@svenroth-ai/shipwright 0.24.1-next.0

package/server/dist/core/mission-context/pipeline-artifacts.js

@@ -0,0 +1,161 @@
+/*
+ * core/mission-context/pipeline-artifacts.ts — NATIVE artifacts for a pipeline
+ * phase task (CONTRACT §4 scenario 3, §10 Slice 3).
+ *
+ * S1 left this scenario on "today's behavior". This module replaces that: a
+ * phase task now resolves from run-config v2 `phase_tasks[]`, its own source of
+ * record, rather than borrowing the iterate rail.
+ *
+ * THE conflation rule. A run has MANY phase tasks and, once splits exist, many
+ * for the SAME phase. Resolution is therefore an EXACT `phaseTaskId` match and
+ * nothing else — never the phase name, never the session uuid. Matching loosely
+ * would attribute one split's work to another, which is worse than showing
+ * nothing because it is silently wrong.
+ *
+ * WHAT IS DELIBERATELY ABSENT, and why (PROBE, S3, against this repo's real
+ * data): there is no per-phase requirement or commit source. `phase_completed`
+ * events carry `phase`/`commits`/`description`/`detail` and NO `affected_frs`
+ * (all 3 real records enumerated); run-config `phase_tasks[]` has no FR field
+ * (schema + the real orchestrator fixture both enumerated). So this module emits
+ * no Requirement and no Commit for a pipeline rather than inventing a join whose
+ * output it cannot demonstrate. The FR table lives in the adopted spec, which IS
+ * linked — a real path, checked to exist before it becomes a link.
+ *
+ * `result.artifacts[]` are shown as TEXT, never as links. The producer records
+ * them as bare relative strings with no documented root, so a link built from
+ * them would be a guess — and a guess that resolves to nothing is exactly the
+ * dead link AC3 forbids.
+ */
+/** Plain-language phase name for a non-expert reader. */
+function phaseWord(phase) {
+    const words = {
+        project: "Project setup",
+        design: "Design",
+        plan: "Planning",
+        build: "Build",
+        test: "Test",
+        security: "Security review",
+        changelog: "Changelog",
+        deploy: "Deploy",
+    };
+    return words[phase] ?? phase;
+}
+/** Plain-language status, never the raw enum. */
+function statusWord(status) {
+    switch (status) {
+        case "done":
+            return "finished";
+        case "in_progress":
+            return "running now";
+        case "failed":
+            return "failed";
+        case "skipped":
+            return "skipped";
+        case "awaiting_launch":
+            return "waiting to start";
+        case "backlog":
+            return "not started";
+        default:
+            return status;
+    }
+}
+function phaseSummary(t) {
+    const scope = t.splitId ? ` for ${t.splitId}` : "";
+    const lead = `${phaseWord(t.phase)}${scope} — ${statusWord(t.status)}.`;
+    if (t.status === "failed" && t.errors.length > 0) {
+        return `${lead} It reported ${t.errors.length === 1 ? "an error" : `${t.errors.length} errors`}.`;
+    }
+    if (t.description)
+        return `${lead} ${t.description}`;
+    return lead;
+}
+export function buildPhaseArtifact(fact) {
+    const label = "Phase";
+    if (fact.status === "unavailable") {
+        return {
+            kind: "phase",
+            label,
+            state: "unavailable",
+            summary: null,
+            receipt: null,
+            note: "This run's configuration could not be read, so its phase details are unavailable.",
+            detail: null,
+        };
+    }
+    if (fact.status === "task_not_found") {
+        // The config READ fine and this task is not in it. Say so — do not let an
+        // integrity fault render as "this phase simply has nothing yet".
+        return {
+            kind: "phase",
+            label,
+            state: "unavailable",
+            summary: null,
+            receipt: null,
+            note: "This task points at a pipeline step that its run no longer lists.",
+            detail: null,
+        };
+    }
+    const t = fact.task;
+    return {
+        kind: "phase",
+        label,
+        state: "available",
+        summary: phaseSummary(t),
+        receipt: t.splitId ? `${phaseWord(t.phase)} · ${t.splitId}` : phaseWord(t.phase),
+        detail: {
+            type: "phase",
+            runId: fact.runId,
+            phase: t.phase,
+            splitId: t.splitId,
+            status: t.status,
+            slashCommand: t.slashCommand,
+            title: t.title,
+            description: t.description,
+            startedAt: t.startedAt,
+            completedAt: t.completedAt,
+            executionCount: t.executionCount,
+            errors: t.errors,
+            outputs: t.outputs,
+        },
+    };
+}
+/**
+ * The pipeline's Spec artifact: the project's ADOPTED specification, which is
+ * also where its FR table lives — hence the combined label.
+ *
+ * `documentId` is minted by the caller ONLY when the file was actually resolved
+ * under a validated read-root, so this never produces a link to nothing.
+ */
+export function buildPipelineSpecArtifact(input) {
+    if (input.documentId && input.title) {
+        return {
+            kind: "spec",
+            label: "Spec & requirements",
+            state: "available",
+            summary: "The project specification this run builds to, including the numbered requirements list.",
+            receipt: input.title,
+            detail: { type: "document", documentId: input.documentId, title: input.title },
+        };
+    }
+    if (input.denied) {
+        return {
+            kind: "spec",
+            label: "Spec & requirements",
+            state: "unavailable",
+            summary: null,
+            receipt: null,
+            note: "The specification could not be read safely.",
+            detail: null,
+        };
+    }
+    // The project has no adopted spec yet. A genuine, honest absence.
+    return {
+        kind: "spec",
+        label: "Spec & requirements",
+        state: "not_yet_created",
+        summary: null,
+        receipt: null,
+        detail: null,
+    };
+}
+//# sourceMappingURL=pipeline-artifacts.js.map

package/server/dist/core/mission-context/pipeline-artifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline-artifacts.js","sourceRoot":"","sources":["../../../src/core/mission-context/pipeline-artifacts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAsCH,yDAAyD;AACzD,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,KAAK,GAA2B;QACpC,OAAO,EAAE,eAAe;QACxB,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,iBAAiB;QAC3B,SAAS,EAAE,WAAW;QACtB,MAAM,EAAE,QAAQ;KACjB,CAAC;IACF,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC;AAC/B,CAAC;AAED,iDAAiD;AACjD,SAAS,UAAU,CAAC,MAAc;IAChC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,UAAU,CAAC;QACpB,KAAK,aAAa;YAChB,OAAO,aAAa,CAAC;QACvB,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;QACnB,KAAK,iBAAiB;YACpB,OAAO,kBAAkB,CAAC;QAC5B,KAAK,SAAS;YACZ,OAAO,aAAa,CAAC;QACvB;YACE,OAAO,MAAM,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,CAAiB;IACrC,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,MAAM,IAAI,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,KAAK,MAAM,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;IACxE,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,OAAO,GAAG,IAAI,gBAAgB,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC;IACpG,CAAC;IACD,IAAI,CAAC,CAAC,WAAW;QAAE,OAAO,GAAG,IAAI,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACrD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAkB;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC;IAEtB,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QAClC,OAAO;YACL,IAAI,EAAE,OAAO;YACb,KAAK;YACL,KAAK,EAAE,aAAa;YACpB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,mFAAmF;YACzF,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;QACrC,0EAA0E;QAC1E,iEAAiE;QACjE,OAAO;YACL,IAAI,EAAE,OAAO;YACb,KAAK;YACL,KAAK,EAAE,aAAa;YACpB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,mEAAmE;YACzE,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;IACpB,OAAO;QACL,IAAI,EAAE,OAAO;QACb,KAAK;QACL,KAAK,EAAE,WAAW;QAClB,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;QACxB,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;QAChF,MAAM,EAAE;YACN,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,YAAY,EAAE,CAAC,CAAC,YAAY;YAC5B,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB;KACF,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAIzC;IACC,IAAI,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QACpC,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,qBAAqB;YAC5B,KAAK,EAAE,WAAW;YAClB,OAAO,EACL,yFAAyF;YAC3F,OAAO,EAAE,KAAK,CAAC,KAAK;YACpB,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE;SAC/E,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,qBAAqB;YAC5B,KAAK,EAAE,aAAa;YACpB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,6CAA6C;YACnD,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC;IAED,kEAAkE;IAClE,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,qBAAqB;QAC5B,KAAK,EAAE,iBAAiB;QACxB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,IAAI;KACb,CAAC;AACJ,CAAC"}

package/server/dist/core/mission-context/planned-impact.d.ts

@@ -0,0 +1,28 @@
+export interface PlannedImpact {
+    /** FR ids named INSIDE the impact section (never document-wide). */
+    frIds: string[];
+    /** One-line prose describing the intended impact, or null. */
+    prose: string | null;
+}
+/**
+ * Read only the declared impact value from the iterate spec. This is separate
+ * from `plannedImpactFromSpec`: a heading can describe planned work while an
+ * explicit `spec_impact: none` says no requirement changes are planned.
+ */
+export declare function declaredSpecImpact(specText: string | null | undefined): string | null;
+/**
+ * Slice out the impact section: from its heading to the next heading of the
+ * SAME OR HIGHER level (a deeper sub-heading stays part of the section).
+ * Returns null when the spec has no such section.
+ */
+export declare function extractImpactSection(specText: string): string | null;
+/**
+ * The mid-run planned impact for a spec body.
+ *
+ * Prefers the impact SECTION for both ids and prose. With no such section we
+ * deliberately return NO ids — a document-wide scrape is what produced false
+ * "Expected to affect …" rows — but we still carry the spec's opening prose so
+ * the Requirement artifact can say something true rather than vanish.
+ */
+export declare function plannedImpactFromSpec(specText: string | null | undefined): PlannedImpact;
+//# sourceMappingURL=planned-impact.d.ts.map

package/server/dist/core/mission-context/planned-impact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"planned-impact.d.ts","sourceRoot":"","sources":["../../../src/core/mission-context/planned-impact.ts"],"names":[],"mappings":"AAuCA,MAAM,WAAW,aAAa;IAC5B,oEAAoE;IACpE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,8DAA8D;IAC9D,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAKrF;AAqBD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAgBpE;AAgBD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,aAAa,CAgBxF"}

package/server/dist/core/mission-context/planned-impact.js

@@ -0,0 +1,129 @@
+/*
+ * core/mission-context/planned-impact.ts — mid-run PLANNED impact from the
+ * iterate spec (CONTRACT §6 mid-run column, AC1).
+ *
+ * Before Finalize no run record exists, so the spec is the only evidence of
+ * what the run intends to touch. CONTRACT §6 names the source precisely: the
+ * spec's **"Affected Boundaries"** prose, shown as *planned impact* and never
+ * labelled new/changed/technical.
+ *
+ * Two defects this module exists to fix (internal code review, MEDIUM):
+ *
+ *  1. A whole-document `FR-\d{2}\.\d{2,3}` scrape reads FR ids out of
+ *     References sections, prior-art citations and "unchanged" callouts, then
+ *     presents them as "Expected to affect …". The scan is now SCOPED to the
+ *     affected-boundaries / spec-impact section; ids elsewhere are ignored.
+ *
+ *  2. When a mid-run spec names no FR id at all, an id-only model yields zero
+ *     rows → `not_yet_created` → the client's hide-empty rule removes the
+ *     artifact entirely, so AC1 ("a live standalone iterate shows a non-empty
+ *     Spec + Requirement") fails SILENTLY. So the section's PROSE is carried as
+ *     a fallback: a spec that says what it will touch always produces a
+ *     Requirement, with or without a literal id.
+ */
+/** Bound the scan so a pathological spec cannot drive an unbounded walk. */
+const SCAN_BYTES = 200_000;
+const FR_IN_TEXT = /\bFR-\d{2}\.\d{2,3}\b/g;
+/**
+ * Headings that carry the run's intended impact. `Affected Boundaries` is the
+ * CONTRACT-named one (ADR-024); the others are the shapes real iterate specs
+ * in this repo actually use for the same thing.
+ */
+const IMPACT_HEADING = /^(#{1,6})\s*(?:\d+[.)]\s*)?(affected\s+boundaries|affected\s+requirements?|requirements?\s+impact|spec\s+impact|scope)\b.*$/i;
+const ANY_HEADING = /^(#{1,6})\s+\S/;
+/**
+ * Read only the declared impact value from the iterate spec. This is separate
+ * from `plannedImpactFromSpec`: a heading can describe planned work while an
+ * explicit `spec_impact: none` says no requirement changes are planned.
+ */
+export function declaredSpecImpact(specText) {
+    if (!specText)
+        return null;
+    const slice = specText.length > SCAN_BYTES ? specText.slice(0, SCAN_BYTES) : specText;
+    const match = /(?:^|\n)\s*(?:[-*]\s*)?(?:\*\*)?spec[ _-]?impact(?:\*\*)?\s*[:=]\s*`?\s*(add|modify|remove|none)\b/i.exec(slice);
+    return match?.[1]?.toLowerCase() ?? null;
+}
+/** Collapse a markdown block to one readable line, bounded for display. */
+function condense(block, maxLen = 240) {
+    const text = block
+        .split(/\r?\n/)
+        .map((l) => l.trim())
+        // Drop list bullets / table pipes / blockquote marks but keep the words.
+        .map((l) => l.replace(/^[-*+]\s+/, "").replace(/^>\s*/, "").replace(/^\|/, "").trim())
+        .filter((l) => l.length > 0 && !ANY_HEADING.test(l) && !/^[-|: ]+$/.test(l))
+        .join(" ")
+        .replace(/\s+/g, " ")
+        .trim();
+    if (text.length === 0)
+        return null;
+    if (text.length <= maxLen)
+        return text;
+    // Cut on a word boundary so the summary does not end mid-token.
+    const cut = text.slice(0, maxLen);
+    const lastSpace = cut.lastIndexOf(" ");
+    return `${(lastSpace > 40 ? cut.slice(0, lastSpace) : cut).trimEnd()}…`;
+}
+/**
+ * Slice out the impact section: from its heading to the next heading of the
+ * SAME OR HIGHER level (a deeper sub-heading stays part of the section).
+ * Returns null when the spec has no such section.
+ */
+export function extractImpactSection(specText) {
+    const lines = specText.split(/\r?\n/);
+    for (let i = 0; i < lines.length; i++) {
+        const m = IMPACT_HEADING.exec(lines[i]);
+        if (!m)
+            continue;
+        const level = m[1].length;
+        const body = [];
+        for (let j = i + 1; j < lines.length; j++) {
+            const h = ANY_HEADING.exec(lines[j]);
+            if (h && h[1].length <= level)
+                break;
+            body.push(lines[j]);
+        }
+        const text = body.join("\n").trim();
+        if (text.length > 0)
+            return text;
+    }
+    return null;
+}
+/** Unique FR ids appearing in `text`, in first-seen order. */
+function frIdsIn(text) {
+    const out = [];
+    const seen = new Set();
+    FR_IN_TEXT.lastIndex = 0;
+    let m;
+    while ((m = FR_IN_TEXT.exec(text)) !== null) {
+        if (seen.has(m[0]))
+            continue;
+        seen.add(m[0]);
+        out.push(m[0]);
+    }
+    return out;
+}
+/**
+ * The mid-run planned impact for a spec body.
+ *
+ * Prefers the impact SECTION for both ids and prose. With no such section we
+ * deliberately return NO ids — a document-wide scrape is what produced false
+ * "Expected to affect …" rows — but we still carry the spec's opening prose so
+ * the Requirement artifact can say something true rather than vanish.
+ */
+export function plannedImpactFromSpec(specText) {
+    if (!specText)
+        return { frIds: [], prose: null };
+    const slice = specText.length > SCAN_BYTES ? specText.slice(0, SCAN_BYTES) : specText;
+    const section = extractImpactSection(slice);
+    if (section) {
+        return { frIds: frIdsIn(section), prose: condense(section) };
+    }
+    // No impact section: fall back to the first real paragraph (skipping the
+    // title and any front-matter), used as PROSE only — never as id evidence.
+    const paragraphs = slice
+        .split(/\r?\n\s*\r?\n/)
+        .map((p) => p.trim())
+        .filter((p) => p.length > 0 && !ANY_HEADING.test(p) && !p.startsWith("---"));
+    return { frIds: [], prose: paragraphs.length > 0 ? condense(paragraphs[0]) : null };
+}
+//# sourceMappingURL=planned-impact.js.map

package/server/dist/core/mission-context/planned-impact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"planned-impact.js","sourceRoot":"","sources":["../../../src/core/mission-context/planned-impact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,4EAA4E;AAC5E,MAAM,UAAU,GAAG,OAAO,CAAC;AAE3B,MAAM,UAAU,GAAG,wBAAwB,CAAC;AAE5C;;;;GAIG;AACH,MAAM,cAAc,GAClB,8HAA8H,CAAC;AAEjI,MAAM,WAAW,GAAG,gBAAgB,CAAC;AASrC;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAmC;IACpE,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACtF,MAAM,KAAK,GAAG,qGAAqG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChI,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC;AAC3C,CAAC;AAED,2EAA2E;AAC3E,SAAS,QAAQ,CAAC,KAAa,EAAE,MAAM,GAAG,GAAG;IAC3C,MAAM,IAAI,GAAG,KAAK;SACf,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrB,yEAAyE;SACxE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;SACrF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;SAC3E,IAAI,CAAC,GAAG,CAAC;SACT,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;IACV,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM;QAAE,OAAO,IAAI,CAAC;IACvC,gEAAgE;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,GAAG,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACnD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1B,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1C,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACrC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,KAAK;gBAAE,MAAM;YACrC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACnC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8DAA8D;AAC9D,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,UAAU,CAAC,SAAS,GAAG,CAAC,CAAC;IACzB,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS;QAC7B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACf,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAmC;IACvE,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACjD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAEtF,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC5C,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/D,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,UAAU,GAAG,KAAK;SACrB,KAAK,CAAC,eAAe,CAAC;SACtB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/E,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACtF,CAAC"}

package/server/dist/core/mission-context/pointer.d.ts

@@ -0,0 +1,44 @@
+/** The `run_id` grammar (`iterate-<date>-<slug>`), strictly bounded. */
+export declare function isSafeRunId(v: unknown): v is string;
+/** The `slug` grammar — same class as run_id. */
+export declare function isSafeSlug(v: unknown): v is string;
+export declare function isSessionUuid(v: unknown): v is string;
+/** The validated projection. Only these fields are ever used downstream. */
+export interface IteratePointer {
+    runId: string;
+    slug: string;
+    branch: string | null;
+    /** As written — NOT yet trusted; worktree-roots.ts gates it on git membership. */
+    worktreePath: string | null;
+    mainRoot: string;
+    sessionId: string;
+    createdAt: string | null;
+}
+export type PointerInvalidReason = "bad_session_uuid" | "malformed" | "session_mismatch" | "main_root_mismatch" | "bad_run_id" | "bad_slug" | "unreadable";
+export type ReadPointerResult = {
+    status: "ok";
+    pointer: IteratePointer;
+} | {
+    status: "absent";
+} | {
+    status: "invalid";
+    reason: PointerInvalidReason;
+};
+/**
+ * Compare two absolute paths for "same directory". Uses realpath when the path
+ * exists (so a junction / symlinked project root still matches) and falls back
+ * to a normalized textual compare when it does not. Case-insensitive on win32
+ * only — POSIX paths are case-sensitive and must stay so.
+ */
+export declare function samePath(a: string, b: string): boolean;
+/**
+ * Read and validate the pointer for `sessionUuid` under `projectRoot`.
+ *
+ * Returns `absent` ONLY when there is genuinely no pointer (the common case:
+ * a non-iterate session, or an iterate whose worktree was pruned). A file that
+ * exists but cannot be trusted returns `invalid` with a reason — the caller
+ * surfaces that as a typed `unavailable` artifact rather than a silent blank,
+ * so a data-integrity problem never looks like "nothing exists" (§6).
+ */
+export declare function readIteratePointer(projectRoot: string, sessionUuid: string): ReadPointerResult;
+//# sourceMappingURL=pointer.d.ts.map

package/server/dist/core/mission-context/pointer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pointer.d.ts","sourceRoot":"","sources":["../../../src/core/mission-context/pointer.ts"],"names":[],"mappings":"AAqDA,wEAAwE;AACxE,wBAAgB,WAAW,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,MAAM,CAEnD;AAED,iDAAiD;AACjD,wBAAgB,UAAU,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,MAAM,CAElD;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,MAAM,CAErD;AAED,4EAA4E;AAC5E,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,kFAAkF;IAClF,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,MAAM,oBAAoB,GAC5B,kBAAkB,GAClB,WAAW,GACX,kBAAkB,GAClB,oBAAoB,GACpB,YAAY,GACZ,UAAU,GACV,YAAY,CAAC;AAEjB,MAAM,MAAM,iBAAiB,GACzB;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,GACzC;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,GACpB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,CAAC;AAExD;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAiBtD;AAKD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,GAClB,iBAAiB,CA+DnB"}

package/server/dist/core/mission-context/pointer.js

@@ -0,0 +1,165 @@
+/*
+ * core/mission-context/pointer.ts — read + VALIDATE the iterate bridge
+ * `.shipwright/iterate_active/<sessionUuid>.json` (CONTRACT §5.1 a/b/e).
+ *
+ * Writer: the shared `worktree_isolation.py::write_run_pointer`, an
+ * OUT-OF-PROCESS producer. Zero code read this file before Slice 1 — which is
+ * exactly why the Mission tab could never resolve a standalone iterate.
+ *
+ * The pointer is UNTRUSTED INPUT. Two external reviews (Gemini + GPT) flagged
+ * this surface, so validation is total and fails CLOSED:
+ *   (a) `session_id` MUST equal the requested uuid — a stale pointer left by a
+ *       previous session must never resurrect another session's artifacts;
+ *   (b) `main_root` MUST equal the configured project root — blocks a pointer
+ *       that would aim the resolver at a different repo;
+ *   (e) anything else → typed `invalid`, and the caller does NOT persist it.
+ *
+ * `worktree_path` is NOT trusted here at all — membership in `git worktree
+ * list` is checked by worktree-roots.ts, because filesystem containment is the
+ * wrong test (a relocated worktree legitimately lives OUTSIDE the project
+ * root — VERIFIED: the test-traceability-retrofit iterate relocated to a
+ * sibling `wt-…` directory).
+ *
+ * The `run_id` / `slug` grammar is strict ASCII: those two strings are the ONLY
+ * pointer-supplied values that ever reach a path join (via the KNOWN layout
+ * `.shipwright/planning/iterate/<run_id>/…`, never a pointer-supplied
+ * sub-path). Rejecting separators, dot-segments and non-ASCII here means the
+ * traversal class is dead before path logic starts.
+ */
+import { existsSync, readFileSync, realpathSync } from "node:fs";
+import path from "node:path";
+import { pathGuard, realPathGuard } from "../path-guard.js";
+/** Canonical lowercase-hex UUID — the pointer FILENAME grammar. */
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+/**
+ * Strict id grammar: ASCII alnum start, then alnum / dot / underscore / dash,
+ * 1..120 chars. Deliberately NOT a Unicode-tolerant class — a homoglyph or an
+ * RTL override in a path segment is never legitimate here and is a known
+ * smuggling vector. Any `..` sequence is rejected outright even though the
+ * class permits a lone dot, so no dot-segment can survive.
+ */
+const SAFE_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,119}$/;
+function isSafeId(v) {
+    if (typeof v !== "string" || v.length === 0)
+        return false;
+    if (!SAFE_ID_RE.test(v))
+        return false;
+    if (v.includes(".."))
+        return false;
+    return true;
+}
+/** The `run_id` grammar (`iterate-<date>-<slug>`), strictly bounded. */
+export function isSafeRunId(v) {
+    return isSafeId(v);
+}
+/** The `slug` grammar — same class as run_id. */
+export function isSafeSlug(v) {
+    return isSafeId(v);
+}
+export function isSessionUuid(v) {
+    return typeof v === "string" && UUID_RE.test(v);
+}
+/**
+ * Compare two absolute paths for "same directory". Uses realpath when the path
+ * exists (so a junction / symlinked project root still matches) and falls back
+ * to a normalized textual compare when it does not. Case-insensitive on win32
+ * only — POSIX paths are case-sensitive and must stay so.
+ */
+export function samePath(a, b) {
+    const norm = (p) => {
+        let out = path.resolve(p);
+        try {
+            out = realpathSync(out);
+        }
+        catch {
+            /* not on disk — fall back to the resolved form */
+        }
+        // Trailing separator is not significant for a directory identity.
+        out = out.replace(/[\\/]+$/, "");
+        return process.platform === "win32" ? out.toLowerCase() : out;
+    };
+    try {
+        return norm(a) === norm(b);
+    }
+    catch {
+        return false;
+    }
+}
+/** Bounded read — a pointer is a handful of keys; anything larger is corrupt. */
+const MAX_POINTER_BYTES = 64 * 1024;
+/**
+ * Read and validate the pointer for `sessionUuid` under `projectRoot`.
+ *
+ * Returns `absent` ONLY when there is genuinely no pointer (the common case:
+ * a non-iterate session, or an iterate whose worktree was pruned). A file that
+ * exists but cannot be trusted returns `invalid` with a reason — the caller
+ * surfaces that as a typed `unavailable` artifact rather than a silent blank,
+ * so a data-integrity problem never looks like "nothing exists" (§6).
+ */
+export function readIteratePointer(projectRoot, sessionUuid) {
+    // The uuid becomes a FILENAME — validate before it reaches any join.
+    if (!isSessionUuid(sessionUuid))
+        return { status: "invalid", reason: "bad_session_uuid" };
+    // The pointer FILE itself is guarded before it is opened (external code
+    // review, openai MEDIUM): a symlink at `iterate_active/<uuid>.json` pointing
+    // outside the project would otherwise let a file we do not control decide
+    // which run this session resolves to. The filename is uuid-validated above,
+    // so pathGuard can only fail on a crafted root — but realPathGuard is the
+    // one that matters here, and it runs before any read.
+    const rel = [".shipwright", "iterate_active", `${sessionUuid}.json`].join("/");
+    const guard = pathGuard(projectRoot, rel);
+    if (!guard.ok)
+        return { status: "invalid", reason: "unreadable" };
+    if (!existsSync(guard.absolute))
+        return { status: "absent" };
+    const real = realPathGuard(projectRoot, guard.absolute);
+    if (!real.ok)
+        return { status: "invalid", reason: "unreadable" };
+    const file = real.absolute;
+    let raw;
+    try {
+        raw = readFileSync(file, "utf-8");
+    }
+    catch {
+        return { status: "invalid", reason: "unreadable" };
+    }
+    if (raw.length > MAX_POINTER_BYTES)
+        return { status: "invalid", reason: "malformed" };
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return { status: "invalid", reason: "malformed" };
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        return { status: "invalid", reason: "malformed" };
+    }
+    const o = parsed;
+    // (a) session binding — a stale pointer must not win.
+    if (typeof o.session_id !== "string" || o.session_id.toLowerCase() !== sessionUuid.toLowerCase()) {
+        return { status: "invalid", reason: "session_mismatch" };
+    }
+    // (b) project binding — the pointer must belong to THIS project root.
+    if (typeof o.main_root !== "string" || !samePath(o.main_root, projectRoot)) {
+        return { status: "invalid", reason: "main_root_mismatch" };
+    }
+    // The two values that reach a path join.
+    if (!isSafeRunId(o.run_id))
+        return { status: "invalid", reason: "bad_run_id" };
+    if (!isSafeSlug(o.slug))
+        return { status: "invalid", reason: "bad_slug" };
+    return {
+        status: "ok",
+        pointer: {
+            runId: o.run_id,
+            slug: o.slug,
+            branch: typeof o.branch === "string" ? o.branch : null,
+            worktreePath: typeof o.worktree_path === "string" ? o.worktree_path : null,
+            mainRoot: projectRoot,
+            sessionId: sessionUuid,
+            createdAt: typeof o.created_at === "string" ? o.created_at : null,
+        },
+    };
+}
+//# sourceMappingURL=pointer.js.map

package/server/dist/core/mission-context/pointer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pointer.js","sourceRoot":"","sources":["../../../src/core/mission-context/pointer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE5D,mEAAmE;AACnE,MAAM,OAAO,GAAG,iEAAiE,CAAC;AAElF;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,oCAAoC,CAAC;AAExD,SAAS,QAAQ,CAAC,CAAU;IAC1B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,WAAW,CAAC,CAAU;IACpC,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;AACrB,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,UAAU,CAAC,CAAU;IACnC,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAU;IACtC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AA4BD;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,CAAS,EAAE,CAAS;IAC3C,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE;QACjC,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,kDAAkD;QACpD,CAAC;QACD,kEAAkE;QAClE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACjC,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAChE,CAAC,CAAC;IACF,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAC;AAEpC;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,WAAmB,EACnB,WAAmB;IAEnB,qEAAqE;IACrE,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAE1F,wEAAwE;IACxE,6EAA6E;IAC7E,0EAA0E;IAC1E,4EAA4E;IAC5E,0EAA0E;IAC1E,sDAAsD;IACtD,MAAM,GAAG,GAAG,CAAC,aAAa,EAAE,gBAAgB,EAAE,GAAG,WAAW,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAClE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC7D,MAAM,IAAI,GAAG,aAAa,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACjE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC;IAE3B,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACrD,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,GAAG,iBAAiB;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAEtF,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACpD,CAAC;IACD,MAAM,CAAC,GAAG,MAAiC,CAAC;IAE5C,sDAAsD;IACtD,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,WAAW,EAAE,EAAE,CAAC;QACjG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC3D,CAAC;IAED,sEAAsE;IACtE,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC;QAC3E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC7D,CAAC;IAED,yCAAyC;IACzC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC/E,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAE1E,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE;YACP,KAAK,EAAE,CAAC,CAAC,MAAM;YACf,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;YACtD,YAAY,EAAE,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI;YAC1E,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,WAAW;YACtB,SAAS,EAAE,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;SAClE;KACF,CAAC;AACJ,CAAC"}

package/server/dist/core/mission-context/resolver-io.d.ts

@@ -0,0 +1,47 @@
+import type { MergeCheckDeps } from "./merge-check.js";
+import type { CampaignFact } from "./campaign-artifacts.js";
+import type { PipelineFact } from "./pipeline-artifacts.js";
+import type { ScenarioInputs } from "./scenario.js";
+import type { GitRunner } from "./worktree-roots.js";
+import type { MissionContext, MissionContextAssociation } from "./types.js";
+export interface ResolveRequest {
+    taskId: string;
+    sessionUuid: string;
+    projectId: string;
+    projectRoot: string;
+    /** Server-read transcript (bounded tail) — never client-supplied (§5.1). */
+    transcript: string;
+    /** Task facts the server owns (from its own store, not the client). */
+    phaseTaskId: string | null;
+    taskRunId: string | null;
+    campaignSlug: string | null;
+    hasCampaignRecord: boolean;
+    actions: ScenarioInputs["actions"];
+    runConfigStatus: ScenarioInputs["runConfigStatus"];
+    /** Server-owned terminal task state; it overrides a lingering worktree proxy. */
+    taskTerminal?: boolean;
+    /**
+     * S3 — native scenario facts, gathered server-side (external/facts-slice3.ts).
+     * Optional so existing callers/tests compile; absent behaves as `unavailable`,
+     * which SHOWS the artifacts rather than hiding them.
+     */
+    pipeline?: PipelineFact | null;
+    campaign?: CampaignFact | null;
+    /**
+     * The task's persisted association. Read from the server's own store; it is
+     * how a FINALIZED iterate still resolves after its pointer was pruned.
+     */
+    association?: MissionContextAssociation | null;
+}
+export interface ResolveDeps {
+    git?: GitRunner;
+    merge?: MergeCheckDeps;
+}
+export interface ResolveResult {
+    context: MissionContext;
+    /** The run id to persist onto the task, or null when nothing may be written. */
+    associateRunId: string | null;
+    /** Which source identified it — carried into the association for provenance. */
+    associateSource: MissionContextAssociation["source"];
+}
+//# sourceMappingURL=resolver-io.d.ts.map

package/server/dist/core/mission-context/resolver-io.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver-io.d.ts","sourceRoot":"","sources":["../../../src/core/mission-context/resolver-io.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAE5E,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,UAAU,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IACnC,eAAe,EAAE,cAAc,CAAC,iBAAiB,CAAC,CAAC;IACnD,iFAAiF;IACjF,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;IAC/B;;;OAGG;IACH,WAAW,CAAC,EAAE,yBAAyB,GAAG,IAAI,CAAC;CAChD;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,KAAK,CAAC,EAAE,cAAc,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,cAAc,CAAC;IACxB,gFAAgF;IAChF,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gFAAgF;IAChF,eAAe,EAAE,yBAAyB,CAAC,QAAQ,CAAC,CAAC;CACtD"}

package/server/dist/core/mission-context/resolver-io.js

@@ -0,0 +1,11 @@
+/*
+ * core/mission-context/resolver-io.ts — the resolver's INPUT and OUTPUT shapes.
+ *
+ * Split out of resolver.ts (300-LOC rule) rather than merged into types.ts: this
+ * file describes the SERVER-INTERNAL call contract between the route and the
+ * resolver, while types.ts is the versioned WIRE contract the client mirrors.
+ * Keeping them apart is what stops an internal field from drifting into the
+ * mirrored surface by accident (the drift guard checks types.ts, not this).
+ */
+export {};
+//# sourceMappingURL=resolver-io.js.map

package/server/dist/core/mission-context/resolver-io.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver-io.js","sourceRoot":"","sources":["../../../src/core/mission-context/resolver-io.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}