@vercel/factory 0.0.8 → 0.0.10

package/dist/index.d.mts

@@ -1,8 +1,8 @@
 import { a as StoredEntry, i as StoreDriver, n as RecordExistsError, o as StoredRecord, r as RecordNotFoundError, s as VersionConflictError, t as CollectionName } from "./driver-CrZsy7sm.mjs";
+import { a as factoryConfigSchema, i as factoryConfigRepositorySchema, n as FactoryConfigInput, r as defineFactory, t as FactoryConfig } from "./factory-config-Bu4mklm9.mjs";
 import { a as signalSchema, c as ReplyTo, d as replyToSchema, f as schemaVersionSchema, i as signalOutcomeSchema, l as SCHEMA_VERSION, m as vocabularySchema, n as SignalOutcome, o as signalSourceSchema, p as usdSchema, r as SignalSource, s as standardSignalSources, t as Signal, u as isoDateTimeSchema } from "./signal-CHVEmzvI.mjs";
-import { $ as ReceiptPhase, A as TaskPatch, B as taskDevboxSchema, C as ChangeTransitionOptions, Ct as changeIdSchema, D as CreateTaskInput, Dt as repositoryIdsSchema, E as CreateStoresOptions, Et as repositoryIdSchema, F as TaskKind, G as taskStateSchema, H as taskOriginSchema, I as TaskState, J as repositorySchema, K as Repository, L as harnessSchema, M as createStores, N as Task, O as DecideSignalOptions, Ot as signalIdSchema, P as TaskApproval, Q as ReceiptKind, R as standardTaskKinds, S as ChangePatch, St as TaskId, T as CreateSignalInput, Tt as receiptIdSchema, U as taskQuestionSchema, V as taskKindSchema, W as taskSchema, X as Cost, Y as repositorySlugSchema, Z as Receipt, _ as findingVerificationMethodSchema, _t as ChangeId, a as approvalRuleSchema, at as receiptStateSchema, b as ApprovalDecision, bt as RepositoryId, c as Finding, ct as standardReceiptStates, d as FindingVerification, dt as ChangeState, et as ReceiptState, f as findingCategorySchema, ft as Level, g as findingVerificationLevelSchema, gt as levelSchema, h as findingSchema, ht as changeStateSchema, i as approvalPolicySchema, it as receiptSchema, j as TaskTransitionOptions, k as FactoryStores, kt as taskIdSchema, l as FindingCategory, lt as Change, m as findingPrioritySchema, mt as changeSchema, n as ApprovalRule, nt as receiptKindSchema, o as defaultApprovalPolicy, ot as standardReceiptKinds, p as findingFingerprint, pt as changeEvidenceSchema, q as RepositorySlug, r as ApprovalSubject, rt as receiptPhaseSchema, s as requiresApproval, st as standardReceiptPhases, t as ApprovalPolicy, tt as costSchema, u as FindingPriority, ut as ChangeEvidence, v as findingVerificationSchema, vt as FactoryId, w as CreateChangeInput, wt as factoryIdSchema, x as ApprovalError, xt as SignalId, y as AppendReceiptInput, yt as ReceiptId, z as taskApprovalSchema } from "./approval-qkxww0wJ.mjs";
+import { $ as Cost, A as FactoryStores, At as repositoryIdsSchema, B as standardTaskKinds, C as ChangePatch, Ct as RepositoryId, D as CreateStoresOptions, Dt as factoryIdSchema, E as CreateSignalInput, Et as changeIdSchema, F as TaskApproval, G as taskOriginSchema, H as taskDevboxSchema, I as TaskKind, J as taskStateSchema, K as taskQuestionSchema, L as TaskState, M as TaskTransitionOptions, Mt as taskIdSchema, N as createStores, O as CreateTaskInput, Ot as receiptIdSchema, P as Task, Q as repositorySlugSchema, R as coordinationRepositoryIdsSchema, S as ChangeAssociationError, St as ReceiptId, T as CreateChangeInput, Tt as TaskId, U as taskExecutionRepositoryIdsSchema, V as taskApprovalSchema, W as taskKindSchema, X as RepositorySlug, Y as Repository, Z as repositorySchema, _ as findingVerificationMethodSchema, _t as changeSchema, a as approvalRuleSchema, at as receiptKindSchema, b as ApprovalDecision, bt as ChangeId, c as Finding, ct as receiptStateSchema, d as FindingVerification, dt as standardReceiptStates, et as Receipt, f as findingCategorySchema, ft as Change, g as findingVerificationLevelSchema, gt as changeEvidenceSchema, h as findingSchema, ht as Level, i as approvalPolicySchema, it as costSchema, j as TaskPatch, jt as signalIdSchema, k as DecideSignalOptions, kt as repositoryIdSchema, l as FindingCategory, lt as standardReceiptKinds, m as findingPrioritySchema, mt as ChangeState, n as ApprovalRule, nt as ReceiptPhase, o as defaultApprovalPolicy, ot as receiptPhaseSchema, p as findingFingerprint, pt as ChangeEvidence, q as taskSchema, r as ApprovalSubject, rt as ReceiptState, s as requiresApproval, st as receiptSchema, t as ApprovalPolicy, tt as ReceiptKind, u as FindingPriority, ut as standardReceiptPhases, v as findingVerificationSchema, vt as changeStateSchema, w as ChangeTransitionOptions, wt as SignalId, x as ApprovalError, xt as FactoryId, y as AppendReceiptInput, yt as levelSchema, z as harnessSchema } from "./approval-CDiBco2V.mjs";
 import { z } from "zod";
-import { EveNextConfig, EveNextConfigFunction, EveNextConfigInput } from "eve/next";
 //#region src/briefs.d.ts
 /** The finding behind a task, when its signal carries one. */
 declare function findingForTask(stores: FactoryStores, task: Task): Promise<Finding | null>;
@@ -14,50 +14,6 @@ declare function fixBrief(task: Task, repository: Repository, finding: Finding |
 /** The scanner's starting message for a scan task. */
 declare function scanBrief(task: Task, repository: Repository): string;
 //#endregion
-//#region src/schema/factory-config.d.ts
-declare const factoryConfigRepositorySchema: z.ZodObject<{
-  slug: z.ZodString;
-  dependsOn: z.ZodDefault<z.ZodArray<z.ZodString>>;
-}, z.core.$strict>;
-declare const factoryConfigSchema: z.ZodObject<{
-  connectors: z.ZodDefault<z.ZodObject<{
-    github: z.ZodArray<z.ZodObject<{
-      owner: z.ZodString;
-      connector: z.ZodString;
-    }, z.core.$strict>>;
-    slack: z.ZodDefault<z.ZodArray<z.ZodObject<{
-      connector: z.ZodString;
-    }, z.core.$strict>>>;
-  }, z.core.$strict>>;
-  repositories: z.ZodArray<z.ZodObject<{
-    slug: z.ZodString;
-    dependsOn: z.ZodDefault<z.ZodArray<z.ZodString>>;
-  }, z.core.$strict>>;
-  operators: z.ZodArray<z.ZodString>;
-  approval: z.ZodDefault<z.ZodArray<z.ZodObject<{
-    source: z.ZodOptional<z.ZodString>;
-    kind: z.ZodOptional<z.ZodString>;
-    priority: z.ZodOptional<z.ZodArray<z.ZodEnum<{
-      P0: "P0";
-      P1: "P1";
-      P2: "P2";
-      P3: "P3";
-    }>>>;
-    require: z.ZodBoolean;
-  }, z.core.$strict>>>;
-}, z.core.$strict>;
-type FactoryConfig = z.infer<typeof factoryConfigSchema>;
-type FactoryConfigInput = z.input<typeof factoryConfigSchema>;
-declare function defineFactory(config: FactoryConfigInput): FactoryConfig;
-//#endregion
-//#region src/build-factory.d.ts
-interface FactoryArgs<TConfig extends EveNextConfig = EveNextConfig> {
-  factoryConfig: FactoryConfigInput;
-  nextConfig: EveNextConfigInput<TConfig>;
-  root?: string;
-}
-declare function buildFactory<TConfig extends EveNextConfig>({ factoryConfig, nextConfig, root }: FactoryArgs<TConfig>): EveNextConfigFunction<TConfig>;
-//#endregion
 //#region src/changes.d.ts
 interface AdoptPullRequestInput {
   repositoryId: RepositoryId;
@@ -94,6 +50,75 @@ declare const DEFAULT_MAX_LAUNCH_ATTEMPTS = 45;
  */
 declare function dispatchTask(stores: FactoryStores, taskId: TaskId, options: DispatchOptions): Promise<Task>;
 //#endregion
+//#region src/metrics.d.ts
+/**
+ * The derived review bucket from the default risk x confidence table. Derived
+ * at read time, never stored; "blocked" is a bucket, not a change state.
+ */
+type ReviewBucket = "stamp" | "review" | "blocked";
+declare function reviewBucket(risk: Level, confidence: Level): ReviewBucket;
+interface LedgerRows {
+  changes: readonly Change[];
+  signals: readonly Signal[];
+  receipts: readonly Receipt[];
+  tasks: readonly Task[];
+}
+interface MetricsOptions {
+  /** Evaluation time; defaults to the current time. */
+  now?: Date;
+  /** Days a landed change must hold without a rollback. Default 7. */
+  holdDays?: number;
+}
+interface LedgerMetrics {
+  /**
+   * Changes a human merged that reached deployed (rolled_out for high risk)
+   * and did not roll back within the hold window. Includes provisional ones.
+   */
+  landed: number;
+  /** Landed changes still inside the hold window; the number may drop. */
+  provisional: number;
+  /** landed / (landed + rolled back + closed after ready). Null when nothing decided. */
+  stickRate: number | null;
+  /**
+   * Not computable from ledger rows: needs a record of human commits pushed
+   * to the pull request after ready, which nothing writes today.
+   */
+  stampedClean: null;
+  /** Median ms from the ready receipt to the merged receipt, per review bucket. */
+  humanTimeMs: {
+    stamp: number | null;
+    review: number | null;
+  };
+  /** Sum of settled task cost over landed changes / landed. Null until budgets settle. */
+  costPerLandedUsd: number | null;
+  /** Signals triage turned away plus changes closed in verification. */
+  filtered: number;
+}
+/**
+ * The six product metrics from ledger rows alone. One rule governs them: a
+ * change counts only after a human merged it and it stayed. Activity that
+ * never landed is not a result. Compute over rows already filtered to the
+ * period and repositories you are reporting on.
+ */
+declare function computeLedgerMetrics(rows: LedgerRows, options?: MetricsOptions): LedgerMetrics;
+type HealthColor = "green" | "yellow" | "red";
+interface HealthOptions {
+  now?: Date;
+  /** Open-change cap from factory configuration; omitted disables that check. */
+  maxOpenChanges?: number;
+}
+interface RepositoryHealth {
+  color: HealthColor;
+  /** Every rule that fired, so the color is explainable from rows. */
+  reasons: string[];
+}
+/**
+ * Green, yellow, or red from rows, never from a model. Budget and onboarding
+ * signals are not evaluated yet: budgets do not settle and onboarding
+ * investigations are not recorded, so those spec rules have no rows to read.
+ */
+declare function computeRepositoryHealth(rows: LedgerRows, options?: HealthOptions): RepositoryHealth;
+//#endregion
 //#region src/schema/budget.d.ts
 declare const budgetMonthSchema: z.ZodString;
 declare const budgetSchema: z.ZodObject<{
@@ -183,5 +208,5 @@ interface SweepResult {
  */
 declare function sweepQueued(stores: FactoryStores, options: SweepOptions): Promise<SweepResult>;
 //#endregion
-export { AdoptPullRequestInput, AppendReceiptInput, ApprovalDecision, ApprovalError, ApprovalPolicy, ApprovalRule, ApprovalSubject, Budget, Change, ChangeEvidence, ChangeId, ChangePatch, ChangeState, ChangeTransitionOptions, CollectionName, Cost, CreateChangeInput, CreateSignalInput, CreateStoresOptions, CreateTaskInput, DEFAULT_MAX_LAUNCH_ATTEMPTS, DecideSignalOptions, DispatchOptions, DispatchRefusedError, FactoryArgs, FactoryConfig, FactoryConfigInput, FactoryId, FactoryStores, Finding, FindingCategory, FindingPriority, FindingVerification, InvalidTransitionError, Level, Receipt, ReceiptId, ReceiptKind, ReceiptPhase, ReceiptState, RecordExistsError, RecordNotFoundError, ReplyTo, Repository, RepositoryId, RepositorySlug, SCHEMA_VERSION, Signal, SignalCreator, SignalId, SignalOutcome, SignalSource, StoreDriver, StoredEntry, StoredRecord, SweepOptions, SweepResult, Task, TaskApproval, TaskId, TaskKind, TaskLauncher, TaskPatch, TaskState, TaskTransitionOptions, Transition, TransitionActor, VersionConflictError, adoptPullRequest, approvalPolicySchema, approvalRuleSchema, assertTransition, budgetMonthSchema, budgetSchema, buildFactory, changeEvidenceSchema, changeIdSchema, changeInitialState, changeSchema, changeStateSchema, changeTransitions, costSchema, createInMemoryDriver, createSignalCreator, createStores, defaultApprovalPolicy, defineFactory, dispatchTask, factoryConfigRepositorySchema, factoryConfigSchema, factoryIdSchema, findingCategorySchema, findingFingerprint, findingForTask, findingPrioritySchema, findingSchema, findingVerificationLevelSchema, findingVerificationMethodSchema, findingVerificationSchema, fixBrief, harnessSchema, isTransitionAllowed, isoDateTimeSchema, legalNextStates, levelSchema, receiptIdSchema, receiptKindSchema, receiptPhaseSchema, receiptSchema, receiptStateSchema, replyToSchema, repositoryIdSchema, repositoryIdsSchema, repositorySchema, repositorySlugSchema, requiresApproval, scanBrief, schemaVersionSchema, signalIdSchema, signalInitialOutcome, signalOutcomeSchema, signalOutcomeTransitions, signalSchema, signalSourceSchema, standardReceiptKinds, standardReceiptPhases, standardReceiptStates, standardSignalSources, standardTaskKinds, sweepQueued, taskApprovalSchema, taskDevboxSchema, taskIdSchema, taskInitialState, taskKindSchema, taskOriginSchema, taskQuestionSchema, taskSchema, taskStateSchema, taskTransitions, terminalStates, usdSchema, vocabularySchema };
+export { AdoptPullRequestInput, AppendReceiptInput, ApprovalDecision, ApprovalError, ApprovalPolicy, ApprovalRule, ApprovalSubject, Budget, Change, ChangeAssociationError, ChangeEvidence, ChangeId, ChangePatch, ChangeState, ChangeTransitionOptions, CollectionName, Cost, CreateChangeInput, CreateSignalInput, CreateStoresOptions, CreateTaskInput, DEFAULT_MAX_LAUNCH_ATTEMPTS, DecideSignalOptions, DispatchOptions, DispatchRefusedError, FactoryConfig, FactoryConfigInput, FactoryId, FactoryStores, Finding, FindingCategory, FindingPriority, FindingVerification, HealthColor, HealthOptions, InvalidTransitionError, LedgerMetrics, LedgerRows, Level, MetricsOptions, Receipt, ReceiptId, ReceiptKind, ReceiptPhase, ReceiptState, RecordExistsError, RecordNotFoundError, ReplyTo, Repository, RepositoryHealth, RepositoryId, RepositorySlug, ReviewBucket, SCHEMA_VERSION, Signal, SignalCreator, SignalId, SignalOutcome, SignalSource, StoreDriver, StoredEntry, StoredRecord, SweepOptions, SweepResult, Task, TaskApproval, TaskId, TaskKind, TaskLauncher, TaskPatch, TaskState, TaskTransitionOptions, Transition, TransitionActor, VersionConflictError, adoptPullRequest, approvalPolicySchema, approvalRuleSchema, assertTransition, budgetMonthSchema, budgetSchema, changeEvidenceSchema, changeIdSchema, changeInitialState, changeSchema, changeStateSchema, changeTransitions, computeLedgerMetrics, computeRepositoryHealth, coordinationRepositoryIdsSchema, costSchema, createInMemoryDriver, createSignalCreator, createStores, defaultApprovalPolicy, defineFactory, dispatchTask, factoryConfigRepositorySchema, factoryConfigSchema, factoryIdSchema, findingCategorySchema, findingFingerprint, findingForTask, findingPrioritySchema, findingSchema, findingVerificationLevelSchema, findingVerificationMethodSchema, findingVerificationSchema, fixBrief, harnessSchema, isTransitionAllowed, isoDateTimeSchema, legalNextStates, levelSchema, receiptIdSchema, receiptKindSchema, receiptPhaseSchema, receiptSchema, receiptStateSchema, replyToSchema, repositoryIdSchema, repositoryIdsSchema, repositorySchema, repositorySlugSchema, requiresApproval, reviewBucket, scanBrief, schemaVersionSchema, signalIdSchema, signalInitialOutcome, signalOutcomeSchema, signalOutcomeTransitions, signalSchema, signalSourceSchema, standardReceiptKinds, standardReceiptPhases, standardReceiptStates, standardSignalSources, standardTaskKinds, sweepQueued, taskApprovalSchema, taskDevboxSchema, taskExecutionRepositoryIdsSchema, taskIdSchema, taskInitialState, taskKindSchema, taskOriginSchema, taskQuestionSchema, taskSchema, taskStateSchema, taskTransitions, terminalStates, usdSchema, vocabularySchema };
 //# sourceMappingURL=index.d.mts.map

package/dist/index.mjs

@@ -1,10 +1,10 @@
 import { a as repositoryIdsSchema, c as SCHEMA_VERSION, d as schemaVersionSchema, f as usdSchema, i as repositoryIdSchema, l as isoDateTimeSchema, n as factoryIdSchema, o as signalIdSchema, p as vocabularySchema, r as receiptIdSchema, s as taskIdSchema, t as changeIdSchema, u as replyToSchema } from "./id-DwCihQr4.mjs";
-import { C as findingPrioritySchema, D as findingVerificationSchema, E as findingVerificationMethodSchema, S as findingFingerprint, T as findingVerificationLevelSchema, _ as approvalPolicySchema, a as taskKindSchema, b as requiresApproval, c as taskSchema, d as changeSchema, f as changeStateSchema, g as dispatchTask, h as DispatchRefusedError, i as taskDevboxSchema, l as taskStateSchema, m as DEFAULT_MAX_LAUNCH_ATTEMPTS, n as standardTaskKinds, o as taskOriginSchema, p as levelSchema, r as taskApprovalSchema, s as taskQuestionSchema, t as harnessSchema, u as changeEvidenceSchema, v as approvalRuleSchema, w as findingSchema, x as findingCategorySchema, y as defaultApprovalPolicy } from "./task-BxTU3MJb.mjs";
+import { a as findingCategorySchema, c as findingSchema, d as findingVerificationSchema, i as requiresApproval, l as findingVerificationLevelSchema, n as approvalRuleSchema, o as findingFingerprint, r as defaultApprovalPolicy, s as findingPrioritySchema, t as approvalPolicySchema, u as findingVerificationMethodSchema } from "./approval-DdvEKLiE.mjs";
+import { _ as taskSchema, a as DEFAULT_MAX_LAUNCH_ATTEMPTS, c as coordinationRepositoryIdsSchema, d as taskApprovalSchema, f as taskDevboxSchema, g as taskQuestionSchema, h as taskOriginSchema, i as levelSchema, l as harnessSchema, m as taskKindSchema, n as changeSchema, o as DispatchRefusedError, p as taskExecutionRepositoryIdsSchema, r as changeStateSchema, s as dispatchTask, t as changeEvidenceSchema, u as standardTaskKinds, v as taskStateSchema } from "./change-BPYhWKuL.mjs";
 import { n as RecordNotFoundError, r as VersionConflictError, t as RecordExistsError } from "./driver-Bbd25rNM.mjs";
+import { a as repositorySlugSchema, i as repositorySchema, n as factoryConfigRepositorySchema, r as factoryConfigSchema, t as defineFactory } from "./factory-config-ifd3JxiU.mjs";
 import { z } from "zod";
 import { createHash, randomUUID } from "node:crypto";
-import { readdirSync } from "node:fs";
-import path from "node:path";
 //#region src/briefs.ts
 /** The finding behind a task, when its signal carries one. */
 async function findingForTask(stores, task) {
@@ -38,59 +38,6 @@ function scanBrief(task, repository) {
 	].join("\n");
 }
 //#endregion
-//#region src/schema/repository.ts
-const repositorySlugSchema = z.string().regex(/^[a-z0-9]([a-z0-9-]*[a-z0-9])?\/[a-z0-9._-]+$/).describe("owner/name, lowercase, e.g. acme/web.");
-const repositorySchema = z.strictObject({
-	schemaVersion: schemaVersionSchema,
-	id: repositoryIdSchema,
-	slug: repositorySlugSchema,
-	defaultBranch: z.string().min(1).describe("Branch changes land on, usually main."),
-	enabled: z.boolean().describe("Whether the factory may work on this repository."),
-	dependsOn: z.array(repositorySlugSchema).describe("Slugs of repositories this one consumes, for multi-repo work ordering."),
-	devbox: z.strictObject({
-		projectId: z.string().min(1),
-		teamId: z.string().min(1),
-		snapshot: z.string().min(1).optional().describe("Prebuilt snapshot to boot from.")
-	}).optional().describe("Devbox execution config. Absent when this repository never uses devboxes."),
-	connectedAt: isoDateTimeSchema
-});
-//#endregion
-//#region src/schema/factory-config.ts
-const factoryConfigRepositorySchema = z.strictObject({
-	slug: repositorySlugSchema.describe("Repository this factory may work on."),
-	dependsOn: z.array(repositorySlugSchema).default([]).describe("Repositories that must land changes before this repository.")
-});
-const githubConnectorSchema = z.strictObject({
-	owner: z.string().regex(/^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/).describe("GitHub user or organization that owns this connector installation."),
-	connector: z.string().regex(/^github\/[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/).describe("Vercel Connect UID installed for this GitHub owner.")
-});
-const slackConnectorSchema = z.strictObject({ connector: z.string().regex(/^slack\/[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/).describe("Vercel Connect UID installed for this Slack app.") });
-const factoryConfigSchema = z.strictObject({
-	connectors: z.strictObject({
-		github: z.array(githubConnectorSchema).refine((connectors) => new Set(connectors.map(({ owner }) => owner)).size === connectors.length, "GitHub connector owners must be unique."),
-		slack: z.array(slackConnectorSchema).max(1, "A factory may configure one Slack connector.").default([])
-	}).default({
-		github: [],
-		slack: []
-	}).describe("Provider connections available to this factory."),
-	repositories: z.array(factoryConfigRepositorySchema).min(1).describe("Repositories this factory is allowed to inspect and change."),
-	operators: z.array(z.string().min(1)).min(1).describe("Provider-qualified identities allowed to operate this factory."),
-	approval: approvalPolicySchema.default(defaultApprovalPolicy).describe("Which tasks wait for a human before they run. First match wins.")
-});
-function defineFactory(config) {
-	return factoryConfigSchema.parse(config);
-}
-//#endregion
-//#region src/build-factory.ts
-function buildFactory({ factoryConfig, nextConfig, root = process.cwd() }) {
-	defineFactory(factoryConfig);
-	const agentDefinitions = Object.fromEntries(readdirSync(path.join(root, "agents"), { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => [entry.name, path.join(root, "agents", entry.name)]));
-	return async (phase, context) => {
-		const { withEve } = await import("eve/next");
-		return withEve(nextConfig, { agents: agentDefinitions })(phase, context);
-	};
-}
-//#endregion
 //#region src/changes.ts
 async function adoptPullRequest(stores, input) {
 	const existing = (await stores.changes.list()).find((change) => change.repositoryId === input.repositoryId && change.prNumber === input.prNumber && (change.state === "verifying" || change.state === "ready"));
@@ -109,6 +56,168 @@ async function adoptPullRequest(stores, input) {
 	});
 }
 //#endregion
+//#region src/metrics.ts
+const bucketTable = {
+	low: {
+		low: "review",
+		medium: "stamp",
+		high: "stamp"
+	},
+	medium: {
+		low: "review",
+		medium: "review",
+		high: "stamp"
+	},
+	high: {
+		low: "blocked",
+		medium: "review",
+		high: "review"
+	}
+};
+function reviewBucket(risk, confidence) {
+	return bucketTable[risk][confidence];
+}
+function collectFacts(rows) {
+	const byChange = /* @__PURE__ */ new Map();
+	for (const receipt of rows.receipts) {
+		if (receipt.kind !== "change" || receipt.changeId === void 0) continue;
+		const list = byChange.get(receipt.changeId) ?? [];
+		list.push(receipt);
+		byChange.set(receipt.changeId, list);
+	}
+	const at = (receipts, state) => {
+		const found = receipts?.find((receipt) => receipt.state === state);
+		return found === void 0 ? null : Date.parse(found.recordedAt);
+	};
+	return rows.changes.map((change) => {
+		const receipts = byChange.get(change.id);
+		const requiredState = change.risk === "high" ? "rolled_out" : "deployed";
+		return {
+			change,
+			readyAt: at(receipts, "ready"),
+			mergedAt: at(receipts, "merged"),
+			reachedAt: at(receipts, requiredState),
+			rolledBackAt: at(receipts, "rolled_back")
+		};
+	});
+}
+/** True for a change a human saw as ready and then closed unmerged. */
+function closedAfterReady(facts) {
+	return facts.change.state === "closed" && (facts.readyAt !== null || facts.change.decidedBy !== void 0);
+}
+function median(values) {
+	if (values.length === 0) return null;
+	const sorted = [...values].sort((a, b) => a - b);
+	const mid = Math.floor(sorted.length / 2);
+	return sorted.length % 2 === 1 ? sorted[mid] : (sorted[mid - 1] + sorted[mid]) / 2;
+}
+/**
+* The six product metrics from ledger rows alone. One rule governs them: a
+* change counts only after a human merged it and it stayed. Activity that
+* never landed is not a result. Compute over rows already filtered to the
+* period and repositories you are reporting on.
+*/
+function computeLedgerMetrics(rows, options = {}) {
+	const now = (options.now ?? /* @__PURE__ */ new Date()).getTime();
+	const holdMs = (options.holdDays ?? 7) * 24 * 60 * 60 * 1e3;
+	const facts = collectFacts(rows);
+	let landed = 0;
+	let provisional = 0;
+	let rolledBack = 0;
+	let closedAfterReadyCount = 0;
+	let closedInVerification = 0;
+	const landedChangeIds = /* @__PURE__ */ new Set();
+	for (const fact of facts) {
+		const { change } = fact;
+		if (fact.rolledBackAt !== null) {
+			rolledBack += 1;
+			continue;
+		}
+		if (change.state === "closed") {
+			if (closedAfterReady(fact)) closedAfterReadyCount += 1;
+			else closedInVerification += 1;
+			continue;
+		}
+		if (change.decidedBy !== void 0 && fact.reachedAt !== null) {
+			landed += 1;
+			landedChangeIds.add(change.id);
+			if (now - fact.reachedAt < holdMs) provisional += 1;
+		}
+	}
+	const stickDenominator = landed + rolledBack + closedAfterReadyCount;
+	const humanTimes = {
+		stamp: [],
+		review: []
+	};
+	for (const fact of facts) {
+		if (fact.readyAt === null || fact.mergedAt === null) continue;
+		const bucket = reviewBucket(fact.change.risk, fact.change.confidence);
+		if (bucket === "blocked") continue;
+		humanTimes[bucket].push(fact.mergedAt - fact.readyAt);
+	}
+	let settledOverLanded = 0;
+	let sawSettledCost = false;
+	for (const task of rows.tasks) {
+		if (task.settledUsd === void 0) continue;
+		if (task.kind === "code_change" && task.changeId !== void 0 && landedChangeIds.has(task.changeId)) {
+			settledOverLanded += task.settledUsd;
+			sawSettledCost = true;
+		}
+	}
+	const rejectedSignals = rows.signals.filter((signal) => signal.outcome !== "pending" && signal.outcome !== "accepted").length;
+	return {
+		landed,
+		provisional,
+		stickRate: stickDenominator === 0 ? null : landed / stickDenominator,
+		stampedClean: null,
+		humanTimeMs: {
+			stamp: median(humanTimes.stamp),
+			review: median(humanTimes.review)
+		},
+		costPerLandedUsd: sawSettledCost && landed > 0 ? settledOverLanded / landed : null,
+		filtered: rejectedSignals + closedInVerification
+	};
+}
+const openChangeStates = /* @__PURE__ */ new Set(["verifying", "ready"]);
+/**
+* Green, yellow, or red from rows, never from a model. Budget and onboarding
+* signals are not evaluated yet: budgets do not settle and onboarding
+* investigations are not recorded, so those spec rules have no rows to read.
+*/
+function computeRepositoryHealth(rows, options = {}) {
+	const now = (options.now ?? /* @__PURE__ */ new Date()).getTime();
+	const dayMs = 864e5;
+	const red = [];
+	const yellow = [];
+	for (const receipt of rows.receipts) {
+		if (now - Date.parse(receipt.recordedAt) >= dayMs) continue;
+		if (receipt.state === "rolled_back") red.push(`rollback in the last 24h (${receipt.receiptId})`);
+		if (receipt.state === "cancelled" && receipt.reason?.toLowerCase().includes("kill")) red.push(`kill in the last 24h (${receipt.receiptId})`);
+	}
+	const openQuestions = rows.tasks.filter((task) => task.kind === "question" && task.state === "needs_human").length;
+	if (openQuestions > 0) yellow.push(`${openQuestions} open question(s)`);
+	const needsHuman = rows.tasks.filter((task) => task.kind !== "question" && task.state === "needs_human").length;
+	if (needsHuman > 0) yellow.push(`${needsHuman} task(s) waiting on a human`);
+	const blocked = rows.changes.filter((change) => openChangeStates.has(change.state) && reviewBucket(change.risk, change.confidence) === "blocked").length;
+	if (blocked > 0) yellow.push(`${blocked} change(s) in the blocked bucket`);
+	if (options.maxOpenChanges !== void 0) {
+		const open = rows.changes.filter((change) => openChangeStates.has(change.state)).length;
+		if (open >= options.maxOpenChanges) yellow.push(`open changes at the cap (${open}/${options.maxOpenChanges})`);
+	}
+	if (red.length > 0) return {
+		color: "red",
+		reasons: red
+	};
+	if (yellow.length > 0) return {
+		color: "yellow",
+		reasons: yellow
+	};
+	return {
+		color: "green",
+		reasons: []
+	};
+}
+//#endregion
 //#region src/schema/budget.ts
 const budgetMonthSchema = z.string().regex(/^\d{4}-(0[1-9]|1[0-2])$/);
 const budgetSchema = z.strictObject({
@@ -139,6 +248,7 @@ const standardReceiptStates = [
 	"needs_human",
 	"cancelled",
 	"settled",
+	"ready",
 	"merged",
 	"deployed",
 	"rolled_out",
@@ -491,6 +601,18 @@ var ApprovalError = class extends Error {
 		this.reason = reason;
 	}
 };
+var ChangeAssociationError = class extends Error {
+	taskId;
+	repositoryId;
+	reason;
+	constructor(taskId, repositoryId, reason) {
+		super(`change for task "${taskId}" refused: ${reason}`);
+		this.name = "ChangeAssociationError";
+		this.taskId = taskId;
+		this.repositoryId = repositoryId;
+		this.reason = reason;
+	}
+};
 const taskReceiptStates = {
 	running: "dispatched",
 	succeeded: "succeeded",
@@ -499,6 +621,7 @@ const taskReceiptStates = {
 	cancelled: "cancelled"
 };
 const changeReceiptStates = {
+	ready: "ready",
 	merged: "merged",
 	deployed: "deployed",
 	rolled_out: "rolled_out",
@@ -741,6 +864,13 @@ function createStores(options) {
 					createdAt: timestamp,
 					updatedAt: timestamp
 				});
+				await mustRead("repositories", change.repositoryId, repositorySchema);
+				if (change.taskId !== void 0) {
+					const task = (await mustRead("tasks", change.taskId, taskSchema)).value;
+					if (task.kind !== "code_change") throw new ChangeAssociationError(change.taskId, change.repositoryId, "changes can only be produced by code_change tasks");
+					const taskRepositoryId = task.repositoryIds[0];
+					if (taskRepositoryId !== change.repositoryId) throw new ChangeAssociationError(change.taskId, change.repositoryId, `repository "${change.repositoryId}" does not match task repository "${taskRepositoryId}"`);
+				}
 				await driver.insert("changes", change.id, change);
 				return change;
 			},
@@ -858,6 +988,21 @@ async function sweepQueued(stores, options) {
 	};
 	const queued = (await stores.tasks.list()).filter((task) => task.state === "queued" && task.kind !== "question").sort((a, b) => a.createdAt.localeCompare(b.createdAt));
 	for (const task of queued) {
+		if (task.kind === "coordination") {
+			result.skipped.push({
+				taskId: task.id,
+				reason: "coordination tasks are reconciled, not dispatched"
+			});
+			continue;
+		}
+		const executionRepositoryIds = taskExecutionRepositoryIdsSchema.safeParse(task.repositoryIds);
+		if (!executionRepositoryIds.success) {
+			result.skipped.push({
+				taskId: task.id,
+				reason: "task execution requires exactly one repository"
+			});
+			continue;
+		}
 		if (task.approval === "required") {
 			result.skipped.push({
 				taskId: task.id,
@@ -873,8 +1018,7 @@ async function sweepQueued(stores, options) {
 			});
 			continue;
 		}
-		const repositoryId = task.repositoryIds?.[0];
-		const repository = repositoryId === void 0 ? null : await stores.repositories.get(repositoryId);
+		const repository = await stores.repositories.get(executionRepositoryIds.data[0]);
 		if (repository === null) {
 			result.skipped.push({
 				taskId: task.id,
@@ -902,6 +1046,6 @@ async function sweepQueued(stores, options) {
 	return result;
 }
 //#endregion
-export { ApprovalError, DEFAULT_MAX_LAUNCH_ATTEMPTS, DispatchRefusedError, InvalidTransitionError, RecordExistsError, RecordNotFoundError, SCHEMA_VERSION, VersionConflictError, adoptPullRequest, approvalPolicySchema, approvalRuleSchema, assertTransition, budgetMonthSchema, budgetSchema, buildFactory, changeEvidenceSchema, changeIdSchema, changeInitialState, changeSchema, changeStateSchema, changeTransitions, costSchema, createInMemoryDriver, createSignalCreator, createStores, defaultApprovalPolicy, defineFactory, dispatchTask, factoryConfigRepositorySchema, factoryConfigSchema, factoryIdSchema, findingCategorySchema, findingFingerprint, findingForTask, findingPrioritySchema, findingSchema, findingVerificationLevelSchema, findingVerificationMethodSchema, findingVerificationSchema, fixBrief, harnessSchema, isTransitionAllowed, isoDateTimeSchema, legalNextStates, levelSchema, receiptIdSchema, receiptKindSchema, receiptPhaseSchema, receiptSchema, receiptStateSchema, replyToSchema, repositoryIdSchema, repositoryIdsSchema, repositorySchema, repositorySlugSchema, requiresApproval, scanBrief, schemaVersionSchema, signalIdSchema, signalInitialOutcome, signalOutcomeSchema, signalOutcomeTransitions, signalSchema, signalSourceSchema, standardReceiptKinds, standardReceiptPhases, standardReceiptStates, standardSignalSources, standardTaskKinds, sweepQueued, taskApprovalSchema, taskDevboxSchema, taskIdSchema, taskInitialState, taskKindSchema, taskOriginSchema, taskQuestionSchema, taskSchema, taskStateSchema, taskTransitions, terminalStates, usdSchema, vocabularySchema };
+export { ApprovalError, ChangeAssociationError, DEFAULT_MAX_LAUNCH_ATTEMPTS, DispatchRefusedError, InvalidTransitionError, RecordExistsError, RecordNotFoundError, SCHEMA_VERSION, VersionConflictError, adoptPullRequest, approvalPolicySchema, approvalRuleSchema, assertTransition, budgetMonthSchema, budgetSchema, changeEvidenceSchema, changeIdSchema, changeInitialState, changeSchema, changeStateSchema, changeTransitions, computeLedgerMetrics, computeRepositoryHealth, coordinationRepositoryIdsSchema, costSchema, createInMemoryDriver, createSignalCreator, createStores, defaultApprovalPolicy, defineFactory, dispatchTask, factoryConfigRepositorySchema, factoryConfigSchema, factoryIdSchema, findingCategorySchema, findingFingerprint, findingForTask, findingPrioritySchema, findingSchema, findingVerificationLevelSchema, findingVerificationMethodSchema, findingVerificationSchema, fixBrief, harnessSchema, isTransitionAllowed, isoDateTimeSchema, legalNextStates, levelSchema, receiptIdSchema, receiptKindSchema, receiptPhaseSchema, receiptSchema, receiptStateSchema, replyToSchema, repositoryIdSchema, repositoryIdsSchema, repositorySchema, repositorySlugSchema, requiresApproval, reviewBucket, scanBrief, schemaVersionSchema, signalIdSchema, signalInitialOutcome, signalOutcomeSchema, signalOutcomeTransitions, signalSchema, signalSourceSchema, standardReceiptKinds, standardReceiptPhases, standardReceiptStates, standardSignalSources, standardTaskKinds, sweepQueued, taskApprovalSchema, taskDevboxSchema, taskExecutionRepositoryIdsSchema, taskIdSchema, taskInitialState, taskKindSchema, taskOriginSchema, taskQuestionSchema, taskSchema, taskStateSchema, taskTransitions, terminalStates, usdSchema, vocabularySchema };
 
 //# sourceMappingURL=index.mjs.map