@svenroth-ai/shipwright 0.24.1-next.0

package/server/dist/core/contract-version.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Cross-repo contract version check.
+ *
+ * The WebUI reads JSON artefacts that are written by the Shipwright
+ * plugins (a *different* repo once the split lands). To make silent
+ * schema drift visible we stamp each cross-repo artefact with a
+ * `contractVersion` / `schemaVersion` integer that the WebUI compares
+ * against a library-side "known max".
+ *
+ * Intentionally fail-soft: an unknown-higher version logs a warning
+ * and the caller proceeds. Failing the read would lock users out of
+ * otherwise-functioning projects just because their plugin side is
+ * newer than the observer — the opposite of what the WebUI should do.
+ */
+/**
+ * Highest `contractVersion` this WebUI build knows how to read for
+ * `shipwright_run_config.json`. Bump in lockstep with the plugin
+ * writer (plugins/shipwright-project/scripts/write_run_config.py).
+ */
+export declare const RUN_CONFIG_CONTRACT_VERSION = 1;
+/**
+ * Highest `schemaVersion` this WebUI build knows how to read for
+ * `<project>/.shipwright-webui/actions.json`.
+ */
+export declare const ACTIONS_SCHEMA_VERSION = 1;
+/**
+ * Highest schema version this WebUI build knows how to parse for the
+ * stack-profile JSON envelope (the shape of files in
+ * `server/profiles/*.json` or `shared/profiles/*.json`). Compared
+ * against the integer content of `<profilesDir>/PROFILE_SCHEMA_VERSION`
+ * when present.
+ */
+export declare const PROFILE_SCHEMA_VERSION = 1;
+/**
+ * Highest `schema_version` this WebUI build knows how to read for the
+ * test-traceability manifest (`.shipwright/compliance/test-traceability.json`),
+ * produced by the shipwright plugins. Bump in lockstep with the manifest
+ * collector when its shape changes in a way the WebUI relies on.
+ *
+ * **v3** — the manifest namespace now derives from the requirement id, so the
+ * composite outer key moved from `01-adopted::FR-01.01` to `01::FR-01.01`
+ * (shipwright monorepo: "derive the traceability namespace from the FR id").
+ * Every INNER field is unchanged, and this reader never reads the outer key
+ * (it consumes `Object.values(requirements)` then inner `.id`/`.tests`), so v3
+ * is a pure data-shape acknowledgement — no reader-logic change.
+ *
+ * A manifest declaring a HIGHER version is warned once (via
+ * `checkContractVersion`) and still read best-effort — the inner shape the
+ * reader consumes has been stable across the bumps seen so far, so an
+ * ahead-of-us manifest still yields a useful index.
+ */
+export declare const TRACEABILITY_SCHEMA_VERSION = 3;
+/**
+ * Check a parsed artefact's declared version against the library's
+ * known max. Logs one JSON warning per (artefact, path, version)
+ * triple; subsequent calls with the same triple stay silent so we
+ * don't spam the log.
+ *
+ * Returns `true` when the version is within the known range (the
+ * common case); `false` when a warning was emitted. Callers use the
+ * return value only for testability — production code ignores it.
+ */
+export declare function checkContractVersion(input: {
+    artefact: string;
+    path: string;
+    declared: unknown;
+    knownMax: number;
+    fieldName?: string;
+}): boolean;
+/** Test helper — reset the one-shot warn memo between tests. */
+export declare function _resetWarnMemo(): void;
+//# sourceMappingURL=contract-version.d.ts.map

package/server/dist/core/contract-version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-version.d.ts","sourceRoot":"","sources":["../../src/core/contract-version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAE7C;;;GAGG;AACH,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAc7C;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAmDV;AAED,gEAAgE;AAChE,wBAAgB,cAAc,IAAI,IAAI,CAErC"}

package/server/dist/core/contract-version.js

@@ -0,0 +1,114 @@
+/**
+ * Cross-repo contract version check.
+ *
+ * The WebUI reads JSON artefacts that are written by the Shipwright
+ * plugins (a *different* repo once the split lands). To make silent
+ * schema drift visible we stamp each cross-repo artefact with a
+ * `contractVersion` / `schemaVersion` integer that the WebUI compares
+ * against a library-side "known max".
+ *
+ * Intentionally fail-soft: an unknown-higher version logs a warning
+ * and the caller proceeds. Failing the read would lock users out of
+ * otherwise-functioning projects just because their plugin side is
+ * newer than the observer — the opposite of what the WebUI should do.
+ */
+/**
+ * Highest `contractVersion` this WebUI build knows how to read for
+ * `shipwright_run_config.json`. Bump in lockstep with the plugin
+ * writer (plugins/shipwright-project/scripts/write_run_config.py).
+ */
+export const RUN_CONFIG_CONTRACT_VERSION = 1;
+/**
+ * Highest `schemaVersion` this WebUI build knows how to read for
+ * `<project>/.shipwright-webui/actions.json`.
+ */
+export const ACTIONS_SCHEMA_VERSION = 1;
+/**
+ * Highest schema version this WebUI build knows how to parse for the
+ * stack-profile JSON envelope (the shape of files in
+ * `server/profiles/*.json` or `shared/profiles/*.json`). Compared
+ * against the integer content of `<profilesDir>/PROFILE_SCHEMA_VERSION`
+ * when present.
+ */
+export const PROFILE_SCHEMA_VERSION = 1;
+/**
+ * Highest `schema_version` this WebUI build knows how to read for the
+ * test-traceability manifest (`.shipwright/compliance/test-traceability.json`),
+ * produced by the shipwright plugins. Bump in lockstep with the manifest
+ * collector when its shape changes in a way the WebUI relies on.
+ *
+ * **v3** — the manifest namespace now derives from the requirement id, so the
+ * composite outer key moved from `01-adopted::FR-01.01` to `01::FR-01.01`
+ * (shipwright monorepo: "derive the traceability namespace from the FR id").
+ * Every INNER field is unchanged, and this reader never reads the outer key
+ * (it consumes `Object.values(requirements)` then inner `.id`/`.tests`), so v3
+ * is a pure data-shape acknowledgement — no reader-logic change.
+ *
+ * A manifest declaring a HIGHER version is warned once (via
+ * `checkContractVersion`) and still read best-effort — the inner shape the
+ * reader consumes has been stable across the bumps seen so far, so an
+ * ahead-of-us manifest still yields a useful index.
+ */
+export const TRACEABILITY_SCHEMA_VERSION = 3;
+const warnedOnce = new Set();
+function warnKey(k) {
+    return `${k.artefact}::${k.path}::${k.observedVersion}`;
+}
+/**
+ * Check a parsed artefact's declared version against the library's
+ * known max. Logs one JSON warning per (artefact, path, version)
+ * triple; subsequent calls with the same triple stay silent so we
+ * don't spam the log.
+ *
+ * Returns `true` when the version is within the known range (the
+ * common case); `false` when a warning was emitted. Callers use the
+ * return value only for testability — production code ignores it.
+ */
+export function checkContractVersion(input) {
+    const { artefact, path, declared, knownMax, fieldName = "contractVersion" } = input;
+    // Undefined/missing is fine — contract versions only landed in v0.3.2;
+    // older artefacts on disk won't have them, and that's the whole point
+    // of "fail-soft": keep reading.
+    if (declared === undefined || declared === null)
+        return true;
+    if (typeof declared !== "number" || !Number.isInteger(declared)) {
+        // Not a blocker either — but emit once so we notice corruption.
+        const k = warnKey({ artefact, path, observedVersion: -1 });
+        if (!warnedOnce.has(k)) {
+            warnedOnce.add(k);
+            console.warn(JSON.stringify({
+                level: "warn",
+                event: "contract_version_malformed",
+                artefact,
+                path,
+                field: fieldName,
+                declared: String(declared).slice(0, 64),
+            }));
+        }
+        return false;
+    }
+    if (declared > knownMax) {
+        const k = warnKey({ artefact, path, observedVersion: declared });
+        if (!warnedOnce.has(k)) {
+            warnedOnce.add(k);
+            console.warn(JSON.stringify({
+                level: "warn",
+                event: "contract_version_ahead",
+                artefact,
+                path,
+                field: fieldName,
+                declared,
+                knownMax,
+                hint: "WebUI build is older than the plugin side. Reading proceeds; " +
+                    "unknown fields are ignored. Update the WebUI if behaviour drifts.",
+            }));
+        }
+        return false;
+    }
+    return true;
+}
+/** Test helper — reset the one-shot warn memo between tests. */
+export function _resetWarnMemo() {
+    warnedOnce.clear();
+}
+//# sourceMappingURL=contract-version.js.map

package/server/dist/core/contract-version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-version.js","sourceRoot":"","sources":["../../src/core/contract-version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC;AAE7C;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAExC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAExC;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC;AAQ7C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;AAErC,SAAS,OAAO,CAAC,CAAc;IAC7B,OAAO,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,eAAe,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAMpC;IACC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,GAAG,iBAAiB,EAAE,GACzE,KAAK,CAAC;IAER,uEAAuE;IACvE,sEAAsE;IACtE,gCAAgC;IAChC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAE7D,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChE,gEAAgE;QAChE,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAClB,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,4BAA4B;gBACnC,QAAQ;gBACR,IAAI;gBACJ,KAAK,EAAE,SAAS;gBAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;aACxC,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,QAAQ,GAAG,QAAQ,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAClB,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,wBAAwB;gBAC/B,QAAQ;gBACR,IAAI;gBACJ,KAAK,EAAE,SAAS;gBAChB,QAAQ;gBACR,QAAQ;gBACR,IAAI,EACF,+DAA+D;oBAC/D,mEAAmE;aACtE,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,cAAc;IAC5B,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC"}

package/server/dist/core/design-feedback.d.ts

@@ -0,0 +1,29 @@
+/**
+ * True when line 1 IS the round heading the viewer emits (contract guard). This
+ * is deliberately the SAME shape {@link normalizeRoundHeading} rewrites and is
+ * anchored to the first line, so a body that passes here is guaranteed to
+ * normalize AND the (non-global) heading rewrite lands on line 1 — never on a
+ * "Round N" buried in a note/history block (review #2).
+ */
+export declare function looksLikeDesignFeedback(markdown: string): boolean;
+/** Round number encoded in a file name, or null when it is not a round file. */
+export declare function roundOfFileName(name: string): number | null;
+/**
+ * Next round number = max(existing round on disk) + 1 (AC3). Non-round files
+ * are ignored; comparison is numeric (round10 > round2); an empty / round-less
+ * directory yields 1.
+ */
+export declare function computeNextRound(fileNames: readonly string[]): number;
+/**
+ * The canonical round file name for round `n`. `n` is a server-computed
+ * integer, so the name is injection-free by construction.
+ */
+export declare function roundFileName(n: number): string;
+/**
+ * Rewrite the heading's round integer to `round`, preserving the dash style and
+ * every other byte. If no heading is present the input is returned unchanged
+ * (the write route rejects a non-contract body upstream via
+ * {@link looksLikeDesignFeedback}).
+ */
+export declare function normalizeRoundHeading(markdown: string, round: number): string;
+//# sourceMappingURL=design-feedback.d.ts.map

package/server/dist/core/design-feedback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"design-feedback.d.ts","sourceRoot":"","sources":["../../src/core/design-feedback.ts"],"names":[],"mappings":"AAkCA;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAGjE;AAED,gFAAgF;AAChF,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK3D;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAOrE;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAM7E"}

package/server/dist/core/design-feedback.js

@@ -0,0 +1,80 @@
+/*
+ * core/design-feedback.ts — pure helpers for the single-session design-gate
+ * feedback round file (iterate-2026-07-10-design-gate-review-host, FR-01.45).
+ *
+ * The design phase's emitted review viewer (`.shipwright/designs/index.html`)
+ * already generates a contract-shaped feedback markdown; the WebUI HOSTS that
+ * viewer and, on Export, writes it straight into the worktree. Two invariants
+ * the viewer alone cannot satisfy live here, both pure + unit-tested:
+ *
+ *   1. `computeNextRound` — the round number N is derived from the round FILES
+ *      that already exist on disk, NOT the viewer's localStorage counter
+ *      (which resets across sessions/machines). AC3.
+ *   2. `normalizeRoundHeading` — rewrite ONLY the heading's round integer to N,
+ *      preserving every other byte (incl. the em-dash) so the monorepo Option-B
+ *      reader still parses the file. AC4.
+ *
+ * These are the sole transforms the server applies; the per-screen / per-split
+ * body is passed through verbatim.
+ */
+/** `design-feedback-round<N>.md` (case-insensitive), capturing N. */
+const ROUND_FILE_RE = /^design-feedback-round(\d+)\.md$/i;
+/**
+ * The first-line feedback heading the viewer emits:
+ * `# Design Feedback — Round <N>`. The dash class accepts em-dash (— —,
+ * what the viewer emits), en-dash (– –) and hyphen-minus (-) so a
+ * hand-edited or variant file still normalizes. `/m` anchors to a line; NO `/g`
+ * → only the FIRST heading is touched (never a "Round N" inside free-text notes
+ * or a history block).
+ */
+const ROUND_HEADING_RE = /^(#\s+Design Feedback\s*[—–-]\s*Round\s+)(\d+)(.*)$/m;
+/**
+ * True when line 1 IS the round heading the viewer emits (contract guard). This
+ * is deliberately the SAME shape {@link normalizeRoundHeading} rewrites and is
+ * anchored to the first line, so a body that passes here is guaranteed to
+ * normalize AND the (non-global) heading rewrite lands on line 1 — never on a
+ * "Round N" buried in a note/history block (review #2).
+ */
+export function looksLikeDesignFeedback(markdown) {
+    const firstLine = markdown.split(/\r?\n/, 1)[0] ?? "";
+    return /^#\s+Design Feedback\s*[—–-]\s*Round\s+\d+/.test(firstLine);
+}
+/** Round number encoded in a file name, or null when it is not a round file. */
+export function roundOfFileName(name) {
+    const m = ROUND_FILE_RE.exec(name);
+    if (!m)
+        return null;
+    const n = Number.parseInt(m[1], 10);
+    return Number.isSafeInteger(n) && n >= 1 ? n : null;
+}
+/**
+ * Next round number = max(existing round on disk) + 1 (AC3). Non-round files
+ * are ignored; comparison is numeric (round10 > round2); an empty / round-less
+ * directory yields 1.
+ */
+export function computeNextRound(fileNames) {
+    let max = 0;
+    for (const name of fileNames) {
+        const n = roundOfFileName(name);
+        if (n !== null && n > max)
+            max = n;
+    }
+    return max + 1;
+}
+/**
+ * The canonical round file name for round `n`. `n` is a server-computed
+ * integer, so the name is injection-free by construction.
+ */
+export function roundFileName(n) {
+    return `design-feedback-round${n}.md`;
+}
+/**
+ * Rewrite the heading's round integer to `round`, preserving the dash style and
+ * every other byte. If no heading is present the input is returned unchanged
+ * (the write route rejects a non-contract body upstream via
+ * {@link looksLikeDesignFeedback}).
+ */
+export function normalizeRoundHeading(markdown, round) {
+    return markdown.replace(ROUND_HEADING_RE, (_full, prefix, _n, suffix) => `${prefix}${round}${suffix}`);
+}
+//# sourceMappingURL=design-feedback.js.map

package/server/dist/core/design-feedback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"design-feedback.js","sourceRoot":"","sources":["../../src/core/design-feedback.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,qEAAqE;AACrE,MAAM,aAAa,GAAG,mCAAmC,CAAC;AAE1D;;;;;;;GAOG;AACH,MAAM,gBAAgB,GACpB,sDAAsD,CAAC;AAEzD;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,OAAO,4CAA4C,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACtE,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAA4B;IAC3D,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,GAAG;YAAE,GAAG,GAAG,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,GAAG,GAAG,CAAC,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,CAAS;IACrC,OAAO,wBAAwB,CAAC,KAAK,CAAC;AACxC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,KAAa;IACnE,OAAO,QAAQ,CAAC,OAAO,CACrB,gBAAgB,EAChB,CAAC,KAAK,EAAE,MAAc,EAAE,EAAU,EAAE,MAAc,EAAE,EAAE,CACpD,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,EAAE,CAC/B,CAAC;AACJ,CAAC"}

package/server/dist/core/dismissed-campaigns-store.d.ts

@@ -0,0 +1,45 @@
+export interface DismissedStoreDeps {
+    /** Optional proper-lockfile wrapper; omitted in unit tests that don't
+     *  exercise the lock. Production wires the collision-safe `.weblock` lock. */
+    lock?: (p: string) => Promise<() => Promise<void>>;
+}
+/**
+ * The narrow surface the campaigns route depends on. Lets route tests inject a
+ * fake (e.g. one whose `dismiss` throws ELOCKED) without a real file/lock.
+ */
+export interface DismissedCampaignsApi {
+    listDismissed(projectId: string): Set<string>;
+    dismiss(projectId: string, slug: string): Promise<void>;
+    restore(projectId: string, slug: string): Promise<void>;
+}
+export declare class DismissedCampaignsStore implements DismissedCampaignsApi {
+    private readonly path;
+    private readonly deps;
+    constructor(filePath: string, deps?: DismissedStoreDeps);
+    /** Lock-free tolerant read of the dismissed slugs for one project. */
+    listDismissed(projectId: string): Set<string>;
+    isDismissed(projectId: string, slug: string): boolean;
+    /** Hide a campaign from the board. Idempotent. */
+    dismiss(projectId: string, slug: string): Promise<void>;
+    /** Un-hide a previously dismissed campaign. Idempotent. */
+    restore(projectId: string, slug: string): Promise<void>;
+    /** Tolerant read: missing / unreadable / corrupt / wrong-shape → empty. */
+    private readRaw;
+    /**
+     * Locked read-modify-write. The set mutation runs INSIDE the lock so two
+     * concurrent writers can't lose each other's change. Writes only when the set
+     * actually changed (idempotent dismiss/restore touch nothing). The lock is
+     * always released, even when the write throws.
+     */
+    private mutate;
+    /** Create the parent dir + an empty file so proper-lockfile can lstat it. */
+    private ensureFile;
+}
+/**
+ * Memoized store rooted at `${registryDir}/dismissed-campaigns.json` with the
+ * collision-safe `.weblock` lock. The campaigns route resolves this lazily so
+ * `index.ts` (a grandfathered bloat-baseline file) needs no wiring change; tests
+ * inject their own store instead of calling this.
+ */
+export declare function getDefaultDismissedStore(): DismissedCampaignsStore;
+//# sourceMappingURL=dismissed-campaigns-store.d.ts.map

package/server/dist/core/dismissed-campaigns-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dismissed-campaigns-store.d.ts","sourceRoot":"","sources":["../../src/core/dismissed-campaigns-store.ts"],"names":[],"mappings":"AA2CA,MAAM,WAAW,kBAAkB;IACjC;kFAC8E;IAC9E,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;CACpD;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9C,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzD;AAMD,qBAAa,uBAAwB,YAAW,qBAAqB;IACnE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAqB;gBAE9B,QAAQ,EAAE,MAAM,EAAE,IAAI,GAAE,kBAAuB;IAK3D,sEAAsE;IACtE,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAK7C,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAIrD,kDAAkD;IAC5C,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7D,2DAA2D;IACrD,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ7D,2EAA2E;IAC3E,OAAO,CAAC,OAAO;IAyBf;;;;;OAKG;YACW,MAAM;IAyBpB,6EAA6E;IAC7E,OAAO,CAAC,UAAU;CAKnB;AAMD;;;;;GAKG;AACH,wBAAgB,wBAAwB,IAAI,uBAAuB,CAMlE"}

package/server/dist/core/dismissed-campaigns-store.js

@@ -0,0 +1,147 @@
+/*
+ * dismissed-campaigns-store.ts — webui-owned "board quittance" for campaigns.
+ *
+ * A campaign whose planning dir is gitignored/cleaned up surfaces on the board
+ * purely from the tracked event log (the `derivedFromEvents` SYNTHESIZE path in
+ * `campaign-events.ts`). Such a card can NEVER auto-hide — events reveal only
+ * completed sub-iterates, never whether pending ones remain — so a genuinely
+ * finished campaign lingers forever. This store records an operator's manual
+ * "Erledigt" acknowledgment so the board can hide it (reversible via restore).
+ *
+ * IMPORTANT — this is NOT a producer status write. WebUI is read-only on
+ * campaign / run-config producer state (CLAUDE.md DO-NOT #12); we do NOT write
+ * `status: complete` into any `.shipwright/.../campaigns/<slug>/`. The automatic
+ * counterpart (a producer-emitted terminal `campaign_completed` event) is
+ * tracked as monorepo triage trg-7580f4fe and will feed the same client gate.
+ *
+ * Persistence: a single JSON file in the webui registry dir
+ * (`${registryDir}/dismissed-campaigns.json`), beside `sdk-sessions.json`, keyed
+ * by `projectId` → list of dismissed campaign slugs. NOT in any target project
+ * repo, NOT in a worktree.
+ *
+ *   { "schemaVersion": 1, "dismissed": { "<projectId>": ["<slug>", …] } }
+ *
+ * Reads are lock-free + tolerant (the board annotation polls at 3 s; a torn read
+ * of a half-written file → empty set → self-heals next poll). Mutations
+ * (dismiss / restore) are a locked read-modify-write via `proper-lockfile`
+ * (multi-writer rule, CLAUDE.md DO-NOT #6), mirroring `SdkSessionsStore.persist`.
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import path from "node:path";
+import { getConfig } from "../config.js";
+import { createTriageLock } from "./triage-lock.js";
+const SCHEMA_VERSION = 1;
+function emptyFile() {
+    return { schemaVersion: SCHEMA_VERSION, dismissed: {} };
+}
+export class DismissedCampaignsStore {
+    path;
+    deps;
+    constructor(filePath, deps = {}) {
+        this.path = filePath;
+        this.deps = deps;
+    }
+    /** Lock-free tolerant read of the dismissed slugs for one project. */
+    listDismissed(projectId) {
+        const slugs = this.readRaw().dismissed[projectId];
+        return new Set(Array.isArray(slugs) ? slugs.filter((s) => typeof s === "string") : []);
+    }
+    isDismissed(projectId, slug) {
+        return this.listDismissed(projectId).has(slug);
+    }
+    /** Hide a campaign from the board. Idempotent. */
+    async dismiss(projectId, slug) {
+        await this.mutate(projectId, (set) => set.add(slug));
+    }
+    /** Un-hide a previously dismissed campaign. Idempotent. */
+    async restore(projectId, slug) {
+        await this.mutate(projectId, (set) => {
+            set.delete(slug);
+        });
+    }
+    // -- internals ----------------------------------------------------------
+    /** Tolerant read: missing / unreadable / corrupt / wrong-shape → empty. */
+    readRaw() {
+        if (!existsSync(this.path))
+            return emptyFile();
+        let text;
+        try {
+            text = readFileSync(this.path, "utf-8");
+        }
+        catch {
+            return emptyFile();
+        }
+        if (!text.trim())
+            return emptyFile();
+        let parsed;
+        try {
+            parsed = JSON.parse(text);
+        }
+        catch {
+            return emptyFile();
+        }
+        if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+            return emptyFile();
+        }
+        const dismissed = parsed.dismissed;
+        if (typeof dismissed !== "object" || dismissed === null || Array.isArray(dismissed)) {
+            return emptyFile();
+        }
+        return { schemaVersion: SCHEMA_VERSION, dismissed: dismissed };
+    }
+    /**
+     * Locked read-modify-write. The set mutation runs INSIDE the lock so two
+     * concurrent writers can't lose each other's change. Writes only when the set
+     * actually changed (idempotent dismiss/restore touch nothing). The lock is
+     * always released, even when the write throws.
+     */
+    async mutate(projectId, fn) {
+        this.ensureFile();
+        const release = this.deps.lock ? await this.deps.lock(this.path) : null;
+        try {
+            const data = this.readRaw();
+            const before = new Set(Array.isArray(data.dismissed[projectId]) ? data.dismissed[projectId] : []);
+            const set = new Set(before);
+            fn(set);
+            if (set.size === before.size && [...set].every((s) => before.has(s))) {
+                return; // no change → no write
+            }
+            if (set.size === 0) {
+                delete data.dismissed[projectId];
+            }
+            else {
+                data.dismissed[projectId] = [...set];
+            }
+            data.schemaVersion = SCHEMA_VERSION;
+            writeFileSync(this.path, JSON.stringify(data, null, 2));
+        }
+        finally {
+            if (release)
+                await release();
+        }
+    }
+    /** Create the parent dir + an empty file so proper-lockfile can lstat it. */
+    ensureFile() {
+        const dirName = path.dirname(this.path);
+        if (!existsSync(dirName))
+            mkdirSync(dirName, { recursive: true });
+        if (!existsSync(this.path))
+            writeFileSync(this.path, "");
+    }
+}
+// -- default singleton --------------------------------------------------------
+let defaultStore = null;
+/**
+ * Memoized store rooted at `${registryDir}/dismissed-campaigns.json` with the
+ * collision-safe `.weblock` lock. The campaigns route resolves this lazily so
+ * `index.ts` (a grandfathered bloat-baseline file) needs no wiring change; tests
+ * inject their own store instead of calling this.
+ */
+export function getDefaultDismissedStore() {
+    if (!defaultStore) {
+        const filePath = path.join(getConfig().registryDir, "dismissed-campaigns.json");
+        defaultStore = new DismissedCampaignsStore(filePath, { lock: createTriageLock() });
+    }
+    return defaultStore;
+}
+//# sourceMappingURL=dismissed-campaigns-store.js.map

package/server/dist/core/dismissed-campaigns-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dismissed-campaigns-store.js","sourceRoot":"","sources":["../../src/core/dismissed-campaigns-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,MAAM,cAAc,GAAG,CAAU,CAAC;AAwBlC,SAAS,SAAS;IAChB,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,OAAO,uBAAuB;IACjB,IAAI,CAAS;IACb,IAAI,CAAqB;IAE1C,YAAY,QAAgB,EAAE,OAA2B,EAAE;QACzD,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,sEAAsE;IACtE,aAAa,CAAC,SAAiB;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAClD,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,WAAW,CAAC,SAAiB,EAAE,IAAY;QACzC,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,OAAO,CAAC,SAAiB,EAAE,IAAY;QAC3C,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,2DAA2D;IAC3D,KAAK,CAAC,OAAO,CAAC,SAAiB,EAAE,IAAY;QAC3C,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;YACnC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,0EAA0E;IAE1E,2EAA2E;IACnE,OAAO;QACb,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,EAAE,CAAC;QAC/C,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,SAAS,EAAE,CAAC;QACrC,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC;QACD,MAAM,SAAS,GAAI,MAAwB,CAAC,SAAS,CAAC;QACtD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YACpF,OAAO,SAAS,EAAE,CAAC;QACrB,CAAC;QACD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,SAAqC,EAAE,CAAC;IAC7F,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,EAA8B;QACpE,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAC1E,CAAC;YACF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;YAC5B,EAAE,CAAC,GAAG,CAAC,CAAC;YACR,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrE,OAAO,CAAC,uBAAuB;YACjC,CAAC;YACD,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBACnB,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACnC,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;YACvC,CAAC;YACD,IAAI,CAAC,aAAa,GAAG,cAAc,CAAC;YACpC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1D,CAAC;gBAAS,CAAC;YACT,IAAI,OAAO;gBAAE,MAAM,OAAO,EAAE,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,6EAA6E;IACrE,UAAU;QAChB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC;CACF;AAED,gFAAgF;AAEhF,IAAI,YAAY,GAAmC,IAAI,CAAC;AAExD;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB;IACtC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAC;QAChF,YAAY,GAAG,IAAI,uBAAuB,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC"}

package/server/dist/core/event-log-reader.d.ts

@@ -0,0 +1,19 @@
+import { type EventLogProjection, type ProjectEventLogOptions } from "./event-log-types.js";
+export { EVENT_FILE, type EventLogProjection, type PhaseTransition, type PhaseTransitionType, type ProjectEventLogOptions, type RunProjection, type RunTests, } from "./event-log-types.js";
+/**
+ * Pure projection of an event log's lines into per-run rows + phase
+ * transitions. Tolerant: blank lines are ignored, a corrupt/torn line is
+ * counted in `skippedLines` and skipped (never thrown). `work_completed`
+ * events without a truthy `adr_id` cannot form a join key and are not
+ * projected as runs (they still count toward `parsedLines`).
+ */
+export declare function projectEventLog(lines: Iterable<string>, opts?: ProjectEventLogOptions): EventLogProjection;
+/**
+ * File-loading wrapper: read `<projectRoot>/shipwright_events.jsonl` and
+ * project it. The event filename is a constant (no user-supplied path
+ * segment); `pathGuard` is applied defensively so a crafted `projectRoot`
+ * can never resolve the read outside itself. A missing / unreadable /
+ * guarded-out log yields an empty projection — never an error.
+ */
+export declare function readEventLog(projectRoot: string, opts?: ProjectEventLogOptions): EventLogProjection;
+//# sourceMappingURL=event-log-reader.d.ts.map

package/server/dist/core/event-log-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-log-reader.d.ts","sourceRoot":"","sources":["../../src/core/event-log-reader.ts"],"names":[],"mappings":"AAuCA,OAAO,EAEL,KAAK,kBAAkB,EAGvB,KAAK,sBAAsB,EAG5B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,UAAU,EACV,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,KAAK,QAAQ,GACd,MAAM,sBAAsB,CAAC;AA8E9B;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,EACvB,IAAI,GAAE,sBAA2B,GAChC,kBAAkB,CAgEpB;AAeD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC1B,WAAW,EAAE,MAAM,EACnB,IAAI,GAAE,sBAA2B,GAChC,kBAAkB,CAWpB"}