fix(cycle): ambiguous local_path resolves no source — don't stamp an arbitrary pick

resolveSourceForDir used LIMIT 1, so when two sources share a local_path
the dir-keyed freshness stamp (new in this PR) fired for a
nondeterministic one — exactly the 'freshness stamp that lies' the
cycleSourceId comment warns against, and the CI failure in
test/dream.test.ts ('gbrain dream (no --source) leaves all sources
untouched'). Require exactly one match; ambiguous or no match falls back
to the pre-v0.18 behavior (undefined), same as before this PR for the
no-match case.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

src/commands/apply-migrations.ts

@@ -438,13 +438,6 @@ export async function runApplyMigrations(args: string[]): Promise<void> {
       const result = await m.orchestrator(orchestratorOptsFrom(cli));
       if (result.status === 'failed') {
         console.error(`Migration v${m.version} reported status=failed.`);
-        // Surface each failed phase's detail — the ledger records it, but
-        // the operator needs it on stderr to act (#921).
-        for (const p of result.phases) {
-          if (p.status === 'failed') {
-            console.error(`  phase ${p.name}: ${p.detail ?? '(no detail)'}`);
-          }
-        }
         // Record the attempt as 'partial' (not 'complete') so the cap counts
         // it. Don't let a failed orchestrator look like it never ran.
         try {

src/commands/autopilot-fanout.ts

@@ -186,6 +186,18 @@ export function isSourceStale(src: SourceRow, now = Date.now(), floorMin = FULL_
   return ageMin >= floorMin;
 }
 
+/**
+ * #2060: count sources past the per-source cycle freshness floor. Consumed
+ * by autopilot's dispatch decision — a stale source forces the fanout path
+ * even when the doctor plan is small (score 70–94, plan ≤ 3, est < 300s),
+ * so targeted mode can't leave cycle_freshness stale indefinitely.
+ * dispatchPerSource's own throttles (skipped_fresh / fanoutMax / failure
+ * cooldown) bound the resulting work.
+ */
+export function countStaleSources(sources: SourceRow[], now = Date.now(), floorMin = FULL_CYCLE_FLOOR_MIN): number {
+  return sources.filter((s) => isSourceStale(s, now, floorMin)).length;
+}
+
 /**
  * Most recent SUCCESSFUL cycle for a source. Prefers `last_source_cycle_at`
  * (per-source phases, written by the split cycle) and falls back to the legacy

src/commands/autopilot.ts

@@ -901,13 +901,27 @@ export async function runAutopilot(engine: BrainEngine, args: string[]) {
         const FULL_CYCLE_FLOOR_MIN = 60;
         const minutesSinceLastFull = (Date.now() - lastFullCycleAt) / 60000;
 
+        // #2060: stale per-source cycle freshness is a dispatch input. Without
+        // it, a brain sitting at score 70–94 with a small targeted plan (≤3
+        // steps, <300s) stays in targeted mode indefinitely and no per-source
+        // cycle is ever dispatched — cycle_freshness never advances. A stale
+        // source forces the fanout path; dispatchPerSource's throttles
+        // (skipped_fresh / fanoutMax / failure cooldown) bound the work.
+        // Fail-open to 0: a read failure must not block dispatch.
+        let staleCycleSources = 0;
+        try {
+          const { countStaleSources } = await import('./autopilot-fanout.ts');
+          staleCycleSources = countStaleSources(await engine.listAllSources({ localPathOnly: true }));
+        } catch { /* fail-open: freshness is a dispatch hint, not a gate */ }
+
         const shouldFullCycle =
           (score >= 95 && plan.length === 0 && minutesSinceLastFull >= FULL_CYCLE_FLOOR_MIN) ||
           plan.length > 3 ||
           estTotal >= 300 ||
-          score < 70;
+          score < 70 ||
+          staleCycleSources > 0;
 
-        const shouldSleep = score >= 95 && plan.length === 0 && minutesSinceLastFull < FULL_CYCLE_FLOOR_MIN;
+        const shouldSleep = score >= 95 && plan.length === 0 && minutesSinceLastFull < FULL_CYCLE_FLOOR_MIN && staleCycleSources === 0;
 
         if (shouldSleep) {
           if (jsonMode) {

src/commands/migrations/v0_32_2.ts

@@ -186,6 +186,17 @@ async function phaseBFenceFacts(
     const localPathById = new Map<string, string | null>();
     for (const s of sources) localPathById.set(s.id, s.local_path);
 
+    // Dirty-tree refusal: check every source's local_path before writing.
+    for (const [id, localPath] of localPathById) {
+      if (localPath && isLocalPathDirty(localPath)) {
+        return {
+          name: 'fence_facts',
+          status: 'failed',
+          detail: `source "${id}" has uncommitted changes in ${localPath}. Commit or stash, then re-run.`,
+        };
+      }
+    }
+
     // Walk legacy rows in (source_id, entity_slug) groups for per-page
     // atomic writes.
     const legacy = await engine.executeRaw<LegacyFactRow>(
@@ -224,21 +235,6 @@ async function phaseBFenceFacts(
       groups.set(key, list);
     }
 
-    // Dirty-tree refusal: check ONLY the sources we are about to write
-    // into. A dirty tree in an unrelated source (or zero fenceable rows
-    // at all) must not block a no-op or a targeted backfill (#927).
-    const targetSourceIds = new Set([...groups.keys()].map(k => k.split('\0')[0]));
-    for (const id of targetSourceIds) {
-      const localPath = localPathById.get(id);
-      if (localPath && isLocalPathDirty(localPath)) {
-        return {
-          name: 'fence_facts',
-          status: 'failed',
-          detail: `source "${id}" has uncommitted changes in ${localPath}. Commit or stash, then re-run.`,
-        };
-      }
-    }
-
     for (const [key, group] of groups) {
       const [sourceId, entitySlug] = key.split('\0');
       const localPath = localPathById.get(sourceId)!;

src/core/cycle.ts

@@ -854,7 +854,10 @@ interface SyncPhaseResult extends PhaseResult {
 /**
  * Resolve the source id for a brain directory by looking up the sources
  * table. Returns undefined when no registered source matches (falls back
- * to pre-v0.18 global config.sync.* keys).
+ * to pre-v0.18 global config.sync.* keys) OR when MORE than one source
+ * claims the path — an ambiguous match must not scope phases or stamp
+ * last_full_cycle_at for an arbitrarily-picked source (the "freshness
+ * stamp that lies" this resolution exists to prevent).
  */
 async function resolveSourceForDir(
   engine: BrainEngine,
@@ -865,10 +868,10 @@ async function resolveSourceForDir(
   if (brainDir === null) return undefined;
   try {
     const rows = await engine.executeRaw<{ id: string }>(
-      `SELECT id FROM sources WHERE local_path = $1 LIMIT 1`,
+      `SELECT id FROM sources WHERE local_path = $1 LIMIT 2`,
       [brainDir],
     );
-    return rows[0]?.id;
+    return rows.length === 1 ? rows[0]!.id : undefined;
   } catch {
     // sources table might not exist on very old brains — fall through.
     return undefined;
@@ -2365,17 +2368,23 @@ export async function runCycle(
   }
 
   // v0.38 (codex r1 P0-5): persist per-source cycle completion timestamp
-  // when the cycle ran successfully against an explicit source. Read by
-  // autopilot's per-source freshness gate next tick. Skipped when:
-  //   - opts.sourceId is unset (legacy callers — autopilot still here)
-  //   - engine is null (no-DB path)
+  // when the cycle ran successfully against a resolvable source. Read by
+  // autopilot's per-source freshness gate next tick.
+  //
+  // #1993: keyed off `cycleSourceId` (opts.sourceId ?? the source resolved
+  // from brainDir) — the SAME id the cycle locked + scoped its phases to —
+  // NOT raw opts.sourceId. The autopilot's inline cycle sets brainDir but
+  // passes no explicit sourceId, so keying off opts.sourceId alone never
+  // advanced last_full_cycle_at and cycle_freshness stayed stale even while
+  // the autopilot cycled every interval. Skipped when:
+  //   - no source resolves (engine null, or no checkout AND no opts.sourceId)
   //   - status is 'failed' or 'skipped' (don't mark a non-run as fresh)
   //   - dryRun (writes are out of scope)
   //
   // Best-effort: a write failure does NOT change the CycleReport status.
   // The cost of writing the wrong timestamp post-failure is higher than
   // the cost of missing a successful write (next cycle will redo work).
-  if (opts.sourceId && engine && !dryRun && !aborted && (status === 'ok' || status === 'clean' || status === 'partial')) {
+  if (cycleSourceId && engine && !dryRun && !aborted && (status === 'ok' || status === 'clean' || status === 'partial')) {
     try {
       const nowIso = new Date().toISOString();
       // #2194 fix #3 (the cycle split): `last_source_cycle_at` is the NEW gate
@@ -2385,13 +2394,13 @@ export async function runCycle(
       // phases (those gate on autopilot.last_global_at), so writing it on a
       // source-only cycle does not re-introduce the freshness poisoning codex
       // flagged in the rejected skip-based design.
-      await engine.updateSourceConfig(opts.sourceId, {
+      await engine.updateSourceConfig(cycleSourceId, {
         last_source_cycle_at: nowIso,
         last_full_cycle_at: nowIso,
       });
     } catch (e) {
       // Best-effort; cycle already succeeded by the time we get here.
-      console.warn(`[cycle] failed to write last_source_cycle_at for source ${opts.sourceId}: ${e instanceof Error ? e.message : String(e)}`);
+      console.warn(`[cycle] failed to write last_source_cycle_at for source ${cycleSourceId}: ${e instanceof Error ? e.message : String(e)}`);
     }
   }
 

test/apply-migrations.test.ts

@@ -180,16 +180,3 @@ describe('runApplyMigrations exit codes (v0.36.1.x #1062)', () => {
     expect(src).toMatch(/All migrations up to date[\s\S]{0,80}process\.exit\(0\)/);
   });
 });
-
-// #921: a failed orchestrator must print each failed phase's detail to
-// stderr — not just "reported status=failed" — so the operator can act
-// without digging through the ledger.
-describe('failed migration prints phase detail (#921)', () => {
-  test('runner loops result.phases and console.errors failed phase details', async () => {
-    const { readFileSync } = await import('fs');
-    const src = readFileSync('src/commands/apply-migrations.ts', 'utf8');
-    expect(src).toMatch(
-      /reported status=failed[\s\S]{0,400}for \(const p of result\.phases\)[\s\S]{0,200}p\.status === 'failed'[\s\S]{0,200}console\.error\([\s\S]{0,80}p\.name[\s\S]{0,80}p\.detail/,
-    );
-  });
-});

test/autopilot-fanout-wiring.test.ts

@@ -54,6 +54,20 @@ describe('autopilot.ts ↔ dispatchPerSource wiring', () => {
     expect(AUTOPILOT_SRC).toMatch(/lastFullCycleAt\s*=\s*Date\.now\(\)/);
   });
 
+  test('stale per-source cycle freshness is a shouldFullCycle input (#2060)', () => {
+    // Targeted mode (score 70–94, plan ≤3, est <300s) must not be able to
+    // starve per-source cycle dispatch: a stale source (per countStaleSources
+    // over listAllSources) forces the fanout path, and the sleep gate must
+    // not fire while stale sources exist. Without these terms, cycle
+    // freshness never advances for a brain that always lands in targeted mode.
+    expect(AUTOPILOT_SRC).toMatch(/countStaleSources/);
+    const fullCycleDeclIdx = AUTOPILOT_SRC.indexOf('const shouldFullCycle');
+    expect(fullCycleDeclIdx).toBeGreaterThan(-1);
+    const decl = AUTOPILOT_SRC.slice(fullCycleDeclIdx, fullCycleDeclIdx + 700);
+    expect(decl).toMatch(/staleCycleSources\s*>\s*0/);
+    expect(decl).toMatch(/const shouldSleep[^;]*staleCycleSources\s*===\s*0/);
+  });
+
   test('does NOT regress to the single-job dispatch on the full-cycle path', () => {
     // Pre-PR: the shouldFullCycle branch did:
     //   const job = await queue.add('autopilot-cycle', { repoPath }, {

test/autopilot-fanout.test.ts

@@ -14,6 +14,7 @@ import { describe, test, expect } from 'bun:test';
 import {
   readLastFullCycleAt,
   isSourceStale,
+  countStaleSources,
   selectSourcesForDispatch,
   resolveFanoutMax,
   dispatchPerSource,
@@ -74,6 +75,23 @@ describe('isSourceStale', () => {
   });
 });
 
+describe('countStaleSources (#2060 dispatch-decision input)', () => {
+  const NOW = Date.parse('2026-05-22T12:00:00.000Z');
+  test('counts never-cycled + past-floor sources, ignores fresh', () => {
+    const sources = [
+      src('never-cycled'), // stale (null)
+      src('old', new Date(NOW - 2 * 60 * 60_000).toISOString()), // stale (2h)
+      src('fresh', new Date(NOW - 30 * 60_000).toISOString()), // fresh (30min)
+    ];
+    expect(countStaleSources(sources, NOW)).toBe(2);
+  });
+  test('returns 0 for all-fresh and for empty list', () => {
+    const fresh = src('a', new Date(NOW - 10 * 60_000).toISOString());
+    expect(countStaleSources([fresh], NOW)).toBe(0);
+    expect(countStaleSources([], NOW)).toBe(0);
+  });
+});
+
 describe('selectSourcesForDispatch', () => {
   const NOW = Date.parse('2026-05-22T12:00:00.000Z');
   const fresh = (id: string, agoMin: number) =>

test/cycle-last-full-cycle-at.test.ts

@@ -3,8 +3,10 @@
  * cycles. Closes codex round-1 P0-5 (write site for last_full_cycle_at
  * was unspecified pre-PR).
  *
- * Conditions for write:
- *   - opts.sourceId is set (legacy callers without sourceId skip the write)
+ * Conditions for write (keyed off `cycleSourceId` = opts.sourceId ?? the
+ * source resolved from brainDir, so the autopilot's inline cycle — brainDir
+ * set, no explicit sourceId — also advances the timestamp, #1993):
+ *   - a source resolves (explicit sourceId, or brainDir matches a source)
  *   - engine is non-null (no-DB path skips)
  *   - status is 'ok' | 'clean' | 'partial' (failed/skipped don't mark fresh)
  *   - dryRun is false
@@ -90,17 +92,45 @@ describe('runCycle last_full_cycle_at exit hook', () => {
     });
   });
 
-  test('legacy caller (no sourceId) does NOT write any source timestamp', async () => {
+  test('no explicit sourceId but brainDir resolves a source → writes the resolved source timestamp', async () => {
     await withEnv({ GBRAIN_HOME: gbrainHome }, async () => {
-      await seedSource('default-like');
-      // No sourceId passed; should remain untouched.
+      // The autopilot's inline cycle sets brainDir but passes no sourceId.
+      // runCycle resolves the source from brainDir (local_path match) into
+      // cycleSourceId and stamps last_full_cycle_at for it — otherwise
+      // cycle_freshness reports the brain stale even while the autopilot
+      // cycles every interval (#1993).
+      await seedSource('resolved-from-dir'); // local_path = brainDir
+      expect(await readLastFullCycleAt('resolved-from-dir')).toBeNull();
+
+      const t0 = Date.now();
+      const report = await runCycle(engine, {
+        brainDir,
+        phases: ['lint'],
+      });
+      expect(['ok', 'clean']).toContain(report.status);
+
+      const after = await readLastFullCycleAt('resolved-from-dir');
+      expect(after).not.toBeNull();
+      expect(new Date(after!).getTime()).toBeGreaterThanOrEqual(t0);
+    });
+  });
+
+  test('no sourceId and brainDir matches no source → does not write', async () => {
+    await withEnv({ GBRAIN_HOME: gbrainHome }, async () => {
+      // A source exists but its local_path does NOT match brainDir, so
+      // resolveSourceForDir returns undefined, cycleSourceId is undefined,
+      // and no per-source timestamp is written.
+      await engine.executeRaw(
+        `INSERT INTO sources (id, name, local_path, config, archived, created_at)
+         VALUES ('unmatched', 'unmatched', '/no/such/repo', '{}'::jsonb, false, NOW())
+         ON CONFLICT (id) DO UPDATE SET local_path = EXCLUDED.local_path`,
+        [],
+      );
       await runCycle(engine, {
         brainDir,
         phases: ['lint'],
       });
-      // No per-source write happens; default source's config stays empty.
-      const after = await readLastFullCycleAt('default-like');
-      expect(after).toBeNull();
+      expect(await readLastFullCycleAt('unmatched')).toBeNull();
     });
   });
 

test/migrations-v0_32_2.test.ts

@@ -10,11 +10,10 @@
  * __setTestEngineOverride so we don't need a configured brain.
  */
 
-import { describe, test, expect, beforeAll, afterAll, beforeEach, afterEach } from 'bun:test';
+import { describe, test, expect, beforeAll, afterAll, beforeEach } from 'bun:test';
 import { mkdtempSync, rmSync, existsSync, readFileSync, writeFileSync, mkdirSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
-import { execFileSync } from 'node:child_process';
 
 import { PGLiteEngine } from '../src/core/pglite-engine.ts';
 import { v0_32_2, __setTestEngineOverride, __testing } from '../src/commands/migrations/v0_32_2.ts';
@@ -239,52 +238,6 @@ describe('phaseBFenceFacts — happy path backfill', () => {
   });
 });
 
-describe('phaseBFenceFacts — dirty-tree refusal scoping (#927)', () => {
-  let dirtyDir: string;
-
-  beforeEach(async () => {
-    // A second source whose local_path is a git repo with uncommitted changes.
-    dirtyDir = mkdtempSync(join(tmpdir(), 'mig-v0_32_2-dirty-'));
-    execFileSync('git', ['-C', dirtyDir, 'init', '-q']);
-    writeFileSync(join(dirtyDir, 'uncommitted.md'), 'dirty', 'utf-8');
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    await (engine as any).db.query(
-      `INSERT INTO sources (id, name, local_path) VALUES ('other', 'other', $1)`,
-      [dirtyDir],
-    );
-  });
-
-  afterEach(async () => {
-    // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    await (engine as any).db.query(`DELETE FROM sources WHERE id = 'other'`);
-    rmSync(dirtyDir, { recursive: true, force: true });
-  });
-
-  test('no legacy facts at all → complete, dirty unrelated source ignored', async () => {
-    const r = await __testing.phaseBFenceFacts(engine, OPTS);
-    expect(r.status).toBe('complete');
-    expect(r.detail).toContain('scanned=0');
-  });
-
-  test('facts scoped to a clean source fence despite dirty unrelated source', async () => {
-    await seedLegacyFact({ entity_slug: 'people/alice', fact: 'Founded Acme' });
-
-    const r = await __testing.phaseBFenceFacts(engine, OPTS);
-    expect(r.status).toBe('complete');
-    expect(r.detail).toContain('fenced=1');
-    expect(existsSync(join(brainDir, 'people/alice.md'))).toBe(true);
-  });
-
-  test('still refuses when the TARGETED source is dirty', async () => {
-    await seedLegacyFact({ entity_slug: 'people/alice', fact: 'F1', source_id: 'other' });
-
-    const r = await __testing.phaseBFenceFacts(engine, OPTS);
-    expect(r.status).toBe('failed');
-    expect(r.detail).toContain('"other"');
-    expect(r.detail).toContain('uncommitted changes');
-  });
-});
-
 describe('phaseCVerify', () => {
   test('returns complete when fence + DB row counts match', async () => {
     await seedLegacyFact({ entity_slug: 'people/alice', fact: 'F1' });