@neuraloom/contracts 0.0.0-stage → 0.1.22

package/dist/routes/index.js

@@ -0,0 +1,1440 @@
+"use strict";
+/**
+ * NeuraLoom API Routes - Single Source of Truth for Route Constants
+ * All API routes must be imported from this package
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PUBLIC_BOOK_ROUTES = exports.DEPLOYMENT_ROUTES = exports.GIT_ROUTES = exports.BOOKS_PORTAL_STEP_IDS = exports.PROTECTED_PAGE_PREFIXES = exports.AUTH_RETURN_PARAM = exports.PAGE_ROUTES = exports.CONTENT_TYPES = exports.HTTP_STATUS = exports.HTTP_METHODS = exports.ROUTE_HELPERS = exports.SETTINGS_ROUTES = exports.INTEGRATION_ROUTES = exports.CRON_ROUTES = exports.CORTEX_BRIDGE_ROUTES = exports.NOTIFICATION_ROUTES = exports.CACHE_ROUTES = exports.FILE_ROUTES = exports.COMPLIANCE_ROUTES = exports.CONSTITUTION_ROUTES = exports.SYSTEM_ROUTES = exports.MCP_ROUTES = exports.VECTOR_ROUTES = exports.KNOWLEDGE_ROUTES = exports.AI_ROUTES = exports.ML_ROUTES = exports.TASK_ROUTES = exports.PLAN_ROUTES = exports.SPEC_ROUTES = exports.PROJECT_MODEL_USAGE = exports.PROJECT_MODEL_QUALITY = exports.PROJECT_MODEL_SETTINGS = exports.ORCHESTRATION_EVENTS = exports.PROJECT_ROUTES = exports.APPROVAL_ROUTES = exports.USER_ROUTES = exports.AUTH_ROUTES = exports.IMPLEMENT_PATCHES_DETAIL = exports.IMPLEMENT_PATCHES_LIST = exports.IMPLEMENT_ROUTES = exports.PROOF_RUN_ROUTES = exports.CODE_REALITY_ROUTES = exports.REPO_ROUTES = exports.ORCHESTRATION_ROUTES = exports.GUARDIAN_ROUTES = exports.WORKFLOW_ROUTES = exports.GRAPH_ROUTES = exports.API_PREFIX = exports.API_VERSION = exports.API_BASE = void 0;
+exports.ROUTES = exports.ALL_ROUTES = exports.RUNTIME_ROUTES = exports.FILM_ROUTES = exports.ORCHESTRATION_DURABLE_ROUTES = exports.SEARCH_ROUTES = exports.TELEMETRY_ROUTES = exports.AGENT_ACTION_ROUTES = exports.TEAMS_ROUTES = exports.TEAM_ROUTES = exports.WORKFLOW_TEMPLATE_ROUTES = exports.DECISION_ROUTES = exports.DASHBOARD_ROUTES = exports.ANALYTICS_ROUTES = exports.CODE_ROUTES = exports.INFRA_ROUTES = exports.WORKSPACE_ROUTES = exports.FACTORY_ROUTES = exports.CI_ROUTES = exports.AUDIOBOOK_PUBLICATION_ROUTES = exports.MANUSCRIPT_PUBLICATION_ROUTES = exports.AUDIOBOOK_EMBED_PUBLICATION_ROUTES = void 0;
+exports.isProtectedPagePath = isProtectedPagePath;
+exports.sanitizeAuthReturnPath = sanitizeAuthReturnPath;
+exports.buildLoginPath = buildLoginPath;
+exports.isBooksPortalStepId = isBooksPortalStepId;
+exports.buildOrchestrationRunStatusUrl = buildOrchestrationRunStatusUrl;
+// Base API Configuration
+exports.API_BASE = "/api";
+exports.API_VERSION = "v2";
+// NOTE: API routes use /api/* directly (no version prefix in URL)
+// Version tracking is for contracts package versioning, not URL structure
+// Future: Consider explicit /api/v2/* routing when needed
+// Vercel cache bust: Force rebuild - 2025-10-01
+exports.API_PREFIX = "/api";
+/** Workflow + knowledge hybrid graph (D3 explorer). */
+exports.GRAPH_ROUTES = {
+    hybrid: (projectId) => `${exports.API_PREFIX}/graph/hybrid?projectId=${encodeURIComponent(projectId)}`,
+    knowledge: (projectId) => `${exports.API_PREFIX}/graph/knowledge?projectId=${encodeURIComponent(projectId)}`,
+    workflow: (projectId, query) => {
+        const params = new URLSearchParams();
+        params.set("projectId", projectId);
+        if (query?.include !== undefined && query.include.length > 0) {
+            params.set("include", query.include);
+        }
+        return `${exports.API_PREFIX}/graph/workflow?${params.toString()}`;
+    },
+    /** MS-01 typed overlays — POST JSON bodies validated via contracts (no route-local Zod). */
+    queryRequirementCoverage: `${exports.API_PREFIX}/graph/query/requirement-coverage`,
+    queryRouteTruth: `${exports.API_PREFIX}/graph/query/route-truth`,
+    queryDriftForFile: `${exports.API_PREFIX}/graph/query/drift-for-file`,
+};
+/** Workflow-specific routes for gates, command center, and UI spine (addresses #538). */
+exports.WORKFLOW_ROUTES = {
+    gates: {
+        approve: (gateId) => `${exports.API_PREFIX}/workflow/gates/${gateId}/approve`,
+        reject: (gateId) => `${exports.API_PREFIX}/workflow/gates/${gateId}/reject`,
+    },
+    /** Coding Quality Spine — task capsule + context bundle (Wave 4). */
+    capsule: {
+        /** POST — generate a task capsule from approved Spec + Plan. */
+        generate: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/workflow/tasks/capsule`,
+        /** GET — retrieve an existing task capsule. */
+        get: (projectId, taskId) => `${exports.API_PREFIX}/projects/${projectId}/workflow/tasks/capsule?taskId=${encodeURIComponent(taskId)}`,
+    },
+    contextBundle: {
+        /** GET — compile and return a minimal context bundle for a task. */
+        compile: (projectId, taskId) => `${exports.API_PREFIX}/projects/${projectId}/workflow/context-bundle?taskId=${encodeURIComponent(taskId)}`,
+    },
+    /** Engineering context — durable task checkpoints (server assigns sequence). */
+    checkpoint: {
+        /** POST — record a checkpoint; supersedes the previous one for the task. */
+        create: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/workflow/tasks/checkpoint`,
+        /** GET — latest checkpoint for a task. */
+        latest: (projectId, taskId) => `${exports.API_PREFIX}/projects/${projectId}/workflow/tasks/checkpoint?taskId=${encodeURIComponent(taskId)}`,
+    },
+    /** Engineering context — verification result records. */
+    verification: {
+        /** POST — record one verification result. */
+        record: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/workflow/tasks/verification`,
+        /** GET — verification results for a task (newest first, limit 50). */
+        list: (projectId, taskId) => `${exports.API_PREFIX}/projects/${projectId}/workflow/tasks/verification?taskId=${encodeURIComponent(taskId)}`,
+    },
+    /** Engineering context — resume from the latest checkpoint with evidence invalidation. */
+    resume: {
+        /** POST — invalidate stale evidence, rebuild + persist the brief. */
+        run: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/workflow/tasks/resume`,
+    },
+    /** Engineering context — bounded, revision-aware worker brief. */
+    engineeringBrief: {
+        /** GET — compile, persist and return the engineering brief for a task. */
+        compile: (projectId, taskId) => `${exports.API_PREFIX}/projects/${projectId}/workflow/engineering-brief?taskId=${encodeURIComponent(taskId)}`,
+    },
+    parityCheck: {
+        /** POST — persist a parityCheckResult artifact from a CI architecture test run. */
+        persist: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/workflow/parity-check`,
+    },
+    /** Coding Quality Spine — test obligation manifest (Wave 12). */
+    testObligation: {
+        /** POST — upsert the TestObligationManifest for a project/PR. */
+        upsert: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/workflow/test-obligation`,
+        /** GET — retrieve the current TestObligationManifest for a project. */
+        get: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/workflow/test-obligation`,
+    },
+    /** Ship + Review + Iteration closure orchestrator (pilot / backfill). */
+    shipClosure: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/workflow/ship-closure`,
+    /** Generated-app product readiness (routes, auth, persistence, domain checks). */
+    productReadiness: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/workflow/product-readiness`,
+    /** Operator release decision producer (PR2 — reviewReleaseDecision + reviewAcceptance). */
+    reviewReleaseDecision: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/workflow/review/decision`,
+    /** NeuraLoom → Cortex product release package handoff. */
+    sendToCortex: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/release/send-to-cortex`,
+};
+/** Guardian product APIs under /api/guardian (distinct from infra guardian under /api/infra/guardian). */
+exports.GUARDIAN_ROUTES = {
+    validate: `${exports.API_PREFIX}/guardian/validate`,
+    insights: `${exports.API_PREFIX}/guardian/insights`,
+    adapters: `${exports.API_PREFIX}/guardian/adapters`,
+    trend: `${exports.API_PREFIX}/guardian/trend`,
+    status: `${exports.API_PREFIX}/guardian/status`,
+    summary: `${exports.API_PREFIX}/guardian/summary`,
+    telemetry: `${exports.API_PREFIX}/guardian/telemetry`,
+};
+/** Live orchestration SSE stream (workflow graph notifications). */
+exports.ORCHESTRATION_ROUTES = {
+    stream: (projectId) => `${exports.API_PREFIX}/orchestration/stream?projectId=${encodeURIComponent(projectId)}`,
+};
+/** Repository scan triggers (Knowledge / GitHub linkage). */
+exports.REPO_ROUTES = {
+    scan: `${exports.API_PREFIX}/repo/scan`,
+    /** Replay a completed scan persist into the Cortex outbox. Does not start a scan. */
+    emitToCortex: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/repo-scan/emit-to-cortex`,
+};
+/** Code Reality Graph read-model slices (#1252). */
+exports.CODE_REALITY_ROUTES = {
+    /** GET — task-targeted Code Reality evidence (exact selection + one-hop relationships). */
+    evidence: (projectId, query) => {
+        const params = new URLSearchParams();
+        if (query?.terms !== undefined && query.terms.length > 0) {
+            params.set("terms", query.terms.join(","));
+        }
+        if (query?.paths !== undefined && query.paths.length > 0) {
+            params.set("paths", query.paths.join(","));
+        }
+        if (query?.maxNodes !== undefined) {
+            params.set("maxNodes", String(query.maxNodes));
+        }
+        if (query?.hops !== undefined) {
+            params.set("hops", String(query.hops));
+        }
+        if (query?.continuationToken !== undefined && query.continuationToken !== null) {
+            params.set("continuationToken", query.continuationToken);
+        }
+        const qs = params.toString();
+        return `${exports.API_PREFIX}/projects/${projectId}/code-reality/evidence${qs.length > 0 ? `?${qs}` : ""}`;
+    },
+    overview: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/code-reality/overview`,
+    routes: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/code-reality/routes`,
+    api: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/code-reality/api`,
+    schema: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/code-reality/schema`,
+    ui: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/code-reality/ui`,
+    workflow: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/code-reality/workflow`,
+    governance: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/code-reality/governance`,
+    build: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/code-reality/build`,
+    ship: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/code-reality/ship`,
+    findings: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/code-reality/findings`,
+    duplicates: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/code-reality/duplicates`,
+    orphans: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/code-reality/orphans`,
+    splitBrain: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/code-reality/split-brain`,
+    performance: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/code-reality/performance`,
+    security: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/code-reality/security`,
+    stepContext: (projectId, step) => `${exports.API_PREFIX}/projects/${projectId}/code-reality/step-context?${new URLSearchParams({ step }).toString()}`,
+};
+/**
+ * Internal proof-run recorder (bridge-15N / #1399) — browser-QA harness and
+ * server-side gate evaluators POST here; the route validates + writes an
+ * honest `ProofRunRecorded` envelope to the `external_exports` outbox
+ * (service-role only — RLS denies direct client access to that table).
+ */
+exports.PROOF_RUN_ROUTES = {
+    record: `${exports.API_PREFIX}/internal/proof-runs`,
+};
+/** Implement step: readiness check and patch-set lifecycle (generate → validate → push → PR). */
+exports.IMPLEMENT_ROUTES = {
+    readiness: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/implement/readiness`,
+    readinessLite: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/implement/readiness-lite`,
+    diagnostics: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/implement/diagnostics`,
+    /** GET recent `implementation_patch_set` rows (newest first). */
+    history: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/implement/patches`,
+    /** GET lifecycle + validation + task statuses for one patch set ID. */
+    patchDetail: (projectId, patchSetId) => `${exports.API_PREFIX}/projects/${projectId}/implement/patches/${patchSetId}`,
+    patches: {
+        validate: (projectId, patchSetId) => `${exports.API_PREFIX}/projects/${projectId}/implement/patches/${patchSetId}/validate`,
+        push: (projectId, patchSetId) => `${exports.API_PREFIX}/projects/${projectId}/implement/patches/${patchSetId}/push`,
+        pr: (projectId, patchSetId) => `${exports.API_PREFIX}/projects/${projectId}/implement/patches/${patchSetId}/pr`,
+        quarantine: (projectId, patchSetId) => `${exports.API_PREFIX}/projects/${projectId}/implement/patches/${patchSetId}/quarantine`,
+        proofSource: (projectId, patchSetId) => `${exports.API_PREFIX}/projects/${projectId}/implement/patches/${patchSetId}/proof-source`,
+    },
+    nextPacket: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/implement/next-packet`,
+    generateNextPacket: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/implement/generate-next-packet`,
+    recoverStalePipeline: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/implement/recover-stale-pipeline`,
+    runSelectedProof: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/implement/run-selected-proof`,
+    startProofPr: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/implement/start-proof-pr`,
+    /**
+     * POST — heal missing @types/* on an existing Next.js baseline so Vercel
+     * builds stop failing with "please install @types/react and @types/node".
+     */
+    baselineTypesHeal: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/implement/baseline-types-heal`,
+    skipTasks: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/implement/tasks/skip`,
+    runs: {
+        start: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/implement/runs/start`,
+        detail: (projectId, runId) => `${exports.API_PREFIX}/projects/${projectId}/implement/runs/${runId}`,
+        process: (projectId, runId) => `${exports.API_PREFIX}/projects/${projectId}/implement/runs/${runId}/process`,
+        pause: (projectId, runId) => `${exports.API_PREFIX}/projects/${projectId}/implement/runs/${runId}/pause`,
+        resume: (projectId, runId) => `${exports.API_PREFIX}/projects/${projectId}/implement/runs/${runId}/resume`,
+        cancel: (projectId, runId) => `${exports.API_PREFIX}/projects/${projectId}/implement/runs/${runId}/cancel`,
+        batches: (projectId, runId) => `${exports.API_PREFIX}/projects/${projectId}/implement/runs/${runId}/batches`,
+    },
+};
+/** Sprint I1: canonical GET paths for implement patch list/detail (same URLs as IMPLEMENT_ROUTES.history / patchDetail). */
+const IMPLEMENT_PATCHES_LIST = (projectId) => `${exports.API_PREFIX}/projects/${projectId}/implement/patches`;
+exports.IMPLEMENT_PATCHES_LIST = IMPLEMENT_PATCHES_LIST;
+const IMPLEMENT_PATCHES_DETAIL = (projectId, patchSetId) => `${exports.API_PREFIX}/projects/${projectId}/implement/patches/${patchSetId}`;
+exports.IMPLEMENT_PATCHES_DETAIL = IMPLEMENT_PATCHES_DETAIL;
+/** Match `packages/frontend/src/app/api/auth/*` (no legacy `/auth/login` spine). */
+exports.AUTH_ROUTES = {
+    user: `${exports.API_PREFIX}/auth/user`,
+    role: `${exports.API_PREFIX}/auth/role`,
+    session: `${exports.API_PREFIX}/auth/session`,
+    sessionContext: `${exports.API_PREFIX}/auth/session-context`,
+    signOut: `${exports.API_PREFIX}/auth/signout`,
+};
+/** Match live routes under `/api/users/*`. */
+exports.USER_ROUTES = {
+    search: `${exports.API_PREFIX}/users/search`,
+    whoami: `${exports.API_PREFIX}/whoami`,
+};
+/** Approval workflow routes under /api/approvals/* */
+exports.APPROVAL_ROUTES = {
+    list: `${exports.API_PREFIX}/approvals`,
+    auto: `${exports.API_PREFIX}/approvals/auto`,
+};
+// Project Management Routes
+exports.PROJECT_ROUTES = {
+    list: `${exports.API_PREFIX}/projects`,
+    create: `${exports.API_PREFIX}/projects`,
+    getById: (id) => `${exports.API_PREFIX}/projects/${id}`,
+    update: (id) => `${exports.API_PREFIX}/projects/${id}`,
+    delete: (id) => `${exports.API_PREFIX}/projects/${id}`,
+    updateStatus: (id) => `${exports.API_PREFIX}/projects/${id}/status`,
+    getSpecs: (id) => `${exports.API_PREFIX}/projects/${id}/specs`,
+    getPlans: (id) => `${exports.API_PREFIX}/projects/${id}/plans`,
+    getTasks: (id) => `${exports.API_PREFIX}/projects/${id}/tasks`,
+    getMetrics: (id) => `${exports.API_PREFIX}/projects/${id}/metrics`,
+    /** Evidence-backed KPI rollup + stage-run snapshot (MS-08). */
+    metricsSummary: (id) => `${exports.API_PREFIX}/projects/${id}/metrics/summary`,
+    /** Per-step workflow status (nav, gates, DB signals) */
+    workflowProgression: (id) => `${exports.API_PREFIX}/projects/${id}/workflow/progression`,
+    /** Same payload as workflowProgression (canonical read-model alias) */
+    workflowState: (id) => `${exports.API_PREFIX}/projects/${id}/workflow/state`,
+    /** Knowledge step workflow_artifacts rows for Knowledge UI (#504 parity). */
+    workflowKnowledgeStepArtifacts: (id) => `${exports.API_PREFIX}/projects/${id}/workflow/knowledge-step-artifacts`,
+    workflowCiStepArtifacts: (id) => `${exports.API_PREFIX}/projects/${id}/workflow/ci-step-artifacts`,
+    /** Wave 9: control artifacts for the Quality tab. */
+    qualityArtifacts: (id) => `${exports.API_PREFIX}/projects/${id}/workflow/quality-artifacts`,
+    /** Per-step metrics card data (replaces browser Supabase workflow_artifacts / ai_runs reads). */
+    workflowStepStats: (id, stepId) => `${exports.API_PREFIX}/projects/${id}/workflow/step-stats?${new URLSearchParams({ stepId }).toString()}`,
+    /** Internal diagnostics: Specify brief persistence + generated spec linkage. */
+    specifyMutationHealth: (id) => `${exports.API_PREFIX}/projects/${id}/workflow/specify-mutation-health`,
+    /** Scoped active/archived specification read model for Specify operator view (PR8). */
+    specificationsReadModel: (id) => `${exports.API_PREFIX}/projects/${id}/specifications/read-model`,
+    /** Recent ai_runs + workflow_artifacts rows for one workflow step (AIOutputDisplay). */
+    workflowStepAiOutput: (id, step) => `${exports.API_PREFIX}/projects/${id}/workflow/step-ai-output?${new URLSearchParams({ step }).toString()}`,
+    /** Plan step: latest plan gate + planFinal artifact + drift (browser must not read Supabase tables directly). */
+    planGateStatus: (id) => `${exports.API_PREFIX}/projects/${id}/plan/gate-status`,
+    ingestGate: (id) => `${exports.API_PREFIX}/projects/${id}/workflow/ingest/gate`,
+    ingestDashboard: (id) => `${exports.API_PREFIX}/projects/${id}/workflow/ingest/dashboard`,
+    existingCodebaseContext: (id, area) => area
+        ? `${exports.API_PREFIX}/projects/${id}/workflow/existing-codebase-context?${new URLSearchParams({ area }).toString()}`
+        : `${exports.API_PREFIX}/projects/${id}/workflow/existing-codebase-context`,
+    /** Generated rows from public.schemas for the Schema workflow page. */
+    generatedSchemas: (id) => `${exports.API_PREFIX}/projects/${id}/schemas`,
+    /** Repo migrations + drift findings + generated schemas for Schema operator view. */
+    schemaReadModel: (id) => `${exports.API_PREFIX}/projects/${id}/schema/read-model`,
+    /** Film production creative cockpit read model (artifacts + rows + lineage summaries). */
+    filmCreativeReadModel: (id) => `${exports.API_PREFIX}/projects/${id}/film/creative-read-model`,
+    /** FP-14 unified production read-model (creative model + derived steps/blockers). */
+    filmProductionReadModel: (id) => `${exports.API_PREFIX}/projects/${id}/film/production-read-model`,
+    /** Generated rows from public.api_definitions for the API workflow page. */
+    generatedApiDefinitions: (id) => `${exports.API_PREFIX}/projects/${id}/api-definitions`,
+    /** API step KG coverage gate status. */
+    apiKgGateStatus: (id) => `${exports.API_PREFIX}/projects/${id}/api/gate-status`,
+    /** Repair API KG rollup / APIEndpoint / HAS_ENDPOINT from persisted api_definitions (no AI regen). */
+    apiRetryKgPersistence: (id) => `${exports.API_PREFIX}/projects/${id}/api/retry-kg-persistence`,
+    /** UI step KG coverage gate status. */
+    uiKgCoverage: (id) => `${exports.API_PREFIX}/projects/${id}/ui/kg-coverage`,
+    /** Repair UI KG rollup / UIComponent / HAS_COMPONENT from persisted component_definitions (no AI regen). */
+    uiRetryKgPersistence: (id) => `${exports.API_PREFIX}/projects/${id}/ui/retry-kg-persistence`,
+    /** Constitution step KG coverage gate status. */
+    constitutionKgCoverage: (id) => `${exports.API_PREFIX}/projects/${id}/constitution/kg-coverage`,
+    /** Repair Constitution KG rollup / ConstitutionRule from persisted constitutions (no AI regen). */
+    constitutionRetryKgPersistence: (id) => `${exports.API_PREFIX}/projects/${id}/constitution/retry-kg-persistence`,
+    /** Guardian step KG coverage gate status. */
+    guardianKgCoverage: (id) => `${exports.API_PREFIX}/projects/${id}/guardian/kg-coverage`,
+    /** Server-side Guardian score / violation policy (operator gate). */
+    guardianGateStatus: (id) => `${exports.API_PREFIX}/projects/${id}/guardian/gate-status`,
+    /** Recent Guardian validation scores (guardian_validations, no new table). */
+    guardianScoreHistory: (id) => `${exports.API_PREFIX}/projects/${id}/guardian/score-history`,
+    /** Per-rule drilldown: constitution rule × latest validation violations. */
+    guardianRuleDetail: (projectId, ruleId) => `${exports.API_PREFIX}/projects/${projectId}/guardian/rule-detail/${encodeURIComponent(ruleId)}`,
+    /** Repair Guardian KG rollup / GuardianReport from persisted guardian_validations (no AI regen). */
+    guardianRetryKgPersistence: (id) => `${exports.API_PREFIX}/projects/${id}/guardian/retry-kg-persistence`,
+    /** Tasks step KG coverage gate status. */
+    tasksKgCoverage: (id) => `${exports.API_PREFIX}/projects/${id}/tasks/kg-coverage`,
+    /** Repair Tasks KG rollup from persisted workflow_artifacts (no AI regen). */
+    tasksRetryKgPersistence: (id) => `${exports.API_PREFIX}/projects/${id}/tasks/retry-kg-persistence`,
+    /** Tasks truth read-model only (no public.tasks row payload). */
+    tasksTruth: (id) => `${exports.API_PREFIX}/projects/${id}/tasks/truth`,
+    /** Idempotent tasks truth repair (KG rollup + divergence flags). */
+    tasksReconcile: (id) => `${exports.API_PREFIX}/projects/${id}/tasks/reconcile`,
+    /** Retry GitHub issue projection for all pending tasks (idempotent). */
+    tasksSyncGithubIssues: (id) => `${exports.API_PREFIX}/projects/${id}/tasks/sync-github-issues`,
+    tasksRepairStaleImplementing: (id) => `${exports.API_PREFIX}/projects/${id}/tasks/repair-stale-implementing`,
+    tasksUnblockImplementHandoff: (id) => `${exports.API_PREFIX}/projects/${id}/tasks/unblock-implement-handoff`,
+    tasksImplementUnblockPreview: (id) => `${exports.API_PREFIX}/projects/${id}/tasks/implement-unblock-preview`,
+    implementSuggestedFirstBatch: (id) => `${exports.API_PREFIX}/projects/${id}/implement/suggested-first-batch`,
+    implementNextSafeTask: (id) => `${exports.API_PREFIX}/projects/${id}/implement/next-safe-task`,
+    /** Implement step KG coverage gate status. */
+    implementKgCoverage: (id) => `${exports.API_PREFIX}/projects/${id}/implement/kg-coverage`,
+    /** Implement preflight — tasks truth, pipeline evidence, Cursor-safe fields. */
+    implementGateStatus: (id) => `${exports.API_PREFIX}/projects/${id}/implement/gate-status`,
+    /** Reset tasks stuck in `implementing` with no active patch/run back to selectable. */
+    implementRepairStaleBatch: (id) => `${exports.API_PREFIX}/projects/${id}/implement/repair-stale-batch`,
+    /** Shared Build truth (Tasks + Implement + Knowledge) computed once.
+     *  Segment is `build-spine` (not `build`) because `.gitignore` excludes `build/` dirs. */
+    buildTruth: (id) => `${exports.API_PREFIX}/projects/${id}/build-spine/truth`,
+    /** Build Knowledge closure (improvement findings + lessons manifest). */
+    buildKnowledgeClosure: (id) => `${exports.API_PREFIX}/projects/${id}/build-spine/knowledge`,
+    buildKnowledgeClose: (id) => `${exports.API_PREFIX}/projects/${id}/build-spine/knowledge/close`,
+    /** Implement step graph data (patches, tasks, PRs, files, issues). */
+    implementGraph: (id) => `${exports.API_PREFIX}/projects/${id}/implement/graph`,
+    /** Knowledge step KG rollup + staleness gate status. */
+    knowledgeKgCoverage: (id) => `${exports.API_PREFIX}/projects/${id}/knowledge/kg-coverage`,
+    /** Repair Knowledge KG rollup from accepted knowledgeFinal artifact (no AI regen). */
+    knowledgeRetryKgPersistence: (id) => `${exports.API_PREFIX}/projects/${id}/knowledge/retry-kg-persistence`,
+    /** Repair Implement KG rollup from persisted workflow_artifacts (no AI regen). */
+    implementRetryKgPersistence: (id) => `${exports.API_PREFIX}/projects/${id}/implement/retry-kg-persistence`,
+    /** Controlled workflow step reset with dry-run support. */
+    workflowResetStep: (id) => `${exports.API_PREFIX}/projects/${id}/workflow/reset-step`,
+    /** Sprint K1-C (#576): tasks appearing in multiple open PRs (duplicate lineage). */
+    knowledgeLineageDuplicates: (id) => `${exports.API_PREFIX}/projects/${id}/knowledge/lineage/duplicates`,
+    /** K1-D (#577): PR↔task acceptance-criteria coverage vs lineage file paths. */
+    knowledgeLineageCoverage: (id) => `${exports.API_PREFIX}/projects/${id}/knowledge/lineage/coverage`,
+    /** Bridge-02 (#1394): query + refresh software workflow PR↔task↔proof lineage. */
+    softwareWorkflowLineage: (id) => `${exports.API_PREFIX}/projects/${id}/software-workflow-lineage`,
+    generateReport: (id) => `${exports.API_PREFIX}/projects/${id}/report`,
+    archive: (id) => `${exports.API_PREFIX}/projects/${id}/archive`,
+    stories: (id) => `${exports.API_PREFIX}/projects/${id}/stories`,
+    compliance: (id) => `${exports.API_PREFIX}/projects/${id}/compliance`,
+    review: (id) => `${exports.API_PREFIX}/projects/${id}/review`,
+    /** MS-03 Wave 1: requirement × evidence coverage from KG substrate + lineage artifacts. */
+    reviewCoverage: (id) => `${exports.API_PREFIX}/projects/${id}/review/coverage`,
+    /** MS-03 Wave 1: deterministic ship/block gate (server-side only). */
+    reviewDecision: (id) => `${exports.API_PREFIX}/projects/${id}/review/decision`,
+    /** MS-03 closeout: explicit human release approval graph evidence. */
+    reviewApproval: (id) => `${exports.API_PREFIX}/projects/${id}/review/approval`,
+    /** MS-03 closeout: graph-backed review report export. */
+    reviewExport: (id) => `${exports.API_PREFIX}/projects/${id}/review/export`,
+    settings: (id) => `${exports.API_PREFIX}/projects/${id}/settings`,
+    /** Export without format query (handler default). Prefer `export(id, format)` when format known. */
+    exportRoot: (id) => `${exports.API_PREFIX}/projects/${id}/export`,
+    /** Canonical codebase workspace snapshot (scan + knowledge graph) */
+    projectCodebase: (id) => `${exports.API_PREFIX}/projects/${id}/codebase`,
+    /** GET project team members list */
+    team: (id) => `${exports.API_PREFIX}/projects/${id}/team`,
+    /** Invite a registered user by email (inserts project_team row) */
+    teamInvite: (id) => `${exports.API_PREFIX}/projects/${id}/team/invite`,
+    /** Project data export (blob); `format` is a query param (e.g. json, zip, stories). */
+    export: (id, format) => `${exports.API_PREFIX}/projects/${id}/export?format=${encodeURIComponent(format)}`,
+    /** Danger Zone: delete all workflow_artifacts for a project (owner only). */
+    resetWorkflow: (id) => `${exports.API_PREFIX}/projects/${id}/reset-workflow`,
+    /** Clear stuck `ai_runs` for a workflow step (owner only; marks running rows failed). */
+    stepRunReset: (projectId, stepId) => `${exports.API_PREFIX}/projects/${projectId}/steps/${encodeURIComponent(stepId)}/reset`,
+    /** Create orchestrations row for live WorkflowRunConsole (before POST /api/ai/.../generate). */
+    projectOrchestrations: (id) => `${exports.API_PREFIX}/projects/${id}/orchestrations`,
+    /** Canonical project→repo linkage + repo_readiness. */
+    repo: (id) => `${exports.API_PREFIX}/projects/${id}/repo`,
+    /** Project activity feed (used by useProjectActivity hook). */
+    activity: (id) => `${exports.API_PREFIX}/projects/${id}/activity`,
+};
+/** GET orchestration_events for an orchestration run (incremental poll via `since`). */
+const ORCHESTRATION_EVENTS = (orchestrationId) => `${exports.API_PREFIX}/orchestrations/${orchestrationId}/events`;
+exports.ORCHESTRATION_EVENTS = ORCHESTRATION_EVENTS;
+/** Canonical per-project LLM policy (`project_settings.settings.modelPolicy`). */
+const PROJECT_MODEL_SETTINGS = (projectId) => `${exports.API_PREFIX}/projects/${projectId}/model-settings`;
+exports.PROJECT_MODEL_SETTINGS = PROJECT_MODEL_SETTINGS;
+/** Per-project model quality matrix (Guardian + run telemetry aggregates). */
+const PROJECT_MODEL_QUALITY = (projectId) => `${exports.API_PREFIX}/projects/${projectId}/model-quality`;
+exports.PROJECT_MODEL_QUALITY = PROJECT_MODEL_QUALITY;
+/** Reserved path for model usage telemetry (M3). */
+const PROJECT_MODEL_USAGE = (projectId) => `${exports.API_PREFIX}/projects/${projectId}/model-usage`;
+exports.PROJECT_MODEL_USAGE = PROJECT_MODEL_USAGE;
+// Specification Routes
+exports.SPEC_ROUTES = {
+    list: `${exports.API_PREFIX}/specs`,
+    create: `${exports.API_PREFIX}/specs`,
+    getById: (id) => `${exports.API_PREFIX}/specs/${id}`,
+    update: (id) => `${exports.API_PREFIX}/specs/${id}`,
+    delete: (id) => `${exports.API_PREFIX}/specs/${id}`,
+    approve: (id) => `${exports.API_PREFIX}/specs/${id}/approve`,
+    reject: (id) => `${exports.API_PREFIX}/specs/${id}/reject`,
+    getPlans: (id) => `${exports.API_PREFIX}/specs/${id}/plans`,
+};
+// Plan Management Routes
+exports.PLAN_ROUTES = {
+    list: `${exports.API_PREFIX}/plans`,
+    create: `${exports.API_PREFIX}/plans`,
+    getById: (id) => `${exports.API_PREFIX}/plans/${id}`,
+    update: (id) => `${exports.API_PREFIX}/plans/${id}`,
+    delete: (id) => `${exports.API_PREFIX}/plans/${id}`,
+    approve: (id) => `${exports.API_PREFIX}/plans/${id}/approve`,
+    start: (id) => `${exports.API_PREFIX}/plans/${id}/start`,
+    complete: (id) => `${exports.API_PREFIX}/plans/${id}/complete`,
+    getTasks: (id) => `${exports.API_PREFIX}/plans/${id}/tasks`,
+    getDependencies: (id) => `${exports.API_PREFIX}/plans/${id}/dependencies`,
+};
+// Task Management Routes
+exports.TASK_ROUTES = {
+    list: `${exports.API_PREFIX}/tasks`,
+    create: `${exports.API_PREFIX}/tasks`,
+    getById: (id) => `${exports.API_PREFIX}/tasks/${id}`,
+    update: (id) => `${exports.API_PREFIX}/tasks/${id}`,
+    delete: (id) => `${exports.API_PREFIX}/tasks/${id}`,
+    updateStatus: (id) => `${exports.API_PREFIX}/tasks/${id}/status`,
+    assign: (id) => `${exports.API_PREFIX}/tasks/${id}/assign`,
+    complete: (id) => `${exports.API_PREFIX}/tasks/${id}/complete`,
+    getDependencies: (id) => `${exports.API_PREFIX}/tasks/${id}/dependencies`,
+    getTimeTracking: (id) => `${exports.API_PREFIX}/tasks/${id}/time`,
+};
+// ML Model Routes
+exports.ML_ROUTES = {
+    models: {
+        list: `${exports.API_PREFIX}/ml/models`,
+        create: `${exports.API_PREFIX}/ml/models`,
+        getById: (id) => `${exports.API_PREFIX}/ml/models/${id}`,
+        update: (id) => `${exports.API_PREFIX}/ml/models/${id}`,
+        delete: (id) => `${exports.API_PREFIX}/ml/models/${id}`,
+        train: (id) => `${exports.API_PREFIX}/ml/models/${id}/train`,
+        deploy: (id) => `${exports.API_PREFIX}/ml/models/${id}/deploy`,
+        predict: (id) => `${exports.API_PREFIX}/ml/models/${id}/predict`,
+        getMetrics: (id) => `${exports.API_PREFIX}/ml/models/${id}/metrics`,
+    },
+    datasets: {
+        list: `${exports.API_PREFIX}/ml/datasets`,
+        create: `${exports.API_PREFIX}/ml/datasets`,
+        getById: (id) => `${exports.API_PREFIX}/ml/datasets/${id}`,
+        update: (id) => `${exports.API_PREFIX}/ml/datasets/${id}`,
+        delete: (id) => `${exports.API_PREFIX}/ml/datasets/${id}`,
+        upload: (id) => `${exports.API_PREFIX}/ml/datasets/${id}/upload`,
+        validate: (id) => `${exports.API_PREFIX}/ml/datasets/${id}/validate`,
+    },
+    experiments: {
+        list: `${exports.API_PREFIX}/ml/experiments`,
+        create: `${exports.API_PREFIX}/ml/experiments`,
+        getById: (id) => `${exports.API_PREFIX}/ml/experiments/${id}`,
+        update: (id) => `${exports.API_PREFIX}/ml/experiments/${id}`,
+        delete: (id) => `${exports.API_PREFIX}/ml/experiments/${id}`,
+        start: (id) => `${exports.API_PREFIX}/ml/experiments/${id}/start`,
+        stop: (id) => `${exports.API_PREFIX}/ml/experiments/${id}/stop`,
+        getResults: (id) => `${exports.API_PREFIX}/ml/experiments/${id}/results`,
+    },
+};
+// AI Agent Routes
+exports.AI_ROUTES = {
+    constitution: {
+        validate: `${exports.API_PREFIX}/ai/constitution/validate`,
+        generate: `${exports.API_PREFIX}/ai/constitution/generate`,
+    },
+    specs: {
+        generate: `${exports.API_PREFIX}/ai/spec/generate`,
+        enhance: (id) => `${exports.API_PREFIX}/ai/specs/${id}/enhance`,
+    },
+    brief: {
+        improve: `${exports.API_PREFIX}/ai/brief-improve/generate`,
+    },
+    architecture: {
+        generate: `${exports.API_PREFIX}/ai/architecture/generate`,
+    },
+    schema: {
+        generate: `${exports.API_PREFIX}/ai/schema/generate`,
+    },
+    api: {
+        generate: `${exports.API_PREFIX}/ai/api/generate`,
+    },
+    components: {
+        generate: `${exports.API_PREFIX}/ai/components/generate`,
+        enhance: (id) => `${exports.API_PREFIX}/ai/components/${id}/enhance`,
+        suggestImprovements: (id) => `${exports.API_PREFIX}/ai/components/${id}/suggest`,
+    },
+    ui: {
+        generate: `${exports.API_PREFIX}/ai/ui/generate`,
+    },
+    code: {
+        generate: `${exports.API_PREFIX}/ai/code/generate`,
+    },
+    tasks: {
+        generate: `${exports.API_PREFIX}/ai/tasks/generate`,
+        suggestDependencies: (id) => `${exports.API_PREFIX}/ai/tasks/${id}/dependencies`,
+        estimateEffort: (id) => `${exports.API_PREFIX}/ai/tasks/${id}/estimate`,
+    },
+    debug: {
+        lastRequest: `${exports.API_PREFIX}/ai/debug/last-request`,
+        trace: `${exports.API_PREFIX}/ai/debug/trace`,
+    },
+    memory: `${exports.API_PREFIX}/ai/memory`,
+    metrics: `${exports.API_PREFIX}/ai/metrics`,
+    modelAnalytics: `${exports.API_PREFIX}/ai/model-analytics`,
+    rollback: `${exports.API_PREFIX}/ai/rollback`,
+    runs: {
+        list: `${exports.API_PREFIX}/ai/runs`,
+        start: `${exports.API_PREFIX}/ai/runs/start`,
+        getById: (id) => `${exports.API_PREFIX}/ai/runs/${id}`,
+    },
+    sessions: `${exports.API_PREFIX}/ai/sessions`,
+    approvals: {
+        list: `${exports.API_PREFIX}/ai/approvals`,
+        getById: (id) => `${exports.API_PREFIX}/ai/approvals/${id}`,
+    },
+    review: {
+        generate: `${exports.API_PREFIX}/ai/review/generate`,
+    },
+    docs: {
+        generate: `${exports.API_PREFIX}/ai/docs/generate`,
+    },
+    compliance: {
+        generate: `${exports.API_PREFIX}/ai/compliance/generate`,
+    },
+    ci: {
+        generate: `${exports.API_PREFIX}/ai/ci/generate`,
+        manuscriptChecks: `${exports.API_PREFIX}/ai/ci/manuscript-checks`,
+    },
+    deployments: {
+        generate: `${exports.API_PREFIX}/ai/deployments/generate`,
+        analyze: `${exports.API_PREFIX}/ai/deployments/analyze`,
+    },
+    analytics: {
+        generate: `${exports.API_PREFIX}/ai/analytics/generate`,
+    },
+    argumentMap: {
+        generate: `${exports.API_PREFIX}/ai/argument-map/generate`,
+    },
+    counterclaimFramework: {
+        generate: `${exports.API_PREFIX}/ai/counterclaim-framework/generate`,
+    },
+    implementation: {
+        generate: `${exports.API_PREFIX}/ai/implementation/generate`,
+        orchestrate: `${exports.API_PREFIX}/ai/implementation/orchestrate`,
+        orchestrateProcess: (orchestrationId) => `${exports.API_PREFIX}/ai/implementation/orchestrate/${orchestrationId}/process`,
+        orchestrateStatus: (orchestrationId) => `${exports.API_PREFIX}/ai/implementation/orchestrate/${orchestrationId}/status`,
+        orchestrateRetry: (orchestrationId) => `${exports.API_PREFIX}/ai/implementation/orchestrate/${orchestrationId}/retry`,
+        orchestrateCancel: (orchestrationId) => `${exports.API_PREFIX}/ai/implementation/orchestrate/${orchestrationId}/cancel`,
+    },
+    knowledge: {
+        generate: `${exports.API_PREFIX}/ai/knowledge/generate`,
+    },
+    editorial: {
+        reviseChapter: `${exports.API_PREFIX}/ai/editorial/revise-chapter`,
+        generateRevisionBrief: `${exports.API_PREFIX}/ai/editorial/generate-revision-brief`,
+        revisionQa: `${exports.API_PREFIX}/ai/editorial/revision-qa`,
+    },
+    filmStillReview: {
+        generate: `${exports.API_PREFIX}/ai/film-still-review/generate`,
+    },
+    filmClipReview: {
+        generate: `${exports.API_PREFIX}/ai/film-clip-review/generate`,
+    },
+    film: {
+        intent: {
+            generate: `${exports.API_PREFIX}/ai/film/intent/generate`,
+        },
+        development: {
+            generate: `${exports.API_PREFIX}/ai/film/development/generate`,
+        },
+        script: {
+            generate: `${exports.API_PREFIX}/ai/film/script/generate`,
+        },
+        preproduction: {
+            generate: `${exports.API_PREFIX}/ai/film/preproduction/generate`,
+        },
+        generation: {
+            generate: `${exports.API_PREFIX}/ai/film/generation/generate`,
+        },
+        postproduction: {
+            generate: `${exports.API_PREFIX}/ai/film/postproduction/generate`,
+        },
+        review: {
+            generate: `${exports.API_PREFIX}/ai/film/review/generate`,
+        },
+        release: {
+            generate: `${exports.API_PREFIX}/ai/film/release/generate`,
+        },
+    },
+};
+// Knowledge Graph Routes
+exports.KNOWLEDGE_ROUTES = {
+    nodes: `${exports.API_PREFIX}/knowledge/nodes`,
+    edges: `${exports.API_PREFIX}/knowledge/edges`,
+    query: `${exports.API_PREFIX}/knowledge/query`,
+    /** Text/facet search over `knowledge_nodes` (non-AI route). */
+    search: `${exports.API_PREFIX}/knowledge/search`,
+    /** Sprint K1-A (#574): upsert GitHub PRs into public.git_pull_requests for a project. */
+    syncPrs: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/knowledge/sync-prs`,
+    /** Sprint K1-B (#575): materialise patch/pr/file nodes + lineage edges. */
+    lineageBuild: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/knowledge/lineage/build`,
+    /** Sprint K1-C (#576): duplicate task detection across open PRs. */
+    lineageDuplicates: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/knowledge/lineage/duplicates`,
+    /** Sprint K1-E (#578): aggregate lineage + artifact signals for PR review readiness. */
+    knowledgeReviewReadiness: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/knowledge/review-readiness`,
+    /**
+     * Browser-safe KG evidence summary: node/edge counts, types, intent node,
+     * and latest spec nodes. Safe for client-side polling without raw DB exposure.
+     */
+    knowledgeGraphSummary: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/knowledge-graph/summary`,
+};
+// Semantic Vector Routes
+exports.VECTOR_ROUTES = {
+    search: `${exports.API_PREFIX}/vectors/search`,
+    upsert: `${exports.API_PREFIX}/vectors/upsert`,
+    similarity: `${exports.API_PREFIX}/vectors/similarity`,
+};
+// MCP Integration Routes
+exports.MCP_ROUTES = {
+    sqlProxy: `${exports.API_PREFIX}/mcp/sql`,
+    supabasePing: `${exports.API_PREFIX}/mcp/supabase/ping`,
+    vercelPing: `${exports.API_PREFIX}/mcp/vercel/ping`,
+    githubPing: `${exports.API_PREFIX}/mcp/github/ping`,
+    playwrightPing: `${exports.API_PREFIX}/mcp/playwright/ping`,
+    ping: (serverId) => `${exports.API_PREFIX}/mcp/${encodeURIComponent(serverId)}/ping`,
+};
+// System & Health Routes
+/** Match live `/api/health` + `/api/version` only (no `/health/check` spine). */
+exports.SYSTEM_ROUTES = {
+    health: `${exports.API_PREFIX}/health`,
+    version: `${exports.API_PREFIX}/version`,
+};
+// Constitution Routes
+exports.CONSTITUTION_ROUTES = {
+    get: `${exports.API_PREFIX}/constitution`,
+    create: `${exports.API_PREFIX}/constitution`,
+    update: `${exports.API_PREFIX}/constitution`,
+    delete: `${exports.API_PREFIX}/constitution`,
+    rules: `${exports.API_PREFIX}/constitution/rules`,
+    status: `${exports.API_PREFIX}/constitution/status`,
+    sync: `${exports.API_PREFIX}/constitution/sync`,
+};
+// Constitutional Compliance Routes
+exports.COMPLIANCE_ROUTES = {
+    validate: `${exports.API_PREFIX}/compliance/validate`,
+    report: `${exports.API_PREFIX}/compliance/report`,
+    violations: `${exports.API_PREFIX}/compliance/violations`,
+    getViolation: (id) => `${exports.API_PREFIX}/compliance/violations/${id}`,
+    resolveViolation: (id) => `${exports.API_PREFIX}/compliance/violations/${id}/resolve`,
+    getProjectCompliance: (projectId) => `${exports.API_PREFIX}/compliance/projects/${projectId}`,
+    constitutional: `${exports.API_PREFIX}/compliance/constitutional`,
+    workspace: `${exports.API_PREFIX}/compliance/workspace`,
+};
+// File & Upload Routes
+/** Align with `/api/storage/artifacts` (legacy `/files/*` spine removed). */
+exports.FILE_ROUTES = {
+    artifacts: `${exports.API_PREFIX}/storage/artifacts`,
+    /** Proxies JSON upload to `/api/backend/artifacts/upload`. */
+    artifactUploadProxy: `${exports.API_PREFIX}/artifacts/upload`,
+};
+/** AI response cache (Redis) — `/api/cache/*`. */
+exports.CACHE_ROUTES = {
+    aiResponse: `${exports.API_PREFIX}/cache/ai-response`,
+};
+// Notification Routes
+exports.NOTIFICATION_ROUTES = {
+    list: `${exports.API_PREFIX}/notifications`,
+};
+/** Cortex × NeuraLoom bidirectional bridge (HMAC webhooks + outbox). */
+exports.CORTEX_BRIDGE_ROUTES = {
+    portfolioLink: `${exports.API_PREFIX}/cortex/portfolio/link`,
+    intelligenceRequest: `${exports.API_PREFIX}/cortex/intelligence/request`,
+    creativeRequest: `${exports.API_PREFIX}/cortex/creative/request`,
+    taskGithubIssueRequest: `${exports.API_PREFIX}/cortex/tasks/github-issue-request`,
+    dispatchExternalExports: `${exports.API_PREFIX}/cron/dispatch-external-exports`,
+    readiness: `${exports.API_PREFIX}/internal/cortex-bridge/readiness`,
+};
+/** Vercel cron ingress (Bearer CRON_SECRET) — route-contract parity SSOT. */
+exports.CRON_ROUTES = {
+    pollRunway: `${exports.API_PREFIX}/cron/poll-runway`,
+    pollCursor: `${exports.API_PREFIX}/cron/poll-cursor`,
+    flushMarketingConversions: `${exports.API_PREFIX}/cron/flush-marketing-conversions`,
+    importMarketingMetrics: `${exports.API_PREFIX}/cron/import-marketing-metrics`,
+    reapStuckStageTasks: `${exports.API_PREFIX}/cron/reap-stuck-stage-tasks`,
+};
+// Integration Routes (GitHub, Vercel, Supabase, Doppler)
+exports.INTEGRATION_ROUTES = {
+    // List all integrations for current user
+    list: `${exports.API_PREFIX}/integrations`,
+    status: `${exports.API_PREFIX}/integrations/status`,
+    health: `${exports.API_PREFIX}/integrations/health`,
+    // GitHub Integration
+    github: {
+        connect: `${exports.API_PREFIX}/integrations/github/connect`,
+        callback: `${exports.API_PREFIX}/integrations/github/callback`,
+        status: `${exports.API_PREFIX}/integrations/github/status`,
+        disconnect: `${exports.API_PREFIX}/integrations/github/disconnect`,
+        repos: `${exports.API_PREFIX}/integrations/github/repos`,
+        webhook: `${exports.API_PREFIX}/integrations/github/webhook`,
+        codexCredentials: `${exports.API_PREFIX}/integrations/github/codex-credentials`,
+        linkRepo: (projectId) => `${exports.API_PREFIX}/integrations/github/projects/${projectId}/link`,
+        unlinkRepo: (projectId) => `${exports.API_PREFIX}/integrations/github/projects/${projectId}/unlink`,
+        projectStatus: (projectId) => `${exports.API_PREFIX}/integrations/github/projects/${projectId}/status`,
+        linked: (projectId) => `${exports.API_PREFIX}/integrations/github/projects/${projectId}/linked`,
+        branches: (projectId) => `${exports.API_PREFIX}/integrations/github/projects/${projectId}/branches`,
+        pulls: (projectId) => `${exports.API_PREFIX}/integrations/github/projects/${projectId}/pulls`,
+        issues: (projectId) => `${exports.API_PREFIX}/integrations/github/projects/${projectId}/issues`,
+        workflowRuns: (projectId) => `${exports.API_PREFIX}/integrations/github/projects/${projectId}/workflow-runs`,
+        createRepo: `${exports.API_PREFIX}/integrations/github/repos/create`,
+        createPr: `${exports.API_PREFIX}/github/pr/create`,
+    },
+    // Vercel Integration
+    vercel: {
+        connect: `${exports.API_PREFIX}/integrations/vercel/connect`,
+        callback: `${exports.API_PREFIX}/integrations/vercel/callback`,
+        disconnect: `${exports.API_PREFIX}/integrations/vercel/disconnect`,
+        /** POST body-driven deploy (no path project id). */
+        deployGlobal: `${exports.API_PREFIX}/integrations/vercel/deploy`,
+        deploy: (projectId) => `${exports.API_PREFIX}/integrations/vercel/projects/${projectId}/deploy`,
+        deployments: (projectId) => `${exports.API_PREFIX}/integrations/vercel/projects/${projectId}/deployments`,
+    },
+    // Supabase Integration (config form, not OAuth)
+    supabase: {
+        configure: `${exports.API_PREFIX}/integrations/supabase/configure`,
+        test: `${exports.API_PREFIX}/integrations/supabase/test`,
+        status: `${exports.API_PREFIX}/integrations/supabase/status`,
+        disconnect: `${exports.API_PREFIX}/integrations/supabase/disconnect`,
+        link: (projectId) => `${exports.API_PREFIX}/integrations/supabase/projects/${projectId}/link`,
+    },
+    // Doppler Integration (API token form, not OAuth)
+    doppler: {
+        configure: `${exports.API_PREFIX}/integrations/doppler/configure`,
+        test: `${exports.API_PREFIX}/integrations/doppler/test`,
+        status: `${exports.API_PREFIX}/integrations/doppler/status`,
+        disconnect: `${exports.API_PREFIX}/integrations/doppler/disconnect`,
+        sync: (projectId) => `${exports.API_PREFIX}/integrations/doppler/projects/${projectId}/sync`,
+        secrets: (projectId) => `${exports.API_PREFIX}/integrations/doppler/projects/${projectId}/secrets`,
+    },
+    // Generic integration management
+    getStatus: (provider) => `${exports.API_PREFIX}/integrations/${provider}/status`,
+    disconnect: (provider) => `${exports.API_PREFIX}/integrations/${provider}/disconnect`,
+};
+// Settings Routes
+exports.SETTINGS_ROUTES = {
+    user: `${exports.API_PREFIX}/settings/user`,
+    profile: `${exports.API_PREFIX}/settings/profile`,
+};
+// Route Helpers
+exports.ROUTE_HELPERS = {
+    // Extract ID from parameterized route
+    extractId: (route) => {
+        const match = route.match(/\/([a-f0-9-]{36})(?:\/|$)/);
+        return match?.[1] ?? null;
+    },
+    // Build query string from parameters
+    buildQuery: (params) => {
+        const urlSearchParams = new URLSearchParams();
+        Object.entries(params).forEach(([key, value]) => {
+            if (value !== undefined && value !== null) {
+                urlSearchParams.append(key, String(value));
+            }
+        });
+        const query = urlSearchParams.toString();
+        return query ? `?${query}` : "";
+    },
+    // Combine route with query parameters
+    withQuery: (route, params) => {
+        const query = exports.ROUTE_HELPERS.buildQuery(params);
+        return `${route}${query}`;
+    },
+    // Validate UUID parameter
+    isValidUUID: (id) => {
+        const uuidRegex = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+        return uuidRegex.test(id);
+    },
+};
+// HTTP Methods
+exports.HTTP_METHODS = {
+    GET: "GET",
+    POST: "POST",
+    PUT: "PUT",
+    PATCH: "PATCH",
+    DELETE: "DELETE",
+};
+// Status Codes
+exports.HTTP_STATUS = {
+    OK: 200,
+    CREATED: 201,
+    NO_CONTENT: 204,
+    BAD_REQUEST: 400,
+    UNAUTHORIZED: 401,
+    FORBIDDEN: 403,
+    NOT_FOUND: 404,
+    CONFLICT: 409,
+    UNPROCESSABLE_ENTITY: 422,
+    INTERNAL_SERVER_ERROR: 500,
+    SERVICE_UNAVAILABLE: 503,
+};
+// Content Types
+exports.CONTENT_TYPES = {
+    JSON: "application/json",
+    FORM_DATA: "multipart/form-data",
+    URL_ENCODED: "application/x-www-form-urlencoded",
+    TEXT: "text/plain",
+};
+// Frontend Page Routes - SSOT for all frontend navigation
+exports.PAGE_ROUTES = {
+    home: '/',
+    login: '/login',
+    /** Supabase OAuth / PKCE email callback (recovery, magic link). */
+    authCallback: '/auth/callback',
+    resetPassword: '/auth/reset-password',
+    workspace: '/workspace',
+    /** Global mission control (orchestration, agents). */
+    missionControl: '/mission-control',
+    analytics: '/analytics',
+    projects: '/projects',
+    projectNew: '/projects/new',
+    projectDetail: (id) => `/projects/${id}`,
+    projectTasks: (id) => `/projects/${id}/tasks`,
+    projectSettings: (id) => `/projects/${id}/settings`,
+    projectConstitution: (id) => `/projects/${id}/constitution`,
+    projectGuardian: (id) => `/projects/${id}/guardian`,
+    projectSpecify: (id) => `/projects/${id}/specify`,
+    /** Film production channel — canonical workflow step routes (registry routePath). */
+    projectIntent: (id) => `/projects/${id}/intent`,
+    projectDevelopment: (id) => `/projects/${id}/development`,
+    projectScript: (id) => `/projects/${id}/script`,
+    projectPreproduction: (id) => `/projects/${id}/preproduction`,
+    projectGeneration: (id) => `/projects/${id}/generation`,
+    projectPostproduction: (id) => `/projects/${id}/postproduction`,
+    projectRelease: (id) => `/projects/${id}/release`,
+    projectPlan: (id) => `/projects/${id}/plan`,
+    projectSchema: (id) => `/projects/${id}/schema`,
+    projectApi: (id) => `/projects/${id}/api`,
+    projectUi: (id) => `/projects/${id}/ui`,
+    projectImplement: (id) => `/projects/${id}/implement`,
+    projectReview: (id) => `/projects/${id}/review`,
+    /** Operator release decision form — honest tier selection backed by coverage + product readiness. */
+    projectWorkflowReview: (id) => `/projects/${id}/workflow/review`,
+    projectKnowledge: (id) => `/projects/${id}/knowledge`,
+    projectCompliance: (id) => `/projects/${id}/compliance`,
+    projectTeam: (id) => `/projects/${id}/team`,
+    projectRepo: (id) => `/projects/${id}/repo`,
+    projectIngest: (id) => `/projects/${id}/ingest`,
+    /** Workflow step dependency graph + lineage (#532). */
+    projectGraph: (id) => `/projects/${id}/graph`,
+    /** Per-project Guardian / orchestration telemetry dashboard. */
+    projectTelemetry: (id) => `/projects/${id}/telemetry`,
+    projectIntegrations: (id) => `/projects/${id}/integrations`,
+    projectDeployments: (id) => `/projects/${id}/deployments`,
+    projectCI: (id) => `/projects/${id}/ci`,
+    // Film production workspace routes (PR 5 — film domain module)
+    projectFilm: (id) => `/projects/${id}/film`,
+    projectFilmSources: (id) => `/projects/${id}/film/sources`,
+    projectFilmStory: (id) => `/projects/${id}/film/story`,
+    projectFilmBibles: (id) => `/projects/${id}/film/bibles`,
+    projectFilmScenes: (id) => `/projects/${id}/film/scenes`,
+    projectFilmShots: (id) => `/projects/${id}/film/shots`,
+    projectFilmPrompts: (id) => `/projects/${id}/film/prompts`,
+    projectFilmClips: (id) => `/projects/${id}/film/clips`,
+    projectFilmReview: (id) => `/projects/${id}/film/review`,
+    projectFilmEdit: (id) => `/projects/${id}/film/edit`,
+    projectFilmResolve: (id) => `/projects/${id}/film/resolve`,
+    projectFilmExport: (id) => `/projects/${id}/film/export`,
+    projectFilmDeliverables: (id) => `/projects/${id}/film/deliverables`,
+    projectFilmPublish: (id) => `/projects/${id}/film/publish`,
+    projectFilmGraph: (id) => `/projects/${id}/film/graph`,
+    tasks: '/tasks',
+    settings: '/settings',
+    /** Workspace-wide compliance dashboard (the old global `/compliance` constant had no page). */
+    workspaceCompliance: '/workspace/compliance',
+    onboarding: '/onboarding',
+    /**
+     * Spanish nonfiction book portal (thin PWA shell).
+     * Nested under `/books/escribir` so public audiobook listen stays at `/books/[bookSlug]`.
+     */
+    books: '/books',
+    /** Dedicated Spanish portal login — stays out of the full NeuraLoom /login shell. */
+    booksLogin: '/books/entrar',
+    booksPortalProject: (projectId) => `/books/escribir/${encodeURIComponent(projectId)}`,
+    booksPortalStep: (projectId, stepId) => `/books/escribir/${encodeURIComponent(projectId)}/${encodeURIComponent(stepId)}`,
+};
+/**
+ * Query parameter that carries the page a signed-out user asked for through
+ * sign-in: middleware → `/login?next=…` → password sign-in or GitHub OAuth
+ * `redirectTo` → `/auth/callback?next=…` → the requested page (issue 1798).
+ * One name for the whole chain; `/auth/callback` has always read `next`.
+ */
+exports.AUTH_RETURN_PARAM = 'next';
+/**
+ * Operator page prefixes that require a signed-in session. SSOT for the
+ * middleware redirect (before render) and the client `AuthGuard` fallback.
+ * Matched per path segment: `/tasks` covers `/tasks` and `/tasks/…`.
+ */
+exports.PROTECTED_PAGE_PREFIXES = [
+    '/dashboard',
+    exports.PAGE_ROUTES.workspace,
+    exports.PAGE_ROUTES.projects,
+    exports.PAGE_ROUTES.tasks,
+    exports.PAGE_ROUTES.missionControl,
+    exports.PAGE_ROUTES.settings,
+    '/constitution',
+    '/guardian',
+    '/onboarding',
+    '/tutorial',
+    '/workflow',
+    '/community-movie',
+    '/admin',
+    '/knowledge',
+    '/deployments',
+    '/repositories',
+];
+function isProtectedPagePath(pathname) {
+    return exports.PROTECTED_PAGE_PREFIXES.some((prefix) => pathname === prefix || pathname.startsWith(`${prefix}/`));
+}
+const AUTH_RETURN_PARSE_BASE = 'https://return-path.invalid';
+/**
+ * Returns `value` only when it is a same-origin relative path (`/tasks?x=1`),
+ * normalised to pathname + search + hash; otherwise `null`. Rejects absolute
+ * and protocol-relative URLs, backslash tricks, control characters and the
+ * auth pages themselves (no login → login loops).
+ */
+function sanitizeAuthReturnPath(value) {
+    if (typeof value !== 'string' || value.length === 0 || value.length > 2048) {
+        return null;
+    }
+    if (!value.startsWith('/') || value.startsWith('//') || value.includes('\\')) {
+        return null;
+    }
+    for (let i = 0; i < value.length; i += 1) {
+        const code = value.charCodeAt(i);
+        if (code < 0x20 || code === 0x7f) {
+            return null;
+        }
+    }
+    let parsed;
+    try {
+        parsed = new URL(value, AUTH_RETURN_PARSE_BASE);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.origin !== AUTH_RETURN_PARSE_BASE) {
+        return null;
+    }
+    if (parsed.pathname === exports.PAGE_ROUTES.login ||
+        parsed.pathname === exports.PAGE_ROUTES.authCallback ||
+        parsed.pathname.startsWith(`${exports.PAGE_ROUTES.authCallback}/`)) {
+        return null;
+    }
+    return `${parsed.pathname}${parsed.search}${parsed.hash}`;
+}
+/** `/login`, carrying `returnPath` in {@link AUTH_RETURN_PARAM} when it is safe. */
+function buildLoginPath(returnPath) {
+    const safe = sanitizeAuthReturnPath(returnPath);
+    if (safe === null) {
+        return exports.PAGE_ROUTES.login;
+    }
+    return `${exports.PAGE_ROUTES.login}?${exports.AUTH_RETURN_PARAM}=${encodeURIComponent(safe)}`;
+}
+/**
+ * Spanish Relatos mini-portal steps (fiction_book channel, short path).
+ * Skips schema/constitution in the UI; tasks do not require world ontology.
+ */
+exports.BOOKS_PORTAL_STEP_IDS = [
+    'specify',
+    'plan',
+    'tasks',
+    'implement',
+    'review',
+];
+function isBooksPortalStepId(value) {
+    return exports.BOOKS_PORTAL_STEP_IDS.includes(value);
+}
+// Git/Repository Routes
+exports.GIT_ROUTES = {
+    repos: {
+        list: `${exports.API_PREFIX}/git/repos`,
+        getById: (repoId) => `${exports.API_PREFIX}/git/repos/${repoId}`,
+        commits: (repoId) => `${exports.API_PREFIX}/git/repos/${repoId}/commits`,
+        pullRequests: (repoId) => `${exports.API_PREFIX}/git/repos/${repoId}/pulls`,
+        issues: (repoId) => `${exports.API_PREFIX}/git/repos/${repoId}/issues`,
+        activity: (repoId) => `${exports.API_PREFIX}/git/repos/${repoId}/activity`,
+        sync: (repoId) => `${exports.API_PREFIX}/git/repos/${repoId}/sync`,
+    },
+    commits: {
+        list: `${exports.API_PREFIX}/git/commits`,
+        getById: (commitId) => `${exports.API_PREFIX}/git/commits/${commitId}`,
+    },
+    pullRequests: {
+        list: `${exports.API_PREFIX}/git/pulls`,
+        getById: (prId) => `${exports.API_PREFIX}/git/pulls/${prId}`,
+    },
+    issues: {
+        list: `${exports.API_PREFIX}/git/issues`,
+        getById: (issueId) => `${exports.API_PREFIX}/git/issues/${issueId}`,
+    },
+};
+// Deployment Routes
+exports.DEPLOYMENT_ROUTES = {
+    list: `${exports.API_PREFIX}/deployments`,
+    getById: (deploymentId) => `${exports.API_PREFIX}/deployments/${deploymentId}`,
+    logs: (deploymentId) => `${exports.API_PREFIX}/deployments/${deploymentId}/logs`,
+    byProject: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/deployments`,
+    /** @deprecated Use `triggerHook` (POST /deployments/trigger). This route remains for backwards compat only. */
+    trigger: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/deploy`,
+    rollback: (deploymentId) => `${exports.API_PREFIX}/deployments/${deploymentId}/rollback`,
+    /** Canonical deployment readiness aggregator. */
+    status: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/deployments/status`,
+    /** Server-side deployment history (replaces browser Supabase read). */
+    history: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/deployments/history`,
+    /** Ingest a deployment event from an external provider. */
+    ingest: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/deployments/ingest`,
+    /** Verify a deployed URL is reachable and update verification status. */
+    verify: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/deployments/verify`,
+    configure: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/deployments/configure`,
+    /** Sync latest Vercel deployment into local DB (observation-first). */
+    sync: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/deployments/sync`,
+    /** Fire deploy hook to trigger a new Vercel deployment. */
+    triggerHook: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/deployments/trigger`,
+    /** Idempotent: set Vercel framework/rootDir, create deploy hook, register webhook. */
+    provision: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/deployments/provision`,
+    /** Create a new Vercel project linked to the project's GitHub repo. */
+    create: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/deployments/create`,
+    /** Link an existing Vercel project to a NeuraLoom project. */
+    link: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/deployments/link`,
+    /** List Vercel projects in team (for link dialog). */
+    vercelProjects: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/deployments/vercel/projects`,
+    /** Get linked Vercel project details. */
+    vercelProject: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/deployments/vercel/project`,
+    /** List env vars on linked Vercel project (names only). */
+    env: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/deployments/env`,
+    /** Push env vars to linked Vercel project. */
+    envSync: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/deployments/env/sync`,
+    /** Read-only repo deployability scan — checks package.json, next dep, build script, app dir. */
+    preflight: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/deployments/preflight`,
+    /** Deterministic deployment success / promotion risk (heuristic, not ML). */
+    predict: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/deployments/predict`,
+    /**
+     * Controlled production rollback / instant promote to a prior healthy deployment.
+     * Default dry-run; live requires explicit project_settings authorization.
+     */
+    rollbackByProject: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/deployments/rollback`,
+    /** Backfill an existing live Vercel deployment into deployments (no redeploy). */
+    importExternal: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/deployments/import-external`,
+};
+/** Public audiobook listen page + CDN manifest URLs (browser routes, not REST prefix). */
+exports.PUBLIC_BOOK_ROUTES = {
+    listen: (bookSlug) => `/books/${encodeURIComponent(bookSlug)}`,
+    manifestApi: (bookSlug) => `${exports.API_PREFIX}/public/audiobooks/${encodeURIComponent(bookSlug)}/manifest`,
+};
+/** Documentary audiobook production (writing publication); server-side ElevenLabs + LLM. */
+exports.AUDIOBOOK_EMBED_PUBLICATION_ROUTES = {
+    embedPackageByProject: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/publication/audiobook/embed-package`,
+};
+/** Manuscript text export (PDF/DOCX/EPUB/MD) from workflow_artifacts. */
+exports.MANUSCRIPT_PUBLICATION_ROUTES = {
+    export: `${exports.API_PREFIX}/publication/manuscript/export`,
+};
+exports.AUDIOBOOK_PUBLICATION_ROUTES = {
+    settings: `${exports.API_PREFIX}/publication/audiobook/settings`,
+    voiceProfile: `${exports.API_PREFIX}/publication/audiobook/voice-profile`,
+    prepareScript: `${exports.API_PREFIX}/publication/audiobook/prepare-script`,
+    generateNarration: `${exports.API_PREFIX}/publication/audiobook/generate-narration`,
+    generateTimeline: `${exports.API_PREFIX}/publication/audiobook/generate-timeline`,
+    generateSoundCues: `${exports.API_PREFIX}/publication/audiobook/generate-sound-cues`,
+    generateSoundAssets: `${exports.API_PREFIX}/publication/audiobook/generate-sound-assets`,
+    mixChapter: `${exports.API_PREFIX}/publication/audiobook/mix-chapter`,
+    qa: `${exports.API_PREFIX}/publication/audiobook/qa`,
+    generateVisualStoryboard: `${exports.API_PREFIX}/publication/audiobook/generate-visual-storyboard`,
+    generateMotionCues: `${exports.API_PREFIX}/publication/audiobook/generate-motion-cues`,
+    package: `${exports.API_PREFIX}/publication/audiobook/package`,
+    generateDocumentaryChapter: `${exports.API_PREFIX}/publication/audiobook/generate-documentary-chapter`,
+    generateExportPackage: `${exports.API_PREFIX}/publication/audiobook/generate-export-package`,
+    elevenLabsStudio: `${exports.API_PREFIX}/publication/audiobook/elevenlabs-studio`,
+    studioSyncGenerated: `${exports.API_PREFIX}/publication/audiobook/studio-sync-generated`,
+    importAssets: `${exports.API_PREFIX}/publication/audiobook/import-assets`,
+    productionMode: `${exports.API_PREFIX}/publication/audiobook/production-mode`,
+    distribution: `${exports.API_PREFIX}/publication/audiobook/distribution`,
+};
+// CI/CD Routes — per-project CI runs list + canonical status aggregator.
+exports.CI_ROUTES = {
+    runs: {
+        byProject: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/ci/runs`,
+    },
+    statusByProject: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/ci/status`,
+    apply: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/ci/apply`,
+    ingest: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/ci/ingest`,
+    dispatch: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/ci/dispatch`,
+    /** Operator override: mark CI step as operational (project_settings.settings.cicd.operatorReady). */
+    operatorReady: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/ci/ready`,
+    /** Operator override: accept partial CI validation when actionlint cannot run locally. */
+    allowSkipActionlint: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/ci/allow-skip-actionlint`,
+    /** Merge the open workflow PR via GitHub App — eliminates the need to leave NeuraLoom. */
+    mergePr: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/ci/merge-pr`,
+    /** List all open implement PRs for the project (branches ending in /implement). */
+    listImplementPrs: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/ci/implement-prs`,
+};
+// App Factory Routes
+exports.FACTORY_ROUTES = {
+    templates: {
+        list: `${exports.API_PREFIX}/factory/templates`,
+        getById: (templateId) => `${exports.API_PREFIX}/factory/templates/${templateId}`,
+    },
+    generate: `${exports.API_PREFIX}/factory/generate`,
+    boilerplate: {
+        getById: (artifactId) => `${exports.API_PREFIX}/factory/boilerplate/${artifactId}`,
+        validate: `${exports.API_PREFIX}/factory/boilerplate/validate`,
+    },
+    lifecycle: {
+        start: `${exports.API_PREFIX}/factory/lifecycle/start`,
+        getById: (lifecycleId) => `${exports.API_PREFIX}/factory/lifecycle/${lifecycleId}`,
+        cancel: (lifecycleId) => `${exports.API_PREFIX}/factory/lifecycle/${lifecycleId}/cancel`,
+        retry: (lifecycleId) => `${exports.API_PREFIX}/factory/lifecycle/${lifecycleId}/retry`,
+    },
+};
+// Component & Page Builder Routes
+exports.WORKSPACE_ROUTES = {
+    components: {
+        list: `${exports.API_PREFIX}/workspace/components`,
+        create: `${exports.API_PREFIX}/workspace/components`,
+        getById: (componentId) => `${exports.API_PREFIX}/workspace/components/${componentId}`,
+        update: (componentId) => `${exports.API_PREFIX}/workspace/components/${componentId}`,
+        delete: (componentId) => `${exports.API_PREFIX}/workspace/components/${componentId}`,
+        preview: (componentId) => `${exports.API_PREFIX}/workspace/components/${componentId}/preview`,
+        versions: (componentId) => `${exports.API_PREFIX}/workspace/components/${componentId}/versions`,
+        analytics: (componentId) => `${exports.API_PREFIX}/workspace/components/${componentId}/analytics`,
+        generate: `${exports.API_PREFIX}/workspace/components/generate`,
+        validate: `${exports.API_PREFIX}/workspace/components/validate`,
+        marketplace: `${exports.API_PREFIX}/workspace/components/marketplace`,
+        download: (componentId) => `${exports.API_PREFIX}/workspace/components/${componentId}/download`,
+        rate: (componentId) => `${exports.API_PREFIX}/workspace/components/${componentId}/rate`,
+    },
+    pages: {
+        list: `${exports.API_PREFIX}/workspace/pages`,
+        create: `${exports.API_PREFIX}/workspace/pages`,
+        getById: (pageId) => `${exports.API_PREFIX}/workspace/pages/${pageId}`,
+        update: (pageId) => `${exports.API_PREFIX}/workspace/pages/${pageId}`,
+        delete: (pageId) => `${exports.API_PREFIX}/workspace/pages/${pageId}`,
+        preview: (pageId) => `${exports.API_PREFIX}/workspace/pages/${pageId}/preview`,
+        versions: (pageId) => `${exports.API_PREFIX}/workspace/pages/${pageId}/versions`,
+        generate: `${exports.API_PREFIX}/workspace/pages/generate`,
+        validate: `${exports.API_PREFIX}/workspace/pages/validate`,
+        suggestions: `${exports.API_PREFIX}/workspace/pages/suggestions`,
+    },
+    themes: {
+        list: `${exports.API_PREFIX}/workspace/themes`,
+        create: `${exports.API_PREFIX}/workspace/themes`,
+        getById: (themeId) => `${exports.API_PREFIX}/workspace/themes/${themeId}`,
+        update: (themeId) => `${exports.API_PREFIX}/workspace/themes/${themeId}`,
+        activate: (themeId) => `${exports.API_PREFIX}/workspace/themes/${themeId}/activate`,
+    },
+};
+// Infrastructure Management Routes
+exports.INFRA_ROUTES = {
+    projects: {
+        list: `${exports.API_PREFIX}/infra/projects`,
+        create: `${exports.API_PREFIX}/infra/projects`,
+        getById: (id) => `${exports.API_PREFIX}/infra/projects/${id}`,
+        update: (id) => `${exports.API_PREFIX}/infra/projects/${id}`,
+        delete: (id) => `${exports.API_PREFIX}/infra/projects/${id}`,
+    },
+    runs: {
+        list: `${exports.API_PREFIX}/infra/runs`,
+        getById: (id) => `${exports.API_PREFIX}/infra/runs/${id}`,
+        logs: (id) => `${exports.API_PREFIX}/infra/runs/${id}/logs`,
+    },
+    guardian: {
+        validate: `${exports.API_PREFIX}/infra/guardian/validate`,
+        report: `${exports.API_PREFIX}/infra/guardian/report`,
+    },
+};
+// Routes & Code Tracking
+exports.CODE_ROUTES = {
+    routes: {
+        list: `${exports.API_PREFIX}/routes`,
+        getById: (routeId) => `${exports.API_PREFIX}/routes/${routeId}`,
+        byProject: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/routes`,
+        register: `${exports.API_PREFIX}/routes/register`,
+    },
+    snippets: {
+        list: `${exports.API_PREFIX}/code-snippets`,
+        getById: (snippetId) => `${exports.API_PREFIX}/code-snippets/${snippetId}`,
+        byProject: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/code-snippets`,
+        byTask: (taskId) => `${exports.API_PREFIX}/tasks/${taskId}/code-snippets`,
+    },
+    architectures: {
+        list: `${exports.API_PREFIX}/architectures`,
+        getById: (graphId) => `${exports.API_PREFIX}/architectures/${graphId}`,
+        byProject: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/architecture`,
+        generate: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/architecture/generate`,
+    },
+    retrospectives: {
+        list: `${exports.API_PREFIX}/retrospectives`,
+        getById: (retroId) => `${exports.API_PREFIX}/retrospectives/${retroId}`,
+        byProject: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/retrospective`,
+        generate: (projectId) => `${exports.API_PREFIX}/projects/${projectId}/retrospective/generate`,
+    },
+    specTemplates: {
+        list: `${exports.API_PREFIX}/spec-templates`,
+        getById: (templateId) => `${exports.API_PREFIX}/spec-templates/${templateId}`,
+        byCategory: (category) => `${exports.API_PREFIX}/spec-templates/category/${category}`,
+    },
+};
+/** Analytics APIs under `/api/analytics/*`. */
+exports.ANALYTICS_ROUTES = {
+    guardian: `${exports.API_PREFIX}/analytics/guardian`,
+    projectMetrics: (id) => `${exports.API_PREFIX}/analytics/project-metrics/${id}`,
+    complianceReport: (id) => `${exports.API_PREFIX}/analytics/compliance-report/${id}`,
+    teamInsights: (id) => `${exports.API_PREFIX}/analytics/team-insights/${id}`,
+    workspace: `${exports.API_PREFIX}/analytics/workspace`,
+    notificationsFeed: `${exports.API_PREFIX}/analytics/notifications-feed`,
+};
+exports.DASHBOARD_ROUTES = {
+    stats: `${exports.API_PREFIX}/dashboard/stats`,
+};
+exports.DECISION_ROUTES = {
+    list: `${exports.API_PREFIX}/decisions`,
+    respond: (decisionId) => `${exports.API_PREFIX}/decisions/${decisionId}/respond`,
+};
+exports.WORKFLOW_TEMPLATE_ROUTES = {
+    list: `${exports.API_PREFIX}/workflows/templates`,
+    use: (templateId) => `${exports.API_PREFIX}/workflows/templates/${templateId}/use`,
+};
+/** Legacy `/api/team` spine (project roster). */
+exports.TEAM_ROUTES = {
+    list: `${exports.API_PREFIX}/team`,
+    root: `${exports.API_PREFIX}/team`,
+};
+/** `/api/teams/*` workspace APIs. */
+exports.TEAMS_ROUTES = {
+    list: `${exports.API_PREFIX}/teams`,
+    agents: {
+        list: `${exports.API_PREFIX}/teams/agents`,
+        byId: (id) => `${exports.API_PREFIX}/teams/agents/${id}`,
+    },
+    assignRole: `${exports.API_PREFIX}/teams/assign-role`,
+    models: {
+        list: (teamId) => `${exports.API_PREFIX}/teams/${teamId}/models`,
+        create: (teamId) => `${exports.API_PREFIX}/teams/${teamId}/models`,
+        delete: (teamId, modelId) => `${exports.API_PREFIX}/teams/${teamId}/models/${modelId}`,
+    },
+    phases: {
+        list: (teamId) => `${exports.API_PREFIX}/teams/${teamId}/phases`,
+        create: (teamId) => `${exports.API_PREFIX}/teams/${teamId}/phases`,
+        delete: (teamId, phaseId) => `${exports.API_PREFIX}/teams/${teamId}/phases/${phaseId}`,
+    },
+    feedback: (teamId) => `${exports.API_PREFIX}/teams/${teamId}/feedback`,
+};
+exports.AGENT_ACTION_ROUTES = {
+    list: `${exports.API_PREFIX}/agent-actions`,
+    pending: `${exports.API_PREFIX}/agent-actions/pending`,
+    byId: (id) => `${exports.API_PREFIX}/agent-actions/${id}`,
+    approve: (id) => `${exports.API_PREFIX}/agent-actions/${id}/approve`,
+    reject: (id) => `${exports.API_PREFIX}/agent-actions/${id}/reject`,
+    retry: (id) => `${exports.API_PREFIX}/agent-actions/${id}/retry`,
+};
+exports.TELEMETRY_ROUTES = {
+    aiUsage: `${exports.API_PREFIX}/metrics/ai-usage`,
+};
+exports.SEARCH_ROUTES = {
+    query: `${exports.API_PREFIX}/search`,
+};
+/** Issue #154 / #1158: server-side durable workflow (execution_runs + execution_tasks) */
+exports.ORCHESTRATION_DURABLE_ROUTES = {
+    run: `${exports.API_PREFIX}/orchestration/run`,
+    stageRun: `${exports.API_PREFIX}/orchestration/stage-run`,
+    continue: `${exports.API_PREFIX}/orchestration/continue`,
+    runStatus: (id) => `${exports.API_PREFIX}/orchestration/run/${id}/status`,
+};
+/** Status poll path for a durable execution run (#1159). */
+function buildOrchestrationRunStatusUrl(runId) {
+    return exports.ORCHESTRATION_DURABLE_ROUTES.runStatus(runId);
+}
+/** Film production — clip registry, review, selection, export, KG, Resolve bridge API routes (PR 6–PR 10). */
+exports.FILM_ROUTES = {
+    clips: `${exports.API_PREFIX}/film/clips`,
+    clipReview: (id) => `${exports.API_PREFIX}/film/clips/${id}/review`,
+    clipSelect: (id) => `${exports.API_PREFIX}/film/clips/${id}/select`,
+    keyframesList: `${exports.API_PREFIX}/film/keyframes`,
+    keyframesRegister: `${exports.API_PREFIX}/film/keyframes/register`,
+    keyframesGenerate: `${exports.API_PREFIX}/film/keyframes/generate`,
+    keyframeReview: (keyframeId) => `${exports.API_PREFIX}/film/keyframes/${keyframeId}/review`,
+    clipReviewScores: (clipId) => `${exports.API_PREFIX}/film/clips/${clipId}/review-scores`,
+    clipPlaybackUrl: (clipId) => `${exports.API_PREFIX}/film/clips/${clipId}/playback-url`,
+    shotAssessRisk: (shotId) => `${exports.API_PREFIX}/film/shots/${shotId}/assess-risk`,
+    export: `${exports.API_PREFIX}/film/export`,
+    kgCoverage: `${exports.API_PREFIX}/film/kg-coverage`,
+    ofiReport: `${exports.API_PREFIX}/film/ofi-report`,
+    lessonsManifest: `${exports.API_PREFIX}/film/lessons-manifest`,
+    resolveIngest: `${exports.API_PREFIX}/film/resolve-ingest`,
+    render: `${exports.API_PREFIX}/film/render`,
+    renderWorker: `${exports.API_PREFIX}/film/render/worker`,
+    editSequences: `${exports.API_PREFIX}/film/edit-sequences`,
+    editSequencesBuildRoughCut: `${exports.API_PREFIX}/film/edit-sequences/build-rough-cut`,
+    queueEnqueue: `${exports.API_PREFIX}/film/queue/enqueue`,
+    hydrateFromArtifacts: `${exports.API_PREFIX}/film/hydrate-from-artifacts`,
+    shotsList: `${exports.API_PREFIX}/film/shots`,
+    scenesList: `${exports.API_PREFIX}/film/scenes`,
+    promptsList: `${exports.API_PREFIX}/film/prompts`,
+    queueEnqueueClipFromShot: `${exports.API_PREFIX}/film/queue/enqueue-clip-from-shot`,
+    queueEnqueueMultiTake: `${exports.API_PREFIX}/film/queue/enqueue-multi-take`,
+    queueDrain: `${exports.API_PREFIX}/film/queue/drain`,
+    queueProcessProject: `${exports.API_PREFIX}/film/queue/process-project`,
+    queueTasks: `${exports.API_PREFIX}/film/queue/tasks`,
+    queueTaskCancel: (taskId) => `${exports.API_PREFIX}/film/queue/tasks/${taskId}/cancel`,
+    queueTaskRetry: (taskId) => `${exports.API_PREFIX}/film/queue/tasks/${taskId}/retry`,
+    queueTaskDetail: (taskId) => `${exports.API_PREFIX}/film/queue/tasks/${taskId}`,
+    characterPacks: `${exports.API_PREFIX}/film/character-packs`,
+    characterPackApprove: (id) => `${exports.API_PREFIX}/film/character-packs/${id}/approve`,
+    promptRepairForShot: `${exports.API_PREFIX}/film/prompts/repair-for-shot`,
+    runwayWebhook: `${exports.API_PREFIX}/film/providers/runway/webhook`,
+    queuePollRunway: `${exports.API_PREFIX}/film/queue/poll-runway`,
+    comfyUiNotify: `${exports.API_PREFIX}/film/providers/comfyui/notify`,
+    comfyUiWorkflows: `${exports.API_PREFIX}/film/comfyui-workflows`,
+    comfyUiWorkflow: (id) => `${exports.API_PREFIX}/film/comfyui-workflows/${id}`,
+    promptPerformance: `${exports.API_PREFIX}/film/prompt-performance`,
+    takeComparisons: `${exports.API_PREFIX}/film/take-comparisons`,
+    takeComparison: (id) => `${exports.API_PREFIX}/film/take-comparisons/${id}`,
+    takeComparisonDecide: (id) => `${exports.API_PREFIX}/film/take-comparisons/${id}/decide`,
+    deliverables: `${exports.API_PREFIX}/film/deliverables`,
+    deliverableIngest: `${exports.API_PREFIX}/film/deliverables/ingest`,
+    deliverablePublishPackage: `${exports.API_PREFIX}/film/deliverables/publish-package`,
+    deliverablePlaybackUrl: (id) => `${exports.API_PREFIX}/film/deliverables/${id}/playback-url`,
+    deliverableUpdate: (id) => `${exports.API_PREFIX}/film/deliverables/${id}`,
+    mediaAssetReview: (id) => `${exports.API_PREFIX}/film/media/${id}/review`,
+    mediaAssetPromote: (id) => `${exports.API_PREFIX}/film/media/${id}/promote`,
+    marketingCreatives: `${exports.API_PREFIX}/film/marketing/creatives`,
+    datasets: `${exports.API_PREFIX}/film/datasets`,
+    dataset: (id) => `${exports.API_PREFIX}/film/datasets/${id}`,
+    datasetItems: (id) => `${exports.API_PREFIX}/film/datasets/${id}/items`,
+    datasetManifest: (id) => `${exports.API_PREFIX}/film/datasets/${id}/manifest`,
+};
+/** MS-05 #734 — server-side runtime probe execution (API channel). */
+exports.RUNTIME_ROUTES = {
+    run: `${exports.API_PREFIX}/runtime/run`,
+    ingest: `${exports.API_PREFIX}/runtime/ingest`,
+    findingsProject: `${exports.API_PREFIX}/runtime/findings/project`,
+    tasksProject: `${exports.API_PREFIX}/runtime/tasks/project`,
+    guardEvaluate: `${exports.API_PREFIX}/runtime/guard/evaluate`,
+    tutorialProof: `${exports.API_PREFIX}/runtime/tutorial/proof`,
+};
+// All routes grouped for easy access
+exports.ALL_ROUTES = {
+    auth: exports.AUTH_ROUTES,
+    users: exports.USER_ROUTES,
+    projects: exports.PROJECT_ROUTES,
+    specs: exports.SPEC_ROUTES,
+    plans: exports.PLAN_ROUTES,
+    tasks: exports.TASK_ROUTES,
+    constitution: exports.CONSTITUTION_ROUTES,
+    ml: exports.ML_ROUTES,
+    ai: exports.AI_ROUTES,
+    knowledge: exports.KNOWLEDGE_ROUTES,
+    vectors: exports.VECTOR_ROUTES,
+    mcp: exports.MCP_ROUTES,
+    system: exports.SYSTEM_ROUTES,
+    compliance: exports.COMPLIANCE_ROUTES,
+    files: exports.FILE_ROUTES,
+    notifications: exports.NOTIFICATION_ROUTES,
+    integrations: exports.INTEGRATION_ROUTES,
+    cortexBridge: exports.CORTEX_BRIDGE_ROUTES,
+    settings: exports.SETTINGS_ROUTES,
+    pages: exports.PAGE_ROUTES,
+    git: exports.GIT_ROUTES,
+    deployments: exports.DEPLOYMENT_ROUTES,
+    ci: exports.CI_ROUTES,
+    factory: exports.FACTORY_ROUTES,
+    workspace: exports.WORKSPACE_ROUTES,
+    infra: exports.INFRA_ROUTES,
+    code: exports.CODE_ROUTES,
+    orchestrationDurable: exports.ORCHESTRATION_DURABLE_ROUTES,
+    runtime: exports.RUNTIME_ROUTES,
+    film: exports.FILM_ROUTES,
+    orchestrationLive: exports.ORCHESTRATION_ROUTES,
+    guardian: exports.GUARDIAN_ROUTES,
+    repo: exports.REPO_ROUTES,
+    implement: exports.IMPLEMENT_ROUTES,
+    workflow: exports.WORKFLOW_ROUTES,
+    analytics: exports.ANALYTICS_ROUTES,
+    dashboard: exports.DASHBOARD_ROUTES,
+    decisions: exports.DECISION_ROUTES,
+    workflowTemplates: exports.WORKFLOW_TEMPLATE_ROUTES,
+    team: exports.TEAM_ROUTES,
+    teams: exports.TEAMS_ROUTES,
+    agentActions: exports.AGENT_ACTION_ROUTES,
+    telemetry: exports.TELEMETRY_ROUTES,
+    search: exports.SEARCH_ROUTES,
+};
+// Frequently used route shortcuts
+exports.ROUTES = {
+    public: {
+        audiobooks: {
+            manifest: (bookSlug) => exports.PUBLIC_BOOK_ROUTES.manifestApi(bookSlug),
+            listenPage: (bookSlug) => exports.PUBLIC_BOOK_ROUTES.listen(bookSlug),
+        },
+    },
+    publication: {
+        audiobook: {
+            embedPackage: (projectId) => exports.AUDIOBOOK_EMBED_PUBLICATION_ROUTES.embedPackageByProject(projectId),
+        },
+        manuscript: {
+            export: exports.MANUSCRIPT_PUBLICATION_ROUTES.export,
+        },
+    },
+    Projects: exports.PROJECT_ROUTES.list,
+    Tasks: exports.TASK_ROUTES.list,
+    Specs: exports.SPEC_ROUTES.list,
+    KnowledgeNodes: exports.KNOWLEDGE_ROUTES.nodes,
+    KnowledgeEdges: exports.KNOWLEDGE_ROUTES.edges,
+    KnowledgeQuery: exports.KNOWLEDGE_ROUTES.query,
+    VectorsSearch: exports.VECTOR_ROUTES.search,
+    VectorsUpsert: exports.VECTOR_ROUTES.upsert,
+    VectorsSimilarity: exports.VECTOR_ROUTES.similarity,
+    McpSql: exports.MCP_ROUTES.sqlProxy,
+    projects: {
+        export: (projectId, format) => exports.PROJECT_ROUTES.export(projectId, format),
+        projectFilmResolve: (id) => exports.PAGE_ROUTES.projectFilmResolve(id),
+        projectFilmExport: (id) => exports.PAGE_ROUTES.projectFilmExport(id),
+    },
+    plan: {
+        gateStatus: (projectId) => exports.PROJECT_ROUTES.planGateStatus(projectId),
+    },
+};
+__exportStar(require("./community"), exports);
+__exportStar(require("./assurance"), exports);