@telora/daemon 0.24.10 → 0.24.11

package/dist/verify/gate-verdicts/gate-run-registry.js

@@ -1,5 +1,5 @@
 // PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: 27 tests -- run: npm run gen:pinned-by -- --list packages/daemon/src/verify/gate-verdicts/gate-run-registry.ts
+// Pinned by: 28 tests -- run: npm run gen:pinned-by -- --list packages/daemon/src/verify/gate-verdicts/gate-run-registry.ts
 // PINNED-BY-END
 const SEMAPHORE_WAIT = { on: 'verification_semaphore' };
 const SHA_RE = /^[0-9a-f]{7,64}$/i;

package/dist/verify/run-selection/default-on-guards.js

@@ -1,5 +1,5 @@
 // PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: 28 tests -- run: npm run gen:pinned-by -- --list packages/daemon/src/verify/run-selection/default-on-guards.ts
+// Pinned by: 29 tests -- run: npm run gen:pinned-by -- --list packages/daemon/src/verify/run-selection/default-on-guards.ts
 // PINNED-BY-END
 /**
  * The default-on scan's steady-state re-run guards: what a delivery sitting in

package/dist/verify/run-selection/unarmed-unattributed.d.ts

@@ -0,0 +1,89 @@
+/**
+ * Verify run selection agrees with the spawner about the arm: a delivery on an
+ * UN-ARMED focus that no commit is attributed to is not judged.
+ *
+ * Nothing can run a delivery on an un-armed focus: a null role is inert for
+ * every spawn path (supervision/null-role-spawn.ts focusMayRunTeam). A verdict
+ * on one that no team ever committed to judges nothing -- its missing commits
+ * read as an instrument fault (blind), which routes it back to coding, where the
+ * spawner refuses a team, and the teamless advance walks it to verify again.
+ * So the arm is read at both doors, by the same rule: here, at verify selection,
+ * and in the teamless advance (focus/unarmed-advance-hold.ts), which leaves such
+ * a delivery where it is.
+ *
+ * THE RULE. A candidate is dropped from this tick's dispatch when, together:
+ *   - its focus reads un-armed: assigned_agent_role_id is an explicit NULL on
+ *     the focus row this tick read. A focus the read did not return, or a row
+ *     with no such field, is NOT taken as un-armed -- the drop needs the fact,
+ *     and without it the candidate is judged exactly as before;
+ *   - no commit is attributed to the delivery (readAttributedCommit 'none'):
+ *     no recorded merge-back, no attribute_commit credit, no commit carrying its
+ *     Telora-Delivery trailer on the focus HEAD or the integration branch.
+ * A delivery on an un-armed focus that HAS attributed commits -- an operator
+ * stop mid-flight, a lifecycle clear after the work landed -- is still judged:
+ * there is work to judge, and its verdict is what review and the merge read.
+ * An attribution read that cannot answer ('unknown') keeps the candidate too.
+ *
+ * Nothing is written: the delivery stays where it is, unjudged, and the next
+ * arm (whose team commits under its trailer) is what makes it judgeable. One
+ * log line per delivery says so, repeated only after it was selected again.
+ *
+ * Pinned by unarmed-unattributed.test.ts (this directory).
+ *
+ * History: docs/daemon/history-verify.md (verify/run-selection/unarmed-unattributed.ts).
+ *
+ * @module unarmed-unattributed
+ */
+import type { PendingVerification } from '../../queries/verification/verification.js';
+import type { getActiveFocuses } from '../../queries/focuses/focus-discovery.js';
+import type { EvidenceLookup } from '../../queries/deliveries/deliveries.js';
+/**
+ * Whether any commit is attributed to a delivery: 'found', 'none' (every source
+ * was read and none names it), or 'unknown' (a source could not be read).
+ */
+export type AttributedCommitRead = 'found' | 'none' | 'unknown';
+/** The delivery an attribution read is about: its own id, focus, product and recorded merge-back. */
+export type AttributedCommitSubject = Pick<PendingVerification, 'deliveryId' | 'focusId' | 'productId' | 'mergeCommitSha'>;
+/** What the selection filter reads. */
+export interface UnarmedSelectionDeps {
+    organizationId: string;
+    getActiveFocuses: typeof getActiveFocuses;
+    readAttributedCommit: (v: AttributedCommitSubject) => Promise<AttributedCommitRead>;
+}
+/**
+ * Whether a focus row reads UN-ARMED: an explicit null assigned_agent_role_id,
+ * the spawner's own refusal (focusMayRunTeam). A row with no such field is NOT
+ * un-armed -- the hold needs the fact. Shared by verify selection and the
+ * teamless auto-advance (focus/focus-poller-auto-advance.ts), so the two agree
+ * with the spawner about the same row.
+ */
+export declare function readsUnarmed(row: {
+    assigned_agent_role_id?: string | null;
+}): boolean;
+/** Test-only: forget which skips were logged. */
+export declare function __resetUnarmedSelectionForTests(): void;
+/**
+ * `candidates` less every delivery on an un-armed focus that no commit is
+ * attributed to (module doc). Order is preserved; a candidate with no focus id
+ * is kept.
+ */
+export declare function dropUnarmedUnattributed(candidates: readonly PendingVerification[], productId: string, deps: UnarmedSelectionDeps): Promise<PendingVerification[]>;
+/** The reads the production attributed-commit reader composes. */
+export interface AttributedCommitReaderDeps {
+    integrationBranch: string;
+    /** The focus worktree, or null when the focus has none on this host. */
+    resolveWorktreePath: (v: AttributedCommitSubject) => string | null;
+    /** The product repo, searched for the integration branch when there is no worktree. */
+    resolveRepoPath: (productId: string | null) => string;
+    /** The commits on `ref` (in `cwd`) whose Telora-Delivery trailer names `deliveryId`. */
+    listTrailerCommits: (cwd: string, ref: string, deliveryId: string) => string[];
+    /** The focus's attribute_commit credits (commit sha -> delivery id). */
+    readCredits: (v: Pick<AttributedCommitSubject, 'focusId' | 'deliveryId'>) => Promise<EvidenceLookup<ReadonlyMap<string, string>>>;
+}
+/**
+ * The production readAttributedCommit: a recorded merge-back, a credit, or a
+ * trailer on the focus HEAD or the integration branch is 'found'. Every source
+ * empty is 'none' -- unless the credits could not be read, which is 'unknown'.
+ */
+export declare function buildAttributedCommitReader(deps: AttributedCommitReaderDeps): UnarmedSelectionDeps['readAttributedCommit'];
+//# sourceMappingURL=unarmed-unattributed.d.ts.map

package/dist/verify/run-selection/unarmed-unattributed.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unarmed-unattributed.d.ts","sourceRoot":"","sources":["../../../src/verify/run-selection/unarmed-unattributed.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AACtF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AACjF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAM7E;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;AAEhE,qGAAqG;AACrG,MAAM,MAAM,uBAAuB,GAAG,IAAI,CAAC,mBAAmB,EAAE,YAAY,GAAG,SAAS,GAAG,WAAW,GAAG,gBAAgB,CAAC,CAAC;AAE3H,uCAAuC;AACvC,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,oBAAoB,EAAE,CAAC,CAAC,EAAE,uBAAuB,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACrF;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE;IAAE,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,OAAO,CAErF;AAKD,iDAAiD;AACjD,wBAAgB,+BAA+B,IAAI,IAAI,CAEtD;AAwBD;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,UAAU,EAAE,SAAS,mBAAmB,EAAE,EAC1C,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAwBhC;AAED,kEAAkE;AAClE,MAAM,WAAW,0BAA0B;IACzC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,wEAAwE;IACxE,mBAAmB,EAAE,CAAC,CAAC,EAAE,uBAAuB,KAAK,MAAM,GAAG,IAAI,CAAC;IACnE,uFAAuF;IACvF,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,KAAK,MAAM,CAAC;IACtD,wFAAwF;IACxF,kBAAkB,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;IAC/E,wEAAwE;IACxE,WAAW,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,uBAAuB,EAAE,SAAS,GAAG,YAAY,CAAC,KAAK,OAAO,CAAC,cAAc,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;CACnI;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,0BAA0B,GAAG,oBAAoB,CAAC,sBAAsB,CAAC,CAW1H"}

package/dist/verify/run-selection/unarmed-unattributed.js

@@ -0,0 +1,95 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/focus/unarmed-advance-hold.test.ts,
+//   packages/daemon/src/verify/run-selection/unarmed-unattributed.test.ts
+// PINNED-BY-END
+import { focusMayRunTeam } from '../../supervision/null-role-spawn.js';
+import { createLogger } from '../../log/daemon-log.js';
+const log = createLogger({ module: 'verification' });
+/**
+ * Whether a focus row reads UN-ARMED: an explicit null assigned_agent_role_id,
+ * the spawner's own refusal (focusMayRunTeam). A row with no such field is NOT
+ * un-armed -- the hold needs the fact. Shared by verify selection and the
+ * teamless auto-advance (focus/focus-poller-auto-advance.ts), so the two agree
+ * with the spawner about the same row.
+ */
+export function readsUnarmed(row) {
+    return row.assigned_agent_role_id === null && !focusMayRunTeam(row.assigned_agent_role_id);
+}
+/** Deliveries whose skip was already logged (cleared once the delivery is selected again). */
+const announced = new Set();
+/** Test-only: forget which skips were logged. */
+export function __resetUnarmedSelectionForTests() {
+    announced.clear();
+}
+/**
+ * The focus ids this tick reads as UN-ARMED (an explicit null role), or null
+ * when the focus read failed -- then no focus is known un-armed and nothing is
+ * dropped.
+ */
+async function readUnarmedFocusIds(productId, deps) {
+    try {
+        const focuses = await deps.getActiveFocuses(deps.organizationId, productId);
+        const unarmed = new Set();
+        for (const f of focuses) {
+            if (readsUnarmed(f))
+                unarmed.add(f.focus_id);
+        }
+        return unarmed;
+    }
+    catch (err) {
+        log.warn(`[verification] focus arm read failed for product ${productId} -- no candidate is skipped as un-armed this tick:`, err.message);
+        return null;
+    }
+}
+/**
+ * `candidates` less every delivery on an un-armed focus that no commit is
+ * attributed to (module doc). Order is preserved; a candidate with no focus id
+ * is kept.
+ */
+export async function dropUnarmedUnattributed(candidates, productId, deps) {
+    if (candidates.length === 0)
+        return [];
+    const unarmed = await readUnarmedFocusIds(productId, deps);
+    if (unarmed === null || unarmed.size === 0) {
+        for (const v of candidates)
+            announced.delete(v.deliveryId);
+        return [...candidates];
+    }
+    const kept = [];
+    for (const v of candidates) {
+        if (!v.focusId || !unarmed.has(v.focusId) || (await deps.readAttributedCommit(v)) !== 'none') {
+            announced.delete(v.deliveryId);
+            kept.push(v);
+            continue;
+        }
+        if (!announced.has(v.deliveryId)) {
+            announced.add(v.deliveryId);
+            log.info(`[verification] not judging delivery "${v.deliveryName}" (${v.deliveryId}) -- its focus ${v.focusId.slice(0, 8)} `
+                + 'is not armed (no assigned agent role, so no team runs) and no commit is attributed to it; '
+                + 'it waits for the arm instead of cycling through verify');
+        }
+    }
+    return kept;
+}
+/**
+ * The production readAttributedCommit: a recorded merge-back, a credit, or a
+ * trailer on the focus HEAD or the integration branch is 'found'. Every source
+ * empty is 'none' -- unless the credits could not be read, which is 'unknown'.
+ */
+export function buildAttributedCommitReader(deps) {
+    return async (v) => {
+        if (typeof v.mergeCommitSha === 'string' && v.mergeCommitSha.trim() !== '')
+            return 'found';
+        const credits = await deps.readCredits(v);
+        if (credits.state === 'found' && [...credits.value.values()].includes(v.deliveryId))
+            return 'found';
+        const worktree = deps.resolveWorktreePath(v);
+        if (worktree && deps.listTrailerCommits(worktree, 'HEAD', v.deliveryId).length > 0)
+            return 'found';
+        const repo = worktree ?? deps.resolveRepoPath(v.productId);
+        if (deps.listTrailerCommits(repo, deps.integrationBranch, v.deliveryId).length > 0)
+            return 'found';
+        return credits.state === 'undetermined' ? 'unknown' : 'none';
+    };
+}
+//# sourceMappingURL=unarmed-unattributed.js.map

package/dist/verify/run-selection/unarmed-unattributed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unarmed-unattributed.js","sourceRoot":"","sources":["../../../src/verify/run-selection/unarmed-unattributed.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,qEAAqE;AACrE,0EAA0E;AAC1E,gBAAgB;AA0ChB,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAkBrD;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,GAA+C;IAC1E,OAAO,GAAG,CAAC,sBAAsB,KAAK,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;AAC7F,CAAC;AAED,8FAA8F;AAC9F,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;AAEpC,iDAAiD;AACjD,MAAM,UAAU,+BAA+B;IAC7C,SAAS,CAAC,KAAK,EAAE,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,mBAAmB,CAAC,SAAiB,EAAE,IAA0B;IAC9E,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,YAAY,CAAC,CAA+C,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CACN,oDAAoD,SAAS,oDAAoD,EAChH,GAAa,CAAC,OAAO,CACvB,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,UAA0C,EAC1C,SAAiB,EACjB,IAA0B;IAE1B,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC3D,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,UAAU;YAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,UAAU,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,IAAI,GAA0B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;YAC7F,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YAC5B,GAAG,CAAC,IAAI,CACN,wCAAwC,CAAC,CAAC,YAAY,MAAM,CAAC,CAAC,UAAU,kBAAkB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG;kBAChH,4FAA4F;kBAC5F,wDAAwD,CAC3D,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAeD;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAAgC;IAC1E,OAAO,KAAK,EAAE,CAAC,EAAE,EAAE;QACjB,IAAI,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,OAAO,CAAC;QAC3F,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;YAAE,OAAO,OAAO,CAAC;QACpG,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,QAAQ,IAAI,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC;QACnG,MAAM,IAAI,GAAG,QAAQ,IAAI,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC3D,IAAI,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC;QACnG,OAAO,OAAO,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/D,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@telora/daemon",
-  "version": "0.24.10",
+  "version": "0.24.11",
   "description": "Agent orchestration daemon for Telora - spawns and manages Claude Code instances",
   "type": "module",
   "bin": {
@@ -41,7 +41,7 @@
   "//testRunner": "Uses Node.js built-in test runner (node:test) via tsx for TypeScript support. The root package uses Vitest; this is a deliberate choice for the daemon package to avoid framework dependencies. Test files live beside the modules they exercise (owner-directory layout); the runner discovers them recursively.",
   "dependencies": {
     "@telora/daemon-core": "^0.3.1",
-    "@telora/mcp-products": "^0.23.6",
+    "@telora/mcp-products": "^0.23.7",
     "commander": "^14.0.3",
     "yaml": "^2.4.0",
     "zod": "^4.3.6"