@svenroth-ai/shipwright 0.24.1-next.0

package/server/dist/core/campaign-paths.js

@@ -0,0 +1,111 @@
+/*
+ * campaign-paths.ts — centralized resolver for a project's campaigns dir
+ * `<project>/.shipwright/planning/iterate/campaigns`.
+ *
+ * Sibling of `triage-paths.ts` (ADR-101): same realpath + path.relative
+ * containment semantics so a symlinked `.shipwright` (or any ancestor)
+ * pointing outside the project can't redirect reads. The campaigns dir is
+ * four segments deep and frequently does not exist yet, so the "not present"
+ * case is a normal `{ ok:true, existed:false }` result — the route turns that
+ * into `200 { campaigns: [] }`, NOT a 404 (404 is reserved for unknown /
+ * synthesized project ids).
+ *
+ * Returns the realpath-resolved campaigns dir when it exists; otherwise the
+ * static candidate path after verifying the nearest existing ancestor is
+ * within the (realpath-resolved) project root.
+ */
+import path from "node:path";
+import { existsSync, realpathSync, statSync } from "node:fs";
+/** `.shipwright/planning/iterate/campaigns` — constant, no user input. */
+const SUBDIR_SEGMENTS = [
+    ".shipwright",
+    "planning",
+    "iterate",
+    "campaigns",
+];
+export function resolveCampaignsDir(project) {
+    if (project.synthesized) {
+        return { ok: false, error: { reason: "synthesized_project" } };
+    }
+    if (!project.path || typeof project.path !== "string") {
+        return { ok: false, error: { reason: "missing_project_path" } };
+    }
+    // Resolve project.path to its realpath when it exists; fall through to the
+    // literal resolve otherwise (the candidate is still emitted — readCampaigns
+    // returns [] for a non-existent dir).
+    let projectRoot;
+    try {
+        projectRoot = realpathSync(project.path);
+    }
+    catch {
+        projectRoot = path.resolve(project.path);
+    }
+    try {
+        const st = statSync(projectRoot);
+        if (!st.isDirectory()) {
+            return { ok: false, error: { reason: "project_root_not_directory" } };
+        }
+    }
+    catch {
+        // Project root doesn't exist — emit the candidate; the store reads [].
+        const candidate = path.join(projectRoot, ...SUBDIR_SEGMENTS);
+        return { ok: true, absolute: candidate, projectRoot, existed: false };
+    }
+    const candidate = path.resolve(projectRoot, ...SUBDIR_SEGMENTS);
+    // Dir exists → realpath it (defeats a symlinked ancestor) + verify within.
+    if (existsSync(candidate)) {
+        let resolved;
+        try {
+            resolved = realpathSync(candidate);
+        }
+        catch {
+            return { ok: false, error: { reason: "path_traversal" } };
+        }
+        if (!isWithin(projectRoot, resolved)) {
+            return { ok: false, error: { reason: "path_traversal" } };
+        }
+        return { ok: true, absolute: resolved, projectRoot, existed: true };
+    }
+    // Dir doesn't exist — walk up to the nearest EXISTING ancestor and verify
+    // it stays within the project root (a symlinked `.shipwright` pointing
+    // outside is the escape vector this guards).
+    let ancestor = path.dirname(candidate);
+    while (ancestor &&
+        ancestor !== path.dirname(ancestor) &&
+        !existsSync(ancestor)) {
+        ancestor = path.dirname(ancestor);
+    }
+    if (existsSync(ancestor)) {
+        let resolvedAncestor;
+        try {
+            resolvedAncestor = realpathSync(ancestor);
+        }
+        catch {
+            return { ok: false, error: { reason: "path_traversal" } };
+        }
+        if (!isWithin(projectRoot, resolvedAncestor)) {
+            return { ok: false, error: { reason: "path_traversal" } };
+        }
+    }
+    return { ok: true, absolute: candidate, projectRoot, existed: false };
+}
+/**
+ * True when `candidate` is `projectRoot` itself or a descendant of it.
+ * Exported so `campaign-store.ts` shares the single containment SSoT for its
+ * per-step spec-file symlink-escape guard.
+ */
+export function isWithin(projectRoot, candidate) {
+    const rel = path.relative(projectRoot, candidate);
+    if (!rel)
+        return true; // exact match — root itself
+    if (path.isAbsolute(rel))
+        return false; // different drive / root
+    // Reject only a genuine upward escape — a leading ".." SEGMENT — so a real
+    // descendant directory literally named "..safe" is not falsely rejected
+    // (external code review). Mirrors core/path-guard.ts.
+    if (rel === ".." || rel.startsWith(".." + path.sep) || rel.startsWith("../")) {
+        return false;
+    }
+    return true;
+}
+//# sourceMappingURL=campaign-paths.js.map

package/server/dist/core/campaign-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"campaign-paths.js","sourceRoot":"","sources":["../../src/core/campaign-paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAmB7D,0EAA0E;AAC1E,MAAM,eAAe,GAAG;IACtB,aAAa;IACb,UAAU;IACV,SAAS;IACT,WAAW;CACH,CAAC;AAEX,MAAM,UAAU,mBAAmB,CACjC,OAA6B;IAE7B,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,EAAE,CAAC;IAClE,CAAC;IAED,2EAA2E;IAC3E,4EAA4E;IAC5E,sCAAsC;IACtC,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,4BAA4B,EAAE,EAAE,CAAC;QACxE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,eAAe,CAAC,CAAC;QAC7D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACxE,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,eAAe,CAAC,CAAC;IAEhE,2EAA2E;IAC3E,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC;YACrC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,CAAC;QAC5D,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtE,CAAC;IAED,0EAA0E;IAC1E,uEAAuE;IACvE,6CAA6C;IAC7C,IAAI,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACvC,OACE,QAAQ;QACR,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QACnC,CAAC,UAAU,CAAC,QAAQ,CAAC,EACrB,CAAC;QACD,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,IAAI,gBAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,gBAAgB,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACxE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,WAAmB,EAAE,SAAiB;IAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAClD,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,4BAA4B;IACnD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,yBAAyB;IACjE,2EAA2E;IAC3E,wEAAwE;IACxE,sDAAsD;IACtD,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/server/dist/core/campaign-route-helpers.d.ts

@@ -0,0 +1,19 @@
+import type { Context } from "hono";
+/** True for a proper-lockfile contention error (retries exhausted). */
+export declare function isElockedError(err: unknown): boolean;
+/** 503 body for a contended campaign lock — the client retries. */
+export declare function lockUnavailable(c: Context): Response & import("hono").TypedResponse<{
+    error: string;
+    message: string;
+}, 503, "json">;
+/** Release a held lock, swallowing (warn-logging) a release failure. */
+export declare function releaseQuietly(release: () => Promise<void>): Promise<void>;
+/**
+ * Guard a campaign slug used as a dismissed-state map key (not a filesystem
+ * path — dismiss/restore never touch the campaign dir, which may not exist for
+ * a derivedFromEvents ghost). Rejects empty, over-long, and any input bearing a
+ * C0 control char or a path separator, so a malformed param can't poison the
+ * webui-owned state file.
+ */
+export declare function isValidCampaignSlug(slug: string): boolean;
+//# sourceMappingURL=campaign-route-helpers.d.ts.map

package/server/dist/core/campaign-route-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"campaign-route-helpers.d.ts","sourceRoot":"","sources":["../../src/core/campaign-route-helpers.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAEpC,uEAAuE;AACvE,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAMpD;AAED,mEAAmE;AACnE,wBAAgB,eAAe,CAAC,CAAC,EAAE,OAAO;;;gBAQzC;AAED,wEAAwE;AACxE,wBAAsB,cAAc,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAYhF;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAOzD"}

package/server/dist/core/campaign-route-helpers.js

@@ -0,0 +1,51 @@
+/*
+ * campaign-route-helpers.ts — shared helpers for the Campaigns routes.
+ *
+ * Extracted from `routes/campaigns.ts` so the `start` and `dismiss`/`restore`
+ * write endpoints share one copy of the lock-failure classification (mirrors
+ * triage.ts / ADR-106) and the route file stays under the 300-LOC ceiling.
+ */
+/** True for a proper-lockfile contention error (retries exhausted). */
+export function isElockedError(err) {
+    return (typeof err === "object" &&
+        err !== null &&
+        err.code === "ELOCKED");
+}
+/** 503 body for a contended campaign lock — the client retries. */
+export function lockUnavailable(c) {
+    return c.json({
+        error: "lock_unavailable",
+        message: "Campaign storage is busy — please retry in a moment.",
+    }, 503);
+}
+/** Release a held lock, swallowing (warn-logging) a release failure. */
+export async function releaseQuietly(release) {
+    try {
+        await release();
+    }
+    catch (err) {
+        console.warn(JSON.stringify({
+            level: "warn",
+            message: "campaign route: lock release failed (ignored)",
+            error: String(err).slice(0, 200),
+        }));
+    }
+}
+/**
+ * Guard a campaign slug used as a dismissed-state map key (not a filesystem
+ * path — dismiss/restore never touch the campaign dir, which may not exist for
+ * a derivedFromEvents ghost). Rejects empty, over-long, and any input bearing a
+ * C0 control char or a path separator, so a malformed param can't poison the
+ * webui-owned state file.
+ */
+export function isValidCampaignSlug(slug) {
+    if (typeof slug !== "string" || slug.length === 0 || slug.length > 200)
+        return false;
+    for (let i = 0; i < slug.length; i++) {
+        const code = slug.charCodeAt(i);
+        if (code < 0x20 || code === 0x2f || code === 0x5c)
+            return false; // C0, '/', '\'
+    }
+    return true;
+}
+//# sourceMappingURL=campaign-route-helpers.js.map

package/server/dist/core/campaign-route-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"campaign-route-helpers.js","sourceRoot":"","sources":["../../src/core/campaign-route-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,uEAAuE;AACvE,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACX,GAA0B,CAAC,IAAI,KAAK,SAAS,CAC/C,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,eAAe,CAAC,CAAU;IACxC,OAAO,CAAC,CAAC,IAAI,CACX;QACE,KAAK,EAAE,kBAAkB;QACzB,OAAO,EAAE,sDAAsD;KAChE,EACD,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAA4B;IAC/D,IAAI,CAAC;QACH,MAAM,OAAO,EAAE,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,+CAA+C;YACxD,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SACjC,CAAC,CACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,KAAK,CAAC;IACrF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC,CAAC,eAAe;IAClF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/server/dist/core/campaign-status-json.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Campaign-level lifecycle status, producer-owned (status.json top-level
+ * `status`, or hand-authored campaign.md frontmatter `status:`). Optional — a
+ * campaign without it is "legacy" and consumers fall back to derived done/total.
+ * draft = planned (triage-only), active = running (shown on the board),
+ * complete = done (hidden).
+ */
+export type CampaignLifecycleStatus = "draft" | "active" | "complete";
+export interface StatusSubIterate {
+    id?: unknown;
+    slug?: unknown;
+    status?: unknown;
+    commit?: unknown;
+    branch?: unknown;
+}
+export interface StatusJson {
+    branch_strategy?: unknown;
+    status?: unknown;
+    sub_iterates?: unknown;
+}
+/**
+ * The three genuinely different outcomes of reading `status.json`.
+ *
+ * `readStatusJson` collapses `absent` and `unreadable` into one `null`, and that
+ * collapse is a defect the consumer cannot recover from: falling back to the
+ * `campaign.md` table is CORRECT in both cases, but only one of them is a fault.
+ * "This campaign has no live status file" and "this campaign's live status file
+ * could not be read" support very different claims, and a caller that cannot
+ * tell them apart ends up presenting a stale table row as current fact.
+ */
+export type StatusJsonRead = {
+    state: "ok";
+    json: StatusJson;
+} | {
+    state: "absent";
+} | {
+    state: "unreadable";
+};
+/** Read + JSON-parse `<campaignDir>/status.json`, keeping WHY it failed. */
+export declare function readStatusJsonRead(campaignDir: string): StatusJsonRead;
+/**
+ * Read + JSON-parse `<campaignDir>/status.json`, or null when absent/torn.
+ *
+ * Back-compat wrapper over `readStatusJsonRead` for callers that only need the
+ * payload. Anything RENDERING a claim derived from this should use the
+ * discriminated form instead — see the type doc above.
+ */
+export declare function readStatusJson(campaignDir: string): StatusJson | null;
+/**
+ * Resolve the campaign-level lifecycle status: status.json top-level `status`
+ * wins, else the campaign.md frontmatter `status:`. Unknown / absent → null
+ * (legacy; the consumer falls back to done/total).
+ */
+export declare function pickLifecycle(status: StatusJson | null, fm: Record<string, string>): CampaignLifecycleStatus | null;
+//# sourceMappingURL=campaign-status-json.d.ts.map

package/server/dist/core/campaign-status-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"campaign-status-json.d.ts","sourceRoot":"","sources":["../../src/core/campaign-status-json.ts"],"names":[],"mappings":"AAcA;;;;;;GAMG;AACH,MAAM,MAAM,uBAAuB,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAC;AAQtE,MAAM,WAAW,gBAAgB;IAC/B,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,cAAc,GACtB;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GACjC;IAAE,KAAK,EAAE,QAAQ,CAAA;CAAE,GACnB;IAAE,KAAK,EAAE,YAAY,CAAA;CAAE,CAAC;AAE5B,4EAA4E;AAC5E,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,cAAc,CActE;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAGrE;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,UAAU,GAAG,IAAI,EACzB,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACzB,uBAAuB,GAAG,IAAI,CAKhC"}

package/server/dist/core/campaign-status-json.js

@@ -0,0 +1,57 @@
+/*
+ * campaign-status-json.ts — the `status.json` input-reader for campaigns
+ * (the JSON-side sibling of `campaign-parse.ts`, which reads campaign.md).
+ *
+ * `status.json` is written by `campaign_init.py` / `campaign_progress.py` /
+ * the autonomous loop. It carries per-sub-iterate status + (new) a top-level
+ * campaign lifecycle `status`. Reads are torn-read tolerant (the 3 s poll can
+ * race a Python write) — a malformed/half-written file resolves to null and the
+ * caller falls back to campaign.md.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import path from "node:path";
+const VALID_LIFECYCLE = new Set([
+    "draft",
+    "active",
+    "complete",
+]);
+/** Read + JSON-parse `<campaignDir>/status.json`, keeping WHY it failed. */
+export function readStatusJsonRead(campaignDir) {
+    const p = path.join(campaignDir, "status.json");
+    if (!existsSync(p))
+        return { state: "absent" };
+    try {
+        const parsed = JSON.parse(readFileSync(p, "utf-8"));
+        if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+            // A file that IS there and holds a non-object is malformed, not absent.
+            return { state: "unreadable" };
+        }
+        return { state: "ok", json: parsed };
+    }
+    catch {
+        // torn read / malformed / permission → the file exists and we cannot use it
+        return { state: "unreadable" };
+    }
+}
+/**
+ * Read + JSON-parse `<campaignDir>/status.json`, or null when absent/torn.
+ *
+ * Back-compat wrapper over `readStatusJsonRead` for callers that only need the
+ * payload. Anything RENDERING a claim derived from this should use the
+ * discriminated form instead — see the type doc above.
+ */
+export function readStatusJson(campaignDir) {
+    const r = readStatusJsonRead(campaignDir);
+    return r.state === "ok" ? r.json : null;
+}
+/**
+ * Resolve the campaign-level lifecycle status: status.json top-level `status`
+ * wins, else the campaign.md frontmatter `status:`. Unknown / absent → null
+ * (legacy; the consumer falls back to done/total).
+ */
+export function pickLifecycle(status, fm) {
+    const fromJson = status && typeof status.status === "string" ? status.status : "";
+    const raw = (fromJson || fm.status || "").trim().toLowerCase();
+    return VALID_LIFECYCLE.has(raw) ? raw : null;
+}
+//# sourceMappingURL=campaign-status-json.js.map

package/server/dist/core/campaign-status-json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"campaign-status-json.js","sourceRoot":"","sources":["../../src/core/campaign-status-json.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAW7B,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IACnD,OAAO;IACP,QAAQ;IACR,UAAU;CACX,CAAC,CAAC;AA+BH,4EAA4E;AAC5E,MAAM,UAAU,kBAAkB,CAAC,WAAmB;IACpD,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QACpD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,wEAAwE;YACxE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;QACjC,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAoB,EAAE,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;QAC5E,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IACjC,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,WAAmB;IAChD,MAAM,CAAC,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC1C,OAAO,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAyB,EACzB,EAA0B;IAE1B,MAAM,QAAQ,GACZ,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,MAAM,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/D,OAAO,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,GAA+B,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5E,CAAC"}

package/server/dist/core/campaign-store.d.ts

@@ -0,0 +1,10 @@
+import type { Campaign } from "./campaign-types.js";
+export type { Campaign, CampaignProvenance, CampaignStep, CampaignStepStatus, } from "./campaign-types.js";
+/**
+ * Read every campaign under `campaignsDir`. Returns [] when the dir is
+ * missing/unreadable. `projectRoot` (realpath-resolved) is used to derive
+ * project-root-relative spec paths. Sorted by slug descending (date-prefixed
+ * slugs → newest first; assumes a sortable prefix).
+ */
+export declare function readCampaigns(campaignsDir: string, projectRoot: string): Campaign[];
+//# sourceMappingURL=campaign-store.d.ts.map

package/server/dist/core/campaign-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"campaign-store.d.ts","sourceRoot":"","sources":["../../src/core/campaign-store.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EACV,QAAQ,EAIT,MAAM,qBAAqB,CAAC;AAI7B,YAAY,EACV,QAAQ,EACR,kBAAkB,EAClB,YAAY,EACZ,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AA0M7B;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,GAClB,QAAQ,EAAE,CA8BZ"}

package/server/dist/core/campaign-store.js

@@ -0,0 +1,245 @@
+/*
+ * campaign-store.ts — read-only reader for Shipwright iterate campaigns under
+ * `<project>/.shipwright/planning/iterate/campaigns/<slug>/`.
+ *
+ * Producer/consumer boundary (see iterate spec "Affected Boundaries"):
+ *   - `campaign.md`  — `campaign_init.py init_campaign` (parsed by
+ *      `campaign-parse.ts`: frontmatter + `## Intent` + `## Sub-Iterates` table).
+ *   - `status.json`  — `campaign_init.py` + `campaign_progress.py
+ *      cmd_update_status`: `{ branch_strategy, sub_iterates:[{id, slug,
+ *      status, commit, branch, …}] }`.
+ *
+ * Resolution contract:
+ *   - `status.json` is authoritative for per-step status / commit / branch.
+ *   - `campaign.md` table provides ordering + titles (status.json has no title).
+ *   - status.json absent → status derived from the campaign.md table column.
+ *   - Every campaign dir is parsed under its own try/catch: a malformed or
+ *     half-written file (the 3 s poll WILL race a Python write) is tolerated —
+ *     a bad `status.json` falls back to the table; a dir with nothing parseable
+ *     is skipped (warn-logged). One bad campaign never hides the others.
+ *
+ * No cache: a single active project polled at 3 s reads a handful of tiny files.
+ */
+import { existsSync, readFileSync, readdirSync, realpathSync } from "node:fs";
+import path from "node:path";
+import { isWithin } from "./campaign-paths.js";
+import { parseFrontmatter, parseIntent, parseSubIteratesTable, parseSpecFrontmatter, } from "./campaign-parse.js";
+import { readStatusJsonRead, pickLifecycle } from "./campaign-status-json.js";
+const VALID_STATUSES = new Set([
+    "pending",
+    "in_progress",
+    "complete",
+    "failed",
+    "escalated",
+]);
+/**
+ * True when a derived spec path holds a double-quote or any C0 control char.
+ * Such a path would break out of the double-quoted launch command, so we
+ * null it out rather than hand the operator a malformed string. Spaces and
+ * hyphens are fine — slugs are full of hyphens and the command quotes the path.
+ */
+function hasUnsafeChar(s) {
+    for (let i = 0; i < s.length; i++) {
+        const code = s.charCodeAt(i);
+        if (code < 0x20 || code === 0x22)
+            return true; // C0 control or '"'
+    }
+    return false;
+}
+/**
+ * Derive a step's `{ specPath, planFirst }` from its sub-iterate spec file in
+ * ONE existence + symlink-containment guard (external review HIGH #6/#7):
+ *   - specPath: project-root-relative POSIX path, or null when the file is
+ *     missing / escapes the root / holds shell-hostile chars.
+ *   - planFirst: the forward-compat plan-first/risk frontmatter marker (false
+ *     for every campaign today — the producer writes none).
+ * Tolerant: any miss / escape / torn read → `{ specPath:null, planFirst:false }`.
+ */
+function deriveSpecMeta(projectRoot, campaignDir, id, slug) {
+    const miss = { specPath: null, planFirst: false };
+    if (!slug)
+        return miss; // can't form the `<id>-<slug>.md` filename
+    const specFile = path.join(campaignDir, "sub-iterates", `${id}-${slug}.md`);
+    if (!existsSync(specFile))
+        return miss;
+    let planFirst = false;
+    try {
+        if (!isWithin(projectRoot, realpathSync(specFile)))
+            return miss;
+        planFirst = parseSpecFrontmatter(readFileSync(specFile, "utf-8")).planFirst;
+    }
+    catch {
+        return miss;
+    }
+    const rel = path.relative(projectRoot, specFile);
+    if (!rel || rel.startsWith("..") || path.isAbsolute(rel))
+        return { specPath: null, planFirst };
+    const posix = rel.split(path.sep).join("/");
+    if (hasUnsafeChar(posix))
+        return { specPath: null, planFirst };
+    return { specPath: posix, planFirst };
+}
+/** Build a single Campaign from its dir, or null when nothing parseable. */
+function buildCampaign(campaignDir, slug, projectRoot) {
+    const mdPath = path.join(campaignDir, "campaign.md");
+    let md = "";
+    // A campaign.md that is THERE and unreadable is a fault; one that is simply
+    // absent is not. The two used to be one empty string.
+    let mdUnreadable = false;
+    if (existsSync(mdPath)) {
+        try {
+            md = readFileSync(mdPath, "utf-8");
+        }
+        catch {
+            md = "";
+            mdUnreadable = true;
+        }
+    }
+    const statusRead = readStatusJsonRead(campaignDir);
+    const status = statusRead.state === "ok" ? statusRead.json : null;
+    // Neither source present → not a campaign (empty/garbage dir) → skip.
+    // Unchanged on purpose: a dir with NOTHING usable already resolves to a
+    // typed `unavailable` downstream (no record found), which is honest. The
+    // degradation this iterate fixes is the one that produces a campaign object.
+    if (!md && !status)
+        return null;
+    const fm = parseFrontmatter(md);
+    const tableRows = parseSubIteratesTable(md);
+    const statusById = new Map();
+    const statusSubs = Array.isArray(status?.sub_iterates)
+        ? status.sub_iterates
+        : [];
+    for (const si of statusSubs) {
+        if (si && typeof si.id === "string")
+            statusById.set(si.id, si);
+    }
+    // Membership + order: the campaign.md table when present, else status.json.
+    const bases = tableRows.length > 0
+        ? tableRows.map((r) => ({
+            id: r.id,
+            slug: r.slug,
+            title: r.title,
+            tableStatus: r.status,
+        }))
+        : statusSubs
+            .filter((si) => si && typeof si.id === "string")
+            .map((si) => ({
+            id: si.id,
+            slug: typeof si.slug === "string" ? si.slug : "",
+            title: typeof si.slug === "string" ? si.slug : si.id,
+            tableStatus: "",
+        }));
+    const steps = bases.map((b) => {
+        const sj = statusById.get(b.id);
+        const stepSlug = b.slug || (sj && typeof sj.slug === "string" ? sj.slug : "");
+        // status.json wins; else the table column; else pending. The SOURCE is
+        // recorded alongside the value — a status is a claim, and this is its basis.
+        const fromJson = sj && typeof sj.status === "string" && VALID_STATUSES.has(sj.status);
+        const fromTable = VALID_STATUSES.has(b.tableStatus);
+        const resolvedStatus = fromJson
+            ? sj.status
+            : fromTable
+                ? b.tableStatus
+                : "pending";
+        const statusSource = fromJson
+            ? "status_json"
+            : fromTable
+                ? "campaign_md"
+                // Neither source named this unit: `pending` is this reader's default,
+                // not anybody's record of the unit.
+                : "default";
+        const specMeta = deriveSpecMeta(projectRoot, campaignDir, b.id, stepSlug);
+        return {
+            id: b.id,
+            slug: stepSlug,
+            title: b.title || stepSlug || b.id,
+            status: resolvedStatus,
+            statusSource,
+            specPath: specMeta.specPath,
+            planFirst: specMeta.planFirst,
+            commit: sj && typeof sj.commit === "string" ? sj.commit : null,
+            branch: sj && typeof sj.branch === "string" ? sj.branch : null,
+        };
+    });
+    const done = steps.filter((s) => s.status === "complete").length;
+    const nextStep = steps.find((s) => s.status !== "complete") ?? null;
+    // Where the STATUS claims came from. `status.json` only counts when it
+    // actually supplied a usable status for at least one step — a file that
+    // parsed but lists nobody has told us nothing about these units.
+    const anyFromStatusJson = bases.some((b) => {
+        const sj = statusById.get(b.id);
+        return !!sj && typeof sj.status === "string" && VALID_STATUSES.has(sj.status);
+    });
+    const provenance = {
+        statusSource: anyFromStatusJson
+            ? "status_json"
+            : steps.length > 0
+                ? "campaign_md"
+                : "none",
+        // Only a source that EXISTED and failed. An absent status.json is an
+        // ordinary legacy campaign, not a degradation.
+        degraded: statusRead.state === "unreadable" || mdUnreadable,
+        statusJsonState: statusRead.state,
+        campaignMdUnreadable: mdUnreadable,
+    };
+    const branchStrategy = fm.branch_strategy ||
+        (typeof status?.branch_strategy === "string"
+            ? status.branch_strategy
+            : "") ||
+        null;
+    const expandsTriage = fm.expandsTriage || fm.expands_triage || null;
+    return {
+        slug,
+        intent: parseIntent(md),
+        branchStrategy,
+        expandsTriage,
+        status: pickLifecycle(status, fm),
+        provenance,
+        steps,
+        done,
+        total: steps.length,
+        nextPending: nextStep
+            ? { id: nextStep.id, specPath: nextStep.specPath }
+            : null,
+    };
+}
+/**
+ * Read every campaign under `campaignsDir`. Returns [] when the dir is
+ * missing/unreadable. `projectRoot` (realpath-resolved) is used to derive
+ * project-root-relative spec paths. Sorted by slug descending (date-prefixed
+ * slugs → newest first; assumes a sortable prefix).
+ */
+export function readCampaigns(campaignsDir, projectRoot) {
+    if (!existsSync(campaignsDir))
+        return [];
+    let names;
+    try {
+        names = readdirSync(campaignsDir, { withFileTypes: true })
+            .filter((d) => d.isDirectory())
+            .map((d) => d.name);
+    }
+    catch {
+        return [];
+    }
+    const campaigns = [];
+    for (const slug of names) {
+        try {
+            const c = buildCampaign(path.join(campaignsDir, slug), slug, projectRoot);
+            if (c)
+                campaigns.push(c);
+        }
+        catch (err) {
+            // Per-campaign isolation (external review HIGH #2): one bad dir must
+            // never hide the rest or 500 the route.
+            console.warn(JSON.stringify({
+                level: "warn",
+                message: "campaign read failed",
+                slug,
+                error: String(err).slice(0, 200),
+            }));
+        }
+    }
+    campaigns.sort((a, b) => (a.slug < b.slug ? 1 : a.slug > b.slug ? -1 : 0));
+    return campaigns;
+}
+//# sourceMappingURL=campaign-store.js.map

package/server/dist/core/campaign-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"campaign-store.js","sourceRoot":"","sources":["../../src/core/campaign-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9E,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EACL,gBAAgB,EAChB,WAAW,EACX,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAqB9E,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,SAAS;IACT,aAAa;IACb,UAAU;IACV,QAAQ;IACR,WAAW;CACZ,CAAC,CAAC;AAEH;;;;;GAKG;AACH,SAAS,aAAa,CAAC,CAAS;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,CAAC,oBAAoB;IACrE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc,CACrB,WAAmB,EACnB,WAAmB,EACnB,EAAU,EACV,IAAY;IAEZ,MAAM,IAAI,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAClD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,2CAA2C;IACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,GAAG,EAAE,IAAI,IAAI,KAAK,CAAC,CAAC;IAC5E,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAChE,SAAS,GAAG,oBAAoB,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACjD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC/F,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC/D,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AACxC,CAAC;AASD,4EAA4E;AAC5E,SAAS,aAAa,CACpB,WAAmB,EACnB,IAAY,EACZ,WAAmB;IAEnB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACrD,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,4EAA4E;IAC5E,sDAAsD;IACtD,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,EAAE,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,EAAE,GAAG,EAAE,CAAC;YACR,YAAY,GAAG,IAAI,CAAC;QACtB,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAElE,sEAAsE;IACtE,wEAAwE;IACxE,yEAAyE;IACzE,6EAA6E;IAC7E,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEhC,MAAM,EAAE,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,qBAAqB,CAAC,EAAE,CAAC,CAAC;IAE5C,MAAM,UAAU,GAAG,IAAI,GAAG,EAA4B,CAAC;IACvD,MAAM,UAAU,GAAuB,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC;QACxE,CAAC,CAAE,MAAO,CAAC,YAAmC;QAC9C,CAAC,CAAC,EAAE,CAAC;IACP,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC,EAAE,KAAK,QAAQ;YAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,4EAA4E;IAC5E,MAAM,KAAK,GACT,SAAS,CAAC,MAAM,GAAG,CAAC;QAClB,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpB,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,WAAW,EAAE,CAAC,CAAC,MAAM;SACtB,CAAC,CAAC;QACL,CAAC,CAAC,UAAU;aACP,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,OAAO,EAAE,CAAC,EAAE,KAAK,QAAQ,CAAC;aAC/C,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACZ,EAAE,EAAE,EAAE,CAAC,EAAY;YACnB,IAAI,EAAE,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;YAChD,KAAK,EAAE,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,CAAC,EAAa;YAChE,WAAW,EAAE,EAAE;SAChB,CAAC,CAAC,CAAC;IAEZ,MAAM,KAAK,GAAmB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC5C,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChC,MAAM,QAAQ,GACZ,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/D,uEAAuE;QACvE,6EAA6E;QAC7E,MAAM,QAAQ,GAAG,EAAE,IAAI,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QACtF,MAAM,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,cAAc,GAAG,QAAQ;YAC7B,CAAC,CAAE,EAAG,CAAC,MAA6B;YACpC,CAAC,CAAC,SAAS;gBACT,CAAC,CAAE,CAAC,CAAC,WAAkC;gBACvC,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,YAAY,GAAiC,QAAQ;YACzD,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,SAAS;gBACT,CAAC,CAAC,aAAa;gBACf,sEAAsE;gBACtE,oCAAoC;gBACpC,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,QAAQ,GAAG,cAAc,CAAC,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC1E,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,QAAQ,IAAI,CAAC,CAAC,EAAE;YAClC,MAAM,EAAE,cAAc;YACtB,YAAY;YACZ,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,MAAM,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;YAC9D,MAAM,EAAE,EAAE,IAAI,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;SAC/D,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;IACjE,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,IAAI,IAAI,CAAC;IAEpE,uEAAuE;IACvE,wEAAwE;IACxE,iEAAiE;IACjE,MAAM,iBAAiB,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACzC,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChC,OAAO,CAAC,CAAC,EAAE,IAAI,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IACH,MAAM,UAAU,GAAuB;QACrC,YAAY,EAAE,iBAAiB;YAC7B,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;gBAChB,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC,MAAM;QACZ,qEAAqE;QACrE,+CAA+C;QAC/C,QAAQ,EAAE,UAAU,CAAC,KAAK,KAAK,YAAY,IAAI,YAAY;QAC3D,eAAe,EAAE,UAAU,CAAC,KAAK;QACjC,oBAAoB,EAAE,YAAY;KACnC,CAAC;IAEF,MAAM,cAAc,GAClB,EAAE,CAAC,eAAe;QAClB,CAAC,OAAO,MAAM,EAAE,eAAe,KAAK,QAAQ;YAC1C,CAAC,CAAE,MAAM,CAAC,eAA0B;YACpC,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,CAAC;IACP,MAAM,aAAa,GAAG,EAAE,CAAC,aAAa,IAAI,EAAE,CAAC,cAAc,IAAI,IAAI,CAAC;IAEpE,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC;QACvB,cAAc;QACd,aAAa;QACb,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC;QACjC,UAAU;QACV,KAAK;QACL,IAAI;QACJ,KAAK,EAAE,KAAK,CAAC,MAAM;QACnB,WAAW,EAAE,QAAQ;YACnB,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;YAClD,CAAC,CAAC,IAAI;KACT,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,YAAoB,EACpB,WAAmB;IAEnB,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,EAAE,CAAC;IACzC,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,WAAW,CAAC,YAAY,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aACvD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,SAAS,GAAe,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;YAC1E,IAAI,CAAC;gBAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,qEAAqE;YACrE,wCAAwC;YACxC,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,sBAAsB;gBAC/B,IAAI;gBACJ,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aACjC,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IACD,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,OAAO,SAAS,CAAC;AACnB,CAAC"}