@svenroth-ai/shipwright 0.24.1-next.0

package/server/dist/external/inbox/routes.js

@@ -0,0 +1,59 @@
+/*
+ * external/inbox/routes.ts — GET /api/external/inbox + POST /inbox/:toolUseId/dismiss.
+ *
+ * Aggregates pending interactions across all tracked tasks:
+ *   - `ask_tool` — an unanswered AskUserQuestion tool_use in the JSONL.
+ *   - `text_question` — a plain-text end-of-turn question detected by
+ *     `detectAwaitingUserQuestion`.
+ *   - `terminal_prompt` — a waiting picker visible in the LIVE headless
+ *     mirror but not (yet) journaled to the JSONL.
+ *
+ * Precedence: ask_tool > terminal_prompt > text_question. terminal_prompt
+ * is a post-pass over the JSONL-derived set so the mtime-keyed cache
+ * stays byte-identical.
+ *
+ * Phase A4 hot-path: per-session derive cache + negative-result cache
+ * — see `./_cache.ts`. JSONL cold-path + terminal_prompt post-pass live
+ * in `./_derive.ts` to keep this shell ≤ 300 LOC.
+ */
+import { Hono } from "hono";
+import { inboxDeriveCache } from "./_cache.js";
+import { deriveInboxFromJsonl, appendTerminalPrompts } from "./_derive.js";
+export function createInboxRouter(deps) {
+    const app = new Hono();
+    const { store, watcher, ptyManager } = deps;
+    app.get("/api/external/inbox", async (c) => {
+        const { entries, storeDirty } = await deriveInboxFromJsonl({
+            store,
+            watcher,
+        });
+        appendTerminalPrompts(entries, { store, ptyManager });
+        if (storeDirty)
+            await store.persist();
+        return c.json({ items: entries });
+    });
+    app.post("/api/external/inbox/:toolUseId/dismiss", async (c) => {
+        const toolUseId = c.req.param("toolUseId");
+        for (const task of store.list()) {
+            if (!task.inbox.pendingToolUseIds.includes(toolUseId))
+                continue;
+            const dismissed = new Set(task.inbox.dismissedToolUseIds);
+            dismissed.add(toolUseId);
+            store.patch(task.taskId, {
+                inbox: {
+                    pendingToolUseIds: task.inbox.pendingToolUseIds.filter((id) => id !== toolUseId),
+                    dismissedToolUseIds: Array.from(dismissed),
+                    lastProcessedByteOffset: task.inbox.lastProcessedByteOffset,
+                },
+            });
+            // Phase A4 — bust the derive cache for this session so the next
+            // GET /inbox call reflects the reduced pending set immediately.
+            inboxDeriveCache.delete(task.sessionUuid);
+            await store.persist();
+            return c.json({ ok: true, taskId: task.taskId });
+        }
+        return c.json({ ok: false, error: "toolUseId not found in any pending set" }, 404);
+    });
+    return app;
+}
+//# sourceMappingURL=routes.js.map

package/server/dist/external/inbox/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/external/inbox/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAK5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAW3E,MAAM,UAAU,iBAAiB,CAAC,IAAqB;IACrD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAE5C,GAAG,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACzC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,MAAM,oBAAoB,CAAC;YACzD,KAAK;YACL,OAAO;SACR,CAAC,CAAC;QACH,qBAAqB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACtD,IAAI,UAAU;YAAE,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QACtC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,wCAAwC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7D,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,SAAS;YAChE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC1D,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACzB,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE;gBACvB,KAAK,EAAE;oBACL,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CACpD,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,SAAS,CACzB;oBACD,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;oBAC1C,uBAAuB,EAAE,IAAI,CAAC,KAAK,CAAC,uBAAuB;iBAC5D;aACF,CAAC,CAAC;YACH,gEAAgE;YAChE,gEAAgE;YAChE,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC1C,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;YACtB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wCAAwC,EAAE,EAC9D,GAAG,CACJ,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/server/dist/external/launch/_helpers.d.ts

@@ -0,0 +1,17 @@
+import type { CopyCommandForms } from "../../core/launcher.js";
+import type { ExternalTask } from "../../core/sdk-sessions-store.js";
+export type LaunchBranchResult = {
+    commands: CopyCommandForms;
+    taskUpdate: Partial<ExternalTask>;
+} | {
+    error: Record<string, unknown>;
+    status: 400 | 404 | 409;
+};
+export { parseLaunchBody, type ParsedLaunchBody } from "./parse-body.js";
+export { applyPhaseTaskBranch } from "./phase-task-branch.js";
+export { applyCampaignBranch } from "./campaign-branch.js";
+export { applyCampaignStepBranch } from "./campaign-step-branch.js";
+export { applyMasterRunBranch } from "./master-run-branch.js";
+export { applyActionSubstitutionBranch } from "./action-substitution-branch.js";
+export { applyLegacyFallbackBranch } from "./legacy-fallback-branch.js";
+//# sourceMappingURL=_helpers.d.ts.map

package/server/dist/external/launch/_helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_helpers.d.ts","sourceRoot":"","sources":["../../../src/external/launch/_helpers.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAErE,MAAM,MAAM,kBAAkB,GAC1B;IAAE,QAAQ,EAAE,gBAAgB,CAAC;IAAC,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;CAAE,GACjE;IAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAA;CAAE,CAAC;AAEhE,OAAO,EAAE,eAAe,EAAE,KAAK,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC"}

package/server/dist/external/launch/_helpers.js

@@ -0,0 +1,25 @@
+/*
+ * external/launch/_helpers.ts — launch-route branch helpers.
+ *
+ * Three branches in launch precedence order, one file per branch:
+ *   1. ./phase-task-branch.ts — body.phaseTaskRef present (load-bearing
+ *      security path; client never dictates sessionUuid / slashCommand).
+ *   2. ./action-substitution-branch.ts — actionId present + fresh-start
+ *      + project resolvable.
+ *   3. ./legacy-fallback-branch.ts — anything else, including dryRun and
+ *      resume on an established session.
+ *
+ * Each helper returns either:
+ *   - `{ commands, taskUpdate }` (apply changes, fall through)
+ *   - `{ error, status }` (terminate the handler with the documented
+ *     status code per `_c2_api_baseline.json`)
+ *   - `null` (this branch did not apply; caller falls through)
+ */
+export { parseLaunchBody } from "./parse-body.js";
+export { applyPhaseTaskBranch } from "./phase-task-branch.js";
+export { applyCampaignBranch } from "./campaign-branch.js";
+export { applyCampaignStepBranch } from "./campaign-step-branch.js";
+export { applyMasterRunBranch } from "./master-run-branch.js";
+export { applyActionSubstitutionBranch } from "./action-substitution-branch.js";
+export { applyLegacyFallbackBranch } from "./legacy-fallback-branch.js";
+//# sourceMappingURL=_helpers.js.map

package/server/dist/external/launch/_helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_helpers.js","sourceRoot":"","sources":["../../../src/external/launch/_helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AASH,OAAO,EAAE,eAAe,EAAyB,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAChF,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC"}

package/server/dist/external/launch/action-substitution-branch.d.ts

@@ -0,0 +1,11 @@
+import { type ExternalTask } from "../../core/sdk-sessions-store.js";
+import type { ExternalRouteProjectView } from "../_shared/helpers.js";
+import type { ParsedLaunchBody } from "./parse-body.js";
+import type { LaunchBranchResult } from "./_helpers.js";
+export declare function applyActionSubstitutionBranch(args: {
+    task: ExternalTask;
+    parsed: ParsedLaunchBody;
+    effectivelyFreshStart: boolean;
+    getProjectById: ((id: string) => ExternalRouteProjectView | undefined) | undefined;
+}): LaunchBranchResult | null;
+//# sourceMappingURL=action-substitution-branch.d.ts.map

package/server/dist/external/launch/action-substitution-branch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-substitution-branch.d.ts","sourceRoot":"","sources":["../../../src/external/launch/action-substitution-branch.ts"],"names":[],"mappings":"AAyBA,OAAO,EACL,KAAK,YAAY,EAElB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,wBAAgB,6BAA6B,CAAC,IAAI,EAAE;IAClD,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,gBAAgB,CAAC;IACzB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,cAAc,EACV,CAAC,CAAC,EAAE,EAAE,MAAM,KAAK,wBAAwB,GAAG,SAAS,CAAC,GACtD,SAAS,CAAC;CACf,GAAG,kBAAkB,GAAG,IAAI,CAmG5B"}

package/server/dist/external/launch/action-substitution-branch.js

@@ -0,0 +1,112 @@
+/*
+ * external/launch/action-substitution-branch.ts —
+ * applyActionSubstitutionBranch.
+ *
+ * Branch 2 in launch precedence: actionId present + fresh-start +
+ * project resolvable. Runs the action's `command_template` through
+ * substitutePlaceholders for {powershell, cmd, posix}.
+ *
+ * Returns `null` when actionId is absent OR the project does not
+ * resolve (caller falls through to legacy). Otherwise returns either
+ * the substituted commands+taskUpdate, or an error envelope.
+ */
+import { substitutePlaceholders, UnknownPhaseError, UnknownActionError, InvalidTitleError, InvalidParameterError, InvalidPlaceholderError, } from "../../core/actions-substitute.js";
+import { loadActionsForProject } from "../../core/project-actions-loader.js";
+import { resolveParameters } from "../../core/parameter-resolver.js";
+export function applyActionSubstitutionBranch(args) {
+    const { task, parsed, effectivelyFreshStart, getProjectById } = args;
+    if (!parsed.actionId || !effectivelyFreshStart)
+        return null;
+    const project = getProjectById?.(task.projectId);
+    if (!project)
+        return null; // fall back to legacy
+    const loaded = loadActionsForProject(project.path || "");
+    const action = loaded.actions.actions.find((a) => a.id === parsed.actionId);
+    if (!action || !action.command_template) {
+        return {
+            error: { error: "unknown_action_id", actionId: parsed.actionId },
+            status: 400,
+        };
+    }
+    const allowedPhaseIds = new Set(loaded.actions.phases.map((p) => p.id));
+    // Resolve user-supplied CLI parameters against the action's schema.
+    const resolveResult = resolveParameters({
+        action,
+        phase: parsed.phase,
+        userParams: parsed.userParams,
+    });
+    if (!resolveResult.ok) {
+        return {
+            error: {
+                error: resolveResult.error,
+                ...(resolveResult.name ? { name: resolveResult.name } : {}),
+                ...(resolveResult.detail ? { detail: resolveResult.detail } : {}),
+                ...(resolveResult.allowed ? { allowed: resolveResult.allowed } : {}),
+            },
+            status: 400,
+        };
+    }
+    const ctx = {
+        project: { id: project.id, path: project.path || "" },
+        task: {
+            uuid: task.sessionUuid,
+            title: task.title,
+            description: parsed.description,
+            phase: parsed.phase ?? "",
+            phase_label: parsed.phaseLabel ?? "",
+            autonomy: parsed.autonomy,
+            parameters: resolveResult.resolved,
+        },
+        pluginDirs: task.pluginDirs,
+        allowedPhaseIds,
+        actionId: parsed.actionId,
+        // iterate-2026-06-11-custom-action-slash-command — a custom action's
+        // declared slash command, so {task.initial_prompt} fuses slash +
+        // description into ONE positional. Undefined for builtin ids (ignored).
+        slashCommand: action.slash_command,
+    };
+    let commands;
+    try {
+        commands = {
+            powershell: substitutePlaceholders(action.command_template, ctx, "powershell"),
+            cmd: substitutePlaceholders(action.command_template, ctx, "cmd"),
+            posix: substitutePlaceholders(action.command_template, ctx, "posix"),
+        };
+    }
+    catch (err) {
+        if (err instanceof UnknownPhaseError ||
+            err instanceof InvalidTitleError ||
+            err instanceof InvalidParameterError ||
+            err instanceof InvalidPlaceholderError ||
+            // A custom action using {task.initial_prompt} without a valid
+            // slash_command throws UnknownActionError. The GET /actions schema
+            // validation rejects this at load time, but the launch route does not
+            // re-run that gate — so convert to a typed 400 here rather than letting
+            // it surface as an unhandled 500 (review follow-up).
+            err instanceof UnknownActionError) {
+            return {
+                error: {
+                    error: "command_substitution_failed",
+                    detail: err.message,
+                },
+                status: 400,
+            };
+        }
+        throw err;
+    }
+    const taskUpdate = {
+        state: "awaiting_external_start",
+        launchedAt: new Date().toISOString(),
+        actionId: parsed.actionId,
+    };
+    if (parsed.phase)
+        taskUpdate.phase = parsed.phase;
+    if (parsed.phaseLabel)
+        taskUpdate.phaseLabel = parsed.phaseLabel;
+    if (parsed.description)
+        taskUpdate.description = parsed.description;
+    if (parsed.autonomy)
+        taskUpdate.autonomy = parsed.autonomy;
+    return { commands, taskUpdate };
+}
+//# sourceMappingURL=action-substitution-branch.js.map

package/server/dist/external/launch/action-substitution-branch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-substitution-branch.js","sourceRoot":"","sources":["../../../src/external/launch/action-substitution-branch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,EACrB,uBAAuB,GAExB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AASrE,MAAM,UAAU,6BAA6B,CAAC,IAO7C;IACC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IACrE,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,qBAAqB;QAAE,OAAO,IAAI,CAAC;IAE5D,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,CAAC,sBAAsB;IAEjD,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5E,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;QACxC,OAAO;YACL,KAAK,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE;YAChE,MAAM,EAAE,GAAG;SACZ,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAExE,oEAAoE;IACpE,MAAM,aAAa,GAAG,iBAAiB,CAAC;QACtC,MAAM;QACN,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC,CAAC;IACH,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QACtB,OAAO;YACL,KAAK,EAAE;gBACL,KAAK,EAAE,aAAa,CAAC,KAAK;gBAC1B,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrE;YACD,MAAM,EAAE,GAAG;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAwB;QAC/B,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE;QACrD,IAAI,EAAE;YACJ,IAAI,EAAE,IAAI,CAAC,WAAW;YACtB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;YACzB,WAAW,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;YACpC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,aAAa,CAAC,QAAQ;SACnC;QACD,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,eAAe;QACf,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,qEAAqE;QACrE,iEAAiE;QACjE,wEAAwE;QACxE,YAAY,EAAE,MAAM,CAAC,aAAa;KACnC,CAAC;IACF,IAAI,QAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,QAAQ,GAAG;YACT,UAAU,EAAE,sBAAsB,CAChC,MAAM,CAAC,gBAAgB,EACvB,GAAG,EACH,YAAY,CACb;YACD,GAAG,EAAE,sBAAsB,CAAC,MAAM,CAAC,gBAAgB,EAAE,GAAG,EAAE,KAAK,CAAC;YAChE,KAAK,EAAE,sBAAsB,CAAC,MAAM,CAAC,gBAAgB,EAAE,GAAG,EAAE,OAAO,CAAC;SACrE,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IACE,GAAG,YAAY,iBAAiB;YAChC,GAAG,YAAY,iBAAiB;YAChC,GAAG,YAAY,qBAAqB;YACpC,GAAG,YAAY,uBAAuB;YACtC,8DAA8D;YAC9D,mEAAmE;YACnE,sEAAsE;YACtE,wEAAwE;YACxE,qDAAqD;YACrD,GAAG,YAAY,kBAAkB,EACjC,CAAC;YACD,OAAO;gBACL,KAAK,EAAE;oBACL,KAAK,EAAE,6BAA6B;oBACpC,MAAM,EAAE,GAAG,CAAC,OAAO;iBACpB;gBACD,MAAM,EAAE,GAAG;aACZ,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,UAAU,GAA0B;QACxC,KAAK,EAAE,yBAA8C;QACrD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC;IACF,IAAI,MAAM,CAAC,KAAK;QAAE,UAAU,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAClD,IAAI,MAAM,CAAC,UAAU;QAAE,UAAU,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACjE,IAAI,MAAM,CAAC,WAAW;QAAE,UAAU,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACpE,IAAI,MAAM,CAAC,QAAQ;QAAE,UAAU,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC3D,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAClC,CAAC"}

package/server/dist/external/launch/campaign-branch.d.ts

@@ -0,0 +1,12 @@
+import { type ExternalTask } from "../../core/sdk-sessions-store.js";
+import type { ExternalRouteProjectView } from "../_shared/helpers.js";
+import type { ParsedLaunchBody } from "./parse-body.js";
+import type { LaunchBranchResult } from "./_helpers.js";
+export declare function isValidCampaignSlug(slug: string): boolean;
+export declare function applyCampaignBranch(args: {
+    task: ExternalTask;
+    parsed: ParsedLaunchBody;
+    effectivelyFreshStart: boolean;
+    getProjectById: ((id: string) => ExternalRouteProjectView | undefined) | undefined;
+}): LaunchBranchResult | null;
+//# sourceMappingURL=campaign-branch.d.ts.map

package/server/dist/external/launch/campaign-branch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"campaign-branch.d.ts","sourceRoot":"","sources":["../../../src/external/launch/campaign-branch.ts"],"names":[],"mappings":"AA6BA,OAAO,EACL,KAAK,YAAY,EAElB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAUxD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,gBAAgB,CAAC;IACzB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,cAAc,EACV,CAAC,CAAC,EAAE,EAAE,MAAM,KAAK,wBAAwB,GAAG,SAAS,CAAC,GACtD,SAAS,CAAC;CACf,GAAG,kBAAkB,GAAG,IAAI,CA4D5B"}

package/server/dist/external/launch/campaign-branch.js

@@ -0,0 +1,95 @@
+/*
+ * external/launch/campaign-branch.ts — applyCampaignBranch (FR-01.34).
+ *
+ * Branch 2 in launch precedence (phaseTaskRef → campaign → action → legacy):
+ * `parsed.campaignSlug` present + fresh-start. Builds the autonomous campaign
+ * launch command ENTIRELY server-side:
+ *
+ *   claude --session-id <uuid> --add-dir <cwd> --name '<title>' \
+ *     '/shipwright-iterate --campaign <slug> --autonomous'
+ *
+ * The client only ever sends a slug — never the command (Architecture rule 1 /
+ * regression guard #19). The slug is the untrusted→trusted boundary; it is
+ * (a) regex-validated, (b) existence-checked against the realpath-guarded
+ * campaigns dir, and (c) per-shell quoted by core/launcher.ts. Three guards.
+ *
+ * Returns `null` when there is no campaignSlug OR the launch is a genuine
+ * resume (JSONL on disk) — a resume injects no slash command, so it falls
+ * through to the legacy `--resume` branch.
+ */
+import { existsSync, realpathSync } from "node:fs";
+import path from "node:path";
+import { buildCopyCommands } from "../../core/launcher.js";
+import { resolveCampaignsDir, isWithin, } from "../../core/campaign-paths.js";
+import { readLoopAttachments } from "../../core/campaign-loop-state.js";
+/**
+ * Campaign slug = a campaign directory name. Date-prefixed kebab plus the
+ * filesystem-safe set `[A-Za-z0-9._-]`. No spaces, quotes, shell metacharacters,
+ * path separators, or `..` — those would either break out of the quoted launch
+ * positional or escape the campaigns dir. Capped to a sane filename length.
+ */
+const CAMPAIGN_SLUG_PATTERN = /^[A-Za-z0-9._-]{1,128}$/;
+export function isValidCampaignSlug(slug) {
+    return CAMPAIGN_SLUG_PATTERN.test(slug) && !slug.includes("..");
+}
+export function applyCampaignBranch(args) {
+    const { task, parsed, effectivelyFreshStart, getProjectById } = args;
+    if (!parsed.campaignSlug)
+        return null; // not a campaign launch
+    // A resume injects no slash command — fall through to the legacy --resume
+    // shape (`claude --resume <uuid>` rebuilds the campaign session from JSONL).
+    if (!effectivelyFreshStart)
+        return null;
+    const slug = parsed.campaignSlug;
+    if (!isValidCampaignSlug(slug)) {
+        return { error: { error: "invalid_campaign_slug", detail: "slug fails /^[A-Za-z0-9._-]{1,128}$/" }, status: 400 };
+    }
+    // Defense-in-depth: the slug must resolve to a real campaign dir under the
+    // realpath-guarded campaigns tree. Never launch an autonomous run for a
+    // campaign that does not exist (or one reached via a symlink escape).
+    const project = getProjectById?.(task.projectId);
+    if (!project) {
+        return { error: { error: "campaign_not_found", detail: "project not resolvable" }, status: 400 };
+    }
+    const resolved = resolveCampaignsDir({
+        path: project.path,
+        synthesized: project.synthesized,
+    });
+    if (!resolved.ok) {
+        return { error: { error: "campaign_not_found", detail: resolved.error.reason }, status: 400 };
+    }
+    const campaignDir = path.join(resolved.absolute, slug);
+    let dirOk = false;
+    try {
+        dirOk = existsSync(campaignDir) && isWithin(resolved.absolute, realpathSync(campaignDir));
+    }
+    catch {
+        dirOk = false;
+    }
+    if (!dirOk) {
+        return { error: { error: "campaign_not_found", detail: slug }, status: 400 };
+    }
+    // Double-launch guard (server enforcement, not just the client CTA): refuse to
+    // build a second autonomous command while a live orchestrator is already
+    // attached to this campaign (a `loop_state.json` in_progress unit). Two
+    // orchestrators race worktrees/commits + corrupt status.json. This closes the
+    // multi-tab / deploy-skew / direct-API holes the client `attachedRun` flag
+    // cannot. Resume is unaffected — it returned null above. The stale-window in
+    // readLoopAttachments keeps a crashed loop from blocking forever.
+    if (readLoopAttachments(resolved.projectRoot, Date.now()).has(slug)) {
+        return { error: { error: "campaign_run_already_attached", detail: slug }, status: 409 };
+    }
+    const commands = buildCopyCommands({
+        sessionUuid: task.sessionUuid,
+        cwd: task.cwd,
+        pluginDirs: task.pluginDirs,
+        title: task.title,
+        slashCommand: `/shipwright-iterate --campaign ${slug} --autonomous`,
+    });
+    const taskUpdate = {
+        state: "awaiting_external_start",
+        launchedAt: new Date().toISOString(),
+    };
+    return { commands, taskUpdate };
+}
+//# sourceMappingURL=campaign-branch.js.map

package/server/dist/external/launch/campaign-branch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"campaign-branch.js","sourceRoot":"","sources":["../../../src/external/launch/campaign-branch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EACL,mBAAmB,EACnB,QAAQ,GACT,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AASxE;;;;;GAKG;AACH,MAAM,qBAAqB,GAAG,yBAAyB,CAAC;AAExD,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAOnC;IACC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IACrE,IAAI,CAAC,MAAM,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC,CAAC,wBAAwB;IAC/D,0EAA0E;IAC1E,6EAA6E;IAC7E,IAAI,CAAC,qBAAqB;QAAE,OAAO,IAAI,CAAC;IAExC,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC;IACjC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,sCAAsC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACpH,CAAC;IAED,2EAA2E;IAC3E,wEAAwE;IACxE,sEAAsE;IACtE,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,wBAAwB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACnG,CAAC;IACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC;QACnC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAChG,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACvD,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,UAAU,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,KAAK,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC/E,CAAC;IAED,+EAA+E;IAC/E,yEAAyE;IACzE,wEAAwE;IACxE,8EAA8E;IAC9E,2EAA2E;IAC3E,6EAA6E;IAC7E,kEAAkE;IAClE,IAAI,mBAAmB,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACpE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC1F,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC;QACjC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,YAAY,EAAE,kCAAkC,IAAI,eAAe;KACpE,CAAC,CAAC;IACH,MAAM,UAAU,GAA0B;QACxC,KAAK,EAAE,yBAA8C;QACrD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAClC,CAAC"}

package/server/dist/external/launch/campaign-step-branch.d.ts

@@ -0,0 +1,12 @@
+import { type ExternalTask } from "../../core/sdk-sessions-store.js";
+import type { ExternalRouteProjectView } from "../_shared/helpers.js";
+import type { ParsedLaunchBody } from "./parse-body.js";
+import type { LaunchBranchResult } from "./_helpers.js";
+export declare function isValidCampaignStepId(id: string): boolean;
+export declare function applyCampaignStepBranch(args: {
+    task: ExternalTask;
+    parsed: ParsedLaunchBody;
+    effectivelyFreshStart: boolean;
+    getProjectById: ((id: string) => ExternalRouteProjectView | undefined) | undefined;
+}): LaunchBranchResult | null;
+//# sourceMappingURL=campaign-step-branch.d.ts.map

package/server/dist/external/launch/campaign-step-branch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"campaign-step-branch.d.ts","sourceRoot":"","sources":["../../../src/external/launch/campaign-step-branch.ts"],"names":[],"mappings":"AA8BA,OAAO,EACL,KAAK,YAAY,EAElB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AASxD,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,gBAAgB,CAAC;IACzB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,cAAc,EACV,CAAC,CAAC,EAAE,EAAE,MAAM,KAAK,wBAAwB,GAAG,SAAS,CAAC,GACtD,SAAS,CAAC;CACf,GAAG,kBAAkB,GAAG,IAAI,CAyE5B"}

package/server/dist/external/launch/campaign-step-branch.js

@@ -0,0 +1,108 @@
+/*
+ * external/launch/campaign-step-branch.ts — applyCampaignStepBranch (FR-01.36).
+ *
+ * Branch 2.5 in launch precedence (phaseTaskRef → campaign → campaignStep →
+ * action → legacy): `parsed.campaignStep` present + fresh-start. One-click
+ * launch of a SINGLE campaign sub-iterate — builds, ENTIRELY server-side:
+ *
+ *   claude --session-id <uuid> --add-dir <cwd> --name '<title>' \
+ *     '/shipwright-iterate "<specPath>"'
+ *
+ * The client sends only `{ slug, stepId }` — never the command or the path
+ * (Architecture rule 1 / regression guard #19). Three guards on the untrusted
+ * input: slug + stepId are regex-validated, the slug must resolve to a real
+ * campaign dir under the realpath-guarded campaigns tree, and the step's
+ * `specPath` is resolved by the SAME `readCampaigns` reader the board renders
+ * (so the launched path is byte-identical to what the user saw + already
+ * carries `deriveSpecMeta`'s symlink/escape/shell-hostile-char guards).
+ *
+ * Returns `null` when there is no campaignStep OR the launch is a genuine
+ * resume (JSONL on disk) — a resume injects no slash command, so it falls
+ * through to the legacy `--resume` branch.
+ */
+import { existsSync, realpathSync } from "node:fs";
+import path from "node:path";
+import { buildCopyCommands } from "../../core/launcher.js";
+import { resolveCampaignsDir, isWithin } from "../../core/campaign-paths.js";
+import { readCampaigns } from "../../core/campaign-store.js";
+import { readLoopAttachments } from "../../core/campaign-loop-state.js";
+import { isValidCampaignSlug } from "./campaign-branch.js";
+/**
+ * Campaign step id = a Sub-Iterates table ID cell (e.g. `B0`, `C1`). Same
+ * filesystem-safe alphabet as the slug — it forms half of the `<id>-<slug>.md`
+ * spec filename — but shorter. No spaces, separators, quotes, or `..`.
+ */
+const CAMPAIGN_STEP_ID_PATTERN = /^[A-Za-z0-9._-]{1,64}$/;
+export function isValidCampaignStepId(id) {
+    return CAMPAIGN_STEP_ID_PATTERN.test(id) && !id.includes("..");
+}
+export function applyCampaignStepBranch(args) {
+    const { task, parsed, effectivelyFreshStart, getProjectById } = args;
+    const step = parsed.campaignStep;
+    if (!step)
+        return null; // not a campaign-step launch
+    // A resume injects no slash command — fall through to the legacy --resume shape.
+    if (!effectivelyFreshStart)
+        return null;
+    if (!isValidCampaignSlug(step.slug)) {
+        return { error: { error: "invalid_campaign_slug", detail: "slug fails /^[A-Za-z0-9._-]{1,128}$/" }, status: 400 };
+    }
+    if (!isValidCampaignStepId(step.stepId)) {
+        return { error: { error: "invalid_campaign_step_id", detail: "stepId fails /^[A-Za-z0-9._-]{1,64}$/" }, status: 400 };
+    }
+    const project = getProjectById?.(task.projectId);
+    if (!project) {
+        return { error: { error: "campaign_not_found", detail: "project not resolvable" }, status: 400 };
+    }
+    const resolved = resolveCampaignsDir({
+        path: project.path,
+        synthesized: project.synthesized,
+    });
+    if (!resolved.ok) {
+        return { error: { error: "campaign_not_found", detail: resolved.error.reason }, status: 400 };
+    }
+    // The slug must resolve to a real campaign dir under the realpath-guarded
+    // campaigns tree (defense-in-depth; mirrors the autonomous branch).
+    const campaignDir = path.join(resolved.absolute, step.slug);
+    let dirOk = false;
+    try {
+        dirOk = existsSync(campaignDir) && isWithin(resolved.absolute, realpathSync(campaignDir));
+    }
+    catch {
+        dirOk = false;
+    }
+    if (!dirOk) {
+        return { error: { error: "campaign_not_found", detail: step.slug }, status: 400 };
+    }
+    // Double-launch guard (server enforcement, mirrors the autonomous branch):
+    // refuse a single-step launch while a live orchestrator is attached to this
+    // campaign (a `loop_state.json` in_progress unit) — the manual runner would
+    // race the autonomous loop. Closes the multi-tab / deploy-skew / direct-API
+    // holes the client `attachedRun` flag cannot. Resume returned null above.
+    if (readLoopAttachments(resolved.projectRoot, Date.now()).has(step.slug)) {
+        return { error: { error: "campaign_run_already_attached", detail: step.slug }, status: 409 };
+    }
+    // Resolve the step's specPath via the SAME reader the board uses — no second
+    // derivation that could drift from what the user clicked.
+    const campaign = readCampaigns(resolved.absolute, resolved.projectRoot).find((c) => c.slug === step.slug);
+    const found = campaign?.steps.find((s) => s.id === step.stepId);
+    if (!found) {
+        return { error: { error: "campaign_step_not_found", detail: step.stepId }, status: 400 };
+    }
+    if (!found.specPath) {
+        return { error: { error: "campaign_step_spec_missing", detail: step.stepId }, status: 400 };
+    }
+    const commands = buildCopyCommands({
+        sessionUuid: task.sessionUuid,
+        cwd: task.cwd,
+        pluginDirs: task.pluginDirs,
+        title: task.title,
+        slashCommand: `/shipwright-iterate "${found.specPath}"`,
+    });
+    const taskUpdate = {
+        state: "awaiting_external_start",
+        launchedAt: new Date().toISOString(),
+    };
+    return { commands, taskUpdate };
+}
+//# sourceMappingURL=campaign-step-branch.js.map

package/server/dist/external/launch/campaign-step-branch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"campaign-step-branch.js","sourceRoot":"","sources":["../../../src/external/launch/campaign-step-branch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAMxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAI3D;;;;GAIG;AACH,MAAM,wBAAwB,GAAG,wBAAwB,CAAC;AAE1D,MAAM,UAAU,qBAAqB,CAAC,EAAU;IAC9C,OAAO,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAOvC;IACC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC;IACrE,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC;IACjC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,6BAA6B;IACrD,iFAAiF;IACjF,IAAI,CAAC,qBAAqB;QAAE,OAAO,IAAI,CAAC;IAExC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,sCAAsC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACpH,CAAC;IACD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,MAAM,EAAE,uCAAuC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACxH,CAAC;IAED,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,wBAAwB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACnG,CAAC;IACD,MAAM,QAAQ,GAAG,mBAAmB,CAAC;QACnC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAChG,CAAC;IAED,0EAA0E;IAC1E,oEAAoE;IACpE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5D,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,UAAU,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,KAAK,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACpF,CAAC;IAED,2EAA2E;IAC3E,4EAA4E;IAC5E,4EAA4E;IAC5E,4EAA4E;IAC5E,0EAA0E;IAC1E,IAAI,mBAAmB,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC/F,CAAC;IAED,6EAA6E;IAC7E,0DAA0D;IAC1D,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC,IAAI,CAC1E,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAC5B,CAAC;IACF,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC;IAChE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,4BAA4B,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC9F,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC;QACjC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,YAAY,EAAE,wBAAwB,KAAK,CAAC,QAAQ,GAAG;KACxD,CAAC,CAAC;IACH,MAAM,UAAU,GAA0B;QACxC,KAAK,EAAE,yBAA8C;QACrD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAClC,CAAC"}

package/server/dist/external/launch/legacy-fallback-branch.d.ts

@@ -0,0 +1,12 @@
+import { type CopyCommandForms } from "../../core/launcher.js";
+import { type ExternalTask } from "../../core/sdk-sessions-store.js";
+import type { ParsedLaunchBody } from "./parse-body.js";
+export declare function applyLegacyFallbackBranch(args: {
+    task: ExternalTask;
+    parsed: ParsedLaunchBody;
+    jsonlObserved: boolean;
+}): {
+    commands: CopyCommandForms;
+    taskUpdate: Partial<ExternalTask>;
+};
+//# sourceMappingURL=legacy-fallback-branch.d.ts.map

package/server/dist/external/launch/legacy-fallback-branch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-fallback-branch.d.ts","sourceRoot":"","sources":["../../../src/external/launch/legacy-fallback-branch.ts"],"names":[],"mappings":"AAYA,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,YAAY,EAElB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAExD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,gBAAgB,CAAC;IACzB,aAAa,EAAE,OAAO,CAAC;CACxB,GAAG;IAAE,QAAQ,EAAE,gBAAgB,CAAC;IAAC,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;CAAE,CAgBpE"}

package/server/dist/external/launch/legacy-fallback-branch.js

@@ -0,0 +1,29 @@
+/*
+ * external/launch/legacy-fallback-branch.ts — applyLegacyFallbackBranch.
+ *
+ * Branch 3 (terminal): always returns a populated result. Used when both
+ * other branches return null. Emits the pre-iterate shape
+ * (--session-id / --resume / --add-dir / --name / --plugin-dir).
+ *
+ * iterate-2026-05-08 v0.8.8 AC-1 (refined by Iterate L): Resume on
+ * `new-plain` BEFORE first JSONL is semantically a FRESH start; with
+ * JSONL on disk, `--resume` is the correct shape.
+ */
+import { buildCopyCommands, } from "../../core/launcher.js";
+export function applyLegacyFallbackBranch(args) {
+    const { task, parsed, jsonlObserved } = args;
+    const effectiveResume = parsed.resume && (task.actionId !== "new-plain" || jsonlObserved);
+    const commands = buildCopyCommands({
+        sessionUuid: task.sessionUuid,
+        cwd: task.cwd,
+        resume: effectiveResume,
+        pluginDirs: task.pluginDirs,
+        title: task.title,
+    });
+    const taskUpdate = {
+        state: "awaiting_external_start",
+        launchedAt: new Date().toISOString(),
+    };
+    return { commands, taskUpdate };
+}
+//# sourceMappingURL=legacy-fallback-branch.js.map

package/server/dist/external/launch/legacy-fallback-branch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-fallback-branch.js","sourceRoot":"","sources":["../../../src/external/launch/legacy-fallback-branch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,iBAAiB,GAElB,MAAM,wBAAwB,CAAC;AAOhC,MAAM,UAAU,yBAAyB,CAAC,IAIzC;IACC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IAC7C,MAAM,eAAe,GACnB,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,KAAK,WAAW,IAAI,aAAa,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,iBAAiB,CAAC;QACjC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,eAAe;QACvB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;IACH,MAAM,UAAU,GAA0B;QACxC,KAAK,EAAE,yBAA8C;QACrD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAClC,CAAC"}

package/server/dist/external/launch/master-run-branch.d.ts

@@ -0,0 +1,24 @@
+import type { RunConfigReadResult } from "../../core/run-config-reader.js";
+import { type ExternalTask } from "../../core/sdk-sessions-store.js";
+import type { ExternalRouteProjectView } from "../_shared/helpers.js";
+import type { ParsedLaunchBody } from "./parse-body.js";
+import type { LaunchBranchResult } from "./_helpers.js";
+export declare function applyMasterRunBranch(args: {
+    task: ExternalTask;
+    parsed: ParsedLaunchBody;
+    effectivelyFreshStart: boolean;
+    getProjectById: ((id: string) => ExternalRouteProjectView | undefined) | undefined;
+    runConfigReader: (projectPath: string) => Promise<RunConfigReadResult>;
+    /** Snapshot of all tasks — the double-master guard scans it for another
+     *  attached master of the same run. Optional so direct callers without a
+     *  store can opt out; the route always wires it. */
+    listTasks?: () => ExternalTask[];
+    /** D18/F14 — ground-truth JSONL probe (`SessionWatcher.findByUuid !== null`).
+     *  The persisted `firstJsonlObservedAt` lags Claude's first write by 5-15 s,
+     *  and the master CTA sends `resume:false` during that window; a fresh
+     *  `--session-id` re-launch is then REJECTED by Claude ("Session ID already
+     *  in use"). Trust the disk. Optional so direct callers without a watcher opt
+     *  out (absent → treated as "no JSONL"); the route wires it from the watcher. */
+    jsonlExistsOnDisk?: (sessionUuid: string) => Promise<boolean>;
+}): Promise<LaunchBranchResult | null>;
+//# sourceMappingURL=master-run-branch.d.ts.map

package/server/dist/external/launch/master-run-branch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"master-run-branch.d.ts","sourceRoot":"","sources":["../../../src/external/launch/master-run-branch.ts"],"names":[],"mappings":"AAuCA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EACL,KAAK,YAAY,EAElB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAqBxD,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,gBAAgB,CAAC;IACzB,qBAAqB,EAAE,OAAO,CAAC;IAC/B,cAAc,EACV,CAAC,CAAC,EAAE,EAAE,MAAM,KAAK,wBAAwB,GAAG,SAAS,CAAC,GACtD,SAAS,CAAC;IACd,eAAe,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACvE;;wDAEoD;IACpD,SAAS,CAAC,EAAE,MAAM,YAAY,EAAE,CAAC;IACjC;;;;;qFAKiF;IACjF,iBAAiB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/D,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CA8HrC"}