rdmpw3275m-changelog-20260921-1252-resolve-feat-20260905-13-approval-queue-producer

Wired SessionHoldOrchestrator as canonical producer for ApprovalQueueActor, enabling orchestrator session holds with permission-mode gating, durable hold directives, and automatic release on supervisor approval.

Scope

• Hosts affected: Fleet-wide (rdmsm4x, rdmbair15m5, rdmbair13m5, rdmpw3265m, rdmpw3275m, jdmbair13m5) via Tyrell repository.
• Repository: apps/Tyrell (canonical root: rdmsm4x:~/dev/apps/Tyrell).
• Commits: 9ef44c2 (feature implementation), a2d49ae (session state update).

Exact Files Touched

• Sources/TyrellCore/Approvals/ApprovalModels.swift: Added ApprovalOperationKind.sessionHold, HoldTrigger, HoldLevel, SessionHoldRecord, SessionHoldOutcome, SessionHoldResponse, and SessionHoldRequestPayload.
• Sources/TyrellCore/Approvals/ApprovalQueueActor.swift: Added isAllowlisted(kind:target:sessionID:) and updated evaluate to support sessionHold in .auto and .fullAccess modes.
• Sources/TyrellCore/Approvals/SessionHoldOrchestrator.swift (New): Implemented SessionHoldOrchestrator actor managing session holds, evaluating permission mode gating, writing durable hold directives to ~/.tyrell/holds/<session>.json, and coordinating releases upon supervisor resolution.
• Sources/TyrellCore/Bootstrap/TyrellBootstrap.swift: Added holdsDirectory resolving to ~/.tyrell/holds.
• Sources/tyrell-app/ApprovalsDestination.swift: Added sessionHoldInspector and badge for .sessionHold requests in the supervisor UI.
• Sources/tyrelld/ApprovalRoutes.swift: Added POST /api/orchestrator/hold and GET /api/orchestrator/holds routes, and wired decision handler to SessionHoldOrchestrator.handleApprovalResolution.
• Tests/TyrellCoreTests/SessionHoldOrchestratorTests.swift (New): Comprehensive unit and integration test suite covering producer submission, REST querying, permission gating short-circuits, SQLite audit recording, and direct releases (6/6 passed).
• SESSION-STATE.md: Prepended checkpoint documenting resolution and test ledger.

Commands Run

• git worktree add -b agy/tyrell-feat-20260905-13-approval-producer ~/dev/_worktrees/tyrell-feat-20260905-13-approval-producer main
• swift build --target tyrelld
• swift build --target tyrell-app && swift build --target tyrellbar
• swift test --filter SessionHoldOrchestratorTests
• swift test --filter Approval
• git commit -m 'feat(orchestrator): add session hold producer for approval queue (FEAT-20260905-13)'
• git merge --ff-only agy/tyrell-feat-20260905-13-approval-producer
• git push fleet main && git push backup main
• ~/bin/ticket resolve FEAT-20260905-13 ...
• ~/.agent-coordination/agent_msg.zsh broadcast ... && ~/.agent-coordination/agent_msg.zsh sync

Verification Evidence

• Swift Testing test results:
  • SessionHoldOrchestrator & Approval Producer Integration Tests: 6 passed in 0.016s (0 failures).
  • All approval test suites: 33 passed across 5 suites (0 failures).
• Build targets tyrelld, tyrell-app, tyrellbar compile cleanly with 0 errors.
• Remotes fleet (git.ecs0.net:git/apps/Tyrell.git) and backup (github.com/richhdoty/rdmsm4x-dev-apps-tyrell.git) synchronized to tip commit a2d49ae.

Backup Locations & Undo

• Git commits 9ef44c2 and a2d49ae on main. To revert: git revert a2d49ae 9ef44c2.
• Base reference: 1eab3ea.

Outstanding Owner Actions

• None. Feature is integrated, verified, and pushed to canonical dev root.