","sourceRoot":"","sources":["../../src/tower/tower-pass-standing.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,kEAAkE;AAClE,4GAA4G;AAC5G,qDAAqD;AACrD,iEAAiE;AACjE,wDAAwD;AACxD,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAI/D,MAAM,WAAW,GAAG,IAAI,GAAG,EAAyC,CAAC;AAErE,sEAAsE;AACtE,MAAM,UAAU,sBAAsB,CAAC,SAAiB,EAAE,EAAW,EAAE,QAAgB,IAAI,CAAC,GAAG,EAAE;IAC/F,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,iBAAiB,CAAC,SAAoC,EAAE,QAAgB,IAAI,CAAC,GAAG,EAAE;IAChG,IAAI,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACjC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC9B,OAAO,KAAK,GAAG,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AACzE,CAAC;AAED,uBAAuB;AACvB,MAAM,UAAU,sBAAsB;IACpC,WAAW,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC"}

package/dist/tower/tower-pass.d.ts

@@ -0,0 +1,55 @@
+/**
+ * The tower pass: one pass per configured product, the SOLE writer of
+ * product_focuses.tower_verdict.
+ *
+ * It runs at the head of every ready-focus pass (so on daemon start and every
+ * poll), reads the product's limit and armed foci, computes every verdict
+ * (tower-verdicts.ts) from the armed set, the limit, focus rank, team presence
+ * and the spawn passes' last record of demand, and writes only what changed --
+ * or what is aging toward the bounded freshness age. So any change to those
+ * inputs is reflected on the next poll, and a verdict the pass keeps confirming
+ * never goes stale under the spawn pass.
+ *
+ * ISOLATION. A pass that throws for one product is logged and recorded
+ * (tower-pass-standing.ts): admission fails open on that product's foci at
+ * once, whatever verdicts they still carry, until a pass for it succeeds. It
+ * never stops another product's pass. Mode `off` runs no pass at all.
+ *
+ * The tower never arms or un-arms: nothing here writes assigned_agent_role_id.
+ */
+import type { TowerMode } from '@telora/daemon-core';
+import type { TowerProductState } from '../queries/tower/tower-state.js';
+import { type TowerVerdictWrite } from './tower-verdicts.js';
+import type { TowerGraphInputs } from './tower-graph.js';
+export interface TowerPassDeps {
+    products: ReadonlyArray<{
+        id: string;
+    }>;
+    mode: TowerMode;
+    readState: (productId: string) => Promise<TowerProductState>;
+    writeVerdicts: (productId: string, writes: readonly TowerVerdictWrite[]) => Promise<void>;
+    /** Foci holding a live coding or review team now. */
+    liveTeamFocusIds: () => ReadonlySet<string>;
+    /** Foci the spawn passes last found wanting a team (null = not yet known). */
+    wantingFocusIds: () => ReadonlySet<string> | null;
+    /**
+     * The product's graph inputs (depends_on / excludes / landed), judged from the
+     * state read (tower/tower-graph.ts over the product's git). Throwing fails the
+     * product's pass, which fails open.
+     */
+    judgeGraph: (productId: string, state: TowerProductState) => TowerGraphInputs;
+    now: () => Date;
+}
+/** The pass's deps over the running daemon, or null before it has a live config (composition/tower-pass-context.ts). */
+export type TowerPassDepsSource = () => TowerPassDeps | null;
+export interface TowerProductOutcome {
+    productId: string;
+    ok: boolean;
+    writes: number;
+    error?: string;
+}
+/** Run one product's pass. Throws on a read/compute/write failure (the caller isolates it). */
+export declare function runTowerProductPass(productId: string, deps: TowerPassDeps): Promise<number>;
+/** Run every product's pass; one product's failure never stops another's. */
+export declare function runTowerPass(deps: TowerPassDeps): Promise<TowerProductOutcome[]>;
+//# sourceMappingURL=tower-pass.d.ts.map

package/dist/tower/tower-pass.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tower-pass.d.ts","sourceRoot":"","sources":["../../src/tower/tower-pass.ts"],"names":[],"mappings":"AAOA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAEzE,OAAO,EAIL,KAAK,iBAAiB,EACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAMzD,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,aAAa,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxC,IAAI,EAAE,SAAS,CAAC;IAChB,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC7D,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,iBAAiB,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1F,qDAAqD;IACrD,gBAAgB,EAAE,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5C,8EAA8E;IAC9E,eAAe,EAAE,MAAM,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IAClD;;;;OAIG;IACH,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,KAAK,gBAAgB,CAAC;IAC9E,GAAG,EAAE,MAAM,IAAI,CAAC;CACjB;AAED,wHAAwH;AACxH,MAAM,MAAM,mBAAmB,GAAG,MAAM,aAAa,GAAG,IAAI,CAAC;AAE7D,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,+FAA+F;AAC/F,wBAAsB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAwBjG;AAED,6EAA6E;AAC7E,wBAAsB,YAAY,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAmBtF"}

package/dist/tower/tower-pass.js

@@ -0,0 +1,59 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/tower/tower-entrypoints.test.ts,
+//   packages/daemon/src/tower/tower-pass.test.ts, packages/daemon/src/tower/tower-prd-arm.test.ts,
+//   packages/daemon/src/tower/tower-spawn-modes.test.ts,
+//   packages/daemon/src/tower/tower-state-ingestion.test.ts
+// PINNED-BY-END
+import { createLogger } from '../log/daemon-log.js';
+import { computeTowerVerdicts, planTowerWrites, } from './tower-verdicts.js';
+import { recordTowerPassOutcome } from './tower-pass-standing.js';
+const log = createLogger({ module: 'tower' });
+/** Run one product's pass. Throws on a read/compute/write failure (the caller isolates it). */
+export async function runTowerProductPass(productId, deps) {
+    if (deps.mode === 'off')
+        return 0;
+    const state = await deps.readState(productId);
+    const foci = state.foci.map((f) => ({
+        focusId: f.focusId,
+        focusName: f.focusName,
+        priorityRank: f.priorityRank,
+        armedAt: f.agentAssignedAt ?? null,
+        previousVerdict: f.towerVerdict ?? null,
+    }));
+    const graph = deps.judgeGraph(productId, state);
+    const now = deps.now();
+    const computed = computeTowerVerdicts({
+        foci,
+        limit: state.concurrencyLimit ?? null,
+        liveTeamFocusIds: deps.liveTeamFocusIds(),
+        wantingFocusIds: deps.wantingFocusIds(),
+        ...graph,
+        mode: deps.mode,
+        now: now.toISOString(),
+    });
+    const writes = planTowerWrites(foci, computed, state.unarmedWithVerdictFocusIds ?? [], now.getTime());
+    await deps.writeVerdicts(productId, writes);
+    return writes.length;
+}
+/** Run every product's pass; one product's failure never stops another's. */
+export async function runTowerPass(deps) {
+    if (deps.mode === 'off')
+        return [];
+    const outcomes = [];
+    for (const product of deps.products) {
+        try {
+            const writes = await runTowerProductPass(product.id, deps);
+            recordTowerPassOutcome(product.id, true, deps.now().getTime());
+            outcomes.push({ productId: product.id, ok: true, writes });
+        }
+        catch (err) {
+            const error = err instanceof Error ? err.message : String(err);
+            recordTowerPassOutcome(product.id, false, deps.now().getTime());
+            log.warn(`[tower] pass failed for product ${product.id.slice(0, 8)}: ${error} -- admission fails open on its foci ` +
+                `until a pass for it succeeds (tower-pass-standing.ts)`);
+            outcomes.push({ productId: product.id, ok: false, writes: 0, error });
+        }
+    }
+    return outcomes;
+}
+//# sourceMappingURL=tower-pass.js.map

package/dist/tower/tower-pass.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tower-pass.js","sourceRoot":"","sources":["../../src/tower/tower-pass.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,kEAAkE;AAClE,mGAAmG;AACnG,yDAAyD;AACzD,4DAA4D;AAC5D,gBAAgB;AAwBhB,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EACL,oBAAoB,EACpB,eAAe,GAGhB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAElE,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AA+B9C,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,SAAiB,EAAE,IAAmB;IAC9E,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAsB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrD,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,OAAO,EAAE,CAAC,CAAC,eAAe,IAAI,IAAI;QAClC,eAAe,EAAE,CAAC,CAAC,YAAY,IAAI,IAAI;KACxC,CAAC,CAAC,CAAC;IACJ,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,oBAAoB,CAAC;QACpC,IAAI;QACJ,KAAK,EAAE,KAAK,CAAC,gBAAgB,IAAI,IAAI;QACrC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE;QACzC,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE;QACvC,GAAG,KAAK;QACR,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE;KACvB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,0BAA0B,IAAI,EAAE,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACtG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAmB;IACpD,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,QAAQ,GAA0B,EAAE,CAAC;IAC3C,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC3D,sBAAsB,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC/D,sBAAsB,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YAChE,GAAG,CAAC,IAAI,CACN,mCAAmC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,KAAK,uCAAuC;gBAC1G,uDAAuD,CACxD,CAAC;YACF,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/tower/tower-production-pass.d.ts

@@ -0,0 +1,3 @@
+import { type TowerPassDepsSource } from './tower-pass.js';
+export declare function runTowerPassSafely(source: TowerPassDepsSource): Promise<void>;
+//# sourceMappingURL=tower-production-pass.d.ts.map

package/dist/tower/tower-production-pass.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tower-production-pass.d.ts","sourceRoot":"","sources":["../../src/tower/tower-production-pass.ts"],"names":[],"mappings":"AAaA,OAAO,EAAgB,KAAK,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAIzE,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAOnF"}