@svenroth-ai/shipwright 0.24.1-next.0

package/server/dist/core/claude-bin-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-bin-resolver.js","sourceRoot":"","sources":["../../src/core/claude-bin-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,IAAI,YAAY,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,oBAAoB,CAAC;QAC1B,QAAQ,EAAE,QAAQ,EAAE;QACpB,SAAS;QACT,UAAU,EAAE,YAAY;QACxB,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;AACL,CAAC;AASD,oFAAoF;AACpF,MAAM,UAAU,oBAAoB,CAAC,IAA0B;IAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC;IAExC,4CAA4C;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC;IACxD,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC;QAC/C,oEAAoE;QACpE,uBAAuB;QACvB,sCAAsC;QACtC,OAAO,CAAC,IAAI,CACV,sCAAsC,QAAQ,kDAAkD,CACjG,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gEAAgE;IAChE,kEAAkE;IAClE,8DAA8D;IAC9D,EAAE;IACF,oEAAoE;IACpE,kEAAkE;IAClE,oEAAoE;IACpE,kEAAkE;IAClE,qDAAqD;IACrD,IAAI,aAAa,GAAkB,IAAI,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QACzC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAClF,IAAI,CAAE,CAAyB,CAAC,KAAK,EAAE,CAAC;YACtC,MAAM,KAAK,GAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAY;iBACvC,KAAK,CAAC,OAAO,CAAC;iBACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,MAAM,CAAC,OAAO,CAAC;iBACf,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,yCAAyC;YAC/E,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpD,IAAI,MAAM;oBAAE,aAAa,GAAG,MAAM,CAAC;YACrC,CAAC;YACD,aAAa,GAAG,aAAa,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;YAClD,gEAAgE;YAChE,8DAA8D;YAC9D,+DAA+D;YAC/D,2CAA2C;YAC3C,IAAI,aAAa,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;gBACrD,aAAa,GAAG,IAAI,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;IACD,IAAI,aAAa;QAAE,OAAO,aAAa,CAAC;IAExC,8DAA8D;IAC9D,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACtD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,sCAAsC;YACtC,OAAO,CAAC,IAAI,CACV,mDAAmD,SAAS,qGAAqG,CAClK,CAAC;YACF,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AA4BD,MAAM,UAAU,kBAAkB,CAAC,IAA4B;IAC7D,IAAI,CAAC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC;IACxC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAC9B,kEAAkE;IAClE,kEAAkE;IAClE,kEAAkE;IAClE,sEAAsE;IACtE,qEAAqE;IACrE,oCAAoC;IACpC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;IAChD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE5C,oEAAoE;IACpE,sEAAsE;IACtE,sEAAsE;IACtE,kEAAkE;IAClE,kEAAkE;IAClE,gEAAgE;IAChE,2CAA2C;IAC3C,IAAI,OAAO,GAAG,MAAM,CAAC;IACrB,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;gBAC/B,OAAO,GAAG,CAAC,CAAC;gBACZ,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,uEAAuE;IACvE,qDAAqD;IACrD,MAAM,aAAa,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE;QACzB,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QAC3B,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC;IACnE,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACzC,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;QACf,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,GAAG,GAAG,GAAG,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,sCAAsC;IACtC,OAAO,CAAC,IAAI,CACV,0CAA0C,SAAS,aAAa,OAAO,8EAA8E,CACtJ,CAAC;IACF,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAc,EACd,GAAuC;IAEvC,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;QAClC,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;QAC5C,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAa,EAAE,CAAC;QACvB,IAAI,WAAW,EAAE,CAAC;YAChB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;YAC9D,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,qBAAqB;YACrB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;YAChD,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,cAAc;YACd,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,YAAY,EAAE,CAAC;YACjB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,QAAQ;IACR,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IAC5B,MAAM,CAAC,GAAa,EAAE,CAAC;IACvB,IAAI,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAChC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC,yBAAyB;IAC7D,OAAO,CAAC,CAAC;AACX,CAAC"}

package/server/dist/core/claude-theme-reader.d.ts

@@ -0,0 +1,15 @@
+export interface ClaudeThemeReaderDeps {
+    /** Injected for tests; defaults to fs/promises.readFile + utf-8. */
+    readFile?: (path: string) => Promise<string>;
+    /** Injected for tests; defaults to os.homedir(). */
+    homedir?: () => string;
+}
+/** Absolute path to the user's global Claude Code settings file. */
+export declare function claudeSettingsPath(home: string): string;
+/**
+ * Read the persisted Claude Code theme string, or `null` when it can't be
+ * determined. Swallows every error (ENOENT, EACCES, malformed JSON, wrong
+ * type) — the caller treats `null` as "unknown → fall back to OS/dark".
+ */
+export declare function readClaudeTheme(deps?: ClaudeThemeReaderDeps): Promise<string | null>;
+//# sourceMappingURL=claude-theme-reader.d.ts.map

package/server/dist/core/claude-theme-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-theme-reader.d.ts","sourceRoot":"","sources":["../../src/core/claude-theme-reader.ts"],"names":[],"mappings":"AAyBA,MAAM,WAAW,qBAAqB;IACpC,oEAAoE;IACpE,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7C,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,MAAM,CAAC;CACxB;AAED,oEAAoE;AACpE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,IAAI,GAAE,qBAA0B,GAC/B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAmBxB"}

package/server/dist/core/claude-theme-reader.js

@@ -0,0 +1,52 @@
+/*
+ * Claude Code theme reader (iterate-2026-07-06-terminal-theme-modes,
+ * FR-01.44).
+ *
+ * Reads the `theme` string the user picked in Claude Code (via `/theme`)
+ * from their global `~/.claude/settings.json`, so the embedded terminal's
+ * default `auto` appearance can MIRROR it (light theme → light terminal
+ * bg, else Claude's dark text renders black-on-black). Read-only — webui
+ * never writes Claude's config (DO-NOT guard #1).
+ *
+ * Best-effort by contract: a missing file, unreadable file, non-JSON body,
+ * or absent/non-string `theme` all resolve to `null` (never throw). The
+ * only surface is `GET /api/terminal/claude-theme` (routes/terminal-
+ * appearance.ts), which must not 500 on a user with no Claude config.
+ *
+ * Scope: GLOBAL `~/.claude/settings.json` only. Claude Code also supports
+ * project-scoped `.claude/settings.json` overrides, but the common case is
+ * the global `/theme` setting; project-scope is an explicit follow-up (see
+ * the iterate spec "Out of scope").
+ */
+import { readFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { join } from "node:path";
+/** Absolute path to the user's global Claude Code settings file. */
+export function claudeSettingsPath(home) {
+    return join(home, ".claude", "settings.json");
+}
+/**
+ * Read the persisted Claude Code theme string, or `null` when it can't be
+ * determined. Swallows every error (ENOENT, EACCES, malformed JSON, wrong
+ * type) — the caller treats `null` as "unknown → fall back to OS/dark".
+ */
+export async function readClaudeTheme(deps = {}) {
+    const home = (deps.homedir ?? homedir)();
+    const fsRead = deps.readFile ?? ((p) => readFile(p, "utf-8"));
+    try {
+        const raw = await fsRead(claudeSettingsPath(home));
+        const parsed = JSON.parse(raw);
+        if (parsed &&
+            typeof parsed === "object" &&
+            "theme" in parsed &&
+            typeof parsed.theme === "string") {
+            const theme = parsed.theme.trim();
+            return theme.length > 0 ? theme : null;
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=claude-theme-reader.js.map

package/server/dist/core/claude-theme-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-theme-reader.js","sourceRoot":"","sources":["../../src/core/claude-theme-reader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AASjC,oEAAoE;AACpE,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAA8B,EAAE;IAEhC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;QACnD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IACE,MAAM;YACN,OAAO,MAAM,KAAK,QAAQ;YAC1B,OAAO,IAAI,MAAM;YACjB,OAAQ,MAA6B,CAAC,KAAK,KAAK,QAAQ,EACxD,CAAC;YACD,MAAM,KAAK,GAAI,MAA4B,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACzD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACzC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/server/dist/core/cli-compat.d.ts

@@ -0,0 +1,43 @@
+import { spawnSync } from "node:child_process";
+export declare const MIN_SUPPORTED_CLI = "2.1.114";
+/**
+ * Upper-bound is open-ended with a loose major cap. Anthropic bumped the
+ * minor from 2.1 → 2.2 freely historically; we trust patch + minor.
+ * Major bumps (3.x) MUST re-run the PoC before we lift the cap.
+ */
+export declare const MAX_SUPPORTED_CLI_MAJOR = 2;
+export interface ClaudeVersionInfo {
+    /** Stdout's first line, e.g. `2.1.114 (Claude Code)`. */
+    raw: string;
+    /** Extracted semver triple if we could parse one; null on garbage. */
+    parsed: {
+        major: number;
+        minor: number;
+        patch: number;
+    } | null;
+    /** True iff parsed >= MIN_SUPPORTED_CLI AND parsed.major <= MAX_SUPPORTED_CLI_MAJOR. */
+    supported: boolean;
+}
+export interface ClaudeVersionProbeDeps {
+    claudeBin?: string;
+    spawnSync?: typeof spawnSync;
+}
+/**
+ * Synchronous probe for boot-time diagnostic wiring. Uses spawnSync so it
+ * can block the very first response without async plumbing.
+ *
+ * `bin` is already absolute, so on win32 `resolveSpawn` is pure dispatch: `.exe`
+ * direct, `.cmd` through an explicit `cmd.exe /d /s /c` (ADR-044's reviewed
+ * resolver, spaced-path quoting included). Both failure shapes collapse to "no
+ * version" rather than taking the boot path down: `null` is the resolver's own
+ * "not on PATH" verdict, and the try/catch stays because `path.resolve` /
+ * `realpathSync` can still throw on a pathological input — server startup must
+ * survive either. (PR #340 factored this out as `versionProbeSpawn` and
+ * `gradeVersion` because a second, async probe shared them; that probe had no
+ * caller and is deleted, so both helpers are inlined back to their one use —
+ * iterate-2026-08-01-win32-spawn-followups.)
+ */
+export declare function probeClaudeVersion(deps?: ClaudeVersionProbeDeps): ClaudeVersionInfo;
+export declare function parseClaudeVersion(raw: string): ClaudeVersionInfo["parsed"];
+export declare function isSupported(parsed: ClaudeVersionInfo["parsed"]): boolean;
+//# sourceMappingURL=cli-compat.d.ts.map

package/server/dist/core/cli-compat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-compat.d.ts","sourceRoot":"","sources":["../../src/core/cli-compat.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAS/C,eAAO,MAAM,iBAAiB,YAAY,CAAC;AAC3C;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC,MAAM,WAAW,iBAAiB;IAChC,yDAAyD;IACzD,GAAG,EAAE,MAAM,CAAC;IACZ,sEAAsE;IACtE,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC/D,wFAAwF;IACxF,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,SAAS,CAAC;CAC9B;AAKD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,GAAE,sBAA2B,GAAG,iBAAiB,CAYvF;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAQ3E;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC,QAAQ,CAAC,GAAG,OAAO,CAUxE"}

package/server/dist/core/cli-compat.js

@@ -0,0 +1,88 @@
+/*
+ * Claude CLI version gate.
+ *
+ * MIN_SUPPORTED_CLI is the version at which every Plan D'' architectural
+ * assumption was verified by the Sub-iterate 0 PoC (see
+ * ~/.claude/plans/external-launch-poc-results.md). Anything older is
+ * unverified and should warn loudly via /api/diagnostics.
+ */
+import { spawnSync } from "node:child_process";
+import { resolveClaudeBin } from "./claude-bin-resolver.js";
+// The CORE resolver, deliberately NOT `preview-win32-spawn.js`: that module adds
+// the preview subsystem's throw and, with it, the whole preview import closure.
+// Importing it here put the boot path inside the preview ESM cycle
+// (iterate-2026-08-01-win32-spawn-followups; PR #340 deferred item 3).
+import { resolveSpawn } from "./win32-spawn.js";
+export const MIN_SUPPORTED_CLI = "2.1.114";
+/**
+ * Upper-bound is open-ended with a loose major cap. Anthropic bumped the
+ * minor from 2.1 → 2.2 freely historically; we trust patch + minor.
+ * Major bumps (3.x) MUST re-run the PoC before we lift the cap.
+ */
+export const MAX_SUPPORTED_CLI_MAJOR = 2;
+/** The "we could not tell" answer. Frozen: it is handed to every caller. */
+const UNKNOWN_VERSION = Object.freeze({ raw: "", parsed: null, supported: false });
+/**
+ * Synchronous probe for boot-time diagnostic wiring. Uses spawnSync so it
+ * can block the very first response without async plumbing.
+ *
+ * `bin` is already absolute, so on win32 `resolveSpawn` is pure dispatch: `.exe`
+ * direct, `.cmd` through an explicit `cmd.exe /d /s /c` (ADR-044's reviewed
+ * resolver, spaced-path quoting included). Both failure shapes collapse to "no
+ * version" rather than taking the boot path down: `null` is the resolver's own
+ * "not on PATH" verdict, and the try/catch stays because `path.resolve` /
+ * `realpathSync` can still throw on a pathological input — server startup must
+ * survive either. (PR #340 factored this out as `versionProbeSpawn` and
+ * `gradeVersion` because a second, async probe shared them; that probe had no
+ * caller and is deleted, so both helpers are inlined back to their one use —
+ * iterate-2026-08-01-win32-spawn-followups.)
+ */
+export function probeClaudeVersion(deps = {}) {
+    const sync = deps.spawnSync ?? spawnSync;
+    const bin = deps.claudeBin ?? resolveClaudeBin();
+    if (!bin)
+        return UNKNOWN_VERSION;
+    let plan = null;
+    try {
+        plan = resolveSpawn([bin, "--version"], process.cwd());
+    }
+    catch {
+        plan = null;
+    }
+    if (!plan)
+        return UNKNOWN_VERSION;
+    const { windowsVerbatimArguments: verbatim } = plan;
+    const result = sync(plan.command, plan.args, { encoding: "utf-8", shell: false, windowsVerbatimArguments: verbatim });
+    const raw = (result.stdout ?? "").trim().split(/\r?\n/)[0] ?? "";
+    const parsed = parseClaudeVersion(raw);
+    return { raw, parsed, supported: isSupported(parsed) };
+}
+export function parseClaudeVersion(raw) {
+    const match = /(\d+)\.(\d+)\.(\d+)/.exec(raw);
+    if (!match)
+        return null;
+    return {
+        major: Number.parseInt(match[1], 10),
+        minor: Number.parseInt(match[2], 10),
+        patch: Number.parseInt(match[3], 10),
+    };
+}
+export function isSupported(parsed) {
+    if (!parsed)
+        return false;
+    if (parsed.major > MAX_SUPPORTED_CLI_MAJOR)
+        return false;
+    const min = parseClaudeVersion(MIN_SUPPORTED_CLI);
+    if (!min)
+        return false;
+    if (parsed.major < min.major)
+        return false;
+    if (parsed.major > min.major)
+        return true;
+    if (parsed.minor < min.minor)
+        return false;
+    if (parsed.minor > min.minor)
+        return true;
+    return parsed.patch >= min.patch;
+}
+//# sourceMappingURL=cli-compat.js.map

package/server/dist/core/cli-compat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-compat.js","sourceRoot":"","sources":["../../src/core/cli-compat.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,iFAAiF;AACjF,gFAAgF;AAChF,mEAAmE;AACnE,uEAAuE;AACvE,OAAO,EAAE,YAAY,EAAsB,MAAM,kBAAkB,CAAC;AAEpE,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAAC;AAC3C;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAgBzC,4EAA4E;AAC5E,MAAM,eAAe,GAAsB,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;AAEtG;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA+B,EAAE;IAClE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,gBAAgB,EAAE,CAAC;IACjD,IAAI,CAAC,GAAG;QAAE,OAAO,eAAe,CAAC;IACjC,IAAI,IAAI,GAAyB,IAAI,CAAC;IACtC,IAAI,CAAC;QAAC,IAAI,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,GAAG,IAAI,CAAC;IAAC,CAAC;IACtF,IAAI,CAAC,IAAI;QAAE,OAAO,eAAe,CAAC;IAClC,MAAM,EAAE,wBAAwB,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtH,MAAM,GAAG,GAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAY,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7E,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACpC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACpC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAmC;IAC7D,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,MAAM,CAAC,KAAK,GAAG,uBAAuB;QAAE,OAAO,KAAK,CAAC;IACzD,MAAM,GAAG,GAAG,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;IAClD,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,IAAI,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC;AACnC,CAAC"}

package/server/dist/core/compliance-dimensions.d.ts

@@ -0,0 +1,20 @@
+export interface ComplianceDimension {
+    /** Slug of the label — stable key for React lists. */
+    key: string;
+    /** Dimension name (table column "Dimension"), e.g. "Test health". */
+    label: string;
+    /** The full "Signal" cell, verbatim — the honest detail (tooltip/modal). */
+    value: string;
+    /** Health from the row's ✅/⚠️/❌ verdict glyph; `null` when unrecognized. */
+    pct: number | null;
+    /** The "Anchor" cell — the open standard the dimension follows. */
+    doc: string;
+}
+/**
+ * Parse the Control-Verdict dimension table into structured rows. Column-driven
+ * (not positional) so a reordered producer table still resolves
+ * Dimension/Signal/Anchor by header name; the status glyph is read from
+ * whatever leading column the header did not name. Absent/malformed → `[]`.
+ */
+export declare function parseDimensions(controlVerdictMarkdown: string): ComplianceDimension[];
+//# sourceMappingURL=compliance-dimensions.d.ts.map

package/server/dist/core/compliance-dimensions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance-dimensions.d.ts","sourceRoot":"","sources":["../../src/core/compliance-dimensions.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,mBAAmB;IAClC,sDAAsD;IACtD,GAAG,EAAE,MAAM,CAAC;IACZ,qEAAqE;IACrE,KAAK,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,KAAK,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,mEAAmE;IACnE,GAAG,EAAE,MAAM,CAAC;CACb;AAiCD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,sBAAsB,EAAE,MAAM,GAAG,mBAAmB,EAAE,CAoDrF"}

package/server/dist/core/compliance-dimensions.js

@@ -0,0 +1,114 @@
+/*
+ * compliance-dimensions.ts — parse the Control-Verdict dimension table into
+ * structured sub-scores (A16, FR-01.60, campaign webui-wow-usability-2026-07-10).
+ *
+ * Split out of `compliance-reader.ts` (which stays a lean grade/verdict/slice
+ * reader under the 300-LOC ceiling): the Ship's-Log Captain's Drawer needs the
+ * dimensions as DATA, not just the raw markdown slice the detail modal renders.
+ *
+ * Honesty is the hard contract (spec AC2):
+ *   - Absent table → `[]`. Malformed table → `[]`. NEVER a throw.
+ *   - `pct` (the mini-bar height) is DERIVED FROM THE DASHBOARD'S OWN
+ *     PER-DIMENSION VERDICT (the ✅/⚠️/❌ status glyph), NOT from a fraction
+ *     scraped out of the free-text signal. Signals phrase fractions
+ *     inconsistently ("43/44 covered" is good-over-total, "1/25 not
+ *     re-verified" is bad-over-total), so a scraped ratio would render a
+ *     dishonest bar. `pct` is `null` when the glyph is unrecognized — the
+ *     consumer then shows NO bar, never a fabricated 100%.
+ */
+/**
+ * Health percentage from a Control-Verdict row's status glyph. The dashboard
+ * marks each dimension ✅ (under control) / ⚠️ (warning) / ❌ (failing); we
+ * mirror that verdict as a bar height rather than inventing a numeric score.
+ */
+function pctFromStatus(status) {
+    if (/[✅✔☑🟢]/u.test(status))
+        return 100;
+    if (/[⚠🟡🟠]/u.test(status))
+        return 60;
+    if (/[❌✖🔴⛔]/u.test(status))
+        return 25;
+    return null;
+}
+function slug(label) {
+    return label
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-+|-+$/g, "");
+}
+/** A markdown pipe-table row → trimmed cells (outer empties from the leading/
+ *  trailing `|` dropped). Returns `null` for a line that is not a table row. */
+function pipeCells(line) {
+    const trimmed = line.trim();
+    if (!trimmed.startsWith("|"))
+        return null;
+    const parts = trimmed.split("|");
+    // Leading + trailing `|` produce empty first/last members — drop them.
+    return parts.slice(1, -1).map((c) => c.trim());
+}
+const SEPARATOR_CELL_RE = /^:?-{2,}:?$/;
+/**
+ * Parse the Control-Verdict dimension table into structured rows. Column-driven
+ * (not positional) so a reordered producer table still resolves
+ * Dimension/Signal/Anchor by header name; the status glyph is read from
+ * whatever leading column the header did not name. Absent/malformed → `[]`.
+ */
+export function parseDimensions(controlVerdictMarkdown) {
+    try {
+        const lines = controlVerdictMarkdown.split("\n");
+        let headerIdx = -1;
+        let cols = [];
+        for (let i = 0; i < lines.length; i++) {
+            const cells = pipeCells(lines[i] ?? "");
+            if (!cells)
+                continue;
+            const lower = cells.map((c) => c.toLowerCase());
+            if (lower.includes("dimension") && lower.includes("signal")) {
+                headerIdx = i;
+                cols = lower;
+                break;
+            }
+        }
+        if (headerIdx === -1)
+            return [];
+        const dimIdx = cols.indexOf("dimension");
+        const sigIdx = cols.indexOf("signal");
+        const anchorIdx = cols.indexOf("anchor");
+        // The status column is the first header cell that names none of the above
+        // (the dashboard's leading glyph column has an empty header).
+        const named = new Set([dimIdx, sigIdx, anchorIdx]);
+        let statusIdx = -1;
+        for (let i = 0; i < cols.length; i++) {
+            if (!named.has(i)) {
+                statusIdx = i;
+                break;
+            }
+        }
+        const dimensions = [];
+        const seen = new Set();
+        for (let i = headerIdx + 1; i < lines.length; i++) {
+            const cells = pipeCells(lines[i] ?? "");
+            if (!cells)
+                break; // table ended (first non-`|` line)
+            if (cells.every((c) => c === "" || SEPARATOR_CELL_RE.test(c)))
+                continue; // separator
+            const label = (dimIdx >= 0 ? cells[dimIdx] : "")?.trim() ?? "";
+            if (!label)
+                continue;
+            const value = (sigIdx >= 0 ? cells[sigIdx] : "")?.trim() ?? "";
+            const doc = (anchorIdx >= 0 ? cells[anchorIdx] : "")?.trim() ?? "";
+            const status = (statusIdx >= 0 ? cells[statusIdx] : "")?.trim() ?? "";
+            let key = slug(label) || `dim-${dimensions.length}`;
+            while (seen.has(key))
+                key = `${key}-${dimensions.length}`;
+            seen.add(key);
+            dimensions.push({ key, label, value, pct: pctFromStatus(status), doc });
+        }
+        return dimensions;
+    }
+    catch {
+        // Malformed table must degrade to [] — never throw (spec AC2 / test plan).
+        return [];
+    }
+}
+//# sourceMappingURL=compliance-dimensions.js.map

package/server/dist/core/compliance-dimensions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance-dimensions.js","sourceRoot":"","sources":["../../src/core/compliance-dimensions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAeH;;;;GAIG;AACH,SAAS,aAAa,CAAC,MAAc;IACnC,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,GAAG,CAAC;IACxC,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,IAAI,CAAC,KAAa;IACzB,OAAO,KAAK;SACT,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED;gFACgF;AAChF,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,uEAAuE;IACvE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,iBAAiB,GAAG,aAAa,CAAC;AAExC;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,sBAA8B;IAC5D,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC;QACnB,IAAI,IAAI,GAAa,EAAE,CAAC;QACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YAChD,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5D,SAAS,GAAG,CAAC,CAAC;gBACd,IAAI,GAAG,KAAK,CAAC;gBACb,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,SAAS,KAAK,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QAEhC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzC,0EAA0E;QAC1E,8DAA8D;QAC9D,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;QACnD,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC;QACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClB,SAAS,GAAG,CAAC,CAAC;gBACd,MAAM;YACR,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAA0B,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,IAAI,CAAC,GAAG,SAAS,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAClD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK;gBAAE,MAAM,CAAC,mCAAmC;YACtD,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAE,SAAS,CAAC,YAAY;YACrF,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAC/D,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAC/D,MAAM,GAAG,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACnE,MAAM,MAAM,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACtE,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,UAAU,CAAC,MAAM,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,GAAG,GAAG,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YAC1D,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;QAC3E,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/server/dist/core/compliance-reader.d.ts

@@ -0,0 +1,49 @@
+import { type ComplianceDimension } from "./compliance-dimensions.js";
+export type { ComplianceDimension } from "./compliance-dimensions.js";
+export interface ComplianceData {
+    /** Control grade letter, e.g. "A", "B+", "C-". */
+    grade: string;
+    /** Numeric score out of 100. */
+    score: number;
+    /** One-line control verdict (blockquote, falling back to the grade line). */
+    verdict: string;
+    /** ISO timestamp from the dashboard's `Generated:` line ("" if absent). */
+    generatedAt: string;
+    /** Raw markdown of the "Control Verdict" section (grade + dimension table). */
+    controlVerdictMarkdown: string;
+    /** Raw markdown of the "CI Security" section ("" if the section is absent). */
+    ciSecurityMarkdown: string;
+    /**
+     * Structured Control-Verdict dimensions (A16). `[]` when the table is absent
+     * or unparseable — NEVER a throw. `controlVerdictMarkdown` is left untouched
+     * (the detail modal keeps rendering it verbatim).
+     */
+    dimensions: ComplianceDimension[];
+}
+export type ComplianceReadResult = {
+    status: "ok";
+    data: ComplianceData;
+} | {
+    status: "missing";
+} | {
+    status: "invalid";
+    reason: string;
+};
+export interface ReadComplianceDeps {
+    /** Injected for tests; defaults to fs/promises.readFile + utf-8. */
+    readFile?: (path: string) => Promise<string>;
+}
+/**
+ * Pure parse of a dashboard.md string. Mandatory for `ok`: a recognizable
+ * Control-Grade line AND a Control-Verdict section. The CI-Security section
+ * is optional (empty string when absent) so older dashboards still surface a
+ * grade. Exported for unit tests.
+ */
+export declare function parseDashboard(raw: string): ComplianceReadResult;
+/**
+ * Read + parse the project's compliance dashboard. Graceful absence: a missing
+ * file is `{status:"missing"}` (never an error). One retry on the transient
+ * Windows fs codes (EBUSY/EPERM/EACCES) the dashboard write can briefly raise.
+ */
+export declare function readCompliance(projectPath: string, deps?: ReadComplianceDeps): Promise<ComplianceReadResult>;
+//# sourceMappingURL=compliance-reader.d.ts.map

package/server/dist/core/compliance-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance-reader.d.ts","sourceRoot":"","sources":["../../src/core/compliance-reader.ts"],"names":[],"mappings":"AAyBA,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,4BAA4B,CAAC;AAEpC,YAAY,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,MAAM,WAAW,cAAc;IAC7B,kDAAkD;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,gCAAgC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,OAAO,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,sBAAsB,EAAE,MAAM,CAAC;IAC/B,+EAA+E;IAC/E,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,UAAU,EAAE,mBAAmB,EAAE,CAAC;CACnC;AAED,MAAM,MAAM,oBAAoB,GAC5B;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,cAAc,CAAA;CAAE,GACtC;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1C,MAAM,WAAW,kBAAkB;IACjC,oEAAoE;IACpE,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CAC9C;AAiDD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,oBAAoB,CAyChE;AAWD;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,WAAW,EAAE,MAAM,EACnB,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,oBAAoB,CAAC,CAqB/B"}

package/server/dist/core/compliance-reader.js

@@ -0,0 +1,147 @@
+/*
+ * compliance-reader.ts — read-only observer of
+ * `<projectPath>/.shipwright/compliance/dashboard.md`.
+ *
+ * The Control Grade + one-line verdict + the Dimension/Signal/Anchor table
+ * + the CI-Security block live ONLY in that machine-generated markdown — there
+ * is no JSON form. WebUI never writes it (CLAUDE.md rule 12 spirit: the
+ * shipwright-compliance plugin owns every mutation; we only read).
+ *
+ * `parseDashboard` is pure (exported for tests): it pulls the small structured
+ * fields (grade / score / verdict / generatedAt) used by the badge + tooltip,
+ * AND slices the raw markdown of the "Control Verdict" and "CI Security"
+ * sections for the detail modal — which the client renders verbatim with its
+ * existing react-markdown + remark-gfm stack. We deliberately DO NOT model the
+ * table as structured data, and we slice to those two sections so the trailing
+ * "Compliance Artifacts" links table (relative links, dead in-browser) never
+ * reaches the UI.
+ *
+ * Forward-compat seam: a future producer `dashboard.json` can slot in behind
+ * `readCompliance` without touching the client.
+ */
+import { readFile as fsReadFile } from "node:fs/promises";
+import { join } from "node:path";
+import { parseDimensions, } from "./compliance-dimensions.js";
+const DASHBOARD_REL_PATH = [".shipwright", "compliance", "dashboard.md"];
+const RETRYABLE_FS_CODES = new Set(["EBUSY", "EPERM", "EACCES"]);
+// `### Control Grade: **A** (99/100) — Under full control.`
+// Leading whitespace is tolerated — the dashboard is produced out-of-repo, so
+// the parser stays lenient about markdown indentation at the boundary.
+const GRADE_RE = /^[ \t]*#{1,6}\s*Control Grade:\s*\*\*\s*([A-F][+-]?)\s*\*\*\s*\(\s*(\d{1,3})\s*\/\s*100\s*\)\s*(?:[—–-]\s*(.+?))?\s*$/m;
+const GENERATED_RE = /^[ \t]*Generated:\s*(\S+)/m;
+// First bolded blockquote line, e.g. `> **Under full control. …**`.
+const BLOCKQUOTE_VERDICT_RE = /^[ \t]*>\s*\*\*(.+?)\*\*\s*$/m;
+/** Split markdown into level-2 (`## `) sections, header line included. */
+function splitLevel2Sections(raw) {
+    const lines = raw.split("\n");
+    const headerIdx = [];
+    let inFence = false;
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i] ?? "";
+        // Toggle fenced-code state on ``` / ~~~ fences so a `## ` line INSIDE a code
+        // block is not mistaken for a section boundary (the producer is out-of-repo;
+        // the slice contract should survive fenced content).
+        if (/^[ \t]*(```|~~~)/.test(line)) {
+            inFence = !inFence;
+            continue;
+        }
+        // `## ` (exactly level-2, leading whitespace tolerated). `### ` etc. do not
+        // match — the 3rd char is `#`, not whitespace.
+        if (!inFence && /^[ \t]*##\s+\S/.test(line))
+            headerIdx.push(i);
+    }
+    const sections = [];
+    for (let h = 0; h < headerIdx.length; h++) {
+        const start = headerIdx[h];
+        const end = headerIdx[h + 1] ?? lines.length;
+        const title = (lines[start] ?? "").replace(/^[ \t]*##\s+/, "").trim();
+        sections.push({ title, markdown: lines.slice(start, end).join("\n").trim() });
+    }
+    return sections;
+}
+/**
+ * Pure parse of a dashboard.md string. Mandatory for `ok`: a recognizable
+ * Control-Grade line AND a Control-Verdict section. The CI-Security section
+ * is optional (empty string when absent) so older dashboards still surface a
+ * grade. Exported for unit tests.
+ */
+export function parseDashboard(raw) {
+    if (!raw.trim())
+        return { status: "invalid", reason: "empty dashboard" };
+    const gradeMatch = GRADE_RE.exec(raw);
+    if (!gradeMatch) {
+        return { status: "invalid", reason: "Control Grade line not found" };
+    }
+    const grade = gradeMatch[1];
+    const score = Number.parseInt(gradeMatch[2], 10);
+    if (!Number.isFinite(score) || score < 0 || score > 100) {
+        return { status: "invalid", reason: `score out of range: ${gradeMatch[2]}` };
+    }
+    const gradeLineVerdict = gradeMatch[3]?.trim() ?? "";
+    const sections = splitLevel2Sections(raw);
+    const controlSection = sections.find((s) => /control verdict/i.test(s.title));
+    if (!controlSection) {
+        return { status: "invalid", reason: "Control Verdict section not found" };
+    }
+    const ciSection = sections.find((s) => /ci security/i.test(s.title));
+    const blockquote = BLOCKQUOTE_VERDICT_RE.exec(controlSection.markdown);
+    const verdict = (blockquote?.[1]?.trim() || gradeLineVerdict || "").trim();
+    const generated = GENERATED_RE.exec(raw);
+    return {
+        status: "ok",
+        data: {
+            grade,
+            score,
+            verdict,
+            generatedAt: generated?.[1]?.trim() ?? "",
+            controlVerdictMarkdown: controlSection.markdown,
+            ciSecurityMarkdown: ciSection?.markdown ?? "",
+            // A16 (FR-01.60) — structured sub-scores for the Ship's-Log Captain's
+            // Drawer. Additive: `controlVerdictMarkdown` above is left untouched, so
+            // the detail modal keeps rendering the table verbatim. `[]` when absent.
+            dimensions: parseDimensions(controlSection.markdown),
+        },
+    };
+}
+function isRetryable(err) {
+    const code = err?.code;
+    return Boolean(code && RETRYABLE_FS_CODES.has(code));
+}
+function isNotFound(err) {
+    return err?.code === "ENOENT";
+}
+/**
+ * Read + parse the project's compliance dashboard. Graceful absence: a missing
+ * file is `{status:"missing"}` (never an error). One retry on the transient
+ * Windows fs codes (EBUSY/EPERM/EACCES) the dashboard write can briefly raise.
+ */
+export async function readCompliance(projectPath, deps = {}) {
+    const path = join(projectPath, ...DASHBOARD_REL_PATH);
+    const read = deps.readFile ?? ((p) => fsReadFile(p, "utf-8"));
+    let raw;
+    try {
+        raw = await read(path);
+    }
+    catch (err) {
+        if (isNotFound(err))
+            return { status: "missing" };
+        if (isRetryable(err)) {
+            try {
+                raw = await read(path);
+            }
+            catch (err2) {
+                if (isNotFound(err2))
+                    return { status: "missing" };
+                return { status: "invalid", reason: `read failed: ${stringifyErr(err2)}` };
+            }
+        }
+        else {
+            return { status: "invalid", reason: `read failed: ${stringifyErr(err)}` };
+        }
+    }
+    return parseDashboard(raw);
+}
+function stringifyErr(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+//# sourceMappingURL=compliance-reader.js.map

package/server/dist/core/compliance-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance-reader.js","sourceRoot":"","sources":["../../src/core/compliance-reader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EACL,eAAe,GAEhB,MAAM,4BAA4B,CAAC;AAmCpC,MAAM,kBAAkB,GAAG,CAAC,aAAa,EAAE,YAAY,EAAE,cAAc,CAAU,CAAC;AAElF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEjE,4DAA4D;AAC5D,8EAA8E;AAC9E,uEAAuE;AACvE,MAAM,QAAQ,GACZ,wHAAwH,CAAC;AAC3H,MAAM,YAAY,GAAG,4BAA4B,CAAC;AAClD,oEAAoE;AACpE,MAAM,qBAAqB,GAAG,+BAA+B,CAAC;AAQ9D,0EAA0E;AAC1E,SAAS,mBAAmB,CAAC,GAAW;IACtC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,6EAA6E;QAC7E,6EAA6E;QAC7E,qDAAqD;QACrD,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,OAAO,GAAG,CAAC,OAAO,CAAC;YACnB,SAAS;QACX,CAAC;QACD,4EAA4E;QAC5E,+CAA+C;QAC/C,IAAI,CAAC,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC;QAC7C,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtE,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAEzE,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IACvE,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QACxD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,uBAAuB,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC/E,CAAC;IACD,MAAM,gBAAgB,GAAG,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAErD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9E,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IAC5E,CAAC;IACD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAErE,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,gBAAgB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAE3E,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEzC,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,IAAI,EAAE;YACJ,KAAK;YACL,KAAK;YACL,OAAO;YACP,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;YACzC,sBAAsB,EAAE,cAAc,CAAC,QAAQ;YAC/C,kBAAkB,EAAE,SAAS,EAAE,QAAQ,IAAI,EAAE;YAC7C,sEAAsE;YACtE,yEAAyE;YACzE,yEAAyE;YACzE,UAAU,EAAE,eAAe,CAAC,cAAc,CAAC,QAAQ,CAAC;SACrD;KACF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,GAAY;IAC/B,MAAM,IAAI,GAAI,GAAyC,EAAE,IAAI,CAAC;IAC9D,OAAO,OAAO,CAAC,IAAI,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,UAAU,CAAC,GAAY;IAC9B,OAAQ,GAAyC,EAAE,IAAI,KAAK,QAAQ,CAAC;AACvE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,WAAmB,EACnB,OAA2B,EAAE;IAE7B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,kBAAkB,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAEtE,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAClD,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;YAAC,OAAO,IAAI,EAAE,CAAC;gBACd,IAAI,UAAU,CAAC,IAAI,CAAC;oBAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;gBACnD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,gBAAgB,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YAC7E,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,gBAAgB,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QAC5E,CAAC;IACH,CAAC;IACD,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC"}