tickmarkr 2.2.1 → 2.4.0

package/dist/cli/commands/init.js

@@ -1,5 +1,6 @@
+import { execFileSync } from "node:child_process";
 import { appendFileSync, cpSync, existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync } from "node:fs";
-import { join } from "node:path";
+import { join, relative } from "node:path";
 import { fileURLToPath } from "node:url";
 import { createInterface } from "node:readline/promises";
 import { parseArgs } from "node:util";
@@ -8,20 +9,20 @@ import { configTemplate, DEFAULT_CONFIG, globalConfigDir, loadConfig } from "../
 import { LEGACY_PREFIX, specTemplate } from "../../compile/native.js";
 import { BANNER, kvRow, legend, rule, statusRow, title } from "../../brand.js";
 import { tickmarkrDir } from "../../graph/graph.js";
+import { orcaHostDetected } from "../../drivers/index.js";
 import { Journal } from "../../run/journal.js";
 import { doctor } from "./doctor.js";
 import { assembleFleetEditor } from "./fleet.js";
 const SCAFFOLD_SPEC = "tickmarkr.spec.md";
 // Operator-approved (2026-07-17) environments footer — no npm install for herdr (npm package
-// "herdr" is a reserved 0.0.0 placeholder as of that date). The orca row joins it with the v2.1
-// driver: it is a THIRD execution surface an operator selects outright — `auto` still resolves
-// herdr-else-subprocess and never picks it, so the footer names it beside the other two choices.
+// "herdr" is a reserved 0.0.0 placeholder as of that date). Auto resolves herdr → orca →
+// subprocess; the orca leg is environment-only, using the two markers Orca stamps in its terminals.
 const ENVIRONMENTS_FOOTER = [
     "environments:",
-    "  herdr — the full cockpit — every worker, judge, and consult is a visible pane you can watch and unblock · https://herdr.dev",
-    "  orca — visible terminals in the Orca app — an explicit driver choice: set driver: orca (auto never picks it) · https://onorca.dev",
+    "  herdr — the full cockpit — every worker, judge, and consult is a visible pane you can watch and unblock · https://herdr.dev · auto picks it first when HERDR_ENV=1",
+    "  orca — visible terminals in the Orca app — auto picks it inside an Orca terminal after herdr and before subprocess; set driver: orca to force it · https://onorca.dev",
     "  claude code — tickmarkr init --agent installs the /tkr skills + AGENTS.md so Claude Code (or any agent CLI) drives the loop natively",
-    "  anywhere — no herdr? same fail-closed gates, headless subprocess driver",
+    "  anywhere — no herdr or Orca terminal? same fail-closed gates, headless subprocess driver (legacy: no herdr? same fail-closed gates, headless subprocess driver when Orca markers are absent)",
 ].join("\n");
 /** Latest journal without a run-end event, if any. */
 function activeRunId(cwd) {
@@ -140,17 +141,6 @@ you were handed the whole picture — list the repository root, open every guida
   direction each moves, what makes a criterion real, and why an absence or a source-text grep is never a
   criterion. Read it before authoring or repairing acceptance items.
 - **Editing \`src/gates/\`, \`src/compile/\` or \`src/graph/\`?** Read \`docs/codebase/ARCHITECTURE.md\` first.
-- **EVERY fix gets a ship/no-ship decision, recorded, at the moment it is made.** Ask one question of each
-  one: *does a user hit this defect?* If yes, the fix belongs in \`src/**\` or \`skills/**\` — the only trees
-  the package carries (\`files: [dist, schema, skills, fixtures]\`). A script, overlay, config entry or
-  operator-side workaround that resolves the symptom **locally is not the fix; it is a decision to leave
-  every other user broken**, and it must say so in writing and name the condition that removes it.
-  **The default answer is SHIP.** A local remedy is the exception and carries the burden of proof.
-  Watch for the three shapes this hides in: a fix applied where you happened to be standing rather than
-  where the defect lives; an observation filed with a product fix named in its own text and queued
-  nowhere; and a local tool that quietly grows into a product feature nobody shipped. **A defect and its
-  fix must be recorded in the same place, or the queue silently becomes a list of things everyone assumed
-  someone else had shipped.**
 ${DOCS_END}
 `;
 // Every applicable host location gets the skills, each paired with its own repository guidance
@@ -229,7 +219,28 @@ const describeDrift = (d) => [
 // should not be asked again just because a copy drifted. Staleness is a different question with a
 // different answer (`--agent --force`), and it is reported by name on every init path below.
 const skillsInstalled = (cwd) => hostTargets(cwd).every((t) => AGENT_SKILLS.every((s) => existsSync(join(t.skillsDir, s, "SKILL.md"))));
-const wizardDriverDefault = () => process.env.HERDR_ENV === "1" ? "herdr" : "auto";
+const wizardDriverDefault = () => process.env.HERDR_ENV === "1" ? "herdr" : orcaHostDetected() ? "orca" : "auto";
+function packageName(cwd) {
+    try {
+        const parsed = JSON.parse(readFileSync(join(cwd, "package.json"), "utf8"));
+        return typeof parsed.name === "string" ? parsed.name : null;
+    }
+    catch {
+        return null;
+    }
+}
+function gitTracked(cwd, path) {
+    const rel = relative(cwd, path);
+    if (rel.startsWith(".."))
+        return false;
+    try {
+        execFileSync("git", ["ls-files", "--error-unmatch", "--", rel], { cwd, stdio: "ignore" });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
 async function installAgentFiles(cwd, force, docs, notes) {
     const interactive = process.stdin.isTTY === true && process.stdout.isTTY === true;
     let prompt;
@@ -257,13 +268,14 @@ async function installAgentFiles(cwd, force, docs, notes) {
                     notes.push(`kept current ${dest}`);
                     continue;
                 }
+                const tracked = exists && gitTracked(cwd, dest);
                 if (exists && !force && !(await confirm(`Overwrite ${dest} (${describeDrift(stale)})?`))) {
-                    notes.push(`skipped existing ${dest} — ${describeDrift(stale)}; pass --force to overwrite it`);
+                    notes.push(`skipped existing ${tracked ? "tracked " : ""}${dest} — ${describeDrift(stale)}; pass --force to overwrite it`);
                     continue;
                 }
                 // whole skill dir, not just SKILL.md — the overseer ships its pane-watcher script
                 cpSync(fileURLToPath(new URL(`../../../skills/${skill}`, import.meta.url)), join(skillsDir, skill), { recursive: true });
-                notes.push(`${exists ? "overwrote" : "wrote"} ${dest}`);
+                notes.push(`${exists ? "overwrote" : "wrote"} ${tracked ? "tracked " : ""}${dest}`);
             }
             const current = existsSync(docPath) ? readFileSync(docPath, "utf8") : "";
             // The block is CANONICAL guidance ("stated once here, restated nowhere"), so a repo that has
@@ -341,6 +353,9 @@ export async function init(argv, cwd = process.cwd(), io = {}) {
     });
     // banner at START on the visual surface — every init path, not just the wizard, and never trailing the probe (operator report 2026-07-17)
     emitBanner();
+    if (packageName(cwd) === "tickmarkr") {
+        throw new Error("OBS-584: tickmarkr init refuses to run inside the tickmarkr source repository");
+    }
     const gdir = values["global-dir"] ?? globalConfigDir();
     mkdirSync(gdir, { recursive: true });
     const notes = [];

package/dist/cli/commands/plan.js

@@ -1,18 +1,20 @@
-import { allAdapters, discoverChannels, doctorAgeMs, modelAuthExclusions, probeAll, readDoctor, servableExclusions, servabilityLine } from "../../adapters/registry.js";
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+import { parseArgs } from "node:util";
+import { allAdapters, doctorAgeMs, modelAuthExclusions, probeAll, readDoctor, rolePools, servableExclusions, servabilityLine } from "../../adapters/registry.js";
 import { formatModelAuthLine, contextWindowLints, modelLints, preferEntryLints, ttyVisual } from "../../adapters/model-lints.js";
 import { GLYPHS, dim, rule, title, warn } from "../../brand.js";
-import { parseArgs } from "node:util";
 import { collateralLints, sourceScopeLints } from "../../compile/collateral.js";
 import { classifyContextPath } from "../../compile/native.js";
 import { DEFAULT_CONFIG, overlayPreferShapes, ROUTING_MODES, TIER_RANK } from "../../config/config.js";
 import { loadGraph } from "../../graph/graph.js";
 import { renderAcceptanceItem } from "../../graph/schema.js";
 import { resolveRunMode } from "../../run/daemon.js";
-import { excludedChannels, exclusionLine } from "../../route/preference.js";
+import { disallowedBy, excludedChannels, exclusionLine, routingEntrySeatLines } from "../../route/preference.js";
 import { staffLedEvidence } from "../../route/profile.js";
 import { route, RoutingError } from "../../route/router.js";
 import { auditNamedTestOracles, listVitestTests } from "../../gates/acceptance.js";
-import { modelId } from "../../gates/review.js";
+import { modelId, modelProvider } from "../../gates/review.js";
 import { loadRoutingProfile } from "../../run/journal.js";
 import { harnessLine, resolveHarness } from "../harness.js";
 import { shq } from "../../adapters/types.js";
@@ -106,10 +108,15 @@ export async function plan(argv, cwd = process.cwd(), adapters = allAdapters(),
     }
     const g = loadGraph(cwd);
     const oracleRefusals = new Map();
+    const oracleAdvisories = new Map();
     if (g.tasks.some((task) => task.acceptance.some((item) => typeof item === "object" && item.oracle === "test"))) {
         const listing = await (opts.listTests ?? listVitestTests)(cwd);
         for (const task of g.tasks) {
             const refusals = [];
+            const advisories = [];
+            const authoredTest = task.files
+                .map((path) => path.replace(/^\.\//, ""))
+                .find((path) => /^tests\/.+\.test\.ts$/.test(path) && !/[?*{[]/.test(path) && !existsSync(join(cwd, path)));
             if (listing.status === "failed") {
                 if (task.acceptance.some((item) => typeof item === "object" && item.oracle === "test")) {
                     refusals.push(`acceptance oracle unresolved — runner listing failed: ${listing.error.split("\n")[0]}`);
@@ -117,7 +124,10 @@ export async function plan(argv, cwd = process.cwd(), adapters = allAdapters(),
             }
             else {
                 for (const audit of auditNamedTestOracles(task.acceptance, listing.tests)) {
-                    if (audit.matches.length === 0) {
+                    if (audit.matches.length === 0 && authoredTest) {
+                        advisories.push(`acceptance oracle ${JSON.stringify(audit.criterion)} not yet written (worker authors ${authoredTest})`);
+                    }
+                    else if (audit.matches.length === 0) {
                         refusals.push(`acceptance oracle ${JSON.stringify(audit.criterion)} matches zero runner-listed test names`);
                     }
                     else if (audit.matches.length > 1) {
@@ -127,6 +137,8 @@ export async function plan(argv, cwd = process.cwd(), adapters = allAdapters(),
             }
             if (refusals.length)
                 oracleRefusals.set(task.id, refusals);
+            if (advisories.length)
+                oracleAdvisories.set(task.id, advisories);
         }
     }
     const inputFindings = await taskInputFindings(g.tasks, cwd);
@@ -141,7 +153,8 @@ export async function plan(argv, cwd = process.cwd(), adapters = allAdapters(),
     // readDoctor cache path: staleness line only fires here (probeAll fallback is fresh by construction).
     const cached = readDoctor(cwd);
     const health = cached ?? (await probeAll(adapters));
-    const channels = discoverChannels(cfg, adapters, health);
+    const pools = rolePools(cfg, adapters, health);
+    const channels = pools.worker;
     // VIS-04 trust ramp (VALIDATION 13-01-11): preview:true bypasses the routing.learned:off short-circuit so
     // the static-vs-learned comparison renders even when the daemon's learned routing is off. Cold ⇒ undefined ⇒
     // output byte-identical to today.
@@ -163,6 +176,13 @@ export async function plan(argv, cwd = process.cwd(), adapters = allAdapters(),
         harnessLine(resolveHarness(harnessFrom)),
         "",
     ];
+    const judgeDeny = disallowedBy(cfg.judge, cfg.routing, "judge");
+    if (judgeDeny?.by === "deny") {
+        lines.push(`REFUSAL OBS-576: judge seat ${cfg.judge.adapter}:${cfg.judge.model} is removed by flat routing.deny (${judgeDeny.entry}) — move worker-only policy to routing.deny.workers`, "");
+    }
+    const entrySeats = routingEntrySeatLines(cfg);
+    if (entrySeats.length)
+        lines.push(...entrySeats, "");
     const derivation = (shape) => {
         const floor = cfg.routing.floors[shape];
         return floor ? `    floor ${floor} ← ${mode.provenance[shape] ?? "config floors"}` : null;
@@ -223,6 +243,22 @@ export async function plan(argv, cwd = process.cwd(), adapters = allAdapters(),
     lints.push(...modelLints(cfg, health, adapters, { tty: ttyVisual() })); // health may be pre-v1.5/probeAll-fallback — no-detection branch covers both
     // v1.54 T3: dead-steering sweep — advisory only, renders with the routing lints, never alters routing.
     lints.push(...preferEntryLints(cfg, health, overlayPreferShapes(cwd)));
+    const preferMatches = (entry, pool) => pool.some((c) => entry === c.adapter || entry === `${c.adapter}:${c.model}`);
+    const lintInertPrefer = (surface, entries, poolName, pool) => {
+        for (const entry of entries ?? []) {
+            if (!preferMatches(entry, pool))
+                lints.push(`${surface} '${entry}' resolves to no live channel of ${poolName} pool`);
+        }
+    };
+    for (const [shape, entry] of Object.entries(cfg.routing.map)) {
+        lintInertPrefer(`routing.map.${shape}.prefer`, entry.prefer, "worker", pools.worker);
+    }
+    lintInertPrefer("review.prefer", cfg.review.prefer, "review", pools.review);
+    lintInertPrefer("consult.prefer", cfg.consult.prefer, "consult", pools.consult);
+    const reviewProviders = new Set(pools.review.map((c) => modelProvider(c.model, c.vendor)));
+    if (pools.review.length > 0 && reviewProviders.size < 2) {
+        lints.push(`review pool concentration: ${pools.review.length} channel(s), ${reviewProviders.size} provider(s)`);
+    }
     // The guard here was `channels.length && !fleetCanCrossVendorReview(channels)`, so the review lint went
     // SILENT at zero channels — the first-run state, where review.required is set and nothing can route at all.
     // Deleting that clause outright is worse than the silence: it fires "no cross-vendor reviewer pair in fleet"
@@ -233,7 +269,7 @@ export async function plan(argv, cwd = process.cwd(), adapters = allAdapters(),
     if (cfg.review.required && channels.length === 0) {
         lints.push("review: review.required is set but no channel can route — the fleet is empty; install or authenticate an adapter");
     }
-    else if (cfg.review.required && !fleetCanCrossVendorReview(channels)) {
+    else if (cfg.review.required && !fleetCanCrossVendorReview(pools.review)) {
         lints.push("review: no cross-vendor reviewer pair in fleet — set review.required: false to waive");
     }
     let cost = 0;
@@ -283,6 +319,8 @@ export async function plan(argv, cwd = process.cwd(), adapters = allAdapters(),
                 lines.push(d);
             lints.push(`${t.id}: unroutable — ${msg}`);
         }
+        for (const advisory of oracleAdvisories.get(t.id) ?? [])
+            lines.push(`    ! ${advisory}`);
     }
     const inputWarnings = inputFindings.filter((finding) => finding.severity === "warn");
     if (inputWarnings.length) {

package/dist/cli/commands/report.js

@@ -4,6 +4,7 @@ import { ttyVisual } from "../../adapters/model-lints.js";
 import { addUsage } from "../../adapters/types.js";
 import { dim, rule, title } from "../../brand.js";
 import { loadConfig } from "../../config/config.js";
+import { modelProvider } from "../../gates/review.js";
 import { buildProofBundle, gateDeclined } from "../../report/bundle.js";
 import { compareRuns } from "../../report/compare.js";
 import { estimateCosts } from "../../report/cost.js";
@@ -35,6 +36,22 @@ const channelLabel = (data) => {
     const { adapter, model } = a;
     return typeof adapter === "string" && typeof model === "string" ? `${adapter}:${model}` : EM;
 };
+const modelFromChannel = (channel) => channel.slice(channel.indexOf(":") + 1);
+const reviewerIdentity = (data) => {
+    const details = typeof data.details === "string" ? data.details : "";
+    const fromDetails = /reviewer\s+([^\s;()]+:[^\s;()]+)/i.exec(details)?.[1];
+    const reviewer = typeof data.reviewer === "string" ? data.reviewer : fromDetails;
+    if (!reviewer || !reviewer.includes(":"))
+        return undefined;
+    const vendor = typeof data.vendor === "string"
+        ? data.vendor
+        : /vendor:\s*([^;()]+)/i.exec(details)?.[1]?.trim()
+            ?? /\(([^;:()]+)\):/.exec(details)?.[1]?.trim();
+    const provider = typeof data.provider === "string"
+        ? data.provider
+        : modelProvider(modelFromChannel(reviewer), vendor ?? "unknown");
+    return { reviewer, provider, ...(vendor ? { vendor } : {}) };
+};
 const rateBasis = (row) => {
     if (!row.rate)
         return EM;
@@ -245,6 +262,7 @@ export function renderMarkdownRecord(runId, events, prices = [], rows = []) {
         const dispatches = events.filter((e) => e.taskId === taskId && e.event === "task-dispatch");
         const channels = dispatches.map((e) => channelLabel(e.data));
         const gates = events.filter((e) => e.taskId === taskId && e.event === "gate-result");
+        const leg2 = events.filter((e) => e.taskId === taskId && e.event === "review-leg2");
         const consults = events.filter((e) => e.taskId === taskId && e.event === "consult-verdict");
         const deviations = events.filter((e) => e.taskId === taskId && e.event === "route-deviation");
         const merge = [...events].reverse().find((e) => e.taskId === taskId && e.event === "merge");
@@ -267,10 +285,28 @@ export function renderMarkdownRecord(runId, events, prices = [], rows = []) {
         if (gates.length) {
             for (const g of gates) {
                 // T11: a declined gate never ran — report it as declined, never as a pass.
-                const pass = gateDeclined(g.data) ? "declined" : g.data.pass === true ? "pass" : g.data.pass === false ? "fail" : EM;
+                let pass = gateDeclined(g.data) ? "declined" : g.data.pass === true ? "pass" : g.data.pass === false ? "fail" : EM;
                 const gate = typeof g.data.gate === "string" ? g.data.gate : EM;
+                if (gate === "review" && pass === "pass") {
+                    const reviewer = reviewerIdentity(g.data);
+                    const before = events.slice(0, events.indexOf(g) + 1).reverse()
+                        .find((e) => e.taskId === taskId && e.event === "task-dispatch");
+                    const author = channelLabel(before?.data ?? {});
+                    const authorProvider = author === EM ? "unknown" : modelProvider(modelFromChannel(author));
+                    if (reviewer && authorProvider !== "unknown" && authorProvider === reviewer.provider) {
+                        pass = "pass (same-provider — independence not established)";
+                    }
+                }
                 lines.push(`  - ${gate}: ${pass} — ${firstLine(g.data.details)}`);
             }
+            for (const row of leg2) {
+                const pass = row.data.pass === true ? "pass" : row.data.pass === false ? "fail" : EM;
+                const identity = reviewerIdentity(row.data);
+                const identityText = identity
+                    ? `reviewer ${identity.reviewer}${identity.vendor ? ` (vendor: ${identity.vendor}; provider: ${identity.provider})` : ` (provider: ${identity.provider})`}`
+                    : firstLine(row.data.details);
+                lines.push(`  - review-leg2: ${pass} (supersedes daemon review) — ${identityText}`);
+            }
         }
         else
             lines.push(`  - ${EM}`);

package/dist/cli/commands/status.d.ts

@@ -21,6 +21,7 @@ export declare const GATE_KEYS: {
     readonly acceptance: "A";
     readonly review: "R";
 };
+export declare const STATUS_HELP = "usage: tickmarkr status [<runId>] [--watch [--events]] [--oneline]\nWith --watch --events, stdout is one JSON document per decision event and stderr carries keepalive lines.\nDo not merge stdout and stderr (for example with 2>&1): doing so corrupts the JSON document stream.";
 export declare const decisionEventsFromJournal: (events: JournalEvent[], runId: string, stateDir?: string) => DecisionEvent[];
 export declare const taskBox: (status: TaskStatus) => string;
 export declare const gateBox: (state: "open" | "pass" | "fail" | "skip", unicode: boolean) => string;

package/dist/cli/commands/status.js

@@ -1,4 +1,5 @@
 import { existsSync, readFileSync } from "node:fs";
+import * as os from "node:os";
 import { join } from "node:path";
 import { GLYPHS, LIVE } from "../../brand.js";
 import { DEFAULT_CONFIG, loadConfig } from "../../config/config.js";
@@ -108,6 +109,11 @@ const SPINNER = ["⠋", "⠙", "⠹", "⠸", "⠼", "⠴", "⠦", "⠧", "⠇",
 const ASCII_SPINNER = ["|", "/", "-", "\\"];
 const SAVE_TERMINAL_TITLE = "\x1b[22;0t";
 const RESTORE_TERMINAL_TITLE = "\x1b[23;0t";
+const ENTER_ALTERNATE_SCREEN = "\x1b[?1049h";
+const LEAVE_ALTERNATE_SCREEN = "\x1b[?1049l";
+export const STATUS_HELP = `usage: tickmarkr status [<runId>] [--watch [--events]] [--oneline]
+With --watch --events, stdout is one JSON document per decision event and stderr carries keepalive lines.
+Do not merge stdout and stderr (for example with 2>&1): doing so corrupts the JSON document stream.`;
 const decisionEvidence = (stateDir, runId, sequence) => `${stateDir}/runs/${runId}/journal.jsonl#L${sequence}`;
 const DECISION_GATE_VERDICTS = {
     passed: "passed",
@@ -1109,7 +1115,7 @@ binaryVersion, now = Date.now(), animationFrame = 0, workerLiveness = new Map(),
     const tally = tipPhase
         ? `${progressTone(`${progressGlyph} ${done}/${total} tasks done`)}${dot}${progressTone("run not verified")}`
         : done === total && total > 0 ? ok(`${done}/${total} done`) : information(`${done}/${total} done`);
-    const live = liveness(events, daemon, now)
+    const live = `${liveness(events, daemon, now)} · load1 ${os.loadavg()[0].toFixed(2)}`
         .replace(/\bdead\b/u, fail("dead"))
         .replace(/\bfinished\b/u, dim("finished"))
         .replace(/\balive\b/u, running("alive"))
@@ -1324,6 +1330,8 @@ const oneLine = (cwd, namedRunId) => {
     return sanitizeTaskText([record.runId, ...claims].join(" · "));
 };
 export async function status(argv, cwd = process.cwd(), opts = {}) {
+    if (argv.some((arg) => arg === "--help" || arg === "-h"))
+        return STATUS_HELP;
     const namedRunId = positionalRunId(argv);
     if (argv.includes("--oneline"))
         return oneLine(cwd, namedRunId);
@@ -1456,6 +1464,13 @@ export async function status(argv, cwd = process.cwd(), opts = {}) {
     // a dead board keeps writing and reads ARMED. That is the over-claiming direction, the one an operator
     // acts on, and the one this instrument exists to close.
     const armed = bounded ? undefined : armWatchSupervision(cwd, opts.supervisionBeatMs);
+    let alternateScreen = false;
+    const leaveAlternateScreen = () => {
+        if (!alternateScreen)
+            return;
+        alternateScreen = false;
+        process.stdout.write(LEAVE_ALTERNATE_SCREEN);
+    };
     let titleSaved = false;
     const restoreTitle = () => {
         if (!titleSaved)
@@ -1478,6 +1493,28 @@ export async function status(argv, cwd = process.cwd(), opts = {}) {
         }
         process.stdout.write(`\x1b]0;⏳ ${hotPhase.taskId} ${phaseLabel(hotPhase)} ${fmtElapsed(nowMs - hotPhase.startedAt)}\x07`);
     };
+    const signalHandlers = [];
+    const exitFromSignal = (code) => () => {
+        if (titleSaved) {
+            process.removeListener("exit", restoreTitle);
+            restoreTitle();
+        }
+        if (alternateScreen) {
+            process.removeListener("exit", leaveAlternateScreen);
+            leaveAlternateScreen();
+        }
+        process.exit(code);
+    };
+    if (!bounded && !eventStream && tty) {
+        process.stdout.write(ENTER_ALTERNATE_SCREEN);
+        alternateScreen = true;
+        process.once("exit", leaveAlternateScreen);
+        for (const [signal, code] of [["SIGINT", 130], ["SIGTERM", 143]]) {
+            const handler = exitFromSignal(code);
+            signalHandlers.push([signal, handler]);
+            process.once(signal, handler);
+        }
+    }
     try {
         for (let i = 0; i < iterations; i++) {
             const nowMs = now();
@@ -1490,6 +1527,7 @@ export async function status(argv, cwd = process.cwd(), opts = {}) {
                     if (bounded)
                         eventLines.push(line);
                 }
+                process.stderr.write("status: keepalive\n");
             }
             else {
                 frame = renderFrame(cwd, binaryVersion, nowMs, i, workerLiveness, true, namedRunId);
@@ -1525,6 +1563,12 @@ export async function status(argv, cwd = process.cwd(), opts = {}) {
             process.removeListener("exit", restoreTitle);
             restoreTitle();
         }
+        for (const [signal, handler] of signalHandlers)
+            process.removeListener(signal, handler);
+        if (alternateScreen) {
+            process.removeListener("exit", leaveAlternateScreen);
+            leaveAlternateScreen();
+        }
     }
     return bounded ? eventStream ? eventLines.join("\n") : frames.join(sep) : "";
 }

package/dist/cli/commands/verify.d.ts

@@ -4,6 +4,12 @@ export declare function parseCriteria(text: string): AcceptanceItem[];
 export declare const HUMAN_CHANNEL: BillingChannel;
 export declare const HUMAN_AUTHOR: Assignment;
 export declare function verifyStateDir(cwd: string): string;
+/** Linked worktrees share operational state with the repository that owns the common git dir. */
+export declare function verifyStateRoot(cwd: string): Promise<string>;
+/** Cache identity is repository content, never a checkout path. */
+export declare function baselineCachePath(cwd: string, baseSha: string, commands: Record<string, string>): string;
+export declare function excludeAuthorProvider(channels: BillingChannel[], author: BillingChannel): BillingChannel[];
+export declare const VERIFY_HELP = "usage: tickmarkr verify [--base <ref>] [--criteria <file> | --task <id>] [--json]\nThe final verdict and JSON result are written to stdout; progress and diagnostics are written to stderr.\nDo not merge stdout and stderr (for example with 2>&1): doing so corrupts the verdict stream.";
 export declare function verify(argv: string[], cwd?: string): Promise<{
     out: string;
     code: number;