@svenroth-ai/shipwright 0.24.1-next.0

package/scripts/repair-claude-json.mjs

@@ -0,0 +1,295 @@
+/**
+ * repair-claude-json.mjs — deploy-time self-heal for a corrupt ~/.claude.json.
+ *
+ * WHY: the production deploy (start-server-production.ps1) force-kills the webui
+ * server, which kills every embedded-terminal `claude` process at once. On
+ * reload many `claude` CLIs start simultaneously and race on ~/.claude.json,
+ * which the CLI writes NON-atomically and WITHOUT a lock. The losing write can
+ * leave a valid, SHORTER object followed by the leftover tail of an older,
+ * LONGER version (a "truncation tail") — every running `claude` then fails with
+ *   JSON.parse: "Unexpected non-whitespace character after JSON at position N".
+ *
+ * webui is a read-only observer of ~/.claude/ and never writes this file (that
+ * is the upstream CLI's bug to fix). But the deploy can heal the file once,
+ * up-front, before the embedded sessions restart — that is all this script does.
+ *
+ * Best effort: the deploy NEVER gates on this script's exit code. Server/build
+ * do not depend on ~/.claude.json.
+ *
+ * Run (CLI): node scripts/repair-claude-json.mjs · Test: node --test <this>.test.mjs
+ * Scan delimiters use char codes (not \u escapes) on purpose — literal
+ * backslash/brace escapes in source have bitten this repo before.
+ */
+
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const CH_OPEN = 0x7b; // {
+const CH_CLOSE = 0x7d; // }
+const CH_QUOTE = 0x22; // "
+const CH_BACKSLASH = 0x5c; // (reverse solidus)
+
+const MIN_TOP_LEVEL_KEYS = 3;
+const DEFAULT_BACKUPS_KEPT = 10;
+
+const PREFIX = '[repair-claude-json]';
+const log = (msg) => process.stdout.write(`${PREFIX} ${msg}\n`);
+const warn = (msg) => process.stderr.write(`${PREFIX} WARN: ${msg}\n`);
+
+/**
+ * String/escape-aware scan for the first balanced top-level `{...}` object.
+ * Braces and quotes inside JSON string values (incl. escaped quotes) are
+ * ignored. Returns `{ prefix, tail }` or `null` when no balanced object exists.
+ *
+ * @param {string} text
+ * @returns {{ prefix: string, tail: string } | null}
+ */
+export function findFirstBalancedObject(text) {
+  if (typeof text !== 'string') return null;
+  const start = text.indexOf(String.fromCharCode(CH_OPEN));
+  if (start < 0) return null;
+
+  let depth = 0;
+  let inString = false;
+  let escaped = false;
+
+  for (let i = start; i < text.length; i++) {
+    const c = text.charCodeAt(i);
+    if (inString) {
+      if (escaped) escaped = false;
+      else if (c === CH_BACKSLASH) escaped = true;
+      else if (c === CH_QUOTE) inString = false;
+      continue;
+    }
+    if (c === CH_QUOTE) {
+      inString = true;
+    } else if (c === CH_OPEN) {
+      depth++;
+    } else if (c === CH_CLOSE) {
+      depth--;
+      if (depth === 0) {
+        return { prefix: text.slice(start, i + 1), tail: text.slice(i + 1) };
+      }
+    }
+  }
+  return null; // never returned to depth 0 — unbalanced
+}
+
+/**
+ * Sanity guard: a repaired candidate is only trusted to overwrite the live file
+ * when it parses AND looks like a real claude config (object, >= 3 top-level
+ * keys, and carries "projects"). Stops us from clobbering the file with a tiny
+ * coincidental `{...}` that happened to be balanced.
+ *
+ * @param {unknown} obj
+ * @returns {boolean}
+ */
+export function isPlausibleClaudeConfig(obj) {
+  return (
+    obj != null &&
+    typeof obj === 'object' &&
+    !Array.isArray(obj) &&
+    Object.keys(obj).length >= MIN_TOP_LEVEL_KEYS &&
+    Object.prototype.hasOwnProperty.call(obj, 'projects')
+  );
+}
+
+/**
+ * Classify + (logically) repair raw text. Pure: no I/O.
+ *
+ * @param {string|null|undefined} text
+ * @returns {{ status: 'valid'|'empty'|'repaired'|'unrepairable',
+ *             repaired?: string, discardedTail?: string, reason?: string }}
+ */
+export function repairJsonText(text) {
+  if (text == null || text.trim().length === 0) return { status: 'empty' };
+  try {
+    JSON.parse(text);
+    return { status: 'valid' };
+  } catch {
+    /* fall through to repair */
+  }
+  const found = findFirstBalancedObject(text);
+  if (!found) return { status: 'unrepairable', reason: 'no_balanced_object' };
+
+  let candidate;
+  try {
+    candidate = JSON.parse(found.prefix);
+  } catch {
+    return { status: 'unrepairable', reason: 'prefix_not_valid_json' };
+  }
+  if (!isPlausibleClaudeConfig(candidate)) {
+    return { status: 'unrepairable', reason: 'implausible_structure' };
+  }
+  // Fail-safe ambiguity guard. A real truncation tail is a FRAGMENT (begins
+  // mid-value) — it never starts a second complete config, and inner braces in
+  // a fragment (`"tipsHistory":{...}`) are not plausible configs (no top-level
+  // "projects"). But IF the tail itself begins another plausible config we have
+  // two candidates and cannot know which is live — refuse rather than risk
+  // overwriting the good config with the wrong one. (Overwriting a global
+  // config must fail safe even though the diagnosed corruption never does this.)
+  const tailObj = findFirstBalancedObject(found.tail);
+  if (tailObj) {
+    let tailCandidate;
+    try {
+      tailCandidate = JSON.parse(tailObj.prefix);
+    } catch {
+      tailCandidate = undefined;
+    }
+    if (isPlausibleClaudeConfig(tailCandidate)) {
+      return { status: 'unrepairable', reason: 'multiple_candidates' };
+    }
+  }
+  return { status: 'repaired', repaired: found.prefix, discardedTail: found.tail };
+}
+
+/**
+ * Windows-safe filename timestamp (no `:` / `.`). FIXED-WIDTH by construction
+ * (`toISOString()` is always `YYYY-MM-DDTHH-MM-SS-sssZ`), so lexicographic sort
+ * === chronological — load-bearing for pruneBackups. A format-pinning test
+ * guards against a future variable-width change (e.g. epoch millis) that would
+ * silently mis-sort and prune the WRONG backups.
+ */
+export function backupTimestamp() {
+  return new Date().toISOString().replace(/[:.]/g, '-');
+}
+
+/**
+ * Delete all but the newest `keep` `<base>.corrupt-<ts>.bak` files in `dir`.
+ * Best effort — unlink failures are swallowed. Returns the deleted names.
+ *
+ * @param {string} dir
+ * @param {string} base       // e.g. ".claude.json"
+ * @param {number} keep
+ * @param {string} [exceptName] // a backup name to always keep (e.g. the one
+ *                              // just created this run — protects it from a
+ *                              // CONCURRENT run's prune deleting it).
+ * @returns {string[]}
+ */
+export function pruneBackups(dir, base, keep = DEFAULT_BACKUPS_KEPT, exceptName) {
+  let entries;
+  try {
+    entries = fs.readdirSync(dir);
+  } catch {
+    return [];
+  }
+  const head = `${base}.corrupt-`;
+  const baks = entries
+    .filter((n) => n.startsWith(head) && n.endsWith('.bak') && n !== exceptName)
+    .sort(); // ISO timestamp → lexicographic === chronological
+  const excess = baks.slice(0, Math.max(0, baks.length - keep));
+  for (const name of excess) {
+    try {
+      fs.unlinkSync(path.join(dir, name));
+    } catch {
+      /* best effort */
+    }
+  }
+  return excess;
+}
+
+/**
+ * Repair the file at `targetPath` in place (with backup + atomic write).
+ * The target path is the SOLE I/O boundary — pass a temp path to test it.
+ *
+ * @param {string} targetPath
+ * @param {{ keep?: number }} [options]
+ * @returns {{ action: string, status: string, reason?: string,
+ *             backupPath?: string, discardedBytes?: number, message?: string }}
+ */
+export function repairFile(targetPath, options = {}) {
+  const keep = options.keep ?? DEFAULT_BACKUPS_KEPT;
+  if (!fs.existsSync(targetPath)) {
+    return { action: 'noop', status: 'absent' };
+  }
+
+  let raw;
+  try {
+    raw = fs.readFileSync(targetPath, 'utf8');
+  } catch (err) {
+    return { action: 'error', status: 'read_failed', message: String(err && err.message) };
+  }
+
+  const result = repairJsonText(raw);
+  if (result.status === 'valid') return { action: 'noop', status: 'valid' };
+  if (result.status === 'empty') return { action: 'noop', status: 'empty' };
+  if (result.status === 'unrepairable') {
+    return { action: 'skip', status: 'unrepairable', reason: result.reason };
+  }
+
+  const dir = path.dirname(targetPath);
+  const base = path.basename(targetPath);
+  const backupPath = path.join(dir, `${base}.corrupt-${backupTimestamp()}.bak`);
+  const tmpPath = path.join(dir, `${base}.tmp-${process.pid}`);
+  try {
+    fs.copyFileSync(targetPath, backupPath); // preserve the corrupt original bytes
+    fs.writeFileSync(tmpPath, result.repaired);
+    fs.renameSync(tmpPath, targetPath); // atomic on same volume
+  } catch (err) {
+    // The original file is untouched, so the backup we just made is a redundant
+    // copy of the still-corrupt file — clean both up so a failed repair (e.g. a
+    // reader holding the file open on Windows) never litters the homedir with
+    // an orphan temp + un-pruned backup.
+    for (const p of [tmpPath, backupPath]) {
+      try {
+        fs.unlinkSync(p);
+      } catch {
+        /* best effort */
+      }
+    }
+    return { action: 'error', status: 'write_failed', message: String(err && err.message) };
+  }
+  pruneBackups(dir, base, keep, path.basename(backupPath));
+  return {
+    action: 'repaired',
+    status: 'repaired',
+    backupPath,
+    discardedBytes: Buffer.byteLength(result.discardedTail, 'utf8'),
+  };
+}
+
+/**
+ * CLI entry point. Returns a process exit code (0 = healthy/healed/benign,
+ * 1 = corrupt-but-not-safely-repairable or an I/O error). The deploy must NOT
+ * gate on this code.
+ *
+ * @returns {number}
+ */
+export function main() {
+  const targetPath = path.join(os.homedir(), '.claude.json');
+  const res = repairFile(targetPath);
+  switch (res.status) {
+    case 'absent':
+      log('~/.claude.json not found — nothing to repair.');
+      return 0;
+    case 'valid':
+      log('~/.claude.json is valid — no repair needed.');
+      return 0;
+    case 'empty':
+      log('~/.claude.json is empty — leaving it for the CLI to recreate.');
+      return 0;
+    case 'repaired':
+      log(
+        `Repaired ~/.claude.json (discarded ${res.discardedBytes} trailing byte(s)). ` +
+          `Backup: ${path.basename(res.backupPath)}`,
+      );
+      return 0;
+    case 'unrepairable':
+      warn(
+        `~/.claude.json is corrupt and could NOT be safely repaired (${res.reason}). ` +
+          'Left untouched — the Claude CLI may recreate it, or restore a backup manually.',
+      );
+      return 1;
+    default:
+      warn(`${res.status}: ${res.message ?? 'unknown error'}. ~/.claude.json left untouched.`);
+      return 1;
+  }
+}
+
+// Run only when invoked directly (not when imported by the test).
+const invokedPath = process.argv[1] ? path.resolve(process.argv[1]) : '';
+if (invokedPath && invokedPath === fileURLToPath(import.meta.url)) {
+  process.exit(main());
+}

package/server/dist/config/default-actions.json

@@ -0,0 +1,90 @@
+{
+  "schemaVersion": 1,
+  "defaults": {
+    "autonomy": "guided"
+  },
+  "actions": [
+    {
+      "id": "new-task",
+      "label": "New task",
+      "kind": "external_launch",
+      "description": "Plain Claude invocation scoped to a Shipwright phase. Fire-and-forget — no pipeline state.",
+      "command_template": "{cd.prefix}claude --session-id {task.uuid} --name {task.session_name} {plugin.dirs} {task.initial_prompt}",
+      "modal_fields": ["title", "phase", "description", "domain", "priority", "complexityHint", "tags", "blockedBy"],
+      "phase_parameters": {
+        "adopt": [
+          { "name": "dry-run", "type": "boolean", "label": "Dry run", "cli_flag": "--dry-run", "helpText": "Simulate adoption without commits" },
+          { "name": "scope", "type": "enum", "label": "Scope", "enum": ["full_app", "library", "cli"], "cli_flag": "--scope", "value_separator": "space" },
+          { "name": "include-nested", "type": "boolean", "label": "Include nested projects", "cli_flag": "--include-nested" },
+          { "name": "skip-crawl", "type": "boolean", "label": "Skip Playwright crawl", "cli_flag": "--skip-crawl" },
+          { "name": "crawl-base-url", "type": "string", "label": "Crawl base URL", "cli_flag": "--crawl-base-url", "value_separator": "space", "placeholder": "e.g. http://localhost:3000" },
+          { "name": "crawl-auth-token", "type": "string", "label": "Crawl auth token", "cli_flag": "--crawl-auth-token", "value_separator": "space", "sensitive": true },
+          { "name": "crawl-max-depth", "type": "string", "label": "Crawl max depth", "cli_flag": "--crawl-max-depth", "value_separator": "space", "pattern": "^[1-9][0-9]?$", "default": "3" },
+          { "name": "crawl-max-pages", "type": "string", "label": "Crawl max pages", "cli_flag": "--crawl-max-pages", "value_separator": "space", "pattern": "^[1-9][0-9]{0,3}$", "default": "50" },
+          { "name": "no-backfill-events", "type": "boolean", "label": "Skip event backfill", "cli_flag": "--no-backfill-events" },
+          { "name": "no-sync", "type": "boolean", "label": "Skip writing sync config", "cli_flag": "--no-sync" },
+          { "name": "planning-split", "type": "string", "label": "Planning split name", "cli_flag": "--planning-split", "value_separator": "space", "default": "01-adopted", "pattern": "^[A-Za-z0-9_-]+$" }
+        ],
+        "build": [
+          { "name": "section", "type": "string", "label": "Section file (relative to project)", "cli_flag": "@", "value_separator": "none", "pattern": "^[A-Za-z0-9_./-]+\\.md$", "placeholder": "e.g. planning/03-build-feature.md", "required": true, "helpText": "Path relative to your project root — e.g. planning/03-build-feature.md. /shipwright-plan creates these files; pick one to build now." },
+          { "name": "from", "type": "string", "label": "Start from section number", "cli_flag": "--from", "value_separator": "space", "pattern": "^[0-9]+$", "placeholder": "e.g. 03", "helpText": "Resume autonomous build from this section number" }
+        ],
+        "test": [
+          { "name": "fix", "type": "boolean", "label": "Auto-fix failing tests", "cli_flag": "--fix" },
+          { "name": "e2e-only", "type": "boolean", "label": "E2E tests only", "cli_flag": "--e2e-only" },
+          { "name": "design-fidelity", "type": "boolean", "label": "Design-fidelity check only", "cli_flag": "--design-fidelity" }
+        ],
+        "deploy": [
+          { "name": "target", "type": "enum", "label": "Target", "enum": ["dev", "prod", "rollback"], "cli_flag_map": { "prod": "--prod", "rollback": "--rollback" }, "default": "dev", "helpText": "Dev is default — no CLI flag emitted." }
+        ],
+        "changelog": [
+          { "name": "from", "type": "string", "label": "From git tag", "cli_flag": "--from", "value_separator": "space", "pattern": "^[A-Za-z0-9._/-]+$", "placeholder": "e.g. v0.3.1" }
+        ]
+      }
+    },
+    {
+      "id": "new-pipeline",
+      "label": "New pipeline",
+      "kind": "external_launch",
+      "description": "Full Shipwright pipeline — project → design → plan → build → test → deploy → changelog.",
+      "command_template": "{cd.prefix}claude --session-id {task.uuid} --name {task.session_name} {plugin.dirs} {task.initial_prompt}",
+      "modal_fields": ["title", "autonomy", "description"]
+    },
+    {
+      "id": "new-iterate",
+      "label": "New iterate",
+      "kind": "external_launch",
+      "description": "Run the complexity-adaptive iterate skill against an existing project.",
+      "command_template": "{cd.prefix}claude --session-id {task.uuid} --name {task.session_name} {plugin.dirs} {task.initial_prompt}",
+      "modal_fields": ["title", "autonomy", "description", "domain", "priority", "complexityHint", "tags", "blockedBy"],
+      "parameters": [
+        { "name": "type", "type": "enum", "label": "Change type", "enum": ["feature", "change", "bug"], "cli_flag": "--type", "value_separator": "space", "helpText": "Auto-detected if omitted" },
+        { "name": "plan-review-model", "type": "enum", "label": "Plan review", "enum": ["opus", "sonnet", "haiku", "inherit"], "cli_flag": "--plan-review-model", "value_separator": "space" },
+        { "name": "review-model", "type": "enum", "label": "Review", "enum": ["opus", "sonnet", "haiku", "inherit"], "cli_flag": "--review-model", "value_separator": "space" }
+      ]
+    },
+    {
+      "id": "new-plain",
+      "label": "Plain Claude",
+      "kind": "external_launch",
+      "description": "Plain Claude session in this project's directory. No Shipwright skill — just chat.",
+      "command_template": "{cd.prefix}claude --session-id {task.uuid} --name {task.session_name} {plugin.dirs}{task.description?}",
+      "modal_fields": ["title", "description"]
+    }
+  ],
+  "phases": [
+    { "id": "adopt",      "label": "Adopt",      "color": "#64748B" },
+    { "id": "project",    "label": "Project",    "color": "#9ca3af" },
+    { "id": "design",     "label": "Design",     "color": "#A855F7" },
+    { "id": "plan",       "label": "Plan",       "color": "#3B82F6" },
+    { "id": "build",      "label": "Build",      "color": "#F59E0B", "supports_autonomy": true },
+    { "id": "test",       "label": "Test",       "color": "#059669", "supports_autonomy": true },
+    { "id": "deploy",     "label": "Deploy",     "color": "#14B8A6" },
+    { "id": "changelog",  "label": "Changelog",  "color": "#6366F1" },
+    { "id": "compliance", "label": "Compliance", "color": "#0EA5E9" },
+    { "id": "security",   "label": "Security",   "color": "#DC2626", "supports_autonomy": true }
+  ],
+  "preview": {
+    "enabled": "auto"
+  }
+}

package/server/dist/config.d.ts

@@ -0,0 +1,96 @@
+export interface ServerConfig {
+    port: number;
+    maxConcurrent: number;
+    registryDir: string;
+    heartbeatIntervalMs: number;
+    staticDir: string;
+    /** Embedded terminal — keep last N image-pastes per task.cwd. Default 20. */
+    claudePastesKeepLast: number;
+    /** Per-WebSocket outbound buffer cap (bytes) before drop-oldest backpressure kicks in. Default 1 MiB. */
+    terminalWsBufferBytes: number;
+    /** PTY auto-kill ceiling: max idle (no read AND no write) before forced kill. Default 30 min. */
+    terminalIdleTimeoutMs: number;
+    /** Test-only override for the spawn target. Whitelist still enforced; only honored when NODE_ENV === "test". */
+    ptyShellOverride?: string;
+    /**
+     * Iterate-2026-05-04 (ADR-068-A1) — disk-backed terminal scrollback.
+     * Directory where per-task scrollback files (`<taskId>.log`) are persisted.
+     * Default: `<registryDir>/terminal-scrollback`.
+     */
+    terminalScrollbackDir: string;
+    /**
+     * Per-task scrollback rotation cap (bytes). When append-cumulative exceeds
+     * this threshold, `.log` rotates to `.log.1` (atomic). Default 1 MiB.
+     * Set to 0 to DISABLE persistence entirely (no file creation, no replay).
+     */
+    terminalScrollbackMaxBytes: number;
+    /**
+     * Time-to-live for orphan scrollback files (whole days). Boot + daily sweep
+     * deletes files older than this. Default 1 day (privacy-first).
+     */
+    terminalScrollbackTtlDays: number;
+    /** Bound on TTL sweep per pass — protects against unbounded boot work on huge dirs. Default 100. */
+    terminalSweepMaxFilesPerPass: number;
+    /**
+     * Iterate-2026-05-11 (ADR-088 / ADR-089) — @xterm/headless mirror
+     * shadow-write + snapshot-based replay. When enabled, every live pty
+     * has a server-side headless Terminal mirror; on pty.kill the M2
+     * double-serialize snapshot is persisted; on WS attach the snapshot
+     * is replayed via a single `replay_snapshot` envelope (legacy chunked
+     * scrollback is the fallback for tasks created before the flag
+     * landed, or when the snapshot's terminalVersion does not match).
+     *
+     * Iterate B (ADR-089): default flipped from OFF to ON. Opt-out is
+     * `SHIPWRIGHT_TERMINAL_HEADLESS_MIRROR=0`. Plan-of-record:
+     * `.shipwright/planning/embedded-terminal-refactor-headless.md`.
+     */
+    terminalHeadlessMirror: boolean;
+    /**
+     * Iterate G (ADR-095) — Claude TUI flicker workaround. When `true`,
+     * every pty spawned for the embedded terminal carries
+     * `CLAUDE_CODE_NO_FLICKER=1` in its env, instructing Claude Code to
+     * render into the alt-screen buffer (vim/htop-style) and bypass the
+     * per-frame ANSI cursor moves that xterm.js can't batch unless the
+     * producer wraps frames in DECSET 2026 / Synchronized Output.
+     *
+     * Iterate I (ADR-097) tried flipping the default OFF on the
+     * hypothesis that xterm.js 6.0.0's native DECSET 2026 support would
+     * batch Claude TUI's main-buffer frames flicker-free. Iterate J
+     * (ADR-098) falsified that hypothesis empirically: a 265 711-byte
+     * live Claude Code 2.1.139 scrollback contains ZERO `\x1b[?2026h`
+     * or `\x1b[?2026l` sequences (21 690 raw CUP sequences, but no
+     * Synchronized-Output bracket pairs). Claude Code does not wrap
+     * its frames; xterm 6's native sync support has nothing to batch.
+     * Claude Code Issue #37283 remains open at the time of ADR-098.
+     *
+     * Therefore: default is RESTORED to ON. Opt-out via
+     * `SHIPWRIGHT_TERMINAL_NO_FLICKER=0` (empty / unset / `"1"` / any
+     * other value → injected). Trade-off retained: alt-screen mode
+     * costs browser-native Cmd+F of conversation history, mouse
+     * capture, fixed input box — accepted because visible flicker
+     * degrades every streaming response. Docs:
+     * https://code.claude.com/docs/en/fullscreen.
+     *
+     * The field is for diagnostics + structured logging. The actual env
+     * injection lives in `terminal/routes.ts buildSpawnEnv` which reads
+     * `process.env.SHIPWRIGHT_TERMINAL_NO_FLICKER` directly so the spawn
+     * factory does not have to thread a `ServerConfig` reference.
+     */
+    terminalNoFlicker: boolean;
+    /**
+     * iterate-2026-08-17-org-route-leads (FR-04.38) — root directory for the
+     * leadwright org-document route (`external/org/routes.ts`). NOT a
+     * Shipwright project root; lives outside `registryDir` on purpose (it is
+     * leadwright's directory, not ours). Overridable for tests.
+     */
+    leadsRoot: string;
+    /**
+     * Shared secret the `/api/external/org/*` routes require on every
+     * request (header `X-Shipwright-Leads-Secret`). Unset ⇒ the routes
+     * fail closed (503 `leads_route_not_configured`) rather than silently
+     * accepting unauthenticated calls.
+     */
+    leadsRouteSecret: string | undefined;
+}
+export declare function getConfig(): ServerConfig;
+//# sourceMappingURL=config.d.ts.map

package/server/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,oBAAoB,EAAE,MAAM,CAAC;IAC7B,yGAAyG;IACzG,qBAAqB,EAAE,MAAM,CAAC;IAC9B,iGAAiG;IACjG,qBAAqB,EAAE,MAAM,CAAC;IAC9B,gHAAgH;IAChH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,qBAAqB,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,0BAA0B,EAAE,MAAM,CAAC;IACnC;;;OAGG;IACH,yBAAyB,EAAE,MAAM,CAAC;IAClC,oGAAoG;IACpG,4BAA4B,EAAE,MAAM,CAAC;IACrC;;;;;;;;;;;;OAYG;IACH,sBAAsB,EAAE,OAAO,CAAC;IAChC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,iBAAiB,EAAE,OAAO,CAAC;IAC3B;;;;;OAKG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAeD,wBAAgB,SAAS,IAAI,YAAY,CAyExC"}

package/server/dist/config.js

@@ -0,0 +1,68 @@
+import path, { dirname } from "path";
+import { fileURLToPath } from "url";
+import os from "os";
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+function clampPositiveInt(raw, fallback) {
+    if (!raw)
+        return fallback;
+    const n = parseInt(raw, 10);
+    return Number.isFinite(n) && n > 0 ? n : fallback;
+}
+/** Like clampPositiveInt but accepts 0 (used for "disabled" semantics). */
+function clampNonNegativeInt(raw, fallback) {
+    if (raw === undefined || raw === "")
+        return fallback;
+    const n = parseInt(raw, 10);
+    return Number.isFinite(n) && n >= 0 ? n : fallback;
+}
+export function getConfig() {
+    return {
+        port: parseInt(process.env.PORT ?? "3847", 10),
+        maxConcurrent: parseInt(process.env.SHIPWRIGHT_MAX_CONCURRENT ?? "3", 10),
+        registryDir: path.join(os.homedir(), ".shipwright-webui"),
+        heartbeatIntervalMs: 30_000,
+        // SHIPWRIGHT_STATIC_DIR — test-only seam so spa-fallback.test.ts can
+        // point at a fixture instead of requiring a real `client/dist` build.
+        // Production deploy keeps the default (server/../client/dist).
+        staticDir: process.env.SHIPWRIGHT_STATIC_DIR ??
+            path.resolve(__dirname, "../../client/dist"),
+        claudePastesKeepLast: clampPositiveInt(process.env.SHIPWRIGHT_CLAUDE_PASTES_KEEP_LAST, 20),
+        terminalWsBufferBytes: clampPositiveInt(process.env.SHIPWRIGHT_TERMINAL_WS_BUFFER_BYTES, 1_048_576),
+        terminalIdleTimeoutMs: clampPositiveInt(process.env.SHIPWRIGHT_TERMINAL_IDLE_TIMEOUT_MS, 
+        // 12h orphan-GC grace, attachment-gated (iterate-2026-06-02). Was 30min;
+        // raised so a session left waiting at a prompt survives a commute.
+        43_200_000),
+        ptyShellOverride: process.env.NODE_ENV === "test"
+            ? process.env.SHIPWRIGHT_PTY_SHELL_OVERRIDE
+            : undefined,
+        terminalScrollbackDir: process.env.SHIPWRIGHT_TERMINAL_SCROLLBACK_DIR ??
+            path.join(os.homedir(), ".shipwright-webui", "terminal-scrollback"),
+        terminalScrollbackMaxBytes: clampNonNegativeInt(process.env.SHIPWRIGHT_TERMINAL_SCROLLBACK_MAX_BYTES, 1_048_576),
+        terminalScrollbackTtlDays: clampPositiveInt(process.env.SHIPWRIGHT_TERMINAL_SCROLLBACK_TTL_DAYS, 1),
+        terminalSweepMaxFilesPerPass: clampPositiveInt(process.env.SHIPWRIGHT_TERMINAL_SWEEP_MAX_FILES_PER_PASS, 100),
+        // ADR-089 (Iterate B) — default ON. Opt-out by setting the env var
+        // to `0`. Empty / unset / any value other than `0` enables the
+        // mirror + snapshot path. Test bypass: NODE_ENV-aware overrides
+        // could be added later; for now there is no need (the production
+        // path is default-on; tests construct PtyManager / routes with
+        // their own flags).
+        terminalHeadlessMirror: process.env.SHIPWRIGHT_TERMINAL_HEADLESS_MIRROR !== "0",
+        // Iterate J (ADR-098) — default restored to ON after empirical
+        // verification (265 KB live Claude Code 2.1.139 scrollback: zero
+        // DECSET 2026 sequences in main-buffer rendering). xterm 6.0's
+        // native sync-output honour has nothing to batch because Claude
+        // Code does not wrap its frames; ADR-097's opt-in default was the
+        // wrong inference. Opt-out via `SHIPWRIGHT_TERMINAL_NO_FLICKER=0`
+        // (any other value → enabled, matching the inverted-falsy "0"
+        // convention used by `terminalHeadlessMirror`). Iterate G's
+        // ADR-095 default-on stance is restored verbatim. Claude Code
+        // Issue #37283 remains open; revisit when DECSET 2026 is emitted
+        // by Claude itself.
+        terminalNoFlicker: process.env.SHIPWRIGHT_TERMINAL_NO_FLICKER !== "0",
+        leadsRoot: process.env.SHIPWRIGHT_LEADS_ROOT ??
+            path.join(os.homedir(), ".claude", "leads"),
+        leadsRouteSecret: process.env.SHIPWRIGHT_LEADS_ROUTE_SECRET || undefined,
+    };
+}
+//# sourceMappingURL=config.js.map

package/server/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAiGtC,SAAS,gBAAgB,CAAC,GAAuB,EAAE,QAAgB;IACjE,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC1B,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACpD,CAAC;AAED,2EAA2E;AAC3E,SAAS,mBAAmB,CAAC,GAAuB,EAAE,QAAgB;IACpE,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IACrD,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,EAAE,EAAE,CAAC;QAC9C,aAAa,EAAE,QAAQ,CACrB,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,GAAG,EAC5C,EAAE,CACH;QACD,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,mBAAmB,CAAC;QACzD,mBAAmB,EAAE,MAAM;QAC3B,qEAAqE;QACrE,sEAAsE;QACtE,+DAA+D;QAC/D,SAAS,EACP,OAAO,CAAC,GAAG,CAAC,qBAAqB;YACjC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,mBAAmB,CAAC;QAC9C,oBAAoB,EAAE,gBAAgB,CACpC,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAC9C,EAAE,CACH;QACD,qBAAqB,EAAE,gBAAgB,CACrC,OAAO,CAAC,GAAG,CAAC,mCAAmC,EAC/C,SAAS,CACV;QACD,qBAAqB,EAAE,gBAAgB,CACrC,OAAO,CAAC,GAAG,CAAC,mCAAmC;QAC/C,yEAAyE;QACzE,mEAAmE;QACnE,UAAU,CACX;QACD,gBAAgB,EACd,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM;YAC7B,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B;YAC3C,CAAC,CAAC,SAAS;QACf,qBAAqB,EACnB,OAAO,CAAC,GAAG,CAAC,kCAAkC;YAC9C,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,mBAAmB,EAAE,qBAAqB,CAAC;QACrE,0BAA0B,EAAE,mBAAmB,CAC7C,OAAO,CAAC,GAAG,CAAC,wCAAwC,EACpD,SAAS,CACV;QACD,yBAAyB,EAAE,gBAAgB,CACzC,OAAO,CAAC,GAAG,CAAC,uCAAuC,EACnD,CAAC,CACF;QACD,4BAA4B,EAAE,gBAAgB,CAC5C,OAAO,CAAC,GAAG,CAAC,4CAA4C,EACxD,GAAG,CACJ;QACD,mEAAmE;QACnE,+DAA+D;QAC/D,gEAAgE;QAChE,iEAAiE;QACjE,+DAA+D;QAC/D,oBAAoB;QACpB,sBAAsB,EACpB,OAAO,CAAC,GAAG,CAAC,mCAAmC,KAAK,GAAG;QACzD,+DAA+D;QAC/D,iEAAiE;QACjE,+DAA+D;QAC/D,gEAAgE;QAChE,kEAAkE;QAClE,kEAAkE;QAClE,8DAA8D;QAC9D,4DAA4D;QAC5D,8DAA8D;QAC9D,iEAAiE;QACjE,oBAAoB;QACpB,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,8BAA8B,KAAK,GAAG;QACrE,SAAS,EACP,OAAO,CAAC,GAAG,CAAC,qBAAqB;YACjC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC;QAC7C,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,SAAS;KACzE,CAAC;AACJ,CAAC"}

package/server/dist/core/actions-schema-validator.d.ts

@@ -0,0 +1,8 @@
+import type { ResolvedActions } from "./project-actions-loader.js";
+export type SchemaErrorCode = "duplicate_action_id" | "invalid_autonomy_enum" | "empty_phases" | "missing_command_template" | "unsupported_modal_field" | "invalid_preview_enabled" | "invalid_param_type" | "invalid_param_enum" | "duplicate_param_name" | "invalid_cli_flag" | "invalid_cli_flag_map" | "invalid_param_pattern" | "invalid_default_value" | "invalid_param_name" | "missing_parameters_placeholder" | "orphan_parameters_placeholder" | "unknown_phase_parameter_key" | "invalid_param_required" | "invalid_phase_supports_autonomy" | "missing_slash_command" | "invalid_slash_command";
+export interface SchemaError {
+    code: SchemaErrorCode;
+    [key: string]: unknown;
+}
+export declare function validateActionsSchema(actions: ResolvedActions): SchemaError[];
+//# sourceMappingURL=actions-schema-validator.d.ts.map

package/server/dist/core/actions-schema-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions-schema-validator.d.ts","sourceRoot":"","sources":["../../src/core/actions-schema-validator.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAoB,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAQrF,MAAM,MAAM,eAAe,GACvB,qBAAqB,GACrB,uBAAuB,GACvB,cAAc,GACd,0BAA0B,GAC1B,yBAAyB,GACzB,yBAAyB,GACzB,oBAAoB,GACpB,oBAAoB,GACpB,sBAAsB,GACtB,kBAAkB,GAClB,sBAAsB,GACtB,uBAAuB,GACvB,uBAAuB,GACvB,oBAAoB,GACpB,gCAAgC,GAChC,+BAA+B,GAC/B,6BAA6B,GAC7B,wBAAwB,GACxB,iCAAiC,GACjC,uBAAuB,GACvB,uBAAuB,CAAC;AAE5B,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,eAAe,CAAC;IACtB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AA6CD,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,eAAe,GACvB,WAAW,EAAE,CAmHf"}