@svenroth-ai/shipwright 0.24.1-next.0

package/server/dist/external/launch/master-run-branch.js

@@ -0,0 +1,168 @@
+/*
+ * external/launch/master-run-branch.ts — applyMasterRunBranch (campaign
+ * webui-pipeline-convergence, sub-iterate W2).
+ *
+ * Branch in launch precedence (phaseTaskRef → campaign → campaignStep →
+ * MASTER-RUN → action → legacy): `parsed.masterRun` present + fresh-start.
+ * Builds the single-session master launch command ENTIRELY server-side:
+ *
+ *   claude --session-id <uuid> --add-dir <cwd> --name '<title>' '/shipwright-run'
+ *
+ * The `/shipwright-run` master then drives every phase via a phase-runner
+ * subagent in ONE conversation (mode: single_session) — there is NO per-phase
+ * Continue. This is a sibling of applyCampaignBranch (an autonomous-orchestrator
+ * launch), NOT a per-phase pipeline continuation: it carries no phaseTaskId and
+ * creates no phase shadow, so the `useContinuePipeline()` single-entry rule
+ * (conventions rule 14) does not apply — the master IS the driver.
+ *
+ * The client only ever sends `{ masterRun: true }` — never the command
+ * (Architecture rule 1 / regression guard #19; command built EXCLUSIVELY by
+ * core/launcher.ts). The untrusted→trusted boundary is the run_config gate: the
+ * project must have a readable v2 `run_config` whose resolved mode is
+ * `single_session` (mirrors applyCampaignBranch requiring the campaign dir to
+ * exist). WebUI only READS run_config here (CLAUDE.md rule 12 — never writes it).
+ *
+ * Returns `null` when there is no masterRun OR the launch is a genuine resume
+ * (JSONL on disk) — a resume injects no slash command, so it falls through to
+ * the legacy `--resume` branch unchanged (`claude --resume <masterUuid>`
+ * rebuilds the master conversation, which re-enters the single-session loop).
+ *
+ * Double-master guard (W3, mirrors applyCampaignBranch's
+ * `campaign_run_already_attached`): a fresh master launch is refused with 409
+ * `master_run_already_attached` when ANOTHER master shadow is already attached to
+ * the same run. Two `/shipwright-run` masters driving one run_config would race
+ * phase_task claims. Client idempotency (reuse the master shadow) covers the
+ * single-tab path; this closes the multi-tab / direct-API hole it cannot.
+ */
+import { buildCopyCommands } from "../../core/launcher.js";
+import { resolveRunMode } from "../../types/run-config-v2.js";
+/** A master shadow is "attached" when it is LAUNCHED and NOT terminal — i.e. one
+ *  of the four in-progress states. This is defined by STATE alone (NOT
+ *  `firstJsonlObservedAt`): a terminal `done` master necessarily carries a
+ *  historical `firstJsonlObservedAt`, and counting that as "attached" would block
+ *  a fresh launch for a completed run forever. `draft` (never launched),
+ *  `launch_failed` (dead), and `done` (terminal) therefore do NOT block; the
+ *  two-tab race is still caught because a racing master sits in
+ *  `awaiting_external_start` the instant it launches. */
+const ATTACHED_MASTER_STATES = new Set([
+    "awaiting_external_start",
+    "active",
+    "idle",
+    "jsonl_missing",
+]);
+function isAttachedMaster(t) {
+    return ATTACHED_MASTER_STATES.has(t.state);
+}
+export async function applyMasterRunBranch(args) {
+    const { task, parsed, effectivelyFreshStart, getProjectById, runConfigReader, listTasks, jsonlExistsOnDisk, } = args;
+    if (!parsed.masterRun)
+        return null; // not a master-run launch
+    // D18/F14 — the master's `<uuid>.jsonl` already exists → this is a genuine
+    // resume regardless of the (possibly stale) client `resume` flag. Re-enter
+    // the master conversation with `--resume <masterUuid>` (no slash command);
+    // re-injecting `--session-id '/shipwright-run'` would make Claude reject the
+    // duplicate session id. Only walk the disk when the persisted stamp is absent
+    // (short-circuit). This function stays PURE — it returns a `taskUpdate` and
+    // the route persists it; it never writes the store itself.
+    const discovered = !task.firstJsonlObservedAt &&
+        Boolean(await jsonlExistsOnDisk?.(task.sessionUuid));
+    const established = Boolean(task.firstJsonlObservedAt) || discovered;
+    if (established) {
+        const commands = buildCopyCommands({
+            sessionUuid: task.sessionUuid,
+            cwd: task.cwd,
+            resume: true,
+            pluginDirs: task.pluginDirs,
+            title: task.title,
+        });
+        return {
+            commands,
+            taskUpdate: {
+                state: "awaiting_external_start",
+                launchedAt: new Date().toISOString(),
+                // Spec: stamp on discovery so the board CTA + the next launch reflect the
+                // established master immediately. Conditional (only when the stamp was
+                // absent) so a concurrent re-launch just re-writes the same field — the
+                // background transcript poll records the same stamp independently.
+                ...(discovered
+                    ? { firstJsonlObservedAt: new Date().toISOString() }
+                    : {}),
+            },
+        };
+    }
+    // Not established. A resume request with no JSONL yet (or a dryRun) falls
+    // through to the legacy branch exactly as before — the fresh `/shipwright-run`
+    // path below is gated on `effectivelyFreshStart`.
+    if (!effectivelyFreshStart)
+        return null;
+    // Defense-in-depth: the project must resolve AND carry a readable
+    // single_session run_config. Never inject `/shipwright-run` for a run the
+    // WebUI cannot vouch for.
+    const project = getProjectById?.(task.projectId);
+    if (!project) {
+        return {
+            error: {
+                error: "master_launch_no_run_config",
+                detail: "project not resolvable",
+            },
+            status: 400,
+        };
+    }
+    const cfg = await runConfigReader(project.path);
+    if (cfg.status !== "ok") {
+        // missing / v1_legacy / invalid — nothing to launch a master for.
+        return {
+            error: { error: "master_launch_no_run_config", detail: cfg.status },
+            status: 400,
+        };
+    }
+    const mode = resolveRunMode(cfg.config);
+    if (mode !== "single_session") {
+        // multi_session (or a mode-less legacy config → multi_session) uses the
+        // per-phase Continue path, not a single master. Refuse rather than inject
+        // `/shipwright-run` into a multi-session run.
+        return {
+            error: { error: "master_launch_wrong_mode", detail: mode },
+            status: 400,
+        };
+    }
+    // Double-master guard: refuse a second master while another shadow is already
+    // attached to this run. Only OTHER shadows count (`taskId !== task.taskId`);
+    // the launching task is the client-reused master in the normal path. Resume
+    // returned null above, so this only gates a genuine fresh launch. Scoped to the
+    // SAME project (`projectId`) so a duplicated project dir — which copies the
+    // `runId` verbatim into its `shipwright_run_config.json` — can't cross-block;
+    // mirrors applyCampaignBranch's project-scoped `campaign_run_already_attached`.
+    const attached = (listTasks?.() ?? []).find((t) => t.taskId !== task.taskId &&
+        t.parentRunMaster === true &&
+        t.projectId === task.projectId &&
+        t.runId === cfg.config.runId &&
+        isAttachedMaster(t));
+    if (attached) {
+        return {
+            error: { error: "master_run_already_attached", detail: attached.taskId },
+            status: 409,
+        };
+    }
+    const commands = buildCopyCommands({
+        sessionUuid: task.sessionUuid,
+        cwd: task.cwd,
+        pluginDirs: task.pluginDirs,
+        title: task.title,
+        slashCommand: "/shipwright-run",
+    });
+    // Stamp the run identity on the launched task (F34). Without this, a
+    // direct-API `{ masterRun: true }` launch on a PLAIN task (created without
+    // parentRunMaster/runId) would attach a master the double-master guard scan
+    // (`parentRunMaster === true && runId === cfg.runId`) cannot see — the exact
+    // hole this guard exists to close. `runId` comes from the re-read run_config
+    // above (WebUI never trusts a client-supplied runId; CLAUDE.md rule 12).
+    const taskUpdate = {
+        state: "awaiting_external_start",
+        launchedAt: new Date().toISOString(),
+        parentRunMaster: true,
+        runId: cfg.config.runId,
+    };
+    return { commands, taskUpdate };
+}
+//# sourceMappingURL=master-run-branch.js.map

package/server/dist/external/launch/master-run-branch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"master-run-branch.js","sourceRoot":"","sources":["../../../src/external/launch/master-run-branch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAU9D;;;;;;;yDAOyD;AACzD,MAAM,sBAAsB,GAAmC,IAAI,GAAG,CAAC;IACrE,yBAAyB;IACzB,QAAQ;IACR,MAAM;IACN,eAAe;CAChB,CAAC,CAAC;AAEH,SAAS,gBAAgB,CAAC,CAAe;IACvC,OAAO,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAmB1C;IACC,MAAM,EACJ,IAAI,EACJ,MAAM,EACN,qBAAqB,EACrB,cAAc,EACd,eAAe,EACf,SAAS,EACT,iBAAiB,GAClB,GAAG,IAAI,CAAC;IACT,IAAI,CAAC,MAAM,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC,CAAC,0BAA0B;IAE9D,2EAA2E;IAC3E,2EAA2E;IAC3E,2EAA2E;IAC3E,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,2DAA2D;IAC3D,MAAM,UAAU,GACd,CAAC,IAAI,CAAC,oBAAoB;QAC1B,OAAO,CAAC,MAAM,iBAAiB,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,UAAU,CAAC;IACrE,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,iBAAiB,CAAC;YACjC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;QACH,OAAO;YACL,QAAQ;YACR,UAAU,EAAE;gBACV,KAAK,EAAE,yBAA8C;gBACrD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,0EAA0E;gBAC1E,uEAAuE;gBACvE,wEAAwE;gBACxE,mEAAmE;gBACnE,GAAG,CAAC,UAAU;oBACZ,CAAC,CAAC,EAAE,oBAAoB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;oBACpD,CAAC,CAAC,EAAE,CAAC;aACR;SACF,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,+EAA+E;IAC/E,kDAAkD;IAClD,IAAI,CAAC,qBAAqB;QAAE,OAAO,IAAI,CAAC;IAExC,kEAAkE;IAClE,0EAA0E;IAC1E,0BAA0B;IAC1B,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,KAAK,EAAE;gBACL,KAAK,EAAE,6BAA6B;gBACpC,MAAM,EAAE,wBAAwB;aACjC;YACD,MAAM,EAAE,GAAG;SACZ,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACxB,kEAAkE;QAClE,OAAO;YACL,KAAK,EAAE,EAAE,KAAK,EAAE,6BAA6B,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE;YACnE,MAAM,EAAE,GAAG;SACZ,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAC9B,wEAAwE;QACxE,0EAA0E;QAC1E,8CAA8C;QAC9C,OAAO;YACL,KAAK,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,MAAM,EAAE,IAAI,EAAE;YAC1D,MAAM,EAAE,GAAG;SACZ,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,6EAA6E;IAC7E,4EAA4E;IAC5E,gFAAgF;IAChF,4EAA4E;IAC5E,8EAA8E;IAC9E,gFAAgF;IAChF,MAAM,QAAQ,GAAG,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CACzC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QACxB,CAAC,CAAC,eAAe,KAAK,IAAI;QAC1B,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;QAC9B,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK;QAC5B,gBAAgB,CAAC,CAAC,CAAC,CACtB,CAAC;IACF,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO;YACL,KAAK,EAAE,EAAE,KAAK,EAAE,6BAA6B,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE;YACxE,MAAM,EAAE,GAAG;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC;QACjC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,YAAY,EAAE,iBAAiB;KAChC,CAAC,CAAC;IACH,qEAAqE;IACrE,2EAA2E;IAC3E,4EAA4E;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,yEAAyE;IACzE,MAAM,UAAU,GAA0B;QACxC,KAAK,EAAE,yBAA8C;QACrD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,eAAe,EAAE,IAAI;QACrB,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK;KACxB,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAClC,CAAC"}

package/server/dist/external/launch/parse-body.d.ts

@@ -0,0 +1,46 @@
+import type { ExternalTask } from "../../core/sdk-sessions-store.js";
+export interface ParsedLaunchBody {
+    resume: boolean;
+    dryRun: boolean;
+    actionId: string | undefined;
+    phase: string | undefined;
+    phaseLabel: string | undefined;
+    description: string | undefined;
+    autonomy: "autonomous" | "guided" | undefined;
+    userParams: Record<string, string | boolean> | undefined;
+    phaseTaskRefRaw: unknown;
+    /** FR-01.34 — body-only campaign autonomous launch. The campaign branch
+     *  validates the slug + builds the fixed command; this just surfaces the raw
+     *  string (or undefined). Never persisted on the task (launch-body only). */
+    campaignSlug: string | undefined;
+    /** FR-01.36 — body-only single-sub-iterate launch. The campaign-step branch
+     *  validates slug + stepId, resolves the step's specPath server-side, and
+     *  builds `/shipwright-iterate "<specPath>"`. Launch-body only (never
+     *  persisted). Undefined unless both slug + stepId are non-empty strings. */
+    campaignStep: {
+        slug: string;
+        stepId: string;
+    } | undefined;
+    /** Campaign webui-pipeline-convergence W2 — body-only single-session master
+     *  launch. The master-run branch validates the run against a readable
+     *  single_session run_config + builds the fixed `/shipwright-run` command;
+     *  this just surfaces the boolean intent. Launch-body only (never persisted). */
+    masterRun: boolean;
+}
+/**
+ * Parses the launch body into normalized fields + applies the
+ * once-set-always-used contract (v0.4.1): body field falls back to the
+ * persisted task value when omitted, so a bare `{ resume }` payload
+ * from useLaunchTask still gets the correct actionId/phase/description.
+ *
+ * Returns `{ error }` on invalid `parameters` shape (400
+ * `invalid_parameters_body`); otherwise the parsed fields.
+ */
+export declare function parseLaunchBody(body: Record<string, unknown>, task: ExternalTask): ParsedLaunchBody | {
+    error: {
+        error: string;
+        detail: string;
+    };
+    status: 400;
+};
+//# sourceMappingURL=parse-body.d.ts.map

package/server/dist/external/launch/parse-body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-body.d.ts","sourceRoot":"","sources":["../../../src/external/launch/parse-body.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAErE,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,QAAQ,EAAE,YAAY,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC9C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,SAAS,CAAC;IACzD,eAAe,EAAE,OAAO,CAAC;IACzB;;iFAE6E;IAC7E,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC;;;iFAG6E;IAC7E,YAAY,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IAC3D;;;qFAGiF;IACjF,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,IAAI,EAAE,YAAY,GAEhB,gBAAgB,GAChB;IAAE,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,MAAM,EAAE,GAAG,CAAA;CAAE,CAmH5D"}

package/server/dist/external/launch/parse-body.js

@@ -0,0 +1,115 @@
+/*
+ * external/launch/parse-body.ts — parseLaunchBody (extracted from the
+ * historical routes.ts launch handler). Once-set-always-used: body
+ * value ?? persisted task value (v0.4.1 fix).
+ */
+import { PARAM_NAME_PATTERN } from "../../types/action-schema.js";
+/**
+ * Parses the launch body into normalized fields + applies the
+ * once-set-always-used contract (v0.4.1): body field falls back to the
+ * persisted task value when omitted, so a bare `{ resume }` payload
+ * from useLaunchTask still gets the correct actionId/phase/description.
+ *
+ * Returns `{ error }` on invalid `parameters` shape (400
+ * `invalid_parameters_body`); otherwise the parsed fields.
+ */
+export function parseLaunchBody(body, task) {
+    const resume = Boolean(body.resume);
+    const dryRun = Boolean(body.dryRun);
+    // Once-set-always-used: body value ?? persisted task value.
+    const bodyActionId = typeof body.actionId === "string" && body.actionId.trim().length > 0
+        ? body.actionId.trim()
+        : undefined;
+    const bodyPhase = typeof body.phase === "string" && body.phase.trim()
+        ? body.phase.trim()
+        : undefined;
+    const bodyPhaseLabel = typeof body.phaseLabel === "string" && body.phaseLabel.trim()
+        ? body.phaseLabel.trim()
+        : undefined;
+    const taskActionId = typeof task.actionId === "string" && task.actionId.trim().length > 0
+        ? task.actionId
+        : undefined;
+    const description = typeof body.description === "string" && body.description.length > 0
+        ? body.description
+        : task.description;
+    // Once-set-always-used, same as actionId/phase/phaseLabel/description
+    // above (iterate-2026-08-16-task-lifecycle-ux-fixes — this fallback was
+    // missing: useLaunchTask's Resume/Launch CTAs POST a bare `{ resume }`,
+    // so every launch past the very first (which came from NewIssueModal
+    // and DID set body.autonomy explicitly) silently lost the task's
+    // persisted autonomy and fell back to Claude's own default instead of
+    // what the task was created — or edited — to run as).
+    const bodyAutonomy = body.autonomy === "autonomous" || body.autonomy === "guided"
+        ? body.autonomy
+        : undefined;
+    const autonomy = bodyAutonomy ?? task.autonomy;
+    // iterate/launch-cli-parameters § 5 — body parameters validation.
+    let userParams;
+    if (body.parameters !== undefined) {
+        if (body.parameters === null ||
+            typeof body.parameters !== "object" ||
+            Array.isArray(body.parameters)) {
+            return {
+                error: {
+                    error: "invalid_parameters_body",
+                    detail: "parameters must be an object",
+                },
+                status: 400,
+            };
+        }
+        userParams = {};
+        for (const [k, v] of Object.entries(body.parameters)) {
+            if (!PARAM_NAME_PATTERN.test(k)) {
+                return {
+                    error: { error: "invalid_parameters_body", detail: `bad key: ${k}` },
+                    status: 400,
+                };
+            }
+            if (typeof v !== "string" && typeof v !== "boolean") {
+                return {
+                    error: {
+                        error: "invalid_parameters_body",
+                        detail: `value for ${k} must be string or boolean`,
+                    },
+                    status: 400,
+                };
+            }
+            userParams[k] = v;
+        }
+    }
+    // Empty / whitespace-only → absent (no campaign intent), like every other
+    // body field. A whitespace-only slug therefore builds NO command (it never
+    // reaches the campaign branch's validator) — injection-safe by construction.
+    // A non-empty slug is validated in campaign-branch.ts (400 invalid_campaign_slug).
+    const campaignSlug = typeof body.campaignSlug === "string" && body.campaignSlug.trim().length > 0
+        ? body.campaignSlug.trim()
+        : undefined;
+    // Single-sub-iterate launch intent (FR-01.36). Only a well-formed
+    // `{ slug, stepId }` object with both non-empty counts as present; anything
+    // else is absent (no command), like every other body field. The campaign-step
+    // branch validates slug + stepId against their regexes.
+    let campaignStep;
+    const rawStep = body.campaignStep;
+    if (rawStep && typeof rawStep === "object" && !Array.isArray(rawStep)) {
+        const s = rawStep.slug;
+        const id = rawStep.stepId;
+        if (typeof s === "string" && s.trim().length > 0 && typeof id === "string" && id.trim().length > 0) {
+            campaignStep = { slug: s.trim(), stepId: id.trim() };
+        }
+    }
+    return {
+        resume,
+        dryRun,
+        actionId: bodyActionId ?? taskActionId,
+        phase: bodyPhase ?? task.phase,
+        phaseLabel: bodyPhaseLabel ?? task.phaseLabel,
+        description,
+        autonomy,
+        userParams,
+        phaseTaskRefRaw: body.phaseTaskRef,
+        campaignSlug,
+        campaignStep,
+        masterRun: Boolean(body.masterRun),
+    };
+}
+//# sourceMappingURL=parse-body.js.map

package/server/dist/external/launch/parse-body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-body.js","sourceRoot":"","sources":["../../../src/external/launch/parse-body.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AA6BlE;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAC7B,IAA6B,EAC7B,IAAkB;IAIlB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEpC,4DAA4D;IAC5D,MAAM,YAAY,GAChB,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAClE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;QACtB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,SAAS,GACb,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QACjD,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QACnB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,cAAc,GAClB,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE;QAC3D,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE;QACxB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,YAAY,GAChB,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAClE,CAAC,CAAC,IAAI,CAAC,QAAQ;QACf,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,WAAW,GACf,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;QACjE,CAAC,CAAC,IAAI,CAAC,WAAW;QAClB,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;IACvB,sEAAsE;IACtE,wEAAwE;IACxE,wEAAwE;IACxE,qEAAqE;IACrE,iEAAiE;IACjE,sEAAsE;IACtE,sDAAsD;IACtD,MAAM,YAAY,GAChB,IAAI,CAAC,QAAQ,KAAK,YAAY,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ;QAC1D,CAAC,CAAE,IAAI,CAAC,QAAoC;QAC5C,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,QAAQ,GAAG,YAAY,IAAI,IAAI,CAAC,QAAQ,CAAC;IAE/C,kEAAkE;IAClE,IAAI,UAAwD,CAAC;IAC7D,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAClC,IACE,IAAI,CAAC,UAAU,KAAK,IAAI;YACxB,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;YACnC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAC9B,CAAC;YACD,OAAO;gBACL,KAAK,EAAE;oBACL,KAAK,EAAE,yBAAyB;oBAChC,MAAM,EAAE,8BAA8B;iBACvC;gBACD,MAAM,EAAE,GAAG;aACZ,CAAC;QACJ,CAAC;QACD,UAAU,GAAG,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CACjC,IAAI,CAAC,UAAqC,CAC3C,EAAE,CAAC;YACF,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChC,OAAO;oBACL,KAAK,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,EAAE;oBACpE,MAAM,EAAE,GAAG;iBACZ,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;gBACpD,OAAO;oBACL,KAAK,EAAE;wBACL,KAAK,EAAE,yBAAyB;wBAChC,MAAM,EAAE,aAAa,CAAC,4BAA4B;qBACnD;oBACD,MAAM,EAAE,GAAG;iBACZ,CAAC;YACJ,CAAC;YACD,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,2EAA2E;IAC3E,6EAA6E;IAC7E,mFAAmF;IACnF,MAAM,YAAY,GAChB,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC1E,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE;QAC1B,CAAC,CAAC,SAAS,CAAC;IAEhB,kEAAkE;IAClE,4EAA4E;IAC5E,8EAA8E;IAC9E,wDAAwD;IACxD,IAAI,YAA0D,CAAC;IAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC;IAClC,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,MAAM,CAAC,GAAI,OAAmC,CAAC,IAAI,CAAC;QACpD,MAAM,EAAE,GAAI,OAAmC,CAAC,MAAM,CAAC;QACvD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnG,YAAY,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QACvD,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM;QACN,MAAM;QACN,QAAQ,EAAE,YAAY,IAAI,YAAY;QACtC,KAAK,EAAE,SAAS,IAAI,IAAI,CAAC,KAAK;QAC9B,UAAU,EAAE,cAAc,IAAI,IAAI,CAAC,UAAU;QAC7C,WAAW;QACX,QAAQ;QACR,UAAU;QACV,eAAe,EAAE,IAAI,CAAC,YAAY;QAClC,YAAY;QACZ,YAAY;QACZ,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;KACnC,CAAC;AACJ,CAAC"}

package/server/dist/external/launch/phase-task-branch.d.ts

@@ -0,0 +1,18 @@
+import { type ExternalTask } from "../../core/sdk-sessions-store.js";
+import type { RunConfigReadResult } from "../../core/run-config-reader.js";
+import type { ExternalRouteProjectView } from "../_shared/helpers.js";
+import type { ParsedLaunchBody } from "./parse-body.js";
+import type { LaunchBranchResult } from "./_helpers.js";
+export declare function applyPhaseTaskBranch(args: {
+    task: ExternalTask;
+    parsed: ParsedLaunchBody;
+    getProjectById: ((id: string) => ExternalRouteProjectView | undefined) | undefined;
+    runConfigReader: (projectPath: string) => Promise<RunConfigReadResult>;
+    /** D18/F28 — ground-truth JSONL probe (`SessionWatcher.findByUuid !== null`).
+     *  Pre-fix this branch ALWAYS emitted a fresh `--session-id`; a re-Continue
+     *  after a pre-claim crash (JSONL written, phase_task still `awaiting_launch`)
+     *  then hit Claude's "Session ID already in use". Optional so direct callers
+     *  without a watcher opt out (absent → "no JSONL"); the route wires it. */
+    jsonlExistsOnDisk?: (sessionUuid: string) => Promise<boolean>;
+}): Promise<LaunchBranchResult | null>;
+//# sourceMappingURL=phase-task-branch.d.ts.map

package/server/dist/external/launch/phase-task-branch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"phase-task-branch.d.ts","sourceRoot":"","sources":["../../../src/external/launch/phase-task-branch.ts"],"names":[],"mappings":"AAuBA,OAAO,EACL,KAAK,YAAY,EAElB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,gBAAgB,CAAC;IACzB,cAAc,EACV,CAAC,CAAC,EAAE,EAAE,MAAM,KAAK,wBAAwB,GAAG,SAAS,CAAC,GACtD,SAAS,CAAC;IACd,eAAe,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACvE;;;;+EAI2E;IAC3E,iBAAiB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/D,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAoKrC"}

package/server/dist/external/launch/phase-task-branch.js

@@ -0,0 +1,170 @@
+/*
+ * external/launch/phase-task-branch.ts — applyPhaseTaskBranch.
+ *
+ * Branch 1 in launch precedence (load-bearing security path): the
+ * client passes ONLY the phaseTaskId, server re-reads the project's
+ * run-config and verifies the entire phase_task before producing a
+ * command. Client never gets to dictate sessionUuid / slashCommand.
+ *
+ * Returns `null` when `phaseTaskRefRaw === undefined` (no opinion;
+ * caller falls through). Otherwise returns either the populated
+ * commands+taskUpdate, or an error envelope.
+ */
+import { buildCopyCommands, } from "../../core/launcher.js";
+import { buildPhaseTaskName, PHASE_TASK_ID_PATTERN, SLASH_COMMAND_PATTERN, SPLIT_ID_SAFE_PATTERN, } from "../../types/run-config-v2.js";
+export async function applyPhaseTaskBranch(args) {
+    const { task, parsed, getProjectById, runConfigReader, jsonlExistsOnDisk } = args;
+    if (parsed.phaseTaskRefRaw === undefined)
+        return null;
+    if (parsed.actionId) {
+        return {
+            error: {
+                error: "mixed_launch_intents",
+                detail: "phaseTaskRef and actionId are mutually exclusive",
+            },
+            status: 400,
+        };
+    }
+    if (!parsed.phaseTaskRefRaw ||
+        typeof parsed.phaseTaskRefRaw !== "object" ||
+        Array.isArray(parsed.phaseTaskRefRaw)) {
+        return {
+            error: { error: "invalid_phase_task_ref", detail: "must be an object" },
+            status: 400,
+        };
+    }
+    const refPhaseTaskId = parsed.phaseTaskRefRaw
+        .phaseTaskId;
+    if (typeof refPhaseTaskId !== "string" ||
+        !PHASE_TASK_ID_PATTERN.test(refPhaseTaskId)) {
+        return {
+            error: {
+                error: "invalid_phase_task_id",
+                detail: "must match /^ptk-[0-9a-f]{4,}$/",
+            },
+            status: 400,
+        };
+    }
+    const project = getProjectById?.(task.projectId);
+    if (!project || !project.path) {
+        return {
+            error: {
+                error: "phase_task_requires_project",
+                projectId: task.projectId,
+            },
+            status: 400,
+        };
+    }
+    const cfgRead = await runConfigReader(project.path);
+    if (cfgRead.status !== "ok") {
+        return {
+            error: {
+                error: "run_config_unavailable",
+                status: cfgRead.status,
+                ...(cfgRead.status === "invalid" ? { reason: cfgRead.reason } : {}),
+            },
+            status: 409,
+        };
+    }
+    const phaseTask = cfgRead.config.phase_tasks.find((t) => t.phaseTaskId === refPhaseTaskId);
+    if (!phaseTask) {
+        return {
+            error: { error: "phase_task_not_found", phaseTaskId: refPhaseTaskId },
+            status: 409,
+        };
+    }
+    if (phaseTask.status !== "awaiting_launch") {
+        return {
+            error: {
+                error: "phase_task_not_actionable",
+                phaseTaskId: refPhaseTaskId,
+                status: phaseTask.status,
+            },
+            status: 409,
+        };
+    }
+    const completed = new Set(cfgRead.config.completed_phase_task_ids);
+    if (!phaseTask.prerequisites.every((p) => completed.has(p))) {
+        return {
+            error: {
+                error: "phase_task_prereq_not_met",
+                phaseTaskId: refPhaseTaskId,
+                prerequisites: phaseTask.prerequisites,
+                completed: cfgRead.config.completed_phase_task_ids,
+            },
+            status: 409,
+        };
+    }
+    // Defense in depth even though the reader already validated these.
+    if (!SLASH_COMMAND_PATTERN.test(phaseTask.slashCommand)) {
+        return {
+            error: {
+                error: "phase_task_corrupt",
+                detail: "slashCommand fails strict regex",
+            },
+            status: 409,
+        };
+    }
+    if (phaseTask.splitId !== null &&
+        !SPLIT_ID_SAFE_PATTERN.test(phaseTask.splitId)) {
+        return {
+            error: {
+                error: "phase_task_corrupt",
+                detail: "splitId contains unsafe characters",
+            },
+            status: 409,
+        };
+    }
+    // The shadow webui task MUST already carry the phase_task's pre-bound
+    // sessionUuid (set at create-task time). Mismatch = either a stale
+    // shadow trying to launch the wrong phase or a tampered store.
+    if (task.sessionUuid !== phaseTask.sessionUuid) {
+        return {
+            error: {
+                error: "phase_task_session_uuid_mismatch",
+                taskSessionUuid: task.sessionUuid,
+                phaseTaskSessionUuid: phaseTask.sessionUuid,
+            },
+            status: 409,
+        };
+    }
+    const derivedName = buildPhaseTaskName({
+        runId: cfgRead.config.runId,
+        phase: phaseTask.phase,
+        splitId: phaseTask.splitId,
+    });
+    // D18/F28 — when the phase session's `<uuid>.jsonl` already exists (started
+    // then crashed before the orchestrator claim), emit `--resume` instead of a
+    // fresh `--session-id`. The slash command is DROPPED on resume: Claude
+    // already holds the phase conversation, and a trailing `/shipwright-<phase>`
+    // would re-fire the phase as a new prompt. Only walk the disk when the
+    // persisted stamp is absent (short-circuit). This function stays PURE — it
+    // returns a `taskUpdate` and the route persists it.
+    const discovered = !task.firstJsonlObservedAt &&
+        Boolean(await jsonlExistsOnDisk?.(phaseTask.sessionUuid));
+    const established = Boolean(task.firstJsonlObservedAt) || discovered;
+    const commands = buildCopyCommands({
+        sessionUuid: phaseTask.sessionUuid,
+        cwd: task.cwd,
+        resume: established,
+        pluginDirs: task.pluginDirs,
+        title: derivedName,
+        ...(established ? {} : { slashCommand: phaseTask.slashCommand }),
+    });
+    const taskUpdate = {
+        state: "awaiting_external_start",
+        launchedAt: new Date().toISOString(),
+        phaseTaskId: phaseTask.phaseTaskId,
+        runId: cfgRead.config.runId,
+        parentRunMaster: false,
+        phase: phaseTask.phase,
+        phaseLabel: phaseTask.phase,
+        title: derivedName,
+        // Spec: stamp `firstJsonlObservedAt` on first disk discovery so the CTA +
+        // next launch reflect the established session immediately (conditional —
+        // only when it was absent; the background transcript poll records it too).
+        ...(discovered ? { firstJsonlObservedAt: new Date().toISOString() } : {}),
+    };
+    return { commands, taskUpdate };
+}
+//# sourceMappingURL=phase-task-branch.js.map

package/server/dist/external/launch/phase-task-branch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phase-task-branch.js","sourceRoot":"","sources":["../../../src/external/launch/phase-task-branch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,iBAAiB,GAElB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AAUtC,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAa1C;IACC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,iBAAiB,EAAE,GACxE,IAAI,CAAC;IACP,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAEtD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO;YACL,KAAK,EAAE;gBACL,KAAK,EAAE,sBAAsB;gBAC7B,MAAM,EAAE,kDAAkD;aAC3D;YACD,MAAM,EAAE,GAAG;SACZ,CAAC;IACJ,CAAC;IACD,IACE,CAAC,MAAM,CAAC,eAAe;QACvB,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ;QAC1C,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,EACrC,CAAC;QACD,OAAO;YACL,KAAK,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,MAAM,EAAE,mBAAmB,EAAE;YACvE,MAAM,EAAE,GAAG;SACZ,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAI,MAAM,CAAC,eAA2C;SACvE,WAAW,CAAC;IACf,IACE,OAAO,cAAc,KAAK,QAAQ;QAClC,CAAC,qBAAqB,CAAC,IAAI,CAAC,cAAc,CAAC,EAC3C,CAAC;QACD,OAAO;YACL,KAAK,EAAE;gBACL,KAAK,EAAE,uBAAuB;gBAC9B,MAAM,EAAE,iCAAiC;aAC1C;YACD,MAAM,EAAE,GAAG;SACZ,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO;YACL,KAAK,EAAE;gBACL,KAAK,EAAE,6BAA6B;gBACpC,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B;YACD,MAAM,EAAE,GAAG;SACZ,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO;YACL,KAAK,EAAE;gBACL,KAAK,EAAE,wBAAwB;gBAC/B,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpE;YACD,MAAM,EAAE,GAAG;SACZ,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAC/C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,cAAc,CACxC,CAAC;IACF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,KAAK,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,WAAW,EAAE,cAAc,EAAE;YACrE,MAAM,EAAE,GAAG;SACZ,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QAC3C,OAAO;YACL,KAAK,EAAE;gBACL,KAAK,EAAE,2BAA2B;gBAClC,WAAW,EAAE,cAAc;gBAC3B,MAAM,EAAE,SAAS,CAAC,MAAM;aACzB;YACD,MAAM,EAAE,GAAG;SACZ,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;IACnE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,OAAO;YACL,KAAK,EAAE;gBACL,KAAK,EAAE,2BAA2B;gBAClC,WAAW,EAAE,cAAc;gBAC3B,aAAa,EAAE,SAAS,CAAC,aAAa;gBACtC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,wBAAwB;aACnD;YACD,MAAM,EAAE,GAAG;SACZ,CAAC;IACJ,CAAC;IACD,mEAAmE;IACnE,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;QACxD,OAAO;YACL,KAAK,EAAE;gBACL,KAAK,EAAE,oBAAoB;gBAC3B,MAAM,EAAE,iCAAiC;aAC1C;YACD,MAAM,EAAE,GAAG;SACZ,CAAC;IACJ,CAAC;IACD,IACE,SAAS,CAAC,OAAO,KAAK,IAAI;QAC1B,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAC9C,CAAC;QACD,OAAO;YACL,KAAK,EAAE;gBACL,KAAK,EAAE,oBAAoB;gBAC3B,MAAM,EAAE,oCAAoC;aAC7C;YACD,MAAM,EAAE,GAAG;SACZ,CAAC;IACJ,CAAC;IACD,sEAAsE;IACtE,mEAAmE;IACnE,+DAA+D;IAC/D,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW,EAAE,CAAC;QAC/C,OAAO;YACL,KAAK,EAAE;gBACL,KAAK,EAAE,kCAAkC;gBACzC,eAAe,EAAE,IAAI,CAAC,WAAW;gBACjC,oBAAoB,EAAE,SAAS,CAAC,WAAW;aAC5C;YACD,MAAM,EAAE,GAAG;SACZ,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,kBAAkB,CAAC;QACrC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK;QAC3B,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,OAAO,EAAE,SAAS,CAAC,OAAO;KAC3B,CAAC,CAAC;IACH,4EAA4E;IAC5E,4EAA4E;IAC5E,uEAAuE;IACvE,6EAA6E;IAC7E,uEAAuE;IACvE,2EAA2E;IAC3E,oDAAoD;IACpD,MAAM,UAAU,GACd,CAAC,IAAI,CAAC,oBAAoB;QAC1B,OAAO,CAAC,MAAM,iBAAiB,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,UAAU,CAAC;IACrE,MAAM,QAAQ,GAAqB,iBAAiB,CAAC;QACnD,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,WAAW;QACnB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,KAAK,EAAE,WAAW;QAClB,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,CAAC;KACjE,CAAC,CAAC;IACH,MAAM,UAAU,GAA0B;QACxC,KAAK,EAAE,yBAA8C;QACrD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK;QAC3B,eAAe,EAAE,KAAK;QACtB,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,UAAU,EAAE,SAAS,CAAC,KAAK;QAC3B,KAAK,EAAE,WAAW;QAClB,0EAA0E;QAC1E,yEAAyE;QACzE,2EAA2E;QAC3E,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAClC,CAAC"}

package/server/dist/external/launch/routes.d.ts

@@ -0,0 +1,23 @@
+import { Hono } from "hono";
+import { SdkSessionsStore } from "../../core/sdk-sessions-store.js";
+import type { RunConfigReadResult } from "../../core/run-config-reader.js";
+import type { ExternalRouteProjectView } from "../_shared/helpers.js";
+export interface LaunchRouterDeps {
+    store: SdkSessionsStore;
+    ptyManager: {
+        get(taskId: string): unknown;
+    };
+    getProjectById?: (id: string) => ExternalRouteProjectView | undefined;
+    runConfigReader: (projectPath: string) => Promise<RunConfigReadResult>;
+    /**
+     * D18/F14+F28 — ground-truth "does `<uuid>.jsonl` exist on disk?" probe.
+     * The phase-task + master-run branches emit `--resume` (not a duplicate
+     * `--session-id`) when it resolves true, closing the "Session ID already in
+     * use" hole where the persisted `firstJsonlObservedAt` lags the disk. Wired
+     * from `SessionWatcher.findByUuid` by `createExternalRoutes`; optional so the
+     * per-router unit tests that don't wire a watcher default to "no JSONL".
+     */
+    jsonlExistsOnDisk?: (sessionUuid: string) => Promise<boolean>;
+}
+export declare function createLaunchRouter(deps: LaunchRouterDeps): Hono;
+//# sourceMappingURL=routes.d.ts.map

package/server/dist/external/launch/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/external/launch/routes.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EACL,gBAAgB,EAEjB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAatE,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,gBAAgB,CAAC;IACxB,UAAU,EAAE;QAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IAC7C,cAAc,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,wBAAwB,GAAG,SAAS,CAAC;IACtE,eAAe,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACvE;;;;;;;OAOG;IACH,iBAAiB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/D;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAyN/D"}