@svenroth-ai/shipwright 0.24.1-next.0

package/server/dist/core/triage-amend.d.ts

@@ -0,0 +1,33 @@
+import type { TriagePriority, TriageSeverity } from "../types/triage.js";
+/** Fields an `amend` event may correct. */
+export declare const AMENDABLE_FIELDS: readonly ["title", "detail", "severity", "kind"];
+/** Resolved-item keys carrying who/when the item was last amended. */
+export declare const AMENDED_BY_FIELD = "amendedBy";
+export declare const AMENDED_AT_FIELD = "amendedAt";
+/** Pure: severity → P0..P3. Mirrors `triage_fields.suggest_priority_from_severity`. */
+export declare function suggestPriorityFromSeverity(severity: TriageSeverity): TriagePriority;
+/**
+ * True iff every field PRESENT on `raw` is well-typed and, for the two
+ * closed-vocabulary fields, a member of the current vocabulary. Does NOT
+ * check for contentless amends — that is a writer-side precondition, not a
+ * resolver concern (a stored line already on disk only has its field
+ * VALIDITY in question by the time a reader sees it).
+ */
+export declare function validateAmendEvent(raw: Record<string, unknown>): boolean;
+/**
+ * Overlay a VALIDATED amend event onto a resolved item, in place. Caller
+ * must have already confirmed `validateAmendEvent(raw)` — an invalid amend
+ * is the caller's responsibility to skip in its entirety, never partially
+ * applied here.
+ *
+ * `item.ts` is deliberately NOT overlaid — it keeps meaning "time of the
+ * last STATUS decision", exactly as before this event type existed.
+ */
+export declare function applyAmend(item: Record<string, unknown>, raw: Record<string, unknown>): void;
+/**
+ * Validate-then-overlay in one call for the `resolveUnion` Pass 2 dispatch:
+ * an invalid `raw` is skipped WHOLE (no-op on `item`), never partially
+ * applied.
+ */
+export declare function tryApplyAmend(item: Record<string, unknown>, raw: Record<string, unknown>): void;
+//# sourceMappingURL=triage-amend.d.ts.map

package/server/dist/core/triage-amend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"triage-amend.d.ts","sourceRoot":"","sources":["../../src/core/triage-amend.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAc,cAAc,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAErF,2CAA2C;AAC3C,eAAO,MAAM,gBAAgB,kDAAmD,CAAC;AAEjF,sEAAsE;AACtE,eAAO,MAAM,gBAAgB,cAAc,CAAC;AAC5C,eAAO,MAAM,gBAAgB,cAAc,CAAC;AAwB5C,uFAAuF;AACvF,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,cAAc,GAAG,cAAc,CAEpF;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CASxE;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAY5F;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAE/F"}

package/server/dist/core/triage-amend.js

@@ -0,0 +1,109 @@
+/*
+ * triage-amend.ts — TS port of `lib/triage_amend.py`: the `amend` event's
+ * vocabulary, validation, and the Pass-2 overlay applied to a resolved
+ * triage item.
+ *
+ * iterate-2026-08-08-triage-amend-reader. A card's `title`/`detail`/
+ * `severity`/`kind` can be corrected in place — id stable — instead of
+ * dismiss-and-refile. NOT amendable: `source`, `dedupKey`, `runId`,
+ * `evidencePath`, `commit`, `launchPayload`, `frId`, `suiteId`, `eventId`,
+ * `status` (status stays exclusively a `status` event).
+ *
+ * Split out of `triage-store.ts` for the same reason the Python side split
+ * out of `triage.py`: that module is already at its documented
+ * bloat-baseline ceiling with little headroom (see `triage-store.ts`'s own
+ * header) — mirroring the Python module boundary keeps the two languages'
+ * structure congruent for this cross-language contract.
+ *
+ * Whole-event validation, never partial application: `validateAmendEvent`
+ * checks every field PRESENT on a raw event; if any present field is
+ * invalid, the caller skips the WHOLE event (mirrors the existing
+ * convention for a damaged `status` event in `triage-store.ts`). A field
+ * ABSENT from an amend is simply not applied, leaving the target unchanged.
+ */
+/** Fields an `amend` event may correct. */
+export const AMENDABLE_FIELDS = ["title", "detail", "severity", "kind"];
+/** Resolved-item keys carrying who/when the item was last amended. */
+export const AMENDED_BY_FIELD = "amendedBy";
+export const AMENDED_AT_FIELD = "amendedAt";
+const SEVERITY_VALUES = new Set([
+    "critical",
+    "high",
+    "medium",
+    "low",
+    "info",
+]);
+const KIND_VALUES = new Set([
+    "bug",
+    "feature",
+    "improvement",
+    "compliance",
+    "maintenance",
+]);
+const PRIORITY_FROM_SEVERITY = {
+    critical: "P0",
+    high: "P1",
+    medium: "P2",
+    low: "P3",
+    info: "P3",
+};
+/** Pure: severity → P0..P3. Mirrors `triage_fields.suggest_priority_from_severity`. */
+export function suggestPriorityFromSeverity(severity) {
+    return PRIORITY_FROM_SEVERITY[severity];
+}
+/**
+ * True iff every field PRESENT on `raw` is well-typed and, for the two
+ * closed-vocabulary fields, a member of the current vocabulary. Does NOT
+ * check for contentless amends — that is a writer-side precondition, not a
+ * resolver concern (a stored line already on disk only has its field
+ * VALIDITY in question by the time a reader sees it).
+ */
+export function validateAmendEvent(raw) {
+    if ("title" in raw) {
+        const title = raw.title;
+        if (typeof title !== "string" || !title.trim())
+            return false;
+    }
+    if ("detail" in raw && typeof raw.detail !== "string")
+        return false;
+    if ("severity" in raw && !SEVERITY_VALUES.has(raw.severity))
+        return false;
+    if ("kind" in raw && !KIND_VALUES.has(raw.kind))
+        return false;
+    return true;
+}
+/**
+ * Overlay a VALIDATED amend event onto a resolved item, in place. Caller
+ * must have already confirmed `validateAmendEvent(raw)` — an invalid amend
+ * is the caller's responsibility to skip in its entirety, never partially
+ * applied here.
+ *
+ * `item.ts` is deliberately NOT overlaid — it keeps meaning "time of the
+ * last STATUS decision", exactly as before this event type existed.
+ */
+export function applyAmend(item, raw) {
+    if ("title" in raw)
+        item.title = raw.title;
+    if ("detail" in raw)
+        item.detail = raw.detail;
+    if ("severity" in raw) {
+        item.severity = raw.severity;
+        item.suggestedPriority = suggestPriorityFromSeverity(raw.severity);
+    }
+    if ("kind" in raw)
+        item.kind = raw.kind;
+    const rawBy = raw.by;
+    const rawTs = raw.ts;
+    item[AMENDED_BY_FIELD] = typeof rawBy === "string" ? rawBy : null;
+    item[AMENDED_AT_FIELD] = typeof rawTs === "string" ? rawTs : null;
+}
+/**
+ * Validate-then-overlay in one call for the `resolveUnion` Pass 2 dispatch:
+ * an invalid `raw` is skipped WHOLE (no-op on `item`), never partially
+ * applied.
+ */
+export function tryApplyAmend(item, raw) {
+    if (validateAmendEvent(raw))
+        applyAmend(item, raw);
+}
+//# sourceMappingURL=triage-amend.js.map

package/server/dist/core/triage-amend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"triage-amend.js","sourceRoot":"","sources":["../../src/core/triage-amend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,2CAA2C;AAC3C,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAU,CAAC;AAEjF,sEAAsE;AACtE,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAC;AAC5C,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAC;AAE5C,MAAM,eAAe,GAAgC,IAAI,GAAG,CAAC;IAC3D,UAAU;IACV,MAAM;IACN,QAAQ;IACR,KAAK;IACL,MAAM;CACP,CAAC,CAAC;AACH,MAAM,WAAW,GAA4B,IAAI,GAAG,CAAC;IACnD,KAAK;IACL,SAAS;IACT,aAAa;IACb,YAAY;IACZ,aAAa;CACd,CAAC,CAAC;AACH,MAAM,sBAAsB,GAA2C;IACrE,QAAQ,EAAE,IAAI;IACd,IAAI,EAAE,IAAI;IACV,MAAM,EAAE,IAAI;IACZ,GAAG,EAAE,IAAI;IACT,IAAI,EAAE,IAAI;CACX,CAAC;AAEF,uFAAuF;AACvF,MAAM,UAAU,2BAA2B,CAAC,QAAwB;IAClE,OAAO,sBAAsB,CAAC,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAA4B;IAC7D,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;QACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;YAAE,OAAO,KAAK,CAAC;IAC/D,CAAC;IACD,IAAI,QAAQ,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACpE,IAAI,UAAU,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,QAA0B,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5F,IAAI,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAkB,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5E,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU,CAAC,IAA6B,EAAE,GAA4B;IACpF,IAAI,OAAO,IAAI,GAAG;QAAE,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IAC3C,IAAI,QAAQ,IAAI,GAAG;QAAE,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC9C,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;QACtB,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC7B,IAAI,CAAC,iBAAiB,GAAG,2BAA2B,CAAC,GAAG,CAAC,QAA0B,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,MAAM,IAAI,GAAG;QAAE,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,EAAE,CAAC;IACrB,MAAM,KAAK,GAAG,GAAG,CAAC,EAAE,CAAC;IACrB,IAAI,CAAC,gBAAgB,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,IAAI,CAAC,gBAAgB,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAA6B,EAAE,GAA4B;IACvF,IAAI,kBAAkB,CAAC,GAAG,CAAC;QAAE,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACrD,CAAC"}

package/server/dist/core/triage-board-read.d.ts

@@ -0,0 +1,37 @@
+import type { TriageItem } from "../types/triage.js";
+export interface BoardOrigin {
+    /** True when the delivered-origin snapshot was unioned into the read. */
+    available: boolean;
+    /** Commits the local checkout is behind its upstream, or null. */
+    behind: number | null;
+    /**
+     * iterate-2026-08-08-triage-amend-reader (AC9): true when a status/amend
+     * write right now would route to the per-tree outbox (idle main — origin
+     * remote + HEAD on the default branch). False means a write lands on the
+     * TRACKED store instead — the Edit UI uses this to disclose that BEFORE
+     * the operator submits, not after. Optional/absent-safe: an older client
+     * or a read that fell back to DEGRADED treats it as unknown.
+     */
+    writesRouteToOutbox?: boolean;
+}
+export interface BoardRead {
+    items: TriageItem[];
+    origin: BoardOrigin;
+}
+/**
+ * Feature flag for the delivered-origin union read. Default ON; set
+ * SHIPWRIGHT_WEBUI_TRIAGE_ORIGIN_UNION=0|false|off to roll back to the pure
+ * local-only read. Independent of the automatic degrade-to-local on any git
+ * failure — this is an explicit kill switch.
+ */
+export declare function originUnionEnabled(): boolean;
+/**
+ * Resolve the board items for a tracked `triage.jsonl` path, unioning the
+ * delivered-origin snapshot. Degrades to the pure local union (identical to
+ * `readAllItems`) when the flag is off or any git step fails. A read failure
+ * (e.g. the file was rotated mid-request) is caught here and logged, returning
+ * empty items — the caller stays a thin one-liner. Items are shallow-cloned so
+ * the route's per-request enrichment never mutates shared objects.
+ */
+export declare function readBoardItems(trackedAbsolute: string, projectId: string): Promise<BoardRead>;
+//# sourceMappingURL=triage-board-read.d.ts.map

package/server/dist/core/triage-board-read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"triage-board-read.d.ts","sourceRoot":"","sources":["../../src/core/triage-board-read.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAIrD,MAAM,WAAW,WAAW;IAC1B,yEAAyE;IACzE,SAAS,EAAE,OAAO,CAAC;IACnB,kEAAkE;IAClE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;;;;;;;OAOG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,MAAM,EAAE,WAAW,CAAC;CACrB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,IAAI,OAAO,CAG5C;AAkFD;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAClC,eAAe,EAAE,MAAM,EACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,SAAS,CAAC,CA0CpB"}

package/server/dist/core/triage-board-read.js

@@ -0,0 +1,148 @@
+/*
+ * triage-board-read.ts — board read for GET /api/triage/:projectId.
+ *
+ * Composes the local triage union with the delivered-origin snapshot so a
+ * dismiss already delivered to origin (but not yet pulled locally) is reflected
+ * — the root-cause fix for the "ghost" bug. Kept out of routes/triage.ts to
+ * hold that (oversize) route module flat and to keep the git/compose wiring in
+ * one testable place (external review "split into layers").
+ */
+import { execFile } from "node:child_process";
+import path from "node:path";
+import { promisify } from "node:util";
+import { readAllItemsWithDeliveredOrigin } from "./triage-compose.js";
+import { loadDeliveredOrigin } from "./triage-origin.js";
+/**
+ * Feature flag for the delivered-origin union read. Default ON; set
+ * SHIPWRIGHT_WEBUI_TRIAGE_ORIGIN_UNION=0|false|off to roll back to the pure
+ * local-only read. Independent of the automatic degrade-to-local on any git
+ * failure — this is an explicit kill switch.
+ */
+export function originUnionEnabled() {
+    const v = (process.env.SHIPWRIGHT_WEBUI_TRIAGE_ORIGIN_UNION ?? "").trim().toLowerCase();
+    return v !== "0" && v !== "false" && v !== "off";
+}
+const execFileAsync = promisify(execFile);
+async function gitAsync(projectRoot, gitArgs) {
+    try {
+        const { stdout } = await execFileAsync("git", ["-C", projectRoot, ...gitArgs], {
+            encoding: "utf-8",
+            timeout: 5000,
+            windowsHide: true,
+        });
+        return stdout.trim();
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * AC9's disclosure signal — read path twin of the Python CLI's
+ * `shouldRouteToOutbox`. This path is polled every 30 s per registered
+ * project (useTriage.ts); the write path's version uses `spawnSync`, which
+ * blocks Node's single event loop for the duration of up to 3 git calls on
+ * EVERY poll of EVERY project (code-reviewer, iterate-2026-08-08-triage-
+ * amend-reader). A first fix cached that cost with a short TTL, but a cached
+ * `true` can be served for up to the TTL after HEAD actually moves off the
+ * default branch — silently suppressing AC9's disclosure banner in exactly
+ * the case it exists to catch, the opposite of the spec's "fail toward
+ * disclosure" principle (external code-review finding). `execFile` runs
+ * off-thread (libuv), so the event loop stays free without caching anything
+ * — this closes the performance and the staleness concern at once. Same
+ * short-circuit logic and fail-safe-false semantics as the sync version;
+ * kept as its own function since this
+ * read path is its only caller.
+ */
+async function shouldRouteToOutboxAsync(projectRoot) {
+    if ((await gitAsync(projectRoot, ["remote", "get-url", "origin"])) === null)
+        return false;
+    const current = await gitAsync(projectRoot, ["rev-parse", "--abbrev-ref", "HEAD"]);
+    if (!current)
+        return false;
+    const head = await gitAsync(projectRoot, ["symbolic-ref", "--short", "refs/remotes/origin/HEAD"]);
+    const defaultBranch = head ? head.replace(/^origin\//, "") : "main";
+    return current === defaultBranch;
+}
+const DEGRADED = { available: false, behind: null };
+/**
+ * Cap on fragments carried into one log line, so a badly damaged file cannot
+ * emit an unbounded log event. The COUNT is still reported in full.
+ */
+const CORRUPT_LOG_CAP = 5;
+/**
+ * Report unrecoverable fragments at the command boundary — the leaf
+ * (`jsonl-records.ts`) never logs, so background callers, tests and routes all
+ * behave predictably (iterate-2026-07-18-triage-jsonl-record-boundary).
+ *
+ * Records recovered from the same physical line are ALREADY in `items`; this
+ * only surfaces what could not be decoded, so corruption never reads as
+ * absence silently. Server log only — deliberately no API field, no client
+ * type and no UI banner: the repair tooling lives in the shipwright monorepo,
+ * not the WebUI, so a banner would report a problem the operator cannot act on
+ * from here.
+ */
+function reportCorruption(projectId, total, sample) {
+    if (total === 0)
+        return;
+    console.warn(JSON.stringify({
+        level: "warn",
+        message: "triage log corruption recovered",
+        projectId,
+        // `total` is the true count; `sample` is capped, so the two differ on a
+        // badly damaged file. Reporting only the sample length would under-report.
+        fragments: total,
+        sample,
+    }));
+}
+/**
+ * Resolve the board items for a tracked `triage.jsonl` path, unioning the
+ * delivered-origin snapshot. Degrades to the pure local union (identical to
+ * `readAllItems`) when the flag is off or any git step fails. A read failure
+ * (e.g. the file was rotated mid-request) is caught here and logged, returning
+ * empty items — the caller stays a thin one-liner. Items are shallow-cloned so
+ * the route's per-request enrichment never mutates shared objects.
+ */
+export async function readBoardItems(trackedAbsolute, projectId) {
+    try {
+        const projectRoot = path.dirname(path.dirname(trackedAbsolute));
+        const delivered = loadDeliveredOrigin(projectRoot, { enabled: originUnionEnabled() });
+        const corrupt = [];
+        let corruptTotal = 0;
+        const items = readAllItemsWithDeliveredOrigin(trackedAbsolute, {
+            originRawLines: delivered.originRawLines,
+            // Bounded METADATA only — never the fragment text. A damaged tail can
+            // hold arbitrary log contents and control characters, and this is a
+            // user-facing read path. Mirrors the Python warning, which reports
+            // "<n> bytes unrecoverable".
+            onCorrupt: (fragment, source) => {
+                corruptTotal += 1;
+                if (corrupt.length >= CORRUPT_LOG_CAP)
+                    return;
+                corrupt.push({
+                    source,
+                    lineNo: fragment.lineNo,
+                    bytes: Buffer.byteLength(fragment.text, "utf-8"),
+                });
+            },
+        }).map((it) => ({ ...it }));
+        reportCorruption(projectId, corruptTotal, corrupt);
+        return {
+            items,
+            origin: {
+                available: delivered.originAvailable,
+                behind: delivered.localBehind,
+                writesRouteToOutbox: await shouldRouteToOutboxAsync(projectRoot),
+            },
+        };
+    }
+    catch (err) {
+        console.warn(JSON.stringify({
+            level: "warn",
+            message: "triage read failed",
+            projectId,
+            error: String(err).slice(0, 200),
+        }));
+        return { items: [], origin: DEGRADED };
+    }
+}
+//# sourceMappingURL=triage-board-read.js.map

package/server/dist/core/triage-board-read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"triage-board-read.js","sourceRoot":"","sources":["../../src/core/triage-board-read.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,OAAO,EAAE,+BAA+B,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAuBzD;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxF,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,KAAK,CAAC;AACnD,CAAC;AAED,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,KAAK,UAAU,QAAQ,CAAC,WAAmB,EAAE,OAAiB;IAC5D,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,EAAE;YAC7E,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,KAAK,UAAU,wBAAwB,CAAC,WAAmB;IACzD,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC1F,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;IACnF,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,0BAA0B,CAAC,CAAC,CAAC;IAClG,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACpE,OAAO,OAAO,KAAK,aAAa,CAAC;AACnC,CAAC;AAED,MAAM,QAAQ,GAAgB,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAEjE;;;GAGG;AACH,MAAM,eAAe,GAAG,CAAC,CAAC;AAE1B;;;;;;;;;;;GAWG;AACH,SAAS,gBAAgB,CACvB,SAAiB,EACjB,KAAa,EACb,MAA2D;IAE3D,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO;IACxB,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;QACb,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,iCAAiC;QAC1C,SAAS;QACT,wEAAwE;QACxE,2EAA2E;QAC3E,SAAS,EAAE,KAAK;QAChB,MAAM;KACP,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,eAAuB,EACvB,SAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;QAChE,MAAM,SAAS,GAAG,mBAAmB,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;QACtF,MAAM,OAAO,GAAwD,EAAE,CAAC;QACxE,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,MAAM,KAAK,GAAG,+BAA+B,CAAC,eAAe,EAAE;YAC7D,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,sEAAsE;YACtE,oEAAoE;YACpE,mEAAmE;YACnE,6BAA6B;YAC7B,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;gBAC9B,YAAY,IAAI,CAAC,CAAC;gBAClB,IAAI,OAAO,CAAC,MAAM,IAAI,eAAe;oBAAE,OAAO;gBAC9C,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM;oBACN,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;iBACjD,CAAC,CAAC;YACL,CAAC;SACF,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QAC5B,gBAAgB,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;QACnD,OAAO;YACL,KAAK;YACL,MAAM,EAAE;gBACN,SAAS,EAAE,SAAS,CAAC,eAAe;gBACpC,MAAM,EAAE,SAAS,CAAC,WAAW;gBAC7B,mBAAmB,EAAE,MAAM,wBAAwB,CAAC,WAAW,CAAC;aACjE;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;YACb,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,oBAAoB;YAC7B,SAAS;YACT,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SACjC,CAAC,CACH,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACzC,CAAC;AACH,CAAC"}

package/server/dist/core/triage-cli-runner.d.ts

@@ -0,0 +1,61 @@
+import { type RunFn } from "./readiness-probe.js";
+export declare const TRIAGE_CLI_TIMEOUT_MS = 30000;
+export interface TriageCliSpawnResult {
+    code: number;
+    stdout: string;
+    stderr: string;
+    spawnError?: string;
+}
+export type TriageCliSpawn = (bin: string, args: string[], options: {
+    timeoutMs: number;
+    env: NodeJS.ProcessEnv;
+}) => Promise<TriageCliSpawnResult>;
+export interface TriageWriteAvailability {
+    available: boolean;
+    /** A background probe is still resolving; callers should refresh shortly. */
+    checking?: boolean;
+    reason?: string;
+    repairCommand?: string;
+}
+export type TriageCliResult = {
+    kind: "ok";
+    operation: string;
+    item: Record<string, unknown>;
+} | {
+    kind: "precondition";
+} | {
+    kind: "not-found";
+} | {
+    kind: "store-uninitialised";
+} | {
+    kind: "lock-timeout";
+} | {
+    kind: "engine-unavailable";
+    reason: string;
+    repairCommand: string;
+} | {
+    kind: "failed";
+    reason: string;
+};
+export interface RunTriageCliInput {
+    projectRoot: string;
+    operation: "show" | "promote" | "dismiss" | "snooze" | "amend";
+    itemId: string;
+    args: string[];
+}
+export interface TriageCliDeps {
+    run?: RunFn;
+    spawn?: TriageCliSpawn;
+    existsFn?: (p: string) => boolean;
+    homeDir?: string;
+    scriptOverride?: string;
+    timeoutMs?: number;
+    baseEnv?: NodeJS.ProcessEnv;
+}
+/** Resolve the single cache-owned CLI shipped with the Shipwright runtime. */
+export declare function resolveTriageCliScript(deps?: Pick<TriageCliDeps, "existsFn" | "homeDir" | "scriptOverride">): string | null;
+export declare const defaultSpawnTriageCli: TriageCliSpawn;
+export declare function triageWriteAvailability(deps?: TriageCliDeps): Promise<TriageWriteAvailability>;
+/** Execute one transition with fixed argv positions and consume the CLI JSON envelope. */
+export declare function runTriageCli(input: RunTriageCliInput, deps?: TriageCliDeps): Promise<TriageCliResult>;
+//# sourceMappingURL=triage-cli-runner.d.ts.map

package/server/dist/core/triage-cli-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"triage-cli-runner.d.ts","sourceRoot":"","sources":["../../src/core/triage-cli-runner.ts"],"names":[],"mappings":"AAeA,OAAO,EAA4E,KAAK,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAE5H,eAAO,MAAM,qBAAqB,QAAS,CAAC;AAE5C,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,cAAc,GAAG,CAC3B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAA;CAAE,KACnD,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAEnC,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,OAAO,CAAC;IACnB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAChE;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,GACxB;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,GACrB;IAAE,IAAI,EAAE,qBAAqB,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,GACxB;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GACrE;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC/D,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,EAAE,KAAK,CAAC;IACZ,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CAC7B;AAED,8EAA8E;AAC9E,wBAAgB,sBAAsB,CAAC,IAAI,GAAE,IAAI,CAAC,aAAa,EAAE,UAAU,GAAG,SAAS,GAAG,gBAAgB,CAAM,GAAG,MAAM,GAAG,IAAI,CAW/H;AAED,eAAO,MAAM,qBAAqB,EAAE,cAsBhC,CAAC;AAML,wBAAsB,uBAAuB,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAIxG;AAMD,0FAA0F;AAC1F,wBAAsB,YAAY,CAChC,KAAK,EAAE,iBAAiB,EACxB,IAAI,GAAE,aAAkB,GACvB,OAAO,CAAC,eAAe,CAAC,CAgC1B"}

package/server/dist/core/triage-cli-runner.js

@@ -0,0 +1,92 @@
+/*
+ * triage-cli-runner — the Command Center's sole write bridge for triage.
+ *
+ * Triage reads remain native TypeScript because they are latency-sensitive and
+ * have no mutual-exclusion requirement. Every transition, however, executes
+ * the Python CLI so its FileLock owns the compare-and-swap, residence choice,
+ * schema bootstrap and record-boundary handling. There is deliberately no
+ * TypeScript append fallback: an unavailable writer disables the UI instead.
+ */
+import { execFile } from "node:child_process";
+import { existsSync } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { defaultRun, READINESS_REPAIR_COMMAND, resolvePython, shipwrightCacheRoot } from "./readiness-probe.js";
+export const TRIAGE_CLI_TIMEOUT_MS = 30_000;
+/** Resolve the single cache-owned CLI shipped with the Shipwright runtime. */
+export function resolveTriageCliScript(deps = {}) {
+    const exists = deps.existsFn ?? existsSync;
+    if (deps.scriptOverride)
+        return exists(deps.scriptOverride) ? deps.scriptOverride : null;
+    const candidate = path.join(shipwrightCacheRoot(deps.homeDir ?? os.homedir()), "shared", "scripts", "tools", "triage_cli.py");
+    return exists(candidate) ? candidate : null;
+}
+export const defaultSpawnTriageCli = (bin, args, options) => new Promise((resolve) => {
+    execFile(bin, args, {
+        encoding: "utf-8",
+        timeout: options.timeoutMs,
+        windowsHide: true,
+        maxBuffer: 1024 * 1024,
+        env: options.env,
+    }, (error, stdout, stderr) => {
+        const out = String(stdout ?? "");
+        const err = String(stderr ?? "");
+        if (!error)
+            return resolve({ code: 0, stdout: out, stderr: err });
+        const e = error;
+        if (typeof e.code === "string")
+            return resolve({ code: -1, stdout: out, stderr: err, spawnError: e.code });
+        if (e.killed)
+            return resolve({ code: 124, stdout: out, stderr: err, spawnError: "timeout" });
+        return resolve({ code: typeof e.code === "number" ? e.code : 1, stdout: out, stderr: err });
+    });
+});
+function unavailable(reason) {
+    return { available: false, reason, repairCommand: READINESS_REPAIR_COMMAND };
+}
+export async function triageWriteAvailability(deps = {}) {
+    if (!resolveTriageCliScript(deps))
+        return unavailable("The triage write engine isn't installed.");
+    if (!(await resolvePython(deps.run ?? defaultRun)))
+        return unavailable("No working Python (3.11+) was found.");
+    return { available: true };
+}
+function cleanStderr(stderr) {
+    return stderr.split(/\r?\n/).map((line) => line.trim()).filter(Boolean).pop() ?? "";
+}
+/** Execute one transition with fixed argv positions and consume the CLI JSON envelope. */
+export async function runTriageCli(input, deps = {}) {
+    const script = resolveTriageCliScript(deps);
+    if (!script)
+        return { kind: "engine-unavailable", reason: "The triage write engine isn't installed.", repairCommand: READINESS_REPAIR_COMMAND };
+    const python = await resolvePython(deps.run ?? defaultRun);
+    if (!python)
+        return { kind: "engine-unavailable", reason: "No working Python (3.11+) was found.", repairCommand: READINESS_REPAIR_COMMAND };
+    const spawn = deps.spawn ?? defaultSpawnTriageCli;
+    const result = await spawn(python.bin, [script, "--project-root", input.projectRoot, input.operation, input.itemId, ...input.args, "--json"], { timeoutMs: deps.timeoutMs ?? TRIAGE_CLI_TIMEOUT_MS, env: deps.baseEnv ?? process.env });
+    if (result.code === -1) {
+        return { kind: "engine-unavailable", reason: "Python couldn't start on this machine.", repairCommand: READINESS_REPAIR_COMMAND };
+    }
+    if (result.code === 3)
+        return { kind: "precondition" };
+    if (result.code === 4)
+        return { kind: "not-found" };
+    if (result.code === 5)
+        return { kind: "store-uninitialised" };
+    if (result.code === 6)
+        return { kind: "lock-timeout" };
+    if (result.code !== 0) {
+        return { kind: "failed", reason: result.spawnError === "timeout" ? "Triage writing took too long and was stopped." : cleanStderr(result.stderr) || "The triage write engine exited with an error." };
+    }
+    try {
+        const payload = JSON.parse(result.stdout);
+        if (typeof payload.operation !== "string" || payload.operation !== input.operation || !payload.item || typeof payload.item !== "object" || Array.isArray(payload.item)) {
+            return { kind: "failed", reason: "The triage write engine returned an unrecognised response." };
+        }
+        return { kind: "ok", operation: payload.operation, item: payload.item };
+    }
+    catch {
+        return { kind: "failed", reason: "The triage write engine didn't return valid JSON." };
+    }
+}
+//# sourceMappingURL=triage-cli-runner.js.map

package/server/dist/core/triage-cli-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"triage-cli-runner.js","sourceRoot":"","sources":["../../src/core/triage-cli-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,aAAa,EAAE,mBAAmB,EAAc,MAAM,sBAAsB,CAAC;AAE5H,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAiD5C,8EAA8E;AAC9E,MAAM,UAAU,sBAAsB,CAAC,OAAuE,EAAE;IAC9G,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,IAAI,UAAU,CAAC;IAC3C,IAAI,IAAI,CAAC,cAAc;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC;IACzF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CACzB,mBAAmB,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC,EACjD,QAAQ,EACR,SAAS,EACT,OAAO,EACP,eAAe,CAChB,CAAC;IACF,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAmB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAC1E,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;IACtB,QAAQ,CACN,GAAG,EACH,IAAI,EACJ;QACE,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,OAAO,CAAC,SAAS;QAC1B,WAAW,EAAE,IAAI;QACjB,SAAS,EAAE,IAAI,GAAG,IAAI;QACtB,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,EACD,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;QACxB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK;YAAE,OAAO,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAClE,MAAM,CAAC,GAAG,KAAqD,CAAC;QAChE,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3G,IAAI,CAAC,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7F,OAAO,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9F,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,wBAAwB,EAAE,CAAC;AAC/E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAsB,EAAE;IACpE,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAC,0CAA0C,CAAC,CAAC;IAClG,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC;QAAE,OAAO,WAAW,CAAC,sCAAsC,CAAC,CAAC;IAC/G,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;AACtF,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAwB,EACxB,OAAsB,EAAE;IAExB,MAAM,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,0CAA0C,EAAE,aAAa,EAAE,wBAAwB,EAAE,CAAC;IAChJ,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,sCAAsC,EAAE,aAAa,EAAE,wBAAwB,EAAE,CAAC;IAE5I,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,qBAAqB,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,KAAK,CACxB,MAAM,CAAC,GAAG,EACV,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,EACrG,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,qBAAqB,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CACzF,CAAC;IAEF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,wCAAwC,EAAE,aAAa,EAAE,wBAAwB,EAAE,CAAC;IACnI,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IACvD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACpD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;IAC9D,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IACvD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,+CAA+C,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,+CAA+C,EAAE,CAAC;IACvM,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAA4C,CAAC;QACrF,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACvK,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,4DAA4D,EAAE,CAAC;QAClG,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,IAA+B,EAAE,CAAC;IACrG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,mDAAmD,EAAE,CAAC;IACzF,CAAC;AACH,CAAC"}

package/server/dist/core/triage-compose.d.ts

@@ -0,0 +1,33 @@
+import type { TriageItem } from "../types/triage.js";
+import type { CorruptFragment } from "./jsonl-records.js";
+export interface DeliveredOriginOptions {
+    /**
+     * Parsed raw JSONL lines from `origin/<default>:.shipwright/triage.jsonl`,
+     * or `null` when origin is unavailable / the feature is off. `null` ⇒
+     * local-only resolution (identical to `readAllItems`).
+     */
+    originRawLines: Record<string, unknown>[] | null;
+    /**
+     * Optional side channel for text on a LOCAL file that could not be decoded
+     * (iterate-2026-07-18-triage-jsonl-record-boundary). Records recovered from
+     * the same line are still returned — corruption must never read as absence.
+     * Purely observational: omitting it leaves resolution byte-identical, which
+     * keeps the "degrade == readAllItems" equivalence intact.
+     *
+     * Scoped to LOCAL files ON PURPOSE. `originRawLines` arrives already parsed
+     * from `triage-origin.ts`, whose `originSnapshot` is SHA-keyed and has no
+     * channel to carry fragments; more importantly an origin blob is COMMITTED
+     * content read via `git show`, so corruption there is a repository defect to
+     * fix at the source, not transient local damage an operator can act on from
+     * a server log. Origin still gets full record-boundary RECOVERY (it shares
+     * `parseRawLines`) — only the reporting stops here.
+     */
+    onCorrupt?: (fragment: CorruptFragment, source: "tracked" | "outbox") => void;
+}
+/**
+ * Resolve the triage view for the board, unioning the local tracked + outbox
+ * files with the delivered-origin snapshot. See the module header for the
+ * ordering contract and degrade semantics.
+ */
+export declare function readAllItemsWithDeliveredOrigin(trackedPath: string, opts: DeliveredOriginOptions): TriageItem[];
+//# sourceMappingURL=triage-compose.d.ts.map

package/server/dist/core/triage-compose.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"triage-compose.d.ts","sourceRoot":"","sources":["../../src/core/triage-compose.ts"],"names":[],"mappings":"AAmCA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAO1D,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC;IACjD;;;;;;;;;;;;;;OAcG;IACH,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,GAAG,QAAQ,KAAK,IAAI,CAAC;CAC/E;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,sBAAsB,GAC3B,UAAU,EAAE,CAQd"}

package/server/dist/core/triage-compose.js

@@ -0,0 +1,51 @@
+/*
+ * triage-compose.ts — delivered-origin 3-source composer.
+ *
+ * Root-cause fix for the "ghost" bug (WebUI Local-Main board re-showed items
+ * the user had dismissed). The board read only the LOCAL union (tracked ∪
+ * outbox). But on idle-main a dismiss routes to the gitignored outbox, an
+ * external sweep delivers it to `origin` (iterate PR, merge=union) and GCs the
+ * local outbox line — after which the local tracked file still has only the
+ * `append`, the local outbox is empty, and the dismiss lives on origin only.
+ * The board (never consulting origin) resolved the item OPEN again.
+ *
+ * This composer sources a THIRD set of raw lines — `git show
+ * origin/<default>:.shipwright/triage.jsonl`, provided by `triage-origin.ts`
+ * (cached by ref SHA; a background fetch keeps the ref fresh) — and resolves
+ * the union with the SAME two-pass (ts, file-order) algorithm as the tracked ∪
+ * outbox read. Origin is simply one more source of the identical event types.
+ *
+ * DESIGN GUARANTEES (external review, GPT-5.4 + Gemini 3.1 Pro):
+ *   - `readAllItems` is NOT modified (it stays byte-for-byte parity-tested
+ *     against the Python `read_all_items`); this is an additive composer.
+ *   - Source order is EXACTLY `[local-tracked, origin, local-outbox]`. `ts` is
+ *     primary; file-order only breaks equal-`ts` ties. Outbox stays LAST so the
+ *     freshest LOCAL intent (a just-clicked dismiss not yet delivered) still
+ *     wins an equal-`ts` tie — preserving the pre-existing tracked<outbox
+ *     contract. Origin sits between: it beats stale local-tracked on an
+ *     equal-`ts` tie but loses to a pending local outbox flip.
+ *   - Read-only: this module NEVER mutates the working tree. `originRawLines`
+ *     is produced by a `git show`/`git fetch` layer that only touches the
+ *     object DB and remote-tracking refs.
+ *   - Graceful degrade: `originRawLines === null` (origin unavailable — no
+ *     upstream, offline, git error, feature-flag off) resolves EXACTLY the
+ *     local union, i.e. identical to `readAllItems`. So the board is never
+ *     worse than today.
+ */
+import { applyDeferOverlay } from "./triage-defer.js";
+import { readLocalRawLinesSplit, resolveUnion, } from "./triage-store.js";
+/**
+ * Resolve the triage view for the board, unioning the local tracked + outbox
+ * files with the delivered-origin snapshot. See the module header for the
+ * ordering contract and degrade semantics.
+ */
+export function readAllItemsWithDeliveredOrigin(trackedPath, opts) {
+    const { tracked, outbox } = readLocalRawLinesSplit(trackedPath, opts.onCorrupt);
+    const origin = opts.originRawLines ?? [];
+    // [tracked, origin, outbox] — outbox last (freshest local intent wins ties);
+    // origin between (beats stale tracked, loses to pending outbox). When origin
+    // is null/empty this is exactly `[...tracked, ...outbox]` = the local union.
+    // Overlay applied exactly once, same as readAllItems — see triage-store.ts.
+    return applyDeferOverlay(resolveUnion([...tracked, ...origin, ...outbox]), new Date());
+}
+//# sourceMappingURL=triage-compose.js.map

package/server/dist/core/triage-compose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"triage-compose.js","sourceRoot":"","sources":["../../src/core/triage-compose.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAIH,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EACL,sBAAsB,EACtB,YAAY,GACb,MAAM,mBAAmB,CAAC;AA2B3B;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAC7C,WAAmB,EACnB,IAA4B;IAE5B,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,sBAAsB,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC;IACzC,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,4EAA4E;IAC5E,OAAO,iBAAiB,CAAC,YAAY,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;AACzF,CAAC"}

package/server/dist/core/triage-contract.d.ts

@@ -0,0 +1,18 @@
+import type { TriageItem } from "../types/triage.js";
+/** Bump when the SHAPE changes — not when an item gains a field. Mirrors triage_contract.py. */
+export declare const CONTRACT_VERSION = 2;
+export interface TriageListing {
+    contractVersion: number;
+    open: TriageItem[];
+    deferred: TriageItem[];
+}
+/**
+ * The full `list --json` payload for a resolved view. `open` = status ===
+ * "triage"; `deferred` = status === "snoozed" (park-expiry already resolved
+ * by `applyDeferOverlay` inside `readAllItems`, so a due park is already in
+ * `open` by the time this runs). Both sections are COMPLETE — never capped,
+ * mirroring upstream's "the machine contract is never capped" rule.
+ * `deferred` is ordered by `sortDeferred` (soonest dated first).
+ */
+export declare function buildTriageListing(items: TriageItem[], trackedPath: string): TriageListing;
+//# sourceMappingURL=triage-contract.d.ts.map

package/server/dist/core/triage-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"triage-contract.d.ts","sourceRoot":"","sources":["../../src/core/triage-contract.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAKrD,gGAAgG;AAChG,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAElC,MAAM,WAAW,aAAa;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,UAAU,EAAE,CAAC;IACnB,QAAQ,EAAE,UAAU,EAAE,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,UAAU,EAAE,EACnB,WAAW,EAAE,MAAM,GAClB,aAAa,CAmBf"}