@svenroth-ai/shipwright 0.24.1-next.0

package/server/dist/core/jsonl-records.js

@@ -0,0 +1,222 @@
+/*
+ * jsonl-records.ts — record-boundary + newline-termination primitives for the
+ * append-only logs (triage store + outbox, and the events log on the read side).
+ *
+ * A NEUTRAL LEAF, deliberately: reader and writer both need one agreed answer to
+ * "where does a record end?", and parking that in either would cycle them.
+ *
+ * WHY THIS EXISTS (iterate-2026-07-18-triage-jsonl-record-boundary)
+ * ----------------------------------------------------------------
+ * TS port of `shared/scripts/lib/jsonl_records.py` (monorepo PR #399). Writers
+ * appended a terminated line without checking the file they appended TO was
+ * terminated, so an unterminated predecessor put two records on one physical
+ * line; the reader then failed `JSON.parse` on the whole line and skipped it,
+ * discarding BOTH. On an append-only log, corruption must never read as absence.
+ *
+ * The two halves:
+ *   - `endsWithoutNewline` — the writer-side probe (prevention).
+ *   - `splitRecords` / `parseJsonlRecords` / `recordsFromLines` — recovery,
+ *     PARTIAL by design: a valid record followed by an unrecoverable fragment
+ *     yields the valid record AND the fragment. All-or-nothing recovery would
+ *     reproduce the very bug it is meant to fix.
+ *
+ * This module NEVER logs. Corruption is returned as data; reporting belongs at
+ * the command boundary, so background callers, tests and routes all agree.
+ *
+ * This file is the PUBLIC face and answers "what records are on this line, and
+ * is the file safely appendable?". The primitives that answer "where does ONE
+ * JSON object end?" live in `jsonl-decode.ts` — extracted to keep both files
+ * inside the 300-line rule (iterate-2026-07-21-compliance-audit-reconcile).
+ * Nothing outside this pair imports them; consumers import from here.
+ *
+ * PORT DEVIATIONS from the Python leaf, all deliberate:
+ *   1. Python's `read_jsonl_records(path)` is path-based; this reader is
+ *      STRING-based (it also serves the `git show` blob path in
+ *      `triage-origin.ts`), so it is ported as `parseJsonlRecords(raw)`.
+ *      `endsWithoutNewline` stays path-based — the writer probes a file.
+ *   2. Python's `JSONDecoder.raw_decode` has no `JSON.parse` equivalent, so the
+ *      splitter is NEW code — see `splitRecords` for fast-path / slow-path.
+ *   3. Python reads with `errors="surrogateescape"`, round-tripping invalid
+ *      UTF-8 so the monorepo repair CLI can quarantine a fragment byte-exact.
+ *      TS uses `readFileSync(p, "utf-8")`, which substitutes U+FFFD and is
+ *      LOSSY on a truncated multi-byte sequence. Safe ONLY because the WebUI
+ *      never writes a recovered record back. If a WebUI repair path is ever
+ *      added, this becomes a correctness bug and must be revisited.
+ *
+ * KNOWN CROSS-LANGUAGE BOUNDARY: Python's default `JSONDecoder` accepts `NaN` /
+ * `Infinity` / `-Infinity`; `JSON.parse` rejects them. Verified by probe. The
+ * triage record schema carries only strings and null (no float fields), so this
+ * is unreachable from the real producers — but it IS a divergence, so such a
+ * line degrades to a fragment (safe) rather than throwing.
+ */
+import { closeSync, fstatSync, openSync, readSync } from "node:fs";
+import { CH_LBRACE, CH_LF, decodeObjectAt, MAX_RECOVERY_LINE_BYTES, skipJsonWs, tryParseObject, } from "./jsonl-decode.js";
+/**
+ * Split one physical `line` into records plus the unrecoverable remainder.
+ *
+ * `remainder` is `""` when the whole line decoded cleanly, otherwise the
+ * VERBATIM text from the first byte that could not be decoded to end of line.
+ *
+ * Contract (mirrors the Python leaf):
+ *   - JSON whitespace between records is skipped (space/tab/CR/LF only).
+ *   - A blank / whitespace-only line yields `([], "")` — formatting, not
+ *     corruption.
+ *   - Only JSON objects count as records; a bare scalar is a fragment.
+ *   - Recovery is PARTIAL: records decoded before the bad byte are returned.
+ *   - A malformed record does NOT resync — the entire rest of the line becomes
+ *     the remainder, matching `raw_decode`.
+ *
+ * Cost: the fast path is a single native `JSON.parse` and covers essentially
+ * every real line. The candidate walk runs only on an already-corrupt line,
+ * where lines are short and correctness matters more than throughput.
+ */
+export function splitRecords(line) {
+    const records = [];
+    const first = skipJsonWs(line, 0);
+    if (first >= line.length)
+        return { records, remainder: "" };
+    // Fast path — one clean record per line is the overwhelmingly common case.
+    const whole = tryParseObject(line.slice(first));
+    if (whole !== undefined) {
+        records.push(whole);
+        return { records, remainder: "" };
+    }
+    // Slow path — only reached on a concatenated or damaged line. A line this
+    // long is not a triage record by any reading; refuse the walk rather than
+    // parse megabytes of candidates on the request thread.
+    if (line.length - first > MAX_RECOVERY_LINE_BYTES) {
+        return { records, remainder: line.slice(first) };
+    }
+    let idx = first;
+    while (idx < line.length) {
+        idx = skipJsonWs(line, idx);
+        if (idx >= line.length)
+            break;
+        // Only `{` can start a record. Anything else (a bare scalar, an array, or
+        // outright garbage) is handed back verbatim.
+        if (line.charCodeAt(idx) !== CH_LBRACE)
+            return { records, remainder: line.slice(idx) };
+        const decoded = decodeObjectAt(line, idx);
+        if (decoded === null)
+            return { records, remainder: line.slice(idx) };
+        records.push(decoded.value);
+        idx = decoded.end;
+    }
+    return { records, remainder: "" };
+}
+/**
+ * Tolerantly parse a whole JSONL blob, recovering concatenated records and
+ * returning the rest as data.
+ *
+ * Order is preserved: records recovered from one physical line stay in wire
+ * order relative to each other and to surrounding lines, so the store's
+ * `(ts, file-order)` status resolution is unaffected.
+ *
+ * `trim()` here is intentionally the unicode-aware one — it absorbs a trailing
+ * CR (CRLF) and mirrors Python's `raw.strip()`, which is also unicode-aware.
+ * The strict JSON-whitespace rule applies BETWEEN records, inside
+ * `splitRecords`.
+ *
+ * Line NUMBERING can differ from Python on a file containing a bare CR: this
+ * splits on `\n` only, while Python iterates the handle in universal-newline
+ * mode and also breaks on a lone `\r`. Resolved RECORDS are unaffected (CR is
+ * JSON whitespace, so `splitRecords` skips an interior CR and recovers both
+ * sides either way) — only the `lineNo` reported on a `CorruptFragment` shifts.
+ * Noted so an operator correlating a WebUI warning against the monorepo repair
+ * CLI's output is not misled.
+ */
+export function parseJsonlRecords(raw) {
+    const records = [];
+    const corrupt = [];
+    const lines = raw.split("\n");
+    for (let i = 0; i < lines.length; i += 1) {
+        const line = lines[i].trim();
+        if (!line)
+            continue;
+        const split = splitRecords(line);
+        for (const record of split.records)
+            records.push(record);
+        if (split.remainder) {
+            corrupt.push({ lineNo: i + 1, text: split.remainder });
+        }
+    }
+    return { records, corrupt };
+}
+/**
+ * Record-by-record view over ALREADY-SPLIT physical lines, recovering
+ * concatenated records (iterate-2026-07-19-events-reader-recovery).
+ *
+ * The events-log readers get `Iterable<string>` lines, not a raw blob, and each
+ * keeps its own running index for ordering. Yielding per RECORD lets them keep
+ * `idx++` unchanged: two records on one line take two consecutive indices,
+ * preserving the wire order last-wins projections depend on.
+ *
+ * `onLine` fires once per NON-BLANK PHYSICAL LINE, so a caller can keep
+ * line-based counters (`totalLines` / `skippedLines`) meaning what they always
+ * meant while record-based counters move to the yielded values. Blank lines are
+ * formatting and are reported to neither.
+ */
+export function* recordsFromLines(lines, onLine) {
+    let lineNo = 0;
+    for (const rawLine of lines) {
+        lineNo += 1;
+        const line = rawLine.trim();
+        if (!line)
+            continue;
+        const split = splitRecords(line);
+        if (onLine)
+            onLine({ lineNo, corrupt: split.remainder.length > 0 });
+        for (const record of split.records)
+            yield record;
+    }
+}
+/**
+ * True iff `path` exists, is non-empty, and its final byte is not `\n`.
+ *
+ * A missing or zero-byte file is safely appendable and returns false. A file
+ * ending `\r\n` ends in `\n` and so counts as already terminated — prefixing
+ * another newline would inject a blank line.
+ *
+ * Reads exactly ONE byte at `size - 1` via a positional `readSync`; it never
+ * reads file contents. An O(N) read here would degrade every status flip as the
+ * log grows (external review R3).
+ *
+ * Any error (missing, unreadable, a directory, not seekable) is treated as
+ * "safely appendable". This mirrors the Python leaf, which catches OSError
+ * broadly and documents that "the append itself will surface any real I/O
+ * problem" — accurate here too: a swallowed EACCES is immediately re-raised by
+ * `appendFileSync` and mapped to a route-level write error by its caller, so
+ * no error is lost. Propagating early would diverge from the cross-language
+ * contract for no behavioural gain (external review R10, rejected with reason).
+ */
+export function endsWithoutNewline(filePath) {
+    let fd;
+    try {
+        fd = openSync(filePath, "r");
+        // Size is taken from the OPEN handle, not a prior `statSync`, so the offset
+        // resolves against the same file state we are about to read. Python does
+        // `seek(-1, SEEK_END)`, which is inherently live-end-relative; a stat-then-
+        // read pair would seek to a STALE offset if a concurrent Python writer
+        // truncated or extended the file between the two calls — precisely the
+        // window this module documents as its known limitation.
+        const size = fstatSync(fd).size;
+        if (size === 0)
+            return false;
+        const buf = Buffer.alloc(1);
+        const bytesRead = readSync(fd, buf, 0, 1, size - 1);
+        // `Buffer.alloc` zero-fills, so a short read would leave `buf[0] === 0`,
+        // which is not CH_LF and would wrongly report "unterminated". Treat any
+        // short read as safely appendable instead.
+        if (bytesRead !== 1)
+            return false;
+        return buf[0] !== CH_LF;
+    }
+    catch {
+        return false;
+    }
+    finally {
+        if (fd !== undefined)
+            closeSync(fd);
+    }
+}
+//# sourceMappingURL=jsonl-records.js.map

package/server/dist/core/jsonl-records.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonl-records.js","sourceRoot":"","sources":["../../src/core/jsonl-records.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AAEH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEnE,OAAO,EACL,SAAS,EACT,KAAK,EACL,cAAc,EACd,uBAAuB,EACvB,UAAU,EACV,cAAc,GACf,MAAM,mBAAmB,CAAC;AAwB3B;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IAIvC,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAClC,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAE5D,2EAA2E;IAC3E,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAChD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACpC,CAAC;IAED,0EAA0E;IAC1E,0EAA0E;IAC1E,uDAAuD;IACvD,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK,GAAG,uBAAuB,EAAE,CAAC;QAClD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;IACnD,CAAC;IAED,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,OAAO,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC5B,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM;QAC9B,0EAA0E;QAC1E,6CAA6C;QAC7C,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACvF,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC1C,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5B,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACpB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AACpC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACjC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,SAAS,CAAC,CAAC,gBAAgB,CAC/B,KAAuB,EACvB,MAA6D;IAE7D,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,MAAM,IAAI,CAAC,CAAC;QACZ,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,MAAM;YAAE,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC;QACpE,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO;YAAE,MAAM,MAAM,CAAC;IACnD,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC7B,4EAA4E;QAC5E,yEAAyE;QACzE,4EAA4E;QAC5E,uEAAuE;QACvE,uEAAuE;QACvE,wDAAwD;QACxD,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC;QAChC,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,SAAS,GAAG,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;QACpD,yEAAyE;QACzE,wEAAwE;QACxE,2CAA2C;QAC3C,IAAI,SAAS,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAClC,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,SAAS;YAAE,SAAS,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC;AACH,CAAC"}

package/server/dist/core/launcher.d.ts

@@ -0,0 +1,74 @@
+export interface CopyCommandForms {
+    powershell: string;
+    cmd: string;
+    posix: string;
+}
+export interface LaunchArgs {
+    sessionUuid: string;
+    cwd: string;
+    resume?: boolean;
+    fork?: boolean;
+    parentSessionUuid?: string;
+    pluginDirs?: string[];
+    /**
+     * Optional task title forwarded to Claude as `-n, --name <title>`.
+     * Pre-seeds the session's display name (prompt box, /resume picker,
+     * terminal title). Empty / omitted → no `--name` flag emitted (Claude
+     * generates its own title).
+     *
+     * Embedded newlines are rejected with a thrown error — they break the
+     * single-line copy-paste flow and can hide injected commands inside
+     * the quoted string.
+     */
+    title?: string;
+    /**
+     * iterate/multi-session-run-orchestrator-v2 — Optional trailing slash
+     * command (e.g. `/shipwright-build`). Emitted as a quoted positional
+     * argument AFTER all flags, matching the framework's launch contract:
+     *   claude --session-id <uuid> --add-dir <root> --name '...' '/shipwright-<phase>'
+     *
+     * Validated against SLASH_COMMAND_PATTERN at the route layer; the
+     * launcher itself just escapes per shell. Newlines / control chars
+     * are rejected here as defense-in-depth.
+     */
+    slashCommand?: string;
+}
+export interface LaunchResult {
+    /** Always populated; the user's fallback. */
+    commands: CopyCommandForms;
+    /** Future: terminal spawn pid, VSCode binding token, etc. */
+    launcherUsed: "copy";
+}
+export type LaunchAdapter = (args: LaunchArgs) => Promise<LaunchResult> | LaunchResult;
+export declare function buildCopyCommands(args: LaunchArgs): CopyCommandForms;
+/**
+ * 2026-04-23 — iterate-20260423-resume-cwd-prefix.
+ *
+ * Shared shell-specific cd-prefix helper, used by both the legacy
+ * `buildCopyCommands` path (Resume / Fork / plain Launch fallback) and
+ * the `substitutePlaceholders` `{cd.prefix}` placeholder in
+ * actions-substitute.ts. Both surfaces emit identical output so a user
+ * pasting a Resume link and a user pasting a Launch link both set cwd
+ * the same way before invoking claude.
+ *
+ * Per-shell expansion:
+ *   PowerShell → `Set-Location <escaped> -ErrorAction Stop; ` (PS5 lacks
+ *                `&&`; `-ErrorAction Stop` upgrades the otherwise
+ *                non-terminating Set-Location error to a terminating one
+ *                so a wrong path surfaces as a clean cd failure rather
+ *                than a confusing missing-config error from the skill).
+ *   cmd.exe    → `cd /d <escaped> && ` (`/d` also changes drive letter).
+ *   POSIX      → `cd <escaped> && ` (standard short-circuit).
+ *
+ * Empty cwd → empty string. The pasted command degrades to current
+ * behaviour (runs in whatever cwd the terminal had) instead of producing
+ * a syntactically broken prefix.
+ *
+ * Security: uses the same `qPs/qCmd/qPosix` escapers as the rest of the
+ * module. Trailing-backslash-before-quote caveat from `qCmd` (line 185)
+ * still applies — directory-picker paths can't end on `\` in practice.
+ */
+export declare function buildCdPrefix(shellForm: "powershell" | "cmd" | "posix", cwd: string): string;
+export declare const copyLauncher: LaunchAdapter;
+export { qPs, qCmd, qPosix, toPosixPath } from "./shell-quote.js";
+//# sourceMappingURL=launcher.d.ts.map

package/server/dist/core/launcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher.d.ts","sourceRoot":"","sources":["../../src/core/launcher.ts"],"names":[],"mappings":"AAkBA,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB;;;;;;;;;OASG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,6CAA6C;IAC7C,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,6DAA6D;IAC7D,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,YAAY,CAAC,GAAG,YAAY,CAAC;AAEvF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,UAAU,GAAG,gBAAgB,CAOpE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,YAAY,GAAG,KAAK,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAS5F;AAED,eAAO,MAAM,YAAY,EAAE,aAGzB,CAAC;AAmJH,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC"}

package/server/dist/core/launcher.js

@@ -0,0 +1,192 @@
+/*
+ * External-launch copy-command generator.
+ *
+ * Produces per-shell command strings for the user to paste. Webui does
+ * NOT spawn claude; the user runs it themselves so that subscription-auth,
+ * plugin-dir discovery, and terminal UX stay Anthropic's problem.
+ *
+ * Three forms are produced regardless of host OS so the UI can offer
+ * the right button set. PoC check G proved all three run cleanly across
+ * real PowerShell / cmd.exe / bash with a `"AI Backup - Documents"` path.
+ *
+ * Terminal / VSCode / Desktop launchers are explicitly deferred to v2+
+ * (variant-a narrow scope). The `LaunchAdapter` shape is kept so Sub-iterate
+ * 2 can plug implementations in without rewiring callers.
+ */
+import { qPs, qCmd, qPosix, toPosixPath } from "./shell-quote.js";
+export function buildCopyCommands(args) {
+    const parts = buildArgv(args);
+    return {
+        powershell: renderPowershell(parts),
+        cmd: renderCmd(parts),
+        posix: renderPosix(parts),
+    };
+}
+/**
+ * 2026-04-23 — iterate-20260423-resume-cwd-prefix.
+ *
+ * Shared shell-specific cd-prefix helper, used by both the legacy
+ * `buildCopyCommands` path (Resume / Fork / plain Launch fallback) and
+ * the `substitutePlaceholders` `{cd.prefix}` placeholder in
+ * actions-substitute.ts. Both surfaces emit identical output so a user
+ * pasting a Resume link and a user pasting a Launch link both set cwd
+ * the same way before invoking claude.
+ *
+ * Per-shell expansion:
+ *   PowerShell → `Set-Location <escaped> -ErrorAction Stop; ` (PS5 lacks
+ *                `&&`; `-ErrorAction Stop` upgrades the otherwise
+ *                non-terminating Set-Location error to a terminating one
+ *                so a wrong path surfaces as a clean cd failure rather
+ *                than a confusing missing-config error from the skill).
+ *   cmd.exe    → `cd /d <escaped> && ` (`/d` also changes drive letter).
+ *   POSIX      → `cd <escaped> && ` (standard short-circuit).
+ *
+ * Empty cwd → empty string. The pasted command degrades to current
+ * behaviour (runs in whatever cwd the terminal had) instead of producing
+ * a syntactically broken prefix.
+ *
+ * Security: uses the same `qPs/qCmd/qPosix` escapers as the rest of the
+ * module. Trailing-backslash-before-quote caveat from `qCmd` (line 185)
+ * still applies — directory-picker paths can't end on `\` in practice.
+ */
+export function buildCdPrefix(shellForm, cwd) {
+    if (!cwd)
+        return "";
+    if (shellForm === "powershell") {
+        return `Set-Location ${qPs(cwd)} -ErrorAction Stop; `;
+    }
+    if (shellForm === "cmd") {
+        return `cd /d ${qCmd(cwd)} && `;
+    }
+    return `cd ${qPosix(toPosixPath(cwd))} && `;
+}
+export const copyLauncher = (args) => ({
+    commands: buildCopyCommands(args),
+    launcherUsed: "copy",
+});
+function buildArgv(args) {
+    const title = normalizeTitle(args.title);
+    const slashCommand = normalizeSlashCommand(args.slashCommand);
+    return {
+        sessionUuid: args.sessionUuid,
+        cwd: args.cwd,
+        resume: Boolean(args.resume),
+        fork: Boolean(args.fork),
+        parentSessionUuid: args.parentSessionUuid,
+        pluginDirs: args.pluginDirs ?? [],
+        title,
+        slashCommand,
+    };
+}
+/**
+ * Trim outer whitespace and reject embedded newlines. Returns undefined
+ * for empty / whitespace-only input so callers can skip emitting `--name`.
+ */
+function normalizeTitle(raw) {
+    if (typeof raw !== "string")
+        return undefined;
+    if (/[\r\n]/.test(raw)) {
+        throw new Error("Title cannot contain newlines (would break the single-line copy-paste flow).");
+    }
+    const trimmed = raw.trim();
+    return trimmed === "" ? undefined : trimmed;
+}
+/**
+ * Reject newlines / NUL / other control chars in slash commands; the route
+ * layer additionally validates against the strict
+ * `^/shipwright-(project|design|plan|build|test|security|changelog|deploy)$`
+ * regex. Belt-and-suspenders.
+ */
+function normalizeSlashCommand(raw) {
+    if (typeof raw !== "string")
+        return undefined;
+    for (const ch of raw) {
+        const code = ch.charCodeAt(0);
+        if (code < 0x20 || code === 0x7f) {
+            throw new Error("slashCommand cannot contain control characters.");
+        }
+    }
+    const trimmed = raw.trim();
+    return trimmed === "" ? undefined : trimmed;
+}
+function renderPowershell(a) {
+    const parts = ["claude"];
+    appendSessionFlags(a, parts, qPs);
+    parts.push("--add-dir", qPs(a.cwd));
+    appendResumeFork(a, parts, qPs);
+    appendName(a, parts, qPs);
+    for (const d of a.pluginDirs) {
+        parts.push("--plugin-dir", qPs(d));
+    }
+    appendSlashCommand(a, parts, qPs);
+    return buildCdPrefix("powershell", a.cwd) + "& " + parts.join(" ");
+}
+function renderCmd(a) {
+    const parts = ["claude"];
+    appendSessionFlags(a, parts, qCmd);
+    parts.push("--add-dir", qCmd(a.cwd));
+    appendResumeFork(a, parts, qCmd);
+    appendName(a, parts, qCmd);
+    for (const d of a.pluginDirs) {
+        parts.push("--plugin-dir", qCmd(d));
+    }
+    appendSlashCommand(a, parts, qCmd);
+    return buildCdPrefix("cmd", a.cwd) + parts.join(" ");
+}
+function renderPosix(a) {
+    const cwd = toPosixPath(a.cwd);
+    const plugins = a.pluginDirs.map(toPosixPath);
+    const parts = ["claude"];
+    appendSessionFlags(a, parts, qPosix);
+    parts.push("--add-dir", qPosix(cwd));
+    appendResumeFork(a, parts, qPosix);
+    appendName(a, parts, qPosix);
+    for (const d of plugins) {
+        parts.push("--plugin-dir", qPosix(d));
+    }
+    appendSlashCommand(a, parts, qPosix);
+    // Prefix uses raw cwd; buildCdPrefix does its own toPosixPath conversion.
+    return buildCdPrefix("posix", a.cwd) + parts.join(" ");
+}
+/**
+ * Emit `--session-id <uuid>` only when the launch needs to PRE-BIND a new
+ * UUID — i.e. fresh starts and forks. The resume path identifies the
+ * session via `--resume <uuid>`; combining `--session-id` with `--resume`
+ * (without `--fork-session`) is rejected by Claude CLI 2.1.x with
+ * "--session-id can only be used with --continue or --resume if
+ * --fork-session is also specified."
+ */
+function appendSessionFlags(a, parts, q) {
+    if (a.resume && !a.fork)
+        return;
+    parts.push("--session-id", q(a.sessionUuid));
+}
+function appendResumeFork(a, parts, q) {
+    if (a.fork) {
+        // fork-session starts a new session derived from a parent; requires a parent UUID.
+        if (!a.parentSessionUuid) {
+            throw new Error("fork=true requires parentSessionUuid");
+        }
+        parts.push("--resume", q(a.parentSessionUuid), "--fork-session");
+    }
+    else if (a.resume) {
+        parts.push("--resume", q(a.sessionUuid));
+    }
+}
+function appendName(a, parts, q) {
+    if (a.title)
+        parts.push("--name", q(a.title));
+}
+function appendSlashCommand(a, parts, q) {
+    if (a.slashCommand)
+        parts.push(q(a.slashCommand));
+}
+// --- shell-specific escaping ---
+//
+// The per-shell quoters (qPs / qCmd / qPosix / toPosixPath) live in
+// `shell-quote.ts` (extracted to keep this file under the LOC limit). They are
+// re-exported here so `actions-substitute.ts` and other callers keep importing
+// them from `./launcher.js`. The shell-escape discipline is the security
+// boundary for command-template substitution (plan.md § 2.2).
+export { qPs, qCmd, qPosix, toPosixPath } from "./shell-quote.js";
+//# sourceMappingURL=launcher.js.map

package/server/dist/core/launcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher.js","sourceRoot":"","sources":["../../src/core/launcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAgDlE,MAAM,UAAU,iBAAiB,CAAC,IAAgB;IAChD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO;QACL,UAAU,EAAE,gBAAgB,CAAC,KAAK,CAAC;QACnC,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC;QACrB,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC;KAC1B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,aAAa,CAAC,SAAyC,EAAE,GAAW;IAClF,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;QAC/B,OAAO,gBAAgB,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACxD,CAAC;IACD,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QACxB,OAAO,SAAS,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;IAClC,CAAC;IACD,OAAO,MAAM,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAkB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACpD,QAAQ,EAAE,iBAAiB,CAAC,IAAI,CAAC;IACjC,YAAY,EAAE,MAAM;CACrB,CAAC,CAAC;AAeH,SAAS,SAAS,CAAC,IAAgB;IACjC,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,qBAAqB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC9D,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QAC5B,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QACxB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;QACjC,KAAK;QACL,YAAY;KACb,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,GAAuB;IAC7C,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,GAAuB;IACpD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9C,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9C,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAO;IAC/B,MAAM,KAAK,GAAa,CAAC,QAAQ,CAAC,CAAC;IACnC,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,gBAAgB,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAChC,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAClC,OAAO,aAAa,CAAC,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,SAAS,CAAC,CAAO;IACxB,MAAM,KAAK,GAAa,CAAC,QAAQ,CAAC,CAAC;IACnC,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACnC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,gBAAgB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACjC,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACnC,OAAO,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,WAAW,CAAC,CAAO;IAC1B,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAa,CAAC,QAAQ,CAAC,CAAC;IACnC,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACrC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,gBAAgB,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACnC,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACrC,0EAA0E;IAC1E,OAAO,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,kBAAkB,CAAC,CAAO,EAAE,KAAe,EAAE,CAAwB;IAC5E,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI;QAAE,OAAO;IAChC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAO,EAAE,KAAe,EAAE,CAAwB;IAC1E,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACX,mFAAmF;QACnF,IAAI,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACnE,CAAC;SAAM,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,CAAO,EAAE,KAAe,EAAE,CAAwB;IACpE,IAAI,CAAC,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,kBAAkB,CACzB,CAAO,EACP,KAAe,EACf,CAAwB;IAExB,IAAI,CAAC,CAAC,YAAY;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,kCAAkC;AAClC,EAAE;AACF,oEAAoE;AACpE,+EAA+E;AAC/E,+EAA+E;AAC/E,yEAAyE;AACzE,8DAA8D;AAC9D,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC"}

package/server/dist/core/mission-context/artifacts-commit.d.ts

@@ -0,0 +1,28 @@
+import type { CommitArtifact, MergeState } from "./types.js";
+import type { EventLookup } from "./iterate-record.js";
+export interface CommitInput {
+    events: EventLookup;
+    prNumber: number | null;
+    prUrl: string | null;
+    merge: MergeState;
+}
+/**
+ * Re-apply a freshly-checked merge state to an ALREADY-BUILT commit artifact.
+ *
+ * Why this exists (internal code review, HIGH): the resolver's read-through
+ * cache is keyed on source-file revisions, and after finalization every one of
+ * those files goes quiescent. Returning the whole cached context therefore
+ * froze `detail.merge` at whatever it was when the run finished — in practice
+ * "pending" forever — and made the asymmetric TTL in merge-check.ts
+ * unreachable dead code. The commit artifact is the ONLY time-varying part of
+ * the response, so it is refreshed on every call while it is non-terminal.
+ *
+ * Returns the SAME object when nothing changed, so a caller can cheaply detect
+ * a no-op and avoid rebuilding the context.
+ */
+export declare function refreshCommitMerge(artifact: CommitArtifact, merge: MergeState, marker: {
+    number: number;
+    url: string;
+} | null): CommitArtifact;
+export declare function buildCommitArtifact(input: CommitInput): CommitArtifact;
+//# sourceMappingURL=artifacts-commit.d.ts.map

package/server/dist/core/mission-context/artifacts-commit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts-commit.d.ts","sourceRoot":"","sources":["../../../src/core/mission-context/artifacts-commit.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAiB,cAAc,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC5E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAYvD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,UAAU,CAAC;CACnB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,UAAU,EACjB,MAAM,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,GAC7C,cAAc,CAmBhB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,WAAW,GAAG,cAAc,CAkDtE"}

package/server/dist/core/mission-context/artifacts-commit.js

@@ -0,0 +1,98 @@
+/*
+ * core/mission-context/artifacts-commit.ts — the Commit descriptor
+ * (CONTRACT §6 row 6 + §5.3 merge semantics).
+ *
+ * Split from artifacts.ts to keep both files within the size rule. This is the
+ * only artifact whose content varies with TIME rather than with a source file,
+ * which is why `refreshCommitMerge` lives here and is re-applied on every
+ * resolver cache hit (see merge-refresh.ts).
+ */
+// ---------------------------------------------------------------------------
+// Commit
+// ---------------------------------------------------------------------------
+function mergeSentence(merge, prNumber) {
+    if (merge === "merged")
+        return "Delivered — merged into the main line.";
+    if (merge === "pending" && prNumber != null)
+        return `Waiting to be merged (PR #${prNumber}).`;
+    return "Committed; delivery not confirmed yet.";
+}
+/**
+ * Re-apply a freshly-checked merge state to an ALREADY-BUILT commit artifact.
+ *
+ * Why this exists (internal code review, HIGH): the resolver's read-through
+ * cache is keyed on source-file revisions, and after finalization every one of
+ * those files goes quiescent. Returning the whole cached context therefore
+ * froze `detail.merge` at whatever it was when the run finished — in practice
+ * "pending" forever — and made the asymmetric TTL in merge-check.ts
+ * unreachable dead code. The commit artifact is the ONLY time-varying part of
+ * the response, so it is refreshed on every call while it is non-terminal.
+ *
+ * Returns the SAME object when nothing changed, so a caller can cheaply detect
+ * a no-op and avoid rebuilding the context.
+ */
+export function refreshCommitMerge(artifact, merge, marker) {
+    if (artifact.state !== "available" || !artifact.detail)
+        return artifact;
+    const prNumber = marker?.number ?? artifact.detail.prNumber;
+    const prUrl = marker?.url ?? artifact.detail.prUrl;
+    if (artifact.detail.merge === merge &&
+        artifact.detail.prNumber === prNumber &&
+        artifact.detail.prUrl === prUrl) {
+        return artifact;
+    }
+    const message = artifact.detail.message;
+    return {
+        ...artifact,
+        summary: message
+            ? `${message} ${mergeSentence(merge, prNumber)}`
+            : mergeSentence(merge, prNumber),
+        detail: { ...artifact.detail, merge, prNumber, prUrl },
+    };
+}
+export function buildCommitArtifact(input) {
+    const { events, prNumber, prUrl, merge } = input;
+    if (events.status === "unavailable") {
+        return {
+            kind: "commit",
+            label: "Commit",
+            state: "unavailable",
+            summary: null,
+            receipt: null,
+            note: "The run record could not be read.",
+            detail: null,
+        };
+    }
+    const run = events.status === "found" ? events.run : null;
+    // MEASURED: only 49 of 210 iterate rows carry a non-empty `commit`. An empty
+    // string is NOT a commit — treat it as absent rather than rendering a blank sha.
+    const commit = run?.commit && run.commit.trim().length > 0 ? run.commit.trim() : null;
+    if (!run) {
+        return {
+            kind: "commit",
+            label: "Commit",
+            state: "not_yet_created",
+            summary: null,
+            receipt: null,
+            detail: null,
+        };
+    }
+    const message = run.summary ?? run.description ?? null;
+    const shortSha = commit ? commit.slice(0, 7) : null;
+    const receipt = shortSha ?? (prNumber != null ? `PR #${prNumber}` : null);
+    // The run completed, so this artifact EXISTS even when the sha was not
+    // recorded — the delivery story is still real (a PR link, a merge state).
+    const state = commit || prNumber != null ? "available" : "not_yet_created";
+    if (state === "not_yet_created") {
+        return { kind: "commit", label: "Commit", state, summary: null, receipt: null, detail: null };
+    }
+    return {
+        kind: "commit",
+        label: "Commit",
+        state: "available",
+        summary: message ? `${message} ${mergeSentence(merge, prNumber)}` : mergeSentence(merge, prNumber),
+        receipt,
+        detail: { type: "commit", commit, message, prNumber, prUrl, merge },
+    };
+}
+//# sourceMappingURL=artifacts-commit.js.map

package/server/dist/core/mission-context/artifacts-commit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts-commit.js","sourceRoot":"","sources":["../../../src/core/mission-context/artifacts-commit.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E,SAAS,aAAa,CAAC,KAAiB,EAAE,QAAuB;IAC/D,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,wCAAwC,CAAC;IACxE,IAAI,KAAK,KAAK,SAAS,IAAI,QAAQ,IAAI,IAAI;QAAE,OAAO,6BAA6B,QAAQ,IAAI,CAAC;IAC9F,OAAO,wCAAwC,CAAC;AAClD,CAAC;AASD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAwB,EACxB,KAAiB,EACjB,MAA8C;IAE9C,IAAI,QAAQ,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC;IACxE,MAAM,QAAQ,GAAG,MAAM,EAAE,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;IAC5D,MAAM,KAAK,GAAG,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;IACnD,IACE,QAAQ,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK;QAC/B,QAAQ,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ;QACrC,QAAQ,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK,EAC/B,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;IACxC,OAAO;QACL,GAAG,QAAQ;QACX,OAAO,EAAE,OAAO;YACd,CAAC,CAAC,GAAG,OAAO,IAAI,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE;YAChD,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC;QAClC,MAAM,EAAE,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;KACvD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAkB;IACpD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAEjD,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACpC,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,QAAQ;YACf,KAAK,EAAE,aAAa;YACpB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,mCAAmC;YACzC,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,6EAA6E;IAC7E,iFAAiF;IACjF,MAAM,MAAM,GAAG,GAAG,EAAE,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAEtF,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,QAAQ;YACf,KAAK,EAAE,iBAAiB;YACxB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,MAAM,OAAO,GAAG,QAAQ,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAE1E,uEAAuE;IACvE,0EAA0E;IAC1E,MAAM,KAAK,GAAkB,MAAM,IAAI,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC;IAC1F,IAAI,KAAK,KAAK,iBAAiB,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAChG,CAAC;IAED,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,WAAW;QAClB,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC;QAClG,OAAO;QACP,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE;KACpE,CAAC;AACJ,CAAC"}

package/server/dist/core/mission-context/artifacts-decisions.d.ts

@@ -0,0 +1,5 @@
+import type { DecisionRecord } from "./decisions.js";
+import type { EventLookup } from "./iterate-record.js";
+import type { DecisionsArtifact } from "./types-slice2.js";
+export declare function buildDecisionsArtifact(record: DecisionRecord, events: EventLookup): DecisionsArtifact;
+//# sourceMappingURL=artifacts-decisions.d.ts.map

package/server/dist/core/mission-context/artifacts-decisions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts-decisions.d.ts","sourceRoot":"","sources":["../../../src/core/mission-context/artifacts-decisions.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAc3D,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,cAAc,EACtB,MAAM,EAAE,WAAW,GAClB,iBAAiB,CAuFnB"}