@svenroth-ai/shipwright 0.24.1-next.0

package/server/dist/core/model-tier-config-reader.js

@@ -0,0 +1,87 @@
+/*
+ * Read-only reader for the framework-owned shipwright_model_config.json.
+ *
+ * The file is deliberately resolved from the main Git worktree so a linked
+ * worktree cannot display a stale copy. Missing or malformed configuration is
+ * fail-soft: every role inherits the invoking session's model, which matches
+ * the framework resolver's default behavior.
+ */
+import { execFileSync } from "node:child_process";
+import { existsSync, readFileSync, statSync } from "node:fs";
+import { join } from "node:path";
+export const MODEL_TIER_ROLES = [
+    "plan_review",
+    "review",
+    "finalization",
+    "execution",
+];
+const FILENAME = "shipwright_model_config.json";
+const VALID_TIERS = new Set(["opus", "sonnet", "haiku", "inherit"]);
+function inheritedTiers() {
+    return Object.fromEntries(MODEL_TIER_ROLES.map((role) => [role, { tier: "inherit", source: "unset" }]));
+}
+export function resolveModelConfigRoot(projectPath) {
+    const { GIT_COMMON_DIR: _gitCommonDir, GIT_DIR: _gitDir, GIT_INDEX_FILE: _gitIndexFile, GIT_WORK_TREE: _gitWorkTree, ...gitEnvironment } = process.env;
+    let worktrees;
+    try {
+        worktrees = execFileSync("git", ["worktree", "list", "--porcelain"], {
+            cwd: projectPath,
+            encoding: "utf-8",
+            env: gitEnvironment,
+            stdio: ["ignore", "pipe", "ignore"],
+        });
+    }
+    catch {
+        // Non-Git projects keep the existing fail-soft project-root behavior.
+        return projectPath;
+    }
+    try {
+        const primaryWorktree = worktrees
+            .split(/\r?\n/)
+            .find((line) => line.startsWith("worktree "))
+            ?.slice("worktree ".length);
+        if (primaryWorktree && statSync(primaryWorktree).isDirectory() && existsSync(join(primaryWorktree, ".git"))) {
+            return primaryWorktree;
+        }
+        // `git init --separate-git-dir` can report the metadata directory as the
+        // primary worktree. Its original checkout is not discoverable from a linked
+        // worktree, so returning the linked path would risk reading divergent config.
+        return undefined;
+    }
+    catch {
+        // Git identified a worktree layout but its primary checkout is unusable.
+        // Do not fall back to a linked worktree's possibly divergent config.
+        return undefined;
+    }
+}
+export function readModelTierConfig(projectPath) {
+    const tiers = inheritedTiers();
+    const root = resolveModelConfigRoot(projectPath);
+    if (!root)
+        return { tiers, warning: "model_config_unreadable" };
+    const path = join(root, FILENAME);
+    if (!existsSync(path))
+        return { tiers, warning: "model_config_missing" };
+    let raw;
+    try {
+        raw = JSON.parse(readFileSync(path, "utf-8"));
+    }
+    catch {
+        return { tiers, warning: "model_config_unreadable" };
+    }
+    if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
+        return { tiers, warning: "model_config_invalid" };
+    }
+    let invalidRoleValue = false;
+    for (const role of MODEL_TIER_ROLES) {
+        const candidate = raw[role];
+        if (typeof candidate === "string" && VALID_TIERS.has(candidate)) {
+            tiers[role] = { tier: candidate, source: "project_config" };
+        }
+        else if (candidate !== undefined) {
+            invalidRoleValue = true;
+        }
+    }
+    return invalidRoleValue ? { tiers, warning: "model_config_invalid" } : { tiers };
+}
+//# sourceMappingURL=model-tier-config-reader.js.map

package/server/dist/core/model-tier-config-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-tier-config-reader.js","sourceRoot":"","sources":["../../src/core/model-tier-config-reader.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,aAAa;IACb,QAAQ;IACR,cAAc;IACd,WAAW;CACH,CAAC;AAiBX,MAAM,QAAQ,GAAG,8BAA8B,CAAC;AAChD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AAE/E,SAAS,cAAc;IACrB,OAAO,MAAM,CAAC,WAAW,CACvB,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAChC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,WAAmB;IACxD,MAAM,EACJ,cAAc,EAAE,aAAa,EAC7B,OAAO,EAAE,OAAO,EAChB,cAAc,EAAE,aAAa,EAC7B,aAAa,EAAE,YAAY,EAC3B,GAAG,cAAc,EAClB,GAAG,OAAO,CAAC,GAAG,CAAC;IAEhB,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,YAAY,CACtB,KAAK,EACL,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,EACnC;YACE,GAAG,EAAE,WAAW;YAChB,QAAQ,EAAE,OAAO;YACjB,GAAG,EAAE,cAAc;YACnB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,SAAS;aAC9B,KAAK,CAAC,OAAO,CAAC;aACd,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YAC7C,EAAE,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,eAAe,IAAI,QAAQ,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YAC5G,OAAO,eAAe,CAAC;QACzB,CAAC;QACD,yEAAyE;QACzE,4EAA4E;QAC5E,8EAA8E;QAC9E,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,qEAAqE;QACrE,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IACrD,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACjD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IAEzE,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IACpD,CAAC;IAED,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,MAAM,SAAS,GAAI,GAA+B,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,WAAW,CAAC,GAAG,CAAC,SAAsB,CAAC,EAAE,CAAC;YAC7E,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,SAAsB,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;QAC3E,CAAC;aAAM,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,gBAAgB,GAAG,IAAI,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,gBAAgB,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;AACnF,CAAC"}

package/server/dist/core/normalize-fs-path.d.ts

@@ -0,0 +1,2 @@
+export declare function normalizeFsPath(raw: string): string;
+//# sourceMappingURL=normalize-fs-path.d.ts.map

package/server/dist/core/normalize-fs-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize-fs-path.d.ts","sourceRoot":"","sources":["../../src/core/normalize-fs-path.ts"],"names":[],"mappings":"AAqBA,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAUnD"}

package/server/dist/core/normalize-fs-path.js

@@ -0,0 +1,31 @@
+/*
+ * normalize-fs-path.ts — strip paste-artifact quoting from a user-supplied
+ * filesystem path before it is stored (project.path / task.cwd) or fed to the
+ * launch-command builder in core/launcher.ts.
+ *
+ * Why (iterate-2026-07-06, reported on macOS): a directory path copied from a
+ * shell context — a `cd '…'` line, a drag-into-terminal, or "Copy as Pathname"
+ * on a space-containing folder — arrives wrapped in a matching pair of
+ * surrounding quotes, e.g.
+ *   '/Users/me/Claude Command Center'   or   "C:\Users\me\My Project"
+ * The value is stored verbatim and core/launcher.ts later SHELL-ESCAPES it.
+ * Escaping the LITERAL quote characters yields a broken command —
+ *   cd ''\''/Users/me/Claude Command Center'\''' && claude …
+ * which the shell reads as a directory literally named "'…'", so `cd` fails
+ * ("no such file or directory") and the launch never starts.
+ *
+ * A real path never both begins AND ends with the same quote character, so
+ * removing a single balanced surrounding pair is always safe and never
+ * corrupts a legitimate path. Inner quotes (e.g. o'brien) are preserved, and a
+ * lone leading/trailing quote (not a matching pair) is left untouched.
+ */
+export function normalizeFsPath(raw) {
+    const trimmed = raw.trim();
+    if (trimmed.length >= 2 &&
+        (trimmed[0] === "'" || trimmed[0] === '"') &&
+        trimmed[trimmed.length - 1] === trimmed[0]) {
+        return trimmed.slice(1, -1).trim();
+    }
+    return trimmed;
+}
+//# sourceMappingURL=normalize-fs-path.js.map

package/server/dist/core/normalize-fs-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize-fs-path.js","sourceRoot":"","sources":["../../src/core/normalize-fs-path.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IACE,OAAO,CAAC,MAAM,IAAI,CAAC;QACnB,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;QAC1C,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,EAC1C,CAAC;QACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/server/dist/core/parameter-resolver.d.ts

@@ -0,0 +1,32 @@
+import type { ActionDefinition } from "./project-actions-loader.js";
+import type { ResolvedParam } from "../types/action-schema.js";
+export type ResolverErrorCode = "phase_has_no_parameter_schema" | "unknown_parameter" | "required_parameter_missing" | "parameter_type_mismatch" | "parameter_enum_invalid" | "parameter_pattern_mismatch" | "parameter_invalid_character" | "parameter_value_too_long";
+export interface ResolverError {
+    ok: false;
+    error: ResolverErrorCode;
+    name?: string;
+    detail?: string;
+    allowed?: string[];
+}
+export interface ResolverSuccess {
+    ok: true;
+    resolved: ResolvedParam[];
+}
+export type ResolverResult = ResolverSuccess | ResolverError;
+/** Max byte length for any single string parameter value. */
+export declare const MAX_STRING_PARAM_BYTES: number;
+/**
+ * Resolve user-supplied parameter values against an ActionDefinition for a
+ * specific phase (when the action uses `phase_parameters`).
+ *
+ * - `phase` may be empty/undefined for actions with `parameters` (not
+ *   phase-bound).
+ * - `userParams` is the raw POST body `parameters` field, validated as
+ *   `Record<string, string | boolean>` by the route layer beforehand.
+ */
+export declare function resolveParameters(args: {
+    action: ActionDefinition;
+    phase: string | undefined;
+    userParams: Record<string, string | boolean> | undefined;
+}): ResolverResult;
+//# sourceMappingURL=parameter-resolver.d.ts.map

package/server/dist/core/parameter-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parameter-resolver.d.ts","sourceRoot":"","sources":["../../src/core/parameter-resolver.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,EAAe,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE5E,MAAM,MAAM,iBAAiB,GACzB,+BAA+B,GAC/B,mBAAmB,GACnB,4BAA4B,GAC5B,yBAAyB,GACzB,wBAAwB,GACxB,4BAA4B,GAC5B,6BAA6B,GAC7B,0BAA0B,CAAC;AAE/B,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,iBAAiB,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,IAAI,CAAC;IACT,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B;AAED,MAAM,MAAM,cAAc,GAAG,eAAe,GAAG,aAAa,CAAC;AAE7D,6DAA6D;AAC7D,eAAO,MAAM,sBAAsB,QAAY,CAAC;AAsBhD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,MAAM,EAAE,gBAAgB,CAAC;IACzB,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,SAAS,CAAC;CAC1D,GAAG,cAAc,CA+DjB"}

package/server/dist/core/parameter-resolver.js

@@ -0,0 +1,300 @@
+/*
+ * Parameter resolution for POST /api/external/tasks/:id/launch.
+ *
+ * Plan: iterate/launch-cli-parameters § 3 + § 5.
+ *
+ * Pipeline:
+ *   1. Schema lookup (action.parameters OR action.phase_parameters[phase]).
+ *   2. Default-injection for absent / empty user values (server is Quelle der Wahrheit).
+ *   3. Required-check.
+ *   4. Per-type validation (boolean, enum, string with pattern + control-char reject).
+ *   5. Build ResolvedParam[] in schema order.
+ *
+ * Returns either { ok: true, resolved } or { ok: false, error }.
+ * The route handler maps `error` to a 400 JSON response.
+ *
+ * SECURITY:
+ *   This is not the security boundary for cli_flag injection — that's
+ *   `validateActionsSchema` (allowlist regex at load time). Resolver
+ *   trusts schema.cli_flag came pre-validated.
+ *
+ *   For VALUE inputs, this resolver enforces: pattern, newline-reject,
+ *   control-char-reject (incl. bidi-overrides), 16-KB length cap.
+ */
+/** Max byte length for any single string parameter value. */
+export const MAX_STRING_PARAM_BYTES = 16 * 1024;
+/**
+ * Bidi override + non-printable ASCII control character regex. Tab and LF
+ * are excluded from this check because tabs are sometimes legal in paths
+ * (rare but possible) and LF is rejected separately by the newline check
+ * with a more specific error code.
+ *
+ * Range:
+ *   \x00-\x08  → NUL, SOH ... BS
+ *   \x0B-\x1F  → VT, FF, ... US (skips \x09 TAB, \x0A LF, but \x0D CR is in range)
+ *   \x7F       → DEL
+ *   U+202A..U+202E → LRE/RLE/PDF/LRO/RLO (bidi formatting)
+ *   U+2066..U+2069 → LRI/RLI/FSI/PDI (bidi isolates)
+ */
+const CONTROL_CHAR_REGEX = 
+// The bidi/control codepoints in the class below are the REJECTION set — this
+// regex IS the bidi-override injection DEFENSE (see range doc above), not a
+// trojan-source carrier. Semgrep false positive.
+// nosemgrep: generic.unicode.security.bidi.contains-bidirectional-characters
+/[\x00-\x08\x0B-\x1F\x7F‪-‮⁦-⁩]/;
+/**
+ * Resolve user-supplied parameter values against an ActionDefinition for a
+ * specific phase (when the action uses `phase_parameters`).
+ *
+ * - `phase` may be empty/undefined for actions with `parameters` (not
+ *   phase-bound).
+ * - `userParams` is the raw POST body `parameters` field, validated as
+ *   `Record<string, string | boolean>` by the route layer beforehand.
+ */
+export function resolveParameters(args) {
+    const { action, phase, userParams } = args;
+    const params = userParams ?? {};
+    // Schema lookup.
+    let schema;
+    if (action.phase_parameters) {
+        if (!phase) {
+            // Phase missing, schema is phase-bound — if user supplied any
+            // parameters, fail closed; otherwise nothing to resolve.
+            if (Object.keys(params).length > 0) {
+                return {
+                    ok: false,
+                    error: "phase_has_no_parameter_schema",
+                    detail: "phase_parameters requires a non-empty phase",
+                };
+            }
+            return { ok: true, resolved: [] };
+        }
+        schema = action.phase_parameters[phase];
+        if (!schema) {
+            // Selected phase has no schema entry. Fail closed if the user sent
+            // any parameters; otherwise treat as no-params.
+            if (Object.keys(params).length > 0) {
+                return {
+                    ok: false,
+                    error: "phase_has_no_parameter_schema",
+                    detail: `phase "${phase}" has no parameter schema in this action`,
+                    allowed: Object.keys(action.phase_parameters),
+                };
+            }
+            return { ok: true, resolved: [] };
+        }
+    }
+    else if (action.parameters) {
+        schema = action.parameters;
+    }
+    else {
+        // Action has no parameter schema at all.
+        if (Object.keys(params).length > 0) {
+            return {
+                ok: false,
+                error: "phase_has_no_parameter_schema",
+                detail: "action has no parameter schema",
+            };
+        }
+        return { ok: true, resolved: [] };
+    }
+    // Reject unknown keys before resolving.
+    const knownNames = new Set(schema.map((s) => s.name));
+    for (const key of Object.keys(params)) {
+        if (!knownNames.has(key)) {
+            return { ok: false, error: "unknown_parameter", name: key };
+        }
+    }
+    const resolved = [];
+    for (const s of schema) {
+        const result = resolveOne(s, params[s.name]);
+        if (!result.ok)
+            return result;
+        if (result.value !== undefined)
+            resolved.push(result.value);
+    }
+    return { ok: true, resolved };
+}
+function resolveOne(schema, rawValue) {
+    // iterate/fix-adopt-prompt-shape § 4 — opt-in semantics for OPTIONAL
+    // params: defaults are UI hints, NOT auto-applied. Only user-explicit
+    // values are emitted. This fixes the v0.2.0 bug where defaults like
+    // `crawl-max-depth: 3` were silently appended even when the user
+    // wanted nothing.
+    //
+    // EXCEPTION (review-fix Gemini #2): for REQUIRED params with a
+    // default, the server DOES fall back to the default — otherwise the
+    // user would see the default in the placeholder, leave it untouched,
+    // and get a 400 "required_parameter_missing". The fallback only fires
+    // for `required: true` so optional defaults stay opt-in.
+    let value = rawValue;
+    if (schema.required &&
+        schema.default !== undefined &&
+        (value === undefined ||
+            (typeof value === "string" && value.trim() === ""))) {
+        value = schema.default;
+    }
+    // Required-check (against value, which now includes the required+default fallback above).
+    if (schema.required) {
+        const empty = value === undefined ||
+            value === false ||
+            (typeof value === "string" && value.trim() === "");
+        if (empty) {
+            return {
+                ok: false,
+                error: "required_parameter_missing",
+                name: schema.name,
+            };
+        }
+    }
+    // Boolean.
+    if (schema.type === "boolean") {
+        if (value === undefined || value === false) {
+            return { ok: true, value: undefined };
+        }
+        if (value !== true) {
+            return {
+                ok: false,
+                error: "parameter_type_mismatch",
+                name: schema.name,
+                detail: "expected boolean true/false",
+            };
+        }
+        if (!schema.cli_flag) {
+            // Schema validation guarantees this; defensive only.
+            return {
+                ok: false,
+                error: "parameter_type_mismatch",
+                name: schema.name,
+                detail: "boolean parameter missing cli_flag",
+            };
+        }
+        return {
+            ok: true,
+            value: { cli_flag: schema.cli_flag, separator: "none" },
+        };
+    }
+    // Enum.
+    if (schema.type === "enum") {
+        if (value === undefined)
+            return { ok: true, value: undefined };
+        if (typeof value !== "string") {
+            return {
+                ok: false,
+                error: "parameter_type_mismatch",
+                name: schema.name,
+                detail: "enum parameter must be a string",
+            };
+        }
+        if (!schema.enum?.includes(value)) {
+            return {
+                ok: false,
+                error: "parameter_enum_invalid",
+                name: schema.name,
+                allowed: schema.enum ?? [],
+            };
+        }
+        let flag = schema.cli_flag;
+        if (schema.cli_flag_map) {
+            flag = schema.cli_flag_map[value];
+        }
+        if (!flag) {
+            // skip emission (e.g. deploy.target=dev with no map entry).
+            return { ok: true, value: undefined };
+        }
+        return {
+            ok: true,
+            value: {
+                cli_flag: flag,
+                value,
+                separator: schema.value_separator ?? "space",
+                sensitive: schema.sensitive,
+            },
+        };
+    }
+    // String.
+    if (value === undefined)
+        return { ok: true, value: undefined };
+    if (typeof value !== "string") {
+        return {
+            ok: false,
+            error: "parameter_type_mismatch",
+            name: schema.name,
+            detail: "string parameter must be a string",
+        };
+    }
+    const trimmed = value.trim();
+    if (trimmed === "")
+        return { ok: true, value: undefined };
+    // Length cap.
+    if (Buffer.byteLength(trimmed, "utf-8") > MAX_STRING_PARAM_BYTES) {
+        return {
+            ok: false,
+            error: "parameter_value_too_long",
+            name: schema.name,
+        };
+    }
+    // Newline reject (analog to task.description?).
+    if (/[\r\n]/.test(trimmed)) {
+        return {
+            ok: false,
+            error: "parameter_invalid_character",
+            name: schema.name,
+            detail: "newline characters are not allowed",
+        };
+    }
+    // Control / bidi-override reject.
+    if (CONTROL_CHAR_REGEX.test(trimmed)) {
+        return {
+            ok: false,
+            error: "parameter_invalid_character",
+            name: schema.name,
+            detail: "control or bidi-override character",
+        };
+    }
+    // Pattern check.
+    if (schema.pattern) {
+        let re;
+        try {
+            // `schema.pattern` is a developer-authored action-schema pattern (trusted
+            // config, rejected at load time if malformed), not user input. Semgrep FP.
+            // nosemgrep: javascript.lang.security.audit.detect-non-literal-regexp.detect-non-literal-regexp
+            re = new RegExp(schema.pattern);
+        }
+        catch {
+            // Should be unreachable — validateActionsSchema rejects malformed
+            // patterns at load time. Defensive fall-through.
+            return {
+                ok: false,
+                error: "parameter_pattern_mismatch",
+                name: schema.name,
+                detail: "schema pattern compile failed",
+            };
+        }
+        if (!re.test(trimmed)) {
+            return {
+                ok: false,
+                error: "parameter_pattern_mismatch",
+                name: schema.name,
+            };
+        }
+    }
+    if (!schema.cli_flag) {
+        return {
+            ok: false,
+            error: "parameter_type_mismatch",
+            name: schema.name,
+            detail: "string parameter missing cli_flag",
+        };
+    }
+    return {
+        ok: true,
+        value: {
+            cli_flag: schema.cli_flag,
+            value: trimmed,
+            separator: schema.value_separator ?? "space",
+            sensitive: schema.sensitive,
+        },
+    };
+}
+//# sourceMappingURL=parameter-resolver.js.map

package/server/dist/core/parameter-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parameter-resolver.js","sourceRoot":"","sources":["../../src/core/parameter-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AA8BH,6DAA6D;AAC7D,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,CAAC;AAEhD;;;;;;;;;;;;GAYG;AACH,MAAM,kBAAkB;AACtB,8EAA8E;AAC9E,4EAA4E;AAC5E,iDAAiD;AACjD,6EAA6E;AAC7E,gCAAgC,CAAC;AAEnC;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAIjC;IACC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAC3C,MAAM,MAAM,GAAG,UAAU,IAAI,EAAE,CAAC;IAEhC,iBAAiB;IACjB,IAAI,MAAiC,CAAC;IACtC,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,8DAA8D;YAC9D,yDAAyD;YACzD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,+BAA+B;oBACtC,MAAM,EAAE,6CAA6C;iBACtD,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACpC,CAAC;QACD,MAAM,GAAG,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,mEAAmE;YACnE,gDAAgD;YAChD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,+BAA+B;oBACtC,MAAM,EAAE,UAAU,KAAK,0CAA0C;oBACjE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;iBAC9C,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACpC,CAAC;IACH,CAAC;SAAM,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QAC7B,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,yCAAyC;QACzC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,+BAA+B;gBACtC,MAAM,EAAE,gCAAgC;aACzC,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IACpC,CAAC;IAED,wCAAwC;IACxC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAQD,SAAS,UAAU,CACjB,MAAmB,EACnB,QAAsC;IAEtC,qEAAqE;IACrE,sEAAsE;IACtE,oEAAoE;IACpE,iEAAiE;IACjE,kBAAkB;IAClB,EAAE;IACF,+DAA+D;IAC/D,oEAAoE;IACpE,qEAAqE;IACrE,sEAAsE;IACtE,yDAAyD;IACzD,IAAI,KAAK,GAAiC,QAAQ,CAAC;IACnD,IACE,MAAM,CAAC,QAAQ;QACf,MAAM,CAAC,OAAO,KAAK,SAAS;QAC5B,CAAC,KAAK,KAAK,SAAS;YAClB,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,EACrD,CAAC;QACD,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC;IACzB,CAAC;IAED,0FAA0F;IAC1F,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,MAAM,KAAK,GACT,KAAK,KAAK,SAAS;YACnB,KAAK,KAAK,KAAK;YACf,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,IAAI,KAAK,EAAE,CAAC;YACV,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,4BAA4B;gBACnC,IAAI,EAAE,MAAM,CAAC,IAAI;aAClB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,WAAW;IACX,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;YAC3C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QACxC,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,yBAAyB;gBAChC,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,6BAA6B;aACtC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrB,qDAAqD;YACrD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,yBAAyB;gBAChC,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,oCAAoC;aAC7C,CAAC;QACJ,CAAC;QACD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE;SACxD,CAAC;IACJ,CAAC;IAED,QAAQ;IACR,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAC/D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,yBAAyB;gBAChC,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,iCAAiC;aAC1C,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,wBAAwB;gBAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;aAC3B,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,GAAuB,MAAM,CAAC,QAAQ,CAAC;QAC/C,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,4DAA4D;YAC5D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QACxC,CAAC;QACD,OAAO;YACL,EAAE,EAAE,IAAI;YACR,KAAK,EAAE;gBACL,QAAQ,EAAE,IAAI;gBACd,KAAK;gBACL,SAAS,EAAE,MAAM,CAAC,eAAe,IAAI,OAAO;gBAC5C,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B;SACF,CAAC;IACJ,CAAC;IAED,UAAU;IACV,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC/D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,yBAAyB;YAChC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,mCAAmC;SAC5C,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAE1D,cAAc;IACd,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,sBAAsB,EAAE,CAAC;QACjE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,0BAA0B;YACjC,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC;IACJ,CAAC;IAED,gDAAgD;IAChD,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,6BAA6B;YACpC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,oCAAoC;SAC7C,CAAC;IACJ,CAAC;IAED,kCAAkC;IAClC,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,6BAA6B;YACpC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,oCAAoC;SAC7C,CAAC;IACJ,CAAC;IAED,iBAAiB;IACjB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,IAAI,EAAU,CAAC;QACf,IAAI,CAAC;YACH,0EAA0E;YAC1E,2EAA2E;YAC3E,gGAAgG;YAChG,EAAE,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;YAClE,iDAAiD;YACjD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,4BAA4B;gBACnC,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,+BAA+B;aACxC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACtB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,4BAA4B;gBACnC,IAAI,EAAE,MAAM,CAAC,IAAI;aAClB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,yBAAyB;YAChC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,MAAM,EAAE,mCAAmC;SAC5C,CAAC;IACJ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,OAAO;YACd,SAAS,EAAE,MAAM,CAAC,eAAe,IAAI,OAAO;YAC5C,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B;KACF,CAAC;AACJ,CAAC"}

package/server/dist/core/path-guard.d.ts

@@ -0,0 +1,40 @@
+export type PathGuardReason = "traversal" | "absolute_input" | "drive_change" | "symlink_escape";
+export type PathGuardResult = {
+    ok: true;
+    absolute: string;
+} | {
+    ok: false;
+    reason: PathGuardReason;
+};
+/**
+ * Check whether `relpath` resolves safely under `projectRoot`.
+ *
+ * @param projectRoot Absolute path to the project directory.
+ * @param relpath     User-supplied path. May be "" or "." to mean root.
+ */
+export declare function pathGuard(projectRoot: string, relpath: string): PathGuardResult;
+/**
+ * Follow-up guard that resolves symlinks on disk and re-verifies the result
+ * still lands under the project root. Must be called AFTER `pathGuard` and
+ * ONLY when the path is known to exist (i.e. after a successful stat).
+ *
+ * Rationale (plan § 7 O8 "Symlink escape"):
+ *   path.resolve / path.relative operate on strings, not on the filesystem.
+ *   A malicious project could contain `config -> /etc`, and a request for
+ *   `config/passwd` would pass the string-only pathGuard because the
+ *   textual relative path is "config/passwd". `fs.realpathSync` resolves
+ *   the symlink to `/etc/passwd`, which a re-application of path.relative
+ *   against the project root will reject as a traversal.
+ *
+ * On ENOENT (symlink target missing), we return `symlink_escape` as well —
+ * safer to refuse than to silently succeed when realpath can't verify.
+ * Callers should NOT gate on this failure for the "path doesn't exist"
+ * case — they should have already stat()-ed first.
+ *
+ * Returns the realpath-resolved absolute path on success (the caller may
+ * prefer to read from the realpath rather than the possibly-symlinked
+ * guard.absolute, though in practice fs reads against either produce the
+ * same bytes as long as both land under the root).
+ */
+export declare function realPathGuard(projectRoot: string, absoluteInsideRoot: string): PathGuardResult;
+//# sourceMappingURL=path-guard.d.ts.map

package/server/dist/core/path-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-guard.d.ts","sourceRoot":"","sources":["../../src/core/path-guard.ts"],"names":[],"mappings":"AA0BA,MAAM,MAAM,eAAe,GACvB,WAAW,GACX,gBAAgB,GAChB,cAAc,GACd,gBAAgB,CAAC;AAErB,MAAM,MAAM,eAAe,GACvB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,eAAe,CAAA;CAAE,CAAC;AAE3C;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,eAAe,CA0E/E;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,aAAa,CAC3B,WAAW,EAAE,MAAM,EACnB,kBAAkB,EAAE,MAAM,GACzB,eAAe,CAqCjB"}