@telora/daemon 0.24.25 → 0.24.29

package/dist/tower/tower-escalation-prompt.js

@@ -0,0 +1,130 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/tower/tower-escalation-prompt.test.ts
+// PINNED-BY-END
+/** The last line the session prints (informational; the record decides). */
+export const TOWER_ESCALATION_LINE_PREFIX = 'TOWER DECISION:';
+function fence(text) {
+    return ['```', text.replace(/```/g, "'''"), '```'].join('\n');
+}
+function escalationSection(input) {
+    const e = input.escalation;
+    const out = [
+        '## The escalation',
+        '',
+        `escalationId ${e.escalationId}, filed ${e.createdAt} by a team on this focus` +
+            `${e.deliveryId ? ` (deliveryId ${e.deliveryId})` : ''}${e.issueId ? ` (issueId ${e.issueId})` : ''}.`,
+        `Reason: ${e.reasonType}; disposition: ${e.disposition ?? 'unset'}.`,
+        '',
+        'What happened and why the team escalated:',
+        fence(e.description.trim() === '' ? '(no description)' : e.description),
+    ];
+    if (e.whatWasTried)
+        out.push('', 'What the team tried:', fence(e.whatWasTried));
+    if (e.helpNeeded)
+        out.push('', 'What the team asks for (its recommendation, when it made one, is usually here):', fence(e.helpNeeded));
+    out.push('');
+    return out;
+}
+function deliveryLine(d) {
+    const arm = d.covered === null ? '' : d.covered ? ', covered by the arm' : ', recorded as new intent after the arm (not covered)';
+    return `- "${d.name}" (deliveryId ${d.deliveryId}, ${d.executionStatus}${arm})`;
+}
+function contextSection(ctx) {
+    const out = ['## The focus, and the arm (the criteria it stamped and where they stand)', ''];
+    out.push(ctx.focusContext.trim() === '' ? '(The focus context could not be assembled.)' : ctx.focusContext.trim(), '');
+    out.push('### Deliveries', '');
+    if (ctx.deliveries.length === 0)
+        out.push('(none readable)');
+    for (const d of ctx.deliveries)
+        out.push(deliveryLine(d));
+    out.push('', '## The product\'s standing decisions', '');
+    const sd = ctx.standingDecisions;
+    if (sd.source === null)
+        out.push('This product keeps no decisions log the daemon could find. Decide from the focus alone.');
+    else {
+        out.push(`From ${sd.source}${sd.truncated ? ' (newest entries; cut at the size cap -- read the file for older ones)' : ''}. What is ruled here is not re-decided.`, '', sd.text);
+    }
+    out.push('');
+    if (ctx.readErrors.length > 0)
+        out.push('## What you were NOT given (a read failed)', '', ...ctx.readErrors.map((e) => `- ${e}`), '');
+    return out;
+}
+function instructionsSection(input) {
+    const { escalation: e, supervisorSessionId: sid } = input;
+    const ids = `escalationId "${e.escalationId}", agentSessionId "${sid}"`;
+    return [
+        '## What you do, in order',
+        '',
+        '1. **Read the ask.** What does the team need decided, and what does it recommend? Read the code it names in',
+        '   this worktree if that is how you judge it (read only).',
+        '2. **Judge it against the scope the team is solving for**: the focus\'s intent, the criteria its arm stamped, the',
+        '   deliveries the arm covers, and the standing decisions above. A path is within scope when it serves that intent',
+        '   inside those criteria and decisions -- most escalations are: a fork the team could act on but would not decide',
+        '   alone. Prefer the team\'s own recommendation when it is within scope; when two paths are, prefer the one that',
+        '   is reversible.',
+        '3. **When you can recommend a path within that scope, ANSWER it** with `telora_agent` action "escalation_answer":',
+        `   ${ids}, answer (addressed to the team, imperative: what to do, and any condition), summary (WHAT you`,
+        '   decided), rationale (WHY it is within scope), decisionEvidence { recommendation: "team" | "supervisor",',
+        '   criteria: [the criteria it rests on], standingDecisions: [the entries it cites], alternatives: [what you',
+        '   rejected and why] }. That one call resolves the escalation, records escalation_answered on the focus, and',
+        '   the daemon hands your answer to the team (its live session now, or its next spawn).',
+        '4. **DEFER it to the operator** with `telora_agent` action "escalation_defer" (' + ids + ', summary,',
+        '   rationale) -- the escalation then stands in the operator\'s inbox -- when any of these holds:',
+        '   - it asks for a MAJOR NEW BUILD: a new capability, product surface or focus beyond what the arm covers;',
+        '   - the intent is genuinely open: the focus and the standing decisions leave two readings that change the',
+        '     outcome, and neither is clearly the team\'s scope;',
+        '   - it needs a human act after all (something irreversible, outward, or a credential no agent reaches);',
+        '   - you feel a human is needed. When in doubt between answering and deferring, DEFER.',
+        '',
+    ];
+}
+function boundariesSection() {
+    return [
+        '## What you never do',
+        '',
+        '- You hold NO budget lever. You cannot grant review cycles, extend a budget, re-arm, un-arm or stop the',
+        '  focus; your Telora tools do not offer it. An answer never widens the arm: new intent is the operator\'s.',
+        '- You do not amend a criterion, write code, commit, or file a new escalation for this one: answering or',
+        '  deferring THIS escalation is the whole act.',
+        '- You do not lower the bar to unblock the team: an answer that drops a stamped criterion is a deferral.',
+        '- You decide exactly once: one escalation_answer OR one escalation_defer.',
+        '',
+        `End with one line: \`${TOWER_ESCALATION_LINE_PREFIX} answered\` or \`${TOWER_ESCALATION_LINE_PREFIX} deferred\`.`,
+    ];
+}
+/** Pure: the whole escalation prompt. */
+export function buildTowerEscalationPrompt(input) {
+    const { focus } = input;
+    return [
+        `# Tower supervisor: answer a team escalation on "${focus.focusName}"`,
+        '',
+        'You are the Tower supervisor. A team working this armed focus escalated a question. The operator ruled that',
+        'you answer what lies within the scope the team is solving for -- usually by authorizing the team\'s own',
+        'recommendation -- WITHOUT the operator, and that every decision you make is recorded on the focus (what, why,',
+        'and the evidence), where the dashboard shows it. Only what you cannot answer, or a major new build, goes to',
+        'the operator.',
+        '',
+        `Focus: "${focus.focusName}" (focusId ${focus.focusId}, productId ${focus.productId})`,
+        ...(focus.focusDescription ? ['', fence(focus.focusDescription)] : []),
+        '',
+        ...escalationSection(input),
+        ...contextSection(input.context),
+        ...instructionsSection(input),
+        ...boundariesSection(),
+    ].join('\n');
+}
+/** Pure: the decision the session's last line states, or null. Informational: the record decides. */
+export function parseTowerEscalationLine(stdout) {
+    for (const line of stdout.trim().split('\n').reverse()) {
+        const at = line.indexOf(TOWER_ESCALATION_LINE_PREFIX);
+        if (at === -1)
+            continue;
+        const word = line.slice(at + TOWER_ESCALATION_LINE_PREFIX.length).trim().replace(/[`*.]/g, '').toLowerCase();
+        if (word.startsWith('answered'))
+            return 'answered';
+        if (word.startsWith('deferred'))
+            return 'deferred';
+    }
+    return null;
+}
+//# sourceMappingURL=tower-escalation-prompt.js.map

package/dist/tower/tower-escalation-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tower-escalation-prompt.js","sourceRoot":"","sources":["../../src/tower/tower-escalation-prompt.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,uEAAuE;AACvE,gBAAgB;AA8BhB,4EAA4E;AAC5E,MAAM,CAAC,MAAM,4BAA4B,GAAG,iBAAiB,CAAC;AA6B9D,SAAS,KAAK,CAAC,IAAY;IACzB,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAiC;IAC1D,MAAM,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC;IAC3B,MAAM,GAAG,GAAG;QACV,mBAAmB;QACnB,EAAE;QACF,gBAAgB,CAAC,CAAC,YAAY,WAAW,CAAC,CAAC,SAAS,0BAA0B;YAC5E,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG;QACxG,WAAW,CAAC,CAAC,UAAU,kBAAkB,CAAC,CAAC,WAAW,IAAI,OAAO,GAAG;QACpE,EAAE;QACF,2CAA2C;QAC3C,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;KACxE,CAAC;IACF,IAAI,CAAC,CAAC,YAAY;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,sBAAsB,EAAE,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;IAChF,IAAI,CAAC,CAAC,UAAU;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,iFAAiF,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IACvI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,CAA0B;IAC9C,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,sDAAsD,CAAC;IAClI,OAAO,MAAM,CAAC,CAAC,IAAI,iBAAiB,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,eAAe,GAAG,GAAG,GAAG,CAAC;AAClF,CAAC;AAED,SAAS,cAAc,CAAC,GAAsB;IAC5C,MAAM,GAAG,GAAG,CAAC,0EAA0E,EAAE,EAAE,CAAC,CAAC;IAC7F,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,6CAA6C,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACvH,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAC/B,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC7D,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,UAAU;QAAE,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,sCAAsC,EAAE,EAAE,CAAC,CAAC;IACzD,MAAM,EAAE,GAAG,GAAG,CAAC,iBAAiB,CAAC;IACjC,IAAI,EAAE,CAAC,MAAM,KAAK,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,yFAAyF,CAAC,CAAC;SACvH,CAAC;QACJ,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,wEAAwE,CAAC,CAAC,CAAC,EAAE,yCAAyC,EAAE,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IACnL,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,4CAA4C,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACtI,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAiC;IAC5D,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,mBAAmB,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;IAC1D,MAAM,GAAG,GAAG,iBAAiB,CAAC,CAAC,YAAY,sBAAsB,GAAG,GAAG,CAAC;IACxE,OAAO;QACL,0BAA0B;QAC1B,EAAE;QACF,6GAA6G;QAC7G,2DAA2D;QAC3D,mHAAmH;QACnH,mHAAmH;QACnH,mHAAmH;QACnH,kHAAkH;QAClH,mBAAmB;QACnB,mHAAmH;QACnH,MAAM,GAAG,gGAAgG;QACzG,4GAA4G;QAC5G,6GAA6G;QAC7G,8GAA8G;QAC9G,wFAAwF;QACxF,iFAAiF,GAAG,GAAG,GAAG,YAAY;QACtG,kGAAkG;QAClG,4GAA4G;QAC5G,4GAA4G;QAC5G,yDAAyD;QACzD,0GAA0G;QAC1G,wFAAwF;QACxF,EAAE;KACH,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO;QACL,sBAAsB;QACtB,EAAE;QACF,yGAAyG;QACzG,4GAA4G;QAC5G,yGAAyG;QACzG,+CAA+C;QAC/C,yGAAyG;QACzG,2EAA2E;QAC3E,EAAE;QACF,wBAAwB,4BAA4B,oBAAoB,4BAA4B,cAAc;KACnH,CAAC;AACJ,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,0BAA0B,CAAC,KAAiC;IAC1E,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxB,OAAO;QACL,oDAAoD,KAAK,CAAC,SAAS,GAAG;QACtE,EAAE;QACF,6GAA6G;QAC7G,yGAAyG;QACzG,+GAA+G;QAC/G,6GAA6G;QAC7G,eAAe;QACf,EAAE;QACF,WAAW,KAAK,CAAC,SAAS,cAAc,KAAK,CAAC,OAAO,eAAe,KAAK,CAAC,SAAS,GAAG;QACtF,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,EAAE;QACF,GAAG,iBAAiB,CAAC,KAAK,CAAC;QAC3B,GAAG,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC;QAChC,GAAG,mBAAmB,CAAC,KAAK,CAAC;QAC7B,GAAG,iBAAiB,EAAE;KACvB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,wBAAwB,CAAC,MAAc;IACrD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACvD,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;QACtD,IAAI,EAAE,KAAK,CAAC,CAAC;YAAE,SAAS;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7G,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,UAAU,CAAC;QACnD,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,UAAU,CAAC;IACrD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/tower/tower-escalation-routing.d.ts

@@ -0,0 +1,49 @@
+/**
+ * THE ROUTING TABLE for a team escalation pending on the Tower supervisor: does
+ * the supervisor decide it, or does the daemon hand it straight to the
+ * operator? Pure; the one place the rule is written (product-api stamps the
+ * candidates -- a team filing on an armed focus -- and this decides each).
+ *
+ *   -> the OPERATOR, with no supervisor session, when
+ *        human_act     the filing names a human-only act (metadata.human_act
+ *                      kind irreversible | outward | unreachable_capability):
+ *                      no agent can perform it, so no agent should hold it;
+ *        external_wait the filing waits on a third party: not a judgement call;
+ *        unarmed       the focus is no longer armed (no assigned agent role):
+ *                      the supervisor decides within the scope an ARM authorised;
+ *        focus_closed  the focus is not active on a product this daemon runs.
+ *   -> the SUPERVISOR otherwise. Whether it then answers (a path within the
+ *      scope the team is solving for) or defers (a major new build, or it feels
+ *      a human is needed) is its judgement, told in tower/tower-escalation-prompt.ts.
+ *
+ * @module tower/tower-escalation-routing
+ */
+/** The human-only act kinds (mcp telora_agent humanAct.kind). */
+export declare const HUMAN_ACT_KINDS: readonly string[];
+/** Why an escalation goes straight to the operator. */
+export type OperatorRouteReason = 'human_act' | 'external_wait' | 'unarmed' | 'focus_closed';
+/** Where one pending escalation goes. */
+export type TowerEscalationRoute = {
+    route: 'supervisor';
+} | {
+    route: 'operator';
+    reason: OperatorRouteReason;
+    detail: string;
+};
+/** The facts the routing reads. */
+export interface RoutingFacts {
+    disposition: string | null;
+    metadata: Record<string, unknown>;
+    /** The escalation's focus as this daemon runs it: null when it is not an active focus of a configured product. */
+    focus: {
+        armed: boolean;
+    } | null;
+}
+/** Pure: the human-only act a filing names, or null. */
+export declare function humanActOf(metadata: Record<string, unknown>): {
+    kind: string;
+    act: string;
+} | null;
+/** Pure: route one pending team escalation. */
+export declare function routeTeamEscalation(facts: RoutingFacts): TowerEscalationRoute;
+//# sourceMappingURL=tower-escalation-routing.d.ts.map

package/dist/tower/tower-escalation-routing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tower-escalation-routing.d.ts","sourceRoot":"","sources":["../../src/tower/tower-escalation-routing.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,iEAAiE;AACjE,eAAO,MAAM,eAAe,EAAE,SAAS,MAAM,EAA0D,CAAC;AAExG,uDAAuD;AACvD,MAAM,MAAM,mBAAmB,GAAG,WAAW,GAAG,eAAe,GAAG,SAAS,GAAG,cAAc,CAAC;AAE7F,yCAAyC;AACzC,MAAM,MAAM,oBAAoB,GAC5B;IAAE,KAAK,EAAE,YAAY,CAAA;CAAE,GACvB;IAAE,KAAK,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvE,mCAAmC;AACnC,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,kHAAkH;IAClH,KAAK,EAAE;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC;CAClC;AAED,wDAAwD;AACxD,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAMlG;AAED,+CAA+C;AAC/C,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,YAAY,GAAG,oBAAoB,CAe7E"}

package/dist/tower/tower-escalation-routing.js

@@ -0,0 +1,53 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/tower/tower-escalation-prompt.test.ts
+// PINNED-BY-END
+/**
+ * THE ROUTING TABLE for a team escalation pending on the Tower supervisor: does
+ * the supervisor decide it, or does the daemon hand it straight to the
+ * operator? Pure; the one place the rule is written (product-api stamps the
+ * candidates -- a team filing on an armed focus -- and this decides each).
+ *
+ *   -> the OPERATOR, with no supervisor session, when
+ *        human_act     the filing names a human-only act (metadata.human_act
+ *                      kind irreversible | outward | unreachable_capability):
+ *                      no agent can perform it, so no agent should hold it;
+ *        external_wait the filing waits on a third party: not a judgement call;
+ *        unarmed       the focus is no longer armed (no assigned agent role):
+ *                      the supervisor decides within the scope an ARM authorised;
+ *        focus_closed  the focus is not active on a product this daemon runs.
+ *   -> the SUPERVISOR otherwise. Whether it then answers (a path within the
+ *      scope the team is solving for) or defers (a major new build, or it feels
+ *      a human is needed) is its judgement, told in tower/tower-escalation-prompt.ts.
+ *
+ * @module tower/tower-escalation-routing
+ */
+/** The human-only act kinds (mcp telora_agent humanAct.kind). */
+export const HUMAN_ACT_KINDS = ['irreversible', 'outward', 'unreachable_capability'];
+/** Pure: the human-only act a filing names, or null. */
+export function humanActOf(metadata) {
+    const raw = metadata.human_act;
+    if (raw === null || typeof raw !== 'object' || Array.isArray(raw))
+        return null;
+    const { kind, act } = raw;
+    if (typeof kind !== 'string' || !HUMAN_ACT_KINDS.includes(kind))
+        return null;
+    return { kind, act: typeof act === 'string' ? act : '' };
+}
+/** Pure: route one pending team escalation. */
+export function routeTeamEscalation(facts) {
+    const act = humanActOf(facts.metadata);
+    if (act) {
+        return { route: 'operator', reason: 'human_act', detail: `it names a human-only act (${act.kind}): ${act.act || '(unstated)'}` };
+    }
+    if (facts.disposition === 'external_wait') {
+        return { route: 'operator', reason: 'external_wait', detail: 'it waits on a third party, which no judgement answers' };
+    }
+    if (facts.focus === null) {
+        return { route: 'operator', reason: 'focus_closed', detail: 'its focus is not an active focus this daemon runs' };
+    }
+    if (!facts.focus.armed) {
+        return { route: 'operator', reason: 'unarmed', detail: 'its focus is no longer armed, so no arm bounds what the supervisor may decide' };
+    }
+    return { route: 'supervisor' };
+}
+//# sourceMappingURL=tower-escalation-routing.js.map

package/dist/tower/tower-escalation-routing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tower-escalation-routing.js","sourceRoot":"","sources":["../../src/tower/tower-escalation-routing.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,uEAAuE;AACvE,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,iEAAiE;AACjE,MAAM,CAAC,MAAM,eAAe,GAAsB,CAAC,cAAc,EAAE,SAAS,EAAE,wBAAwB,CAAC,CAAC;AAkBxG,wDAAwD;AACxD,MAAM,UAAU,UAAU,CAAC,QAAiC;IAC1D,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC;IAC/B,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,GAAwC,CAAC;IAC/D,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC3D,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,mBAAmB,CAAC,KAAmB;IACrD,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,8BAA8B,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,GAAG,IAAI,YAAY,EAAE,EAAE,CAAC;IACnI,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,eAAe,EAAE,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,uDAAuD,EAAE,CAAC;IACzH,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,mDAAmD,EAAE,CAAC;IACpH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACvB,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,+EAA+E,EAAE,CAAC;IAC3I,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;AACjC,CAAC"}

package/dist/tower/tower-escalation-session.d.ts

@@ -0,0 +1,149 @@
+/**
+ * THE TOWER SUPERVISOR FOR TEAM ESCALATIONS: a team's escalation is answered by
+ * the Tower supervisor, and reaches the operator only when the supervisor cannot
+ * answer it.
+ *
+ * WHO OWNS WHICH ESCALATION (the reconcile with the routing decider,
+ * supervision/agent-resolvable-promotion.ts). The routing decider keeps the
+ * DAEMON-filed observations (the machine lane). The supervisor takes the
+ * TEAM-filed escalations: product-api escalation_create stamps tower_state
+ * 'pending' on a team filing (agent_filed) on an armed focus, and both the coding
+ * spawn's ride-in and the decider's sweep skip a Tower-routed row
+ * (queries/escalations/escalation-consumption.ts isTowerRoutedRow). One owner
+ * per row, no second lane.
+ *
+ * ONE SWEEP (sweep(), registered in focus/focus-loop-registry.ts under the
+ * escalation-lane gate, not TELORA_FOCUS_LOOP: escalations are filed whether or
+ * not the differential loop runs) reads the org's pending rows of the products
+ * this daemon runs and, per row:
+ *   - routes it (tower/tower-escalation-routing.ts): a human act, an
+ *     external_wait, an un-armed or closed focus -> the daemon defers it to the
+ *     operator with the reason (daemon_escalation_tower_defer records
+ *     escalation_deferred), no session spent;
+ *   - otherwise starts ONE one-shot supervisor session for it (the review-loop
+ *     supervisor's process, spawn/routing-decider-spawn.ts
+ *     spawnOneShotJudgementSession, opus, a governor slot, the scoped
+ *     `tower_supervisor` MCP profile) in the background. The session answers it
+ *     (telora_agent escalation_answer) or defers it (escalation_defer); each is
+ *     one attributed edge act that records the decision on the focus.
+ *
+ * AFTER A SESSION the daemon reads the row:
+ *   - answered -> the answer reaches the team: injected into its live session now
+ *     (spawn/live-answer-delivery.ts), else read back at its next spawn through
+ *     the answer re-arm signal the answer wrote; a decision record the edge
+ *     failed to write is backstopped here (escalation_answered, by the daemon).
+ *   - deferred -> it stands in the operator's inbox.
+ *   - still pending: a session that CRASHED or timed out -> deferred at once
+ *     ("crash -> the operator"); one that exited cleanly without deciding is an
+ *     attempt, and after TOWER_ESCALATION_MAX_ATTEMPTS it is deferred. A session
+ *     that never ran (no slot, the model unavailable, no scoped MCP) is not an
+ *     attempt: the next sweep retries. Attempts are counted in memory.
+ *
+ * @module tower/tower-escalation-session
+ */
+import type { ResourceGovernor } from '@telora/daemon-core';
+import type { DaemonConfig } from '../types/index.js';
+import type { TowerDecision, TowerDecisionInput } from '../queries/tower-decisions/tower-decisions.js';
+import type { TowerDeferral, TowerEscalationState, TowerPendingEscalation } from '../queries/escalations/tower-escalations.js';
+import { type TowerEscalationRoute } from './tower-escalation-routing.js';
+import { type EscalationContext } from './tower-escalation-prompt.js';
+import type { TowerSupervisorSpawnResult } from './tower-supervisor-session.js';
+/** Sessions that ran cleanly without deciding, per escalation, before the daemon defers it. */
+export declare const TOWER_ESCALATION_MAX_ATTEMPTS = 2;
+/** Kill an escalation session that has not exited within this window. */
+export declare const TOWER_ESCALATION_TIMEOUT_MS: number;
+/** Governor engine for escalation sessions (bounded by the global session cap, as the loop supervisor's). */
+export declare const TOWER_ESCALATION_GOVERNOR_ENGINE = "tower-supervisor";
+/**
+ * Tools the escalation session is pre-approved for: reading the worktree, and
+ * the Telora reads plus the two acts it decides through (telora_agent
+ * escalation_answer / escalation_defer). Pre-approval only; the scoped MCP
+ * profile is the bound.
+ */
+export declare const TOWER_ESCALATION_MCP_TOOLS: readonly string[];
+/** A focus as the escalation supervisor reads it. */
+export interface TowerEscalationFocus {
+    focusId: string;
+    focusName: string;
+    focusDescription: string | null;
+    productId: string;
+    armed: boolean;
+    /** The arm's baseline deliveries (product_focuses.armed_baseline_delivery_ids), or null when none is recorded. */
+    armedBaselineDeliveryIds: readonly string[] | null;
+}
+/** What one escalation session is spawned with. */
+export interface TowerEscalationSpawnOptions {
+    config: DaemonConfig;
+    prompt: string;
+    cwd: string;
+    focusId: string;
+    escalationId: string;
+    model: string;
+    timeoutMs: number;
+    allowedTools: readonly string[];
+}
+/** The collaborators, all required, bound at the composition root. */
+export interface TowerEscalationSupervisorDeps {
+    readConfig: () => DaemonConfig | null;
+    productConfig: (config: DaemonConfig, productId: string) => DaemonConfig | null;
+    readGovernor: () => Pick<ResourceGovernor, 'tryAcquireSlot' | 'releaseSlot'> | null;
+    listPending: () => Promise<TowerPendingEscalation[]>;
+    readEscalation: (escalationId: string) => Promise<TowerEscalationState>;
+    defer: (deferral: TowerDeferral) => Promise<{
+        towerDecisionId: string | null;
+    }>;
+    /** The active focuses of one product this daemon runs. */
+    listFocuses: (productId: string) => Promise<TowerEscalationFocus[]>;
+    focusWorktreePath: (focusId: string) => string | null;
+    gatherContext: (args: {
+        focus: TowerEscalationFocus;
+        config: DaemonConfig;
+        repoRoot: string;
+    }) => Promise<EscalationContext>;
+    spawn: (opts: TowerEscalationSpawnOptions) => Promise<TowerSupervisorSpawnResult>;
+    /** Inject the focus's unconsumed answers into its live team (spawn/live-answer-delivery.ts). */
+    deliverAnswer: (args: {
+        focusId: string;
+        rearmValues: readonly string[];
+    }) => Promise<{
+        delivered: boolean;
+        detail?: string;
+    }>;
+    listTowerDecisions: (focusId: string) => Promise<{
+        decisions: TowerDecision[];
+        openLoopDecisionIds: string[];
+    }>;
+    recordTowerDecision: (input: TowerDecisionInput) => Promise<{
+        decision: TowerDecision;
+        created: boolean;
+    }>;
+    newSessionId: () => string;
+    model: string;
+}
+/** What one sweep did. */
+export interface TowerEscalationSweepCounts {
+    pending: number;
+    started: number;
+    inFlight: number;
+    deferred: number;
+    skipped: number;
+    unreadable: number;
+}
+/** Pure: whether a session that ran ended abnormally (crash or kill): straight to the operator. */
+export declare function crashed(result: TowerSupervisorSpawnResult): boolean;
+/** Pure: the deferral the daemon records for a route straight to the operator. */
+export declare function operatorRouteDeferral(route: Extract<TowerEscalationRoute, {
+    route: 'operator';
+}>): Pick<TowerDeferral, 'summary' | 'rationale' | 'evidence'>;
+/** Pure: whether a pending row belongs to a product this daemon runs. */
+export declare function ownedByThisDaemon(esc: Pick<TowerPendingEscalation, 'productId' | 'focusId'>, productIds: ReadonlySet<string>, focusIds: ReadonlySet<string>): boolean;
+/** The escalation half of the Tower supervisor (one per process). */
+export interface TowerEscalationSupervisor {
+    sweep(): Promise<TowerEscalationSweepCounts>;
+}
+/** Build it (the composition root binds one per process). */
+export declare function createTowerEscalationSupervisor(deps: TowerEscalationSupervisorDeps): TowerEscalationSupervisor & {
+    /** Test seam: resolves once every session started so far has finished. */
+    settled(): Promise<void>;
+};
+//# sourceMappingURL=tower-escalation-session.d.ts.map

package/dist/tower/tower-escalation-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tower-escalation-session.d.ts","sourceRoot":"","sources":["../../src/tower/tower-escalation-session.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAa,MAAM,qBAAqB,CAAC;AACvE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,+CAA+C,CAAC;AACvG,OAAO,KAAK,EACV,aAAa,EACb,oBAAoB,EACpB,sBAAsB,EACvB,MAAM,6CAA6C,CAAC;AAErD,OAAO,EAAuB,KAAK,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC/F,OAAO,EAAwD,KAAK,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAC5H,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAIhF,+FAA+F;AAC/F,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAE/C,yEAAyE;AACzE,eAAO,MAAM,2BAA2B,QAAiB,CAAC;AAE1D,6GAA6G;AAC7G,eAAO,MAAM,gCAAgC,qBAAqB,CAAC;AAEnE;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,EAAE,SAAS,MAAM,EASvD,CAAC;AAEF,qDAAqD;AACrD,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;IACf,kHAAkH;IAClH,wBAAwB,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;CACpD;AAED,mDAAmD;AACnD,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CACjC;AAED,sEAAsE;AACtE,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,MAAM,YAAY,GAAG,IAAI,CAAC;IACtC,aAAa,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,KAAK,YAAY,GAAG,IAAI,CAAC;IAChF,YAAY,EAAE,MAAM,IAAI,CAAC,gBAAgB,EAAE,gBAAgB,GAAG,aAAa,CAAC,GAAG,IAAI,CAAC;IACpF,WAAW,EAAE,MAAM,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC;IACrD,cAAc,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACxE,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,KAAK,OAAO,CAAC;QAAE,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAChF,0DAA0D;IAC1D,WAAW,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IACpE,iBAAiB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACtD,aAAa,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,oBAAoB,CAAC;QAAC,MAAM,EAAE,YAAY,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC7H,KAAK,EAAE,CAAC,IAAI,EAAE,2BAA2B,KAAK,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAClF,gGAAgG;IAChG,aAAa,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,KAAK,OAAO,CAAC;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/H,kBAAkB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,SAAS,EAAE,aAAa,EAAE,CAAC;QAAC,mBAAmB,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAChH,mBAAmB,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC;QAAE,QAAQ,EAAE,aAAa,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAC3G,YAAY,EAAE,MAAM,MAAM,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;CACf;AAED,0BAA0B;AAC1B,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAiBD,mGAAmG;AACnG,wBAAgB,OAAO,CAAC,MAAM,EAAE,0BAA0B,GAAG,OAAO,CAEnE;AAgBD,kFAAkF;AAClF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,oBAAoB,EAAE;IAAE,KAAK,EAAE,UAAU,CAAA;CAAE,CAAC,GAAG,IAAI,CAAC,aAAa,EAAE,SAAS,GAAG,WAAW,GAAG,UAAU,CAAC,CAQ5J;AAmGD,yEAAyE;AACzE,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,sBAAsB,EAAE,WAAW,GAAG,SAAS,CAAC,EAAE,UAAU,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,OAAO,CAGrK;AA+CD,qEAAqE;AACrE,MAAM,WAAW,yBAAyB;IACxC,KAAK,IAAI,OAAO,CAAC,0BAA0B,CAAC,CAAC;CAC9C;AAED,6DAA6D;AAC7D,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,6BAA6B,GAAG,yBAAyB,GAAG;IAChH,0EAA0E;IAC1E,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B,CAMA"}

package/dist/tower/tower-escalation-session.js

@@ -0,0 +1,238 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/tower/tower-escalation-session.test.ts
+// PINNED-BY-END
+import { createLogger } from '../log/daemon-log.js';
+import { routeTeamEscalation } from './tower-escalation-routing.js';
+import { buildTowerEscalationPrompt, parseTowerEscalationLine } from './tower-escalation-prompt.js';
+const log = createLogger({ module: 'tower' });
+/** Sessions that ran cleanly without deciding, per escalation, before the daemon defers it. */
+export const TOWER_ESCALATION_MAX_ATTEMPTS = 2;
+/** Kill an escalation session that has not exited within this window. */
+export const TOWER_ESCALATION_TIMEOUT_MS = 20 * 60 * 1000;
+/** Governor engine for escalation sessions (bounded by the global session cap, as the loop supervisor's). */
+export const TOWER_ESCALATION_GOVERNOR_ENGINE = 'tower-supervisor';
+/**
+ * Tools the escalation session is pre-approved for: reading the worktree, and
+ * the Telora reads plus the two acts it decides through (telora_agent
+ * escalation_answer / escalation_defer). Pre-approval only; the scoped MCP
+ * profile is the bound.
+ */
+export const TOWER_ESCALATION_MCP_TOOLS = [
+    'Read', 'Grep', 'Glob',
+    'mcp__telora-products__telora_agent',
+    'mcp__telora-products__telora_product_focus',
+    'mcp__telora-products__telora_product_issue',
+    'mcp__telora-products__telora_product_delivery',
+    'mcp__telora-products__telora_product_tower',
+    'mcp__telora-products__telora_reality_tree_traverse',
+    'mcp__telora-products__telora_wiki_search',
+];
+function emptyCounts() {
+    return { pending: 0, started: 0, inFlight: 0, deferred: 0, skipped: 0, unreadable: 0 };
+}
+/** Pure: whether a finished spawn ran at all (an unrun session is retried, uncounted). */
+function ran(result) {
+    return result.started && result.modelUnavailable === undefined;
+}
+/** Pure: whether a session that ran ended abnormally (crash or kill): straight to the operator. */
+export function crashed(result) {
+    return ran(result) && (result.timedOut || (result.exitCode !== null && result.exitCode !== 0));
+}
+function describeEnd(result) {
+    if (result.modelUnavailable)
+        return `model unavailable (${result.modelUnavailable.kind})`;
+    if (!result.started)
+        return result.errorMessage ?? 'did not start';
+    if (result.timedOut)
+        return 'timed out (killed)';
+    const said = parseTowerEscalationLine(result.stdout);
+    return `exited ${result.exitCode ?? 'null'}${said ? `; said "${said}"` : ''}`;
+}
+async function deferAs(st, esc, summary, rationale, evidence) {
+    const { towerDecisionId } = await st.deps.defer({ escalationId: esc.escalationId, summary, rationale, evidence });
+    st.attempts.delete(esc.escalationId);
+    log.info(`[tower-escalation] handed escalation ${esc.escalationId.slice(0, 8)} to the operator: ${summary} (decision ${towerDecisionId?.slice(0, 8) ?? 'unrecorded'}).`);
+}
+/** Pure: the deferral the daemon records for a route straight to the operator. */
+export function operatorRouteDeferral(route) {
+    return {
+        summary: `Handed to the operator without a supervisor session: ${route.detail}.`,
+        rationale: 'The Tower supervisor answers what lies within the scope a team is solving for under an arm; this escalation ' +
+            `is outside what any agent can settle (${route.reason}), so it goes to the operator as filed.`,
+        evidence: { route: route.reason, detail: route.detail },
+    };
+}
+/** Answered: hand the answer to the live team, and backstop the decision record. */
+async function onAnswered(st, esc, focusId, now, sessionId) {
+    const delivery = await st.deps.deliverAnswer({ focusId, rearmValues: now.answeredAt ? [now.answeredAt] : [] });
+    log.info(`[tower-escalation] the supervisor answered escalation ${esc.escalationId.slice(0, 8)}; ` +
+        (delivery.delivered ? 'injected into the live team.' : `no live team took it (${delivery.detail ?? 'none'}); it is read back at the next spawn.`));
+    const record = await st.deps.listTowerDecisions(focusId);
+    if (record.decisions.some((d) => d.kind === 'escalation_answered' && d.escalationId === esc.escalationId))
+        return;
+    await st.deps.recordTowerDecision({
+        focusId, kind: 'escalation_answered', decidedByKind: 'daemon', escalationId: esc.escalationId,
+        summary: 'The Tower supervisor answered this escalation; its own decision record did not land.',
+        rationale: 'Recorded by the daemon so the answer is on the focus record; the answer text is on the escalation.',
+        evidence: { supervisorSessionId: sessionId, answeredAt: now.answeredAt },
+    });
+}
+/** After a session exits: deliver an answer, leave a deferral, defer a crash, count an undecided run. */
+async function settle(st, esc, focus, result, sessionId) {
+    const detail = describeEnd(result);
+    const now = await st.deps.readEscalation(esc.escalationId);
+    if (now.towerState === 'answered') {
+        st.attempts.delete(esc.escalationId);
+        await onAnswered(st, esc, focus.focusId, now, sessionId);
+        return;
+    }
+    if (now.towerState !== 'pending' || !['pending', 'in_review'].includes(now.status)) {
+        st.attempts.delete(esc.escalationId);
+        return;
+    }
+    if (!ran(result)) {
+        log.info(`[tower-escalation] supervisor for ${esc.escalationId.slice(0, 8)} did not run (${detail}); the next sweep retries.`);
+        return;
+    }
+    const evidence = { supervisorSessionId: sessionId, lastDetail: detail };
+    if (crashed(result)) {
+        await deferAs(st, esc, `The Tower supervisor session ended abnormally (${detail}); handed to the operator.`, 'A supervisor that crashed decided nothing; the escalation is left for the operator rather than retried blind.', evidence);
+        return;
+    }
+    const tried = (st.attempts.get(esc.escalationId) ?? 0) + 1;
+    st.attempts.set(esc.escalationId, tried);
+    log.warn(`[tower-escalation] supervisor for ${esc.escalationId.slice(0, 8)} ${detail} without deciding (attempt ${tried} of ${TOWER_ESCALATION_MAX_ATTEMPTS}).`);
+    if (tried >= TOWER_ESCALATION_MAX_ATTEMPTS) {
+        await deferAs(st, esc, `The Tower supervisor ran ${tried} time(s) without deciding; handed to the operator.`, 'No session answered or deferred it; the daemon stops spending sessions on it and the operator decides.', { ...evidence, attempts: tried });
+    }
+}
+/** One session inside a governor slot: gather, prompt, spawn, settle. */
+async function runSession(st, esc, focus, config) {
+    const governor = st.deps.readGovernor();
+    let token = null;
+    if (governor) {
+        token = governor.tryAcquireSlot(TOWER_ESCALATION_GOVERNOR_ENGINE);
+        if (!token) {
+            log.info(`[tower-escalation] no governor slot free for ${esc.escalationId.slice(0, 8)}; the next sweep retries.`);
+            return;
+        }
+    }
+    try {
+        const repoRoot = st.deps.focusWorktreePath(focus.focusId) ?? config.repoPath;
+        const context = await st.deps.gatherContext({ focus, config, repoRoot });
+        const supervisorSessionId = st.deps.newSessionId();
+        const prompt = buildTowerEscalationPrompt({ focus, escalation: esc, supervisorSessionId, context });
+        log.info(`[tower-escalation] deciding escalation ${esc.escalationId.slice(0, 8)} of "${focus.focusName}" (session ${supervisorSessionId.slice(0, 8)}).`);
+        const result = await st.deps.spawn({
+            config, prompt, cwd: repoRoot, focusId: focus.focusId, escalationId: esc.escalationId,
+            model: st.deps.model, timeoutMs: TOWER_ESCALATION_TIMEOUT_MS, allowedTools: TOWER_ESCALATION_MCP_TOOLS,
+        });
+        await settle(st, esc, focus, result, supervisorSessionId);
+    }
+    finally {
+        if (token && governor)
+            governor.releaseSlot(token);
+    }
+}
+/** One step for one pending escalation. Never throws. */
+async function step(st, esc, focuses, config) {
+    if (st.inFlight.has(esc.escalationId))
+        return 'in_flight';
+    try {
+        const focus = esc.focusId ? focuses.get(esc.focusId) ?? null : null;
+        const route = routeTeamEscalation({ disposition: esc.disposition, metadata: esc.metadata, focus });
+        if (route.route === 'operator') {
+            const d = operatorRouteDeferral(route);
+            await deferAs(st, esc, d.summary, d.rationale, d.evidence);
+            return 'deferred';
+        }
+        if (!focus)
+            return 'skipped';
+        const scoped = st.deps.productConfig(config, focus.productId);
+        if (!scoped)
+            return 'skipped';
+        if ((st.attempts.get(esc.escalationId) ?? 0) >= TOWER_ESCALATION_MAX_ATTEMPTS) {
+            await deferAs(st, esc, 'The Tower supervisor could not decide it; handed to the operator.', 'Its attempts ran out before a restart of this sweep could hand it on.', { attempts: st.attempts.get(esc.escalationId) });
+            return 'deferred';
+        }
+        const run = runSession(st, esc, focus, scoped)
+            .catch((err) => log.warn(`[tower-escalation] supervision of ${esc.escalationId.slice(0, 8)} failed: ${err.message}; the next sweep retries.`))
+            .finally(() => st.inFlight.delete(esc.escalationId));
+        st.inFlight.set(esc.escalationId, run);
+        return 'started';
+    }
+    catch (err) {
+        log.warn(`[tower-escalation] could not route escalation ${esc.escalationId.slice(0, 8)}: ${err.message}; the next sweep retries.`);
+        return 'unreadable';
+    }
+}
+/** Pure: whether a pending row belongs to a product this daemon runs. */
+export function ownedByThisDaemon(esc, productIds, focusIds) {
+    if (esc.productId !== null)
+        return productIds.has(esc.productId);
+    return esc.focusId !== null && focusIds.has(esc.focusId);
+}
+async function readFocuses(st, config, counts) {
+    const focuses = new Map();
+    for (const product of config.products) {
+        try {
+            for (const f of await st.deps.listFocuses(product.id))
+                focuses.set(f.focusId, f);
+        }
+        catch (err) {
+            log.warn(`[tower-escalation] focus read failed for product ${product.id.slice(0, 8)}: ${err.message}`);
+            counts.unreadable += 1;
+            return null;
+        }
+    }
+    return focuses;
+}
+/** Sweep the pending team escalations of every configured product. */
+async function sweepPending(st) {
+    const counts = emptyCounts();
+    const config = st.deps.readConfig();
+    if (!config)
+        return counts;
+    let pending;
+    try {
+        pending = await st.deps.listPending();
+    }
+    catch (err) {
+        log.warn(`[tower-escalation] pending read failed: ${err.message}`);
+        counts.unreadable += 1;
+        return counts;
+    }
+    if (pending.length === 0)
+        return counts;
+    // A focus read that fails routes nothing: an absent focus would read as closed and defer a live one.
+    const focuses = await readFocuses(st, config, counts);
+    if (!focuses)
+        return counts;
+    const productIds = new Set(config.products.map((p) => p.id));
+    for (const esc of pending) {
+        if (!ownedByThisDaemon(esc, productIds, new Set(focuses.keys())))
+            continue;
+        counts.pending += 1;
+        const outcome = await step(st, esc, focuses, config);
+        if (outcome === 'started')
+            counts.started += 1;
+        else if (outcome === 'in_flight')
+            counts.inFlight += 1;
+        else if (outcome === 'deferred')
+            counts.deferred += 1;
+        else if (outcome === 'unreadable')
+            counts.unreadable += 1;
+        else
+            counts.skipped += 1;
+    }
+    return counts;
+}
+/** Build it (the composition root binds one per process). */
+export function createTowerEscalationSupervisor(deps) {
+    const st = { deps, inFlight: new Map(), attempts: new Map() };
+    return {
+        sweep: () => sweepPending(st),
+        settled: async () => { await Promise.all([...st.inFlight.values()]); },
+    };
+}
+//# sourceMappingURL=tower-escalation-session.js.map