@svenroth-ai/shipwright 0.24.1-next.0

package/server/dist/core/campaign-events.js

@@ -0,0 +1,192 @@
+/*
+ * campaign-events.ts — project Campaigns-board status from the tracked event
+ * log, so a campaign whose planning dir is gitignored/local-only (PR #121 /
+ * monorepo PR #189) still surfaces progress on a fresh clone / redeploy.
+ *
+ * The campaigns dir (`campaign.md` + `status.json`) is "local-only operational
+ * planning, not durable product artifacts" — gone on a clone. The DURABLE,
+ * tracked record is `<projectRoot>/shipwright_events.jsonl`: since S1
+ * (shipwright-iterate) every campaign `work_completed` event carries top-level
+ * `campaign` + `sub_iterate_id`. This module is the webui-consumer counterpart
+ * of `shared/scripts/lib/campaign_status.py::project_campaign_status`
+ * (ADR-121 family, campaign `2026-06-07-tracked-campaign-status`):
+ *
+ *   - `projectCampaignEvents` — pure `_project_events` parity: latest
+ *     `work_completed` per (campaign, sub_iterate_id) wins.
+ *   - `applyEventsProjection` — two modes against the dir-sourced campaigns:
+ *       1. OVERLAY (dir present): never-downgrade a step to `complete` when an
+ *          event confirms it; prefer a non-empty event commit. Corrects a stale
+ *          `status.json` (the `done==total` bug class, reported 2026-06-05).
+ *       2. SYNTHESIZE (dir absent): build a `derivedFromEvents` Campaign from the
+ *          completed sub-iterates alone — no skeleton, so no titles/order/total/
+ *          pending; `specPath` null (launch CTAs disable).
+ *
+ * Read-only: webui never writes events.jsonl (Architecture rule 1).
+ */
+import { recordsFromLines } from "./jsonl-records.js";
+import { existsSync, readFileSync } from "node:fs";
+import path from "node:path";
+/** Per-tree, version-controlled event log (parity with events_log.EVENT_FILE). */
+const EVENT_FILE = "shipwright_events.jsonl";
+function tsEpoch(ts) {
+    if (typeof ts !== "string" || !ts)
+        return -Infinity;
+    const t = Date.parse(ts);
+    return Number.isFinite(t) ? t : -Infinity;
+}
+/**
+ * Pure projection of campaign sub-iterate completions from event-log lines.
+ * Parity with `campaign_status.py::_project_events`: keep only
+ * `type === "work_completed"` events that carry a truthy top-level `campaign`
+ * AND `sub_iterate_id`; the latest event per (campaign, sub_iterate_id) wins,
+ * ranked by `ts` epoch then file index (a missing/unparseable `ts` sorts
+ * oldest, so a later log line still wins). Corrupt / non-object / blank lines
+ * are skipped (tolerant — a torn 3 s-poll read must never throw).
+ */
+export function projectCampaignEvents(lines) {
+    const best = new Map();
+    let idx = 0;
+    // RECOVERS concatenated records (iterate-2026-07-19-events-reader-recovery).
+    // This projection had NO corruption side channel at all, and the consequence
+    // was visible product behaviour: `applyEventsProjection` never downgrades, so
+    // a dropped `work_completed` leaves a finished sub-iterate rendering as
+    // `pending` forever. Recovery is the fix; the silence is left as-is on purpose
+    // (the reporting boundary for events is `event-log-reader`, not here).
+    for (const o of recordsFromLines(lines)) {
+        const i = idx++;
+        if (o.type !== "work_completed")
+            continue;
+        if (typeof o.campaign !== "string" || !o.campaign)
+            continue;
+        if (typeof o.sub_iterate_id !== "string" || !o.sub_iterate_id)
+            continue;
+        const key = tsEpoch(o.ts);
+        let bySid = best.get(o.campaign);
+        if (!bySid) {
+            bySid = new Map();
+            best.set(o.campaign, bySid);
+        }
+        const prev = bySid.get(o.sub_iterate_id);
+        // Later (key, idx) wins. idx is strictly increasing, so an equal-key later
+        // line always supersedes; an earlier/lower-key line is skipped.
+        if (prev && key < prev.key)
+            continue;
+        if (prev && key === prev.key && i <= prev.idx)
+            continue;
+        bySid.set(o.sub_iterate_id, {
+            key,
+            idx: i,
+            commit: typeof o.commit === "string" ? o.commit : null,
+        });
+    }
+    // Strip the sort metadata — callers get only the projection.
+    const out = new Map();
+    for (const [slug, bySid] of best) {
+        const clean = new Map();
+        for (const [sid, b] of bySid)
+            clean.set(sid, { commit: b.commit });
+        out.set(slug, clean);
+    }
+    return out;
+}
+/**
+ * File-loading wrapper: read `<projectRoot>/shipwright_events.jsonl` (the
+ * canonical per-tree log, `events_log.resolve_events_path`) and project it.
+ * Missing / unreadable log → empty projection (the board falls back to the
+ * dir-sourced campaigns, or shows nothing — never an error).
+ */
+export function readCampaignEvents(projectRoot) {
+    const p = path.join(projectRoot, EVENT_FILE);
+    if (!existsSync(p))
+        return new Map();
+    let text;
+    try {
+        text = readFileSync(p, "utf-8");
+    }
+    catch {
+        return new Map();
+    }
+    return projectCampaignEvents(text.split("\n"));
+}
+function recomputeProgress(c) {
+    c.done = c.steps.filter((s) => s.status === "complete").length;
+    const next = c.steps.find((s) => s.status !== "complete") ?? null;
+    c.nextPending = next ? { id: next.id, specPath: next.specPath } : null;
+}
+/** Build a skeleton-less campaign from its completed sub-iterates alone. */
+function synthesizeCampaign(slug, subs) {
+    const steps = [...subs.entries()]
+        .map(([id, p]) => ({
+        id,
+        slug: "",
+        title: id, // no skeleton → the id is the only label we have
+        status: "complete",
+        // Reconstructed from the event log, which records only COMPLETED units.
+        statusSource: "events",
+        specPath: null, // no skeleton file on a clone → launch CTAs disable
+        commit: p.commit || null,
+        branch: null,
+        planFirst: false,
+    }))
+        // Numeric-aware id order (C2 before C10); events carry no canonical order.
+        .sort((a, b) => a.id.localeCompare(b.id, undefined, { numeric: true }));
+    return {
+        slug,
+        intent: "",
+        branchStrategy: null,
+        expandsTriage: null,
+        status: null,
+        // Reconstructed from the event log, not read from a campaign directory.
+        // Not `degraded`: nothing failed — the records simply are not on this clone.
+        provenance: {
+            statusSource: "events",
+            degraded: false,
+            // No campaign directory was consulted, so neither file has a state.
+            statusJsonState: "absent",
+            campaignMdUnreadable: false,
+        },
+        steps,
+        done: steps.length,
+        total: steps.length,
+        nextPending: null,
+        derivedFromEvents: true,
+    };
+}
+/**
+ * Merge the events projection into the dir-sourced campaigns:
+ *   1. OVERLAY each locally-present campaign — never-downgrade a step to
+ *      `complete` when an event confirms it, prefer a non-empty event commit,
+ *      then recompute `done`/`nextPending` (`total` is the skeleton, unchanged).
+ *   2. SYNTHESIZE a `derivedFromEvents` campaign for every event-only slug.
+ * Returns locals + synthesized, sorted by slug descending (newest-first, like
+ * `readCampaigns`). `merge_status(committed, "complete")` is always `"complete"`
+ * — including over `failed`/`escalated` (a re-run that emitted a fresh event) —
+ * so the overlay is a single status set.
+ */
+export function applyEventsProjection(campaigns, projection) {
+    const localSlugs = new Set(campaigns.map((c) => c.slug));
+    for (const c of campaigns) {
+        const subs = projection.get(c.slug);
+        if (!subs)
+            continue;
+        for (const step of c.steps) {
+            const p = subs.get(step.id);
+            if (!p)
+                continue; // no event → untouched (never downgrade)
+            step.status = "complete";
+            if (p.commit)
+                step.commit = p.commit;
+        }
+        recomputeProgress(c);
+    }
+    const synthesized = [];
+    for (const [slug, subs] of projection) {
+        if (localSlugs.has(slug) || subs.size === 0)
+            continue;
+        synthesized.push(synthesizeCampaign(slug, subs));
+    }
+    const all = [...campaigns, ...synthesized];
+    all.sort((a, b) => (a.slug < b.slug ? 1 : a.slug > b.slug ? -1 : 0));
+    return all;
+}
+//# sourceMappingURL=campaign-events.js.map

package/server/dist/core/campaign-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"campaign-events.js","sourceRoot":"","sources":["../../src/core/campaign-events.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,kFAAkF;AAClF,MAAM,UAAU,GAAG,yBAAyB,CAAC;AAkB7C,SAAS,OAAO,CAAC,EAAW;IAC1B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,QAAQ,CAAC;IACpD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACzB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC5C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAuB;IAEvB,MAAM,IAAI,GAAG,IAAI,GAAG,EAA6B,CAAC;IAClD,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,6EAA6E;IAC7E,6EAA6E;IAC7E,8EAA8E;IAC9E,wEAAwE;IACxE,+EAA+E;IAC/E,uEAAuE;IACvE,KAAK,MAAM,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAChB,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB;YAAE,SAAS;QAC1C,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ;YAAE,SAAS;QAC5D,IAAI,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,cAAc;YAAE,SAAS;QAExE,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC1B,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,IAAI,GAAG,EAAgB,CAAC;YAChC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;QACzC,2EAA2E;QAC3E,gEAAgE;QAChE,IAAI,IAAI,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG;YAAE,SAAS;QACrC,IAAI,IAAI,IAAI,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG;YAAE,SAAS;QACxD,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,EAAE;YAC1B,GAAG;YACH,GAAG,EAAE,CAAC;YACN,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;SACvD,CAAC,CAAC;IACL,CAAC;IACD,6DAA6D;IAC7D,MAAM,GAAG,GAA6B,IAAI,GAAG,EAAE,CAAC;IAChD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;QACpD,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,KAAK;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACnE,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAAmB;IACpD,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IACrC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;IACD,OAAO,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAW;IACpC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;IAC/D,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,IAAI,IAAI,CAAC;IAClE,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACzE,CAAC;AAED,4EAA4E;AAC5E,SAAS,kBAAkB,CACzB,IAAY,EACZ,IAAqC;IAErC,MAAM,KAAK,GAAmB,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;SAC9C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAgB,EAAE,CAAC,CAAC;QAC/B,EAAE;QACF,IAAI,EAAE,EAAE;QACR,KAAK,EAAE,EAAE,EAAE,iDAAiD;QAC5D,MAAM,EAAE,UAAU;QAClB,wEAAwE;QACxE,YAAY,EAAE,QAAQ;QACtB,QAAQ,EAAE,IAAI,EAAE,oDAAoD;QACpE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI;QACxB,MAAM,EAAE,IAAI;QACZ,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC;QACH,2EAA2E;SAC1E,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1E,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,EAAE;QACV,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;QACnB,MAAM,EAAE,IAAI;QACZ,wEAAwE;QACxE,6EAA6E;QAC7E,UAAU,EAAE;YACV,YAAY,EAAE,QAAQ;YACtB,QAAQ,EAAE,KAAK;YACf,oEAAoE;YACpE,eAAe,EAAE,QAAQ;YACzB,oBAAoB,EAAE,KAAK;SAC5B;QACD,KAAK;QACL,IAAI,EAAE,KAAK,CAAC,MAAM;QAClB,KAAK,EAAE,KAAK,CAAC,MAAM;QACnB,WAAW,EAAE,IAAI;QACjB,iBAAiB,EAAE,IAAI;KACxB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CACnC,SAAqB,EACrB,UAAoC;IAEpC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAEzD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC5B,IAAI,CAAC,CAAC;gBAAE,SAAS,CAAC,yCAAyC;YAC3D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC;YACzB,IAAI,CAAC,CAAC,MAAM;gBAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QACvC,CAAC;QACD,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,WAAW,GAAe,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,UAAU,EAAE,CAAC;QACtC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,SAAS;QACtD,WAAW,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,GAAG,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,WAAW,CAAC,CAAC;IAC3C,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,OAAO,GAAG,CAAC;AACb,CAAC"}

package/server/dist/core/campaign-loop-state.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Extract the campaign slug from a unit `spec_path` of the shape
+ * `<…>/campaigns/<slug>/sub-iterates/<…>.md`. Normalises both `/` and `\`
+ * (loop_state.json stores backslash paths on Windows). Returns null when the
+ * `campaigns/<slug>` segment is absent.
+ */
+export declare function campaignSlugFromSpecPath(specPath: string): string | null;
+/**
+ * A single, internally-consistent snapshot of the loop-state file's live units:
+ *   - `attachedSlugs`        — campaign slugs with ANY live (`in_progress`,
+ *     non-stale) unit; the double-launch guard (id-agnostic — a unit needs only
+ *     a `spec_path` slug to pin the guard, per ADR / PR #116).
+ *   - `runningStepIdsBySlug` — slug → set of live unit `id`s (== campaign step
+ *     ids, e.g. `D1`). Drives the per-step board overlay (this iterate). A live
+ *     unit without an `id` contributes to `attachedSlugs` but no step id.
+ * Both come from ONE read so the guard and the overlay can never disagree on a
+ * torn-read boundary. ∅ snapshot when the file is missing, torn, not a
+ * `sub_iterate` loop, or has no live unit.
+ */
+export interface LoopRunState {
+    attachedSlugs: Set<string>;
+    runningStepIdsBySlug: Map<string, Set<string>>;
+}
+export declare function readLoopRunState(projectRoot: string, nowMs: number): LoopRunState;
+/**
+ * Set of campaign slugs that currently have a LIVE sub-iterate unit — i.e. an
+ * autonomous orchestrator is attached. Thin wrapper over {@link readLoopRunState}
+ * (back-compat: the double-launch guard reads only this projection).
+ */
+export declare function readLoopAttachments(projectRoot: string, nowMs: number): Set<string>;
+//# sourceMappingURL=campaign-loop-state.d.ts.map

package/server/dist/core/campaign-loop-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"campaign-loop-state.d.ts","sourceRoot":"","sources":["../../src/core/campaign-loop-state.ts"],"names":[],"mappings":"AAsDA;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMxE;AAgBD;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,oBAAoB,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;CAChD;AAED,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,YAAY,CA2Cd;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,GAAG,CAAC,MAAM,CAAC,CAEb"}

package/server/dist/core/campaign-loop-state.js

@@ -0,0 +1,124 @@
+/*
+ * campaign-loop-state.ts — read-only detector for an ATTACHED autonomous
+ * campaign run, derived from the project-root loop-state file.
+ *
+ * The autonomous campaign loop (shared/scripts/lib/autonomous_loop.py) drives
+ * sub-iterates from `<projectRoot>/.shipwright/loop_state.json`:
+ *   - `init`   seeds units (status "pending"); `kind: "sub_iterate"` for campaigns.
+ *   - `next`   flips the picked unit to "in_progress" + stamps `started_at`.
+ *   - `record` flips it to a terminal status (complete/failed/escalated).
+ * So a unit sitting at "in_progress" === an orchestrator is attached RIGHT NOW.
+ * Each unit's `spec_path` embeds `…/campaigns/<slug>/sub-iterates/…`, which
+ * joins the live unit back to its campaign slug.
+ *
+ * This is the webui's INDEPENDENT attached-run signal — it works today, without
+ * the producer-side `status.json` in_progress write (a separate
+ * shipwright-monorepo change). `routes/campaigns.ts` unions it with any
+ * `status.json` step `in_progress` for defense-in-depth.
+ *
+ * Tolerant by construction: the 3 s Campaigns poll WILL race a Python write, so
+ * a missing / half-written / wrong-kind file resolves to ∅ (nothing attached)
+ * rather than throwing.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import path from "node:path";
+/**
+ * A unit `in_progress` for longer than this is a DEAD orchestrator (crashed
+ * between `next` and `record`), NOT an attached run — so a crash never pins the
+ * launch buttons disabled forever. Real sub-iterates finish in minutes; 6 h is
+ * safely above any legitimate run. Override via
+ * `SHIPWRIGHT_CAMPAIGN_ATTACH_STALE_MS` (positive milliseconds).
+ */
+const DEFAULT_STALE_MS = 6 * 60 * 60 * 1000;
+function staleWindowMs() {
+    const raw = process.env.SHIPWRIGHT_CAMPAIGN_ATTACH_STALE_MS;
+    if (raw === undefined)
+        return DEFAULT_STALE_MS;
+    const n = Number(raw);
+    return Number.isFinite(n) && n > 0 ? n : DEFAULT_STALE_MS;
+}
+/**
+ * Extract the campaign slug from a unit `spec_path` of the shape
+ * `<…>/campaigns/<slug>/sub-iterates/<…>.md`. Normalises both `/` and `\`
+ * (loop_state.json stores backslash paths on Windows). Returns null when the
+ * `campaigns/<slug>` segment is absent.
+ */
+export function campaignSlugFromSpecPath(specPath) {
+    const parts = specPath.split(/[\\/]+/).filter(Boolean);
+    const i = parts.indexOf("campaigns");
+    if (i < 0 || i + 1 >= parts.length)
+        return null;
+    const slug = parts[i + 1];
+    return slug && slug !== ".." ? slug : null;
+}
+/**
+ * True when an `in_progress` unit is still LIVE: its `started_at` is within the
+ * stale window. A missing / unparseable `started_at` is treated as live
+ * (conservative — `next` always stamps it, so absence is anomalous and we'd
+ * rather block a double-launch than allow one; bounded by the next `init`
+ * reconcile).
+ */
+function isLive(startedAt, nowMs, windowMs) {
+    if (typeof startedAt !== "string" || !startedAt)
+        return true;
+    const t = Date.parse(startedAt);
+    if (!Number.isFinite(t))
+        return true;
+    return nowMs - t <= windowMs;
+}
+export function readLoopRunState(projectRoot, nowMs) {
+    const attachedSlugs = new Set();
+    const runningStepIdsBySlug = new Map();
+    // One wrapper over two mutable collections: every early return yields the
+    // still-empty snapshot; the final return yields the populated one.
+    const snapshot = { attachedSlugs, runningStepIdsBySlug };
+    const p = path.join(projectRoot, ".shipwright", "loop_state.json");
+    if (!existsSync(p))
+        return snapshot;
+    let state;
+    try {
+        const parsed = JSON.parse(readFileSync(p, "utf-8"));
+        if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+            return snapshot;
+        }
+        state = parsed;
+    }
+    catch {
+        return snapshot; // torn / malformed read
+    }
+    // Only campaign loops (`sub_iterate`) map to the Campaigns lane; a `section`
+    // loop is a /shipwright-build run, never a campaign.
+    if (state.kind !== "sub_iterate" || !Array.isArray(state.units))
+        return snapshot;
+    const windowMs = staleWindowMs();
+    for (const u of state.units) {
+        if (!u || u.status !== "in_progress")
+            continue;
+        if (typeof u.spec_path !== "string")
+            continue;
+        if (!isLive(u.started_at, nowMs, windowMs))
+            continue;
+        const slug = campaignSlugFromSpecPath(u.spec_path);
+        if (!slug)
+            continue;
+        attachedSlugs.add(slug);
+        if (typeof u.id === "string" && u.id) {
+            let ids = runningStepIdsBySlug.get(slug);
+            if (!ids) {
+                ids = new Set();
+                runningStepIdsBySlug.set(slug, ids);
+            }
+            ids.add(u.id);
+        }
+    }
+    return snapshot;
+}
+/**
+ * Set of campaign slugs that currently have a LIVE sub-iterate unit — i.e. an
+ * autonomous orchestrator is attached. Thin wrapper over {@link readLoopRunState}
+ * (back-compat: the double-launch guard reads only this projection).
+ */
+export function readLoopAttachments(projectRoot, nowMs) {
+    return readLoopRunState(projectRoot, nowMs).attachedSlugs;
+}
+//# sourceMappingURL=campaign-loop-state.js.map

package/server/dist/core/campaign-loop-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"campaign-loop-state.js","sourceRoot":"","sources":["../../src/core/campaign-loop-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE5C,SAAS,aAAa;IACpB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC;IAC5D,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,gBAAgB,CAAC;IAC/C,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC;AAC5D,CAAC;AAcD;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAAgB;IACvD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACrC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,OAAO,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED;;;;;;GAMG;AACH,SAAS,MAAM,CAAC,SAAkB,EAAE,KAAa,EAAE,QAAgB;IACjE,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,KAAK,GAAG,CAAC,IAAI,QAAQ,CAAC;AAC/B,CAAC;AAmBD,MAAM,UAAU,gBAAgB,CAC9B,WAAmB,EACnB,KAAa;IAEb,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC5D,0EAA0E;IAC1E,mEAAmE;IACnE,MAAM,QAAQ,GAAiB,EAAE,aAAa,EAAE,oBAAoB,EAAE,CAAC;IAEvE,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,iBAAiB,CAAC,CAAC;IACnE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IAEpC,IAAI,KAAgB,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QACpD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,KAAK,GAAG,MAAmB,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC,CAAC,wBAAwB;IAC3C,CAAC;IAED,6EAA6E;IAC7E,qDAAqD;IACrD,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAEjF,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAmB,EAAE,CAAC;QAC1C,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,aAAa;YAAE,SAAS;QAC/C,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;YAAE,SAAS;QAC9C,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC;YAAE,SAAS;QACrD,MAAM,IAAI,GAAG,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;YACrC,IAAI,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;gBACxB,oBAAoB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACtC,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,WAAmB,EACnB,KAAa;IAEb,OAAO,gBAAgB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,aAAa,CAAC;AAC5D,CAAC"}

package/server/dist/core/campaign-parse.d.ts

@@ -0,0 +1,28 @@
+/** Parse a leading `---\n…\n---` frontmatter block into a flat string map. */
+export declare function parseFrontmatter(md: string): Record<string, string>;
+/** Extract the one-line intent from the `## Intent` section (joined, trimmed). */
+export declare function parseIntent(md: string): string;
+export interface CampaignTableRow {
+    id: string;
+    slug: string;
+    title: string;
+    status: string;
+}
+export declare function parseSpecFrontmatter(md: string): {
+    planFirst: boolean;
+};
+/**
+ * Parse the `## Sub-Iterates` markdown table.
+ *
+ * Header-driven, not positional: the producer table has evolved from the
+ * original `| ID | Slug | Title | Status |` to optionally include `Repo` /
+ * `Depends on` columns and to bold the ID cell (the verbatim
+ * `2026-06-02-compliance-detective-realign` campaign is `| ID | Slug | Title |
+ * Repo | Depends on | Status |` with `**C1**` IDs). Locating the load-bearing
+ * columns by header name keeps `status` anchored to the Status column instead
+ * of whatever now sits in the 4th cell, and every cell is emphasis-stripped so
+ * a bold ID round-trips to a real `<id>-<slug>.md` filename. Falls back to
+ * positional `[id, slug, title, status]` for a (hypothetical) headerless table.
+ */
+export declare function parseSubIteratesTable(md: string): CampaignTableRow[];
+//# sourceMappingURL=campaign-parse.d.ts.map

package/server/dist/core/campaign-parse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"campaign-parse.d.ts","sourceRoot":"","sources":["../../src/core/campaign-parse.ts"],"names":[],"mappings":"AAqBA,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAYnE;AAED,kFAAkF;AAClF,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAc9C;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAmBD,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG;IAAE,SAAS,EAAE,OAAO,CAAA;CAAE,CAWvE;AAuBD;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAiDpE"}

package/server/dist/core/campaign-parse.js

@@ -0,0 +1,174 @@
+/*
+ * campaign-parse.ts — pure parsers for the `campaign.md` producer format
+ * (written by `campaign_init.py init_campaign`):
+ *
+ *   ---
+ *   campaign: <slug>
+ *   branch_strategy: stacked
+ *   created: <iso>
+ *   ---
+ *   # Campaign: <slug>
+ *   ## Intent
+ *   <intent text>
+ *   ## Sub-Iterates
+ *   | ID | Slug | Title | Status |
+ *   |---|---|---|---|
+ *   | B0 | phase-resolver | Fail-open resolver | pending |
+ *
+ * Pure string→data — no FS, no side effects — so the producer/consumer
+ * boundary is unit-testable in isolation (the boundary probe).
+ */
+/** Parse a leading `---\n…\n---` frontmatter block into a flat string map. */
+export function parseFrontmatter(md) {
+    const out = {};
+    const m = md.match(/^---\s*\n([\s\S]*?)\n---\s*(?:\n|$)/);
+    if (!m)
+        return out;
+    for (const line of m[1].split("\n")) {
+        const idx = line.indexOf(":");
+        if (idx === -1)
+            continue;
+        const key = line.slice(0, idx).trim();
+        if (!key)
+            continue;
+        out[key] = line.slice(idx + 1).trim();
+    }
+    return out;
+}
+/** Extract the one-line intent from the `## Intent` section (joined, trimmed). */
+export function parseIntent(md) {
+    const lines = md.split("\n");
+    let i = 0;
+    for (; i < lines.length; i++) {
+        if (/^##\s+Intent\s*$/i.test(lines[i].trim()))
+            break;
+    }
+    if (i >= lines.length)
+        return "";
+    const collected = [];
+    for (i = i + 1; i < lines.length; i++) {
+        const t = lines[i].trim();
+        if (/^##\s+/.test(t))
+            break; // next section
+        if (t)
+            collected.push(t);
+    }
+    return collected.join(" ").trim();
+}
+/**
+ * Forward-compat plan-first / risk marker on a sub-iterate spec file.
+ *
+ * The CURRENT `campaign_init.py` template writes NO frontmatter (just
+ * `# Sub-Iterate:` + `## Scope` + `## Acceptance Criteria`), so this returns
+ * `{ planFirst: false }` for every campaign that exists today. It is here so
+ * that the day a producer emits `plan_first: true` (or `risk: high`) in a
+ * sub-iterate's frontmatter, the WebUI's autonomous-launch guardrail surfaces
+ * it WITHOUT a second consumer change — a deliberately forward-compatible read
+ * (the producer change is monorepo-owned; see the iterate spec "Out of Scope").
+ *
+ * Tolerant: any parse failure / missing block → `{ planFirst: false }`, never
+ * throws (the 3 s board poll WILL race a half-written file).
+ */
+const PLAN_FIRST_TRUE = new Set(["true", "yes", "1"]);
+const RISK_PLAN_FIRST = new Set(["high", "plan-first", "plan_first"]);
+export function parseSpecFrontmatter(md) {
+    let fm;
+    try {
+        fm = parseFrontmatter(typeof md === "string" ? md : "");
+    }
+    catch {
+        return { planFirst: false };
+    }
+    const planFirstVal = (fm.plan_first ?? "").trim().toLowerCase();
+    const riskVal = (fm.risk ?? "").trim().toLowerCase();
+    const planFirst = PLAN_FIRST_TRUE.has(planFirstVal) || RISK_PLAN_FIRST.has(riskVal);
+    return { planFirst };
+}
+/**
+ * Strip inline Markdown emphasis / code markers from a table cell value.
+ * Producers bold the ID column (`**C1**`) and decorate titles with bold + code
+ * spans. The plain text is what the consumer needs — most critically for the
+ * ID, which is load-bearing: it forms the `<id>-<slug>.md` spec filename, so a
+ * literal `**C1**` resolves to a non-existent file → null specPath → a dead
+ * Copy-launch button on the board. Conservative + paired-only: code spans
+ * first, then bold (`**` / `__`) BEFORE italic (`*` / `_`) so `**x**` collapses
+ * in one pass. Leaves hyphens, arrows, and unpaired markers (e.g. the single
+ * `_` in `group_a5`) untouched.
+ */
+function stripInlineEmphasis(s) {
+    return s
+        .replace(/`([^`]*)`/g, "$1") // `code`
+        .replace(/\*\*([^*]+)\*\*/g, "$1") // **bold**
+        .replace(/__([^_]+)__/g, "$1") // __bold__
+        .replace(/\*([^*]+)\*/g, "$1") // *italic*
+        .replace(/_([^_]+)_/g, "$1") // _italic_
+        .trim();
+}
+/**
+ * Parse the `## Sub-Iterates` markdown table.
+ *
+ * Header-driven, not positional: the producer table has evolved from the
+ * original `| ID | Slug | Title | Status |` to optionally include `Repo` /
+ * `Depends on` columns and to bold the ID cell (the verbatim
+ * `2026-06-02-compliance-detective-realign` campaign is `| ID | Slug | Title |
+ * Repo | Depends on | Status |` with `**C1**` IDs). Locating the load-bearing
+ * columns by header name keeps `status` anchored to the Status column instead
+ * of whatever now sits in the 4th cell, and every cell is emphasis-stripped so
+ * a bold ID round-trips to a real `<id>-<slug>.md` filename. Falls back to
+ * positional `[id, slug, title, status]` for a (hypothetical) headerless table.
+ */
+export function parseSubIteratesTable(md) {
+    const lines = md.split("\n");
+    let i = 0;
+    for (; i < lines.length; i++) {
+        if (/^##\s+Sub-Iterates\s*$/i.test(lines[i].trim()))
+            break;
+    }
+    if (i >= lines.length)
+        return [];
+    // Collect every pipe row (emphasis-stripped cells); drop separator rows.
+    const pipeRows = [];
+    for (i = i + 1; i < lines.length; i++) {
+        const t = lines[i].trim();
+        if (/^##\s+/.test(t))
+            break; // next section
+        if (!t.startsWith("|"))
+            continue;
+        const inner = t.replace(/^\|/, "").replace(/\|$/, "");
+        const cells = inner.split("|").map((c) => stripInlineEmphasis(c.trim()));
+        // separator row (cells only of - : space) → skip
+        if (cells.every((c) => c === "" || /^:?-+:?$/.test(c)))
+            continue;
+        pipeRows.push(cells);
+    }
+    if (pipeRows.length === 0)
+        return [];
+    // First non-separator row is the header when it carries an `ID` column.
+    const header = pipeRows[0].map((c) => c.toLowerCase());
+    const hasHeader = header.includes("id");
+    const colOf = (name, dflt) => {
+        const idx = header.indexOf(name);
+        return idx === -1 ? dflt : idx;
+    };
+    const idCol = hasHeader ? colOf("id", 0) : 0;
+    const slugCol = hasHeader ? colOf("slug", 1) : 1;
+    const titleCol = hasHeader ? colOf("title", 2) : 2;
+    // status is conventionally the last column; default to the final cell.
+    const statusCol = hasHeader ? colOf("status", header.length - 1) : 3;
+    const dataStart = hasHeader ? 1 : 0;
+    const rows = [];
+    for (let r = dataStart; r < pipeRows.length; r++) {
+        const cells = pipeRows[r];
+        const id = cells[idCol] ?? "";
+        if (!id)
+            continue;
+        rows.push({
+            id,
+            slug: cells[slugCol] ?? "",
+            title: cells[titleCol] ?? "",
+            status: (cells[statusCol] ?? "").toLowerCase(),
+        });
+    }
+    return rows;
+}
+//# sourceMappingURL=campaign-parse.js.map

package/server/dist/core/campaign-parse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"campaign-parse.js","sourceRoot":"","sources":["../../src/core/campaign-parse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,8EAA8E;AAC9E,MAAM,UAAU,gBAAgB,CAAC,EAAU;IACzC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC1D,IAAI,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,SAAS;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,WAAW,CAAC,EAAU;IACpC,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAAE,MAAM;IACvD,CAAC;IACD,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,MAAM,CAAC,eAAe;QAC5C,IAAI,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACpC,CAAC;AASD;;;;;;;;;;;;;GAaG;AACH,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;AAC3E,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;AAE3F,MAAM,UAAU,oBAAoB,CAAC,EAAU;IAC7C,IAAI,EAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,EAAE,GAAG,gBAAgB,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IACD,MAAM,YAAY,GAAG,CAAC,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChE,MAAM,OAAO,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrD,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpF,OAAO,EAAE,SAAS,EAAE,CAAC;AACvB,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,mBAAmB,CAAC,CAAS;IACpC,OAAO,CAAC;SACL,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,SAAS;SACrC,OAAO,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC,WAAW;SAC7C,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,WAAW;SACzC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,WAAW;SACzC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,WAAW;SACvC,IAAI,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB,CAAC,EAAU;IAC9C,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAAE,MAAM;IAC7D,CAAC;IACD,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEjC,yEAAyE;IACzE,MAAM,QAAQ,GAAe,EAAE,CAAC;IAChC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,MAAM,CAAC,eAAe;QAC5C,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACjC,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACzE,iDAAiD;QACjD,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS;QACjE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAErC,wEAAwE;IACxE,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,IAAY,EAAU,EAAE;QACnD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IACjC,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,uEAAuE;IACvE,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEpC,MAAM,IAAI,GAAuB,EAAE,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,EAAE;YAAE,SAAS;QAClB,IAAI,CAAC,IAAI,CAAC;YACR,EAAE;YACF,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE;YAC1B,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE;YAC5B,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;SAC/C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/server/dist/core/campaign-paths.d.ts

@@ -0,0 +1,24 @@
+export type CampaignsPathError = {
+    reason: "missing_project_path" | "synthesized_project" | "path_traversal" | "project_root_not_directory";
+};
+export type CampaignsPathResult = {
+    ok: true;
+    absolute: string;
+    projectRoot: string;
+    existed: boolean;
+} | {
+    ok: false;
+    error: CampaignsPathError;
+};
+export interface CampaignsPathProject {
+    path: string;
+    synthesized?: boolean;
+}
+export declare function resolveCampaignsDir(project: CampaignsPathProject): CampaignsPathResult;
+/**
+ * True when `candidate` is `projectRoot` itself or a descendant of it.
+ * Exported so `campaign-store.ts` shares the single containment SSoT for its
+ * per-step spec-file symlink-escape guard.
+ */
+export declare function isWithin(projectRoot: string, candidate: string): boolean;
+//# sourceMappingURL=campaign-paths.d.ts.map

package/server/dist/core/campaign-paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"campaign-paths.d.ts","sourceRoot":"","sources":["../../src/core/campaign-paths.ts"],"names":[],"mappings":"AAoBA,MAAM,MAAM,kBAAkB,GAAG;IAC/B,MAAM,EACF,sBAAsB,GACtB,qBAAqB,GACrB,gBAAgB,GAChB,4BAA4B,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GACrE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAE7C,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAUD,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,oBAAoB,GAC5B,mBAAmB,CAoErB;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAWxE"}